@contember/cli 2.1.0-rc.3 → 2.2.0-alpha.10

package/dist/production/src/lib/tenant/clients/TenantProjectClient.js

@@ -0,0 +1,209 @@
+import { mutation$, createProjectResponse$$, createProjectResponseError$$, createProjectResult$, apiKeyWithToken$$, setProjectSecretResponse$$, setProjectSecretError$$, updateProjectResponse$$, updateProjectError$$, configureResponse$$, configureError$$, query$, config$, configSignup$$, configEmailChange$$, configPasswordless$$, configPassword$$, configLogin$$, configLoginAnomalyDetection$$, configCaptcha$$, configCaptchaProtect$$, configRateLimits$, configRateLimitWindow$$, project$, roleVariableDefinition$$, roleConditionVariableDefinition$$, roleEntityVariableDefinition$$, rolePredefinedVariableDefinition$$, roleDefinition$, projectSecretInfo$$, identityProvider$, addIDPResponse$$, addIDPError$$, updateIDPResponse$$, updateIDPError$$, enableIDPResponse$$, enableIDPError$$, disableIDPResponse$$, disableIDPError$$, identity$$, identityGlobalPermissions$$, identityProjectRelation$, membership$$ } from "@contember/graphql-client-tenant";
+import { CliError, ExitCode } from "@contember/cli-common";
+const createProjectFetcher = mutation$.createProject(
+  createProjectResponse$$.error(createProjectResponseError$$).result(createProjectResult$.deployerApiKey(apiKeyWithToken$$))
+);
+const setProjectSecretFetcher = mutation$.setProjectSecret(setProjectSecretResponse$$.error(setProjectSecretError$$));
+const updateProjectFetcher = mutation$.updateProject(updateProjectResponse$$.error(updateProjectError$$));
+const configureFetcher = mutation$.configure(configureResponse$$.error(configureError$$));
+const configurationFetcher = query$.configuration(
+  config$.signup(configSignup$$).emailChange(configEmailChange$$).passwordless(configPasswordless$$).password(configPassword$$).login(configLogin$$.anomalyDetection(configLoginAnomalyDetection$$)).captcha(configCaptcha$$.protect(configCaptchaProtect$$)).rateLimits(
+    configRateLimits$.signUpPerIp(configRateLimitWindow$$).loginPerIp(configRateLimitWindow$$).passwordResetPerIp(configRateLimitWindow$$).passwordlessInitPerIp(configRateLimitWindow$$).emailOtpPerPerson(configRateLimitWindow$$).emailVerificationPerIp(configRateLimitWindow$$)
+  )
+);
+const projectsFetcher = query$.projects(project$.id.name.slug);
+const roleVariableFetcher = roleVariableDefinition$$.on(roleConditionVariableDefinition$$).on(roleEntityVariableDefinition$$).on(rolePredefinedVariableDefinition$$);
+const toRoleVariableDefinition = (variable) => {
+  switch (variable.__typename) {
+    case "RoleEntityVariableDefinition":
+      return { type: "entity", name: variable.name, entityName: variable.entityName };
+    case "RolePredefinedVariableDefinition":
+      return { type: "predefined", name: variable.name, value: variable.value };
+    case "RoleConditionVariableDefinition":
+      return { type: "condition", name: variable.name };
+    case "RoleVariableDefinition":
+      throw new CliError(`Tenant API returned an abstract role variable definition for "${variable.name}".`, {
+        code: "TENANT_API_INVALID_RESPONSE",
+        exitCode: ExitCode.InternalError
+      });
+  }
+};
+const projectBySlugFetcher = query$.projectBySlug(
+  project$.id.name.slug.config.roles(roleDefinition$.name.variables(roleVariableFetcher)).secrets(projectSecretInfo$$)
+);
+const identityProvidersFetcher = query$.identityProviders(identityProvider$.slug.type.disabledAt);
+const addIdpFetcher = mutation$.addIDP(addIDPResponse$$.error(addIDPError$$));
+const updateIdpFetcher = mutation$.updateIDP(updateIDPResponse$$.error(updateIDPError$$));
+const enableIdpFetcher = mutation$.enableIDP(enableIDPResponse$$.error(enableIDPError$$));
+const disableIdpFetcher = mutation$.disableIDP(disableIDPResponse$$.error(disableIDPError$$));
+const meFetcher = query$.me(
+  identity$$.permissions(identityGlobalPermissions$$).projects(identityProjectRelation$.project(project$.slug.name).memberships(membership$$))
+);
+const toRateLimitWindow = (it) => ({ limit: it.limit, window: it.window });
+class TenantProjectClient {
+  constructor(transport) {
+    this.transport = transport;
+  }
+  async listProjects() {
+    const result = await this.transport.exec(projectsFetcher, {});
+    return result.projects.map((it) => ({ id: it.id, name: it.name, slug: it.slug }));
+  }
+  /** Null both when the project does not exist and when the caller may not see it — the API does not distinguish. */
+  async getProjectBySlug(slug) {
+    const result = await this.transport.exec(projectBySlugFetcher, { slug });
+    const project = result.projectBySlug;
+    if (!project) {
+      return null;
+    }
+    return {
+      id: project.id,
+      name: project.name,
+      slug: project.slug,
+      config: project.config,
+      roles: project.roles.map((role) => ({
+        name: role.name,
+        variables: role.variables.map((it) => it.name),
+        variableDefinitions: role.variables.map(toRoleVariableDefinition)
+      })),
+      secrets: project.secrets.map((it) => ({ key: it.key, createdAt: it.createdAt, updatedAt: it.updatedAt }))
+    };
+  }
+  /** Returns `null` (nothing created) when `ignoreExisting` swallowed an `ALREADY_EXISTS`. */
+  async createProject(slug, ignoreExisting = false, details) {
+    const result = await this.transport.exec(createProjectFetcher, {
+      projectSlug: slug,
+      name: details?.name,
+      config: details?.config,
+      options: details?.noDeployToken ? { noDeployToken: true } : void 0
+    });
+    if (ignoreExisting && result.createProject?.error?.code === "ALREADY_EXISTS") {
+      return null;
+    }
+    this.transport.assertOk(result.createProject, `createProject(${slug})`);
+    const deployerApiKey = result.createProject?.result?.deployerApiKey;
+    return { deployerApiKey: deployerApiKey ? { id: deployerApiKey.id, token: deployerApiKey.token ?? null } : null };
+  }
+  async updateProject(slug, changes) {
+    const result = await this.transport.exec(updateProjectFetcher, {
+      projectSlug: slug,
+      name: changes.name,
+      config: changes.config,
+      mergeConfig: changes.mergeConfig
+    });
+    this.transport.assertOk(result.updateProject, `updateProject(${slug})`);
+  }
+  async setProjectSecret(slug, key, value) {
+    const result = await this.transport.exec(setProjectSecretFetcher, { projectSlug: slug, key, value });
+    this.transport.assertOk(result.setProjectSecret, `setProjectSecret(${slug}/${key})`);
+  }
+  async configure(config) {
+    const result = await this.transport.exec(configureFetcher, { config });
+    this.transport.assertOk(result.configure, "configure");
+  }
+  async configuration() {
+    const result = await this.transport.exec(configurationFetcher, {});
+    const config = result.configuration;
+    return {
+      signup: { requireEmailVerification: config.signup.requireEmailVerification },
+      emailChange: { requireVerification: config.emailChange.requireVerification },
+      passwordless: {
+        enabled: config.passwordless.enabled,
+        url: config.passwordless.url ?? null,
+        expiration: config.passwordless.expiration
+      },
+      password: {
+        minLength: config.password.minLength,
+        requireUppercase: config.password.requireUppercase,
+        requireLowercase: config.password.requireLowercase,
+        requireDigit: config.password.requireDigit,
+        requireSpecial: config.password.requireSpecial,
+        pattern: config.password.pattern ?? null,
+        checkBlacklist: config.password.checkBlacklist,
+        checkHibp: config.password.checkHibp
+      },
+      login: {
+        baseBackoff: config.login.baseBackoff,
+        maxBackoff: config.login.maxBackoff,
+        attemptWindow: config.login.attemptWindow,
+        revealUserExists: config.login.revealUserExists,
+        revealLoginMethod: config.login.revealLoginMethod,
+        defaultTokenExpiration: config.login.defaultTokenExpiration,
+        maxTokenExpiration: config.login.maxTokenExpiration ?? null,
+        mfaGraceDuration: config.login.mfaGraceDuration,
+        anomalyDetection: {
+          enabled: config.login.anomalyDetection.enabled,
+          historySize: config.login.anomalyDetection.historySize,
+          emailThreshold: config.login.anomalyDetection.emailThreshold,
+          stepUpThreshold: config.login.anomalyDetection.stepUpThreshold
+        }
+      },
+      captcha: {
+        provider: config.captcha.provider ?? null,
+        threshold: config.captcha.threshold ?? null,
+        protect: {
+          signUp: config.captcha.protect.signUp,
+          passwordReset: config.captcha.protect.passwordReset,
+          passwordlessInit: config.captcha.protect.passwordlessInit,
+          emailVerification: config.captcha.protect.emailVerification
+        }
+      },
+      rateLimits: {
+        signUpPerIp: toRateLimitWindow(config.rateLimits.signUpPerIp),
+        loginPerIp: toRateLimitWindow(config.rateLimits.loginPerIp),
+        passwordResetPerIp: toRateLimitWindow(config.rateLimits.passwordResetPerIp),
+        passwordlessInitPerIp: toRateLimitWindow(config.rateLimits.passwordlessInitPerIp),
+        emailOtpPerPerson: toRateLimitWindow(config.rateLimits.emailOtpPerPerson),
+        emailVerificationPerIp: toRateLimitWindow(config.rateLimits.emailVerificationPerIp)
+      }
+    };
+  }
+  async listIdentityProviders() {
+    const result = await this.transport.exec(identityProvidersFetcher, {});
+    return result.identityProviders.map((it) => ({
+      slug: it.slug,
+      type: it.type,
+      disabledAt: it.disabledAt ?? null
+    }));
+  }
+  async addIdp(slug, type, configuration, options) {
+    const result = await this.transport.exec(addIdpFetcher, { identityProvider: slug, type, configuration, options });
+    this.transport.assertOk(result.addIDP, `addIDP(${slug})`);
+  }
+  async updateIdp(slug, type, configuration, options) {
+    const result = await this.transport.exec(updateIdpFetcher, {
+      identityProvider: slug,
+      type,
+      configuration,
+      options,
+      mergeConfiguration: false
+    });
+    this.transport.assertOk(result.updateIDP, `updateIDP(${slug})`);
+  }
+  async enableIdp(slug) {
+    const result = await this.transport.exec(enableIdpFetcher, { identityProvider: slug });
+    this.transport.assertOk(result.enableIDP, `enableIDP(${slug})`);
+  }
+  async disableIdp(slug) {
+    const result = await this.transport.exec(disableIdpFetcher, { identityProvider: slug });
+    this.transport.assertOk(result.disableIDP, `disableIDP(${slug})`);
+  }
+  async whoAmI() {
+    const result = await this.transport.exec(meFetcher, {});
+    const me = result.me;
+    return {
+      id: me.id,
+      description: me.description ?? null,
+      roles: me.roles ? [...me.roles] : [],
+      permissions: me.permissions ? { canCreateProject: me.permissions.canCreateProject, canDeployEntrypoint: me.permissions.canDeployEntrypoint } : null,
+      projects: me.projects.map((it) => ({
+        slug: it.project.slug,
+        name: it.project.name,
+        roles: it.memberships.map((m) => m.role)
+      }))
+    };
+  }
+}
+export {
+  TenantProjectClient
+};
+//# sourceMappingURL=TenantProjectClient.js.map

