@proteinjs/user-server 1.7.0 → 1.8.0

package/dist/test/PasswordMigration.integration.test.js

@@ -0,0 +1,332 @@
+"use strict";
+var __assign = (this && this.__assign) || function () {
+    __assign = Object.assign || function(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+                t[p] = s[p];
+        }
+        return t;
+    };
+    return __assign.apply(this, arguments);
+};
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+var sha256_1 = __importDefault(require("crypto-js/sha256"));
+var argon2 = __importStar(require("argon2"));
+var moment_1 = __importDefault(require("moment"));
+var db_1 = require("@proteinjs/db");
+var user_1 = require("@proteinjs/user");
+var authenticate_1 = require("../src/authentication/authenticate");
+var PasswordHasher_1 = require("../src/authentication/PasswordHasher");
+var Signup_1 = require("../src/services/Signup");
+var UserServerTestEnvironment_1 = require("./UserServerTestEnvironment");
+var testEnv = new UserServerTestEnvironment_1.UserServerTestEnvironment();
+var ARGON2ID_PREFIX = '$argon2id$';
+var SHA256_HEX = /^[0-9a-f]{64}$/;
+/**
+ * The sha256→argon2id migration: authentication queries by EMAIL ONLY and compares in code
+ * (query-by-hash is dead), legacy sha256 rows upgrade in place on their next successful login
+ * (verify-then-rehash), every password write produces only the new self-describing format, and
+ * machine rows (generated 256-bit secrets) stay sha256 by design — cheap per-poll verifies.
+ */
+describe('Password KDF migration', function () {
+    beforeAll(function () { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, testEnv.beforeAll()];
+                case 1:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); }, 120000);
+    afterAll(function () { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, testEnv.afterAll()];
+                case 1:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    beforeEach(function () { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, (0, db_1.getDbAsSystem)().delete(user_1.tables.User, {})];
+                case 1:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    var insertUser = function (fields) { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, (0, db_1.getDbAsSystem)().insert(user_1.tables.User, __assign({ name: 'Test user', emailVerified: true, roles: [] }, fields))];
+                case 1: return [2 /*return*/, _a.sent()];
+            }
+        });
+    }); };
+    var userRow = function (email) { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0: return [4 /*yield*/, (0, db_1.getDbAsSystem)().get(user_1.tables.User, { email: email })];
+            case 1: return [2 /*return*/, _a.sent()];
+        }
+    }); }); };
+    it('legacy sha256 row: login succeeds and the row is upgraded in place to argon2id', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var legacyHash, _a, upgraded, _b, _c;
+        return __generator(this, function (_d) {
+            switch (_d.label) {
+                case 0:
+                    legacyHash = (0, sha256_1.default)('hunter2 was fine in 2004').toString();
+                    return [4 /*yield*/, insertUser({ email: 'legacy@test.local', password: legacyHash })];
+                case 1:
+                    _d.sent();
+                    _a = expect;
+                    return [4 /*yield*/, (0, authenticate_1.authenticate)('legacy@test.local', 'hunter2 was fine in 2004')];
+                case 2:
+                    _a.apply(void 0, [_d.sent()]).toBe(true);
+                    return [4 /*yield*/, userRow('legacy@test.local')];
+                case 3:
+                    upgraded = (_d.sent()).password;
+                    expect(upgraded).not.toBe(legacyHash);
+                    expect(upgraded.startsWith(ARGON2ID_PREFIX)).toBe(true);
+                    return [4 /*yield*/, expect(argon2.verify(upgraded, 'hunter2 was fine in 2004')).resolves.toBe(true)];
+                case 4:
+                    _d.sent();
+                    // The migrated row logs in through the argon2 leg — and is NOT rehashed again.
+                    _b = expect;
+                    return [4 /*yield*/, (0, authenticate_1.authenticate)('legacy@test.local', 'hunter2 was fine in 2004')];
+                case 5:
+                    // The migrated row logs in through the argon2 leg — and is NOT rehashed again.
