@northern.tech/store 0.1.3 → 0.2.0

package/dist/store.mjs

@@ -4,23 +4,23 @@ import {
   getConfiguredStore,
   sessionReducer,
   store
-} from "./chunk-XYVPYFSM.mjs";
-import "./chunk-IPPIKGIB.mjs";
-import "./chunk-BJSH2G7W.mjs";
-import "./chunk-TD45YTYK.mjs";
-import "./chunk-7E7KJHY3.mjs";
-import "./chunk-RH6ONMG7.mjs";
+} from "./chunk-RWYS5MKN.mjs";
+import "./chunk-ENLZPHTQ.mjs";
+import "./chunk-EFHEROXZ.mjs";
+import "./chunk-WS3YYLTJ.mjs";
+import "./chunk-NCI6JV5R.mjs";
+import "./chunk-ZZ6VIQ3U.mjs";
 import "./chunk-M4U5R7A4.mjs";
-import "./chunk-6667TCAJ.mjs";
-import "./chunk-HRWZJQMH.mjs";
-import "./chunk-F37LUTBX.mjs";
-import "./chunk-HXPYJ6QN.mjs";
-import "./chunk-G32LAKW4.mjs";
-import "./chunk-ZNST5R6O.mjs";
+import "./chunk-EM2HUGUY.mjs";
+import "./chunk-X65NMDPS.mjs";
+import "./chunk-OWHFMKTA.mjs";
+import "./chunk-4C6IY46N.mjs";
+import "./chunk-U6YTBIDT.mjs";
+import "./chunk-MQIKQKSW.mjs";
 import "./chunk-G4FGNSV3.mjs";
 import "./chunk-IU4OXOPA.mjs";
 import "./chunk-BOSBROA3.mjs";
-import "./chunk-G3I53JGW.mjs";
+import "./chunk-OGAMVFPS.mjs";
 import "./chunk-XWBD7VOK.mjs";
 export {
   commonErrorFallback,

package/dist/storehooks.d.mts

@@ -1,4 +1,6 @@
 declare const parseEnvironmentInfo: () => (dispatch: any, getState: any) => Promise<[any, any, any, any, any, any, any]>;
-declare const useAppInit: (userId: any) => void;
+declare const useAppInit: (userId: any) => {
+    coreInitDone: boolean;
+};
 
 export { parseEnvironmentInfo, useAppInit };

package/dist/storehooks.d.ts

@@ -1,4 +1,6 @@
 declare const parseEnvironmentInfo: () => (dispatch: any, getState: any) => Promise<[any, any, any, any, any, any, any]>;
-declare const useAppInit: (userId: any) => void;
+declare const useAppInit: (userId: any) => {
+    coreInitDone: boolean;
+};
 
 export { parseEnvironmentInfo, useAppInit };

