@contember/cli 2.2.0-alpha.2 → 2.2.0-alpha.4

package/dist/development/src/commands/tenant/apikey/TenantApiKeyListCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantApiKeyListCommand.cjs","sources":["../../../../../../../packages/cli/src/commands/tenant/apikey/TenantApiKeyListCommand.ts"],"sourcesContent":["import { Command, CommandConfiguration, Input, Output } from '@contember/cli-common'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport type { TenantGlobalApiKey, TenantProjectApiKey } from '../../../lib/tenant/clients/TenantApiKeyClient.js'\nimport { formatMemberships } from '../member/memberOptions.js'\nimport { humanText } from '../tenantOutput.js'\n\ntype Args = {}\ntype Options = {\n\tproject?: string\n}\n\n/** `tenant api-key list` — global keys by default, or project-scoped keys selected by `--project`. */\nexport class TenantApiKeyListCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('List global permanent API keys, or project-scoped keys with --project')\n\t\tconfiguration.option('project').valueRequired().description('List permanent API keys scoped to this project slug instead of global keys.')\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<void> {\n\t\tconst project = input.getOption('project')\n\t\tif (project === undefined) {\n\t\t\tconst apiKeys = await this.tenantClientProvider.apiKey().listGlobalApiKeys()\n\t\t\toutput.table<TenantGlobalApiKey>(\n\t\t\t\t[\n\t\t\t\t\t{ field: 'id', name: 'ID' },\n\t\t\t\t\t{ field: 'identityId', name: 'Identity' },\n\t\t\t\t\t{ field: 'description', name: 'Description' },\n\t\t\t\t\t{ field: 'globalRoles', name: 'Global Roles', format: value => value === null ? '(not visible)' : value.map(humanText).join(', ') || '-' },\n\t\t\t\t\t{ field: 'type', name: 'Type' },\n\t\t\t\t\t{ field: 'enabled', name: 'Enabled' },\n\t\t\t\t\t{ field: 'createdAt', name: 'Created At' },\n\t\t\t\t\t{ field: 'lastUsedAt', name: 'Last Used At', format: value => value === null ? 'never used' : humanText(value) },\n\t\t\t\t\t{ field: 'expiresAt', name: 'Expires At', format: value => value === null ? 'never expires' : humanText(value) },\n\t\t\t\t],\n\t\t\t\tapiKeys,\n\t\t\t\t'id',\n\t\t\t)\n\t\t\treturn\n\t\t}\n\n\t\tconst apiKeys = await this.tenantClientProvider.apiKey().listProjectApiKeys(project)\n\t\toutput.table<TenantProjectApiKey>(\n\t\t\t[\n\t\t\t\t{ field: 'id', name: 'ID' },\n\t\t\t\t{ field: 'identityId', name: 'Identity' },\n\t\t\t\t{ field: 'description', name: 'Description' },\n\t\t\t\t{ field: 'memberships', name: 'Memberships', format: formatMemberships },\n\t\t\t\t{ field: 'type', name: 'Type' },\n\t\t\t\t{ field: 'enabled', name: 'Enabled' },\n\t\t\t\t{ field: 'createdAt', name: 'Created At' },\n\t\t\t\t{ field: 'lastUsedAt', name: 'Last Used At', format: value => value === null ? 'never used' : humanText(value) },\n\t\t\t\t{ field: 'expiresAt', name: 'Expires At', format: value => value === null ? 'never expires' : humanText(value) },\n\t\t\t],\n\t\t\tapiKeys,\n\t\t\t'id',\n\t\t)\n\t}\n}\n"],"names":["Command","apiKeys","humanText","formatMemberships"],"mappings":";;;;;AAYO,MAAM,gCAAgCA,UAAAA,QAAuB;AAAA,EACnE,YACkB,sBAChB;AACD,UAAA;AAFiB,SAAA,uBAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,uEAAuE;AACjG,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,YAAY,6EAA6E;AAAA,EAC1I;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAA+B;AACnF,UAAM,UAAU,MAAM,UAAU,SAAS;AACzC,QAAI,YAAY,QAAW;AAC1B,YAAMC,WAAU,MAAM,KAAK,qBAAqB,OAAA,EAAS,kBAAA;AACzD,aAAO;AAAA,QACN;AAAA,UACC,EAAE,OAAO,MAAM,MAAM,KAAA;AAAA,UACrB,EAAE,OAAO,cAAc,MAAM,WAAA;AAAA,UAC7B,EAAE,OAAO,eAAe,MAAM,cAAA;AAAA,UAC9B,EAAE,OAAO,eAAe,MAAM,gBAAgB,QAAQ,CAAA,UAAS,UAAU,OAAO,kBAAkB,MAAM,IAAIC,aAAAA,SAAS,EAAE,KAAK,IAAI,KAAK,IAAA;AAAA,UACrI,EAAE,OAAO,QAAQ,MAAM,OAAA;AAAA,UACvB,EAAE,OAAO,WAAW,MAAM,UAAA;AAAA,UAC1B,EAAE,OAAO,aAAa,MAAM,aAAA;AAAA,UAC5B,EAAE,OAAO,cAAc,MAAM,gBAAgB,QAAQ,CAAA,UAAS,UAAU,OAAO,eAAeA,aAAAA,UAAU,KAAK,EAAA;AAAA,UAC7G,EAAE,OAAO,aAAa,MAAM,cAAc,QAAQ,CAAA,UAAS,UAAU,OAAO,kBAAkBA,aAAAA,UAAU,KAAK,EAAA;AAAA,QAAE;AAAA,QAEhHD;AAAAA,QACA;AAAA,MAAA;AAED;AAAA,IACD;AAEA,UAAM,UAAU,MAAM,KAAK,qBAAqB,OAAA,EAAS,mBAAmB,OAAO;AACnF,WAAO;AAAA,MACN;AAAA,QACC,EAAE,OAAO,MAAM,MAAM,KAAA;AAAA,QACrB,EAAE,OAAO,cAAc,MAAM,WAAA;AAAA,QAC7B,EAAE,OAAO,eAAe,MAAM,cAAA;AAAA,QAC9B,EAAE,OAAO,eAAe,MAAM,eAAe,QAAQE,cAAAA,kBAAA;AAAA,QACrD,EAAE,OAAO,QAAQ,MAAM,OAAA;AAAA,QACvB,EAAE,OAAO,WAAW,MAAM,UAAA;AAAA,QAC1B,EAAE,OAAO,aAAa,MAAM,aAAA;AAAA,QAC5B,EAAE,OAAO,cAAc,MAAM,gBAAgB,QAAQ,CAAA,UAAS,UAAU,OAAO,eAAeD,aAAAA,UAAU,KAAK,EAAA;AAAA,QAC7G,EAAE,OAAO,aAAa,MAAM,cAAc,QAAQ,CAAA,UAAS,UAAU,OAAO,kBAAkBA,aAAAA,UAAU,KAAK,EAAA;AAAA,MAAE;AAAA,MAEhH;AAAA,MACA;AAAA,IAAA;AAAA,EAEF;AACD;;"}

package/dist/development/src/commands/tenant/apikey/TenantApiKeyListCommand.js

@@ -0,0 +1,55 @@
+import { Command } from "@contember/cli-common";
+import { formatMemberships } from "../member/memberOptions.js";
+import { humanText } from "../tenantOutput.js";
+class TenantApiKeyListCommand extends Command {
+  constructor(tenantClientProvider) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+  }
+  configure(configuration) {
+    configuration.description("List global permanent API keys, or project-scoped keys with --project");
+    configuration.option("project").valueRequired().description("List permanent API keys scoped to this project slug instead of global keys.");
+  }
+  async execute(input, output) {
+    const project = input.getOption("project");
+    if (project === void 0) {
+      const apiKeys2 = await this.tenantClientProvider.apiKey().listGlobalApiKeys();
+      output.table(
+        [
+          { field: "id", name: "ID" },
+          { field: "identityId", name: "Identity" },
+          { field: "description", name: "Description" },
+          { field: "globalRoles", name: "Global Roles", format: (value) => value === null ? "(not visible)" : value.map(humanText).join(", ") || "-" },
+          { field: "type", name: "Type" },
+          { field: "enabled", name: "Enabled" },
+          { field: "createdAt", name: "Created At" },
+          { field: "lastUsedAt", name: "Last Used At", format: (value) => value === null ? "never used" : humanText(value) },
+          { field: "expiresAt", name: "Expires At", format: (value) => value === null ? "never expires" : humanText(value) }
+        ],
+        apiKeys2,
+        "id"
+      );
+      return;
+    }
+    const apiKeys = await this.tenantClientProvider.apiKey().listProjectApiKeys(project);
+    output.table(
+      [
+        { field: "id", name: "ID" },
+        { field: "identityId", name: "Identity" },
+        { field: "description", name: "Description" },
+        { field: "memberships", name: "Memberships", format: formatMemberships },
+        { field: "type", name: "Type" },
+        { field: "enabled", name: "Enabled" },
+        { field: "createdAt", name: "Created At" },
+        { field: "lastUsedAt", name: "Last Used At", format: (value) => value === null ? "never used" : humanText(value) },
+        { field: "expiresAt", name: "Expires At", format: (value) => value === null ? "never expires" : humanText(value) }
+      ],
+      apiKeys,
+      "id"
+    );
+  }
+}
+export {
+  TenantApiKeyListCommand
+};
+//# sourceMappingURL=TenantApiKeyListCommand.js.map

