@contember/cli 2.1.0-rc.3 → 2.2.0-alpha.10

package/dist/production/src/commands/tenant/member/TenantMemberRemoveCommand.cjs

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const cliCommon = require("@contember/cli-common");
+const confirmation = require("../../../lib/tenant/confirmation.cjs");
+const tenantOutput = require("../tenantOutput.cjs");
+const memberOptions = require("./memberOptions.cjs");
+class TenantMemberRemoveCommand extends cliCommon.Command {
+  constructor(tenantClientProvider) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+  }
+  configure(configuration) {
+    configuration.description("Remove an identity from a project");
+    configuration.option("project").valueRequired().required().description("Project slug.");
+    configuration.option("identity").valueRequired().required().description("Identity id of the member to remove.");
+    configuration.option("yes").valueNone().description("Do not ask for confirmation.");
+  }
+  async execute(input, output) {
+    const projectSlug = memberOptions.requireOptionValue(input.getOption("project"), "project");
+    const identityId = memberOptions.requireOptionValue(input.getOption("identity"), "identity");
+    await confirmation.requireConfirmation({
+      yes: input.getOption("yes") === true,
+      output,
+      warning: `Identity ${identityId} will lose all its memberships in project ${projectSlug}.`
+    });
+    output.info(`Removing identity ${identityId} from project ${projectSlug}`);
+    await this.tenantClientProvider.member().removeProjectMember(projectSlug, identityId);
+    output.data(
+      { projectSlug, identityId, removed: true },
+      { human: (it) => `Identity ${tenantOutput.humanText(it.identityId)} was removed from ${tenantOutput.humanText(it.projectSlug)}.`, quiet: (it) => it.identityId }
+    );
+  }
+}
+exports.TenantMemberRemoveCommand = TenantMemberRemoveCommand;
+//# sourceMappingURL=TenantMemberRemoveCommand.cjs.map

package/dist/production/src/commands/tenant/member/TenantMemberRemoveCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantMemberRemoveCommand.cjs","sources":["../../../../../../../packages/cli/src/commands/tenant/member/TenantMemberRemoveCommand.ts"],"sourcesContent":["import { Command, CommandConfiguration, Input, Output } from '@contember/cli-common'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport { requireConfirmation } from '../../../lib/tenant/confirmation.js'\nimport { humanText } from '../tenantOutput.js'\nimport { requireOptionValue } from './memberOptions.js'\n\ntype Args = {}\n\ntype Options = {\n\tproject?: string\n\tidentity?: string\n\tyes?: boolean\n}\n\n/** `tenant member remove` */\nexport class TenantMemberRemoveCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('Remove an identity from a project')\n\t\tconfiguration.option('project').valueRequired().required().description('Project slug.')\n\t\tconfiguration.option('identity').valueRequired().required().description('Identity id of the member to remove.')\n\t\tconfiguration.option('yes').valueNone().description('Do not ask for confirmation.')\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<number | void> {\n\t\tconst projectSlug = requireOptionValue(input.getOption('project'), 'project')\n\t\tconst identityId = requireOptionValue(input.getOption('identity'), 'identity')\n\n\t\tawait requireConfirmation({\n\t\t\tyes: input.getOption('yes') === true,\n\t\t\toutput,\n\t\t\twarning: `Identity ${identityId} will lose all its memberships in project ${projectSlug}.`,\n\t\t})\n\n\t\toutput.info(`Removing identity ${identityId} from project ${projectSlug}`)\n\t\tawait this.tenantClientProvider.member().removeProjectMember(projectSlug, identityId)\n\n\t\toutput.data(\n\t\t\t{ projectSlug, identityId, removed: true },\n\t\t\t{ human: it => `Identity ${humanText(it.identityId)} was removed from ${humanText(it.projectSlug)}.`, quiet: it => it.identityId },\n\t\t)\n\t}\n}\n"],"names":["Command","requireOptionValue","requireConfirmation","humanText"],"mappings":";;;;;;AAeO,MAAM,kCAAkCA,UAAAA,QAAuB;AAAA,EACrE,YACkB,sBAChB;AACD,UAAA;AAFiB,SAAA,uBAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,mCAAmC;AAC7D,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,eAAe;AACtF,kBAAc,OAAO,UAAU,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,sCAAsC;AAC9G,kBAAc,OAAO,KAAK,EAAE,UAAA,EAAY,YAAY,8BAA8B;AAAA,EACnF;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAAwC;AAC5F,UAAM,cAAcC,cAAAA,mBAAmB,MAAM,UAAU,SAAS,GAAG,SAAS;AAC5E,UAAM,aAAaA,cAAAA,mBAAmB,MAAM,UAAU,UAAU,GAAG,UAAU;AAE7E,UAAMC,iCAAoB;AAAA,MACzB,KAAK,MAAM,UAAU,KAAK,MAAM;AAAA,MAChC;AAAA,MACA,SAAS,YAAY,UAAU,6CAA6C,WAAW;AAAA,IAAA,CACvF;AAED,WAAO,KAAK,qBAAqB,UAAU,iBAAiB,WAAW,EAAE;AACzE,UAAM,KAAK,qBAAqB,OAAA,EAAS,oBAAoB,aAAa,UAAU;AAEpF,WAAO;AAAA,MACN,EAAE,aAAa,YAAY,SAAS,KAAA;AAAA,MACpC,EAAE,OAAO,CAAA,OAAM,YAAYC,uBAAU,GAAG,UAAU,CAAC,qBAAqBA,aAAAA,UAAU,GAAG,WAAW,CAAC,KAAK,OAAO,CAAA,OAAM,GAAG,WAAA;AAAA,IAAW;AAAA,EAEnI;AACD;;"}

package/dist/production/src/commands/tenant/member/TenantMemberRemoveCommand.js

@@ -0,0 +1,35 @@
+import { Command } from "@contember/cli-common";
+import { requireConfirmation } from "../../../lib/tenant/confirmation.js";
+import { humanText } from "../tenantOutput.js";
+import { requireOptionValue } from "./memberOptions.js";
+class TenantMemberRemoveCommand extends Command {
+  constructor(tenantClientProvider) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+  }
+  configure(configuration) {
+    configuration.description("Remove an identity from a project");
+    configuration.option("project").valueRequired().required().description("Project slug.");
+    configuration.option("identity").valueRequired().required().description("Identity id of the member to remove.");
+    configuration.option("yes").valueNone().description("Do not ask for confirmation.");
+  }
+  async execute(input, output) {
+    const projectSlug = requireOptionValue(input.getOption("project"), "project");
+    const identityId = requireOptionValue(input.getOption("identity"), "identity");
+    await requireConfirmation({
+      yes: input.getOption("yes") === true,
+      output,
+      warning: `Identity ${identityId} will lose all its memberships in project ${projectSlug}.`
+    });
+    output.info(`Removing identity ${identityId} from project ${projectSlug}`);
+    await this.tenantClientProvider.member().removeProjectMember(projectSlug, identityId);
+    output.data(
+      { projectSlug, identityId, removed: true },
+      { human: (it) => `Identity ${humanText(it.identityId)} was removed from ${humanText(it.projectSlug)}.`, quiet: (it) => it.identityId }
+    );
+  }
+}
+export {
+  TenantMemberRemoveCommand
+};
+//# sourceMappingURL=TenantMemberRemoveCommand.js.map

package/dist/production/src/commands/tenant/member/TenantMemberRemoveCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantMemberRemoveCommand.js","sources":["../../../../../../../packages/cli/src/commands/tenant/member/TenantMemberRemoveCommand.ts"],"sourcesContent":["import { Command, CommandConfiguration, Input, Output } from '@contember/cli-common'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport { requireConfirmation } from '../../../lib/tenant/confirmation.js'\nimport { humanText } from '../tenantOutput.js'\nimport { requireOptionValue } from './memberOptions.js'\n\ntype Args = {}\n\ntype Options = {\n\tproject?: string\n\tidentity?: string\n\tyes?: boolean\n}\n\n/** `tenant member remove` */\nexport class TenantMemberRemoveCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('Remove an identity from a project')\n\t\tconfiguration.option('project').valueRequired().required().description('Project slug.')\n\t\tconfiguration.option('identity').valueRequired().required().description('Identity id of the member to remove.')\n\t\tconfiguration.option('yes').valueNone().description('Do not ask for confirmation.')\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<number | void> {\n\t\tconst projectSlug = requireOptionValue(input.getOption('project'), 'project')\n\t\tconst identityId = requireOptionValue(input.getOption('identity'), 'identity')\n\n\t\tawait requireConfirmation({\n\t\t\tyes: input.getOption('yes') === true,\n\t\t\toutput,\n\t\t\twarning: `Identity ${identityId} will lose all its memberships in project ${projectSlug}.`,\n\t\t})\n\n\t\toutput.info(`Removing identity ${identityId} from project ${projectSlug}`)\n\t\tawait this.tenantClientProvider.member().removeProjectMember(projectSlug, identityId)\n\n\t\toutput.data(\n\t\t\t{ projectSlug, identityId, removed: true },\n\t\t\t{ human: it => `Identity ${humanText(it.identityId)} was removed from ${humanText(it.projectSlug)}.`, quiet: it => it.identityId },\n\t\t)\n\t}\n}\n"],"names":[],"mappings":";;;;AAeO,MAAM,kCAAkC,QAAuB;AAAA,EACrE,YACkB,sBAChB;AACD,UAAA;AAFiB,SAAA,uBAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,mCAAmC;AAC7D,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,eAAe;AACtF,kBAAc,OAAO,UAAU,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,sCAAsC;AAC9G,kBAAc,OAAO,KAAK,EAAE,UAAA,EAAY,YAAY,8BAA8B;AAAA,EACnF;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAAwC;AAC5F,UAAM,cAAc,mBAAmB,MAAM,UAAU,SAAS,GAAG,SAAS;AAC5E,UAAM,aAAa,mBAAmB,MAAM,UAAU,UAAU,GAAG,UAAU;AAE7E,UAAM,oBAAoB;AAAA,MACzB,KAAK,MAAM,UAAU,KAAK,MAAM;AAAA,MAChC;AAAA,MACA,SAAS,YAAY,UAAU,6CAA6C,WAAW;AAAA,IAAA,CACvF;AAED,WAAO,KAAK,qBAAqB,UAAU,iBAAiB,WAAW,EAAE;AACzE,UAAM,KAAK,qBAAqB,OAAA,EAAS,oBAAoB,aAAa,UAAU;AAEpF,WAAO;AAAA,MACN,EAAE,aAAa,YAAY,SAAS,KAAA;AAAA,MACpC,EAAE,OAAO,CAAA,OAAM,YAAY,UAAU,GAAG,UAAU,CAAC,qBAAqB,UAAU,GAAG,WAAW,CAAC,KAAK,OAAO,CAAA,OAAM,GAAG,WAAA;AAAA,IAAW;AAAA,EAEnI;AACD;"}

