@iveri/contracts 0.32.0 → 0.34.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cjs/api/conduit/connection-verification-verdict.enum.d.ts +74 -0
- package/dist/cjs/api/conduit/connection-verification-verdict.enum.d.ts.map +1 -0
- package/dist/cjs/api/conduit/connection-verification-verdict.enum.js +78 -0
- package/dist/cjs/api/conduit/connection-verification-verdict.enum.js.map +1 -0
- package/dist/cjs/api/conduit/connection.type.d.ts +32 -0
- package/dist/cjs/api/conduit/connection.type.d.ts.map +1 -1
- package/dist/cjs/api/conduit/index.d.ts +1 -0
- package/dist/cjs/api/conduit/index.d.ts.map +1 -1
- package/dist/cjs/api/conduit/index.js +1 -0
- package/dist/cjs/api/conduit/index.js.map +1 -1
- package/dist/cjs/enum/user-permission.enum.d.ts +4 -0
- package/dist/cjs/enum/user-permission.enum.d.ts.map +1 -1
- package/dist/cjs/enum/user-permission.enum.js +15 -0
- package/dist/cjs/enum/user-permission.enum.js.map +1 -1
- package/dist/esm/api/conduit/connection-verification-verdict.enum.d.ts +74 -0
- package/dist/esm/api/conduit/connection-verification-verdict.enum.d.ts.map +1 -0
- package/dist/esm/api/conduit/connection-verification-verdict.enum.js +75 -0
- package/dist/esm/api/conduit/connection-verification-verdict.enum.js.map +1 -0
- package/dist/esm/api/conduit/connection.type.d.ts +32 -0
- package/dist/esm/api/conduit/connection.type.d.ts.map +1 -1
- package/dist/esm/api/conduit/index.d.ts +1 -0
- package/dist/esm/api/conduit/index.d.ts.map +1 -1
- package/dist/esm/api/conduit/index.js +1 -0
- package/dist/esm/api/conduit/index.js.map +1 -1
- package/dist/esm/enum/user-permission.enum.d.ts +4 -0
- package/dist/esm/enum/user-permission.enum.d.ts.map +1 -1
- package/dist/esm/enum/user-permission.enum.js +15 -0
- package/dist/esm/enum/user-permission.enum.js.map +1 -1
- package/package.json +1 -1
|
@@ -0,0 +1,74 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* The outcome of checking whether a connection's credentials still work.
|
|
3
|
+
*
|
|
4
|
+
* **Not a boolean, for the same reason {@link SignatureVerdict} is not.** The question an
|
|
5
|
+
* operator asks after replacing a client secret is "did that work", and for three of the five
|
|
6
|
+
* {@link ConnectorAuthType} members the honest answer is *we cannot tell from here* — each for a
|
|
7
|
+
* different and separately fixable reason. Collapsing those into `false` would report a correctly
|
|
8
|
+
* configured connection as broken; collapsing them into `true` would report an untested one as
|
|
9
|
+
* proven.
|
|
10
|
+
*
|
|
11
|
+
* A UI must not colour all of these red. Only {@link ConnectionVerificationVerdict.INVALID_CREDENTIALS}
|
|
12
|
+
* and {@link ConnectionVerificationVerdict.MISCONFIGURED} mean something is wrong;
|
|
13
|
+
* {@link ConnectionVerificationVerdict.PROVIDER_UNREACHABLE} is somebody else's outage, and the
|
|
14
|
+
* remaining three are "nothing to check" or "checked as far as this auth type allows".
|
|
15
|
+
*/
|
|
16
|
+
export declare enum ConnectionVerificationVerdict {
|
|
17
|
+
/**
|
|
18
|
+
* A token was minted just now, so the credentials are good as of this moment.
|
|
19
|
+
*
|
|
20
|
+
* Only an OAuth grant can reach this: it is the one case where the provider itself tells us
|
|
21
|
+
* whether the secret is right, without us having to send a message somebody would receive.
|
|
22
|
+
*/
|
|
23
|
+
VERIFIED = "verified",
|
|
24
|
+
/**
|
|
25
|
+
* A cached access token is still usable, so nothing was asked of the provider.
|
|
26
|
+
*
|
|
27
|
+
* This is a weaker statement than {@link VERIFIED} and deliberately distinguished from it: it
|
|
28
|
+
* says the credentials worked when the token was minted, not that they work now. A secret
|
|
29
|
+
* revoked at the provider five minutes ago still reports this until the token expires.
|
|
30
|
+
*
|
|
31
|
+
* It exists so that clicking verify repeatedly does not spend a refresh token each time —
|
|
32
|
+
* see the note on {@link ConnectorAuthType.OAUTH2_REFRESH_TOKEN} about rotation. Replacing a
|
|
33
|
+
* connection's credentials discards the cached token, so the first verify after a credential
|
|
34
|
+
* edit is never this.
|
|
35
|
+
*/
|
|
36
|
+
VERIFIED_CACHED = "verified-cached",
|
|
37
|
+
/**
|
|
38
|
+
* The credential the manifest asks for is present, and its correctness is unknowable from
|
|
39
|
+
* here.
|
|
40
|
+
*
|
|
41
|
+
* A static secret is only ever checked by the provider when a real request carries it, so
|
|
42
|
+
* this is as far as verification can go for {@link ConnectorAuthType.API_KEY_HEADER} and
|
|
43
|
+
* {@link ConnectorAuthType.BEARER_STATIC}. That is not a cop-out: *presence* is exactly what
|
|
44
|
+
* breaks after a credential edit — a cleared map, or a key renamed to something the manifest
|
|
45
|
+
* does not ask for — and this catches it.
|
|
46
|
+
*/
|
|
47
|
+
CREDENTIAL_PRESENT = "credential-present",
|
|
48
|
+
/** The connector adds no credential to a request, so there is nothing to check. */
|
|
49
|
+
NOTHING_TO_VERIFY = "nothing-to-verify",
|
|
50
|
+
/**
|
|
51
|
+
* The provider refused the credentials.
|
|
52
|
+
*
|
|
53
|
+
* The one verdict that means the secret itself is wrong. Everything needed was present and
|
|
54
|
+
* the token endpoint said no.
|
|
55
|
+
*/
|
|
56
|
+
INVALID_CREDENTIALS = "invalid-credentials",
|
|
57
|
+
/**
|
|
58
|
+
* The credential, or the manifest field naming it, is missing.
|
|
59
|
+
*
|
|
60
|
+
* Distinct from {@link INVALID_CREDENTIALS} because the remedy is different and the provider
|
|
61
|
+
* was never contacted: a connection with no `clientSecret`, or a manifest with an
|
|
62
|
+
* `api-key-header` auth type and no `headerName`. The most common state immediately after a
|
|
63
|
+
* credential map is cleared.
|
|
64
|
+
*/
|
|
65
|
+
MISCONFIGURED = "misconfigured",
|
|
66
|
+
/**
|
|
67
|
+
* The token endpoint could not be reached, or did not answer in time.
|
|
68
|
+
*
|
|
69
|
+
* Says nothing about the credentials. Worth its own verdict so an operator who has just
|
|
70
|
+
* replaced a secret is not told it is wrong when the provider is simply down.
|
|
71
|
+
*/
|
|
72
|
+
PROVIDER_UNREACHABLE = "provider-unreachable"
|
|
73
|
+
}
|
|
74
|
+
//# sourceMappingURL=connection-verification-verdict.enum.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"connection-verification-verdict.enum.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/connection-verification-verdict.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,oBAAY,6BAA6B;IACrC;;;;;OAKG;IACH,QAAQ,aAAa;IAErB;;;;;;;;;;;OAWG;IACH,eAAe,oBAAoB;IAEnC;;;;;;;;;OASG;IACH,kBAAkB,uBAAuB;IAEzC,mFAAmF;IACnF,iBAAiB,sBAAsB;IAEvC;;;;;OAKG;IACH,mBAAmB,wBAAwB;IAE3C;;;;;;;OAOG;IACH,aAAa,kBAAkB;IAE/B;;;;;OAKG;IACH,oBAAoB,yBAAyB;CAChD"}
|
|
@@ -0,0 +1,78 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.ConnectionVerificationVerdict = void 0;
|
|
4
|
+
/**
|
|
5
|
+
* The outcome of checking whether a connection's credentials still work.
|
|
6
|
+
*
|
|
7
|
+
* **Not a boolean, for the same reason {@link SignatureVerdict} is not.** The question an
|
|
8
|
+
* operator asks after replacing a client secret is "did that work", and for three of the five
|
|
9
|
+
* {@link ConnectorAuthType} members the honest answer is *we cannot tell from here* — each for a
|
|
10
|
+
* different and separately fixable reason. Collapsing those into `false` would report a correctly
|
|
11
|
+
* configured connection as broken; collapsing them into `true` would report an untested one as
|
|
12
|
+
* proven.
|
|
13
|
+
*
|
|
14
|
+
* A UI must not colour all of these red. Only {@link ConnectionVerificationVerdict.INVALID_CREDENTIALS}
|
|
15
|
+
* and {@link ConnectionVerificationVerdict.MISCONFIGURED} mean something is wrong;
|
|
16
|
+
* {@link ConnectionVerificationVerdict.PROVIDER_UNREACHABLE} is somebody else's outage, and the
|
|
17
|
+
* remaining three are "nothing to check" or "checked as far as this auth type allows".
|
|
18
|
+
*/
|
|
19
|
+
var ConnectionVerificationVerdict;
|
|
20
|
+
(function (ConnectionVerificationVerdict) {
|
|
21
|
+
/**
|
|
22
|
+
* A token was minted just now, so the credentials are good as of this moment.
|
|
23
|
+
*
|
|
24
|
+
* Only an OAuth grant can reach this: it is the one case where the provider itself tells us
|
|
25
|
+
* whether the secret is right, without us having to send a message somebody would receive.
|
|
26
|
+
*/
|
|
27
|
+
ConnectionVerificationVerdict["VERIFIED"] = "verified";
|
|
28
|
+
/**
|
|
29
|
+
* A cached access token is still usable, so nothing was asked of the provider.
|
|
30
|
+
*
|
|
31
|
+
* This is a weaker statement than {@link VERIFIED} and deliberately distinguished from it: it
|
|
32
|
+
* says the credentials worked when the token was minted, not that they work now. A secret
|
|
33
|
+
* revoked at the provider five minutes ago still reports this until the token expires.
|
|
34
|
+
*
|
|
35
|
+
* It exists so that clicking verify repeatedly does not spend a refresh token each time —
|
|
36
|
+
* see the note on {@link ConnectorAuthType.OAUTH2_REFRESH_TOKEN} about rotation. Replacing a
|
|
37
|
+
* connection's credentials discards the cached token, so the first verify after a credential
|
|
38
|
+
* edit is never this.
