@marinoscar/platform-contract 0.1.0-next.3 → 0.1.0-next.5

package/dist/esm/identity/constants.js

@@ -0,0 +1,244 @@
+// The identity slice's plain values (issue #727, PP-6.6). Zod-free by rule: a
+// browser that only needs an error code, an enum list or a type never pulls the
+// schemas, and with them zod, into its bundle (test/no-zod-in-constants.test.ts).
+//
+// Every list here is the one the schemas validate with: the schemas import
+// them, so a value cannot drift between what the API enforces and what the web
+// app offers. Moved verbatim from the API (`packages/platform-api/src/identity/auth/auth-error-codes.ts`
+// and the DTO files of auth, pat, device-auth and organizations); no value
+// changed.
+// =============================================================================
+// Sign-in failure codes (issue #652)
+// =============================================================================
+/**
+ * The CLOSED set of sign-in failure codes.
+ *
+ * A failed Google sign-in always ends as a 302 to
+ * `${appUrl}/auth/callback?error=<code>`, where `<code>` is one of these and
+ * nothing else: never an exception message, never raw JSON. Free text in that
+ * query string let anyone craft a link that rendered attacker-chosen copy on a
+ * trusted origin.
+ *
+ * - `not_allowlisted`: the email is not on the allowlist.
+ * - `account_disabled`: the account exists but is deactivated.
+ * - `access_denied`: the person cancelled or denied consent at the provider.
+ * - `authentication_failed`: token exchange failed, code replayed or expired,
+ *   no email on the profile, or anything unexpected.
+ * - `server_misconfigured`: seed data is missing.
+ * - `no_organization`: multi-org tenancy mode (`TENANCY_MODE=multi`) and the
+ *   user has no active organization membership.
+ *
+ * The single source: the API resolves every failure to one of these, and the
+ * web app keys its copy off this list (so a new code is a type error there
+ * until it has copy).
+ *
+ * @stability stable
+ */
+export const AUTH_ERROR_CODES = [
+    'not_allowlisted',
+    'account_disabled',
+    'access_denied',
+    'authentication_failed',
+    'server_misconfigured',
+    'no_organization',
+];
+/**
+ * The code used for every failure that has no more specific one, and the code
+ * a client shows for an unknown, legacy or missing value (never echo the raw
+ * input).
+ *
+ * @stability stable
+ */
+export const DEFAULT_AUTH_ERROR_CODE = 'authentication_failed';
+/**
+ * Whether `value` is one of the closed set of sign-in failure codes.
+ *
+ * @param value - anything, typically the `error` query parameter.
+ * @returns `true` when `value` is an {@link AuthErrorCode}.
+ *
+ * @example
+ * ```ts
+ * const code = isAuthErrorCode(raw) ? raw : DEFAULT_AUTH_ERROR_CODE;
+ * ```
+ *
+ * @stability stable
+ */
+export function isAuthErrorCode(value) {
+    return typeof value === 'string' && AUTH_ERROR_CODES.includes(value);
+}
+// =============================================================================
+// Tenancy and organizations
+// =============================================================================
+/**
+ * The deployment's tenancy modes (`TENANCY_MODE`): one organization everyone
+ * auto-joins (`single`) or one organization per customer (`multi`).
+ *
+ * @stability stable
+ */
+export const TENANCY_MODES = ['single', 'multi'];
+/**
+ * The org roles the platform ships and an organization administrator can hand
+ * out by default, highest first. A built-in list, no longer the set of
+ * assignable roles: an app or package registers more, and the API reports what
+ * a caller may assign at `GET /api/roles?scope=org`. `admin` is a SYSTEM role
+ * and is never assignable on a membership or an invitation.
+ *
+ * @stability stable
+ */
+export const BUILTIN_ORG_ROLES = ['org_admin', 'contributor', 'viewer'];
+/**
+ * The org roles an organization administrator can hand out, on a membership or
+ * an invitation.
+ *
+ * @deprecated Renamed {@link BUILTIN_ORG_ROLES}: the assignable set is open now
+ *   (read it from `GET /api/roles?scope=org`). Kept as an alias for one release.
+ * @stability stable
+ */
+export const ASSIGNABLE_ORG_ROLES = BUILTIN_ORG_ROLES;
+/**
+ * The shape of a role id: lower-case letters, digits, `_` and `-`, starting
+ * with a letter, 1 to 64 characters. Every built-in id matches, and so does an
+ * app's `coach`.
