@contember/cli 2.2.0-alpha.3 → 2.2.0-alpha.4

package/dist/development/src/commands/tenant/policy/TenantAuthLogCommand.js

@@ -0,0 +1,96 @@
+import { Command } from "@contember/cli-common";
+import chalkTable from "chalk-table";
+import { parsePaginationLimit, parsePaginationOffset, GRAPHQL_INT_MAX } from "../../../lib/tenant/input/pagination.js";
+import { inputError } from "./policyInput.js";
+import { humanText } from "../tenantOutput.js";
+class TenantAuthLogCommand extends Command {
+  constructor(tenantClientProvider) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+  }
+  configure(configuration) {
+    configuration.description("Read the tenant auth log (audit trail). Requires the system:viewAuthLog permission.");
+    configuration.option("type").valueArray().description("Filter by auth_log_type, e.g. sign_in. Repeat the option to match any of several types.");
+    configuration.option("success").valueNone().description("Only successful entries.");
+    configuration.option("failed").valueNone().description("Only failed entries.");
+    configuration.option("invoked-by").valueRequired().description("Filter by the acting identity id.");
+    configuration.option("person").valueRequired().description("Filter by the acting person id.");
+    configuration.option("target-person").valueRequired().description("Filter by the person the action was performed on.");
+    configuration.option("person-input").valueRequired().description("Filter by the submitted identifier, typically the e-mail of a failed sign-in.");
+    configuration.option("created-after").valueRequired().description("Inclusive lower bound on createdAt, as an ISO 8601 timestamp.");
+    configuration.option("created-before").valueRequired().description("Exclusive upper bound on createdAt, as an ISO 8601 timestamp.");
+    configuration.option("limit").valueRequired().description("Page size. Server default is 100, capped at 500.");
+    configuration.option("offset").valueRequired().description("Number of entries to skip. Use the nextOffset of the previous page.");
+  }
+  async execute(input, output) {
+    const limit = parsePaginationLimit(input.getOption("limit"));
+    const offset = parsePaginationOffset(input.getOption("offset")) ?? 0;
+    const filter = this.readFilter(input);
+    const page = await this.tenantClientProvider.policy().readAuthLog({
+      filter: Object.values(filter).some((it) => it !== void 0) ? filter : void 0,
+      limit,
+      offset
+    });
+    const advancedOffset = offset + page.entries.length;
+    const canContinue = page.hasMore && page.entries.length > 0 && advancedOffset <= GRAPHQL_INT_MAX;
+    const result = {
+      entries: page.entries,
+      hasMore: canContinue,
+      offset,
+      nextOffset: canContinue ? advancedOffset : null
+    };
+    output.info(`authLog: ${page.entries.length} entries from offset ${offset}${result.hasMore ? ", more available" : ""}`);
+    output.data(result, { human: renderHuman, quiet: (value) => value.entries.map((entry) => entry.id) });
+  }
+  readFilter(input) {
+    const successOnly = input.getOption("success") === true;
+    const failedOnly = input.getOption("failed") === true;
+    if (successOnly && failedOnly) {
+      throw inputError("Pass either --success or --failed, not both.", "AMBIGUOUS_INPUT");
+    }
+    return {
+      types: input.getOption("type"),
+      success: successOnly ? true : failedOnly ? false : void 0,
+      invokedByIdentityId: input.getOption("invoked-by"),
+      personId: input.getOption("person"),
+      targetPersonId: input.getOption("target-person"),
+      personInputIdentifier: input.getOption("person-input"),
+      createdAfter: input.getOption("created-after"),
+      createdBefore: input.getOption("created-before")
+    };
+  }
+}
+const humanColumns = [
+  { field: "createdAt", name: "Time (UTC)" },
+  { field: "type", name: "Type" },
+  { field: "success", name: "OK" },
+  { field: "person", name: "Person" },
+  { field: "identity", name: "Identity" },
+  { field: "ip", name: "IP" },
+  { field: "error", name: "Error" }
+];
+const renderHuman = (page) => {
+  if (page.entries.length === 0) {
+    return "No auth log entries match the filter.";
+  }
+  const table = chalkTable({ columns: humanColumns }, page.entries.map(toHumanRow));
+  return page.hasMore ? `${table}
+More entries available — rerun with --offset ${page.nextOffset}.` : table;
+};
+const toHumanRow = (entry) => ({
+  createdAt: formatTimestamp(entry.createdAt),
+  type: humanText(entry.type),
+  success: entry.success ? "yes" : "no",
+  person: humanText(entry.personId ?? entry.personInputIdentifier ?? ""),
+  identity: humanText(entry.invokedByIdentityId ?? ""),
+  ip: humanText(entry.ipAddress ?? ""),
+  error: humanText(entry.errorCode ?? "")
+});
+const formatTimestamp = (value) => {
+  const parsed = new Date(value);
+  return Number.isNaN(parsed.getTime()) ? humanText(value) : parsed.toISOString().replace("T", " ").slice(0, 19);
+};
+export {
+  TenantAuthLogCommand
+};
+//# sourceMappingURL=TenantAuthLogCommand.js.map