|
|
39
|
+
*/
|
|
40
|
+
ConnectionVerificationVerdict["VERIFIED_CACHED"] = "verified-cached";
|
|
41
|
+
/**
|
|
42
|
+
* The credential the manifest asks for is present, and its correctness is unknowable from
|
|
43
|
+
* here.
|
|
44
|
+
*
|
|
45
|
+
* A static secret is only ever checked by the provider when a real request carries it, so
|
|
46
|
+
* this is as far as verification can go for {@link ConnectorAuthType.API_KEY_HEADER} and
|
|
47
|
+
* {@link ConnectorAuthType.BEARER_STATIC}. That is not a cop-out: *presence* is exactly what
|
|
48
|
+
* breaks after a credential edit — a cleared map, or a key renamed to something the manifest
|
|
49
|
+
* does not ask for — and this catches it.
|
|
50
|
+
*/
|
|
51
|
+
ConnectionVerificationVerdict["CREDENTIAL_PRESENT"] = "credential-present";
|
|
52
|
+
/** The connector adds no credential to a request, so there is nothing to check. */
|
|
53
|
+
ConnectionVerificationVerdict["NOTHING_TO_VERIFY"] = "nothing-to-verify";
|
|
54
|
+
/**
|
|
55
|
+
* The provider refused the credentials.
|
|
56
|
+
*
|
|
57
|
+
* The one verdict that means the secret itself is wrong. Everything needed was present and
|
|
58
|
+
* the token endpoint said no.
|
|
59
|
+
*/
|
|
60
|
+
ConnectionVerificationVerdict["INVALID_CREDENTIALS"] = "invalid-credentials";
|
|
61
|
+
/**
|
|
62
|
+
* The credential, or the manifest field naming it, is missing.
|
|
63
|
+
*
|
|
64
|
+
* Distinct from {@link INVALID_CREDENTIALS} because the remedy is different and the provider
|
|
65
|
+
* was never contacted: a connection with no `clientSecret`, or a manifest with an
|
|
66
|
+
* `api-key-header` auth type and no `headerName`. The most common state immediately after a
|
|
67
|
+
* credential map is cleared.
|
|
68
|
+
*/
|
|
69
|
+
ConnectionVerificationVerdict["MISCONFIGURED"] = "misconfigured";
|
|
70
|
+
/**
|
|
71
|
+
* The token endpoint could not be reached, or did not answer in time.
|
|
72
|
+
*
|
|
73
|
+
* Says nothing about the credentials. Worth its own verdict so an operator who has just
|
|
74
|
+
* replaced a secret is not told it is wrong when the provider is simply down.
|
|
75
|
+
*/
|
|
76
|
+
ConnectionVerificationVerdict["PROVIDER_UNREACHABLE"] = "provider-unreachable";
|
|
77
|
+
})(ConnectionVerificationVerdict || (exports.ConnectionVerificationVerdict = ConnectionVerificationVerdict = {}));
|
|
78
|
+
//# sourceMappingURL=connection-verification-verdict.enum.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"connection-verification-verdict.enum.js","sourceRoot":"","sources":["../../../../src/api/conduit/connection-verification-verdict.enum.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;GAcG;AACH,IAAY,6BA+DX;AA/DD,WAAY,6BAA6B;IACrC;;;;;OAKG;IACH,sDAAqB,CAAA;IAErB;;;;;;;;;;;OAWG;IACH,oEAAmC,CAAA;IAEnC;;;;;;;;;OASG;IACH,0EAAyC,CAAA;IAEzC,mFAAmF;IACnF,wEAAuC,CAAA;IAEvC;;;;;OAKG;IACH,4EAA2C,CAAA;IAE3C;;;;;;;OAOG;IACH,gEAA+B,CAAA;IAE/B;;;;;OAKG;IACH,8EAA6C,CAAA;AACjD,CAAC,EA/DW,6BAA6B,6CAA7B,6BAA6B,QA+DxC"}
|
|
@@ -1,6 +1,8 @@
|
|
|
1
1
|
import type { IsoDateTime } from '../../type/iso-date-time.type.js';
|
|
2
2
|
import type { Nullable } from '../../type/nil.type.js';
|
|
3
3
|
import type { UUID } from '../../type/uuid.type.js';
|
|
4
|
+
import type { ConnectionVerificationVerdict } from './connection-verification-verdict.enum.js';
|
|
5
|
+
import type { ConnectorAuthType } from './connector-auth-type.enum.js';
|
|
4
6
|
/**
|
|
5
7
|
* One tenant's configured instance of a connector: the credentials and the account details that
|
|
6
8
|
* turn a manifest into something that can actually send.
|
|
@@ -97,4 +99,34 @@ export interface UpdateConnectionBody {
|
|
|
97
99
|
variables?: Nullable<Record<string, string>>;
|
|
98
100
|
isActive?: boolean;
|
|
99
101
|
}
|
|
102
|
+
/**
|
|
103
|
+
* `POST /api/v1/connections/:id/verify`.
|
|
104
|
+
*
|
|
105
|
+
* Takes no body. Everything the check needs is already on the connection and its connector's
|
|
106
|
+
* manifest, and a field a caller could send would be a field that changes what is verified —
|
|
107
|
+
* which is the opposite of the point.
|
|
108
|
+
*/
|
|
109
|
+
export interface ConnectionVerification {
|
|
110
|
+
verdict: ConnectionVerificationVerdict;
|
|
111
|
+
/**
|
|
112
|
+
* The auth type the verdict was reached under, so a client can explain it without fetching
|
|
113
|
+
* the connector.
|
|
114
|
+
*
|
|
115
|
+
* A reader needs this to say *why* a verdict is as weak as it is — "nothing to check" and
|
|
116
|
+
* "cannot be checked without sending something real" are different sentences, and which one
|
|
117
|
+
* applies is a property of the connector rather than of the connection.
|
|
118
|
+
*/
|
|
119
|
+
authType: ConnectorAuthType;
|
|
120
|
+
/**
|
|
121
|
+
* What the provider or the configuration said, when there is something to pass on.
|
|
122
|
+
*
|
|
123
|
+
* **Never a credential, in whole or in part.** It carries a token endpoint's error code, a
|
|
124
|
+
* missing credential's name, or a timeout — the same things `lastAuthError` holds, and the
|
|
125
|
+
* same rule applies: no endpoint returns a credential value in any form, not masked, not
|
|
126
|
+
* truncated, not a length.
|
|
127
|
+
*/
|
|
128
|
+
detail: Nullable<string>;
|
|
129
|
+
/** When the check ran. A client showing a stale verdict should say how stale. */
|
|
130
|
+
checkedAt: IsoDateTime;
|
|
131
|
+
}
|
|
100
132
|
//# sourceMappingURL=connection.type.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"connection.type.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/connection.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,UAAU;IACvB,EAAE,EAAE,IAAI,CAAC;IAET,iGAAiG;IACjG,GAAG,EAAE,MAAM,CAAC;IAEZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE9B,6EAA6E;IAC7E,YAAY,EAAE,MAAM,CAAC;IAErB,6EAA6E;IAC7E,eAAe,EAAE,MAAM,EAAE,CAAC;IAE1B;;;;;;;OAOG;IACH,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAElC;;;;;;;OAOG;IACH,oBAAoB,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IAE5C;;;;;;OAMG;IACH,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEhC,kFAAkF;IAClF,QAAQ,EAAE,OAAO,CAAC;IAElB,SAAS,EAAE,WAAW,CAAC;IACvB,SAAS,EAAE,WAAW,CAAC;CAC1B;AAED,qFAAqF;AACrF,MAAM,WAAW,eAAe;IAC5B,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAClB;AAED,kCAAkC;AAClC,MAAM,WAAW,oBAAoB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;IAErB;;;;;;OAMG;IACH,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEpC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAChD;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,oBAAoB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7C,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB"}
|
|
1
|
+
{"version":3,"file":"connection.type.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/connection.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,2CAA2C,CAAC;AAC/F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAEvE;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,UAAU;IACvB,EAAE,EAAE,IAAI,CAAC;IAET,iGAAiG;IACjG,GAAG,EAAE,MAAM,CAAC;IAEZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE9B,6EAA6E;IAC7E,YAAY,EAAE,MAAM,CAAC;IAErB,6EAA6E;IAC7E,eAAe,EAAE,MAAM,EAAE,CAAC;IAE1B;;;;;;;OAOG;IACH,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAElC;;;;;;;OAOG;IACH,oBAAoB,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IAE5C;;;;;;OAMG;IACH,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEhC,kFAAkF;IAClF,QAAQ,EAAE,OAAO,CAAC;IAElB,SAAS,EAAE,WAAW,CAAC;IACvB,SAAS,EAAE,WAAW,CAAC;CAC1B;AAED,qFAAqF;AACrF,MAAM,WAAW,eAAe;IAC5B,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAClB;AAED,kCAAkC;AAClC,MAAM,WAAW,oBAAoB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;IAErB;;;;;;OAMG;IACH,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEpC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAChD;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,oBAAoB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7C,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,sBAAsB;IACnC,OAAO,EAAE,6BAA6B,CAAC;IAEvC;;;;;;;OAOG;IACH,QAAQ,EAAE,iBAAiB,CAAC;IAE5B;;;;;;;OAOG;IACH,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEzB,iFAAiF;IACjF,SAAS,EAAE,WAAW,CAAC;CAC1B"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mCAAmC,CAAC;AAClD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qBAAqB,CAAC"}
