@northern.tech/store 0.2.1 → 0.3.0

package/dist/auth.cjs

@@ -0,0 +1,320 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/auth.ts
+var auth_exports = {};
+__export(auth_exports, {
+  cleanUp: () => cleanUp,
+  getSessionInfo: () => getSessionInfo,
+  getToken: () => getToken,
+  maxSessionAge: () => maxSessionAge,
+  setSessionInfo: () => setSessionInfo,
+  updateMaxAge: () => updateMaxAge
+});
+module.exports = __toCommonJS(auth_exports);
+var import_universal_cookie = __toESM(require("universal-cookie"), 1);
+
+// src/commonConstants.tsx
+var import_js = require("@mdi/js");
+var import_jsx_runtime = require("react/jsx-runtime");
+var timeUnits = {
+  days: "days",
+  minutes: "minutes",
+  hours: "hours"
+};
+var DEVICE_FILTERING_OPTIONS = {
+  $eq: { key: "$eq", title: "equals", shortform: "=" },
+  $ne: { key: "$ne", title: "not equal", shortform: "!=" },
+  $gt: {
+    key: "$gt",
+    title: ">",
+    shortform: ">",
+    help: 'The "greater than" operator can work both on numbers and strings. In the latter case, the operator applies the lexicographical order to the value strings.'
+  },
+  $gte: {
+    title: ">=",
+    shortform: ">=",
+    help: 'The "greater than or equal" operator can work both on numbers and strings. In the latter case, the operator applies the lexicographical order to the value strings.'
+  },
+  $lt: {
+    key: "$lt",
+    title: "<",
+    shortform: "<",
+    help: 'The "lesser than" operator can work both on numbers and strings. In the latter case, the operator applies the lexicographical order to the value strings.'
+  },
+  $lte: {
+    title: "<=",
+    shortform: "<=",
+    help: 'The "lesser than or equal" operator can work both on numbers and strings. In the latter case, the operator applies the lexicographical order to the value strings.'
+  },
+  $ltne: {
+    key: "$ltne",
+    title: "$ltne",
+    shortform: "ltne",
+    help: 'The "lesser than or does not exist" operator can work both on numbers and strings. In the latter case, the operator applies the lexicographical order to the value strings.'
+  },
+  $in: {
+    key: "$in",
+    title: "in",
+    shortform: "in",
+    help: 'The "in" operator accepts a list of comma-separated values. It matches if the selected field is equal to one of the specified values.'
+  },
+  $nin: {
+    key: "$nin",
+    title: "not in",
+    shortform: "not in",
+    help: `The "not in" operator accepts a list of comma-separated values. It matches if the selected field's value is not equal to any of the specified options.`
+  },
+  $exists: {
+    key: "$exists",
+    title: "exists",
+    shortform: "exists",
+    value: true,
+    help: `The "exists" operator matches if the selected field's value has a value. No value needs to be provided for this operator.`
+  },
+  $nexists: {
+    key: "$nexists",
+    title: `doesn't exist`,
+    shortform: `doesn't exist`,
+    value: true,
+    help: `The "doesn't exist" operator matches if the selected field's value has no value. No value needs to be provided for this operator.`
+  },
+  $regex: {
+    key: "$regex",
+    title: `matches regular expression`,
+    shortform: `matches`,
+    help: `The "regular expression" operator matches the selected field's value with a Perl compatible regular expression (PCRE), automatically anchored by ^. If the regular expression is not valid, the filter will produce no results. If you need to specify options and flags, you can provide the full regex in the format of /regex/flags, for example.`
+  }
+};
+var DEVICE_ISSUE_OPTIONS = {
+  issues: {
+    isCategory: true,
+    key: "issues",
+    title: "Devices with issues",
+    filterRule: {}
+  },
+  offline: {
+    issueCategory: "issues",
+    key: "offline",