package/dist/production/src/lib/tenant/clients/TenantProjectClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantProjectClient.js","sources":["../../../../../../../packages/cli/src/lib/tenant/clients/TenantProjectClient.ts"],"sourcesContent":["import {\n\taddIDPError$$,\n\taddIDPResponse$$,\n\tapiKeyWithToken$$,\n\ttype CaptchaProvider,\n\tconfig$,\n\tconfigCaptcha$$,\n\tconfigCaptchaProtect$$,\n\tconfigEmailChange$$,\n\tconfigLogin$$,\n\tconfigLoginAnomalyDetection$$,\n\tconfigPassword$$,\n\tconfigPasswordless$$,\n\ttype ConfigPolicy,\n\tconfigRateLimits$,\n\tconfigRateLimitWindow$$,\n\tconfigSignup$$,\n\tconfigureError$$,\n\tconfigureResponse$$,\n\tcreateProjectResponse$$,\n\tcreateProjectResponseError$$,\n\tcreateProjectResult$,\n\tdisableIDPError$$,\n\tdisableIDPResponse$$,\n\tenableIDPError$$,\n\tenableIDPResponse$$,\n\tidentity$$,\n\tidentityGlobalPermissions$$,\n\tidentityProjectRelation$,\n\tidentityProvider$,\n\tmembership$$,\n\tmutation$,\n\tproject$,\n\tprojectSecretInfo$$,\n\tquery$,\n\troleConditionVariableDefinition$$,\n\troleDefinition$,\n\troleEntityVariableDefinition$$,\n\trolePredefinedVariableDefinition$$,\n\troleVariableDefinition$$,\n\tsetProjectSecretError$$,\n\tsetProjectSecretResponse$$,\n\tupdateIDPError$$,\n\tupdateIDPResponse$$,\n\tupdateProjectError$$,\n\tupdateProjectResponse$$,\n} from '@contember/graphql-client-tenant'\nimport { CliError, ExitCode } from '@contember/cli-common'\nimport type { ModelType } from 'graphql-ts-client-api'\nimport { TenantApiTransport } from '../TenantApiTransport.js'\nimport { TenantGlobalConfig, TenantIdpOptions } from '../tenantConfig.js'\n\nexport interface RemoteIdentityProvider {\n\tslug: string\n\ttype: string\n\tdisabledAt: string | null\n}\n\nexport interface TenantProjectSummary {\n\tid: string\n\tname: string\n\tslug: string\n}\n\nexport interface TenantProjectRole {\n\tname: string\n\t/** Variable names the role expects, retained for compatibility. */\n\tvariables: string[]\n\tvariableDefinitions: TenantProjectRoleVariableDefinition[]\n}\n\nexport type TenantProjectRoleVariableDefinition =\n\t| { type: 'entity'; name: string; entityName: string }\n\t| { type: 'predefined'; name: string; value: string }\n\t| { type: 'condition'; name: string }\n\nexport interface TenantProjectSecret {\n\tkey: string\n\tcreatedAt: string\n\tupdatedAt: string\n}\n\nexport interface TenantProjectDetail {\n\tid: string\n\tname: string\n\tslug: string\n\tconfig: unknown\n\troles: TenantProjectRole[]\n\tsecrets: TenantProjectSecret[]\n}\n\nexport interface TenantCreateProjectDetails {\n\tname?: string\n\tconfig?: unknown\n\t/** Skip issuing a deploy API key for the project. */\n\tnoDeployToken?: boolean\n}\n\nexport interface TenantCreateProjectResult {\n\t/** Null when {@link TenantCreateProjectDetails.noDeployToken} was requested. */\n\tdeployerApiKey: { id: string; token: string | null } | null\n}\n\nexport interface TenantUpdateProjectChanges {\n\tname?: string\n\tconfig?: unknown\n\tmergeConfig?: boolean\n}\n\nexport interface TenantRateLimitWindowState {\n\tlimit: number\n\twindow: string\n}\n\n/** The tenant-wide configuration returned by `Query.configuration` — the read side of {@link TenantGlobalConfig}. */\nexport interface TenantConfigState {\n\tsignup: { requireEmailVerification: boolean }\n\temailChange: { requireVerification: boolean }\n\tpasswordless: { enabled: ConfigPolicy; url: string | null; expiration: string }\n\tpassword: {\n\t\tminLength: number\n\t\trequireUppercase: number\n\t\trequireLowercase: number\n\t\trequireDigit: number\n\t\trequireSpecial: number\n\t\tpattern: string | null\n\t\tcheckBlacklist: boolean\n\t\tcheckHibp: boolean\n\t}\n\tlogin: {\n\t\tbaseBackoff: string\n\t\tmaxBackoff: string\n\t\tattemptWindow: string\n\t\trevealUserExists: boolean\n\t\trevealLoginMethod: boolean\n\t\tdefaultTokenExpiration: string\n\t\tmaxTokenExpiration: string | null\n\t\tmfaGraceDuration: string\n\t\tanomalyDetection: {\n\t\t\tenabled: boolean\n\t\t\thistorySize: number\n\t\t\temailThreshold: number\n\t\t\tstepUpThreshold: number\n\t\t}\n\t}\n\tcaptcha: {\n\t\tprovider: CaptchaProvider | null\n\t\tthreshold: number | null\n\t\tprotect: {\n\t\t\tsignUp: boolean\n\t\t\tpasswordReset: boolean\n\t\t\tpasswordlessInit: boolean\n\t\t\temailVerification: boolean\n\t\t}\n\t}\n\trateLimits: {\n\t\tsignUpPerIp: TenantRateLimitWindowState\n\t\tloginPerIp: TenantRateLimitWindowState\n\t\tpasswordResetPerIp: TenantRateLimitWindowState\n\t\tpasswordlessInitPerIp: TenantRateLimitWindowState\n\t\temailOtpPerPerson: TenantRateLimitWindowState\n\t\temailVerificationPerIp: TenantRateLimitWindowState\n\t}\n}\n\nexport interface TenantWhoAmIProject {\n\tslug: string\n\tname: string\n\troles: string[]\n}\n\n/** `Query.me` — the identity behind the token the CLI is using. */\nexport interface TenantWhoAmI {\n\tid: string\n\tdescription: string | null\n\t/** Global (tenant-wide) roles — empty for an identity whose access is entirely project-scoped. */\n\troles: string[]\n\tpermissions: { canCreateProject: boolean; canDeployEntrypoint: boolean } | null\n\tprojects: TenantWhoAmIProject[]\n}\n\n// Fetchers are immutable and reusable, so they are built once at module load.\nconst createProjectFetcher = mutation$.createProject(\n\tcreateProjectResponse$$.error(createProjectResponseError$$).result(createProjectResult$.deployerApiKey(apiKeyWithToken$$)),\n)\nconst setProjectSecretFetcher = mutation$.setProjectSecret(setProjectSecretResponse$$.error(setProjectSecretError$$))\nconst updateProjectFetcher = mutation$.updateProject(updateProjectResponse$$.error(updateProjectError$$))\nconst configureFetcher = mutation$.configure(configureResponse$$.error(configureError$$))\nconst configurationFetcher = query$.configuration(\n\tconfig$\n\t\t.signup(configSignup$$)\n\t\t.emailChange(configEmailChange$$)\n\t\t.passwordless(configPasswordless$$)\n\t\t.password(configPassword$$)\n\t\t.login(configLogin$$.anomalyDetection(configLoginAnomalyDetection$$))\n\t\t.captcha(configCaptcha$$.protect(configCaptchaProtect$$))\n\t\t.rateLimits(\n\t\t\tconfigRateLimits$\n\t\t\t\t.signUpPerIp(configRateLimitWindow$$)\n\t\t\t\t.loginPerIp(configRateLimitWindow$$)\n\t\t\t\t.passwordResetPerIp(configRateLimitWindow$$)\n\t\t\t\t.passwordlessInitPerIp(configRateLimitWindow$$)\n\t\t\t\t.emailOtpPerPerson(configRateLimitWindow$$)\n\t\t\t\t.emailVerificationPerIp(configRateLimitWindow$$),\n\t\t),\n)\nconst projectsFetcher = query$.projects(project$.id.name.slug)\nconst roleVariableFetcher = roleVariableDefinition$$\n\t.on(roleConditionVariableDefinition$$)\n\t.on(roleEntityVariableDefinition$$)\n\t.on(rolePredefinedVariableDefinition$$)\nconst toRoleVariableDefinition = (variable: ModelType<typeof roleVariableFetcher>): TenantProjectRoleVariableDefinition => {\n\tswitch (variable.__typename) {\n\t\tcase 'RoleEntityVariableDefinition':\n\t\t\treturn { type: 'entity', name: variable.name, entityName: variable.entityName }\n\t\tcase 'RolePredefinedVariableDefinition':\n\t\t\treturn { type: 'predefined', name: variable.name, value: variable.value }\n\t\tcase 'RoleConditionVariableDefinition':\n\t\t\treturn { type: 'condition', name: variable.name }\n\t\tcase 'RoleVariableDefinition':\n\t\t\tthrow new CliError(`Tenant API returned an abstract role variable definition for \"${variable.name}\".`, {\n\t\t\t\tcode: 'TENANT_API_INVALID_RESPONSE',\n\t\t\t\texitCode: ExitCode.InternalError,\n\t\t\t})\n\t}\n}\nconst projectBySlugFetcher = query$.projectBySlug(\n\tproject$\n\t\t.id.name.slug.config\n\t\t.roles(roleDefinition$.name.variables(roleVariableFetcher))\n\t\t.secrets(projectSecretInfo$$),\n)\nconst identityProvidersFetcher = query$.identityProviders(identityProvider$.slug.type.disabledAt)\nconst addIdpFetcher = mutation$.addIDP(addIDPResponse$$.error(addIDPError$$))\nconst updateIdpFetcher = mutation$.updateIDP(updateIDPResponse$$.error(updateIDPError$$))\nconst enableIdpFetcher = mutation$.enableIDP(enableIDPResponse$$.error(enableIDPError$$))\nconst disableIdpFetcher = mutation$.disableIDP(disableIDPResponse$$.error(disableIDPError$$))\nconst meFetcher = query$.me(\n\tidentity$$\n\t\t.permissions(identityGlobalPermissions$$)\n\t\t.projects(identityProjectRelation$.project(project$.slug.name).memberships(membership$$)),\n)\n\nconst toRateLimitWindow = (it: { limit: number; window: string }): TenantRateLimitWindowState => ({ limit: it.limit, window: it.window })\n\n/** Projects, project secrets, global tenant configuration, identity providers and `me`. */\nexport class TenantProjectClient {\n\tconstructor(\n\t\tprivate readonly transport: TenantApiTransport,\n\t) {\n\t}\n\n\tpublic async listProjects(): Promise<TenantProjectSummary[]> {\n\t\tconst result = await this.transport.exec(projectsFetcher, {})\n\t\treturn result.projects.map(it => ({ id: it.id, name: it.name, slug: it.slug }))\n\t}\n\n\t/** Null both when the project does not exist and when the caller may not see it — the API does not distinguish. */\n\tpublic async getProjectBySlug(slug: string): Promise<TenantProjectDetail | null> {\n\t\tconst result = await this.transport.exec(projectBySlugFetcher, { slug })\n\t\tconst project = result.projectBySlug\n\t\tif (!project) {\n\t\t\treturn null\n\t\t}\n\t\treturn {\n\t\t\tid: project.id,\n\t\t\tname: project.name,\n\t\t\tslug: project.slug,\n\t\t\tconfig: project.config,\n\t\t\troles: project.roles.map(role => ({\n\t\t\t\tname: role.name,\n\t\t\t\tvariables: role.variables.map(it => it.name),\n\t\t\t\tvariableDefinitions: role.variables.map(toRoleVariableDefinition),\n\t\t\t})),\n\t\t\tsecrets: project.secrets.map(it => ({ key: it.key, createdAt: it.createdAt, updatedAt: it.updatedAt })),\n\t\t}\n\t}\n\n\t/** Returns `null` (nothing created) when `ignoreExisting` swallowed an `ALREADY_EXISTS`. */\n\tpublic async createProject(slug: string, ignoreExisting = false, details?: TenantCreateProjectDetails): Promise<TenantCreateProjectResult | null> {\n\t\tconst result = await this.transport.exec(createProjectFetcher, {\n\t\t\tprojectSlug: slug,\n\t\t\tname: details?.name,\n\t\t\tconfig: details?.config,\n\t\t\toptions: details?.noDeployToken ? { noDeployToken: true } : undefined,\n\t\t})\n\t\tif (ignoreExisting && result.createProject?.error?.code === 'ALREADY_EXISTS') {\n\t\t\treturn null\n\t\t}\n\t\tthis.transport.assertOk(result.createProject, `createProject(${slug})`)\n\t\tconst deployerApiKey = result.createProject?.result?.deployerApiKey\n\t\treturn { deployerApiKey: deployerApiKey ? { id: deployerApiKey.id, token: deployerApiKey.token ?? null } : null }\n\t}\n\n\tpublic async updateProject(slug: string, changes: TenantUpdateProjectChanges): Promise<void> {\n\t\tconst result = await this.transport.exec(updateProjectFetcher, {\n\t\t\tprojectSlug: slug,\n\t\t\tname: changes.name,\n\t\t\tconfig: changes.config,\n\t\t\tmergeConfig: changes.mergeConfig,\n\t\t})\n\t\tthis.transport.assertOk(result.updateProject, `updateProject(${slug})`)\n\t}\n\n\tpublic async setProjectSecret(slug: string, key: string, value: string): Promise<void> {\n\t\tconst result = await this.transport.exec(setProjectSecretFetcher, { projectSlug: slug, key, value })\n\t\tthis.transport.assertOk(result.setProjectSecret, `setProjectSecret(${slug}/${key})`)\n\t}\n\n\tpublic async