@northern.tech/store 0.1.3 → 0.2.1

package/dist/commonSelectors.js

@@ -1,40 +1,10 @@
 "use strict";
 var __create = Object.create;
 var __defProp = Object.defineProperty;
-var __defProps = Object.defineProperties;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropDescs = Object.getOwnPropertyDescriptors;
 var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getOwnPropSymbols = Object.getOwnPropertySymbols;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __propIsEnum = Object.prototype.propertyIsEnumerable;
-var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
-var __spreadValues = (a, b) => {
-  for (var prop in b || (b = {}))
-    if (__hasOwnProp.call(b, prop))
-      __defNormalProp(a, prop, b[prop]);
-  if (__getOwnPropSymbols)
-    for (var prop of __getOwnPropSymbols(b)) {
-      if (__propIsEnum.call(b, prop))
-        __defNormalProp(a, prop, b[prop]);
-    }
-  return a;
-};
-var __spreadProps = (a, b) => __defProps(a, __getOwnPropDescs(b));
-var __restKey = (key) => typeof key === "symbol" ? key : key + "";
-var __objRest = (source, exclude) => {
-  var target = {};
-  for (var prop in source)
-    if (__hasOwnProp.call(source, prop) && exclude.indexOf(prop) < 0)
-      target[prop] = source[prop];
-  if (source != null && __getOwnPropSymbols)
-    for (var prop of __getOwnPropSymbols(source)) {
-      if (exclude.indexOf(prop) < 0 && __propIsEnum.call(source, prop))
-        target[prop] = source[prop];
-    }
-  return target;
-};
 var __export = (target, all) => {
   for (var name in all)
     __defProp(target, name, { get: all[name], enumerable: true });
@@ -72,6 +42,7 @@ __export(commonSelectors_exports, {
   getIsEnterprise: () => getIsEnterprise,
   getMappedDevicesList: () => getMappedDevicesList,
   getOnboardingState: () => getOnboardingState,
+  getRelevantRoles: () => getRelevantRoles,
   getSearchEndpoint: () => getSearchEndpoint,
   getSelectedDeploymentData: () => getSelectedDeploymentData,
   getTenantCapabilities: () => getTenantCapabilities,
@@ -99,7 +70,7 @@ var chartTypes = {
 };
 var emptyChartSelection = { software: "", group: "", chartType: chartTypes.bar.key, attribute: "artifact_name" };
 var defaultReportType = "distribution";
-var defaultReports = [__spreadProps(__spreadValues({}, emptyChartSelection), { group: null, attribute: "artifact_name", type: defaultReportType })];
+var defaultReports = [{ ...emptyChartSelection, group: null, attribute: "artifact_name", type: defaultReportType }];
 var PLANS = {
   os: {
     id: "os",
@@ -226,10 +197,7 @@ var getSearchState = (state) => state.app.searchState;
 var getSearchedDevices = (0, import_toolkit.createSelector)([getSearchState], ({ deviceIds }) => deviceIds);
 var getVersionInformation = (0, import_toolkit.createSelector)(
   [getFullVersionInformation, getFeatures],
-  (_a, { isHosted }) => {
-    var _b2 = _a, { Integration } = _b2, remainder = __objRest(_b2, ["Integration"]);
-    return isHosted && Integration !== "next" ? remainder : __spreadProps(__spreadValues({}, remainder), { Integration });
-  }
+  ({ Integration, ...remainder }, { isHosted }) => isHosted && Integration !== "next" ? remainder : { ...remainder, Integration }
 );
 var getIsPreview = (0, import_toolkit.createSelector)([getFullVersionInformation], ({ Integration }) => (0, import_helpers.versionCompare)(Integration, "next") > -1);
 
@@ -442,13 +410,14 @@ var emptyUiPermissions = Object.freeze({
   deployments: [],
   groups: Object.freeze({}),
   releases: Object.freeze({}),
+  tenantManagement: [],
   userManagement: []
 });
 var emptyRole = Object.freeze({
   name: void 0,
   description: "",
   permissions: [],
-  uiPermissions: Object.freeze(__spreadValues({}, emptyUiPermissions))
+  uiPermissions: Object.freeze({ ...emptyUiPermissions })
 });
 
 // src/deploymentsSlice/selectors.ts
@@ -520,6 +489,13 @@ var auditLogsApiUrl = `${apiUrl.v1}/auditlogs`;
 var tenantadmApiUrlv1 = `${apiUrl.v1}/tenantadm`;
 var tenantadmApiUrlv2 = `${apiUrl.v2}/tenantadm`;
 var ssoIdpApiUrlv1 = `${apiUrl.v1}/useradm/sso/idp/metadata`;
