@contember/engine-tenant-api 1.4.0-rc.8 → 2.0.0-alpha.8

package/dist/src/model/service/MailTemplateManager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"MailTemplateManager.js","sourceRoot":"","sources":["../../../../src/model/service/MailTemplateManager.ts"],"names":[],"mappings":";;;AAAA,0CAA+E;AAI/E,MAAa,mBAAmB;IACxB,KAAK,CAAC,eAAe,CAAC,SAA0B,EAAE,YAA0B;QAClF,MAAM,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,iCAAsB,CAAC,YAAY,CAAC,CAAC,CAAA;IAC7E,CAAC;IAEM,KAAK,CAAC,kBAAkB,CAAC,SAA0B,EAAE,cAAsC;QACjG,OAAO,MAAM,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,oCAAyB,CAAC,cAAc,CAAC,CAAC,CAAA;IACzF,CAAC;CACD;AARD,kDAQC"}

package/dist/src/model/service/MembershipValidator.js

@@ -1,21 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MembershipValidationErrorType = exports.MembershipValidationError = exports.MembershipValidator = void 0;
-const schema_utils_1 = require("@contember/schema-utils");
-Object.defineProperty(exports, "MembershipValidationError", { enumerable: true, get: function () { return schema_utils_1.MembershipValidationError; } });
-Object.defineProperty(exports, "MembershipValidationErrorType", { enumerable: true, get: function () { return schema_utils_1.MembershipValidationErrorType; } });
-class MembershipValidator {
-    constructor(schemaResolver, resolver = new schema_utils_1.MembershipResolver()) {
-        this.schemaResolver = schemaResolver;
-        this.resolver = resolver;
-    }
-    async validate(project, memberships) {
-        const schema = await this.schemaResolver.getSchema(project);
-        if (!schema) {
-            throw new Error();
-        }
-        return this.resolver.resolve(schema.acl, memberships, schema_utils_1.MembershipResolver.UnknownIdentity).errors;
-    }
-}
-exports.MembershipValidator = MembershipValidator;
-//# sourceMappingURL=MembershipValidator.js.map

package/dist/src/model/service/MembershipValidator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"MembershipValidator.js","sourceRoot":"","sources":["../../../../src/model/service/MembershipValidator.ts"],"names":[],"mappings":";;;AACA,0DAAsH;AAkB7G,0GAlBA,wCAAyB,OAkBA;AAAE,8GAlBA,4CAA6B,OAkBA;AAfjE,MAAa,mBAAmB;IAC/B,YACkB,cAAqC,EACrC,WAA+B,IAAI,iCAAkB,EAAE;QADvD,mBAAc,GAAd,cAAc,CAAuB;QACrC,aAAQ,GAAR,QAAQ,CAA+C;IACtE,CAAC;IAEJ,KAAK,CAAC,QAAQ,CAAC,OAAe,EAAE,WAAsC;QACrE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QAC3D,IAAI,CAAC,MAAM,EAAE;YACZ,MAAM,IAAI,KAAK,EAAE,CAAA;SACjB;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,iCAAkB,CAAC,eAAe,CAAC,CAAC,MAAM,CAAA;IACjG,CAAC;CACD;AAbD,kDAaC"}

package/dist/src/model/service/OtpAuthenticator.js

@@ -1,43 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OtpAuthenticator = void 0;
-const otpauth_1 = require("otpauth");
-const digits = 6;
-class OtpAuthenticator {
-    constructor(providers) {
-        this.providers = providers;
-    }
-    validate(secret, token) {
-        const result = otpauth_1.TOTP.validate({
-            token,
-            digits,
-            secret: getSecret(secret),
-            timestamp: this.providers.now().getTime(),
-        });
-        return result !== null;
-    }
-    generate(secret) {
-        return otpauth_1.TOTP.generate({
-            secret: getSecret(secret),
-            digits,
-            timestamp: this.providers.now().getTime(),
-        });
-    }
-    async create(user, label) {
-        const secret = new otpauth_1.Secret({ buffer: await this.providers.randomBytes(20) });
-        const totp = new otpauth_1.TOTP({
-            label: user,
-            issuer: label,
-            secret,
-        });
-        return {
-            secret: secret.base32,
-            uri: totp.toString(),
-        };
-    }
-}
-exports.OtpAuthenticator = OtpAuthenticator;
-const getSecret = function (otp) {
-    return 'uri' in otp ? (otpauth_1.URI.parse(otp.uri).secret) : otpauth_1.Secret.fromBase32(otp.secret);
-};
-//# sourceMappingURL=OtpAuthenticator.js.map

package/dist/src/model/service/OtpAuthenticator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"OtpAuthenticator.js","sourceRoot":"","sources":["../../../../src/model/service/OtpAuthenticator.ts"],"names":[],"mappings":";;;AACA,qCAA2C;AAO3C,MAAM,MAAM,GAAG,CAAC,CAAA;AAEhB,MAAa,gBAAgB;IAC5B,YACkB,SAAiD;QAAjD,cAAS,GAAT,SAAS,CAAwC;IAEnE,CAAC;IAEM,QAAQ,CAAC,MAAkB,EAAE,KAAa;QAChD,MAAM,MAAM,GAAG,cAAI,CAAC,QAAQ,CAAC;YAC5B,KAAK;YACL,MAAM;YACN,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE;SACzC,CAAC,CAAA;QACF,OAAO,MAAM,KAAK,IAAI,CAAA;IACvB,CAAC;IAEM,QAAQ,CAAC,MAAkB;QACjC,OAAO,cAAI,CAAC,QAAQ,CAAC;YACpB,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC;YACzB,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE;SACzC,CAAC,CAAA;IACH,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,KAAa;QAC9C,MAAM,MAAM,GAAG,IAAI,gBAAM,CAAC,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;QAC3E,MAAM,IAAI,GAAG,IAAI,cAAI,CAAC;YACrB,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,KAAK;YACb,MAAM;SACN,CAAC,CAAA;QACF,OAAO;YACN,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE;SACpB,CAAA;IACF,CAAC;CACD;AApCD,4CAoCC;AAGD,MAAM,SAAS,GAAG,UAAU,GAAe;IAC1C,OAAO,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,aAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,gBAAM,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;AAClF,CAAC,CAAA"}