configure(config: TenantGlobalConfig): Promise<void> {\n\t\tconst result = await this.transport.exec(configureFetcher, { config })\n\t\tthis.transport.assertOk(result.configure, 'configure')\n\t}\n\n\tpublic async configuration(): Promise<TenantConfigState> {\n\t\tconst result = await this.transport.exec(configurationFetcher, {})\n\t\tconst config = result.configuration\n\t\treturn {\n\t\t\tsignup: { requireEmailVerification: config.signup.requireEmailVerification },\n\t\t\temailChange: { requireVerification: config.emailChange.requireVerification },\n\t\t\tpasswordless: {\n\t\t\t\tenabled: config.passwordless.enabled,\n\t\t\t\turl: config.passwordless.url ?? null,\n\t\t\t\texpiration: config.passwordless.expiration,\n\t\t\t},\n\t\t\tpassword: {\n\t\t\t\tminLength: config.password.minLength,\n\t\t\t\trequireUppercase: config.password.requireUppercase,\n\t\t\t\trequireLowercase: config.password.requireLowercase,\n\t\t\t\trequireDigit: config.password.requireDigit,\n\t\t\t\trequireSpecial: config.password.requireSpecial,\n\t\t\t\tpattern: config.password.pattern ?? null,\n\t\t\t\tcheckBlacklist: config.password.checkBlacklist,\n\t\t\t\tcheckHibp: config.password.checkHibp,\n\t\t\t},\n\t\t\tlogin: {\n\t\t\t\tbaseBackoff: config.login.baseBackoff,\n\t\t\t\tmaxBackoff: config.login.maxBackoff,\n\t\t\t\tattemptWindow: config.login.attemptWindow,\n\t\t\t\trevealUserExists: config.login.revealUserExists,\n\t\t\t\trevealLoginMethod: config.login.revealLoginMethod,\n\t\t\t\tdefaultTokenExpiration: config.login.defaultTokenExpiration,\n\t\t\t\tmaxTokenExpiration: config.login.maxTokenExpiration ?? null,\n\t\t\t\tmfaGraceDuration: config.login.mfaGraceDuration,\n\t\t\t\tanomalyDetection: {\n\t\t\t\t\tenabled: config.login.anomalyDetection.enabled,\n\t\t\t\t\thistorySize: config.login.anomalyDetection.historySize,\n\t\t\t\t\temailThreshold: config.login.anomalyDetection.emailThreshold,\n\t\t\t\t\tstepUpThreshold: config.login.anomalyDetection.stepUpThreshold,\n\t\t\t\t},\n\t\t\t},\n\t\t\tcaptcha: {\n\t\t\t\tprovider: config.captcha.provider ?? null,\n\t\t\t\tthreshold: config.captcha.threshold ?? null,\n\t\t\t\tprotect: {\n\t\t\t\t\tsignUp: config.captcha.protect.signUp,\n\t\t\t\t\tpasswordReset: config.captcha.protect.passwordReset,\n\t\t\t\t\tpasswordlessInit: config.captcha.protect.passwordlessInit,\n\t\t\t\t\temailVerification: config.captcha.protect.emailVerification,\n\t\t\t\t},\n\t\t\t},\n\t\t\trateLimits: {\n\t\t\t\tsignUpPerIp: toRateLimitWindow(config.rateLimits.signUpPerIp),\n\t\t\t\tloginPerIp: toRateLimitWindow(config.rateLimits.loginPerIp),\n\t\t\t\tpasswordResetPerIp: toRateLimitWindow(config.rateLimits.passwordResetPerIp),\n\t\t\t\tpasswordlessInitPerIp: toRateLimitWindow(config.rateLimits.passwordlessInitPerIp),\n\t\t\t\temailOtpPerPerson: toRateLimitWindow(config.rateLimits.emailOtpPerPerson),\n\t\t\t\temailVerificationPerIp: toRateLimitWindow(config.rateLimits.emailVerificationPerIp),\n\t\t\t},\n\t\t}\n\t}\n\n\tpublic async listIdentityProviders(): Promise<RemoteIdentityProvider[]> {\n\t\tconst result = await this.transport.exec(identityProvidersFetcher, {})\n\t\treturn result.identityProviders.map(it => ({\n\t\t\tslug: it.slug,\n\t\t\ttype: it.type,\n\t\t\tdisabledAt: it.disabledAt ?? null,\n\t\t}))\n\t}\n\n\tpublic async addIdp(slug: string, type: string, configuration: unknown, options?: TenantIdpOptions): Promise<void> {\n\t\tconst result = await this.transport.exec(addIdpFetcher, { identityProvider: slug, type, configuration, options })\n\t\tthis.transport.assertOk(result.addIDP, `addIDP(${slug})`)\n\t}\n\n\tpublic async updateIdp(slug: string, type: string, configuration: unknown, options?: TenantIdpOptions): Promise<void> {\n\t\tconst result = await this.transport.exec(updateIdpFetcher, {\n\t\t\tidentityProvider: slug,\n\t\t\ttype,\n\t\t\tconfiguration,\n\t\t\toptions,\n\t\t\tmergeConfiguration: false,\n\t\t})\n\t\tthis.transport.assertOk(result.updateIDP, `updateIDP(${slug})`)\n\t}\n\n\tpublic async enableIdp(slug: string): Promise<void> {\n\t\tconst result = await this.transport.exec(enableIdpFetcher, { identityProvider: slug })\n\t\tthis.transport.assertOk(result.enableIDP, `enableIDP(${slug})`)\n\t}\n\n\tpublic async disableIdp(slug: string): Promise<void> {\n\t\tconst result = await this.transport.exec(disableIdpFetcher, { identityProvider: slug })\n\t\tthis.transport.assertOk(result.disableIDP, `disableIDP(${slug})`)\n\t}\n\n\tpublic async whoAmI(): Promise<TenantWhoAmI> {\n\t\tconst result = await this.transport.exec(meFetcher, {})\n\t\tconst me = result.me\n\t\treturn {\n\t\t\tid: me.id,\n\t\t\tdescription: me.description ?? null,\n\t\t\troles: me.roles ? [...me.roles] : [],\n\t\t\tpermissions: me.permissions\n\t\t\t\t? { canCreateProject: me.permissions.canCreateProject, canDeployEntrypoint: me.permissions.canDeployEntrypoint }\n\t\t\t\t: null,\n\t\t\tprojects: me.projects.map(it => ({\n\t\t\t\tslug: it.project.slug,\n\t\t\t\tname: it.project.name,\n\t\t\t\troles: it.memberships.map(m => m.role),\n\t\t\t})),\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;AAsLA,MAAM,uBAAuB,UAAU;AAAA,EACtC,wBAAwB,MAAM,4BAA4B,EAAE,OAAO,qBAAqB,eAAe,iBAAiB,CAAC;AAC1H;AACA,MAAM,0BAA0B,UAAU,iBAAiB,2BAA2B,MAAM,uBAAuB,CAAC;AACpH,MAAM,uBAAuB,UAAU,cAAc,wBAAwB,MAAM,oBAAoB,CAAC;AACxG,MAAM,mBAAmB,UAAU,UAAU,oBAAoB,MAAM,gBAAgB,CAAC;AACxF,MAAM,uBAAuB,OAAO;AAAA,EACnC,QACE,OAAO,cAAc,EACrB,YAAY,mBAAmB,EAC/B,aAAa,oBAAoB,EACjC,SAAS,gBAAgB,EACzB,MAAM,cAAc,iBAAiB,6BAA6B,CAAC,EACnE,QAAQ,gBAAgB,QAAQ,sBAAsB,CAAC,EACvD;AAAA,IACA,kBACE,YAAY,uBAAuB,EACnC,WAAW,uBAAuB,EAClC,mBAAmB,uBAAuB,EAC1C,sBAAsB,uBAAuB,EAC7C,kBAAkB,uBAAuB,EACzC,uBAAuB,uBAAuB;AAAA,EAAA;AAEnD;AACA,MAAM,kBAAkB,OAAO,SAAS,SAAS,GAAG,KAAK,IAAI;AAC7D,MAAM,sBAAsB,yBAC1B,GAAG,iCAAiC,EACpC,GAAG,8BAA8B,EACjC,GAAG,kCAAkC;AACvC,MAAM,2BAA2B,CAAC,aAAyF;AAC1H,UAAQ,SAAS,YAAA;AAAA,IAChB,KAAK;AACJ,aAAO,EAAE,MAAM,UAAU,MAAM,SAAS,MAAM,YAAY,SAAS,WAAA;AAAA,IACpE,KAAK;AACJ,aAAO,EAAE,MAAM,cAAc,MAAM,SAAS,MAAM,OAAO,SAAS,MAAA;AAAA,IACnE,KAAK;AACJ,aAAO,EAAE,MAAM,aAAa,MAAM,SAAS,KAAA;AAAA,IAC5C,KAAK;AACJ,YAAM,IAAI,SAAS,iEAAiE,SAAS,IAAI,MAAM;AAAA,QACtG,MAAM;AAAA,QACN,UAAU,SAAS;AAAA,MAAA,CACnB;AAAA,EAAA;AAEJ;AACA,MAAM,uBAAuB,OAAO;AAAA,EACnC,SACE,GAAG,KAAK,KAAK,OACb,MAAM,gBAAgB,KAAK,UAAU,mBAAmB,CAAC,EACzD,QAAQ,mBAAmB;AAC9B;AACA,MAAM,2BAA2B,OAAO,kBAAkB,kBAAkB,KAAK,KAAK,UAAU;AAChG,MAAM,gBAAgB,UAAU,OAAO,iBAAiB,MAAM,aAAa,CAAC;AAC5E,MAAM,mBAAmB,UAAU,UAAU,oBAAoB,MAAM,gBAAgB,CAAC;AACxF,MAAM,mBAAmB,UAAU,UAAU,oBAAoB,MAAM,gBAAgB,CAAC;AACxF,MAAM,oBAAoB,UAAU,WAAW,qBAAqB,MAAM,iBAAiB,CAAC;AAC5F,MAAM,YAAY,OAAO;AAAA,EACxB,WACE,YAAY,2BAA2B,EACvC,SAAS,yBAAyB,QAAQ,SAAS,KAAK,IAAI,EAAE,YAAY,YAAY,CAAC;AAC1F;AAEA,MAAM,oBAAoB,CAAC,QAAuE,EAAE,OAAO,GAAG,OAAO,QAAQ,GAAG;AAGzH,MAAM,oBAAoB;AAAA,EAChC,YACkB,WAChB;AADgB,SAAA,YAAA;AAAA,EAElB;AAAA,EAEA,MAAa,eAAgD;AAC5D,UAAM,SAAS,MAAM,KAAK,UAAU,KAAK,iBAAiB,EAAE;AAC5D,WAAO,OAAO,SAAS,IAAI,CAAA,QAAO,EAAE,IAAI,GAAG,IAAI,MAAM,GAAG,MAAM,MAAM,GAAG,OAAO;AAAA,EAC/E;AAAA;AAAA,EAGA,MAAa,iBAAiB,MAAmD;AAChF,UAAM,SAAS,MAAM,KAAK,UAAU,KAAK,sBAAsB,EAAE,MAAM;AACvE,UAAM,UAAU,OAAO;AACvB,QAAI,CAAC,SAAS;AACb,aAAO;AAAA,IACR;AACA,WAAO;AAAA,MACN,IAAI,QAAQ;AAAA,MACZ,MAAM,QAAQ;AAAA,MACd,MAAM,QAAQ;AAAA,MACd,QAAQ,QAAQ;AAAA,MAChB,OAAO,QAAQ,MAAM,IAAI,CAAA,UAAS;AAAA,QACjC,MAAM,KAAK;AAAA,QACX,WAAW,KAAK,UAAU,IAAI,CAAA,OAAM,GAAG,IAAI;AAAA,QAC3C,qBAAqB,KAAK,UAAU,IAAI,wBAAwB;AAAA,MAAA,EAC/D;AAAA,MACF,SAAS,QAAQ,QAAQ,IAAI,SAAO,EAAE,KAAK,GAAG,KAAK,WAAW,GAAG,WAAW,WAAW,GAAG,YAAY;AAAA,IAAA;AAAA,EAExG;AAAA;AAAA,EAGA,MAAa,cAAc,MAAc,iBAAiB,OAAO,SAAiF;AACjJ,UAAM,SAAS,MAAM,KAAK,UAAU,KAAK,sBAAsB;AAAA,MAC9D,aAAa;AAAA,MACb,MAAM,SAAS;AAAA,MACf,QAAQ,SAAS;AAAA,MACjB,SAAS,SAAS,gBAAgB,EAAE,eAAe,SAAS;AAAA,IAAA,CAC5D;AACD,QAAI,kBAAkB,OAAO,eAAe,OAAO,SAAS,kBAAkB;AAC7E,aAAO;AAAA,IACR;AACA,SAAK,UAAU,SAAS,OAAO,eAAe,iBAAiB,IAAI,GAAG;AACtE,UAAM,iBAAiB,OAAO,eAAe,QAAQ;AACrD,WAAO,EAAE,gBAAgB,iBAAiB,EAAE,IAAI,eAAe,IAAI,OAAO,eAAe,SAAS,KAAA,IAAS,KAAA;AAAA,EAC5G;AAAA,EAEA,MAAa,cAAc,MAAc,SAAoD;AAC5F,UAAM,SAAS,MAAM,KAAK,UAAU,KAAK,sBAAsB;AAAA,MAC9D,aAAa;AAAA,MACb,MAAM,QAAQ;AAAA,MACd,QAAQ,QAAQ;AAAA,MAChB,aAAa,QAAQ;AAAA,IAAA,CACrB;AACD,SAAK,UAAU,SAAS,OAAO,eAAe,iBAAiB,IAAI,GAAG;AAAA,EACvE;AAAA,EAEA,MAAa,iBAAiB,MAAc,KAAa,OAA8B;AACtF,UAAM,SAAS,MAAM,KAAK,UAAU,KAAK,yBAAyB,EAAE,aAAa,MAAM,KAAK,MAAA,CAAO;AACnG,SAAK,UAAU,SAAS,OAAO,kBAAkB,oBAAoB,IAAI,IAAI,GAAG,GAAG;AAAA,EACpF;AAAA,EAEA,MAAa,UAAU,QAA2C;AACjE,UAAM,SAAS,MAAM,KAAK,UAAU,KAAK,kBAAkB,EAAE,QAAQ;AACrE,SAAK,UAAU,SAAS,OAAO,WAAW,WAAW;AAAA,EACtD;AAAA,EAEA,MAAa,gBAA4C;AACxD,UAAM,SAAS,MAAM,KAAK,UAAU,KAAK,sBAAsB,EAAE;AACjE,UAAM,SAAS,OAAO;AACtB,WAAO;AAAA,MACN,QAAQ,EAAE,0BAA0B,OAAO,OAAO,yBAAA;AAAA,MAClD,aAAa,EAAE,qBAAqB,OAAO,YAAY,oBAAA;AAAA,MACvD,cAAc;AAAA,QACb,SAAS,OAAO,aAAa;AAAA,QAC7B,KAAK,OAAO,aAAa,OAAO;AAAA,QAChC,YAAY,OAAO,aAAa;AAAA,MAAA;AAAA,MAEjC,UAAU;AAAA,QACT,WAAW,OAAO,SAAS;AAAA,QAC3B,kBAAkB,OAAO,SAAS;AAAA,QAClC,kBAAkB,OAAO,SAAS;AAAA,QAClC,cAAc,OAAO,SAAS;AAAA,QAC9B,gBAAgB,OAAO,SAAS;AAAA,QAChC,SAAS,OAAO,SAAS,WAAW;AAAA,QACpC,gBAAgB,OAAO,SAAS;AAAA,QAChC,WAAW,OAAO,SAAS;AAAA,MAAA;AAAA,MAE5B,OAAO;AAAA,QACN,aAAa,OAAO,MAAM;AAAA,QAC1B,YAAY,OAAO,MAAM;AAAA,QACzB,eAAe,OAAO,MAAM;AAAA,QAC5B,kBAAkB,OAAO,MAAM;AAAA,QAC/B,mBAAmB,OAAO,MAAM;AAAA,QAChC,wBAAwB,OAAO,MAAM;AAAA,QACrC,oBAAoB,OAAO,MAAM,sBAAsB;AAAA,QACvD,kBAAkB,OAAO,MAAM;AAAA,QAC/B,kBAAkB;AAAA,UACjB,SAAS,OAAO,MAAM,iBAAiB;AAAA,UACvC,aAAa,OAAO,MAAM,iBAAiB;AAAA,UAC3C,gBAAgB,OAAO,MAAM,iBAAiB;AAAA,UAC9C,iBAAiB,OAAO,MAAM,iBAAiB;AAAA,QAAA;AAAA,MAChD;AAAA,MAED,SAAS;AAAA,QACR,UAAU,OAAO,QAAQ,YAAY;AAAA,QACrC,WAAW,OAAO,QAAQ,aAAa;AAAA,QACvC,SAAS;AAAA,UACR,QAAQ,OAAO,QAAQ,QAAQ;AAAA,UAC/B,eAAe,OAAO,QAAQ,QAAQ;AAAA,UACtC,kBAAkB,OAAO,QAAQ,QAAQ;AAAA,UACzC,mBAAmB,OAAO,QAAQ,QAAQ;AAAA,QAAA;AAAA,MAC3C;AAAA,MAED,YAAY;AAAA,QACX,aAAa,kBAAkB,OAAO,WAAW,WAAW;AAAA,QAC5D,YAAY,kBAAkB,OAAO,WAAW,UAAU;AAAA,QAC1D,oBAAoB,kBAAkB,OAAO,WAAW,kBAAkB;AAAA,QAC1E,uBAAuB,kBAAkB,OAAO,WAAW,qBAAqB;AAAA,QAChF,mBAAmB,kBAAkB,OAAO,WAAW,iBAAiB;AAAA,QACxE,wBAAwB,kBAAkB,OAAO,WAAW,sBAAsB;AAAA,MAAA;AAAA,IACnF;AAAA,EAEF;AAAA,EAEA,MAAa,wBAA2D;AACvE,UAAM,SAAS,MAAM,KAAK,UAAU,KAAK,0BAA0B,EAAE;AACrE,WAAO,OAAO,kBAAkB,IAAI,CAAA,QAAO;AAAA,MAC1C,MAAM,GAAG;AAAA,MACT,MAAM,GAAG;AAAA,MACT,YAAY,GAAG,cAAc;AAAA,IAAA,EAC5B;AAAA,EACH;AAAA,EAEA,MAAa,OAAO,MAAc,MAAc,eAAwB,SAA2C;AAClH,UAAM,SAAS,MAAM,KAAK,UAAU,KAAK,eAAe,EAAE,kBAAkB,MAAM,MAAM,eAAe,QAAA,CAAS;AAChH,SAAK,UAAU,SAAS,OAAO,QAAQ,UAAU,IAAI,GAAG;AAAA,EACzD;AAAA,EAEA,MAAa,UAAU,MAAc,MAAc,eAAwB,SAA2C;AACrH,UAAM,SAAS,MAAM,KAAK,UAAU,KAAK,kBAAkB;AAAA,MAC1D,kBAAkB;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,MACA,oBAAoB;AAAA,IAAA,CACpB;AACD,SAAK,UAAU,SAAS,OAAO,WAAW,aAAa,IAAI,GAAG;AAAA,EAC/D;AAAA,EAEA,MAAa,UAAU,MAA6B;AACnD,UAAM,SAAS,MAAM,KAAK,UAAU,KAAK,kBAAkB,EAAE,kBAAkB,MAAM;AACrF,SAAK,UAAU,SAAS,OAAO,WAAW,aAAa,IAAI,GAAG;AAAA,EAC/D;AAAA,EAEA,MAAa,WAAW,MAA6B;AACpD,UAAM,SAAS,MAAM,KAAK,UAAU,KAAK,mBAAmB,EAAE,kBAAkB,MAAM;AACtF,SAAK,UAAU,SAAS,OAAO,YAAY,cAAc,IAAI,GAAG;AAAA,EACjE;AAAA,EAEA,MAAa,SAAgC;AAC5C,UAAM,SAAS,MAAM,KAAK,UAAU,KAAK,WAAW,EAAE;AACtD,UAAM,KAAK,OAAO;AAClB,WAAO;AAAA,MACN,IAAI,GAAG;AAAA,MACP,aAAa,GAAG,eAAe;AAAA,MAC/B,OAAO,GAAG,QAAQ,CAAC,GAAG,GAAG,KAAK,IAAI,CAAA;AAAA,MAClC,aAAa,GAAG,cACb,EAAE,kBAAkB,GAAG,YAAY,kBAAkB,qBAAqB,GAAG,YAAY,oBAAA,IACzF;AAAA,MACH,UAAU,GAAG,SAAS,IAAI,CAAA,QAAO;AAAA,QAChC,MAAM,GAAG,QAAQ;AAAA,QACjB,MAAM,GAAG,QAAQ;AAAA,QACjB,OAAO,GAAG,YAAY,IAAI,CAAA,MAAK,EAAE,IAAI;AAAA,MAAA,EACpC;AAAA,IAAA;AAAA,EAEJ;AACD;"}

