@contember/cli 2.1.0-rc.3 → 2.2.0-alpha.10

package/dist/production/src/commands/tenant/member/TenantMemberInviteCommand.cjs

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const cliCommon = require("@contember/cli-common");
+const memberOptions = require("./memberOptions.cjs");
+const membershipInput = require("./membershipInput.cjs");
+const stdin = require("../../../lib/tenant/stdin.cjs");
+const tenantOutput = require("../tenantOutput.cjs");
+const inviteMethods = ["CREATE_PASSWORD", "RESET_PASSWORD"];
+class TenantMemberInviteCommand extends cliCommon.Command {
+  constructor(tenantClientProvider, readStdin = stdin.readStdinText) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+    this.readStdin = readStdin;
+  }
+  configure(configuration) {
+    configuration.description("Invite a person to a project by e-mail");
+    configuration.option("project").valueRequired().required().description("Project slug.");
+    configuration.option("email").valueRequired().required().description("E-mail address of the invited person.");
+    configuration.option("name").valueRequired().description("Name of the invited person. Used only when the person does not exist yet.");
+    configuration.option("method").valueRequired().description(
+      `How the person gets their credentials: ${inviteMethods.join(" or ")} (default ${inviteMethods[0]}).`
+    );
+    configuration.option("mail-variant").valueRequired().description("Mail template variant to use.");
+    membershipInput.configureMembershipOptions(configuration);
+  }
+  async execute(input, output) {
+    const projectSlug = memberOptions.requireOptionValue(input.getOption("project"), "project");
+    const email = memberOptions.requireOptionValue(input.getOption("email"), "email");
+    const name = tenantOutput.requireNonEmptyTenantName(input.getOption("name"), "Person");
+    const memberships = await membershipInput.resolveNonEmptyMemberships(membershipInput.readMembershipInputSource(input), this.readStdin);
+    output.info(`Inviting ${email} to project ${projectSlug} as ${memberOptions.formatMemberships(memberships)}`);
+    const result = await this.tenantClientProvider.member().invite({
+      projectSlug,
+      email,
+      name,
+      memberships,
+      options: { method: parseInviteMethod(input.getOption("method")), mailVariant: input.getOption("mail-variant") }
+    });
+    output.data(
+      { projectSlug, ...result },
+      {
+        human: (it) => it.isNew ? `Invited ${tenantOutput.humanText(it.email ?? email)} to ${tenantOutput.humanText(it.projectSlug)}. Identity: ${tenantOutput.humanText(it.identityId)}` : `${tenantOutput.humanText(it.email ?? email)} already existed and was added to ${tenantOutput.humanText(it.projectSlug)}. Identity: ${tenantOutput.humanText(it.identityId)}`,
+        quiet: (it) => it.identityId
+      }
+    );
+  }
+}
+const parseInviteMethod = (value) => {
+  if (value === void 0) {
+    return void 0;
+  }
+  const method = inviteMethods.find((it) => it === value.toUpperCase());
+  if (method === void 0) {
+    throw new cliCommon.CliError(`Option --method must be one of ${inviteMethods.join(", ")}, got "${value}".`, {
+      code: "INVALID_INPUT",
+      exitCode: cliCommon.ExitCode.InputError
+    });
+  }
+  return method;
+};
+exports.TenantMemberInviteCommand = TenantMemberInviteCommand;
+//# sourceMappingURL=TenantMemberInviteCommand.cjs.map

package/dist/production/src/commands/tenant/member/TenantMemberInviteCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantMemberInviteCommand.cjs","sources":["../../../../../../../packages/cli/src/commands/tenant/member/TenantMemberInviteCommand.ts"],"sourcesContent":["import { CliError, Command, CommandConfiguration, ExitCode, Input, Output } from '@contember/cli-common'\nimport type { InviteMethod } from '@contember/graphql-client-tenant'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport { formatMemberships, requireOptionValue } from './memberOptions.js'\nimport { configureMembershipOptions, MembershipOptions, readMembershipInputSource, resolveNonEmptyMemberships } from './membershipInput.js'\nimport { readStdinText, StdinReader } from '../../../lib/tenant/stdin.js'\nimport { humanText, requireNonEmptyTenantName } from '../tenantOutput.js'\n\ntype Args = {}\n\ntype Options = MembershipOptions & {\n\tproject?: string\n\temail?: string\n\tname?: string\n\tmethod?: string\n\t['mail-variant']?: string\n}\n\nconst inviteMethods: InviteMethod[] = ['CREATE_PASSWORD', 'RESET_PASSWORD']\n\n/**\n * `tenant member invite`\n *\n * The mail-sending half of the invite pair. `tenant member invite-unmanaged` is a separate command rather\n * than a flag here: the two mutations share no options at all (mail method and variant versus a password\n * or a reset token hash), and only one of them handles a secret.\n */\nexport class TenantMemberInviteCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t\tprivate readonly readStdin: StdinReader = readStdinText,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('Invite a person to a project by e-mail')\n\t\tconfiguration.option('project').valueRequired().required().description('Project slug.')\n\t\tconfiguration.option('email').valueRequired().required().description('E-mail address of the invited person.')\n\t\tconfiguration.option('name').valueRequired().description('Name of the invited person. Used only when the person does not exist yet.')\n\t\tconfiguration.option('method').valueRequired().description(\n\t\t\t`How the person gets their credentials: ${inviteMethods.join(' or ')} (default ${inviteMethods[0]}).`,\n\t\t)\n\t\tconfiguration.option('mail-variant').valueRequired().description('Mail template variant to use.')\n\t\tconfigureMembershipOptions(configuration)\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<void> {\n\t\tconst projectSlug = requireOptionValue(input.getOption('project'), 'project')\n\t\tconst email = requireOptionValue(input.getOption('email'), 'email')\n\t\tconst name = requireNonEmptyTenantName(input.getOption('name'), 'Person')\n\t\tconst memberships = await resolveNonEmptyMemberships(readMembershipInputSource(input), this.readStdin)\n\n\t\toutput.info(`Inviting ${email} to project ${projectSlug} as ${formatMemberships(memberships)}`)\n\t\tconst result = await this.tenantClientProvider.member().invite({\n\t\t\tprojectSlug,\n\t\t\temail,\n\t\t\tname,\n\t\t\tmemberships,\n\t\t\toptions: { method: parseInviteMethod(input.getOption('method')), mailVariant: input.getOption('mail-variant') },\n\t\t})\n\n\t\toutput.data(\n\t\t\t{ projectSlug, ...result },\n\t\t\t{\n\t\t\t\thuman: it =>\n\t\t\t\t\tit.isNew\n\t\t\t\t\t\t? `Invited ${humanText(it.email ?? email)} to ${humanText(it.projectSlug)}. Identity: ${humanText(it.identityId)}`\n\t\t\t\t\t\t: `${humanText(it.email ?? email)} already existed and was added to ${humanText(it.projectSlug)}. Identity: ${humanText(it.identityId)}`,\n\t\t\t\tquiet: it => it.identityId,\n\t\t\t},\n\t\t)\n\t}\n}\n\nconst parseInviteMethod = (value: string | undefined): InviteMethod | undefined => {\n\tif (value === undefined) {\n\t\treturn undefined\n\t}\n\tconst method = inviteMethods.find(it => it === value.toUpperCase())\n\tif (method === undefined) {\n\t\tthrow new CliError(`Option --method must be one of ${inviteMethods.join(', ')}, got \"${value}\".`, {\n\t\t\tcode: 'INVALID_INPUT',\n\t\t\texitCode: ExitCode.InputError,\n\t\t})\n\t}\n\treturn method\n}\n"],"names":["Command","readStdinText","configureMembershipOptions","requireOptionValue","requireNonEmptyTenantName","resolveNonEmptyMemberships","readMembershipInputSource","formatMemberships","humanText","CliError","ExitCode"],"mappings":";;;;;;;AAkBA,MAAM,gBAAgC,CAAC,mBAAmB,gBAAgB;AASnE,MAAM,kCAAkCA,UAAAA,QAAuB;AAAA,EACrE,YACkB,sBACA,YAAyBC,qBACzC;AACD,UAAA;AAHiB,SAAA,uBAAA;AACA,SAAA,YAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,wCAAwC;AAClE,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,eAAe;AACtF,kBAAc,OAAO,OAAO,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,uCAAuC;AAC5G,kBAAc,OAAO,MAAM,EAAE,cAAA,EAAgB,YAAY,2EAA2E;AACpI,kBAAc,OAAO,QAAQ,EAAE,cAAA,EAAgB;AAAA,MAC9C,0CAA0C,cAAc,KAAK,MAAM,CAAC,aAAa,cAAc,CAAC,CAAC;AAAA,IAAA;AAElG,kBAAc,OAAO,cAAc,EAAE,cAAA,EAAgB,YAAY,+BAA+B;AAChGC,oBAAAA,2BAA2B,aAAa;AAAA,EACzC;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAA+B;AACnF,UAAM,cAAcC,cAAAA,mBAAmB,MAAM,UAAU,SAAS,GAAG,SAAS;AAC5E,UAAM,QAAQA,cAAAA,mBAAmB,MAAM,UAAU,OAAO,GAAG,OAAO;AAClE,UAAM,OAAOC,aAAAA,0BAA0B,MAAM,UAAU,MAAM,GAAG,QAAQ;AACxE,UAAM,cAAc,MAAMC,2CAA2BC,gBAAAA,0BAA0B,KAAK,GAAG,KAAK,SAAS;AAErG,WAAO,KAAK,YAAY,KAAK,eAAe,WAAW,OAAOC,cAAAA,kBAAkB,WAAW,CAAC,EAAE;AAC9F,UAAM,SAAS,MAAM,KAAK,qBAAqB,OAAA,EAAS,OAAO;AAAA,MAC9D;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,EAAE,QAAQ,kBAAkB,MAAM,UAAU,QAAQ,CAAC,GAAG,aAAa,MAAM,UAAU,cAAc,EAAA;AAAA,IAAE,CAC9G;AAED,WAAO;AAAA,MACN,EAAE,aAAa,GAAG,OAAA;AAAA,MAClB;AAAA,QACC,OAAO,CAAA,OACN,GAAG,QACA,WAAWC,aAAAA,UAAU,GAAG,SAAS,KAAK,CAAC,OAAOA,aAAAA,UAAU,GAAG,WAAW,CAAC,eAAeA,uBAAU,GAAG,UAAU,CAAC,KAC9G,GAAGA,aAAAA,UAAU,GAAG,SAAS,KAAK,CAAC,qCAAqCA,aAAAA,UAAU,GAAG,WAAW,CAAC,eAAeA,aAAAA,UAAU,GAAG,UAAU,CAAC;AAAA,QACxI,OAAO,QAAM,GAAG;AAAA,MAAA;AAAA,IACjB;AAAA,EAEF;AACD;AAEA,MAAM,oBAAoB,CAAC,UAAwD;AAClF,MAAI,UAAU,QAAW;AACxB,WAAO;AAAA,EACR;AACA,QAAM,SAAS,cAAc,KAAK,QAAM,OAAO,MAAM,aAAa;AAClE,MAAI,WAAW,QAAW;AACzB,UAAM,IAAIC,UAAAA,SAAS,kCAAkC,cAAc,KAAK,IAAI,CAAC,UAAU,KAAK,MAAM;AAAA,MACjG,MAAM;AAAA,MACN,UAAUC,UAAAA,SAAS;AAAA,IAAA,CACnB;AAAA,EACF;AACA,SAAO;AACR;;"}