package/dist/development/src/commands/tenant/policy/TenantAuthLogCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantAuthLogCommand.js","sources":["../../../../../../../packages/cli/src/commands/tenant/policy/TenantAuthLogCommand.ts"],"sourcesContent":["/// <reference path=\"../../../../types/chalk-table/index.d.ts\" />\n\nimport { Command, CommandConfiguration, Input, Output } from '@contember/cli-common'\nimport type { AuthLogFilter } from '@contember/graphql-client-tenant'\nimport chalkTable from 'chalk-table'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport { TenantAuthLogEntry } from '../../../lib/tenant/clients/index.js'\nimport { GRAPHQL_INT_MAX, parsePaginationLimit, parsePaginationOffset } from '../../../lib/tenant/input/index.js'\nimport { inputError } from './policyInput.js'\nimport { humanText } from '../tenantOutput.js'\n\ntype Args = {}\n\ntype Options = {\n\ttype?: string[]\n\tsuccess?: boolean\n\tfailed?: boolean\n\t['invoked-by']?: string\n\tperson?: string\n\t['target-person']?: string\n\t['person-input']?: string\n\t['created-after']?: string\n\t['created-before']?: string\n\tlimit?: string\n\toffset?: string\n}\n\n/** The command's answer: the page plus everything a script needs to fetch the next one. */\nexport interface AuthLogPageResult {\n\tentries: TenantAuthLogEntry[]\n\t/** True when rows exist past this page. */\n\thasMore: boolean\n\toffset: number\n\t/** Offset to pass to the next call, `null` when this is the last page. */\n\tnextOffset: number | null\n}\n\nexport class TenantAuthLogCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('Read the tenant auth log (audit trail). Requires the system:viewAuthLog permission.')\n\t\tconfiguration.option('type').valueArray().description('Filter by auth_log_type, e.g. sign_in. Repeat the option to match any of several types.')\n\t\tconfiguration.option('success').valueNone().description('Only successful entries.')\n\t\tconfiguration.option('failed').valueNone().description('Only failed entries.')\n\t\tconfiguration.option('invoked-by').valueRequired().description('Filter by the acting identity id.')\n\t\tconfiguration.option('person').valueRequired().description('Filter by the acting person id.')\n\t\tconfiguration.option('target-person').valueRequired().description('Filter by the person the action was performed on.')\n\t\tconfiguration.option('person-input').valueRequired().description('Filter by the submitted identifier, typically the e-mail of a failed sign-in.')\n\t\tconfiguration.option('created-after').valueRequired().description('Inclusive lower bound on createdAt, as an ISO 8601 timestamp.')\n\t\tconfiguration.option('created-before').valueRequired().description('Exclusive upper bound on createdAt, as an ISO 8601 timestamp.')\n\t\tconfiguration.option('limit').valueRequired().description('Page size. Server default is 100, capped at 500.')\n\t\tconfiguration.option('offset').valueRequired().description('Number of entries to skip. Use the nextOffset of the previous page.')\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<void> {\n\t\tconst limit = parsePaginationLimit(input.getOption('limit'))\n\t\tconst offset = parsePaginationOffset(input.getOption('offset')) ?? 0\n\t\tconst filter = this.readFilter(input)\n\n\t\tconst page = await this.tenantClientProvider.policy().readAuthLog({\n\t\t\tfilter: Object.values(filter).some(it => it !== undefined) ? filter : undefined,\n\t\t\tlimit,\n\t\t\toffset,\n\t\t})\n\n\t\tconst advancedOffset = offset + page.entries.length\n\t\tconst canContinue = page.hasMore && page.entries.length > 0 && advancedOffset <= GRAPHQL_INT_MAX\n\t\tconst result: AuthLogPageResult = {\n\t\t\tentries: page.entries,\n\t\t\thasMore: canContinue,\n\t\t\toffset,\n\t\t\tnextOffset: canContinue ? advancedOffset : null,\n\t\t}\n\t\toutput.info(`authLog: ${page.entries.length} entries from offset ${offset}${result.hasMore ? ', more available' : ''}`)\n\t\toutput.data(result, { human: renderHuman, quiet: value => value.entries.map(entry => entry.id) })\n\t}\n\n\tprivate readFilter(input: Input<Args, Options>): AuthLogFilter {\n\t\tconst successOnly = input.getOption('success') === true\n\t\tconst failedOnly = input.getOption('failed') === true\n\t\tif (successOnly && failedOnly) {\n\t\t\tthrow inputError('Pass either --success or --failed, not both.', 'AMBIGUOUS_INPUT')\n\t\t}\n\t\treturn {\n\t\t\ttypes: input.getOption('type'),\n\t\t\tsuccess: successOnly ? true : failedOnly ? false : undefined,\n\t\t\tinvokedByIdentityId: input.getOption('invoked-by'),\n\t\t\tpersonId: input.getOption('person'),\n\t\t\ttargetPersonId: input.getOption('target-person'),\n\t\t\tpersonInputIdentifier: input.getOption('person-input'),\n\t\t\tcreatedAfter: input.getOption('created-after'),\n\t\t\tcreatedBefore: input.getOption('created-before'),\n\t\t}\n\t}\n}\n\ntype AuthLogCell = 'createdAt' | 'type' | 'success' | 'person' | 'identity' | 'ip' | 'error'\n\n// A curated, narrow projection: the full entry (metadata, eventData, user agent) stays in --json.\nconst humanColumns: { field: AuthLogCell; name: string }[] = [\n\t{ field: 'createdAt', name: 'Time (UTC)' },\n\t{ field: 'type', name: 'Type' },\n\t{ field: 'success', name: 'OK' },\n\t{ field: 'person', name: 'Person' },\n\t{ field: 'identity', name: 'Identity' },\n\t{ field: 'ip', name: 'IP' },\n\t{ field: 'error', name: 'Error' },\n]\n\n/**\n * `Output.data` renders the human view, because `Output.table` can only emit a bare array and the\n * paging fields have to stay in the `--json` payload. Formatting therefore lives here, human-only.\n */\nconst renderHuman = (page: AuthLogPageResult): string => {\n\tif (page.entries.length === 0) {\n\t\treturn 'No auth log entries match the filter.'\n\t}\n\tconst table = chalkTable({ columns: humanColumns }, page.entries.map(toHumanRow))\n\treturn page.hasMore ? `${table}\\nMore entries available — rerun with --offset ${page.nextOffset}.` : table\n}\n\nconst toHumanRow = (entry: TenantAuthLogEntry): Record<AuthLogCell, string> => ({\n\tcreatedAt: formatTimestamp(entry.createdAt),\n\ttype: humanText(entry.type),\n\tsuccess: entry.success ? 'yes' : 'no',\n\tperson: humanText(entry.personId ?? entry.personInputIdentifier ?? ''),\n\tidentity: humanText(entry.invokedByIdentityId ?? ''),\n\tip: humanText(entry.ipAddress ?? ''),\n\terror: humanText(entry.errorCode ?? ''),\n})\n\n/** Raw ISO timestamps read badly in a terminal; UTC keeps the rendering reproducible. */\nconst formatTimestamp = (value: string): string => {\n\tconst parsed = new Date(value)\n\treturn Number.isNaN(parsed.getTime()) ? humanText(value) : parsed.toISOString().replace('T', ' ').slice(0, 19)\n}\n"],"names":[],"mappings":";;;;;AAqCO,MAAM,6BAA6B,QAAuB;AAAA,EAChE,YACkB,sBAChB;AACD,UAAA;AAFiB,SAAA,uBAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,qFAAqF;AAC/G,kBAAc,OAAO,MAAM,EAAE,WAAA,EAAa,YAAY,yFAAyF;AAC/I,kBAAc,OAAO,SAAS,EAAE,UAAA,EAAY,YAAY,0BAA0B;AAClF,kBAAc,OAAO,QAAQ,EAAE,UAAA,EAAY,YAAY,sBAAsB;AAC7E,kBAAc,OAAO,YAAY,EAAE,cAAA,EAAgB,YAAY,mCAAmC;AAClG,kBAAc,OAAO,QAAQ,EAAE,cAAA,EAAgB,YAAY,iCAAiC;AAC5F,kBAAc,OAAO,eAAe,EAAE,cAAA,EAAgB,YAAY,mDAAmD;AACrH,kBAAc,OAAO,cAAc,EAAE,cAAA,EAAgB,YAAY,+EAA+E;AAChJ,kBAAc,OAAO,eAAe,EAAE,cAAA,EAAgB,YAAY,+DAA+D;AACjI,kBAAc,OAAO,gBAAgB,EAAE,cAAA,EAAgB,YAAY,+DAA+D;AAClI,kBAAc,OAAO,OAAO,EAAE,cAAA,EAAgB,YAAY,kDAAkD;AAC5G,kBAAc,OAAO,QAAQ,EAAE,cAAA,EAAgB,YAAY,qEAAqE;AAAA,EACjI;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAA+B;AACnF,UAAM,QAAQ,qBAAqB,MAAM,UAAU,OAAO,CAAC;AAC3D,UAAM,SAAS,sBAAsB,MAAM,UAAU,QAAQ,CAAC,KAAK;AACnE,UAAM,SAAS,KAAK,WAAW,KAAK;AAEpC,UAAM,OAAO,MAAM,KAAK,qBAAqB,OAAA,EAAS,YAAY;AAAA,MACjE,QAAQ,OAAO,OAAO,MAAM,EAAE,KAAK,CAAA,OAAM,OAAO,MAAS,IAAI,SAAS;AAAA,MACtE;AAAA,MACA;AAAA,IAAA,CACA;AAED,UAAM,iBAAiB,SAAS,KAAK,QAAQ;AAC7C,UAAM,cAAc,KAAK,WAAW,KAAK,QAAQ,SAAS,KAAK,kBAAkB;AACjF,UAAM,SAA4B;AAAA,MACjC,SAAS,KAAK;AAAA,MACd,SAAS;AAAA,MACT;AAAA,MACA,YAAY,cAAc,iBAAiB;AAAA,IAAA;AAE5C,WAAO,KAAK,YAAY,KAAK,QAAQ,MAAM,wBAAwB,MAAM,GAAG,OAAO,UAAU,qBAAqB,EAAE,EAAE;AACtH,WAAO,KAAK,QAAQ,EAAE,OAAO,aAAa,OAAO,CAAA,UAAS,MAAM,QAAQ,IAAI,CAAA,UAAS,MAAM,EAAE,GAAG;AAAA,EACjG;AAAA,EAEQ,WAAW,OAA4C;AAC9D,UAAM,cAAc,MAAM,UAAU,SAAS,MAAM;AACnD,UAAM,aAAa,MAAM,UAAU,QAAQ,MAAM;AACjD,QAAI,eAAe,YAAY;AAC9B,YAAM,WAAW,gDAAgD,iBAAiB;AAAA,IACnF;AACA,WAAO;AAAA,MACN,OAAO,MAAM,UAAU,MAAM;AAAA,MAC7B,SAAS,cAAc,OAAO,aAAa,QAAQ;AAAA,MACnD,qBAAqB,MAAM,UAAU,YAAY;AAAA,MACjD,UAAU,MAAM,UAAU,QAAQ;AAAA,MAClC,gBAAgB,MAAM,UAAU,eAAe;AAAA,MAC/C,uBAAuB,MAAM,UAAU,cAAc;AAAA,MACrD,cAAc,MAAM,UAAU,eAAe;AAAA,MAC7C,eAAe,MAAM,UAAU,gBAAgB;AAAA,IAAA;AAAA,EAEjD;AACD;AAKA,MAAM,eAAuD;AAAA,EAC5D,EAAE,OAAO,aAAa,MAAM,aAAA;AAAA,EAC5B,EAAE,OAAO,QAAQ,MAAM,OAAA;AAAA,EACvB,EAAE,OAAO,WAAW,MAAM,KAAA;AAAA,EAC1B,EAAE,OAAO,UAAU,MAAM,SAAA;AAAA,EACzB,EAAE,OAAO,YAAY,MAAM,WAAA;AAAA,EAC3B,EAAE,OAAO,MAAM,MAAM,KAAA;AAAA,EACrB,EAAE,OAAO,SAAS,MAAM,QAAA;AACzB;AAMA,MAAM,cAAc,CAAC,SAAoC;AACxD,MAAI,KAAK,QAAQ,WAAW,GAAG;AAC9B,WAAO;AAAA,EACR;AACA,QAAM,QAAQ,WAAW,EAAE,SAAS,gBAAgB,KAAK,QAAQ,IAAI,UAAU,CAAC;AAChF,SAAO,KAAK,UAAU,GAAG,KAAK;AAAA,+CAAkD,KAAK,UAAU,MAAM;AACtG;AAEA,MAAM,aAAa,CAAC,WAA4D;AAAA,EAC/E,WAAW,gBAAgB,MAAM,SAAS;AAAA,EAC1C,MAAM,UAAU,MAAM,IAAI;AAAA,EAC1B,SAAS,MAAM,UAAU,QAAQ;AAAA,EACjC,QAAQ,UAAU,MAAM,YAAY,MAAM,yBAAyB,EAAE;AAAA,EACrE,UAAU,UAAU,MAAM,uBAAuB,EAAE;AAAA,EACnD,IAAI,UAAU,MAAM,aAAa,EAAE;AAAA,EACnC,OAAO,UAAU,MAAM,aAAa,EAAE;AACvC;AAGA,MAAM,kBAAkB,CAAC,UAA0B;AAClD,QAAM,SAAS,IAAI,KAAK,KAAK;AAC7B,SAAO,OAAO,MAAM,OAAO,SAAS,IAAI,UAAU,KAAK,IAAI,OAAO,YAAA,EAAc,QAAQ,KAAK,GAAG,EAAE,MAAM,GAAG,EAAE;AAC9G;"}

package/dist/development/src/commands/tenant/policy/TenantMailTemplateAddCommand.cjs

