@contember/engine-tenant-api 2.0.0-alpha.8 → 2.0.0-beta.1

package/dist/production/src/model/service/idp/providers/OIDCProvider.cjs

@@ -18,14 +18,19 @@ class OIDCProvider {
     const initData = helpers.catchTypesafe(OIDCTypes.OIDCInitData, IDPValidationError.IDPValidationError)(data);
     const client = await this.createOIDCClient(configuration);
     return await OIDCHelpers.initOIDCAuth(client, {
-      claims: configuration.claims,
+      scope: configuration.scope ?? configuration.claims,
       ...initData
     });
   }
   async processResponse(configuration, data) {
     const responseData = helpers.catchTypesafe(OIDCTypes.OIDCResponseData, IDPValidationError.IDPValidationError)(data);
     const client = await this.createOIDCClient(configuration);
-    return await OIDCHelpers.handleOIDCResponse(client, responseData);
+    return await OIDCHelpers.handleOIDCResponse(
+      client,
+      responseData,
+      configuration.fetchUserInfo,
+      configuration.returnOIDCResult
+    );
   }
   getPublicConfiguration({ clientSecret, ...config }) {
     return config;
@@ -37,7 +42,8 @@ class OIDCProvider {
       {
         client_id: configuration.clientId,
         client_secret: configuration.clientSecret,
-        response_types: [configuration.responseType || "code"]
+        response_types: [configuration.responseType || "code"],
+        id_token_signed_response_alg: configuration.idTokenSignedResponseAlg ?? "RS256"
       },
       void 0,
       {

package/dist/production/src/model/service/idp/providers/OIDCProvider.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"OIDCProvider.cjs","sources":["../../../../../../../../packages/engine-tenant-api/src/model/service/idp/providers/OIDCProvider.ts"],"sourcesContent":["import { Client, Issuer } from 'openid-client'\nimport { IdentityProviderHandler, IDPClaim, InitIDPAuthResult } from '../IdentityProviderHandler'\nimport { InvalidIDPConfigurationError } from '../InvalidIDPConfigurationError'\nimport { catchTypesafe } from './helpers'\nimport { OIDCConfiguration, OIDCInitData, OIDCResponseData } from './OIDCTypes'\nimport { handleOIDCResponse, initOIDCAuth } from './OIDCHelpers'\nimport { IDPValidationError } from '../IDPValidationError'\n\n\nexport class OIDCProvider implements IdentityProviderHandler<OIDCConfiguration> {\n\tprivate issuerCache: Record<string, Issuer<Client>> = {}\n\n\tvalidateConfiguration = catchTypesafe(OIDCConfiguration, InvalidIDPConfigurationError)\n\n\tpublic async initAuth(configuration: OIDCConfiguration, data: unknown): Promise<InitIDPAuthResult> {\n\t\tconst initData = catchTypesafe(OIDCInitData, IDPValidationError)(data)\n\t\tconst client = await this.createOIDCClient(configuration)\n\t\treturn await initOIDCAuth(client, {\n\t\t\tclaims: configuration.claims,\n\t\t\t...initData,\n\t\t})\n\t}\n\n\tpublic async processResponse(configuration: OIDCConfiguration, data: unknown): Promise<IDPClaim> {\n\t\tconst responseData = catchTypesafe(OIDCResponseData, IDPValidationError)(data)\n\t\tconst client = await this.createOIDCClient(configuration)\n\t\treturn await handleOIDCResponse(client, responseData)\n\t}\n\n\n\tgetPublicConfiguration({ clientSecret, ...config }: OIDCConfiguration): Partial<OIDCConfiguration> {\n\t\treturn config\n\t}\n\n\tprivate async createOIDCClient(configuration: OIDCConfiguration): Promise<Client> {\n\t\tthis.issuerCache[configuration.url] ??= await Issuer.discover(configuration.url)\n\n\t\treturn new this.issuerCache[configuration.url].Client(\n\t\t\t{\n\t\t\t\tclient_id: configuration.clientId,\n\t\t\t\tclient_secret: configuration.clientSecret,\n\t\t\t\tresponse_types: [configuration.responseType || 'code'],\n\t\t\t},\n\t\t\tundefined,\n\t\t\t{\n\t\t\t\tadditionalAuthorizedParties: [...