+var AUDIT_LOGS_TYPES = [
+  { title: "Artifact", queryParameter: "object_type", value: "artifact" },
+  { title: "Deployment", queryParameter: "object_deployment_name", value: "deployment" },
+  { title: "Device", queryParameter: "object_id", value: "device" },
+  { title: "User", queryParameter: "object_id", value: "user" }
+];
+var SP_AUDIT_LOGS_TYPES = [AUDIT_LOGS_TYPES[3], { title: "Tenant", queryParameter: "object_id", value: "tenant" }];
 var emptyWebhook = {
   description: "",
   enabled: true,
@@ -563,10 +539,12 @@ var permissionSetIds = {
   DeployToDevices: "DeployToDevices",
   ManageDevices: "ManageDevices",
   ManageReleases: "ManageReleases",
+  ManageTenants: "ManageTenants",
   ManageUsers: "ManageUsers",
   ReadAuditLogs: "ReadAuditLogs",
   ReadDevices: "ReadDevices",
   ReadReleases: "ReadReleases",
+  ReadTenants: "ReadTenants",
   ReadUsers: "ReadUsers",
   SuperUser: "SuperUser",
   UploadArtifacts: "UploadArtifacts"
@@ -605,6 +583,7 @@ var uiPermissionsById = {
     permissionSets: {
       groups: permissionSetIds.ManageDevices,
       releases: permissionSetIds.ManageReleases,
+      tenantManagement: permissionSetIds.ManageTenants,
       userManagement: permissionSetIds.ManageUsers
     },
     title: "Manage",
@@ -618,6 +597,7 @@ var uiPermissionsById = {
       auditlog: permissionSetIds.ReadAuditLogs,
       groups: permissionSetIds.ReadDevices,
       releases: permissionSetIds.ReadReleases,
+      tenantManagement: permissionSetIds.ReadTenants,
       userManagement: permissionSetIds.ReadUsers
     },
     title: "Read",
@@ -642,6 +622,7 @@ var uiPermissionsByArea = {
   auditlog: {
     endpoints: [{ path: /\/(auditlog)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.read] }],
     explanation: "Granting access to the audit log will allow tracing changes to devices, releases and user accounts, as well as providing information about deployments.",
+    key: "auditlog",
     uiPermissions: [uiPermissionsById.read],
     title: "System audit log"
   },
@@ -652,6 +633,7 @@ var uiPermissionsByArea = {
       { path: /\/(deployments\/config)/i, types: [PermissionTypes.Get, PermissionTypes.Put], uiPermissions: [uiPermissionsById.manage] }
     ],
     explanation: "Providing deploy permissions will allow deployments to be created using the releases and devices a user has access to.",
+    key: "deployments",
     uiPermissions: [uiPermissionsById.read, uiPermissionsById.deploy],
     title: "Deployments"
   },
@@ -667,6 +649,7 @@ var uiPermissionsByArea = {
       { path: /\/(deviceconnect\/devices)/i, types: [PermissionTypes.Get, PermissionTypes.Post], uiPermissions: [uiPermissionsById.connect] }
     ],
     explanation: "Device group management permissions control the degree to which devices in a group can be accessed and moved to other groups.",
+    key: "groups",
     scope: scopedPermissionAreas.groups.scopeType,
     uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage, uiPermissionsById.deploy, uiPermissionsById.configure, uiPermissionsById.connect],
     title: "Group Management"
@@ -686,16 +669,29 @@ var uiPermissionsByArea = {
       }
     ],
     explanation: "Release permissions can be granted to allow artifact & release modifications, as well as the creation of new releases.",
+    key: "releases",
     scope: "ReleaseTags",
     uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage, uiPermissionsById.upload],
     title: "Release Management"
   },
+  tenantManagement: {
+    endpoints: [
+      { path: /\/(tenantadm\/tenants)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.read] },
+      { path: /\/(tenantadm\/tenants)/i, types: [PermissionTypes.Post, PermissionTypes.Put], uiPermissions: [uiPermissionsById.manage] },
+      { path: /\/(users\/exists)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.manage] }
+    ],
+    explanation: "Tenant management permissions allow listing, creating and modifying child tenants",
+    key: "tenantManagement",
+    uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage],