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,2CAA2C,CAAC;AAC1D,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mCAAmC,CAAC;AAClD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qBAAqB,CAAC"}
|
|
@@ -15,6 +15,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
|
|
|
15
15
|
};
|
|
16
16
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
17
17
|
__exportStar(require("./capture.type.js"), exports);
|
|
18
|
+
__exportStar(require("./connection-verification-verdict.enum.js"), exports);
|
|
18
19
|
__exportStar(require("./connection.type.js"), exports);
|
|
19
20
|
__exportStar(require("./connector-auth-type.enum.js"), exports);
|
|
20
21
|
__exportStar(require("./connector.type.js"), exports);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/api/conduit/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oDAAkC;AAClC,uDAAqC;AACrC,gEAA8C;AAC9C,sDAAoC;AACpC,4DAA0C;AAC1C,qDAAmC;AACnC,wDAAsC;AACtC,4DAA0C;AAC1C,qDAAmC;AACnC,qDAAmC;AACnC,2DAAyC;AACzC,2DAAyC;AACzC,qDAAmC;AACnC,mDAAiC;AACjC,kDAAgC;AAChC,gEAA8C;AAC9C,+DAA6C;AAC7C,oEAAkD;AAClD,8DAA4C;AAC5C,sDAAoC"}
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/api/conduit/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oDAAkC;AAClC,4EAA0D;AAC1D,uDAAqC;AACrC,gEAA8C;AAC9C,sDAAoC;AACpC,4DAA0C;AAC1C,qDAAmC;AACnC,wDAAsC;AACtC,4DAA0C;AAC1C,qDAAmC;AACnC,qDAAmC;AACnC,2DAAyC;AACzC,2DAAyC;AACzC,qDAAmC;AACnC,mDAAiC;AACjC,kDAAgC;AAChC,gEAA8C;AAC9C,+DAA6C;AAC7C,oEAAkD;AAClD,8DAA4C;AAC5C,sDAAoC"}
|
|
@@ -133,6 +133,10 @@ export declare enum UserPermission {
|
|
|
133
133
|
COMMERCE_CATALOG_READ = "commerce:catalog:read",
|
|
134
134
|
/** Create, edit, archive or restore products in the tenant's catalog. */
|
|
135
135
|
COMMERCE_CATALOG_MANAGE = "commerce:catalog:manage",
|
|
136
|
+
/** Read orders a shopper placed, scoped to that shopper by the caller. */
|
|
137
|
+
COMMERCE_ORDER_READ = "commerce:order:read",
|
|
138
|
+
/** Place an order on a shopper's behalf. Does not permit any catalog change. */
|
|
139
|
+
COMMERCE_ORDER_CREATE = "commerce:order:create",
|
|
136
140
|
/** Read tenant message and provider-neutral delivery records. */
|
|
137
141
|
MESSAGING_MESSAGE_READ = "messaging:message:read",
|
|
138
142
|
/** Submit a paid customer message for delivery. */
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"user-permission.enum.d.ts","sourceRoot":"","sources":["../../../src/enum/user-permission.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,oBAAY,cAAc;IAItB,WAAW,gBAAgB;IAC3B,aAAa,kBAAkB;IAC/B,sFAAsF;IACtF,aAAa,kBAAkB;IAG/B,SAAS,cAAc;IACvB,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAG3B,eAAe,oBAAoB;IACnC,6EAA6E;IAC7E,iBAAiB,sBAAsB;IACvC;;;OAGG;IACH,sBAAsB,2BAA2B;IAGjD,SAAS,cAAc;IACvB,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAG3B,YAAY,iBAAiB;IAC7B,aAAa,kBAAkB;IAC/B,cAAc,mBAAmB;IAKjC,qEAAqE;IACrE,qBAAqB,0BAA0B;IAC/C,uBAAuB,4BAA4B;IACnD,uBAAuB,4BAA4B;IACnD,uBAAuB,4BAA4B;IAGnD;;;;OAIG;IACH,oBAAoB,yBAAyB;IAC7C,sBAAsB,2BAA2B;IAGjD;;;;OAIG;IACH,sBAAsB,2BAA2B;IAGjD,qBAAqB,0BAA0B;IAC/C,yFAAyF;IACzF,uBAAuB,4BAA4B;IAGnD,mEAAmE;IACnE,wBAAwB,6BAA6B;IACrD;;;;;;;OAOG;IACH,0BAA0B,+BAA+B;IAGzD,kBAAkB,uBAAuB;IACzC,2DAA2D;IAC3D,oBAAoB,yBAAyB;IAG7C;;;;;OAKG;IACH,qBAAqB,0BAA0B;IAC/C;;;;;;OAMG;IACH,wBAAwB,6BAA6B;IAGrD,wFAAwF;IACxF,sBAAsB,2BAA2B;IACjD;;;;;;;;OAQG;IACH,wBAAwB,6BAA6B;IAGrD,sEAAsE;IACtE,uBAAuB,4BAA4B;IACnD;;;;;OAKG;IACH,yBAAyB,8BAA8B;IAGvD;;;;;OAKG;IACH,qBAAqB,0BAA0B;IAC/C;;;;;;;OAOG;IACH,qBAAqB,0BAA0B;IAC/C,qEAAqE;IACrE,wBAAwB,6BAA6B;IAKrD,4EAA4E;IAC5E,qBAAqB,0BAA0B;IAC/C,yEAAyE;IACzE,uBAAuB,4BAA4B;
|
|
1
|
+
{"version":3,"file":"user-permission.enum.d.ts","sourceRoot":"","sources":["../../../src/enum/user-permission.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,oBAAY,cAAc;IAItB,WAAW,gBAAgB;IAC3B,aAAa,kBAAkB;IAC/B,sFAAsF;IACtF,aAAa,kBAAkB;IAG/B,SAAS,cAAc;IACvB,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAG3B,eAAe,oBAAoB;IACnC,6EAA6E;IAC7E,iBAAiB,sBAAsB;IACvC;;;OAGG;IACH,sBAAsB,2BAA2B;IAGjD,SAAS,cAAc;IACvB,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAG3B,YAAY,iBAAiB;IAC7B,aAAa,kBAAkB;IAC/B,cAAc,mBAAmB;IAKjC,qEAAqE;IACrE,qBAAqB,0BAA0B;IAC/C,uBAAuB,4BAA4B;IACnD,uBAAuB,4BAA4B;IACnD,uBAAuB,4BAA4B;IAGnD;;;;OAIG;IACH,oBAAoB,yBAAyB;IAC7C,sBAAsB,2BAA2B;IAGjD;;;;OAIG;IACH,sBAAsB,2BAA2B;IAGjD,qBAAqB,0BAA0B;IAC/C,yFAAyF;IACzF,uBAAuB,4BAA4B;IAGnD,mEAAmE;IACnE,wBAAwB,6BAA6B;IACrD;;;;;;;OAOG;IACH,0BAA0B,+BAA+B;IAGzD,kBAAkB,uBAAuB;IACzC,2DAA2D;IAC3D,oBAAoB,yBAAyB;IAG7C;;;;;OAKG;IACH,qBAAqB,0BAA0B;IAC/C;;;;;;OAMG;IACH,wBAAwB,6BAA6B;IAGrD,wFAAwF;IACxF,sBAAsB,2BAA2B;IACjD;;;;;;;;OAQG;IACH,wBAAwB,6BAA6B;IAGrD,sEAAsE;IACtE,uBAAuB,4BAA4B;IACnD;;;;;OAKG;IACH,yBAAyB,8BAA8B;IAGvD;;;;;OAKG;IACH,qBAAqB,0BAA0B;IAC/C;;;;;;;OAOG;IACH,qBAAqB,0BAA0B;IAC/C,qEAAqE;IACrE,wBAAwB,6BAA6B;IAKrD,4EAA4E;IAC5E,qBAAqB,0BAA0B;IAC/C,yEAAyE;IACzE,uBAAuB,4BAA4B;IAanD,0EAA0E;IAC1E,mBAAmB,wBAAwB;IAC3C,gFAAgF;IAChF,qBAAqB,0BAA0B;IAI/C,iEAAiE;IACjE,sBAAsB,2BAA2B;IACjD,mDAAmD;IACnD,sBAAsB,2BAA2B;IACjD,qEAAqE;IACrE,kBAAkB,uBAAuB;IACzC,uEAAuE;IACvE,qBAAqB,0BAA0B;IAC/C,yFAAyF;IACzF,uBAAuB,4BAA4B;IAKnD,kFAAkF;IAClF,mBAAmB,wBAAwB;IAC3C;;;;;;OAMG;IACH,qBAAqB,0BAA0B;IAG/C,2FAA2F;IAC3F,mBAAmB,wBAAwB;IAC3C,gDAAgD;IAChD,qBAAqB,0BAA0B;IAG/C;;;;;;;OAOG;IACH,wBAAwB,6BAA6B;IACrD,yFAAyF;IACzF,0BAA0B,+BAA+B;IACzD;;;;;;OAMG;IACH,0BAA0B,+BAA+B;IAGzD;;;;;;OAMG;IACH,mBAAmB,wBAAwB;IAG3C,gBAAgB,qBAAqB;IACrC,8FAA8F;IAC9F,kBAAkB,uBAAuB;IAGzC,wBAAwB,6BAA6B;IACrD,oEAAoE;IACpE,0BAA0B,+BAA+B;IAGzD;;;;;;;;;;;OAWG;IACH,uBAAuB,4BAA4B;IAGnD,gGAAgG;IAChG,aAAa,kBAAkB;IAG/B,6EAA6E;IAC7E,eAAe,oBAAoB;IACnC,wDAAwD;IACxD,iBAAiB,sBAAsB;IAKvC,8CAA8C;IAC9C,iBAAiB,sBAAsB;IACvC,sDAAsD;IACtD,mBAAmB,wBAAwB;IAG3C,6DAA6D;IAC7D,yBAAyB,8BAA8B;IACvD,qDAAqD;IACrD,2BAA2B,gCAAgC;IAG3D,yCAAyC;IACzC,kBAAkB,uBAAuB;IACzC,2DAA2D;IAC3D,oBAAoB,yBAAyB;IAG7C,+DAA+D;IAC/D,oBAAoB,yBAAyB;IAC7C,+EAA+E;IAC/E,sBAAsB,2BAA2B;IAGjD,2DAA2D;IAC3D,oBAAoB,yBAAyB;IAC7C,gDAAgD;IAChD,sBAAsB,2BAA2B;IAUjD;;;;;;;OAOG;IACH,iBAAiB,sBAAsB;IAEvC;;;;;;;OAOG;IACH,2BAA2B,gCAAgC;IAE3D;;;;;;;OAOG;IACH,sBAAsB,2BAA2B;IAEjD;;;;;;OAMG;IACH,oBAAoB,yBAAyB;IAE7C;;;;;;OAMG;IACH,mBAAmB,wBAAwB;IAI3C;;;;;;;;;;;;;;;OAeG;IACH,iBAAiB,sBAAsB;IAEvC;;;;;;;;OAQG;IACH,iBAAiB,sBAAsB;IAEvC,iFAAiF;IACjF,0BAA0B,+BAA+B;IAEzD;;;;;;;OAOG;IACH,4BAA4B,iCAAiC;IAE7D;;;;;OAKG;IACH,0BAA0B,+BAA+B;IAEzD;;;;;;OAMG;IACH,6BAA6B,kCAAkC;IAI/D;;;;OAIG;IACH,iCAAiC,sCAAsC;IAEvE;;;;OAIG;IACH,sBAAsB,2BAA2B;IAIjD,oFAAoF;IACpF,oBAAoB,yBAAyB;IAE7C,+EAA+E;IAC/E,sBAAsB,2BAA2B;IAEjD,4FAA4F;IAC5F,mCAAmC,wCAAwC;IAE3E,sGAAsG;IACtG,6BAA6B,kCAAkC;IAE/D,oGAAoG;IACpG,+BAA+B,oCAAoC;IAEnE,0FAA0F;IAC1F,sBAAsB,2BAA2B;IAEjD,2EAA2E;IAC3E,wBAAwB,6BAA6B;IAErD,wGAAwG;IACxG,yBAAyB,8BAA8B;IAEvD,kFAAkF;IAClF,4BAA4B,iCAAiC;IAE7D,mFAAmF;IACnF,+BAA+B,oCAAoC;IAInE,+EAA+E;IAC/E,cAAc,mBAAmB;IAEjC,6EAA6E;IAC7E,gBAAgB,qBAAqB;IAErC;;;;;;OAMG;IACH,iBAAiB,sBAAsB;IAEvC,2FAA2F;IAC3F,eAAe,oBAAoB;IAInC,gGAAgG;IAChG,iBAAiB,sBAAsB;IAEvC,4EAA4E;IAC5E,mBAAmB,wBAAwB;IAE3C,qGAAqG;IACrG,oBAAoB,yBAAyB;IAE7C,8EAA8E;IAC9E,oBAAoB,yBAAyB;CAChD;AAED;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,cAAc,EAAiD,CAAC"}
|
|
@@ -156,6 +156,21 @@ var UserPermission;
|
|
|
156
156
|
UserPermission["COMMERCE_CATALOG_READ"] = "commerce:catalog:read";
|
|
157
157
|
/** Create, edit, archive or restore products in the tenant's catalog. */
|
|
158
158
|
UserPermission["COMMERCE_CATALOG_MANAGE"] = "commerce:catalog:manage";
|
|
159
|
+
// ── Shopper orders ──────────────────────────────────────────────────────
|
|
160
|
+
//
|
|
161
|
+
// Separate from the catalog pair because of **who holds them**: `storefront-api` answers the
|
|
162
|
+
// public internet on a merchant's behalf, and it has to be able to place an order without
|
|
163
|
+
// being able to delete the merchant's products. `commerce:catalog:manage` covers both, so
|
|
164
|
+
// granting it to that service would put a catalogue edit one bug away from a shopfront.