package/dist/production/src/lib/tenant/clients/index.cjs

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const TenantApiKeyClient = require("./TenantApiKeyClient.cjs");
+const TenantMemberClient = require("./TenantMemberClient.cjs");
+const TenantPersonClient = require("./TenantPersonClient.cjs");
+const TenantPolicyClient = require("./TenantPolicyClient.cjs");
+const TenantProjectClient = require("./TenantProjectClient.cjs");
+const createTenantClients = (transport) => ({
+  project: new TenantProjectClient.TenantProjectClient(transport),
+  person: new TenantPersonClient.TenantPersonClient(transport),
+  member: new TenantMemberClient.TenantMemberClient(transport),
+  apiKey: new TenantApiKeyClient.TenantApiKeyClient(transport),
+  policy: new TenantPolicyClient.TenantPolicyClient(transport)
+});
+exports.TenantApiKeyClient = TenantApiKeyClient.TenantApiKeyClient;
+exports.TenantMemberClient = TenantMemberClient.TenantMemberClient;
+exports.TenantPersonClient = TenantPersonClient.TenantPersonClient;
+exports.TenantPolicyClient = TenantPolicyClient.TenantPolicyClient;
+exports.TenantProjectClient = TenantProjectClient.TenantProjectClient;
+exports.createTenantClients = createTenantClients;
+//# sourceMappingURL=index.cjs.map