+    title: "Tenant Management"
+  },
   userManagement: {
     endpoints: [
       { path: /\/(useradm)/i, types: [PermissionTypes.Get], uiPermissions: [uiPermissionsById.read] },
       { path: /\/(useradm)/i, types: [PermissionTypes.Post], uiPermissions: [uiPermissionsById.manage] }
     ],
     explanation: "User management permissions should be granted carefully, as these allow privilege increases for any users managed by a user with user management permissions",
+    key: "userManagement",
     uiPermissions: [uiPermissionsById.read, uiPermissionsById.manage],
     title: "User Management"
   }
@@ -708,56 +704,87 @@ var rolesById = Object.freeze({
     description: "Full access",
     permissions: [],
     // permissions refers to the values returned from the backend
-    uiPermissions: __spreadProps(__spreadValues({}, emptyUiPermissions), {
+    uiPermissions: {
+      ...emptyUiPermissions,
       auditlog: uiPermissionsByArea.auditlog.uiPermissions.map(permissionMapper),
       deployments: uiPermissionsByArea.deployments.uiPermissions.map(permissionMapper),
       groups: { [ALL_DEVICES]: uiPermissionsByArea.groups.uiPermissions.map(permissionMapper) },
       releases: { [ALL_RELEASES]: uiPermissionsByArea.releases.uiPermissions.map(permissionMapper) },
       userManagement: uiPermissionsByArea.userManagement.uiPermissions.map(permissionMapper)
-    })
+    }
   },
   [staticRolesByName.readOnly]: {
     name: "Read Access",
     value: staticRolesByName.readOnly,
     description: "",
     permissions: [],
-    uiPermissions: __spreadProps(__spreadValues({}, emptyUiPermissions), {
+    uiPermissions: {
+      ...emptyUiPermissions,
       deployments: [uiPermissionsById.read.value],
       groups: { [ALL_DEVICES]: [uiPermissionsById.read.value] },
       releases: { [ALL_RELEASES]: [uiPermissionsById.read.value] },
       userManagement: [uiPermissionsById.read.value]
-    })
+    }
   },
   [staticRolesByName.ci]: {
     name: "Releases Manager",
     value: staticRolesByName.ci,
     description: "",
     permissions: [],
-    uiPermissions: __spreadProps(__spreadValues({}, emptyUiPermissions), {
+    uiPermissions: {
+      ...emptyUiPermissions,
       releases: { [ALL_RELEASES]: uiPermissionsByArea.releases.uiPermissions.map(permissionMapper) }
-    })
+    }
   },
   [staticRolesByName.deploymentsManager]: {
     name: "Deployments Manager",
     value: staticRolesByName.deploymentsManager,
     description: "",
     permissions: [],
-    uiPermissions: __spreadProps(__spreadValues({}, emptyUiPermissions), {
+    uiPermissions: {
+      ...emptyUiPermissions,
       deployments: uiPermissionsByArea.deployments.uiPermissions.map(permissionMapper),
       groups: { [ALL_DEVICES]: [uiPermissionsById.deploy.value, uiPermissionsById.read.value] },
       releases: { [ALL_RELEASES]: [uiPermissionsById.read.value] }
-    })
+    }
   },
   [staticRolesByName.terminalAccess]: {
     name: "Troubleshooting",
     value: staticRolesByName.terminalAccess,
     description: "Access to the troubleshooting features: Remote Terminal, File Transfer, Port Forwarding",
     permissions: [],
-    uiPermissions: __spreadProps(__spreadValues({}, emptyUiPermissions), {
+    uiPermissions: {
+      ...emptyUiPermissions,
       groups: { [ALL_DEVICES]: [uiPermissionsById.connect.value] }
-    })
+    }
   }
 });
+var serviceProviderRolesById = {
+  admin: {
+    name: "Admin",
+    value: staticRolesByName.admin,
+    description: "Full access",
+    permissions: [],
+    uiPermissions: {
+      ...emptyUiPermissions,
+      auditlog: uiPermissionsByArea.auditlog.uiPermissions.map(permissionMapper),
+      userManagement: uiPermissionsByArea.userManagement.uiPermissions.map(permissionMapper),
+      tenantManagement: uiPermissionsByArea.tenantManagement.uiPermissions.map(permissionMapper)
+    }
+  },
+  readOnly: {
+    name: "Read access",
+    value: staticRolesByName.admin,
+    description: "This role can see all linked organizations but cannot make any changes",