package/dist/development/src/commands/tenant/apikey/TenantApiKeyListCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantApiKeyListCommand.js","sources":["../../../../../../../packages/cli/src/commands/tenant/apikey/TenantApiKeyListCommand.ts"],"sourcesContent":["import { Command, CommandConfiguration, Input, Output } from '@contember/cli-common'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport type { TenantGlobalApiKey, TenantProjectApiKey } from '../../../lib/tenant/clients/TenantApiKeyClient.js'\nimport { formatMemberships } from '../member/memberOptions.js'\nimport { humanText } from '../tenantOutput.js'\n\ntype Args = {}\ntype Options = {\n\tproject?: string\n}\n\n/** `tenant api-key list` — global keys by default, or project-scoped keys selected by `--project`. */\nexport class TenantApiKeyListCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('List global permanent API keys, or project-scoped keys with --project')\n\t\tconfiguration.option('project').valueRequired().description('List permanent API keys scoped to this project slug instead of global keys.')\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<void> {\n\t\tconst project = input.getOption('project')\n\t\tif (project === undefined) {\n\t\t\tconst apiKeys = await this.tenantClientProvider.apiKey().listGlobalApiKeys()\n\t\t\toutput.table<TenantGlobalApiKey>(\n\t\t\t\t[\n\t\t\t\t\t{ field: 'id', name: 'ID' },\n\t\t\t\t\t{ field: 'identityId', name: 'Identity' },\n\t\t\t\t\t{ field: 'description', name: 'Description' },\n\t\t\t\t\t{ field: 'globalRoles', name: 'Global Roles', format: value => value === null ? '(not visible)' : value.map(humanText).join(', ') || '-' },\n\t\t\t\t\t{ field: 'type', name: 'Type' },\n\t\t\t\t\t{ field: 'enabled', name: 'Enabled' },\n\t\t\t\t\t{ field: 'createdAt', name: 'Created At' },\n\t\t\t\t\t{ field: 'lastUsedAt', name: 'Last Used At', format: value => value === null ? 'never used' : humanText(value) },\n\t\t\t\t\t{ field: 'expiresAt', name: 'Expires At', format: value => value === null ? 'never expires' : humanText(value) },\n\t\t\t\t],\n\t\t\t\tapiKeys,\n\t\t\t\t'id',\n\t\t\t)\n\t\t\treturn\n\t\t}\n\n\t\tconst apiKeys = await this.tenantClientProvider.apiKey().listProjectApiKeys(project)\n\t\toutput.table<TenantProjectApiKey>(\n\t\t\t[\n\t\t\t\t{ field: 'id', name: 'ID' },\n\t\t\t\t{ field: 'identityId', name: 'Identity' },\n\t\t\t\t{ field: 'description', name: 'Description' },\n\t\t\t\t{ field: 'memberships', name: 'Memberships', format: formatMemberships },\n\t\t\t\t{ field: 'type', name: 'Type' },\n\t\t\t\t{ field: 'enabled', name: 'Enabled' },\n\t\t\t\t{ field: 'createdAt', name: 'Created At' },\n\t\t\t\t{ field: 'lastUsedAt', name: 'Last Used At', format: value => value === null ? 'never used' : humanText(value) },\n\t\t\t\t{ field: 'expiresAt', name: 'Expires At', format: value => value === null ? 'never expires' : humanText(value) },\n\t\t\t],\n\t\t\tapiKeys,\n\t\t\t'id',\n\t\t)\n\t}\n}\n"],"names":["apiKeys"],"mappings":";;;AAYO,MAAM,gCAAgC,QAAuB;AAAA,EACnE,YACkB,sBAChB;AACD,UAAA;AAFiB,SAAA,uBAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,uEAAuE;AACjG,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,YAAY,6EAA6E;AAAA,EAC1I;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAA+B;AACnF,UAAM,UAAU,MAAM,UAAU,SAAS;AACzC,QAAI,YAAY,QAAW;AAC1B,YAAMA,WAAU,MAAM,KAAK,qBAAqB,OAAA,EAAS,kBAAA;AACzD,aAAO;AAAA,QACN;AAAA,UACC,EAAE,OAAO,MAAM,MAAM,KAAA;AAAA,UACrB,EAAE,OAAO,cAAc,MAAM,WAAA;AAAA,UAC7B,EAAE,OAAO,eAAe,MAAM,cAAA;AAAA,UAC9B,EAAE,OAAO,eAAe,MAAM,gBAAgB,QAAQ,CAAA,UAAS,UAAU,OAAO,kBAAkB,MAAM,IAAI,SAAS,EAAE,KAAK,IAAI,KAAK,IAAA;AAAA,UACrI,EAAE,OAAO,QAAQ,MAAM,OAAA;AAAA,UACvB,EAAE,OAAO,WAAW,MAAM,UAAA;AAAA,UAC1B,EAAE,OAAO,aAAa,MAAM,aAAA;AAAA,UAC5B,EAAE,OAAO,cAAc,MAAM,gBAAgB,QAAQ,CAAA,UAAS,UAAU,OAAO,eAAe,UAAU,KAAK,EAAA;AAAA,UAC7G,EAAE,OAAO,aAAa,MAAM,cAAc,QAAQ,CAAA,UAAS,UAAU,OAAO,kBAAkB,UAAU,KAAK,EAAA;AAAA,QAAE;AAAA,QAEhHA;AAAAA,QACA;AAAA,MAAA;AAED;AAAA,IACD;AAEA,UAAM,UAAU,MAAM,KAAK,qBAAqB,OAAA,EAAS,mBAAmB,OAAO;AACnF,WAAO;AAAA,MACN;AAAA,QACC,EAAE,OAAO,MAAM,MAAM,KAAA;AAAA,QACrB,EAAE,OAAO,cAAc,MAAM,WAAA;AAAA,QAC7B,EAAE,OAAO,eAAe,MAAM,cAAA;AAAA,QAC9B,EAAE,OAAO,eAAe,MAAM,eAAe,QAAQ,kBAAA;AAAA,QACrD,EAAE,OAAO,QAAQ,MAAM,OAAA;AAAA,QACvB,EAAE,OAAO,WAAW,MAAM,UAAA;AAAA,QAC1B,EAAE,OAAO,aAAa,MAAM,aAAA;AAAA,QAC5B,EAAE,OAAO,cAAc,MAAM,gBAAgB,QAAQ,CAAA,UAAS,UAAU,OAAO,eAAe,UAAU,KAAK,EAAA;AAAA,QAC7G,EAAE,OAAO,aAAa,MAAM,cAAc,QAAQ,CAAA,UAAS,UAAU,OAAO,kBAAkB,UAAU,KAAK,EAAA;AAAA,MAAE;AAAA,MAEhH;AAAA,MACA;AAAA,IAAA;AAAA,EAEF;AACD;"}

package/dist/development/src/commands/tenant/member/TenantMemberAddCommand.cjs

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const cliCommon = require("@contember/cli-common");
+const memberOptions = require("./memberOptions.cjs");
+const membershipInput = require("./membershipInput.cjs");
+const stdin = require("../../../lib/tenant/stdin.cjs");
+const tenantOutput = require("../tenantOutput.cjs");
+class TenantMemberAddCommand extends cliCommon.Command {
+  constructor(tenantClientProvider, readStdin = stdin.readStdinText) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+    this.readStdin = readStdin;
+  }
+  configure(configuration) {
+    configuration.description("Add an existing identity to a project");
+    configuration.option("project").valueRequired().required().description("Project slug.");
+    configuration.option("identity").valueRequired().required().description("Identity id of the new member.");
+    membershipInput.configureMembershipOptions(configuration);
+  }
+  async execute(input, output) {
+    const projectSlug = memberOptions.requireOptionValue(input.getOption("project"), "project");
+    const identityId = memberOptions.requireOptionValue(input.getOption("identity"), "identity");
+    const memberships = await membershipInput.resolveNonEmptyMemberships(membershipInput.readMembershipInputSource(input), this.readStdin);
+    output.info(`Adding identity ${identityId} to project ${projectSlug} as ${memberOptions.formatMemberships(memberships)}`);
+    await this.tenantClientProvider.member().addProjectMember(projectSlug, identityId, memberships);
+    output.data(
+      { projectSlug, identityId, memberships },
+      {
+        human: (it) => `Identity ${tenantOutput.humanText(it.identityId)} is now a member of ${tenantOutput.humanText(it.projectSlug)}: ${memberOptions.formatMemberships(it.memberships)}`,
+        quiet: (it) => it.identityId
+      }
+    );
+  }
+}
+exports.TenantMemberAddCommand = TenantMemberAddCommand;
+//# sourceMappingURL=TenantMemberAddCommand.cjs.map

package/dist/development/src/commands/tenant/member/TenantMemberAddCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantMemberAddCommand.cjs","sources":["../../../../../../../packages/cli/src/commands/tenant/member/TenantMemberAddCommand.ts"],"sourcesContent":["import { Command, CommandConfiguration, Input, Output } from '@contember/cli-common'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport { formatMemberships, requireOptionValue } from './memberOptions.js'\nimport { configureMembershipOptions, MembershipOptions, readMembershipInputSource, resolveNonEmptyMemberships } from './membershipInput.js'\nimport { readStdinText, StdinReader } from '../../../lib/tenant/stdin.js'\nimport { humanText } from '../tenantOutput.js'\n\ntype Args = {}\n\ntype Options = MembershipOptions & {\n\tproject?: string\n\tidentity?: string\n}\n\n/** `tenant member add` */\nexport class TenantMemberAddCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t\tprivate readonly readStdin: StdinReader = readStdinText,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('Add an existing identity to a project')\n\t\tconfiguration.option('project').valueRequired().required().description('Project slug.')\n\t\tconfiguration.option('identity').valueRequired().required().description('Identity id of the new member.')\n\t\tconfigureMembershipOptions(configuration)\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<void> {\n\t\tconst projectSlug = requireOptionValue(input.getOption('project'), 'project')\n\t\tconst identityId = requireOptionValue(input.getOption('identity'), 'identity')\n\t\tconst memberships = await resolveNonEmptyMemberships(readMembershipInputSource(input), this.readStdin)\n\n\t\t// reported before the call so a CI log records the attempt even when the mutation fails\n\t\toutput.info(`Adding identity ${identityId} to project ${projectSlug} as ${formatMemberships(memberships)}`)\n\t\tawait this.tenantClientProvider.member().addProjectMember(projectSlug, identityId, memberships)\n\n\t\toutput.data(\n\t\t\t{ projectSlug, identityId, memberships },\n\t\t\t{\n\t\t\t\thuman: it => `Identity ${humanText(it.identityId)} is now a member of ${humanText(it.projectSlug)}: ${formatMemberships(it.memberships)}`,\n\t\t\t\tquiet: it => it.identityId,\n\t\t\t},\n\t\t)\n\t}\n}\n"],"names":["Command","readStdinText","configureMembershipOptions","requireOptionValue","resolveNonEmptyMemberships","readMembershipInputSource","formatMemberships","humanText"],"mappings":";;;;;;;AAeO,MAAM,+BAA+BA,UAAAA,QAAuB;AAAA,EAClE,YACkB,sBACA,YAAyBC,qBACzC;AACD,UAAA;AAHiB,SAAA,uBAAA;AACA,SAAA,YAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,uCAAuC;AACjE,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,eAAe;AACtF,kBAAc,OAAO,UAAU,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,gCAAgC;AACxGC,oBAAAA,2BAA2B,aAAa;AAAA,EACzC;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAA+B;AACnF,UAAM,cAAcC,cAAAA,mBAAmB,MAAM,UAAU,SAAS,GAAG,SAAS;AAC5E,UAAM,aAAaA,cAAAA,mBAAmB,MAAM,UAAU,UAAU,GAAG,UAAU;AAC7E,UAAM,cAAc,MAAMC,2CAA2BC,gBAAAA,0BAA0B,KAAK,GAAG,KAAK,SAAS;AAGrG,WAAO,KAAK,mBAAmB,UAAU,eAAe,WAAW,OAAOC,cAAAA,kBAAkB,WAAW,CAAC,EAAE;AAC1G,UAAM,KAAK,qBAAqB,OAAA,EAAS,iBAAiB,aAAa,YAAY,WAAW;AAE9F,WAAO;AAAA,MACN,EAAE,aAAa,YAAY,YAAA;AAAA,MAC3B;AAAA,QACC,OAAO,CAAA,OAAM,YAAYC,aAAAA,UAAU,GAAG,UAAU,CAAC,uBAAuBA,aAAAA,UAAU,GAAG,WAAW,CAAC,KAAKD,cAAAA,kBAAkB,GAAG,WAAW,CAAC;AAAA,QACvI,OAAO,QAAM,GAAG;AAAA,MAAA;AAAA,IACjB;AAAA,EAEF;AACD;;"}