package/dist/production/src/commands/tenant/member/TenantMemberInviteCommand.js

@@ -0,0 +1,62 @@
+import { Command, CliError, ExitCode } from "@contember/cli-common";
+import { requireOptionValue, formatMemberships } from "./memberOptions.js";
+import { configureMembershipOptions, resolveNonEmptyMemberships, readMembershipInputSource } from "./membershipInput.js";
+import { readStdinText } from "../../../lib/tenant/stdin.js";
+import { requireNonEmptyTenantName, humanText } from "../tenantOutput.js";
+const inviteMethods = ["CREATE_PASSWORD", "RESET_PASSWORD"];
+class TenantMemberInviteCommand extends Command {
+  constructor(tenantClientProvider, readStdin = readStdinText) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+    this.readStdin = readStdin;
+  }
+  configure(configuration) {
+    configuration.description("Invite a person to a project by e-mail");
+    configuration.option("project").valueRequired().required().description("Project slug.");
+    configuration.option("email").valueRequired().required().description("E-mail address of the invited person.");
+    configuration.option("name").valueRequired().description("Name of the invited person. Used only when the person does not exist yet.");
+    configuration.option("method").valueRequired().description(
+      `How the person gets their credentials: ${inviteMethods.join(" or ")} (default ${inviteMethods[0]}).`
+    );
+    configuration.option("mail-variant").valueRequired().description("Mail template variant to use.");
+    configureMembershipOptions(configuration);
+  }
+  async execute(input, output) {
+    const projectSlug = requireOptionValue(input.getOption("project"), "project");
+    const email = requireOptionValue(input.getOption("email"), "email");
+    const name = requireNonEmptyTenantName(input.getOption("name"), "Person");
+    const memberships = await resolveNonEmptyMemberships(readMembershipInputSource(input), this.readStdin);
+    output.info(`Inviting ${email} to project ${projectSlug} as ${formatMemberships(memberships)}`);
+    const result = await this.tenantClientProvider.member().invite({
+      projectSlug,
+      email,
+      name,
+      memberships,
+      options: { method: parseInviteMethod(input.getOption("method")), mailVariant: input.getOption("mail-variant") }
+    });
+    output.data(
+      { projectSlug, ...result },
+      {
+        human: (it) => it.isNew ? `Invited ${humanText(it.email ?? email)} to ${humanText(it.projectSlug)}. Identity: ${humanText(it.identityId)}` : `${humanText(it.email ?? email)} already existed and was added to ${humanText(it.projectSlug)}. Identity: ${humanText(it.identityId)}`,
+        quiet: (it) => it.identityId
+      }
+    );
+  }
+}
+const parseInviteMethod = (value) => {
+  if (value === void 0) {
+    return void 0;
+  }
+  const method = inviteMethods.find((it) => it === value.toUpperCase());
+  if (method === void 0) {
+    throw new CliError(`Option --method must be one of ${inviteMethods.join(", ")}, got "${value}".`, {
+      code: "INVALID_INPUT",
+      exitCode: ExitCode.InputError
+    });
+  }
+  return method;
+};
+export {
+  TenantMemberInviteCommand
+};
+//# sourceMappingURL=TenantMemberInviteCommand.js.map

package/dist/production/src/commands/tenant/member/TenantMemberInviteCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantMemberInviteCommand.js","sources":["../../../../../../../packages/cli/src/commands/tenant/member/TenantMemberInviteCommand.ts"],"sourcesContent":["import { CliError, Command, CommandConfiguration, ExitCode, Input, Output } from '@contember/cli-common'\nimport type { InviteMethod } from '@contember/graphql-client-tenant'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport { formatMemberships, requireOptionValue } from './memberOptions.js'\nimport { configureMembershipOptions, MembershipOptions, readMembershipInputSource, resolveNonEmptyMemberships } from './membershipInput.js'\nimport { readStdinText, StdinReader } from '../../../lib/tenant/stdin.js'\nimport { humanText, requireNonEmptyTenantName } from '../tenantOutput.js'\n\ntype Args = {}\n\ntype Options = MembershipOptions & {\n\tproject?: string\n\temail?: string\n\tname?: string\n\tmethod?: string\n\t['mail-variant']?: string\n}\n\nconst inviteMethods: InviteMethod[] = ['CREATE_PASSWORD', 'RESET_PASSWORD']\n\n/**\n * `tenant member invite`\n *\n * The mail-sending half of the invite pair. `tenant member invite-unmanaged` is a separate command rather\n * than a flag here: the two mutations share no options at all (mail method and variant versus a password\n * or a reset token hash), and only one of them handles a secret.\n */\nexport class TenantMemberInviteCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t\tprivate readonly readStdin: StdinReader = readStdinText,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('Invite a person to a project by e-mail')\n\t\tconfiguration.option('project').valueRequired().required().description('Project slug.')\n\t\tconfiguration.option('email').valueRequired().required().description('E-mail address of the invited person.')\n\t\tconfiguration.option('name').valueRequired().description('Name of the invited person. Used only when the person does not exist yet.')\n\t\tconfiguration.option('method').valueRequired().description(\n\t\t\t`How the person gets their credentials: ${inviteMethods.join(' or ')} (default ${inviteMethods[0]}).`,\n\t\t)\n\t\tconfiguration.option('mail-variant').valueRequired().description('Mail template variant to use.')\n\t\tconfigureMembershipOptions(configuration)\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<void> {\n\t\tconst projectSlug = requireOptionValue(input.getOption('project'), 'project')\n\t\tconst email = requireOptionValue(input.getOption('email'), 'email')\n\t\tconst name = requireNonEmptyTenantName(input.getOption('name'), 'Person')\n\t\tconst memberships = await resolveNonEmptyMemberships(readMembershipInputSource(input), this.readStdin)\n\n\t\toutput.info(`Inviting ${email} to project ${projectSlug} as ${formatMemberships(memberships)}`)\n\t\tconst result = await this.tenantClientProvider.member().invite({\n\t\t\tprojectSlug,\n\t\t\temail,\n\t\t\tname,\n\t\t\tmemberships,\n\t\t\toptions: { method: parseInviteMethod(input.getOption('method')), mailVariant: input.getOption('mail-variant') },\n\t\t})\n\n\t\toutput.data(\n\t\t\t{ projectSlug, ...result },\n\t\t\t{\n\t\t\t\thuman: it =>\n\t\t\t\t\tit.isNew\n\t\t\t\t\t\t? `Invited ${humanText(it.email ?? email)} to ${humanText(it.projectSlug)}. Identity: ${humanText(it.identityId)}`\n\t\t\t\t\t\t: `${humanText(it.email ?? email)} already existed and was added to ${humanText(it.projectSlug)}. Identity: ${humanText(it.identityId)}`,\n\t\t\t\tquiet: it => it.identityId,\n\t\t\t},\n\t\t)\n\t}\n}\n\nconst parseInviteMethod = (value: string | undefined): InviteMethod | undefined => {\n\tif (value === undefined) {\n\t\treturn undefined\n\t}\n\tconst method = inviteMethods.find(it => it === value.toUpperCase())\n\tif (method === undefined) {\n\t\tthrow new CliError(`Option --method must be one of ${inviteMethods.join(', ')}, got \"${value}\".`, {\n\t\t\tcode: 'INVALID_INPUT',\n\t\t\texitCode: ExitCode.InputError,\n\t\t})\n\t}\n\treturn method\n}\n"],"names":[],"mappings":";;;;;AAkBA,MAAM,gBAAgC,CAAC,mBAAmB,gBAAgB;AASnE,MAAM,kCAAkC,QAAuB;AAAA,EACrE,YACkB,sBACA,YAAyB,eACzC;AACD,UAAA;AAHiB,SAAA,uBAAA;AACA,SAAA,YAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,wCAAwC;AAClE,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,eAAe;AACtF,kBAAc,OAAO,OAAO,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,uCAAuC;AAC5G,kBAAc,OAAO,MAAM,EAAE,cAAA,EAAgB,YAAY,2EAA2E;AACpI,kBAAc,OAAO,QAAQ,EAAE,cAAA,EAAgB;AAAA,MAC9C,0CAA0C,cAAc,KAAK,MAAM,CAAC,aAAa,cAAc,CAAC,CAAC;AAAA,IAAA;AAElG,kBAAc,OAAO,cAAc,EAAE,cAAA,EAAgB,YAAY,+BAA+B;AAChG,+BAA2B,aAAa;AAAA,EACzC;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAA+B;AACnF,UAAM,cAAc,mBAAmB,MAAM,UAAU,SAAS,GAAG,SAAS;AAC5E,UAAM,QAAQ,mBAAmB,MAAM,UAAU,OAAO,GAAG,OAAO;AAClE,UAAM,OAAO,0BAA0B,MAAM,UAAU,MAAM,GAAG,QAAQ;AACxE,UAAM,cAAc,MAAM,2BAA2B,0BAA0B,KAAK,GAAG,KAAK,SAAS;AAErG,WAAO,KAAK,YAAY,KAAK,eAAe,WAAW,OAAO,kBAAkB,WAAW,CAAC,EAAE;AAC9F,UAAM,SAAS,MAAM,KAAK,qBAAqB,OAAA,EAAS,OAAO;AAAA,MAC9D;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,EAAE,QAAQ,kBAAkB,MAAM,UAAU,QAAQ,CAAC,GAAG,aAAa,MAAM,UAAU,cAAc,EAAA;AAAA,IAAE,CAC9G;AAED,WAAO;AAAA,MACN,EAAE,aAAa,GAAG,OAAA;AAAA,MAClB;AAAA,QACC,OAAO,CAAA,OACN,GAAG,QACA,WAAW,UAAU,GAAG,SAAS,KAAK,CAAC,OAAO,UAAU,GAAG,WAAW,CAAC,eAAe,UAAU,GAAG,UAAU,CAAC,KAC9G,GAAG,UAAU,GAAG,SAAS,KAAK,CAAC,qCAAqC,UAAU,GAAG,WAAW,CAAC,eAAe,UAAU,GAAG,UAAU,CAAC;AAAA,QACxI,OAAO,QAAM,GAAG;AAAA,MAAA;AAAA,IACjB;AAAA,EAEF;AACD;AAEA,MAAM,oBAAoB,CAAC,UAAwD;AAClF,MAAI,UAAU,QAAW;AACxB,WAAO;AAAA,EACR;AACA,QAAM,SAAS,cAAc,KAAK,QAAM,OAAO,MAAM,aAAa;AAClE,MAAI,WAAW,QAAW;AACzB,UAAM,IAAI,SAAS,kCAAkC,cAAc,KAAK,IAAI,CAAC,UAAU,KAAK,MAAM;AAAA,MACjG,MAAM;AAAA,MACN,UAAU,SAAS;AAAA,IAAA,CACnB;AAAA,EACF;AACA,SAAO;AACR;"}

package/dist/production/src/commands/tenant/member/TenantMemberInviteUnmanagedCommand.cjs