+    permissions: [],
+    uiPermissions: {
+      ...emptyUiPermissions,
+      auditlog: [uiPermissionsById.read.value],
+      userManagement: [uiPermissionsById.read.value],
+      tenantManagement: [uiPermissionsById.read.value]
+    }
+  }
+};
 var defaultPermissionSets = {
   [permissionSetIds.Basic]: {
     name: permissionSetIds.Basic,
@@ -768,7 +795,9 @@ var defaultPermissionSets = {
   },
   [permissionSetIds.SuperUser]: {
     name: permissionSetIds.SuperUser,
-    result: __spreadValues({}, rolesById[staticRolesByName.admin].uiPermissions)
+    result: {
+      ...rolesById[staticRolesByName.admin].uiPermissions
+    }
   },
   [permissionSetIds.ManageUsers]: {
     name: permissionSetIds.ManageUsers,
@@ -788,6 +817,18 @@ var defaultPermissionSets = {
       releases: { [ALL_RELEASES]: [uiPermissionsById.read.value] }
     }
   },
+  [permissionSetIds.ReadTenants]: {
+    name: permissionSetIds.ReadTenants,
+    result: {
+      tenantManagement: [uiPermissionsById.read.value]
+    }
+  },
+  [permissionSetIds.ManageTenants]: {
+    name: permissionSetIds.ManageTenants,
+    result: {
+      tenantManagement: [uiPermissionsById.manage.value]
+    }
+  },
   [permissionSetIds.ReadUsers]: {
     name: permissionSetIds.ReadUsers,
     result: {
@@ -839,11 +880,12 @@ var defaultPermissionSets = {
     }
   }
 };
-var rolesByName = __spreadProps(__spreadValues({}, staticRolesByName), {
+var rolesByName = {
+  ...staticRolesByName,
   deploymentCreation: { action: "CREATE_DEPLOYMENT", object: { type: "DEVICE_GROUP", value: void 0 } },
   groupAccess: { action: "VIEW_DEVICE", object: { type: "DEVICE_GROUP", value: void 0 } },
   userManagement: { action: "http", object: { type: "any", value: `${useradmApiUrlv1}/.*` } }
-});
+};
 var twoFAStates = {
   enabled: "enabled",
   disabled: "disabled",
@@ -881,11 +923,12 @@ var deploymentStatesToSubstates = {
   pending: [deploymentSubstates.pending],
   successes: [deploymentSubstates.success, deploymentSubstates.alreadyInstalled, deploymentSubstates.noartifact]
 };
-var deploymentStatesToSubstatesWithSkipped = __spreadProps(__spreadValues({}, deploymentStatesToSubstates), {
+var deploymentStatesToSubstatesWithSkipped = {
+  ...deploymentStatesToSubstates,
   failures: [deploymentSubstates.failure],
   skipped: [deploymentSubstates.aborted, deploymentSubstates.noartifact, deploymentSubstates.alreadyInstalled, deploymentSubstates.decommissioned],
   successes: [deploymentSubstates.success]
-});
+};
 var installationSubstatesMap = {
   download: {
     title: "download",
@@ -930,8 +973,8 @@ var DEPLOYMENT_STATES = {
 var listDefaultsByState = {
   [DEPLOYMENT_STATES.inprogress]: { page: 1, perPage: 10 },
   [DEPLOYMENT_STATES.pending]: { page: 1, perPage: 10 },
-  [DEPLOYMENT_STATES.scheduled]: __spreadValues({}, DEVICE_LIST_DEFAULTS),
-  [DEPLOYMENT_STATES.finished]: __spreadValues({}, DEVICE_LIST_DEFAULTS),
+  [DEPLOYMENT_STATES.scheduled]: { ...DEVICE_LIST_DEFAULTS },
+  [DEPLOYMENT_STATES.finished]: { ...DEVICE_LIST_DEFAULTS },
   sort: { direction: SORTING_OPTIONS.desc }
 };
 var DEPLOYMENT_ROUTES = {
@@ -992,8 +1035,7 @@ var getDeploymentsSelectionState = (state) => state.deployments.selectionState;
 var getMappedDeploymentSelection = (0, import_toolkit2.createSelector)(
   [getDeploymentsSelectionState, (_, deploymentsState) => deploymentsState, getDeploymentsById],
   (selectionState, deploymentsState, deploymentsById) => {
-    var _a;
-    const { selection = [] } = (_a = selectionState[deploymentsState]) != null ? _a : {};
+    const { selection = [] } = selectionState[deploymentsState] ?? {};
     return selection.reduce((accu, id) => {
       if (deploymentsById[id]) {
         accu.push(deploymentsById[id]);
@@ -1035,7 +1077,8 @@ var getSelectedGroup = (state) => state.devices.groups.selectedGroup;
 var getListedDevices = (state) => state.devices.deviceList.deviceIds;
 var getFilteringAttributes = (state) => state.devices.filteringAttributes;
 var getFilteringAttributesFromConfig = (state) => state.devices.filteringAttributesConfig.attributes;