|
|
165
|
+
//
|
|
166
|
+
// The merchant's own `/orders` routes still carry `commerce:catalog:*`. Moving them here is
|
|
167
|
+
// the right follow-up and is **not** a decorator change: `OWNER` is derived from
|
|
168
|
+
// `ALL_USER_PERMISSIONS` *at seed time*, so a tenant that already exists would not hold these
|
|
169
|
+
// and its owner would lose access to their own orders. It needs a backfill first.
|
|
170
|
+
/** Read orders a shopper placed, scoped to that shopper by the caller. */
|
|
171
|
+
UserPermission["COMMERCE_ORDER_READ"] = "commerce:order:read";
|
|
172
|
+
/** Place an order on a shopper's behalf. Does not permit any catalog change. */
|
|
173
|
+
UserPermission["COMMERCE_ORDER_CREATE"] = "commerce:order:create";
|
|
159
174
|
// ══ iveri-messaging-api ═════════════════════════════════════════════════
|
|
160
175
|
/** Read tenant message and provider-neutral delivery records. */
|
|
161
176
|
UserPermission["MESSAGING_MESSAGE_READ"] = "messaging:message:read";
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"user-permission.enum.js","sourceRoot":"","sources":["../../../src/enum/user-permission.enum.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,IAAY,
|
|
1
|
+
{"version":3,"file":"user-permission.enum.js","sourceRoot":"","sources":["../../../src/enum/user-permission.enum.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,IAAY,cAofX;AApfD,WAAY,cAAc;IACtB,4EAA4E;IAE5E,2EAA2E;IAC3E,6CAA2B,CAAA;IAC3B,iDAA+B,CAAA;IAC/B,sFAAsF;IACtF,iDAA+B,CAAA;IAE/B,2EAA2E;IAC3E,yCAAuB,CAAA;IACvB,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAE3B,2EAA2E;IAC3E,qDAAmC,CAAA;IACnC,6EAA6E;IAC7E,yDAAuC,CAAA;IACvC;;;OAGG;IACH,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E,yCAAuB,CAAA;IACvB,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAE3B,2EAA2E;IAC3E,+CAA6B,CAAA;IAC7B,iDAA+B,CAAA;IAC/B,mDAAiC,CAAA;IAEjC,4EAA4E;IAE5E,2EAA2E;IAC3E,qEAAqE;IACrE,iEAA+C,CAAA;IAC/C,qEAAmD,CAAA;IACnD,qEAAmD,CAAA;IACnD,qEAAmD,CAAA;IAEnD,2EAA2E;IAC3E;;;;OAIG;IACH,+DAA6C,CAAA;IAC7C,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E;;;;OAIG;IACH,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E,iEAA+C,CAAA;IAC/C,yFAAyF;IACzF,qEAAmD,CAAA;IAEnD,2EAA2E;IAC3E,mEAAmE;IACnE,uEAAqD,CAAA;IACrD;;;;;;;OAOG;IACH,2EAAyD,CAAA;IAEzD,2EAA2E;IAC3E,2DAAyC,CAAA;IACzC,2DAA2D;IAC3D,+DAA6C,CAAA;IAE7C,2EAA2E;IAC3E;;;;;OAKG;IACH,iEAA+C,CAAA;IAC/C;;;;;;OAMG;IACH,uEAAqD,CAAA;IAErD,2EAA2E;IAC3E,wFAAwF;IACxF,mEAAiD,CAAA;IACjD;;;;;;;;OAQG;IACH,uEAAqD,CAAA;IAErD,2EAA2E;IAC3E,sEAAsE;IACtE,qEAAmD,CAAA;IACnD;;;;;OAKG;IACH,yEAAuD,CAAA;IAEvD,2EAA2E;IAC3E;;;;;OAKG;IACH,iEAA+C,CAAA;IAC/C;;;;;;;OAOG;IACH,iEAA+C,CAAA;IAC/C,qEAAqE;IACrE,uEAAqD,CAAA;IAErD,4EAA4E;IAE5E,2EAA2E;IAC3E,4EAA4E;IAC5E,iEAA+C,CAAA;IAC/C,yEAAyE;IACzE,qEAAmD,CAAA;IAEnD,2EAA2E;IAC3E,EAAE;IACF,6FAA6F;IAC7F,0FAA0F;IAC1F,0FAA0F;IAC1F,wFAAwF;IACxF,EAAE;IACF,4FAA4F;IAC5F,iFAAiF;IACjF,8FAA8F;IAC9F,kFAAkF;IAClF,0EAA0E;IAC1E,6DAA2C,CAAA;IAC3C,gFAAgF;IAChF,iEAA+C,CAAA;IAE/C,2EAA2E;IAE3E,iEAAiE;IACjE,mEAAiD,CAAA;IACjD,mDAAmD;IACnD,mEAAiD,CAAA;IACjD,qEAAqE;IACrE,2DAAyC,CAAA;IACzC,uEAAuE;IACvE,iEAA+C,CAAA;IAC/C,yFAAyF;IACzF,qEAAmD,CAAA;IAEnD,4EAA4E;IAE5E,2EAA2E;IAC3E,kFAAkF;IAClF,6DAA2C,CAAA;IAC3C;;;;;;OAMG;IACH,iEAA+C,CAAA;IAE/C,2EAA2E;IAC3E,2FAA2F;IAC3F,6DAA2C,CAAA;IAC3C,gDAAgD;IAChD,iEAA+C,CAAA;IAE/C,2EAA2E;IAC3E;;;;;;;OAOG;IACH,uEAAqD,CAAA;IACrD,yFAAyF;IACzF,2EAAyD,CAAA;IACzD;;;;;;OAMG;IACH,2EAAyD,CAAA;IAEzD,2EAA2E;IAC3E;;;;;;OAMG;IACH,6DAA2C,CAAA;IAE3C,2EAA2E;IAC3E,uDAAqC,CAAA;IACrC,8FAA8F;IAC9F,2DAAyC,CAAA;IAEzC,2EAA2E;IAC3E,uEAAqD,CAAA;IACrD,oEAAoE;IACpE,2EAAyD,CAAA;IAEzD,2EAA2E;IAC3E;;;;;;;;;;;OAWG;IACH,qEAAmD,CAAA;IAEnD,2EAA2E;IAC3E,gGAAgG;IAChG,iDAA+B,CAAA;IAE/B,2EAA2E;IAC3E,6EAA6E;IAC7E,qDAAmC,CAAA;IACnC,wDAAwD;IACxD,yDAAuC,CAAA;IAEvC,2EAA2E;IAE3E,0EAA0E;IAC1E,8CAA8C;IAC9C,yDAAuC,CAAA;IACvC,sDAAsD;IACtD,6DAA2C,CAAA;IAE3C,yEAAyE;IACzE,6DAA6D;IAC7D,yEAAuD,CAAA;IACvD,qDAAqD;IACrD,6EAA2D,CAAA;IAE3D,0EAA0E;IAC1E,yCAAyC;IACzC,2DAAyC,CAAA;IACzC,2DAA2D;IAC3D,+DAA6C,CAAA;IAE7C,0EAA0E;IAC1E,+DAA+D;IAC/D,+DAA6C,CAAA;IAC7C,+EAA+E;IAC/E,mEAAiD,CAAA;IAEjD,0EAA0E;IAC1E,2DAA2D;IAC3D,+DAA6C,CAAA;IAC7C,gDAAgD;IAChD,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E,EAAE;IACF,sFAAsF;IACtF,wFAAwF;IACxF,6FAA6F;IAC7F,0FAA0F;IAC1F,mEAAmE;IAEnE;;;;;;;OAOG;IACH,yDAAuC,CAAA;IAEvC;;;;;;;OAOG;IACH,6EAA2D,CAAA;IAE3D;;;;;;;OAOG;IACH,mEAAiD,CAAA;IAEjD;;;;;;OAMG;IACH,+DAA6C,CAAA;IAE7C;;;;;;OAMG;IACH,6DAA2C,CAAA;IAE3C,2EAA2E;IAE3E;;;;;;;;;;;;;;;OAeG;IACH,yDAAuC,CAAA;IAEvC;;;;;;;;OAQG;IACH,yDAAuC,CAAA;IAEvC,iFAAiF;IACjF,2EAAyD,CAAA;IAEzD;;;;;;;OAOG;IACH,+EAA6D,CAAA;IAE7D;;;;;OAKG;IACH,2EAAyD,CAAA;IAEzD;;;;;;OAMG;IACH,iFAA+D,CAAA;IAE/D,2EAA2E;IAE3E;;;;OAIG;IACH,yFAAuE,CAAA;IAEvE;;;;OAIG;IACH,mEAAiD,CAAA;IAEjD,2EAA2E;IAE3E,oFAAoF;IACpF,+DAA6C,CAAA;IAE7C,+EAA+E;IAC/E,mEAAiD,CAAA;IAEjD,4FAA4F;IAC5F,6FAA2E,CAAA;IAE3E,sGAAsG;IACtG,iFAA+D,CAAA;IAE/D,oGAAoG;IACpG,qFAAmE,CAAA;IAEnE,0FAA0F;IAC1F,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E,uEAAqD,CAAA;IAErD,wGAAwG;IACxG,yEAAuD,CAAA;IAEvD,kFAAkF;IAClF,+EAA6D,CAAA;IAE7D,mFAAmF;IACnF,qFAAmE,CAAA;IAEnE,2EAA2E;IAE3E,+EAA+E;IAC/E,mDAAiC,CAAA;IAEjC,6EAA6E;IAC7E,uDAAqC,CAAA;IAErC;;;;;;OAMG;IACH,yDAAuC,CAAA;IAEvC,2FAA2F;IAC3F,qDAAmC,CAAA;IAEnC,0EAA0E;IAE1E,gGAAgG;IAChG,yDAAuC,CAAA;IAEvC,4EAA4E;IAC5E,6DAA2C,CAAA;IAE3C,qGAAqG;IACrG,+DAA6C,CAAA;IAE7C,8EAA8E;IAC9E,+DAA6C,CAAA;AACjD,CAAC,EApfW,cAAc,8BAAd,cAAc,QAofzB;AAED;;;;;GAKG;AACU,QAAA,oBAAoB,GAA8B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1,74 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* The outcome of checking whether a connection's credentials still work.