+    needsFullFiltering: true,
+    needsMonitor: false,
+    needsReporting: false,
+    filterRule: {
+      scope: "system",
+      key: "check_in_time",
+      operator: DEVICE_FILTERING_OPTIONS.$ltne.key,
+      value: ({ offlineThreshold }) => offlineThreshold
+    },
+    title: "Offline devices"
+  },
+  failedLastUpdate: {
+    issueCategory: "issues",
+    key: "failedLastUpdate",
+    needsFullFiltering: false,
+    needsMonitor: false,
+    needsReporting: true,
+    filterRule: { scope: "monitor", key: "failed_last_update", operator: DEVICE_FILTERING_OPTIONS.$eq.key, value: true },
+    title: "Deployment failed"
+  },
+  monitoring: {
+    issueCategory: "issues",
+    key: "monitoring",
+    needsFullFiltering: false,
+    needsMonitor: true,
+    needsReporting: false,
+    filterRule: { scope: "monitor", key: "alerts", operator: DEVICE_FILTERING_OPTIONS.$eq.key, value: true },
+    title: "Monitoring alert"
+  },
+  authRequests: {
+    key: "authRequests",
+    needsFullFiltering: false,
+    needsMonitor: false,
+    needsReporting: true,
+    filterRule: { scope: "monitor", key: "auth_requests", operator: DEVICE_FILTERING_OPTIONS.$gt.key, value: 1 },
+    title: "Devices with new authentication requests"
+  },
+  gatewayDevices: {
+    key: "gatewayDevices",
+    needsFullFiltering: false,
+    needsMonitor: false,
+    needsReporting: true,
+    filterRule: { scope: "inventory", key: "mender_is_gateway", operator: DEVICE_FILTERING_OPTIONS.$eq.key, value: "true" },
+    title: "Gateway devices"
+  }
+};
+var oneSecond = 1e3;
+var TIMEOUTS = {
+  debounceDefault: 700,
+  debounceShort: 300,
+  halfASecond: 0.5 * oneSecond,
+  oneSecond,
+  twoSeconds: 2 * oneSecond,
+  threeSeconds: 3 * oneSecond,
+  fiveSeconds: 5 * oneSecond,
+  refreshDefault: 10 * oneSecond,
+  refreshLong: 60 * oneSecond
+};
+var DEVICE_ONLINE_CUTOFF = { interval: 1, intervalName: timeUnits.days };
+var ATTRIBUTE_SCOPES = {
+  inventory: "inventory",
+  identity: "identity",
+  monitor: "monitor",
+  system: "system",
+  tags: "tags"
+};
+var defaultIdAttribute = Object.freeze({ attribute: "id", scope: ATTRIBUTE_SCOPES.identity });
+var credentialTypes = {
+  aws: "aws",
+  http: "http",
+  sas: "sas",
+  x509: "x509"
+};
+var EXTERNAL_PROVIDER = {
+  "iot-core": {
+    credentialsType: credentialTypes.aws,
+    icon: import_js.mdiAws,
+    title: "AWS IoT Core",
+    twinTitle: "Device Shadow",
+    provider: "iot-core",
+    enabled: true,
+    deviceTwin: true,
+    configHint: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_jsx_runtime.Fragment, { children: "For help finding your AWS IoT Core connection string, check the AWS IoT documentation." })
+  },
+  "iot-hub": {
+    credentialsType: credentialTypes.sas,
+    icon: import_js.mdiMicrosoftAzure,
+    title: "Azure IoT Hub",
+    twinTitle: "Device Twin",
+    provider: "iot-hub",
+    enabled: true,
+    deviceTwin: true,
+    configHint: /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("span", { children: [
+      "For help finding your Azure IoT Hub connection string, look under 'Shared access policies' in the Microsoft Azure UI as described",
+      " ",
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+        "a",
+        {
+          href: "https://devblogs.microsoft.com/iotdev/understand-different-connection-strings-in-azure-iot-hub/#iothubconn",
+          target: "_blank",
+          rel: "noopener noreferrer",
+          children: "here"
+        }
+      ),
+      "."
+    ] })
+  },
+  webhook: {
+    credentialsType: credentialTypes.http,
+    deviceTwin: false,
+    // disable the webhook provider here, since it is treated different than other integrations, with a custom configuration & management view, etc.
