ldap-rest 2.0.3 → 2.0.4

package/dist/src/plugins/twake/james.d.ts

@@ -1,11 +1,11 @@
 import type { Express } from 'express';
-import TwakePlugin from '../../abstract/twakePlugin';
-import type { HealthStatus } from '../../lib/health';
-import { type Role } from '../../abstract/plugin';
-import type { DM } from '../../bin';
-import type { AttributeValue } from '../../lib/ldapActions';
-import { Hooks } from '../../hooks';
-import type { ChangesToNotify } from '../ldap/onChange';
+import TwakePlugin from '../../abstract/twakePlugin.js';
+import type { HealthStatus } from '../../lib/health.js';
+import { type Role } from '../../abstract/plugin.js';
+import type { DM } from '../../bin/index.js';
+import type { AttributeValue } from '../../lib/ldapActions.js';
+import { Hooks } from '../../hooks.js';
+import type { ChangesToNotify } from '../ldap/onChange.js';
 type Identity = {
     id: string;
     email: string;
@@ -21,17 +21,17 @@ export declare const QuotaParams: import("@sinclair/typebox").TObject<{
 }>;
 export default class James extends TwakePlugin {
     static optionDefinitions: {
-        james_webadmin_url: import("../../config/options").StringOption;
-        james_webadmin_token: import("../../config/options").StringOption;
-        james_signature_template: import("../../config/options").StringOption;
-        james_concurrency: import("../../config/options").NumberOption;
-        james_init_delay: import("../../config/options").NumberOption;
-        james_retry_attempts: import("../../config/options").NumberOption;
-        james_retry_delay: import("../../config/options").NumberOption;
-        james_mailing_list_branch: import("../../config/options").ArrayOption;
-        james_mailbox_type_attribute: import("../../config/options").StringOption;
-        james_sync_forwards: import("../../config/options").BooleanOption;
-        james_team_mailbox_any_domain: import("../../config/options").BooleanOption;
+        james_webadmin_url: import("../../config/options.js").StringOption;
+        james_webadmin_token: import("../../config/options.js").StringOption;
+        james_signature_template: import("../../config/options.js").StringOption;
+        james_concurrency: import("../../config/options.js").NumberOption;
+        james_init_delay: import("../../config/options.js").NumberOption;
+        james_retry_attempts: import("../../config/options.js").NumberOption;
+        james_retry_delay: import("../../config/options.js").NumberOption;
+        james_mailing_list_branch: import("../../config/options.js").ArrayOption;
+        james_mailbox_type_attribute: import("../../config/options.js").StringOption;
+        james_sync_forwards: import("../../config/options.js").BooleanOption;
+        james_team_mailbox_any_domain: import("../../config/options.js").BooleanOption;
     };
     name: string;
     roles: Role[];

package/dist/src/plugins/twake/james.options.d.ts

@@ -1,20 +1,20 @@
 /**
  * James plugin options, see `docs/plugin-development/options.md`.
  */
-import type { Config } from '../../config/args';
-import { type OptionsOf } from '../../config/options';
+import type { Config } from '../../config/args.js';
+import { type OptionsOf } from '../../config/options.js';
 export declare const jamesOptions: {
-    james_webadmin_url: import("../../config/options").StringOption;
-    james_webadmin_token: import("../../config/options").StringOption;
-    james_signature_template: import("../../config/options").StringOption;
-    james_concurrency: import("../../config/options").NumberOption;
-    james_init_delay: import("../../config/options").NumberOption;
-    james_retry_attempts: import("../../config/options").NumberOption;
-    james_retry_delay: import("../../config/options").NumberOption;
-    james_mailing_list_branch: import("../../config/options").ArrayOption;
-    james_mailbox_type_attribute: import("../../config/options").StringOption;
-    james_sync_forwards: import("../../config/options").BooleanOption;
-    james_team_mailbox_any_domain: import("../../config/options").BooleanOption;
+    james_webadmin_url: import("../../config/options.js").StringOption;
+    james_webadmin_token: import("../../config/options.js").StringOption;
+    james_signature_template: import("../../config/options.js").StringOption;
+    james_concurrency: import("../../config/options.js").NumberOption;
+    james_init_delay: import("../../config/options.js").NumberOption;
+    james_retry_attempts: import("../../config/options.js").NumberOption;
+    james_retry_delay: import("../../config/options.js").NumberOption;
+    james_mailing_list_branch: import("../../config/options.js").ArrayOption;
+    james_mailbox_type_attribute: import("../../config/options.js").StringOption;
+    james_sync_forwards: import("../../config/options.js").BooleanOption;
+    james_team_mailbox_any_domain: import("../../config/options.js").BooleanOption;
 };
 export type JamesOptions = OptionsOf<typeof jamesOptions>;
 /** The checked values for a caller that holds a Config instead of the plugin */