package/dist/production/src/lib/tenant/clients/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","sources":["../../../../../../../packages/cli/src/lib/tenant/clients/index.ts"],"sourcesContent":["import { TenantApiTransport } from '../TenantApiTransport.js'\nimport { TenantApiKeyClient } from './TenantApiKeyClient.js'\nimport { TenantMemberClient } from './TenantMemberClient.js'\nimport { TenantPersonClient } from './TenantPersonClient.js'\nimport { TenantPolicyClient } from './TenantPolicyClient.js'\nimport { TenantProjectClient } from './TenantProjectClient.js'\n\nexport * from './TenantApiKeyClient.js'\nexport * from './TenantMemberClient.js'\nexport * from './TenantPersonClient.js'\nexport * from './TenantPolicyClient.js'\nexport * from './TenantProjectClient.js'\n\n/** One instance of every tenant domain client, all sharing a single transport. */\nexport interface TenantClients {\n\treadonly project: TenantProjectClient\n\treadonly person: TenantPersonClient\n\treadonly member: TenantMemberClient\n\treadonly apiKey: TenantApiKeyClient\n\treadonly policy: TenantPolicyClient\n}\n\nexport const createTenantClients = (transport: TenantApiTransport): TenantClients => ({\n\tproject: new TenantProjectClient(transport),\n\tperson: new TenantPersonClient(transport),\n\tmember: new TenantMemberClient(transport),\n\tapiKey: new TenantApiKeyClient(transport),\n\tpolicy: new TenantPolicyClient(transport),\n})\n"],"names":["TenantProjectClient","TenantPersonClient","TenantMemberClient","TenantApiKeyClient","TenantPolicyClient"],"mappings":";;;;;;;AAsBO,MAAM,sBAAsB,CAAC,eAAkD;AAAA,EACrF,SAAS,IAAIA,oBAAAA,oBAAoB,SAAS;AAAA,EAC1C,QAAQ,IAAIC,mBAAAA,mBAAmB,SAAS;AAAA,EACxC,QAAQ,IAAIC,mBAAAA,mBAAmB,SAAS;AAAA,EACxC,QAAQ,IAAIC,mBAAAA,mBAAmB,SAAS;AAAA,EACxC,QAAQ,IAAIC,mBAAAA,mBAAmB,SAAS;AACzC;;;;;;;"}

package/dist/production/src/lib/tenant/clients/index.js

@@ -0,0 +1,21 @@
+import { TenantApiKeyClient } from "./TenantApiKeyClient.js";
+import { TenantMemberClient } from "./TenantMemberClient.js";
+import { TenantPersonClient } from "./TenantPersonClient.js";
+import { TenantPolicyClient } from "./TenantPolicyClient.js";
+import { TenantProjectClient } from "./TenantProjectClient.js";
+const createTenantClients = (transport) => ({
+  project: new TenantProjectClient(transport),
+  person: new TenantPersonClient(transport),
+  member: new TenantMemberClient(transport),
+  apiKey: new TenantApiKeyClient(transport),
+  policy: new TenantPolicyClient(transport)
+});
+export {
+  TenantApiKeyClient,
+  TenantMemberClient,
+  TenantPersonClient,
+  TenantPolicyClient,
+  TenantProjectClient,
+  createTenantClients
+};
+//# sourceMappingURL=index.js.map

package/dist/production/src/lib/tenant/clients/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":["../../../../../../../packages/cli/src/lib/tenant/clients/index.ts"],"sourcesContent":["import { TenantApiTransport } from '../TenantApiTransport.js'\nimport { TenantApiKeyClient } from './TenantApiKeyClient.js'\nimport { TenantMemberClient } from './TenantMemberClient.js'\nimport { TenantPersonClient } from './TenantPersonClient.js'\nimport { TenantPolicyClient } from './TenantPolicyClient.js'\nimport { TenantProjectClient } from './TenantProjectClient.js'\n\nexport * from './TenantApiKeyClient.js'\nexport * from './TenantMemberClient.js'\nexport * from './TenantPersonClient.js'\nexport * from './TenantPolicyClient.js'\nexport * from './TenantProjectClient.js'\n\n/** One instance of every tenant domain client, all sharing a single transport. */\nexport interface TenantClients {\n\treadonly project: TenantProjectClient\n\treadonly person: TenantPersonClient\n\treadonly member: TenantMemberClient\n\treadonly apiKey: TenantApiKeyClient\n\treadonly policy: TenantPolicyClient\n}\n\nexport const createTenantClients = (transport: TenantApiTransport): TenantClients => ({\n\tproject: new TenantProjectClient(transport),\n\tperson: new TenantPersonClient(transport),\n\tmember: new TenantMemberClient(transport),\n\tapiKey: new TenantApiKeyClient(transport),\n\tpolicy: new TenantPolicyClient(transport),\n})\n"],"names":[],"mappings":";;;;;AAsBO,MAAM,sBAAsB,CAAC,eAAkD;AAAA,EACrF,SAAS,IAAI,oBAAoB,SAAS;AAAA,EAC1C,QAAQ,IAAI,mBAAmB,SAAS;AAAA,EACxC,QAAQ,IAAI,mBAAmB,SAAS;AAAA,EACxC,QAAQ,IAAI,mBAAmB,SAAS;AAAA,EACxC,QAAQ,IAAI,mBAAmB,SAAS;AACzC;"}

package/dist/production/src/lib/tenant/confirmation.cjs

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const cliCommon = require("@contember/cli-common");
+const prompt = require("../prompt/prompt.cjs");
+const requireConfirmation = async ({ yes, output, warning }) => {
+  if (yes) {
+    return;
+  }
+  if (!output.canPrompt()) {
+    throw new cliCommon.CliError("TTY not available. Pass --yes to confirm execution.", {
+      code: "TTY_UNAVAILABLE",
+      exitCode: cliCommon.ExitCode.InputError
+    });
+  }
+  output.warn(warning);
+  output.info("(to skip this dialog, you can pass the --yes option)");
+  const confirmed = await prompt.promptConfirm(output, { message: "Do you want to continue?" });
+  if (!confirmed) {
+    throw new cliCommon.CliError("Aborted by the user.", { code: "ABORTED", exitCode: cliCommon.ExitCode.InputError });
+  }
+};
+exports.requireConfirmation = requireConfirmation;
+//# sourceMappingURL=confirmation.cjs.map

package/dist/production/src/lib/tenant/confirmation.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmation.cjs","sources":["../../../../../../packages/cli/src/lib/tenant/confirmation.ts"],"sourcesContent":["import { CliError, ExitCode, Output } from '@contember/cli-common'\nimport { promptConfirm } from '../prompt/index.js'\n\nexport interface ConfirmationArgs {\n\treadonly yes: boolean\n\treadonly output: Output\n\t/** What is about to happen, shown above the prompt. */\n\treadonly warning: string\n}\n\n/**\n * The one destructive-action guard of the tenant commands. `--yes` skips the prompt; without a TTY there\n * is nobody to answer it, so the run fails fast instead of hanging a CI job. Declining throws as well, so\n * a caller never has to turn a boolean into an exit code and an agent always gets a typed error.\n */\nexport const requireConfirmation = async ({ yes, output, warning }: ConfirmationArgs): Promise<void> => {\n\tif (yes) {\n\t\treturn\n\t}\n\tif (!output.canPrompt()) {\n\t\tthrow new CliError('TTY not available. Pass --yes to confirm execution.', {\n\t\t\tcode: 'TTY_UNAVAILABLE',\n\t\t\texitCode: ExitCode.InputError,\n\t\t})\n\t}\n\toutput.warn(warning)\n\toutput.info('(to skip this dialog, you can pass the --yes option)')\n\tconst confirmed = await promptConfirm(output, { message: 'Do you want to continue?' })\n\tif (!confirmed) {\n\t\tthrow new CliError('Aborted by the user.', { code: 'ABORTED', exitCode: ExitCode.InputError })\n\t}\n}\n"],"names":["CliError","ExitCode","promptConfirm"],"mappings":";;;;AAeO,MAAM,sBAAsB,OAAO,EAAE,KAAK,QAAQ,cAA+C;AACvG,MAAI,KAAK;AACR;AAAA,EACD;AACA,MAAI,CAAC,OAAO,aAAa;AACxB,UAAM,IAAIA,UAAAA,SAAS,uDAAuD;AAAA,MACzE,MAAM;AAAA,MACN,UAAUC,UAAAA,SAAS;AAAA,IAAA,CACnB;AAAA,EACF;AACA,SAAO,KAAK,OAAO;AACnB,SAAO,KAAK,sDAAsD;AAClE,QAAM,YAAY,MAAMC,OAAAA,cAAc,QAAQ,EAAE,SAAS,4BAA4B;AACrF,MAAI,CAAC,WAAW;AACf,UAAM,IAAIF,UAAAA,SAAS,wBAAwB,EAAE,MAAM,WAAW,UAAUC,mBAAS,YAAY;AAAA,EAC9F;AACD;;"}

package/dist/production/src/lib/tenant/confirmation.js

@@ -0,0 +1,23 @@
+import { CliError, ExitCode } from "@contember/cli-common";
+import { promptConfirm } from "../prompt/prompt.js";
+const requireConfirmation = async ({ yes, output, warning }) => {
+  if (yes) {
+    return;
+  }
+  if (!output.canPrompt()) {
+    throw new CliError("TTY not available. Pass --yes to confirm execution.", {
+      code: "TTY_UNAVAILABLE",
+      exitCode: ExitCode.InputError
+    });
+  }
+  output.warn(warning);
+  output.info("(to skip this dialog, you can pass the --yes option)");
+  const confirmed = await promptConfirm(output, { message: "Do you want to continue?" });
+  if (!confirmed) {
+    throw new CliError("Aborted by the user.", { code: "ABORTED", exitCode: ExitCode.InputError });
+  }
+};
+export {
+  requireConfirmation
+};
+//# sourceMappingURL=confirmation.js.map

package/dist/production/src/lib/tenant/confirmation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmation.js","sources":["../../../../../../packages/cli/src/lib/tenant/confirmation.ts"],"sourcesContent":["import { CliError, ExitCode, Output } from '@contember/cli-common'\nimport { promptConfirm } from '../prompt/index.js'\n\nexport interface ConfirmationArgs {\n\treadonly yes: boolean\n\treadonly output: Output\n\t/** What is about to happen, shown above the prompt. */\n\treadonly warning: string\n}\n\n/**\n * The one destructive-action guard of the tenant commands. `--yes` skips the prompt; without a TTY there\n * is nobody to answer it, so the run fails fast instead of hanging a CI job. Declining throws as well, so\n * a caller never has to turn a boolean into an exit code and an agent always gets a typed error.\n */\nexport const requireConfirmation = async ({ yes, output, warning }: ConfirmationArgs): Promise<void> => {\n\tif (yes) {\n\t\treturn\n\t}\n\tif (!output.canPrompt()) {\n\t\tthrow new CliError('TTY not available. Pass --yes to confirm execution.', {\n\t\t\tcode: 'TTY_UNAVAILABLE',\n\t\t\texitCode: ExitCode.InputError,\n\t\t})\n\t}\n\toutput.warn(warning)\n\toutput.info('(to skip this dialog, you can pass the --yes option)')\n\tconst confirmed = await promptConfirm(output, { message: 'Do you want to continue?' })\n\tif (!confirmed) {\n\t\tthrow new CliError('Aborted by the user.', { code: 'ABORTED', exitCode: ExitCode.InputError })\n\t}\n}\n"],"names":[],"mappings":";;AAeO,MAAM,sBAAsB,OAAO,EAAE,KAAK,QAAQ,cAA+C;AACvG,MAAI,KAAK;AACR;AAAA,EACD;AACA,MAAI,CAAC,OAAO,aAAa;AACxB,UAAM,IAAI,SAAS,uDAAuD;AAAA,MACzE,MAAM;AAAA,MACN,UAAU,SAAS;AAAA,IAAA,CACnB;AAAA,EACF;AACA,SAAO,KAAK,OAAO;AACnB,SAAO,KAAK,sDAAsD;AAClE,QAAM,YAAY,MAAM,cAAc,QAAQ,EAAE,SAAS,4BAA4B;AACrF,MAAI,CAAC,WAAW;AACf,UAAM,IAAI,SAAS,wBAAwB,EAAE,MAAM,WAAW,UAAU,SAAS,YAAY;AAAA,EAC9F;AACD;"}

