chore: 🤖 Update desktop client changelog (#2183 )

Co-authored-by: Cameron Perera <cameron.perera@hashicorp.com> Co-authored-by: Lisbet Alvarez <107949262+lisbet-alvarez@users.noreply.github.com>
refactor: 💡 remove route-action usage from credential-stores (#2172 )
2024-03-19 12:23:50 -07:00 · 2024-03-18 16:34:37 -07:00 · 2024-03-18 15:53:39 -04:00 · 2024-03-18 10:34:54 -07:00 · 2024-03-15 14:48:32 -07:00 · 2024-03-15 14:24:20 -07:00
2291 changed files with 96973 additions and 32949 deletions
@@ -0,0 +1,19 @@
 schema_version = 1
 project {
  license        = "MPL-2.0"
  copyright_year = 2020
  # (OPTIONAL) A list of globs that should not have copyright/license headers.
  # Supports doublestar glob patterns for more flexibility in defining which
  # files or folders should be ignored
  header_ignore = [
    ".github/**",
    ".husky/**",
    "**/node_modules/**",
    "**/dist/**",
    "**/coverage/**",
    "ui/desktop/electron-app/out/**",
    "ui/desktop/electron-app/ember-dist/**",
  ]
 }
@@ -0,0 +1,2 @@
 # Anyone attached to this rule will always been assigned to a pull request
 * @hashicorp/boundary-ui
@@ -1,3 +1,6 @@
 # Copyright (c) HashiCorp, Inc.
 # SPDX-License-Identifier: MPL-2.0
 contact_links:
  - name: Ask a question
    url: https://discuss.hashicorp.com/c/boundary
@@ -1,20 +1,30 @@
 # Copyright (c) HashiCorp, Inc.
 # SPDX-License-Identifier: MPL-2.0
 addons:
-  - addons/**/*
+  - changed-files:
    - any-glob-to-any-file: "addons/**/*"
 api-addon:
-  - addons/api/**/*
+  - changed-files:
    - any-glob-to-any-file: "addons/api/**/*"
 auth-addon:
-  - addons/auth/**/*
+  - changed-files:
    - any-glob-to-any-file: "addons/auth/**/*"
 styles-addon:
-  - addons/rose/**/*
+  - changed-files:
    - any-glob-to-any-file: "addons/rose/**/*"
 ui:
-  - ui/**/*
+  - changed-files:
    - any-glob-to-any-file: "ui/**/*"
 admin:
-  - ui/admin/**/*
+  - changed-files:
    - any-glob-to-any-file: "ui/admin/**/*"
 desktop:
-  - ui/desktop/**/*
+  - changed-files:
    - any-glob-to-any-file: "ui/desktop/**/*"
@@ -0,0 +1,29 @@
 :tickets: [Jira ticket](https://hashicorp.atlassian.net/browse/JIRA_TICKET_NUMBER)
 ## Description
 <!-- Add a brief description of changes here -->
 ## Screenshots (if appropriate):
 ## How to Test
 <!-- Add steps to test this change. Include any other necessary relevant links -->
 <!--
 Replace PATH_TO_FEATURE with Vercel link
 -->
 :technologist: [Admin preview](PATH_TO_FEATURE)
 :desktop_computer: [Desktop preview](PATH_TO_FEATURE)
 ## Checklist:
 <!-- strikethrough the checklist item that is not relevant to your change -->
 - [ ] I have added before and after screenshots for UI changes
 - [ ] I have added JSON response output for API changes
 - [ ] I have added steps to reproduce and test for bug fixes in the description
 - [ ] I have commented on my code, particularly in hard-to-understand areas
 - [ ] My changes generate no new warnings
 - [ ] I have added tests that prove my fix is effective or that my feature works
@@ -0,0 +1,94 @@
 #!/usr/bin/env bash
 # Copyright (c) HashiCorp, Inc.
 # SPDX-License-Identifier: MPL-2.0
 set -euo pipefail
 # Configure Git
 git config --global user.email "hc-github-team-secure-boundary@hashicorp.com"
 git config --global user.name "github-team-secure-boundary"
 # Fetch branches from ENT
 git fetch origin
 BRANCH=${1}
 echo "BRANCH to merge is $BRANCH"
 git checkout "${BRANCH}"
 # Checkout OSS repo
 git remote add oss-remote https://github.com/hashicorp/boundary-ui.git
 git fetch oss-remote
 # Merge oss/${BRANCH} into ent/${BRANCH}
 git_merge_branch="${2}"
 git checkout -b "${git_merge_branch}"
 latest_oss_commit="$(git rev-parse --short oss-remote/${BRANCH})"
 echo "Trying to merge the latest oss commit - ${latest_oss_commit} from oss/${BRANCH} into ent/${BRANCH}"
 if ! errors=$(git merge -m "Merge Boundary UI OSS branch '${BRANCH}' at commit ${latest_oss_commit}" "${latest_oss_commit}"); then
  # Here we can try to auto resolve conflicts
  # This logic will vary from project to project. The below is just an example.
  # We'll try to resolve package.json and yarn.lock conflicts by taking the OSS changes
  conflicts=$(git diff --name-only --diff-filter=U)
  printf "Found conflicts:\n${conflicts}\n"
  # Resolve package.json conflicts by taking oss
  if echo "$conflicts" | grep -q package.json; then
    echo "Checking out oss package.json..."
    git checkout --theirs package.json
    git add package.json
  fi
  # Resolve yarn.lock conflicts by taking oss
  if echo "$conflicts" | grep -q yarn.lock; then
    echo "Checking out oss yarn.lock..."
    git checkout --theirs yarn.lock
    git add yarn.lock
  fi
  # If we can commit all the changes without conflict, we have resolved everything automatically
  if ! git commit --no-edit; then
    echo "Auto Merge failed, creating a draft PR"
    git merge --abort
    git clean -xfd
    git fetch oss-remote
    git checkout "${OSS_BRANCH}"
    git checkout -b "${OSS_LOCAL_BRANCH}"
    git push -f --set-upstream origin "${OSS_LOCAL_BRANCH}"
    gh pr create \
      --draft \
      --fill-first \
      --label "oss-merge" \
      -B "${BASE_BRANCH}" \
      -H "${OSS_LOCAL_BRANCH}" \
      -a "${ACTOR}" \
      -t "[${BASE_BRANCH/oss\/release\//}] OSS to ENT merge of (${SHA::7})" \
      -b "${BASE_BRANCH/oss\//} upstream merge of (${SHA::7})
      Merge failed, Please fix the conflicts using github UI or using the following commands:
      \`\`\`bash
      git checkout ${BASE_BRANCH}
      git pull
      git checkout ${OSS_LOCAL_BRANCH}
      git merge ${BASE_BRANCH}
      # fix conflicts and commit
      git push origin ${OSS_LOCAL_BRANCH}
      \`\`\`"
    exit 0
  fi
 fi
 # Check that there are actually changes to merge by comparing the
 # merge branch to the current checked out branch
 if (git diff ${BRANCH} --exit-code > /dev/null); then
  echo "there are no changes to merge"
  exit 0
 fi
 git push origin "${git_merge_branch}"
 gh pr create \
  --fill-first \
  --label "oss-merge" \
  -B "${BASE_BRANCH}" \
  -H "${MERGE_BRANCH}" \
  -a ${ACTOR} \
  -t "[${BASE_BRANCH/oss\/release\//}] OSS to ENT merge of (${SHA::7})" \
  -b "${BASE_BRANCH/oss\//} upstream merge of (${SHA::7})"
 gh pr merge --auto --merge
 # This PR will be need to be approved manually
@@ -0,0 +1,99 @@
 name: Build Admin UI
 on:
  push:
    branches:
      - main
      - "release/**"
  workflow_dispatch:
 jobs:
  dependencies:
    name: Install dependencies
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
      - uses: actions/cache@13aacd865c20de90d75de3b17ebe84f7a17d57d2 # v4.0.0
        id: node-modules-cache
        with:
          path: "**/node_modules"
          key: node-modules-${{ hashFiles('**/yarn.lock') }}
          restore-keys: |
            node-modules-
      - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
        with:
          node-version: 16
      - run: yarn install
  build-admin-ui-oss:
    name: Build Admin UI OSS
    needs: [dependencies]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
      - uses: actions/cache@13aacd865c20de90d75de3b17ebe84f7a17d57d2 # v4.0.0
        id: node-modules-cache
        with:
          path: "**/node_modules"
          key: node-modules-${{ hashFiles('**/yarn.lock') }}
          restore-keys: |
            node-modules-
      - name: Build
        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
        with:
          node-version: 16
      - run: yarn run build:ui:admin:oss
      - name: Upload artifact admin-ui
        uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
        with:
          name: admin-ui
          path: ./ui/admin/dist/
      - name: Upload artifact OSS admin UI
        uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
        with:
          name: admin-ui-oss
          path: ./ui/admin/dist/
  build-admin-ui-enterprise:
    name: Build Admin UI Enterprise
    needs: [dependencies]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
      - uses: actions/cache@13aacd865c20de90d75de3b17ebe84f7a17d57d2 # v4.0.0
        id: node-modules-cache
        with:
          path: "**/node_modules"
          key: node-modules-${{ hashFiles('**/yarn.lock') }}
          restore-keys: |
            node-modules-
      - name: Build
        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
        with:
          node-version: 16
      - run: yarn run build:ui:admin:enterprise
      - name: Upload artifact enterprise admin UI
        uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
        with:
          name: admin-ui-ent
          path: ./ui/admin/dist/
  build-admin-ui-hcp:
    name: Build Admin UI HCP
    needs: [dependencies]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
      - uses: actions/cache@13aacd865c20de90d75de3b17ebe84f7a17d57d2 # v4.0.0
        id: node-modules-cache
        with:
          path: "**/node_modules"
          key: node-modules-${{ hashFiles('**/yarn.lock') }}
          restore-keys: |
            node-modules-
      - name: Build
        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
        with:
          node-version: 16
      - run: yarn run build:ui:admin:hcp
      - name: Upload artifact HCP admin UI
        uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
        with:
          name: admin-ui-hcp
          path: ./ui/admin/dist/
@@ -0,0 +1,34 @@
 name: "Trigger Build Artifacts for Testing"
 on:
  workflow_dispatch:
    inputs:
      branch:
        description: Please use tag-like format n.n.n-someword (1.111.11-beta)
        required: true
      product_version:
        required: true
        type: string
        description: The version number belonging to the oss binary to be used
      commit:
        required: true
        type: string
        description: The git SHA of the oss artifacts to be used
 jobs:
  trigger-gha-build-artifacts-for-testing:
    runs-on: ubuntu-latest
    steps:
      - name: Release description
        if: github.event_name == 'workflow_dispatch'
        run: |
          echo "Triggering Build Artifacts for Testing using BRANCH and TEST_TAG ${{ github.event.inputs.branch }}"
      - name: Trigger Build Artifacts for Testing in boundary-ui-releases
        run: |
          export GITHUB_TOKEN="${{ secrets.ELEVATED_GITHUB_TOKEN }}"
          gh workflow run build-artifacts-for-testing.yml \
          --repo hashicorp/boundary-ui-releases \
          --ref main \
          -f TAG="${{ inputs.branch }}" \
          -f PRODUCT_VERSION="${{ inputs.product_version }}" \
          -f COMMIT="${{ inputs.commit }}" \
@@ -7,7 +7,7 @@ name: "CodeQL"
 on:
  push:
-    branches: [main, release-v0.1.0]
+    branches: [main]
  pull_request:
    # The branches below must be a subset of the branches above
    branches: [main]
@@ -27,23 +27,14 @@ jobs:
        language: ['javascript']
        # Learn more...
        # https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection
-
+    
    steps:
    - name: Checkout repository
-      uses: actions/checkout@v2
+      uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
      with:
        # We must fetch at least the immediate parents so that if this is
        # a pull request then we can checkout the head.
        fetch-depth: 2
    # If this run was triggered by a pull request event, then checkout
    # the head of the pull request instead of the merge commit.
    - run: git checkout HEAD^2
      if: ${{ github.event_name == 'pull_request' }}
    # Initializes the CodeQL tools for scanning.
    - name: Initialize CodeQL
-      uses: github/codeql-action/init@v1
+      uses: github/codeql-action/init@592977e6ae857384aa79bb31e7a1d62d63449ec5 # codeql-bundle-v2.16.3
      with:
        languages: ${{ matrix.language }}
        # If you wish to specify custom queries, you can do so here or in a config file.
@@ -51,11 +42,6 @@ jobs:
        # Prefix the list here with "+" to use these queries and those in the config file.
        # queries: ./path/to/local/query, your-org/your-repo/queries@main
    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
    # If this step fails, then you should remove it and run the build manually (see below)
    - name: Autobuild
      uses: github/codeql-action/autobuild@v1
    # ℹ️ Command-line programs to run using the OS shell.
    # 📚 https://git.io/JvXDl
@@ -68,4 +54,4 @@ jobs:
    #   make release
    - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v1
+      uses: github/codeql-action/analyze@592977e6ae857384aa79bb31e7a1d62d63449ec5 # codeql-bundle-v2.16.3
@@ -19,18 +19,18 @@ jobs:
      id: boundary-team-role
      run: |
        TEAM=boundary
-        ROLE="$(hub api orgs/hashicorp/teams/${TEAM}/memberships/${{ github.actor }} | jq -r '.role | select(.!=null)')"
+        ROLE="$(gh api orgs/hashicorp/teams/${TEAM}/memberships/${{ github.actor }} | jq -r '.role | select(.!=null)')"
        if [[ -n ${ROLE} ]]; then
          echo "Actor ${{ github.actor }} is a ${TEAM} team member, skipping ticket creation"
        else
          echo "Actor ${{ github.actor }} is not a ${TEAM} team member"
        fi
-        echo "::set-output name=role::${ROLE}"
+        echo "role=${ROLE}" >> $GITHUB_OUTPUT
      env:
        GITHUB_TOKEN: ${{ secrets.JIRA_SYNC_GITHUB_TOKEN }}
    - name: Login
-      uses: atlassian/gajira-login@v2.0.0
+      uses: atlassian/gajira-login@45fd029b9f1d6d8926c6f04175aa80c0e42c9026 # v3.0.1
      env:
        JIRA_BASE_URL: ${{ secrets.JIRA_BASE_URL }}
        JIRA_USER_EMAIL: ${{ secrets.JIRA_USER_EMAIL }}
@@ -41,14 +41,14 @@ jobs:
      id: set-ticket-type
      run: |
        if [[ "${{ github.event_name }}" == "pull_request_target" ]]; then
-          echo "::set-output name=type::PR"
+          echo "type=PR" >> $GITHUB_OUTPUT
        else
-          echo "::set-output name=type::ISS"
+          echo "type=ISS" >> $GITHUB_OUTPUT
        fi
    - name: Create ticket
      if: github.event.action == 'opened' && !steps.boundary-team-role.outputs.role
-      uses: tomhjp/gh-action-jira-create@v0.1.0
+      uses: tomhjp/gh-action-jira-create@3ed1789cad3521292e591a7cfa703215ec1348bf # v0.2.1
      with:
        project: ICU
        issuetype: "GH Issue"
@@ -61,28 +61,28 @@ jobs:
    - name: Search
      if: github.event.action != 'opened'
      id: search
-      uses: tomhjp/gh-action-jira-search@v0.2.1
+      uses: tomhjp/gh-action-jira-search@04700b457f317c3e341ce90da5a3ff4ce058f2fa # v0.2.2
      with:
        # cf[10089] is Issue Link custom field
        jql: 'issuetype = "GH Issue" and cf[10089]="${{ github.event.issue.html_url || github.event.pull_request.html_url }}"'
    - name: Sync comment
      if: github.event.action == 'created' && steps.search.outputs.issue
-      uses: atlassian/gajira-comment@v2.0.2
+      uses: atlassian/gajira-comment@164913891625fe50e9836957902e0bf7d9ef99a8 # v3.0.1
      with:
        issue: ${{ steps.search.outputs.issue }}
        comment: "${{ github.actor }} ${{ github.event.review.state || 'commented' }}:\n\n${{ github.event.comment.body || github.event.review.body }}\n\n${{ github.event.comment.html_url || github.event.review.html_url }}"
    - name: Close ticket
      if: (github.event.action == 'closed' || github.event.action == 'deleted') && steps.search.outputs.issue
-      uses: atlassian/gajira-transition@v2.0.1
+      uses: atlassian/gajira-transition@38fc9cd61b03d6a53dd35fcccda172fe04b36de3 # v3.0.1
      with:
        issue: ${{ steps.search.outputs.issue }}
        transition: Done
    - name: Reopen ticket
      if: github.event.action == 'reopened' && steps.search.outputs.issue
-      uses: atlassian/gajira-transition@v2.0.1
+      uses: atlassian/gajira-transition@38fc9cd61b03d6a53dd35fcccda172fe04b36de3 # v3.0.1
      with:
        issue: ${{ steps.search.outputs.issue }}
        transition: "To Do"
@@ -6,6 +6,6 @@ jobs:
  triage:
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/labeler@main
+    - uses: actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9 # v5.0.0
      with:
        repo-token: "${{ secrets.GITHUB_TOKEN }}"
@@ -2,55 +2,73 @@ name: Validate Monorepo
 on: pull_request
 jobs:
-  compliance:
+  dependencies:
-    name: License Compliance
+    name: Install dependencies
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
-      - uses: actions/cache@v2
+      - uses: actions/cache@13aacd865c20de90d75de3b17ebe84f7a17d57d2 # v4.0.0
-        id: cache
+        id: node-modules-cache
        with:
          path: '**/node_modules'
-          key: ${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}
+          key: node-modules-${{ hashFiles('**/yarn.lock') }}
-      - uses: actions/setup-node@v1
+          restore-keys: |
            node-modules-
      - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
        with:
-          node-version: '12.x'
+          node-version: 16
      - run: yarn install
-        if: steps.cache.outputs.cache-hit != 'true'
+
  compliance:
    name: License Compliance
    needs: [dependencies]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
      - uses: actions/cache@13aacd865c20de90d75de3b17ebe84f7a17d57d2 # v4.0.0
        id: node-modules-cache
        with:
          path: '**/node_modules'
          key: node-modules-${{ hashFiles('**/yarn.lock') }}
          restore-keys: |
            node-modules-
      - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
        with:
          node-version: 16
      - run: yarn run compliance:licenses
  lint:
    name: Lint
    needs: [dependencies, compliance]
    runs-on: ubuntu-latest
    timeout-minutes: 5
    steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
-      - uses: actions/cache@v2
+      - uses: actions/cache@13aacd865c20de90d75de3b17ebe84f7a17d57d2 # v4.0.0
-        id: cache
+        id: node-modules-cache
        with:
          path: '**/node_modules'
-          key: ${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}
+          key: node-modules-${{ hashFiles('**/yarn.lock') }}
-      - uses: actions/setup-node@v1
+          restore-keys: |
            node-modules-
      - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
        with:
-          node-version: '12.x'
+          node-version: 16
      - run: yarn install
        if: steps.cache.outputs.cache-hit != 'true'
      - run: yarn lint
  test:
    name: Test
    needs: [lint]
    runs-on: ubuntu-latest
    timeout-minutes: 15
    steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
-      - uses: actions/cache@v2
+      - uses: actions/cache@13aacd865c20de90d75de3b17ebe84f7a17d57d2 # v4.0.0
-        id: cache
+        id: node-modules-cache
        with:
          path: '**/node_modules'
-          key: ${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}
+          key: node-modules-${{ hashFiles('**/yarn.lock') }}
-      - uses: actions/setup-node@v1
+      - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
        with:
-          node-version: '12.x'
+          node-version: 16
      - run: yarn install
        if: steps.cache.outputs.cache-hit != 'true'
      - run: yarn test
@@ -0,0 +1,25 @@
 name: Trigger OSS to Enterprise Merge
 on:
  pull_request_target:
    types:
      - closed
    branches:
      - main
 jobs:
  trigger-oss-merge:
    # Run this only on merge events in OSS repo
    if: ${{ github.event.pull_request.merged && github.repository == 'hashicorp/boundary-ui' }}
    runs-on: ubuntu-latest
    steps:
      - name: Trigger Merge
        env:
          GIT_REF: ${{ github.ref_name }}
          GIT_SHA: ${{ github.sha }}
          GH_PAT: ${{ secrets.ELEVATED_GITHUB_TOKEN }}
          GIT_ACTOR: ${{ github.actor }}
        run: |
          curl -H "Authorization: token $GH_PAT" \
            -H 'Accept: application/json' \
            -d "{\"event_type\": \"oss-merge\", \"client_payload\": {\"git-ref\": \"${GIT_REF}\", \"git-sha\": \"${GIT_SHA}\", \"git-actor\": \"${GIT_ACTOR}\" }}" \
            "https://api.github.com/repos/hashicorp/boundary-ui-enterprise/dispatches"
@@ -0,0 +1,24 @@
 name: OSS → ENT Merge
 on:
  repository_dispatch:
    types: [ oss-merge ]
 jobs:
  oss-merge:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
        with:
          token: ${{ secrets.ELEVATED_GITHUB_TOKEN }}
      - run: |
          git fetch --prune --unshallow
          ./.github/scripts/merge.sh "${BASE_BRANCH}" "${MERGE_BRANCH}"
        env:
          BASE_BRANCH: ${{ github.event.client_payload.git-ref }}
          OSS_BRANCH:  oss-remote/${{ github.event.client_payload.git-ref }}
          OSS_LOCAL_BRANCH:  oss/${{ github.event.client_payload.git-ref }}-${{ github.event.client_payload.git-sha }}
          MERGE_BRANCH: oss/merge-${{ github.event.client_payload.git-ref }}-${{github.event.client_payload.git-sha}}
          GITHUB_TOKEN: ${{secrets.ELEVATED_GITHUB_TOKEN }}
          MERGE_APPROVE_TOKEN: ${{secrets.ELEVATED_GITHUB_TOKEN }}
          ACTOR: ${{ github.event.client_payload.git-actor }}
          SHA: ${{github.event.client_payload.git-sha}}
@@ -1,6 +1,5 @@
 name: "Trigger Test Boundary UI release"
 on:
  workflow_dispatch:
    inputs:
@@ -9,15 +8,18 @@ on:
        required: true
 jobs:
-  trigger-circleci-release:
+  trigger-gha-release:
    runs-on: ubuntu-latest
    steps:
-
+      - name: Release description
      - name: Trigger Release job
        if: github.event_name == 'workflow_dispatch'
        run: |
          echo "Triggering Test release using BRANCH and TEST_TAG ${{ github.event.inputs.branch }}"
      - name: Trigger Release workflow in boundary-ui-releases
        run: |
          export GITHUB_TOKEN="${{ secrets.ELEVATED_GITHUB_TOKEN }}"
          gh workflow run release.yml \
          --repo hashicorp/boundary-ui-releases \
          --ref main \
          -f TAG="${{ github.event.inputs.branch }}"
          curl -u ${{ secrets.CIRCLE_TOKEN }}: -X POST --header "Content-Type: application/json" \
          -d '{ "branch": "main", "parameters": {"TAG": "'${{ github.event.inputs.branch }}'" }}' \
          https://circleci.com/api/v2/project/github/hashicorp/boundary-ui-releases/pipeline
@@ -6,14 +6,17 @@ on:
      - '*'
 jobs:
-  trigger-circleci-release:
+  trigger-gha-release:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
-      - name: Trigger Release job
+      - name: Release description
        run: |
          echo "Triggering release with a TAG ${GITHUB_REF#refs/tags/}"
-
+      - name: Trigger Release workflow in boundary-ui-releases
-          curl -u ${{ secrets.CIRCLE_TOKEN }}: -X POST --header "Content-Type: application/json" \
+        run: |
-          -d '{ "branch": "main", "parameters": {"TAG": "'${GITHUB_REF#refs/tags/}'" }}' \
+          export GITHUB_TOKEN="${{ secrets.ELEVATED_GITHUB_TOKEN }}"
-          https://circleci.com/api/v2/project/github/hashicorp/boundary-ui-releases/pipeline
+          gh workflow run release.yml \
          --repo hashicorp/boundary-ui-releases \
          --ref main \
          -f TAG="${GITHUB_REF#refs/tags/}"
@@ -20,10 +20,4 @@ libpeerconnection.log
 npm-debug.log*
 testem.log
 yarn-error.log
-storybook-static
+.watchman-cookie*
 **/.storybook/*.html
 # ember-try
 .node_modules.ember-try
 bower.json.ember-try
 package.json.ember-try
@@ -0,0 +1,5 @@
 #!/usr/bin/env sh
 . "$(dirname -- "$0")/_/husky.sh"
 yarn compliance:licenses
 npx lint-staged
@@ -0,0 +1,27 @@
 #!/usr/bin/env sh
 . "$(dirname -- "$0")/_/husky.sh"
 COMMIT_MSG_FILE=$1
 COMMIT_SOURCE=$2
 SHA1=$3
 # Gets the current branch name but if we're in a detached head state, return "HEAD"
 BRANCH_NAME=$(git rev-parse --abbrev-ref HEAD)
 # Regex to match the ICU-#### branch name pattern we use
 ISSUE_REGEX="^(ICU-[0-9]+)"
 # Don't run commitizen for merge or squash commits, as well as when rebasing
 if [ "${COMMIT_SOURCE}" = merge ] || [ "${COMMIT_SOURCE}" = squash ] || [ "${COMMIT_SOURCE}" = "message" -a "${BRANCH_NAME}" = "HEAD" ];then
    exit 0
 fi
 # If the branch name matches, set the JIRA link automatically
 if [[ $BRANCH_NAME =~ $ISSUE_REGEX ]]
 then
  issue="${BASH_REMATCH[1]}"
  url="https://hashicorp.atlassian.net/browse/${issue}"
  exec < /dev/tty && npx git-cz --issues="$url" --hook || true
 else
  # This is to allow interaction with the terminal for commitizen
  exec < /dev/tty && npx git-cz --hook || true
 fi
@@ -0,0 +1,6 @@
 # Copyright (c) HashiCorp, Inc.
 # SPDX-License-Identifier: MPL-2.0
 url_license = "https://github.com/hashicorp/boundary-ui/blob/main/LICENSE"
 url_project_website = "https://learn.hashicorp.com/tutorials/boundary/getting-started-desktop-app"
 url_source_repository = "https://github.com/hashicorp/boundary-ui"
@@ -1,3 +1,5 @@
 Copyright (c) 2020 HashiCorp, Inc.
 Mozilla Public License, version 2.0
 1. Definitions
@@ -13,44 +13,78 @@ subproject, e.g. running or testing.
 <!-- START doctoc generated TOC please keep comment here to allow auto update -->
 <!-- DON'T EDIT THIS SECTION, INSTEAD RE-RUN doctoc TO UPDATE -->
 **Table of Contents**  *generated with [DocToc](https://github.com/thlorenz/doctoc)*
- [Prerequisites](#prerequisites)
+- [Boundary UI Monorepo](#boundary-ui-monorepo)
- [Installation](#installation)
+  - [Projects](#projects)
- [Yarn Commands](#yarn-commands)
+    - [Core (addons/core):](#core-addonscore)
- [Contributing](#contributing)
+    - [API (addons/api):](#api-addonsapi)
-  - [Branching](#branching)
+    - [Auth (addons/auth):](#auth-addonsauth)
-  - [Building ToC](#building-toc)
+    - [Rose (addons/rose)](#rose-addonsrose)
-  - [Building Admin UI for Production](#building-admin-ui-for-production)
+    - [Admin (ui/admin)](#admin-uiadmin)
-    - [Building with a Container](#building-with-a-container)
+    - [Desktop Client (ui/desktop)](#desktop-client-uidesktop)
-  - [Building Desktop UI for Production](#building-desktop-ui-for-production)
+  - [Prerequisites](#prerequisites)
-  - [Connect Boundary UI to Boundary local instance](#connect-boundary-ui-to-boundary-local-instance)
+  - [Optional Tooling](#optional-tooling)
-    - [For admin](#for-admin)
+  - [Installation](#installation)
-    - [For desktop](#for-desktop)
+  - [Yarn Commands](#yarn-commands)
-  - [Committing](#committing)
+  - [Contributing](#contributing)
-    - [License Checking](#license-checking)
+    - [Branching](#branching)
    - [Building ToC](#building-toc)
    - [Building Admin UI for Production](#building-admin-ui-for-production)
      - [Building with a Container](#building-with-a-container)
    - [Building Desktop UI for Production](#building-desktop-ui-for-production)
    - [Connect Boundary UI to Boundary local instance](#connect-boundary-ui-to-boundary-local-instance)
      - [For admin](#for-admin)
      - [For desktop](#for-desktop)
    - [Committing](#committing)
      - [License Checking](#license-checking)
 <!-- END doctoc generated TOC please keep comment here to allow auto update -->
 ## Projects
 This monorepo contains multiple projects.
 ### Core (addons/core):
 Core features use by Boundary UI's, i.e i18n, helpers or components. [Project Readme](addons/core).
 ### API (addons/api):
 The API data access layer for Boundary and all the related mocks. [Project Readme](addons/api).
 ### Auth (addons/auth):
 Authentication layer for Boundary. [Project Readme](addons/auth).
 ### Rose (addons/rose)
 Common styles and components shared by Boundary UIs. [Project Readme](addons/rose).
 ### Admin (ui/admin)
 The Admin UI for Boundary. [Project Readme](ui/admin).
 ### Desktop Client (ui/desktop)
 The desktop client UI for Boundary. [Project Readme](ui/desktop).
 ## Prerequisites
 You will need the following things properly installed on your computer.
 * [Git][git]
 * [Node.js][node]
-  * v10–v15
+  * Supported versions: `v16` and `v18`.
  * **Apple Silicon Users**:  if you experience problems building or running
    Boundary UIs, try Node v15.