+    enabled: false,
+    provider: "webhook"
+  }
+};
+var emptyUiPermissions = Object.freeze({
+  auditlog: [],
+  deployments: [],
+  groups: Object.freeze({}),
+  releases: Object.freeze({}),
+  tenantManagement: [],
+  userManagement: []
+});
+var emptyRole = Object.freeze({
+  name: void 0,
+  description: "",
+  permissions: [],
+  uiPermissions: Object.freeze({ ...emptyUiPermissions })
+});
+
+// src/auth.ts
+var cookies = new import_universal_cookie.default();
+var emptySession = Object.freeze({ token: "", exiresAt: void 0 });
+var tokenCache = "";
+var getSessionInfo = () => {
+  let sessionInfo = { ...emptySession };
+  try {
+    sessionInfo = JSON.parse(window.localStorage.getItem("JWT") ?? "");
+  } catch {
+  }
+  if (sessionInfo.expiresAt && new Date(sessionInfo.expiresAt) < /* @__PURE__ */ new Date()) {
+    cleanUp();
+    return { ...emptySession };
+  }
+  if (!sessionInfo.token) {
+    let jwtTokenFromCookie = cookies.get("JWT", { doNotParse: true }) ?? "";
+    if (jwtTokenFromCookie) {
+      setSessionInfo({ token: jwtTokenFromCookie, undefined: void 0 });
+      sessionInfo.token = jwtTokenFromCookie;
+      cookies.remove("JWT");
+      cookies.remove("JWT", { path: "/" });
+    }
+  }
+  sessionInfo.token = sessionInfo.token || void 0;
+  tokenCache = sessionInfo.token;
+  return sessionInfo;
+};
+var getToken = () => tokenCache ? tokenCache : getSessionInfo().token;
+var setSessionInfo = ({ token, expiresAt }) => {
+  tokenCache = token;
+  window.localStorage.setItem("JWT", JSON.stringify({ token, expiresAt }));
+};
+var cleanUp = () => {
+  tokenCache = "";
+  cookies.remove("JWT");
+  cookies.remove("JWT", { path: "/" });
+  window.localStorage.removeItem("JWT");
+  window.localStorage.removeItem("oauth");
+};
+var maxSessionAge = 900;
+var updateMaxAge = ({ expiresAt, token }) => {
+  const oAuthExpiration = Number(window.localStorage.getItem("oauth"));
+  let updateWithOAuth = false;
+  if (oAuthExpiration) {
+    const soon = Date.now() + maxSessionAge * TIMEOUTS.oneSecond;
+    updateWithOAuth = oAuthExpiration <= soon;
+    if (updateWithOAuth) {
+      window.localStorage.removeItem("oauth");
+    }
+  }
+  if (token && expiresAt && (!oAuthExpiration || updateWithOAuth)) {
+    const expiration = /* @__PURE__ */ new Date();
+    expiration.setSeconds(expiration.getSeconds() + maxSessionAge);
+    setSessionInfo({ token, expiresAt: expiration.toISOString() });
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  cleanUp,
+  getSessionInfo,
+  getToken,
+  maxSessionAge,
+  setSessionInfo,
+  updateMaxAge
+});
+//# sourceMappingURL=auth.cjs.map

package/dist/auth.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/auth.ts","../src/commonConstants.tsx"],"sourcesContent":["// Copyright 2016 Northern.tech AS\n//\n//    Licensed under the Apache License, Version 2.0 (the \"License\");\n//    you may not use this file except in compliance with the License.\n//    You may obtain a copy of the License at\n//\n//        http://www.apache.org/licenses/LICENSE-2.0\n//\n//    Unless required by applicable law or agreed to in writing, software\n//    distributed under the License is distributed on an \"AS IS\" BASIS,\n//    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n//    See the License for the specific language governing permissions and\n//    limitations under the License.