package/dist/development/src/commands/tenant/member/TenantMemberAddCommand.js

@@ -0,0 +1,36 @@
+import { Command } from "@contember/cli-common";
+import { requireOptionValue, formatMemberships } from "./memberOptions.js";
+import { configureMembershipOptions, resolveNonEmptyMemberships, readMembershipInputSource } from "./membershipInput.js";
+import { readStdinText } from "../../../lib/tenant/stdin.js";
+import { humanText } from "../tenantOutput.js";
+class TenantMemberAddCommand extends Command {
+  constructor(tenantClientProvider, readStdin = readStdinText) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+    this.readStdin = readStdin;
+  }
+  configure(configuration) {
+    configuration.description("Add an existing identity to a project");
+    configuration.option("project").valueRequired().required().description("Project slug.");
+    configuration.option("identity").valueRequired().required().description("Identity id of the new member.");
+    configureMembershipOptions(configuration);
+  }
+  async execute(input, output) {
+    const projectSlug = requireOptionValue(input.getOption("project"), "project");
+    const identityId = requireOptionValue(input.getOption("identity"), "identity");
+    const memberships = await resolveNonEmptyMemberships(readMembershipInputSource(input), this.readStdin);
+    output.info(`Adding identity ${identityId} to project ${projectSlug} as ${formatMemberships(memberships)}`);
+    await this.tenantClientProvider.member().addProjectMember(projectSlug, identityId, memberships);
+    output.data(
+      { projectSlug, identityId, memberships },
+      {
+        human: (it) => `Identity ${humanText(it.identityId)} is now a member of ${humanText(it.projectSlug)}: ${formatMemberships(it.memberships)}`,
+        quiet: (it) => it.identityId
+      }
+    );
+  }
+}
+export {
+  TenantMemberAddCommand
+};
+//# sourceMappingURL=TenantMemberAddCommand.js.map

package/dist/development/src/commands/tenant/member/TenantMemberAddCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantMemberAddCommand.js","sources":["../../../../../../../packages/cli/src/commands/tenant/member/TenantMemberAddCommand.ts"],"sourcesContent":["import { Command, CommandConfiguration, Input, Output } from '@contember/cli-common'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport { formatMemberships, requireOptionValue } from './memberOptions.js'\nimport { configureMembershipOptions, MembershipOptions, readMembershipInputSource, resolveNonEmptyMemberships } from './membershipInput.js'\nimport { readStdinText, StdinReader } from '../../../lib/tenant/stdin.js'\nimport { humanText } from '../tenantOutput.js'\n\ntype Args = {}\n\ntype Options = MembershipOptions & {\n\tproject?: string\n\tidentity?: string\n}\n\n/** `tenant member add` */\nexport class TenantMemberAddCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t\tprivate readonly readStdin: StdinReader = readStdinText,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('Add an existing identity to a project')\n\t\tconfiguration.option('project').valueRequired().required().description('Project slug.')\n\t\tconfiguration.option('identity').valueRequired().required().description('Identity id of the new member.')\n\t\tconfigureMembershipOptions(configuration)\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<void> {\n\t\tconst projectSlug = requireOptionValue(input.getOption('project'), 'project')\n\t\tconst identityId = requireOptionValue(input.getOption('identity'), 'identity')\n\t\tconst memberships = await resolveNonEmptyMemberships(readMembershipInputSource(input), this.readStdin)\n\n\t\t// reported before the call so a CI log records the attempt even when the mutation fails\n\t\toutput.info(`Adding identity ${identityId} to project ${projectSlug} as ${formatMemberships(memberships)}`)\n\t\tawait this.tenantClientProvider.member().addProjectMember(projectSlug, identityId, memberships)\n\n\t\toutput.data(\n\t\t\t{ projectSlug, identityId, memberships },\n\t\t\t{\n\t\t\t\thuman: it => `Identity ${humanText(it.identityId)} is now a member of ${humanText(it.projectSlug)}: ${formatMemberships(it.memberships)}`,\n\t\t\t\tquiet: it => it.identityId,\n\t\t\t},\n\t\t)\n\t}\n}\n"],"names":[],"mappings":";;;;;AAeO,MAAM,+BAA+B,QAAuB;AAAA,EAClE,YACkB,sBACA,YAAyB,eACzC;AACD,UAAA;AAHiB,SAAA,uBAAA;AACA,SAAA,YAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,uCAAuC;AACjE,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,eAAe;AACtF,kBAAc,OAAO,UAAU,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,gCAAgC;AACxG,+BAA2B,aAAa;AAAA,EACzC;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAA+B;AACnF,UAAM,cAAc,mBAAmB,MAAM,UAAU,SAAS,GAAG,SAAS;AAC5E,UAAM,aAAa,mBAAmB,MAAM,UAAU,UAAU,GAAG,UAAU;AAC7E,UAAM,cAAc,MAAM,2BAA2B,0BAA0B,KAAK,GAAG,KAAK,SAAS;AAGrG,WAAO,KAAK,mBAAmB,UAAU,eAAe,WAAW,OAAO,kBAAkB,WAAW,CAAC,EAAE;AAC1G,UAAM,KAAK,qBAAqB,OAAA,EAAS,iBAAiB,aAAa,YAAY,WAAW;AAE9F,WAAO;AAAA,MACN,EAAE,aAAa,YAAY,YAAA;AAAA,MAC3B;AAAA,QACC,OAAO,CAAA,OAAM,YAAY,UAAU,GAAG,UAAU,CAAC,uBAAuB,UAAU,GAAG,WAAW,CAAC,KAAK,kBAAkB,GAAG,WAAW,CAAC;AAAA,QACvI,OAAO,QAAM,GAAG;AAAA,MAAA;AAAA,IACjB;AAAA,EAEF;AACD;"}

package/dist/development/src/commands/tenant/member/TenantMemberInviteCommand.cjs

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const cliCommon = require("@contember/cli-common");
+const memberOptions = require("./memberOptions.cjs");
+const membershipInput = require("./membershipInput.cjs");
+const stdin = require("../../../lib/tenant/stdin.cjs");
+const tenantOutput = require("../tenantOutput.cjs");
+const inviteMethods = ["CREATE_PASSWORD", "RESET_PASSWORD"];
+class TenantMemberInviteCommand extends cliCommon.Command {
+  constructor(tenantClientProvider, readStdin = stdin.readStdinText) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+    this.readStdin = readStdin;
+  }
+  configure(configuration) {
+    configuration.description("Invite a person to a project by e-mail");
+    configuration.option("project").valueRequired().required().description("Project slug.");
+    configuration.option("email").valueRequired().required().description("E-mail address of the invited person.");
+    configuration.option("name").valueRequired().description("Name of the invited person. Used only when the person does not exist yet.");
+    configuration.option("method").valueRequired().description(
+      `How the person gets their credentials: ${inviteMethods.join(" or ")} (default ${inviteMethods[0]}).`
+    );
+    configuration.option("mail-variant").valueRequired().description("Mail template variant to use.");
+    membershipInput.configureMembershipOptions(configuration);
+  }
+  async execute(input, output) {
+    const projectSlug = memberOptions.requireOptionValue(input.getOption("project"), "project");
+    const email = memberOptions.requireOptionValue(input.getOption("email"), "email");
+    const name = tenantOutput.requireNonEmptyTenantName(input.getOption("name"), "Person");
+    const memberships = await membershipInput.resolveNonEmptyMemberships(membershipInput.readMembershipInputSource(input), this.readStdin);
+    output.info(`Inviting ${email} to project ${projectSlug} as ${memberOptions.formatMemberships(memberships)}`);
+    const result = await this.tenantClientProvider.member().invite({
+      projectSlug,
+      email,
+      name,
+      memberships,
+      options: { method: parseInviteMethod(input.getOption("method")), mailVariant: input.getOption("mail-variant") }
+    });
+    output.data(
+      { projectSlug, ...result },
+      {
+        human: (it) => it.isNew ? `Invited ${tenantOutput.humanText(it.email ?? email)} to ${tenantOutput.humanText(it.projectSlug)}. Identity: ${tenantOutput.humanText(it.identityId)}` : `${tenantOutput.humanText(it.email ?? email)} already existed and was added to ${tenantOutput.humanText(it.projectSlug)}. Identity: ${tenantOutput.humanText(it.identityId)}`,
+        quiet: (it) => it.identityId
+      }
+    );
+  }
+}
+const parseInviteMethod = (value) => {
+  if (value === void 0) {
+    return void 0;
+  }
+  const method = inviteMethods.find((it) => it === value.toUpperCase());
+  if (method === void 0) {
+    throw new cliCommon.CliError(`Option --method must be one of ${inviteMethods.join(", ")}, got "${value}".`, {
+      code: "INVALID_INPUT",
+      exitCode: cliCommon.ExitCode.InputError
+    });
+  }
+  return method;
+};
+exports.TenantMemberInviteCommand = TenantMemberInviteCommand;
+//# sourceMappingURL=TenantMemberInviteCommand.cjs.map