package/dist/production/src/commands/tenant/member/TenantMemberUpdateCommand.cjs

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const cliCommon = require("@contember/cli-common");
+const memberOptions = require("./memberOptions.cjs");
+const membershipInput = require("./membershipInput.cjs");
+const stdin = require("../../../lib/tenant/stdin.cjs");
+const confirmation = require("../../../lib/tenant/confirmation.cjs");
+const tenantOutput = require("../tenantOutput.cjs");
+class TenantMemberUpdateCommand extends cliCommon.Command {
+  constructor(tenantClientProvider, readStdin = stdin.readStdinText) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+    this.readStdin = readStdin;
+  }
+  configure(configuration) {
+    configuration.description("Replace the memberships of an existing project member");
+    configuration.option("project").valueRequired().required().description("Project slug.");
+    configuration.option("identity").valueRequired().required().description("Identity id of the member.");
+    configuration.option("yes").valueNone().description("Confirm replacing the membership list with an empty list.");
+    membershipInput.configureMembershipOptions(configuration);
+  }
+  async execute(input, output) {
+    const projectSlug = memberOptions.requireOptionValue(input.getOption("project"), "project");
+    const identityId = memberOptions.requireOptionValue(input.getOption("identity"), "identity");
+    const memberships = await membershipInput.resolveMemberships(membershipInput.readMembershipInputSource(input), this.readStdin);
+    if (memberships.length === 0) {
+      await confirmation.requireConfirmation({
+        yes: input.getOption("yes") === true,
+        output,
+        warning: `This will remove every membership of identity ${identityId} in project ${projectSlug}.`
+      });
+    }
+    output.info(`Replacing the memberships of identity ${identityId} in project ${projectSlug} with ${memberOptions.formatMemberships(memberships)}`);
+    await this.tenantClientProvider.member().updateProjectMember(projectSlug, identityId, memberships);
+    output.data(
+      { projectSlug, identityId, memberships },
+      {
+        human: (it) => `Identity ${tenantOutput.humanText(it.identityId)} in ${tenantOutput.humanText(it.projectSlug)} now has: ${memberOptions.formatMemberships(it.memberships)}`,
+        quiet: (it) => it.identityId
+      }
+    );
+  }
+}
+exports.TenantMemberUpdateCommand = TenantMemberUpdateCommand;
+//# sourceMappingURL=TenantMemberUpdateCommand.cjs.map

package/dist/production/src/commands/tenant/member/TenantMemberUpdateCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantMemberUpdateCommand.cjs","sources":["../../../../../../../packages/cli/src/commands/tenant/member/TenantMemberUpdateCommand.ts"],"sourcesContent":["import { Command, CommandConfiguration, Input, Output } from '@contember/cli-common'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport { formatMemberships, requireOptionValue } from './memberOptions.js'\nimport { configureMembershipOptions, MembershipOptions, readMembershipInputSource, resolveMemberships } from './membershipInput.js'\nimport { readStdinText, StdinReader } from '../../../lib/tenant/stdin.js'\nimport { requireConfirmation } from '../../../lib/tenant/confirmation.js'\nimport { humanText } from '../tenantOutput.js'\n\ntype Args = {}\n\ntype Options = MembershipOptions & {\n\tproject?: string\n\tidentity?: string\n\tyes?: boolean\n}\n\n/** `tenant member update` */\nexport class TenantMemberUpdateCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t\tprivate readonly readStdin: StdinReader = readStdinText,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('Replace the memberships of an existing project member')\n\t\tconfiguration.option('project').valueRequired().required().description('Project slug.')\n\t\tconfiguration.option('identity').valueRequired().required().description('Identity id of the member.')\n\t\tconfiguration.option('yes').valueNone().description('Confirm replacing the membership list with an empty list.')\n\t\tconfigureMembershipOptions(configuration)\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<void> {\n\t\tconst projectSlug = requireOptionValue(input.getOption('project'), 'project')\n\t\tconst identityId = requireOptionValue(input.getOption('identity'), 'identity')\n\t\tconst memberships = await resolveMemberships(readMembershipInputSource(input), this.readStdin)\n\t\tif (memberships.length === 0) {\n\t\t\tawait requireConfirmation({\n\t\t\t\tyes: input.getOption('yes') === true,\n\t\t\t\toutput,\n\t\t\t\twarning: `This will remove every membership of identity ${identityId} in project ${projectSlug}.`,\n\t\t\t})\n\t\t}\n\n\t\t// the mutation replaces the whole list, so anything the caller omits is dropped\n\t\toutput.info(`Replacing the memberships of identity ${identityId} in project ${projectSlug} with ${formatMemberships(memberships)}`)\n\t\tawait this.tenantClientProvider.member().updateProjectMember(projectSlug, identityId, memberships)\n\n\t\toutput.data(\n\t\t\t{ projectSlug, identityId, memberships },\n\t\t\t{\n\t\t\t\thuman: it => `Identity ${humanText(it.identityId)} in ${humanText(it.projectSlug)} now has: ${formatMemberships(it.memberships)}`,\n\t\t\t\tquiet: it => it.identityId,\n\t\t\t},\n\t\t)\n\t}\n}\n"],"names":["Command","readStdinText","configureMembershipOptions","requireOptionValue","resolveMemberships","readMembershipInputSource","requireConfirmation","formatMemberships","humanText"],"mappings":";;;;;;;;AAiBO,MAAM,kCAAkCA,UAAAA,QAAuB;AAAA,EACrE,YACkB,sBACA,YAAyBC,qBACzC;AACD,UAAA;AAHiB,SAAA,uBAAA;AACA,SAAA,YAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,uDAAuD;AACjF,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,eAAe;AACtF,kBAAc,OAAO,UAAU,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,4BAA4B;AACpG,kBAAc,OAAO,KAAK,EAAE,UAAA,EAAY,YAAY,2DAA2D;AAC/GC,oBAAAA,2BAA2B,aAAa;AAAA,EACzC;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAA+B;AACnF,UAAM,cAAcC,cAAAA,mBAAmB,MAAM,UAAU,SAAS,GAAG,SAAS;AAC5E,UAAM,aAAaA,cAAAA,mBAAmB,MAAM,UAAU,UAAU,GAAG,UAAU;AAC7E,UAAM,cAAc,MAAMC,mCAAmBC,gBAAAA,0BAA0B,KAAK,GAAG,KAAK,SAAS;AAC7F,QAAI,YAAY,WAAW,GAAG;AAC7B,YAAMC,iCAAoB;AAAA,QACzB,KAAK,MAAM,UAAU,KAAK,MAAM;AAAA,QAChC;AAAA,QACA,SAAS,iDAAiD,UAAU,eAAe,WAAW;AAAA,MAAA,CAC9F;AAAA,IACF;AAGA,WAAO,KAAK,yCAAyC,UAAU,eAAe,WAAW,SAASC,cAAAA,kBAAkB,WAAW,CAAC,EAAE;AAClI,UAAM,KAAK,qBAAqB,OAAA,EAAS,oBAAoB,aAAa,YAAY,WAAW;AAEjG,WAAO;AAAA,MACN,EAAE,aAAa,YAAY,YAAA;AAAA,MAC3B;AAAA,QACC,OAAO,CAAA,OAAM,YAAYC,aAAAA,UAAU,GAAG,UAAU,CAAC,OAAOA,aAAAA,UAAU,GAAG,WAAW,CAAC,aAAaD,cAAAA,kBAAkB,GAAG,WAAW,CAAC;AAAA,QAC/H,OAAO,QAAM,GAAG;AAAA,MAAA;AAAA,IACjB;AAAA,EAEF;AACD;;"}

package/dist/production/src/commands/tenant/member/TenantMemberUpdateCommand.js

@@ -0,0 +1,45 @@
+import { Command } from "@contember/cli-common";
+import { requireOptionValue, formatMemberships } from "./memberOptions.js";
+import { configureMembershipOptions, resolveMemberships, readMembershipInputSource } from "./membershipInput.js";
+import { readStdinText } from "../../../lib/tenant/stdin.js";
+import { requireConfirmation } from "../../../lib/tenant/confirmation.js";
+import { humanText } from "../tenantOutput.js";
+class TenantMemberUpdateCommand extends Command {
+  constructor(tenantClientProvider, readStdin = readStdinText) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+    this.readStdin = readStdin;
+  }
+  configure(configuration) {
+    configuration.description("Replace the memberships of an existing project member");
+    configuration.option("project").valueRequired().required().description("Project slug.");
+    configuration.option("identity").valueRequired().required().description("Identity id of the member.");
+    configuration.option("yes").valueNone().description("Confirm replacing the membership list with an empty list.");
+    configureMembershipOptions(configuration);
+  }
+  async execute(input, output) {
+    const projectSlug = requireOptionValue(input.getOption("project"), "project");
+    const identityId = requireOptionValue(input.getOption("identity"), "identity");
+    const memberships = await resolveMemberships(readMembershipInputSource(input), this.readStdin);
+    if (memberships.length === 0) {
+      await requireConfirmation({
+        yes: input.getOption("yes") === true,
+        output,
+        warning: `This will remove every membership of identity ${identityId} in project ${projectSlug}.`
+      });
+    }
+    output.info(`Replacing the memberships of identity ${identityId} in project ${projectSlug} with ${formatMemberships(memberships)}`);
+    await this.tenantClientProvider.member().updateProjectMember(projectSlug, identityId, memberships);
+    output.data(
+      { projectSlug, identityId, memberships },
+      {
+        human: (it) => `Identity ${humanText(it.identityId)} in ${humanText(it.projectSlug)} now has: ${formatMemberships(it.memberships)}`,
+        quiet: (it) => it.identityId
+      }
+    );
+  }
+}
+export {
+  TenantMemberUpdateCommand
+};
+//# sourceMappingURL=TenantMemberUpdateCommand.js.map