+ *
+ * @stability experimental
+ */
+export const ROLE_ID_PATTERN = /^[a-z][a-z0-9_-]{0,63}$/;
+/**
+ * The two scopes of a role: `system` (held in `user_roles`, operates the
+ * deployment) and `org` (held on a membership, operates one organization).
+ *
+ * @stability experimental
+ */
+export const ROLE_SCOPES = ['system', 'org'];
+/**
+ * The error `code` (and `details.reason`) of the 400 the API answers when a
+ * role is unknown, of the wrong scope, or registered as not assignable.
+ *
+ * @stability experimental
+ */
+export const ROLE_NOT_ASSIGNABLE_REASON = 'ROLE_NOT_ASSIGNABLE';
+/**
+ * An organization slug: 2 to 63 lower-case letters, digits or hyphens,
+ * starting and ending with a letter or digit.
+ *
+ * @stability stable
+ */
+export const ORG_SLUG_PATTERN = /^[a-z0-9](?:[a-z0-9-]{0,61})[a-z0-9]$/;
+/**
+ * The statuses of a membership: `active` (grants its role) or `suspended`
+ * (listed, grants nothing).
+ *
+ * @stability stable
+ */
+export const ORG_MEMBER_STATUSES = ['active', 'suspended'];
+/**
+ * The statuses of an organization invitation.
+ *
+ * @stability stable
+ */
+export const ORG_INVITE_STATUSES = ['pending', 'accepted', 'revoked', 'expired'];
+// =============================================================================
+// Personal access tokens
+// =============================================================================
+/**
+ * The units a personal access token's lifetime is expressed in.
+ *
+ * @stability stable
+ */
+export const PAT_DURATION_UNITS = ['minutes', 'days', 'months'];
+/**
+ * The bounds of a personal access token's `name` (characters, after trimming)
+ * and `durationValue` (in its unit).
+ *
+ * @stability stable
+ */
+export const PAT_LIMITS = {
+    /** The longest accepted token name. */
+    nameMaxLength: 100,
+    /** The smallest accepted duration value. */
+    durationMin: 1,
+    /** The largest accepted duration value. */
+    durationMax: 999,
+};
+// =============================================================================
+// Device authorization (RFC 8628)
+// =============================================================================
+/**
+ * The credential a device flow mints on the poll after approval: `session`
+ * (an access JWT plus a refresh token; the default) or `pat` (a personal
+ * access token).
+ *
+ * @stability stable
+ */
+export const DEVICE_TOKEN_TYPES = ['session', 'pat'];
+/**
+ * The human-readable user code of a device flow: `XXXX-XXXX`, upper-case
+ * letters and digits.
+ *
+ * @stability stable
+ */
+export const DEVICE_USER_CODE_PATTERN = /^[A-Z0-9]{4}-[A-Z0-9]{4}$/;
+/**
+ * The RFC 8628 section 3.5 / RFC 6749 section 5.2 error codes of
+ * `POST /api/auth/device/token`. A client branches on these, never on the
+ * description or the HTTP status.
+ *
+ * @stability stable
+ */
+export const DEVICE_TOKEN_ERROR_CODES = [
+    'authorization_pending',
+    'slow_down',
+    'expired_token',
+    'access_denied',
+    'invalid_grant',
+    'invalid_request',
+];
+/**
+ * The statuses a listed device session can have. `approved` means approved but
+ * not yet collected by the device; `expired` means the device collected its
+ * credential.
+ *
+ * @stability stable
+ */
+export const DEVICE_SESSION_STATUSES = ['pending', 'approved', 'denied', 'expired'];
+// =============================================================================
+// User extensions (PP-14.25)
+// =============================================================================
+/**
+ * The id of a user extension (`registerCurrentUserExtension`,
+ * `registerUserListExtension` of `@marinoscar/platform-api/identity`): the key
+ * of its contribution under `extensions` in `GET /api/auth/me` and in each row
+ * of `GET /api/users`. Lower-case, starting with a letter, 2 to 48 characters.