package/dist/development/src/commands/tenant/member/TenantMemberInviteCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantMemberInviteCommand.cjs","sources":["../../../../../../../packages/cli/src/commands/tenant/member/TenantMemberInviteCommand.ts"],"sourcesContent":["import { CliError, Command, CommandConfiguration, ExitCode, Input, Output } from '@contember/cli-common'\nimport type { InviteMethod } from '@contember/graphql-client-tenant'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport { formatMemberships, requireOptionValue } from './memberOptions.js'\nimport { configureMembershipOptions, MembershipOptions, readMembershipInputSource, resolveNonEmptyMemberships } from './membershipInput.js'\nimport { readStdinText, StdinReader } from '../../../lib/tenant/stdin.js'\nimport { humanText, requireNonEmptyTenantName } from '../tenantOutput.js'\n\ntype Args = {}\n\ntype Options = MembershipOptions & {\n\tproject?: string\n\temail?: string\n\tname?: string\n\tmethod?: string\n\t['mail-variant']?: string\n}\n\nconst inviteMethods: InviteMethod[] = ['CREATE_PASSWORD', 'RESET_PASSWORD']\n\n/**\n * `tenant member invite`\n *\n * The mail-sending half of the invite pair. `tenant member invite-unmanaged` is a separate command rather\n * than a flag here: the two mutations share no options at all (mail method and variant versus a password\n * or a reset token hash), and only one of them handles a secret.\n */\nexport class TenantMemberInviteCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t\tprivate readonly readStdin: StdinReader = readStdinText,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('Invite a person to a project by e-mail')\n\t\tconfiguration.option('project').valueRequired().required().description('Project slug.')\n\t\tconfiguration.option('email').valueRequired().required().description('E-mail address of the invited person.')\n\t\tconfiguration.option('name').valueRequired().description('Name of the invited person. Used only when the person does not exist yet.')\n\t\tconfiguration.option('method').valueRequired().description(\n\t\t\t`How the person gets their credentials: ${inviteMethods.join(' or ')} (default ${inviteMethods[0]}).`,\n\t\t)\n\t\tconfiguration.option('mail-variant').valueRequired().description('Mail template variant to use.')\n\t\tconfigureMembershipOptions(configuration)\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<void> {\n\t\tconst projectSlug = requireOptionValue(input.getOption('project'), 'project')\n\t\tconst email = requireOptionValue(input.getOption('email'), 'email')\n\t\tconst name = requireNonEmptyTenantName(input.getOption('name'), 'Person')\n\t\tconst memberships = await resolveNonEmptyMemberships(readMembershipInputSource(input), this.readStdin)\n\n\t\toutput.info(`Inviting ${email} to project ${projectSlug} as ${formatMemberships(memberships)}`)\n\t\tconst result = await this.tenantClientProvider.member().invite({\n\t\t\tprojectSlug,\n\t\t\temail,\n\t\t\tname,\n\t\t\tmemberships,\n\t\t\toptions: { method: parseInviteMethod(input.getOption('method')), mailVariant: input.getOption('mail-variant') },\n\t\t})\n\n\t\toutput.data(\n\t\t\t{ projectSlug, ...result },\n\t\t\t{\n\t\t\t\thuman: it =>\n\t\t\t\t\tit.isNew\n\t\t\t\t\t\t? `Invited ${humanText(it.email ?? email)} to ${humanText(it.projectSlug)}. Identity: ${humanText(it.identityId)}`\n\t\t\t\t\t\t: `${humanText(it.email ?? email)} already existed and was added to ${humanText(it.projectSlug)}. Identity: ${humanText(it.identityId)}`,\n\t\t\t\tquiet: it => it.identityId,\n\t\t\t},\n\t\t)\n\t}\n}\n\nconst parseInviteMethod = (value: string | undefined): InviteMethod | undefined => {\n\tif (value === undefined) {\n\t\treturn undefined\n\t}\n\tconst method = inviteMethods.find(it => it === value.toUpperCase())\n\tif (method === undefined) {\n\t\tthrow new CliError(`Option --method must be one of ${inviteMethods.join(', ')}, got \"${value}\".`, {\n\t\t\tcode: 'INVALID_INPUT',\n\t\t\texitCode: ExitCode.InputError,\n\t\t})\n\t}\n\treturn method\n}\n"],"names":["Command","readStdinText","configureMembershipOptions","requireOptionValue","requireNonEmptyTenantName","resolveNonEmptyMemberships","readMembershipInputSource","formatMemberships","humanText","CliError","ExitCode"],"mappings":";;;;;;;AAkBA,MAAM,gBAAgC,CAAC,mBAAmB,gBAAgB;AASnE,MAAM,kCAAkCA,UAAAA,QAAuB;AAAA,EACrE,YACkB,sBACA,YAAyBC,qBACzC;AACD,UAAA;AAHiB,SAAA,uBAAA;AACA,SAAA,YAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,wCAAwC;AAClE,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,eAAe;AACtF,kBAAc,OAAO,OAAO,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,uCAAuC;AAC5G,kBAAc,OAAO,MAAM,EAAE,cAAA,EAAgB,YAAY,2EAA2E;AACpI,kBAAc,OAAO,QAAQ,EAAE,cAAA,EAAgB;AAAA,MAC9C,0CAA0C,cAAc,KAAK,MAAM,CAAC,aAAa,cAAc,CAAC,CAAC;AAAA,IAAA;AAElG,kBAAc,OAAO,cAAc,EAAE,cAAA,EAAgB,YAAY,+BAA+B;AAChGC,oBAAAA,2BAA2B,aAAa;AAAA,EACzC;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAA+B;AACnF,UAAM,cAAcC,cAAAA,mBAAmB,MAAM,UAAU,SAAS,GAAG,SAAS;AAC5E,UAAM,QAAQA,cAAAA,mBAAmB,MAAM,UAAU,OAAO,GAAG,OAAO;AAClE,UAAM,OAAOC,aAAAA,0BAA0B,MAAM,UAAU,MAAM,GAAG,QAAQ;AACxE,UAAM,cAAc,MAAMC,2CAA2BC,gBAAAA,0BAA0B,KAAK,GAAG,KAAK,SAAS;AAErG,WAAO,KAAK,YAAY,KAAK,eAAe,WAAW,OAAOC,cAAAA,kBAAkB,WAAW,CAAC,EAAE;AAC9F,UAAM,SAAS,MAAM,KAAK,qBAAqB,OAAA,EAAS,OAAO;AAAA,MAC9D;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,EAAE,QAAQ,kBAAkB,MAAM,UAAU,QAAQ,CAAC,GAAG,aAAa,MAAM,UAAU,cAAc,EAAA;AAAA,IAAE,CAC9G;AAED,WAAO;AAAA,MACN,EAAE,aAAa,GAAG,OAAA;AAAA,MAClB;AAAA,QACC,OAAO,CAAA,OACN,GAAG,QACA,WAAWC,aAAAA,UAAU,GAAG,SAAS,KAAK,CAAC,OAAOA,aAAAA,UAAU,GAAG,WAAW,CAAC,eAAeA,uBAAU,GAAG,UAAU,CAAC,KAC9G,GAAGA,aAAAA,UAAU,GAAG,SAAS,KAAK,CAAC,qCAAqCA,aAAAA,UAAU,GAAG,WAAW,CAAC,eAAeA,aAAAA,UAAU,GAAG,UAAU,CAAC;AAAA,QACxI,OAAO,QAAM,GAAG;AAAA,MAAA;AAAA,IACjB;AAAA,EAEF;AACD;AAEA,MAAM,oBAAoB,CAAC,UAAwD;AAClF,MAAI,UAAU,QAAW;AACxB,WAAO;AAAA,EACR;AACA,QAAM,SAAS,cAAc,KAAK,QAAM,OAAO,MAAM,aAAa;AAClE,MAAI,WAAW,QAAW;AACzB,UAAM,IAAIC,UAAAA,SAAS,kCAAkC,cAAc,KAAK,IAAI,CAAC,UAAU,KAAK,MAAM;AAAA,MACjG,MAAM;AAAA,MACN,UAAUC,UAAAA,SAAS;AAAA,IAAA,CACnB;AAAA,EACF;AACA,SAAO;AACR;;"}

package/dist/development/src/commands/tenant/member/TenantMemberInviteCommand.js

@@ -0,0 +1,62 @@
+import { Command, CliError, ExitCode } from "@contember/cli-common";
+import { requireOptionValue, formatMemberships } from "./memberOptions.js";
+import { configureMembershipOptions, resolveNonEmptyMemberships, readMembershipInputSource } from "./membershipInput.js";
+import { readStdinText } from "../../../lib/tenant/stdin.js";
+import { requireNonEmptyTenantName, humanText } from "../tenantOutput.js";
+const inviteMethods = ["CREATE_PASSWORD", "RESET_PASSWORD"];
+class TenantMemberInviteCommand extends Command {
+  constructor(tenantClientProvider, readStdin = readStdinText) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+    this.readStdin = readStdin;
+  }
+  configure(configuration) {
+    configuration.description("Invite a person to a project by e-mail");
+    configuration.option("project").valueRequired().required().description("Project slug.");
+    configuration.option("email").valueRequired().required().description("E-mail address of the invited person.");
+    configuration.option("name").valueRequired().description("Name of the invited person. Used only when the person does not exist yet.");
+    configuration.option("method").valueRequired().description(
+      `How the person gets their credentials: ${inviteMethods.join(" or ")} (default ${inviteMethods[0]}).`
+    );
+    configuration.option("mail-variant").valueRequired().description("Mail template variant to use.");
+    configureMembershipOptions(configuration);
+  }
+  async execute(input, output) {
+    const projectSlug = requireOptionValue(input.getOption("project"), "project");
+    const email = requireOptionValue(input.getOption("email"), "email");
+    const name = requireNonEmptyTenantName(input.getOption("name"), "Person");
+    const memberships = await resolveNonEmptyMemberships(readMembershipInputSource(input), this.readStdin);
+    output.info(`Inviting ${email} to project ${projectSlug} as ${formatMemberships(memberships)}`);
+    const result = await this.tenantClientProvider.member().invite({
+      projectSlug,
+      email,
+      name,
+      memberships,
+      options: { method: parseInviteMethod(input.getOption("method")), mailVariant: input.getOption("mail-variant") }
+    });
+    output.data(
+      { projectSlug, ...result },
+      {
+        human: (it) => it.isNew ? `Invited ${humanText(it.email ?? email)} to ${humanText(it.projectSlug)}. Identity: ${humanText(it.identityId)}` : `${humanText(it.email ?? email)} already existed and was added to ${humanText(it.projectSlug)}. Identity: ${humanText(it.identityId)}`,
+        quiet: (it) => it.identityId
+      }
+    );
+  }
+}
+const parseInviteMethod = (value) => {
+  if (value === void 0) {
+    return void 0;
+  }
+  const method = inviteMethods.find((it) => it === value.toUpperCase());
+  if (method === void 0) {
+    throw new CliError(`Option --method must be one of ${inviteMethods.join(", ")}, got "${value}".`, {
+      code: "INVALID_INPUT",
+      exitCode: ExitCode.InputError
+    });
+  }
+  return method;
+};
+export {
+  TenantMemberInviteCommand
+};
+//# sourceMappingURL=TenantMemberInviteCommand.js.map