|
|
3
|
+
*
|
|
4
|
+
* **Not a boolean, for the same reason {@link SignatureVerdict} is not.** The question an
|
|
5
|
+
* operator asks after replacing a client secret is "did that work", and for three of the five
|
|
6
|
+
* {@link ConnectorAuthType} members the honest answer is *we cannot tell from here* — each for a
|
|
7
|
+
* different and separately fixable reason. Collapsing those into `false` would report a correctly
|
|
8
|
+
* configured connection as broken; collapsing them into `true` would report an untested one as
|
|
9
|
+
* proven.
|
|
10
|
+
*
|
|
11
|
+
* A UI must not colour all of these red. Only {@link ConnectionVerificationVerdict.INVALID_CREDENTIALS}
|
|
12
|
+
* and {@link ConnectionVerificationVerdict.MISCONFIGURED} mean something is wrong;
|
|
13
|
+
* {@link ConnectionVerificationVerdict.PROVIDER_UNREACHABLE} is somebody else's outage, and the
|
|
14
|
+
* remaining three are "nothing to check" or "checked as far as this auth type allows".
|
|
15
|
+
*/
|
|
16
|
+
export declare enum ConnectionVerificationVerdict {
|
|
17
|
+
/**
|
|
18
|
+
* A token was minted just now, so the credentials are good as of this moment.
|
|
19
|
+
*
|
|
20
|
+
* Only an OAuth grant can reach this: it is the one case where the provider itself tells us
|
|
21
|
+
* whether the secret is right, without us having to send a message somebody would receive.
|
|
22
|
+
*/
|
|
23
|
+
VERIFIED = "verified",
|
|
24
|
+
/**
|
|
25
|
+
* A cached access token is still usable, so nothing was asked of the provider.
|
|
26
|
+
*
|
|
27
|
+
* This is a weaker statement than {@link VERIFIED} and deliberately distinguished from it: it
|
|
28
|
+
* says the credentials worked when the token was minted, not that they work now. A secret
|
|
29
|
+
* revoked at the provider five minutes ago still reports this until the token expires.
|
|
30
|
+
*
|
|
31
|
+
* It exists so that clicking verify repeatedly does not spend a refresh token each time —
|
|
32
|
+
* see the note on {@link ConnectorAuthType.OAUTH2_REFRESH_TOKEN} about rotation. Replacing a
|
|
33
|
+
* connection's credentials discards the cached token, so the first verify after a credential
|
|
34
|
+
* edit is never this.
|
|
35
|
+
*/
|
|
36
|
+
VERIFIED_CACHED = "verified-cached",
|
|
37
|
+
/**
|
|
38
|
+
* The credential the manifest asks for is present, and its correctness is unknowable from
|
|
39
|
+
* here.
|
|
40
|
+
*
|
|
41
|
+
* A static secret is only ever checked by the provider when a real request carries it, so
|
|
42
|
+
* this is as far as verification can go for {@link ConnectorAuthType.API_KEY_HEADER} and
|
|
43
|
+
* {@link ConnectorAuthType.BEARER_STATIC}. That is not a cop-out: *presence* is exactly what
|
|
44
|
+
* breaks after a credential edit — a cleared map, or a key renamed to something the manifest
|
|
45
|
+
* does not ask for — and this catches it.
|
|
46
|
+
*/
|
|
47
|
+
CREDENTIAL_PRESENT = "credential-present",
|
|
48
|
+
/** The connector adds no credential to a request, so there is nothing to check. */
|
|
49
|
+
NOTHING_TO_VERIFY = "nothing-to-verify",
|
|
50
|
+
/**
|
|
51
|
+
* The provider refused the credentials.
|
|
52
|
+
*
|
|
53
|
+
* The one verdict that means the secret itself is wrong. Everything needed was present and
|
|
54
|
+
* the token endpoint said no.
|
|
55
|
+
*/
|
|
56
|
+
INVALID_CREDENTIALS = "invalid-credentials",
|
|
57
|
+
/**
|
|
58
|
+
* The credential, or the manifest field naming it, is missing.
|
|
59
|
+
*
|
|
60
|
+
* Distinct from {@link INVALID_CREDENTIALS} because the remedy is different and the provider
|
|
61
|
+
* was never contacted: a connection with no `clientSecret`, or a manifest with an
|
|
62
|
+
* `api-key-header` auth type and no `headerName`. The most common state immediately after a
|
|
63
|
+
* credential map is cleared.
|
|
64
|
+
*/
|
|
65
|
+
MISCONFIGURED = "misconfigured",
|
|
66
|
+
/**
|
|
67
|
+
* The token endpoint could not be reached, or did not answer in time.
|
|
68
|
+
*
|
|
69
|
+
* Says nothing about the credentials. Worth its own verdict so an operator who has just
|
|
70
|
+
* replaced a secret is not told it is wrong when the provider is simply down.
|
|
71
|
+
*/
|
|
72
|
+
PROVIDER_UNREACHABLE = "provider-unreachable"
|
|
73
|
+
}
|
|
74
|
+
//# sourceMappingURL=connection-verification-verdict.enum.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"connection-verification-verdict.enum.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/connection-verification-verdict.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,oBAAY,6BAA6B;IACrC;;;;;OAKG;IACH,QAAQ,aAAa;IAErB;;;;;;;;;;;OAWG;IACH,eAAe,oBAAoB;IAEnC;;;;;;;;;OASG;IACH,kBAAkB,uBAAuB;IAEzC,mFAAmF;IACnF,iBAAiB,sBAAsB;IAEvC;;;;;OAKG;IACH,mBAAmB,wBAAwB;IAE3C;;;;;;;OAOG;IACH,aAAa,kBAAkB;IAE/B;;;;;OAKG;IACH,oBAAoB,yBAAyB;CAChD"}
|
|
@@ -0,0 +1,75 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* The outcome of checking whether a connection's credentials still work.
|
|
3
|
+
*
|
|
4
|
+
* **Not a boolean, for the same reason {@link SignatureVerdict} is not.** The question an
|
|
5
|
+
* operator asks after replacing a client secret is "did that work", and for three of the five
|
|
6
|
+
* {@link ConnectorAuthType} members the honest answer is *we cannot tell from here* — each for a
|
|
7
|
+
* different and separately fixable reason. Collapsing those into `false` would report a correctly
|
|
8
|
+
* configured connection as broken; collapsing them into `true` would report an untested one as
|
|
9
|
+
* proven.
|
|
10
|
+
*
|
|
11
|
+
* A UI must not colour all of these red. Only {@link ConnectionVerificationVerdict.INVALID_CREDENTIALS}
|
|
12
|
+
* and {@link ConnectionVerificationVerdict.MISCONFIGURED} mean something is wrong;
|
|
13
|
+
* {@link ConnectionVerificationVerdict.PROVIDER_UNREACHABLE} is somebody else's outage, and the
|
|
14
|
+
* remaining three are "nothing to check" or "checked as far as this auth type allows".
|
|
15
|
+
*/
|
|
16
|
+
export var ConnectionVerificationVerdict;
|
|
17
|
+
(function (ConnectionVerificationVerdict) {
|
|
18
|
+
/**
|
|
19
|
+
* A token was minted just now, so the credentials are good as of this moment.
|
|
20
|
+
*
|
|
21
|
+
* Only an OAuth grant can reach this: it is the one case where the provider itself tells us
|
|
22
|
+
* whether the secret is right, without us having to send a message somebody would receive.
|
|
23
|
+
*/
|
|
24
|
+
ConnectionVerificationVerdict["VERIFIED"] = "verified";
|
|
25
|
+
/**
|
|
26
|
+
* A cached access token is still usable, so nothing was asked of the provider.
|
|
27
|
+
*
|
|
28
|
+
* This is a weaker statement than {@link VERIFIED} and deliberately distinguished from it: it
|
|
29
|
+
* says the credentials worked when the token was minted, not that they work now. A secret
|
|
30
|
+
* revoked at the provider five minutes ago still reports this until the token expires.
|
|
31
|
+
*
|
|
32
|
+
* It exists so that clicking verify repeatedly does not spend a refresh token each time —
|
|
33
|
+
* see the note on {@link ConnectorAuthType.OAUTH2_REFRESH_TOKEN} about rotation. Replacing a
|
|
34
|
+
* connection's credentials discards the cached token, so the first verify after a credential
|
|
35
|
+
* edit is never this.
|
|
36
|
+
*/
|
|
37
|
+
ConnectionVerificationVerdict["VERIFIED_CACHED"] = "verified-cached";
|
|
38
|
+
/**
|
|
39
|
+
* The credential the manifest asks for is present, and its correctness is unknowable from
|
|
40
|
+
* here.