package/dist/src/model/service/OtpManager.js

@@ -1,35 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OtpError = exports.OtpManager = void 0;
-const commands_1 = require("../commands");
-class OtpManager {
-    constructor(otpAuthenticator) {
-        this.otpAuthenticator = otpAuthenticator;
-    }
-    async prepareOtp(dbContext, person, label) {
-        var _a, _b;
-        const otp = await this.otpAuthenticator.create((_b = (_a = person.email) !== null && _a !== void 0 ? _a : person.name) !== null && _b !== void 0 ? _b : 'unnamed', label);
-        await dbContext.commandBus.execute(new commands_1.PrepareOtpCommand(person.id, otp.uri));
-        return otp;
-    }
-    async confirmOtp(dbContext, person) {
-        await dbContext.commandBus.execute(new commands_1.ConfirmOtpCommand(person.id));
-    }
-    async disableOtp(dbContext, person) {
-        await dbContext.commandBus.execute(new commands_1.DisableOtpCommand(person.id));
-    }
-    verifyOtp(person, token) {
-        if (!person.otp_uri) {
-            throw new OtpError('not configured');
-        }
-        return this.otpAuthenticator.validate({ uri: person.otp_uri }, token);
-    }
-}
-exports.OtpManager = OtpManager;
-class OtpError extends Error {
-    constructor(message) {
-        super(message);
-    }
-}
-exports.OtpError = OtpError;
-//# sourceMappingURL=OtpManager.js.map

package/dist/src/model/service/OtpManager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"OtpManager.js","sourceRoot":"","sources":["../../../../src/model/service/OtpManager.ts"],"names":[],"mappings":";;;AACA,0CAAqF;AAIrF,MAAa,UAAU;IACtB,YACkB,gBAAkC;QAAlC,qBAAgB,GAAhB,gBAAgB,CAAkB;IACjD,CAAC;IAEJ,KAAK,CAAC,UAAU,CAAC,SAA0B,EAAE,MAAiB,EAAE,KAAa;;QAC5E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAA,MAAA,MAAM,CAAC,KAAK,mCAAI,MAAM,CAAC,IAAI,mCAAI,SAAS,EAAE,KAAK,CAAC,CAAA;QAC/F,MAAM,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,4BAAiB,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;QAC7E,OAAO,GAAG,CAAA;IACX,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAA0B,EAAE,MAAiB;QAC7D,MAAM,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,4BAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;IACrE,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAA0B,EAAE,MAAiB;QAC7D,MAAM,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,4BAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;IACrE,CAAC;IAED,SAAS,CAAC,MAAiB,EAAE,KAAa;QACzC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE;YACpB,MAAM,IAAI,QAAQ,CAAC,gBAAgB,CAAC,CAAA;SACpC;QACD,OAAO,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAA;IACtE,CAAC;CACD;AAzBD,gCAyBC;AAED,MAAa,QAAS,SAAQ,KAAK;IAClC,YAAY,OAAgB;QAC3B,KAAK,CAAC,OAAO,CAAC,CAAA;IACf,CAAC;CACD;AAJD,4BAIC"}

package/dist/src/model/service/PasswordChangeManager.js

@@ -1,35 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PasswordChangeManager = void 0;
-const commands_1 = require("../commands");
-const password_1 = require("../utils/password");
-const Response_1 = require("../utils/Response");
-class PasswordChangeManager {
-    constructor(providers) {
-        this.providers = providers;
-    }
-    async changePassword(dbContext, personId, password) {
-        const weakPassword = (0, password_1.getPasswordWeaknessMessage)(password);
-        if (weakPassword) {
-            return new Response_1.ResponseError('TOO_WEAK', weakPassword);
-        }
-        await dbContext.commandBus.execute(new commands_1.ChangePasswordCommand(personId, password));
-        return new Response_1.ResponseOk(null);
-    }
-    async changeMyPassword(dbContext, person, currentPassword, password) {
-        const weakPassword = (0, password_1.getPasswordWeaknessMessage)(password);
-        if (weakPassword) {
-            return new Response_1.ResponseError('TOO_WEAK', weakPassword);
-        }
-        if (!person.password_hash) {
-            return new Response_1.ResponseError('NO_PASSWORD_SET', 'No password set');
-        }
-        if (!(await this.providers.bcryptCompare(currentPassword, person.password_hash))) {
-            return new Response_1.ResponseError('INVALID_PASSWORD', 'Password does not match');
-        }
-        await dbContext.commandBus.execute(new commands_1.ChangePasswordCommand(person.id, password));
-        return new Response_1.ResponseOk(null);
-    }
-}
-exports.PasswordChangeManager = PasswordChangeManager;
-//# sourceMappingURL=PasswordChangeManager.js.map

package/dist/src/model/service/PasswordChangeManager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"PasswordChangeManager.js","sourceRoot":"","sources":["../../../../src/model/service/PasswordChangeManager.ts"],"names":[],"mappings":";;;AACA,0CAAmD;AACnD,gDAA8D;AAC9D,gDAAuE;AAKvE,MAAM,qBAAqB;IAC1B,YACkB,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IACnC,CAAC;IAEJ,KAAK,CAAC,cAAc,CAAC,SAA0B,EAAE,QAAgB,EAAE,QAAgB;QAClF,MAAM,YAAY,GAAG,IAAA,qCAA0B,EAAC,QAAQ,CAAC,CAAA;QACzD,IAAI,YAAY,EAAE;YACjB,OAAO,IAAI,wBAAa,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;SAClD;QACD,MAAM,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,gCAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAA;QACjF,OAAO,IAAI,qBAAU,CAAC,IAAI,CAAC,CAAA;IAC5B,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,SAA0B,EAAE,MAAiB,EAAE,eAAuB,EAAE,QAAgB;QAC9G,MAAM,YAAY,GAAG,IAAA,qCAA0B,EAAC,QAAQ,CAAC,CAAA;QACzD,IAAI,YAAY,EAAE;YACjB,OAAO,IAAI,wBAAa,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;SAClD;QACD,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE;YAC1B,OAAO,IAAI,wBAAa,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAA;SAC9D;QACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE;YACjF,OAAO,IAAI,wBAAa,CAAC,kBAAkB,EAAE,yBAAyB,CAAC,CAAA;SACvE;QAED,MAAM,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,gCAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAA;QAClF,OAAO,IAAI,qBAAU,CAAC,IAAI,CAAC,CAAA;IAC5B,CAAC;CACD;AAMQ,sDAAqB"}

