ldap-rest 2.0.3 → 2.0.4

package/dist/src/plugins/auth/authzPerBranch.d.ts

@@ -6,20 +6,20 @@
  * Supports user and group-based permissions with configurable defaults
  * @group Plugins
  */
-import type { DM } from '../../bin';
-import type { Hooks } from '../../hooks';
-import type { AuthConfig, BranchPermissions } from '../../config/args';
-import type { DmRequest } from '../../lib/auth/base';
-import AuthzBase from '../../lib/authz/base';
+import type { DM } from '../../bin/index.js';
+import type { Hooks } from '../../hooks.js';
+import type { AuthConfig, BranchPermissions } from '../../config/args.js';
+import type { DmRequest } from '../../lib/auth/base.js';
+import AuthzBase from '../../lib/authz/base.js';
 interface CachedGroups {
     groups: string[];
     timestamp: number;
 }
 export default class AuthzPerBranch extends AuthzBase {
     static optionDefinitions: {
-        authz_per_branch_config: import("../../config/options").JsonOption<AuthConfig>;
-        authz_per_branch_cache_ttl: import("../../config/options").NumberOption;
-        ldap_group_member_attribute: import("../../config/options").StringOption;
+        authz_per_branch_config: import("../../config/options.js").JsonOption<AuthConfig>;
+        authz_per_branch_cache_ttl: import("../../config/options.js").NumberOption;
+        ldap_group_member_attribute: import("../../config/options.js").StringOption;
     };
     name: string;
     authConfig?: AuthConfig;

package/dist/src/plugins/auth/authzPerRoute.d.ts

@@ -8,11 +8,11 @@
  * @author Xavier Guimard <xguimard@linagora.com>
  */
 import type { Express } from 'express';
-import DmPlugin, { type Role } from '../../abstract/plugin';
+import DmPlugin, { type Role } from '../../abstract/plugin.js';
 export declare function globToRegex(glob: string): RegExp;
 export default class AuthzPerRoute extends DmPlugin {
     static optionDefinitions: {
-        authz_per_route: import("../../config/options").ArrayOption;
+        authz_per_route: import("../../config/options.js").ArrayOption;
     };
     name: string;
     roles: Role[];

package/dist/src/plugins/auth/authzScope.d.ts

@@ -1,5 +1,5 @@
 import type { Express } from 'express';
-import DmPlugin, { type Role } from '../../abstract/plugin';
+import DmPlugin, { type Role } from '../../abstract/plugin.js';
 export declare const ScopeResponse: import("@sinclair/typebox").TObject<{
     user: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>;
     unrestricted: import("@sinclair/typebox").TBoolean;

package/dist/src/plugins/auth/crowdsec.d.ts

@@ -14,12 +14,12 @@
  * @author Xavier Guimard <xguimard@linagora.com>
  */
 import type { Express } from 'express';
-import DmPlugin, { Role } from '../../abstract/plugin';
+import DmPlugin, { Role } from '../../abstract/plugin.js';
 export default class CrowdSec extends DmPlugin {
     static optionDefinitions: {
-        crowdsec_url: import("../../config/options").StringOption;
-        crowdsec_api_key: import("../../config/options").StringOption;
-        crowdsec_cache_ttl: import("../../config/options").NumberOption;
+        crowdsec_url: import("../../config/options.js").StringOption;
+        crowdsec_api_key: import("../../config/options.js").StringOption;
+        crowdsec_cache_ttl: import("../../config/options.js").NumberOption;
     };
     name: string;
     roles: Role[];

package/dist/src/plugins/auth/fake.d.ts

@@ -7,11 +7,11 @@
  * @group Plugins
  */
 import type { Response } from 'express';
-import AuthBase, { type DmRequest } from '../../lib/auth/base';
-import type { Role } from '../../abstract/plugin';
+import AuthBase, { type DmRequest } from '../../lib/auth/base.js';
+import type { Role } from '../../abstract/plugin.js';
 export default class AuthFake extends AuthBase {
     static optionDefinitions: {
-        auth_fake_user: import("../../config/options").StringOption;
+        auth_fake_user: import("../../config/options.js").StringOption;
     };
     name: string;
     roles: Role[];