 * [Yarn][yarn] installed globally
 * [Google Chrome][chrome]
 * [Firefox][firefox]
-[git]: https://git-scm.com/
+
-[node]: https://nodejs.org/
+## Optional Tooling
-[yarn]: https://classic.yarnpkg.com/lang/en/
+
-[chrome]: https://google.com/chrome/
+Our team finds the following applications useful in day-to-day development
-[firefox]: https://firefox.com/
+workflows.  These are merely recommendations.  We encourage you to use the tools
-[yarn-workspaces]: https://classic.yarnpkg.com/en/docs/workspaces/
+that best suit you and your personal style.
 * [VS Code][vscode]: Code editor for building and debugging web applications
 * [Warp][warp]:  Terminal application for macOS
 * [Homebrew][homebrew]:  The missing package manager for macOS and Linux
 * [Ember Inspector][ember-inspector]:  Understand and debug Ember applications
 * [Postman][postman]:  Test and inspect APIs
 ## Installation
@@ -66,7 +100,6 @@ List of available project commands.  `yarn run <command-name>`
 |---------------------|---|
 | build               | Builds Admin UI. |
 | test                | Runs tests in CI mode. |
 | commit              | Replaces `git commit`, ensures compliance, audit, lint, and test checks pass before commit is allowed and normalizes commit messages across authors. |
 | lint                | Runs ember-template-lint on all of the hbs, js, and sass files. |
 | compliance:audit    | Checks for issues using `yarn audit` with moderate and above criticality.|
 | compliance:licenses | Checks that all dependencies have OSS-compatible licenses. |
@@ -126,7 +159,7 @@ In windows, UI is generated using docker to provide a stable UI across platforms
 ```cmd
 yarn install
-docker-compose -f docker-compose-embedding.yml run build-desktop-production 
+docker-compose -f docker-compose-embedding.yml run build-desktop-production
 yarn build:ui:desktop:app
 ```
@@ -160,15 +193,16 @@ You will need to turn `off` mirage and run it: `$ ENABLE_MIRAGE=false yarn start
 In login screen, authenticate using generated admin login name and password.
-Enter the origin of your Boundary dev instance, by default is: `http://localhost:9200`.
+Enter the cluster URL of your Boundary dev instance, by default is: `http://localhost:9200`.
 ### Committing
-Instead of the default `git commit`, we prescribe a custom command that ensures
+We use `husky` and `lint-staged` to ensure linting and other checks pass before a
-linting and other checks pass before a commit may be completed.  It also ensures
+commit is completed. Simply do a `yarn install` to make sure the hooks are installed.
-that all contributors author consistent commit messages.  To get started with a
+
-commit, stage your files as usual.  Then run `yarn commit` and follow the
+Use a normal `git commit` to go through the checks, if you need to skip these checks,
-on-screen instructions to author your message.
+use `git commit --no-verify` to bypass them. However, a consistent commit message will
 still be enforced even if you use `--no-verify`.
 #### License Checking
@@ -180,3 +214,15 @@ The change will be verified upon PR.  GPL variants and UNLICENSED dependencies
 will not be accepted.
 [github-flow]: https://guides.github.com/introduction/flow/
 [git]: https://git-scm.com/
 [node]: https://nodejs.org/
 [yarn]: https://classic.yarnpkg.com/lang/en/
 [chrome]: https://google.com/chrome/
 [firefox]: https://firefox.com/
 [yarn-workspaces]: https://classic.yarnpkg.com/en/docs/workspaces/
 [homebrew]: https://brew.sh
 [warp]: https://www.warp.dev
 [vscode]: https://code.visualstudio.com/
 [ember-inspector]: https://guides.emberjs.com/release/ember-inspector/
 [postman]: https://www.postman.com/downloads/
@@ -12,8 +12,8 @@ insert_final_newline = true
 indent_style = space
 indent_size = 2
 [*.hbs]
 insert_final_newline = false
 [*.{diff,md}]
 trim_trailing_whitespace = false
 [*.hbs]
 insert_final_newline = false
@@ -5,5 +5,11 @@
    Setting `disableAnalytics` to true will prevent any data from being sent.
  */
-  "disableAnalytics": false
+  "disableAnalytics": false,
  /**
    Setting `isTypeScriptProject` to true will force the blueprint generators to generate TypeScript
    rather than JavaScript by default, when a TypeScript version of a given blueprint is available.
  */
  "isTypeScriptProject": false
 }
@@ -13,9 +13,13 @@
 # misc
 /coverage/
 !.*
 .*/
 .eslintcache
 # ember-try
 /.node_modules.ember-try/
 /bower.json.ember-try
 /npm-shrinkwrap.json.ember-try
 /package.json.ember-try
 /package-lock.json.ember-try
 /yarn.lock.ember-try
@@ -1,21 +1,27 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 'use strict';
 module.exports = {
  root: true,
-  parser: 'babel-eslint',
+  parser: '@babel/eslint-parser',
  parserOptions: {
-    ecmaVersion: 2018,
+    ecmaVersion: 'latest',
    sourceType: 'module',
-    ecmaFeatures: {
+    // This is specific babel-config. If grows consider creating a babel config file
-      legacyDecorators: true,
+    requireConfigFile: false,
    babelOptions: {
      plugins: [
        ['@babel/plugin-proposal-decorators', { decoratorsBeforeExport: true }],
      ],
    },
    // end of babel-config
  },
  plugins: ['ember'],
-  extends: [
+  extends: ['eslint:recommended', 'plugin:ember/recommended', 'prettier'],
    'eslint:recommended',
    'plugin:ember/recommended',
    'plugin:prettier/recommended',
  ],
  env: {
    browser: true,
  },
@@ -30,21 +36,15 @@ module.exports = {
    // node files
    {
      files: [
-        '.eslintrc.js',
+        './.eslintrc.js',
-        '.prettierrc.js',
+        './.prettierrc.js',
-        '.template-lintrc.js',
+        './.template-lintrc.js',
-        'ember-cli-build.js',
+        './ember-cli-build.js',
-        'index.js',
+        './index.js',
-        'testem.js',
+        './testem.js',
-        'blueprints/*/index.js',
+        './blueprints/*/index.js',
-        'config/**/*.js',
+        './config/**/*.js',
-        'tests/dummy/config/**/*.js',
+        './tests/dummy/config/**/*.js',
      ],
      excludedFiles: [
        'addon/**',
        'addon-test-support/**',
        'app/**',
        'tests/dummy/app/**',
      ],
      parserOptions: {
        sourceType: 'script',
@@ -53,8 +53,15 @@ module.exports = {
        browser: false,
        node: true,
      },
-      plugins: ['node'],
+      extends: ['plugin:n/recommended'],
-      extends: ['plugin:node/recommended'],
+    },
    {
      // Test files:
      files: ['tests/**/*-test.{js,ts}'],
      extends: ['plugin:qunit/recommended'],
      rules: {
        'qunit/require-expect': [2, 'except-simple'],
      },
    },
  ],
 };
@@ -14,20 +14,26 @@
 /.eslintignore
 /.eslintrc.js
 /.git/
 /.github/
 /.gitignore
 /.prettierignore
 /.prettierrc.js
 /.template-lintrc.js
 /.travis.yml
 /.watchmanconfig
 /bower.json
 /config/ember-try.js
 /CONTRIBUTING.md
 /ember-cli-build.js
 /testem.js
 /tests/
 /yarn-error.log
 /yarn.lock
 .gitkeep
 # ember-try
 /.node_modules.ember-try/
 /bower.json.ember-try
 /npm-shrinkwrap.json.ember-try
 /package.json.ember-try
 /package-lock.json.ember-try
 /yarn.lock.ember-try
@@ -14,8 +14,12 @@
 /coverage/
 !.*
 .eslintcache
 .lint-todo/
 # ember-try
 /.node_modules.ember-try/
 /bower.json.ember-try
 /npm-shrinkwrap.json.ember-try
 /package.json.ember-try
 /package-lock.json.ember-try
 /yarn.lock.ember-try
@@ -1,4 +0,0 @@
 {
  "singleQuote": true,
  "printWidth": 80
 }
@@ -1,5 +1,15 @@
-'use strict';
+/**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 module.exports = {
-  singleQuote: true,
+  overrides: [
    {
      files: '*.{js,ts}',
      options: {
        singleQuote: true,
      },
    },
  ],
 };
@@ -1,5 +1,10 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 'use strict';
 module.exports = {
-  extends: 'octane',
+  extends: ['recommended', 'stylistic'],
 };
@@ -47,21 +47,28 @@ List of available project commands.  `yarn run <command-name>`
 | build:development | Builds the dummy app in development mode. |
 | build | Builds the dummy app for production. |
 | lint | Runs all lint commands. |
 | lint:fix | Runs automatic lint fixes for all type of file. |
 | lint:hbs | Runs lint for `hbs` template files. |
 | lint:hbs:fix | Runs automatic lint fixes for `hbs` template files. |
 | lint:js | Lints `js` files. |
 | lint:js:fix | Runs automatic lint fixes for `js` files. |
 | format | Runs all auto-formatters. |
 | format:js | Auto-formats `js` files using Prettier. |
 | start | Runs the dummy app local server. |
 | test | Runs all tests. |
-| test:all | Runs tests across multiple Ember versions with ember-try. |
+| test:ember-compatibility | Runs tests across multiple Ember versions with ember-try. |
 | precommit | Runs all lint and format. |
 | doc:toc | Automatically generates a table of contents for this README file. |
 Additional commands in the monorepo package may affect this projects.
 ## Linting
 * `yarn lint:fix`
 * `yarn lint:hbs`
 * `yarn lint:hbs:fix`
 * `yarn lint:js`
-* `yarn lint:js --fix`
+* `yarn lint:js:fix`
 ## Formatting
@@ -0,0 +1,107 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import sinon from 'sinon';
 import { typeOf } from '@ember/utils';
 /**
 * This test helper can be used to help setup your sinon stubs in your tests.
 * Must be called after setupMirage.
 *
 * ```js
 * import setupStubs from 'api/test-support/handlers/client-daemon-search';
 *
 * module('Acceptance | my test', function(hooks) {
 *  setupApplicationTest(hooks);
 *  setupMirage(hooks);
 *  setupStubs(hooks);
 *
 *   // add your actual tests here
 * });
 * ```
 *
 * This will setup a stub for the IPC service and include helper methods to
 * help setup what the client daemon search command returns.
 *
 * @module Test Helpers
 * @public
 */
 export default function setupStubs(hooks) {
  let stubTypes = [];
  hooks.beforeEach(function () {
    const ipcService = this.owner.lookup('service:ipc');
    this.ipcStub = sinon.stub(ipcService, 'invoke');
    /**
     * We aim to still use mirage data when stubbing out the client daemon
     * search. However, the handler expects the search data to be raw JSON from
     * the API which will get serialized. We add back the scope object for it to
     * get correctly normalized and other fields such as "attributes" from the
     * API will already be hoisted and will not be re-normalized from mirage data.
     *
     * This convenience method can take in multiple types,
     * e.g. this.stubClientDaemonSearch('targets', 'sessions').
     * This will have sinon stub out each call so the first call to search will
     * provide all the models from the first parameter you specify,
     * the second call will provide all the models from the second argument, etc.
     * @param types
     */
    this.stubClientDaemonSearch = (...types) => {
      stubTypes = types;
      types.forEach((type, i) => {
        let models;
        let resourceName;
        if (typeOf(type) === 'object') {
          models = type.func();
          resourceName = type.resource;
        } else {
          models = this.server.schema[type].all().models;
          resourceName = type;
        }
        this.ipcStub
          .withArgs('searchClientDaemon')
          .onCall(i)
          .returns({
            [resourceName]: models.map((model) => {
              // Use internal serializer to serialize the model correctly
              // according to our mirage serializers
              const modelData =
                this.server.serializerOrRegistry.serialize(model);
              // Serialize the data properly to standard JSON as that is what
              // we're expecting from the client daemon response
              return JSON.parse(JSON.stringify(modelData));
            }),
          });
      });
    };
  });
  hooks.afterEach(function () {
    // Verify the number of mocks we set up match with how
    // many times the client daemon was called with
    sinon.assert.callCount(
      this.ipcStub.withArgs('searchClientDaemon'),
      stubTypes.length,
    );
    stubTypes.forEach((type, i) => {
      // Assert that the stub was called with the resource we're trying to mock
      // so we don't mistakenly mock the wrong resource
      const ipcCall = this.ipcStub.withArgs('searchClientDaemon').getCall(i);
      let resource = type;
      if (typeOf(type) === 'object') {
        resource = type.resource;
      }
      sinon.assert.match(ipcCall.args[1], { resource });
    });
    sinon.restore();
  });
 }
@@ -0,0 +1,44 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import ModelAbility from './model';
 /**
 * Provides abilities for accounts.
 */
 export default class AccountAbility extends ModelAbility {
  // =permissions
  /**
   * Only "known" account types may be read.
   * @type {boolean}
   */
  get canRead() {
    return !this.model.isUnknown && this.hasAuthorizedAction('read');
  }
  /**
   * Only "known" account types may be updated.
   * @type {boolean}
   */
  get canUpdate() {
    return !this.model.isUnknown && this.hasAuthorizedAction('update');
  }
  /**
   * Only "known" account types may be deleted.
   * @type {boolean}
   */
  get canDelete() {
    return !this.model.isUnknown && this.hasAuthorizedAction('delete');
  }
  /**
   * @type {boolean}
   */
  get canSetPassword() {
    return this.hasAuthorizedAction('set-password');
  }
 }
@@ -0,0 +1,34 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import ModelAbility from './model';
 /**
 * Provides abilities for auth method.
 */
 export default class AuthMethodAbility extends ModelAbility {
  // =permissions
  /**
   * Only "known" auth method types may be read.
   * @type {boolean}
   */
  get canRead() {
    return !this.model.isUnknown && this.hasAuthorizedAction('read');
  }
  /**
   * Only "known" auth method types may be updated.
   */
  get canUpdate() {
    return !this.model.isUnknown && this.hasAuthorizedAction('update');
  }
  /**
   * Only "known" auth method types may be deleted.
   */
  get canDelete() {
    return !this.model.isUnknown && this.hasAuthorizedAction('delete');
  }
 }
@@ -0,0 +1,26 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import ModelAbility from './model';
 import { inject as service } from '@ember/service';
 /**
 * Provides abilities for channel recordings.
 */
 export default class ChannelRecordingAbility extends ModelAbility {
  // =services
  @service abilities;
  // =permissions
  get canGetAsciicast() {
    const sessionRecording = this.model.connection_recording.session_recording;
    const sessionRecordingAbility = this.abilities.abilityFor(
      'session-recording',
      sessionRecording,
    );
    return this.model.isAsciicast && sessionRecordingAbility.canDownload;
  }
 }
@@ -0,0 +1,20 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import ModelAbility from './model';
 /**
 * Provides abilities for credential.
 */
 export default class CredentialLibraryAbility extends ModelAbility {
  // =permissions
  /**
   * Only "known" credential library types may be read.
   * @type {boolean}
   */
  get canRead() {
    return !this.model.isUnknown && this.hasAuthorizedAction('read');
  }
 }
@@ -0,0 +1,27 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import ModelAbility from './model';
 import { inject as service } from '@ember/service';
 /**
 * Provides abilities for credential store.
 */
 export default class CredentialStoreAbility extends ModelAbility {
  // =services
  @service features;
  // =permissions
  /**
   * Only "known" credential store types may be read.