package/dist/storehooks.js

@@ -793,6 +793,7 @@ var emptyUiPermissions = Object.freeze({
   deployments: [],
   groups: Object.freeze({}),
   releases: Object.freeze({}),
+  tenantManagement: [],
   userManagement: []
 });
 var emptyRole = Object.freeze({
@@ -1040,6 +1041,13 @@ var SSO_TYPES = {
     configDetails: [{ key: "startURL", label: "Start Url", getValue: getOidcStartUrl }]
   }
 };
+var AUDIT_LOGS_TYPES = [
+  { title: "Artifact", queryParameter: "object_type", value: "artifact" },
+  { title: "Deployment", queryParameter: "object_deployment_name", value: "deployment" },
+  { title: "Device", queryParameter: "object_id", value: "device" },
+  { title: "User", queryParameter: "object_id", value: "user" }
+];
+var SP_AUDIT_LOGS_TYPES = [AUDIT_LOGS_TYPES[3], { title: "Tenant", queryParameter: "object_id", value: "tenant" }];
 var emptyWebhook = {
   description: "",
   enabled: true,
@@ -1088,10 +1096,12 @@ var permissionSetIds = {
   DeployToDevices: "DeployToDevices",
   ManageDevices: "ManageDevices",
   ManageReleases: "ManageReleases",
+  ManageTenants: "ManageTenants",
   ManageUsers: "ManageUsers",
   ReadAuditLogs: "ReadAuditLogs",
   ReadDevices: "ReadDevices",
   ReadReleases: "ReadReleases",
+  ReadTenants: "ReadTenants",
   ReadUsers: "ReadUsers",
   SuperUser: "SuperUser",
   UploadArtifacts: "UploadArtifacts"
@@ -1130,6 +1140,7 @@ var uiPermissionsById = {
     permissionSets: {
       groups: permissionSetIds.ManageDevices,
       releases: permissionSetIds.ManageReleases,
+      tenantManagement: permissionSetIds.ManageTenants,
       userManagement: permissionSetIds.ManageUsers
     },
     title: "Manage",
@@ -1143,6 +1154,7 @@ var uiPermissionsById = {
       auditlog: permissionSetIds.ReadAuditLogs,
       groups: permissionSetIds.ReadDevices,
       releases: permissionSetIds.ReadReleases,
+      tenantManagement: permissionSetIds.ReadTenants,
       userManagement: permissionSetIds.ReadUsers
     },
     title: "Read",
@@ -1167,6 +1179,7 @@ var uiPermissionsByArea = {
   auditlog: {
     endpoints: [{ path: /\/(auditlog)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.read] }],
     explanation: "Granting access to the audit log will allow tracing changes to devices, releases and user accounts, as well as providing information about deployments.",
+    key: "auditlog",
     uiPermissions: [uiPermissionsById.read],
     title: "System audit log"
   },
@@ -1177,6 +1190,7 @@ var uiPermissionsByArea = {
       { path: /\/(deployments\/config)/i, types: [PermissionTypes.Get, PermissionTypes.Put], uiPermissions: [uiPermissionsById.manage] }
     ],
     explanation: "Providing deploy permissions will allow deployments to be created using the releases and devices a user has access to.",
+    key: "deployments",
     uiPermissions: [uiPermissionsById.read, uiPermissionsById.deploy],
     title: "Deployments"
   },
@@ -1192,6 +1206,7 @@ var uiPermissionsByArea = {
       { path: /\/(deviceconnect\/devices)/i, types: [PermissionTypes.Get, PermissionTypes.Post], uiPermissions: [uiPermissionsById.connect] }
     ],
     explanation: "Device group management permissions control the degree to which devices in a group can be accessed and moved to other groups.",
+    key: "groups",
     scope: scopedPermissionAreas.groups.scopeType,
     uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage, uiPermissionsById.deploy, uiPermissionsById.configure, uiPermissionsById.connect],
     title: "Group Management"
@@ -1211,16 +1226,29 @@ var uiPermissionsByArea = {
       }
     ],
     explanation: "Release permissions can be granted to allow artifact & release modifications, as well as the creation of new releases.",
+    key: "releases",
     scope: "ReleaseTags",
     uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage, uiPermissionsById.upload],
     title: "Release Management"
   },
+  tenantManagement: {
+    endpoints: [
+      { path: /\/(tenantadm\/tenants)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.read] },
+      { path: /\/(tenantadm\/tenants)/i, types: [PermissionTypes.Post, PermissionTypes.Put], uiPermissions: [uiPermissionsById.manage] },
+      { path: /\/(users\/exists)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.manage] }
+    ],
+    explanation: "Tenant management permissions allow listing, creating and modifying child tenants",
+    key: "tenantManagement",
+    uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage],
+    title: "Tenant Management"
+  },
   userManagement: {
     endpoints: [
       { path: /\/(useradm)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.read] },
       { path: /\/(useradm)/i, types: [PermissionTypes.Post], uiPermissions: [uiPermissionsById.manage] }
     ],
     explanation: "User management permissions should be granted carefully, as these allow privilege increases for any users managed by a user with user management permissions",