\n// @ts-nocheck\nimport Cookies from 'universal-cookie';\n\nimport { TIMEOUTS } from './constants';\n\nconst cookies = new Cookies();\n\nconst emptySession = Object.freeze({ token: '', exiresAt: undefined });\n\nlet tokenCache = '';\n\nexport const getSessionInfo = () => {\n  let sessionInfo = { ...emptySession };\n  try {\n    sessionInfo = JSON.parse(window.localStorage.getItem('JWT') ?? '');\n  } catch {\n    // most likely not logged in - nothing to do here\n  }\n  if (sessionInfo.expiresAt && new Date(sessionInfo.expiresAt) < new Date()) {\n    cleanUp();\n    return { ...emptySession };\n  }\n  if (!sessionInfo.token) {\n    let jwtTokenFromCookie = cookies.get('JWT', { doNotParse: true }) ?? '';\n    if (jwtTokenFromCookie) {\n      setSessionInfo({ token: jwtTokenFromCookie, undefined });\n      sessionInfo.token = jwtTokenFromCookie;\n      cookies.remove('JWT');\n      cookies.remove('JWT', { path: '/' });\n    }\n  }\n  sessionInfo.token = sessionInfo.token || undefined;\n  tokenCache = sessionInfo.token;\n  return sessionInfo;\n};\n\nexport const getToken = () => (tokenCache ? tokenCache : getSessionInfo().token);\n\nexport const setSessionInfo = ({ token, expiresAt }) => {\n  tokenCache = token;\n  window.localStorage.setItem('JWT', JSON.stringify({ token, expiresAt }));\n};\n\nexport const cleanUp = () => {\n  tokenCache = '';\n  cookies.remove('JWT');\n  cookies.remove('JWT', { path: '/' });\n  window.localStorage.removeItem('JWT');\n  window.localStorage.removeItem('oauth');\n};\n\nexport const maxSessionAge = 900;\n\nexport const updateMaxAge = ({ expiresAt, token }) => {\n  const oAuthExpiration = Number(window.localStorage.getItem('oauth'));\n  let updateWithOAuth = false;\n  if (oAuthExpiration) {\n    const soon = Date.now() + maxSessionAge * TIMEOUTS.oneSecond;\n    updateWithOAuth = oAuthExpiration <= soon;\n    if (updateWithOAuth) {\n      window.localStorage.removeItem('oauth');\n    }\n  }\n  if (token && expiresAt && (!oAuthExpiration || updateWithOAuth)) {\n    const expiration = new Date();\n    expiration.setSeconds(expiration.getSeconds() + maxSessionAge);\n    setSessionInfo({ token, expiresAt: expiration.toISOString() });\n  }\n};\n","// Copyright 2024 Northern.tech AS\n//\n//    Licensed under the Apache License, Version 2.0 (the \"License\");\n//    you may not use this file except in compliance with the License.\n//    You may obtain a copy of the License at\n//\n//        http://www.apache.org/licenses/LICENSE-2.0\n//\n//    Unless required by applicable law or agreed to in writing, software\n//    distributed under the License is distributed on an \"AS IS\" BASIS,\n//    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n//    See the License for the specific language governing permissions and\n//    limitations under the License.\n// @ts-nocheck\nimport React from 'react';\n\nimport { mdiAws as AWS, mdiMicrosoftAzure as Azure } from '@mdi/js';\n\nexport const DEVICE_LIST_DEFAULTS = {\n  page: 1,\n  perPage: 20\n};\n\nexport const timeUnits = {\n  days: 'days',\n  minutes: 'minutes',\n  hours: 'hours'\n};\n\nexport const ALL_DEVICES = 'All devices';\nexport const UNGROUPED_GROUP = { id: '*|=ungrouped=|*', name: 'Unassigned' };\n\nexport const DEVICE_LIST_MAXIMUM_LENGTH = 50;\n\nexport const DEVICE_FILTERING_OPTIONS = {\n  $eq: { key: '$eq', title: 'equals', shortform: '=' },\n  $ne: { key: '$ne', title: 'not equal', shortform: '!