   * @type {boolean}
   */
  get canRead() {
    return this.features.isEnabled('static-credentials')
      ? this.hasAuthorizedAction('read')
      : !this.model.isStatic && this.hasAuthorizedAction('read');
  }
 }
@@ -0,0 +1,20 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import ModelAbility from './model';
 /**
 * Provides abilities for credential.
 */
 export default class CredentialAbility extends ModelAbility {
  // =permissions
  /**
   * Only "known" credential types may be read.
   * @type {boolean}
   */
  get canRead() {
    return !this.model.isUnknown && this.hasAuthorizedAction('read');
  }
 }
@@ -0,0 +1,27 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import ModelAbility from './model';
 /**
 * Provides abilities for groups.
 */
 export default class GroupAbility extends ModelAbility {
  // =permissions
  /**
   * @type {boolean}
   */
  get canAddMembers() {
    return this.hasAuthorizedAction('add-members');
  }
  /**
   * @type {boolean}
   */
  get canRemoveMembers() {
    return this.hasAuthorizedAction('remove-members');
  }
 }
@@ -0,0 +1,21 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import ModelAbility from './model';
 /**
 * Provides abilities for host catalogs.
 */
 export default class HostCatalogAbility extends ModelAbility {
  // =permissions
  /**
   * Only "known" host catalog types may be read.
   * @type {boolean}
   */
  get canRead() {
    return !this.model.isUnknown && this.hasAuthorizedAction('read');
  }
 }
@@ -0,0 +1,34 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import ModelAbility from './model';
 /**
 * Provides abilities for host sets.
 */
 export default class HostSetAbility extends ModelAbility {
  // =permissions
  /**
   * @type {boolean}
   */
  get canAddHosts() {
    return this.hasAuthorizedAction('add-hosts');
  }
  /**
   * @type {boolean}
   */
  get canRemoveHosts() {
    return this.hasAuthorizedAction('remove-hosts');
  }
  /**
   * @type {boolean}
   */
  get canRead() {
    return !this.model.isUnknown && this.hasAuthorizedAction('read');
  }
 }
@@ -0,0 +1,13 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import ModelAbility from './model';
 /**
 * Provides abilities for managed groups.
 */
 export default class ManagedGroupAbility extends ModelAbility {
  // no op
 }
@@ -0,0 +1,91 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import { Ability } from 'ember-can';
 /**
 * Generic ability provides abilities common to all models in the API.
 */
 export default class ModelAbility extends Ability {
  // =permissions
  /**
   * @type {boolean}
   */
  get canRead() {
    return this.hasAuthorizedAction('read');
  }
  /**
   * @type {boolean}
   */
  get canUpdate() {
    return this.hasAuthorizedAction('update');
  }
  /**
   * @type {boolean}
   */
  get canDelete() {
    return this.hasAuthorizedAction('delete');
  }
  /**
   * To save an existing model (already persisted to the API), it must contain
   * the the `update` authorized action.
   *
   * For now, new models _always_ have this ability.  The reason is because the
   * `create` action is authorized on collections, not individual records.  So
   * this function can't actually tell from a model instance if create
   * is allowed.
   *
   * @type {boolean}
   */
  get canSave() {
    if (this.model.isNew || (!this.model.isNew && this.canUpdate)) {
      return true;
    }
    return false;
  }
  /**
   * @type {boolean}
   */
  get canList() {
    return this.hasAuthorizedCollectionAction('list');
  }
  /**
   * @type {boolean}
   */
  get canCreate() {
    return this.hasAuthorizedCollectionAction('create');
  }
  // =methods
  /**
   * Returns true if the given action is contained in the ability model's
   * `authorized_actions` array.
   * @param {string} action
   * @return {boolean}
   */
  hasAuthorizedAction(action) {
    return this.model.authorized_actions?.includes(action);
  }
  /**
   * Returns true if the given action is contained in the ability model's
   * `authorized_collection_actions` array.
   * @param {string} action
   * @return {boolean}
   */
  hasAuthorizedCollectionAction(action) {
    const authorized_collection_actions =
      (this.model || {}).authorized_collection_actions || {};
    const collection = this.collection || {};
    return authorized_collection_actions[collection]?.includes(action);
  }
 }
@@ -0,0 +1,46 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import ModelAbility from './model';
 import { service } from '@ember/service';
 /**
 * Provides abilities for storage policies.
 */
 export default class PolicyAbility extends ModelAbility {
  // =services
  @service features;
  // =permissions
  /**
   * This ensures that storage policies may be read only if the
   * session-recording feature flag is enabled.
   */
  get canRead() {
    return this.features.isEnabled('ssh-session-recording')
      ? super.canRead
      : false;
  }
  /**
   * This ensures that storage policies may be updated only if the
   * session-recording feature flag is enabled.
   */
  get canUpdate() {
    return this.features.isEnabled('ssh-session-recording')
      ? super.canUpdate
      : false;
  }
  /**
   * This ensures that storage policies may be deleted only if the
   * session-recording feature flag is enabled.
   */
  get canDelete() {
    return this.features.isEnabled('ssh-session-recording')
      ? super.canDelete
      : false;
  }
 }
@@ -0,0 +1,61 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import ModelAbility from './model';
 import { inject as service } from '@ember/service';
 class InvalidRolePrincipalTypeError extends Error {
  name = 'InvalidRolePrincipalTypeError';
 }
 /**
 * Provides abilities for roles.
 */
 export default class RoleAbility extends ModelAbility {
  // =services
  @service can;
  // =permissions
  /**
   * @type {boolean}
   */
  get canSetGrants() {
    return this.hasAuthorizedAction('set-grants');
  }
  /**
   * @type {boolean}
   */
  get canAddPrincipals() {
    return this.hasAuthorizedAction('add-principals');
  }
  /**
   * @type {boolean}
   */
  get canRemovePrincipals() {
    return this.hasAuthorizedAction('remove-principals');
  }
  /**
   * Returns the ability check for a principal model instance.
   * Valid role principal models are: User, Group, and ManagedGroup.
   * Throws an error if the principal type is invalid.
   * @type {boolean}
   * @throws {InvalidRolePrincipalTypeError}
   */
  get canReadPrincipal() {
    const type = this.model.constructor.modelName;
    const typeIsValid =
      type === 'user' || type === 'group' || type === 'managed-group';
    if (!typeIsValid)
      throw new InvalidRolePrincipalTypeError(
        `Expected a role principal of type 'user', 'group', or 'managed-group'.  Got '${type}'.`,
      );
    return this.can.can(`read ${type}`, this.model);
  }
 }
@@ -0,0 +1,28 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import ModelAbility from './model';
 /**
 * Provides abilities for scopes.
 */
 export default class ScopeAbility extends ModelAbility {
  // =permissions
  /**
   * Permission that checks whether a policy can be attached to a scope
   * @type {boolean}
   */
  get canAttachStoragePolicy() {
    return this.hasAuthorizedAction('attach-storage-policy');
  }
  /**
   * Permission that checks whether a policy can be detached to a scope
   * @type {boolean}
   */
  get canDetachStoragePolicy() {
    return this.hasAuthorizedAction('detach-storage-policy');
  }
 }
@@ -0,0 +1,42 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import ModelAbility from './model';
 /**
 * Provides abilities for session recordings.
 */
 export default class SessionRecordingAbility extends ModelAbility {
  // =services
  // =permissions
  /**
   * Only "known" session recording types may be read.
   * @type {boolean}
   */
  get canRead() {
    return !this.model.isUnknown && super.canRead;
  }
  /**
   * Only "known" session recording types may be deleted.
   * @type {boolean}
   */
  get canDelete() {
    return !this.model.isUnknown && super.canDelete && this.model.isAvailable;
  }
  get canDownload() {
    return this.hasAuthorizedAction('download');
  }
  /* Permission that checks whether a policy can be reapplied to a session recording
   * @type {boolean}
   */
  get canReapplyStoragePolicy() {
    return this.hasAuthorizedAction('reapply-storage-policy');
  }
 }
@@ -0,0 +1,38 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import ModelAbility from './model';
 /**
 * Provides abilities for sessions.
 */
 export default class SessionAbility extends ModelAbility {
  // =services
  // =permissions
  /**
   * Only available sessions may be read.
   * @type {boolean}
   */
  get canRead() {
    return (
      this.model.isAvailable &&
      (this.hasAuthorizedAction('read:self') || super.canRead)
    );
  }
  /**
   * Only available sessions may be canceled.
   * @type {boolean}
   */
  get canCancel() {
    return (
      this.model.isAvailable &&
      (this.hasAuthorizedAction('cancel:self') ||
        this.hasAuthorizedAction('cancel'))
    );
  }
 }
@@ -0,0 +1,39 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import ModelAbility from './model';
 /**
 * Provides abilities for storage buckets.
 */
 export default class StorageBucketAbility extends ModelAbility {
  // =services
  // =permissions
  /**
   * Only "known" storage bucket types may be read.
   * @type {boolean}
   */
  get canRead() {
    return !this.model.isUnknown && super.canRead;
  }
  /**
   * Only "known" storage bucket types may be updated.
   * @type {boolean}
   */
  get canUpdate() {
    return !this.model.isUnknown && super.canUpdate;
  }
  /**
   * Only "known" storage bucket types may be deleted.
   * @type {boolean}
   */
  get canDelete() {
    return !this.model.isUnknown && super.canDelete;
  }
 }
@@ -0,0 +1,56 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import ModelAbility from './model';
 /**
 * Provides abilities for targets.
 */
 export default class TargetAbility extends ModelAbility {
  // =permissions
  /**
   * @type {boolean}
   */
  get canConnect() {
    return this.hasAuthorizedAction('authorize-session');
  }
  /**
   * @type {boolean}
   */
  get canAddHostSources() {
    return this.hasAuthorizedAction('add-host-sources');
  }
  /**
   * @type {boolean}
   */
  get canRemoveHostSources() {
    return this.hasAuthorizedAction('remove-host-sources');
  }
  /**
   * @type {boolean}
   */
  get canAddBrokeredCredentialSources() {
    return this.hasAuthorizedAction('add-credential-sources');
  }
  /**
   * @type {boolean}
   */
  get canAddInjectedApplicationCredentialSources() {
    return (
      this.model.isSSH && this.hasAuthorizedAction('add-credential-sources')
    );
  }
  /**
   * @type {boolean}
   */
  get canRemoveCredentialSources() {
    return this.hasAuthorizedAction('remove-credential-sources');
  }
 }
@@ -0,0 +1,43 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import ModelAbility from './model';
 /**
 * Provides abilities for users.
 */
 export default class UserAbility extends ModelAbility {
  // =permissions
  /**
   * @type {boolean}
   */
  get canAddAccounts() {
    return this.hasAuthorizedAction('add-accounts');
  }
  /**
   * @type {boolean}
   */
  get canRemoveAccounts() {
    return this.hasAuthorizedAction('remove-accounts');
  }
  /**
   * @type {boolean}
   */
  get canAddAccount() {
    const { account, canAddAccounts } = this;
    return canAddAccounts && !account.isUnknown;
  }
  /**
   * @type {boolean}
   */
  get canRemoveAccount() {
    const { account, canRemoveAccounts } = this;
    return canRemoveAccounts && !account.isUnknown;
  }
 }
@@ -0,0 +1,20 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import ModelAbility from './model';
 /**
 * Provides abilities for workers.
 */
 export default class WorkerAbility extends ModelAbility {
  // =permissions
  /**
   * @type {boolean}
   */
  get canCreateWorkerLed() {
    return this.hasAuthorizedCollectionAction('create:worker-led');
  }
 }
@@ -1,8 +1,13 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import RESTAdapter from '@ember-data/adapter/rest';
 import { serializeIntoHash } from '@ember-data/adapter/-private';
 /* eslint-disable-next-line ember/no-mixins */
 import AdapterBuildURLMixin from '../mixins/adapter-build-url';
-import config from 'ember-get-config';
+import { getOwner } from '@ember/application';
 import { get } from '@ember/object';
 import { InvalidError } from '@ember-data/adapter/error';
 import { dasherize } from '@ember/string';
@@ -40,23 +45,40 @@ function prenormalizeArrayResponse(response) {
 }
 export default class ApplicationAdapter extends RESTAdapter.extend(
-  AdapterBuildURLMixin
+  AdapterBuildURLMixin,
 ) {
  // =attributes
  #host;
  #namespace;
  /**
   * Sets host to the `api.host` string in the application's config,
   * if set.
   * @type {string}
   */
-  host = get(config, 'api.host');
+  get host() {
    const config = getOwner(this).resolveRegistration('config:environment');
    return this.#host || get(config, 'api.host');
  }
  set host(value) {
    // Setting this value is useful for testing purposes.
    this.#host = value;
  }
  /**
   * Sets namespace to the `api.namespace` string in the application's config,
   * if set.
   * @type {string}
   */
-  namespace = get(config, 'api.namespace');
+  get namespace() {
    const config = getOwner(this).resolveRegistration('config:environment');
    return this.#namespace || get(config, 'api.namespace');
  }
  set namespace(value) {
    // Setting this value is useful for testing purposes.
    this.#namespace = value;
  }
  // =methods
@@ -86,22 +108,37 @@ export default class ApplicationAdapter extends RESTAdapter.extend(
  /**
   * Intercepts "empty" responses and adds an empty `items` array.
-   * @override
+   * This query method now supports pagination by checking the responseType and
-   * @method findAll
+   * passing in the list token if the responseType indicates more data
   * @return {Promise} promise
   */
  findAll() {
    return super.findAll(...arguments).then(prenormalizeArrayResponse);
  }
  /**
   * Intercepts "empty" responses and adds an empty `items` array.
   * @override
   * @method query
   * @return {Promise} promise
   */
-  query() {
+  async query(store, schema, query) {
-    return super.query(...arguments).then(prenormalizeArrayResponse);
+    let result;
    let data = [];
    // If the query has a page_size, we skip the pagination logic
    // and return the initial result. This is being used to determine
    // if the controller supports pagination
    if (query.page_size) {
      result = await super.query(store, schema, query);
      return prenormalizeArrayResponse(result);
    }
    // Run this loop as long as the response_type is delta,
    // which indicates that there are more items in the list
    do {
      result = await super.query(store, schema, query);
      //add the result items to a data array
      if (result && result.items) {
        data.push(...result.items);
        //pass in the list token for subsequent calls to fetch the remaining list items
        query.list_token = result.list_token;
      }
    } while (result && result.response_type === 'delta');
    result.items = data;
    return prenormalizeArrayResponse(result);
  }
  /**
@@ -248,12 +285,15 @@ export default class ApplicationAdapter extends RESTAdapter.extend(
    // Normalize field-specific errors, if any.
    const errors = fieldErrors.map((error) => ({
      detail: error.description,
-      // Ember Data cannot handle errors on nested attributes, so these are
+      // Going forward, nested attributes will be hoisted.  Thus "attributes."
-      // flattened (e.g. `attributes.foobar` becomes `attributes_foobar`).
+      // must be stripped from the error name key.  Until all models are
-      // To capture these errors, add read-only fields on the model
+      // transitioned away from model fragments, however, both this and the
-      // corresponding to the underscored field name.