+                    _b.apply(void 0, [_d.sent()]).toBe(true);
+                    _c = expect;
+                    return [4 /*yield*/, userRow('legacy@test.local')];
+                case 6:
+                    _c.apply(void 0, [(_d.sent()).password]).toBe(upgraded);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('new-format row: login verifies against the stored encoded hash', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var encoded, _a, _b;
+        return __generator(this, function (_c) {
+            switch (_c.label) {
+                case 0: return [4 /*yield*/, new PasswordHasher_1.PasswordHasher().hash('correct horse battery staple')];
+                case 1:
+                    encoded = _c.sent();
+                    return [4 /*yield*/, insertUser({ email: 'modern@test.local', password: encoded })];
+                case 2:
+                    _c.sent();
+                    _a = expect;
+                    return [4 /*yield*/, (0, authenticate_1.authenticate)('modern@test.local', 'correct horse battery staple')];
+                case 3:
+                    _a.apply(void 0, [_c.sent()]).toBe(true);
+                    _b = expect;
+                    return [4 /*yield*/, userRow('modern@test.local')];
+                case 4:
+                    _b.apply(void 0, [(_c.sent()).password]).toBe(encoded);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('wrong password fails for both stored formats, and never mutates the row', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var legacyHash, _a, _b, _c, _d;
+        var _e;
+        return __generator(this, function (_f) {
+            switch (_f.label) {
+                case 0:
+                    legacyHash = (0, sha256_1.default)('right password').toString();
+                    return [4 /*yield*/, insertUser({ email: 'legacy@test.local', password: legacyHash })];
+                case 1:
+                    _f.sent();
+                    _a = insertUser;
+                    _e = { email: 'modern@test.local' };
+                    return [4 /*yield*/, new PasswordHasher_1.PasswordHasher().hash('right password')];
+                case 2: return [4 /*yield*/, _a.apply(void 0, [(_e.password = _f.sent(), _e)])];
+                case 3:
+                    _f.sent();
+                    _b = expect;
+                    return [4 /*yield*/, (0, authenticate_1.authenticate)('legacy@test.local', 'wrong password')];
+                case 4:
+                    _b.apply(void 0, [_f.sent()]).toBe('User name or password incorrect');
+                    _c = expect;
+                    return [4 /*yield*/, (0, authenticate_1.authenticate)('modern@test.local', 'wrong password')];
+                case 5:
+                    _c.apply(void 0, [_f.sent()]).toBe('User name or password incorrect');
+                    // A failed attempt is not a migration event: the legacy row still holds its sha256.
+                    _d = expect;
+                    return [4 /*yield*/, userRow('legacy@test.local')];
+                case 6:
+                    // A failed attempt is not a migration event: the legacy row still holds its sha256.
+                    _d.apply(void 0, [(_f.sent()).password]).toBe(legacyHash);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('unknown email fails the same way (no query-by-hash oracle)', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var _a;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0:
+                    _a = expect;
+                    return [4 /*yield*/, (0, authenticate_1.authenticate)('nobody@test.local', 'anything')];
+                case 1:
+                    _a.apply(void 0, [_b.sent()]).toBe('User name or password incorrect');
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('new registrations write only the new format', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var row, _a;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0: return [4 /*yield*/, new Signup_1.Signup().createAccount({
+                        name: 'New user',
+                        email: 'new@test.local',
+                        password: 'first password',
+                        emailVerified: false,
+                        invitedBy: null,
+                    })];
+                case 1:
+                    _b.sent();
+                    return [4 /*yield*/, userRow('new@test.local')];
+                case 2:
+                    row = _b.sent();
+                    expect(row.password.startsWith(ARGON2ID_PREFIX)).toBe(true);
+                    expect(row.password).not.toBe((0, sha256_1.default)('first password').toString());
+                    _a = expect;
+                    return [4 /*yield*/, (0, authenticate_1.authenticate)('new@test.local', 'first password')];
+                case 3:
+                    _a.apply(void 0, [_b.sent()]).toBe(true);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('deactivated and pending-deletion gates are unchanged across both formats', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var _a, _b, _c;
+        var _d;
+        return __generator(this, function (_e) {
+            switch (_e.label) {
+                case 0: 
+                // Staff-deactivated account: correct credentials are still refused a session.
+                return [4 /*yield*/, insertUser({ email: 'off@test.local', password: (0, sha256_1.default)('pw').toString(), status: 'deactivated' })];
+                case 1:
+                    // Staff-deactivated account: correct credentials are still refused a session.
+                    _e.sent();
+                    _a = expect;
+                    return [4 /*yield*/, (0, authenticate_1.authenticate)('off@test.local', 'pw')];
+                case 2:
+                    _a.apply(void 0, [_e.sent()]).toBe('This account has been deactivated');
+                    _b = insertUser;
+                    _d = {
+                        email: 'pending@test.local'
+                    };
+                    return [4 /*yield*/, new PasswordHasher_1.PasswordHasher().hash('pw')];
+                case 3: 
+                // Pending-deletion account (deactivated + deleteRequestedAt): login IS the cancel signal —
+                // authenticate admits it, for migrated rows too.