package/dist/src/plugins/twake/lifecycleAttributes.d.ts

@@ -5,8 +5,8 @@
  * deletion), read from the `--twake-lifecycle-*` options: the ones
  * `core/twake/lifecycleEvents` reads, and `core/twake/tombstone` writes.
  */
-import type { Config } from '../../bin';
-import type { AttributesList, AttributeValue } from '../../lib/ldapActions';
+import type { Config } from '../../bin/index.js';
+import type { AttributesList, AttributeValue } from '../../lib/ldapActions.js';
 export type DeletedAtFormat = 'iso8601' | 'generalizedTime';
 export interface LifecycleAttributes {
     role: string;

package/dist/src/plugins/twake/lifecycleEvents.d.ts

@@ -1,6 +1,6 @@
-import DmPlugin, { type Role } from '../../abstract/plugin';
-import type { DM } from '../../bin';
-import type { Hooks } from '../../hooks';
+import DmPlugin, { type Role } from '../../abstract/plugin.js';
+import type { DM } from '../../bin/index.js';
+import type { Hooks } from '../../hooks.js';
 export declare const LIFECYCLE_EVENTS: readonly ["created", "roleChanged", "disabled", "enabled", "updated", "memberAdded", "memberRemoved", "deleted"];
 export type LifecycleEvent = (typeof LIFECYCLE_EVENTS)[number];
 declare const MEMBER_LISTS: readonly ["$members", "$added", "$removed"];
@@ -24,16 +24,16 @@ interface Rule {
 export declare function parseRules(source: string): Rule[];
 export default class TwakeLifecycleEvents extends DmPlugin {
     static optionDefinitions: {
-        twake_lifecycle_role_attribute: import("../../config/options").StringOption;
-        twake_lifecycle_lock_attribute: import("../../config/options").StringOption;
-        twake_lifecycle_lock_value: import("../../config/options").StringOption;
-        twake_lifecycle_deleted_attribute: import("../../config/options").StringOption;
-        twake_lifecycle_deleted_value: import("../../config/options").StringOption;
-        twake_lifecycle_deleted_at_attribute: import("../../config/options").StringOption;
-        twake_lifecycle_deleted_at_format: import("../../config/options").StringOption;
-        twake_lifecycle_reason_attribute: import("../../config/options").StringOption;
-        twake_lifecycle_rules: import("../../config/options").StringOption;
-        twake_lifecycle_member_attribute: import("../../config/options").StringOption;
+        twake_lifecycle_role_attribute: import("../../config/options.js").StringOption;
+        twake_lifecycle_lock_attribute: import("../../config/options.js").StringOption;
+        twake_lifecycle_lock_value: import("../../config/options.js").StringOption;
+        twake_lifecycle_deleted_attribute: import("../../config/options.js").StringOption;
+        twake_lifecycle_deleted_value: import("../../config/options.js").StringOption;
+        twake_lifecycle_deleted_at_attribute: import("../../config/options.js").StringOption;
+        twake_lifecycle_deleted_at_format: import("../../config/options.js").StringOption;
+        twake_lifecycle_reason_attribute: import("../../config/options.js").StringOption;
+        twake_lifecycle_rules: import("../../config/options.js").StringOption;
+        twake_lifecycle_member_attribute: import("../../config/options.js").StringOption;
     };
     name: string;
     roles: Role[];

