@sasjs/api 0.7.1 → 0.8.0

package/build/browser.js

@@ -1,4 +1,4 @@
-/* @sasjs/api 0.7.1 - the SASjs Server API, for a service worker. https://github.com/sasjs/api */
+/* @sasjs/api 0.8.0 - the SASjs Server API, for a service worker. https://github.com/sasjs/api */
 "use strict";
 var SASjsApi = (() => {
   var __defProp = Object.defineProperty;
@@ -1736,8 +1736,8 @@ var SASjsApi = (() => {
       requestBodies: [],
       responses: [
         {
-          status: 204,
-          description: "No content"
+          status: 200,
+          description: "Permission Deleted!"
         },
         {
           status: 401,
@@ -2080,8 +2080,8 @@ var SASjsApi = (() => {
       requestBodies: ["application/json"],
       responses: [
         {
-          status: 204,
-          description: "No content"
+          status: 200,
+          description: "Account Deleted!"
         },
         {
           status: 401,
@@ -2220,8 +2220,8 @@ var SASjsApi = (() => {
       requestBodies: ["application/json"],
       responses: [
         {
-          status: 204,
-          description: "No content"
+          status: 200,
+          description: "Account Deleted!"
         },
         {
           status: 401,
@@ -2626,13 +2626,6 @@ var SASjsApi = (() => {
     },
     "POST /SASjsApi/permission": { implemented: true },
     "PATCH /SASjsApi/permission/{uid}": { implemented: true },
-    // The three deletes answer 204 here and 200 on the wire: the server's route
-    // handlers send `res.status(200).send('Account Deleted!')` and
-    // `'Permission Deleted!'`, while tsoa emitted 204 for a void handler, so the
-    // document understates the status. Correcting it is a decorator in
-    // sasjs/server (`@SuccessResponse('200', ...)`), and this package follows the
-    // document until that release lands - a local 200 would fail the schema check
-    // that keeps this table honest.
     "DELETE /SASjsApi/permission/{uid}": { implemented: true },
     // Session - the caller's own session, then the record behind a triggered one
     "GET /SASjsApi/session": {
@@ -2960,19 +2953,23 @@ var SASjsApi = (() => {
           )
         };
       case "DELETE /SASjsApi/user/{uid}":
-        await required().deleteUser(
-          await caller(),
-          { uid: String(params.uid ?? "") },
-          { password: body.password }
-        );
-        return { status: 204 };
+        return {
+          status: 200,
+          body: await required().deleteUser(
+            await caller(),
+            { uid: String(params.uid ?? "") },
+            { password: body.password }
+          )
+        };
       case "DELETE /SASjsApi/user/by/username/{username}":
-        await required().deleteUser(
-          await caller(),
-          { username: String(params.username ?? "") },
-          { password: body.password }
-        );
-        return { status: 204 };
+        return {
+          status: 200,
+          body: await required().deleteUser(
+            await caller(),
+            { username: String(params.username ?? "") },
+            { password: body.password }
+          )
+        };
       case "GET /SASjsApi/group":
         return { status: 200, body: await required().listGroups(await caller()) };
       case "GET /SASjsApi/group/{uid}":
@@ -3045,11 +3042,13 @@ var SASjsApi = (() => {
           )
         };
       case "DELETE /SASjsApi/permission/{uid}":
-        await required().deletePermission(
-          await caller(),
-          String(params.uid ?? "")
-        );
-        return { status: 204 };
+        return {
+          status: 200,
+          body: await required().deletePermission(
+            await caller(),
+            String(params.uid ?? "")
+          )
+        };
       case "GET /SASjsApi/client":
         return { status: 200, body: await required().listClients(await caller()) };
       case "POST /SASjsApi/client":
@@ -3267,23 +3266,14 @@ var SASjsApi = (() => {
       return details;
     };
     const findBy = async (by) => by.uid !== void 0 ? store.userById(by.uid) : store.userByName(by.username ?? "");
-    const permissionDetails = async (permission) => {
-      const response = {
-        uid: permission.uid,
-        path: permission.path,
-        type: permission.type,
-        setting: permission.setting
-      };
-      if (permission.user) {
-        const user3 = await store.userById(permission.user);
-        if (user3) response.user = asUser(user3);
-      }
-      if (permission.group) {
-        const group = await store.groupById(permission.group);
-        if (group) response.group = await groupDetails(group);
-      }
-      return response;
-    };
+    const permissionDetails = async (permission) => ({
+      uid: permission.uid,
+      path: permission.path,
+      type: permission.type,
+      setting: permission.setting,
+      ...permission.user ? { user: permission.user } : {},
+      ...permission.group ? { group: permission.group } : {}
+    });
     return {
       async listUsers(caller) {
         await requireCaller(store, caller);
@@ -3358,6 +3348,7 @@ var SASjsApi = (() => {
             throw new ApiError(401, "Invalid password.");
         }
         await store.deleteUser(current.uid);
+        return "Account Deleted!";
       },
       async listGroups(caller) {
         await requireCaller(store, caller);
@@ -3505,6 +3496,7 @@ var SASjsApi = (() => {
         if (!await store.permissionById(uid))
           throw new ApiError(404, "Permission not found.");
         await store.deletePermission(uid);
+        return "Permission Deleted!";
       },
       async listClients(caller) {
         await requireAdmin(store, caller);
@@ -3582,7 +3574,7 @@ var SASjsApi = (() => {
     permissions: [
       {
         uid: "rule-routes",
-        path: "/SASjsApi/info",
+        path: "/SASjsApi/drive/file",
         type: "Route",
         setting: "Grant",
         group: "group-data-controller"
@@ -5015,7 +5007,7 @@ var SASjsApi = (() => {
       description: "deletes an account as an administrator, without a password",
       identity: ADMIN_SIGNED_IN,
       request: { token: ADMIN, params: { uid: RESTRICTED_UID }, body: {} },
-      expect: { status: 204 }
+      expect: { status: 200, body: "Account Deleted!" }
     },
     {
       id: "delete-user-not-admin",
@@ -5043,7 +5035,7 @@ var SASjsApi = (() => {
         params: { username: "user2" },
         body: {}
       },
-      expect: { status: 204 }
+      expect: { status: 200, body: "Account Deleted!" }
     },
     {
       id: "delete-user-by-username-wrong-password",
@@ -5053,7 +5045,7 @@ var SASjsApi = (() => {
       request: {
         token: RESTRICTED,
         params: { username: "user2" },
-        body: { password: "wrong" }
+        body: { password: "wrong123" }
       },
       expect: { status: 401, error: "Invalid password." }
     },
@@ -5362,55 +5354,24 @@ var SASjsApi = (() => {
         body: [
           {
             uid: "rule-routes",
-            path: "/SASjsApi/info",
+            path: "/SASjsApi/drive/file",
             type: "Route",
             setting: "Grant",
-            group: {
-              uid: "group-data-controller",
-              name: "DCGroup",
-              description: "Data Controller users",
-              isActive: true,
-              users: [
-                {
-                  uid: RESTRICTED_UID,
-                  username: "user2",
-                  displayName: "Demo User",
-                  isAdmin: false
-                }
-              ]
-            }
+            group: "group-data-controller"
           },
           {
             uid: "rule-execute",
             path: "/SASjsApi/stp/execute",
             type: "Route",
             setting: "Grant",
-            group: {
-              uid: "group-data-controller",
-              name: "DCGroup",
-              description: "Data Controller users",
-              isActive: true,
-              users: [
-                {
-                  uid: RESTRICTED_UID,
-                  username: "user2",
-                  displayName: "Demo User",
-                  isAdmin: false
-                }
-              ]
-            }
+            group: "group-data-controller"
           },
           {
             uid: "rule-code",
             path: "/SASjsApi/code/execute",
             type: "Route",
             setting: "Deny",
-            user: {
-              uid: RESTRICTED_UID,
-              username: "user2",
-              displayName: "Demo User",
-              isAdmin: false
-            }
+            user: RESTRICTED_UID
           }
         ]
       }
@@ -5426,55 +5387,24 @@ var SASjsApi = (() => {
         body: [
           {
             uid: "rule-routes",
-            path: "/SASjsApi/info",
+            path: "/SASjsApi/drive/file",
             type: "Route",
             setting: "Grant",
-            group: {
-              uid: "group-data-controller",
-              name: "DCGroup",
-              description: "Data Controller users",
-              isActive: true,
-              users: [
-                {
-                  uid: RESTRICTED_UID,
-                  username: "user2",
-                  displayName: "Demo User",
-                  isAdmin: false
-                }
-              ]
-            }
+            group: "group-data-controller"
           },
           {
             uid: "rule-execute",
             path: "/SASjsApi/stp/execute",
             type: "Route",
             setting: "Grant",
-            group: {
-              uid: "group-data-controller",
-              name: "DCGroup",
-              description: "Data Controller users",
-              isActive: true,
-              users: [
-                {
-                  uid: RESTRICTED_UID,
-                  username: "user2",
-                  displayName: "Demo User",
-                  isAdmin: false
-                }
-              ]
-            }
+            group: "group-data-controller"
           },
           {
             uid: "rule-code",
             path: "/SASjsApi/code/execute",
             type: "Route",
             setting: "Deny",
-            user: {
-              uid: RESTRICTED_UID,
-              username: "user2",
-              displayName: "Demo User",
-              isAdmin: false
-            }
+            user: RESTRICTED_UID
           }
         ]
       }
@@ -5495,7 +5425,7 @@ var SASjsApi = (() => {
       request: {
         token: ADMIN,
         body: {
-          path: "/SASjsApi/code/lint",
+          path: "/SASjsApi/drive/folder",
           type: "Route",
           setting: "Grant",
           principalType: "user",
@@ -5504,7 +5434,7 @@ var SASjsApi = (() => {
       },
       expect: {
         status: 200,
-        partial: { path: "/SASjsApi/code/lint", setting: "Grant" }
+        partial: { path: "/SASjsApi/drive/folder", setting: "Grant" }
       }
     },
     {
@@ -5515,7 +5445,7 @@ var SASjsApi = (() => {
       request: {
         token: ADMIN,
         body: {
-          path: "/SASjsApi/code/lint",
+          path: "/SASjsApi/drive/rename",
           type: "Route",
           setting: "Grant",
           principalType: "group",
@@ -5525,9 +5455,9 @@ var SASjsApi = (() => {
       expect: {
         status: 200,
         partial: {
-          path: "/SASjsApi/code/lint",
+          path: "/SASjsApi/drive/rename",
           setting: "Grant",
-          group: { uid: "group-data-controller", name: "DCGroup" }
+          group: "group-data-controller"
         }
       }
     },
@@ -5539,7 +5469,7 @@ var SASjsApi = (() => {
       request: {
         token: ADMIN,
         body: {
-          path: "/SASjsApi/code/lint",
+          path: "/SASjsApi/drive/deploy",
           type: "Route",
           setting: "Grant",
           principalType: "role",
@@ -5559,7 +5489,7 @@ var SASjsApi = (() => {
       request: {
         token: ADMIN,
         body: {
-          path: "/SASjsApi/code/lint",
+          path: "/SASjsApi/drive/folder",
           type: "Route",
           setting: "Grant",
           principalType: "user",
@@ -5579,7 +5509,7 @@ var SASjsApi = (() => {
       request: {
         token: RESTRICTED,
         body: {
-          path: "/SASjsApi/code/lint",
+          path: "/SASjsApi/drive/folder",
           type: "Route",
           setting: "Grant",
           principalType: "user",
@@ -5596,7 +5526,7 @@ var SASjsApi = (() => {
       request: {
         token: ADMIN,
         body: {
-          path: "/SASjsApi/code/lint",
+          path: "/SASjsApi/drive/rename",
           type: "Route",
           setting: "Grant",
           principalType: "group",
@@ -5613,7 +5543,7 @@ var SASjsApi = (() => {
       request: {
         token: ADMIN,
         body: {
-          path: "/SASjsApi/info",
+          path: "/SASjsApi/drive/file",
           type: "Route",
           setting: "Grant",
           principalType: "group",
@@ -5687,7 +5617,7 @@ var SASjsApi = (() => {
       description: "deletes a rule",
       identity: ADMIN_SIGNED_IN,
       request: { token: ADMIN, params: { uid: "rule-code" } },
-      expect: { status: 204 }
+      expect: { status: 200, body: "Permission Deleted!" }
     },
     {
       id: "delete-permission-not-admin",

package/build/cjs/corpus/records.js

@@ -366,7 +366,7 @@ exports.RECORD_CORPUS = [
         description: 'deletes an account as an administrator, without a password',
         identity: exports.ADMIN_SIGNED_IN,
         request: { token: ADMIN, params: { uid: RESTRICTED_UID }, body: {} },
-        expect: { status: 204 }
+        expect: { status: 200, body: 'Account Deleted!' }
     },
     {
         id: 'delete-user-not-admin',
@@ -394,7 +394,7 @@ exports.RECORD_CORPUS = [
             params: { username: 'user2' },
             body: {}
         },
-        expect: { status: 204 }
+        expect: { status: 200, body: 'Account Deleted!' }
     },
     {
         id: 'delete-user-by-username-wrong-password',
@@ -404,7 +404,7 @@ exports.RECORD_CORPUS = [
         request: {
             token: RESTRICTED,
             params: { username: 'user2' },
-            body: { password: 'wrong' }
+            body: { password: 'wrong123' }
         },
         expect: { status: 401, error: 'Invalid password.' }
     },
@@ -713,55 +713,24 @@ exports.RECORD_CORPUS = [
             body: [
                 {
                     uid: 'rule-routes',
-                    path: '/SASjsApi/info',
+                    path: '/SASjsApi/drive/file',
                     type: 'Route',
                     setting: 'Grant',
-                    group: {
-                        uid: 'group-data-controller',
-                        name: 'DCGroup',
-                        description: 'Data Controller users',
-                        isActive: true,
-                        users: [
-                            {
-                                uid: RESTRICTED_UID,
-                                username: 'user2',
-                                displayName: 'Demo User',
-                                isAdmin: false
-                            }
-                        ]
-                    }
+                    group: 'group-data-controller'
                 },
                 {
                     uid: 'rule-execute',
                     path: '/SASjsApi/stp/execute',
                     type: 'Route',
                     setting: 'Grant',
-                    group: {
-                        uid: 'group-data-controller',
-                        name: 'DCGroup',
-                        description: 'Data Controller users',
-                        isActive: true,
-                        users: [
-                            {
-                                uid: RESTRICTED_UID,
-                                username: 'user2',
-                                displayName: 'Demo User',
-                                isAdmin: false
-                            }
-                        ]
-                    }
+                    group: 'group-data-controller'
                 },
                 {
                     uid: 'rule-code',
                     path: '/SASjsApi/code/execute',
                     type: 'Route',
                     setting: 'Deny',
-                    user: {
-                        uid: RESTRICTED_UID,
-                        username: 'user2',
-                        displayName: 'Demo User',
-                        isAdmin: false
-                    }
+                    user: RESTRICTED_UID
                 }
             ]
         }
@@ -777,55 +746,24 @@ exports.RECORD_CORPUS = [
             body: [
                 {
                     uid: 'rule-routes',
-                    path: '/SASjsApi/info',
+                    path: '/SASjsApi/drive/file',
                     type: 'Route',
                     setting: 'Grant',
-                    group: {
-                        uid: 'group-data-controller',
-                        name: 'DCGroup',
-                        description: 'Data Controller users',
-                        isActive: true,
-                        users: [
-                            {
-                                uid: RESTRICTED_UID,
-                                username: 'user2',
-                                displayName: 'Demo User',
-                                isAdmin: false
-                            }
-                        ]
-                    }
+                    group: 'group-data-controller'
                 },
                 {
                     uid: 'rule-execute',
                     path: '/SASjsApi/stp/execute',
                     type: 'Route',
                     setting: 'Grant',
-                    group: {
-                        uid: 'group-data-controller',
-                        name: 'DCGroup',
-                        description: 'Data Controller users',
-                        isActive: true,
-                        users: [
-                            {
-                                uid: RESTRICTED_UID,
-                                username: 'user2',
-                                displayName: 'Demo User',
-                                isAdmin: false
-                            }
-                        ]
-                    }
+                    group: 'group-data-controller'
                 },
                 {
                     uid: 'rule-code',
                     path: '/SASjsApi/code/execute',
                     type: 'Route',
                     setting: 'Deny',
-                    user: {
-                        uid: RESTRICTED_UID,
-                        username: 'user2',
-                        displayName: 'Demo User',
-                        isAdmin: false
-                    }
+                    user: RESTRICTED_UID
                 }
             ]
         }
@@ -846,7 +784,7 @@ exports.RECORD_CORPUS = [
         request: {
             token: ADMIN,
             body: {
-                path: '/SASjsApi/code/lint',
+                path: '/SASjsApi/drive/folder',
                 type: 'Route',
                 setting: 'Grant',
                 principalType: 'user',
@@ -855,7 +793,7 @@ exports.RECORD_CORPUS = [
         },
         expect: {
             status: 200,
-            partial: { path: '/SASjsApi/code/lint', setting: 'Grant' }
+            partial: { path: '/SASjsApi/drive/folder', setting: 'Grant' }
         }
     },
     {
@@ -866,7 +804,7 @@ exports.RECORD_CORPUS = [
         request: {
             token: ADMIN,
             body: {
-                path: '/SASjsApi/code/lint',
+                path: '/SASjsApi/drive/rename',
                 type: 'Route',
                 setting: 'Grant',
                 principalType: 'group',
@@ -876,9 +814,9 @@ exports.RECORD_CORPUS = [
         expect: {
             status: 200,
             partial: {
-                path: '/SASjsApi/code/lint',
+                path: '/SASjsApi/drive/rename',
                 setting: 'Grant',
-                group: { uid: 'group-data-controller', name: 'DCGroup' }
+                group: 'group-data-controller'
             }
         }
     },
@@ -890,7 +828,7 @@ exports.RECORD_CORPUS = [
         request: {
             token: ADMIN,
             body: {
-                path: '/SASjsApi/code/lint',
+                path: '/SASjsApi/drive/deploy',
                 type: 'Route',
                 setting: 'Grant',
                 principalType: 'role',
@@ -910,7 +848,7 @@ exports.RECORD_CORPUS = [
         request: {
             token: ADMIN,
             body: {
-                path: '/SASjsApi/code/lint',
+                path: '/SASjsApi/drive/folder',
                 type: 'Route',
                 setting: 'Grant',
                 principalType: 'user',
@@ -930,7 +868,7 @@ exports.RECORD_CORPUS = [
         request: {
             token: RESTRICTED,
             body: {
-                path: '/SASjsApi/code/lint',
+                path: '/SASjsApi/drive/folder',
                 type: 'Route',
                 setting: 'Grant',
                 principalType: 'user',
@@ -947,7 +885,7 @@ exports.RECORD_CORPUS = [
         request: {
             token: ADMIN,
             body: {
-                path: '/SASjsApi/code/lint',
+                path: '/SASjsApi/drive/rename',
                 type: 'Route',
                 setting: 'Grant',
                 principalType: 'group',
@@ -964,7 +902,7 @@ exports.RECORD_CORPUS = [
         request: {
             token: ADMIN,
             body: {
-                path: '/SASjsApi/info',
+                path: '/SASjsApi/drive/file',
                 type: 'Route',
                 setting: 'Grant',
                 principalType: 'group',
@@ -1038,7 +976,7 @@ exports.RECORD_CORPUS = [
         description: 'deletes a rule',
         identity: exports.ADMIN_SIGNED_IN,
         request: { token: ADMIN, params: { uid: 'rule-code' } },
-        expect: { status: 204 }
+        expect: { status: 200, body: 'Permission Deleted!' }
     },
     {
         id: 'delete-permission-not-admin',

package/build/cjs/host/dispatch.js

@@ -210,11 +210,15 @@ const dispatch = async (services, routeId, request = {}) => {
                 body: await required().updateUser(await caller(), { username: String(params.username ?? '') }, body)
             };
         case 'DELETE /SASjsApi/user/{uid}':
-            await required().deleteUser(await caller(), { uid: String(params.uid ?? '') }, { password: body.password });
-            return { status: 204 };
+            return {
+                status: 200,
+                body: await required().deleteUser(await caller(), { uid: String(params.uid ?? '') }, { password: body.password })
+            };
         case 'DELETE /SASjsApi/user/by/username/{username}':
-            await required().deleteUser(await caller(), { username: String(params.username ?? '') }, { password: body.password });
-            return { status: 204 };
+            return {
+                status: 200,
+                body: await required().deleteUser(await caller(), { username: String(params.username ?? '') }, { password: body.password })
+            };
         case 'GET /SASjsApi/group':
             return { status: 200, body: await required().listGroups(await caller()) };
         case 'GET /SASjsApi/group/{uid}':
@@ -277,8 +281,10 @@ const dispatch = async (services, routeId, request = {}) => {
                 body: await required().updatePermission(await caller(), String(params.uid ?? ''), { setting: String(body.setting ?? '') })
             };
         case 'DELETE /SASjsApi/permission/{uid}':
-            await required().deletePermission(await caller(), String(params.uid ?? ''));
-            return { status: 204 };
+            return {
+                status: 200,
+                body: await required().deletePermission(await caller(), String(params.uid ?? ''))
+            };
         case 'GET /SASjsApi/client':
             return { status: 200, body: await required().listClients(await caller()) };
         case 'POST /SASjsApi/client':

package/build/cjs/identity/fixture.js

@@ -57,7 +57,7 @@ exports.DEFAULT_IDENTITY = {
     permissions: [
         {
             uid: 'rule-routes',
-            path: '/SASjsApi/info',
+            path: '/SASjsApi/drive/file',
             type: 'Route',
             setting: 'Grant',
             group: 'group-data-controller'

package/build/cjs/identity/records.js

@@ -113,25 +113,14 @@ const createRecordService = (store) => {
     const findBy = async (by) => by.uid !== undefined
         ? store.userById(by.uid)
         : store.userByName(by.username ?? '');
-    const permissionDetails = async (permission) => {
-        const response = {
-            uid: permission.uid,
-            path: permission.path,
-            type: permission.type,
-            setting: permission.setting
-        };
-        if (permission.user) {
-            const user = await store.userById(permission.user);
-            if (user)
-                response.user = asUser(user);
-        }
-        if (permission.group) {
-            const group = await store.groupById(permission.group);
-            if (group)
-                response.group = await groupDetails(group);
-        }
-        return response;
-    };
+    const permissionDetails = async (permission) => ({
+        uid: permission.uid,
+        path: permission.path,
+        type: permission.type,
+        setting: permission.setting,
+        ...(permission.user ? { user: permission.user } : {}),
+        ...(permission.group ? { group: permission.group } : {})
+    });
     return {
         async listUsers(caller) {
             await requireCaller(store, caller);
@@ -223,6 +212,9 @@ const createRecordService = (store) => {
                     throw new types_js_1.ApiError(401, 'Invalid password.');
             }
             await store.deleteUser(current.uid);
+            // the server's route sends this string itself; the document carries it as
+            // the 200 description, so it is the answer and not an extra
+            return 'Account Deleted!';
         },
         async listGroups(caller) {
             await requireCaller(store, caller);
@@ -360,6 +352,7 @@ const createRecordService = (store) => {
             if (!(await store.permissionById(uid)))
                 throw new types_js_1.ApiError(404, 'Permission not found.');
             await store.deletePermission(uid);
+            return 'Permission Deleted!';
         },
         async listClients(caller) {
             await requireAdmin(store, caller);

package/build/cjs/routes/generated.js

@@ -1198,8 +1198,8 @@ exports.GENERATED_ROUTES = [
         requestBodies: [],
         responses: [
             {
-                status: 204,
-                description: 'No content'
+                status: 200,
+                description: 'Permission Deleted!'
             },
             {
                 status: 401,
@@ -1542,8 +1542,8 @@ exports.GENERATED_ROUTES = [
         requestBodies: ['application/json'],
         responses: [
             {
-                status: 204,
-                description: 'No content'
+                status: 200,
+                description: 'Account Deleted!'
             },
             {
                 status: 401,
@@ -1682,8 +1682,8 @@ exports.GENERATED_ROUTES = [
         requestBodies: ['application/json'],
         responses: [
             {
-                status: 204,
-                description: 'No content'
+                status: 200,
+                description: 'Account Deleted!'
             },
             {
                 status: 401,

package/build/cjs/routes/overlay.js

@@ -199,13 +199,6 @@ exports.OVERLAY = {
     },
     'POST /SASjsApi/permission': { implemented: true },
     'PATCH /SASjsApi/permission/{uid}': { implemented: true },
-    // The three deletes answer 204 here and 200 on the wire: the server's route
-    // handlers send `res.status(200).send('Account Deleted!')` and
-    // `'Permission Deleted!'`, while tsoa emitted 204 for a void handler, so the
-    // document understates the status. Correcting it is a decorator in
-    // sasjs/server (`@SuccessResponse('200', ...)`), and this package follows the
-    // document until that release lands - a local 200 would fail the schema check
-    // that keeps this table honest.
     'DELETE /SASjsApi/permission/{uid}': { implemented: true },
     // Session - the caller's own session, then the record behind a triggered one
     'GET /SASjsApi/session': {

package/build/esm/corpus/records.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"records.d.ts","sourceRoot":"","sources":["../../../src/corpus/records.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAC5C,OAAO,EAEL,KAAK,eAAe,EAErB,MAAM,wBAAwB,CAAA;AAkB/B,qFAAqF;AACrF,eAAO,MAAM,eAAe,EAAE,eAG7B,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,eA0C9B,CAAA;AAOD,eAAO,MAAM,aAAa,EAAE,UAAU,EA0oCrC,CAAA"}
+{"version":3,"file":"records.d.ts","sourceRoot":"","sources":["../../../src/corpus/records.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAC5C,OAAO,EAEL,KAAK,eAAe,EAErB,MAAM,wBAAwB,CAAA;AAkB/B,qFAAqF;AACrF,eAAO,MAAM,eAAe,EAAE,eAG7B,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,eA0C9B,CAAA;AAOD,eAAO,MAAM,aAAa,EAAE,UAAU,EA4kCrC,CAAA"}

package/build/esm/corpus/records.js

@@ -363,7 +363,7 @@ export const RECORD_CORPUS = [
         description: 'deletes an account as an administrator, without a password',
         identity: ADMIN_SIGNED_IN,
         request: { token: ADMIN, params: { uid: RESTRICTED_UID }, body: {} },
-        expect: { status: 204 }
+        expect: { status: 200, body: 'Account Deleted!' }
     },
     {
         id: 'delete-user-not-admin',
@@ -391,7 +391,7 @@ export const RECORD_CORPUS = [
             params: { username: 'user2' },
             body: {}
         },
-        expect: { status: 204 }
+        expect: { status: 200, body: 'Account Deleted!' }
     },
     {
         id: 'delete-user-by-username-wrong-password',
@@ -401,7 +401,7 @@ export const RECORD_CORPUS = [
         request: {
             token: RESTRICTED,
             params: { username: 'user2' },
-            body: { password: 'wrong' }
+            body: { password: 'wrong123' }
         },
         expect: { status: 401, error: 'Invalid password.' }
     },
@@ -710,55 +710,24 @@ export const RECORD_CORPUS = [
             body: [
                 {
                     uid: 'rule-routes',
-                    path: '/SASjsApi/info',
+                    path: '/SASjsApi/drive/file',
                     type: 'Route',
                     setting: 'Grant',
-                    group: {
-                        uid: 'group-data-controller',
-                        name: 'DCGroup',
-                        description: 'Data Controller users',
-                        isActive: true,
-                        users: [
-                            {
-                                uid: RESTRICTED_UID,
-                                username: 'user2',
-                                displayName: 'Demo User',
-                                isAdmin: false
-                            }
-                        ]
-                    }
+                    group: 'group-data-controller'
                 },
                 {
                     uid: 'rule-execute',
                     path: '/SASjsApi/stp/execute',
                     type: 'Route',
                     setting: 'Grant',
-                    group: {
-                        uid: 'group-data-controller',
-                        name: 'DCGroup',
-                        description: 'Data Controller users',
-                        isActive: true,
-                        users: [
-                            {
-                                uid: RESTRICTED_UID,
-                                username: 'user2',
-                                displayName: 'Demo User',
-                                isAdmin: false
-                            }
-                        ]
-                    }
+                    group: 'group-data-controller'
                 },
                 {
                     uid: 'rule-code',
                     path: '/SASjsApi/code/execute',
                     type: 'Route',
                     setting: 'Deny',
-                    user: {
-                        uid: RESTRICTED_UID,
-                        username: 'user2',
-                        displayName: 'Demo User',
-                        isAdmin: false
-                    }
+                    user: RESTRICTED_UID
                 }
             ]
         }
@@ -774,55 +743,24 @@ export const RECORD_CORPUS = [
             body: [
                 {
                     uid: 'rule-routes',
-                    path: '/SASjsApi/info',
+                    path: '/SASjsApi/drive/file',
                     type: 'Route',
                     setting: 'Grant',
-                    group: {
-                        uid: 'group-data-controller',
-                        name: 'DCGroup',
-                        description: 'Data Controller users',
-                        isActive: true,
-                        users: [
-                            {
-                                uid: RESTRICTED_UID,
-                                username: 'user2',
-                                displayName: 'Demo User',
-                                isAdmin: false
-                            }
-                        ]
-                    }
+                    group: 'group-data-controller'
                 },
                 {
                     uid: 'rule-execute',
                     path: '/SASjsApi/stp/execute',
                     type: 'Route',
                     setting: 'Grant',
-                    group: {
-                        uid: 'group-data-controller',
-                        name: 'DCGroup',
-                        description: 'Data Controller users',
-                        isActive: true,
-                        users: [
-                            {
-                                uid: RESTRICTED_UID,
-                                username: 'user2',
-                                displayName: 'Demo User',
-                                isAdmin: false
-                            }
-                        ]
-                    }
+                    group: 'group-data-controller'
                 },
                 {
                     uid: 'rule-code',
                     path: '/SASjsApi/code/execute',
                     type: 'Route',
                     setting: 'Deny',
-                    user: {
-                        uid: RESTRICTED_UID,
-                        username: 'user2',
-                        displayName: 'Demo User',
-                        isAdmin: false
-                    }
+                    user: RESTRICTED_UID
                 }
             ]
         }
@@ -843,7 +781,7 @@ export const RECORD_CORPUS = [
         request: {
             token: ADMIN,
             body: {
-                path: '/SASjsApi/code/lint',
+                path: '/SASjsApi/drive/folder',
                 type: 'Route',
                 setting: 'Grant',
                 principalType: 'user',
@@ -852,7 +790,7 @@ export const RECORD_CORPUS = [
         },
         expect: {
             status: 200,
-            partial: { path: '/SASjsApi/code/lint', setting: 'Grant' }
+            partial: { path: '/SASjsApi/drive/folder', setting: 'Grant' }
         }
     },
     {
@@ -863,7 +801,7 @@ export const RECORD_CORPUS = [
         request: {
             token: ADMIN,
             body: {
-                path: '/SASjsApi/code/lint',
+                path: '/SASjsApi/drive/rename',
                 type: 'Route',
                 setting: 'Grant',
                 principalType: 'group',
@@ -873,9 +811,9 @@ export const RECORD_CORPUS = [
         expect: {
             status: 200,
             partial: {
-                path: '/SASjsApi/code/lint',
+                path: '/SASjsApi/drive/rename',
                 setting: 'Grant',
-                group: { uid: 'group-data-controller', name: 'DCGroup' }
+                group: 'group-data-controller'
             }
         }
     },
@@ -887,7 +825,7 @@ export const RECORD_CORPUS = [
         request: {
             token: ADMIN,
             body: {
-                path: '/SASjsApi/code/lint',
+                path: '/SASjsApi/drive/deploy',
                 type: 'Route',
                 setting: 'Grant',
                 principalType: 'role',
@@ -907,7 +845,7 @@ export const RECORD_CORPUS = [
         request: {
             token: ADMIN,
             body: {
-                path: '/SASjsApi/code/lint',
+                path: '/SASjsApi/drive/folder',
                 type: 'Route',
                 setting: 'Grant',
                 principalType: 'user',
@@ -927,7 +865,7 @@ export const RECORD_CORPUS = [
         request: {
             token: RESTRICTED,
             body: {
-                path: '/SASjsApi/code/lint',
+                path: '/SASjsApi/drive/folder',
                 type: 'Route',
                 setting: 'Grant',
                 principalType: 'user',
@@ -944,7 +882,7 @@ export const RECORD_CORPUS = [
         request: {
             token: ADMIN,
             body: {
-                path: '/SASjsApi/code/lint',
+                path: '/SASjsApi/drive/rename',
                 type: 'Route',
                 setting: 'Grant',
                 principalType: 'group',
@@ -961,7 +899,7 @@ export const RECORD_CORPUS = [
         request: {
             token: ADMIN,
             body: {
-                path: '/SASjsApi/info',
+                path: '/SASjsApi/drive/file',
                 type: 'Route',
                 setting: 'Grant',
                 principalType: 'group',
@@ -1035,7 +973,7 @@ export const RECORD_CORPUS = [
         description: 'deletes a rule',
         identity: ADMIN_SIGNED_IN,
         request: { token: ADMIN, params: { uid: 'rule-code' } },
-        expect: { status: 204 }
+        expect: { status: 200, body: 'Permission Deleted!' }
     },
     {
         id: 'delete-permission-not-admin',

package/build/esm/host/dispatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../../src/host/dispatch.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAC3D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAOnD,MAAM,WAAW,UAAU;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,oFAAoF;IACpF,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,CAAA;KAAE,CAAA;IACtD;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,iEAAiE;IACjE,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAA;IACd,mBAAmB;IACnB,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,uEAAuE;IACvE,QAAQ,CAAC,EAAE,MAAM,GAAG,UAAU,CAAA;CAC/B;AAED,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,YAAY,CAAA;IACnB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAA;IAC1B,yFAAyF;IACzF,OAAO,CAAC,EAAE,aAAa,CAAA;CACxB;AAsCD,eAAO,MAAM,QAAQ,GACnB,UAAU,QAAQ,EAClB,SAAS,MAAM,EACf,UAAS,UAAe,KACvB,OAAO,CAAC,WAAW,CA+VrB,CAAA;AAED,0DAA0D;AAC1D,eAAO,MAAM,cAAc,EAAE,MAAM,EAwClC,CAAA"}
+{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../../src/host/dispatch.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAC3D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAOnD,MAAM,WAAW,UAAU;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,oFAAoF;IACpF,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,CAAA;KAAE,CAAA;IACtD;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,iEAAiE;IACjE,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAA;IACd,mBAAmB;IACnB,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,uEAAuE;IACvE,QAAQ,CAAC,EAAE,MAAM,GAAG,UAAU,CAAA;CAC/B;AAED,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,YAAY,CAAA;IACnB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAA;IAC1B,yFAAyF;IACzF,OAAO,CAAC,EAAE,aAAa,CAAA;CACxB;AAsCD,eAAO,MAAM,QAAQ,GACnB,UAAU,QAAQ,EAClB,SAAS,MAAM,EACf,UAAS,UAAe,KACvB,OAAO,CAAC,WAAW,CAqWrB,CAAA;AAED,0DAA0D;AAC1D,eAAO,MAAM,cAAc,EAAE,MAAM,EAwClC,CAAA"}

package/build/esm/host/dispatch.js

@@ -207,11 +207,15 @@ export const dispatch = async (services, routeId, request = {}) => {
                 body: await required().updateUser(await caller(), { username: String(params.username ?? '') }, body)
             };
         case 'DELETE /SASjsApi/user/{uid}':
-            await required().deleteUser(await caller(), { uid: String(params.uid ?? '') }, { password: body.password });
-            return { status: 204 };
+            return {
+                status: 200,
+                body: await required().deleteUser(await caller(), { uid: String(params.uid ?? '') }, { password: body.password })
+            };
         case 'DELETE /SASjsApi/user/by/username/{username}':
-            await required().deleteUser(await caller(), { username: String(params.username ?? '') }, { password: body.password });
-            return { status: 204 };
+            return {
+                status: 200,
+                body: await required().deleteUser(await caller(), { username: String(params.username ?? '') }, { password: body.password })
+            };
         case 'GET /SASjsApi/group':
             return { status: 200, body: await required().listGroups(await caller()) };
         case 'GET /SASjsApi/group/{uid}':
@@ -274,8 +278,10 @@ export const dispatch = async (services, routeId, request = {}) => {
                 body: await required().updatePermission(await caller(), String(params.uid ?? ''), { setting: String(body.setting ?? '') })
             };
         case 'DELETE /SASjsApi/permission/{uid}':
-            await required().deletePermission(await caller(), String(params.uid ?? ''));
-            return { status: 204 };
+            return {
+                status: 200,
+                body: await required().deletePermission(await caller(), String(params.uid ?? ''))
+            };
         case 'GET /SASjsApi/client':
             return { status: 200, body: await required().listClients(await caller()) };
         case 'POST /SASjsApi/client':

package/build/esm/identity/fixture.js

@@ -54,7 +54,7 @@ export const DEFAULT_IDENTITY = {
     permissions: [
         {
             uid: 'rule-routes',
-            path: '/SASjsApi/info',
+            path: '/SASjsApi/drive/file',
             type: 'Route',
             setting: 'Grant',
             group: 'group-data-controller'

package/build/esm/identity/records.d.ts

@@ -25,13 +25,24 @@ export interface GroupDetailsResponse extends GroupResponse {
     isActive: boolean;
     users: UserResponse[];
 }
+/**
+ * A permission rule as the routes report one.
+ *
+ * The principal is the identifier, not the whole account: a rule is a row in a
+ * table, and a host on any database can produce `user` or `group` as a uid
+ * without a join or a populate step. A client that wants the name asks for the
+ * account it names, which it can do whether the store is Mongo, a browser's
+ * IndexedDB or a file.
+ */
 export interface PermissionResponse {
     uid: string;
     path: string;
     type: string;
     setting: string;
-    user?: UserResponse;
-    group?: GroupDetailsResponse;
+    /** The uid of the account the rule is assigned to, when it is a user's. */
+    user?: string;
+    /** The uid of the group the rule is assigned to, when it is a group's. */
+    group?: string;
 }
 export interface RecordService {
     listUsers(caller: Subject | undefined): Promise<UserResponse[]>;
@@ -63,7 +74,7 @@ export interface RecordService {
         username?: string;
     }, body: {
         password?: string;
-    }): Promise<void>;
+    }): Promise<string>;
     listGroups(caller: Subject | undefined): Promise<GroupResponse[]>;
     getGroup(caller: Subject | undefined, by: {
         uid?: string;
@@ -88,7 +99,7 @@ export interface RecordService {
     updatePermission(caller: Subject | undefined, uid: string, body: {
         setting: string;
     }): Promise<PermissionResponse>;
-    deletePermission(caller: Subject | undefined, uid: string): Promise<void>;
+    deletePermission(caller: Subject | undefined, uid: string): Promise<string>;
     listClients(caller: Subject | undefined): Promise<IdentityClientRecord[]>;
     createClient(caller: Subject | undefined, body: IdentityClientRecord): Promise<IdentityClientRecord>;
     /** `PATCH /SASjsApi/auth/updatePassword`, the caller's own password. */

package/build/esm/identity/records.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"records.d.ts","sourceRoot":"","sources":["../../../src/identity/records.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EACV,oBAAoB,EAGpB,aAAa,EAEb,OAAO,EACR,MAAM,YAAY,CAAA;AAEnB,iFAAiF;AACjF,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,OAAO,CAAA;CACjB;AAED,MAAM,WAAW,mBAAoB,SAAQ,YAAY;IACvD,QAAQ,EAAE,OAAO,CAAA;IACjB,qBAAqB,EAAE,OAAO,CAAA;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAC9D;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,oBAAqB,SAAQ,aAAa;IACzD,QAAQ,EAAE,OAAO,CAAA;IACjB,KAAK,EAAE,YAAY,EAAE,CAAA;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,YAAY,CAAA;IACnB,KAAK,CAAC,EAAE,oBAAoB,CAAA;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;IAC/D,OAAO,CACL,MAAM,EAAE,OAAO,GAAG,SAAS,EAC3B,EAAE,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GACtC,OAAO,CAAC,mBAAmB,CAAC,CAAA;IAC/B,UAAU,CACR,MAAM,EAAE,OAAO,GAAG,SAAS,EAC3B,IAAI,EAAE;QACJ,QAAQ,EAAE,MAAM,CAAA;QAChB,WAAW,EAAE,MAAM,CAAA;QACnB,QAAQ,EAAE,MAAM,CAAA;QAChB,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,QAAQ,CAAC,EAAE,OAAO,CAAA;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;KAClB,GACA,OAAO,CAAC,mBAAmB,CAAC,CAAA;IAC/B,UAAU,CACR,MAAM,EAAE,OAAO,GAAG,SAAS,EAC3B,EAAE,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,EACvC,IAAI,EAAE;QACJ,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,QAAQ,CAAC,EAAE,OAAO,CAAA;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;KAClB,GACA,OAAO,CAAC,mBAAmB,CAAC,CAAA;IAC/B,UAAU,CACR,MAAM,EAAE,OAAO,GAAG,SAAS,EAC3B,EAAE,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,EACvC,IAAI,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAC1B,OAAO,CAAC,IAAI,CAAC,CAAA;IAEhB,UAAU,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAA;IACjE,QAAQ,CACN,MAAM,EAAE,OAAO,GAAG,SAAS,EAC3B,EAAE,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAClC,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAChC,WAAW,CACT,MAAM,EAAE,OAAO,GAAG,SAAS,EAC3B,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAC9D,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAChC,WAAW,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACpE,cAAc,CACZ,MAAM,EAAE,OAAO,GAAG,SAAS,EAC3B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAChC,mBAAmB,CACjB,MAAM,EAAE,OAAO,GAAG,SAAS,EAC3B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAEhC,eAAe,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAA;IAC3E,gBAAgB,CACd,MAAM,EAAE,OAAO,GAAG,SAAS,EAC3B,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM,CAAA;QACZ,IAAI,EAAE,MAAM,CAAA;QACZ,OAAO,EAAE,MAAM,CAAA;QACf,aAAa,EAAE,MAAM,CAAA;QACrB,WAAW,EAAE,MAAM,CAAA;KACpB,GACA,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAC9B,gBAAgB,CACd,MAAM,EAAE,OAAO,GAAG,SAAS,EAC3B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAC9B,gBAAgB,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEzE,WAAW,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAA;IACzE,YAAY,CACV,MAAM,EAAE,OAAO,GAAG,SAAS,EAC3B,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAEhC,wEAAwE;IACxE,cAAc,CACZ,MAAM,EAAE,OAAO,GAAG,SAAS,EAC3B,IAAI,EAAE;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GACrD,OAAO,CAAC,IAAI,CAAC,CAAA;CACjB;AAiED,eAAO,MAAM,mBAAmB,GAAI,OAAO,OAAO,KAAG,MAKf,CAAA;AAetC,eAAO,MAAM,mBAAmB,GAAI,OAAO,aAAa,KAAG,aA2Z1D,CAAA"}
+{"version":3,"file":"records.d.ts","sourceRoot":"","sources":["../../../src/identity/records.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EACV,oBAAoB,EAGpB,aAAa,EAEb,OAAO,EACR,MAAM,YAAY,CAAA;AAEnB,iFAAiF;AACjF,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,OAAO,CAAA;CACjB;AAED,MAAM,WAAW,mBAAoB,SAAQ,YAAY;IACvD,QAAQ,EAAE,OAAO,CAAA;IACjB,qBAAqB,EAAE,OAAO,CAAA;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAC9D;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,oBAAqB,SAAQ,aAAa;IACzD,QAAQ,EAAE,OAAO,CAAA;IACjB,KAAK,EAAE,YAAY,EAAE,CAAA;CACtB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;IAC/D,OAAO,CACL,MAAM,EAAE,OAAO,GAAG,SAAS,EAC3B,EAAE,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GACtC,OAAO,CAAC,mBAAmB,CAAC,CAAA;IAC/B,UAAU,CACR,MAAM,EAAE,OAAO,GAAG,SAAS,EAC3B,IAAI,EAAE;QACJ,QAAQ,EAAE,MAAM,CAAA;QAChB,WAAW,EAAE,MAAM,CAAA;QACnB,QAAQ,EAAE,MAAM,CAAA;QAChB,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,QAAQ,CAAC,EAAE,OAAO,CAAA;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;KAClB,GACA,OAAO,CAAC,mBAAmB,CAAC,CAAA;IAC/B,UAAU,CACR,MAAM,EAAE,OAAO,GAAG,SAAS,EAC3B,EAAE,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,EACvC,IAAI,EAAE;QACJ,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,QAAQ,CAAC,EAAE,OAAO,CAAA;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;KAClB,GACA,OAAO,CAAC,mBAAmB,CAAC,CAAA;IAC/B,UAAU,CACR,MAAM,EAAE,OAAO,GAAG,SAAS,EAC3B,EAAE,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,EACvC,IAAI,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAC1B,OAAO,CAAC,MAAM,CAAC,CAAA;IAElB,UAAU,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAA;IACjE,QAAQ,CACN,MAAM,EAAE,OAAO,GAAG,SAAS,EAC3B,EAAE,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAClC,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAChC,WAAW,CACT,MAAM,EAAE,OAAO,GAAG,SAAS,EAC3B,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAC9D,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAChC,WAAW,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACpE,cAAc,CACZ,MAAM,EAAE,OAAO,GAAG,SAAS,EAC3B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAChC,mBAAmB,CACjB,MAAM,EAAE,OAAO,GAAG,SAAS,EAC3B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAEhC,eAAe,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAA;IAC3E,gBAAgB,CACd,MAAM,EAAE,OAAO,GAAG,SAAS,EAC3B,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM,CAAA;QACZ,IAAI,EAAE,MAAM,CAAA;QACZ,OAAO,EAAE,MAAM,CAAA;QACf,aAAa,EAAE,MAAM,CAAA;QACrB,WAAW,EAAE,MAAM,CAAA;KACpB,GACA,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAC9B,gBAAgB,CACd,MAAM,EAAE,OAAO,GAAG,SAAS,EAC3B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAC9B,gBAAgB,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAE3E,WAAW,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAA;IACzE,YAAY,CACV,MAAM,EAAE,OAAO,GAAG,SAAS,EAC3B,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAEhC,wEAAwE;IACxE,cAAc,CACZ,MAAM,EAAE,OAAO,GAAG,SAAS,EAC3B,IAAI,EAAE;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GACrD,OAAO,CAAC,IAAI,CAAC,CAAA;CACjB;AAiED,eAAO,MAAM,mBAAmB,GAAI,OAAO,OAAO,KAAG,MAKf,CAAA;AAetC,eAAO,MAAM,mBAAmB,GAAI,OAAO,aAAa,KAAG,aAwZ1D,CAAA"}

package/build/esm/identity/records.js

@@ -109,25 +109,14 @@ export const createRecordService = (store) => {
     const findBy = async (by) => by.uid !== undefined
         ? store.userById(by.uid)
         : store.userByName(by.username ?? '');
-    const permissionDetails = async (permission) => {
-        const response = {
-            uid: permission.uid,
-            path: permission.path,
-            type: permission.type,
-            setting: permission.setting
-        };
-        if (permission.user) {
-            const user = await store.userById(permission.user);
-            if (user)
-                response.user = asUser(user);
-        }
-        if (permission.group) {
-            const group = await store.groupById(permission.group);
-            if (group)
-                response.group = await groupDetails(group);
-        }
-        return response;
-    };
+    const permissionDetails = async (permission) => ({
+        uid: permission.uid,
+        path: permission.path,
+        type: permission.type,
+        setting: permission.setting,
+        ...(permission.user ? { user: permission.user } : {}),
+        ...(permission.group ? { group: permission.group } : {})
+    });
     return {
         async listUsers(caller) {
             await requireCaller(store, caller);
@@ -219,6 +208,9 @@ export const createRecordService = (store) => {
                     throw new ApiError(401, 'Invalid password.');
             }
             await store.deleteUser(current.uid);
+            // the server's route sends this string itself; the document carries it as
+            // the 200 description, so it is the answer and not an extra
+            return 'Account Deleted!';
         },
         async listGroups(caller) {
             await requireCaller(store, caller);
@@ -356,6 +348,7 @@ export const createRecordService = (store) => {
             if (!(await store.permissionById(uid)))
                 throw new ApiError(404, 'Permission not found.');
             await store.deletePermission(uid);
+            return 'Permission Deleted!';
         },
         async listClients(caller) {
             await requireAdmin(store, caller);

package/build/esm/routes/generated.js

@@ -1195,8 +1195,8 @@ export const GENERATED_ROUTES = [
         requestBodies: [],
         responses: [
             {
-                status: 204,
-                description: 'No content'
+                status: 200,
+                description: 'Permission Deleted!'
             },
             {
                 status: 401,
@@ -1539,8 +1539,8 @@ export const GENERATED_ROUTES = [
         requestBodies: ['application/json'],
         responses: [
             {
-                status: 204,
-                description: 'No content'
+                status: 200,
+                description: 'Account Deleted!'
             },
             {
                 status: 401,
@@ -1679,8 +1679,8 @@ export const GENERATED_ROUTES = [
         requestBodies: ['application/json'],
         responses: [
             {
-                status: 204,
-                description: 'No content'
+                status: 200,
+                description: 'Account Deleted!'
             },
             {
                 status: 401,

package/build/esm/routes/overlay.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"overlay.d.ts","sourceRoot":"","sources":["../../../src/routes/overlay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAGzD,yDAAyD;AACzD,UAAU,aAAa;IACrB,YAAY,CAAC,EAAE,UAAU,EAAE,CAAA;IAC3B;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACpC;AAED;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GAAG,aAAa,GACtC,CAAC;IAAE,WAAW,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,WAAW,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAA;AAElE,kFAAkF;AAClF,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,CAczD,CAAA;AAiDD,eAAO,MAAM,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CA8NhD,CAAA;AAED,wEAAwE;AACxE,eAAO,MAAM,OAAO,EAAE,UAAU,EAA8C,CAAA"}
+{"version":3,"file":"overlay.d.ts","sourceRoot":"","sources":["../../../src/routes/overlay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAGzD,yDAAyD;AACzD,UAAU,aAAa;IACrB,YAAY,CAAC,EAAE,UAAU,EAAE,CAAA;IAC3B;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACpC;AAED;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GAAG,aAAa,GACtC,CAAC;IAAE,WAAW,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,WAAW,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAA;AAElE,kFAAkF;AAClF,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,CAczD,CAAA;AAiDD,eAAO,MAAM,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAuNhD,CAAA;AAED,wEAAwE;AACxE,eAAO,MAAM,OAAO,EAAE,UAAU,EAA8C,CAAA"}

package/build/esm/routes/overlay.js

@@ -196,13 +196,6 @@ export const OVERLAY = {
     },
     'POST /SASjsApi/permission': { implemented: true },
     'PATCH /SASjsApi/permission/{uid}': { implemented: true },
-    // The three deletes answer 204 here and 200 on the wire: the server's route
-    // handlers send `res.status(200).send('Account Deleted!')` and
-    // `'Permission Deleted!'`, while tsoa emitted 204 for a void handler, so the
-    // document understates the status. Correcting it is a decorator in
-    // sasjs/server (`@SuccessResponse('200', ...)`), and this package follows the
-    // document until that release lands - a local 200 would fail the schema check
-    // that keeps this table honest.
     'DELETE /SASjsApi/permission/{uid}': { implemented: true },
     // Session - the caller's own session, then the record behind a triggered one
     'GET /SASjsApi/session': {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sasjs/api",
-  "version": "0.7.1",
+  "version": "0.8.0",
   "description": "The SASjs Server API, described once - a generated route table, the services behind it, and the conformance corpus both hosts run",
   "license": "MIT",
   "author": "SASjs",