+                return [4 /*yield*/, _b.apply(void 0, [(_d.password = _e.sent(),
+                            _d.status = 'deactivated',
+                            _d.deleteRequestedAt = (0, moment_1.default)(),
+                            _d)])];
+                case 4:
+                    // Pending-deletion account (deactivated + deleteRequestedAt): login IS the cancel signal —
+                    // authenticate admits it, for migrated rows too.
+                    _e.sent();
+                    _c = expect;
+                    return [4 /*yield*/, (0, authenticate_1.authenticate)('pending@test.local', 'pw')];
+                case 5:
+                    _c.apply(void 0, [_e.sent()]).toBe(true);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('machine rows authenticate through the same owner but never leave sha256', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var secret, machineHash, _a, row;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0:
+                    secret = '9f'.repeat(32);
+                    machineHash = (0, sha256_1.default)(secret).toString();
+                    return [4 /*yield*/, insertUser({ email: 'machine@test.local', password: machineHash, isLoadedFromSource: true })];
+                case 1:
+                    _b.sent();
+                    _a = expect;
+                    return [4 /*yield*/, (0, authenticate_1.authenticate)('machine@test.local', secret)];
+                case 2:
+                    _a.apply(void 0, [_b.sent()]).toBe(true);
+                    return [4 /*yield*/, userRow('machine@test.local')];
+                case 3:
+                    row = _b.sent();
+                    expect(row.password).toBe(machineHash);
+                    expect(row.password).toMatch(SHA256_HEX);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+});
+//# sourceMappingURL=PasswordMigration.integration.test.js.map

package/dist/test/PasswordMigration.integration.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PasswordMigration.integration.test.js","sourceRoot":"","sources":["../../test/PasswordMigration.integration.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4DAAsC;AACtC,6CAAiC;AACjC,kDAA4B;AAC5B,oCAA8C;AAC9C,wCAA+C;AAC/C,mEAAkE;AAClE,uEAAsE;AACtE,iDAAgD;AAChD,yEAAwE;AAExE,IAAM,OAAO,GAAG,IAAI,qDAAyB,EAAE,CAAC;AAEhD,IAAM,eAAe,GAAG,YAAY,CAAC;AACrC,IAAM,UAAU,GAAG,gBAAgB,CAAC;AAEpC;;;;;GAKG;AACH,QAAQ,CAAC,wBAAwB,EAAE;IACjC,SAAS,CAAC;;;wBACR,qBAAM,OAAO,CAAC,SAAS,EAAE,EAAA;;oBAAzB,SAAyB,CAAC;;;;SAC3B,EAAE,MAAM,CAAC,CAAC;IAEX,QAAQ,CAAC;;;wBACP,qBAAM,OAAO,CAAC,QAAQ,EAAE,EAAA;;oBAAxB,SAAwB,CAAC;;;;SAC1B,CAAC,CAAC;IAEH,UAAU,CAAC;;;wBACT,qBAAM,IAAA,kBAAa,GAAE,CAAC,MAAM,CAAC,aAAM,CAAC,IAAI,EAAE,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAC;;;;SAC/C,CAAC,CAAC;IAEH,IAAM,UAAU,GAAG,UAAO,MAA2D;;;wBACnF,qBAAM,IAAA,kBAAa,GAAE,CAAC,MAAM,CAAC,aAAM,CAAC,IAAI,aACtC,IAAI,EAAE,WAAW,EACjB,aAAa,EAAE,IAAI,EACnB,KAAK,EAAE,EAAE,IACN,MAAM,EACT,EAAA;wBALF,sBAAA,SAKE,EAAA;;;SAAA,CAAC;IAEL,IAAM,OAAO,GAAG,UAAO,KAAa;;oBAAK,qBAAM,IAAA,kBAAa,GAAE,CAAC,GAAG,CAAC,aAAM,CAAC,IAAI,EAAE,EAAE,KAAK,OAAA,EAAE,CAAC,EAAA;oBAAjD,sBAAA,SAAiD,EAAA;;aAAA,CAAC;IAE3F,EAAE,CAAC,gFAAgF,EAAE;;;;;oBAC7E,UAAU,GAAG,IAAA,gBAAM,EAAC,0BAA0B,CAAC,CAAC,QAAQ,EAAE,CAAC;oBACjE,qBAAM,UAAU,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,EAAA;;oBAAtE,SAAsE,CAAC;oBAEvE,KAAA,MAAM,CAAA;oBAAC,qBAAM,IAAA,2BAAY,EAAC,mBAAmB