package/dist/src/model/service/PasswordResetManager.js

@@ -1,48 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PasswordResetManager = void 0;
-const commands_1 = require("../commands");
-const Response_1 = require("../utils/Response");
-const password_1 = require("../utils/password");
-const exceptions_1 = require("../../exceptions");
-class PasswordResetManager {
-    constructor(mailer, projectManager) {
-        this.mailer = mailer;
-        this.projectManager = projectManager;
-    }
-    async createPasswordResetRequest(dbContext, permissionContext, person, mailOptions = {}) {
-        var _a;
-        const result = await dbContext.commandBus.execute(new commands_1.CreatePasswordResetRequestCommand(person.id));
-        const projects = await this.projectManager.getProjectsByIdentity(dbContext, person.identity_id, permissionContext);
-        const project = (() => {
-            if (projects.length === 1) {
-                return projects[0];
-            }
-            else if (mailOptions.project) {
-                return projects.find(it => it.slug === mailOptions.project) || null;
-            }
-            return null;
-        })();
-        if (!person.email) {
-            throw new exceptions_1.ImplementationException();
-        }
-        await this.mailer.sendPasswordResetEmail(dbContext, {
-            email: person.email,
-            token: result.token,
-            project: project === null || project === void 0 ? void 0 : project.name,
-            projectSlug: project === null || project === void 0 ? void 0 : project.slug,
-        }, {
-            variant: mailOptions.mailVariant || '',
-            projectId: (_a = project === null || project === void 0 ? void 0 : project.id) !== null && _a !== void 0 ? _a : null,
-        });
-    }
-    async resetPassword(dbContext, token, password) {
-        const weakPassword = (0, password_1.getPasswordWeaknessMessage)(password);
-        if (weakPassword) {
-            return new Response_1.ResponseError('PASSWORD_TOO_WEAK', weakPassword);
-        }
-        return await dbContext.commandBus.execute(new commands_1.ResetPasswordCommand(token, password));
-    }
-}
-exports.PasswordResetManager = PasswordResetManager;
-//# sourceMappingURL=PasswordResetManager.js.map

package/dist/src/model/service/PasswordResetManager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"PasswordResetManager.js","sourceRoot":"","sources":["../../../../src/model/service/PasswordResetManager.ts"],"names":[],"mappings":";;;AAAA,0CAAoH;AACpH,gDAA2D;AAC3D,gDAA8D;AAM9D,iDAA0D;AAO1D,MAAa,oBAAoB;IAChC,YACkB,MAAkB,EAClB,cAA8B;QAD9B,WAAM,GAAN,MAAM,CAAY;QAClB,mBAAc,GAAd,cAAc,CAAgB;IAC5C,CAAC;IAEE,KAAK,CAAC,0BAA0B,CACtC,SAA0B,EAC1B,iBAAoC,EACpC,MAAiB,EACjB,cAA2B,EAAE;;QAE7B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,4CAAiC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;QACnG,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAAC,SAAS,EAAE,MAAM,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAA;QAClH,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE;YACrB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE;gBAC1B,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAA;aAClB;iBAAM,IAAI,WAAW,CAAC,OAAO,EAAE;gBAC/B,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,WAAW,CAAC,OAAO,CAAC,IAAI,IAAI,CAAA;aACnE;YACD,OAAO,IAAI,CAAA;QACZ,CAAC,CAAC,EAAE,CAAA;QACJ,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;YAClB,MAAM,IAAI,oCAAuB,EAAE,CAAA;SACnC;QAED,MAAM,IAAI,CAAC,MAAM,CAAC,sBAAsB,CACvC,SAAS,EACT;YACC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI;YACtB,WAAW,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI;SAC1B,EACD;YACC,OAAO,EAAE,WAAW,CAAC,WAAW,IAAI,EAAE;YACtC,SAAS,EAAE,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,EAAE,mCAAI,IAAI;SAC9B,CACD,CAAA;IACF,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,SAA0B,EAAE,KAAa,EAAE,QAAgB;QACrF,MAAM,YAAY,GAAG,IAAA,qCAA0B,EAAC,QAAQ,CAAC,CAAA;QACzD,IAAI,YAAY,EAAE;YACjB,OAAO,IAAI,wBAAa,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAA;SAC3D;QACD,OAAO,MAAM,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,+BAAoB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAA;IACrF,CAAC;CACD;AAhDD,oDAgDC"}

package/dist/src/model/service/PersonAccessManager.js

@@ -1,42 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PersonAccessManager = void 0;
-const queries_1 = require("../queries");
-const DisablePersonCommand_1 = require("../commands/person/DisablePersonCommand");
-const Response_1 = require("../utils/Response");
-class PersonAccessManager {
-    constructor(apiKeyManager) {
-        this.apiKeyManager = apiKeyManager;
-    }
-    async disablePerson(dbContext, personId) {
-        const result = await dbContext.transaction(async (trx) => {
-            const personRow = await trx.queryHandler.fetch(queries_1.PersonQuery.byId(personId));
-            if (personRow === null) {
-                return 'PERSON_NOT_FOUND';
-            }
-            if (personRow.disabled_at !== null) {
-                return 'PERSON_ALREADY_DISABLED';
-            }
-            // Deactivate person & invalidate all api keys associated with person identity
-            await this.disablePersonAccount(trx, personRow.id);
-            await this.disableIdentityApiKeys(trx, personRow.identity_id);
-            return null;
-        });
-        switch (result) {
-            case null:
-                return new Response_1.ResponseOk(null);
-            case 'PERSON_ALREADY_DISABLED':
-                return new Response_1.ResponseError(result, 'Person is already disable');
-            case 'PERSON_NOT_FOUND':
-                return new Response_1.ResponseError(result, 'Person not found');
-        }
-    }
-    async disablePersonAccount(dbContext, personId) {
-        await dbContext.commandBus.execute(new DisablePersonCommand_1.DisablePersonCommand(personId));
-    }
-    async disableIdentityApiKeys(dbContext, personIdentityId) {
-        await this.apiKeyManager.disableIdentityApiKeys(dbContext, personIdentityId);
-    }
-}
-exports.PersonAccessManager = PersonAccessManager;
-//# sourceMappingURL=PersonAccessManager.js.map