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const cliCommon = require("@contember/cli-common");
+const policyInput = require("./policyInput.cjs");
+const stdin = require("../../../lib/tenant/stdin.cjs");
+class TenantMailTemplateAddCommand extends cliCommon.Command {
+  constructor(tenantClientProvider, readStdin = stdin.readStdinText) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+    this.readStdin = readStdin;
+  }
+  configure(configuration) {
+    configuration.description("Add or replace a mail template. Existing templates with the same project, type and variant are overwritten.");
+    configuration.argument("type").description(`Mail type. One of: ${policyInput.mailTypeValues.join(", ")}.`);
+    configuration.option("variant").valueRequired().description("Template variant, e.g. a locale. Defaults to the unnamed variant.");
+    configuration.option("project").valueRequired().description("Project slug. Omit for a tenant-wide (global) template.");
+    configuration.option("subject").valueRequired().required().description("Mail subject.");
+    configuration.option("content").valueRequired().description("The template body as an inline string.");
+    configuration.option("content-stdin").valueNone().description("Read the template body from stdin instead of --content.");
+    configuration.option("reply-to").valueRequired().description("Reply-to address of the sent mail.");
+    configuration.option("no-layout").valueNone().description("Do not wrap the body in the default layout.");
+  }
+  async execute(input, output) {
+    const type = policyInput.parseMailType(input.getArgument("type"));
+    const variant = policyInput.parseOptionalMailTemplateSelector(input.getOption("variant"), "--variant");
+    const projectSlug = policyInput.parseOptionalMailTemplateSelector(input.getOption("project"), "--project");
+    const subject = input.getOption("subject");
+    const content = await policyInput.readTextInput({
+      label: "template body",
+      inline: input.getOption("content"),
+      inlineFlag: "--content",
+      fromStdin: input.getOption("content-stdin") === true,
+      stdinFlag: "--content-stdin",
+      allowEmpty: true
+    }, this.readStdin);
+    const template = {
+      type,
+      subject,
+      content,
+      variant,
+      projectSlug,
+      replyTo: input.getOption("reply-to"),
+      // omitted means "use the server default", which is true — only an explicit opt-out is sent
+      useLayout: input.getOption("no-layout") === true ? false : void 0
+    };
+    await this.tenantClientProvider.policy().addMailTemplate(template);
+    const ref = {
+      projectSlug: template.projectSlug ?? null,
+      type,
+      variant: template.variant ?? null
+    };
+    output.data(ref, {
+      human: (value) => `Added mail template (${policyInput.describeMailTemplate(value)}).`,
+      quiet: policyInput.formatMailTemplateRef
+    });
+  }
+}
+exports.TenantMailTemplateAddCommand = TenantMailTemplateAddCommand;
+//# sourceMappingURL=TenantMailTemplateAddCommand.cjs.map

package/dist/development/src/commands/tenant/policy/TenantMailTemplateAddCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantMailTemplateAddCommand.cjs","sources":["../../../../../../../packages/cli/src/commands/tenant/policy/TenantMailTemplateAddCommand.ts"],"sourcesContent":["import { Command, CommandConfiguration, Input, Output } from '@contember/cli-common'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport { TenantMailTemplate } from '../../../lib/tenant/tenantConfig.js'\nimport {\n\tdescribeMailTemplate,\n\tformatMailTemplateRef,\n\tMailTemplateRef,\n\tmailTypeValues,\n\tparseMailType,\n\tparseOptionalMailTemplateSelector,\n\treadTextInput,\n} from './policyInput.js'\nimport { readStdinText, StdinReader } from '../../../lib/tenant/stdin.js'\n\ntype Args = {\n\ttype: string\n}\n\ntype Options = {\n\tvariant?: string\n\tproject?: string\n\t/** Declared `required()` below, so the parser rejects the run before `execute` when it is missing. */\n\tsubject: string\n\tcontent?: string\n\t['content-stdin']?: boolean\n\t['reply-to']?: string\n\t['no-layout']?: boolean\n}\n\n/**\n * The template is upserted by the (project, type, variant) triple. Scope lives in `--project`, not in a\n * separate command: `addProjectMailTemplate` is bound to the very same resolver and is deprecated in the\n * SDL in favour of `addMailTemplate`, whose input already carries `projectSlug`.\n */\nexport class TenantMailTemplateAddCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t\tprivate readonly readStdin: StdinReader = readStdinText,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('Add or replace a mail template. Existing templates with the same project, type and variant are overwritten.')\n\t\tconfiguration.argument('type').description(`Mail type. One of: ${mailTypeValues.join(', ')}.`)\n\t\tconfiguration.option('variant').valueRequired().description('Template variant, e.g. a locale. Defaults to the unnamed variant.')\n\t\tconfiguration.option('project').valueRequired().description('Project slug. Omit for a tenant-wide (global) template.')\n\t\tconfiguration.option('subject').valueRequired().required().description('Mail subject.')\n\t\tconfiguration.option('content').valueRequired().description('The template body as an inline string.')\n\t\tconfiguration.option('content-stdin').valueNone().description('Read the template body from stdin instead of --content.')\n\t\tconfiguration.option('reply-to').valueRequired().description('Reply-to address of the sent mail.')\n\t\tconfiguration.option('no-layout').valueNone().description('Do not wrap the body in the default layout.')\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<void> {\n\t\tconst type = parseMailType(input.getArgument('type'))\n\t\tconst variant = parseOptionalMailTemplateSelector(input.getOption('variant'), '--variant')\n\t\tconst projectSlug = parseOptionalMailTemplateSelector(input.getOption('project'), '--project')\n\t\tconst subject = input.getOption('subject')\n\t\tconst content = await readTextInput({\n\t\t\tlabel: 'template body',\n\t\t\tinline: input.getOption('content'),\n\t\t\tinlineFlag: '--content',\n\t\t\tfromStdin: input.getOption('content-stdin') === true,\n\t\t\tstdinFlag: '--content-stdin',\n\t\t\tallowEmpty: true,\n\t\t}, this.readStdin)\n\n\t\tconst template: TenantMailTemplate = {\n\t\t\ttype,\n\t\t\tsubject,\n\t\t\tcontent,\n\t\t\tvariant,\n\t\t\tprojectSlug,\n\t\t\treplyTo: input.getOption('reply-to'),\n\t\t\t// omitted means \"use the server default\", which is true — only an explicit opt-out is sent\n\t\t\tuseLayout: input.getOption('no-layout') === true ? false : undefined,\n\t\t}\n\n\t\tawait this.tenantClientProvider.policy().addMailTemplate(template)\n\n\t\tconst ref: MailTemplateRef = {\n\t\t\tprojectSlug: template.projectSlug ?? null,\n\t\t\ttype,\n\t\t\tvariant: template.variant ?? null,\n\t\t}\n\t\toutput.data(ref, {\n\t\t\thuman: value => `Added mail template (${describeMailTemplate(value)}).`,\n\t\t\tquiet: formatMailTemplateRef,\n\t\t})\n\t}\n}\n"],"names":["Command","readStdinText","mailTypeValues","parseMailType","parseOptionalMailTemplateSelector","readTextInput","describeMailTemplate","formatMailTemplateRef"],"mappings":";;;;;AAkCO,MAAM,qCAAqCA,UAAAA,QAAuB;AAAA,EACxE,YACkB,sBACA,YAAyBC,qBACzC;AACD,UAAA;AAHiB,SAAA,uBAAA;AACA,SAAA,YAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,6GAA6G;AACvI,kBAAc,SAAS,MAAM,EAAE,YAAY,sBAAsBC,YAAAA,eAAe,KAAK,IAAI,CAAC,GAAG;AAC7F,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,YAAY,mEAAmE;AAC/H,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,YAAY,yDAAyD;AACrH,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,eAAe;AACtF,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,YAAY,wCAAwC;AACpG,kBAAc,OAAO,eAAe,EAAE,UAAA,EAAY,YAAY,yDAAyD;AACvH,kBAAc,OAAO,UAAU,EAAE,cAAA,EAAgB,YAAY,oCAAoC;AACjG,kBAAc,OAAO,WAAW,EAAE,UAAA,EAAY,YAAY,6CAA6C;AAAA,EACxG;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAA+B;AACnF,UAAM,OAAOC,YAAAA,cAAc,MAAM,YAAY,MAAM,CAAC;AACpD,UAAM,UAAUC,YAAAA,kCAAkC,MAAM,UAAU,SAAS,GAAG,WAAW;AACzF,UAAM,cAAcA,YAAAA,kCAAkC,MAAM,UAAU,SAAS,GAAG,WAAW;AAC7F,UAAM,UAAU,MAAM,UAAU,SAAS;AACzC,UAAM,UAAU,MAAMC,0BAAc;AAAA,MACnC,OAAO;AAAA,MACP,QAAQ,MAAM,UAAU,SAAS;AAAA,MACjC,YAAY;AAAA,MACZ,WAAW,MAAM,UAAU,eAAe,MAAM;AAAA,MAChD,WAAW;AAAA,MACX,YAAY;AAAA,IAAA,GACV,KAAK,SAAS;AAEjB,UAAM,WAA+B;AAAA,MACpC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,MAAM,UAAU,UAAU;AAAA;AAAA,MAEnC,WAAW,MAAM,UAAU,WAAW,MAAM,OAAO,QAAQ;AAAA,IAAA;AAG5D,UAAM,KAAK,qBAAqB,OAAA,EAAS,gBAAgB,QAAQ;AAEjE,UAAM,MAAuB;AAAA,MAC5B,aAAa,SAAS,eAAe;AAAA,MACrC;AAAA,MACA,SAAS,SAAS,WAAW;AAAA,IAAA;AAE9B,WAAO,KAAK,KAAK;AAAA,MAChB,OAAO,CAAA,UAAS,wBAAwBC,YAAAA,qBAAqB,KAAK,CAAC;AAAA,MACnE,OAAOC,YAAAA;AAAAA,IAAA,CACP;AAAA,EACF;AACD;;"}

package/dist/development/src/commands/tenant/policy/TenantMailTemplateAddCommand.js