=' },\n  $gt: {\n    key: '$gt',\n    title: '>',\n    shortform: '>',\n    help: 'The \"greater than\" operator can work both on numbers and strings. In the latter case, the operator applies the lexicographical order to the value strings.'\n  },\n  $gte: {\n    title: '>=',\n    shortform: '>=',\n    help: 'The \"greater than or equal\" operator can work both on numbers and strings. In the latter case, the operator applies the lexicographical order to the value strings.'\n  },\n  $lt: {\n    key: '$lt',\n    title: '<',\n    shortform: '<',\n    help: 'The \"lesser than\" operator can work both on numbers and strings. In the latter case, the operator applies the lexicographical order to the value strings.'\n  },\n  $lte: {\n    title: '<=',\n    shortform: '<=',\n    help: 'The \"lesser than or equal\" operator can work both on numbers and strings. In the latter case, the operator applies the lexicographical order to the value strings.'\n  },\n  $ltne: {\n    key: '$ltne',\n    title: '$ltne',\n    shortform: 'ltne',\n    help: 'The \"lesser than or does not exist\" operator can work both on numbers and strings. In the latter case, the operator applies the lexicographical order to the value strings.'\n  },\n  $in: {\n    key: '$in',\n    title: 'in',\n    shortform: 'in',\n    help: 'The \"in\" operator accepts a list of comma-separated values. It matches if the selected field is equal to one of the specified values.'\n  },\n  $nin: {\n    key: '$nin',\n    title: 'not in',\n    shortform: 'not in',\n    help: `The \"not in\" operator accepts a list of comma-separated values. It matches if the selected field's value is not equal to any of the specified options.`\n  },\n  $exists: {\n    key: '$exists',\n    title: 'exists',\n    shortform: 'exists',\n    value: true,\n    help: `The \"exists\" operator matches if the selected field's value has a value. No value needs to be provided for this operator.`\n  },\n  $nexists: {\n    key: '$nexists',\n    title: `doesn't exist`,\n    shortform: `doesn't exist`,\n    value: true,\n    help: `The \"doesn't exist\" operator matches if the selected field's value has no value. No value needs to be provided for this operator.`\n  },\n  $regex: {\n    key: '$regex',\n    title: `matches regular expression`,\n    shortform: `matches`,\n    help: `The \"regular expression\" operator matches the selected field's value with a Perl compatible regular expression (PCRE), automatically anchored by ^. If the regular expression is not valid, the filter will produce no results. If you need to specify options and flags, you can provide the full regex in the format of /regex/flags, for example.`\n  }\n};\n\nexport const DEVICE_ISSUE_OPTIONS = {\n  issues: {\n    isCategory: true,\n    key: 'issues',\n    title: 'Devices with issues',\n    filterRule: {}\n  },\n  offline: {\n    issueCategory: 'issues',\n    key: 'offline',\n    needsFullFiltering: true,\n    needsMonitor: false,\n    needsReporting: false,\n    filterRule: {\n      scope: 'system',\n      key: 'check_in_time',\n      operator: DEVICE_FILTERING_OPTIONS.