package/dist/src/plugins/twake/migrationProxy.d.ts

@@ -1,9 +1,9 @@
 import type { Express } from 'express';
-import TwakePlugin from '../../abstract/twakePlugin';
-import { type Role } from '../../abstract/plugin';
-import type { DM } from '../../bin';
-import type { Hooks } from '../../hooks';
-import type { HealthStatus } from '../../lib/health';
+import TwakePlugin from '../../abstract/twakePlugin.js';
+import { type Role } from '../../abstract/plugin.js';
+import type { DM } from '../../bin/index.js';
+import type { Hooks } from '../../hooks.js';
+import type { HealthStatus } from '../../lib/health.js';
 /**
  * @openapi
  * components:
@@ -21,12 +21,12 @@ export declare const MailMigrationParams: import("@sinclair/typebox").TObject<{
 }>;
 export default class MigrationProxy extends TwakePlugin {
     static optionDefinitions: {
-        migration_proxy_url: import("../../config/options").StringOption;
-        migration_proxy_token: import("../../config/options").StringOption;
-        migration_proxy_branch: import("../../config/options").ArrayOption;
-        migration_proxy_concurrency: import("../../config/options").NumberOption;
-        migration_proxy_retry_attempts: import("../../config/options").NumberOption;
-        migration_proxy_retry_delay: import("../../config/options").NumberOption;
+        migration_proxy_url: import("../../config/options.js").StringOption;
+        migration_proxy_token: import("../../config/options.js").StringOption;
+        migration_proxy_branch: import("../../config/options.js").ArrayOption;
+        migration_proxy_concurrency: import("../../config/options.js").NumberOption;
+        migration_proxy_retry_attempts: import("../../config/options.js").NumberOption;
+        migration_proxy_retry_delay: import("../../config/options.js").NumberOption;
     };
     name: string;
     roles: Role[];

package/dist/src/plugins/twake/migrationProxy.options.d.ts

@@ -1,15 +1,15 @@
 /**
  * Twake Mail migration proxy options, see `docs/plugin-development/options.md`.
  */
-import type { Config } from '../../config/args';
-import { type OptionsOf } from '../../config/options';
+import type { Config } from '../../config/args.js';
+import { type OptionsOf } from '../../config/options.js';
 export declare const migrationProxyOptions: {
-    migration_proxy_url: import("../../config/options").StringOption;
-    migration_proxy_token: import("../../config/options").StringOption;
-    migration_proxy_branch: import("../../config/options").ArrayOption;
-    migration_proxy_concurrency: import("../../config/options").NumberOption;
-    migration_proxy_retry_attempts: import("../../config/options").NumberOption;
-    migration_proxy_retry_delay: import("../../config/options").NumberOption;
+    migration_proxy_url: import("../../config/options.js").StringOption;
+    migration_proxy_token: import("../../config/options.js").StringOption;
+    migration_proxy_branch: import("../../config/options.js").ArrayOption;
+    migration_proxy_concurrency: import("../../config/options.js").NumberOption;
+    migration_proxy_retry_attempts: import("../../config/options.js").NumberOption;
+    migration_proxy_retry_delay: import("../../config/options.js").NumberOption;
 };
 export type MigrationProxyOptions = OptionsOf<typeof migrationProxyOptions>;
 /** The checked values for a caller that holds a Config instead of the plugin */

package/dist/src/plugins/twake/spaces.d.ts

@@ -1,7 +1,7 @@
 import type { Express } from 'express';
-import DmPlugin, { type Role } from '../../abstract/plugin';
-import type { DM } from '../../bin';
-import type { Hooks } from '../../hooks';
+import DmPlugin, { type Role } from '../../abstract/plugin.js';
+import type { DM } from '../../bin/index.js';
+import type { Hooks } from '../../hooks.js';
 /** From the weakest to the strongest. */
 export declare const SPACE_ROLES: readonly ["viewer", "editor", "admin"];
 export type SpaceRole = (typeof SPACE_ROLES)[number];
@@ -37,15 +37,15 @@ export declare const SpaceGroupParams: import("@sinclair/typebox").TObject<{
 }>;
 export default class TwakeSpaces extends DmPlugin {
     static optionDefinitions: {
-        twake_space_base: import("../../config/options").StringOption;
-        twake_space_class: import("../../config/options").ArrayOption;
-        twake_space_display_name_attribute: import("../../config/options").StringOption;
-        twake_space_admin_attribute: import("../../config/options").StringOption;
-        twake_space_editor_attribute: import("../../config/options").StringOption;
-        twake_space_viewer_attribute: import("../../config/options").StringOption;
-        twake_space_user_role_attribute: import("../../config/options").StringOption;
-        twake_space_exchange: import("../../config/options").StringOption;
-        twake_space_sync_queue: import("../../config/options").StringOption;
+        twake_space_base: import("../../config/options.js").StringOption;
+        twake_space_class: import("../../config/options.js").ArrayOption;
+        twake_space_display_name_attribute: import("../../config/options.js").StringOption;
+        twake_space_admin_attribute: import("../../config/options.js").StringOption;
+        twake_space_editor_attribute: import("../../config/options.js").StringOption;
+        twake_space_viewer_attribute: import("../../config/options.js").StringOption;
+        twake_space_user_role_attribute: import("../../config/options.js").StringOption;
+        twake_space_exchange: import("../../config/options.js").StringOption;
+        twake_space_sync_queue: import("../../config/options.js").StringOption;
     };
     name: string;
     roles: Role[];