@@ -0,0 +1,102 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const cliCommon = require("@contember/cli-common");
+const memberOptions = require("./memberOptions.cjs");
+const membershipInput = require("./membershipInput.cjs");
+const stdin = require("../../../lib/tenant/stdin.cjs");
+const value = require("../../../lib/tenant/input/value.cjs");
+const tenantOutput = require("../tenantOutput.cjs");
+class TenantMemberInviteUnmanagedCommand extends cliCommon.Command {
+  constructor(tenantClientProvider, readStdin = stdin.readStdinText, env = process.env) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+    this.readStdin = readStdin;
+    this.env = env;
+  }
+  configure(configuration) {
+    configuration.description("Invite a person to a project without sending any e-mail");
+    configuration.option("project").valueRequired().required().description("Project slug.");
+    configuration.option("email").valueRequired().required().description("E-mail address of the invited person.");
+    configuration.option("password-env").valueRequired().description(
+      "Name of the environment variable holding the initial password. Preferred over --password."
+    );
+    configuration.option("password").valueRequired().description(
+      "Initial password. Visible in the shell history and in the process list — prefer --password-env."
+    );
+    configuration.option("password-stdin").valueNone().description("Read the initial password from stdin.");
+    configuration.option("reset-token-hash").valueRequired().description("Hex encoded sha256 of a password reset token to store for the person.");
+    configuration.option("reset-token-hash-env").valueRequired().description("Read the password reset token hash from the named environment variable.");
+    configuration.option("reset-token-hash-stdin").valueNone().description("Read the password reset token hash from stdin.");
+    membershipInput.configureMembershipOptions(configuration);
+  }
+  async execute(input, output) {
+    const projectSlug = memberOptions.requireOptionValue(input.getOption("project"), "project");
+    const email = memberOptions.requireOptionValue(input.getOption("email"), "email");
+    const passwordFromStdin = input.getOption("password-stdin") === true;
+    const resetTokenHashFromStdin = input.getOption("reset-token-hash-stdin") === true;
+    if (input.getOption("memberships-stdin") === true && (passwordFromStdin || resetTokenHashFromStdin)) {
+      throw new cliCommon.CliError("Only one value can consume stdin. Combine --memberships-stdin with an environment-backed credential instead.", {
+        code: "AMBIGUOUS_STDIN_INPUT",
+        exitCode: cliCommon.ExitCode.InputError
+      });
+    }
+    const memberships = await membershipInput.resolveNonEmptyMemberships(membershipInput.readMembershipInputSource(input), this.readStdin);
+    const credentialSources = [];
+    const password = input.getOption("password");
+    const passwordEnv = input.getOption("password-env");
+    const resetTokenHash = input.getOption("reset-token-hash");
+    const resetTokenHashEnv = input.getOption("reset-token-hash-env");
+    if (password !== void 0) {
+      credentialSources.push(value.literalInput("password", "--password", password));
+    }
+    if (passwordEnv !== void 0) {
+      credentialSources.push(value.environmentInput("password", "--password-env", passwordEnv));
+    }
+    if (passwordFromStdin) {
+      credentialSources.push(value.stdinInput("password", "--password-stdin"));
+    }
+    if (resetTokenHash !== void 0) {
+      credentialSources.push(value.literalInput("reset-token-hash", "--reset-token-hash", resetTokenHash));
+    }
+    if (resetTokenHashEnv !== void 0) {
+      credentialSources.push(value.environmentInput("reset-token-hash", "--reset-token-hash-env", resetTokenHashEnv));
+    }
+    if (resetTokenHashFromStdin) {
+      credentialSources.push(value.stdinInput("reset-token-hash", "--reset-token-hash-stdin"));
+    }
+    const credential = await value.resolveRequiredTenantInput(credentialSources, { label: "unmanaged invite credential" }, {
+      readStdin: this.readStdin,
+      readEnvironment: (name) => this.env[name]
+    });
+    const credentialValue = credential.kind === "stdin" ? removeOneTrailingLineEnding(credential.value) : credential.value;
+    if (credentialValue === "") {
+      throw new cliCommon.CliError("The selected unmanaged invite credential source resolved to an empty value.", {
+        code: "EMPTY_INPUT_VALUE",
+        exitCode: cliCommon.ExitCode.InputError
+      });
+    }
+    if (credential.name === "reset-token-hash" && !/^[0-9a-f]{64}$/.test(credentialValue)) {
+      throw new cliCommon.CliError("The password reset token hash must be a 64-character hexadecimal SHA-256 hash.", {
+        code: "INVALID_RESET_TOKEN_HASH",
+        exitCode: cliCommon.ExitCode.InputError
+      });
+    }
+    output.info(`Creating an unmanaged membership for ${email} in project ${projectSlug} as ${memberOptions.formatMemberships(memberships)}`);
+    const result = await this.tenantClientProvider.member().unmanagedInvite({
+      projectSlug,
+      email,
+      memberships,
+      options: credential.name === "password" ? { password: credentialValue } : { resetTokenHash: credentialValue }
+    });
+    output.data(
+      { projectSlug, ...result },
+      {
+        human: (it) => it.isNew ? `Created ${tenantOutput.humanText(it.email ?? email)} in ${tenantOutput.humanText(it.projectSlug)}. Identity: ${tenantOutput.humanText(it.identityId)}` : `${tenantOutput.humanText(it.email ?? email)} already existed and was added to ${tenantOutput.humanText(it.projectSlug)}. Identity: ${tenantOutput.humanText(it.identityId)}`,
+        quiet: (it) => it.identityId
+      }
+    );
+  }
+}
+const removeOneTrailingLineEnding = (value2) => value2.replace(/(?:\r\n|\n)$/, "");
+exports.TenantMemberInviteUnmanagedCommand = TenantMemberInviteUnmanagedCommand;
+//# sourceMappingURL=TenantMemberInviteUnmanagedCommand.cjs.map