(configuration.additionalAuthorizedParties ?? [])],\n\t\t\t},\n\t\t)\n\t}\n}\n"],"names":["catchTypesafe","OIDCConfiguration","InvalidIDPConfigurationError","OIDCInitData","IDPValidationError","initOIDCAuth","OIDCResponseData","handleOIDCResponse","Issuer"],"mappings":";;;;;;;;;;;AASO,MAAM,aAAmE;AAAA,EAAzE,cAAA;AACN,kBAAA,MAAQ,eAA8C,CAAA,CAAC;AAE/B,kBAAA,MAAA,yBAAAA,QAAA,cAAcC,6BAAmBC,6BAA4B,4BAAA,CAAA;AAAA,EAAA;AAAA,EAErF,MAAa,SAAS,eAAkC,MAA2C;AAClG,UAAM,WAAWF,QAAAA,cAAcG,UAAAA,cAAcC,mBAAAA,kBAAkB,EAAE,IAAI;AACrE,UAAM,SAAS,MAAM,KAAK,iBAAiB,aAAa;AACjD,WAAA,MAAMC,yBAAa,QAAQ;AAAA,MACjC,QAAQ,cAAc;AAAA,MACtB,GAAG;AAAA,IAAA,CACH;AAAA,EACF;AAAA,EAEA,MAAa,gBAAgB,eAAkC,MAAkC;AAChG,UAAM,eAAeL,QAAAA,cAAcM,UAAAA,kBAAkBF,mBAAAA,kBAAkB,EAAE,IAAI;AAC7E,UAAM,SAAS,MAAM,KAAK,iBAAiB,aAAa;AACjD,WAAA,MAAMG,YAAmB,mBAAA,QAAQ,YAAY;AAAA,EACrD;AAAA,EAGA,uBAAuB,EAAE,cAAc,GAAG,UAAyD;AAC3F,WAAA;AAAA,EACR;AAAA,EAEA,MAAc,iBAAiB,eAAmD;AAlCnF,QAAA,IAAA;AAmCO,KAAA,KAAA,KAAA,aAAL,KAAiB,cAAc,GAAA,MAA/B,SAAwC,MAAMC,aAAA,OAAO,SAAS,cAAc,GAAG;AAE/E,WAAO,IAAI,KAAK,YAAY,cAAc,GAAG,EAAE;AAAA,MAC9C;AAAA,QACC,WAAW,cAAc;AAAA,QACzB,eAAe,cAAc;AAAA,QAC7B,gBAAgB,CAAC,cAAc,gBAAgB,MAAM;AAAA,MACtD;AAAA,MACA;AAAA,MACA;AAAA,QACC,6BAA6B,CAAC,GAAI,cAAc,+BAA+B,CAAA,CAAG;AAAA,MACnF;AAAA,IAAA;AAAA,EAEF;AACD;;"}
+{"version":3,"file":"OIDCProvider.cjs","sources":["../../../../../../../../packages/engine-tenant-api/src/model/service/idp/providers/OIDCProvider.ts"],"sourcesContent":["import { Client, Issuer } from 'openid-client'\nimport { IdentityProviderHandler, IDPResponse, InitIDPAuthResult } from '../IdentityProviderHandler'\nimport { InvalidIDPConfigurationError } from '../InvalidIDPConfigurationError'\nimport { catchTypesafe } from './helpers'\nimport { OIDCConfiguration, OIDCInitData, OIDCResponseData } from './OIDCTypes'\nimport { handleOIDCResponse, initOIDCAuth } from './OIDCHelpers'\nimport { IDPValidationError } from '../IDPValidationError'\n\n\nexport class OIDCProvider implements IdentityProviderHandler<OIDCConfiguration> {\n\tprivate issuerCache: Record<string, Issuer<Client>> = {}\n\n\tvalidateConfiguration = catchTypesafe(OIDCConfiguration, InvalidIDPConfigurationError)\n\n\tpublic async initAuth(configuration: OIDCConfiguration, data: unknown): Promise<InitIDPAuthResult> {\n\t\tconst initData = catchTypesafe(OIDCInitData, IDPValidationError)(data)\n\t\tconst client = await this.createOIDCClient(configuration)\n\t\treturn await initOIDCAuth(client, {\n\t\t\tscope: configuration.scope ?? configuration.claims,\n\t\t\t...initData,\n\t\t})\n\t}\n\n\tpublic async processResponse(configuration: OIDCConfiguration, data: unknown): Promise<IDPResponse> {\n\t\tconst responseData = catchTypesafe(OIDCResponseData, IDPValidationError)(data)\n\t\tconst client = await this.createOIDCClient(configuration)\n\t\treturn await handleOIDCResponse(\n\t\t\tclient,\n\t\t\tresponseData,\n\t\t\tconfiguration.fetchUserInfo,\n\t\t\tconfiguration.returnOIDCResult,\n\t\t)\n\t}\n\n\n\tgetPublicConfiguration({ clientSecret, ...config }: OIDCConfiguration): Partial<OIDCConfiguration> {\n\t\treturn config\n\t}\n\n\tprivate async createOIDCClient(configuration: OIDCConfiguration): Promise<Client> {\n\t\tthis.issuerCache[configuration.url] ??= await Issuer.discover(configuration.url)\n\n\t\treturn new this.issuerCache[configuration.url].Client(\n\t\t\t{\n\t\t\t\tclient_id: configuration.clientId,\n\t\t\t\tclient_secret: configuration.clientSecret,\n\t\t\t\tresponse_types: [configuration.responseType || 'code'],\n\t\t\t\tid_token_signed_response_alg: configuration.idTokenSignedResponseAlg ?? 