|
|
41
|
+
*
|
|
42
|
+
* A static secret is only ever checked by the provider when a real request carries it, so
|
|
43
|
+
* this is as far as verification can go for {@link ConnectorAuthType.API_KEY_HEADER} and
|
|
44
|
+
* {@link ConnectorAuthType.BEARER_STATIC}. That is not a cop-out: *presence* is exactly what
|
|
45
|
+
* breaks after a credential edit — a cleared map, or a key renamed to something the manifest
|
|
46
|
+
* does not ask for — and this catches it.
|
|
47
|
+
*/
|
|
48
|
+
ConnectionVerificationVerdict["CREDENTIAL_PRESENT"] = "credential-present";
|
|
49
|
+
/** The connector adds no credential to a request, so there is nothing to check. */
|
|
50
|
+
ConnectionVerificationVerdict["NOTHING_TO_VERIFY"] = "nothing-to-verify";
|
|
51
|
+
/**
|
|
52
|
+
* The provider refused the credentials.
|
|
53
|
+
*
|
|
54
|
+
* The one verdict that means the secret itself is wrong. Everything needed was present and
|
|
55
|
+
* the token endpoint said no.
|
|
56
|
+
*/
|
|
57
|
+
ConnectionVerificationVerdict["INVALID_CREDENTIALS"] = "invalid-credentials";
|
|
58
|
+
/**
|
|
59
|
+
* The credential, or the manifest field naming it, is missing.
|
|
60
|
+
*
|
|
61
|
+
* Distinct from {@link INVALID_CREDENTIALS} because the remedy is different and the provider
|
|
62
|
+
* was never contacted: a connection with no `clientSecret`, or a manifest with an
|
|
63
|
+
* `api-key-header` auth type and no `headerName`. The most common state immediately after a
|
|
64
|
+
* credential map is cleared.
|
|
65
|
+
*/
|
|
66
|
+
ConnectionVerificationVerdict["MISCONFIGURED"] = "misconfigured";
|
|
67
|
+
/**
|
|
68
|
+
* The token endpoint could not be reached, or did not answer in time.
|
|
69
|
+
*
|
|
70
|
+
* Says nothing about the credentials. Worth its own verdict so an operator who has just
|
|
71
|
+
* replaced a secret is not told it is wrong when the provider is simply down.
|
|
72
|
+
*/
|
|
73
|
+
ConnectionVerificationVerdict["PROVIDER_UNREACHABLE"] = "provider-unreachable";
|
|
74
|
+
})(ConnectionVerificationVerdict || (ConnectionVerificationVerdict = {}));
|
|
75
|
+
//# sourceMappingURL=connection-verification-verdict.enum.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"connection-verification-verdict.enum.js","sourceRoot":"","sources":["../../../../src/api/conduit/connection-verification-verdict.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAN,IAAY,6BA+DX;AA/DD,WAAY,6BAA6B;IACrC;;;;;OAKG;IACH,sDAAqB,CAAA;IAErB;;;;;;;;;;;OAWG;IACH,oEAAmC,CAAA;IAEnC;;;;;;;;;OASG;IACH,0EAAyC,CAAA;IAEzC,mFAAmF;IACnF,wEAAuC,CAAA;IAEvC;;;;;OAKG;IACH,4EAA2C,CAAA;IAE3C;;;;;;;OAOG;IACH,gEAA+B,CAAA;IAE/B;;;;;OAKG;IACH,8EAA6C,CAAA;AACjD,CAAC,EA/DW,6BAA6B,KAA7B,6BAA6B,QA+DxC"}
|
|
@@ -1,6 +1,8 @@
|
|
|
1
1
|
import type { IsoDateTime } from '../../type/iso-date-time.type.js';
|
|
2
2
|
import type { Nullable } from '../../type/nil.type.js';
|
|
3
3
|
import type { UUID } from '../../type/uuid.type.js';
|
|
4
|
+
import type { ConnectionVerificationVerdict } from './connection-verification-verdict.enum.js';
|
|
5
|
+
import type { ConnectorAuthType } from './connector-auth-type.enum.js';
|
|
4
6
|
/**
|
|
5
7
|
* One tenant's configured instance of a connector: the credentials and the account details that
|
|
6
8
|
* turn a manifest into something that can actually send.
|
|
@@ -97,4 +99,34 @@ export interface UpdateConnectionBody {
|
|
|
97
99
|
variables?: Nullable<Record<string, string>>;
|
|
98
100
|
isActive?: boolean;
|
|
99
101
|
}
|
|
102
|
+
/**
|
|
103
|
+
* `POST /api/v1/connections/:id/verify`.
|
|
104
|
+
*
|
|
105
|
+
* Takes no body. Everything the check needs is already on the connection and its connector's
|
|
106
|
+
* manifest, and a field a caller could send would be a field that changes what is verified —
|
|
107
|
+
* which is the opposite of the point.
|
|
108
|
+
*/
|
|
109
|
+
export interface ConnectionVerification {
|
|
110
|
+
verdict: ConnectionVerificationVerdict;
|
|
111
|
+
/**
|
|
112
|
+
* The auth type the verdict was reached under, so a client can explain it without fetching
|
|
113
|
+
* the connector.
|
|
114
|
+
*
|
|
115
|
+
* A reader needs this to say *why* a verdict is as weak as it is — "nothing to check" and
|
|
116
|
+
* "cannot be checked without sending something real" are different sentences, and which one
|
|
117
|
+
* applies is a property of the connector rather than of the connection.
|
|
118
|
+
*/
|
|
119
|
+
authType: ConnectorAuthType;
|
|
120
|
+
/**
|
|
121
|
+
* What the provider or the configuration said, when there is something to pass on.
|
|
122
|
+
*
|
|
123
|
+
* **Never a credential, in whole or in part.** It carries a token endpoint's error code, a
|
|
124
|
+
* missing credential's name, or a timeout — the same things `lastAuthError` holds, and the
|
|
125
|
+
* same rule applies: no endpoint returns a credential value in any form, not masked, not
|
|
126
|
+
* truncated, not a length.
|
|
127
|
+
*/
|
|
128
|
+
detail: Nullable<string>;
|
|
129
|
+
/** When the check ran. A client showing a stale verdict should say how stale. */
|
|
130
|
+
checkedAt: IsoDateTime;
|
|
131
|
+
}
|
|
100
132
|
//# sourceMappingURL=connection.type.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"connection.type.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/connection.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,UAAU;IACvB,EAAE,EAAE,IAAI,CAAC;IAET,iGAAiG;IACjG,GAAG,EAAE,MAAM,CAAC;IAEZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE9B,6EAA6E;IAC7E,YAAY,EAAE,MAAM,CAAC;IAErB,6EAA6E;IAC7E,eAAe,EAAE,MAAM,EAAE,CAAC;IAE1B;;;;;;;OAOG;IACH,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAElC;;;;;;;OAOG;IACH,oBAAoB,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IAE5C;;;;;;OAMG;IACH,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEhC,kFAAkF;IAClF,QAAQ,EAAE,OAAO,CAAC;IAElB,SAAS,EAAE,WAAW,CAAC;IACvB,SAAS,EAAE,WAAW,CAAC;CAC1B;AAED,qFAAqF;AACrF,MAAM,WAAW,eAAe;IAC5B,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAClB;AAED,kCAAkC;AAClC,MAAM,WAAW,oBAAoB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;IAErB;;;;;;OAMG;IACH,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEpC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAChD;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,oBAAoB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7C,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB"}
|
|
1
|
+
{"version":3,"file":"connection.type.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/connection.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,2CAA2C,CAAC;AAC/F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAEvE;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,UAAU;IACvB,EAAE,EAAE,IAAI,CAAC;IAET,iGAAiG;IACjG,GAAG,EAAE,MAAM,CAAC;IAEZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE9B,6EAA6E;IAC7E,YAAY,EAAE,MAAM,CAAC;IAErB,6EAA6E;IAC7E,eAAe,EAAE,MAAM,EAAE,CAAC;IAE1B;;;;;;;OAOG;IACH,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAElC;;;;;;;OAOG;IACH,oBAAoB,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IAE5C;;;;;;OAMG;IACH,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEhC,kFAAkF;IAClF,QAAQ,EAAE,OAAO,CAAC;IAElB,SAAS,EAAE,WAAW,CAAC;IACvB,SAAS,EAAE,WAAW,CAAC;CAC1B;AAED,qFAAqF;AACrF,MAAM,WAAW,eAAe;IAC5B,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAClB;AAED,kCAAkC;AAClC,MAAM,WAAW,oBAAoB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;IAErB;;;;;;OAMG;IACH,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEpC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAChD;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,oBAAoB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7C,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,sBAAsB;IACnC,OAAO,EAAE,6BAA6B,CAAC;IAEvC;;;;;;;OAOG;IACH,QAAQ,EAAE,iBAAiB,CAAC;IAE5B;;;;;;;OAOG;IACH,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEzB,iFAAiF;IACjF,SAAS,EAAE,WAAW,CAAC;CAC1B"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mCAAmC,CAAC;AAClD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qBAAqB,CAAC"}