package/dist/production/src/commands/tenant/member/TenantMemberUpdateCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantMemberUpdateCommand.js","sources":["../../../../../../../packages/cli/src/commands/tenant/member/TenantMemberUpdateCommand.ts"],"sourcesContent":["import { Command, CommandConfiguration, Input, Output } from '@contember/cli-common'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport { formatMemberships, requireOptionValue } from './memberOptions.js'\nimport { configureMembershipOptions, MembershipOptions, readMembershipInputSource, resolveMemberships } from './membershipInput.js'\nimport { readStdinText, StdinReader } from '../../../lib/tenant/stdin.js'\nimport { requireConfirmation } from '../../../lib/tenant/confirmation.js'\nimport { humanText } from '../tenantOutput.js'\n\ntype Args = {}\n\ntype Options = MembershipOptions & {\n\tproject?: string\n\tidentity?: string\n\tyes?: boolean\n}\n\n/** `tenant member update` */\nexport class TenantMemberUpdateCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t\tprivate readonly readStdin: StdinReader = readStdinText,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('Replace the memberships of an existing project member')\n\t\tconfiguration.option('project').valueRequired().required().description('Project slug.')\n\t\tconfiguration.option('identity').valueRequired().required().description('Identity id of the member.')\n\t\tconfiguration.option('yes').valueNone().description('Confirm replacing the membership list with an empty list.')\n\t\tconfigureMembershipOptions(configuration)\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<void> {\n\t\tconst projectSlug = requireOptionValue(input.getOption('project'), 'project')\n\t\tconst identityId = requireOptionValue(input.getOption('identity'), 'identity')\n\t\tconst memberships = await resolveMemberships(readMembershipInputSource(input), this.readStdin)\n\t\tif (memberships.length === 0) {\n\t\t\tawait requireConfirmation({\n\t\t\t\tyes: input.getOption('yes') === true,\n\t\t\t\toutput,\n\t\t\t\twarning: `This will remove every membership of identity ${identityId} in project ${projectSlug}.`,\n\t\t\t})\n\t\t}\n\n\t\t// the mutation replaces the whole list, so anything the caller omits is dropped\n\t\toutput.info(`Replacing the memberships of identity ${identityId} in project ${projectSlug} with ${formatMemberships(memberships)}`)\n\t\tawait this.tenantClientProvider.member().updateProjectMember(projectSlug, identityId, memberships)\n\n\t\toutput.data(\n\t\t\t{ projectSlug, identityId, memberships },\n\t\t\t{\n\t\t\t\thuman: it => `Identity ${humanText(it.identityId)} in ${humanText(it.projectSlug)} now has: ${formatMemberships(it.memberships)}`,\n\t\t\t\tquiet: it => it.identityId,\n\t\t\t},\n\t\t)\n\t}\n}\n"],"names":[],"mappings":";;;;;;AAiBO,MAAM,kCAAkC,QAAuB;AAAA,EACrE,YACkB,sBACA,YAAyB,eACzC;AACD,UAAA;AAHiB,SAAA,uBAAA;AACA,SAAA,YAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,uDAAuD;AACjF,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,eAAe;AACtF,kBAAc,OAAO,UAAU,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,4BAA4B;AACpG,kBAAc,OAAO,KAAK,EAAE,UAAA,EAAY,YAAY,2DAA2D;AAC/G,+BAA2B,aAAa;AAAA,EACzC;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAA+B;AACnF,UAAM,cAAc,mBAAmB,MAAM,UAAU,SAAS,GAAG,SAAS;AAC5E,UAAM,aAAa,mBAAmB,MAAM,UAAU,UAAU,GAAG,UAAU;AAC7E,UAAM,cAAc,MAAM,mBAAmB,0BAA0B,KAAK,GAAG,KAAK,SAAS;AAC7F,QAAI,YAAY,WAAW,GAAG;AAC7B,YAAM,oBAAoB;AAAA,QACzB,KAAK,MAAM,UAAU,KAAK,MAAM;AAAA,QAChC;AAAA,QACA,SAAS,iDAAiD,UAAU,eAAe,WAAW;AAAA,MAAA,CAC9F;AAAA,IACF;AAGA,WAAO,KAAK,yCAAyC,UAAU,eAAe,WAAW,SAAS,kBAAkB,WAAW,CAAC,EAAE;AAClI,UAAM,KAAK,qBAAqB,OAAA,EAAS,oBAAoB,aAAa,YAAY,WAAW;AAEjG,WAAO;AAAA,MACN,EAAE,aAAa,YAAY,YAAA;AAAA,MAC3B;AAAA,QACC,OAAO,CAAA,OAAM,YAAY,UAAU,GAAG,UAAU,CAAC,OAAO,UAAU,GAAG,WAAW,CAAC,aAAa,kBAAkB,GAAG,WAAW,CAAC;AAAA,QAC/H,OAAO,QAAM,GAAG;AAAA,MAAA;AAAA,IACjB;AAAA,EAEF;AACD;"}

package/dist/production/src/commands/tenant/member/memberOptions.cjs

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const cliCommon = require("@contember/cli-common");
+const tenantOutput = require("../tenantOutput.cjs");
+const requireOptionValue = (value, name) => {
+  if (value === void 0 || value === "") {
+    throw new cliCommon.CliError(`Option --${name} is required and must not be empty.`, { code: "INVALID_INPUT", exitCode: cliCommon.ExitCode.InputError });
+  }
+  return value;
+};
+const formatMemberships = (memberships) => memberships.map(
+  (it) => it.variables.length === 0 ? tenantOutput.humanText(it.role) : `${tenantOutput.humanText(it.role)} (${it.variables.map((v) => `${tenantOutput.humanText(v.name)}: ${v.values.map(tenantOutput.humanText).join(", ")}`).join("; ")})`
+).join(", ");
+exports.formatMemberships = formatMemberships;
+exports.requireOptionValue = requireOptionValue;
+//# sourceMappingURL=memberOptions.cjs.map

package/dist/production/src/commands/tenant/member/memberOptions.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"memberOptions.cjs","sources":["../../../../../../../packages/cli/src/commands/tenant/member/memberOptions.ts"],"sourcesContent":["import { CliError, ExitCode } from '@contember/cli-common'\nimport { humanText } from '../tenantOutput.js'\n\n/**\n * Reads an option the parser already enforces as required. The parser guarantees presence, not a\n * non-empty value, and the option type stays optional — this keeps the command free of a cast.\n */\nexport const requireOptionValue = (value: string | undefined, name: string): string => {\n\tif (value === undefined || value === '') {\n\t\tthrow new CliError(`Option --${name} is required and must not be empty.`, { code: 'INVALID_INPUT', exitCode: ExitCode.InputError })\n\t}\n\treturn value\n}\n\n/** Both the fetched `TenantMembership` and the `MembershipInput` sent to the API, which differ only in readonly-ness. */\nexport interface MembershipLike {\n\treadonly role: string\n\treadonly variables: readonly { readonly name: string; readonly values: readonly string[] }[]\n}\n\n/** Human-mode rendering of a membership list. `--json` and `--quiet` always see the raw structure. */\nexport const formatMemberships = (memberships: readonly MembershipLike[]): string =>\n\tmemberships\n\t\t.map(it =>\n\t\t\tit.variables.length === 0\n\t\t\t\t? humanText(it.role)\n\t\t\t\t: `${humanText(it.role)} (${it.variables.map(v => `${humanText(v.name)}: ${v.values.map(humanText).join(', ')}`).join('; ')})`\n\t\t)\n\t\t.join(', ')\n"],"names":["CliError","ExitCode","humanText"],"mappings":";;;;AAOO,MAAM,qBAAqB,CAAC,OAA2B,SAAyB;AACtF,MAAI,UAAU,UAAa,UAAU,IAAI;AACxC,UAAM,IAAIA,UAAAA,SAAS,YAAY,IAAI,uCAAuC,EAAE,MAAM,iBAAiB,UAAUC,UAAAA,SAAS,WAAA,CAAY;AAAA,EACnI;AACA,SAAO;AACR;AASO,MAAM,oBAAoB,CAAC,gBACjC,YACE;AAAA,EAAI,QACJ,GAAG,UAAU,WAAW,IACrBC,aAAAA,UAAU,GAAG,IAAI,IACjB,GAAGA,aAAAA,UAAU,GAAG,IAAI,CAAC,KAAK,GAAG,UAAU,IAAI,CAAA,MAAK,GAAGA,aAAAA,UAAU,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,IAAIA,aAAAA,SAAS,EAAE,KAAK,IAAI,CAAC,EAAE,EAAE,KAAK,IAAI,CAAC;AAC7H,EACC,KAAK,IAAI;;;"}

package/dist/production/src/commands/tenant/member/memberOptions.js

@@ -0,0 +1,16 @@
+import { CliError, ExitCode } from "@contember/cli-common";
+import { humanText } from "../tenantOutput.js";
+const requireOptionValue = (value, name) => {
+  if (value === void 0 || value === "") {
+    throw new CliError(`Option --${name} is required and must not be empty.`, { code: "INVALID_INPUT", exitCode: ExitCode.InputError });
+  }
+  return value;
+};
+const formatMemberships = (memberships) => memberships.map(
+  (it) => it.variables.length === 0 ? humanText(it.role) : `${humanText(it.role)} (${it.variables.map((v) => `${humanText(v.name)}: ${v.values.map(humanText).join(", ")}`).join("; ")})`
+).join(", ");
+export {
+  formatMemberships,
+  requireOptionValue
+};
+//# sourceMappingURL=memberOptions.js.map