package/dist/production/src/lib/tenant/input/pagination.cjs

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const cliCommon = require("@contember/cli-common");
+const GRAPHQL_INT_MAX = 2147483647;
+const parsePaginationOffset = (value, flag = "--offset") => parsePaginationInteger(value, flag, "offset", 0);
+const parsePaginationLimit = (value, flag = "--limit") => parsePaginationInteger(value, flag, "limit", 1);
+const parsePaginationInteger = (value, flag, kind, minimum) => {
+  if (value === void 0) {
+    return void 0;
+  }
+  const parsed = Number(value);
+  if (!/^(?:0|[1-9]\d*)$/.test(value) || !Number.isSafeInteger(parsed) || parsed < minimum || parsed > GRAPHQL_INT_MAX) {
+    const requirement = kind === "offset" ? `a non-negative GraphQL Int (maximum ${GRAPHQL_INT_MAX})` : `a positive GraphQL Int (maximum ${GRAPHQL_INT_MAX})`;
+    throw new cliCommon.CliError(`${flag} must be ${requirement}.`, {
+      code: kind === "offset" ? "INVALID_PAGINATION_OFFSET" : "INVALID_PAGINATION_LIMIT",
+      exitCode: cliCommon.ExitCode.InputError
+    });
+  }
+  return parsed;
+};
+exports.GRAPHQL_INT_MAX = GRAPHQL_INT_MAX;
+exports.parsePaginationLimit = parsePaginationLimit;
+exports.parsePaginationOffset = parsePaginationOffset;
+//# sourceMappingURL=pagination.cjs.map

package/dist/production/src/lib/tenant/input/pagination.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination.cjs","sources":["../../../../../../../packages/cli/src/lib/tenant/input/pagination.ts"],"sourcesContent":["import { CliError, ExitCode } from '@contember/cli-common'\n\n/** GraphQL `Int` is a signed 32-bit integer. Pagination values are non-negative. */\nexport const GRAPHQL_INT_MAX = 2_147_483_647\n\n/** Parses an optional non-negative integer pagination offset. */\nexport const parsePaginationOffset = (value: string | undefined, flag = '--offset'): number | undefined =>\n\tparsePaginationInteger(value, flag, 'offset', 0)\n\n/** Parses an optional positive integer pagination limit. */\nexport const parsePaginationLimit = (value: string | undefined, flag = '--limit'): number | undefined =>\n\tparsePaginationInteger(value, flag, 'limit', 1)\n\nconst parsePaginationInteger = (\n\tvalue: string | undefined,\n\tflag: string,\n\tkind: 'offset' | 'limit',\n\tminimum: number,\n): number | undefined => {\n\tif (value === undefined) {\n\t\treturn undefined\n\t}\n\tconst parsed = Number(value)\n\tif (\n\t\t!/^(?:0|[1-9]\\d*)$/.test(value)\n\t\t|| !Number.isSafeInteger(parsed)\n\t\t|| parsed < minimum\n\t\t|| parsed > GRAPHQL_INT_MAX\n\t) {\n\t\tconst requirement = kind === 'offset'\n\t\t\t? `a non-negative GraphQL Int (maximum ${GRAPHQL_INT_MAX})`\n\t\t\t: `a positive GraphQL Int (maximum ${GRAPHQL_INT_MAX})`\n\t\tthrow new CliError(`${flag} must be ${requirement}.`, {\n\t\t\tcode: kind === 'offset' ? 'INVALID_PAGINATION_OFFSET' : 'INVALID_PAGINATION_LIMIT',\n\t\t\texitCode: ExitCode.InputError,\n\t\t})\n\t}\n\treturn parsed\n}\n"],"names":["CliError","ExitCode"],"mappings":";;;AAGO,MAAM,kBAAkB;AAGxB,MAAM,wBAAwB,CAAC,OAA2B,OAAO,eACvE,uBAAuB,OAAO,MAAM,UAAU,CAAC;AAGzC,MAAM,uBAAuB,CAAC,OAA2B,OAAO,cACtE,uBAAuB,OAAO,MAAM,SAAS,CAAC;AAE/C,MAAM,yBAAyB,CAC9B,OACA,MACA,MACA,YACwB;AACxB,MAAI,UAAU,QAAW;AACxB,WAAO;AAAA,EACR;AACA,QAAM,SAAS,OAAO,KAAK;AAC3B,MACC,CAAC,mBAAmB,KAAK,KAAK,KAC3B,CAAC,OAAO,cAAc,MAAM,KAC5B,SAAS,WACT,SAAS,iBACX;AACD,UAAM,cAAc,SAAS,WAC1B,uCAAuC,eAAe,MACtD,mCAAmC,eAAe;AACrD,UAAM,IAAIA,UAAAA,SAAS,GAAG,IAAI,YAAY,WAAW,KAAK;AAAA,MACrD,MAAM,SAAS,WAAW,8BAA8B;AAAA,MACxD,UAAUC,UAAAA,SAAS;AAAA,IAAA,CACnB;AAAA,EACF;AACA,SAAO;AACR;;;;"}

package/dist/production/src/lib/tenant/input/pagination.js

@@ -0,0 +1,24 @@
+import { CliError, ExitCode } from "@contember/cli-common";
+const GRAPHQL_INT_MAX = 2147483647;
+const parsePaginationOffset = (value, flag = "--offset") => parsePaginationInteger(value, flag, "offset", 0);
+const parsePaginationLimit = (value, flag = "--limit") => parsePaginationInteger(value, flag, "limit", 1);
+const parsePaginationInteger = (value, flag, kind, minimum) => {
+  if (value === void 0) {
+    return void 0;
+  }
+  const parsed = Number(value);
+  if (!/^(?:0|[1-9]\d*)$/.test(value) || !Number.isSafeInteger(parsed) || parsed < minimum || parsed > GRAPHQL_INT_MAX) {
+    const requirement = kind === "offset" ? `a non-negative GraphQL Int (maximum ${GRAPHQL_INT_MAX})` : `a positive GraphQL Int (maximum ${GRAPHQL_INT_MAX})`;
+    throw new CliError(`${flag} must be ${requirement}.`, {
+      code: kind === "offset" ? "INVALID_PAGINATION_OFFSET" : "INVALID_PAGINATION_LIMIT",
+      exitCode: ExitCode.InputError
+    });
+  }
+  return parsed;
+};
+export {
+  GRAPHQL_INT_MAX,
+  parsePaginationLimit,
+  parsePaginationOffset
+};
+//# sourceMappingURL=pagination.js.map

package/dist/production/src/lib/tenant/input/pagination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination.js","sources":["../../../../../../../packages/cli/src/lib/tenant/input/pagination.ts"],"sourcesContent":["import { CliError, ExitCode } from '@contember/cli-common'\n\n/** GraphQL `Int` is a signed 32-bit integer. Pagination values are non-negative. */\nexport const GRAPHQL_INT_MAX = 2_147_483_647\n\n/** Parses an optional non-negative integer pagination offset. */\nexport const parsePaginationOffset = (value: string | undefined, flag = '--offset'): number | undefined =>\n\tparsePaginationInteger(value, flag, 'offset', 0)\n\n/** Parses an optional positive integer pagination limit. */\nexport const parsePaginationLimit = (value: string | undefined, flag = '--limit'): number | undefined =>\n\tparsePaginationInteger(value, flag, 'limit', 1)\n\nconst parsePaginationInteger = (\n\tvalue: string | undefined,\n\tflag: string,\n\tkind: 'offset' | 'limit',\n\tminimum: number,\n): number | undefined => {\n\tif (value === undefined) {\n\t\treturn undefined\n\t}\n\tconst parsed = Number(value)\n\tif (\n\t\t!/^(?:0|[1-9]\\d*)$/.test(value)\n\t\t|| !Number.isSafeInteger(parsed)\n\t\t|| parsed < minimum\n\t\t|| parsed > GRAPHQL_INT_MAX\n\t) {\n\t\tconst requirement = kind === 'offset'\n\t\t\t? `a non-negative GraphQL Int (maximum ${GRAPHQL_INT_MAX})`\n\t\t\t: `a positive GraphQL Int (maximum ${GRAPHQL_INT_MAX})`\n\t\tthrow new CliError(`${flag} must be ${requirement}.`, {\n\t\t\tcode: kind === 'offset' ? 'INVALID_PAGINATION_OFFSET' : 'INVALID_PAGINATION_LIMIT',\n\t\t\texitCode: ExitCode.InputError,\n\t\t})\n\t}\n\treturn parsed\n}\n"],"names":[],"mappings":";AAGO,MAAM,kBAAkB;AAGxB,MAAM,wBAAwB,CAAC,OAA2B,OAAO,eACvE,uBAAuB,OAAO,MAAM,UAAU,CAAC;AAGzC,MAAM,uBAAuB,CAAC,OAA2B,OAAO,cACtE,uBAAuB,OAAO,MAAM,SAAS,CAAC;AAE/C,MAAM,yBAAyB,CAC9B,OACA,MACA,MACA,YACwB;AACxB,MAAI,UAAU,QAAW;AACxB,WAAO;AAAA,EACR;AACA,QAAM,SAAS,OAAO,KAAK;AAC3B,MACC,CAAC,mBAAmB,KAAK,KAAK,KAC3B,CAAC,OAAO,cAAc,MAAM,KAC5B,SAAS,WACT,SAAS,iBACX;AACD,UAAM,cAAc,SAAS,WAC1B,uCAAuC,eAAe,MACtD,mCAAmC,eAAe;AACrD,UAAM,IAAI,SAAS,GAAG,IAAI,YAAY,WAAW,KAAK;AAAA,MACrD,MAAM,SAAS,WAAW,8BAA8B;AAAA,MACxD,UAAU,SAAS;AAAA,IAAA,CACnB;AAAA,EACF;AACA,SAAO;AACR;"}

package/dist/production/src/lib/tenant/input/value.cjs

@@ -0,0 +1,71 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const cliCommon = require("@contember/cli-common");
+const stdin = require("../stdin.cjs");
+const literalInput = (name, flag, value) => ({
+  kind: "literal",
+  name,
+  flag,
+  value
+});
+const environmentInput = (name, flag, variable) => ({
+  kind: "environment",
+  name,
+  flag,
+  variable
+});
+const stdinInput = (name, flag) => ({
+  kind: "stdin",
+  name,
+  flag
+});
+const resolveRequiredTenantInput = async (sources, options, dependencies = {}) => {
+  const source = selectSource(sources, options.label, true);
+  return await resolveSelectedSource(source, options, dependencies);
+};
+const resolveOptionalTenantInput = async (sources, options, dependencies = {}) => {
+  const source = selectSource(sources, options.label, false);
+  return source === void 0 ? void 0 : await resolveSelectedSource(source, options, dependencies);
+};
+function selectSource(sources, label, required) {
+  if (sources.length > 1) {
+    throw inputError(`Select only one input source for ${label}: ${sources.map((source2) => source2.flag).join(", ")}.`, "AMBIGUOUS_INPUT_SOURCE");
+  }
+  const source = sources[0];
+  if (source === void 0 && required) {
+    throw inputError(`Select an input source for ${label}.`, "MISSING_INPUT_SOURCE");
+  }
+  return source;
+}
+const resolveSelectedSource = async (source, options, dependencies) => {
+  const value = await readSource(source, dependencies);
+  const normalized = options.trailingLineEnding === "remove-one" ? removeOneTrailingLineEnding(value) : value;
+  if (normalized === "" && options.allowEmpty !== true) {
+    throw inputError(`${source.flag} resolved to an empty value for ${options.label}.`, "EMPTY_INPUT_VALUE");
+  }
+  return { name: source.name, kind: source.kind, value: normalized };
+};
+const readSource = async (source, dependencies) => {
+  switch (source.kind) {
+    case "literal":
+      return source.value;
+    case "environment": {
+      const value = (dependencies.readEnvironment ?? readEnvironment)(source.variable);
+      if (value === void 0) {
+        throw inputError(`Environment variable ${source.variable} selected by ${source.flag} is not set.`, "INPUT_ENV_NOT_SET");
+      }
+      return value;
+    }
+    case "stdin":
+      return await (dependencies.readStdin ?? stdin.readStdinText)();
+  }
+};
+const readEnvironment = (name) => process.env[name];
+const removeOneTrailingLineEnding = (value) => value.replace(/(?:\r\n|\n)$/, "");
+const inputError = (message, code) => new cliCommon.CliError(message, { code, exitCode: cliCommon.ExitCode.InputError });
+exports.environmentInput = environmentInput;
+exports.literalInput = literalInput;
+exports.resolveOptionalTenantInput = resolveOptionalTenantInput;
+exports.resolveRequiredTenantInput = resolveRequiredTenantInput;
+exports.stdinInput = stdinInput;
+//# sourceMappingURL=value.cjs.map