package/dist/development/src/commands/tenant/member/TenantMemberInviteCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantMemberInviteCommand.js","sources":["../../../../../../../packages/cli/src/commands/tenant/member/TenantMemberInviteCommand.ts"],"sourcesContent":["import { CliError, Command, CommandConfiguration, ExitCode, Input, Output } from '@contember/cli-common'\nimport type { InviteMethod } from '@contember/graphql-client-tenant'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport { formatMemberships, requireOptionValue } from './memberOptions.js'\nimport { configureMembershipOptions, MembershipOptions, readMembershipInputSource, resolveNonEmptyMemberships } from './membershipInput.js'\nimport { readStdinText, StdinReader } from '../../../lib/tenant/stdin.js'\nimport { humanText, requireNonEmptyTenantName } from '../tenantOutput.js'\n\ntype Args = {}\n\ntype Options = MembershipOptions & {\n\tproject?: string\n\temail?: string\n\tname?: string\n\tmethod?: string\n\t['mail-variant']?: string\n}\n\nconst inviteMethods: InviteMethod[] = ['CREATE_PASSWORD', 'RESET_PASSWORD']\n\n/**\n * `tenant member invite`\n *\n * The mail-sending half of the invite pair. `tenant member invite-unmanaged` is a separate command rather\n * than a flag here: the two mutations share no options at all (mail method and variant versus a password\n * or a reset token hash), and only one of them handles a secret.\n */\nexport class TenantMemberInviteCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t\tprivate readonly readStdin: StdinReader = readStdinText,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('Invite a person to a project by e-mail')\n\t\tconfiguration.option('project').valueRequired().required().description('Project slug.')\n\t\tconfiguration.option('email').valueRequired().required().description('E-mail address of the invited person.')\n\t\tconfiguration.option('name').valueRequired().description('Name of the invited person. Used only when the person does not exist yet.')\n\t\tconfiguration.option('method').valueRequired().description(\n\t\t\t`How the person gets their credentials: ${inviteMethods.join(' or ')} (default ${inviteMethods[0]}).`,\n\t\t)\n\t\tconfiguration.option('mail-variant').valueRequired().description('Mail template variant to use.')\n\t\tconfigureMembershipOptions(configuration)\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<void> {\n\t\tconst projectSlug = requireOptionValue(input.getOption('project'), 'project')\n\t\tconst email = requireOptionValue(input.getOption('email'), 'email')\n\t\tconst name = requireNonEmptyTenantName(input.getOption('name'), 'Person')\n\t\tconst memberships = await resolveNonEmptyMemberships(readMembershipInputSource(input), this.readStdin)\n\n\t\toutput.info(`Inviting ${email} to project ${projectSlug} as ${formatMemberships(memberships)}`)\n\t\tconst result = await this.tenantClientProvider.member().invite({\n\t\t\tprojectSlug,\n\t\t\temail,\n\t\t\tname,\n\t\t\tmemberships,\n\t\t\toptions: { method: parseInviteMethod(input.getOption('method')), mailVariant: input.getOption('mail-variant') },\n\t\t})\n\n\t\toutput.data(\n\t\t\t{ projectSlug, ...result },\n\t\t\t{\n\t\t\t\thuman: it =>\n\t\t\t\t\tit.isNew\n\t\t\t\t\t\t? `Invited ${humanText(it.email ?? email)} to ${humanText(it.projectSlug)}. Identity: ${humanText(it.identityId)}`\n\t\t\t\t\t\t: `${humanText(it.email ?? email)} already existed and was added to ${humanText(it.projectSlug)}. Identity: ${humanText(it.identityId)}`,\n\t\t\t\tquiet: it => it.identityId,\n\t\t\t},\n\t\t)\n\t}\n}\n\nconst parseInviteMethod = (value: string | undefined): InviteMethod | undefined => {\n\tif (value === undefined) {\n\t\treturn undefined\n\t}\n\tconst method = inviteMethods.find(it => it === value.toUpperCase())\n\tif (method === undefined) {\n\t\tthrow new CliError(`Option --method must be one of ${inviteMethods.join(', ')}, got \"${value}\".`, {\n\t\t\tcode: 'INVALID_INPUT',\n\t\t\texitCode: ExitCode.InputError,\n\t\t})\n\t}\n\treturn method\n}\n"],"names":[],"mappings":";;;;;AAkBA,MAAM,gBAAgC,CAAC,mBAAmB,gBAAgB;AASnE,MAAM,kCAAkC,QAAuB;AAAA,EACrE,YACkB,sBACA,YAAyB,eACzC;AACD,UAAA;AAHiB,SAAA,uBAAA;AACA,SAAA,YAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,wCAAwC;AAClE,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,eAAe;AACtF,kBAAc,OAAO,OAAO,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,uCAAuC;AAC5G,kBAAc,OAAO,MAAM,EAAE,cAAA,EAAgB,YAAY,2EAA2E;AACpI,kBAAc,OAAO,QAAQ,EAAE,cAAA,EAAgB;AAAA,MAC9C,0CAA0C,cAAc,KAAK,MAAM,CAAC,aAAa,cAAc,CAAC,CAAC;AAAA,IAAA;AAElG,kBAAc,OAAO,cAAc,EAAE,cAAA,EAAgB,YAAY,+BAA+B;AAChG,+BAA2B,aAAa;AAAA,EACzC;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAA+B;AACnF,UAAM,cAAc,mBAAmB,MAAM,UAAU,SAAS,GAAG,SAAS;AAC5E,UAAM,QAAQ,mBAAmB,MAAM,UAAU,OAAO,GAAG,OAAO;AAClE,UAAM,OAAO,0BAA0B,MAAM,UAAU,MAAM,GAAG,QAAQ;AACxE,UAAM,cAAc,MAAM,2BAA2B,0BAA0B,KAAK,GAAG,KAAK,SAAS;AAErG,WAAO,KAAK,YAAY,KAAK,eAAe,WAAW,OAAO,kBAAkB,WAAW,CAAC,EAAE;AAC9F,UAAM,SAAS,MAAM,KAAK,qBAAqB,OAAA,EAAS,OAAO;AAAA,MAC9D;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,EAAE,QAAQ,kBAAkB,MAAM,UAAU,QAAQ,CAAC,GAAG,aAAa,MAAM,UAAU,cAAc,EAAA;AAAA,IAAE,CAC9G;AAED,WAAO;AAAA,MACN,EAAE,aAAa,GAAG,OAAA;AAAA,MAClB;AAAA,QACC,OAAO,CAAA,OACN,GAAG,QACA,WAAW,UAAU,GAAG,SAAS,KAAK,CAAC,OAAO,UAAU,GAAG,WAAW,CAAC,eAAe,UAAU,GAAG,UAAU,CAAC,KAC9G,GAAG,UAAU,GAAG,SAAS,KAAK,CAAC,qCAAqC,UAAU,GAAG,WAAW,CAAC,eAAe,UAAU,GAAG,UAAU,CAAC;AAAA,QACxI,OAAO,QAAM,GAAG;AAAA,MAAA;AAAA,IACjB;AAAA,EAEF;AACD;AAEA,MAAM,oBAAoB,CAAC,UAAwD;AAClF,MAAI,UAAU,QAAW;AACxB,WAAO;AAAA,EACR;AACA,QAAM,SAAS,cAAc,KAAK,QAAM,OAAO,MAAM,aAAa;AAClE,MAAI,WAAW,QAAW;AACzB,UAAM,IAAI,SAAS,kCAAkC,cAAc,KAAK,IAAI,CAAC,UAAU,KAAK,MAAM;AAAA,MACjG,MAAM;AAAA,MACN,UAAU,SAAS;AAAA,IAAA,CACnB;AAAA,EACF;AACA,SAAO;AACR;"}

package/dist/development/src/commands/tenant/member/TenantMemberInviteUnmanagedCommand.cjs

@@ -0,0 +1,102 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const cliCommon = require("@contember/cli-common");
+const memberOptions = require("./memberOptions.cjs");
+const membershipInput = require("./membershipInput.cjs");
+const stdin = require("../../../lib/tenant/stdin.cjs");
+const value = require("../../../lib/tenant/input/value.cjs");
+const tenantOutput = require("../tenantOutput.cjs");
+class TenantMemberInviteUnmanagedCommand extends cliCommon.Command {
+  constructor(tenantClientProvider, readStdin = stdin.readStdinText, env = process.env) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+    this.readStdin = readStdin;
+    this.env = env;
+  }
+  configure(configuration) {
+    configuration.description("Invite a person to a project without sending any e-mail");
+    configuration.option("project").valueRequired().required().description("Project slug.");
+    configuration.option("email").valueRequired().required().description("E-mail address of the invited person.");
+    configuration.option("password-env").valueRequired().description(
+      "Name of the environment variable holding the initial password. Preferred over --password."
+    );
+    configuration.option("password").valueRequired().description(
+      "Initial password. Visible in the shell history and in the process list — prefer --password-env."
+    );
+    configuration.option("password-stdin").valueNone().description("Read the initial password from stdin.");
+    configuration.option("reset-token-hash").valueRequired().description("Hex encoded sha256 of a password reset token to store for the person.");
+    configuration.option("reset-token-hash-env").valueRequired().description("Read the password reset token hash from the named environment variable.");
+    configuration.option("reset-token-hash-stdin").valueNone().description("Read the password reset token hash from stdin.");
+    membershipInput.configureMembershipOptions(configuration);
+  }
+  async execute(input, output) {
+    const projectSlug = memberOptions.requireOptionValue(input.getOption("project"), "project");
+    const email = memberOptions.requireOptionValue(input.getOption("email"), "email");
+    const passwordFromStdin = input.getOption("password-stdin") === true;
+    const resetTokenHashFromStdin = input.getOption("reset-token-hash-stdin") === true;
+    if (input.getOption("memberships-stdin") === true && (passwordFromStdin || resetTokenHashFromStdin)) {
+      throw new cliCommon.CliError("Only one value can consume stdin. Combine --memberships-stdin with an environment-backed credential instead.", {
+        code: "AMBIGUOUS_STDIN_INPUT",
+        exitCode: cliCommon.ExitCode.InputError
+      });
+    }
+    const memberships = await membershipInput.resolveNonEmptyMemberships(membershipInput.readMembershipInputSource(input), this.readStdin);
+    const credentialSources = [];
+    const password = input.getOption("password");
+    const passwordEnv = input.getOption("password-env");
+    const resetTokenHash = input.getOption("reset-token-hash");
+    const resetTokenHashEnv = input.getOption("reset-token-hash-env");
+    if (password !== void 0) {
+      credentialSources.push(value.literalInput("password", "--password", password));
+    }
+    if (passwordEnv !== void 0) {
+      credentialSources.push(value.environmentInput("password", "--password-env", passwordEnv));
+    }
+    if (passwordFromStdin) {
+      credentialSources.push(value.stdinInput("password", "--password-stdin"));
+    }
+    if (resetTokenHash !== void 0) {
+      credentialSources.push(value.literalInput("reset-token-hash", "--reset-token-hash", resetTokenHash));
+    }
+    if (resetTokenHashEnv !== void 0) {
+      credentialSources.push(value.environmentInput("reset-token-hash", "--reset-token-hash-env", resetTokenHashEnv));
+    }
+    if (resetTokenHashFromStdin) {
+      credentialSources.push(value.stdinInput("reset-token-hash", "--reset-token-hash-stdin"));
+    }
+    const credential = await value.resolveRequiredTenantInput(credentialSources, { label: "unmanaged invite credential" }, {
+      readStdin: this.readStdin,
+      readEnvironment: (name) => this.env[name]
+    });
+    const credentialValue = credential.kind === "stdin" ? removeOneTrailingLineEnding(credential.value) : credential.value;
+    if (credentialValue === "") {
+      throw new cliCommon.CliError("The selected unmanaged invite credential source resolved to an empty value.", {
+        code: "EMPTY_INPUT_VALUE",
+        exitCode: cliCommon.ExitCode.InputError
+      });
+    }
+    if (credential.name === "reset-token-hash" && !/^[0-9a-f]{64}$/.test(credentialValue)) {
+      throw new cliCommon.CliError("The password reset token hash must be a 64-character hexadecimal SHA-256 hash.", {
+        code: "INVALID_RESET_TOKEN_HASH",
+        exitCode: cliCommon.ExitCode.InputError
+      });
+    }
+    output.info(`Creating an unmanaged membership for ${email} in project ${projectSlug} as ${memberOptions.formatMemberships(memberships)}`);
+    const result = await this.tenantClientProvider.member().unmanagedInvite({
+      projectSlug,
+      email,
+      memberships,
+      options: credential.name === "password" ? { password: credentialValue } : { resetTokenHash: credentialValue }
+    });
+    output.data(
+      { projectSlug, ...result },
+      {
+        human: (it) => it.isNew ? `Created ${tenantOutput.humanText(it.email ?? email)} in ${tenantOutput.humanText(it.projectSlug)}. Identity: ${tenantOutput.humanText(it.identityId)}` : `${tenantOutput.humanText(it.email ?? email)} already existed and was added to ${tenantOutput.humanText(it.projectSlug)}. Identity: ${tenantOutput.humanText(it.identityId)}`,
+        quiet: (it) => it.identityId
+      }
+    );
+  }
+}
+const removeOneTrailingLineEnding = (value2) => value2.replace(/(?:\r\n|\n)$/, "");
+exports.TenantMemberInviteUnmanagedCommand = TenantMemberInviteUnmanagedCommand;
+//# sourceMappingURL=TenantMemberInviteUnmanagedCommand.cjs.map