package/dist/production/src/commands/tenant/member/memberOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memberOptions.js","sources":["../../../../../../../packages/cli/src/commands/tenant/member/memberOptions.ts"],"sourcesContent":["import { CliError, ExitCode } from '@contember/cli-common'\nimport { humanText } from '../tenantOutput.js'\n\n/**\n * Reads an option the parser already enforces as required. The parser guarantees presence, not a\n * non-empty value, and the option type stays optional — this keeps the command free of a cast.\n */\nexport const requireOptionValue = (value: string | undefined, name: string): string => {\n\tif (value === undefined || value === '') {\n\t\tthrow new CliError(`Option --${name} is required and must not be empty.`, { code: 'INVALID_INPUT', exitCode: ExitCode.InputError })\n\t}\n\treturn value\n}\n\n/** Both the fetched `TenantMembership` and the `MembershipInput` sent to the API, which differ only in readonly-ness. */\nexport interface MembershipLike {\n\treadonly role: string\n\treadonly variables: readonly { readonly name: string; readonly values: readonly string[] }[]\n}\n\n/** Human-mode rendering of a membership list. `--json` and `--quiet` always see the raw structure. */\nexport const formatMemberships = (memberships: readonly MembershipLike[]): string =>\n\tmemberships\n\t\t.map(it =>\n\t\t\tit.variables.length === 0\n\t\t\t\t? humanText(it.role)\n\t\t\t\t: `${humanText(it.role)} (${it.variables.map(v => `${humanText(v.name)}: ${v.values.map(humanText).join(', ')}`).join('; ')})`\n\t\t)\n\t\t.join(', ')\n"],"names":[],"mappings":";;AAOO,MAAM,qBAAqB,CAAC,OAA2B,SAAyB;AACtF,MAAI,UAAU,UAAa,UAAU,IAAI;AACxC,UAAM,IAAI,SAAS,YAAY,IAAI,uCAAuC,EAAE,MAAM,iBAAiB,UAAU,SAAS,WAAA,CAAY;AAAA,EACnI;AACA,SAAO;AACR;AASO,MAAM,oBAAoB,CAAC,gBACjC,YACE;AAAA,EAAI,QACJ,GAAG,UAAU,WAAW,IACrB,UAAU,GAAG,IAAI,IACjB,GAAG,UAAU,GAAG,IAAI,CAAC,KAAK,GAAG,UAAU,IAAI,CAAA,MAAK,GAAG,UAAU,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,SAAS,EAAE,KAAK,IAAI,CAAC,EAAE,EAAE,KAAK,IAAI,CAAC;AAC7H,EACC,KAAK,IAAI;"}

package/dist/production/src/commands/tenant/member/membershipInput.cjs

@@ -0,0 +1,109 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const cliCommon = require("@contember/cli-common");
+const MEMBERSHIPS_JSON_EXAMPLE = '[{"role":"editor","variables":[{"name":"locale","values":["cs","en"]}]}]';
+const configureMembershipOptions = (configuration, { roleDescription = "Membership role without variables. Repeat for several roles." } = {}) => {
+  configuration.option("role").valueArray().description(roleDescription);
+  configuration.option("memberships").valueRequired().description(
+    `Memberships as JSON, e.g. '${MEMBERSHIPS_JSON_EXAMPLE}'. Not combinable with --role.`
+  );
+  configuration.option("memberships-stdin").valueNone().description("Read the memberships JSON from stdin instead of --memberships.");
+};
+const readMembershipInputSource = (input) => ({
+  roles: input.getOption("role"),
+  json: input.getOption("memberships"),
+  fromStdin: input.getOption("memberships-stdin") === true
+});
+const resolveMemberships = async (source, readStdin) => {
+  const roles = source.roles ?? [];
+  const hasJson = source.json !== void 0;
+  if (hasJson && source.fromStdin) {
+    throw membershipInputError("Pass the memberships either as --memberships or as --memberships-stdin, not both.");
+  }
+  if (roles.length > 0 && (hasJson || source.fromStdin)) {
+    throw membershipInputError("Pass the memberships either as --role or as JSON (--memberships / --memberships-stdin), not both.");
+  }
+  if (roles.length > 0) {
+    return roles.map((role) => ({ role, variables: [] }));
+  }
+  if (hasJson) {
+    return parseMemberships(source.json ?? "", "--memberships");
+  }
+  if (source.fromStdin) {
+    return parseMemberships(await readStdin(), "stdin");
+  }
+  throw membershipInputError(
+    `No memberships given. Pass --role <role> for a role without variables, or the full structure as --memberships '${MEMBERSHIPS_JSON_EXAMPLE}'.`
+  );
+};
+const resolveNonEmptyMemberships = async (source, readStdin) => {
+  const memberships = await resolveMemberships(source, readStdin);
+  if (memberships.length === 0) {
+    throw membershipInputError("At least one membership is required for this operation.");
+  }
+  return memberships;
+};
+const membershipInputError = (message, details) => new cliCommon.CliError(message, { code: "INVALID_MEMBERSHIPS", exitCode: cliCommon.ExitCode.InputError, details });
+const parseMemberships = (json, origin) => {
+  if (json.trim() === "") {
+    throw membershipInputError(`Empty memberships JSON read from ${origin}.`);
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(json);
+  } catch (e) {
+    throw membershipInputError(`Memberships read from ${origin} are not valid JSON: ${e instanceof Error ? e.message : String(e)}`);
+  }
+  if (!Array.isArray(parsed)) {
+    throw membershipInputError(`Memberships read from ${origin} must be a JSON array, got ${describeJson(parsed)}.`);
+  }
+  return parsed.map((it, index) => parseMembership(it, `${origin}[${index}]`));
+};
+const parseMembership = (value, path) => {
+  const record = asRecord(value, path);
+  assertNoUnknownKeys(record, ["role", "variables"], path);
+  const role = record.role;
+  if (typeof role !== "string" || role === "") {
+    throw membershipInputError(`${path}.role must be a non-empty string.`);
+  }
+  const variables = record.variables;
+  if (variables === void 0 || variables === null) {
+    return { role, variables: [] };
+  }
+  if (!Array.isArray(variables)) {
+    throw membershipInputError(`${path}.variables must be an array, got ${describeJson(variables)}.`);
+  }
+  return { role, variables: variables.map((it, index) => parseVariable(it, `${path}.variables[${index}]`)) };
+};
+const parseVariable = (value, path) => {
+  const record = asRecord(value, path);
+  assertNoUnknownKeys(record, ["name", "values"], path);
+  const name = record.name;
+  if (typeof name !== "string" || name === "") {
+    throw membershipInputError(`${path}.name must be a non-empty string.`);
+  }
+  const values = record.values;
+  if (!Array.isArray(values) || values.some((it) => typeof it !== "string")) {
+    throw membershipInputError(`${path}.values must be an array of strings.`);
+  }
+  return { name, values: values.filter((it) => typeof it === "string") };
+};
+const asRecord = (value, path) => {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) {
+    throw membershipInputError(`${path} must be an object, got ${describeJson(value)}.`);
+  }
+  return { ...value };
+};
+const assertNoUnknownKeys = (record, known, path) => {
+  const unknown = Object.keys(record).filter((it) => !known.includes(it));
+  if (unknown.length > 0) {
+    throw membershipInputError(`${path} has unknown ${unknown.length === 1 ? "key" : "keys"} ${unknown.join(", ")}. Allowed: ${known.join(", ")}.`);
+  }
+};
+const describeJson = (value) => value === null ? "null" : Array.isArray(value) ? "an array" : typeof value;
+exports.MEMBERSHIPS_JSON_EXAMPLE = MEMBERSHIPS_JSON_EXAMPLE;
+exports.configureMembershipOptions = configureMembershipOptions;
+exports.readMembershipInputSource = readMembershipInputSource;
+exports.resolveMemberships = resolveMemberships;
+exports.resolveNonEmptyMemberships = resolveNonEmptyMemberships;
+//# sourceMappingURL=membershipInput.cjs.map