,EAAE,0BAA0B,CAAC,EAAA;;oBAA1E,kBAAO,SAAmE,EAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAIrE,qBAAM,OAAO,CAAC,mBAAmB,CAAC,EAAA;;oBAA9C,QAAQ,GAAG,CAAC,SAAkC,CAAC,CAAC,QAAQ;oBAC9D,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBACtC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACxD,qBAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,0BAA0B,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAA;;oBAArF,SAAqF,CAAC;oBAEtF,+EAA+E;oBAC/E,KAAA,MAAM,CAAA;oBAAC,qBAAM,IAAA,2BAAY,EAAC,mBAAmB,EAAE,0BAA0B,CAAC,EAAA;;oBAD1E,+EAA+E;oBAC/E,kBAAO,SAAmE,EAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACvF,KAAA,MAAM,CAAA;oBAAE,qBAAM,OAAO,CAAC,mBAAmB,CAAC,EAAA;;oBAA1C,kBAAO,CAAC,SAAkC,CAAC,CAAC,QAAQ,EAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;;;;SACtE,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE;;;;wBACnD,qBAAM,IAAI,+BAAc,EAAE,CAAC,IAAI,CAAC,8BAA8B,CAAC,EAAA;;oBAAzE,OAAO,GAAG,SAA+D;oBAC/E,qBAAM,UAAU,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAA;;oBAAnE,SAAmE,CAAC;oBAEpE,KAAA,MAAM,CAAA;oBAAC,qBAAM,IAAA,2BAAY,EAAC,mBAAmB,EAAE,8BAA8B,CAAC,EAAA;;oBAA9E,kBAAO,SAAuE,EAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC3F,KAAA,MAAM,CAAA;oBAAE,qBAAM,OAAO,CAAC,mBAAmB,CAAC,EAAA;;oBAA1C,kBAAO,CAAC,SAAkC,CAAC,CAAC,QAAQ,EAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;;;;SACrE,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE;;;;;;oBACtE,UAAU,GAAG,IAAA,gBAAM,EAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE,CAAC;oBACvD,qBAAM,UAAU,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,EAAA;;oBAAtE,SAAsE,CAAC;oBACjE,KAAA,UAAU,CAAA;2BAAG,KAAK,EAAE,mBAAmB;oBAAY,qBAAM,IAAI,+BAAc,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAA;wBAA1G,qBAAM,mBAAyC,WAAQ,GAAE,SAAiD,OAAG,EAAA;;oBAA7G,SAA6G,CAAC;oBAE9G,KAAA,MAAM,CAAA;oBAAC,qBAAM,IAAA,2BAAY,EAAC,mBAAmB,EAAE,gBAAgB,CAAC,EAAA;;oBAAhE,kBAAO,SAAyD,EAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;oBAC1G,KAAA,MAAM,CAAA;oBAAC,qBAAM,IAAA,2BAAY,EAAC,mBAAmB,EAAE,gBAAgB,CAAC,EAAA;;oBAAhE,kBAAO,SAAyD,EAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;oBAE1G,oFAAoF;oBACpF,KAAA,MAAM,CAAA;oBAAE,qBAAM,OAAO,CAAC,mBAAmB,CAAC,EAAA;;oBAD1C,oFAAoF;oBACpF,kBAAO,CAAC,SAAkC,CAAC,CAAC,QAAQ,EAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;;;;SACxE,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE;;;;;oBAC/D,KAAA,MAAM,CAAA;oBAAC,qBAAM,IAAA,2BAAY,EAAC,mBAAmB,EAAE,UAAU,CAAC,EAAA;;oBAA1D,kBAAO,SAAmD,EAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;;;;SACrG,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE;;;;wBAChD,qBAAM,IAAI,eAAM,EAAE,CAAC,aAAa,CAAC;wBAC/B,IAAI,EAAE,UAAU;wBAChB,KAAK,EAAE,gBAAgB;wBACvB,QAAQ,EAAE,gBAAgB;wBAC1B,aAAa,EAAE,KAAK;wBACpB,SAAS,EAAE,IAAI;qBAChB,CAAC,EAAA;;oBANF,SAME,CAAC;oBAES,qBAAM,OAAO,CAAC,gBAAgB,CAAC,EAAA;;oBAArC,GAAG,GAAG,SAA+B;oBAC3C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC5D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAA,gBAAM,EAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;oBACnE,KAAA,MAAM,CAAA;oBAAC,qBAAM,IAAA,2BAAY,EAAC,gBAAgB,EAAE,gBAAgB,CAAC,EAAA;;oBAA7D,kBAAO,SAAsD,EAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;;;SAC3E,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE;;;;;;gBAC7E,8EAA8E;gBAC9E,qBAAM,UAAU,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAA,gBAAM,EAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,EAAA;;oBADvG,8EAA8E;oBAC9E,SAAuG,CAAC;oBACxG,KAAA,MAAM,CAAA;oBAAC,qBAAM,IAAA,2BAAY,EAAC,gBAAgB,EAAE,IAAI,CAAC,EAAA;;oBAAjD,kBAAO,SAA0C,EAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;oBAIvF,KAAA,UAAU,CAAA;;wBACd,KAAK,EAAE,oBAAoB;;oBACjB,qBAAM,IAAI,+BAAc,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAA;;gBAJjD,2FAA2F;gBAC3F,iDAAiD;gBACjD,qBAAM,mBAEJ,WAAQ,GAAE,SAAqC;4BAC/C,SAAM,GAAE,aAAa;4BACrB,oBAAiB,GAAE,IAAA,gBAAM,GAAE;iCAC3B,EAAA;;oBAPF,2FAA2F;oBAC3F,iDAAiD;oBACjD,SAKE,CAAC;oBACH,KAAA,MAAM,CAAA;oBAAC,qBAAM,IAAA,2BAAY,EAAC,oBAAoB,EAAE,IAAI,CAAC,EAAA;;oBAArD,kBAAO,SAA8C,EAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;;;SACnE,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE;;;;;oBAItE,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACzB,WAAW,GAAG,IAAA,gBAAM,EAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;oBAC9C,qBAAM,UAAU,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,EAAA;;oBAAlG,SAAkG,CAAC;oBAEnG,KAAA,MAAM,CAAA;oBAAC,qBAAM,IAAA,2BAAY,EAAC,oBAAoB,EAAE,MAAM,CAAC,EAAA;;oBAAvD,kBAAO,SAAgD,EAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAExD,qBAAM,OAAO,CAAC,oBAAoB,CAAC,EAAA;;oBAAzC,GAAG,GAAG,SAAmC;oBAC/C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;oBACvC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;;;;SAC1C,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/SetUserStatus.integration.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=SetUserStatus.integration.test.d.ts.map

package/dist/test/SetUserStatus.integration.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SetUserStatus.integration.test.d.ts","sourceRoot":"","sources":["../../test/SetUserStatus.integration.test.ts"],"names":[],"mappings":""}

package/dist/test/SetUserStatus.integration.test.js

@@ -0,0 +1,266 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+var db_1 = require("@proteinjs/db");
+var reflection_1 = require("@proteinjs/reflection");
+// Deep import (test-only): ServiceAuth is the real RPC door but is not index-exported by
+// @proteinjs/service — the door test below runs the actual gate rather than pinning metadata.
+var ServiceAuth_1 = require("@proteinjs/service/dist/src/ServiceAuth");
+var user_1 = require("@proteinjs/user");
+var SetUserStatus_1 = require("../src/services/SetUserStatus");
+var UserServerTestEnvironment_1 = require("./UserServerTestEnvironment");
+var testEnv = new UserServerTestEnvironment_1.UserServerTestEnvironment();
+/**
+ * The SetUserStatus service is the ONE write path for account standing: the status update and
+ * its `user_status_event` audit row commit together. Outcomes asserted against the emulator:
+ * the rows written, not the calls made.
+ *
+ * The service door is exercised through ServiceAuth itself (the same gate the RPC path runs):
+ * the explicit `roles: ['admin']` block refuses everyone but admins.
+ */
+describe('SetUserStatus service — admin door, standing writes, audit trail', function () {
+    var admin;
+    var nonAdmin;
+    var target;
+    beforeAll(function () { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, testEnv.beforeAll()];
+                case 1:
+                    _a.sent();
+                    // ServiceAuth funnels through UserAuth, which resolves the current user from the
+                    // source-graph-registered AuthenticatedUserRepo — seed it the way the env seeds session
+                    // storage (tests do not load the generated source graph).