package/dist/src/plugins/twake/tombstone.d.ts

@@ -1,7 +1,7 @@
 import type { Express, Request } from 'express';
-import DmPlugin, { type Role } from '../../abstract/plugin';
-import type { DM } from '../../bin';
-import type { Hooks } from '../../hooks';
+import DmPlugin, { type Role } from '../../abstract/plugin.js';
+import type { DM } from '../../bin/index.js';
+import type { Hooks } from '../../hooks.js';
 export declare const EraseTombstoneBody: import("@sinclair/typebox").TObject<{
     dn: import("@sinclair/typebox").TString;
     force: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
@@ -11,13 +11,13 @@ export declare const EraseTombstoneResponse: import("@sinclair/typebox").TObject
 }>;
 export default class TwakeTombstone extends DmPlugin {
     static optionDefinitions: {
-        twake_tombstone_dn: import("../../config/options").ArrayOption;
-        twake_tombstone_default_reason: import("../../config/options").StringOption;
-        twake_tombstone_reason_header: import("../../config/options").StringOption;
-        twake_tombstone_reasons: import("../../config/options").ArrayOption;
-        twake_tombstone_clear_attributes: import("../../config/options").ArrayOption;
-        twake_tombstone_erase_min_age: import("../../config/options").NumberOption;
-        twake_tombstone_group_bases: import("../../config/options").ArrayOption;
+        twake_tombstone_dn: import("../../config/options.js").ArrayOption;
+        twake_tombstone_default_reason: import("../../config/options.js").StringOption;
+        twake_tombstone_reason_header: import("../../config/options.js").StringOption;
+        twake_tombstone_reasons: import("../../config/options.js").ArrayOption;
+        twake_tombstone_clear_attributes: import("../../config/options.js").ArrayOption;
+        twake_tombstone_erase_min_age: import("../../config/options.js").NumberOption;
+        twake_tombstone_group_bases: import("../../config/options.js").ArrayOption;
     };
     name: string;
     roles: Role[];

package/dist/src/plugins/twake/twakeGroups.options.d.ts

@@ -1,19 +1,19 @@
 /**
  * Twake groups options, see `docs/plugin-development/options.md`.
  */
-import type { Config } from '../../config/args';
-import { type OptionsOf } from '../../config/options';
+import type { Config } from '../../config/args.js';
+import { type OptionsOf } from '../../config/options.js';
 export declare const twakeGroupsOptions: {
-    twake_group_base: import("../../config/options").StringOption;
-    twake_group_user_base: import("../../config/options").StringOption;
-    twake_group_organization_dn: import("../../config/options").StringOption;
-    twake_group_organization_status_attribute: import("../../config/options").StringOption;
-    twake_group_organization_deleted_value: import("../../config/options").StringOption;
-    twake_group_display_name_attribute: import("../../config/options").StringOption;
-    twake_group_color_attribute: import("../../config/options").StringOption;
-    twake_group_created_at_attribute: import("../../config/options").StringOption;
-    twake_group_max_page_limit: import("../../config/options").NumberOption;
-    twake_group_member_fields: import("../../config/options").JsonOption<{}>;
+    twake_group_base: import("../../config/options.js").StringOption;
+    twake_group_user_base: import("../../config/options.js").StringOption;
+    twake_group_organization_dn: import("../../config/options.js").StringOption;
+    twake_group_organization_status_attribute: import("../../config/options.js").StringOption;
+    twake_group_organization_deleted_value: import("../../config/options.js").StringOption;
+    twake_group_display_name_attribute: import("../../config/options.js").StringOption;
+    twake_group_color_attribute: import("../../config/options.js").StringOption;
+    twake_group_created_at_attribute: import("../../config/options.js").StringOption;
+    twake_group_max_page_limit: import("../../config/options.js").NumberOption;
+    twake_group_member_fields: import("../../config/options.js").JsonOption<{}>;
 };
 export type TwakeGroupsOptions = OptionsOf<typeof twakeGroupsOptions>;
 /** The checked values for a caller that holds a Config instead of the plugin */