+ *
+ * @extensionPoint schema
+ * @stability experimental
+ */
+export const USER_EXTENSION_ID_PATTERN = /^[a-z][a-z0-9-]{1,47}$/;
+/**
+ * The bounds the API holds a user extension's contribution to. A contribution
+ * is JSON, nested at most {@link USER_EXTENSION_LIMITS.maxDepth} levels, with no
+ * key that names a secret; one over a byte bound is dropped (and logged), never
+ * truncated. The bounds are part of the contract so a client can rely on the
+ * size of `extensions`.
+ *
+ * - `currentUserBytes`: one extension's JSON in `GET /api/auth/me`.
+ * - `currentUserTotalBytes`: all extensions together in `GET /api/auth/me`.
+ * - `userListBytes`: one extension's JSON for one row of `GET /api/users`.
+ * - `userListTotalBytes`: all extensions together for one row.
+ * - `maxDepth`: the deepest nesting of a contribution (the extension's own object is level 1).
+ *
+ * @stability experimental
+ */
+export const USER_EXTENSION_LIMITS = {
+    /** One extension's JSON in `GET /api/auth/me`, in UTF-8 bytes. */
+    currentUserBytes: 4096,
+    /** All extensions together in `GET /api/auth/me`, in UTF-8 bytes. */
+    currentUserTotalBytes: 16384,
+    /** One extension's JSON for one row of `GET /api/users`, in UTF-8 bytes. */
+    userListBytes: 1024,
+    /** All extensions together for one row of `GET /api/users`, in UTF-8 bytes. */
+    userListTotalBytes: 4096,
+    /** The deepest nesting of a contribution; the extension's own object is level 1. */
+    maxDepth: 5,
+};
+//# sourceMappingURL=constants.js.map

package/dist/esm/identity/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/identity/constants.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,gFAAgF;AAChF,kFAAkF;AAClF,EAAE;AACF,2EAA2E;AAC3E,+EAA+E;AAC/E,yGAAyG;AACzG,2EAA2E;AAC3E,WAAW;AAEX,gFAAgF;AAChF,qCAAqC;AACrC,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,uBAAuB;IACvB,sBAAsB;IACtB,iBAAiB;CACT,CAAC;AASX;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkB,uBAAuB,CAAC;AAE9E;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,gBAAsC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC9F,CAAC;AAED,gFAAgF;AAChF,4BAA4B;AAC5B,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAU,CAAC;AAS1D;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,QAAQ,CAAU,CAAC;AAEjF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;AAmBtD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAW,yBAAyB,CAAC;AAEjE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAU,CAAC;AAStD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,qBAAqB,CAAC;AAEhE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAW,uCAAuC,CAAC;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAU,CAAC;AASpE;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,CAAU,CAAC;AAS1F,gFAAgF;AAChF,yBAAyB;AACzB,gFAAgF;AAEhF;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAU,CAAC;AASzE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,uCAAuC;IACvC,aAAa,EAAE,GAAG;IAClB,4CAA4C;IAC5C,WAAW,EAAE,CAAC;IACd,2CAA2C;IAC3C,WAAW,EAAE,GAAG;CACR,CAAC;AAEX,gFAAgF;AAChF,kCAAkC;AAClC,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,SAAS,EAAE,KAAK,CAAU,CAAC;AAS9D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAW,2BAA2B,CAAC;AAE5E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,uBAAuB;IACvB,WAAW;IACX,eAAe;IACf,eAAe;IACf,eAAe;IACf,iBAAiB;CACT,CAAC;AASX;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AAS7F,gFAAgF;AAChF,6BAA6B;AAC7B,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAW,wBAAwB,CAAC;AAE1E;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,kEAAkE;IAClE,gBAAgB,EAAE,IAAI;IACtB,qEAAqE;IACrE,qBAAqB,EAAE,KAAK;IAC5B,4EAA4E;IAC5E,aAAa,EAAE,IAAI;IACnB,+EAA+E;IAC/E,kBAAkB,EAAE,IAAI;IACxB,oFAAoF;IACpF,QAAQ,EAAE,CAAC;CACH,CAAC"}

package/dist/esm/identity/index.d.ts

@@ -0,0 +1,5 @@