+                    reflection_1.SourceRepository.get().objectCache['@proteinjs/user-auth/AuthenticatedUserRepo'] = [new user_1.UserRepo()];
+                    return [2 /*return*/];
+            }
+        });
+    }); }, 120000);
+    afterAll(function () { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, testEnv.afterAll()];
+                case 1:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    beforeEach(function () { return __awaiter(void 0, void 0, void 0, function () {
+        var db;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    db = (0, db_1.getDbAsSystem)();
+                    return [4 /*yield*/, db.delete(user_1.tables.UserStatusEvent, {})];
+                case 1:
+                    _a.sent();
+                    return [4 /*yield*/, db.delete(user_1.tables.User, {})];
+                case 2:
+                    _a.sent();
+                    return [4 /*yield*/, testEnv.createUser({ name: 'Admin actor', email: 'status-admin@test.local', roles: ['admin'] })];
+                case 3:
+                    admin = _a.sent();
+                    return [4 /*yield*/, testEnv.createUser({ name: 'Plain actor', email: 'status-plain@test.local', roles: ['ops'] })];
+                case 4:
+                    nonAdmin = _a.sent();
+                    return [4 /*yield*/, testEnv.createUser({ name: 'Target user', email: 'status-target@test.local' })];
+                case 5:
+                    target = _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    var targetStatus = function () { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0: return [4 /*yield*/, (0, db_1.getDbAsSystem)().get(user_1.tables.User, { id: target.id })];
+            case 1: return [2 /*return*/, (_a.sent()).status];
+        }
+    }); }); };
+    var auditRows = function () { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0: return [4 /*yield*/, (0, db_1.getDbAsSystem)().query(user_1.tables.UserStatusEvent, {})];
+            case 1: return [2 /*return*/, _a.sent()];
+        }
+    }); }); };
+    var canRun = function () {
+        return ServiceAuth_1.ServiceAuth.canRunService(new SetUserStatus_1.SetUserStatus(), { name: 'setUserStatus' }, [target.id, 'deactivated']);
+    };
+    it('refuses the door for a non-admin and admits an admin', function () {
+        testEnv.actAs(nonAdmin);
+        expect(canRun()).toBe(false);
+        testEnv.actAs(admin);
+        expect(canRun()).toBe(true);
+    });
+    it('deactivate writes the standing on the user row and one audit row', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var _a, events;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0:
+                    testEnv.actAs(admin);
+                    return [4 /*yield*/, new SetUserStatus_1.SetUserStatus().setUserStatus(target.id, 'deactivated')];
+                case 1:
+                    _b.sent();
+                    _a = expect;
+                    return [4 /*yield*/, targetStatus()];
+                case 2:
+                    _a.apply(void 0, [_b.sent()]).toBe('deactivated');
+                    return [4 /*yield*/, auditRows()];
+                case 3:
+                    events = _b.sent();
+                    expect(events).toHaveLength(1);
+                    expect(events[0]).toMatchObject({ actor: admin.id, target: target.id, status: 'deactivated' });
+                    expect(events[0].created).toBeDefined();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('setting the standing the user already holds changes nothing and writes no audit row', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var service, _a, _b;
+        return __generator(this, function (_c) {
+            switch (_c.label) {
+                case 0:
+                    testEnv.actAs(admin);
+                    service = new SetUserStatus_1.SetUserStatus();
+                    return [4 /*yield*/, service.setUserStatus(target.id, 'deactivated')];
+                case 1:
+                    _c.sent();
+                    return [4 /*yield*/, service.setUserStatus(target.id, 'deactivated')];
+                case 2:
+                    _c.sent();
+                    _a = expect;
+                    return [4 /*yield*/, targetStatus()];
+                case 3:
+                    _a.apply(void 0, [_c.sent()]).toBe('deactivated');
+                    _b = expect;
+                    return [4 /*yield*/, auditRows()];
+                case 4:
+                    _b.apply(void 0, [_c.sent()]).toHaveLength(1);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('treats a null standing (row predating the column) as active — no write, no audit row', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var _a, _b;
+        return __generator(this, function (_c) {