package/dist/production/src/commands/tenant/member/membershipInput.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"membershipInput.cjs","sources":["../../../../../../../packages/cli/src/commands/tenant/member/membershipInput.ts"],"sourcesContent":["import { CliError, CommandConfiguration, ExitCode } from '@contember/cli-common'\nimport type { MembershipInput } from '@contember/graphql-client-tenant'\nimport type { StdinReader } from '../../../lib/tenant/stdin.js'\n\n/** `Arguments` is not part of the `@contember/cli-common` public surface, so the widest form is spelled out here. */\ntype AnyArguments = Record<string, string | string[] | undefined>\n\n/**\n * The options every command taking `memberships: [MembershipInput!]!` declares.\n *\n * There are deliberately exactly two ways in, and no third one:\n *\n * - `--role <role>`, repeatable — a membership with no variables, which is the whole shape a human\n *   needs for `--role editor`;\n * - `--memberships <json>` / `--memberships-stdin` — the complete `MembershipInput[]` structure, which is\n *   what a script or an agent already holds.\n *\n * A compact string syntax for variables (`editor:locale=en,cs`) is intentionally not offered: it breaks\n * the moment a value contains the separator, and the JSON form costs an agent nothing.\n */\nexport type MembershipOptions = {\n\trole?: string[]\n\tmemberships?: string\n\t['memberships-stdin']?: boolean\n}\n\nexport const MEMBERSHIPS_JSON_EXAMPLE = '[{\"role\":\"editor\",\"variables\":[{\"name\":\"locale\",\"values\":[\"cs\",\"en\"]}]}]'\n\n/** `roleDescription` exists for `tenant api-key create`, where `--role` also names a global tenant role. */\nexport const configureMembershipOptions = (\n\tconfiguration: CommandConfiguration<AnyArguments, MembershipOptions>,\n\t{ roleDescription = 'Membership role without variables. Repeat for several roles.' }: { roleDescription?: string } = {},\n): void => {\n\tconfiguration.option('role').valueArray().description(roleDescription)\n\tconfiguration.option('memberships').valueRequired().description(\n\t\t`Memberships as JSON, e.g. '${MEMBERSHIPS_JSON_EXAMPLE}'. Not combinable with --role.`,\n\t)\n\tconfiguration.option('memberships-stdin').valueNone().description('Read the memberships JSON from stdin instead of --memberships.')\n}\n\n/** The raw values of {@link MembershipOptions}, read by the command so no generic `Input` has to be passed around. */\nexport interface MembershipInputSource {\n\troles: string[] | undefined\n\tjson: string | undefined\n\tfromStdin: boolean\n}\n\nexport const readMembershipInputSource = (input: {\n\tgetOption(name: 'role'): string[] | undefined\n\tgetOption(name: 'memberships'): string | undefined\n\tgetOption(name: 'memberships-stdin'): boolean | undefined\n}): MembershipInputSource => ({\n\troles: input.getOption('role'),\n\tjson: input.getOption('memberships'),\n\tfromStdin: input.getOption('memberships-stdin') === true,\n})\n\nexport const resolveMemberships = async (source: MembershipInputSource, readStdin: StdinReader): Promise<MembershipInput[]> => {\n\tconst roles = source.roles ?? []\n\tconst hasJson = source.json !== undefined\n\tif (hasJson && source.fromStdin) {\n\t\tthrow membershipInputError('Pass the memberships either as --memberships or as --memberships-stdin, not both.')\n\t}\n\tif (roles.length > 0 && (hasJson || source.fromStdin)) {\n\t\tthrow membershipInputError('Pass the memberships either as --role or as JSON (--memberships / --memberships-stdin), not both.')\n\t}\n\tif (roles.length > 0) {\n\t\treturn roles.map(role => ({ role, variables: [] }))\n\t}\n\tif (hasJson) {\n\t\treturn parseMemberships(source.json ?? '', '--memberships')\n\t}\n\tif (source.fromStdin) {\n\t\treturn parseMemberships(await readStdin(), 'stdin')\n\t}\n\tthrow membershipInputError(\n\t\t`No memberships given. Pass --role <role> for a role without variables, or the full structure as --memberships '${MEMBERSHIPS_JSON_EXAMPLE}'.`,\n\t)\n}\n\n/** Creation operations must not create an identity with no project access. */\nexport const resolveNonEmptyMemberships = async (source: MembershipInputSource, readStdin: StdinReader): Promise<MembershipInput[]> => {\n\tconst memberships = await resolveMemberships(source, readStdin)\n\tif (memberships.length === 0) {\n\t\tthrow membershipInputError('At least one membership is required for this operation.')\n\t}\n\treturn memberships\n}\n\nconst membershipInputError = (message: string, details?: unknown): CliError =>\n\tnew CliError(message, { code: 'INVALID_MEMBERSHIPS', exitCode: ExitCode.InputError, details })\n\nconst parseMemberships = (json: string, origin: string): MembershipInput[] => {\n\tif (json.trim() === '') {\n\t\tthrow membershipInputError(`Empty memberships JSON read from ${origin}.`)\n\t}\n\tlet parsed: unknown\n\ttry {\n\t\tparsed = JSON.parse(json)\n\t} catch (e) {\n\t\tthrow membershipInputError(`Memberships read from ${origin} are not valid JSON: ${e instanceof Error ? e.message : String(e)}`)\n\t}\n\tif (!Array.isArray(parsed)) {\n\t\tthrow membershipInputError(`Memberships read from ${origin} must be a JSON array, got ${describeJson(parsed)}.`)\n\t}\n\treturn parsed.map((it, index) => parseMembership(it, `${origin}[${index}]`))\n}\n\nconst parseMembership = (value: unknown, path: string): MembershipInput => {\n\tconst record = asRecord(value, path)\n\tassertNoUnknownKeys(record, ['role', 'variables'], path)\n\tconst role = record.role\n\tif (typeof role !== 'string' || role === '') {\n\t\tthrow membershipInputError(`${path}.role must be a non-empty string.`)\n\t}\n\tconst variables = record.variables\n\tif (variables === undefined || variables === null) {\n\t\treturn { role, variables: [] }\n\t}\n\tif (!Array.isArray(variables)) {\n\t\tthrow membershipInputError(`${path}.variables must be an array, got ${describeJson(variables)}.`)\n\t}\n\treturn { role, variables: variables.map((it, index) => parseVariable(it, `${path}.variables[${index}]`)) }\n}\n\nconst parseVariable = (value: unknown, path: string): { name: string; values: string[] } => {\n\tconst record = asRecord(value, path)\n\tassertNoUnknownKeys(record, ['name', 'values'], path)\n\tconst name = record.name\n\tif (typeof name !== 'string' || name === '') {\n\t\tthrow membershipInputError(`${path}.name must be a non-empty string.`)\n\t}\n\tconst values = record.values\n\tif (!Array.isArray(values) || values.some(it => typeof it !== 'string')) {\n\t\tthrow membershipInputError(`${path}.values must be an array of strings.`)\n\t}\n\treturn { name, values: values.filter(it => typeof it === 'string') }\n}\n\nconst asRecord = (value: unknown, path: string): Record<string, unknown> => {\n\tif (typeof value !== 'object' || value === null || Array.isArray(value)) {\n\t\tthrow membershipInputError(`${path} must be an object, got ${describeJson(value)}.`)\n\t}\n\treturn { ...value }\n}\n\n// a typo'd key would otherwise be dropped without a word, which is the worst possible failure for a script\nconst assertNoUnknownKeys = (record: Record<string, unknown>, known: string[], path: string): void => {\n\tconst unknown = Object.keys(record).filter(it => !known.includes(it))\n\tif (unknown.length > 0) {\n\t\tthrow membershipInputError(`${path} has unknown ${unknown.length === 1 ? 'key' : 'keys'} ${unknown.join(', ')}. Allowed: ${known.join(', ')}.`)\n\t}\n}\n\nconst describeJson = (value: unknown): string => (value === null ? 'null' : Array.isArray(value) ? 'an array' : typeof value)\n"],"names":["CliError","ExitCode"],"mappings":";;;AA0BO,MAAM,2BAA2B;AAGjC,MAAM,6BAA6B,CACzC,eACA,EAAE,kBAAkB,+DAAA,IAAiG,CAAA,MAC3G;AACV,gBAAc,OAAO,MAAM,EAAE,WAAA,EAAa,YAAY,eAAe;AACrE,gBAAc,OAAO,aAAa,EAAE,cAAA,EAAgB;AAAA,IACnD,8BAA8B,wBAAwB;AAAA,EAAA;AAEvD,gBAAc,OAAO,mBAAmB,EAAE,UAAA,EAAY,YAAY,gEAAgE;AACnI;AASO,MAAM,4BAA4B,CAAC,WAIZ;AAAA,EAC7B,OAAO,MAAM,UAAU,MAAM;AAAA,EAC7B,MAAM,MAAM,UAAU,aAAa;AAAA,EACnC,WAAW,MAAM,UAAU,mBAAmB,MAAM;AACrD;AAEO,MAAM,qBAAqB,OAAO,QAA+B,cAAuD;AAC9H,QAAM,QAAQ,OAAO,SAAS,CAAA;AAC9B,QAAM,UAAU,OAAO,SAAS;AAChC,MAAI,WAAW,OAAO,WAAW;AAChC,UAAM,qBAAqB,mFAAmF;AAAA,EAC/G;AACA,MAAI,MAAM,SAAS,MAAM,WAAW,OAAO,YAAY;AACtD,UAAM,qBAAqB,mGAAmG;AAAA,EAC/H;AACA,MAAI,MAAM,SAAS,GAAG;AACrB,WAAO,MAAM,IAAI,CAAA,UAAS,EAAE,MAAM,WAAW,CAAA,IAAK;AAAA,EACnD;AACA,MAAI,SAAS;AACZ,WAAO,iBAAiB,OAAO,QAAQ,IAAI,eAAe;AAAA,EAC3D;AACA,MAAI,OAAO,WAAW;AACrB,WAAO,iBAAiB,MAAM,UAAA,GAAa,OAAO;AAAA,EACnD;AACA,QAAM;AAAA,IACL,kHAAkH,wBAAwB;AAAA,EAAA;AAE5I;AAGO,MAAM,6BAA6B,OAAO,QAA+B,cAAuD;AACtI,QAAM,cAAc,MAAM,mBAAmB,QAAQ,SAAS;AAC9D,MAAI,YAAY,WAAW,GAAG;AAC7B,UAAM,qBAAqB,yDAAyD;AAAA,EACrF;AACA,SAAO;AACR;AAEA,MAAM,uBAAuB,CAAC,SAAiB,YAC9C,IAAIA,UAAAA,SAAS,SAAS,EAAE,MAAM,uBAAuB,UAAUC,UAAAA,SAAS,YAAY,SAAS;AAE9F,MAAM,mBAAmB,CAAC,MAAc,WAAsC;AAC7E,MAAI,KAAK,KAAA,MAAW,IAAI;AACvB,UAAM,qBAAqB,oCAAoC,MAAM,GAAG;AAAA,EACzE;AACA,MAAI;AACJ,MAAI;AACH,aAAS,KAAK,MAAM,IAAI;AAAA,EACzB,SAAS,GAAG;AACX,UAAM,qBAAqB,yBAAyB,MAAM,wBAAwB,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC,CAAC,EAAE;AAAA,EAC/H;AACA,MAAI,CAAC,MAAM,QAAQ,MAAM,GAAG;AAC3B,UAAM,qBAAqB,yBAAyB,MAAM,8BAA8B,aAAa,MAAM,CAAC,GAAG;AAAA,EAChH;AACA,SAAO,OAAO,IAAI,CAAC,IAAI,UAAU,gBAAgB,IAAI,GAAG,MAAM,IAAI,KAAK,GAAG,CAAC;AAC5E;AAEA,MAAM,kBAAkB,CAAC,OAAgB,SAAkC;AAC1E,QAAM,SAAS,SAAS,OAAO,IAAI;AACnC,sBAAoB,QAAQ,CAAC,QAAQ,WAAW,GAAG,IAAI;AACvD,QAAM,OAAO,OAAO;AACpB,MAAI,OAAO,SAAS,YAAY,SAAS,IAAI;AAC5C,UAAM,qBAAqB,GAAG,IAAI,mCAAmC;AAAA,EACtE;AACA,QAAM,YAAY,OAAO;AACzB,MAAI,cAAc,UAAa,cAAc,MAAM;AAClD,WAAO,EAAE,MAAM,WAAW,GAAC;AAAA,EAC5B;AACA,MAAI,CAAC,MAAM,QAAQ,SAAS,GAAG;AAC9B,UAAM,qBAAqB,GAAG,IAAI,oCAAoC,aAAa,SAAS,CAAC,GAAG;AAAA,EACjG;AACA,SAAO,EAAE,MAAM,WAAW,UAAU,IAAI,CAAC,IAAI,UAAU,cAAc,IAAI,GAAG,IAAI,cAAc,KAAK,GAAG,CAAC,EAAA;AACxG;AAEA,MAAM,gBAAgB,CAAC,OAAgB,SAAqD;AAC3F,QAAM,SAAS,SAAS,OAAO,IAAI;AACnC,sBAAoB,QAAQ,CAAC,QAAQ,QAAQ,GAAG,IAAI;AACpD,QAAM,OAAO,OAAO;AACpB,MAAI,OAAO,SAAS,YAAY,SAAS,IAAI;AAC5C,UAAM,qBAAqB,GAAG,IAAI,mCAAmC;AAAA,EACtE;AACA,QAAM,SAAS,OAAO;AACtB,MAAI,CAAC,MAAM,QAAQ,MAAM,KAAK,OAAO,KAAK,CAAA,OAAM,OAAO,OAAO,QAAQ,GAAG;AACxE,UAAM,qBAAqB,GAAG,IAAI,sCAAsC;AAAA,EACzE;AACA,SAAO,EAAE,MAAM,QAAQ,OAAO,OAAO,CAAA,OAAM,OAAO,OAAO,QAAQ,EAAA;AAClE;AAEA,MAAM,WAAW,CAAC,OAAgB,SAA0C;AAC3E,MAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GAAG;AACxE,UAAM,qBAAqB,GAAG,IAAI,2BAA2B,aAAa,KAAK,CAAC,GAAG;AAAA,EACpF;AACA,SAAO,EAAE,GAAG,MAAA;AACb;AAGA,MAAM,sBAAsB,CAAC,QAAiC,OAAiB,SAAuB;AACrG,QAAM,UAAU,OAAO,KAAK,MAAM,EAAE,OAAO,CAAA,OAAM,CAAC,MAAM,SAAS,EAAE,CAAC;AACpE,MAAI,QAAQ,SAAS,GAAG;AACvB,UAAM,qBAAqB,GAAG,IAAI,gBAAgB,QAAQ,WAAW,IAAI,QAAQ,MAAM,IAAI,QAAQ,KAAK,IAAI,CAAC,cAAc,MAAM,KAAK,IAAI,CAAC,GAAG;AAAA,EAC/I;AACD;AAEA,MAAM,eAAe,CAAC,UAA4B,UAAU,OAAO,SAAS,MAAM,QAAQ,KAAK,IAAI,aAAa,OAAO;;;;;;"}