+export { ASSIGNABLE_ORG_ROLES, AUTH_ERROR_CODES, BUILTIN_ORG_ROLES, DEFAULT_AUTH_ERROR_CODE, DEVICE_SESSION_STATUSES, DEVICE_TOKEN_ERROR_CODES, DEVICE_TOKEN_TYPES, DEVICE_USER_CODE_PATTERN, ORG_INVITE_STATUSES, ORG_MEMBER_STATUSES, ORG_SLUG_PATTERN, PAT_DURATION_UNITS, PAT_LIMITS, ROLE_ID_PATTERN, ROLE_NOT_ASSIGNABLE_REASON, ROLE_SCOPES, TENANCY_MODES, USER_EXTENSION_ID_PATTERN, USER_EXTENSION_LIMITS, isAuthErrorCode, } from './constants.js';
+export type { AssignableOrgRole, AuthErrorCode, BuiltinOrgRole, DeviceSessionStatus, DeviceTokenErrorCode, DeviceTokenTypeValue, OrgInviteStatus, OrgMemberStatus, PatDurationUnitValue, RoleScopeValue, TenancyModeValue, } from './constants.js';
+export { activeOrgSchema, authErrorCodeSchema, authMembershipSchema, authProviderSchema, authProvidersResponseSchema, authRoleSchema, createOrgInviteSchema, createOrganizationSchema, createPatSchema, currentUserSchema, deviceActivateResponseSchema, deviceAuthorizeRequestSchema, deviceAuthorizeResponseSchema, deviceClientInfoSchema, deviceCodeRequestSchema, deviceCodeResponseSchema, deviceSessionSchema, deviceSessionsResponseSchema, deviceTokenErrorSchema, deviceTokenRequestSchema, deviceTokenResponseSchema, deviceTokenTypeSchema, orgInviteListQuerySchema, orgInviteResponseSchema, orgMemberListQuerySchema, orgMemberResponseSchema, organizationListQuerySchema, organizationResponseSchema, patCreatedResponseSchema, patListItemSchema, renameOrganizationSchema, roleDescriptorSchema, roleIdSchema, roleListQuerySchema, roleListResponseSchema, switchOrgSchema, tokenResponseSchema, updateOrgMemberSchema, userExtensionsSchema, } from './schemas.js';
+export type { ActiveOrg, AssignableOrgRoleEnum, AuthErrorCodeEnum, DeviceSessionStatusEnum, DeviceTokenErrorCodeEnum, DeviceTokenTypeEnum, OrgInviteStatusEnum, OrgInviteStatusFilterEnum, OrgMemberStatusEnum, OrgMemberStatusFilterEnum, PatDurationUnitEnum, RoleScopeEnum, TenancyModeEnum, AuthMembership, AuthProvidersResponse, CreateOrgInviteRequest, CreateOrganizationRequest, CreatePatRequest, CurrentUser, DeviceActivateResponse, DeviceAuthorizeRequest, DeviceAuthorizeResponse, DeviceClientInfo, DeviceCodeRequest, DeviceCodeResponse, DeviceSession, DeviceSessionsResponse, DeviceTokenError, DeviceTokenRequest, DeviceTokenResponse, OrgInviteListQuery, OrgInviteResponse, OrgMemberListQuery, OrgMemberResponse, OrganizationListQuery, OrganizationResponse, PatCreatedResponse, PatListItem, RenameOrganizationRequest, RoleDescriptor, RoleListQuery, SwitchOrgRequest, TokenResponse, UpdateOrgMemberRequest, UserExtensions, } from './schemas.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/identity/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/identity/index.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,kBAAkB,EAClB,wBAAwB,EACxB,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,UAAU,EACV,eAAe,EACf,0BAA0B,EAC1B,WAAW,EACX,aAAa,EACb,yBAAyB,EACzB,qBAAqB,EACrB,eAAe,GAChB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,2BAA2B,EAC3B,cAAc,EACd,qBAAqB,EACrB,wBAAwB,EACxB,eAAe,EACf,iBAAiB,EACjB,4BAA4B,EAC5B,4BAA4B,EAC5B,6BAA6B,EAC7B,sBAAsB,EACtB,uBAAuB,EACvB,wBAAwB,EACxB,mBAAmB,EACnB,4BAA4B,EAC5B,sBAAsB,EACtB,wBAAwB,EACxB,yBAAyB,EACzB,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,EACvB,2BAA2B,EAC3B,0BAA0B,EAC1B,wBAAwB,EACxB,iBAAiB,EACjB,wBAAwB,EACxB,oBAAoB,EACpB,YAAY,EACZ,mBAAmB,EACnB,sBAAsB,EACtB,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,SAAS,EACT,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,EACvB,wBAAwB,EACxB,mBAAmB,EACnB,mBAAmB,EACnB,yBAAyB,EACzB,mBAAmB,EACnB,yBAAyB,EACzB,mBAAmB,EACnB,aAAa,EACb,eAAe,EACf,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,yBAAyB,EACzB,gBAAgB,EAChB,WAAW,EACX,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,sBAAsB,EACtB,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,WAAW,EACX,yBAAyB,EACzB,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,sBAAsB,EACtB,cAAc,GACf,MAAM,cAAc,CAAC"}

package/dist/esm/identity/index.js

@@ -0,0 +1,10 @@
+// `@marinoscar/platform-contract/identity`: the identity slice's wire shapes,
+// shared by `@marinoscar/platform-api/identity` (its request DTOs wrap these
+// schemas) and the web app (types and the sign-in error codes) (issue #727).