package/dist/src/model/service/PersonAccessManager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"PersonAccessManager.js","sourceRoot":"","sources":["../../../../src/model/service/PersonAccessManager.ts"],"names":[],"mappings":";;;AAAA,wCAAwC;AAExC,kFAA8E;AAE9E,gDAAuE;AAGvE,MAAM,mBAAmB;IAExB,YAA6B,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;IAAG,CAAC;IAE7D,KAAK,CAAC,aAAa,CAAC,SAA0B,EAAE,QAAgB;QAC/D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,KAAK,EAAC,GAAG,EAAC,EAAE;YACtD,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,KAAK,CAC7C,qBAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAC1B,CAAA;YAED,IAAI,SAAS,KAAK,IAAI,EAAE;gBACvB,OAAO,kBAAkB,CAAA;aACzB;YAED,IAAI,SAAS,CAAC,WAAW,KAAK,IAAI,EAAE;gBACnC,OAAO,yBAAyB,CAAA;aAChC;YAED,8EAA8E;YAC9E,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,CAAC,CAAA;YAClD,MAAM,IAAI,CAAC,sBAAsB,CAAC,GAAG,EAAE,SAAS,CAAC,WAAW,CAAC,CAAA;YAE7D,OAAO,IAAI,CAAA;QACZ,CAAC,CAAC,CAAA;QAEF,QAAQ,MAAM,EAAE;YACf,KAAK,IAAI;gBACR,OAAO,IAAI,qBAAU,CAAC,IAAI,CAAC,CAAA;YAE5B,KAAK,yBAAyB;gBAC7B,OAAO,IAAI,wBAAa,CAAC,MAAM,EAAE,2BAA2B,CAAC,CAAA;YAE9D,KAAK,kBAAkB;gBACtB,OAAO,IAAI,wBAAa,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAA;SACrD;IACF,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,SAA0B,EAAE,QAAgB;QAC9E,MAAM,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,2CAAoB,CAAC,QAAQ,CAAC,CAAC,CAAA;IACvE,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,SAA0B,EAAE,gBAAwB;QACxF,MAAM,IAAI,CAAC,aAAa,CAAC,sBAAsB,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAA;IAC7E,CAAC;CACD;AAIQ,kDAAmB"}

package/dist/src/model/service/PersonManager.js

@@ -1,26 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PersonManager = void 0;
-const ChangeProfileCommand_1 = require("../commands/person/ChangeProfileCommand");
-const Response_1 = require("../utils/Response");
-const queries_1 = require("../queries");
-class PersonManager {
-    constructor(emailValidator) {
-        this.emailValidator = emailValidator;
-    }
-    async findPersonById(dbContext, personId) {
-        return await dbContext.queryHandler.fetch(queries_1.PersonQuery.byId(personId));
-    }
-    async changeProfile(dbContext, person, data) {
-        if (data.email !== undefined && person.email !== data.email) {
-            const validationError = await this.emailValidator.validateEmail(dbContext, data.email);
-            if (validationError !== null) {
-                return new Response_1.ResponseError(validationError.error, validationError.errorMessage);
-            }
-        }
-        await dbContext.commandBus.execute(new ChangeProfileCommand_1.ChangeProfileCommand(person.id, data));
-        return new Response_1.ResponseOk(null);
-    }
-}
-exports.PersonManager = PersonManager;
-//# sourceMappingURL=PersonManager.js.map

package/dist/src/model/service/PersonManager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"PersonManager.js","sourceRoot":"","sources":["../../../../src/model/service/PersonManager.ts"],"names":[],"mappings":";;;AAAA,kFAAiG;AACjG,gDAAuE;AACvE,wCAAmD;AAInD,MAAM,aAAa;IAClB,YACkB,cAA8B;QAA9B,mBAAc,GAAd,cAAc,CAAgB;IAEhD,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,SAA0B,EAAE,QAAgB;QAChE,OAAO,MAAM,SAAS,CAAC,YAAY,CAAC,KAAK,CACxC,qBAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAC1B,CAAA;IACF,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAA0B,EAAE,MAAiB,EAAE,IAAuB;QACzF,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE;YAC5D,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;YACtF,IAAI,eAAe,KAAK,IAAI,EAAE;gBAC7B,OAAO,IAAI,wBAAa,CAAC,eAAe,CAAC,KAAK,EAAE,eAAe,CAAC,YAAY,CAAC,CAAA;aAC7E;SACD;QACD,MAAM,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,2CAAoB,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAA;QAC7E,OAAO,IAAI,qBAAU,CAAC,IAAI,CAAC,CAAA;IAC5B,CAAC;CAED;AAMQ,sCAAa"}

package/dist/src/model/service/ProjectManager.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ProjectManager.d.ts","sourceRoot":"","sources":["../../../../src/model/service/ProjectManager.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAA;AAEzE,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AAIrD,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AAC5D,OAAO,EAAE,QAAQ,EAA6B,MAAM,mBAAmB,CAAA;AACvE,OAAO,EAAE,8BAA8B,EAAE,MAAM,cAAc,CAAA;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAE1C,qBAAa,cAAc;IAEzB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,aAAa;gBAFb,aAAa,EAAE,cAAc,EAC7B,iBAAiB,EAAE,kBAAkB,EACrC,aAAa,EAAE,aAAa;IAGjC,aAAa,CACzB,SAAS,EAAE,eAAe,EAC1B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,IAAI,CAAC,kBAAkB,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC,EACzE,OAAO,EAAE;QACR,eAAe,CAAC,EAAE,MAAM,CAAA;QACxB,eAAe,CAAC,EAAE,SAAS,CAAA;QAC3B,aAAa,CAAC,EAAE,OAAO,CAAA;KACvB,GACC,OAAO,CAAC,qBAAqB,CAAC;IA8CpB,aAAa,CAAC,SAAS,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrH,gBAAgB,CAAC,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAInF,eAAe,CAAC,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,GAAG,WAAW,CAAC;IAQtH,2BAA2B,CAAC,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IASzH,WAAW,CAAC,SAAS,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAI3D,qBAAqB,CAAC,SAAS,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,EAAE,iBAAiB,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;CAG5I;AAED,qBAAa,gBAAiB,SAAQ,KAAK;CAAG;AAG9C,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC,mBAAmB,EAAE,8BAA8B,CAAC,CAAA;AAEjG,qBAAa,mBAAmB;aACH,cAAc,CAAC;gBAAf,cAAc,CAAC,gCAAoB;CAE/D"}