'RS256',\n\t\t\t},\n\t\t\tundefined,\n\t\t\t{\n\t\t\t\tadditionalAuthorizedParties: [...(configuration.additionalAuthorizedParties ?? [])],\n\t\t\t},\n\t\t)\n\t}\n}\n"],"names":["catchTypesafe","OIDCConfiguration","InvalidIDPConfigurationError","OIDCInitData","IDPValidationError","initOIDCAuth","OIDCResponseData","handleOIDCResponse","Issuer"],"mappings":";;;;;;;;;;;AASO,MAAM,aAAmE;AAAA,EAAzE,cAAA;AACN,kBAAA,MAAQ,eAA8C,EAAC;AAE/B,kBAAA,MAAA,yBAAAA,QAAA,cAAcC,6BAAmBC,6BAA4B,4BAAA,CAAA;AAAA,EAAA;AAAA,EAErF,MAAa,SAAS,eAAkC,MAA2C;AAClG,UAAM,WAAWF,QAAA,cAAcG,UAAc,cAAAC,mBAAkB,kBAAA,EAAE,IAAI;AACrE,UAAM,SAAS,MAAM,KAAK,iBAAiB,aAAa;AACjD,WAAA,MAAMC,yBAAa,QAAQ;AAAA,MACjC,OAAO,cAAc,SAAS,cAAc;AAAA,MAC5C,GAAG;AAAA,IAAA,CACH;AAAA,EAAA;AAAA,EAGF,MAAa,gBAAgB,eAAkC,MAAqC;AACnG,UAAM,eAAeL,QAAA,cAAcM,UAAkB,kBAAAF,mBAAkB,kBAAA,EAAE,IAAI;AAC7E,UAAM,SAAS,MAAM,KAAK,iBAAiB,aAAa;AACxD,WAAO,MAAMG,YAAA;AAAA,MACZ;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,cAAc;AAAA,IACf;AAAA,EAAA;AAAA,EAID,uBAAuB,EAAE,cAAc,GAAG,UAAyD;AAC3F,WAAA;AAAA,EAAA;AAAA,EAGR,MAAc,iBAAiB,eAAmD;AAvCnF,QAAA,IAAA;AAwCO,KAAA,KAAA,KAAA,aAAL,KAAiB,cAAc,GAAA,MAA/B,SAAwC,MAAMC,aAAA,OAAO,SAAS,cAAc,GAAG;AAE/E,WAAO,IAAI,KAAK,YAAY,cAAc,GAAG,EAAE;AAAA,MAC9C;AAAA,QACC,WAAW,cAAc;AAAA,QACzB,eAAe,cAAc;AAAA,QAC7B,gBAAgB,CAAC,cAAc,gBAAgB,MAAM;AAAA,QACrD,8BAA8B,cAAc,4BAA4B;AAAA,MACzE;AAAA,MACA;AAAA,MACA;AAAA,QACC,6BAA6B,CAAC,GAAI,cAAc,+BAA+B,CAAG,CAAA;AAAA,MAAA;AAAA,IAEpF;AAAA,EAAA;AAEF;;"}

package/dist/production/src/model/service/idp/providers/OIDCProvider.js

@@ -16,14 +16,19 @@ class OIDCProvider {
     const initData = catchTypesafe(OIDCInitData, IDPValidationError)(data);
     const client = await this.createOIDCClient(configuration);
     return await initOIDCAuth(client, {
-      claims: configuration.claims,
+      scope: configuration.scope ?? configuration.claims,
       ...initData
     });
   }
   async processResponse(configuration, data) {
     const responseData = catchTypesafe(OIDCResponseData, IDPValidationError)(data);
     const client = await this.createOIDCClient(configuration);
-    return await handleOIDCResponse(client, responseData);
+    return await handleOIDCResponse(
+      client,
+      responseData,
+      configuration.fetchUserInfo,
+      configuration.returnOIDCResult
+    );
   }
   getPublicConfiguration({ clientSecret, ...config }) {
     return config;
@@ -35,7 +40,8 @@ class OIDCProvider {
       {
         client_id: configuration.clientId,
         client_secret: configuration.clientSecret,
-        response_types: [configuration.responseType || "code"]
+        response_types: [configuration.responseType || "code"],
+        id_token_signed_response_alg: configuration.idTokenSignedResponseAlg ?? "RS256"
       },
       void 0,
       {

package/dist/production/src/model/service/idp/providers/OIDCProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"OIDCProvider.js","sources":["../../../../../../../../packages/engine-tenant-api/src/model/service/idp/providers/OIDCProvider.ts"],"sourcesContent":["import { Client, Issuer } from 'openid-client'\nimport { IdentityProviderHandler, IDPClaim, InitIDPAuthResult } from '../IdentityProviderHandler'\nimport { InvalidIDPConfigurationError } from '../InvalidIDPConfigurationError'\nimport { catchTypesafe } from './helpers'\nimport { OIDCConfiguration, OIDCInitData, OIDCResponseData } from './OIDCTypes'\nimport { handleOIDCResponse, initOIDCAuth } from './OIDCHelpers'\nimport { IDPValidationError } from '../IDPValidationError'\n\n\nexport