+      // prior error key mappings are necessary.
-      source: { pointer: `/data/attributes/${error.name.replace('.', '_')}` },
+      source: {
        pointer: `/data/attributes/${error.name.replace('attributes.', '')}`,
      },
    }));
    // Return a list of JSON API errors rooted under the `errors` key.
    return {
      errors: [baseError, ...errors],
@@ -0,0 +1,32 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import ApplicationAdapter from './application';
 export default class HostCatalogAdapter extends ApplicationAdapter {
  /**
   * Overrides the default `buildURL` such that on _create_, URLs for records of
   * type `plugin` get an extra query parameter `?plugin_name`.  All other
   * request types behave as normal.
   *
   * @override
   * @param {string} modelName
   * @param {string} id
   * @return {string} url
   * @return {string} requestType
   */
  buildURL(modelName, id, snapshot, requestType) {
    let url = super.buildURL(...arguments);
    if (requestType === 'createRecord') {
      try {
        const pluginName = snapshot.attr('plugin')?.name;
        if (pluginName) url = `${url}?plugin_name=${pluginName}`;
      } catch (e) {
        // Ignore any adapter errors here
      }
    }
    return url;
  }
 }
@@ -0,0 +1,74 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import ApplicationAdapter from './application';
 import { MIME_TYPE_ASCIICAST } from 'api/models/channel-recording';
 export default class SessionRecordingAdapter extends ApplicationAdapter {
  /**
   * Overrides the default `buildURL` such that for custom download methods,
   * URLs will get the query parameters. All other request types behave as normal.
   *
   * @param modelName {string}
   * @param id {string}
   * @param snapshot {object}
   * @param requestType {string}
   * @param query {object}
   * @returns {string}
   */
  buildURL(modelName, id, snapshot, requestType, query) {
    let url = super.buildURL(...arguments);
    let method;
    try {
      method = snapshot?.adapterOptions?.method;
    } catch (e) {
      // Ignore any adapter errors here
    }
    if (method === 'download') {
      const queryParams = new URLSearchParams(query).toString();
      if (queryParams) url = `${url}?${queryParams}`;
    }
    return url;
  }
  /**
   * Handles the download recording for recordings. Takes in a mime type for the
   * type or recording to return.
   * The ID can be the session ID, session recording ID,
   * connection recording ID, or the channel recording ID.
   * @param id {string}
   * @param mimeType {string}
   * @returns {Promise<string>}
   */
  async getRecordingDownload({ id, mimeType }) {
    const options = { adapterOptions: { method: 'download' } };
    const url = this.buildURL('session-recording', id, options, 'findRecord', {
      mime_type: mimeType,
    });
    const response = await fetch(url, { headers: this.headers });
    if (response?.ok) {
      return response.text();
    } else {
      throw this.handleResponse(
        response.status,
        response.headers,
        await response.text(),
      );
    }
  }
  /**
   * Returns an ascii cast recording.
   * @param id
   * @returns {Promise<string>}
   */
  getAsciicast(id) {
    return this.getRecordingDownload({
      id,
      mimeType: MIME_TYPE_ASCIICAST,
    });
  }
 }
@@ -0,0 +1,33 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import ApplicationAdapter from './application';
 export default class StorageBucketAdapter extends ApplicationAdapter {
  /**
   * Overrides the default `buildURL` such that on _create_, URLs for records of
   * type `plugin` get an extra query parameter `?plugin_name`.  All other
   * request types behave as normal.
   *
   * @override
   * @param {string} modelName
   * @param {string} id
   * @return {string} url
   * @return {string} requestType
   */
  buildURL(modelName, id, snapshot, requestType) {
    let url = super.buildURL(...arguments);
    let pluginName;
    try {
      pluginName = snapshot?.attr('plugin')?.name;
    } catch (e) {
      // Ignore any adapter errors here
    }
    if (requestType === 'createRecord' && pluginName) {
      url = `${url}?plugin_name=${pluginName}`;
    }
    return url;
  }
 }
@@ -1,3 +1,8 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import BaseModel from '../../models/base';
 import { attr } from '@ember-data/model';
@@ -43,4 +48,39 @@ export default class GeneratedAccountModel extends BaseModel {
    description: 'Current version number of this resource.',
  })
  version;
  // =attributes (password and LDAP)
  @attr('string', {
    for: ['password', 'ldap'],
    isNestedAttribute: true,
    description: 'The account login name',
  })
  login_name;
  // =attributes (OIDC)
  @attr('string', { for: 'oidc', isNestedAttribute: true }) subject;
  @attr('string', { for: 'oidc', isNestedAttribute: true }) issuer;
  // =attributes (OIDC and LDAP)
  @attr('string', {
    for: ['oidc', 'ldap'],
    isNestedAttribute: true,
    readOnly: true,
  })
  email;
  @attr('string', {
    for: ['oidc', 'ldap'],
    isNestedAttribute: true,
    readOnly: true,
  })
  full_name;
  // =attributes (LDAP)
  @attr('string', { for: 'ldap', isNestedAttribute: true, readOnly: true }) dn;
  @attr('string-array', {
    for: 'ldap',
    isNestedAttribute: true,
    readOnly: true,
  })
  member_of_groups;
 }
@@ -0,0 +1,58 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import BaseModel from '../../models/base';
 import { attr } from '@ember-data/model';
 /**
 * Alias contains all fields related to an Alias resource
 */
 export default class GeneratedAliasModel extends BaseModel {
  // =attributes
  @attr('string', {
    description: 'The type of the resource, to help differentiate schemas',
  })
  type;
  @attr('string', {
    description: 'Optional name for identification purposes.',
  })
  name;
  @attr('string', {
    description: 'Optional user-set description for identification purposes.',
  })
  description;
  @attr('date', {
    description: 'The time this resource was created\nOutput only.',
    readOnly: true,
  })
  created_time;
  @attr('date', {
    description: 'The time this resource was last updated\nOutput only.',
    readOnly: true,
  })
  updated_time;
  @attr('number', {
    description: 'Current version number of this resource.',
  })
  version;
  @attr('string', {
    description: 'This is the id of the resource that this Alias points to.',
  })
  destination_id;
  @attr('object', {
    isNestedAttribute: true,
    description:
      'This contains a host_id which is the id of the host that the session will be authorized for.',
  })
  authorize_session_arguments;
 }
@@ -1,3 +1,8 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import BaseModel from '../../models/base';
 import { attr } from '@ember-data/model';
@@ -49,4 +54,267 @@ export default class GeneratedAuthMethodModel extends BaseModel {
    description: 'Current version number of this resource.',
  })
  version;
  // =attributes(oidc, ldap)
  @attr('string', {
    for: ['oidc', 'ldap'],
    readOnly: true,
    isNestedAttribute: true,
  })
  state;
  // =attributes(oidc)
  @attr('string', {
    for: 'oidc',
    isNestedAttribute: true,
  })
  issuer;
  @attr('string', {
    for: 'oidc',
    isNestedAttribute: true,
  })
  client_id;
  @attr('string', {
    for: 'oidc',
    isNestedAttribute: true,
    isSecret: true,
  })
  client_secret;
  @attr('string', {
    for: 'oidc',
    readOnly: true,
    isNestedAttribute: true,
  })
  client_secret_hmac;
  @attr('number', {
    for: 'oidc',
    isNestedAttribute: true,
  })
  max_age;
  @attr('string', {
    for: 'oidc',
    isNestedAttribute: true,
  })
  api_url_prefix;
  @attr('string', {
    for: 'oidc',
    readOnly: true,
    isNestedAttribute: true,
  })
  callback_url;
  @attr('boolean', {
    for: 'oidc',
    isNestedAttribute: true,
  })
  disable_discovered_config_validation;
  @attr('boolean', {
    for: 'oidc',
    isNestedAttribute: true,
  })
  dry_run;
  @attr('string-array', {
    for: 'oidc',
    emptyArrayIfMissing: true,
    isNestedAttribute: true,
  })
  claims_scopes;
  @attr('string-array', {
    for: 'oidc',
    emptyArrayIfMissing: true,
    isNestedAttribute: true,
  })
  signing_algorithms;
  @attr('string-array', {
    for: 'oidc',
    emptyArrayIfMissing: true,
    isNestedAttribute: true,
  })
  allowed_audiences;
  @attr('string-array', {
    for: 'oidc',
    emptyArrayIfMissing: true,
    isNestedAttribute: true,
  })
  idp_ca_certs;
  @attr('account-value-map-array', {
    for: 'oidc',
    emptyArrayIfMissing: true,
    isNestedAttribute: true,
  })
  account_claim_maps;
  @attr('string-array', {
    for: 'oidc',
    emptyArrayIfMissing: true,
    isNestedAttribute: true,
  })
  prompts;
  // =attributes(ldap)
  @attr('boolean', {
    for: 'ldap',
    isNestedAttribute: true,
  })
  start_tls;
  @attr('boolean', {
    for: 'ldap',
    isNestedAttribute: true,
  })
  insecure_tls;
  @attr('boolean', {
    for: 'ldap',
    isNestedAttribute: true,
  })
  discover_dn;
  @attr('boolean', {
    for: 'ldap',
    isNestedAttribute: true,
  })
  anon_group_search;
  @attr('string', {
    for: 'ldap',
    isNestedAttribute: true,
  })
  upn_domain;
  @attr('string-array', {
    for: 'ldap',
    emptyArrayIfMissing: true,
    isNestedAttribute: true,
  })
  urls;
  @attr('string', {
    for: 'ldap',
    isNestedAttribute: true,
  })
  user_dn;
  @attr('string', {
    for: 'ldap',
    isNestedAttribute: true,
  })
  user_attr;
  @attr('string', {
    for: 'ldap',
    isNestedAttribute: true,
  })
  user_filter;
  @attr('boolean', {
    for: 'ldap',
    isNestedAttribute: true,
  })
  enable_groups;
  @attr('boolean', {
    for: 'ldap',
    isNestedAttribute: true,
  })
  use_token_groups;
  @attr('string', {
    for: 'ldap',
    isNestedAttribute: true,
  })
  group_dn;
  @attr('string', {
    for: 'ldap',
    isNestedAttribute: true,
  })
  group_attr;
  @attr('string', {
    for: 'ldap',
    isNestedAttribute: true,
  })
  group_filter;
  @attr('string-array', {
    for: 'ldap',
    emptyArrayIfMissing: true,
    isNestedAttribute: true,
  })
  certificates;
  @attr('string', {
    for: 'ldap',
    isNestedAttribute: true,
  })
  client_certificate;
  @attr('string', {
    for: 'ldap',
    isNestedAttribute: true,
    isSecret: true,
  })
  client_certificate_key;
  @attr('string', {
    for: 'ldap',
    isNestedAttribute: true,
    readOnly: true,
  })
  client_certificate_key_hmac;
  @attr('string', {
    for: 'ldap',
    isNestedAttribute: true,
  })
  bind_dn;
  @attr('string', {
    for: 'ldap',
    isNestedAttribute: true,
    isSecret: true,
  })
  bind_password;
  @attr('string', {
    for: 'ldap',
    isNestedAttribute: true,
    readOnly: true,
  })
  bind_password_hmac;
  @attr('account-value-map-array', {
    for: 'ldap',
    emptyArrayIfMissing: true,
    isNestedAttribute: true,
  })
  account_attribute_maps;
  @attr('number', {
    for: 'ldap',
    isNestedAttribute: true,
  })
  maximum_page_size;
  @attr('string', {
    for: 'ldap',
    isNestedAttribute: true,
  })
  dereference_aliases;
 }
@@ -1,3 +1,8 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import BaseModel from '../../models/base';
 /**
@@ -0,0 +1,59 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import BaseModel from '../../models/base';
 import { attr } from '@ember-data/model';
 /**
 * A channel contains data for a single channel within a connection.
 */
 export default class GeneratedChannelRecordingModel extends BaseModel {
  // =attributes
  @attr('string', {
    description:
      'The total number of bytes uploaded from the client in this Channel.',
    readOnly: true,
  })
  bytes_up;
  @attr('string', {
    description:
      'The total number of bytes downloaded to the client in this Channel.',
    readOnly: true,
  })
  bytes_down;
  @attr('number', {
    description:
      'The total number of errors that occurred during the use of this Channel.',
    readOnly: true,
  })
  errors_number;
  @attr('date', {
    description: 'The time the Channel started.',
    readOnly: true,
  })
  start_time;
  @attr('date', {
    description: 'The time the Channel finished.',
    readOnly: true,
  })
  end_time;
  @attr({
    description: 'The array of mime types that this recording will support.',
    readOnly: true,
  })
  mime_types;
  @attr('duration', {
    description: 'The duration of this channel recording in ms.',
    readOnly: true,
  })
  duration;
 }
@@ -0,0 +1,66 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import BaseModel from '../../models/base';
 import { attr } from '@ember-data/model';
 /**
 * A connection contains data for a boundary connection within a session.
 */
 export default class GeneratedConnectionRecordingModel extends BaseModel {
  // =attributes
  @attr('string', {
    description:
      'The ID of the Connection which this Connection Recording recorded.',
    readOnly: true,
  })
  connection_id;
  @attr('string', {
    description:
      'The total number of bytes uploaded from the client in this Connection.',
    readOnly: true,
  })
  bytes_up;
  @attr('string', {
    description:
      'The total number of bytes downloaded to the client in this Connection.',
    readOnly: true,
  })
  bytes_down;
  @attr('number', {
    description:
      'The total number of errors that occurred during the use of this Connection.',
    readOnly: true,
  })
  errors_number;
  @attr('date', {
    description: 'The time the Connection started.',
    readOnly: true,
  })
  start_time;
  @attr('date', {
    description: 'The time the Connection finished.',
    readOnly: true,
  })
  end_time;
  @attr({
    description: 'The array of mime types that this recording will support.',
    readOnly: true,
  })
  mime_types;
  @attr('duration', {
    description: 'The duration of this connection recording in ms.',
    readOnly: true,
  })
  duration;
 }
@@ -0,0 +1,142 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import BaseModel from '../../models/base';
 import { attr } from '@ember-data/model';
 /**
 * A credential library is a resource that can generate and retrieve
 * credentials.