package/dist/src/model/service/ProjectManager.js

@@ -1,93 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CreateProjectResult = exports.ProjectInitError = exports.ProjectManager = void 0;
-const commands_1 = require("../commands");
-const queries_1 = require("../queries");
-const membershipUtils_1 = require("./membershipUtils");
-const exceptions_1 = require("../../exceptions");
-const schema_1 = require("@contember/schema");
-const Response_1 = require("../utils/Response");
-class ProjectManager {
-    constructor(secretManager, projectIntializer, apiKeyService) {
-        this.secretManager = secretManager;
-        this.projectIntializer = projectIntializer;
-        this.apiKeyService = apiKeyService;
-    }
-    async createProject(dbContext, logger, project, options) {
-        return await dbContext.transaction(async (db) => {
-            const bus = db.commandBus;
-            const now = db.providers.now();
-            const projectId = await bus.execute(new commands_1.CreateProjectCommand(project, now));
-            if (!projectId) {
-                return new Response_1.ResponseError('ALREADY_EXISTS', `Project ${project.slug} already exists`);
-            }
-            for (const [key, value] of Object.entries(project.secrets)) {
-                await bus.execute(new commands_1.SetProjectSecretCommand(projectId, key, Buffer.from(value)));
-            }
-            if (options.ownerIdentityId) {
-                const memberships = (0, membershipUtils_1.createSetMembershipVariables)([{ role: schema_1.ProjectRole.ADMIN, variables: [] }]);
-                const addProjectMemberCommand = new commands_1.AddProjectMemberCommand(projectId, options.ownerIdentityId, memberships);
-                const addMemberResult = await db.commandBus.execute(addProjectMemberCommand);
-                if (!addMemberResult.ok) {
-                    throw new exceptions_1.ImplementationException();
-                }
-            }
-            const deployMembership = [{ role: schema_1.ProjectRole.DEPLOYER, variables: [] }];
-            const deployKeyDescription = `Deploy key for ${project.slug}`;
-            const deployResult = options.noDeployToken === true
-                ? undefined
-                : await this.apiKeyService.createProjectPermanentApiKey(db, projectId, deployMembership, deployKeyDescription, options.deployTokenHash);
-            try {
-                await this.projectIntializer.initializeProject({
-                    id: projectId,
-                    ...project,
-                    updatedAt: now,
-                }, logger);
-            }
-            catch (e) {
-                logger.error(e, { message: 'Project initialization failed' });
-                await db.client.connection.rollback();
-                return new Response_1.ResponseError('INIT_ERROR', `Project initialization error: ${e instanceof Error && 'message' in e ? e.message : 'unknown'}`);
-            }
-            return new Response_1.ResponseOk(new CreateProjectResult(deployResult === null || deployResult === void 0 ? void 0 : deployResult.result));
-        });
-    }
-    async updateProject(dbContext, id, data) {
-        await dbContext.commandBus.execute(new commands_1.UpdateProjectCommand(id, data));
-    }
-    async getProjectBySlug(dbContext, slug) {
-        return await dbContext.queryHandler.fetch(new queries_1.ProjectBySlugQuery(slug));
-    }
-    async getProjectState(dbContext, slug, updatedAt) {
-        const updatedNew = await dbContext.queryHandler.fetch(new queries_1.ProjectUpdateTimestampQuery(slug));
-        if (!updatedNew) {
-            return 'not_found';
-        }
-        return updatedNew > updatedAt ? 'updated' : 'valid';
-    }
-    async getProjectWithSecretsBySlug(dbContext, slug, alias) {
-        const project = await dbContext.queryHandler.fetch(new queries_1.ProjectBySlugQuery(slug, alias));
-        if (!project) {
-            return null;
-        }
-        const secrets = await this.secretManager.readSecrets(dbContext, project.id);
-        return { ...project, secrets };
-    }
-    async getProjects(dbContext) {
-        return await dbContext.queryHandler.fetch(new queries_1.ProjectsQuery());
-    }
-    async getProjectsByIdentity(dbContext, identityId, permissionContext) {
-        return await dbContext.queryHandler.fetch(new queries_1.ProjectsByIdentityQuery(identityId, permissionContext));
-    }
-}
-exports.ProjectManager = ProjectManager;
-class ProjectInitError extends Error {
-}
-exports.ProjectInitError = ProjectInitError;
-class CreateProjectResult {
-    constructor(deployerApiKey) {
-        this.deployerApiKey = deployerApiKey;
-    }
-}
-exports.CreateProjectResult = CreateProjectResult;
-//# sourceMappingURL=ProjectManager.js.map

package/dist/src/model/service/ProjectManager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ProjectManager.js","sourceRoot":"","sources":["../../../../src/model/service/ProjectManager.ts"],"names":[],"mappings":";;;AAAA,0CAKoB;AAGpB,wCAAoH;AAGpH,uDAAgE;AAChE,iDAA0D;AAC1D,8CAA+C;AAE/C,gDAAuE;AAIvE,MAAa,cAAc;IAC1B,YACkB,aAA6B,EAC7B,iBAAqC,EACrC,aAA4B;QAF5B,kBAAa,GAAb,aAAa,CAAgB;QAC7B,sBAAiB,GAAjB,iBAAiB,CAAoB;QACrC,kBAAa,GAAb,aAAa,CAAe;IAC3C,CAAC;IAEG,KAAK,CAAC,aAAa,CACzB,SAA0B,EAC1B,MAAc,EACd,OAAyE,EACzE,OAIC;QAED,OAAO,MAAM,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAkC,EAAE;YAC/E,MAAM,GAAG,GAAG,EAAE,CAAC,UAAU,CAAA;YAEzB,MAAM,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,CAAA;YAC9B,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,+BAAoB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAA;YAC3E,IAAI,CAAC,SAAS,EAAE;gBACf,OAAO,IAAI,wBAAa,CAAC,gBAAgB,EAAE,WAAW,OAAO,CAAC,IAAI,iBAAiB,CAAC,CAAA;aACpF;YACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;gBAC3D,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,kCAAuB,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;aAClF;YACD,IAAI,OAAO,CAAC,eAAe,EAAE;gBAC5B,MAAM,WAAW,GAAG,IAAA,8CAA4B,EAAC,CAAC,EAAE,IAAI,EAAE,oBAAW,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;gBAC9F,MAAM,uBAAuB,GAAG,IAAI,kCAAuB,CAAC,SAAS,EAAE,OAAO,CAAC,eAAe,EAAE,WAAW,CAAC,CAAA;gBAC5G,MAAM,eAAe,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAA;gBAC5E,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE;oBACxB,MAAM,IAAI,oCAAuB,EAAE,CAAA;iBACnC;aACD;YAED,MAAM,gBAAgB,GAAG,CAAC,EAAE,IAAI,EAAE,oBAAW,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAA;YACxE,MAAM,oBAAoB,GAAG,kBAAkB,OAAO,CAAC,IAAI,EAAE,CAAA;YAC7D,MAAM,YAAY,GAAG,OAAO,CAAC,aAAa,KAAK,IAAI;gBAClD,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,4BAA4B,CAAC,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,OAAO,CAAC,eAAe,CAAC,CAAA;YAExI,IAAI;gBACH,MAAM,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,CAAC;oBAC9C,EAAE,EAAE,SAAS;oBACb,GAAG,OAAO;oBACV,SAAS,EAAE,GAAG;iBACd,EAAE,MAAM,CAAC,CAAA;aACV;YAAC,OAAO,CAAC,EAAE;gBACX,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAA;gBAC7D,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAA;gBACrC,OAAO,IAAI,wBAAa,CACvB,YAAY,EACZ,iCAAiC,CAAC,YAAY,KAAK,IAAI,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAC/F,CAAA;aACD;YAED,OAAO,IAAI,qBAAU,CAAC,IAAI,mBAAmB,CAAC,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,MAAM,CAAC,CAAC,CAAA;QACrE,CAAC,CAAC,CAAA;IACH,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,SAA0B,EAAE,EAAU,EAAE,IAA+C;QACjH,MAAM,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,+BAAoB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAA;IACvE,CAAC;IAEM,KAAK,CAAC,gBAAgB,CAAC,SAA0B,EAAE,IAAY;QACrE,OAAO,MAAM,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,4BAAkB,CAAC,IAAI,CAAC,CAAC,CAAA;IACxE,CAAC;IAEM,KAAK,CAAC,eAAe,CAAC,SAA0B,EAAE,IAAY,EAAE,SAAe;QACrF,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,qCAA2B,CAAC,IAAI,CAAC,CAAC,CAAA;QAC5F,IAAI,CAAC,UAAU,EAAE;YAChB,OAAO,WAAW,CAAA;SAClB;QACD,OAAO,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAA;IACpD,CAAC;IAEM,KAAK,CAAC,2BAA2B,CAAC,SAA0B,EAAE,IAAY,EAAE,KAAc;QAChG,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,4BAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;QACvF,IAAI,CAAC,OAAO,EAAE;YACb,OAAO,IAAI,CAAA;SACX;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC,CAAA;QAC3E,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAA;IAC/B,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,SAA0B;QAClD,OAAO,MAAM,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,uBAAa,EAAE,CAAC,CAAA;IAC/D,CAAC;IAEM,KAAK,CAAC,qBAAqB,CAAC,SAA0B,EAAE,UAAkB,EAAE,iBAAoC;QACtH,OAAO,MAAM,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,iCAAuB,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAA;IACtG,CAAC;CACD;AA9FD,wCA8FC;AAED,MAAa,gBAAiB,SAAQ,KAAK;CAAG;AAA9C,4CAA8C;AAK9C,MAAa,mBAAmB;IAC/B,YAA4B,cAAmC;QAAnC,mBAAc,GAAd,cAAc,CAAqB;IAC/D,CAAC;CACD;AAHD,kDAGC"}