package/dist/production/src/commands/tenant/member/TenantMemberInviteUnmanagedCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantMemberInviteUnmanagedCommand.cjs","sources":["../../../../../../../packages/cli/src/commands/tenant/member/TenantMemberInviteUnmanagedCommand.ts"],"sourcesContent":["import { CliError, Command, CommandConfiguration, ExitCode, Input, Output } from '@contember/cli-common'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport { formatMemberships, requireOptionValue } from './memberOptions.js'\nimport { configureMembershipOptions, MembershipOptions, readMembershipInputSource, resolveNonEmptyMemberships } from './membershipInput.js'\nimport { readStdinText, StdinReader } from '../../../lib/tenant/stdin.js'\nimport { environmentInput, literalInput, resolveRequiredTenantInput, stdinInput, type TenantInputSource } from '../../../lib/tenant/input/index.js'\nimport { humanText } from '../tenantOutput.js'\n\ntype Args = {}\n\ntype Options = MembershipOptions & {\n\tproject?: string\n\temail?: string\n\tpassword?: string\n\t['password-env']?: string\n\t['password-stdin']?: boolean\n\t['reset-token-hash']?: string\n\t['reset-token-hash-env']?: string\n\t['reset-token-hash-stdin']?: boolean\n}\n\n/**\n * `tenant member invite-unmanaged`\n *\n * The no-mail half of the invite pair — the caller sets the credential itself. Kept apart from\n * `tenant member invite` because the option sets are disjoint and this one handles a secret.\n *\n * The password is never a positional argument. `--password-env` is the safe form: only the variable name\n * reaches the shell history and the process list.\n *\n * `unmanagedInvite` accepts a `name` in the schema but its resolver ignores it, so no `--name` is offered.\n */\nexport class TenantMemberInviteUnmanagedCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t\tprivate readonly readStdin: StdinReader = readStdinText,\n\t\tprivate readonly env: NodeJS.ProcessEnv = process.env,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('Invite a person to a project without sending any e-mail')\n\t\tconfiguration.option('project').valueRequired().required().description('Project slug.')\n\t\tconfiguration.option('email').valueRequired().required().description('E-mail address of the invited person.')\n\t\tconfiguration.option('password-env').valueRequired().description(\n\t\t\t'Name of the environment variable holding the initial password. Preferred over --password.',\n\t\t)\n\t\tconfiguration.option('password').valueRequired().description(\n\t\t\t'Initial password. Visible in the shell history and in the process list — prefer --password-env.',\n\t\t)\n\t\tconfiguration.option('password-stdin').valueNone().description('Read the initial password from stdin.')\n\t\tconfiguration.option('reset-token-hash').valueRequired().description('Hex encoded sha256 of a password reset token to store for the person.')\n\t\tconfiguration.option('reset-token-hash-env').valueRequired().description('Read the password reset token hash from the named environment variable.')\n\t\tconfiguration.option('reset-token-hash-stdin').valueNone().description('Read the password reset token hash from stdin.')\n\t\tconfigureMembershipOptions(configuration)\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<void> {\n\t\tconst projectSlug = requireOptionValue(input.getOption('project'), 'project')\n\t\tconst email = requireOptionValue(input.getOption('email'), 'email')\n\t\tconst passwordFromStdin = input.getOption('password-stdin') === true\n\t\tconst resetTokenHashFromStdin = input.getOption('reset-token-hash-stdin') === true\n\t\tif (input.getOption('memberships-stdin') === true && (passwordFromStdin || resetTokenHashFromStdin)) {\n\t\t\tthrow new CliError('Only one value can consume stdin. Combine --memberships-stdin with an environment-backed credential instead.', {\n\t\t\t\tcode: 'AMBIGUOUS_STDIN_INPUT',\n\t\t\t\texitCode: ExitCode.InputError,\n\t\t\t})\n\t\t}\n\t\tconst memberships = await resolveNonEmptyMemberships(readMembershipInputSource(input), this.readStdin)\n\t\tconst credentialSources: TenantInputSource<'password' | 'reset-token-hash'>[] = []\n\t\tconst password = input.getOption('password')\n\t\tconst passwordEnv = input.getOption('password-env')\n\t\tconst resetTokenHash = input.getOption('reset-token-hash')\n\t\tconst resetTokenHashEnv = input.getOption('reset-token-hash-env')\n\t\tif (password !== undefined) {\n\t\t\tcredentialSources.push(literalInput('password', '--password', password))\n\t\t}\n\t\tif (passwordEnv !== undefined) {\n\t\t\tcredentialSources.push(environmentInput('password', '--password-env', passwordEnv))\n\t\t}\n\t\tif (passwordFromStdin) {\n\t\t\tcredentialSources.push(stdinInput('password', '--password-stdin'))\n\t\t}\n\t\tif (resetTokenHash !== undefined) {\n\t\t\tcredentialSources.push(literalInput('reset-token-hash', '--reset-token-hash', resetTokenHash))\n\t\t}\n\t\tif (resetTokenHashEnv !== undefined) {\n\t\t\tcredentialSources.push(environmentInput('reset-token-hash', '--reset-token-hash-env', resetTokenHashEnv))\n\t\t}\n\t\tif (resetTokenHashFromStdin) {\n\t\t\tcredentialSources.push(stdinInput('reset-token-hash', '--reset-token-hash-stdin'))\n\t\t}\n\t\tconst credential = await resolveRequiredTenantInput(credentialSources, { label: 'unmanaged invite credential' }, {\n\t\t\treadStdin: this.readStdin,\n\t\t\treadEnvironment: name => this.env[name],\n\t\t})\n\t\tconst credentialValue = credential.kind === 'stdin' ? removeOneTrailingLineEnding(credential.value) : credential.value\n\t\tif (credentialValue === '') {\n\t\t\tthrow new CliError('The selected unmanaged invite credential source resolved to an empty value.', {\n\t\t\t\tcode: 'EMPTY_INPUT_VALUE',\n\t\t\t\texitCode: ExitCode.InputError,\n\t\t\t})\n\t\t}\n\t\tif (credential.name === 'reset-token-hash' && !/^[0-9a-f]{64}$/.test(credentialValue)) {\n\t\t\tthrow new CliError('The password reset token hash must be a 64-character hexadecimal SHA-256 hash.', {\n\t\t\t\tcode: 'INVALID_RESET_TOKEN_HASH',\n\t\t\t\texitCode: ExitCode.InputError,\n\t\t\t})\n\t\t}\n\n\t\toutput.info(`Creating an unmanaged membership for ${email} in project ${projectSlug} as ${formatMemberships(memberships)}`)\n\t\tconst result = await this.tenantClientProvider.member().unmanagedInvite({\n\t\t\tprojectSlug,\n\t\t\temail,\n\t\t\tmemberships,\n\t\t\toptions: credential.name === 'password'\n\t\t\t\t? { password: credentialValue }\n\t\t\t\t: { resetTokenHash: credentialValue },\n\t\t})\n\n\t\toutput.data(\n\t\t\t{ projectSlug, ...result },\n\t\t\t{\n\t\t\t\thuman: it =>\n\t\t\t\t\tit.isNew\n\t\t\t\t\t\t? `Created ${humanText(it.email ?? email)} in ${humanText(it.projectSlug)}. Identity: ${humanText(it.identityId)}`\n\t\t\t\t\t\t: `${humanText(it.email ?? email)} already existed and was added to ${humanText(it.projectSlug)}. Identity: ${humanText(it.identityId)}`,\n\t\t\t\tquiet: it => it.identityId,\n\t\t\t},\n\t\t)\n\t}\n}\n\nconst removeOneTrailingLineEnding = (value: string): string => value.replace(/(?:\\r\\n|\\n)$/, '')\n"],"names":["Command","readStdinText","configureMembershipOptions","requireOptionValue","CliError","ExitCode","resolveNonEmptyMemberships","readMembershipInputSource","literalInput","environmentInput","stdinInput","resolveRequiredTenantInput","formatMemberships","humanText","value"],"mappings":";;;;;;;;AAgCO,MAAM,2CAA2CA,UAAAA,QAAuB;AAAA,EAC9E,YACkB,sBACA,YAAyBC,MAAAA,eACzB,MAAyB,QAAQ,KACjD;AACD,UAAA;AAJiB,SAAA,uBAAA;AACA,SAAA,YAAA;AACA,SAAA,MAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,yDAAyD;AACnF,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,eAAe;AACtF,kBAAc,OAAO,OAAO,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,uCAAuC;AAC5G,kBAAc,OAAO,cAAc,EAAE,cAAA,EAAgB;AAAA,MACpD;AAAA,IAAA;AAED,kBAAc,OAAO,UAAU,EAAE,cAAA,EAAgB;AAAA,MAChD;AAAA,IAAA;AAED,kBAAc,OAAO,gBAAgB,EAAE,UAAA,EAAY,YAAY,uCAAuC;AACtG,kBAAc,OAAO,kBAAkB,EAAE,cAAA,EAAgB,YAAY,uEAAuE;AAC5I,kBAAc,OAAO,sBAAsB,EAAE,cAAA,EAAgB,YAAY,yEAAyE;AAClJ,kBAAc,OAAO,wBAAwB,EAAE,UAAA,EAAY,YAAY,gDAAgD;AACvHC,oBAAAA,2BAA2B,aAAa;AAAA,EACzC;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAA+B;AACnF,UAAM,cAAcC,cAAAA,mBAAmB,MAAM,UAAU,SAAS,GAAG,SAAS;AAC5E,UAAM,QAAQA,cAAAA,mBAAmB,MAAM,UAAU,OAAO,GAAG,OAAO;AAClE,UAAM,oBAAoB,MAAM,UAAU,gBAAgB,MAAM;AAChE,UAAM,0BAA0B,MAAM,UAAU,wBAAwB,MAAM;AAC9E,QAAI,MAAM,UAAU,mBAAmB,MAAM,SAAS,qBAAqB,0BAA0B;AACpG,YAAM,IAAIC,UAAAA,SAAS,gHAAgH;AAAA,QAClI,MAAM;AAAA,QACN,UAAUC,UAAAA,SAAS;AAAA,MAAA,CACnB;AAAA,IACF;AACA,UAAM,cAAc,MAAMC,2CAA2BC,gBAAAA,0BAA0B,KAAK,GAAG,KAAK,SAAS;AACrG,UAAM,oBAA0E,CAAA;AAChF,UAAM,WAAW,MAAM,UAAU,UAAU;AAC3C,UAAM,cAAc,MAAM,UAAU,cAAc;AAClD,UAAM,iBAAiB,MAAM,UAAU,kBAAkB;AACzD,UAAM,oBAAoB,MAAM,UAAU,sBAAsB;AAChE,QAAI,aAAa,QAAW;AAC3B,wBAAkB,KAAKC,MAAAA,aAAa,YAAY,cAAc,QAAQ,CAAC;AAAA,IACxE;AACA,QAAI,gBAAgB,QAAW;AAC9B,wBAAkB,KAAKC,MAAAA,iBAAiB,YAAY,kBAAkB,WAAW,CAAC;AAAA,IACnF;AACA,QAAI,mBAAmB;AACtB,wBAAkB,KAAKC,MAAAA,WAAW,YAAY,kBAAkB,CAAC;AAAA,IAClE;AACA,QAAI,mBAAmB,QAAW;AACjC,wBAAkB,KAAKF,MAAAA,aAAa,oBAAoB,sBAAsB,cAAc,CAAC;AAAA,IAC9F;AACA,QAAI,sBAAsB,QAAW;AACpC,wBAAkB,KAAKC,MAAAA,iBAAiB,oBAAoB,0BAA0B,iBAAiB,CAAC;AAAA,IACzG;AACA,QAAI,yBAAyB;AAC5B,wBAAkB,KAAKC,MAAAA,WAAW,oBAAoB,0BAA0B,CAAC;AAAA,IAClF;AACA,UAAM,aAAa,MAAMC,MAAAA,2BAA2B,mBAAmB,EAAE,OAAO,iCAAiC;AAAA,MAChH,WAAW,KAAK;AAAA,MAChB,iBAAiB,CAAA,SAAQ,KAAK,IAAI,IAAI;AAAA,IAAA,CACtC;AACD,UAAM,kBAAkB,WAAW,SAAS,UAAU,4BAA4B,WAAW,KAAK,IAAI,WAAW;AACjH,QAAI,oBAAoB,IAAI;AAC3B,YAAM,IAAIP,UAAAA,SAAS,+EAA+E;AAAA,QACjG,MAAM;AAAA,QACN,UAAUC,UAAAA,SAAS;AAAA,MAAA,CACnB;AAAA,IACF;AACA,QAAI,WAAW,SAAS,sBAAsB,CAAC,iBAAiB,KAAK,eAAe,GAAG;AACtF,YAAM,IAAID,UAAAA,SAAS,kFAAkF;AAAA,QACpG,MAAM;AAAA,QACN,UAAUC,UAAAA,SAAS;AAAA,MAAA,CACnB;AAAA,IACF;AAEA,WAAO,KAAK,wCAAwC,KAAK,eAAe,WAAW,OAAOO,cAAAA,kBAAkB,WAAW,CAAC,EAAE;AAC1H,UAAM,SAAS,MAAM,KAAK,qBAAqB,OAAA,EAAS,gBAAgB;AAAA,MACvE;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,WAAW,SAAS,aAC1B,EAAE,UAAU,gBAAA,IACZ,EAAE,gBAAgB,gBAAA;AAAA,IAAgB,CACrC;AAED,WAAO;AAAA,MACN,EAAE,aAAa,GAAG,OAAA;AAAA,MAClB;AAAA,QACC,OAAO,CAAA,OACN,GAAG,QACA,WAAWC,aAAAA,UAAU,GAAG,SAAS,KAAK,CAAC,OAAOA,aAAAA,UAAU,GAAG,WAAW,CAAC,eAAeA,uBAAU,GAAG,UAAU,CAAC,KAC9G,GAAGA,aAAAA,UAAU,GAAG,SAAS,KAAK,CAAC,qCAAqCA,aAAAA,UAAU,GAAG,WAAW,CAAC,eAAeA,aAAAA,UAAU,GAAG,UAAU,CAAC;AAAA,QACxI,OAAO,QAAM,GAAG;AAAA,MAAA;AAAA,IACjB;AAAA,EAEF;AACD;AAEA,MAAM,8BAA8B,CAACC,WAA0BA,OAAM,QAAQ,gBAAgB,EAAE;;"}

package/dist/production/src/commands/tenant/member/TenantMemberInviteUnmanagedCommand.js