@@ -0,0 +1,59 @@
+import { Command } from "@contember/cli-common";
+import { mailTypeValues, parseMailType, parseOptionalMailTemplateSelector, readTextInput, formatMailTemplateRef, describeMailTemplate } from "./policyInput.js";
+import { readStdinText } from "../../../lib/tenant/stdin.js";
+class TenantMailTemplateAddCommand extends Command {
+  constructor(tenantClientProvider, readStdin = readStdinText) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+    this.readStdin = readStdin;
+  }
+  configure(configuration) {
+    configuration.description("Add or replace a mail template. Existing templates with the same project, type and variant are overwritten.");
+    configuration.argument("type").description(`Mail type. One of: ${mailTypeValues.join(", ")}.`);
+    configuration.option("variant").valueRequired().description("Template variant, e.g. a locale. Defaults to the unnamed variant.");
+    configuration.option("project").valueRequired().description("Project slug. Omit for a tenant-wide (global) template.");
+    configuration.option("subject").valueRequired().required().description("Mail subject.");
+    configuration.option("content").valueRequired().description("The template body as an inline string.");
+    configuration.option("content-stdin").valueNone().description("Read the template body from stdin instead of --content.");
+    configuration.option("reply-to").valueRequired().description("Reply-to address of the sent mail.");
+    configuration.option("no-layout").valueNone().description("Do not wrap the body in the default layout.");
+  }
+  async execute(input, output) {
+    const type = parseMailType(input.getArgument("type"));
+    const variant = parseOptionalMailTemplateSelector(input.getOption("variant"), "--variant");
+    const projectSlug = parseOptionalMailTemplateSelector(input.getOption("project"), "--project");
+    const subject = input.getOption("subject");
+    const content = await readTextInput({
+      label: "template body",
+      inline: input.getOption("content"),
+      inlineFlag: "--content",
+      fromStdin: input.getOption("content-stdin") === true,
+      stdinFlag: "--content-stdin",
+      allowEmpty: true
+    }, this.readStdin);
+    const template = {
+      type,
+      subject,
+      content,
+      variant,
+      projectSlug,
+      replyTo: input.getOption("reply-to"),
+      // omitted means "use the server default", which is true — only an explicit opt-out is sent
+      useLayout: input.getOption("no-layout") === true ? false : void 0
+    };
+    await this.tenantClientProvider.policy().addMailTemplate(template);
+    const ref = {
+      projectSlug: template.projectSlug ?? null,
+      type,
+      variant: template.variant ?? null
+    };
+    output.data(ref, {
+      human: (value) => `Added mail template (${describeMailTemplate(value)}).`,
+      quiet: formatMailTemplateRef
+    });
+  }
+}
+export {
+  TenantMailTemplateAddCommand
+};
+//# sourceMappingURL=TenantMailTemplateAddCommand.js.map

package/dist/development/src/commands/tenant/policy/TenantMailTemplateAddCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantMailTemplateAddCommand.js","sources":["../../../../../../../packages/cli/src/commands/tenant/policy/TenantMailTemplateAddCommand.ts"],"sourcesContent":["import { Command, CommandConfiguration, Input, Output } from '@contember/cli-common'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport { TenantMailTemplate } from '../../../lib/tenant/tenantConfig.js'\nimport {\n\tdescribeMailTemplate,\n\tformatMailTemplateRef,\n\tMailTemplateRef,\n\tmailTypeValues,\n\tparseMailType,\n\tparseOptionalMailTemplateSelector,\n\treadTextInput,\n} from './policyInput.js'\nimport { readStdinText, StdinReader } from '../../../lib/tenant/stdin.js'\n\ntype Args = {\n\ttype: string\n}\n\ntype Options = {\n\tvariant?: string\n\tproject?: string\n\t/** Declared `required()` below, so the parser rejects the run before `execute` when it is missing. */\n\tsubject: string\n\tcontent?: string\n\t['content-stdin']?: boolean\n\t['reply-to']?: string\n\t['no-layout']?: boolean\n}\n\n/**\n * The template is upserted by the (project, type, variant) triple. Scope lives in `--project`, not in a\n * separate command: `addProjectMailTemplate` is bound to the very same resolver and is deprecated in the\n * SDL in favour of `addMailTemplate`, whose input already carries `projectSlug`.\n */\nexport class TenantMailTemplateAddCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t\tprivate readonly readStdin: StdinReader = readStdinText,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('Add or replace a mail template. Existing templates with the same project, type and variant are overwritten.')\n\t\tconfiguration.argument('type').description(`Mail type. One of: ${mailTypeValues.join(', ')}.`)\n\t\tconfiguration.option('variant').valueRequired().description('Template variant, e.g. a locale. Defaults to the unnamed variant.')\n\t\tconfiguration.option('project').valueRequired().description('Project slug. Omit for a tenant-wide (global) template.')\n\t\tconfiguration.option('subject').valueRequired().required().description('Mail subject.')\n\t\tconfiguration.option('content').valueRequired().description('The template body as an inline string.')\n\t\tconfiguration.option('content-stdin').valueNone().description('Read the template body from stdin instead of --content.')\n\t\tconfiguration.option('reply-to').valueRequired().description('Reply-to address of the sent mail.')\n\t\tconfiguration.option('no-layout').valueNone().description('Do not wrap the body in the default layout.')\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<void> {\n\t\tconst type = parseMailType(input.getArgument('type'))\n\t\tconst variant = parseOptionalMailTemplateSelector(input.getOption('variant'), '--variant')\n\t\tconst projectSlug = parseOptionalMailTemplateSelector(input.getOption('project'), '--project')\n\t\tconst subject = input.getOption('subject')\n\t\tconst content = await readTextInput({\n\t\t\tlabel: 'template body',\n\t\t\tinline: input.getOption('content'),\n\t\t\tinlineFlag: '--content',\n\t\t\tfromStdin: input.getOption('content-stdin') === true,\n\t\t\tstdinFlag: '--content-stdin',\n\t\t\tallowEmpty: true,\n\t\t}, this.readStdin)\n\n\t\tconst template: TenantMailTemplate = {\n\t\t\ttype,\n\t\t\tsubject,\n\t\t\tcontent,\n\t\t\tvariant,\n\t\t\tprojectSlug,\n\t\t\treplyTo: input.getOption('reply-to'),\n\t\t\t// omitted means \"use the server default\", which is true — only an explicit opt-out is sent\n\t\t\tuseLayout: input.getOption('no-layout') === true ? false : undefined,\n\t\t}\n\n\t\tawait this.tenantClientProvider.policy().addMailTemplate(template)\n\n\t\tconst ref: MailTemplateRef = {\n\t\t\tprojectSlug: template.projectSlug ?? null,\n\t\t\ttype,\n\t\t\tvariant: template.variant ?? null,\n\t\t}\n\t\toutput.data(ref, {\n\t\t\thuman: value => `Added mail template (${describeMailTemplate(value)}).`,\n\t\t\tquiet: formatMailTemplateRef,\n\t\t})\n\t}\n}\n"],"names":[],"mappings":";;;AAkCO,MAAM,qCAAqC,QAAuB;AAAA,EACxE,YACkB,sBACA,YAAyB,eACzC;AACD,UAAA;AAHiB,SAAA,uBAAA;AACA,SAAA,YAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,6GAA6G;AACvI,kBAAc,SAAS,MAAM,EAAE,YAAY,sBAAsB,eAAe,KAAK,IAAI,CAAC,GAAG;AAC7F,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,YAAY,mEAAmE;AAC/H,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,YAAY,yDAAyD;AACrH,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,SAAA,EAAW,YAAY,eAAe;AACtF,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,YAAY,wCAAwC;AACpG,kBAAc,OAAO,eAAe,EAAE,UAAA,EAAY,YAAY,yDAAyD;AACvH,kBAAc,OAAO,UAAU,EAAE,cAAA,EAAgB,YAAY,oCAAoC;AACjG,kBAAc,OAAO,WAAW,EAAE,UAAA,EAAY,YAAY,6CAA6C;AAAA,EACxG;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAA+B;AACnF,UAAM,OAAO,cAAc,MAAM,YAAY,MAAM,CAAC;AACpD,UAAM,UAAU,kCAAkC,MAAM,UAAU,SAAS,GAAG,WAAW;AACzF,UAAM,cAAc,kCAAkC,MAAM,UAAU,SAAS,GAAG,WAAW;AAC7F,UAAM,UAAU,MAAM,UAAU,SAAS;AACzC,UAAM,UAAU,MAAM,cAAc;AAAA,MACnC,OAAO;AAAA,MACP,QAAQ,MAAM,UAAU,SAAS;AAAA,MACjC,YAAY;AAAA,MACZ,WAAW,MAAM,UAAU,eAAe,MAAM;AAAA,MAChD,WAAW;AAAA,MACX,YAAY;AAAA,IAAA,GACV,KAAK,SAAS;AAEjB,UAAM,WAA+B;AAAA,MACpC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,MAAM,UAAU,UAAU;AAAA;AAAA,MAEnC,WAAW,MAAM,UAAU,WAAW,MAAM,OAAO,QAAQ;AAAA,IAAA;AAG5D,UAAM,KAAK,qBAAqB,OAAA,EAAS,gBAAgB,QAAQ;AAEjE,UAAM,MAAuB;AAAA,MAC5B,aAAa,SAAS,eAAe;AAAA,MACrC;AAAA,MACA,SAAS,SAAS,WAAW;AAAA,IAAA;AAE9B,WAAO,KAAK,KAAK;AAAA,MAChB,OAAO,CAAA,UAAS,wBAAwB,qBAAqB,KAAK,CAAC;AAAA,MACnE,OAAO;AAAA,IAAA,CACP;AAAA,EACF;AACD;"}

package/dist/development/src/commands/tenant/policy/TenantMailTemplateListCommand.cjs