-var getSortedFilteringAttributes = (0, import_toolkit3.createSelector)([getFilteringAttributes], (filteringAttributes) => __spreadProps(__spreadValues({}, filteringAttributes), {
+var getSortedFilteringAttributes = (0, import_toolkit3.createSelector)([getFilteringAttributes], (filteringAttributes) => ({
+  ...filteringAttributes,
   identityAttributes: [...filteringAttributes.identityAttributes, "id"]
 }));
 var getDeviceLimit = (state) => state.devices.limit;
@@ -1063,10 +1106,7 @@ var getDeviceCountsByStatus = (0, import_toolkit3.createSelector)(
     return accu;
   }, {})
 );
-var getDeviceById = (0, import_toolkit3.createSelector)([getDevicesById, (_, deviceId) => deviceId], (devicesById, deviceId = "") => {
-  var _a;
-  return (_a = devicesById[deviceId]) != null ? _a : {};
-});
+var getDeviceById = (0, import_toolkit3.createSelector)([getDevicesById, (_, deviceId) => deviceId], (devicesById, deviceId = "") => devicesById[deviceId] ?? {});
 var getSelectedGroupInfo = (0, import_toolkit3.createSelector)(
   [getAcceptedDevices, getGroupsById, getSelectedGroup],
   ({ total: acceptedDeviceTotal }, groupsById, selectedGroup) => {
@@ -1083,17 +1123,13 @@ var getLimitMaxed = (0, import_toolkit3.createSelector)(
   [getAcceptedDevices, getDeviceLimit],
   ({ total: acceptedDevices = 0 }, deviceLimit) => Boolean(deviceLimit && deviceLimit <= acceptedDevices)
 );
-var _b;
-var getGroupsByIdWithoutUngrouped = (0, import_toolkit3.createSelector)([getGroupsById], (_a) => {
-  var _c = _a, { [_b = UNGROUPED_GROUP.id]: ungrouped } = _c, groups = __objRest(_c, [__restKey(_b)]);
-  return groups;
-});
+var getGroupsByIdWithoutUngrouped = (0, import_toolkit3.createSelector)([getGroupsById], ({ [UNGROUPED_GROUP.id]: ungrouped, ...groups }) => groups);
 var getGroups = (0, import_toolkit3.createSelector)([getGroupsById], (groupsById) => {
   const groupNames = Object.keys(groupsById).sort();
   const groupedGroups = Object.entries(groupsById).sort((a, b) => a[0].localeCompare(b[0])).reduce(
     (accu, [groupname, group]) => {
       const name = groupname === UNGROUPED_GROUP.id ? UNGROUPED_GROUP.name : groupname;
-      const groupItem = __spreadProps(__spreadValues({}, group), { groupId: name, name: groupname });
+      const groupItem = { ...group, groupId: name, name: groupname };
       if (group.filters.length > 0) {
         if (groupname !== UNGROUPED_GROUP.id) {
           accu.dynamic.push(groupItem);
@@ -1107,7 +1143,7 @@ var getGroups = (0, import_toolkit3.createSelector)([getGroupsById], (groupsById
     },
     { dynamic: [], static: [], ungrouped: [] }
   );
-  return __spreadValues({ groupNames }, groupedGroups);
+  return { groupNames, ...groupedGroups };
 });
 var getAttributesList = (0, import_toolkit3.createSelector)(
   [getFilteringAttributes, getFilteringAttributesFromConfig],
@@ -1145,10 +1181,7 @@ var getWebhookEvents = (state) => state.organization.webhooks.events;
 var getWebhookEventTotal = (state) => state.organization.webhooks.eventTotal;
 var getDeviceTwinIntegrations = (0, import_toolkit4.createSelector)(
   [getExternalIntegrations],
-  (integrations) => integrations.filter((integration) => {
-    var _a;
-    return integration.id && ((_a = EXTERNAL_PROVIDER[integration.provider]) == null ? void 0 : _a.deviceTwin);
-  })
+  (integrations) => integrations.filter((integration) => integration.id && EXTERNAL_PROVIDER[integration.provider]?.deviceTwin)
 );
 var getIsServiceProvider = (state) => state.organization.organization.service_provider;
 var getWebhooks = (0, import_toolkit4.createSelector)(
@@ -1175,12 +1208,12 @@ var filterAliases = {
 var listItemMapper = (byId, ids, { defaultObject = {}, cutOffSize = DEVICE_LIST_MAXIMUM_LENGTH }) => {
   return ids.slice(0, cutOffSize).reduce((accu, id) => {
     if (id && byId[id]) {
-      accu.push(__spreadValues(__spreadValues({}, defaultObject), byId[id]));
+      accu.push({ ...defaultObject, ...byId[id] });
     }
     return accu;
   }, []);
 };