package/dist/development/src/commands/tenant/member/TenantMemberInviteUnmanagedCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantMemberInviteUnmanagedCommand.cjs","sources":["../../../../../../../packages/cli/src/commands/tenant/member/TenantMemberInviteUnmanagedCommand.ts"],"sourcesContent":["import { CliError, Command, CommandConfiguration, ExitCode, Input, Output } from '@contember/cli-common'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport { formatMemberships, requireOptionValue } from './memberOptions.js'\nimport { configureMembershipOptions, MembershipOptions, readMembershipInputSource, resolveNonEmptyMemberships } from './membershipInput.js'\nimport { readStdinText, StdinReader } from '../../../lib/tenant/stdin.js'\nimport { environmentInput, literalInput, resolveRequiredTenantInput, stdinInput, type TenantInputSource } from '../../../lib/tenant/input/index.js'\nimport { humanText } from '../tenantOutput.js'\n\ntype Args = {}\n\ntype Options = MembershipOptions & {\n\tproject?: string\n\temail?: string\n\tpassword?: string\n\t['password-env']?: string\n\t['password-stdin']?: boolean\n\t['reset-token-hash']?: string\n\t['reset-token-hash-env']?: string\n\t['reset-token-hash-stdin']?: boolean\n}\n\n/**\n * `tenant member invite-unmanaged`\n *\n * The no-mail half of the invite pair — the caller sets the credential itself. Kept apart from\n * `tenant member invite` because the option sets are disjoint and this one handles a secret.\n *\n * The password is never a positional argument. `--password-env` is the safe form: only the variable name\n * reaches the shell history and the process list.\n *\n * `unmanagedInvite` accepts a `name` in the schema but its resolver ignores it, so no `--name` is offered.\n */\nexport class TenantMemberInviteUnmanagedCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t\tprivate readonly readStdin: StdinReader = readStdinText,\n\t\tprivate readonly env: NodeJS.ProcessEnv = process.env,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('Invite a person to a project without sending any e-mail')\n\t\tconfiguration.option('project').valueRequired().required().description('Project slug.')\n\t\tconfiguration.option('email').valueRequired().required().description('E-mail address of the invited person.')\n\t\tconfiguration.option('password-env').valueRequired().description(\n\t\t\t'Name of the environment variable holding the initial password. Preferred over --password.',\n\t\t)\n\t\tconfiguration.option('password').valueRequired().description(\n\t\t\t'Initial password. Visible in the shell history and in the process list — prefer --password-env.',\n\t\t)\n\t\tconfiguration.option('password-stdin').valueNone().description('Read the initial password from stdin.')\n\t\tconfiguration.option('reset-token-hash').valueRequired().description('Hex encoded sha256 of a password reset token to store for the person.')\n\t\tconfiguration.option('reset-token-hash-env').valueRequired().description('Read the password reset token hash from the named environment variable.')\n\t\tconfiguration.option('reset-token-hash-stdin').valueNone().description('Read the password reset token hash from stdin.')\n\t\tconfigureMembershipOptions(configuration)\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<void> {\n\t\tconst projectSlug = requireOptionValue(input.getOption('project'), 'project')\n\t\tconst email = requireOptionValue(input.getOption('email'), 'email')\n\t\tconst passwordFromStdin = input.getOption('password-stdin') === true\n\t\tconst resetTokenHashFromStdin = input.getOption('reset-token-hash-stdin') === true\n\t\tif (input.getOption('memberships-stdin') === true && (passwordFromStdin || resetTokenHashFromStdin)) {\n\t\t\tthrow new CliError('Only one value can consume stdin. Combine --memberships-stdin with an environment-backed credential instead.', {\n\t\t\t\tcode: 'AMBIGUOUS_STDIN_INPUT',\n\t\t\t\texitCode: ExitCode.InputError,\n\t\t\t})\n\t\t}\n\t\tconst memberships = await resolveNonEmptyMemberships(readMembershipInputSource(input), this.readStdin)\n\t\tconst credentialSources: TenantInputSource<'password' | 'reset-token-hash'>[] = []\n\t\tconst password = input.getOption('password')\n\t\tconst passwordEnv = input.getOption('password-env')\n\t\tconst resetTokenHash = input.getOption('reset-token-hash')\n\t\tconst resetTokenHashEnv = input.getOption('reset-token-hash-env')\n\t\tif (password !== undefined) {\n\t\t\tcredentialSources.push(literalInput('password', '--password', password))\n\t\t}\n\t\tif (passwordEnv !== undefined) {\n\t\t\tcredentialSources.push(environmentInput('password', '--password-env', passwordEnv))\n\t\t}\n\t\tif (passwordFromStdin) {\n\t\t\tcredentialSources.push(stdinInput('password', '--password-stdin'))\n\t\t}\n\t\tif (resetTokenHash !== undefined) {\n\t\t\tcredentialSources.push(literalInput('reset-token-hash', '--reset-token-hash', resetTokenHash))\n\t\t}\n\t\tif (resetTokenHashEnv !== undefined) {\n\t\t\tcredentialSources.push(environmentInput('reset-token-hash', '--reset-token-hash-env', resetTokenHashEnv))\n\t\t}\n\t\tif (resetTokenHashFromStdin) {\n\t\t\tcredentialSources.push(stdinInput('reset-token-hash', '--reset-token-hash-stdin'))\n\t\t}\n\t\tconst credential = await resolveRequiredTenantInput(credentialSources, { label: 'unmanaged invite credential' }, {\n\t\t\treadStdin: this.readStdin,\n\t\t\treadEnvironment: name => this.env[name],\n\t\t})\n\t\tconst credentialValue = credential.kind === 'stdin' ? removeOneTrailingLineEnding(credential.value) : credential.value\n\t\tif (credentialValue === '') {\n\t\t\tthrow new CliError('The selected unmanaged invite credential source resolved to an empty value.', {\n\t\t\t\tcode: 'EMPTY_INPUT_VALUE',\n\t\t\t\texitCode: ExitCode.InputError,\n\t\t\t})\n\t\t}\n\t\tif (credential.name === 'reset-token-hash' && !/^[0-9a-f]{64}$/.test(credentialValue)) {\n\t\t\tthrow new CliError('The password reset token hash must be a 64-character hexadecimal SHA-256 hash.', {\n\t\t\t\tcode: 'INVALID_RESET_TOKEN_HASH',\n\t\t\t\texitCode: ExitCode.InputError,\n\t\t\t})\n\t\t}\n\n\t\toutput.info(`Creating an unmanaged membership for ${email} in project ${projectSlug} as ${formatMemberships(memberships)}`)\n\t\tconst result = await this.tenantClientProvider.member().unmanagedInvite({\n\t\t\tprojectSlug,\n\t\t\temail,\n\t\t\tmemberships,\n\t\t\toptions: credential.name === 'password'\n\t\t\t\t? { password: credentialValue }\n\t\t\t\t: { resetTokenHash: credentialValue },\n\t\t})\n\n\t\toutput.data(\n\t\t\t{ projectSlug, ...result },\n\t\t\t{\n\t\t\t\thuman: it =>\n\t\t\t\t\tit.isNew\n\t\t\t\t\t\t? `Created ${humanText(it.email ?? email)} in ${humanText(it.projectSlug)}. Identity: ${humanText(it.identityId)}`\n\t\t\t\t\t\t: `${humanText(it.email ?? email)} already existed and was added to ${humanText(it.projectSlug)}. Identity: ${humanText(it.identityId)}`,\n\t\t\t\tquiet: it => it.identityId,\n\t\t\t},\n\t\t)\n\t}\n}\n\nconst removeOneTrailingLineEnding = (value: string): string => value.replace(/(?:\\r\\n|\\n)$/, '')\n"],"names":["Command","readStdinText","configureMembershipOptions","requireOptionValue","CliError","ExitCode","resolveNonEmptyMemberships","readMembershipInputSource","literalInput","environmentInput","stdinInput","resolveRequiredTenantInput","formatMemberships","humanText","value"],"mappings":";;;;;;;;AAgCO,MAAM,2CAA2CA,UAAAA,QAAuB;AAAA,EAC9E,YACkB,sBACA,YAAyBC,MAAAA,eACzB,MAAyB,QAAQ,KACjD;AACD,UAAA;AAJiB,SAAA,uBAAA;AACA,SAAA,YAAA;AACA,SAAA,MAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,yDAAyD;AACnF,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,eAAe;AACtF,kBAAc,OAAO,OAAO,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,uCAAuC;AAC5G,kBAAc,OAAO,cAAc,EAAE,cAAA,EAAgB;AAAA,MACpD;AAAA,IAAA;AAED,kBAAc,OAAO,UAAU,EAAE,cAAA,EAAgB;AAAA,MAChD;AAAA,IAAA;AAED,kBAAc,OAAO,gBAAgB,EAAE,UAAA,EAAY,YAAY,uCAAuC;AACtG,kBAAc,OAAO,kBAAkB,EAAE,cAAA,EAAgB,YAAY,uEAAuE;AAC5I,kBAAc,OAAO,sBAAsB,EAAE,cAAA,EAAgB,YAAY,yEAAyE;AAClJ,kBAAc,OAAO,wBAAwB,EAAE,UAAA,EAAY,YAAY,gDAAgD;AACvHC,oBAAAA,2BAA2B,aAAa;AAAA,EACzC;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAA+B;AACnF,UAAM,cAAcC,cAAAA,mBAAmB,MAAM,UAAU,SAAS,GAAG,SAAS;AAC5E,UAAM,QAAQA,cAAAA,mBAAmB,MAAM,UAAU,OAAO,GAAG,OAAO;AAClE,UAAM,oBAAoB,MAAM,UAAU,gBAAgB,MAAM;AAChE,UAAM,0BAA0B,MAAM,UAAU,wBAAwB,MAAM;AAC9E,QAAI,MAAM,UAAU,mBAAmB,MAAM,SAAS,qBAAqB,0BAA0B;AACpG,YAAM,IAAIC,UAAAA,SAAS,gHAAgH;AAAA,QAClI,MAAM;AAAA,QACN,UAAUC,UAAAA,SAAS;AAAA,MAAA,CACnB;AAAA,IACF;AACA,UAAM,cAAc,MAAMC,2CAA2BC,gBAAAA,0BAA0B,KAAK,GAAG,KAAK,SAAS;AACrG,UAAM,oBAA0E,CAAA;AAChF,UAAM,WAAW,MAAM,UAAU,UAAU;AAC3C,UAAM,cAAc,MAAM,UAAU,cAAc;AAClD,UAAM,iBAAiB,MAAM,UAAU,kBAAkB;AACzD,UAAM,oBAAoB,MAAM,UAAU,sBAAsB;AAChE,QAAI,aAAa,QAAW;AAC3B,wBAAkB,KAAKC,MAAAA,aAAa,YAAY,cAAc,QAAQ,CAAC;AAAA,IACxE;AACA,QAAI,gBAAgB,QAAW;AAC9B,wBAAkB,KAAKC,MAAAA,iBAAiB,YAAY,kBAAkB,WAAW,CAAC;AAAA,IACnF;AACA,QAAI,mBAAmB;AACtB,wBAAkB,KAAKC,MAAAA,WAAW,YAAY,kBAAkB,CAAC;AAAA,IAClE;AACA,QAAI,mBAAmB,QAAW;AACjC,wBAAkB,KAAKF,MAAAA,aAAa,oBAAoB,sBAAsB,cAAc,CAAC;AAAA,IAC9F;AACA,QAAI,sBAAsB,QAAW;AACpC,wBAAkB,KAAKC,MAAAA,iBAAiB,oBAAoB,0BAA0B,iBAAiB,CAAC;AAAA,IACzG;AACA,QAAI,yBAAyB;AAC5B,wBAAkB,KAAKC,MAAAA,WAAW,oBAAoB,0BAA0B,CAAC;AAAA,IAClF;AACA,UAAM,aAAa,MAAMC,MAAAA,2BAA2B,mBAAmB,EAAE,OAAO,iCAAiC;AAAA,MAChH,WAAW,KAAK;AAAA,MAChB,iBAAiB,CAAA,SAAQ,KAAK,IAAI,IAAI;AAAA,IAAA,CACtC;AACD,UAAM,kBAAkB,WAAW,SAAS,UAAU,4BAA4B,WAAW,KAAK,IAAI,WAAW;AACjH,QAAI,oBAAoB,IAAI;AAC3B,YAAM,IAAIP,UAAAA,SAAS,+EAA+E;AAAA,QACjG,MAAM;AAAA,QACN,UAAUC,UAAAA,SAAS;AAAA,MAAA,CACnB;AAAA,IACF;AACA,QAAI,WAAW,SAAS,sBAAsB,CAAC,iBAAiB,KAAK,eAAe,GAAG;AACtF,YAAM,IAAID,UAAAA,SAAS,kFAAkF;AAAA,QACpG,MAAM;AAAA,QACN,UAAUC,UAAAA,SAAS;AAAA,MAAA,CACnB;AAAA,IACF;AAEA,WAAO,KAAK,wCAAwC,KAAK,eAAe,WAAW,OAAOO,cAAAA,kBAAkB,WAAW,CAAC,EAAE;AAC1H,UAAM,SAAS,MAAM,KAAK,qBAAqB,OAAA,EAAS,gBAAgB;AAAA,MACvE;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,WAAW,SAAS,aAC1B,EAAE,UAAU,gBAAA,IACZ,EAAE,gBAAgB,gBAAA;AAAA,IAAgB,CACrC;AAED,WAAO;AAAA,MACN,EAAE,aAAa,GAAG,OAAA;AAAA,MAClB;AAAA,QACC,OAAO,CAAA,OACN,GAAG,QACA,WAAWC,aAAAA,UAAU,GAAG,SAAS,KAAK,CAAC,OAAOA,aAAAA,UAAU,GAAG,WAAW,CAAC,eAAeA,uBAAU,GAAG,UAAU,CAAC,KAC9G,GAAGA,aAAAA,UAAU,GAAG,SAAS,KAAK,CAAC,qCAAqCA,aAAAA,UAAU,GAAG,WAAW,CAAC,eAAeA,aAAAA,UAAU,GAAG,UAAU,CAAC;AAAA,QACxI,OAAO,QAAM,GAAG;AAAA,MAAA;AAAA,IACjB;AAAA,EAEF;AACD;AAEA,MAAM,8BAA8B,CAACC,WAA0BA,OAAM,QAAQ,gBAAgB,EAAE;;"}