@@ -0,0 +1,102 @@
+import { Command, CliError, ExitCode } from "@contember/cli-common";
+import { requireOptionValue, formatMemberships } from "./memberOptions.js";
+import { configureMembershipOptions, resolveNonEmptyMemberships, readMembershipInputSource } from "./membershipInput.js";
+import { readStdinText } from "../../../lib/tenant/stdin.js";
+import { resolveRequiredTenantInput, literalInput, environmentInput, stdinInput } from "../../../lib/tenant/input/value.js";
+import { humanText } from "../tenantOutput.js";
+class TenantMemberInviteUnmanagedCommand extends Command {
+  constructor(tenantClientProvider, readStdin = readStdinText, env = process.env) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+    this.readStdin = readStdin;
+    this.env = env;
+  }
+  configure(configuration) {
+    configuration.description("Invite a person to a project without sending any e-mail");
+    configuration.option("project").valueRequired().required().description("Project slug.");
+    configuration.option("email").valueRequired().required().description("E-mail address of the invited person.");
+    configuration.option("password-env").valueRequired().description(
+      "Name of the environment variable holding the initial password. Preferred over --password."
+    );
+    configuration.option("password").valueRequired().description(
+      "Initial password. Visible in the shell history and in the process list — prefer --password-env."
+    );
+    configuration.option("password-stdin").valueNone().description("Read the initial password from stdin.");
+    configuration.option("reset-token-hash").valueRequired().description("Hex encoded sha256 of a password reset token to store for the person.");
+    configuration.option("reset-token-hash-env").valueRequired().description("Read the password reset token hash from the named environment variable.");
+    configuration.option("reset-token-hash-stdin").valueNone().description("Read the password reset token hash from stdin.");
+    configureMembershipOptions(configuration);
+  }
+  async execute(input, output) {
+    const projectSlug = requireOptionValue(input.getOption("project"), "project");
+    const email = requireOptionValue(input.getOption("email"), "email");
+    const passwordFromStdin = input.getOption("password-stdin") === true;
+    const resetTokenHashFromStdin = input.getOption("reset-token-hash-stdin") === true;
+    if (input.getOption("memberships-stdin") === true && (passwordFromStdin || resetTokenHashFromStdin)) {
+      throw new CliError("Only one value can consume stdin. Combine --memberships-stdin with an environment-backed credential instead.", {
+        code: "AMBIGUOUS_STDIN_INPUT",
+        exitCode: ExitCode.InputError
+      });
+    }
+    const memberships = await resolveNonEmptyMemberships(readMembershipInputSource(input), this.readStdin);
+    const credentialSources = [];
+    const password = input.getOption("password");
+    const passwordEnv = input.getOption("password-env");
+    const resetTokenHash = input.getOption("reset-token-hash");
+    const resetTokenHashEnv = input.getOption("reset-token-hash-env");
+    if (password !== void 0) {
+      credentialSources.push(literalInput("password", "--password", password));
+    }
+    if (passwordEnv !== void 0) {
+      credentialSources.push(environmentInput("password", "--password-env", passwordEnv));
+    }
+    if (passwordFromStdin) {
+      credentialSources.push(stdinInput("password", "--password-stdin"));
+    }
+    if (resetTokenHash !== void 0) {
+      credentialSources.push(literalInput("reset-token-hash", "--reset-token-hash", resetTokenHash));
+    }
+    if (resetTokenHashEnv !== void 0) {
+      credentialSources.push(environmentInput("reset-token-hash", "--reset-token-hash-env", resetTokenHashEnv));
+    }
+    if (resetTokenHashFromStdin) {
+      credentialSources.push(stdinInput("reset-token-hash", "--reset-token-hash-stdin"));
+    }
+    const credential = await resolveRequiredTenantInput(credentialSources, { label: "unmanaged invite credential" }, {
+      readStdin: this.readStdin,
+      readEnvironment: (name) => this.env[name]
+    });
+    const credentialValue = credential.kind === "stdin" ? removeOneTrailingLineEnding(credential.value) : credential.value;
+    if (credentialValue === "") {
+      throw new CliError("The selected unmanaged invite credential source resolved to an empty value.", {
+        code: "EMPTY_INPUT_VALUE",
+        exitCode: ExitCode.InputError
+      });
+    }
+    if (credential.name === "reset-token-hash" && !/^[0-9a-f]{64}$/.test(credentialValue)) {
+      throw new CliError("The password reset token hash must be a 64-character hexadecimal SHA-256 hash.", {
+        code: "INVALID_RESET_TOKEN_HASH",
+        exitCode: ExitCode.InputError
+      });
+    }
+    output.info(`Creating an unmanaged membership for ${email} in project ${projectSlug} as ${formatMemberships(memberships)}`);
+    const result = await this.tenantClientProvider.member().unmanagedInvite({
+      projectSlug,
+      email,
+      memberships,
+      options: credential.name === "password" ? { password: credentialValue } : { resetTokenHash: credentialValue }
+    });
+    output.data(
+      { projectSlug, ...result },
+      {
+        human: (it) => it.isNew ? `Created ${humanText(it.email ?? email)} in ${humanText(it.projectSlug)}. Identity: ${humanText(it.identityId)}` : `${humanText(it.email ?? email)} already existed and was added to ${humanText(it.projectSlug)}. Identity: ${humanText(it.identityId)}`,
+        quiet: (it) => it.identityId
+      }
+    );
+  }
+}
+const removeOneTrailingLineEnding = (value) => value.replace(/(?:\r\n|\n)$/, "");
+export {
+  TenantMemberInviteUnmanagedCommand
+};
+//# sourceMappingURL=TenantMemberInviteUnmanagedCommand.js.map