class OIDCProvider implements IdentityProviderHandler<OIDCConfiguration> {\n\tprivate issuerCache: Record<string, Issuer<Client>> = {}\n\n\tvalidateConfiguration = catchTypesafe(OIDCConfiguration, InvalidIDPConfigurationError)\n\n\tpublic async initAuth(configuration: OIDCConfiguration, data: unknown): Promise<InitIDPAuthResult> {\n\t\tconst initData = catchTypesafe(OIDCInitData, IDPValidationError)(data)\n\t\tconst client = await this.createOIDCClient(configuration)\n\t\treturn await initOIDCAuth(client, {\n\t\t\tclaims: configuration.claims,\n\t\t\t...initData,\n\t\t})\n\t}\n\n\tpublic async processResponse(configuration: OIDCConfiguration, data: unknown): Promise<IDPClaim> {\n\t\tconst responseData = catchTypesafe(OIDCResponseData, IDPValidationError)(data)\n\t\tconst client = await this.createOIDCClient(configuration)\n\t\treturn await handleOIDCResponse(client, responseData)\n\t}\n\n\n\tgetPublicConfiguration({ clientSecret, ...config }: OIDCConfiguration): Partial<OIDCConfiguration> {\n\t\treturn config\n\t}\n\n\tprivate async createOIDCClient(configuration: OIDCConfiguration): Promise<Client> {\n\t\tthis.issuerCache[configuration.url] ??= await Issuer.discover(configuration.url)\n\n\t\treturn new this.issuerCache[configuration.url].Client(\n\t\t\t{\n\t\t\t\tclient_id: configuration.clientId,\n\t\t\t\tclient_secret: configuration.clientSecret,\n\t\t\t\tresponse_types: [configuration.responseType || 'code'],\n\t\t\t},\n\t\t\tundefined,\n\t\t\t{\n\t\t\t\tadditionalAuthorizedParties: [...(configuration.additionalAuthorizedParties ?? [])],\n\t\t\t},\n\t\t)\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;AASO,MAAM,aAAmE;AAAA,EAAzE,cAAA;AACN,kBAAA,MAAQ,eAA8C,CAAA,CAAC;AAE/B,kBAAA,MAAA,yBAAA,cAAc,mBAAmB,4BAA4B,CAAA;AAAA,EAAA;AAAA,EAErF,MAAa,SAAS,eAAkC,MAA2C;AAClG,UAAM,WAAW,cAAc,cAAc,kBAAkB,EAAE,IAAI;AACrE,UAAM,SAAS,MAAM,KAAK,iBAAiB,aAAa;AACjD,WAAA,MAAM,aAAa,QAAQ;AAAA,MACjC,QAAQ,cAAc;AAAA,MACtB,GAAG;AAAA,IAAA,CACH;AAAA,EACF;AAAA,EAEA,MAAa,gBAAgB,eAAkC,MAAkC;AAChG,UAAM,eAAe,cAAc,kBAAkB,kBAAkB,EAAE,IAAI;AAC7E,UAAM,SAAS,MAAM,KAAK,iBAAiB,aAAa;AACjD,WAAA,MAAM,mBAAmB,QAAQ,YAAY;AAAA,EACrD;AAAA,EAGA,uBAAuB,EAAE,cAAc,GAAG,UAAyD;AAC3F,WAAA;AAAA,EACR;AAAA,EAEA,MAAc,iBAAiB,eAAmD;AAlCnF,QAAA,IAAA;AAmCO,KAAA,KAAA,KAAA,aAAL,KAAiB,cAAc,GAAA,MAA/B,SAAwC,MAAM,OAAO,SAAS,cAAc,GAAG;AAE/E,WAAO,IAAI,KAAK,YAAY,cAAc,GAAG,EAAE;AAAA,MAC9C;AAAA,QACC,WAAW,cAAc;AAAA,QACzB,eAAe,cAAc;AAAA,QAC7B,gBAAgB,CAAC,cAAc,gBAAgB,MAAM;AAAA,MACtD;AAAA,MACA;AAAA,MACA;AAAA,QACC,6BAA6B,CAAC,GAAI,cAAc,+BAA+B,CAAA,CAAG;AAAA,MACnF;AAAA,IAAA;AAAA,EAEF;AACD;"}
+{"version":3,"file":"OIDCProvider.js","sources":["../../../../../../../../packages/engine-tenant-api/src/model/service/idp/providers/OIDCProvider.ts"],"sourcesContent":["import { Client, Issuer } from 'openid-client'\nimport { IdentityProviderHandler, IDPResponse, InitIDPAuthResult } from '../IdentityProviderHandler'\nimport { InvalidIDPConfigurationError } from '../InvalidIDPConfigurationError'\nimport { catchTypesafe } from './helpers'\nimport { OIDCConfiguration, OIDCInitData, OIDCResponseData } from './OIDCTypes'\nimport { handleOIDCResponse, initOIDCAuth } from './OIDCHelpers'\nimport { IDPValidationError } from '../IDPValidationError'\n\n\nexport class OIDCProvider implements IdentityProviderHandler<OIDCConfiguration> {\n\tprivate issuerCache: Record<string, Issuer<Client>> = {}\n\n\tvalidateConfiguration = catchTypesafe(OIDCConfiguration, InvalidIDPConfigurationError)\n\n\tpublic async initAuth(configuration: OIDCConfiguration, data: unknown): Promise<InitIDPAuthResult> {\n\t\tconst initData = catchTypesafe(OIDCInitData, IDPValidationError)(data)\n\t\tconst