package/dist/src/model/service/ProjectMemberManager.js

@@ -1,98 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ProjectMemberManager = void 0;
-const commands_1 = require("../commands");
-const queries_1 = require("../queries");
-const authorization_1 = require("../authorization");
-const array_1 = require("../../utils/array");
-const membershipUtils_1 = require("./membershipUtils");
-const schema_1 = require("@contember/schema");
-class ProjectMemberManager {
-    async addProjectMember(dbContext, projectId, identityId, memberships) {
-        return await dbContext.transaction(async (db) => {
-            return await db.commandBus.execute(new commands_1.AddProjectMemberCommand(projectId, identityId, (0, membershipUtils_1.createSetMembershipVariables)(memberships)));
-        });
-    }
-    async updateProjectMember(dbContext, projectId, identityId, memberships) {
-        return await dbContext.transaction(async (db) => await db.commandBus.execute(new commands_1.UpdateProjectMemberCommand(projectId, identityId, memberships)));
-    }
-    async removeProjectMember(dbContext, projectId, identityId) {
-        return await dbContext.transaction(async (db) => await db.commandBus.execute(new commands_1.RemoveProjectMemberCommand(projectId, identityId)));
-    }
-    async getAllProjectMemberships(dbContext, project, identity, verifier) {
-        return [
-            ...this.getImplicitProjectMemberships(identity),
-            ...await this.getStoredProjectsMemberships(dbContext, project, identity, verifier),
-        ];
-    }
-    async getEffectiveProjectMemberships(dbContext, project, identity) {
-        const implicit = this.getImplicitProjectMemberships(identity);
-        if (implicit.length > 0) {
-            return implicit;
-        }
-        return await this.getStoredProjectsMemberships(dbContext, project, identity, undefined);
-    }
-    async getStoredProjectsMemberships(dbContext, project, identity, verifier) {
-        const memberships = await dbContext.queryHandler.fetch(new queries_1.ProjectMembershipByIdentityQuery(project, [identity.id]));
-        if (verifier === undefined) {
-            return memberships;
-        }
-        return await this.filterMemberships(memberships, verifier);
-    }
-    getImplicitProjectMemberships(identity) {
-        var _a, _b;
-        if (((_a = identity.roles) === null || _a === void 0 ? void 0 : _a.includes(authorization_1.TenantRole.SUPER_ADMIN)) || ((_b = identity.roles) === null || _b === void 0 ? void 0 : _b.includes(authorization_1.TenantRole.PROJECT_ADMIN))) {
-            return [{ role: schema_1.ProjectRole.ADMIN, variables: [] }];
-        }
-        return [];
-    }
-    async getProjectMembers(dbContext, projectId, accessVerifier, input) {
-        return dbContext.transaction(async (db) => {
-            const members = await db.queryHandler.fetch(new queries_1.ProjectMembersQuery(projectId, input));
-            const memberships = await db.queryHandler.fetch(new queries_1.ProjectMembershipByIdentityQuery({ id: projectId }, members.map(it => it.id)));
-            const filteredMemberships = await this.filterMemberships(memberships, accessVerifier);
-            const byIdentity = (0, array_1.indexListBy)(filteredMemberships, 'identityId');
-            return members
-                .map(it => (byIdentity[it.id] ? { identity: it, memberships: byIdentity[it.id] } : null))
-                .filter(array_1.notEmpty);
-        });
-    }
-    async filterMemberships(memberships, verifier) {
-        const filteredMemberships = [];
-        nextMembership: for (const membership of memberships) {
-            if (!(await verifier(authorization_1.PermissionActions.PROJECT_VIEW_MEMBER([{ role: membership.role, variables: [] }])))) {
-                continue;
-            }
-            const variables = [];
-            for (const variable of membership.variables) {
-                const values = await this.filterProjectMembershipVariableValues(membership, variable, verifier);
-                if (values.length === 0) {
-                    continue nextMembership;
-                }
-                variables.push({ name: variable.name, values });
-            }
-            filteredMemberships.push({ ...membership, variables });
-        }
-        return filteredMemberships;
-    }
-    async filterProjectMembershipVariableValues(membership, variable, verifier) {
-        const values = await Promise.all(variable.values.map(async (value) => {
-            const subMembership = {
-                role: membership.role,
-                variables: [
-                    {
-                        name: variable.name,
-                        values: [value],
-                    },
-                ],
-            };
-            if (!(await verifier(authorization_1.PermissionActions.PROJECT_VIEW_MEMBER([subMembership])))) {
-                return null;
-            }
-            return value;
-        }));
-        return values.filter(array_1.notEmpty);
-    }
-}
-exports.ProjectMemberManager = ProjectMemberManager;
-//# sourceMappingURL=ProjectMemberManager.js.map