package/dist/production/src/commands/tenant/member/TenantMemberInviteUnmanagedCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantMemberInviteUnmanagedCommand.js","sources":["../../../../../../../packages/cli/src/commands/tenant/member/TenantMemberInviteUnmanagedCommand.ts"],"sourcesContent":["import { CliError, Command, CommandConfiguration, ExitCode, Input, Output } from '@contember/cli-common'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport { formatMemberships, requireOptionValue } from './memberOptions.js'\nimport { configureMembershipOptions, MembershipOptions, readMembershipInputSource, resolveNonEmptyMemberships } from './membershipInput.js'\nimport { readStdinText, StdinReader } from '../../../lib/tenant/stdin.js'\nimport { environmentInput, literalInput, resolveRequiredTenantInput, stdinInput, type TenantInputSource } from '../../../lib/tenant/input/index.js'\nimport { humanText } from '../tenantOutput.js'\n\ntype Args = {}\n\ntype Options = MembershipOptions & {\n\tproject?: string\n\temail?: string\n\tpassword?: string\n\t['password-env']?: string\n\t['password-stdin']?: boolean\n\t['reset-token-hash']?: string\n\t['reset-token-hash-env']?: string\n\t['reset-token-hash-stdin']?: boolean\n}\n\n/**\n * `tenant member invite-unmanaged`\n *\n * The no-mail half of the invite pair — the caller sets the credential itself. Kept apart from\n * `tenant member invite` because the option sets are disjoint and this one handles a secret.\n *\n * The password is never a positional argument. `--password-env` is the safe form: only the variable name\n * reaches the shell history and the process list.\n *\n * `unmanagedInvite` accepts a `name` in the schema but its resolver ignores it, so no `--name` is offered.\n */\nexport class TenantMemberInviteUnmanagedCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t\tprivate readonly readStdin: StdinReader = readStdinText,\n\t\tprivate readonly env: NodeJS.ProcessEnv = process.env,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('Invite a person to a project without sending any e-mail')\n\t\tconfiguration.option('project').valueRequired().required().description('Project slug.')\n\t\tconfiguration.option('email').valueRequired().required().description('E-mail address of the invited person.')\n\t\tconfiguration.option('password-env').valueRequired().description(\n\t\t\t'Name of the environment variable holding the initial password. Preferred over --password.',\n\t\t)\n\t\tconfiguration.option('password').valueRequired().description(\n\t\t\t'Initial password. Visible in the shell history and in the process list — prefer --password-env.',\n\t\t)\n\t\tconfiguration.option('password-stdin').valueNone().description('Read the initial password from stdin.')\n\t\tconfiguration.option('reset-token-hash').valueRequired().description('Hex encoded sha256 of a password reset token to store for the person.')\n\t\tconfiguration.option('reset-token-hash-env').valueRequired().description('Read the password reset token hash from the named environment variable.')\n\t\tconfiguration.option('reset-token-hash-stdin').valueNone().description('Read the password reset token hash from stdin.')\n\t\tconfigureMembershipOptions(configuration)\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<void> {\n\t\tconst projectSlug = requireOptionValue(input.getOption('project'), 'project')\n\t\tconst email = requireOptionValue(input.getOption('email'), 'email')\n\t\tconst passwordFromStdin = input.getOption('password-stdin') === true\n\t\tconst resetTokenHashFromStdin = input.getOption('reset-token-hash-stdin') === true\n\t\tif (input.getOption('memberships-stdin') === true && (passwordFromStdin || resetTokenHashFromStdin)) {\n\t\t\tthrow new CliError('Only one value can consume stdin. Combine --memberships-stdin with an environment-backed credential instead.', {\n\t\t\t\tcode: 'AMBIGUOUS_STDIN_INPUT',\n\t\t\t\texitCode: ExitCode.InputError,\n\t\t\t})\n\t\t}\n\t\tconst memberships = await resolveNonEmptyMemberships(readMembershipInputSource(input), this.readStdin)\n\t\tconst credentialSources: TenantInputSource<'password' | 'reset-token-hash'>[] = []\n\t\tconst password = input.getOption('password')\n\t\tconst passwordEnv = input.getOption('password-env')\n\t\tconst resetTokenHash = input.getOption('reset-token-hash')\n\t\tconst resetTokenHashEnv = input.getOption('reset-token-hash-env')\n\t\tif (password !== undefined) {\n\t\t\tcredentialSources.push(literalInput('password', '--password', password))\n\t\t}\n\t\tif (passwordEnv !== undefined) {\n\t\t\tcredentialSources.push(environmentInput('password', '--password-env', passwordEnv))\n\t\t}\n\t\tif (passwordFromStdin) {\n\t\t\tcredentialSources.push(stdinInput('password', '--password-stdin'))\n\t\t}\n\t\tif (resetTokenHash !== undefined) {\n\t\t\tcredentialSources.push(literalInput('reset-token-hash', '--reset-token-hash', resetTokenHash))\n\t\t}\n\t\tif (resetTokenHashEnv !== undefined) {\n\t\t\tcredentialSources.push(environmentInput('reset-token-hash', '--reset-token-hash-env', resetTokenHashEnv))\n\t\t}\n\t\tif (resetTokenHashFromStdin) {\n\t\t\tcredentialSources.push(stdinInput('reset-token-hash', '--reset-token-hash-stdin'))\n\t\t}\n\t\tconst credential = await resolveRequiredTenantInput(credentialSources, { label: 'unmanaged invite credential' }, {\n\t\t\treadStdin: this.readStdin,\n\t\t\treadEnvironment: name => this.env[name],\n\t\t})\n\t\tconst credentialValue = credential.kind === 'stdin' ? removeOneTrailingLineEnding(credential.value) : credential.value\n\t\tif (credentialValue === '') {\n\t\t\tthrow new CliError('The selected unmanaged invite credential source resolved to an empty value.', {\n\t\t\t\tcode: 'EMPTY_INPUT_VALUE',\n\t\t\t\texitCode: ExitCode.InputError,\n\t\t\t})\n\t\t}\n\t\tif (credential.name === 'reset-token-hash' && !/^[0-9a-f]{64}$/.test(credentialValue)) {\n\t\t\tthrow new CliError('The password reset token hash must be a 64-character hexadecimal SHA-256 hash.', {\n\t\t\t\tcode: 'INVALID_RESET_TOKEN_HASH',\n\t\t\t\texitCode: ExitCode.InputError,\n\t\t\t})\n\t\t}\n\n\t\toutput.info(`Creating an unmanaged membership for ${email} in project ${projectSlug} as ${formatMemberships(memberships)}`)\n\t\tconst result = await this.tenantClientProvider.member().unmanagedInvite({\n\t\t\tprojectSlug,\n\t\t\temail,\n\t\t\tmemberships,\n\t\t\toptions: credential.name === 'password'\n\t\t\t\t? { password: credentialValue }\n\t\t\t\t: { resetTokenHash: credentialValue },\n\t\t})\n\n\t\toutput.data(\n\t\t\t{ projectSlug, ...result },\n\t\t\t{\n\t\t\t\thuman: it =>\n\t\t\t\t\tit.isNew\n\t\t\t\t\t\t? `Created ${humanText(it.email ?? email)} in ${humanText(it.projectSlug)}. Identity: ${humanText(it.identityId)}`\n\t\t\t\t\t\t: `${humanText(it.email ?? email)} already existed and was added to ${humanText(it.projectSlug)}. Identity: ${humanText(it.identityId)}`,\n\t\t\t\tquiet: it => it.identityId,\n\t\t\t},\n\t\t)\n\t}\n}\n\nconst removeOneTrailingLineEnding = (value: string): string => value.replace(/(?:\\r\\n|\\n)$/, '')\n"],"names":[],"mappings":";;;;;;AAgCO,MAAM,2CAA2C,QAAuB;AAAA,EAC9E,YACkB,sBACA,YAAyB,eACzB,MAAyB,QAAQ,KACjD;AACD,UAAA;AAJiB,SAAA,uBAAA;AACA,SAAA,YAAA;AACA,SAAA,MAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,yDAAyD;AACnF,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,eAAe;AACtF,kBAAc,OAAO,OAAO,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,uCAAuC;AAC5G,kBAAc,OAAO,cAAc,EAAE,cAAA,EAAgB;AAAA,MACpD;AAAA,IAAA;AAED,kBAAc,OAAO,UAAU,EAAE,cAAA,EAAgB;AAAA,MAChD;AAAA,IAAA;AAED,kBAAc,OAAO,gBAAgB,EAAE,UAAA,EAAY,YAAY,uCAAuC;AACtG,kBAAc,OAAO,kBAAkB,EAAE,cAAA,EAAgB,YAAY,uEAAuE;AAC5I,kBAAc,OAAO,sBAAsB,EAAE,cAAA,EAAgB,YAAY,yEAAyE;AAClJ,kBAAc,OAAO,wBAAwB,EAAE,UAAA,EAAY,YAAY,gDAAgD;AACvH,+BAA2B,aAAa;AAAA,EACzC;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAA+B;AACnF,UAAM,cAAc,mBAAmB,MAAM,UAAU,SAAS,GAAG,SAAS;AAC5E,UAAM,QAAQ,mBAAmB,MAAM,UAAU,OAAO,GAAG,OAAO;AAClE,UAAM,oBAAoB,MAAM,UAAU,gBAAgB,MAAM;AAChE,UAAM,0BAA0B,MAAM,UAAU,wBAAwB,MAAM;AAC9E,QAAI,MAAM,UAAU,mBAAmB,MAAM,SAAS,qBAAqB,0BAA0B;AACpG,YAAM,IAAI,SAAS,gHAAgH;AAAA,QAClI,MAAM;AAAA,QACN,UAAU,SAAS;AAAA,MAAA,CACnB;AAAA,IACF;AACA,UAAM,cAAc,MAAM,2BAA2B,0BAA0B,KAAK,GAAG,KAAK,SAAS;AACrG,UAAM,oBAA0E,CAAA;AAChF,UAAM,WAAW,MAAM,UAAU,UAAU;AAC3C,UAAM,cAAc,MAAM,UAAU,cAAc;AAClD,UAAM,iBAAiB,MAAM,UAAU,kBAAkB;AACzD,UAAM,oBAAoB,MAAM,UAAU,sBAAsB;AAChE,QAAI,aAAa,QAAW;AAC3B,wBAAkB,KAAK,aAAa,YAAY,cAAc,QAAQ,CAAC;AAAA,IACxE;AACA,QAAI,gBAAgB,QAAW;AAC9B,wBAAkB,KAAK,iBAAiB,YAAY,kBAAkB,WAAW,CAAC;AAAA,IACnF;AACA,QAAI,mBAAmB;AACtB,wBAAkB,KAAK,WAAW,YAAY,kBAAkB,CAAC;AAAA,IAClE;AACA,QAAI,mBAAmB,QAAW;AACjC,wBAAkB,KAAK,aAAa,oBAAoB,sBAAsB,cAAc,CAAC;AAAA,IAC9F;AACA,QAAI,sBAAsB,QAAW;AACpC,wBAAkB,KAAK,iBAAiB,oBAAoB,0BAA0B,iBAAiB,CAAC;AAAA,IACzG;AACA,QAAI,yBAAyB;AAC5B,wBAAkB,KAAK,WAAW,oBAAoB,0BAA0B,CAAC;AAAA,IAClF;AACA,UAAM,aAAa,MAAM,2BAA2B,mBAAmB,EAAE,OAAO,iCAAiC;AAAA,MAChH,WAAW,KAAK;AAAA,MAChB,iBAAiB,CAAA,SAAQ,KAAK,IAAI,IAAI;AAAA,IAAA,CACtC;AACD,UAAM,kBAAkB,WAAW,SAAS,UAAU,4BAA4B,WAAW,KAAK,IAAI,WAAW;AACjH,QAAI,oBAAoB,IAAI;AAC3B,YAAM,IAAI,SAAS,+EAA+E;AAAA,QACjG,MAAM;AAAA,QACN,UAAU,SAAS;AAAA,MAAA,CACnB;AAAA,IACF;AACA,QAAI,WAAW,SAAS,sBAAsB,CAAC,iBAAiB,KAAK,eAAe,GAAG;AACtF,YAAM,IAAI,SAAS,kFAAkF;AAAA,QACpG,MAAM;AAAA,QACN,UAAU,SAAS;AAAA,MAAA,CACnB;AAAA,IACF;AAEA,WAAO,KAAK,wCAAwC,KAAK,eAAe,WAAW,OAAO,kBAAkB,WAAW,CAAC,EAAE;AAC1H,UAAM,SAAS,MAAM,KAAK,qBAAqB,OAAA,EAAS,gBAAgB;AAAA,MACvE;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,WAAW,SAAS,aAC1B,EAAE,UAAU,gBAAA,IACZ,EAAE,gBAAgB,gBAAA;AAAA,IAAgB,CACrC;AAED,WAAO;AAAA,MACN,EAAE,aAAa,GAAG,OAAA;AAAA,MAClB;AAAA,QACC,OAAO,CAAA,OACN,GAAG,QACA,WAAW,UAAU,GAAG,SAAS,KAAK,CAAC,OAAO,UAAU,GAAG,WAAW,CAAC,eAAe,UAAU,GAAG,UAAU,CAAC,KAC9G,GAAG,UAAU,GAAG,SAAS,KAAK,CAAC,qCAAqC,UAAU,GAAG,WAAW,CAAC,eAAe,UAAU,GAAG,UAAU,CAAC;AAAA,QACxI,OAAO,QAAM,GAAG;AAAA,MAAA;AAAA,IACjB;AAAA,EAEF;AACD;AAEA,MAAM,8BAA8B,CAAC,UAA0B,MAAM,QAAQ,gBAAgB,EAAE;"}

package/dist/production/src/commands/tenant/member/TenantMemberListCommand.cjs

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const cliCommon = require("@contember/cli-common");
+const pagination = require("../../../lib/tenant/input/pagination.cjs");
+const memberOptions = require("./memberOptions.cjs");
+const memberTypes = ["PERSON", "API_KEY"];
+class TenantMemberListCommand extends cliCommon.Command {
+  constructor(tenantClientProvider) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+  }
+  configure(configuration) {
+    configuration.description("List the members of a project with their memberships");
+    configuration.option("project").valueRequired().required().description("Project slug.");
+    configuration.option("identity").valueArray().description("Filter by identity id. Repeat for several ids.");
+    configuration.option("email").valueArray().description("Filter by e-mail. Repeat for several addresses.");
+    configuration.option("person").valueArray().description("Filter by person id. Repeat for several ids.");
+    configuration.option("type").valueRequired().description(`Filter by member type: ${memberTypes.join(" or ")}.`);
+    configuration.option("limit").valueRequired().description("Maximum number of members to return.");
+    configuration.option("offset").valueRequired().description("Number of members to skip.");
+  }
+  async execute(input, output) {
+    const projectSlug = memberOptions.requireOptionValue(input.getOption("project"), "project");
+    const email = input.getOption("email");
+    const personId = input.getOption("person");
+    const memberType = parseMemberType(input.getOption("type"));
+    if (memberType === "API_KEY" && (email !== void 0 || personId !== void 0)) {
+      throw new cliCommon.CliError("Options --email and --person cannot be combined with --type API_KEY.", {
+        code: "INVALID_MEMBER_FILTER",
+        exitCode: cliCommon.ExitCode.InputError
+      });
+    }
+    const members = await this.tenantClientProvider.member().listProjectMembers(projectSlug, {
+      filter: {
+        identityId: input.getOption("identity"),
+        email,
+        personId,
+        memberType
+      },
+      limit: pagination.parsePaginationLimit(input.getOption("limit")),
+      offset: pagination.parsePaginationOffset(input.getOption("offset"))
+    });
+    output.table(
+      [
+        { field: "identityId", name: "Identity" },
+        { field: "email", name: "E-mail" },
+        { field: "name", name: "Name" },
+        { field: "description", name: "Description" },
+        { field: "memberships", name: "Memberships", format: memberOptions.formatMemberships }
+      ],
+      members,
+      "identityId"
+    );
+    if (members.length === 0) {
+      output.info(`No members found in project ${projectSlug}. The token may also lack the "project.view members" permission.`);
+    }
+  }
+}
+const parseMemberType = (value) => {
+  if (value === void 0) {
+    return void 0;
+  }
+  const memberType = memberTypes.find((it) => it === value.toUpperCase());
+  if (memberType === void 0) {
+    throw new cliCommon.CliError(`Option --type must be one of ${memberTypes.join(", ")}, got "${value}".`, {
+      code: "INVALID_INPUT",
+      exitCode: cliCommon.ExitCode.InputError
+    });
+  }
+  return memberType;
+};
+exports.TenantMemberListCommand = TenantMemberListCommand;
+//# sourceMappingURL=TenantMemberListCommand.cjs.map