package/dist/production/src/commands/tenant/member/membershipInput.js

@@ -0,0 +1,109 @@
+import { CliError, ExitCode } from "@contember/cli-common";
+const MEMBERSHIPS_JSON_EXAMPLE = '[{"role":"editor","variables":[{"name":"locale","values":["cs","en"]}]}]';
+const configureMembershipOptions = (configuration, { roleDescription = "Membership role without variables. Repeat for several roles." } = {}) => {
+  configuration.option("role").valueArray().description(roleDescription);
+  configuration.option("memberships").valueRequired().description(
+    `Memberships as JSON, e.g. '${MEMBERSHIPS_JSON_EXAMPLE}'. Not combinable with --role.`
+  );
+  configuration.option("memberships-stdin").valueNone().description("Read the memberships JSON from stdin instead of --memberships.");
+};
+const readMembershipInputSource = (input) => ({
+  roles: input.getOption("role"),
+  json: input.getOption("memberships"),
+  fromStdin: input.getOption("memberships-stdin") === true
+});
+const resolveMemberships = async (source, readStdin) => {
+  const roles = source.roles ?? [];
+  const hasJson = source.json !== void 0;
+  if (hasJson && source.fromStdin) {
+    throw membershipInputError("Pass the memberships either as --memberships or as --memberships-stdin, not both.");
+  }
+  if (roles.length > 0 && (hasJson || source.fromStdin)) {
+    throw membershipInputError("Pass the memberships either as --role or as JSON (--memberships / --memberships-stdin), not both.");
+  }
+  if (roles.length > 0) {
+    return roles.map((role) => ({ role, variables: [] }));
+  }
+  if (hasJson) {
+    return parseMemberships(source.json ?? "", "--memberships");
+  }
+  if (source.fromStdin) {
+    return parseMemberships(await readStdin(), "stdin");
+  }
+  throw membershipInputError(
+    `No memberships given. Pass --role <role> for a role without variables, or the full structure as --memberships '${MEMBERSHIPS_JSON_EXAMPLE}'.`
+  );
+};
+const resolveNonEmptyMemberships = async (source, readStdin) => {
+  const memberships = await resolveMemberships(source, readStdin);
+  if (memberships.length === 0) {
+    throw membershipInputError("At least one membership is required for this operation.");
+  }
+  return memberships;
+};
+const membershipInputError = (message, details) => new CliError(message, { code: "INVALID_MEMBERSHIPS", exitCode: ExitCode.InputError, details });
+const parseMemberships = (json, origin) => {
+  if (json.trim() === "") {
+    throw membershipInputError(`Empty memberships JSON read from ${origin}.`);
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(json);
+  } catch (e) {
+    throw membershipInputError(`Memberships read from ${origin} are not valid JSON: ${e instanceof Error ? e.message : String(e)}`);
+  }
+  if (!Array.isArray(parsed)) {
+    throw membershipInputError(`Memberships read from ${origin} must be a JSON array, got ${describeJson(parsed)}.`);
+  }
+  return parsed.map((it, index) => parseMembership(it, `${origin}[${index}]`));
+};
+const parseMembership = (value, path) => {
+  const record = asRecord(value, path);
+  assertNoUnknownKeys(record, ["role", "variables"], path);
+  const role = record.role;
+  if (typeof role !== "string" || role === "") {
+    throw membershipInputError(`${path}.role must be a non-empty string.`);
+  }
+  const variables = record.variables;
+  if (variables === void 0 || variables === null) {
+    return { role, variables: [] };
+  }
+  if (!Array.isArray(variables)) {
+    throw membershipInputError(`${path}.variables must be an array, got ${describeJson(variables)}.`);
+  }
+  return { role, variables: variables.map((it, index) => parseVariable(it, `${path}.variables[${index}]`)) };
+};
+const parseVariable = (value, path) => {
+  const record = asRecord(value, path);
+  assertNoUnknownKeys(record, ["name", "values"], path);
+  const name = record.name;
+  if (typeof name !== "string" || name === "") {
+    throw membershipInputError(`${path}.name must be a non-empty string.`);
+  }
+  const values = record.values;
+  if (!Array.isArray(values) || values.some((it) => typeof it !== "string")) {
+    throw membershipInputError(`${path}.values must be an array of strings.`);
+  }
+  return { name, values: values.filter((it) => typeof it === "string") };
+};
+const asRecord = (value, path) => {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) {
+    throw membershipInputError(`${path} must be an object, got ${describeJson(value)}.`);
+  }
+  return { ...value };
+};
+const assertNoUnknownKeys = (record, known, path) => {
+  const unknown = Object.keys(record).filter((it) => !known.includes(it));
+  if (unknown.length > 0) {
+    throw membershipInputError(`${path} has unknown ${unknown.length === 1 ? "key" : "keys"} ${unknown.join(", ")}. Allowed: ${known.join(", ")}.`);
+  }
+};
+const describeJson = (value) => value === null ? "null" : Array.isArray(value) ? "an array" : typeof value;
+export {
+  MEMBERSHIPS_JSON_EXAMPLE,
+  configureMembershipOptions,
+  readMembershipInputSource,
+  resolveMemberships,
+  resolveNonEmptyMemberships
+};
+//# sourceMappingURL=membershipInput.js.map