-var mergePermissions = (existingPermissions = __spreadValues({}, emptyUiPermissions), addedPermissions) => Object.entries(existingPermissions).reduce(
+var mergePermissions = (existingPermissions = { ...emptyUiPermissions }, addedPermissions) => Object.entries(existingPermissions).reduce(
   (accu, [key, value]) => {
     let values;
     if (!accu[key]) {
@@ -1190,12 +1223,12 @@ var mergePermissions = (existingPermissions = __spreadValues({}, emptyUiPermissi
     if (Array.isArray(value)) {
       values = [...value, ...accu[key]].filter(import_helpers3.duplicateFilter);
     } else {
-      values = mergePermissions(accu[key], __spreadValues({}, value));
+      values = mergePermissions(accu[key], { ...value });
     }
     accu[key] = values;
     return accu;
   },
-  __spreadValues({}, addedPermissions)
+  { ...addedPermissions }
 );
 var mapUserRolesToUiPermissions = (userRoles, roles) => userRoles.reduce(
   (accu, roleId) => {
@@ -1204,7 +1237,7 @@ var mapUserRolesToUiPermissions = (userRoles, roles) => userRoles.reduce(
     }
     return mergePermissions(accu, roles[roleId].uiPermissions);
   },
-  __spreadValues({}, emptyUiPermissions)
+  { ...emptyUiPermissions }
 );
 var isDarkMode = (mode) => mode === DARK_MODE;
 
@@ -1217,15 +1250,12 @@ var getReleaseListState = (state) => state.releases.releasesList;
 var getListedReleases = (state) => state.releases.releasesList.releaseIds;
 var getReleaseMappingDefaults = () => ({});
 var getReleasesList = (0, import_toolkit5.createSelector)([getReleasesById, getListedReleases, getReleaseMappingDefaults], listItemMapper);
-var getReleaseTagsById = (0, import_toolkit5.createSelector)([getReleaseTags], (releaseTags) => releaseTags.reduce((accu, key) => __spreadProps(__spreadValues({}, accu), { [key]: key }), {}));
+var getReleaseTagsById = (0, import_toolkit5.createSelector)([getReleaseTags], (releaseTags) => releaseTags.reduce((accu, key) => ({ ...accu, [key]: key }), {}));
 var getHasReleases = (0, import_toolkit5.createSelector)(
   [getReleaseListState, getReleasesById],
   ({ searchTotal, total }, byId) => !!(Object.keys(byId).length || total || searchTotal)
 );
-var getSelectedRelease = (0, import_toolkit5.createSelector)([getReleasesById, getSelectedReleaseId], (byId, id) => {
-  var _a;
-  return (_a = byId[id]) != null ? _a : {};
-});
+var getSelectedRelease = (0, import_toolkit5.createSelector)([getReleasesById, getSelectedReleaseId], (byId, id) => byId[id] ?? {});
 
 // src/usersSlice/selectors.ts
 var import_toolkit6 = require("@reduxjs/toolkit");
@@ -1234,10 +1264,7 @@ var getTooltipsById = (state) => state.users.tooltips.byId;
 var getGlobalSettings = (state) => state.users.globalSettings;
 var getCurrentUserId = (state) => state.users.currentUser;
 var getUsersById = (state) => state.users.byId;
-var getCurrentUser = (0, import_toolkit6.createSelector)([getUsersById, getCurrentUserId], (usersById, userId) => {
-  var _a;
-  return (_a = usersById[userId]) != null ? _a : {};
-});
+var getCurrentUser = (0, import_toolkit6.createSelector)([getUsersById, getCurrentUserId], (usersById, userId) => usersById[userId] ?? {});
 var getUserSettings = (state) => state.users.userSettings;
 var getIsDarkMode = (0, import_toolkit6.createSelector)([getUserSettings], ({ mode }) => isDarkMode(mode));
 var getShowHelptips = (0, import_toolkit6.createSelector)(
@@ -1248,22 +1275,22 @@ var getTooltipsState = (0, import_toolkit6.createSelector)(
   [getTooltipsById, getUserSettings],
   (byId, { tooltips = {} }) => Object.entries(byId).reduce(
     (accu, [id, value]) => {
-      accu[id] = __spreadValues(__spreadValues({}, accu[id]), value);
+      accu[id] = { ...accu[id], ...value };
       return accu;
     },
-    __spreadValues({}, tooltips)
+    { ...tooltips }
   )
 );
 var getHas2FA = (0, import_toolkit6.createSelector)(
   [getCurrentUser],
   (currentUser) => currentUser.hasOwnProperty("tfa_status") && currentUser.tfa_status === twoFAStates.enabled
 );
-var getIdAttribute = (0, import_toolkit6.createSelector)([getGlobalSettings], ({ id_attribute = __spreadValues({}, defaultIdAttribute) }) => id_attribute);