$ltne.key,\n      value: ({ offlineThreshold }) => offlineThreshold\n    },\n    title: 'Offline devices'\n  },\n  failedLastUpdate: {\n    issueCategory: 'issues',\n    key: 'failedLastUpdate',\n    needsFullFiltering: false,\n    needsMonitor: false,\n    needsReporting: true,\n    filterRule: { scope: 'monitor', key: 'failed_last_update', operator: DEVICE_FILTERING_OPTIONS.$eq.key, value: true },\n    title: 'Deployment failed'\n  },\n  monitoring: {\n    issueCategory: 'issues',\n    key: 'monitoring',\n    needsFullFiltering: false,\n    needsMonitor: true,\n    needsReporting: false,\n    filterRule: { scope: 'monitor', key: 'alerts', operator: DEVICE_FILTERING_OPTIONS.$eq.key, value: true },\n    title: 'Monitoring alert'\n  },\n  authRequests: {\n    key: 'authRequests',\n    needsFullFiltering: false,\n    needsMonitor: false,\n    needsReporting: true,\n    filterRule: { scope: 'monitor', key: 'auth_requests', operator: DEVICE_FILTERING_OPTIONS.$gt.key, value: 1 },\n    title: 'Devices with new authentication requests'\n  },\n  gatewayDevices: {\n    key: 'gatewayDevices',\n    needsFullFiltering: false,\n    needsMonitor: false,\n    needsReporting: true,\n    filterRule: { scope: 'inventory', key: 'mender_is_gateway', operator: DEVICE_FILTERING_OPTIONS.$eq.key, value: 'true' },\n    title: 'Gateway devices'\n  }\n};\nconst oneSecond = 1000;\nexport const TIMEOUTS = {\n  debounceDefault: 700,\n  debounceShort: 300,\n  halfASecond: 0.5 * oneSecond,\n  oneSecond,\n  twoSeconds: 2 * oneSecond,\n  threeSeconds: 3 * oneSecond,\n  fiveSeconds: 5 * oneSecond,\n  refreshDefault: 10 * oneSecond,\n  refreshLong: 60 * oneSecond\n};\n\nexport const SORTING_OPTIONS = {\n  asc: 'asc',\n  desc: 'desc'\n};\n\nexport const DEVICE_ONLINE_CUTOFF = { interval: 1, intervalName: timeUnits.days };\n\nexport const ATTRIBUTE_SCOPES = {\n  inventory: 'inventory',\n  identity: 'identity',\n  monitor: 'monitor',\n  system: 'system',\n  tags: 'tags'\n};\n\nexport const defaultIdAttribute = Object.freeze({ attribute: 'id', scope: ATTRIBUTE_SCOPES.identity });\n\nconst credentialTypes = {\n  aws: 'aws',\n  http: 'http',\n  sas: 'sas',\n  x509: 'x509'\n};\nexport const EXTERNAL_PROVIDER = {\n  'iot-core': {\n    credentialsType: credentialTypes.aws,\n    icon: AWS,\n    title: 'AWS IoT Core',\n    twinTitle: 'Device Shadow',\n    provider: 'iot-core',\n    enabled: true,\n    deviceTwin: true,\n    configHint: <>For help finding your AWS IoT Core connection string, check the AWS IoT documentation.</>\n  },\n  'iot-hub': {\n    credentialsType: credentialTypes.sas,\n    icon: Azure,\n    title: 'Azure IoT Hub',\n    twinTitle: 'Device Twin',\n    provider: 'iot-hub',\n    enabled: true,\n    deviceTwin: true,\n    configHint: (\n      <span>\n        For help finding your Azure IoT Hub connection string, look under &apos;Shared access policies&apos; in the Microsoft Azure UI as described{' '}\n        {\n          <a\n            href=\"https://devblogs.microsoft.com/iotdev/understand-different-connection-strings-in-azure-iot-hub/#iothubconn\"\n            target=\"_blank\"\n            rel=\"noopener noreferrer\"\n          >\n            here\n          </a>\n        }\n        .