package/dist/src/plugins/twake/twakeInstances.options.d.ts

@@ -1,42 +1,42 @@
 /**
  * Twake instances options, see `docs/plugin-development/options.md`.
  */
-import type { Config } from '../../config/args';
-import { type OptionsOf } from '../../config/options';
+import type { Config } from '../../config/args.js';
+import { type OptionsOf } from '../../config/options.js';
 export declare const twakeInstancesOptions: {
-    twake_instance_dn: import("../../config/options").ArrayOption;
-    twake_instance_skip_attribute: import("../../config/options").StringOption;
-    twake_instance_skip_value: import("../../config/options").StringOption;
-    twake_instance_provider: import("../../config/options").StringOption;
-    twake_instance_id: import("../../config/options").StringOption;
-    twake_instance_fqdn_attribute: import("../../config/options").StringOption;
-    twake_instance_sent_attribute: import("../../config/options").StringOption;
-    twake_instance_locale: import("../../config/options").StringOption;
-    twake_instance_timeout: import("../../config/options").NumberOption;
-    twake_instance_cloudery_url: import("../../config/options").StringOption;
-    twake_instance_cloudery_token: import("../../config/options").StringOption;
-    twake_instance_cloudery_offer: import("../../config/options").StringOption;
-    twake_instance_cloudery_domain: import("../../config/options").StringOption;
-    twake_instance_cloudery_organization_offer: import("../../config/options").StringOption;
-    twake_instance_cozy_url: import("../../config/options").StringOption;
-    twake_instance_cozy_user: import("../../config/options").StringOption;
-    twake_instance_cozy_passphrase: import("../../config/options").StringOption;
-    twake_instance_cozy_domain: import("../../config/options").StringOption;
-    twake_instance_cozy_context: import("../../config/options").StringOption;
-    twake_instance_cozy_apps: import("../../config/options").StringOption;
-    twake_instance_cozy_org_id: import("../../config/options").StringOption;
-    twake_instance_cozy_org_domain: import("../../config/options").StringOption;
-    twake_instance_auth_exchange: import("../../config/options").StringOption;
-    twake_instance_b2b_exchange: import("../../config/options").StringOption;
-    twake_instance_user_created_key: import("../../config/options").StringOption;
-    twake_instance_organization_created_key: import("../../config/options").StringOption;
-    twake_instance_workplace_created_key: import("../../config/options").StringOption;
-    twake_instance_queue: import("../../config/options").StringOption;
-    twake_instance_organization_base: import("../../config/options").StringOption;
-    twake_instance_organization_id_attribute: import("../../config/options").StringOption;
-    twake_instance_organization_domain_attribute: import("../../config/options").StringOption;
-    twake_instance_organization_name_attribute: import("../../config/options").StringOption;
-    twake_instance_organization_fqdn_attribute: import("../../config/options").StringOption;
+    twake_instance_dn: import("../../config/options.js").ArrayOption;
+    twake_instance_skip_attribute: import("../../config/options.js").StringOption;
+    twake_instance_skip_value: import("../../config/options.js").StringOption;
+    twake_instance_provider: import("../../config/options.js").StringOption;
+    twake_instance_id: import("../../config/options.js").StringOption;
+    twake_instance_fqdn_attribute: import("../../config/options.js").StringOption;
+    twake_instance_sent_attribute: import("../../config/options.js").StringOption;
+    twake_instance_locale: import("../../config/options.js").StringOption;
+    twake_instance_timeout: import("../../config/options.js").NumberOption;
+    twake_instance_cloudery_url: import("../../config/options.js").StringOption;
+    twake_instance_cloudery_token: import("../../config/options.js").StringOption;
+    twake_instance_cloudery_offer: import("../../config/options.js").StringOption;
+    twake_instance_cloudery_domain: import("../../config/options.js").StringOption;
+    twake_instance_cloudery_organization_offer: import("../../config/options.js").StringOption;
+    twake_instance_cozy_url: import("../../config/options.js").StringOption;
+    twake_instance_cozy_user: import("../../config/options.js").StringOption;
+    twake_instance_cozy_passphrase: import("../../config/options.js").StringOption;
+    twake_instance_cozy_domain: import("../../config/options.js").StringOption;
+    twake_instance_cozy_context: import("../../config/options.js").StringOption;
+    twake_instance_cozy_apps: import("../../config/options.js").StringOption;
+    twake_instance_cozy_org_id: import("../../config/options.js").StringOption;
+    twake_instance_cozy_org_domain: import("../../config/options.js").StringOption;
+    twake_instance_auth_exchange: import("../../config/options.js").StringOption;
+    twake_instance_b2b_exchange: import("../../config/options.js").StringOption;
+    twake_instance_user_created_key: import("../../config/options.js").StringOption;
+    twake_instance_organization_created_key: import("../../config/options.js").StringOption;
+    twake_instance_workplace_created_key: import("../../config/options.js").StringOption;
+    twake_instance_queue: import("../../config/options.js").StringOption;
+    twake_instance_organization_base: import("../../config/options.js").StringOption;
+    twake_instance_organization_id_attribute: import("../../config/options.js").StringOption;
+    twake_instance_organization_domain_attribute: import("../../config/options.js").StringOption;
+    twake_instance_organization_name_attribute: import("../../config/options.js").StringOption;
+    twake_instance_organization_fqdn_attribute: import("../../config/options.js").StringOption;
 };
 export type TwakeInstancesOptions = OptionsOf<typeof twakeInstancesOptions>;
 /** The checked values for a caller that holds a Config instead of the plugin */