package/dist/src/plugins/auth/hmac.d.ts

@@ -1,10 +1,10 @@
 import type { Response } from 'express';
-import AuthBase, { type DmRequest } from '../../lib/auth/base';
-import type { Role } from '../../abstract/plugin';
+import AuthBase, { type DmRequest } from '../../lib/auth/base.js';
+import type { Role } from '../../abstract/plugin.js';
 export default class AuthHmac extends AuthBase {
     static optionDefinitions: {
-        auth_hmac: import("../../config/options").ArrayOption;
-        auth_hmac_window: import("../../config/options").NumberOption;
+        auth_hmac: import("../../config/options.js").ArrayOption;
+        auth_hmac_window: import("../../config/options.js").NumberOption;
     };
     protected knownIdentities(): string[];
     protected identitySource(): string;

package/dist/src/plugins/auth/llng.d.ts

@@ -7,13 +7,28 @@
  * This plugin enables authentication and authorization using Lemonldap::NG.
  */
 import type { Express, Response } from 'express';
-import AuthBase, { DmRequest } from '../../lib/auth/base';
-import type { Role } from '../../abstract/plugin';
-type LlngHandler = typeof import('lemonldap-ng-handler');
+import AuthBase, { DmRequest } from '../../lib/auth/base.js';
+import type { Role } from '../../abstract/plugin.js';
+/**
+ * The part of `lemonldap-ng-handler` this plugin uses. The ambient
+ * declaration in src/types/lemonldap-ng-handler.d.ts gives the module the
+ * same shape for the build; this interface is what the published declaration
+ * names, so a consumer without the package still sees it.
+ */
+interface LlngHandler {
+    init(args: {
+        configStorage?: {
+            confFile?: string;
+            [key: string]: unknown;
+        };
+        type?: string;
+    }): Promise<unknown>;
+    run(req: DmRequest, res: Response, next: () => void): void;
+}
 export default class AuthLLNG extends AuthBase {
     static optionDefinitions: {
-        llng_ini: import("../../config/options").StringOption;
-        llng_username_header: import("../../config/options").StringOption;
+        llng_ini: import("../../config/options.js").StringOption;
+        llng_username_header: import("../../config/options.js").StringOption;
     };
     name: string;
     roles: Role[];

package/dist/src/plugins/auth/openidconnect.d.ts

@@ -1,16 +1,16 @@
 import type { Express, Response } from 'express';
 import type { ConfigParams } from 'express-openid-connect';
-import AuthBase, { DmRequest } from '../../lib/auth/base';
-import { type Role } from '../../abstract/plugin';
-import { DM } from '../../bin';
+import AuthBase, { DmRequest } from '../../lib/auth/base.js';
+import { type Role } from '../../abstract/plugin.js';
+import { DM } from '../../bin/index.js';
 export default class OpenIDConnect extends AuthBase {
     static optionDefinitions: {
-        oidc_server: import("../../config/options").StringOption;
-        oidc_username_claim: import("../../config/options").StringOption;
-        oidc_client_id: import("../../config/options").StringOption;
-        oidc_client_secret: import("../../config/options").StringOption;
-        base_url: import("../../config/options").StringOption;
-        oidc_logout_origins: import("../../config/options").ArrayOption;
+        oidc_server: import("../../config/options.js").StringOption;
+        oidc_username_claim: import("../../config/options.js").StringOption;
+        oidc_client_id: import("../../config/options.js").StringOption;
+        oidc_client_secret: import("../../config/options.js").StringOption;
+        base_url: import("../../config/options.js").StringOption;
+        oidc_logout_origins: import("../../config/options.js").ArrayOption;
     };
     name: string;
     configApiKey: string;