package/dist/production/src/commands/tenant/member/TenantMemberListCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantMemberListCommand.cjs","sources":["../../../../../../../packages/cli/src/commands/tenant/member/TenantMemberListCommand.ts"],"sourcesContent":["import { CliError, Command, CommandConfiguration, ExitCode, Input, Output } from '@contember/cli-common'\nimport type { MemberType } from '@contember/graphql-client-tenant'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport type { TenantProjectMember } from '../../../lib/tenant/clients/index.js'\nimport { parsePaginationLimit, parsePaginationOffset } from '../../../lib/tenant/input/pagination.js'\nimport { formatMemberships, requireOptionValue } from './memberOptions.js'\n\ntype Args = {}\n\ntype Options = {\n\tproject?: string\n\tidentity?: string[]\n\temail?: string[]\n\tperson?: string[]\n\ttype?: string\n\tlimit?: string\n\toffset?: string\n}\n\nconst memberTypes: MemberType[] = ['PERSON', 'API_KEY']\n\n/** `tenant member list` */\nexport class TenantMemberListCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('List the members of a project with their memberships')\n\t\tconfiguration.option('project').valueRequired().required().description('Project slug.')\n\t\tconfiguration.option('identity').valueArray().description('Filter by identity id. Repeat for several ids.')\n\t\tconfiguration.option('email').valueArray().description('Filter by e-mail. Repeat for several addresses.')\n\t\tconfiguration.option('person').valueArray().description('Filter by person id. Repeat for several ids.')\n\t\tconfiguration.option('type').valueRequired().description(`Filter by member type: ${memberTypes.join(' or ')}.`)\n\t\tconfiguration.option('limit').valueRequired().description('Maximum number of members to return.')\n\t\tconfiguration.option('offset').valueRequired().description('Number of members to skip.')\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<void> {\n\t\tconst projectSlug = requireOptionValue(input.getOption('project'), 'project')\n\t\tconst email = input.getOption('email')\n\t\tconst personId = input.getOption('person')\n\t\tconst memberType = parseMemberType(input.getOption('type'))\n\t\tif (memberType === 'API_KEY' && (email !== undefined || personId !== undefined)) {\n\t\t\tthrow new CliError('Options --email and --person cannot be combined with --type API_KEY.', {\n\t\t\t\tcode: 'INVALID_MEMBER_FILTER',\n\t\t\t\texitCode: ExitCode.InputError,\n\t\t\t})\n\t\t}\n\t\tconst members = await this.tenantClientProvider.member().listProjectMembers(projectSlug, {\n\t\t\tfilter: {\n\t\t\t\tidentityId: input.getOption('identity'),\n\t\t\t\temail,\n\t\t\t\tpersonId,\n\t\t\t\tmemberType,\n\t\t\t},\n\t\t\tlimit: parsePaginationLimit(input.getOption('limit')),\n\t\t\toffset: parsePaginationOffset(input.getOption('offset')),\n\t\t})\n\n\t\toutput.table<TenantProjectMember>(\n\t\t\t[\n\t\t\t\t{ field: 'identityId', name: 'Identity' },\n\t\t\t\t{ field: 'email', name: 'E-mail' },\n\t\t\t\t{ field: 'name', name: 'Name' },\n\t\t\t\t{ field: 'description', name: 'Description' },\n\t\t\t\t{ field: 'memberships', name: 'Memberships', format: formatMemberships },\n\t\t\t],\n\t\t\tmembers,\n\t\t\t'identityId',\n\t\t)\n\n\t\tif (members.length === 0) {\n\t\t\t// the tenant API returns an empty list instead of an error when the token may not see members\n\t\t\toutput.info(`No members found in project ${projectSlug}. The token may also lack the \"project.view members\" permission.`)\n\t\t}\n\t}\n}\n\nconst parseMemberType = (value: string | undefined): MemberType | undefined => {\n\tif (value === undefined) {\n\t\treturn undefined\n\t}\n\tconst memberType = memberTypes.find(it => it === value.toUpperCase())\n\tif (memberType === undefined) {\n\t\tthrow new CliError(`Option --type must be one of ${memberTypes.join(', ')}, got \"${value}\".`, {\n\t\t\tcode: 'INVALID_INPUT',\n\t\t\texitCode: ExitCode.InputError,\n\t\t})\n\t}\n\treturn memberType\n}\n"],"names":["Command","requireOptionValue","CliError","ExitCode","parsePaginationLimit","parsePaginationOffset","formatMemberships"],"mappings":";;;;;AAmBA,MAAM,cAA4B,CAAC,UAAU,SAAS;AAG/C,MAAM,gCAAgCA,UAAAA,QAAuB;AAAA,EACnE,YACkB,sBAChB;AACD,UAAA;AAFiB,SAAA,uBAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,sDAAsD;AAChF,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,eAAe;AACtF,kBAAc,OAAO,UAAU,EAAE,WAAA,EAAa,YAAY,gDAAgD;AAC1G,kBAAc,OAAO,OAAO,EAAE,WAAA,EAAa,YAAY,iDAAiD;AACxG,kBAAc,OAAO,QAAQ,EAAE,WAAA,EAAa,YAAY,8CAA8C;AACtG,kBAAc,OAAO,MAAM,EAAE,cAAA,EAAgB,YAAY,0BAA0B,YAAY,KAAK,MAAM,CAAC,GAAG;AAC9G,kBAAc,OAAO,OAAO,EAAE,cAAA,EAAgB,YAAY,sCAAsC;AAChG,kBAAc,OAAO,QAAQ,EAAE,cAAA,EAAgB,YAAY,4BAA4B;AAAA,EACxF;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAA+B;AACnF,UAAM,cAAcC,cAAAA,mBAAmB,MAAM,UAAU,SAAS,GAAG,SAAS;AAC5E,UAAM,QAAQ,MAAM,UAAU,OAAO;AACrC,UAAM,WAAW,MAAM,UAAU,QAAQ;AACzC,UAAM,aAAa,gBAAgB,MAAM,UAAU,MAAM,CAAC;AAC1D,QAAI,eAAe,cAAc,UAAU,UAAa,aAAa,SAAY;AAChF,YAAM,IAAIC,UAAAA,SAAS,wEAAwE;AAAA,QAC1F,MAAM;AAAA,QACN,UAAUC,UAAAA,SAAS;AAAA,MAAA,CACnB;AAAA,IACF;AACA,UAAM,UAAU,MAAM,KAAK,qBAAqB,OAAA,EAAS,mBAAmB,aAAa;AAAA,MACxF,QAAQ;AAAA,QACP,YAAY,MAAM,UAAU,UAAU;AAAA,QACtC;AAAA,QACA;AAAA,QACA;AAAA,MAAA;AAAA,MAED,OAAOC,WAAAA,qBAAqB,MAAM,UAAU,OAAO,CAAC;AAAA,MACpD,QAAQC,WAAAA,sBAAsB,MAAM,UAAU,QAAQ,CAAC;AAAA,IAAA,CACvD;AAED,WAAO;AAAA,MACN;AAAA,QACC,EAAE,OAAO,cAAc,MAAM,WAAA;AAAA,QAC7B,EAAE,OAAO,SAAS,MAAM,SAAA;AAAA,QACxB,EAAE,OAAO,QAAQ,MAAM,OAAA;AAAA,QACvB,EAAE,OAAO,eAAe,MAAM,cAAA;AAAA,QAC9B,EAAE,OAAO,eAAe,MAAM,eAAe,QAAQC,cAAAA,kBAAA;AAAA,MAAkB;AAAA,MAExE;AAAA,MACA;AAAA,IAAA;AAGD,QAAI,QAAQ,WAAW,GAAG;AAEzB,aAAO,KAAK,+BAA+B,WAAW,kEAAkE;AAAA,IACzH;AAAA,EACD;AACD;AAEA,MAAM,kBAAkB,CAAC,UAAsD;AAC9E,MAAI,UAAU,QAAW;AACxB,WAAO;AAAA,EACR;AACA,QAAM,aAAa,YAAY,KAAK,QAAM,OAAO,MAAM,aAAa;AACpE,MAAI,eAAe,QAAW;AAC7B,UAAM,IAAIJ,UAAAA,SAAS,gCAAgC,YAAY,KAAK,IAAI,CAAC,UAAU,KAAK,MAAM;AAAA,MAC7F,MAAM;AAAA,MACN,UAAUC,UAAAA,SAAS;AAAA,IAAA,CACnB;AAAA,EACF;AACA,SAAO;AACR;;"}

package/dist/production/src/commands/tenant/member/TenantMemberListCommand.js

@@ -0,0 +1,73 @@
+import { Command, CliError, ExitCode } from "@contember/cli-common";
+import { parsePaginationOffset, parsePaginationLimit } from "../../../lib/tenant/input/pagination.js";
+import { requireOptionValue, formatMemberships } from "./memberOptions.js";
+const memberTypes = ["PERSON", "API_KEY"];
+class TenantMemberListCommand extends Command {
+  constructor(tenantClientProvider) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+  }
+  configure(configuration) {
+    configuration.description("List the members of a project with their memberships");
+    configuration.option("project").valueRequired().required().description("Project slug.");
+    configuration.option("identity").valueArray().description("Filter by identity id. Repeat for several ids.");
+    configuration.option("email").valueArray().description("Filter by e-mail. Repeat for several addresses.");
+    configuration.option("person").valueArray().description("Filter by person id. Repeat for several ids.");
+    configuration.option("type").valueRequired().description(`Filter by member type: ${memberTypes.join(" or ")}.`);
+    configuration.option("limit").valueRequired().description("Maximum number of members to return.");
+    configuration.option("offset").valueRequired().description("Number of members to skip.");
+  }
+  async execute(input, output) {
+    const projectSlug = requireOptionValue(input.getOption("project"), "project");
+    const email = input.getOption("email");
+    const personId = input.getOption("person");
+    const memberType = parseMemberType(input.getOption("type"));
+    if (memberType === "API_KEY" && (email !== void 0 || personId !== void 0)) {
+      throw new CliError("Options --email and --person cannot be combined with --type API_KEY.", {
+        code: "INVALID_MEMBER_FILTER",
+        exitCode: ExitCode.InputError
+      });
+    }
+    const members = await this.tenantClientProvider.member().listProjectMembers(projectSlug, {
+      filter: {
+        identityId: input.getOption("identity"),
+        email,
+        personId,
+        memberType
+      },
+      limit: parsePaginationLimit(input.getOption("limit")),
+      offset: parsePaginationOffset(input.getOption("offset"))
+    });
+    output.table(
+      [
+        { field: "identityId", name: "Identity" },
+        { field: "email", name: "E-mail" },
+        { field: "name", name: "Name" },
+        { field: "description", name: "Description" },
+        { field: "memberships", name: "Memberships", format: formatMemberships }
+      ],
+      members,
+      "identityId"
+    );
+    if (members.length === 0) {
+      output.info(`No members found in project ${projectSlug}. The token may also lack the "project.view members" permission.`);
+    }
+  }
+}
+const parseMemberType = (value) => {
+  if (value === void 0) {
+    return void 0;
+  }
+  const memberType = memberTypes.find((it) => it === value.toUpperCase());
+  if (memberType === void 0) {
+    throw new CliError(`Option --type must be one of ${memberTypes.join(", ")}, got "${value}".`, {
+      code: "INVALID_INPUT",
+      exitCode: ExitCode.InputError
+    });
+  }
+  return memberType;
+};
+export {
+  TenantMemberListCommand
+};
+//# sourceMappingURL=TenantMemberListCommand.js.map

package/dist/production/src/commands/tenant/member/TenantMemberListCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantMemberListCommand.js","sources":["../../../../../../../packages/cli/src/commands/tenant/member/TenantMemberListCommand.ts"],"sourcesContent":["import { CliError, Command, CommandConfiguration, ExitCode, Input, Output } from '@contember/cli-common'\nimport type { MemberType } from '@contember/graphql-client-tenant'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport type { TenantProjectMember } from '../../../lib/tenant/clients/index.js'\nimport { parsePaginationLimit, parsePaginationOffset } from '../../../lib/tenant/input/pagination.js'\nimport { formatMemberships, requireOptionValue } from './memberOptions.js'\n\ntype Args = {}\n\ntype Options = {\n\tproject?: string\n\tidentity?: string[]\n\temail?: string[]\n\tperson?: string[]\n\ttype?: string\n\tlimit?: string\n\toffset?: string\n}\n\nconst memberTypes: MemberType[] = ['PERSON', 'API_KEY']\n\n/** `tenant member list` */\nexport class TenantMemberListCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('List the members of a project with their memberships')\n\t\tconfiguration.option('project').valueRequired().required().description('Project slug.')\n\t\tconfiguration.option('identity').valueArray().description('Filter by identity id. Repeat for several ids.')\n\t\tconfiguration.option('email').valueArray().description('Filter by e-mail. Repeat for several addresses.')\n\t\tconfiguration.option('person').valueArray().description('Filter by person id. Repeat for several ids.')\n\t\tconfiguration.option('type').valueRequired().description(`Filter by member type: ${memberTypes.join(' or ')}.`)\n\t\tconfiguration.option('limit').valueRequired().description('Maximum number of members to return.')\n\t\tconfiguration.option('offset').valueRequired().description('Number of members to skip.')\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<void> {\n\t\tconst projectSlug = requireOptionValue(input.getOption('project'), 'project')\n\t\tconst email = input.getOption('email')\n\t\tconst personId = input.getOption('person')\n\t\tconst memberType = parseMemberType(input.getOption('type'))\n\t\tif (memberType === 'API_KEY' && (email !== undefined || personId !== undefined)) {\n\t\t\tthrow new CliError('Options --email and --person cannot be combined with --type API_KEY.', {\n\t\t\t\tcode: 'INVALID_MEMBER_FILTER',\n\t\t\t\texitCode: ExitCode.InputError,\n\t\t\t})\n\t\t}\n\t\tconst members = await this.tenantClientProvider.member().listProjectMembers(projectSlug, {\n\t\t\tfilter: {\n\t\t\t\tidentityId: input.getOption('identity'),\n\t\t\t\temail,\n\t\t\t\tpersonId,\n\t\t\t\tmemberType,\n\t\t\t},\n\t\t\tlimit: parsePaginationLimit(input.getOption('limit')),\n\t\t\toffset: parsePaginationOffset(input.getOption('offset')),\n\t\t})\n\n\t\toutput.table<TenantProjectMember>(\n\t\t\t[\n\t\t\t\t{ field: 'identityId', name: 'Identity' },\n\t\t\t\t{ field: 'email', name: 'E-mail' },\n\t\t\t\t{ field: 'name', name: 'Name' },\n\t\t\t\t{ field: 'description', name: 'Description' },\n\t\t\t\t{ field: 'memberships', name: 'Memberships', format: formatMemberships },\n\t\t\t],\n\t\t\tmembers,\n\t\t\t'identityId',\n\t\t)\n\n\t\tif (members.length === 0) {\n\t\t\t// the tenant API returns an empty list instead of an error when the token may not see members\n\t\t\toutput.info(`No members found in project ${projectSlug}. The token may also lack the \"project.view members\" permission.`)\n\t\t}\n\t}\n}\n\nconst parseMemberType = (value: string | undefined): MemberType | undefined => {\n\tif (value === undefined) {\n\t\treturn undefined\n\t}\n\tconst memberType = memberTypes.find(it => it === value.toUpperCase())\n\tif (memberType === undefined) {\n\t\tthrow new CliError(`Option --type must be one of ${memberTypes.join(', ')}, got \"${value}\".`, {\n\t\t\tcode: 'INVALID_INPUT',\n\t\t\texitCode: ExitCode.InputError,\n\t\t})\n\t}\n\treturn memberType\n}\n"],"names":[],"mappings":";;;AAmBA,MAAM,cAA4B,CAAC,UAAU,SAAS;AAG/C,MAAM,gCAAgC,QAAuB;AAAA,EACnE,YACkB,sBAChB;AACD,UAAA;AAFiB,SAAA,uBAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,sDAAsD;AAChF,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,eAAe;AACtF,kBAAc,OAAO,UAAU,EAAE,WAAA,EAAa,YAAY,gDAAgD;AAC1G,kBAAc,OAAO,OAAO,EAAE,WAAA,EAAa,YAAY,iDAAiD;AACxG,kBAAc,OAAO,QAAQ,EAAE,WAAA,EAAa,YAAY,8CAA8C;AACtG,kBAAc,OAAO,MAAM,EAAE,cAAA,EAAgB,YAAY,0BAA0B,YAAY,KAAK,MAAM,CAAC,GAAG;AAC9G,kBAAc,OAAO,OAAO,EAAE,cAAA,EAAgB,YAAY,sCAAsC;AAChG,kBAAc,OAAO,QAAQ,EAAE,cAAA,EAAgB,YAAY,4BAA4B;AAAA,EACxF;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAA+B;AACnF,UAAM,cAAc,mBAAmB,MAAM,UAAU,SAAS,GAAG,SAAS;AAC5E,UAAM,QAAQ,MAAM,UAAU,OAAO;AACrC,UAAM,WAAW,MAAM,UAAU,QAAQ;AACzC,UAAM,aAAa,gBAAgB,MAAM,UAAU,MAAM,CAAC;AAC1D,QAAI,eAAe,cAAc,UAAU,UAAa,aAAa,SAAY;AAChF,YAAM,IAAI,SAAS,wEAAwE;AAAA,QAC1F,MAAM;AAAA,QACN,UAAU,SAAS;AAAA,MAAA,CACnB;AAAA,IACF;AACA,UAAM,UAAU,MAAM,KAAK,qBAAqB,OAAA,EAAS,mBAAmB,aAAa;AAAA,MACxF,QAAQ;AAAA,QACP,YAAY,MAAM,UAAU,UAAU;AAAA,QACtC;AAAA,QACA;AAAA,QACA;AAAA,MAAA;AAAA,MAED,OAAO,qBAAqB,MAAM,UAAU,OAAO,CAAC;AAAA,MACpD,QAAQ,sBAAsB,MAAM,UAAU,QAAQ,CAAC;AAAA,IAAA,CACvD;AAED,WAAO;AAAA,MACN;AAAA,QACC,EAAE,OAAO,cAAc,MAAM,WAAA;AAAA,QAC7B,EAAE,OAAO,SAAS,MAAM,SAAA;AAAA,QACxB,EAAE,OAAO,QAAQ,MAAM,OAAA;AAAA,QACvB,EAAE,OAAO,eAAe,MAAM,cAAA;AAAA,QAC9B,EAAE,OAAO,eAAe,MAAM,eAAe,QAAQ,kBAAA;AAAA,MAAkB;AAAA,MAExE;AAAA,MACA;AAAA,IAAA;AAGD,QAAI,QAAQ,WAAW,GAAG;AAEzB,aAAO,KAAK,+BAA+B,WAAW,kEAAkE;AAAA,IACzH;AAAA,EACD;AACD;AAEA,MAAM,kBAAkB,CAAC,UAAsD;AAC9E,MAAI,UAAU,QAAW;AACxB,WAAO;AAAA,EACR;AACA,QAAM,aAAa,YAAY,KAAK,QAAM,OAAO,MAAM,aAAa;AACpE,MAAI,eAAe,QAAW;AAC7B,UAAM,IAAI,SAAS,gCAAgC,YAAY,KAAK,IAAI,CAAC,UAAU,KAAK,MAAM;AAAA,MAC7F,MAAM;AAAA,MACN,UAAU,SAAS;AAAA,IAAA,CACnB;AAAA,EACF;AACA,SAAO;AACR;"}