package/dist/production/src/commands/tenant/member/membershipInput.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"membershipInput.js","sources":["../../../../../../../packages/cli/src/commands/tenant/member/membershipInput.ts"],"sourcesContent":["import { CliError, CommandConfiguration, ExitCode } from '@contember/cli-common'\nimport type { MembershipInput } from '@contember/graphql-client-tenant'\nimport type { StdinReader } from '../../../lib/tenant/stdin.js'\n\n/** `Arguments` is not part of the `@contember/cli-common` public surface, so the widest form is spelled out here. */\ntype AnyArguments = Record<string, string | string[] | undefined>\n\n/**\n * The options every command taking `memberships: [MembershipInput!]!` declares.\n *\n * There are deliberately exactly two ways in, and no third one:\n *\n * - `--role <role>`, repeatable — a membership with no variables, which is the whole shape a human\n *   needs for `--role editor`;\n * - `--memberships <json>` / `--memberships-stdin` — the complete `MembershipInput[]` structure, which is\n *   what a script or an agent already holds.\n *\n * A compact string syntax for variables (`editor:locale=en,cs`) is intentionally not offered: it breaks\n * the moment a value contains the separator, and the JSON form costs an agent nothing.\n */\nexport type MembershipOptions = {\n\trole?: string[]\n\tmemberships?: string\n\t['memberships-stdin']?: boolean\n}\n\nexport const MEMBERSHIPS_JSON_EXAMPLE = '[{\"role\":\"editor\",\"variables\":[{\"name\":\"locale\",\"values\":[\"cs\",\"en\"]}]}]'\n\n/** `roleDescription` exists for `tenant api-key create`, where `--role` also names a global tenant role. */\nexport const configureMembershipOptions = (\n\tconfiguration: CommandConfiguration<AnyArguments, MembershipOptions>,\n\t{ roleDescription = 'Membership role without variables. Repeat for several roles.' }: { roleDescription?: string } = {},\n): void => {\n\tconfiguration.option('role').valueArray().description(roleDescription)\n\tconfiguration.option('memberships').valueRequired().description(\n\t\t`Memberships as JSON, e.g. '${MEMBERSHIPS_JSON_EXAMPLE}'. Not combinable with --role.`,\n\t)\n\tconfiguration.option('memberships-stdin').valueNone().description('Read the memberships JSON from stdin instead of --memberships.')\n}\n\n/** The raw values of {@link MembershipOptions}, read by the command so no generic `Input` has to be passed around. */\nexport interface MembershipInputSource {\n\troles: string[] | undefined\n\tjson: string | undefined\n\tfromStdin: boolean\n}\n\nexport const readMembershipInputSource = (input: {\n\tgetOption(name: 'role'): string[] | undefined\n\tgetOption(name: 'memberships'): string | undefined\n\tgetOption(name: 'memberships-stdin'): boolean | undefined\n}): MembershipInputSource => ({\n\troles: input.getOption('role'),\n\tjson: input.getOption('memberships'),\n\tfromStdin: input.getOption('memberships-stdin') === true,\n})\n\nexport const resolveMemberships = async (source: MembershipInputSource, readStdin: StdinReader): Promise<MembershipInput[]> => {\n\tconst roles = source.roles ?? []\n\tconst hasJson = source.json !== undefined\n\tif (hasJson && source.fromStdin) {\n\t\tthrow membershipInputError('Pass the memberships either as --memberships or as --memberships-stdin, not both.')\n\t}\n\tif (roles.length > 0 && (hasJson || source.fromStdin)) {\n\t\tthrow membershipInputError('Pass the memberships either as --role or as JSON (--memberships / --memberships-stdin), not both.')\n\t}\n\tif (roles.length > 0) {\n\t\treturn roles.map(role => ({ role, variables: [] }))\n\t}\n\tif (hasJson) {\n\t\treturn parseMemberships(source.json ?? '', '--memberships')\n\t}\n\tif (source.fromStdin) {\n\t\treturn parseMemberships(await readStdin(), 'stdin')\n\t}\n\tthrow membershipInputError(\n\t\t`No memberships given. Pass --role <role> for a role without variables, or the full structure as --memberships '${MEMBERSHIPS_JSON_EXAMPLE}'.`,\n\t)\n}\n\n/** Creation operations must not create an identity with no project access. */\nexport const resolveNonEmptyMemberships = async (source: MembershipInputSource, readStdin: StdinReader): Promise<MembershipInput[]> => {\n\tconst memberships = await resolveMemberships(source, readStdin)\n\tif (memberships.length === 0) {\n\t\tthrow membershipInputError('At least one membership is required for this operation.')\n\t}\n\treturn memberships\n}\n\nconst membershipInputError = (message: string, details?: unknown): CliError =>\n\tnew CliError(message, { code: 'INVALID_MEMBERSHIPS', exitCode: ExitCode.InputError, details })\n\nconst parseMemberships = (json: string, origin: string): MembershipInput[] => {\n\tif (json.trim() === '') {\n\t\tthrow membershipInputError(`Empty memberships JSON read from ${origin}.`)\n\t}\n\tlet parsed: unknown\n\ttry {\n\t\tparsed = JSON.parse(json)\n\t} catch (e) {\n\t\tthrow membershipInputError(`Memberships read from ${origin} are not valid JSON: ${e instanceof Error ? e.message : String(e)}`)\n\t}\n\tif (!Array.isArray(parsed)) {\n\t\tthrow membershipInputError(`Memberships read from ${origin} must be a JSON array, got ${describeJson(parsed)}.`)\n\t}\n\treturn parsed.map((it, index) => parseMembership(it, `${origin}[${index}]`))\n}\n\nconst parseMembership = (value: unknown, path: string): MembershipInput => {\n\tconst record = asRecord(value, path)\n\tassertNoUnknownKeys(record, ['role', 'variables'], path)\n\tconst role = record.role\n\tif (typeof role !== 'string' || role === '') {\n\t\tthrow membershipInputError(`${path}.role must be a non-empty string.`)\n\t}\n\tconst variables = record.variables\n\tif (variables === undefined || variables === null) {\n\t\treturn { role, variables: [] }\n\t}\n\tif (!Array.isArray(variables)) {\n\t\tthrow membershipInputError(`${path}.variables must be an array, got ${describeJson(variables)}.`)\n\t}\n\treturn { role, variables: variables.map((it, index) => parseVariable(it, `${path}.variables[${index}]`)) }\n}\n\nconst parseVariable = (value: unknown, path: string): { name: string; values: string[] } => {\n\tconst record = asRecord(value, path)\n\tassertNoUnknownKeys(record, ['name', 'values'], path)\n\tconst name = record.name\n\tif (typeof name !== 'string' || name === '') {\n\t\tthrow membershipInputError(`${path}.name must be a non-empty string.`)\n\t}\n\tconst values = record.values\n\tif (!Array.isArray(values) || values.some(it => typeof it !== 'string')) {\n\t\tthrow membershipInputError(`${path}.values must be an array of strings.`)\n\t}\n\treturn { name, values: values.filter(it => typeof it === 'string') }\n}\n\nconst asRecord = (value: unknown, path: string): Record<string, unknown> => {\n\tif (typeof value !== 'object' || value === null || Array.isArray(value)) {\n\t\tthrow membershipInputError(`${path} must be an object, got ${describeJson(value)}.`)\n\t}\n\treturn { ...value }\n}\n\n// a typo'd key would otherwise be dropped without a word, which is the worst possible failure for a script\nconst assertNoUnknownKeys = (record: Record<string, unknown>, known: string[], path: string): void => {\n\tconst unknown = Object.keys(record).filter(it => !known.includes(it))\n\tif (unknown.length > 0) {\n\t\tthrow membershipInputError(`${path} has unknown ${unknown.length === 1 ? 'key' : 'keys'} ${unknown.join(', ')}. Allowed: ${known.join(', ')}.`)\n\t}\n}\n\nconst describeJson = (value: unknown): string => (value === null ? 'null' : Array.isArray(value) ? 'an array' : typeof value)\n"],"names":[],"mappings":";AA0BO,MAAM,2BAA2B;AAGjC,MAAM,6BAA6B,CACzC,eACA,EAAE,kBAAkB,+DAAA,IAAiG,CAAA,MAC3G;AACV,gBAAc,OAAO,MAAM,EAAE,WAAA,EAAa,YAAY,eAAe;AACrE,gBAAc,OAAO,aAAa,EAAE,cAAA,EAAgB;AAAA,IACnD,8BAA8B,wBAAwB;AAAA,EAAA;AAEvD,gBAAc,OAAO,mBAAmB,EAAE,UAAA,EAAY,YAAY,gEAAgE;AACnI;AASO,MAAM,4BAA4B,CAAC,WAIZ;AAAA,EAC7B,OAAO,MAAM,UAAU,MAAM;AAAA,EAC7B,MAAM,MAAM,UAAU,aAAa;AAAA,EACnC,WAAW,MAAM,UAAU,mBAAmB,MAAM;AACrD;AAEO,MAAM,qBAAqB,OAAO,QAA+B,cAAuD;AAC9H,QAAM,QAAQ,OAAO,SAAS,CAAA;AAC9B,QAAM,UAAU,OAAO,SAAS;AAChC,MAAI,WAAW,OAAO,WAAW;AAChC,UAAM,qBAAqB,mFAAmF;AAAA,EAC/G;AACA,MAAI,MAAM,SAAS,MAAM,WAAW,OAAO,YAAY;AACtD,UAAM,qBAAqB,mGAAmG;AAAA,EAC/H;AACA,MAAI,MAAM,SAAS,GAAG;AACrB,WAAO,MAAM,IAAI,CAAA,UAAS,EAAE,MAAM,WAAW,CAAA,IAAK;AAAA,EACnD;AACA,MAAI,SAAS;AACZ,WAAO,iBAAiB,OAAO,QAAQ,IAAI,eAAe;AAAA,EAC3D;AACA,MAAI,OAAO,WAAW;AACrB,WAAO,iBAAiB,MAAM,UAAA,GAAa,OAAO;AAAA,EACnD;AACA,QAAM;AAAA,IACL,kHAAkH,wBAAwB;AAAA,EAAA;AAE5I;AAGO,MAAM,6BAA6B,OAAO,QAA+B,cAAuD;AACtI,QAAM,cAAc,MAAM,mBAAmB,QAAQ,SAAS;AAC9D,MAAI,YAAY,WAAW,GAAG;AAC7B,UAAM,qBAAqB,yDAAyD;AAAA,EACrF;AACA,SAAO;AACR;AAEA,MAAM,uBAAuB,CAAC,SAAiB,YAC9C,IAAI,SAAS,SAAS,EAAE,MAAM,uBAAuB,UAAU,SAAS,YAAY,SAAS;AAE9F,MAAM,mBAAmB,CAAC,MAAc,WAAsC;AAC7E,MAAI,KAAK,KAAA,MAAW,IAAI;AACvB,UAAM,qBAAqB,oCAAoC,MAAM,GAAG;AAAA,EACzE;AACA,MAAI;AACJ,MAAI;AACH,aAAS,KAAK,MAAM,IAAI;AAAA,EACzB,SAAS,GAAG;AACX,UAAM,qBAAqB,yBAAyB,MAAM,wBAAwB,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC,CAAC,EAAE;AAAA,EAC/H;AACA,MAAI,CAAC,MAAM,QAAQ,MAAM,GAAG;AAC3B,UAAM,qBAAqB,yBAAyB,MAAM,8BAA8B,aAAa,MAAM,CAAC,GAAG;AAAA,EAChH;AACA,SAAO,OAAO,IAAI,CAAC,IAAI,UAAU,gBAAgB,IAAI,GAAG,MAAM,IAAI,KAAK,GAAG,CAAC;AAC5E;AAEA,MAAM,kBAAkB,CAAC,OAAgB,SAAkC;AAC1E,QAAM,SAAS,SAAS,OAAO,IAAI;AACnC,sBAAoB,QAAQ,CAAC,QAAQ,WAAW,GAAG,IAAI;AACvD,QAAM,OAAO,OAAO;AACpB,MAAI,OAAO,SAAS,YAAY,SAAS,IAAI;AAC5C,UAAM,qBAAqB,GAAG,IAAI,mCAAmC;AAAA,EACtE;AACA,QAAM,YAAY,OAAO;AACzB,MAAI,cAAc,UAAa,cAAc,MAAM;AAClD,WAAO,EAAE,MAAM,WAAW,GAAC;AAAA,EAC5B;AACA,MAAI,CAAC,MAAM,QAAQ,SAAS,GAAG;AAC9B,UAAM,qBAAqB,GAAG,IAAI,oCAAoC,aAAa,SAAS,CAAC,GAAG;AAAA,EACjG;AACA,SAAO,EAAE,MAAM,WAAW,UAAU,IAAI,CAAC,IAAI,UAAU,cAAc,IAAI,GAAG,IAAI,cAAc,KAAK,GAAG,CAAC,EAAA;AACxG;AAEA,MAAM,gBAAgB,CAAC,OAAgB,SAAqD;AAC3F,QAAM,SAAS,SAAS,OAAO,IAAI;AACnC,sBAAoB,QAAQ,CAAC,QAAQ,QAAQ,GAAG,IAAI;AACpD,QAAM,OAAO,OAAO;AACpB,MAAI,OAAO,SAAS,YAAY,SAAS,IAAI;AAC5C,UAAM,qBAAqB,GAAG,IAAI,mCAAmC;AAAA,EACtE;AACA,QAAM,SAAS,OAAO;AACtB,MAAI,CAAC,MAAM,QAAQ,MAAM,KAAK,OAAO,KAAK,CAAA,OAAM,OAAO,OAAO,QAAQ,GAAG;AACxE,UAAM,qBAAqB,GAAG,IAAI,sCAAsC;AAAA,EACzE;AACA,SAAO,EAAE,MAAM,QAAQ,OAAO,OAAO,CAAA,OAAM,OAAO,OAAO,QAAQ,EAAA;AAClE;AAEA,MAAM,WAAW,CAAC,OAAgB,SAA0C;AAC3E,MAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GAAG;AACxE,UAAM,qBAAqB,GAAG,IAAI,2BAA2B,aAAa,KAAK,CAAC,GAAG;AAAA,EACpF;AACA,SAAO,EAAE,GAAG,MAAA;AACb;AAGA,MAAM,sBAAsB,CAAC,QAAiC,OAAiB,SAAuB;AACrG,QAAM,UAAU,OAAO,KAAK,MAAM,EAAE,OAAO,CAAA,OAAM,CAAC,MAAM,SAAS,EAAE,CAAC;AACpE,MAAI,QAAQ,SAAS,GAAG;AACvB,UAAM,qBAAqB,GAAG,IAAI,gBAAgB,QAAQ,WAAW,IAAI,QAAQ,MAAM,IAAI,QAAQ,KAAK,IAAI,CAAC,cAAc,MAAM,KAAK,IAAI,CAAC,GAAG;AAAA,EAC/I;AACD;AAEA,MAAM,eAAe,CAAC,UAA4B,UAAU,OAAO,SAAS,MAAM,QAAQ,KAAK,IAAI,aAAa,OAAO;"}