package/dist/src/plugins/auth/rateLimit.d.ts

@@ -13,11 +13,11 @@
  * @author Xavier Guimard <xguimard@linagora.com>
  */
 import type { Express } from 'express';
-import DmPlugin, { type Role } from '../../abstract/plugin';
+import DmPlugin, { type Role } from '../../abstract/plugin.js';
 export default class RateLimit extends DmPlugin {
     static optionDefinitions: {
-        rate_limit_window_ms: import("../../config/options").NumberOption;
-        rate_limit_max: import("../../config/options").NumberOption;
+        rate_limit_window_ms: import("../../config/options.js").NumberOption;
+        rate_limit_max: import("../../config/options.js").NumberOption;
     };
     name: string;
     roles: Role[];

package/dist/src/plugins/auth/token.d.ts

@@ -6,11 +6,11 @@
  * @group Plugins
  */
 import type { Response } from 'express';
-import AuthBase, { type DmRequest } from '../../lib/auth/base';
-import type { Role } from '../../abstract/plugin';
+import AuthBase, { type DmRequest } from '../../lib/auth/base.js';
+import type { Role } from '../../abstract/plugin.js';
 export default class AuthToken extends AuthBase {
     static optionDefinitions: {
-        auth_token: import("../../config/options").ArrayOption;
+        auth_token: import("../../config/options.js").ArrayOption;
     };
     protected knownIdentities(): string[];
     protected identitySource(): string;

package/dist/src/plugins/auth/totp.d.ts

@@ -1,11 +1,11 @@
 import type { Response } from 'express';
-import AuthBase, { type DmRequest } from '../../lib/auth/base';
-import type { Role } from '../../abstract/plugin';
+import AuthBase, { type DmRequest } from '../../lib/auth/base.js';
+import type { Role } from '../../abstract/plugin.js';
 export default class AuthTotp extends AuthBase {
     static optionDefinitions: {
-        auth_totp: import("../../config/options").ArrayOption;
-        auth_totp_window: import("../../config/options").NumberOption;
-        auth_totp_step: import("../../config/options").NumberOption;
+        auth_totp: import("../../config/options.js").ArrayOption;
+        auth_totp_window: import("../../config/options.js").NumberOption;
+        auth_totp_step: import("../../config/options.js").NumberOption;
     };
     protected knownIdentities(): string[];
     protected identitySource(): string;

package/dist/src/plugins/auth/trustedProxy.d.ts

@@ -1,30 +1,5 @@
-/**
- * @module core/auth/trustedProxy
- * Trusted proxy plugin to validate X-Forwarded-For headers
- *
- * This plugin validates that X-Forwarded-For headers only come from trusted
- * upstream reverse proxies. If the request comes from an untrusted IP,
- * the X-Forwarded-For header is removed to prevent IP spoofing attacks.
- *
- * This plugin MUST be loaded BEFORE any plugin that uses X-Forwarded-For
- * (like crowdsec and rateLimit) to ensure they receive sanitized headers.
- *
- * Configuration:
- * - trusted_proxy: Array of trusted proxy IPs or CIDR ranges (required)
- *   Example: ["127.0.0.1", "10.0.0.0/8", "192.168.1.0/24", "::1"]
- * - trusted_proxy_auth_header: Header name containing the authenticated user
- *   from trusted proxy (optional, default: "Auth-User")
- *
- * When a request comes from a trusted proxy:
- * - X-Forwarded-For header is preserved
- * - The request is marked as trusted (req.trustedProxy = true)
- * - If trusted_proxy_auth_header is set and the header is present,
- *   req.proxyAuthUser is set to its value for use by other plugins (e.g., weblogs)
- *
- * @author Xavier Guimard <xguimard@linagora.com>
- */
 import type { Express } from 'express';
-import DmPlugin, { type Role } from '../../abstract/plugin';
+import DmPlugin, { type Role } from '../../abstract/plugin.js';
 declare global {
     namespace Express {
         interface Request {
@@ -35,8 +10,8 @@ declare global {
 }
 export default class TrustedProxy extends DmPlugin {
     static optionDefinitions: {
-        trusted_proxy: import("../../config/options").ArrayOption;
-        trusted_proxy_auth_header: import("../../config/options").StringOption;
+        trusted_proxy: import("../../config/options.js").ArrayOption;
+        trusted_proxy_auth_header: import("../../config/options.js").StringOption;
     };
     name: string;
     roles: Role[];
@@ -49,15 +24,24 @@ export default class TrustedProxy extends DmPlugin {
      */
     private isTrustedProxy;
     /**
-     * Normalize IP address (handle IPv4-mapped IPv6 addresses)
+     * Whether an address belongs to a network: same family, or an IPv4-mapped
+     * IPv6 address checked as the IPv4 address it carries.
      */
-    private normalizeIP;
+    private isInNetwork;
     /**
-     * Parse an IP address into a bigint for comparison
+     * The IPv4 address an IPv4-mapped IPv6 address carries
+     * (`::ffff:a.b.c.d`), or undefined for another address.
+     */
+    private mappedIPv4;
+    /**
+     * Parse an IP address into a bigint for comparison. A zone index names the
+     * interface, not the address, and is dropped before the match.
      */
     private parseIP;
     /**
-     * Parse a CIDR notation string into network address and mask
+     * Parse a CIDR notation string into network address and mask. A network
+     * written as an IPv4-mapped IPv6 network is checked as the IPv4 network it
+     * is: `::ffff:10.0.0.0/104` is `10.0.0.0/8`.
      */
     private parseCIDR;
     /**

package/dist/src/plugins/bcl.d.ts

@@ -16,12 +16,12 @@
  *
  * @group Plugins
  */
-import DmPlugin from '../abstract/plugin';
-import type { DM } from '../bin';
-import type { OidcLogoutToken, OidcSessionClaims } from '../hooks';
+import DmPlugin from '../abstract/plugin.js';
+import type { DM } from '../bin/index.js';
+import type { OidcLogoutToken, OidcSessionClaims } from '../hooks.js';
 export default class Bcl extends DmPlugin {
     static optionDefinitions: {
-        bcl_retention: import("../config/options").NumberOption;
+        bcl_retention: import("../config/options.js").NumberOption;
     };
     name: string;
     dependencies: {

package/dist/src/plugins/bcl.options.d.ts

@@ -1,8 +1,8 @@
 /** Back-Channel Logout plugin options. */
-import type { Config } from '../config/args';
-import { type OptionsOf } from '../config/options';
+import type { Config } from '../config/args.js';
+import { type OptionsOf } from '../config/options.js';
 export declare const bclOptions: {
-    bcl_retention: import("../config/options").NumberOption;
+    bcl_retention: import("../config/options.js").NumberOption;
 };
 export type BclOptions = OptionsOf<typeof bclOptions>;
 export declare function bclOptionsOf(config: Config): BclOptions;

package/dist/src/plugins/configApi.d.ts

@@ -9,7 +9,7 @@
  * expose their configuration via getConfigApiData() method
  */
 import type { Express } from 'express';
-import DmPlugin, { type Role } from '../abstract/plugin';
+import DmPlugin, { type Role } from '../abstract/plugin.js';
 interface ConfigApiResponse {
     apiPrefix: string;
     ldapBase: string;

package/dist/src/plugins/demo/helloworld.d.ts

@@ -4,7 +4,7 @@
  * @author Xavier Guimard <xguimard@linagora.com>
  */
 import type { Express } from 'express';
-import DmPlugin, { type Role } from '../../abstract/plugin';
+import DmPlugin, { type Role } from '../../abstract/plugin.js';
 /**
  * The answer of the hello-world endpoint.
  *

package/dist/src/plugins/ldap/accountLifecycle.d.ts

@@ -1,5 +1,5 @@
 import type { Express } from 'express';
-import DmPlugin, { type Role } from '../../abstract/plugin';
+import DmPlugin, { type Role } from '../../abstract/plugin.js';
 export declare const StatusBody: import("@sinclair/typebox").TObject<{
     state: import("@sinclair/typebox").TString;
 }>;

package/dist/src/plugins/ldap/bulkImport.d.ts

@@ -4,13 +4,13 @@
  * @author LDAP-Rest Team
  */
 import type { Express } from 'express';
-import DmPlugin, { type Role } from '../../abstract/plugin';
-import type { DM } from '../../bin';
+import DmPlugin, { type Role } from '../../abstract/plugin.js';
+import type { DM } from '../../bin/index.js';
 export default class LdapBulkImport extends DmPlugin {
     static optionDefinitions: {
-        bulk_import_schemas: import("../../config/options").StringOption;
-        bulk_import_max_file_size: import("../../config/options").StringOption;
-        bulk_import_batch_size: import("../../config/options").StringOption;
+        bulk_import_schemas: import("../../config/options.js").StringOption;
+        bulk_import_max_file_size: import("../../config/options.js").StringOption;
+        bulk_import_batch_size: import("../../config/options.js").StringOption;
     };
     name: string;
     roles: Role[];

package/dist/src/plugins/ldap/departmentSync.d.ts

@@ -6,9 +6,9 @@
  * Automatically updates twakeDepartmentLink and twakeDepartmentPath attributes on all
  * resources (users, groups, etc.) when their linked organization DN changes.
  */
-import DmPlugin, { type Role } from '../../abstract/plugin';
-import type { DM } from '../../bin';
-import type { Hooks } from '../../hooks';
+import DmPlugin, { type Role } from '../../abstract/plugin.js';
+import type { DM } from '../../bin/index.js';
+import type { Hooks } from '../../hooks.js';
 export default class LdapDepartmentSync extends DmPlugin {
     name: string;
     roles: Role[];
@@ -71,6 +71,17 @@ export default class LdapDepartmentSync extends DmPlugin {
      * We need to update resources pointing to the old child DN
      */
     private updateDescendantReferences;
+    /**
+     * Put the descendant RDNs of `dn` under `newDn`: the last RDNs of `dn`
+     * are those of `oldDn`. The RDNs kept are spelled as `dn` spells them, and
+     * compared as DNs, so an escaped comma in a value is never a separator.
+     *
+     * @param dn link naming `oldDn` or one of its descendants
+     * @param oldDn the organization's DN before the rename
+     * @param newDn the organization's DN after it
+     * @returns the link naming the same descendant under `newDn`
+     */
+    private replaceDnTail;
     /**
      * Get department path from an organization DN
      * Fetches the path attribute directly from the organization entry

package/dist/src/plugins/ldap/enterpriseRules.d.ts

@@ -42,11 +42,11 @@
  * @group Plugins
  */
 import type { Request } from 'express';
-import DmPlugin, { type Role } from '../../abstract/plugin';
-import type { DM } from '../../bin';
-import type { Hooks } from '../../hooks';
-import type { AttributeValue } from '../../lib/ldapActions';
-import type { Schema, SchemaAttribute } from '../../config/schema';
+import DmPlugin, { type Role } from '../../abstract/plugin.js';
+import type { DM } from '../../bin/index.js';
+import type { Hooks } from '../../hooks.js';
+import type { AttributeValue } from '../../lib/ldapActions.js';
+import type { Schema, SchemaAttribute } from '../../config/schema.js';
 /**
  * One place a DN is stored: which entry, in which attribute, and what that
  * attribute currently holds there.
@@ -135,8 +135,8 @@ export declare function startOfUtcDay(now?: Date): number;
 export declare function mailInDomains(mail: string, domains: string[], allowSubdomains?: boolean): boolean;
 export default class LdapEnterpriseRules extends DmPlugin {
     static optionDefinitions: {
-        enterprise_domain_name_attribute: import("../../config/options").StringOption;
-        enterprise_domain_link_attribute: import("../../config/options").StringOption;
+        enterprise_domain_name_attribute: import("../../config/options.js").StringOption;
+        enterprise_domain_link_attribute: import("../../config/options.js").StringOption;
     };
     name: string;
     roles: Role[];

package/dist/src/plugins/ldap/externalUsersInGroups.d.ts

@@ -5,10 +5,10 @@
  * Creates on-the-fly missing group users into a branch
  * This permits to add external users into mailing lists
  */
-import DmPlugin, { type Role } from '../../abstract/plugin';
-import type { DM } from '../../bin';
-import { Hooks } from '../../hooks';
-import ldapActions from '../../lib/ldapActions';
+import DmPlugin, { type Role } from '../../abstract/plugin.js';
+import type { DM } from '../../bin/index.js';
+import { Hooks } from '../../hooks.js';
+import ldapActions from '../../lib/ldapActions.js';
 /**
  * The domain of an address, as the managed domains are compared: after its
  * last `@` (the local part may hold one, quoted), lower-cased, without the
@@ -17,8 +17,8 @@ import ldapActions from '../../lib/ldapActions';
 export declare const mailDomainOf: (mail: string) => string;
 export default class ExternalUsersInGroups extends DmPlugin {
     static optionDefinitions: {
-        external_members_branch: import("../../config/options").StringOption;
-        external_branch_class: import("../../config/options").ArrayOption;
+        external_members_branch: import("../../config/options.js").StringOption;
+        external_branch_class: import("../../config/options.js").ArrayOption;
     };
     name: string;
     roles: Role[];

package/dist/src/plugins/ldap/flatGeneric.d.ts

@@ -6,10 +6,10 @@
  * Automatically creates sub-plugins based on schema metadata
  */
 import type { Express } from 'express';
-import DmPlugin, { type Role } from '../../abstract/plugin';
-import LdapFlat from '../../abstract/ldapFlat';
-import type { DM } from '../../bin';
-import type { LocalizedText } from '../../config/schema';
+import DmPlugin, { type Role } from '../../abstract/plugin.js';
+import LdapFlat from '../../abstract/ldapFlat.js';
+import type { DM } from '../../bin/index.js';
+import type { LocalizedText } from '../../config/schema.js';
 /**
  * Collections the other LDAP plugins serve under the same `/v1/ldap/` prefix,
  * with the plugin that serves each: its registry name, and the module paths a
@@ -51,8 +51,8 @@ declare class LdapFlatInstance extends LdapFlat {
 }
 export default class LdapFlatGeneric extends DmPlugin {
     static optionDefinitions: {
-        ldap_flat_schema: import("../../config/options").ArrayOption;
-        ldap_flat_auto_repair: import("../../config/options").BooleanOption;
+        ldap_flat_schema: import("../../config/options.js").ArrayOption;
+        ldap_flat_auto_repair: import("../../config/options.js").BooleanOption;
     };
     name: string;
     roles: Role[];

package/dist/src/plugins/ldap/groups.d.ts

@@ -1,12 +1,12 @@
 import type { Express, Request, Response } from 'express';
-import DmPlugin, { type Role } from '../../abstract/plugin';
-import type { DM } from '../../bin';
-import type { OptionSet } from '../../config/options';
-import type { Hooks } from '../../hooks';
-import type ldapActions from '../../lib/ldapActions';
-import type { AttributesList, AttributeValue, LdapList, ModifyRequest } from '../../lib/ldapActions';
-import type { Schema } from '../../config/schema';
-import { EntityValidator } from '../../lib/entitySchema/validator';
+import DmPlugin, { type Role } from '../../abstract/plugin.js';
+import type { DM } from '../../bin/index.js';
+import type { OptionSet } from '../../config/options.js';
+import type { Hooks } from '../../hooks.js';
+import type ldapActions from '../../lib/ldapActions.js';
+import type { AttributesList, AttributeValue, LdapList, ModifyRequest } from '../../lib/ldapActions.js';
+import type { Schema } from '../../config/schema.js';
+import { EntityValidator } from '../../lib/entitySchema/validator.js';
 export interface postAdd {
     cn?: string;
     [key: string]: AttributeValue | undefined;