+    key: "userManagement",
     uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage],
     title: "User Management"
   }
@@ -1284,6 +1312,30 @@ var rolesById = Object.freeze({
     })
   }
 });
+var serviceProviderRolesById = {
+  admin: {
+    name: "Admin",
+    value: staticRolesByName.admin,
+    description: "Full access",
+    permissions: [],
+    uiPermissions: __spreadProps(__spreadValues({}, emptyUiPermissions), {
+      auditlog: uiPermissionsByArea.auditlog.uiPermissions.map(permissionMapper),
+      userManagement: uiPermissionsByArea.userManagement.uiPermissions.map(permissionMapper),
+      tenantManagement: uiPermissionsByArea.tenantManagement.uiPermissions.map(permissionMapper)
+    })
+  },
+  readOnly: {
+    name: "Read access",
+    value: staticRolesByName.admin,
+    description: "This role can see all linked organizations but cannot make any changes",
+    permissions: [],
+    uiPermissions: __spreadProps(__spreadValues({}, emptyUiPermissions), {
+      auditlog: [uiPermissionsById.read.value],
+      userManagement: [uiPermissionsById.read.value],
+      tenantManagement: [uiPermissionsById.read.value]
+    })
+  }
+};
 var defaultPermissionSets = {
   [permissionSetIds.Basic]: {
     name: permissionSetIds.Basic,
@@ -1314,6 +1366,18 @@ var defaultPermissionSets = {
       releases: { [ALL_RELEASES]: [uiPermissionsById.read.value] }
     }
   },
+  [permissionSetIds.ReadTenants]: {
+    name: permissionSetIds.ReadTenants,
+    result: {
+      tenantManagement: [uiPermissionsById.read.value]
+    }
+  },
+  [permissionSetIds.ManageTenants]: {
+    name: permissionSetIds.ManageTenants,
+    result: {
+      tenantManagement: [uiPermissionsById.manage.value]
+    }
+  },
   [permissionSetIds.ReadUsers]: {
     name: permissionSetIds.ReadUsers,
     result: {
@@ -1890,16 +1954,16 @@ var initialState6 = {
     brand: ""
   },
   intentId: null,
+  tenantList: __spreadProps(__spreadValues({}, TENANT_LIST_DEFAULT), {
+    total: 0,
+    tenants: [],
+    selectedTenant: null,
+    sort: {
+      direction: SORTING_OPTIONS.desc,
+      key: "name"
+    }
+  }),
   organization: {
-    tenantList: __spreadProps(__spreadValues({}, TENANT_LIST_DEFAULT), {
-      total: 0,
-      tenants: [],
-      selectedTenant: null,
-      sort: {
-        direction: SORTING_OPTIONS.desc,
-        key: "name"
-      }
-    })
     // id, name, status, tenant_token, plan
   },
   auditlog: {
@@ -1945,12 +2009,10 @@ var organizationSlice = (0, import_toolkit6.createSlice)({
       state.intentId = action.payload;
     },
     setOrganization: (state, action) => {
-      state.organization = __spreadProps(__spreadValues(__spreadValues({}, state.organization), action.payload), {
-        tenantList: __spreadValues(__spreadValues({}, state.organization.tenantList), action.payload.tenantList)
-      });
+      state.organization = __spreadValues(__spreadValues({}, state.organization), action.payload);
     },
     setTenantListState: (state, action) => {
-      state.organization.tenantList = action.payload;
+      state.tenantList = action.payload;
     },
     receiveExternalDeviceIntegrations: (state, action) => {
       state.externalDeviceIntegrations = action.payload;
@@ -2411,7 +2473,7 @@ var getExternalIntegrations = (state) => state.organization.externalDeviceIntegr
 var getAuditlogState = (state) => state.organization.auditlog.selectionState;
 var getAuditLog = (state) => state.organization.auditlog.events;
 var getAuditLogSelectionState = (state) => state.organization.auditlog.selectionState;
-var getTenantsList = (state) => state.organization.organization.tenantList;
+var getTenantsList = (state) => state.organization.tenantList;
 var getWebhookEvents = (state) => state.organization.webhooks.events;
 var getWebhookEventTotal = (state) => state.organization.webhooks.eventTotal;
 var getDeviceTwinIntegrations = (0, import_toolkit12.createSelector)(
@@ -2839,6 +2901,22 @@ var getAuditlogDevice = (0, import_toolkit15.createSelector)([getAuditLogEntry,
   }
   return __spreadValues(__spreadValues({}, auditlogDevice), devicesById[auditlogDevice.id]);
 });
+var getRelevantRoles = (0, import_toolkit15.createSelector)([getOrganization, getRolesList], ({ service_provider }, roles) => {
+  if (service_provider) {
+    return roles.reduce((accu, role) => {
+      if (rolesById[role.id]) {
+        return accu;
+      }
+      accu.push(role);
+      return accu;
+    }, Object.values(serviceProviderRolesById));
+  }
+  return Object.keys(rolesById).reverse().reduce((accu, key) => {
+    const index = accu.findIndex(({ id }) => id === key);
+    accu = [accu[index], ...accu.filter((item, itemIndex) => index !== itemIndex)];
+    return accu;
+  }, roles);
+});
 