 */
 export default class GeneratedCredentialLibraryModel extends BaseModel {
  // =attributes
  @attr('string', {
    description: 'The type of the resource, to help differentiate schemas',
  })
  type;
  @attr('string', {
    description: 'The owning credential store ID.',
  })
  credential_store_id;
  @attr('string', {
    description: 'Optional name for identification purposes',
  })
  name;
  @attr('string', {
    description: 'Optional user-set description for identification purposes',
  })
  description;
  @attr('date', {
    description: 'The time this resource was created\nOutput only.',
    readOnly: true,
  })
  created_time;
  @attr('date', {
    description: 'The time this resource was last updated\nOutput only.',
    readOnly: true,
  })
  updated_time;
  @attr('number', {
    description: 'Current version number of this resource.',
  })
  version;
  //= attributes (vault)
  @attr('string', {
    for: 'vault-generic',
    isNestedAttribute: true,
    description:
      'The HTTP method the library uses when requesting credentials from Vault.',
    defaultValue: () => 'GET',
  })
  http_method;
  @attr('string', {
    for: 'vault-generic',
    isNestedAttribute: true,
    description:
      'The body of the HTTP request the library sends to Vault when requesting credentials. Only valid if `http_method` is set to `POST`.',
  })
  http_request_body;
  @attr('string', {
    isNestedAttribute: true,
    description: 'The path in Vault to request credentials from.',
  })
  path;
  @attr('string', {
    for: 'vault-generic',
    description: 'It indicates the type of credential the library returns.',
  })
  credential_type;
  @attr('object', {
    for: 'vault-generic',
    description: 'It indicates the credential mapping overrides.',
  })
  credential_mapping_overrides;
  @attr('string', {
    for: 'vault-ssh-certificate',
    isNestedAttribute: true,
    description: 'The username to use when making an SSH connection.',
  })
  username;
  @attr('string', {
    for: 'vault-ssh-certificate',
    isNestedAttribute: true,
    description: 'The desired key type to use when generating a private key.',
  })
  key_type;
  @attr('number', {
    for: 'vault-ssh-certificate',
    isNestedAttribute: true,
    description:
      'Specifies the number of bits used when generating the private key. Not used if key type is ed25519',
  })
  key_bits;
  @attr('string', {
    for: 'vault-ssh-certificate',
    isNestedAttribute: true,
    description: 'Specifies the requested time to live for the certificate.',
  })
  ttl;
  @attr('string', {
    for: 'vault-ssh-certificate',
    isNestedAttribute: true,
    description:
      'Specifies the key id that the created certificate should have.',
  })
  key_id;
  @attr('object-as-array', {
    for: 'vault-ssh-certificate',
    isNestedAttribute: true,
    description:
      'Specifies a map of the critical options that the certificate should be signed for.',
  })
  critical_options;
  @attr('object-as-array', {
    for: 'vault-ssh-certificate',
    isNestedAttribute: true,
    description:
      'Specifies a map of the extensions that the certificate should be signed for.',
  })
  extensions;
 }
@@ -0,0 +1,134 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import BaseModel from '../../models/base';
 import { attr } from '@ember-data/model';
 /**
 * A credential store is a resource that can retrieve, store, and potentially
 * generate credentials.
 */
 export default class GeneratedCredentialStoreModel extends BaseModel {
  // =attributes
  @attr('string', {
    description: 'The type of the resource, to help differentiate schemas',
  })
  type;
  @attr('string', {
    description: 'Optional name for identification purposes',
  })
  name;
  @attr('string', {
    description: 'Optional user-set description for identification purposes',
  })
  description;
  @attr('date', {
    description: 'The time this resource was created\nOutput only.',
    readOnly: true,
  })
  created_time;
  @attr('date', {
    description: 'The time this resource was last updated\nOutput only.',
    readOnly: true,
  })
  updated_time;
  @attr('number', {
    description: 'Current version number of this resource.',
  })
  version;
  // =attributes (vault)
  @attr('string', {
    for: 'vault',
    isNestedAttribute: true,
    description:
      "The address to Vault server. This should be a complete URL such as 'https://127.0.0.1:8200'",
  })
  address;
  @attr('string', {
    for: 'vault',
    isNestedAttribute: true,
    description: 'The namespace within Vault to use.',
  })
  namespace;
  @attr('string', {
    for: 'vault',
    isNestedAttribute: true,
    description:
      "A PEM-encoded CA certificate to verify the Vault server's TLS certificate.",
  })
  ca_cert;
  @attr('string', {
    for: 'vault',
    isNestedAttribute: true,
    description:
      'Name to use as the SNI host when connecting to Vault via TLS.',
  })
  tls_server_name;
  @attr('boolean', {
    for: 'vault',
    isNestedAttribute: true,
    description: 'Whether or not to skip TLS verification.',
  })
  tls_skip_verify;
  @attr('string', {
    for: 'vault',
    isNestedAttribute: true,
    isSecret: true,
    description: 'A token used for accessing Vault.',
  })
  token;
  @attr('string', {
    for: 'vault',
    isNestedAttribute: true,
    description: 'The Vault token hmac.',
    readOnly: true,
  })
  token_hmac;
  @attr('string', {
    for: 'vault',
    isNestedAttribute: true,
    description:
      'A PEM-encoded client certificate to use for TLS authentication to the Vault server.',
  })
  client_certificate;
  @attr('string', {
    for: 'vault',
    isNestedAttribute: true,
    description:
      "A PEM-encoded private key matching the client certificate from 'client_certificate'.",
  })
  client_certificate_key;
  @attr('string', {
    for: 'vault',
    isNestedAttribute: true,
    description: 'The Vault client certificate key hmac.',
    readOnly: true,
  })
  client_certificate_key_hmac;
  @attr('string', {
    for: 'vault',
    isNestedAttribute: true,
    description:
      'Filters to the worker(s) who can handle Vault requests for this cred store.',
  })
  worker_filter;
 }
@@ -0,0 +1,95 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import BaseModel from '../../models/base';
 import { attr } from '@ember-data/model';
 /**
 * A credential is a data structure containing one or more secrets that binds an
 * identity to a set of permissions or capabilities on a host for a session.
 */
 export default class GeneratedCredentialModel extends BaseModel {
  // =attributes
  @attr('string', {
    description:
      'The ID of the Credential Store of which this Credential is a part.',
  })
  credential_store_id;
  @attr('string', {
    description: 'The type of the resource, to help differentiate schemas',
  })
  type;
  @attr('string', {
    description: 'Optional name for identification purposes',
  })
  name;
  @attr('string', {
    description: 'Optional user-set description for identification purposes',
  })
  description;
  @attr('date', {
    description: 'The time this resource was created\nOutput only.',
    readOnly: true,
  })
  created_time;
  @attr('date', {
    description: 'The time this resource was last updated\nOutput only.',
    readOnly: true,
  })
  updated_time;
  @attr('number', {
    description: 'Current version number of this resource.',
  })
  version;
  // =attributes (username_password, ssh_private_key)
  @attr('string', {
    for: ['username_password', 'ssh_private_key'],
    isNestedAttribute: true,
    description: 'The username for credential.',
  })
  username;
  // =attributes (username_password)
  @attr('string', {
    for: 'username_password',
    isNestedAttribute: true,
    isSecret: true,
    description: 'The password for credential.',
  })
  password;
  // =attributes (ssh_private_key)
  @attr('string', {
    for: 'ssh_private_key',
    isNestedAttribute: true,
    isSecret: true,
    description: 'The private key for credential.',
  })
  private_key;
  @attr('string', {
    for: 'ssh_private_key',
    isNestedAttribute: true,
    isSecret: true,
    description: 'The private key passphrase for credential.',
  })
  private_key_passphrase;
  @attr('string', {
    for: 'json',
    isNestedAttribute: true,
    isSecret: true,
    description: 'The secret associated with credential.',
  })
  json_object;
 }
@@ -1,3 +1,8 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import BaseModel from '../../models/base';
 import { attr } from '@ember-data/model';
@@ -1,3 +1,8 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import BaseModel from '../../models/base';
 import { attr } from '@ember-data/model';
@@ -39,13 +44,74 @@ export default class GeneratedHostCatalogModel extends BaseModel {
  })
  disabled;
  @attr({
    description: 'Attributes specific to the catalog type',
  })
  attributes;
  @attr('number', {
    description: 'Current version number of this resource.',
  })
  version;
  @attr({
    description: 'Plugin information for this resource.',
    readOnly: true,
  })
  plugin;
  // AWS & Azure
  @attr('boolean', {
    isNestedAttribute: true,
    description: '',
  })
  disable_credential_rotation;
  // AWS specific
  @attr('string', {
    isNestedAttribute: true,
    description: '',
  })
  region;
  @attr('string', {
    isNestedSecret: true,
    description: '',
  })
  access_key_id;
  @attr('string', {
    isNestedSecret: true,
    description: '',
  })
  secret_access_key;
  // Azure specific
  @attr('string', {
    isNestedAttribute: true,
    description: '',
  })
  tenant_id;
  @attr('string', {
    isNestedAttribute: true,
    description: '',
  })
  client_id;
  @attr('string', {
    isNestedAttribute: true,
    description: '',
  })
  subscription_id;
  @attr('string', {
    isNestedSecret: true,
    description: '',
  })
  secret_id;
  @attr('string', {
    isNestedSecret: true,
    description: '',
  })
  secret_value;
 }
@@ -1,3 +1,8 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import BaseModel from '../../models/base';
 import { attr } from '@ember-data/model';
@@ -50,4 +55,45 @@ export default class GeneratedHostSetModel extends BaseModel {
    readOnly: true,
  })
  size;
  @attr({
    description: 'Plugin information for this resource',
    readOnly: true,
  })
  plugin;
  @attr('number', {
    description:
      "The number of seconds between the time boundary syncs the hosts in this set using this host set's plugin. If not provided a system determined default is used",
  })
  sync_interval_seconds;
  /**
   * Host IDs are read-only under normal circumstances.  But these can
   * be persisted via a dedicated call to `addHosts()`.
   */
  @attr({
    readOnly: true,
    emptyArrayIfMissing: true,
  })
  host_ids;
  @attr('string-array', {
    emptyArrayIfMissing: true,
  })
  preferred_endpoints;
  // AWS specific
  @attr('string-array', {
    isNestedAttribute: true,
    emptyArrayIfMissing: true,
  })
  filters;
  // Azure specific, comes in from API as "filter". This is to avoid collisions with filter
  @attr('string', {
    description: '',
    isNestedAttribute: true,
  })
  filter_string;
 }
@@ -1,3 +1,8 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import BaseModel from '../../models/base';
 import { attr } from '@ember-data/model';
@@ -43,4 +48,16 @@ export default class GeneratedHostModel extends BaseModel {
    description: 'Current version number of this resource.',
  })
  version;
  @attr({
    description: 'Plugin information for this resource.',
    readOnly: true,
  })
  plugin;
  @attr({
    emptyArrayIfMissing: true,
    readOnly: true,
  })
  host_set_ids;
 }
@@ -0,0 +1,71 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import BaseModel from '../../models/base';
 import { attr } from '@ember-data/model';
 /**
 * A managed group is a resource that represents a collection of accounts.
 */
 export default class GeneratedManagedGroupModel extends BaseModel {
  // =attributes
  @attr('string', {
    description: 'Optional name for identification purposes.',
  })
  name;
  @attr('string', {
    description: 'Optional user-set description for identification purposes.',
  })
  description;
  @attr('date', {
    description: 'The time this resource was created',
    readOnly: true,
  })
  created_time;
  @attr('date', {
    description: 'The time this resource was last updated.',
    readOnly: true,
  })
  updated_time;
  @attr('number', {
    description: 'Current version number of this resource.',
  })
  version;
  @attr('string', {
    description: 'The type of this ManagedGroup.',
  })
  type;
  @attr('string', {
    description:
      'The ID of the Auth Method that is associated with this ManagedGroup',
  })
  auth_method_id;
  // =attributes (OIDC)
  @attr('string', {
    for: 'oidc',
    isNestedAttribute: true,
    description:
      'The boolean expression filter to use to determine membership. Comes in from API as "filter".',
  })
  filter_string;
  // =attributes (LDAP)
  @attr('string-array', {
    for: 'ldap',
    isNestedAttribute: true,
    description: 'The list of groups that make up the ManagedGroup',
  })
  group_names;
 }
@@ -0,0 +1,61 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import BaseModel from '../../models/base';
 import { attr } from '@ember-data/model';
 /**
 * Storage Policy is a resource that manages the lifecycle of Session Recordings,
 * particularly to meet compliance frameworks.
 */
 export default class GeneratedPolicyModel extends BaseModel {
  // =attributes
  @attr('string', {
    description: 'The type of the resource, to help differentiate schemas',
  })
  type;
  @attr('string', {
    description: 'Optional name for identification purposes.',
  })
  name;
  @attr('string', {
    description: 'Optional user-set description for identification purposes.',
  })
  description;
  @attr('date', {
    description: 'The time this resource was created\nOutput only.',
    readOnly: true,
  })
  created_time;
  @attr('date', {
    description: 'The time this resource was last updated\nOutput only.',
    readOnly: true,
  })
  updated_time;
  @attr('number', {
    description: 'Current version number of this resource.',
  })
  version;
  @attr('object', {
    isNestedAttribute: true,
    description:
      'Days is the number of days for which a session recording will be retained.',
  })
  retain_for;
  @attr('object', {
    isNestedAttribute: true,
    description:
      'Days is the number of days for which a session recording will be automatically deleted.',
  })
  delete_after;
 }
@@ -1,3 +1,8 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import BaseModel from '../../models/base';
 import { attr } from '@ember-data/model';
@@ -1,3 +1,8 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import BaseModel from '../../models/base';
 import { attr } from '@ember-data/model';
@@ -44,4 +49,9 @@ export default class GeneratedScopeModel extends BaseModel {
    description: 'Current version number of this resource.',
  })
  version;
  @attr('string', {
    description: 'The ID of the associated storage policy',
  })
  storage_policy_id;
 }
@@ -0,0 +1,125 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import BaseModel from '../../models/base';
 import { attr } from '@ember-data/model';
 /**
 * A session recording contains all data related to session recordings
 */
 export default class GeneratedSessionRecordingModel extends BaseModel {
  // =attributes
  @attr('string', {
    description: 'The type of the resource, to help differentiate schemas.',
    readOnly: true,
  })
  type;
  @attr('date', {
    description:
      'The time the Session Recording was created in the controller.',
    readOnly: true,
  })
  created_time;
  @attr('date', {
    description: 'The time of the most recent update to the Session Recording.',
    readOnly: true,
  })
  updated_time;
  @attr({
    description:
      'Contains the values of related fields at the time this Session Recording was created',
    readOnly: true,
  })
  create_time_values;
  @attr('string', {
    description: 'The ID of the Session which this Session Recording recorded.',
    readOnly: true,
  })
  session_id;
  @attr('string', {
    description:
      'The ID of the Storage Bucket for the Target of this Session Recording',
    readOnly: true,
  })
  storage_bucket_id;
  @attr('string', {
    description:
      'The total number of bytes uploaded from the client in the Session.',
    readOnly: true,
  })
  bytes_up;
  @attr('string', {
    description:
      'The total number of bytes downloaded to the client in the Session.',
    readOnly: true,
  })
  bytes_down;
  @attr('number', {
    description:
      'The total number of errors that occurred during the use of the Session.',
    readOnly: true,
  })
  errors_number;
  @attr('date', {
    description: 'The time the Session started.',
    readOnly: true,
  })
  start_time;
  @attr('date', {
    description: 'The time the Session finished.',
    readOnly: true,
  })
  end_time;
  @attr({
    description: 'The array of mime types that this recording will support.',
    readOnly: true,
  })
  mime_types;
  @attr('duration', {
    description: 'The duration of this session recording in ms.',
    readOnly: true,
  })
  duration;
  @attr('string', {
    description:
      'The current state of the session recording. One of "started", "available" and "unknown".',
    readOnly: true,
  })
  state;
  @attr('string', {
    description:
      'Any error seen during the closing of the session recording. Currently only set if state is "unknown".',
    readOnly: true,
  })
  error_details;
  @attr('date', {
    description: 'The time until a session recording is required to be stored.',
    readOnly: true,
  })
  retain_until;
  @attr('date', {
    description:
      'The time a session recording is scheduled to be automatically deleted.',
    readOnly: true,
  })
  delete_after;
 }
@@ -1,3 +1,8 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import BaseModel from '../../models/base';
 import { attr } from '@ember-data/model';
@@ -27,6 +32,13 @@ export default class GeneratedSessionModel extends BaseModel {
  })
  updated_time;
  @attr('date', {
    description:
      'After this time the connection will be expired, e.g. forcefully terminated.\nOutput only.',
    readOnly: true,
  })
  expiration_time;
  @attr('number', {
    description: 'Current version number of this resource.',
  })
@@ -0,0 +1,126 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import BaseModel from '../../models/base';
 import { attr } from '@ember-data/model';
 /**
 * A storage bucket is a resource that that represents a bucket in an external object store.