client = await this.createOIDCClient(configuration)\n\t\treturn await initOIDCAuth(client, {\n\t\t\tscope: configuration.scope ?? configuration.claims,\n\t\t\t...initData,\n\t\t})\n\t}\n\n\tpublic async processResponse(configuration: OIDCConfiguration, data: unknown): Promise<IDPResponse> {\n\t\tconst responseData = catchTypesafe(OIDCResponseData, IDPValidationError)(data)\n\t\tconst client = await this.createOIDCClient(configuration)\n\t\treturn await handleOIDCResponse(\n\t\t\tclient,\n\t\t\tresponseData,\n\t\t\tconfiguration.fetchUserInfo,\n\t\t\tconfiguration.returnOIDCResult,\n\t\t)\n\t}\n\n\n\tgetPublicConfiguration({ clientSecret, ...config }: OIDCConfiguration): Partial<OIDCConfiguration> {\n\t\treturn config\n\t}\n\n\tprivate async createOIDCClient(configuration: OIDCConfiguration): Promise<Client> {\n\t\tthis.issuerCache[configuration.url] ??= await Issuer.discover(configuration.url)\n\n\t\treturn new this.issuerCache[configuration.url].Client(\n\t\t\t{\n\t\t\t\tclient_id: configuration.clientId,\n\t\t\t\tclient_secret: configuration.clientSecret,\n\t\t\t\tresponse_types: [configuration.responseType || 'code'],\n\t\t\t\tid_token_signed_response_alg: configuration.idTokenSignedResponseAlg ?? 'RS256',\n\t\t\t},\n\t\t\tundefined,\n\t\t\t{\n\t\t\t\tadditionalAuthorizedParties: [...(configuration.additionalAuthorizedParties ?? [])],\n\t\t\t},\n\t\t)\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;AASO,MAAM,aAAmE;AAAA,EAAzE,cAAA;AACN,kBAAA,MAAQ,eAA8C,EAAC;AAE/B,kBAAA,MAAA,yBAAA,cAAc,mBAAmB,4BAA4B,CAAA;AAAA,EAAA;AAAA,EAErF,MAAa,SAAS,eAAkC,MAA2C;AAClG,UAAM,WAAW,cAAc,cAAc,kBAAkB,EAAE,IAAI;AACrE,UAAM,SAAS,MAAM,KAAK,iBAAiB,aAAa;AACjD,WAAA,MAAM,aAAa,QAAQ;AAAA,MACjC,OAAO,cAAc,SAAS,cAAc;AAAA,MAC5C,GAAG;AAAA,IAAA,CACH;AAAA,EAAA;AAAA,EAGF,MAAa,gBAAgB,eAAkC,MAAqC;AACnG,UAAM,eAAe,cAAc,kBAAkB,kBAAkB,EAAE,IAAI;AAC7E,UAAM,SAAS,MAAM,KAAK,iBAAiB,aAAa;AACxD,WAAO,MAAM;AAAA,MACZ;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,cAAc;AAAA,IACf;AAAA,EAAA;AAAA,EAID,uBAAuB,EAAE,cAAc,GAAG,UAAyD;AAC3F,WAAA;AAAA,EAAA;AAAA,EAGR,MAAc,iBAAiB,eAAmD;AAvCnF,QAAA,IAAA;AAwCO,KAAA,KAAA,KAAA,aAAL,KAAiB,cAAc,GAAA,MAA/B,SAAwC,MAAM,OAAO,SAAS,cAAc,GAAG;AAE/E,WAAO,IAAI,KAAK,YAAY,cAAc,GAAG,EAAE;AAAA,MAC9C;AAAA,QACC,WAAW,cAAc;AAAA,QACzB,eAAe,cAAc;AAAA,QAC7B,gBAAgB,CAAC,cAAc,gBAAgB,MAAM;AAAA,QACrD,8BAA8B,cAAc,4BAA4B;AAAA,MACzE;AAAA,MACA;AAAA,MACA;AAAA,QACC,6BAA6B,CAAC,GAAI,cAAc,+BAA+B,CAAG,CAAA;AAAA,MAAA;AAAA,IAEpF;AAAA,EAAA;AAEF;"}

package/dist/production/src/model/service/idp/providers/OIDCTypes.cjs

@@ -21,7 +21,12 @@ const Typesafe__namespace = /* @__PURE__ */ _interopNamespaceDefault(Typesafe);
 const OIDCConfigurationOptions = Typesafe__namespace.partial({
   responseType: Typesafe__namespace.enumeration("code", "code id_token", "code id_token token", "code token", "id_token", "id_token token", "none"),
   claims: Typesafe__namespace.string,
-  additionalAuthorizedParties: Typesafe__namespace.array(Typesafe__namespace.string)
+  // deprecated, use scope instead
+  scope: Typesafe__namespace.string,
+  additionalAuthorizedParties: Typesafe__namespace.array(Typesafe__namespace.string),
+  idTokenSignedResponseAlg: Typesafe__namespace.string,
+  fetchUserInfo: Typesafe__namespace.boolean,
+  returnOIDCResult: Typesafe__namespace.boolean
 });
 const BaseOIDCConfiguration = Typesafe__namespace.intersection(
   Typesafe__namespace.object({