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const cliCommon = require("@contember/cli-common");
+const tenantOutput = require("../tenantOutput.cjs");
+const policyInput = require("./policyInput.cjs");
+const CONTENT_PREVIEW_LENGTH = 40;
+const previewContent = (value) => {
+  const singleLine = tenantOutput.humanText(value).replace(/\s+/g, " ").trim();
+  return singleLine.length > CONTENT_PREVIEW_LENGTH ? `${singleLine.slice(0, CONTENT_PREVIEW_LENGTH - 1)}…` : singleLine;
+};
+const columns = [
+  { field: "projectSlug", name: "Project" },
+  { field: "type", name: "Type" },
+  { field: "variant", name: "Variant" },
+  { field: "subject", name: "Subject" },
+  { field: "useLayout", name: "Layout" },
+  { field: "replyTo", name: "Reply to" },
+  { field: "content", name: "Content", format: previewContent }
+];
+class TenantMailTemplateListCommand extends cliCommon.Command {
+  constructor(tenantClientProvider) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+  }
+  configure(configuration) {
+    configuration.description("List the configured mail templates, global and project-scoped.");
+  }
+  async execute(input, output) {
+    const templates = await this.tenantClientProvider.policy().listMailTemplates();
+    if (output.isQuiet) {
+      output.data(templates, { quiet: (rows) => rows.map(policyInput.formatMailTemplateRef) });
+      return;
+    }
+    output.table(columns, templates, "type");
+    if (templates.length === 0) {
+      output.info("No mail templates are configured. The built-in ones are used.");
+    }
+  }
+}
+exports.TenantMailTemplateListCommand = TenantMailTemplateListCommand;
+//# sourceMappingURL=TenantMailTemplateListCommand.cjs.map

package/dist/development/src/commands/tenant/policy/TenantMailTemplateListCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantMailTemplateListCommand.cjs","sources":["../../../../../../../packages/cli/src/commands/tenant/policy/TenantMailTemplateListCommand.ts"],"sourcesContent":["import { Command, CommandConfiguration, Input, Output, OutputTableColumn } from '@contember/cli-common'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport { TenantMailTemplateData } from '../../../lib/tenant/clients/index.js'\nimport { humanText } from '../tenantOutput.js'\nimport { formatMailTemplateRef } from './policyInput.js'\n\ntype Args = {}\ntype Options = {}\n\nconst CONTENT_PREVIEW_LENGTH = 40\n\n/** Human mode only — a full Mustache body would make the table unreadable. `--json` keeps it whole. */\nconst previewContent = (value: string): string => {\n\tconst singleLine = humanText(value).replace(/\\s+/g, ' ').trim()\n\treturn singleLine.length > CONTENT_PREVIEW_LENGTH ? `${singleLine.slice(0, CONTENT_PREVIEW_LENGTH - 1)}…` : singleLine\n}\n\nconst columns: OutputTableColumn<TenantMailTemplateData>[] = [\n\t{ field: 'projectSlug', name: 'Project' },\n\t{ field: 'type', name: 'Type' },\n\t{ field: 'variant', name: 'Variant' },\n\t{ field: 'subject', name: 'Subject' },\n\t{ field: 'useLayout', name: 'Layout' },\n\t{ field: 'replyTo', name: 'Reply to' },\n\t{ field: 'content', name: 'Content', format: previewContent },\n]\n\nexport class TenantMailTemplateListCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('List the configured mail templates, global and project-scoped.')\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<void> {\n\t\tconst templates = await this.tenantClientProvider.policy().listMailTemplates()\n\t\tif (output.isQuiet) {\n\t\t\toutput.data(templates, { quiet: rows => rows.map(formatMailTemplateRef) })\n\t\t\treturn\n\t\t}\n\t\toutput.table(columns, templates, 'type')\n\t\tif (templates.length === 0) {\n\t\t\toutput.info('No mail templates are configured. The built-in ones are used.')\n\t\t}\n\t}\n}\n"],"names":["humanText","Command","formatMailTemplateRef"],"mappings":";;;;;AASA,MAAM,yBAAyB;AAG/B,MAAM,iBAAiB,CAAC,UAA0B;AACjD,QAAM,aAAaA,aAAAA,UAAU,KAAK,EAAE,QAAQ,QAAQ,GAAG,EAAE,KAAA;AACzD,SAAO,WAAW,SAAS,yBAAyB,GAAG,WAAW,MAAM,GAAG,yBAAyB,CAAC,CAAC,MAAM;AAC7G;AAEA,MAAM,UAAuD;AAAA,EAC5D,EAAE,OAAO,eAAe,MAAM,UAAA;AAAA,EAC9B,EAAE,OAAO,QAAQ,MAAM,OAAA;AAAA,EACvB,EAAE,OAAO,WAAW,MAAM,UAAA;AAAA,EAC1B,EAAE,OAAO,WAAW,MAAM,UAAA;AAAA,EAC1B,EAAE,OAAO,aAAa,MAAM,SAAA;AAAA,EAC5B,EAAE,OAAO,WAAW,MAAM,WAAA;AAAA,EAC1B,EAAE,OAAO,WAAW,MAAM,WAAW,QAAQ,eAAA;AAC9C;AAEO,MAAM,sCAAsCC,UAAAA,QAAuB;AAAA,EACzE,YACkB,sBAChB;AACD,UAAA;AAFiB,SAAA,uBAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,gEAAgE;AAAA,EAC3F;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAA+B;AACnF,UAAM,YAAY,MAAM,KAAK,qBAAqB,OAAA,EAAS,kBAAA;AAC3D,QAAI,OAAO,SAAS;AACnB,aAAO,KAAK,WAAW,EAAE,OAAO,UAAQ,KAAK,IAAIC,YAAAA,qBAAqB,GAAG;AACzE;AAAA,IACD;AACA,WAAO,MAAM,SAAS,WAAW,MAAM;AACvC,QAAI,UAAU,WAAW,GAAG;AAC3B,aAAO,KAAK,+DAA+D;AAAA,IAC5E;AAAA,EACD;AACD;;"}

package/dist/development/src/commands/tenant/policy/TenantMailTemplateListCommand.js

@@ -0,0 +1,41 @@
+import { Command } from "@contember/cli-common";
+import { humanText } from "../tenantOutput.js";
+import { formatMailTemplateRef } from "./policyInput.js";
+const CONTENT_PREVIEW_LENGTH = 40;
+const previewContent = (value) => {
+  const singleLine = humanText(value).replace(/\s+/g, " ").trim();
+  return singleLine.length > CONTENT_PREVIEW_LENGTH ? `${singleLine.slice(0, CONTENT_PREVIEW_LENGTH - 1)}…` : singleLine;
+};
+const columns = [
+  { field: "projectSlug", name: "Project" },
+  { field: "type", name: "Type" },
+  { field: "variant", name: "Variant" },
+  { field: "subject", name: "Subject" },
+  { field: "useLayout", name: "Layout" },
+  { field: "replyTo", name: "Reply to" },
+  { field: "content", name: "Content", format: previewContent }
+];
+class TenantMailTemplateListCommand extends Command {
+  constructor(tenantClientProvider) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+  }
+  configure(configuration) {
+    configuration.description("List the configured mail templates, global and project-scoped.");
+  }
+  async execute(input, output) {
+    const templates = await this.tenantClientProvider.policy().listMailTemplates();
+    if (output.isQuiet) {
+      output.data(templates, { quiet: (rows) => rows.map(formatMailTemplateRef) });
+      return;
+    }
+    output.table(columns, templates, "type");
+    if (templates.length === 0) {
+      output.info("No mail templates are configured. The built-in ones are used.");
+    }
+  }
+}
+export {
+  TenantMailTemplateListCommand
+};
+//# sourceMappingURL=TenantMailTemplateListCommand.js.map

package/dist/development/src/commands/tenant/policy/TenantMailTemplateListCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantMailTemplateListCommand.js","sources":["../../../../../../../packages/cli/src/commands/tenant/policy/TenantMailTemplateListCommand.ts"],"sourcesContent":["import { Command, CommandConfiguration, Input, Output, OutputTableColumn } from '@contember/cli-common'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport { TenantMailTemplateData } from '../../../lib/tenant/clients/index.js'\nimport { humanText } from '../tenantOutput.js'\nimport { formatMailTemplateRef } from './policyInput.js'\n\ntype Args = {}\ntype Options = {}\n\nconst CONTENT_PREVIEW_LENGTH = 40\n\n/** Human mode only — a full Mustache body would make the table unreadable. `--json` keeps it whole. */\nconst previewContent = (value: string): string => {\n\tconst singleLine = humanText(value).replace(/\\s+/g, ' ').trim()\n\treturn singleLine.length > CONTENT_PREVIEW_LENGTH ? `${singleLine.slice(0, CONTENT_PREVIEW_LENGTH - 1)}…` : singleLine\n}\n\nconst columns: OutputTableColumn<TenantMailTemplateData>[] = [\n\t{ field: 'projectSlug', name: 'Project' },\n\t{ field: 'type', name: 'Type' },\n\t{ field: 'variant', name: 'Variant' },\n\t{ field: 'subject', name: 'Subject' },\n\t{ field: 'useLayout', name: 'Layout' },\n\t{ field: 'replyTo', name: 'Reply to' },\n\t{ field: 'content', name: 'Content', format: previewContent },\n]\n\nexport class TenantMailTemplateListCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('List the configured mail templates, global and project-scoped.')\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<void> {\n\t\tconst templates = await this.tenantClientProvider.policy().listMailTemplates()\n\t\tif (output.isQuiet) {\n\t\t\toutput.data(templates, { quiet: rows => rows.map(formatMailTemplateRef) })\n\t\t\treturn\n\t\t}\n\t\toutput.table(columns, templates, 'type')\n\t\tif (templates.length === 0) {\n\t\t\toutput.info('No mail templates are configured. The built-in ones are used.')\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;AASA,MAAM,yBAAyB;AAG/B,MAAM,iBAAiB,CAAC,UAA0B;AACjD,QAAM,aAAa,UAAU,KAAK,EAAE,QAAQ,QAAQ,GAAG,EAAE,KAAA;AACzD,SAAO,WAAW,SAAS,yBAAyB,GAAG,WAAW,MAAM,GAAG,yBAAyB,CAAC,CAAC,MAAM;AAC7G;AAEA,MAAM,UAAuD;AAAA,EAC5D,EAAE,OAAO,eAAe,MAAM,UAAA;AAAA,EAC9B,EAAE,OAAO,QAAQ,MAAM,OAAA;AAAA,EACvB,EAAE,OAAO,WAAW,MAAM,UAAA;AAAA,EAC1B,EAAE,OAAO,WAAW,MAAM,UAAA;AAAA,EAC1B,EAAE,OAAO,aAAa,MAAM,SAAA;AAAA,EAC5B,EAAE,OAAO,WAAW,MAAM,WAAA;AAAA,EAC1B,EAAE,OAAO,WAAW,MAAM,WAAW,QAAQ,eAAA;AAC9C;AAEO,MAAM,sCAAsC,QAAuB;AAAA,EACzE,YACkB,sBAChB;AACD,UAAA;AAFiB,SAAA,uBAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,gEAAgE;AAAA,EAC3F;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAA+B;AACnF,UAAM,YAAY,MAAM,KAAK,qBAAqB,OAAA,EAAS,kBAAA;AAC3D,QAAI,OAAO,SAAS;AACnB,aAAO,KAAK,WAAW,EAAE,OAAO,UAAQ,KAAK,IAAI,qBAAqB,GAAG;AACzE;AAAA,IACD;AACA,WAAO,MAAM,SAAS,WAAW,MAAM;AACvC,QAAI,UAAU,WAAW,GAAG;AAC3B,aAAO,KAAK,+DAA+D;AAAA,IAC5E;AAAA,EACD;AACD;"}

package/dist/development/src/commands/tenant/policy/TenantMailTemplateRemoveCommand.cjs