package/dist/src/plugins/twake/twakeLifecycle.options.d.ts

@@ -2,19 +2,19 @@
  * Account lifecycle options, shared by the Twake lifecycle plugins. See
  * `docs/plugin-development/options.md`.
  */
-import type { Config } from '../../config/args';
-import { type OptionsOf } from '../../config/options';
+import type { Config } from '../../config/args.js';
+import { type OptionsOf } from '../../config/options.js';
 export declare const twakeLifecycleOptions: {
-    twake_lifecycle_role_attribute: import("../../config/options").StringOption;
-    twake_lifecycle_lock_attribute: import("../../config/options").StringOption;
-    twake_lifecycle_lock_value: import("../../config/options").StringOption;
-    twake_lifecycle_deleted_attribute: import("../../config/options").StringOption;
-    twake_lifecycle_deleted_value: import("../../config/options").StringOption;
-    twake_lifecycle_deleted_at_attribute: import("../../config/options").StringOption;
-    twake_lifecycle_deleted_at_format: import("../../config/options").StringOption;
-    twake_lifecycle_reason_attribute: import("../../config/options").StringOption;
-    twake_lifecycle_rules: import("../../config/options").StringOption;
-    twake_lifecycle_member_attribute: import("../../config/options").StringOption;
+    twake_lifecycle_role_attribute: import("../../config/options.js").StringOption;
+    twake_lifecycle_lock_attribute: import("../../config/options.js").StringOption;
+    twake_lifecycle_lock_value: import("../../config/options.js").StringOption;
+    twake_lifecycle_deleted_attribute: import("../../config/options.js").StringOption;
+    twake_lifecycle_deleted_value: import("../../config/options.js").StringOption;
+    twake_lifecycle_deleted_at_attribute: import("../../config/options.js").StringOption;
+    twake_lifecycle_deleted_at_format: import("../../config/options.js").StringOption;
+    twake_lifecycle_reason_attribute: import("../../config/options.js").StringOption;
+    twake_lifecycle_rules: import("../../config/options.js").StringOption;
+    twake_lifecycle_member_attribute: import("../../config/options.js").StringOption;
 };
 export type TwakeLifecycleOptions = OptionsOf<typeof twakeLifecycleOptions>;
 /** The checked values for a caller that holds a Config instead of the plugin */