+            switch (_c.label) {
+                case 0: return [4 /*yield*/, (0, db_1.getDbAsSystem)().update(user_1.tables.User, { id: target.id, status: null })];
+                case 1:
+                    _c.sent();
+                    testEnv.actAs(admin);
+                    return [4 /*yield*/, new SetUserStatus_1.SetUserStatus().setUserStatus(target.id, 'active')];
+                case 2:
+                    _c.sent();
+                    _a = expect;
+                    return [4 /*yield*/, targetStatus()];
+                case 3:
+                    _a.apply(void 0, [_c.sent()]).toBeFalsy();
+                    _b = expect;
+                    return [4 /*yield*/, auditRows()];
+                case 4:
+                    _b.apply(void 0, [_c.sent()]).toHaveLength(0);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('reactivate flips the standing back and audits it', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var service, _a, events;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0:
+                    testEnv.actAs(admin);
+                    service = new SetUserStatus_1.SetUserStatus();
+                    return [4 /*yield*/, service.setUserStatus(target.id, 'deactivated')];
+                case 1:
+                    _b.sent();
+                    return [4 /*yield*/, service.setUserStatus(target.id, 'active')];
+                case 2:
+                    _b.sent();
+                    _a = expect;
+                    return [4 /*yield*/, targetStatus()];
+                case 3:
+                    _a.apply(void 0, [_b.sent()]).toBe('active');
+                    return [4 /*yield*/, auditRows()];
+                case 4:
+                    events = _b.sent();
+                    expect(events).toHaveLength(2);
+                    expect(events.map(function (event) { return event.status; }).sort()).toEqual(['active', 'deactivated']);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('refuses a standing the vocabulary does not know, and writes nothing', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var _a, _b;
+        return __generator(this, function (_c) {
+            switch (_c.label) {
+                case 0:
+                    testEnv.actAs(admin);
+                    return [4 /*yield*/, expect(new SetUserStatus_1.SetUserStatus().setUserStatus(target.id, 'suspended')).rejects.toThrow("'suspended' is not a known user status. Pick one of: active, deactivated.")];
+                case 1:
+                    _c.sent();
+                    _a = expect;
+                    return [4 /*yield*/, targetStatus()];
+                case 2:
+                    _a.apply(void 0, [_c.sent()]).toBe('active');
+                    _b = expect;
+                    return [4 /*yield*/, auditRows()];
+                case 3:
+                    _b.apply(void 0, [_c.sent()]).toHaveLength(0);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('refuses a change for a user that does not exist', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var _a;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0:
+                    testEnv.actAs(admin);
+                    return [4 /*yield*/, expect(new SetUserStatus_1.SetUserStatus().setUserStatus('nobody-1', 'deactivated')).rejects.toThrow('No user found for id: nobody-1')];
+                case 1:
+                    _b.sent();
+                    _a = expect;
+                    return [4 /*yield*/, auditRows()];
+                case 2:
+                    _a.apply(void 0, [_b.sent()]).toHaveLength(0);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+});
+//# sourceMappingURL=SetUserStatus.integration.test.js.map

package/dist/test/SetUserStatus.integration.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SetUserStatus.integration.test.js","sourceRoot":"","sources":["../../test/SetUserStatus.integration.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,oCAA8C;AAC9C,oDAAyD;AACzD,yFAAyF;AACzF,8FAA8F;AAC9F,uEAAsE;AACtE,wCAAyD;AACzD,+DAA8D;AAC9D,yEAAwE;AAExE,IAAM,OAAO,GAAG,IAAI,qDAAyB,EAAE,CAAC;AAEhD;;;;;;;GAOG;AACH,QAAQ,CAAC,kEAAkE,EAAE;IAC3E,IAAI,KAAW,CAAC;IAChB,IAAI,QAAc,CAAC;IACnB,IAAI,MAAY,CAAC;IAEjB,SAAS,CAAC;;;wBACR,qBAAM,OAAO,CAAC,SAAS,EAAE,EAAA;;oBAAzB,SAAyB,CAAC;oBAC1B,iFAAiF;oBACjF,wFAAwF;oBACxF,0DAA0D;oBACzD,6BAAgB,CAAC,GAAG,EAA4D,CAAC,WAAW,CAC3F,4CAA4C,CAC7C,GAAG,CAAC,IAAI,eAAQ,EAAE,CAAC,CAAC;;;;SACtB,EAAE,MAAM,CAAC,CAAC;IAEX,QAAQ,CAAC;;;wBACP,qBAAM,OAAO,CAAC,QAAQ,EAAE,EAAA;;oBAAxB,SAAwB,CAAC;;;;SAC1B,CAAC,CAAC;IAEH,UAAU,CAAC;;;;;oBACH,EAAE,GAAG,IAAA,kBAAa,GAAE,CAAC;oBAC3B,qBAAM,EAAE,CAAC,MAAM,CAAC,aAAM,CAAC,eAAe,EAAE,EAAE,CAAC,EAAA;;oBAA3C,SAA2C,CAAC;oBAC5C,qBAAM,EAAE,CAAC,MAAM,CAAC,aAAM,CAAC,IAAI,EAAE,EAAE,CAAC,EAAA;;oBAAhC,SAAgC,CAAC;oBACzB,qBAAM,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