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const cliCommon = require("@contember/cli-common");
+const confirmation = require("../../../lib/tenant/confirmation.cjs");
+const policyInput = require("./policyInput.cjs");
+class TenantMailTemplateRemoveCommand extends cliCommon.Command {
+  constructor(tenantClientProvider) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+  }
+  configure(configuration) {
+    configuration.description("Remove a mail template, so the built-in one is used again.");
+    configuration.argument("type").description(`Mail type. One of: ${policyInput.mailTypeValues.join(", ")}.`);
+    configuration.option("variant").valueRequired().description("Template variant, e.g. a locale. Defaults to the unnamed variant.");
+    configuration.option("project").valueRequired().description("Project slug. Omit to address the tenant-wide (global) template.");
+    configuration.option("yes").valueNone().description("Do not ask for confirmation.");
+  }
+  async execute(input, output) {
+    const ref = {
+      projectSlug: policyInput.parseOptionalMailTemplateSelector(input.getOption("project"), "--project") ?? null,
+      type: policyInput.parseMailType(input.getArgument("type")),
+      variant: policyInput.parseOptionalMailTemplateSelector(input.getOption("variant"), "--variant") ?? null
+    };
+    const description = policyInput.describeMailTemplate(ref);
+    await confirmation.requireConfirmation({
+      yes: input.getOption("yes") === true,
+      output,
+      warning: `Mail template (${description}) will be removed and the built-in one used instead.`
+    });
+    await this.tenantClientProvider.policy().removeMailTemplate({
+      projectSlug: ref.projectSlug ?? void 0,
+      type: ref.type,
+      variant: ref.variant ?? void 0
+    });
+    output.data(ref, {
+      human: (value) => `Removed mail template (${policyInput.describeMailTemplate(value)}).`,
+      quiet: policyInput.formatMailTemplateRef
+    });
+  }
+}
+exports.TenantMailTemplateRemoveCommand = TenantMailTemplateRemoveCommand;
+//# sourceMappingURL=TenantMailTemplateRemoveCommand.cjs.map

package/dist/development/src/commands/tenant/policy/TenantMailTemplateRemoveCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantMailTemplateRemoveCommand.cjs","sources":["../../../../../../../packages/cli/src/commands/tenant/policy/TenantMailTemplateRemoveCommand.ts"],"sourcesContent":["import { Command, CommandConfiguration, Input, Output } from '@contember/cli-common'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport { requireConfirmation } from '../../../lib/tenant/confirmation.js'\nimport {\n\tdescribeMailTemplate,\n\tformatMailTemplateRef,\n\tMailTemplateRef,\n\tmailTypeValues,\n\tparseMailType,\n\tparseOptionalMailTemplateSelector,\n} from './policyInput.js'\n\ntype Args = {\n\ttype: string\n}\n\ntype Options = {\n\tvariant?: string\n\tproject?: string\n\tyes?: boolean\n}\n\n/** Counterpart of `mail-template add` — the same (project, type, variant) triple addresses the row. */\nexport class TenantMailTemplateRemoveCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('Remove a mail template, so the built-in one is used again.')\n\t\tconfiguration.argument('type').description(`Mail type. One of: ${mailTypeValues.join(', ')}.`)\n\t\tconfiguration.option('variant').valueRequired().description('Template variant, e.g. a locale. Defaults to the unnamed variant.')\n\t\tconfiguration.option('project').valueRequired().description('Project slug. Omit to address the tenant-wide (global) template.')\n\t\tconfiguration.option('yes').valueNone().description('Do not ask for confirmation.')\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<void> {\n\t\tconst ref: MailTemplateRef = {\n\t\t\tprojectSlug: parseOptionalMailTemplateSelector(input.getOption('project'), '--project') ?? null,\n\t\t\ttype: parseMailType(input.getArgument('type')),\n\t\t\tvariant: parseOptionalMailTemplateSelector(input.getOption('variant'), '--variant') ?? null,\n\t\t}\n\t\tconst description = describeMailTemplate(ref)\n\t\tawait requireConfirmation({\n\t\t\tyes: input.getOption('yes') === true,\n\t\t\toutput,\n\t\t\twarning: `Mail template (${description}) will be removed and the built-in one used instead.`,\n\t\t})\n\n\t\tawait this.tenantClientProvider.policy().removeMailTemplate({\n\t\t\tprojectSlug: ref.projectSlug ?? undefined,\n\t\t\ttype: ref.type,\n\t\t\tvariant: ref.variant ?? undefined,\n\t\t})\n\n\t\toutput.data(ref, {\n\t\t\thuman: value => `Removed mail template (${describeMailTemplate(value)}).`,\n\t\t\tquiet: formatMailTemplateRef,\n\t\t})\n\t}\n}\n"],"names":["Command","mailTypeValues","parseOptionalMailTemplateSelector","parseMailType","describeMailTemplate","requireConfirmation","formatMailTemplateRef"],"mappings":";;;;;AAuBO,MAAM,wCAAwCA,UAAAA,QAAuB;AAAA,EAC3E,YACkB,sBAChB;AACD,UAAA;AAFiB,SAAA,uBAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,4DAA4D;AACtF,kBAAc,SAAS,MAAM,EAAE,YAAY,sBAAsBC,YAAAA,eAAe,KAAK,IAAI,CAAC,GAAG;AAC7F,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,YAAY,mEAAmE;AAC/H,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,YAAY,kEAAkE;AAC9H,kBAAc,OAAO,KAAK,EAAE,UAAA,EAAY,YAAY,8BAA8B;AAAA,EACnF;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAA+B;AACnF,UAAM,MAAuB;AAAA,MAC5B,aAAaC,YAAAA,kCAAkC,MAAM,UAAU,SAAS,GAAG,WAAW,KAAK;AAAA,MAC3F,MAAMC,YAAAA,cAAc,MAAM,YAAY,MAAM,CAAC;AAAA,MAC7C,SAASD,YAAAA,kCAAkC,MAAM,UAAU,SAAS,GAAG,WAAW,KAAK;AAAA,IAAA;AAExF,UAAM,cAAcE,YAAAA,qBAAqB,GAAG;AAC5C,UAAMC,iCAAoB;AAAA,MACzB,KAAK,MAAM,UAAU,KAAK,MAAM;AAAA,MAChC;AAAA,MACA,SAAS,kBAAkB,WAAW;AAAA,IAAA,CACtC;AAED,UAAM,KAAK,qBAAqB,OAAA,EAAS,mBAAmB;AAAA,MAC3D,aAAa,IAAI,eAAe;AAAA,MAChC,MAAM,IAAI;AAAA,MACV,SAAS,IAAI,WAAW;AAAA,IAAA,CACxB;AAED,WAAO,KAAK,KAAK;AAAA,MAChB,OAAO,CAAA,UAAS,0BAA0BD,YAAAA,qBAAqB,KAAK,CAAC;AAAA,MACrE,OAAOE,YAAAA;AAAAA,IAAA,CACP;AAAA,EACF;AACD;;"}

package/dist/development/src/commands/tenant/policy/TenantMailTemplateRemoveCommand.js

@@ -0,0 +1,42 @@
+import { Command } from "@contember/cli-common";
+import { requireConfirmation } from "../../../lib/tenant/confirmation.js";
+import { mailTypeValues, parseOptionalMailTemplateSelector, parseMailType, describeMailTemplate, formatMailTemplateRef } from "./policyInput.js";
+class TenantMailTemplateRemoveCommand extends Command {
+  constructor(tenantClientProvider) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+  }
+  configure(configuration) {
+    configuration.description("Remove a mail template, so the built-in one is used again.");
+    configuration.argument("type").description(`Mail type. One of: ${mailTypeValues.join(", ")}.`);
+    configuration.option("variant").valueRequired().description("Template variant, e.g. a locale. Defaults to the unnamed variant.");
+    configuration.option("project").valueRequired().description("Project slug. Omit to address the tenant-wide (global) template.");
+    configuration.option("yes").valueNone().description("Do not ask for confirmation.");
+  }
+  async execute(input, output) {
+    const ref = {
+      projectSlug: parseOptionalMailTemplateSelector(input.getOption("project"), "--project") ?? null,
+      type: parseMailType(input.getArgument("type")),
+      variant: parseOptionalMailTemplateSelector(input.getOption("variant"), "--variant") ?? null
+    };
+    const description = describeMailTemplate(ref);
+    await requireConfirmation({
+      yes: input.getOption("yes") === true,
+      output,
+      warning: `Mail template (${description}) will be removed and the built-in one used instead.`
+    });
+    await this.tenantClientProvider.policy().removeMailTemplate({
+      projectSlug: ref.projectSlug ?? void 0,
+      type: ref.type,
+      variant: ref.variant ?? void 0
+    });
+    output.data(ref, {
+      human: (value) => `Removed mail template (${describeMailTemplate(value)}).`,
+      quiet: formatMailTemplateRef
+    });
+  }
+}
+export {
+  TenantMailTemplateRemoveCommand
+};
+//# sourceMappingURL=TenantMailTemplateRemoveCommand.js.map