 */
 export default class GeneratedStorageBucketModel extends BaseModel {
  // =attributes
  @attr('string', {
    description: 'The type of the resource, to help differentiate schemas',
  })
  type;
  @attr({
    description: 'Plugin information for this resource.',
    readOnly: true,
  })
  plugin;
  @attr('string', {
    description: 'Optional name for identification purposes.',
  })
  name;
  @attr('string', {
    description: 'Optional user-set description for identification purposes.',
  })
  description;
  @attr('date', {
    description: 'The time this resource was created\nOutput only.',
    readOnly: true,
  })
  created_time;
  @attr('date', {
    description: 'The time this resource was last updated\nOutput only.',
    readOnly: true,
  })
  updated_time;
  @attr('number', {
    description: 'Current version number of this resource.',
  })
  version;
  @attr('string', {
    description: 'The name of the bucket in the external object store.',
  })
  bucket_name;
  @attr('string', {
    description:
      'The base path where session recordings will be stored in the external object store.',
  })
  bucket_prefix;
  @attr('string', {
    description:
      'An expression used to filter the workers that have network access to a service that is hosting the external object store.',
  })
  worker_filter;
  @attr('string', {
    isNestedAttribute: true,
    description: 'The AWS region to use.',
  })
  region;
  //this field is not used in the UI, but this is kept here to replicate the API
  @attr('string', {
    readOnly: true,
    isNestedAttribute: true,
  })
  secrets_hmac;
  @attr('boolean', {
    isNestedAttribute: true,
    description: 'If set to `true`, credential rotation is not performed.',
  })
  disable_credential_rotation;
  // =attributes (static credentials)
  @attr('string', {
    isNestedSecret: true,
    description: 'The AWS access key ID to use.',
  })
  access_key_id;
  @attr('string', {
    isNestedSecret: true,
    description: 'The secret access key to use.',
  })
  secret_access_key;
  // =attributes (dynamic credentials)
  @attr('string', {
    isNestedAttribute: true,
    description: 'The role ARN to use.',
  })
  role_arn;
  @attr('string', {
    isNestedAttribute: true,
    description: 'The role external ID to use.',
  })
  role_external_id;
  @attr('string', {
    isNestedAttribute: true,
    description: 'The role session to use.',
  })
  role_session_name;
  @attr('object-as-array', {
    isNestedAttribute: true,
    description: 'The role tags to use.',
  })
  role_tags;
 }
@@ -1,3 +1,8 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import BaseModel from '../../models/base';
 import { attr } from '@ember-data/model';
@@ -30,10 +35,27 @@ export default class GeneratedTargetModel extends BaseModel {
  @attr('number', {
    description: '',
    defaultValue: 1,
  })
  session_connection_limit;
  @attr('string', {
    description:
      'Optional boolean expression to filter the workers that are allowed to satisfy this request.',
  })
  worker_filter;
  @attr('string', {
    description:
      'Optional boolean expressions to filter the egress workers that are allowed to satisfy this request.',
  })
  egress_worker_filter;
  @attr('string', {
    description:
      'Optional boolean expressions to filter the ingress workers that are allowed to satisfy this request.',
  })
  ingress_worker_filter;
  @attr('date', {
    description: 'The time this resource was created\nOutput only.',
    readOnly: true,
@@ -55,4 +77,35 @@ export default class GeneratedTargetModel extends BaseModel {
    description: 'Current version number of this resource.',
  })
  version;
  @attr('string', {
    description:
      'An IP address or DNS name for the session to connect to. Cannot be used in conjunction with host sources.',
  })
  address;
  @attr('number', {
    isNestedAttribute: true,
    description: 'The default port a target should use if present.',
  })
  default_port;
  @attr('number', {
    isNestedAttribute: true,
    description:
      "The default port that will be listened on by the client's local proxy.",
  })
  default_client_port;
  @attr('string', {
    description: 'The storage bucket associated with this target.',
    isNestedAttribute: true,
  })
  storage_bucket_id;
  @attr('boolean', {
    description: 'Whether session recording is enabled on the target.',
    isNestedAttribute: true,
  })
  enable_session_recording;
 }
@@ -1,3 +1,8 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import BaseModel from '../../models/base';
 import { attr } from '@ember-data/model';
@@ -0,0 +1,75 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import BaseModel from '../../models/base';
 import { attr } from '@ember-data/model';
 /**
 * Worker contains all fields related to a worker resource
 */
 export default class GeneratedWorkerModel extends BaseModel {
  // =attributes
  @attr('string', {
    description: 'Optional name for identification purposes.',
  })
  name;
  @attr('string', {
    description: 'Optional user-set description for identification purposes.',
  })
  description;
  @attr('date', {
    description: 'The time this resource was created\nOutput only.',
    readOnly: true,
  })
  created_time;
  @attr('date', {
    description: 'The time this resource was last updated\nOutput only.',
    readOnly: true,
  })
  updated_time;
  @attr('number', {
    description: 'Current version number of this resource.',
  })
  version;
  @attr('string', {
    description: 'The address that this worker is reachable at.\nOutput only.',
    readOnly: true,
  })
  address;
  @attr('date', {
    description:
      'The time this worker was last reported its status.\nOutput only.',
    readOnly: true,
  })
  last_status_time;
  @attr('string', {
    description:
      'The version of the Boundary binary the worker is running.\nOutput only.',
    readOnly: true,
  })
  release_version;
  @attr('number', {
    description:
      'The number of connections that this worker is currently handling.\nOutput only.',
    readOnly: true,
  })
  active_connection_count;
  @attr('string', {
    description:
      'The type of the worker, denoted by how it authenticates: pki or kms.\nOutput only.',
    readOnly: true,
  })
  type;
 }
@@ -0,0 +1,181 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import { inject as service } from '@ember/service';
 import { getOwner, setOwner } from '@ember/application';
 import { pluralize } from 'ember-inflector';
 import { generateMQLExpression } from '../utils/mql-query';
 /**
 * Not all types are yet supported by the client daemon so we'll
 * just whitelist the ones we need to start with. Keys are the resource
 * types and the values are the fields that are searchable by the client.
 * @type {{session: string[], target: string[]}}
 */
 const supportedTypes = {
  target: ['id', 'name', 'description', 'address', 'scope_id'],
  session: ['id', 'type', 'status', 'endpoint', 'scope_id', 'target_id'],
 };
 /**
 * Takes an array and the current page and pagesize to calculate the correct
 * number of results to return to the caller.
 *
 * @param array
 * @param page
 * @param pageSize
 * @returns {[*]}
 */
 const paginateResults = (array, page, pageSize) => {
  const length = array?.length;
  if (!array || length === 0) {
    return [];
  }
  if (!page || !pageSize) {
    return array;
  }
  const offset = (page - 1) * pageSize;
  const start = Math.min(length - 1, offset);
  const end = Math.min(length, offset + pageSize);
  return array.slice(start, end);
 };
 const fetchControllerData = async (context, next) => {
  const { data } = context.request;
  const { query: originalQuery } = data;
  // remove client daemon specific query params
  // eslint-disable-next-line no-unused-vars
  const { query, page, pageSize, ...remainingQuery } = originalQuery;
  // If we get an error or client daemon is unavailable, fall back to calling the API
  context.request.data.query = remainingQuery;
  const results = await next(context.request);
  const models = results.content.toArray();
  const paginatedResult = paginateResults(models, page, pageSize);
  paginatedResult.meta = { totalItems: models.length };
  return paginatedResult;
 };
 /**
 * Handler to sit in front of the API request layer
 * so we can request from the daemon first
 */
 export default class ClientDaemonHandler {
  @service session;
  @service ipc;
  constructor(context) {
    setOwner(this, getOwner(context));
  }
  async request(context, next) {
    switch (context.request.op) {
      case 'query': {
        const { store, data } = context.request;
        const { type, query, options: { pushToStore = true } = {} } = data;
        const isClientDaemonRunning = await this.ipc.invoke(
          'isClientDaemonRunning',
        );
        // eslint-disable-next-line no-unused-vars
        let { recursive, scope_id, page, pageSize, ...remainingQuery } = query;
        let searchQuery = '';
        if (
          !Object.keys(supportedTypes).includes(type) ||
          !isClientDaemonRunning
        ) {
          return fetchControllerData(context, next);
        }
        if (remainingQuery.query) {
          const { search, filters } = remainingQuery.query;
          searchQuery = generateMQLExpression({
            search: {
              text: search,
              fields: supportedTypes[type],
            },
            filters,
          });
        }
        const sessionData = this.session.data?.authenticated;
        const auth_token_id = sessionData?.id;
        const token = sessionData?.token;
        remainingQuery = {
          ...remainingQuery,
          query: searchQuery,
          auth_token_id,
          token,
          resource: pluralize(type),
        };
        let clientDaemonResults = {};
        try {
          clientDaemonResults = await this.ipc.invoke(
            'searchClientDaemon',
            remainingQuery,
          );
        } catch (e) {
          // If we got a 403, most likely the client daemon was restarted and our token is no longer valid
          // I'm not sure if we can get a 401 since we always send a token but we'll handle it in the same way
          if (e.statusCode === 403 || e.statusCode === 401) {
            try {
              await this.ipc.invoke('addTokenToClientDaemon', {
                tokenId: auth_token_id,
                token,
              });
              clientDaemonResults = await this.ipc.invoke(
                'searchClientDaemon',
                remainingQuery,
              );
            } catch {
              // If it fails again just fall back to fetching controller data
            }
          }
          return fetchControllerData(context, next);
        }
        // Currently returns with a singular top level field with resource name
        // e.g. { targets: [...] } or { sessions: [..] }
        // So this just unwraps to the array, or undefined
        const [results] = Object.values(clientDaemonResults);
        const payload = { items: paginateResults(results, page, pageSize) };
        const schema = store.modelFor(type);
        const serializer = store.serializerFor(type);
        const normalizedPayload = serializer.normalizeResponse(
          store,
          schema,
          payload,
          null,
          'query',
        );
        // Return the raw data if we don't push to the store.
        let records = normalizedPayload.data.map((record) => ({
          ...record.attributes,
          id: record.id,
        }));
        if (pushToStore) {
          records = store.push(normalizedPayload);
        }
        // Set a meta property on the array to store the total items of the results.
        // This isn't conventional but is better than returning an ArrayProxy
        // or EmberArray since the ember store query method asserts it has to be an array
        // so we can't just return an object.
        records.meta = { totalItems: results?.length ?? 0 };
        return records;
      }
      default:
        return next(context.request);
    }
  }
 }
@@ -1,15 +0,0 @@
 // app/initializers/fragment-serializer.js
 import FragmentAuthMethodAttributesAccountClaimMapSerializer from '../serializers/fragment-auth-method-attributes-account-claim-map';
 export function initialize(application) {
  application.register(
    'serializer:fragment-auth-method-attributes-account-claim-map',
    FragmentAuthMethodAttributesAccountClaimMapSerializer
  );
 }
 // Fragment serializers must be manually registered
 export default {
  name: 'fragment-auth-method-attributes-account-claim-map',
  initialize: initialize,
 };
@@ -1,12 +0,0 @@
 // app/initializers/fragment-serializer.js
 import FragmentStringSerializer from '../serializers/fragment-string';
 export function initialize(application) {
  application.register('serializer:fragment-string', FragmentStringSerializer);
 }
 // Fragment serializers must be manually registered
 export default {
  name: 'fragment-string',
  initialize: initialize,
 };
@@ -1,3 +1,8 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import Mixin from '@ember/object/mixin';
 /**
@@ -1,34 +1,53 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import GeneratedAccountModel from '../generated/models/account';
-import { fragment } from 'ember-data-model-fragments/attributes';
+import {
-import { computed } from '@ember/object';
+  TYPE_AUTH_METHOD_PASSWORD,
-import { equal } from '@ember/object/computed';
+  TYPE_AUTH_METHOD_OIDC,
  TYPE_AUTH_METHOD_LDAP,
  TYPES_AUTH_METHOD,
 } from './auth-method';
 export default class AccountModel extends GeneratedAccountModel {
  // =attributes
  /**
-   * Attributes of this resource, if any, represented as a JSON fragment.
+   * @type {boolean}
   * @type {FragmentAccountAttributesModel}
   */
-  @fragment('fragment-account-attributes', { defaultValue: {} }) attributes;
+  get isPassword() {
    return this.type === TYPE_AUTH_METHOD_PASSWORD;
  }
  /**
   * @type {boolean}
   */
-  @equal('type', 'password') isPassword;
+  get isOIDC() {
    return this.type === TYPE_AUTH_METHOD_OIDC;
  }
  /**
   * @type {boolean}
   */
-  @equal('type', 'oidc') isOIDC;
+  get isLDAP() {
    return this.type === TYPE_AUTH_METHOD_LDAP;
  }
  /**
   * @type {boolean}
   */
  get isUnknown() {
    return !TYPES_AUTH_METHOD.includes(this.type);
  }
  /**
   * Convenience for getting username in account.
   * @type {string}
   */
  @computed('attributes.{email,full_name,login_name}')
  get accountName() {
-    const { email, full_name, login_name } = this.attributes;
+    const { email, full_name, login_name } = this;
    return email || full_name || login_name;
  }
@@ -68,7 +87,7 @@ export default class AccountModel extends GeneratedAccountModel {
  changePassword(
    currentPassword,
    newPassword,
-    options = { adapterOptions: {} }
+    options = { adapterOptions: {} },
  ) {
    const defaultAdapterOptions = {
      method: 'change-password',
@@ -0,0 +1,10 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import GeneratedAliasModel from '../generated/models/alias';
 export const TYPE_ALIAS_TARGET = 'target';
 export const TYPES_ALIAS = Object.freeze([TYPE_ALIAS_TARGET]);
 export default class AliasModel extends GeneratedAliasModel {}
@@ -1,12 +1,26 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import GeneratedAuthMethodModel from '../generated/models/auth-method';
 import { attr } from '@ember-data/model';
 import { fragment } from 'ember-data-model-fragments/attributes';
 import { equal } from '@ember/object/computed';
 export const TYPE_AUTH_METHOD_PASSWORD = 'password';
 export const TYPE_AUTH_METHOD_OIDC = 'oidc';
 export const TYPE_AUTH_METHOD_LDAP = 'ldap';
 export const TYPES_AUTH_METHOD = Object.freeze([
  TYPE_AUTH_METHOD_PASSWORD,
  TYPE_AUTH_METHOD_OIDC,
  TYPE_AUTH_METHOD_LDAP,
 ]);
 /**
 * Enum options per auth method type and field.