package/dist/production/src/model/service/idp/providers/OIDCTypes.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"OIDCTypes.cjs","sources":["../../../../../../../../packages/engine-tenant-api/src/model/service/idp/providers/OIDCTypes.ts"],"sourcesContent":["import * as Typesafe from '@contember/typesafe'\nimport { ResponseType } from 'openid-client'\n\nexport interface OIDCSessionData {\n\tnonce: string\n\tstate: string\n}\n\nexport const OIDCConfigurationOptions = Typesafe.partial({\n\tresponseType: Typesafe.enumeration<ResponseType>('code', 'code id_token', 'code id_token token', 'code token', 'id_token', 'id_token token', 'none'),\n\tclaims: Typesafe.string,\n\tadditionalAuthorizedParties: Typesafe.array(Typesafe.string),\n})\nexport const BaseOIDCConfiguration = Typesafe.intersection(\n\tTypesafe.object({\n\t\turl: Typesafe.string,\n\t\tclientId: Typesafe.string,\n\t\tclientSecret: Typesafe.string,\n\t}),\n\tOIDCConfigurationOptions,\n)\n\nexport const OIDCConfiguration = Typesafe.intersection(\n\tBaseOIDCConfiguration,\n\tTypesafe.object({\n\t\turl: Typesafe.string,\n\t}),\n)\n\nexport type OIDCConfiguration = ReturnType<typeof OIDCConfiguration>\n\nexport const OIDCResponseData = Typesafe.intersection(\n\tTypesafe.union(\n\t\tTypesafe.object({\n\t\t\turl: Typesafe.string,\n\t\t}),\n\t\tTypesafe.object({\n\t\t\tparameters: Typesafe.record(Typesafe.string, Typesafe.string),\n\t\t}),\n\t),\n\tTypesafe.partial({\n\t\tredirectUrl: Typesafe.string,\n\t\tsessionData: Typesafe.partial({\n\t\t\tnonce: Typesafe.string,\n\t\t\tstate: Typesafe.string,\n\t\t}),\n\n\t}),\n)\n\nexport type OIDCResponseData = ReturnType<typeof OIDCResponseData>\n\nexport const OIDCInitData = Typesafe.noExtraProps(Typesafe.intersection(\n\tTypesafe.object({\n\t\tredirectUrl: Typesafe.string,\n\t}),\n\tTypesafe.partial({\n\t\tresponseMode: Typesafe.string,\n\t}),\n))\n\nexport type OIDCInitData = ReturnType<typeof OIDCInitData>\n"],"names":["Typesafe"],"mappings":";;;;;;;;;;;;;;;;;;;;AAQa,MAAA,2BAA2BA,oBAAS,QAAQ;AAAA,EACxD,cAAcA,oBAAS,YAA0B,QAAQ,iBAAiB,uBAAuB,cAAc,YAAY,kBAAkB,MAAM;AAAA,EACnJ,QAAQA,oBAAS;AAAA,EACjB,6BAA6BA,oBAAS,MAAMA,oBAAS,MAAM;AAC5D,CAAC;AACM,MAAM,wBAAwBA,oBAAS;AAAA,EAC7CA,oBAAS,OAAO;AAAA,IACf,KAAKA,oBAAS;AAAA,IACd,UAAUA,oBAAS;AAAA,IACnB,cAAcA,oBAAS;AAAA,EAAA,CACvB;AAAA,EACD;AACD;AAEO,MAAM,oBAAoBA,oBAAS;AAAA,EACzC;AAAA,EACAA,oBAAS,OAAO;AAAA,IACf,KAAKA,oBAAS;AAAA,EAAA,CACd;AACF;AAIO,MAAM,mBAAmBA,oBAAS;AAAA,EACxCA,oBAAS;AAAA,IACRA,oBAAS,OAAO;AAAA,MACf,KAAKA,oBAAS;AAAA,IAAA,CACd;AAAA,IACDA,oBAAS,OAAO;AAAA,MACf,YAAYA,oBAAS,OAAOA,oBAAS,QAAQA,oBAAS,MAAM;AAAA,IAAA,CAC5D;AAAA,EACF;AAAA,EACAA,oBAAS,QAAQ;AAAA,IAChB,aAAaA,oBAAS;AAAA,IACtB,aAAaA,oBAAS,QAAQ;AAAA,MAC7B,OAAOA,oBAAS;AAAA,MAChB,OAAOA,oBAAS;AAAA,IAAA,CAChB;AAAA,EAAA,CAED;AACF;AAIa,MAAA,eAAeA,oBAAS,aAAaA,oBAAS;AAAA,EAC1DA,oBAAS,OAAO;AAAA,IACf,aAAaA,oBAAS;AAAA,EAAA,CACtB;AAAA,EACDA,oBAAS,QAAQ;AAAA,IAChB,cAAcA,oBAAS;AAAA,EAAA,CACvB;AACF,CAAC;;;;;;"}
+{"version":3,"file":"OIDCTypes.cjs","sources":["../../../../../../../../packages/engine-tenant-api/src/model/service/idp/providers/OIDCTypes.ts"],"sourcesContent":["import * as Typesafe from '@contember/typesafe'\nimport { ResponseType } from 'openid-client'\n\nexport interface OIDCSessionData {\n\tnonce: string\n\tstate: string\n}\n\nexport const OIDCConfigurationOptions = Typesafe.partial({\n\tresponseType: Typesafe.enumeration<ResponseType>('code', 'code id_token', 'code id_token token', 'code token', 'id_token', 'id_token token', 'none'),\n\tclaims: Typesafe.string, // deprecated, use scope instead\n\tscope: Typesafe.string,\n\tadditionalAuthorizedParties: Typesafe.array(Typesafe.string),\n\tidTokenSignedResponseAlg: Typesafe.string,\n\tfetchUserInfo: Typesafe.boolean,\n\treturnOIDCResult: Typesafe.boolean,\n})\nexport const BaseOIDCConfiguration = Typesafe.intersection(\n\tTypesafe.object({\n\t\turl: Typesafe.string,\n\t\tclientId: Typesafe.string,\n\t\tclientSecret: Typesafe.string,\n\t}),\n\tOIDCConfigurationOptions,\n)\n\nexport const OIDCConfiguration = Typesafe.intersection(\n\tBaseOIDCConfiguration,\n\tTypesafe.object({\n\t\turl: Typesafe.string,\n\t}),\n)\n\nexport type OIDCConfiguration = ReturnType<typeof OIDCConfiguration>\n\nexport const OIDCResponseData = Typesafe.intersection(\n\tTypesafe.union(\n\t\tTypesafe.object({\n\t\t\turl: Typesafe.string,\n\t\t}),\n\t\tTypesafe.object({\n\t\t\tparameters: Typesafe.record(Typesafe.string, Typesafe.string),\n\t\t}),\n\t),\n\tTypesafe.partial({\n\t\tredirectUrl: Typesafe.string,\n\t\tsessionData: Typesafe.partial({\n\t\t\tnonce: Typesafe.string,\n\t\t\tstate: Typesafe.string,\n\t\t}),\n\n\t}),\n)\n\nexport type OIDCResponseData = ReturnType<typeof OIDCResponseData>\n\nexport const OIDCInitData = Typesafe.noExtraProps(Typesafe.intersection(\n\tTypesafe.object({\n\t\tredirectUrl: Typesafe.string,\n\t}),\n\tTypesafe.partial({\n\t\tresponseMode: Typesafe.string,\n\t}),\n))\n\nexport type OIDCInitData = ReturnType<typeof OIDCInitData>\n"],"names":["Typesafe"],"mappings":";;;;;;;;;;;;;;;;;;;;AAQa,MAAA,2BAA2BA,oBAAS,QAAQ;AAAA,EACxD,cAAcA,oBAAS,YAA0B,QAAQ,iBAAiB,uBAAuB,cAAc,YAAY,kBAAkB,MAAM;AAAA,EACnJ,QAAQA,oBAAS;AAAA;AAAA,EACjB,OAAOA,oBAAS;AAAA,EAChB,6BAA6BA,oBAAS,MAAMA,oBAAS,MAAM;AAAA,EAC3D,0BAA0BA,oBAAS;AAAA,EACnC,eAAeA,oBAAS;AAAA,EACxB,kBAAkBA,oBAAS;AAC5B,CAAC;AACM,MAAM,wBAAwBA,oBAAS;AAAA,EAC7CA,oBAAS,OAAO;AAAA,IACf,KAAKA,oBAAS;AAAA,IACd,UAAUA,oBAAS;AAAA,IACnB,cAAcA,oBAAS;AAAA,EAAA,CACvB;AAAA,EACD;AACD;AAEO,MAAM,oBAAoBA,oBAAS;AAAA,EACzC;AAAA,EACAA,oBAAS,OAAO;AAAA,IACf,KAAKA,oBAAS;AAAA,EACd,CAAA;AACF;AAIO,MAAM,mBAAmBA,oBAAS;AAAA,EACxCA,oBAAS;AAAA,IACRA,oBAAS,OAAO;AAAA,MACf,KAAKA,oBAAS;AAAA,IAAA,CACd;AAAA,IACDA,oBAAS,OAAO;AAAA,MACf,YAAYA,oBAAS,OAAOA,oBAAS,QAAQA,oBAAS,MAAM;AAAA,IAC5D,CAAA;AAAA,EACF;AAAA,EACAA,oBAAS,QAAQ;AAAA,IAChB,aAAaA,oBAAS;AAAA,IACtB,aAAaA,oBAAS,QAAQ;AAAA,MAC7B,OAAOA,oBAAS;AAAA,MAChB,OAAOA,oBAAS;AAAA,IAChB,CAAA;AAAA,EAED,CAAA;AACF;AAIa,MAAA,eAAeA,oBAAS,aAAaA,oBAAS;AAAA,EAC1DA,oBAAS,OAAO;AAAA,IACf,aAAaA,oBAAS;AAAA,EAAA,CACtB;AAAA,EACDA,oBAAS,QAAQ;AAAA,IAChB,cAAcA,oBAAS;AAAA,EACvB,CAAA;AACF,CAAC;;;;;;"}

package/dist/production/src/model/service/idp/providers/OIDCTypes.js

@@ -2,7 +2,12 @@ import * as Typesafe from "@contember/typesafe";
 const OIDCConfigurationOptions = Typesafe.partial({
   responseType: Typesafe.enumeration("code", "code id_token", "code id_token token", "code token", "id_token", "id_token token", "none"),
   claims: Typesafe.string,
-  additionalAuthorizedParties: Typesafe.array(Typesafe.string)
+  // deprecated, use scope instead
+  scope: Typesafe.string,
+  additionalAuthorizedParties: Typesafe.array(Typesafe.string),
+  idTokenSignedResponseAlg: Typesafe.string,
+  fetchUserInfo: Typesafe.boolean,
+  returnOIDCResult: Typesafe.boolean
 });
 const BaseOIDCConfiguration = Typesafe.intersection(
   Typesafe.object({

package/dist/production/src/model/service/idp/providers/OIDCTypes.js.map

@@ -1 +1 @@
-{"version":3,"file":"OIDCTypes.js","sources":["../../../../../../../../packages/engine-tenant-api/src/model/service/idp/providers/OIDCTypes.ts"],"sourcesContent":["import * as Typesafe from '@contember/typesafe'\nimport { ResponseType } from 'openid-client'\n\nexport interface OIDCSessionData {\n\tnonce: string\n\tstate: string\n}\n\nexport const OIDCConfigurationOptions = Typesafe.partial({\n\tresponseType: Typesafe.enumeration<ResponseType>('code', 'code id_token', 'code id_token token', 'code token', 'id_token', 'id_token token', 