package/dist/production/src/commands/tenant/person/TenantIdentityRoleAddCommand.cjs

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const cliCommon = require("@contember/cli-common");
+const tenantOutput = require("../tenantOutput.cjs");
+class TenantIdentityRoleAddCommand extends cliCommon.Command {
+  constructor(tenantClientProvider) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+  }
+  configure(configuration) {
+    configuration.description("Grant global (project-independent) roles to an identity.");
+    configuration.argument("identityId").description('Identity id, as listed by "tenant person list".');
+    configuration.argument("role").variadic().description("One or more global roles to grant.");
+  }
+  async execute(input, output) {
+    const identityId = input.getArgument("identityId");
+    const added = input.getArgument("role");
+    const roles = await this.tenantClientProvider.person().addGlobalIdentityRoles(identityId, added);
+    output.info(`Granted ${added.join(", ")} to identity ${identityId}.`);
+    output.data(
+      { identityId, added, roles },
+      { human: (it) => it.roles === null ? tenantOutput.humanText(it.identityId) : it.roles.map(tenantOutput.humanText).join(", "), quiet: (it) => it.identityId }
+    );
+  }
+}
+exports.TenantIdentityRoleAddCommand = TenantIdentityRoleAddCommand;
+//# sourceMappingURL=TenantIdentityRoleAddCommand.cjs.map

package/dist/production/src/commands/tenant/person/TenantIdentityRoleAddCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantIdentityRoleAddCommand.cjs","sources":["../../../../../../../packages/cli/src/commands/tenant/person/TenantIdentityRoleAddCommand.ts"],"sourcesContent":["import { Command, CommandConfiguration, Input, Output } from '@contember/cli-common'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport { humanText } from '../tenantOutput.js'\n\ntype Args = {\n\tidentityId: string\n\trole: string[]\n}\n\ntype Options = {}\n\ninterface IdentityRolesResult {\n\tidentityId: string\n\tadded: string[]\n\t/** All global roles of the identity after the change, or null when the token may not read them. */\n\troles: string[] | null\n}\n\nexport class TenantIdentityRoleAddCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('Grant global (project-independent) roles to an identity.')\n\t\tconfiguration.argument('identityId').description('Identity id, as listed by \"tenant person list\".')\n\t\tconfiguration.argument('role').variadic().description('One or more global roles to grant.')\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<void> {\n\t\tconst identityId = input.getArgument('identityId')\n\t\tconst added = input.getArgument('role')\n\n\t\tconst roles = await this.tenantClientProvider.person().addGlobalIdentityRoles(identityId, added)\n\n\t\toutput.info(`Granted ${added.join(', ')} to identity ${identityId}.`)\n\t\toutput.data<IdentityRolesResult>(\n\t\t\t{ identityId, added, roles },\n\t\t\t{ human: it => it.roles === null ? humanText(it.identityId) : it.roles.map(humanText).join(', '), quiet: it => it.identityId },\n\t\t)\n\t}\n}\n"],"names":["Command","humanText"],"mappings":";;;;AAkBO,MAAM,qCAAqCA,UAAAA,QAAuB;AAAA,EACxE,YACkB,sBAChB;AACD,UAAA;AAFiB,SAAA,uBAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,0DAA0D;AACpF,kBAAc,SAAS,YAAY,EAAE,YAAY,iDAAiD;AAClG,kBAAc,SAAS,MAAM,EAAE,SAAA,EAAW,YAAY,oCAAoC;AAAA,EAC3F;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAA+B;AACnF,UAAM,aAAa,MAAM,YAAY,YAAY;AACjD,UAAM,QAAQ,MAAM,YAAY,MAAM;AAEtC,UAAM,QAAQ,MAAM,KAAK,qBAAqB,SAAS,uBAAuB,YAAY,KAAK;AAE/F,WAAO,KAAK,WAAW,MAAM,KAAK,IAAI,CAAC,gBAAgB,UAAU,GAAG;AACpE,WAAO;AAAA,MACN,EAAE,YAAY,OAAO,MAAA;AAAA,MACrB,EAAE,OAAO,CAAA,OAAM,GAAG,UAAU,OAAOC,aAAAA,UAAU,GAAG,UAAU,IAAI,GAAG,MAAM,IAAIA,sBAAS,EAAE,KAAK,IAAI,GAAG,OAAO,CAAA,OAAM,GAAG,WAAA;AAAA,IAAW;AAAA,EAE/H;AACD;;"}

package/dist/production/src/commands/tenant/person/TenantIdentityRoleAddCommand.js

@@ -0,0 +1,27 @@
+import { Command } from "@contember/cli-common";
+import { humanText } from "../tenantOutput.js";
+class TenantIdentityRoleAddCommand extends Command {
+  constructor(tenantClientProvider) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+  }
+  configure(configuration) {
+    configuration.description("Grant global (project-independent) roles to an identity.");
+    configuration.argument("identityId").description('Identity id, as listed by "tenant person list".');
+    configuration.argument("role").variadic().description("One or more global roles to grant.");
+  }
+  async execute(input, output) {
+    const identityId = input.getArgument("identityId");
+    const added = input.getArgument("role");
+    const roles = await this.tenantClientProvider.person().addGlobalIdentityRoles(identityId, added);
+    output.info(`Granted ${added.join(", ")} to identity ${identityId}.`);
+    output.data(
+      { identityId, added, roles },
+      { human: (it) => it.roles === null ? humanText(it.identityId) : it.roles.map(humanText).join(", "), quiet: (it) => it.identityId }
+    );
+  }
+}
+export {
+  TenantIdentityRoleAddCommand
+};
+//# sourceMappingURL=TenantIdentityRoleAddCommand.js.map

package/dist/production/src/commands/tenant/person/TenantIdentityRoleAddCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantIdentityRoleAddCommand.js","sources":["../../../../../../../packages/cli/src/commands/tenant/person/TenantIdentityRoleAddCommand.ts"],"sourcesContent":["import { Command, CommandConfiguration, Input, Output } from '@contember/cli-common'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport { humanText } from '../tenantOutput.js'\n\ntype Args = {\n\tidentityId: string\n\trole: string[]\n}\n\ntype Options = {}\n\ninterface IdentityRolesResult {\n\tidentityId: string\n\tadded: string[]\n\t/** All global roles of the identity after the change, or null when the token may not read them. */\n\troles: string[] | null\n}\n\nexport class TenantIdentityRoleAddCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('Grant global (project-independent) roles to an identity.')\n\t\tconfiguration.argument('identityId').description('Identity id, as listed by \"tenant person list\".')\n\t\tconfiguration.argument('role').variadic().description('One or more global roles to grant.')\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<void> {\n\t\tconst identityId = input.getArgument('identityId')\n\t\tconst added = input.getArgument('role')\n\n\t\tconst roles = await this.tenantClientProvider.person().addGlobalIdentityRoles(identityId, added)\n\n\t\toutput.info(`Granted ${added.join(', ')} to identity ${identityId}.`)\n\t\toutput.data<IdentityRolesResult>(\n\t\t\t{ identityId, added, roles },\n\t\t\t{ human: it => it.roles === null ? humanText(it.identityId) : it.roles.map(humanText).join(', '), quiet: it => it.identityId },\n\t\t)\n\t}\n}\n"],"names":[],"mappings":";;AAkBO,MAAM,qCAAqC,QAAuB;AAAA,EACxE,YACkB,sBAChB;AACD,UAAA;AAFiB,SAAA,uBAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,0DAA0D;AACpF,kBAAc,SAAS,YAAY,EAAE,YAAY,iDAAiD;AAClG,kBAAc,SAAS,MAAM,EAAE,SAAA,EAAW,YAAY,oCAAoC;AAAA,EAC3F;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAA+B;AACnF,UAAM,aAAa,MAAM,YAAY,YAAY;AACjD,UAAM,QAAQ,MAAM,YAAY,MAAM;AAEtC,UAAM,QAAQ,MAAM,KAAK,qBAAqB,SAAS,uBAAuB,YAAY,KAAK;AAE/F,WAAO,KAAK,WAAW,MAAM,KAAK,IAAI,CAAC,gBAAgB,UAAU,GAAG;AACpE,WAAO;AAAA,MACN,EAAE,YAAY,OAAO,MAAA;AAAA,MACrB,EAAE,OAAO,CAAA,OAAM,GAAG,UAAU,OAAO,UAAU,GAAG,UAAU,IAAI,GAAG,MAAM,IAAI,SAAS,EAAE,KAAK,IAAI,GAAG,OAAO,CAAA,OAAM,GAAG,WAAA;AAAA,IAAW;AAAA,EAE/H;AACD;"}