package/dist/production/src/lib/tenant/input/value.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"value.cjs","sources":["../../../../../../../packages/cli/src/lib/tenant/input/value.ts"],"sourcesContent":["import { CliError, ExitCode } from '@contember/cli-common'\nimport { readStdinText, type StdinReader } from '../stdin.js'\n\ninterface InputSourceBase<Name extends string> {\n\t/** Identifies the semantic value, for example `password` or `password-hash`. */\n\treadonly name: Name\n\t/** Identifies the selected option without including its submitted value. */\n\treadonly flag: string\n}\n\nexport interface LiteralInputSource<Name extends string = string> extends InputSourceBase<Name> {\n\treadonly kind: 'literal'\n\treadonly value: string\n}\n\nexport interface EnvironmentInputSource<Name extends string = string> extends InputSourceBase<Name> {\n\treadonly kind: 'environment'\n\treadonly variable: string\n}\n\nexport interface StdinInputSource<Name extends string = string> extends InputSourceBase<Name> {\n\treadonly kind: 'stdin'\n}\n\n/** One explicitly selected input source. Unselected options must not be included. */\nexport type TenantInputSource<Name extends string = string> =\n\t| LiteralInputSource<Name>\n\t| EnvironmentInputSource<Name>\n\t| StdinInputSource<Name>\n\nexport type TrailingLineEnding = 'preserve' | 'remove-one'\n\nexport interface TenantInputOptions {\n\t/** A non-sensitive description used in errors, for example `project secret`. */\n\treadonly label: string\n\treadonly allowEmpty?: boolean\n\treadonly trailingLineEnding?: TrailingLineEnding\n}\n\nexport interface TenantInputDependencies {\n\treadonly readStdin?: StdinReader\n\treadonly readEnvironment?: (name: string) => string | undefined\n}\n\nexport interface ResolvedTenantInput<Name extends string = string> {\n\treadonly name: Name\n\treadonly kind: TenantInputSource<Name>['kind']\n\treadonly value: string\n}\n\nexport const literalInput = <Name extends string>(name: Name, flag: string, value: string): LiteralInputSource<Name> => ({\n\tkind: 'literal',\n\tname,\n\tflag,\n\tvalue,\n})\n\nexport const environmentInput = <Name extends string>(name: Name, flag: string, variable: string): EnvironmentInputSource<Name> => ({\n\tkind: 'environment',\n\tname,\n\tflag,\n\tvariable,\n})\n\nexport const stdinInput = <Name extends string>(name: Name, flag: string): StdinInputSource<Name> => ({\n\tkind: 'stdin',\n\tname,\n\tflag,\n})\n\n/** Resolves exactly one explicitly selected source. */\nexport const resolveRequiredTenantInput = async <Name extends string>(\n\tsources: readonly TenantInputSource<Name>[],\n\toptions: TenantInputOptions,\n\tdependencies: TenantInputDependencies = {},\n): Promise<ResolvedTenantInput<Name>> => {\n\tconst source = selectSource(sources, options.label, true)\n\treturn await resolveSelectedSource(source, options, dependencies)\n}\n\n/** Resolves at most one explicitly selected source without reading stdin when none was selected. */\nexport const resolveOptionalTenantInput = async <Name extends string>(\n\tsources: readonly TenantInputSource<Name>[],\n\toptions: TenantInputOptions,\n\tdependencies: TenantInputDependencies = {},\n): Promise<ResolvedTenantInput<Name> | undefined> => {\n\tconst source = selectSource(sources, options.label, false)\n\treturn source === undefined ? undefined : await resolveSelectedSource(source, options, dependencies)\n}\n\nfunction selectSource<Name extends string>(\n\tsources: readonly TenantInputSource<Name>[],\n\tlabel: string,\n\trequired: true,\n): TenantInputSource<Name>\nfunction selectSource<Name extends string>(\n\tsources: readonly TenantInputSource<Name>[],\n\tlabel: string,\n\trequired: false,\n): TenantInputSource<Name> | undefined\nfunction selectSource<Name extends string>(\n\tsources: readonly TenantInputSource<Name>[],\n\tlabel: string,\n\trequired: boolean,\n): TenantInputSource<Name> | undefined {\n\tif (sources.length > 1) {\n\t\tthrow inputError(`Select only one input source for ${label}: ${sources.map(source => source.flag).join(', ')}.`, 'AMBIGUOUS_INPUT_SOURCE')\n\t}\n\tconst source = sources[0]\n\tif (source === undefined && required) {\n\t\tthrow inputError(`Select an input source for ${label}.`, 'MISSING_INPUT_SOURCE')\n\t}\n\treturn source\n}\n\nconst resolveSelectedSource = async <Name extends string>(\n\tsource: TenantInputSource<Name>,\n\toptions: TenantInputOptions,\n\tdependencies: TenantInputDependencies,\n): Promise<ResolvedTenantInput<Name>> => {\n\tconst value = await readSource(source, dependencies)\n\tconst normalized = options.trailingLineEnding === 'remove-one' ? removeOneTrailingLineEnding(value) : value\n\tif (normalized === '' && options.allowEmpty !== true) {\n\t\tthrow inputError(`${source.flag} resolved to an empty value for ${options.label}.`, 'EMPTY_INPUT_VALUE')\n\t}\n\treturn { name: source.name, kind: source.kind, value: normalized }\n}\n\nconst readSource = async <Name extends string>(source: TenantInputSource<Name>, dependencies: TenantInputDependencies): Promise<string> => {\n\tswitch (source.kind) {\n\t\tcase 'literal':\n\t\t\treturn source.value\n\t\tcase 'environment': {\n\t\t\tconst value = (dependencies.readEnvironment ?? readEnvironment)(source.variable)\n\t\t\tif (value === undefined) {\n\t\t\t\tthrow inputError(`Environment variable ${source.variable} selected by ${source.flag} is not set.`, 'INPUT_ENV_NOT_SET')\n\t\t\t}\n\t\t\treturn value\n\t\t}\n\t\tcase 'stdin':\n\t\t\treturn await (dependencies.readStdin ?? readStdinText)()\n\t}\n}\n\nconst readEnvironment = (name: string): string | undefined => process.env[name]\n\nconst removeOneTrailingLineEnding = (value: string): string => value.replace(/(?:\\r\\n|\\n)$/, '')\n\nconst inputError = (message: string, code: string): CliError => new CliError(message, { code, exitCode: ExitCode.InputError })\n"],"names":["source","readStdinText","CliError","ExitCode"],"mappings":";;;;AAkDO,MAAM,eAAe,CAAsB,MAAY,MAAc,WAA6C;AAAA,EACxH,MAAM;AAAA,EACN;AAAA,EACA;AAAA,EACA;AACD;AAEO,MAAM,mBAAmB,CAAsB,MAAY,MAAc,cAAoD;AAAA,EACnI,MAAM;AAAA,EACN;AAAA,EACA;AAAA,EACA;AACD;AAEO,MAAM,aAAa,CAAsB,MAAY,UAA0C;AAAA,EACrG,MAAM;AAAA,EACN;AAAA,EACA;AACD;AAGO,MAAM,6BAA6B,OACzC,SACA,SACA,eAAwC,CAAA,MACA;AACxC,QAAM,SAAS,aAAa,SAAS,QAAQ,OAAO,IAAI;AACxD,SAAO,MAAM,sBAAsB,QAAQ,SAAS,YAAY;AACjE;AAGO,MAAM,6BAA6B,OACzC,SACA,SACA,eAAwC,CAAA,MACY;AACpD,QAAM,SAAS,aAAa,SAAS,QAAQ,OAAO,KAAK;AACzD,SAAO,WAAW,SAAY,SAAY,MAAM,sBAAsB,QAAQ,SAAS,YAAY;AACpG;AAYA,SAAS,aACR,SACA,OACA,UACsC;AACtC,MAAI,QAAQ,SAAS,GAAG;AACvB,UAAM,WAAW,oCAAoC,KAAK,KAAK,QAAQ,IAAI,CAAAA,YAAUA,QAAO,IAAI,EAAE,KAAK,IAAI,CAAC,KAAK,wBAAwB;AAAA,EAC1I;AACA,QAAM,SAAS,QAAQ,CAAC;AACxB,MAAI,WAAW,UAAa,UAAU;AACrC,UAAM,WAAW,8BAA8B,KAAK,KAAK,sBAAsB;AAAA,EAChF;AACA,SAAO;AACR;AAEA,MAAM,wBAAwB,OAC7B,QACA,SACA,iBACwC;AACxC,QAAM,QAAQ,MAAM,WAAW,QAAQ,YAAY;AACnD,QAAM,aAAa,QAAQ,uBAAuB,eAAe,4BAA4B,KAAK,IAAI;AACtG,MAAI,eAAe,MAAM,QAAQ,eAAe,MAAM;AACrD,UAAM,WAAW,GAAG,OAAO,IAAI,mCAAmC,QAAQ,KAAK,KAAK,mBAAmB;AAAA,EACxG;AACA,SAAO,EAAE,MAAM,OAAO,MAAM,MAAM,OAAO,MAAM,OAAO,WAAA;AACvD;AAEA,MAAM,aAAa,OAA4B,QAAiC,iBAA2D;AAC1I,UAAQ,OAAO,MAAA;AAAA,IACd,KAAK;AACJ,aAAO,OAAO;AAAA,IACf,KAAK,eAAe;AACnB,YAAM,SAAS,aAAa,mBAAmB,iBAAiB,OAAO,QAAQ;AAC/E,UAAI,UAAU,QAAW;AACxB,cAAM,WAAW,wBAAwB,OAAO,QAAQ,gBAAgB,OAAO,IAAI,gBAAgB,mBAAmB;AAAA,MACvH;AACA,aAAO;AAAA,IACR;AAAA,IACA,KAAK;AACJ,aAAO,OAAO,aAAa,aAAaC,qBAAA;AAAA,EAAe;AAE1D;AAEA,MAAM,kBAAkB,CAAC,SAAqC,QAAQ,IAAI,IAAI;AAE9E,MAAM,8BAA8B,CAAC,UAA0B,MAAM,QAAQ,gBAAgB,EAAE;AAE/F,MAAM,aAAa,CAAC,SAAiB,SAA2B,IAAIC,UAAAA,SAAS,SAAS,EAAE,MAAM,UAAUC,UAAAA,SAAS,WAAA,CAAY;;;;;;"}