package/dist/development/src/commands/tenant/policy/TenantMailTemplateRemoveCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantMailTemplateRemoveCommand.js","sources":["../../../../../../../packages/cli/src/commands/tenant/policy/TenantMailTemplateRemoveCommand.ts"],"sourcesContent":["import { Command, CommandConfiguration, Input, Output } from '@contember/cli-common'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport { requireConfirmation } from '../../../lib/tenant/confirmation.js'\nimport {\n\tdescribeMailTemplate,\n\tformatMailTemplateRef,\n\tMailTemplateRef,\n\tmailTypeValues,\n\tparseMailType,\n\tparseOptionalMailTemplateSelector,\n} from './policyInput.js'\n\ntype Args = {\n\ttype: string\n}\n\ntype Options = {\n\tvariant?: string\n\tproject?: string\n\tyes?: boolean\n}\n\n/** Counterpart of `mail-template add` — the same (project, type, variant) triple addresses the row. */\nexport class TenantMailTemplateRemoveCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('Remove a mail template, so the built-in one is used again.')\n\t\tconfiguration.argument('type').description(`Mail type. One of: ${mailTypeValues.join(', ')}.`)\n\t\tconfiguration.option('variant').valueRequired().description('Template variant, e.g. a locale. Defaults to the unnamed variant.')\n\t\tconfiguration.option('project').valueRequired().description('Project slug. Omit to address the tenant-wide (global) template.')\n\t\tconfiguration.option('yes').valueNone().description('Do not ask for confirmation.')\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<void> {\n\t\tconst ref: MailTemplateRef = {\n\t\t\tprojectSlug: parseOptionalMailTemplateSelector(input.getOption('project'), '--project') ?? null,\n\t\t\ttype: parseMailType(input.getArgument('type')),\n\t\t\tvariant: parseOptionalMailTemplateSelector(input.getOption('variant'), '--variant') ?? null,\n\t\t}\n\t\tconst description = describeMailTemplate(ref)\n\t\tawait requireConfirmation({\n\t\t\tyes: input.getOption('yes') === true,\n\t\t\toutput,\n\t\t\twarning: `Mail template (${description}) will be removed and the built-in one used instead.`,\n\t\t})\n\n\t\tawait this.tenantClientProvider.policy().removeMailTemplate({\n\t\t\tprojectSlug: ref.projectSlug ?? undefined,\n\t\t\ttype: ref.type,\n\t\t\tvariant: ref.variant ?? undefined,\n\t\t})\n\n\t\toutput.data(ref, {\n\t\t\thuman: value => `Removed mail template (${describeMailTemplate(value)}).`,\n\t\t\tquiet: formatMailTemplateRef,\n\t\t})\n\t}\n}\n"],"names":[],"mappings":";;;AAuBO,MAAM,wCAAwC,QAAuB;AAAA,EAC3E,YACkB,sBAChB;AACD,UAAA;AAFiB,SAAA,uBAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,4DAA4D;AACtF,kBAAc,SAAS,MAAM,EAAE,YAAY,sBAAsB,eAAe,KAAK,IAAI,CAAC,GAAG;AAC7F,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,YAAY,mEAAmE;AAC/H,kBAAc,OAAO,SAAS,EAAE,cAAA,EAAgB,YAAY,kEAAkE;AAC9H,kBAAc,OAAO,KAAK,EAAE,UAAA,EAAY,YAAY,8BAA8B;AAAA,EACnF;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAA+B;AACnF,UAAM,MAAuB;AAAA,MAC5B,aAAa,kCAAkC,MAAM,UAAU,SAAS,GAAG,WAAW,KAAK;AAAA,MAC3F,MAAM,cAAc,MAAM,YAAY,MAAM,CAAC;AAAA,MAC7C,SAAS,kCAAkC,MAAM,UAAU,SAAS,GAAG,WAAW,KAAK;AAAA,IAAA;AAExF,UAAM,cAAc,qBAAqB,GAAG;AAC5C,UAAM,oBAAoB;AAAA,MACzB,KAAK,MAAM,UAAU,KAAK,MAAM;AAAA,MAChC;AAAA,MACA,SAAS,kBAAkB,WAAW;AAAA,IAAA,CACtC;AAED,UAAM,KAAK,qBAAqB,OAAA,EAAS,mBAAmB;AAAA,MAC3D,aAAa,IAAI,eAAe;AAAA,MAChC,MAAM,IAAI;AAAA,MACV,SAAS,IAAI,WAAW;AAAA,IAAA,CACxB;AAED,WAAO,KAAK,KAAK;AAAA,MAChB,OAAO,CAAA,UAAS,0BAA0B,qBAAqB,KAAK,CAAC;AAAA,MACrE,OAAO;AAAA,IAAA,CACP;AAAA,EACF;AACD;"}

package/dist/development/src/commands/tenant/policy/TenantPolicyCreateCommand.cjs

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const cliCommon = require("@contember/cli-common");
+const policyInput = require("./policyInput.cjs");
+const stdin = require("../../../lib/tenant/stdin.cjs");
+const tenantOutput = require("../tenantOutput.cjs");
+class TenantPolicyCreateCommand extends cliCommon.Command {
+  constructor(tenantClientProvider, readStdin = stdin.readStdinText) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+    this.readStdin = readStdin;
+  }
+  configure(configuration) {
+    configuration.description("Create an auth policy from an AuthPolicyInput JSON document.");
+    configuration.option("policy").valueRequired().description(`The policy as JSON, e.g. '${policyInput.AUTH_POLICY_JSON_EXAMPLE}'.`);
+    configuration.option("policy-stdin").valueNone().description("Read the policy JSON from stdin instead of --policy.");
+  }
+  async execute(input, output) {
+    const policy = policyInput.parseAuthPolicyInput(
+      await policyInput.readTextInput({
+        label: "policy",
+        inline: input.getOption("policy"),
+        inlineFlag: "--policy",
+        fromStdin: input.getOption("policy-stdin") === true,
+        stdinFlag: "--policy-stdin"
+      }, this.readStdin)
+    );
+    const id = await this.tenantClientProvider.policy().createAuthPolicy(policy);
+    output.data({ id, scope: policy.scope, project: policy.project ?? null }, {
+      human: (result) => `Created auth policy ${tenantOutput.humanText(result.id)}.`,
+      quiet: (result) => result.id
+    });
+  }
+}
+exports.TenantPolicyCreateCommand = TenantPolicyCreateCommand;
+//# sourceMappingURL=TenantPolicyCreateCommand.cjs.map

package/dist/development/src/commands/tenant/policy/TenantPolicyCreateCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantPolicyCreateCommand.cjs","sources":["../../../../../../../packages/cli/src/commands/tenant/policy/TenantPolicyCreateCommand.ts"],"sourcesContent":["import { Command, CommandConfiguration, Input, Output } from '@contember/cli-common'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport { AUTH_POLICY_JSON_EXAMPLE, parseAuthPolicyInput, readTextInput } from './policyInput.js'\nimport { readStdinText, StdinReader } from '../../../lib/tenant/stdin.js'\nimport { humanText } from '../tenantOutput.js'\n\ntype Args = {}\n\ntype Options = {\n\tpolicy?: string\n\t['policy-stdin']?: boolean\n}\n\nexport class TenantPolicyCreateCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t\tprivate readonly readStdin: StdinReader = readStdinText,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('Create an auth policy from an AuthPolicyInput JSON document.')\n\t\tconfiguration.option('policy').valueRequired().description(`The policy as JSON, e.g. '${AUTH_POLICY_JSON_EXAMPLE}'.`)\n\t\tconfiguration.option('policy-stdin').valueNone().description('Read the policy JSON from stdin instead of --policy.')\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<void> {\n\t\tconst policy = parseAuthPolicyInput(\n\t\t\tawait readTextInput({\n\t\t\t\tlabel: 'policy',\n\t\t\t\tinline: input.getOption('policy'),\n\t\t\t\tinlineFlag: '--policy',\n\t\t\t\tfromStdin: input.getOption('policy-stdin') === true,\n\t\t\t\tstdinFlag: '--policy-stdin',\n\t\t\t}, this.readStdin),\n\t\t)\n\n\t\tconst id = await this.tenantClientProvider.policy().createAuthPolicy(policy)\n\n\t\toutput.data({ id, scope: policy.scope, project: policy.project ?? null }, {\n\t\t\thuman: result => `Created auth policy ${humanText(result.id)}.`,\n\t\t\tquiet: result => result.id,\n\t\t})\n\t}\n}\n"],"names":["Command","readStdinText","AUTH_POLICY_JSON_EXAMPLE","parseAuthPolicyInput","readTextInput","humanText"],"mappings":";;;;;;AAaO,MAAM,kCAAkCA,UAAAA,QAAuB;AAAA,EACrE,YACkB,sBACA,YAAyBC,qBACzC;AACD,UAAA;AAHiB,SAAA,uBAAA;AACA,SAAA,YAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,8DAA8D;AACxF,kBAAc,OAAO,QAAQ,EAAE,cAAA,EAAgB,YAAY,6BAA6BC,oCAAwB,IAAI;AACpH,kBAAc,OAAO,cAAc,EAAE,UAAA,EAAY,YAAY,sDAAsD;AAAA,EACpH;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAA+B;AACnF,UAAM,SAASC,YAAAA;AAAAA,MACd,MAAMC,0BAAc;AAAA,QACnB,OAAO;AAAA,QACP,QAAQ,MAAM,UAAU,QAAQ;AAAA,QAChC,YAAY;AAAA,QACZ,WAAW,MAAM,UAAU,cAAc,MAAM;AAAA,QAC/C,WAAW;AAAA,MAAA,GACT,KAAK,SAAS;AAAA,IAAA;AAGlB,UAAM,KAAK,MAAM,KAAK,qBAAqB,OAAA,EAAS,iBAAiB,MAAM;AAE3E,WAAO,KAAK,EAAE,IAAI,OAAO,OAAO,OAAO,SAAS,OAAO,WAAW,KAAA,GAAQ;AAAA,MACzE,OAAO,CAAA,WAAU,uBAAuBC,aAAAA,UAAU,OAAO,EAAE,CAAC;AAAA,MAC5D,OAAO,YAAU,OAAO;AAAA,IAAA,CACxB;AAAA,EACF;AACD;;"}