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,2CAA2C,CAAC;AAC1D,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mCAAmC,CAAC;AAClD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qBAAqB,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/api/conduit/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mCAAmC,CAAC;AAClD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qBAAqB,CAAC"}
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/api/conduit/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,2CAA2C,CAAC;AAC1D,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mCAAmC,CAAC;AAClD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qBAAqB,CAAC"}
|
|
@@ -133,6 +133,10 @@ export declare enum UserPermission {
|
|
|
133
133
|
COMMERCE_CATALOG_READ = "commerce:catalog:read",
|
|
134
134
|
/** Create, edit, archive or restore products in the tenant's catalog. */
|
|
135
135
|
COMMERCE_CATALOG_MANAGE = "commerce:catalog:manage",
|
|
136
|
+
/** Read orders a shopper placed, scoped to that shopper by the caller. */
|
|
137
|
+
COMMERCE_ORDER_READ = "commerce:order:read",
|
|
138
|
+
/** Place an order on a shopper's behalf. Does not permit any catalog change. */
|
|
139
|
+
COMMERCE_ORDER_CREATE = "commerce:order:create",
|
|
136
140
|
/** Read tenant message and provider-neutral delivery records. */
|
|
137
141
|
MESSAGING_MESSAGE_READ = "messaging:message:read",
|
|
138
142
|
/** Submit a paid customer message for delivery. */
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"user-permission.enum.d.ts","sourceRoot":"","sources":["../../../src/enum/user-permission.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,oBAAY,cAAc;IAItB,WAAW,gBAAgB;IAC3B,aAAa,kBAAkB;IAC/B,sFAAsF;IACtF,aAAa,kBAAkB;IAG/B,SAAS,cAAc;IACvB,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAG3B,eAAe,oBAAoB;IACnC,6EAA6E;IAC7E,iBAAiB,sBAAsB;IACvC;;;OAGG;IACH,sBAAsB,2BAA2B;IAGjD,SAAS,cAAc;IACvB,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAG3B,YAAY,iBAAiB;IAC7B,aAAa,kBAAkB;IAC/B,cAAc,mBAAmB;IAKjC,qEAAqE;IACrE,qBAAqB,0BAA0B;IAC/C,uBAAuB,4BAA4B;IACnD,uBAAuB,4BAA4B;IACnD,uBAAuB,4BAA4B;IAGnD;;;;OAIG;IACH,oBAAoB,yBAAyB;IAC7C,sBAAsB,2BAA2B;IAGjD;;;;OAIG;IACH,sBAAsB,2BAA2B;IAGjD,qBAAqB,0BAA0B;IAC/C,yFAAyF;IACzF,uBAAuB,4BAA4B;IAGnD,mEAAmE;IACnE,wBAAwB,6BAA6B;IACrD;;;;;;;OAOG;IACH,0BAA0B,+BAA+B;IAGzD,kBAAkB,uBAAuB;IACzC,2DAA2D;IAC3D,oBAAoB,yBAAyB;IAG7C;;;;;OAKG;IACH,qBAAqB,0BAA0B;IAC/C;;;;;;OAMG;IACH,wBAAwB,6BAA6B;IAGrD,wFAAwF;IACxF,sBAAsB,2BAA2B;IACjD;;;;;;;;OAQG;IACH,wBAAwB,6BAA6B;IAGrD,sEAAsE;IACtE,uBAAuB,4BAA4B;IACnD;;;;;OAKG;IACH,yBAAyB,8BAA8B;IAGvD;;;;;OAKG;IACH,qBAAqB,0BAA0B;IAC/C;;;;;;;OAOG;IACH,qBAAqB,0BAA0B;IAC/C,qEAAqE;IACrE,wBAAwB,6BAA6B;IAKrD,4EAA4E;IAC5E,qBAAqB,0BAA0B;IAC/C,yEAAyE;IACzE,uBAAuB,4BAA4B;
|
|
1
|
+
{"version":3,"file":"user-permission.enum.d.ts","sourceRoot":"","sources":["../../../src/enum/user-permission.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,oBAAY,cAAc;IAItB,WAAW,gBAAgB;IAC3B,aAAa,kBAAkB;IAC/B,sFAAsF;IACtF,aAAa,kBAAkB;IAG/B,SAAS,cAAc;IACvB,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAG3B,eAAe,oBAAoB;IACnC,6EAA6E;IAC7E,iBAAiB,sBAAsB;IACvC;;;OAGG;IACH,sBAAsB,2BAA2B;IAGjD,SAAS,cAAc;IACvB,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAG3B,YAAY,iBAAiB;IAC7B,aAAa,kBAAkB;IAC/B,cAAc,mBAAmB;IAKjC,qEAAqE;IACrE,qBAAqB,0BAA0B;IAC/C,uBAAuB,4BAA4B;IACnD,uBAAuB,4BAA4B;IACnD,uBAAuB,4BAA4B;IAGnD;;;;OAIG;IACH,oBAAoB,yBAAyB;IAC7C,sBAAsB,2BAA2B;IAGjD;;;;OAIG;IACH,sBAAsB,2BAA2B;IAGjD,qBAAqB,0BAA0B;IAC/C,yFAAyF;IACzF,uBAAuB,4BAA4B;IAGnD,mEAAmE;IACnE,wBAAwB,6BAA6B;IACrD;;;;;;;OAOG;IACH,0BAA0B,+BAA+B;IAGzD,kBAAkB,uBAAuB;IACzC,2DAA2D;IAC3D,oBAAoB,yBAAyB;IAG7C;;;;;OAKG;IACH,qBAAqB,0BAA0B;IAC/C;;;;;;OAMG;IACH,wBAAwB,6BAA6B;IAGrD,wFAAwF;IACxF,sBAAsB,2BAA2B;IACjD;;;;;;;;OAQG;IACH,wBAAwB,6BAA6B;IAGrD,sEAAsE;IACtE,uBAAuB,4BAA4B;IACnD;;;;;OAKG;IACH,yBAAyB,8BAA8B;IAGvD;;;;;OAKG;IACH,qBAAqB,0BAA0B;IAC/C;;;;;;;OAOG;IACH,qBAAqB,0BAA0B;IAC/C,qEAAqE;IACrE,wBAAwB,6BAA6B;IAKrD,4EAA4E;IAC5E,qBAAqB,0BAA0B;IAC/C,yEAAyE;IACzE,uBAAuB,4BAA4B;IAanD,0EAA0E;IAC1E,mBAAmB,wBAAwB;IAC3C,gFAAgF;IAChF,qBAAqB,0BAA0B;IAI/C,iEAAiE;IACjE,sBAAsB,2BAA2B;IACjD,mDAAmD;IACnD,sBAAsB,2BAA2B;IACjD,qEAAqE;IACrE,kBAAkB,uBAAuB;IACzC,uEAAuE;IACvE,qBAAqB,0BAA0B;IAC/C,yFAAyF;IACzF,uBAAuB,4BAA4B;IAKnD,kFAAkF;IAClF,mBAAmB,wBAAwB;IAC3C;;;;;;OAMG;IACH,qBAAqB,0BAA0B;IAG/C,2FAA2F;IAC3F,mBAAmB,wBAAwB;IAC3C,gDAAgD;IAChD,qBAAqB,0BAA0B;IAG/C;;;;;;;OAOG;IACH,wBAAwB,6BAA6B;IACrD,yFAAyF;IACzF,0BAA0B,+BAA+B;IACzD;;;;;;OAMG;IACH,0BAA0B,+BAA+B;IAGzD;;;;;;OAMG;IACH,mBAAmB,wBAAwB;IAG3C,gBAAgB,qBAAqB;IACrC,8FAA8F;IAC9F,kBAAkB,uBAAuB;IAGzC,wBAAwB,6BAA6B;IACrD,oEAAoE;IACpE,0BAA0B,+BAA+B;IAGzD;;;;;;;;;;;OAWG;IACH,uBAAuB,4BAA4B;IAGnD,gGAAgG;IAChG,aAAa,kBAAkB;IAG/B,6EAA6E;IAC7E,eAAe,oBAAoB;IACnC,wDAAwD;IACxD,iBAAiB,sBAAsB;IAKvC,8CAA8C;IAC9C,iBAAiB,sBAAsB;IACvC,sDAAsD;IACtD,mBAAmB,wBAAwB;IAG3C,6DAA6D;IAC7D,yBAAyB,8BAA8B;IACvD,qDAAqD;IACrD,2BAA2B,gCAAgC;IAG3D,yCAAyC;IACzC,kBAAkB,uBAAuB;IACzC,2DAA2D;IAC3D,oBAAoB,yBAAyB;IAG7C,+DAA+D;IAC/D,oBAAoB,yBAAyB;IAC7C,+EAA+E;IAC/E,sBAAsB,2BAA2B;IAGjD,2DAA2D;IAC3D,oBAAoB,yBAAyB;IAC7C,gDAAgD;IAChD,sBAAsB,2BAA2B;IAUjD;;;;;;;OAOG;IACH,iBAAiB,sBAAsB;IAEvC;;;;;;;OAOG;IACH,2BAA2B,gCAAgC;IAE3D;;;;;;;OAOG;IACH,sBAAsB,2BAA2B;IAEjD;;;;;;OAMG;IACH,oBAAoB,yBAAyB;IAE7C;;;;;;OAMG;IACH,mBAAmB,wBAAwB;IAI3C;;;;;;;;;;;;;;;OAeG;IACH,iBAAiB,sBAAsB;IAEvC;;;;;;;;OAQG;IACH,iBAAiB,sBAAsB;IAEvC,iFAAiF;IACjF,0BAA0B,+BAA+B;IAEzD;;;;;;;OAOG;IACH,4BAA4B,iCAAiC;IAE7D;;;;;OAKG;IACH,0BAA0B,+BAA+B;IAEzD;;;;;;OAMG;IACH,6BAA6B,kCAAkC;IAI/D;;;;OAIG;IACH,iCAAiC,sCAAsC;IAEvE;;;;OAIG;IACH,sBAAsB,2BAA2B;IAIjD,oFAAoF;IACpF,oBAAoB,yBAAyB;IAE7C,+EAA+E;IAC/E,sBAAsB,2BAA2B;IAEjD,4FAA4F;IAC5F,mCAAmC,wCAAwC;IAE3E,sGAAsG;IACtG,6BAA6B,kCAAkC;IAE/D,oGAAoG;IACpG,+BAA+B,oCAAoC;IAEnE,0FAA0F;IAC1F,sBAAsB,2BAA2B;IAEjD,2EAA2E;IAC3E,wBAAwB,6BAA6B;IAErD,wGAAwG;IACxG,yBAAyB,8BAA8B;IAEvD,kFAAkF;IAClF,4BAA4B,iCAAiC;IAE7D,mFAAmF;IACnF,+BAA+B,oCAAoC;IAInE,+EAA+E;IAC/E,cAAc,mBAAmB;IAEjC,6EAA6E;IAC7E,gBAAgB,qBAAqB;IAErC;;;;;;OAMG;IACH,iBAAiB,sBAAsB;IAEvC,2FAA2F;IAC3F,eAAe,oBAAoB;IAInC,gGAAgG;IAChG,iBAAiB,sBAAsB;IAEvC,4EAA4E;IAC5E,mBAAmB,wBAAwB;IAE3C,qGAAqG;IACrG,oBAAoB,yBAAyB;IAE7C,8EAA8E;IAC9E,oBAAoB,yBAAyB;CAChD;AAED;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,cAAc,EAAiD,CAAC"}
|
|
@@ -153,6 +153,21 @@ export var UserPermission;
|
|
|
153
153
|
UserPermission["COMMERCE_CATALOG_READ"] = "commerce:catalog:read";
|
|
154
154
|
/** Create, edit, archive or restore products in the tenant's catalog. */
|
|
155
155
|
UserPermission["COMMERCE_CATALOG_MANAGE"] = "commerce:catalog:manage";
|
|
156
|
+
// ── Shopper orders ──────────────────────────────────────────────────────
|
|
157
|
+
//
|
|
158
|
+
// Separate from the catalog pair because of **who holds them**: `storefront-api` answers the
|
|
159
|
+
// public internet on a merchant's behalf, and it has to be able to place an order without
|
|
160
|
+
// being able to delete the merchant's products. `commerce:catalog:manage` covers both, so
|
|
161
|
+
// granting it to that service would put a catalogue edit one bug away from a shopfront.