+var getIdAttribute = (0, import_toolkit6.createSelector)([getGlobalSettings], ({ id_attribute = { ...defaultIdAttribute } }) => id_attribute);
 var getOfflineThresholdSettings = (0, import_toolkit6.createSelector)([getGlobalSettings], ({ offlineThreshold }) => ({
-  interval: (offlineThreshold == null ? void 0 : offlineThreshold.interval) || DEVICE_ONLINE_CUTOFF.interval,
-  intervalUnit: (offlineThreshold == null ? void 0 : offlineThreshold.intervalUnit) || DEVICE_ONLINE_CUTOFF.intervalName
+  interval: offlineThreshold?.interval || DEVICE_ONLINE_CUTOFF.interval,
+  intervalUnit: offlineThreshold?.intervalUnit || DEVICE_ONLINE_CUTOFF.intervalName
 }));
-var getRolesList = (0, import_toolkit6.createSelector)([getRolesById], (rolesById2) => Object.entries(rolesById2).map(([id, role]) => __spreadValues({ id }, role)));
+var getRolesList = (0, import_toolkit6.createSelector)([getRolesById], (rolesById2) => Object.entries(rolesById2).map(([id, role]) => ({ id, ...role })));
 
 // src/commonSelectors.ts
 var getIsEnterprise = (0, import_toolkit7.createSelector)(
@@ -1281,8 +1308,7 @@ var getSearchEndpoint = (0, import_toolkit7.createSelector)(
 var getUserRoles = (0, import_toolkit7.createSelector)(
   [getCurrentUser, getRolesById, getIsEnterprise, getFeatures, getOrganization],
   (currentUser, rolesById2, isEnterprise, { isHosted, hasMultitenancy }, { plan = PLANS.os.id }) => {
-    var _a;
-    const isAdmin = ((_a = currentUser.roles) == null ? void 0 : _a.length) ? currentUser.roles.some((role) => role === rolesByName.admin) : !(hasMultitenancy || isEnterprise || isHosted && plan !== PLANS.os.id);
+    const isAdmin = currentUser.roles?.length ? currentUser.roles.some((role) => role === rolesByName.admin) : !(hasMultitenancy || isEnterprise || isHosted && plan !== PLANS.os.id);
     const uiPermissions = isAdmin ? mapUserRolesToUiPermissions([rolesByName.admin], rolesById2) : mapUserRolesToUiPermissions(currentUser.roles || [], rolesById2);
     return { isAdmin, uiPermissions };
   }
@@ -1351,10 +1377,11 @@ var getFilterAttributes = (0, import_toolkit7.createSelector)(
     const deviceNameAttribute = { key: "name", value: "Name", scope: ATTRIBUTE_SCOPES.tags, category: ATTRIBUTE_SCOPES.tags, priority: 1 };
     const deviceIdAttribute = { key: "id", value: "Device ID", scope: ATTRIBUTE_SCOPES.identity, category: ATTRIBUTE_SCOPES.identity, priority: 1 };
     const checkInAttribute = { key: "check_in_time", value: "Latest activity", scope: ATTRIBUTE_SCOPES.system, category: ATTRIBUTE_SCOPES.system, priority: 4 };
-    const updateAttribute = __spreadProps(__spreadValues({}, checkInAttribute), { key: "updated_ts", value: "Last inventory update" });
+    const updateAttribute = { ...checkInAttribute, key: "updated_ts", value: "Last inventory update" };
     const firstRequestAttribute = { key: "created_ts", value: "First request", scope: ATTRIBUTE_SCOPES.system, category: ATTRIBUTE_SCOPES.system, priority: 4 };
     const attributes = [
-      ...previousFilters.map((item) => __spreadProps(__spreadValues({}, item), {
+      ...previousFilters.map((item) => ({
+        ...item,
         value: deviceIdAttribute.key === item.key ? deviceIdAttribute.value : item.key,
         category: "recently used",
         priority: 0
@@ -1372,14 +1399,13 @@ var getFilterAttributes = (0, import_toolkit7.createSelector)(
     return (0, import_helpers4.attributeDuplicateFilter)(attributes, "key");
   }
 );
-var getOnboardingState = (0, import_toolkit7.createSelector)([getOnboarding, getUserSettings], (_a, { onboarding = {} }) => {
-  var _b2 = _a, { complete, progress, showTips } = _b2, remainder = __objRest(_b2, ["complete", "progress", "showTips"]);
-  return __spreadProps(__spreadValues(__spreadValues({}, remainder), onboarding), {
-    complete: onboarding.complete || complete,
-    progress: Object.keys(onboardingSteps).findIndex((step) => step === progress) > Object.keys(onboardingSteps).findIndex((step) => step === onboarding.progress) ? progress : onboarding.progress,