\n      </span>\n    )\n  },\n  webhook: {\n    credentialsType: credentialTypes.http,\n    deviceTwin: false,\n    // disable the webhook provider here, since it is treated different than other integrations, with a custom configuration & management view, etc.\n    enabled: false,\n    provider: 'webhook'\n  }\n};\nexport const MAX_PAGE_SIZE = 500;\n\nexport const ALL_RELEASES = 'All releases';\n\nexport type UiPermissionsDefinition = Readonly<{\n  auditlog: string[];\n  deployments?: string[]; // deployments are so far only covered indirectly through releases + device group permissions\n  groups: Record<string, string[]>;\n  releases: Record<string, string[]>;\n  tenantManagement: string[];\n  userManagement: string[];\n}>;\n\nexport type UiRoleDefinition = {\n  name: string;\n  description: string;\n  editable?: boolean;\n  isCustom?: boolean;\n  permissions?: object[];\n  uiPermissions: UiPermissionsDefinition;\n};\n\nexport const emptyUiPermissions: UiPermissionsDefinition = Object.freeze({\n  auditlog: [],\n  deployments: [],\n  groups: Object.freeze({}),\n  releases: Object.freeze({}),\n  tenantManagement: [],\n  userManagement: []\n});\n\nexport const emptyRole: UiRoleDefinition = Object.freeze({\n  name: undefined,\n  description: '',\n  permissions: [],\n  uiPermissions: Object.freeze({ ...emptyUiPermissions })\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAcA,8BAAoB;;;ACEpB,gBAA0D;AAwL1C;AAjLT,IAAM,YAAY;AAAA,EACvB,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO;AACT;AAOO,IAAM,2BAA2B;AAAA,EACtC,KAAK,EAAE,KAAK,OAAO,OAAO,UAAU,WAAW,IAAI;AAAA,EACnD,KAAK,EAAE,KAAK,OAAO,OAAO,aAAa,WAAW,KAAK;AAAA,EACvD,KAAK;AAAA,IACH,KAAK;AAAA,IACL,OAAO;AAAA,IACP,WAAW;AAAA,IACX,MAAM;AAAA,EACR;AAAA,EACA,MAAM;AAAA,IACJ,OAAO;AAAA,IACP,WAAW;AAAA,IACX,MAAM;AAAA,EACR;AAAA,EACA,KAAK;AAAA,IACH,KAAK;AAAA,IACL,OAAO;AAAA,IACP,WAAW;AAAA,IACX,MAAM;AAAA,EACR;AAAA,EACA,MAAM;AAAA,IACJ,OAAO;AAAA,IACP,WAAW;AAAA,IACX,MAAM;AAAA,EACR;AAAA,EACA,OAAO;AAAA,IACL,KAAK;AAAA,IACL,OAAO;AAAA,IACP,WAAW;AAAA,IACX,MAAM;AAAA,EACR;AAAA,EACA,KAAK;AAAA,IACH,KAAK;AAAA,IACL,OAAO;AAAA,IACP,WAAW;AAAA,IACX,MAAM;AAAA,EACR;AAAA,EACA,MAAM;AAAA,IACJ,KAAK;AAAA,IACL,OAAO;AAAA,IACP,WAAW;AAAA,IACX,MAAM;AAAA,EACR;AAAA,EACA,SAAS;AAAA,IACP,KAAK;AAAA,IACL,OAAO;AAAA,IACP,WAAW;AAAA,IACX,OAAO;AAAA,IACP,MAAM;AAAA,EACR;AAAA,EACA,UAAU;AAAA,IACR,KAAK;AAAA,IACL,OAAO;AAAA,IACP,WAAW;AAAA,IACX,OAAO;AAAA,IACP,MAAM;AAAA,EACR;AAAA,EACA,QAAQ;AAAA,IACN,KAAK;AAAA,IACL,OAAO;AAAA,IACP,WAAW;AAAA,IACX,MAAM;AAAA,EACR;AACF;AAEO,IAAM,uBAAuB;AAAA,EAClC,QAAQ;AAAA,IACN,YAAY;AAAA,IACZ,KAAK;AAAA,IACL,OAAO;AAAA,IACP,YAAY,CAAC;AAAA,EACf;AAAA,EACA,SAAS;AAAA,IACP,eAAe;AAAA,IACf,KAAK;AAAA,IACL,oBAAoB;AAAA,IACpB,cAAc;AAAA,IACd,gBAAgB;AAAA,IAChB,YAAY;AAAA,MACV,OAAO;AAAA,MACP,KAAK;AAAA,MACL,UAAU,yBAAyB,MAAM;AAAA,MACzC,OAAO,CAAC,EAAE,iBAAiB,MAAM;AAAA,IACnC;AAAA,IACA,OAAO;AAAA,EACT;AAAA,EACA,kBAAkB;AAAA,IAChB,eAAe;AAAA,IACf,KAAK;AAAA,IACL,oBAAoB;AAAA,IACpB,cAAc;AAAA,IACd,gBAAgB;AAAA,IAChB,YAAY,EAAE,OAAO,WAAW,KAAK,sBAAsB,UAAU,yBAAyB,IAAI,KAAK,OAAO,KAAK;AAAA,IACnH,OAAO;AAAA,EACT;AAAA,EACA,YAAY;AAAA,IACV,eAAe;AAAA,IACf,KAAK;AAAA,IACL,oBAAoB;AAAA,IACpB,cAAc;AAAA,IACd,gBAAgB;AAAA,IAChB,YAAY,EAAE,OAAO,WAAW,KAAK,UAAU,UAAU,yBAAyB,IAAI,KAAK,OAAO,KAAK;AAAA,IACvG,OAAO;AAAA,EACT;AAAA,EACA,cAAc;AAAA,IACZ,KAAK;AAAA,IACL,oBAAoB;AAAA,IACpB,cAAc;AAAA,IACd,gBAAgB;AAAA,IAChB,YAAY,EAAE,OAAO,WAAW,KAAK,iBAAiB,UAAU,yBAAyB,IAAI,KAAK,OAAO,EAAE;AAAA,IAC3G,OAAO;AAAA,EACT;AAAA,EACA,gBAAgB;AAAA,IACd,KAAK;AAAA,IACL,oBAAoB;AAAA,IACpB,cAAc;AAAA,IACd,gBAAgB;AAAA,IAChB,YAAY,EAAE,OAAO,aAAa,KAAK,qBAAqB,UAAU,yBAAyB,IAAI,KAAK,OAAO,OAAO;AAAA,IACtH,OAAO;AAAA,EACT;AACF;AACA,IAAM,YAAY;AACX,IAAM,WAAW;AAAA,EACtB,iBAAiB;AAAA,EACjB,eAAe;AAAA,EACf,aAAa,MAAM;AAAA,EACnB;AAAA,EACA,YAAY,IAAI;AAAA,EAChB,cAAc,IAAI;AAAA,EAClB,aAAa,IAAI;AAAA,EACjB,gBAAgB,KAAK;AAAA,EACrB,aAAa,KAAK;AACpB;AAOO,IAAM,uBAAuB,EAAE,UAAU,GAAG,cAAc,UAAU,KAAK;AAEzE,IAAM,mBAAmB;AAAA,EAC9B,WAAW;AAAA,EACX,UAAU;AAAA,EACV,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,MAAM;AACR;AAEO,IAAM,qBAAqB,OAAO,OAAO,EAAE,WAAW,MAAM,OAAO,iBAAiB,SAAS,CAAC;AAErG,IAAM,kBAAkB;AAAA,EACtB,KAAK;AAAA,EACL,MAAM;AAAA,EACN,KAAK;AAAA,EACL,MAAM;AACR;AACO,IAAM,oBAAoB;AAAA,EAC/B,YAAY;AAAA,IACV,iBAAiB,gBAAgB;AAAA,IACjC,MAAM,UAAAA;AAAA,IACN,OAAO;AAAA,IACP,WAAW;AAAA,IACX,UAAU;AAAA,IACV,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,YAAY,2EAAE,oGAAsF;AAAA,EACtG;AAAA,EACA,WAAW;AAAA,IACT,iBAAiB,gBAAgB;AAAA,IACjC,MAAM,UAAAC;AAAA,IACN,OAAO;AAAA,IACP,WAAW;AAAA,IACX,UAAU;AAAA,IACV,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,YACE,6CAAC,UAAK;AAAA;AAAA,MACwI;AAAA,MAE1I;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,QAAO;AAAA,UACP,KAAI;AAAA,UACL;AAAA;AAAA,MAED;AAAA,MACD;AAAA,OAEH;AAAA,EAEJ;AAAA,EACA,SAAS;AAAA,IACP,iBAAiB,gBAAgB;AAAA,IACjC,YAAY;AAAA;AAAA,IAEZ,SAAS;AAAA,IACT,UAAU;AAAA,EACZ;AACF;AAuBO,IAAM,qBAA8C,OAAO,OAAO;AAAA,EACvE,UAAU,CAAC;AAAA,EACX,aAAa,CAAC;AAAA,EACd,QAAQ,OAAO,OAAO,CAAC,CAAC;AAAA,EACxB,UAAU,OAAO,OAAO,CAAC,CAAC;AAAA,EAC1B,kBAAkB,CAAC;AAAA,EACnB,gBAAgB,CAAC;AACnB,CAAC;AAEM,IAAM,YAA8B,OAAO,OAAO;AAAA,EACvD,MAAM;AAAA,EACN,aAAa;AAAA,EACb,aAAa,CAAC;AAAA,EACd,eAAe,OAAO,OAAO,EAAE,GAAG,mBAAmB,CAAC;AACxD,CAAC;;;AD5PD,IAAM,UAAU,IAAI,wBAAAC,QAAQ;AAE5B,IAAM,eAAe,OAAO,OAAO,EAAE,OAAO,IAAI,UAAU,OAAU,CAAC;AAErE,IAAI,aAAa;AAEV,IAAM,iBAAiB,MAAM;AAClC,MAAI,cAAc,EAAE,GAAG,aAAa;AACpC,MAAI;AACF,kBAAc,KAAK,MAAM,OAAO,aAAa,QAAQ,KAAK,KAAK,EAAE;AAAA,EACnE,QAAQ;AAAA,EAER;AACA,MAAI,YAAY,aAAa,IAAI,KAAK,YAAY,SAAS,IAAI,oBAAI,KAAK,GAAG;AACzE,YAAQ;AACR,WAAO,EAAE,GAAG,aAAa;AAAA,EAC3B;AACA,MAAI,CAAC,YAAY,OAAO;AACtB,QAAI,qBAAqB,QAAQ,IAAI,OAAO,EAAE,YAAY,KAAK,CAAC,KAAK;AACrE,QAAI,oBAAoB;AACtB,qBAAe,EAAE,OAAO,oBAAoB,kBAAU,CAAC;AACvD,kBAAY,QAAQ;AACpB,cAAQ,OAAO,KAAK;AACpB,cAAQ,OAAO,OAAO,EAAE,MAAM,IAAI,CAAC;AAAA,IACrC;AAAA,EACF;AACA,cAAY,QAAQ,YAAY,SAAS;AACzC,eAAa,YAAY;AACzB,SAAO;AACT;AAEO,IAAM,WAAW,MAAO,aAAa,aAAa,eAAe,EAAE;AAEnE,IAAM,iBAAiB,CAAC,EAAE,OAAO,UAAU,MAAM;AACtD,eAAa;AACb,SAAO,aAAa,QAAQ,OAAO,KAAK,UAAU,EAAE,OAAO,UAAU,CAAC,CAAC;AACzE;AAEO,IAAM,UAAU,MAAM;AAC3B,eAAa;AACb,UAAQ,OAAO,KAAK;AACpB,UAAQ,OAAO,OAAO,EAAE,MAAM,IAAI,CAAC;AACnC,SAAO,aAAa,WAAW,KAAK;AACpC,SAAO,aAAa,WAAW,OAAO;AACxC;AAEO,IAAM,gBAAgB;AAEtB,IAAM,eAAe,CAAC,EAAE,WAAW,MAAM,MAAM;AACpD,QAAM,kBAAkB,OAAO,OAAO,aAAa,QAAQ,OAAO,CAAC;AACnE,MAAI,kBAAkB;AACtB,MAAI,iBAAiB;AACnB,UAAM,OAAO,KAAK,IAAI,IAAI,gBAAgB,SAAS;AACnD,sBAAkB,mBAAmB;AACrC,QAAI,iBAAiB;AACnB,aAAO,aAAa,WAAW,OAAO;AAAA,IACxC;AAAA,EACF;AACA,MAAI,SAAS,cAAc,CAAC,mBAAmB,kBAAkB;AAC/D,UAAM,aAAa,oBAAI,KAAK;AAC5B,eAAW,WAAW,WAAW,WAAW,IAAI,aAAa;AAC7D,mBAAe,EAAE,OAAO,WAAW,WAAW,YAAY,EAAE,CAAC;AAAA,EAC/D;AACF;","names":["AWS","Azure","Cookies"]}