package/dist/src/plugins/twake/twakeSpaces.options.d.ts

@@ -1,18 +1,18 @@
 /**
  * Twake spaces options, see `docs/plugin-development/options.md`.
  */
-import type { Config } from '../../config/args';
-import { type OptionsOf } from '../../config/options';
+import type { Config } from '../../config/args.js';
+import { type OptionsOf } from '../../config/options.js';
 export declare const twakeSpacesOptions: {
-    twake_space_base: import("../../config/options").StringOption;
-    twake_space_class: import("../../config/options").ArrayOption;
-    twake_space_display_name_attribute: import("../../config/options").StringOption;
-    twake_space_admin_attribute: import("../../config/options").StringOption;
-    twake_space_editor_attribute: import("../../config/options").StringOption;
-    twake_space_viewer_attribute: import("../../config/options").StringOption;
-    twake_space_user_role_attribute: import("../../config/options").StringOption;
-    twake_space_exchange: import("../../config/options").StringOption;
-    twake_space_sync_queue: import("../../config/options").StringOption;
+    twake_space_base: import("../../config/options.js").StringOption;
+    twake_space_class: import("../../config/options.js").ArrayOption;
+    twake_space_display_name_attribute: import("../../config/options.js").StringOption;
+    twake_space_admin_attribute: import("../../config/options.js").StringOption;
+    twake_space_editor_attribute: import("../../config/options.js").StringOption;
+    twake_space_viewer_attribute: import("../../config/options.js").StringOption;
+    twake_space_user_role_attribute: import("../../config/options.js").StringOption;
+    twake_space_exchange: import("../../config/options.js").StringOption;
+    twake_space_sync_queue: import("../../config/options.js").StringOption;
 };
 export type TwakeSpacesOptions = OptionsOf<typeof twakeSpacesOptions>;
 /** The checked values for a caller that holds a Config instead of the plugin */

package/dist/src/plugins/twake/twakeTombstone.options.d.ts

@@ -1,16 +1,16 @@
 /**
  * Twake tombstone options, see `docs/plugin-development/options.md`.
  */
-import type { Config } from '../../config/args';
-import { type OptionsOf } from '../../config/options';
+import type { Config } from '../../config/args.js';
+import { type OptionsOf } from '../../config/options.js';
 export declare const twakeTombstoneOptions: {
-    twake_tombstone_dn: import("../../config/options").ArrayOption;
-    twake_tombstone_default_reason: import("../../config/options").StringOption;
-    twake_tombstone_reason_header: import("../../config/options").StringOption;
-    twake_tombstone_reasons: import("../../config/options").ArrayOption;
-    twake_tombstone_clear_attributes: import("../../config/options").ArrayOption;
-    twake_tombstone_erase_min_age: import("../../config/options").NumberOption;
-    twake_tombstone_group_bases: import("../../config/options").ArrayOption;
+    twake_tombstone_dn: import("../../config/options.js").ArrayOption;
+    twake_tombstone_default_reason: import("../../config/options.js").StringOption;
+    twake_tombstone_reason_header: import("../../config/options.js").StringOption;
+    twake_tombstone_reasons: import("../../config/options.js").ArrayOption;
+    twake_tombstone_clear_attributes: import("../../config/options.js").ArrayOption;
+    twake_tombstone_erase_min_age: import("../../config/options.js").NumberOption;
+    twake_tombstone_group_bases: import("../../config/options.js").ArrayOption;
 };
 export type TwakeTombstoneOptions = OptionsOf<typeof twakeTombstoneOptions>;
 /** The checked values for a caller that holds a Config instead of the plugin */

package/dist/src/plugins/weblogs.d.ts

@@ -1,5 +1,5 @@
 import type { Express, Request, Response } from 'express';
-import DmPlugin, { type Role } from '../abstract/plugin';
+import DmPlugin, { type Role } from '../abstract/plugin.js';
 declare global {
     namespace Express {
         interface Request {

package/docs/client-development/schemas/README.md

@@ -772,7 +772,12 @@ Attribute values must have the shape of their declared type, see
 