,yBAAyB,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAA;;oBAA7G,KAAK,GAAG,SAAqG,CAAC;oBACnG,qBAAM,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,yBAAyB,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAA;;oBAA9G,QAAQ,GAAG,SAAmG,CAAC;oBACtG,qBAAM,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,EAAA;;oBAA7F,MAAM,GAAG,SAAoF,CAAC;;;;SAC/F,CAAC,CAAC;IAEH,IAAM,YAAY,GAAG;;oBAAa,qBAAM,IAAA,kBAAa,GAAE,CAAC,GAAG,CAAC,aAAM,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,EAAA;oBAA1D,sBAAA,CAAC,SAAyD,CAAE,CAAC,MAAM,EAAA;;aAAA,CAAC;IACrG,IAAM,SAAS,GAAG;;oBAAY,qBAAM,IAAA,kBAAa,GAAE,CAAC,KAAK,CAAC,aAAM,CAAC,eAAe,EAAE,EAAE,CAAC,EAAA;oBAAvD,sBAAA,SAAuD,EAAA;;aAAA,CAAC;IACtF,IAAM,MAAM,GAAG;QACb,OAAA,yBAAW,CAAC,aAAa,CAAC,IAAI,6BAAa,EAAE,EAAE,EAAE,IAAI,EAAE,eAAe,EAAS,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;IAA5G,CAA4G,CAAC;IAE/G,EAAE,CAAC,sDAAsD,EAAE;QACzD,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAE7B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE;;;;;oBACrE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACrB,qBAAM,IAAI,6BAAa,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,aAAa,CAAC,EAAA;;oBAAjE,SAAiE,CAAC;oBAElE,KAAA,MAAM,CAAA;oBAAC,qBAAM,YAAY,EAAE,EAAA;;oBAA3B,kBAAO,SAAoB,EAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;oBAClC,qBAAM,SAAS,EAAE,EAAA;;oBAA1B,MAAM,GAAG,SAAiB;oBAChC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;oBAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;oBAC/F,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;;;;SACzC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE;;;;;oBACxF,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACf,OAAO,GAAG,IAAI,6BAAa,EAAE,CAAC;oBACpC,qBAAM,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,aAAa,CAAC,EAAA;;oBAArD,SAAqD,CAAC;oBACtD,qBAAM,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,aAAa,CAAC,EAAA;;oBAArD,SAAqD,CAAC;oBAEtD,KAAA,MAAM,CAAA;oBAAC,qBAAM,YAAY,EAAE,EAAA;;oBAA3B,kBAAO,SAAoB,EAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;oBACjD,KAAA,MAAM,CAAA;oBAAC,qBAAM,SAAS,EAAE,EAAA;;oBAAxB,kBAAO,SAAiB,EAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;;;;SAC3C,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE;;;;wBACzF,qBAAM,IAAA,kBAAa,GAAE,CAAC,MAAM,CAAC,aAAM,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAA;;oBAA1E,SAA0E,CAAC;oBAE3E,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACrB,qBAAM,IAAI,6BAAa,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAA;;oBAA5D,SAA4D,CAAC;oBAE7D,KAAA,MAAM,CAAA;oBAAC,qBAAM,YAAY,EAAE,EAAA;;oBAA3B,kBAAO,SAAoB,EAAC,CAAC,SAAS,EAAE,CAAC;oBACzC,KAAA,MAAM,CAAA;oBAAC,qBAAM,SAAS,EAAE,EAAA;;oBAAxB,kBAAO,SAAiB,EAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;;;;SAC3C,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE;;;;;oBACrD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACf,OAAO,GAAG,IAAI,6BAAa,EAAE,CAAC;oBACpC,qBAAM,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,aAAa,CAAC,EAAA;;oBAArD,SAAqD,CAAC;oBACtD,qBAAM,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAA;;oBAAhD,SAAgD,CAAC;oBAEjD,KAAA,MAAM,CAAA;oBAAC,qBAAM,YAAY,EAAE,EAAA;;oBAA3B,kBAAO,SAAoB,EAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAC7B,qBAAM,SAAS,EAAE,EAAA;;oBAA1B,MAAM,GAAG,SAAiB;oBAChC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;oBAC/B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,UAAC,KAAK,IAAK,OAAA,KAAK,CAAC,MAAM,EAAZ,CAAY,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;;;;SACvF,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE;;;;;oBACxE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACrB,qBAAM,MAAM,CAAC,IAAI,6BAAa,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,WAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC5F,2EAA2E,CAC5E,EAAA;;oBAFD,SAEC,CAAC;oBACF,KAAA,MAAM,CAAA;oBAAC,qBAAM,YAAY,EAAE,EAAA;;oBAA3B,kBAAO,SAAoB,EAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAC5C,KAAA,MAAM,CAAA;oBAAC,qBAAM,SAAS,EAAE,EAAA;;oBAAxB,kBAAO,SAAiB,EAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;;;;SAC3C,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE;;;;;oBACpD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACrB,qBAAM,MAAM,CAAC,IAAI,6BAAa,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACxF,gCAAgC,CACjC,EAAA;;oBAFD,SAEC,CAAC;oBACF,KAAA,MAAM,CAAA;oBAAC,qBAAM,SAAS,EAAE,EAAA;;oBAAxB,kBAAO,SAAiB,EAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;;;;SAC3C,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/UserStatusGate.integration.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=UserStatusGate.integration.test.d.ts.map

package/dist/test/UserStatusGate.integration.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserStatusGate.integration.test.d.ts","sourceRoot":"","sources":["../../test/UserStatusGate.integration.test.ts"],"names":[],"mappings":""}