-    showTips: !onboarding.showTips ? onboarding.showTips : showTips
-  });
-});
+var getOnboardingState = (0, import_toolkit7.createSelector)([getOnboarding, getUserSettings], ({ complete, progress, showTips, ...remainder }, { onboarding = {} }) => ({
+  ...remainder,
+  ...onboarding,
+  complete: onboarding.complete || complete,
+  progress: Object.keys(onboardingSteps).findIndex((step) => step === progress) > Object.keys(onboardingSteps).findIndex((step) => step === onboarding.progress) ? progress : onboarding.progress,
+  showTips: !onboarding.showTips ? onboarding.showTips : showTips
+}));
 var getDemoDeviceAddress = (0, import_toolkit7.createSelector)([getDevicesById, getOnboarding], (devicesById, { approach, demoArtifactPort }) => {
   const demoDeviceAddress = `http://${(0, import_helpers4.getDemoDeviceAddress)(Object.values(devicesById), approach)}`;
   return demoArtifactPort ? `${demoDeviceAddress}:${demoArtifactPort}` : demoDeviceAddress;
@@ -1400,12 +1426,11 @@ var getDeploymentRelease = (0, import_toolkit7.createSelector)(
 var getSelectedDeploymentData = (0, import_toolkit7.createSelector)(
   [getDeploymentsById, getDeploymentsSelectionState, getDevicesById, getSelectedDeploymentDeviceIds],
   (deploymentsById, { selectedId }, devicesById, selectedDeviceIds) => {
-    var _a;
-    const deployment = (_a = deploymentsById[selectedId]) != null ? _a : {};
+    const deployment = deploymentsById[selectedId] ?? {};
     const { devices = {} } = deployment;
     return {
       deployment,
-      selectedDevices: selectedDeviceIds.map((deviceId) => __spreadValues(__spreadValues({}, devicesById[deviceId]), devices[deviceId]))
+      selectedDevices: selectedDeviceIds.map((deviceId) => ({ ...devicesById[deviceId], ...devices[deviceId] }))
     };
   }
 );
@@ -1420,8 +1445,7 @@ var getAvailableIssueOptionsByType = (0, import_toolkit7.createSelector)(
   }, {})
 );
 var getGroupNames = (0, import_toolkit7.createSelector)([getGroupsById, getUserRoles, (_, options = {}) => options], (groupsById, { uiPermissions }, { staticOnly }) => {
-  var _a;
-  const _b2 = groupsById, { [_a = UNGROUPED_GROUP.id]: ungrouped } = _b2, groups = __objRest(_b2, [__restKey(_a)]);
+  const { [UNGROUPED_GROUP.id]: ungrouped, ...groups } = groupsById;
   if (staticOnly) {
     return Object.keys(uiPermissions.groups).sort();
   }
@@ -1455,28 +1479,24 @@ var getAuditlogDevice = (0, import_toolkit7.createSelector)([getAuditLogEntry, g
   if (auditlogEvent) {
     const { object = {} } = auditlogEvent;
     const { device = {}, id, type } = object;
-    auditlogDevice = type === "device" ? __spreadValues({ id }, device) : auditlogDevice;
+    auditlogDevice = type === "device" ? { id, ...device } : auditlogDevice;
   }
-  return __spreadValues(__spreadValues({}, auditlogDevice), devicesById[auditlogDevice.id]);
+  return { ...auditlogDevice, ...devicesById[auditlogDevice.id] };
 });
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  getAttrsEndpoint,
-  getAuditlogDevice,
-  getAvailableIssueOptionsByType,
-  getDemoDeviceAddress,
-  getDeploymentRelease,
-  getDeviceConfigDeployment,
-  getDeviceReportsForUser,
-  getFilterAttributes,
-  getGroupNames,
-  getIsEnterprise,
-  getMappedDevicesList,
-  getOnboardingState,
-  getSearchEndpoint,
-  getSelectedDeploymentData,
-  getTenantCapabilities,
-  getUserCapabilities,
-  getUserRoles
+var getRelevantRoles = (0, import_toolkit7.createSelector)([getOrganization, getRolesList], ({ service_provider }, roles) => {
+  if (service_provider) {
+    return roles.reduce((accu, role) => {
+      if (rolesById[role.id]) {
+        return accu;
+      }
+      accu.push(role);
+      return accu;
+    }, Object.values(serviceProviderRolesById));
+  }
+  return Object.keys(rolesById).reverse().reduce((accu, key) => {
+    const index = accu.findIndex(({ id }) => id === key);
+    accu = [accu[index], ...accu.filter((item, itemIndex) => index !== itemIndex)];
+    return accu;
+  }, roles);
 });
 //# sourceMappingURL=commonSelectors.js.map