package/dist/src/model/service/ProjectMemberManager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ProjectMemberManager.js","sourceRoot":"","sources":["../../../../src/model/service/ProjectMemberManager.ts"],"names":[],"mappings":";;;AAAA,0CAOoB;AACpB,wCAAkF;AAElF,oDAAgF;AAChF,6CAAyD;AACzD,uDAAgE;AAChE,8CAAoD;AAIpD,MAAa,oBAAoB;IAChC,KAAK,CAAC,gBAAgB,CACrB,SAA0B,EAC1B,SAAiB,EACjB,UAAkB,EAClB,WAAsC;QAEtC,OAAO,MAAM,SAAS,CAAC,WAAW,CAAC,KAAK,EAAC,EAAE,EAAC,EAAE;YAC7C,OAAO,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CACjC,IAAI,kCAAuB,CAAC,SAAS,EAAE,UAAU,EAAE,IAAA,8CAA4B,EAAC,WAAW,CAAC,CAAC,CAC7F,CAAA;QACF,CAAC,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,mBAAmB,CACxB,SAA0B,EAC1B,SAAiB,EACjB,UAAkB,EAClB,WAA6C;QAE7C,OAAO,MAAM,SAAS,CAAC,WAAW,CACjC,KAAK,EAAC,EAAE,EAAC,EAAE,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,qCAA0B,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,CAC3G,CAAA;IACF,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,SAA0B,EAAE,SAAiB,EAAE,UAAkB;QAC1F,OAAO,MAAM,SAAS,CAAC,WAAW,CACjC,KAAK,EAAC,EAAE,EAAC,EAAE,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,qCAA0B,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAC9F,CAAA;IACF,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC7B,SAA0B,EAC1B,OAA0C,EAC1C,QAAmD,EACnD,QAAoC;QAEpC,OAAO;YACN,GAAG,IAAI,CAAC,6BAA6B,CAAC,QAAQ,CAAC;YAC/C,GAAG,MAAM,IAAI,CAAC,4BAA4B,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC;SAClF,CAAA;IACF,CAAC;IAED,KAAK,CAAC,8BAA8B,CACnC,SAA0B,EAC1B,OAA0C,EAC1C,QAAmD;QAEnD,MAAM,QAAQ,GAAG,IAAI,CAAC,6BAA6B,CAAC,QAAQ,CAAC,CAAA;QAC7D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE;YACxB,OAAO,QAAQ,CAAA;SACf;QACD,OAAO,MAAM,IAAI,CAAC,4BAA4B,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;IACxF,CAAC;IAED,KAAK,CAAC,4BAA4B,CACjC,SAA0B,EAC1B,OAA0C,EAC1C,QAAwB,EACxB,QAAoC;QAEpC,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,KAAK,CACrD,IAAI,0CAAgC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAC5D,CAAA;QACD,IAAI,QAAQ,KAAK,SAAS,EAAE;YAC3B,OAAO,WAAW,CAAA;SAClB;QACD,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;IAC3D,CAAC;IAEO,6BAA6B,CAAC,QAAmD;;QACxF,IAAI,CAAA,MAAA,QAAQ,CAAC,KAAK,0CAAE,QAAQ,CAAC,0BAAU,CAAC,WAAW,CAAC,MAAI,MAAA,QAAQ,CAAC,KAAK,0CAAE,QAAQ,CAAC,0BAAU,CAAC,aAAa,CAAC,CAAA,EAAE;YAC3G,OAAO,CAAC,EAAE,IAAI,EAAE,oBAAW,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAA;SACnD;QACD,OAAO,EAAE,CAAA;IACV,CAAC;IAGD,KAAK,CAAC,iBAAiB,CAAC,SAA0B,EAAE,SAAiB,EAAE,cAA8B,EAAE,KAA0B;QAChI,OAAO,SAAS,CAAC,WAAW,CAAC,KAAK,EAAC,EAAE,EAAC,EAAE;YACvC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,6BAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAA;YACtF,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,KAAK,CAC9C,IAAI,0CAAgC,CACnC,EAAE,EAAE,EAAE,SAAS,EAAE,EACjB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CACxB,CACD,CAAA;YACD,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE,cAAc,CAAC,CAAA;YACrF,MAAM,UAAU,GAAG,IAAA,mBAAW,EAAC,mBAAmB,EAAE,YAAY,CAAC,CAAA;YACjE,OAAO,OAAO;iBACZ,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;iBACxF,MAAM,CAAC,gBAAQ,CAAC,CAAA;QACnB,CAAC,CAAC,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC9B,WAAyB,EACzB,QAAwB;QAExB,MAAM,mBAAmB,GAAQ,EAAE,CAAA;QACnC,cAAc,EAAE,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE;YACrD,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,iCAAiB,CAAC,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;gBACzG,SAAQ;aACR;YACD,MAAM,SAAS,GAAiE,EAAE,CAAA;YAClF,KAAK,MAAM,QAAQ,IAAI,UAAU,CAAC,SAAS,EAAE;gBAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,qCAAqC,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAA;gBAC/F,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE;oBACxB,SAAS,cAAc,CAAA;iBACvB;gBACD,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;aAC/C;YACD,mBAAmB,CAAC,IAAI,CAAC,EAAE,GAAG,UAAU,EAAE,SAAS,EAAE,CAAC,CAAA;SACtD;QAED,OAAO,mBAAmB,CAAA;IAC3B,CAAC;IAEO,KAAK,CAAC,qCAAqC,CAClD,UAA0B,EAC1B,QAAgC,EAChC,QAAwB;QAExB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAA0B,EAAE;YAC3D,MAAM,aAAa,GAAG;gBACrB,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,SAAS,EAAE;oBACV;wBACC,IAAI,EAAE,QAAQ,CAAC,IAAI;wBACnB,MAAM,EAAE,CAAC,KAAK,CAAC;qBACf;iBACD;aACD,CAAA;YAED,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,iCAAiB,CAAC,mBAAmB,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE;gBAC9E,OAAO,IAAI,CAAA;aACX;YACD,OAAO,KAAK,CAAA;QACb,CAAC,CAAC,CACF,CAAA;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,gBAAQ,CAAC,CAAA;IAC/B,CAAC;CACD;AA/ID,oDA+IC"}