package/dist/development/src/commands/tenant/member/TenantMemberInviteUnmanagedCommand.js

@@ -0,0 +1,102 @@
+import { Command, CliError, ExitCode } from "@contember/cli-common";
+import { requireOptionValue, formatMemberships } from "./memberOptions.js";
+import { configureMembershipOptions, resolveNonEmptyMemberships, readMembershipInputSource } from "./membershipInput.js";
+import { readStdinText } from "../../../lib/tenant/stdin.js";
+import { resolveRequiredTenantInput, literalInput, environmentInput, stdinInput } from "../../../lib/tenant/input/value.js";
+import { humanText } from "../tenantOutput.js";
+class TenantMemberInviteUnmanagedCommand extends Command {
+  constructor(tenantClientProvider, readStdin = readStdinText, env = process.env) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+    this.readStdin = readStdin;
+    this.env = env;
+  }
+  configure(configuration) {
+    configuration.description("Invite a person to a project without sending any e-mail");
+    configuration.option("project").valueRequired().required().description("Project slug.");
+    configuration.option("email").valueRequired().required().description("E-mail address of the invited person.");
+    configuration.option("password-env").valueRequired().description(
+      "Name of the environment variable holding the initial password. Preferred over --password."
+    );
+    configuration.option("password").valueRequired().description(
+      "Initial password. Visible in the shell history and in the process list — prefer --password-env."
+    );
+    configuration.option("password-stdin").valueNone().description("Read the initial password from stdin.");
+    configuration.option("reset-token-hash").valueRequired().description("Hex encoded sha256 of a password reset token to store for the person.");
+    configuration.option("reset-token-hash-env").valueRequired().description("Read the password reset token hash from the named environment variable.");
+    configuration.option("reset-token-hash-stdin").valueNone().description("Read the password reset token hash from stdin.");
+    configureMembershipOptions(configuration);
+  }
+  async execute(input, output) {
+    const projectSlug = requireOptionValue(input.getOption("project"), "project");
+    const email = requireOptionValue(input.getOption("email"), "email");
+    const passwordFromStdin = input.getOption("password-stdin") === true;
+    const resetTokenHashFromStdin = input.getOption("reset-token-hash-stdin") === true;
+    if (input.getOption("memberships-stdin") === true && (passwordFromStdin || resetTokenHashFromStdin)) {
+      throw new CliError("Only one value can consume stdin. Combine --memberships-stdin with an environment-backed credential instead.", {
+        code: "AMBIGUOUS_STDIN_INPUT",
+        exitCode: ExitCode.InputError
+      });
+    }
+    const memberships = await resolveNonEmptyMemberships(readMembershipInputSource(input), this.readStdin);
+    const credentialSources = [];
+    const password = input.getOption("password");
+    const passwordEnv = input.getOption("password-env");
+    const resetTokenHash = input.getOption("reset-token-hash");
+    const resetTokenHashEnv = input.getOption("reset-token-hash-env");
+    if (password !== void 0) {
+      credentialSources.push(literalInput("password", "--password", password));
+    }
+    if (passwordEnv !== void 0) {
+      credentialSources.push(environmentInput("password", "--password-env", passwordEnv));
+    }
+    if (passwordFromStdin) {
+      credentialSources.push(stdinInput("password", "--password-stdin"));
+    }
+    if (resetTokenHash !== void 0) {
+      credentialSources.push(literalInput("reset-token-hash", "--reset-token-hash", resetTokenHash));
+    }
+    if (resetTokenHashEnv !== void 0) {
+      credentialSources.push(environmentInput("reset-token-hash", "--reset-token-hash-env", resetTokenHashEnv));
+    }
+    if (resetTokenHashFromStdin) {
+      credentialSources.push(stdinInput("reset-token-hash", "--reset-token-hash-stdin"));
+    }
+    const credential = await resolveRequiredTenantInput(credentialSources, { label: "unmanaged invite credential" }, {
+      readStdin: this.readStdin,
+      readEnvironment: (name) => this.env[name]
+    });
+    const credentialValue = credential.kind === "stdin" ? removeOneTrailingLineEnding(credential.value) : credential.value;
+    if (credentialValue === "") {
+      throw new CliError("The selected unmanaged invite credential source resolved to an empty value.", {
+        code: "EMPTY_INPUT_VALUE",
+        exitCode: ExitCode.InputError
+      });
+    }
+    if (credential.name === "reset-token-hash" && !/^[0-9a-f]{64}$/.test(credentialValue)) {
+      throw new CliError("The password reset token hash must be a 64-character hexadecimal SHA-256 hash.", {
+        code: "INVALID_RESET_TOKEN_HASH",
+        exitCode: ExitCode.InputError
+      });
+    }
+    output.info(`Creating an unmanaged membership for ${email} in project ${projectSlug} as ${formatMemberships(memberships)}`);
+    const result = await this.tenantClientProvider.member().unmanagedInvite({
+      projectSlug,
+      email,
+      memberships,
+      options: credential.name === "password" ? { password: credentialValue } : { resetTokenHash: credentialValue }
+    });
+    output.data(
+      { projectSlug, ...result },
+      {
+        human: (it) => it.isNew ? `Created ${humanText(it.email ?? email)} in ${humanText(it.projectSlug)}. Identity: ${humanText(it.identityId)}` : `${humanText(it.email ?? email)} already existed and was added to ${humanText(it.projectSlug)}. Identity: ${humanText(it.identityId)}`,
+        quiet: (it) => it.identityId
+      }
+    );
+  }
+}
+const removeOneTrailingLineEnding = (value) => value.replace(/(?:\r\n|\n)$/, "");
+export {
+  TenantMemberInviteUnmanagedCommand
+};
+//# sourceMappingURL=TenantMemberInviteUnmanagedCommand.js.map