+// Documented in ./README.md. Explicit named exports only.
+//
+// constants.ts is zod-free; a consumer that imports only the constants and the
+// types (the web app) never bundles schemas.ts or zod (`"sideEffects": false`).
+export { ASSIGNABLE_ORG_ROLES, AUTH_ERROR_CODES, BUILTIN_ORG_ROLES, DEFAULT_AUTH_ERROR_CODE, DEVICE_SESSION_STATUSES, DEVICE_TOKEN_ERROR_CODES, DEVICE_TOKEN_TYPES, DEVICE_USER_CODE_PATTERN, ORG_INVITE_STATUSES, ORG_MEMBER_STATUSES, ORG_SLUG_PATTERN, PAT_DURATION_UNITS, PAT_LIMITS, ROLE_ID_PATTERN, ROLE_NOT_ASSIGNABLE_REASON, ROLE_SCOPES, TENANCY_MODES, USER_EXTENSION_ID_PATTERN, USER_EXTENSION_LIMITS, isAuthErrorCode, } from './constants.js';
+export { activeOrgSchema, authErrorCodeSchema, authMembershipSchema, authProviderSchema, authProvidersResponseSchema, authRoleSchema, createOrgInviteSchema, createOrganizationSchema, createPatSchema, currentUserSchema, deviceActivateResponseSchema, deviceAuthorizeRequestSchema, deviceAuthorizeResponseSchema, deviceClientInfoSchema, deviceCodeRequestSchema, deviceCodeResponseSchema, deviceSessionSchema, deviceSessionsResponseSchema, deviceTokenErrorSchema, deviceTokenRequestSchema, deviceTokenResponseSchema, deviceTokenTypeSchema, orgInviteListQuerySchema, orgInviteResponseSchema, orgMemberListQuerySchema, orgMemberResponseSchema, organizationListQuerySchema, organizationResponseSchema, patCreatedResponseSchema, patListItemSchema, renameOrganizationSchema, roleDescriptorSchema, roleIdSchema, roleListQuerySchema, roleListResponseSchema, switchOrgSchema, tokenResponseSchema, updateOrgMemberSchema, userExtensionsSchema, } from './schemas.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/identity/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/identity/index.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAC7E,0DAA0D;AAC1D,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAEhF,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,kBAAkB,EAClB,wBAAwB,EACxB,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,UAAU,EACV,eAAe,EACf,0BAA0B,EAC1B,WAAW,EACX,aAAa,EACb,yBAAyB,EACzB,qBAAqB,EACrB,eAAe,GAChB,MAAM,gBAAgB,CAAC;AAcxB,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,2BAA2B,EAC3B,cAAc,EACd,qBAAqB,EACrB,wBAAwB,EACxB,eAAe,EACf,iBAAiB,EACjB,4BAA4B,EAC5B,4BAA4B,EAC5B,6BAA6B,EAC7B,sBAAsB,EACtB,uBAAuB,EACvB,wBAAwB,EACxB,mBAAmB,EACnB,4BAA4B,EAC5B,sBAAsB,EACtB,wBAAwB,EACxB,yBAAyB,EACzB,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,EACvB,2BAA2B,EAC3B,0BAA0B,EAC1B,wBAAwB,EACxB,iBAAiB,EACjB,wBAAwB,EACxB,oBAAoB,EACpB,YAAY,EACZ,mBAAmB,EACnB,sBAAsB,EACtB,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,cAAc,CAAC"}