 ### Fixed Attributes
 
-Attributes with `"fixed": true` cannot be modified after creation.
+Attributes with `"fixed": true` cannot be modified after creation. A creation
+that sends one **with a default** under an option (`l;lang-fr`, or an alias
+such as `localityName;lang-fr`) is refused with `400`: the default is written
+under the attribute's own name, and the option would add a second value beside
+it. A fixed attribute without a default is set at creation and keeps its
+options.
 
 ```json
 {

package/docs/development/contracts.md

@@ -45,6 +45,28 @@ The snapshot records what the parser reads. A narrowed `choices` list, a
 raised `min` or a lowered `max` is checked when a plugin reads its options,
 not by the snapshot, and is reviewed by hand, as is a custom error `code`.
 
+## Resolution guard
+
+The published package is `"type": "module"`, so a plugin compiled with
+`moduleResolution: nodenext` resolves the declarations as Node resolves
+JavaScript: every relative specifier needs its `.js` extension. The build
+keeps them in the sources, and the declarations inherit them. TypeScript says
+nothing about a specifier it cannot resolve in `node_modules`: it reports the
+imported type as `any`, so a plugin loses type checking on the plugin API
+without a warning.
+
+`npm run lint` refuses an extensionless relative specifier under `src/` (the
+`import-x/extensions` rule), so the mistake shows up locally. `npm run
+check:declarations` then reads the built declarations for one, and type-checks
+a small `nodenext` consumer against the package entries installed with only the
+runtime dependencies: a type the declarations take from a devDependency is
+missing there too. The consumer checks the library declarations themselves, so
+a bare import they make must resolve even when the consumer names no type from
+it. The build drops the browser sources' side-effect CSS imports from the
+emitted declarations: they say nothing about the JavaScript API, and the
+consumer has no CSS module for them. The check needs a build: run `npm run
+build` first. The `test` workflow runs it after the build.
+
 ## The pull request gate
 
 The `contracts` job of `.github/workflows/contracts.yml` generates the

package/docs/presentations/en.md

@@ -432,7 +432,7 @@ docker run -p 8081:8081 ldap-rest
 ## Create a Custom Plugin
 
 ```typescript
-import DmPlugin from 'ldap-rest/plugin-abstract';
+import DmPlugin from 'ldap-rest/plugin';
 import { Hooks } from 'ldap-rest/hooks';
 
 export default class CustomPlugin extends DmPlugin {

package/docs/presentations/fr.md

@@ -432,7 +432,7 @@ docker run -p 8081:8081 ldap-rest
 ## Créer un plugin personnalisé
 
 ```typescript
-import DmPlugin from 'ldap-rest/plugin-abstract';
+import DmPlugin from 'ldap-rest/plugin';
 import { Hooks } from 'ldap-rest/hooks';
 
 export default class CustomPlugin extends DmPlugin {

package/docs/usage/plugins/auth/authz-dynamic.md

@@ -122,7 +122,9 @@ description: {
   target DNs are compared RDN by RDN, so case, spacing, escapes, `;`
   separators and attribute-type spellings (`ou`, `2.5.4.11`, `OID.2.5.4.11`)
   do not matter; an escaped comma is part of a value, never a separator.
-- Absent flags default to `false`.
+- Only the JSON boolean `true` grants a permission. An absent flag, or one
+  written as anything else (a string such as `"false"` or `"true"`, a
+  number), is `false`; a non-boolean flag is logged as a warning.
 - `tenant` is optional; if omitted, `req.user` falls back to the value of the
   configured `tenantAttribute` (default `cn`).
 

package/docs/usage/plugins/auth/trusted-proxy.md

@@ -39,7 +39,17 @@ DM_TRUSTED_PROXY_AUTH_HEADER="Auth-User"
 - **IPv4 addresses:** `192.168.1.1`
 - **IPv6 addresses:** `::1`, `fe80::1`
 - **CIDR ranges:** `10.0.0.0/8`, `192.168.0.0/16`, `2001:db8::/32`
-- **IPv4-mapped IPv6:** Automatically handled (e.g., `::ffff:127.0.0.1` matches `127.0.0.1`)
+- **IPv4-mapped IPv6:** accepted in any spelling, e.g. `::ffff:127.0.0.1` or
+  `::ffff:7f00:1` matches `127.0.0.1`. A network written in mapped form is
+  checked as the IPv4 network it is: `::ffff:10.0.0.0/104` is `10.0.0.0/8`.
+- **Zone index:** a peer address carrying an interface, such as
+  `fe80::1%eth0`, is matched on the address alone. A trusted entry carrying
+  one is refused: the same link-local address names another host on another
+  link.
+
+An entry that is neither an address nor an `address/prefix` network (`:::`,
+`10.0.0.0/2.`, `10.0.0.0/24x`) makes the server refuse to start: it would
+otherwise trust a network the administrator never wrote.
 
 ## Auth-User Header