 */
 export const options = {
  state: ['inactive', 'active-private', 'active-public'],
  oidc: {
    signing_algorithms: [
      'RS256',
@@ -20,88 +34,89 @@ export const options = {
      'PS512',
      'EdDSA',
    ],
    state: ['inactive', 'active-private', 'active-public'],
    account_claim_maps: {
      to: ['sub', 'name', 'email'],
    },
    prompts: ['consent', 'select_account', 'login'],
  },
  ldap: {
    account_attribute_maps: {
      to: ['fullName', 'email'],
    },
    dereference_aliases: {
      NeverDerefAliases: 'never',
      DerefInSearching: 'searching',
      DerefFindingBaseObj: 'finding',
      DerefAlways: 'always',
    },
  },
 };
 export default class AuthMethodModel extends GeneratedAuthMethodModel {
  // =error attributes
  // These attributes exist solely to capture errors on nested fields.
  // See the application adapter's error normalization method for
  // more information.
  @attr('string', { readOnly: true }) attributes_state;
  @attr('string', { readOnly: true }) attributes_issuer;
  @attr('string', { readOnly: true }) attributes_client_id;
  @attr('string', { readOnly: true }) attributes_client_secret;
  @attr('string', { readOnly: true }) attributes_max_age;
  @attr('string', { readOnly: true }) attributes_api_url_prefix;
  @attr('string', { readOnly: true })
  attributes_disable_discovered_config_validation;
  @attr('string', { readOnly: true }) attributes_dry_run;
  @attr('string', { readOnly: true }) attributes_account_claim_maps;
  @attr('string', { readOnly: true }) attributes_claims_scopes;
  @attr('string', { readOnly: true }) attributes_signing_algorithms;
  @attr('string', { readOnly: true }) attributes_allowed_audiences;
  @attr('string', { readOnly: true }) attributes_idp_ca_certs;
  // =attributes
  /**
   * Attributes of this resource, if any, represented as a JSON fragment.
   * @type {FragmentAuthMethodAttributesModel}
   */
  @fragment('fragment-auth-method-attributes', { defaultValue: {} }) attributes;
  /**
   * @type {boolean}
   */
  @equal('is_primary', true) isPrimary;
  options = options;
  /**
   * @type {boolean}
   */
  get isPassword() {
-    return this.type === 'password';
+    return this.type === TYPE_AUTH_METHOD_PASSWORD;
  }
  /**
   * @type {boolean}
   */
  get isOIDC() {
-    return this.type === 'oidc';
+    return this.type === TYPE_AUTH_METHOD_OIDC;
  }
  /**
   * @type {boolean}
   */
  get isLDAP() {
    return this.type === TYPE_AUTH_METHOD_LDAP;
  }
  /**
   * @type {boolean}
   */
  get isUnknown() {
    return !TYPES_AUTH_METHOD.includes(this.type);
  }
  /**
   * @type {boolean}
   */
  get isInactive() {
-    return this.attributes.state === 'inactive';
+    return this.state === 'inactive';
  }
  /**
   * @type {boolean}
   */
  get isPrivate() {
-    return this.attributes.state === 'active-private';
+    return this.state === 'active-private';
  }
  /**
   * @type {boolean}
   */
  get isPublic() {
-    return this.attributes.state === 'active-public';
+    return this.state === 'active-public';
  }
  // =methods
  /**
-   * Change the active and visibility state of an OIDC auth method
+   * Change the active and visibility state of an OIDC and LDAP auth method
   * given its ID.
-   * For OIDC auth methods only.
+   * For OIDC and LDAP auth methods only.
   * @param {[string]} state
   * @param {object} options
   * @param {object} options.adapterOptions
@@ -109,9 +124,11 @@ export default class AuthMethodModel extends GeneratedAuthMethodModel {
   */
  changeState(state, options = { adapterOptions: {} }) {
    const defaultAdapterOptions = {
      method: 'change-state',
      state,
    };
    if (this.isOIDC) {
      defaultAdapterOptions.method = 'change-state';
    }
    return this.save({
      ...options,
      adapterOptions: {
@@ -1,3 +1,8 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import GeneratedAuthTokenModel from '../generated/models/auth-token';
 export default class AuthTokenModel extends GeneratedAuthTokenModel {}
@@ -1,6 +1,12 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import Model from '@ember-data/model';
-import { fragment } from 'ember-data-model-fragments/attributes';
+import { attr } from '@ember-data/model';
 import { computed } from '@ember/object';
 import { inject as service } from '@ember/service';
 /**
 * Base model class provides common functionality for all models.
@@ -25,27 +31,53 @@ import { computed } from '@ember/object';
 *   2) Or as an ID:  `record.scopeID`.
 */
 export default class BaseModel extends Model {
  // =services
  @service store;
  // =relationships
  /**
   * Scope of this resource, if any, represented as a JSON fragment.
   * @type {FragmentScope}
   */
-  @fragment('fragment-scope') scope;
+  @attr() scope;
  // =attributes
  @attr({
    readOnly: true,
    emptyArrayIfMissing: true,
  })
  authorized_actions;
  @attr({
    readOnly: true,
  })
  authorized_collection_actions;
  get scopeModel() {
    const id = this.scopeID;
    return id ? this.store.peekRecord('scope', id) : null;
  }
  // Ember seems to have a bug with its internals and can't correctly set
  // the `scopeModel` when passed in as part of the `inputProperties`
  // of a `createRecord` call
  set scopeModel(model) {
    if (model) {
      const json = model.serialize();
      json.scope_id = model.id;
      json.type = model.type;
      json.isGlobal = model.isGlobal;
      json.isOrg = model.isOrg;
      json.isProject = model.isProject;
      this.scope = json;
    }
  }
  /**
   * Convenience for getting and setting the parent scope ID.
-   * @type {string
+   * @type {string}
   */
  @computed('scope.scope_id')
  get scopeID() {
@@ -69,7 +101,6 @@ export default class BaseModel extends Model {
  /**
   * @type {boolean}
   */
  @computed('hasDirtyAttributes', 'isSaving')
  get canSave() {
    return this.hasDirtyAttributes && !this.isSaving;
  }
@@ -77,7 +108,6 @@ export default class BaseModel extends Model {
  /**
   * @type {boolean}
   */
  @computed('canSave')
  get cannotSave() {
    return !this.canSave;
  }
@@ -0,0 +1,34 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import GeneratedChannelRecordingModel from '../generated/models/channel-recording';
 import { belongsTo } from '@ember-data/model';
 export const MIME_TYPE_ASCIICAST = 'application/x-asciicast';
 export default class ChannelRecordingModel extends GeneratedChannelRecordingModel {
  @belongsTo('connection-recording', {
    async: false,
    inverse: 'channel_recordings',
  })
  connection_recording;
  /**
   * True if the channel supports asciicast.
   * @type {boolean}
   */
  get isAsciicast() {
    return this.mime_types?.includes(MIME_TYPE_ASCIICAST) ?? false;
  }
  /**
   * Download the ascii cast recording for this channel.
   * @returns {Promise<string>}
   */
  getAsciicast() {
    const adapter = this.store.adapterFor('session-recording');
    return adapter.getAsciicast(this.id);
  }
 }
@@ -0,0 +1,20 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import GeneratedConnectionRecordingModel from '../generated/models/connection-recording';
 import { belongsTo, hasMany } from '@ember-data/model';
 export default class ConnectionRecordingModel extends GeneratedConnectionRecordingModel {
  @belongsTo('session-recording', {
    async: false,
    inverse: 'connection_recordings',
  })
  session_recording;
  @hasMany('channel-recording', {
    async: false,
    inverse: 'connection_recording',
  })
  channel_recordings;
 }
@@ -0,0 +1,77 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import GeneratedCredentialLibraryModel from '../generated/models/credential-library';
 /**
 * Enum options for credential library.
 */
 export const options = {
  http_method: ['GET', 'POST'],
  key_type: ['ed25519', 'ecdsa', 'rsa'],
  credential_types: ['ssh_private_key', 'username_password'],
  mapping_overrides: {
    username_password: {
      username_attribute: 'Username',
      password_attribute: 'Password',
    },
    ssh_private_key: {
      private_key_attribute: 'Private Key',
      private_key_passphrase_attribute: 'Private Key Passphrase',
      username_attribute: 'Username',
    },
  },
 };
 export const TYPE_CREDENTIAL_LIBRARY_VAULT_GENERIC = 'vault-generic';
 export const TYPE_CREDENTIAL_LIBRARY_VAULT_SSH_CERTIFICATE =
  'vault-ssh-certificate';
 /**
 * Supported Credential Library types.
 */
 export const TYPES_CREDENTIAL_LIBRARY = Object.freeze([
  TYPE_CREDENTIAL_LIBRARY_VAULT_GENERIC,
  TYPE_CREDENTIAL_LIBRARY_VAULT_SSH_CERTIFICATE,
 ]);
 export default class CredentialLibraryModel extends GeneratedCredentialLibraryModel {
  // =attributes
  /**
   * True if credential is an unknown type.
   * @type {boolean}
   */
  get isUnknown() {
    return !TYPES_CREDENTIAL_LIBRARY.includes(this.type);
  }
  /**
   * True if credential is a vault type.
   * @type {boolean}
   */
  get isVault() {
    return (
      this.type === TYPE_CREDENTIAL_LIBRARY_VAULT_GENERIC ||
      this.type === TYPE_CREDENTIAL_LIBRARY_VAULT_SSH_CERTIFICATE
    );
  }
  /**
   * True if credential is a generic vault type.
   * @type {boolean}
   */
  get isVaultGeneric() {
    return this.type === TYPE_CREDENTIAL_LIBRARY_VAULT_GENERIC;
  }
  /**
   * True if credential is a vault ssh cert type.
   * @type {boolean}
   */
  get isVaultSSHCertificate() {
    return this.type === TYPE_CREDENTIAL_LIBRARY_VAULT_SSH_CERTIFICATE;
  }
 }
@@ -0,0 +1,23 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import GeneratedCredentialStoreModel from '../generated/models/credential-store';
 import { equal } from '@ember/object/computed';
 export const types = ['static', 'vault'];
 export default class CredentialStoreModel extends GeneratedCredentialStoreModel {
  // =attributes
  /**
   * @type {boolean}
   */
  @equal('type', 'vault') isVault;
  /**
   * @type {boolean}
   */
  @equal('type', 'static') isStatic;
 }
@@ -0,0 +1,41 @@
 /**
 * Copyright (c) HashiCorp, Inc.
 * SPDX-License-Identifier: MPL-2.0
 */
 import GeneratedCredentialModel from '../generated/models/credential';
 /**
 * Supported Credential types.
 */
 export const types = ['username_password', 'ssh_private_key', 'json'];
 export default class CredentialModel extends GeneratedCredentialModel {
  // =attributes
  /**
   * All Credentials are prefixed with "cred" and are considered
   * static due to their relation with Static Credential Stores.
   *
   * True if credential starts with the "cred" prefix.
   * @type {boolean}
   */
  get isStatic() {
    return this.id.startsWith('cred');
  }
  /**
   * True if type is `json`.
   * @type {boolean}
   */
  get isJSON() {
    return this.type === 'json';
  }
  /**
   * True if credential is an unknown type.
   * @type {boolean}
   */
  get isUnknown() {
    return !types.includes(this.type);
  }
 }
@@ -1,17 +0,0 @@
 import Fragment from 'ember-data-model-fragments/fragment';
 import { attr } from '@ember-data/model';
 export default class FragmentAccountAttributesModel extends Fragment {
  // =attributes (password)
  @attr('string', {
    for: 'password',
    description: 'The account login name',
  })
  login_name;
  // =attributes (OIDC)
  @attr('string', { for: 'oidc' }) subject;
  @attr('string', { for: 'oidc' }) issuer;
  @attr('string', { for: 'oidc', readOnly: true }) email;
  @attr('string', { for: 'oidc', readOnly: true }) full_name;
 }
@@ -1,9 +0,0 @@
 import Fragment from 'ember-data-model-fragments/fragment';
 import { attr } from '@ember-data/model';
 export default class FragmentAuthMethodAttributesAccountClaimMapModel extends Fragment {
  // =attributes (OIDC)
  @attr('string') from;
  @attr('string') to;
 }
@@ -1,40 +0,0 @@
 import Fragment from 'ember-data-model-fragments/fragment';
 import { attr } from '@ember-data/model';
 import { fragmentArray } from 'ember-data-model-fragments/attributes';
 export default class FragmentAuthMethodAttributesModel extends Fragment {
  // =attributes (OIDC)
  @attr('string', { readOnly: true }) state;
  @attr('string') issuer;
  @attr('string') client_id;
  @attr('string') client_secret;
  @attr('string', { readOnly: true }) client_secret_hmac;
  @attr('number') max_age;
  @attr('string') api_url_prefix;
  @attr('string', { readOnly: true }) callback_url;
  @attr('boolean') disable_discovered_config_validation;
  @attr('boolean') dry_run;
  @fragmentArray('fragment-auth-method-attributes-account-claim-map', {
    emptyArrayIfMissing: true,
  })
  account_claim_maps;
  @fragmentArray('fragment-string', {
    emptyArrayIfMissing: true,
  })
  claims_scopes;
  @fragmentArray('fragment-string', {
    emptyArrayIfMissing: true,
  })
  signing_algorithms;
  @fragmentArray('fragment-string', {
    emptyArrayIfMissing: true,
  })
  allowed_audiences;
  @fragmentArray('fragment-string', { emptyArrayIfMissing: true }) idp_ca_certs;
 }
@@ -1,9 +0,0 @@
 import Fragment from 'ember-data-model-fragments/fragment';
 import { attr } from '@ember-data/model';
 export default class FragmentHostAttributesModel extends Fragment {
  @attr('string', {
    description: 'The address (DNS or IP name) used to reach the host',
  })
  address;
 }
@@ -1,16 +0,0 @@
 import Fragment from 'ember-data-model-fragments/fragment';
 import { attr } from '@ember-data/model';
 export default class FragmentHostSetModel extends Fragment {
  // =attributes
  @attr('string', {
    description: 'ID of the related host set',
  })
  host_set_id;
  @attr('string', {
    description: 'ID of the catalog to which the host set belongs',
  })
  host_catalog_id;
 }
@@ -1,21 +0,0 @@
 import Fragment from 'ember-data-model-fragments/fragment';
 import { attr } from '@ember-data/model';
 export default class FragmentPrincipal extends Fragment {
  // =attributes
  @attr('string', {
    description: 'ID of the related scope',
  })
  scope_id;
  @attr('string', {
    description: 'ID of the related principal (user or group)',
  })
  principal_id;
  @attr('string', {
    description: 'Type of the related principal (user or group)',
  })
  type;
 }
		`@@ -0,0 +1,2 @@`
							`# Anyone attached to this rule will always been assigned to a pull request`
							`* @hashicorp/boundary-ui`