 // src/api/general-api.ts
 var import_axios = __toESM(require("axios"));
@@ -4571,7 +4649,7 @@ var tenantListRetrieval = (config) => __async(void 0, null, function* () {
   const params = new URLSearchParams({ page, per_page: perPage }).toString();
   const tenantList = yield general_api_default.get(`${tenantadmApiUrlv2}/tenants?${params}`);
   const totalCount = tenantList.headers[headerNames.total] || TENANT_LIST_DEFAULT.perPage;
-  return [tenantList.data, totalCount];
+  return [tenantList.data, Number(totalCount)];
 });
 var getTenants = (0, import_toolkit22.createAsyncThunk)(`${sliceName6}/getTenants`, (_0, _1) => __async(void 0, [_0, _1], function* (_, { dispatch, getState }) {
   const currentState = getTenantsList(getState());
@@ -5742,6 +5820,7 @@ var maybeAddOnboardingTasks = ({ devicesByStatus, dispatch, onboardingState, tas
 };
 var useAppInit = (userId) => {
   const dispatch = (0, import_react_redux.useDispatch)();
+  const [coreInitDone, setCoreInitDone] = (0, import_react3.useState)(false);
   const isEnterprise = (0, import_react_redux.useSelector)(getIsEnterprise);
   const { hasMultitenancy, isHosted } = (0, import_react_redux.useSelector)(getFeatures);
   const devicesByStatus = (0, import_react_redux.useSelector)(getDevicesByStatus);
@@ -5751,12 +5830,27 @@ var useAppInit = (userId) => {
   const { interval, intervalUnit } = (0, import_react_redux.useSelector)(getOfflineThresholdSettings);
   const { id_attribute } = (0, import_react_redux.useSelector)(getGlobalSettings);
   const { identityAttributes } = (0, import_react_redux.useSelector)(getSortedFilteringAttributes);
-  const initRunning = (0, import_react3.useRef)(false);
-  const retrieveAppData = (0, import_react3.useCallback)(() => {
+  const isServiceProvider = (0, import_react_redux.useSelector)(getIsServiceProvider);
+  const coreInitRunning = (0, import_react3.useRef)(false);
+  const fullInitRunning = (0, import_react3.useRef)(false);
+  const retrieveCoreData = (0, import_react3.useCallback)(() => {
     let tasks = [
       dispatch(parseEnvironmentInfo()),
       dispatch(getUserSettings2()),
       dispatch(getGlobalSettings2()),
+      dispatch(setFirstLoginAfterSignup2(stringToBoolean(cookies6.get("firstLoginAfterSignup"))))
+    ];
+    const multitenancy = hasMultitenancy || isHosted || isEnterprise;
+    if (multitenancy) {
+      tasks.push(dispatch(getUserOrganization()));
+    }
+    return Promise.all(tasks);
+  }, [dispatch, hasMultitenancy, isHosted, isEnterprise]);
+  const retrieveAppData = (0, import_react3.useCallback)(() => {
+    if (isServiceProvider) {
+      return Promise.resolve(dispatch(getRoles()));
+    }
+    return Promise.all([
       dispatch(getDeviceAttributes()),
       dispatch(getDeploymentsByStatus2({ status: DEPLOYMENT_STATES.finished, shouldSelect: false })),
       dispatch(getDeploymentsByStatus2({ status: DEPLOYMENT_STATES.inprogress })),
@@ -5769,15 +5863,9 @@ var useAppInit = (userId) => {
       dispatch(getIntegrations()),
       dispatch(getReleases()),
       dispatch(getDeviceLimit2()),
-      dispatch(getRoles()),
-      dispatch(setFirstLoginAfterSignup2(stringToBoolean(cookies6.get("firstLoginAfterSignup"))))
-    ];
-    const multitenancy = hasMultitenancy || isHosted || isEnterprise;
-    if (multitenancy) {
-      tasks.push(dispatch(getUserOrganization()));
-    }
-    return Promise.all(tasks);
-  }, [dispatch, hasMultitenancy, isHosted, isEnterprise]);
+      dispatch(getRoles())
+    ]);
+  }, [dispatch, isServiceProvider]);
   const interpretAppData = (0, import_react3.useCallback)(() => {
     let settings = {};
     if (cookies6.get("_ga") && typeof hasTrackingEnabled === "undefined") {
@@ -5829,12 +5917,20 @@ var useAppInit = (userId) => {
     [dispatch, retrieveAppData, interpretAppData]
   );
   (0, import_react3.useEffect)(() => {
-    if (!userId || initRunning.current) {
+    if (!userId || coreInitRunning.current) {
+      return;
+    }
+    coreInitRunning.current = true;
+    retrieveCoreData().then(() => setCoreInitDone(true));
+  }, [userId, retrieveCoreData]);
+  (0, import_react3.useEffect)(() => {
+    if (fullInitRunning.current || !coreInitDone) {
       return;
     }
-    initRunning.current = true;
+    fullInitRunning.current = true;
     initializeAppData();
-  }, [userId, initializeAppData]);
+  }, [initializeAppData, coreInitDone]);
+  return { coreInitDone };
 };
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {