@unchainedshop/api 4.8.3 → 4.8.9

package/lib/acl.d.ts

@@ -2,11 +2,11 @@ import type { CheckPermissionArgs } from '@unchainedshop/roles';
 export declare const ensureActionExists: (action: any, userOptions: any) => void;
 export declare const ensureIsFunction: (fn: any, action: any, options: any, key: any) => void;
 declare const checkAction: (context: any, action: any, args?: CheckPermissionArgs, options?: any) => Promise<void>;
-declare const checkResolver: (action: any, userOptions?: any) => (fn: any, name?: string) => (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
+declare const checkResolver: (action: any, userOptions?: any) => (fn: any, name?: string) => (root: any, params: any, context: any, info: any) => Promise<any>;
 declare const checkTypeResolver: (action: any, key: any) => (obj: any, params: any, context: any) => Promise<any>;
 declare const resolverDecorator: (action: any, userOptions?: any) => (target: any, key: any, descriptor: any) => {
     configurable: boolean;
-    get(): (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
+    get(): (root: any, params: any, context: any, info: any) => Promise<any>;
 };
 export default resolverDecorator;
 export { resolverDecorator, checkResolver, checkTypeResolver, checkAction };

package/lib/acl.js

@@ -36,12 +36,11 @@ const wrapFunction = (fn, name, action, userOptions) => {
     const key = name || fn.name;
     const options = { ...defaultOptions, ...userOptions };
     ensureIsFunction(fn, action, options, key);
-    return async (root, params, context, ...other) => {
-        const args = options.mapArgs(root, params, ...other);
-        await checkAction(context, action, args, {
-            key: options.showKey ? key : '',
-        });
-        return fn(root, params, context, ...other);
+    const actionOptions = { key: options.showKey ? key : '' };
+    return async (root, params, context, info) => {
+        const args = options.mapArgs(root, params, info);
+        await checkAction(context, action, args, actionOptions);
+        return fn(root, params, context, info);
     };
 };
 const checkResolver = (action, userOptions) => {

package/lib/context.d.ts

@@ -3,6 +3,7 @@ import { type UnchainedLoaders } from './loaders/index.ts';
 import { type UnchainedLocaleContext } from './locale-context.ts';
 import type { UnchainedServerOptions } from './api-index.ts';
 import type { User } from '@unchainedshop/core-users';
+export declare const IN_LOGIN_RESPONSE: unique symbol;
 export type LoginFn = (user: User, options?: {
     impersonator?: User;
 }) => Promise<{

package/lib/context.js

@@ -1,6 +1,7 @@
 import instantiateLoaders, {} from "./loaders/index.js";
 import { getLocaleContext } from "./locale-context.js";
 const { npm_package_version, UNCHAINED_API_VERSION } = process.env;
+export const IN_LOGIN_RESPONSE = Symbol('inLoginMethodResponse');
 let context;
 export const getCurrentContextResolver = () => context;
 export const setCurrentContextResolver = (newContext) => {

package/lib/express/index.js

@@ -5,7 +5,7 @@ import MongoStore from "../mongo-store.js";
 import { Passport } from 'passport';
 import { mongodb } from '@unchainedshop/mongodb';
 import { emit } from '@unchainedshop/events';
-import { getCurrentContextResolver } from "../context.js";
+import { getCurrentContextResolver, IN_LOGIN_RESPONSE, } from "../context.js";
 import createBulkImportMiddleware from "./createBulkImportMiddleware.js";
 import createERCMetadataMiddleware from "./createERCMetadataMiddleware.js";
 import createTempUploadMiddleware from "./createTempUploadMiddleware.js";
@@ -57,7 +57,7 @@ const addContext = async function middlewareWithContext(req, res, next) {
                 tokenExpires: new Date(req.session?.cookie._expires),
             };
             await emit(API_EVENTS.API_LOGIN_TOKEN_CREATED, tokenObject);
-            user._inLoginMethodResponse = true;
+            user[IN_LOGIN_RESPONSE] = true;
             return { user, ...tokenObject };
         };
         const logout = async (sessionId) => {

package/lib/fastify/index.js

@@ -1,4 +1,4 @@
-import { getCurrentContextResolver } from "../context.js";
+import { getCurrentContextResolver, IN_LOGIN_RESPONSE, } from "../context.js";
 import bulkImportHandler from "./bulkImportHandler.js";
 import ercMetadataHandler from "./ercMetadataHandler.js";
 import MongoStore from "../mongo-store.js";
@@ -36,7 +36,7 @@ const middlewareHook = async function middlewareHook(req, reply) {
             tokenExpires: new Date(req.session.cookie._expires),
         };
         await emit(API_EVENTS.API_LOGIN_TOKEN_CREATED, tokenObject);
-        user._inLoginMethodResponse = true;
+        user[IN_LOGIN_RESPONSE] = true;
         return { user, ...tokenObject };
     };
     const logout = async function logout() {

package/lib/loaders/buildTextMap.js

@@ -1,20 +1,19 @@
 export default function buildTextMap(localeMap, texts, buildId) {
     const textsMap = {};
-    for (let j = 0; j < texts.length; j++) {
-        const text = texts[j];
-        if (!text.locale)
-            continue;
-        const localesForText = localeMap[text.locale];
-        if (!localesForText)
-            continue;
-        const idPart = buildId(text);
-        for (let k = 0; k < localesForText.length; k++) {
-            const locale = localesForText[k];
-            const key = locale + idPart;
-            if (textsMap[key] && locale !== text.locale) {
+    const localeMapKeys = Object.keys(localeMap);
+    for (const originLocale of localeMapKeys) {
+        const localesForText = localeMap[originLocale];
+        for (const text of texts) {
+            if (originLocale !== text.locale)
                 continue;
+            const idPart = buildId(text);
+            for (const locale of localesForText) {
+                const key = locale + idPart;
+                if (textsMap[key] && locale !== text.locale) {
+                    continue;
+                }
+                textsMap[key] = text;
             }
-            textsMap[key] = text;
         }
     }
     return textsMap;

package/lib/loaders/index.d.ts

@@ -171,6 +171,11 @@ declare const loaders: (unchainedAPI: UnchainedCore) => {
     }, import("@unchainedshop/core-quotations").Quotation | null, {
         quotationId: string;
     }>;
+    tokenExportStatusLoader: import("dataloader")<{
+        token: import("@unchainedshop/core-warehousing").TokenSurrogate;
+    }, import("@unchainedshop/core-warehousing").TokenStatus, {
+        token: import("@unchainedshop/core-warehousing").TokenSurrogate;
+    }>;
 };
 export type UnchainedLoaders = Awaited<ReturnType<typeof loaders>>;
 export default loaders;

package/lib/loaders/index.js

@@ -27,6 +27,7 @@ import paymentProviderLoader from "./paymentProviderLoader.js";
 import warehousingProviderLoader from "./warehousingProviderLoader.js";
 import orderLoader from "./orderLoader.js";
 import quotationLoader from "./quotationLoader.js";
+import tokenExportStatusLoader from "./tokenExportStatusLoader.js";
 const loaders = (unchainedAPI) => {
     return {
         assortmentLoader: assortmentLoader(unchainedAPI),
@@ -58,6 +59,7 @@ const loaders = (unchainedAPI) => {
         warehousingProviderLoader: warehousingProviderLoader(unchainedAPI),
         orderLoader: orderLoader(unchainedAPI),
         quotationLoader: quotationLoader(unchainedAPI),
+        tokenExportStatusLoader: tokenExportStatusLoader(unchainedAPI),
     };
 };
 export default loaders;

package/lib/loaders/tokenExportStatusLoader.d.ts

@@ -0,0 +1,9 @@
+import type { UnchainedCore } from '@unchainedshop/core';
+import type { TokenSurrogate, TokenStatus as TokenStatusType } from '@unchainedshop/core-warehousing';
+import DataLoader from 'dataloader';
+declare const _default: (unchainedAPI: UnchainedCore) => DataLoader<{
+    token: TokenSurrogate;
+}, TokenStatusType, {
+    token: TokenSurrogate;
+}>;
+export default _default;

package/lib/loaders/tokenExportStatusLoader.js

@@ -0,0 +1,31 @@
+import { TokenStatus } from '@unchainedshop/core-warehousing';
+import { WorkStatus } from '@unchainedshop/core-worker';
+import DataLoader from 'dataloader';
+export default (unchainedAPI) => new DataLoader(async (queries) => {
+    const tokensNeedingWorkCheck = [];
+    for (const { token } of queries) {
+        if (!(token.walletAddress && !token.userId)) {
+            tokensNeedingWorkCheck.push(token);
+        }
+    }
+    let exportingTokenIds;
+    if (tokensNeedingWorkCheck.length > 0) {
+        const workItems = await unchainedAPI.modules.worker.findWorkQueue({
+            types: ['EXPORT_TOKEN'],
+            status: [WorkStatus.NEW, WorkStatus.ALLOCATED],
+        });
+        exportingTokenIds = new Set(workItems.map((item) => item.input?.token?._id).filter(Boolean));
+    }
+    else {
+        exportingTokenIds = new Set();
+    }
+    return queries.map(({ token }) => {
+        if (token.walletAddress && !token.userId) {
+            return TokenStatus.DECENTRALIZED;
+        }
+        if (exportingTokenIds.has(token._id)) {
+            return TokenStatus.EXPORTING;
+        }
+        return TokenStatus.CENTRALIZED;
+    });
+});

package/lib/resolvers/mutations/index.d.ts

@@ -1,158 +1,158 @@
 declare const _default: {
-    logout: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    loginAsGuest: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    impersonate: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    stopImpersonation: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    createWebAuthnCredentialCreationOptions: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    createWebAuthnCredentialRequestOptions: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    addPushSubscription: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removePushSubscription: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    addWebAuthnCredentials: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeWebAuthnCredentials: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    addWeb3Address: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeWeb3Address: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    verifyWeb3Address: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    verifyEmail: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    loginWithPassword: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    loginWithWebAuthn: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    pageView: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    createUser: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    forgotPassword: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    resetPassword: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    sendVerificationEmail: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    sendEnrollmentEmail: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    changePassword: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    heartbeat: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    addEmail: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeEmail: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateUserProfile: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeUser: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    setPassword: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    prepareUserAvatarUpload: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    setUserTags: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    setUsername: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    setRoles: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    enrollUser: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    registerPaymentCredentials: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    markPaymentCredentialsPreferred: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removePaymentCredentials: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    createLanguage: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateLanguage: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeLanguage: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    createCountry: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateCountry: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeCountry: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    createProduct: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    publishProduct: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    unpublishProduct: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeProduct: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateProduct: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateProductTexts: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateProductMediaTexts: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    confirmMediaUpload: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    prepareProductMediaUpload: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    reorderProductMedia: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeProductMedia: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateProductCommerce: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateProductWarehousing: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateProductSupply: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateProductPlan: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateProductTokenization: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeProductVariation: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateProductVariationTexts: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeProductVariationOption: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    createProductVariation: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    createProductBundleItem: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeBundleItem: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    createProductVariationOption: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    addProductAssignment: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeProductAssignment: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    createCurrency: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateCurrency: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeCurrency: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    createCart: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    addCartProduct: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    addMultipleCartProducts: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    addCartDiscount: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    addCartQuotation: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateCart: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    emptyCart: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    checkoutCart: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateCartItem: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeCartItem: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeCartDiscount: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateCartDeliveryPickUp: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateCartDeliveryShipping: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateCartPaymentGeneric: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateCartPaymentInvoice: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    setOrderPaymentProvider: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    setOrderDeliveryProvider: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateOrderDeliveryShipping: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateOrderDeliveryPickUp: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateOrderPaymentGeneric: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateOrderPaymentInvoice: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeOrder: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    confirmOrder: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    rejectOrder: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    payOrder: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    deliverOrder: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    createEnrollment: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    terminateEnrollment: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    activateEnrollment: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateEnrollment: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    createPaymentProvider: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updatePaymentProvider: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removePaymentProvider: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    createDeliveryProvider: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateDeliveryProvider: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeDeliveryProvider: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    createWarehousingProvider: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateWarehousingProvider: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeWarehousingProvider: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    exportToken: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    invalidateToken: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    createFilter: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateFilter: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeFilter: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateFilterTexts: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeFilterOption: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    createFilterOption: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    createAssortment: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    prepareAssortmentMediaUpload: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateAssortment: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeAssortment: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    reorderAssortmentMedia: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeAssortmentMedia: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateAssortmentMediaTexts: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateAssortmentTexts: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    addAssortmentProduct: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeAssortmentProduct: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    reorderAssortmentProducts: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    addAssortmentLink: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeAssortmentLink: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    reorderAssortmentLinks: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    addAssortmentFilter: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeAssortmentFilter: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    reorderAssortmentFilters: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    createProductReview: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    updateProductReview: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeProductReview: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    addProductReviewVote: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeProductReviewVote: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    requestQuotation: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    rejectQuotation: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    verifyQuotation: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    makeQuotationProposal: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    bookmark: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    createBookmark: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeBookmark: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    addWork: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    allocateWork: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    finishWork: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeWork: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    processNextWork: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    signPaymentProviderForCredentialRegistration: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    signPaymentProviderForCheckout: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    removeUserProductReviews: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
+    logout: (root: any, params: any, context: any, info: any) => Promise<any>;
+    loginAsGuest: (root: any, params: any, context: any, info: any) => Promise<any>;
+    impersonate: (root: any, params: any, context: any, info: any) => Promise<any>;
+    stopImpersonation: (root: any, params: any, context: any, info: any) => Promise<any>;
+    createWebAuthnCredentialCreationOptions: (root: any, params: any, context: any, info: any) => Promise<any>;
+    createWebAuthnCredentialRequestOptions: (root: any, params: any, context: any, info: any) => Promise<any>;
+    addPushSubscription: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removePushSubscription: (root: any, params: any, context: any, info: any) => Promise<any>;
+    addWebAuthnCredentials: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeWebAuthnCredentials: (root: any, params: any, context: any, info: any) => Promise<any>;
+    addWeb3Address: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeWeb3Address: (root: any, params: any, context: any, info: any) => Promise<any>;
+    verifyWeb3Address: (root: any, params: any, context: any, info: any) => Promise<any>;
+    verifyEmail: (root: any, params: any, context: any, info: any) => Promise<any>;
+    loginWithPassword: (root: any, params: any, context: any, info: any) => Promise<any>;
+    loginWithWebAuthn: (root: any, params: any, context: any, info: any) => Promise<any>;
+    pageView: (root: any, params: any, context: any, info: any) => Promise<any>;
+    createUser: (root: any, params: any, context: any, info: any) => Promise<any>;
+    forgotPassword: (root: any, params: any, context: any, info: any) => Promise<any>;
+    resetPassword: (root: any, params: any, context: any, info: any) => Promise<any>;
+    sendVerificationEmail: (root: any, params: any, context: any, info: any) => Promise<any>;
+    sendEnrollmentEmail: (root: any, params: any, context: any, info: any) => Promise<any>;
+    changePassword: (root: any, params: any, context: any, info: any) => Promise<any>;
+    heartbeat: (root: any, params: any, context: any, info: any) => Promise<any>;
+    addEmail: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeEmail: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateUserProfile: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeUser: (root: any, params: any, context: any, info: any) => Promise<any>;
+    setPassword: (root: any, params: any, context: any, info: any) => Promise<any>;
+    prepareUserAvatarUpload: (root: any, params: any, context: any, info: any) => Promise<any>;
+    setUserTags: (root: any, params: any, context: any, info: any) => Promise<any>;
+    setUsername: (root: any, params: any, context: any, info: any) => Promise<any>;
+    setRoles: (root: any, params: any, context: any, info: any) => Promise<any>;
+    enrollUser: (root: any, params: any, context: any, info: any) => Promise<any>;
+    registerPaymentCredentials: (root: any, params: any, context: any, info: any) => Promise<any>;
+    markPaymentCredentialsPreferred: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removePaymentCredentials: (root: any, params: any, context: any, info: any) => Promise<any>;
+    createLanguage: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateLanguage: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeLanguage: (root: any, params: any, context: any, info: any) => Promise<any>;
+    createCountry: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateCountry: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeCountry: (root: any, params: any, context: any, info: any) => Promise<any>;
+    createProduct: (root: any, params: any, context: any, info: any) => Promise<any>;
+    publishProduct: (root: any, params: any, context: any, info: any) => Promise<any>;
+    unpublishProduct: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeProduct: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateProduct: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateProductTexts: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateProductMediaTexts: (root: any, params: any, context: any, info: any) => Promise<any>;
+    confirmMediaUpload: (root: any, params: any, context: any, info: any) => Promise<any>;
+    prepareProductMediaUpload: (root: any, params: any, context: any, info: any) => Promise<any>;
+    reorderProductMedia: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeProductMedia: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateProductCommerce: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateProductWarehousing: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateProductSupply: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateProductPlan: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateProductTokenization: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeProductVariation: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateProductVariationTexts: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeProductVariationOption: (root: any, params: any, context: any, info: any) => Promise<any>;
+    createProductVariation: (root: any, params: any, context: any, info: any) => Promise<any>;
+    createProductBundleItem: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeBundleItem: (root: any, params: any, context: any, info: any) => Promise<any>;
+    createProductVariationOption: (root: any, params: any, context: any, info: any) => Promise<any>;
+    addProductAssignment: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeProductAssignment: (root: any, params: any, context: any, info: any) => Promise<any>;
+    createCurrency: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateCurrency: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeCurrency: (root: any, params: any, context: any, info: any) => Promise<any>;
+    createCart: (root: any, params: any, context: any, info: any) => Promise<any>;
+    addCartProduct: (root: any, params: any, context: any, info: any) => Promise<any>;
+    addMultipleCartProducts: (root: any, params: any, context: any, info: any) => Promise<any>;
+    addCartDiscount: (root: any, params: any, context: any, info: any) => Promise<any>;
+    addCartQuotation: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateCart: (root: any, params: any, context: any, info: any) => Promise<any>;
+    emptyCart: (root: any, params: any, context: any, info: any) => Promise<any>;
+    checkoutCart: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateCartItem: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeCartItem: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeCartDiscount: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateCartDeliveryPickUp: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateCartDeliveryShipping: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateCartPaymentGeneric: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateCartPaymentInvoice: (root: any, params: any, context: any, info: any) => Promise<any>;
+    setOrderPaymentProvider: (root: any, params: any, context: any, info: any) => Promise<any>;
+    setOrderDeliveryProvider: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateOrderDeliveryShipping: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateOrderDeliveryPickUp: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateOrderPaymentGeneric: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateOrderPaymentInvoice: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeOrder: (root: any, params: any, context: any, info: any) => Promise<any>;
+    confirmOrder: (root: any, params: any, context: any, info: any) => Promise<any>;
+    rejectOrder: (root: any, params: any, context: any, info: any) => Promise<any>;
+    payOrder: (root: any, params: any, context: any, info: any) => Promise<any>;
+    deliverOrder: (root: any, params: any, context: any, info: any) => Promise<any>;
+    createEnrollment: (root: any, params: any, context: any, info: any) => Promise<any>;
+    terminateEnrollment: (root: any, params: any, context: any, info: any) => Promise<any>;
+    activateEnrollment: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateEnrollment: (root: any, params: any, context: any, info: any) => Promise<any>;
+    createPaymentProvider: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updatePaymentProvider: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removePaymentProvider: (root: any, params: any, context: any, info: any) => Promise<any>;
+    createDeliveryProvider: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateDeliveryProvider: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeDeliveryProvider: (root: any, params: any, context: any, info: any) => Promise<any>;
+    createWarehousingProvider: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateWarehousingProvider: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeWarehousingProvider: (root: any, params: any, context: any, info: any) => Promise<any>;
+    exportToken: (root: any, params: any, context: any, info: any) => Promise<any>;
+    invalidateToken: (root: any, params: any, context: any, info: any) => Promise<any>;
+    createFilter: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateFilter: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeFilter: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateFilterTexts: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeFilterOption: (root: any, params: any, context: any, info: any) => Promise<any>;
+    createFilterOption: (root: any, params: any, context: any, info: any) => Promise<any>;
+    createAssortment: (root: any, params: any, context: any, info: any) => Promise<any>;
+    prepareAssortmentMediaUpload: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateAssortment: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeAssortment: (root: any, params: any, context: any, info: any) => Promise<any>;
+    reorderAssortmentMedia: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeAssortmentMedia: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateAssortmentMediaTexts: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateAssortmentTexts: (root: any, params: any, context: any, info: any) => Promise<any>;
+    addAssortmentProduct: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeAssortmentProduct: (root: any, params: any, context: any, info: any) => Promise<any>;
+    reorderAssortmentProducts: (root: any, params: any, context: any, info: any) => Promise<any>;
+    addAssortmentLink: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeAssortmentLink: (root: any, params: any, context: any, info: any) => Promise<any>;
+    reorderAssortmentLinks: (root: any, params: any, context: any, info: any) => Promise<any>;
+    addAssortmentFilter: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeAssortmentFilter: (root: any, params: any, context: any, info: any) => Promise<any>;
+    reorderAssortmentFilters: (root: any, params: any, context: any, info: any) => Promise<any>;
+    createProductReview: (root: any, params: any, context: any, info: any) => Promise<any>;
+    updateProductReview: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeProductReview: (root: any, params: any, context: any, info: any) => Promise<any>;
+    addProductReviewVote: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeProductReviewVote: (root: any, params: any, context: any, info: any) => Promise<any>;
+    requestQuotation: (root: any, params: any, context: any, info: any) => Promise<any>;
+    rejectQuotation: (root: any, params: any, context: any, info: any) => Promise<any>;
+    verifyQuotation: (root: any, params: any, context: any, info: any) => Promise<any>;
+    makeQuotationProposal: (root: any, params: any, context: any, info: any) => Promise<any>;
+    bookmark: (root: any, params: any, context: any, info: any) => Promise<any>;
+    createBookmark: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeBookmark: (root: any, params: any, context: any, info: any) => Promise<any>;
+    addWork: (root: any, params: any, context: any, info: any) => Promise<any>;
+    allocateWork: (root: any, params: any, context: any, info: any) => Promise<any>;
+    finishWork: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeWork: (root: any, params: any, context: any, info: any) => Promise<any>;
+    processNextWork: (root: any, params: any, context: any, info: any) => Promise<any>;
+    signPaymentProviderForCredentialRegistration: (root: any, params: any, context: any, info: any) => Promise<any>;
+    signPaymentProviderForCheckout: (root: any, params: any, context: any, info: any) => Promise<any>;
+    removeUserProductReviews: (root: any, params: any, context: any, info: any) => Promise<any>;
 };
 export default _default;

package/lib/resolvers/mutations/users/setRoles.js

@@ -1,4 +1,5 @@
 import { log } from '@unchainedshop/logger';
+import { Roles } from '@unchainedshop/roles';
 import { InvalidIdError, UserNotFoundError } from "../../../errors.js";
 export default async function setRoles(root, params, { modules, userId }) {
     const foreignUserId = params.userId;
@@ -7,5 +8,9 @@ export default async function setRoles(root, params, { modules, userId }) {
         throw new InvalidIdError({ foreignUserId });
     if (!(await modules.users.userExists({ userId: foreignUserId })))
         throw new UserNotFoundError({ userId: foreignUserId });
+    const invalidRoles = params.roles.filter((role) => !Roles.roles[role]);
+    if (invalidRoles.length > 0) {
+        throw new Error(`Invalid role names: ${invalidRoles.join(', ')}`);
+    }
     return modules.users.updateRoles(foreignUserId, params.roles);
 }

package/lib/resolvers/queries/index.d.ts

@@ -3,76 +3,76 @@ import impersonator from './users/impersonator.ts';
 declare const _default: {
     me: typeof me;
     impersonator: typeof impersonator;
-    user: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    users: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    usersCount: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    product: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    products: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    productsCount: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    productCatalogPrices: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    languagesCount: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    languages: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    language: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    countriesCount: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    countries: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    country: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    currenciesCount: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    currencies: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    currency: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    paymentProviders: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    paymentProvidersCount: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    paymentProvider: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    paymentInterfaces: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    deliveryProvidersCount: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    deliveryProviders: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    deliveryProvider: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    deliveryInterfaces: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    warehousingProvidersCount: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    warehousingProviders: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    warehousingProvider: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    warehousingInterfaces: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    token: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    tokens: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    tokensCount: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    translatedProductTexts: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    translatedProductMediaTexts: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    translatedProductVariationTexts: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    ordersCount: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    orders: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    order: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    assortmentsCount: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    assortments: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    translatedAssortmentMediaTexts: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    assortment: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    filtersCount: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    filters: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    filter: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    shopInfo: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    translatedAssortmentTexts: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    translatedFilterTexts: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    productReview: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    productReviews: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    productReviewsCount: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    quotation: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    quotations: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    quotationsCount: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    searchProducts: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    searchAssortments: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    workQueue: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    workQueueCount: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    activeWorkTypes: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    enrollment: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    enrollments: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    enrollmentsCount: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    work: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    event: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    events: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    eventsCount: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    registeredEventTypes: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    validateResetPasswordToken: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    validateVerifyEmailToken: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    workStatistics: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    eventStatistics: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
-    orderStatistics: (root: any, params: any, context: any, ...other: any[]) => Promise<any>;
+    user: (root: any, params: any, context: any, info: any) => Promise<any>;
+    users: (root: any, params: any, context: any, info: any) => Promise<any>;
+    usersCount: (root: any, params: any, context: any, info: any) => Promise<any>;
+    product: (root: any, params: any, context: any, info: any) => Promise<any>;
+    products: (root: any, params: any, context: any, info: any) => Promise<any>;
+    productsCount: (root: any, params: any, context: any, info: any) => Promise<any>;
+    productCatalogPrices: (root: any, params: any, context: any, info: any) => Promise<any>;
+    languagesCount: (root: any, params: any, context: any, info: any) => Promise<any>;
+    languages: (root: any, params: any, context: any, info: any) => Promise<any>;
+    language: (root: any, params: any, context: any, info: any) => Promise<any>;
+    countriesCount: (root: any, params: any, context: any, info: any) => Promise<any>;
+    countries: (root: any, params: any, context: any, info: any) => Promise<any>;
+    country: (root: any, params: any, context: any, info: any) => Promise<any>;
+    currenciesCount: (root: any, params: any, context: any, info: any) => Promise<any>;
+    currencies: (root: any, params: any, context: any, info: any) => Promise<any>;
+    currency: (root: any, params: any, context: any, info: any) => Promise<any>;
+    paymentProviders: (root: any, params: any, context: any, info: any) => Promise<any>;
+    paymentProvidersCount: (root: any, params: any, context: any, info: any) => Promise<any>;
+    paymentProvider: (root: any, params: any, context: any, info: any) => Promise<any>;
+    paymentInterfaces: (root: any, params: any, context: any, info: any) => Promise<any>;
+    deliveryProvidersCount: (root: any, params: any, context: any, info: any) => Promise<any>;
+    deliveryProviders: (root: any, params: any, context: any, info: any) => Promise<any>;
+    deliveryProvider: (root: any, params: any, context: any, info: any) => Promise<any>;
+    deliveryInterfaces: (root: any, params: any, context: any, info: any) => Promise<any>;
+    warehousingProvidersCount: (root: any, params: any, context: any, info: any) => Promise<any>;
+    warehousingProviders: (root: any, params: any, context: any, info: any) => Promise<any>;
+    warehousingProvider: (root: any, params: any, context: any, info: any) => Promise<any>;
+    warehousingInterfaces: (root: any, params: any, context: any, info: any) => Promise<any>;
+    token: (root: any, params: any, context: any, info: any) => Promise<any>;
+    tokens: (root: any, params: any, context: any, info: any) => Promise<any>;
+    tokensCount: (root: any, params: any, context: any, info: any) => Promise<any>;
+    translatedProductTexts: (root: any, params: any, context: any, info: any) => Promise<any>;
+    translatedProductMediaTexts: (root: any, params: any, context: any, info: any) => Promise<any>;
+    translatedProductVariationTexts: (root: any, params: any, context: any, info: any) => Promise<any>;
+    ordersCount: (root: any, params: any, context: any, info: any) => Promise<any>;
+    orders: (root: any, params: any, context: any, info: any) => Promise<any>;
+    order: (root: any, params: any, context: any, info: any) => Promise<any>;
+    assortmentsCount: (root: any, params: any, context: any, info: any) => Promise<any>;
+    assortments: (root: any, params: any, context: any, info: any) => Promise<any>;
+    translatedAssortmentMediaTexts: (root: any, params: any, context: any, info: any) => Promise<any>;
+    assortment: (root: any, params: any, context: any, info: any) => Promise<any>;
+    filtersCount: (root: any, params: any, context: any, info: any) => Promise<any>;
+    filters: (root: any, params: any, context: any, info: any) => Promise<any>;
+    filter: (root: any, params: any, context: any, info: any) => Promise<any>;
+    shopInfo: (root: any, params: any, context: any, info: any) => Promise<any>;
+    translatedAssortmentTexts: (root: any, params: any, context: any, info: any) => Promise<any>;
+    translatedFilterTexts: (root: any, params: any, context: any, info: any) => Promise<any>;
+    productReview: (root: any, params: any, context: any, info: any) => Promise<any>;
+    productReviews: (root: any, params: any, context: any, info: any) => Promise<any>;
+    productReviewsCount: (root: any, params: any, context: any, info: any) => Promise<any>;
+    quotation: (root: any, params: any, context: any, info: any) => Promise<any>;
+    quotations: (root: any, params: any, context: any, info: any) => Promise<any>;
+    quotationsCount: (root: any, params: any, context: any, info: any) => Promise<any>;
+    searchProducts: (root: any, params: any, context: any, info: any) => Promise<any>;
+    searchAssortments: (root: any, params: any, context: any, info: any) => Promise<any>;
+    workQueue: (root: any, params: any, context: any, info: any) => Promise<any>;
+    workQueueCount: (root: any, params: any, context: any, info: any) => Promise<any>;
+    activeWorkTypes: (root: any, params: any, context: any, info: any) => Promise<any>;
+    enrollment: (root: any, params: any, context: any, info: any) => Promise<any>;
+    enrollments: (root: any, params: any, context: any, info: any) => Promise<any>;
+    enrollmentsCount: (root: any, params: any, context: any, info: any) => Promise<any>;
+    work: (root: any, params: any, context: any, info: any) => Promise<any>;
+    event: (root: any, params: any, context: any, info: any) => Promise<any>;
+    events: (root: any, params: any, context: any, info: any) => Promise<any>;
+    eventsCount: (root: any, params: any, context: any, info: any) => Promise<any>;
+    registeredEventTypes: (root: any, params: any, context: any, info: any) => Promise<any>;
+    validateResetPasswordToken: (root: any, params: any, context: any, info: any) => Promise<any>;
+    validateVerifyEmailToken: (root: any, params: any, context: any, info: any) => Promise<any>;
+    workStatistics: (root: any, params: any, context: any, info: any) => Promise<any>;
+    eventStatistics: (root: any, params: any, context: any, info: any) => Promise<any>;
+    orderStatistics: (root: any, params: any, context: any, info: any) => Promise<any>;
 };
 export default _default;

package/lib/resolvers/type/index.d.ts

@@ -776,12 +776,12 @@ declare const types: {
     Token: {
         product: (token: import("@unchainedshop/core-warehousing").TokenSurrogate, params: never, { loaders }: import("../../context.ts").Context) => Promise<import("@unchainedshop/core-products").Product>;
         user: (token: import("@unchainedshop/core-warehousing").TokenSurrogate, params: never, { loaders }: import("../../context.ts").Context) => Promise<import("@unchainedshop/core-users").User | null>;
-        status: (token: import("@unchainedshop/core-warehousing").TokenSurrogate, params: never, { services }: import("../../context.ts").Context) => Promise<import("@unchainedshop/core-warehousing").TokenStatus>;
+        status: (token: import("@unchainedshop/core-warehousing").TokenSurrogate, params: never, { loaders }: import("../../context.ts").Context) => Promise<import("@unchainedshop/core-warehousing").TokenStatus>;
         ercMetadata: (token: import("@unchainedshop/core-warehousing").TokenSurrogate, { forceLocale }: {
             forceLocale: string;
         }, context: import("../../context.ts").Context) => Promise<any>;
-        isInvalidateable: (token: import("@unchainedshop/core-warehousing").TokenSurrogate, _params: never, { services }: import("../../context.ts").Context) => Promise<boolean>;
-        accessKey: (token: import("@unchainedshop/core-warehousing").TokenSurrogate, params: never, requestContext: import("../../context.ts").Context) => Promise<string | null>;
+        isInvalidateable: (token: import("@unchainedshop/core-warehousing").TokenSurrogate, _params: never, { loaders, services }: import("../../context.ts").Context) => Promise<boolean>;
+        accessKey: (token: import("@unchainedshop/core-warehousing").TokenSurrogate, params: never, requestContext: import("../../context.ts").Context) => Promise<string>;
     };
     User: import("./user-types.ts").UserHelperTypes;
     WebAuthnCredentials: {

package/lib/resolvers/type/login-method-response-types.js

@@ -1,6 +1,7 @@
+import { IN_LOGIN_RESPONSE } from "../../context.js";
 export const LoginMethodResponse = {
     user({ user }) {
-        user._inLoginMethodResponse = true;
+        user[IN_LOGIN_RESPONSE] = true;
         return user;
     },
 };

package/lib/resolvers/type/token-types.d.ts

@@ -3,10 +3,10 @@ import type { TokenSurrogate } from '@unchainedshop/core-warehousing';
 export declare const Token: {
     product: (token: TokenSurrogate, params: never, { loaders }: Context) => Promise<import("@unchainedshop/core-products").Product>;
     user: (token: TokenSurrogate, params: never, { loaders }: Context) => Promise<import("@unchainedshop/core-users").User | null>;
-    status: (token: TokenSurrogate, params: never, { services }: Context) => Promise<import("@unchainedshop/core-warehousing").TokenStatus>;
+    status: (token: TokenSurrogate, params: never, { loaders }: Context) => Promise<import("@unchainedshop/core-warehousing").TokenStatus>;
     ercMetadata: (token: TokenSurrogate, { forceLocale }: {
         forceLocale: string;
     }, context: Context) => Promise<any>;
-    isInvalidateable: (token: TokenSurrogate, _params: never, { services }: Context) => Promise<boolean>;
-    accessKey: (token: TokenSurrogate, params: never, requestContext: Context) => Promise<string | null>;
+    isInvalidateable: (token: TokenSurrogate, _params: never, { loaders, services }: Context) => Promise<boolean>;
+    accessKey: (token: TokenSurrogate, params: never, requestContext: Context) => Promise<string>;
 };

package/lib/resolvers/type/token-types.js

@@ -9,8 +9,8 @@ export const Token = {
             return null;
         return loaders.userLoader.load({ userId: token.userId });
     },
-    status: async (token, params, { services }) => {
-        return services.warehousing.resolveTokenStatus({ token });
+    status: async (token, params, { loaders }) => {
+        return loaders.tokenExportStatusLoader.load({ token });
     },
     ercMetadata: async (token, { forceLocale }, context) => {
         const { loaders, services } = context;
@@ -21,12 +21,13 @@ export const Token = {
             locale: forceLocale ? new Intl.Locale(forceLocale) : context.locale,
         });
     },
-    isInvalidateable: async (token, _params, { services }) => {
-        return services.warehousing.isTokenInvalidateable({ token });
+    isInvalidateable: async (token, _params, { loaders, services }) => {
+        const product = await loaders.productLoader.load({ productId: token.productId });
+        return services.warehousing.isTokenInvalidateable({ token, product });
     },
     accessKey: async (token, params, requestContext) => {
         const { modules } = requestContext;
         await checkAction(requestContext, actions.updateToken, [undefined, { tokenId: token._id }]);
-        return modules.warehousing.buildAccessKeyForToken(token._id);
+        return modules.warehousing.buildAccessKeyFromToken(token);
     },
 };

package/lib/roles/all.js

@@ -1,6 +1,8 @@
+import { timingSafeStringEqual } from '@unchainedshop/utils';
+import { IN_LOGIN_RESPONSE } from "../context.js";
 export const all = (role, actions) => {
     const isInLoginMutationResponse = (root) => {
-        if (root && root._inLoginMethodResponse) {
+        if (root && root[IN_LOGIN_RESPONSE]) {
             return true;
         }
         return false;
@@ -18,8 +20,8 @@ export const all = (role, actions) => {
         if (isOwnedByUser)
             return true;
         const accessKeyHeader = context.getHeader('x-token-accesskey');
-        const accessKey = await context.modules.warehousing.buildAccessKeyForToken(tokenId);
-        if (accessKeyHeader && accessKeyHeader === accessKey)
+        const accessKey = await context.modules.warehousing.buildAccessKeyFromToken(token);
+        if (accessKeyHeader && accessKey && (await timingSafeStringEqual(accessKeyHeader, accessKey)))
             return true;
         return false;
     };
@@ -145,6 +147,6 @@ export const all = (role, actions) => {
     role.allow(actions.createUser, () => true);
     role.allow(actions.forgotPassword, () => true);
     role.allow(actions.resetPassword, () => true);
-    role.allow(actions.changePassword, () => true);
+    role.allow(actions.changePassword, () => false);
     role.allow(actions.heartbeat, () => true);
 };

package/lib/roles/loggedIn.js

@@ -166,6 +166,7 @@ export const loggedIn = (role, actions) => {
     role.allow(actions.manageBookmarks, isOwnedBookmark);
     role.allow(actions.bookmarkProduct, () => true);
     role.allow(actions.voteProductReview, () => true);
+    role.allow(actions.changePassword, () => true);
     role.allow(actions.registerPaymentCredentials, () => true);
     role.allow(actions.managePaymentCredentials, isOwnedPaymentCredential);
     role.allow(actions.confirmMediaUpload, () => true);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@unchainedshop/api",
   "description": "GraphQL API layer for the Unchained Engine with Express/Fastify adapters and MCP server",
-  "version": "4.8.3",
+  "version": "4.8.9",
   "main": "lib/api-index.js",
   "types": "lib/api-index.d.ts",
   "type": "module",