package/dist/production/src/lib/tenant/input/value.js

@@ -0,0 +1,71 @@
+import { CliError, ExitCode } from "@contember/cli-common";
+import { readStdinText } from "../stdin.js";
+const literalInput = (name, flag, value) => ({
+  kind: "literal",
+  name,
+  flag,
+  value
+});
+const environmentInput = (name, flag, variable) => ({
+  kind: "environment",
+  name,
+  flag,
+  variable
+});
+const stdinInput = (name, flag) => ({
+  kind: "stdin",
+  name,
+  flag
+});
+const resolveRequiredTenantInput = async (sources, options, dependencies = {}) => {
+  const source = selectSource(sources, options.label, true);
+  return await resolveSelectedSource(source, options, dependencies);
+};
+const resolveOptionalTenantInput = async (sources, options, dependencies = {}) => {
+  const source = selectSource(sources, options.label, false);
+  return source === void 0 ? void 0 : await resolveSelectedSource(source, options, dependencies);
+};
+function selectSource(sources, label, required) {
+  if (sources.length > 1) {
+    throw inputError(`Select only one input source for ${label}: ${sources.map((source2) => source2.flag).join(", ")}.`, "AMBIGUOUS_INPUT_SOURCE");
+  }
+  const source = sources[0];
+  if (source === void 0 && required) {
+    throw inputError(`Select an input source for ${label}.`, "MISSING_INPUT_SOURCE");
+  }
+  return source;
+}
+const resolveSelectedSource = async (source, options, dependencies) => {
+  const value = await readSource(source, dependencies);
+  const normalized = options.trailingLineEnding === "remove-one" ? removeOneTrailingLineEnding(value) : value;
+  if (normalized === "" && options.allowEmpty !== true) {
+    throw inputError(`${source.flag} resolved to an empty value for ${options.label}.`, "EMPTY_INPUT_VALUE");
+  }
+  return { name: source.name, kind: source.kind, value: normalized };
+};
+const readSource = async (source, dependencies) => {
+  switch (source.kind) {
+    case "literal":
+      return source.value;
+    case "environment": {
+      const value = (dependencies.readEnvironment ?? readEnvironment)(source.variable);
+      if (value === void 0) {
+        throw inputError(`Environment variable ${source.variable} selected by ${source.flag} is not set.`, "INPUT_ENV_NOT_SET");
+      }
+      return value;
+    }
+    case "stdin":
+      return await (dependencies.readStdin ?? readStdinText)();
+  }
+};
+const readEnvironment = (name) => process.env[name];
+const removeOneTrailingLineEnding = (value) => value.replace(/(?:\r\n|\n)$/, "");
+const inputError = (message, code) => new CliError(message, { code, exitCode: ExitCode.InputError });
+export {
+  environmentInput,
+  literalInput,
+  resolveOptionalTenantInput,
+  resolveRequiredTenantInput,
+  stdinInput
+};
+//# sourceMappingURL=value.js.map

package/dist/production/src/lib/tenant/input/value.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"value.js","sources":["../../../../../../../packages/cli/src/lib/tenant/input/value.ts"],"sourcesContent":["import { CliError, ExitCode } from '@contember/cli-common'\nimport { readStdinText, type StdinReader } from '../stdin.js'\n\ninterface InputSourceBase<Name extends string> {\n\t/** Identifies the semantic value, for example `password` or `password-hash`. */\n\treadonly name: Name\n\t/** Identifies the selected option without including its submitted value. */\n\treadonly flag: string\n}\n\nexport interface LiteralInputSource<Name extends string = string> extends InputSourceBase<Name> {\n\treadonly kind: 'literal'\n\treadonly value: string\n}\n\nexport interface EnvironmentInputSource<Name extends string = string> extends InputSourceBase<Name> {\n\treadonly kind: 'environment'\n\treadonly variable: string\n}\n\nexport interface StdinInputSource<Name extends string = string> extends InputSourceBase<Name> {\n\treadonly kind: 'stdin'\n}\n\n/** One explicitly selected input source. Unselected options must not be included. */\nexport type TenantInputSource<Name extends string = string> =\n\t| LiteralInputSource<Name>\n\t| EnvironmentInputSource<Name>\n\t| StdinInputSource<Name>\n\nexport type TrailingLineEnding = 'preserve' | 'remove-one'\n\nexport interface TenantInputOptions {\n\t/** A non-sensitive description used in errors, for example `project secret`. */\n\treadonly label: string\n\treadonly allowEmpty?: boolean\n\treadonly trailingLineEnding?: TrailingLineEnding\n}\n\nexport interface TenantInputDependencies {\n\treadonly readStdin?: StdinReader\n\treadonly readEnvironment?: (name: string) => string | undefined\n}\n\nexport interface ResolvedTenantInput<Name extends string = string> {\n\treadonly name: Name\n\treadonly kind: TenantInputSource<Name>['kind']\n\treadonly value: string\n}\n\nexport const literalInput = <Name extends string>(name: Name, flag: string, value: string): LiteralInputSource<Name> => ({\n\tkind: 'literal',\n\tname,\n\tflag,\n\tvalue,\n})\n\nexport const environmentInput = <Name extends string>(name: Name, flag: string, variable: string): EnvironmentInputSource<Name> => ({\n\tkind: 'environment',\n\tname,\n\tflag,\n\tvariable,\n})\n\nexport const stdinInput = <Name extends string>(name: Name, flag: string): StdinInputSource<Name> => ({\n\tkind: 'stdin',\n\tname,\n\tflag,\n})\n\n/** Resolves exactly one explicitly selected source. */\nexport const resolveRequiredTenantInput = async <Name extends string>(\n\tsources: readonly TenantInputSource<Name>[],\n\toptions: TenantInputOptions,\n\tdependencies: TenantInputDependencies = {},\n): Promise<ResolvedTenantInput<Name>> => {\n\tconst source = selectSource(sources, options.label, true)\n\treturn await resolveSelectedSource(source, options, dependencies)\n}\n\n/** Resolves at most one explicitly selected source without reading stdin when none was selected. */\nexport const resolveOptionalTenantInput = async <Name extends string>(\n\tsources: readonly TenantInputSource<Name>[],\n\toptions: TenantInputOptions,\n\tdependencies: TenantInputDependencies = {},\n): Promise<ResolvedTenantInput<Name> | undefined> => {\n\tconst source = selectSource(sources, options.label, false)\n\treturn source === undefined ? undefined : await resolveSelectedSource(source, options, dependencies)\n}\n\nfunction selectSource<Name extends string>(\n\tsources: readonly TenantInputSource<Name>[],\n\tlabel: string,\n\trequired: true,\n): TenantInputSource<Name>\nfunction selectSource<Name extends string>(\n\tsources: readonly TenantInputSource<Name>[],\n\tlabel: string,\n\trequired: false,\n): TenantInputSource<Name> | undefined\nfunction selectSource<Name extends string>(\n\tsources: readonly TenantInputSource<Name>[],\n\tlabel: string,\n\trequired: boolean,\n): TenantInputSource<Name> | undefined {\n\tif (sources.length > 1) {\n\t\tthrow inputError(`Select only one input source for ${label}: ${sources.map(source => source.flag).join(', ')}.`, 'AMBIGUOUS_INPUT_SOURCE')\n\t}\n\tconst source = sources[0]\n\tif (source === undefined && required) {\n\t\tthrow inputError(`Select an input source for ${label}.`, 'MISSING_INPUT_SOURCE')\n\t}\n\treturn source\n}\n\nconst resolveSelectedSource = async <Name extends string>(\n\tsource: TenantInputSource<Name>,\n\toptions: TenantInputOptions,\n\tdependencies: TenantInputDependencies,\n): Promise<ResolvedTenantInput<Name>> => {\n\tconst value = await readSource(source, dependencies)\n\tconst normalized = options.trailingLineEnding === 'remove-one' ? removeOneTrailingLineEnding(value) : value\n\tif (normalized === '' && options.allowEmpty !== true) {\n\t\tthrow inputError(`${source.flag} resolved to an empty value for ${options.label}.`, 'EMPTY_INPUT_VALUE')\n\t}\n\treturn { name: source.name, kind: source.kind, value: normalized }\n}\n\nconst readSource = async <Name extends string>(source: TenantInputSource<Name>, dependencies: TenantInputDependencies): Promise<string> => {\n\tswitch (source.kind) {\n\t\tcase 'literal':\n\t\t\treturn source.value\n\t\tcase 'environment': {\n\t\t\tconst value = (dependencies.readEnvironment ?? readEnvironment)(source.variable)\n\t\t\tif (value === undefined) {\n\t\t\t\tthrow inputError(`Environment variable ${source.variable} selected by ${source.flag} is not set.`, 'INPUT_ENV_NOT_SET')\n\t\t\t}\n\t\t\treturn value\n\t\t}\n\t\tcase 'stdin':\n\t\t\treturn await (dependencies.readStdin ?? readStdinText)()\n\t}\n}\n\nconst readEnvironment = (name: string): string | undefined => process.env[name]\n\nconst removeOneTrailingLineEnding = (value: string): string => value.replace(/(?:\\r\\n|\\n)$/, '')\n\nconst inputError = (message: string, code: string): CliError => new CliError(message, { code, exitCode: ExitCode.InputError })\n"],"names":["source"],"mappings":";;AAkDO,MAAM,eAAe,CAAsB,MAAY,MAAc,WAA6C;AAAA,EACxH,MAAM;AAAA,EACN;AAAA,EACA;AAAA,EACA;AACD;AAEO,MAAM,mBAAmB,CAAsB,MAAY,MAAc,cAAoD;AAAA,EACnI,MAAM;AAAA,EACN;AAAA,EACA;AAAA,EACA;AACD;AAEO,MAAM,aAAa,CAAsB,MAAY,UAA0C;AAAA,EACrG,MAAM;AAAA,EACN;AAAA,EACA;AACD;AAGO,MAAM,6BAA6B,OACzC,SACA,SACA,eAAwC,CAAA,MACA;AACxC,QAAM,SAAS,aAAa,SAAS,QAAQ,OAAO,IAAI;AACxD,SAAO,MAAM,sBAAsB,QAAQ,SAAS,YAAY;AACjE;AAGO,MAAM,6BAA6B,OACzC,SACA,SACA,eAAwC,CAAA,MACY;AACpD,QAAM,SAAS,aAAa,SAAS,QAAQ,OAAO,KAAK;AACzD,SAAO,WAAW,SAAY,SAAY,MAAM,sBAAsB,QAAQ,SAAS,YAAY;AACpG;AAYA,SAAS,aACR,SACA,OACA,UACsC;AACtC,MAAI,QAAQ,SAAS,GAAG;AACvB,UAAM,WAAW,oCAAoC,KAAK,KAAK,QAAQ,IAAI,CAAAA,YAAUA,QAAO,IAAI,EAAE,KAAK,IAAI,CAAC,KAAK,wBAAwB;AAAA,EAC1I;AACA,QAAM,SAAS,QAAQ,CAAC;AACxB,MAAI,WAAW,UAAa,UAAU;AACrC,UAAM,WAAW,8BAA8B,KAAK,KAAK,sBAAsB;AAAA,EAChF;AACA,SAAO;AACR;AAEA,MAAM,wBAAwB,OAC7B,QACA,SACA,iBACwC;AACxC,QAAM,QAAQ,MAAM,WAAW,QAAQ,YAAY;AACnD,QAAM,aAAa,QAAQ,uBAAuB,eAAe,4BAA4B,KAAK,IAAI;AACtG,MAAI,eAAe,MAAM,QAAQ,eAAe,MAAM;AACrD,UAAM,WAAW,GAAG,OAAO,IAAI,mCAAmC,QAAQ,KAAK,KAAK,mBAAmB;AAAA,EACxG;AACA,SAAO,EAAE,MAAM,OAAO,MAAM,MAAM,OAAO,MAAM,OAAO,WAAA;AACvD;AAEA,MAAM,aAAa,OAA4B,QAAiC,iBAA2D;AAC1I,UAAQ,OAAO,MAAA;AAAA,IACd,KAAK;AACJ,aAAO,OAAO;AAAA,IACf,KAAK,eAAe;AACnB,YAAM,SAAS,aAAa,mBAAmB,iBAAiB,OAAO,QAAQ;AAC/E,UAAI,UAAU,QAAW;AACxB,cAAM,WAAW,wBAAwB,OAAO,QAAQ,gBAAgB,OAAO,IAAI,gBAAgB,mBAAmB;AAAA,MACvH;AACA,aAAO;AAAA,IACR;AAAA,IACA,KAAK;AACJ,aAAO,OAAO,aAAa,aAAa,eAAA;AAAA,EAAe;AAE1D;AAEA,MAAM,kBAAkB,CAAC,SAAqC,QAAQ,IAAI,IAAI;AAE9E,MAAM,8BAA8B,CAAC,UAA0B,MAAM,QAAQ,gBAAgB,EAAE;AAE/F,MAAM,aAAa,CAAC,SAAiB,SAA2B,IAAI,SAAS,SAAS,EAAE,MAAM,UAAU,SAAS,WAAA,CAAY;"}