package/dist/development/src/commands/tenant/policy/TenantPolicyCreateCommand.js

@@ -0,0 +1,36 @@
+import { Command } from "@contember/cli-common";
+import { AUTH_POLICY_JSON_EXAMPLE, parseAuthPolicyInput, readTextInput } from "./policyInput.js";
+import { readStdinText } from "../../../lib/tenant/stdin.js";
+import { humanText } from "../tenantOutput.js";
+class TenantPolicyCreateCommand extends Command {
+  constructor(tenantClientProvider, readStdin = readStdinText) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+    this.readStdin = readStdin;
+  }
+  configure(configuration) {
+    configuration.description("Create an auth policy from an AuthPolicyInput JSON document.");
+    configuration.option("policy").valueRequired().description(`The policy as JSON, e.g. '${AUTH_POLICY_JSON_EXAMPLE}'.`);
+    configuration.option("policy-stdin").valueNone().description("Read the policy JSON from stdin instead of --policy.");
+  }
+  async execute(input, output) {
+    const policy = parseAuthPolicyInput(
+      await readTextInput({
+        label: "policy",
+        inline: input.getOption("policy"),
+        inlineFlag: "--policy",
+        fromStdin: input.getOption("policy-stdin") === true,
+        stdinFlag: "--policy-stdin"
+      }, this.readStdin)
+    );
+    const id = await this.tenantClientProvider.policy().createAuthPolicy(policy);
+    output.data({ id, scope: policy.scope, project: policy.project ?? null }, {
+      human: (result) => `Created auth policy ${humanText(result.id)}.`,
+      quiet: (result) => result.id
+    });
+  }
+}
+export {
+  TenantPolicyCreateCommand
+};
+//# sourceMappingURL=TenantPolicyCreateCommand.js.map

package/dist/development/src/commands/tenant/policy/TenantPolicyCreateCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantPolicyCreateCommand.js","sources":["../../../../../../../packages/cli/src/commands/tenant/policy/TenantPolicyCreateCommand.ts"],"sourcesContent":["import { Command, CommandConfiguration, Input, Output } from '@contember/cli-common'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport { AUTH_POLICY_JSON_EXAMPLE, parseAuthPolicyInput, readTextInput } from './policyInput.js'\nimport { readStdinText, StdinReader } from '../../../lib/tenant/stdin.js'\nimport { humanText } from '../tenantOutput.js'\n\ntype Args = {}\n\ntype Options = {\n\tpolicy?: string\n\t['policy-stdin']?: boolean\n}\n\nexport class TenantPolicyCreateCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t\tprivate readonly readStdin: StdinReader = readStdinText,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('Create an auth policy from an AuthPolicyInput JSON document.')\n\t\tconfiguration.option('policy').valueRequired().description(`The policy as JSON, e.g. '${AUTH_POLICY_JSON_EXAMPLE}'.`)\n\t\tconfiguration.option('policy-stdin').valueNone().description('Read the policy JSON from stdin instead of --policy.')\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<void> {\n\t\tconst policy = parseAuthPolicyInput(\n\t\t\tawait readTextInput({\n\t\t\t\tlabel: 'policy',\n\t\t\t\tinline: input.getOption('policy'),\n\t\t\t\tinlineFlag: '--policy',\n\t\t\t\tfromStdin: input.getOption('policy-stdin') === true,\n\t\t\t\tstdinFlag: '--policy-stdin',\n\t\t\t}, this.readStdin),\n\t\t)\n\n\t\tconst id = await this.tenantClientProvider.policy().createAuthPolicy(policy)\n\n\t\toutput.data({ id, scope: policy.scope, project: policy.project ?? null }, {\n\t\t\thuman: result => `Created auth policy ${humanText(result.id)}.`,\n\t\t\tquiet: result => result.id,\n\t\t})\n\t}\n}\n"],"names":[],"mappings":";;;;AAaO,MAAM,kCAAkC,QAAuB;AAAA,EACrE,YACkB,sBACA,YAAyB,eACzC;AACD,UAAA;AAHiB,SAAA,uBAAA;AACA,SAAA,YAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,8DAA8D;AACxF,kBAAc,OAAO,QAAQ,EAAE,cAAA,EAAgB,YAAY,6BAA6B,wBAAwB,IAAI;AACpH,kBAAc,OAAO,cAAc,EAAE,UAAA,EAAY,YAAY,sDAAsD;AAAA,EACpH;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAA+B;AACnF,UAAM,SAAS;AAAA,MACd,MAAM,cAAc;AAAA,QACnB,OAAO;AAAA,QACP,QAAQ,MAAM,UAAU,QAAQ;AAAA,QAChC,YAAY;AAAA,QACZ,WAAW,MAAM,UAAU,cAAc,MAAM;AAAA,QAC/C,WAAW;AAAA,MAAA,GACT,KAAK,SAAS;AAAA,IAAA;AAGlB,UAAM,KAAK,MAAM,KAAK,qBAAqB,OAAA,EAAS,iBAAiB,MAAM;AAE3E,WAAO,KAAK,EAAE,IAAI,OAAO,OAAO,OAAO,SAAS,OAAO,WAAW,KAAA,GAAQ;AAAA,MACzE,OAAO,CAAA,WAAU,uBAAuB,UAAU,OAAO,EAAE,CAAC;AAAA,MAC5D,OAAO,YAAU,OAAO;AAAA,IAAA,CACxB;AAAA,EACF;AACD;"}

package/dist/development/src/commands/tenant/policy/TenantPolicyDeleteCommand.cjs

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const cliCommon = require("@contember/cli-common");
+const confirmation = require("../../../lib/tenant/confirmation.cjs");
+const tenantOutput = require("../tenantOutput.cjs");
+class TenantPolicyDeleteCommand extends cliCommon.Command {
+  constructor(tenantClientProvider) {
+    super();
+    this.tenantClientProvider = tenantClientProvider;
+  }
+  configure(configuration) {
+    configuration.description("Delete an auth policy.");
+    configuration.argument("id").description('Id of the auth policy, as printed by "tenant policy list".');
+    configuration.option("yes").valueNone().description("Do not ask for confirmation.");
+  }
+  async execute(input, output) {
+    const id = input.getArgument("id");
+    await confirmation.requireConfirmation({
+      yes: input.getOption("yes") === true,
+      output,
+      warning: `Auth policy ${id} will be deleted. The roles it covers fall back to the tenant defaults.`
+    });
+    await this.tenantClientProvider.policy().deleteAuthPolicy(id);
+    output.data({ id }, {
+      human: (result) => `Deleted auth policy ${tenantOutput.humanText(result.id)}.`,
+      quiet: (result) => result.id
+    });
+  }
+}
+exports.TenantPolicyDeleteCommand = TenantPolicyDeleteCommand;
+//# sourceMappingURL=TenantPolicyDeleteCommand.cjs.map

package/dist/development/src/commands/tenant/policy/TenantPolicyDeleteCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantPolicyDeleteCommand.cjs","sources":["../../../../../../../packages/cli/src/commands/tenant/policy/TenantPolicyDeleteCommand.ts"],"sourcesContent":["import { Command, CommandConfiguration, Input, Output } from '@contember/cli-common'\nimport { TenantClientProvider } from '../../../lib/TenantClientProvider.js'\nimport { requireConfirmation } from '../../../lib/tenant/confirmation.js'\nimport { humanText } from '../tenantOutput.js'\n\ntype Args = {\n\tid: string\n}\n\ntype Options = {\n\tyes?: boolean\n}\n\nexport class TenantPolicyDeleteCommand extends Command<Args, Options> {\n\tconstructor(\n\t\tprivate readonly tenantClientProvider: TenantClientProvider,\n\t) {\n\t\tsuper()\n\t}\n\n\tprotected configure(configuration: CommandConfiguration<Args, Options>): void {\n\t\tconfiguration.description('Delete an auth policy.')\n\t\tconfiguration.argument('id').description('Id of the auth policy, as printed by \"tenant policy list\".')\n\t\tconfiguration.option('yes').valueNone().description('Do not ask for confirmation.')\n\t}\n\n\tprotected async execute(input: Input<Args, Options>, output: Output): Promise<void> {\n\t\tconst id = input.getArgument('id')\n\t\tawait requireConfirmation({\n\t\t\tyes: input.getOption('yes') === true,\n\t\t\toutput,\n\t\t\twarning: `Auth policy ${id} will be deleted. The roles it covers fall back to the tenant defaults.`,\n\t\t})\n\n\t\tawait this.tenantClientProvider.policy().deleteAuthPolicy(id)\n\n\t\toutput.data({ id }, {\n\t\t\thuman: result => `Deleted auth policy ${humanText(result.id)}.`,\n\t\t\tquiet: result => result.id,\n\t\t})\n\t}\n}\n"],"names":["Command","requireConfirmation","humanText"],"mappings":";;;;;AAaO,MAAM,kCAAkCA,UAAAA,QAAuB;AAAA,EACrE,YACkB,sBAChB;AACD,UAAA;AAFiB,SAAA,uBAAA;AAAA,EAGlB;AAAA,EAEU,UAAU,eAA0D;AAC7E,kBAAc,YAAY,wBAAwB;AAClD,kBAAc,SAAS,IAAI,EAAE,YAAY,4DAA4D;AACrG,kBAAc,OAAO,KAAK,EAAE,UAAA,EAAY,YAAY,8BAA8B;AAAA,EACnF;AAAA,EAEA,MAAgB,QAAQ,OAA6B,QAA+B;AACnF,UAAM,KAAK,MAAM,YAAY,IAAI;AACjC,UAAMC,iCAAoB;AAAA,MACzB,KAAK,MAAM,UAAU,KAAK,MAAM;AAAA,MAChC;AAAA,MACA,SAAS,eAAe,EAAE;AAAA,IAAA,CAC1B;AAED,UAAM,KAAK,qBAAqB,OAAA,EAAS,iBAAiB,EAAE;AAE5D,WAAO,KAAK,EAAE,MAAM;AAAA,MACnB,OAAO,CAAA,WAAU,uBAAuBC,aAAAA,UAAU,OAAO,EAAE,CAAC;AAAA,MAC5D,OAAO,YAAU,OAAO;AAAA,IAAA,CACxB;AAAA,EACF;AACD;;"}