package/dist/development/src/commands/tenant/member/TenantMemberInviteUnmanagedCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantMemberInviteUnmanagedCommand.js","sources":["../../../../../../../packages/cli/src/commands/tenant/member/TenantMemberInviteUnmanagedCommand.ts"],"sourcesContent":["import { CliError, Command, CommandConfiguration, ExitCode, Input, Output } from '@contember/cli-common'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport { formatMemberships, requireOptionValue } from './memberOptions.js'\nimport { configureMembershipOptions, MembershipOptions, readMembershipInputSource, resolveNonEmptyMemberships } from './membershipInput.js'\nimport { readStdinText, StdinReader } from '../../../lib/tenant/stdin.js'\nimport { environmentInput, literalInput, resolveRequiredTenantInput, stdinInput, type TenantInputSource } from '../../../lib/tenant/input/index.js'\nimport { humanText } from '../tenantOutput.js'\n\ntype Args = {}\n\ntype Options = MembershipOptions & {\n\tproject?: string\n\temail?: string\n\tpassword?: string\n\t['password-env']?: string\n\t['password-stdin']?: boolean\n\t['reset-token-hash']?: string\n\t['reset-token-hash-env']?: string\n\t['reset-token-hash-stdin']?: boolean\n}\n\n/**\n * `tenant member invite-unmanaged`\n *\n * The no-mail half of the invite pair — the caller sets the credential itself. Kept apart from\n * `tenant member invite` because the option sets are disjoint and this one handles a secret.\n *\n * The password is never a positional argument. `--password-env` is the safe form: only the variable name\n * reaches the shell history and the process list.\n *\n * `unmanagedInvite` accepts a `name` in the schema but its resolver ignores it, so no `--name` is offered.\n */\nexport class TenantMemberInviteUnmanagedCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t\tprivate readonly readStdin: StdinReader = readStdinText,\n\t\tprivate readonly env: NodeJS.ProcessEnv = process.env,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('Invite a person to a project without sending any e-mail')\n\t\tconfiguration.option('project').valueRequired().required().description('Project slug.')\n\t\tconfiguration.option('email').valueRequired().required().description('E-mail address of the invited person.')\n\t\tconfiguration.option('password-env').valueRequired().description(\n\t\t\t'Name of the environment variable holding the initial password. Preferred over --password.',\n\t\t)\n\t\tconfiguration.option('password').valueRequired().description(\n\t\t\t'Initial password. Visible in the shell history and in the process list — prefer --password-env.',\n\t\t)\n\t\tconfiguration.option('password-stdin').valueNone().description('Read the initial password from stdin.')\n\t\tconfiguration.option('reset-token-hash').valueRequired().description('Hex encoded sha256 of a password reset token to store for the person.')\n\t\tconfiguration.option('reset-token-hash-env').valueRequired().description('Read the password reset token hash from the named environment variable.')\n\t\tconfiguration.option('reset-token-hash-stdin').valueNone().description('Read the password reset token hash from stdin.')\n\t\tconfigureMembershipOptions(configuration)\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<void> {\n\t\tconst projectSlug = requireOptionValue(input.getOption('project'), 'project')\n\t\tconst email = requireOptionValue(input.getOption('email'), 'email')\n\t\tconst passwordFromStdin = input.getOption('password-stdin') === true\n\t\tconst resetTokenHashFromStdin = input.getOption('reset-token-hash-stdin') === true\n\t\tif (input.getOption('memberships-stdin') === true && (passwordFromStdin || resetTokenHashFromStdin)) {\n\t\t\tthrow new CliError('Only one value can consume stdin. Combine --memberships-stdin with an environment-backed credential instead.', {\n\t\t\t\tcode: 'AMBIGUOUS_STDIN_INPUT',\n\t\t\t\texitCode: ExitCode.InputError,\n\t\t\t})\n\t\t}\n\t\tconst memberships = await resolveNonEmptyMemberships(readMembershipInputSource(input), this.readStdin)\n\t\tconst credentialSources: TenantInputSource<'password' | 'reset-token-hash'>[] = []\n\t\tconst password = input.getOption('password')\n\t\tconst passwordEnv = input.getOption('password-env')\n\t\tconst resetTokenHash = input.getOption('reset-token-hash')\n\t\tconst resetTokenHashEnv = input.getOption('reset-token-hash-env')\n\t\tif (password !== undefined) {\n\t\t\tcredentialSources.push(literalInput('password', '--password', password))\n\t\t}\n\t\tif (passwordEnv !== undefined) {\n\t\t\tcredentialSources.push(environmentInput('password', '--password-env', passwordEnv))\n\t\t}\n\t\tif (passwordFromStdin) {\n\t\t\tcredentialSources.push(stdinInput('password', '--password-stdin'))\n\t\t}\n\t\tif (resetTokenHash !== undefined) {\n\t\t\tcredentialSources.push(literalInput('reset-token-hash', '--reset-token-hash', resetTokenHash))\n\t\t}\n\t\tif (resetTokenHashEnv !== undefined) {\n\t\t\tcredentialSources.push(environmentInput('reset-token-hash', '--reset-token-hash-env', resetTokenHashEnv))\n\t\t}\n\t\tif (resetTokenHashFromStdin) {\n\t\t\tcredentialSources.push(stdinInput('reset-token-hash', '--reset-token-hash-stdin'))\n\t\t}\n\t\tconst credential = await resolveRequiredTenantInput(credentialSources, { label: 'unmanaged invite credential' }, {\n\t\t\treadStdin: this.readStdin,\n\t\t\treadEnvironment: name => this.env[name],\n\t\t})\n\t\tconst credentialValue = credential.kind === 'stdin' ? removeOneTrailingLineEnding(credential.value) : credential.value\n\t\tif (credentialValue === '') {\n\t\t\tthrow new CliError('The selected unmanaged invite credential source resolved to an empty value.', {\n\t\t\t\tcode: 'EMPTY_INPUT_VALUE',\n\t\t\t\texitCode: ExitCode.InputError,\n\t\t\t})\n\t\t}\n\t\tif (credential.name === 'reset-token-hash' && !/^[0-9a-f]{64}$/.test(credentialValue)) {\n\t\t\tthrow new CliError('The password reset token hash must be a 64-character hexadecimal SHA-256 hash.', {\n\t\t\t\tcode: 'INVALID_RESET_TOKEN_HASH',\n\t\t\t\texitCode: ExitCode.InputError,\n\t\t\t})\n\t\t}\n\n\t\toutput.info(`Creating an unmanaged membership for ${email} in project ${projectSlug} as ${formatMemberships(memberships)}`)\n\t\tconst result = await this.tenantClientProvider.member().unmanagedInvite({\n\t\t\tprojectSlug,\n\t\t\temail,\n\t\t\tmemberships,\n\t\t\toptions: credential.name === 'password'\n\t\t\t\t? { password: credentialValue }\n\t\t\t\t: { resetTokenHash: credentialValue },\n\t\t})\n\n\t\toutput.data(\n\t\t\t{ projectSlug, ...result },\n\t\t\t{\n\t\t\t\thuman: it =>\n\t\t\t\t\tit.isNew\n\t\t\t\t\t\t? `Created ${humanText(it.email ?? email)} in ${humanText(it.projectSlug)}. Identity: ${humanText(it.identityId)}`\n\t\t\t\t\t\t: `${humanText(it.email ?? email)} already existed and was added to ${humanText(it.projectSlug)}. Identity: ${humanText(it.identityId)}`,\n\t\t\t\tquiet: it => it.identityId,\n\t\t\t},\n\t\t)\n\t}\n}\n\nconst removeOneTrailingLineEnding = (value: string): string => value.replace(/(?:\\r\\n|\\n)$/, '')\n"],"names":[],"mappings":";;;;;;AAgCO,MAAM,2CAA2C,QAAuB;AAAA,EAC9E,YACkB,sBACA,YAAyB,eACzB,MAAyB,QAAQ,KACjD;AACD,UAAA;AAJiB,SAAA,uBAAA;AACA,SAAA,YAAA;AACA,SAAA,MAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,yDAAyD;AACnF,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,eAAe;AACtF,kBAAc,OAAO,OAAO,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,uCAAuC;AAC5G,kBAAc,OAAO,cAAc,EAAE,cAAA,EAAgB;AAAA,MACpD;AAAA,IAAA;AAED,kBAAc,OAAO,UAAU,EAAE,cAAA,EAAgB;AAAA,MAChD;AAAA,IAAA;AAED,kBAAc,OAAO,gBAAgB,EAAE,UAAA,EAAY,YAAY,uCAAuC;AACtG,kBAAc,OAAO,kBAAkB,EAAE,cAAA,EAAgB,YAAY,uEAAuE;AAC5I,kBAAc,OAAO,sBAAsB,EAAE,cAAA,EAAgB,YAAY,yEAAyE;AAClJ,kBAAc,OAAO,wBAAwB,EAAE,UAAA,EAAY,YAAY,gDAAgD;AACvH,+BAA2B,aAAa;AAAA,EACzC;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAA+B;AACnF,UAAM,cAAc,mBAAmB,MAAM,UAAU,SAAS,GAAG,SAAS;AAC5E,UAAM,QAAQ,mBAAmB,MAAM,UAAU,OAAO,GAAG,OAAO;AAClE,UAAM,oBAAoB,MAAM,UAAU,gBAAgB,MAAM;AAChE,UAAM,0BAA0B,MAAM,UAAU,wBAAwB,MAAM;AAC9E,QAAI,MAAM,UAAU,mBAAmB,MAAM,SAAS,qBAAqB,0BAA0B;AACpG,YAAM,IAAI,SAAS,gHAAgH;AAAA,QAClI,MAAM;AAAA,QACN,UAAU,SAAS;AAAA,MAAA,CACnB;AAAA,IACF;AACA,UAAM,cAAc,MAAM,2BAA2B,0BAA0B,KAAK,GAAG,KAAK,SAAS;AACrG,UAAM,oBAA0E,CAAA;AAChF,UAAM,WAAW,MAAM,UAAU,UAAU;AAC3C,UAAM,cAAc,MAAM,UAAU,cAAc;AAClD,UAAM,iBAAiB,MAAM,UAAU,kBAAkB;AACzD,UAAM,oBAAoB,MAAM,UAAU,sBAAsB;AAChE,QAAI,aAAa,QAAW;AAC3B,wBAAkB,KAAK,aAAa,YAAY,cAAc,QAAQ,CAAC;AAAA,IACxE;AACA,QAAI,gBAAgB,QAAW;AAC9B,wBAAkB,KAAK,iBAAiB,YAAY,kBAAkB,WAAW,CAAC;AAAA,IACnF;AACA,QAAI,mBAAmB;AACtB,wBAAkB,KAAK,WAAW,YAAY,kBAAkB,CAAC;AAAA,IAClE;AACA,QAAI,mBAAmB,QAAW;AACjC,wBAAkB,KAAK,aAAa,oBAAoB,sBAAsB,cAAc,CAAC;AAAA,IAC9F;AACA,QAAI,sBAAsB,QAAW;AACpC,wBAAkB,KAAK,iBAAiB,oBAAoB,0BAA0B,iBAAiB,CAAC;AAAA,IACzG;AACA,QAAI,yBAAyB;AAC5B,wBAAkB,KAAK,WAAW,oBAAoB,0BAA0B,CAAC;AAAA,IAClF;AACA,UAAM,aAAa,MAAM,2BAA2B,mBAAmB,EAAE,OAAO,iCAAiC;AAAA,MAChH,WAAW,KAAK;AAAA,MAChB,iBAAiB,CAAA,SAAQ,KAAK,IAAI,IAAI;AAAA,IAAA,CACtC;AACD,UAAM,kBAAkB,WAAW,SAAS,UAAU,4BAA4B,WAAW,KAAK,IAAI,WAAW;AACjH,QAAI,oBAAoB,IAAI;AAC3B,YAAM,IAAI,SAAS,+EAA+E;AAAA,QACjG,MAAM;AAAA,QACN,UAAU,SAAS;AAAA,MAAA,CACnB;AAAA,IACF;AACA,QAAI,WAAW,SAAS,sBAAsB,CAAC,iBAAiB,KAAK,eAAe,GAAG;AACtF,YAAM,IAAI,SAAS,kFAAkF;AAAA,QACpG,MAAM;AAAA,QACN,UAAU,SAAS;AAAA,MAAA,CACnB;AAAA,IACF;AAEA,WAAO,KAAK,wCAAwC,KAAK,eAAe,WAAW,OAAO,kBAAkB,WAAW,CAAC,EAAE;AAC1H,UAAM,SAAS,MAAM,KAAK,qBAAqB,OAAA,EAAS,gBAAgB;AAAA,MACvE;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,WAAW,SAAS,aAC1B,EAAE,UAAU,gBAAA,IACZ,EAAE,gBAAgB,gBAAA;AAAA,IAAgB,CACrC;AAED,WAAO;AAAA,MACN,EAAE,aAAa,GAAG,OAAA;AAAA,MAClB;AAAA,QACC,OAAO,CAAA,OACN,GAAG,QACA,WAAW,UAAU,GAAG,SAAS,KAAK,CAAC,OAAO,UAAU,GAAG,WAAW,CAAC,eAAe,UAAU,GAAG,UAAU,CAAC,KAC9G,GAAG,UAAU,GAAG,SAAS,KAAK,CAAC,qCAAqC,UAAU,GAAG,WAAW,CAAC,eAAe,UAAU,GAAG,UAAU,CAAC;AAAA,QACxI,OAAO,QAAM,GAAG;AAAA,MAAA;AAAA,IACjB;AAAA,EAEF;AACD;AAEA,MAAM,8BAA8B,CAAC,UAA0B,MAAM,QAAQ,gBAAgB,EAAE;"}