package/dist/src/model/service/RolesManager.js

@@ -1,35 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.RolesManager = void 0;
-const commands_1 = require("../commands");
-const Response_1 = require("../utils/Response");
-const authorization_1 = require("../authorization");
-class RolesManager {
-    async addGlobalRoles(dbContext, identityId, roles) {
-        return this.patchGlobalRoles(dbContext, identityId, roles, []);
-    }
-    async removeGlobalRoles(dbContext, identityId, roles) {
-        return this.patchGlobalRoles(dbContext, identityId, [], roles);
-    }
-    async patchGlobalRoles(dbContext, identityId, addRoles, removeRoles) {
-        const rolesValidationError = this.validateRoles([...addRoles, ...removeRoles]);
-        if (rolesValidationError) {
-            return rolesValidationError;
-        }
-        const result = await dbContext.commandBus.execute(new commands_1.PatchIdentityGlobalRoles(identityId, addRoles, removeRoles));
-        if (!result) {
-            return new Response_1.ResponseError('IDENTITY_NOT_FOUND', `Identity ${identityId} not found`);
-        }
-        return new Response_1.ResponseOk(null);
-    }
-    validateRoles(roles) {
-        for (const role of roles) {
-            if (!Object.values(authorization_1.TenantRole).includes(role)) {
-                return new Response_1.ResponseError('INVALID_ROLE', `Role ${role} is not valid`);
-            }
-        }
-        return null;
-    }
-}
-exports.RolesManager = RolesManager;
-//# sourceMappingURL=RolesManager.js.map

package/dist/src/model/service/RolesManager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"RolesManager.js","sourceRoot":"","sources":["../../../../src/model/service/RolesManager.ts"],"names":[],"mappings":";;;AACA,0CAAsD;AACtD,gDAAuE;AACvE,oDAA6C;AAE7C,MAAa,YAAY;IACxB,KAAK,CAAC,cAAc,CAAC,SAA0B,EAAE,UAAkB,EAAE,KAAwB;QAC5F,OAAO,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;IAC/D,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,SAA0B,EAAE,UAAkB,EAAE,KAAwB;QAC/F,OAAO,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAC/D,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,SAA0B,EAAE,UAAkB,EAAE,QAA2B,EAAE,WAA8B;QACzI,MAAM,oBAAoB,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,WAAW,CAAC,CAAC,CAAA;QAC9E,IAAI,oBAAoB,EAAE;YACzB,OAAO,oBAAoB,CAAA;SAC3B;QACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,mCAAwB,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAA;QAClH,IAAI,CAAC,MAAM,EAAE;YACZ,OAAO,IAAI,wBAAa,CAAC,oBAAoB,EAAE,YAAY,UAAU,YAAY,CAAC,CAAA;SAClF;QACD,OAAO,IAAI,qBAAU,CAAC,IAAI,CAAC,CAAA;IAC5B,CAAC;IAGO,aAAa,CAAC,KAAe;QACpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;YACzB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,0BAAU,CAAC,CAAC,QAAQ,CAAC,IAAkB,CAAC,EAAE;gBAC5D,OAAO,IAAI,wBAAa,CAAC,cAAc,EAAE,QAAQ,IAAI,eAAe,CAAC,CAAA;aACrE;SACD;QACD,OAAO,IAAI,CAAA;IACZ,CAAC;CACD;AA9BD,oCA8BC"}

package/dist/src/model/service/SecretsManager.js

@@ -1,32 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SecretsManager = void 0;
-const commands_1 = require("../commands");
-const queries_1 = require("../queries");
-class SecretsManager {
-    constructor(providers) {
-        this.providers = providers;
-    }
-    async setSecret(dbContext, projectId, key, value) {
-        await this.setSecrets(dbContext, projectId, [{ key, value: Buffer.from(value) }]);
-    }
-    async readSecrets(dbContext, projectId) {
-        const result = await dbContext.queryHandler.fetch(new queries_1.ProjectSecretsQuery(projectId, this.providers));
-        const forUpdate = result.filter(it => it.needsReEncrypt);
-        await this.setSecrets(dbContext, projectId, forUpdate);
-        return Object.fromEntries(result.map(it => [it.key, it.value.toString()]));
-    }
-    async setSecrets(dbContext, projectId, secrets) {
-        if (secrets.length === 0) {
-            return;
-        }
-        await dbContext.transaction(async (db) => {
-            for (const { key, value } of secrets) {
-                await db.commandBus.execute(new commands_1.SetProjectSecretCommand(projectId, key, Buffer.from(value)));
-            }
-            await db.commandBus.execute(new commands_1.UpdateProjectCommand(projectId, {}));
-        });
-    }
-}
-exports.SecretsManager = SecretsManager;
-//# sourceMappingURL=SecretsManager.js.map

package/dist/src/model/service/SecretsManager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"SecretsManager.js","sourceRoot":"","sources":["../../../../src/model/service/SecretsManager.ts"],"names":[],"mappings":";;;AAAA,0CAA2E;AAE3E,wCAAgD;AAGhD,MAAa,cAAc;IAC1B,YAAoB,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAErC,KAAK,CAAC,SAAS,CAAC,SAA0B,EAAE,SAAiB,EAAE,GAAW,EAAE,KAAa;QAC/F,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAA;IAClF,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,SAA0B,EAAE,SAAiB;QACrE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,6BAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;QACrG,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,cAAc,CAAC,CAAA;QACxD,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;QACtD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAA;IAC3E,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,SAA0B,EAAE,SAAiB,EAAE,OAAuC;QAC9G,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE;YACzB,OAAM;SACN;QACD,MAAM,SAAS,CAAC,WAAW,CAAC,KAAK,EAAC,EAAE,EAAC,EAAE;YACtC,KAAK,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,OAAO,EAAE;gBACrC,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,kCAAuB,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;aAC5F;YACD,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,+BAAoB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAA;QACrE,CAAC,CAAC,CAAA;IACH,CAAC;CACD;AAzBD,wCAyBC"}