package/dist/src/plugins/ldap/ldap.options.d.ts

@@ -1,73 +1,73 @@
-import type { Config } from '../../config/args';
-import type { AttributesList } from '../../lib/ldapActions';
-import { type OptionsOf } from '../../config/options';
+import type { Config } from '../../config/args.js';
+import type { AttributesList } from '../../lib/ldapActions.js';
+import { type OptionsOf } from '../../config/options.js';
 export declare const organizationOptions: {
-    ldap_top_organization: import("../../config/options").StringOption;
-    ldap_organization_class: import("../../config/options").ArrayOption;
-    ldap_organization_link_attribute: import("../../config/options").StringOption;
-    ldap_organization_path_attribute: import("../../config/options").StringOption;
-    ldap_organization_path_separator: import("../../config/options").StringOption;
-    ldap_organization_max_subnodes: import("../../config/options").NumberOption;
-    organization_schema: import("../../config/options").StringOption;
+    ldap_top_organization: import("../../config/options.js").StringOption;
+    ldap_organization_class: import("../../config/options.js").ArrayOption;
+    ldap_organization_link_attribute: import("../../config/options.js").StringOption;
+    ldap_organization_path_attribute: import("../../config/options.js").StringOption;
+    ldap_organization_path_separator: import("../../config/options.js").StringOption;
+    ldap_organization_max_subnodes: import("../../config/options.js").NumberOption;
+    organization_schema: import("../../config/options.js").StringOption;
 };
 export type OrganizationOptions = OptionsOf<typeof organizationOptions>;
 export declare const enterpriseRulesOptions: {
-    enterprise_domain_name_attribute: import("../../config/options").StringOption;
-    enterprise_domain_link_attribute: import("../../config/options").StringOption;
+    enterprise_domain_name_attribute: import("../../config/options.js").StringOption;
+    enterprise_domain_link_attribute: import("../../config/options.js").StringOption;
 };
 export type EnterpriseRulesOptions = OptionsOf<typeof enterpriseRulesOptions>;
 export declare const groupsOptions: {
-    ldap_group_base: import("../../config/options").StringOption;
-    ldap_groups_main_attribute: import("../../config/options").StringOption;
-    group_class: import("../../config/options").ArrayOption;
-    groups_allow_unexistent_members: import("../../config/options").BooleanOption;
-    group_default_attributes: import("../../config/options").JsonOption<AttributesList>;
-    group_dummy_user: import("../../config/options").StringOption;
-    group_schema: import("../../config/options").StringOption;
+    ldap_group_base: import("../../config/options.js").StringOption;
+    ldap_groups_main_attribute: import("../../config/options.js").StringOption;
+    group_class: import("../../config/options.js").ArrayOption;
+    groups_allow_unexistent_members: import("../../config/options.js").BooleanOption;
+    group_default_attributes: import("../../config/options.js").JsonOption<AttributesList>;
+    group_dummy_user: import("../../config/options.js").StringOption;
+    group_schema: import("../../config/options.js").StringOption;
 };
 export type GroupsOptions = OptionsOf<typeof groupsOptions>;
 export declare const externalUsersOptions: {
-    external_members_branch: import("../../config/options").StringOption;
-    external_branch_class: import("../../config/options").ArrayOption;
+    external_members_branch: import("../../config/options.js").StringOption;
+    external_branch_class: import("../../config/options.js").ArrayOption;
 };
 export type ExternalUsersOptions = OptionsOf<typeof externalUsersOptions>;
 export declare const flatGenericOptions: {
-    ldap_flat_schema: import("../../config/options").ArrayOption;
-    ldap_flat_auto_repair: import("../../config/options").BooleanOption;
+    ldap_flat_schema: import("../../config/options.js").ArrayOption;
+    ldap_flat_auto_repair: import("../../config/options.js").BooleanOption;
 };
 export type FlatGenericOptions = OptionsOf<typeof flatGenericOptions>;
 export declare const rawOptions: {
-    ldap_raw_base: import("../../config/options").ArrayOption;
-    ldap_raw_hidden_attribute: import("../../config/options").ArrayOption;
-    ldap_raw_show_secrets: import("../../config/options").BooleanOption;
-    ldap_raw_max_results: import("../../config/options").NumberOption;
-    ldap_raw_schema_cache_ttl: import("../../config/options").NumberOption;
+    ldap_raw_base: import("../../config/options.js").ArrayOption;
+    ldap_raw_hidden_attribute: import("../../config/options.js").ArrayOption;
+    ldap_raw_show_secrets: import("../../config/options.js").BooleanOption;
+    ldap_raw_max_results: import("../../config/options.js").NumberOption;
+    ldap_raw_schema_cache_ttl: import("../../config/options.js").NumberOption;
 };
 export type RawOptions = OptionsOf<typeof rawOptions>;
 export declare const bulkImportOptions: {
-    bulk_import_schemas: import("../../config/options").StringOption;
-    bulk_import_max_file_size: import("../../config/options").StringOption;
-    bulk_import_batch_size: import("../../config/options").StringOption;
+    bulk_import_schemas: import("../../config/options.js").StringOption;
+    bulk_import_max_file_size: import("../../config/options.js").StringOption;
+    bulk_import_batch_size: import("../../config/options.js").StringOption;
 };
 export type BulkImportOptions = OptionsOf<typeof bulkImportOptions>;
 export declare const trashOptions: {
-    trash_base: import("../../config/options").StringOption;
-    trash_watched_bases: import("../../config/options").StringOption;
-    trash_add_metadata: import("../../config/options").StringOption;
-    trash_auto_create: import("../../config/options").StringOption;
+    trash_base: import("../../config/options.js").StringOption;
+    trash_watched_bases: import("../../config/options.js").StringOption;
+    trash_add_metadata: import("../../config/options.js").StringOption;
+    trash_auto_create: import("../../config/options.js").StringOption;
 };
 export type TrashOptions = OptionsOf<typeof trashOptions>;
 export declare const passwordPolicyOptions: {
-    ppolicy_default_dn: import("../../config/options").StringOption;
-    ppolicy_base: import("../../config/options").StringOption;
-    ppolicy_warn_days: import("../../config/options").NumberOption;
-    ppolicy_validate_complexity: import("../../config/options").BooleanOption;
-    ppolicy_min_length: import("../../config/options").NumberOption;
-    ppolicy_require_uppercase: import("../../config/options").BooleanOption;
-    ppolicy_require_lowercase: import("../../config/options").BooleanOption;
-    ppolicy_require_digit: import("../../config/options").BooleanOption;
-    ppolicy_require_special: import("../../config/options").BooleanOption;
-    ldap_users_base: import("../../config/options").StringOption;
+    ppolicy_default_dn: import("../../config/options.js").StringOption;
+    ppolicy_base: import("../../config/options.js").StringOption;
+    ppolicy_warn_days: import("../../config/options.js").NumberOption;
+    ppolicy_validate_complexity: import("../../config/options.js").BooleanOption;
+    ppolicy_min_length: import("../../config/options.js").NumberOption;
+    ppolicy_require_uppercase: import("../../config/options.js").BooleanOption;
+    ppolicy_require_lowercase: import("../../config/options.js").BooleanOption;
+    ppolicy_require_digit: import("../../config/options.js").BooleanOption;
+    ppolicy_require_special: import("../../config/options.js").BooleanOption;
+    ldap_users_base: import("../../config/options.js").StringOption;
 };
 export type PasswordPolicyOptions = OptionsOf<typeof passwordPolicyOptions>;
 export declare function organizationOptionsOf(config: Config): OrganizationOptions;