|
|
162
|
+
//
|
|
163
|
+
// The merchant's own `/orders` routes still carry `commerce:catalog:*`. Moving them here is
|
|
164
|
+
// the right follow-up and is **not** a decorator change: `OWNER` is derived from
|
|
165
|
+
// `ALL_USER_PERMISSIONS` *at seed time*, so a tenant that already exists would not hold these
|
|
166
|
+
// and its owner would lose access to their own orders. It needs a backfill first.
|
|
167
|
+
/** Read orders a shopper placed, scoped to that shopper by the caller. */
|
|
168
|
+
UserPermission["COMMERCE_ORDER_READ"] = "commerce:order:read";
|
|
169
|
+
/** Place an order on a shopper's behalf. Does not permit any catalog change. */
|
|
170
|
+
UserPermission["COMMERCE_ORDER_CREATE"] = "commerce:order:create";
|
|
156
171
|
// ══ iveri-messaging-api ═════════════════════════════════════════════════
|
|
157
172
|
/** Read tenant message and provider-neutral delivery records. */
|
|
158
173
|
UserPermission["MESSAGING_MESSAGE_READ"] = "messaging:message:read";
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"user-permission.enum.js","sourceRoot":"","sources":["../../../src/enum/user-permission.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAN,IAAY,
|
|
1
|
+
{"version":3,"file":"user-permission.enum.js","sourceRoot":"","sources":["../../../src/enum/user-permission.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAN,IAAY,cAofX;AApfD,WAAY,cAAc;IACtB,4EAA4E;IAE5E,2EAA2E;IAC3E,6CAA2B,CAAA;IAC3B,iDAA+B,CAAA;IAC/B,sFAAsF;IACtF,iDAA+B,CAAA;IAE/B,2EAA2E;IAC3E,yCAAuB,CAAA;IACvB,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAE3B,2EAA2E;IAC3E,qDAAmC,CAAA;IACnC,6EAA6E;IAC7E,yDAAuC,CAAA;IACvC;;;OAGG;IACH,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E,yCAAuB,CAAA;IACvB,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAC3B,6CAA2B,CAAA;IAE3B,2EAA2E;IAC3E,+CAA6B,CAAA;IAC7B,iDAA+B,CAAA;IAC/B,mDAAiC,CAAA;IAEjC,4EAA4E;IAE5E,2EAA2E;IAC3E,qEAAqE;IACrE,iEAA+C,CAAA;IAC/C,qEAAmD,CAAA;IACnD,qEAAmD,CAAA;IACnD,qEAAmD,CAAA;IAEnD,2EAA2E;IAC3E;;;;OAIG;IACH,+DAA6C,CAAA;IAC7C,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E;;;;OAIG;IACH,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E,iEAA+C,CAAA;IAC/C,yFAAyF;IACzF,qEAAmD,CAAA;IAEnD,2EAA2E;IAC3E,mEAAmE;IACnE,uEAAqD,CAAA;IACrD;;;;;;;OAOG;IACH,2EAAyD,CAAA;IAEzD,2EAA2E;IAC3E,2DAAyC,CAAA;IACzC,2DAA2D;IAC3D,+DAA6C,CAAA;IAE7C,2EAA2E;IAC3E;;;;;OAKG;IACH,iEAA+C,CAAA;IAC/C;;;;;;OAMG;IACH,uEAAqD,CAAA;IAErD,2EAA2E;IAC3E,wFAAwF;IACxF,mEAAiD,CAAA;IACjD;;;;;;;;OAQG;IACH,uEAAqD,CAAA;IAErD,2EAA2E;IAC3E,sEAAsE;IACtE,qEAAmD,CAAA;IACnD;;;;;OAKG;IACH,yEAAuD,CAAA;IAEvD,2EAA2E;IAC3E;;;;;OAKG;IACH,iEAA+C,CAAA;IAC/C;;;;;;;OAOG;IACH,iEAA+C,CAAA;IAC/C,qEAAqE;IACrE,uEAAqD,CAAA;IAErD,4EAA4E;IAE5E,2EAA2E;IAC3E,4EAA4E;IAC5E,iEAA+C,CAAA;IAC/C,yEAAyE;IACzE,qEAAmD,CAAA;IAEnD,2EAA2E;IAC3E,EAAE;IACF,6FAA6F;IAC7F,0FAA0F;IAC1F,0FAA0F;IAC1F,wFAAwF;IACxF,EAAE;IACF,4FAA4F;IAC5F,iFAAiF;IACjF,8FAA8F;IAC9F,kFAAkF;IAClF,0EAA0E;IAC1E,6DAA2C,CAAA;IAC3C,gFAAgF;IAChF,iEAA+C,CAAA;IAE/C,2EAA2E;IAE3E,iEAAiE;IACjE,mEAAiD,CAAA;IACjD,mDAAmD;IACnD,mEAAiD,CAAA;IACjD,qEAAqE;IACrE,2DAAyC,CAAA;IACzC,uEAAuE;IACvE,iEAA+C,CAAA;IAC/C,yFAAyF;IACzF,qEAAmD,CAAA;IAEnD,4EAA4E;IAE5E,2EAA2E;IAC3E,kFAAkF;IAClF,6DAA2C,CAAA;IAC3C;;;;;;OAMG;IACH,iEAA+C,CAAA;IAE/C,2EAA2E;IAC3E,2FAA2F;IAC3F,6DAA2C,CAAA;IAC3C,gDAAgD;IAChD,iEAA+C,CAAA;IAE/C,2EAA2E;IAC3E;;;;;;;OAOG;IACH,uEAAqD,CAAA;IACrD,yFAAyF;IACzF,2EAAyD,CAAA;IACzD;;;;;;OAMG;IACH,2EAAyD,CAAA;IAEzD,2EAA2E;IAC3E;;;;;;OAMG;IACH,6DAA2C,CAAA;IAE3C,2EAA2E;IAC3E,uDAAqC,CAAA;IACrC,8FAA8F;IAC9F,2DAAyC,CAAA;IAEzC,2EAA2E;IAC3E,uEAAqD,CAAA;IACrD,oEAAoE;IACpE,2EAAyD,CAAA;IAEzD,2EAA2E;IAC3E;;;;;;;;;;;OAWG;IACH,qEAAmD,CAAA;IAEnD,2EAA2E;IAC3E,gGAAgG;IAChG,iDAA+B,CAAA;IAE/B,2EAA2E;IAC3E,6EAA6E;IAC7E,qDAAmC,CAAA;IACnC,wDAAwD;IACxD,yDAAuC,CAAA;IAEvC,2EAA2E;IAE3E,0EAA0E;IAC1E,8CAA8C;IAC9C,yDAAuC,CAAA;IACvC,sDAAsD;IACtD,6DAA2C,CAAA;IAE3C,yEAAyE;IACzE,6DAA6D;IAC7D,yEAAuD,CAAA;IACvD,qDAAqD;IACrD,6EAA2D,CAAA;IAE3D,0EAA0E;IAC1E,yCAAyC;IACzC,2DAAyC,CAAA;IACzC,2DAA2D;IAC3D,+DAA6C,CAAA;IAE7C,0EAA0E;IAC1E,+DAA+D;IAC/D,+DAA6C,CAAA;IAC7C,+EAA+E;IAC/E,mEAAiD,CAAA;IAEjD,0EAA0E;IAC1E,2DAA2D;IAC3D,+DAA6C,CAAA;IAC7C,gDAAgD;IAChD,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E,EAAE;IACF,sFAAsF;IACtF,wFAAwF;IACxF,6FAA6F;IAC7F,0FAA0F;IAC1F,mEAAmE;IAEnE;;;;;;;OAOG;IACH,yDAAuC,CAAA;IAEvC;;;;;;;OAOG;IACH,6EAA2D,CAAA;IAE3D;;;;;;;OAOG;IACH,mEAAiD,CAAA;IAEjD;;;;;;OAMG;IACH,+DAA6C,CAAA;IAE7C;;;;;;OAMG;IACH,6DAA2C,CAAA;IAE3C,2EAA2E;IAE3E;;;;;;;;;;;;;;;OAeG;IACH,yDAAuC,CAAA;IAEvC;;;;;;;;OAQG;IACH,yDAAuC,CAAA;IAEvC,iFAAiF;IACjF,2EAAyD,CAAA;IAEzD;;;;;;;OAOG;IACH,+EAA6D,CAAA;IAE7D;;;;;OAKG;IACH,2EAAyD,CAAA;IAEzD;;;;;;OAMG;IACH,iFAA+D,CAAA;IAE/D,2EAA2E;IAE3E;;;;OAIG;IACH,yFAAuE,CAAA;IAEvE;;;;OAIG;IACH,mEAAiD,CAAA;IAEjD,2EAA2E;IAE3E,oFAAoF;IACpF,+DAA6C,CAAA;IAE7C,+EAA+E;IAC/E,mEAAiD,CAAA;IAEjD,4FAA4F;IAC5F,6FAA2E,CAAA;IAE3E,sGAAsG;IACtG,iFAA+D,CAAA;IAE/D,oGAAoG;IACpG,qFAAmE,CAAA;IAEnE,0FAA0F;IAC1F,mEAAiD,CAAA;IAEjD,2EAA2E;IAC3E,uEAAqD,CAAA;IAErD,wGAAwG;IACxG,yEAAuD,CAAA;IAEvD,kFAAkF;IAClF,+EAA6D,CAAA;IAE7D,mFAAmF;IACnF,qFAAmE,CAAA;IAEnE,2EAA2E;IAE3E,+EAA+E;IAC/E,mDAAiC,CAAA;IAEjC,6EAA6E;IAC7E,uDAAqC,CAAA;IAErC;;;;;;OAMG;IACH,yDAAuC,CAAA;IAEvC,2FAA2F;IAC3F,qDAAmC,CAAA;IAEnC,0EAA0E;IAE1E,gGAAgG;IAChG,yDAAuC,CAAA;IAEvC,4EAA4E;IAC5E,6DAA2C,CAAA;IAE3C,qGAAqG;IACrG,+DAA6C,CAAA;IAE7C,8EAA8E;IAC9E,+DAA6C,CAAA;AACjD,CAAC,EApfW,cAAc,KAAd,cAAc,QAofzB;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA8B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC"}
|