'none'),\n\tclaims: Typesafe.string,\n\tadditionalAuthorizedParties: Typesafe.array(Typesafe.string),\n})\nexport const BaseOIDCConfiguration = Typesafe.intersection(\n\tTypesafe.object({\n\t\turl: Typesafe.string,\n\t\tclientId: Typesafe.string,\n\t\tclientSecret: Typesafe.string,\n\t}),\n\tOIDCConfigurationOptions,\n)\n\nexport const OIDCConfiguration = Typesafe.intersection(\n\tBaseOIDCConfiguration,\n\tTypesafe.object({\n\t\turl: Typesafe.string,\n\t}),\n)\n\nexport type OIDCConfiguration = ReturnType<typeof OIDCConfiguration>\n\nexport const OIDCResponseData = Typesafe.intersection(\n\tTypesafe.union(\n\t\tTypesafe.object({\n\t\t\turl: Typesafe.string,\n\t\t}),\n\t\tTypesafe.object({\n\t\t\tparameters: Typesafe.record(Typesafe.string, Typesafe.string),\n\t\t}),\n\t),\n\tTypesafe.partial({\n\t\tredirectUrl: Typesafe.string,\n\t\tsessionData: Typesafe.partial({\n\t\t\tnonce: Typesafe.string,\n\t\t\tstate: Typesafe.string,\n\t\t}),\n\n\t}),\n)\n\nexport type OIDCResponseData = ReturnType<typeof OIDCResponseData>\n\nexport const OIDCInitData = Typesafe.noExtraProps(Typesafe.intersection(\n\tTypesafe.object({\n\t\tredirectUrl: Typesafe.string,\n\t}),\n\tTypesafe.partial({\n\t\tresponseMode: Typesafe.string,\n\t}),\n))\n\nexport type OIDCInitData = ReturnType<typeof OIDCInitData>\n"],"names":[],"mappings":";AAQa,MAAA,2BAA2B,SAAS,QAAQ;AAAA,EACxD,cAAc,SAAS,YAA0B,QAAQ,iBAAiB,uBAAuB,cAAc,YAAY,kBAAkB,MAAM;AAAA,EACnJ,QAAQ,SAAS;AAAA,EACjB,6BAA6B,SAAS,MAAM,SAAS,MAAM;AAC5D,CAAC;AACM,MAAM,wBAAwB,SAAS;AAAA,EAC7C,SAAS,OAAO;AAAA,IACf,KAAK,SAAS;AAAA,IACd,UAAU,SAAS;AAAA,IACnB,cAAc,SAAS;AAAA,EAAA,CACvB;AAAA,EACD;AACD;AAEO,MAAM,oBAAoB,SAAS;AAAA,EACzC;AAAA,EACA,SAAS,OAAO;AAAA,IACf,KAAK,SAAS;AAAA,EAAA,CACd;AACF;AAIO,MAAM,mBAAmB,SAAS;AAAA,EACxC,SAAS;AAAA,IACR,SAAS,OAAO;AAAA,MACf,KAAK,SAAS;AAAA,IAAA,CACd;AAAA,IACD,SAAS,OAAO;AAAA,MACf,YAAY,SAAS,OAAO,SAAS,QAAQ,SAAS,MAAM;AAAA,IAAA,CAC5D;AAAA,EACF;AAAA,EACA,SAAS,QAAQ;AAAA,IAChB,aAAa,SAAS;AAAA,IACtB,aAAa,SAAS,QAAQ;AAAA,MAC7B,OAAO,SAAS;AAAA,MAChB,OAAO,SAAS;AAAA,IAAA,CAChB;AAAA,EAAA,CAED;AACF;AAIa,MAAA,eAAe,SAAS,aAAa,SAAS;AAAA,EAC1D,SAAS,OAAO;AAAA,IACf,aAAa,SAAS;AAAA,EAAA,CACtB;AAAA,EACD,SAAS,QAAQ;AAAA,IAChB,cAAc,SAAS;AAAA,EAAA,CACvB;AACF,CAAC;"}
+{"version":3,"file":"OIDCTypes.js","sources":["../../../../../../../../packages/engine-tenant-api/src/model/service/idp/providers/OIDCTypes.ts"],"sourcesContent":["import * as Typesafe from '@contember/typesafe'\nimport { ResponseType } from 'openid-client'\n\nexport interface OIDCSessionData {\n\tnonce: string\n\tstate: string\n}\n\nexport const OIDCConfigurationOptions = Typesafe.partial({\n\tresponseType: Typesafe.enumeration<ResponseType>('code', 'code id_token', 'code id_token token', 'code token', 'id_token', 'id_token token', 'none'),\n\tclaims: Typesafe.string, // deprecated, use scope instead\n\tscope: Typesafe.string,\n\tadditionalAuthorizedParties: Typesafe.array(Typesafe.string),\n\tidTokenSignedResponseAlg: Typesafe.string,\n\tfetchUserInfo: Typesafe.boolean,\n\treturnOIDCResult: Typesafe.boolean,\n})\nexport const BaseOIDCConfiguration = Typesafe.intersection(\n\tTypesafe.object({\n\t\turl: Typesafe.string,\n\t\tclientId: Typesafe.string,\n\t\tclientSecret: Typesafe.string,\n\t}),\n\tOIDCConfigurationOptions,\n)\n\nexport const OIDCConfiguration = Typesafe.intersection(\n\tBaseOIDCConfiguration,\n\tTypesafe.object({\n\t\turl: Typesafe.string,\n\t}),\n)\n\nexport type OIDCConfiguration = ReturnType<typeof OIDCConfiguration>\n\nexport const OIDCResponseData = Typesafe.intersection(\n\tTypesafe.union(\n\t\tTypesafe.object({\n\t\t\turl: Typesafe.string,\n\t\t}),\n\t\tTypesafe.object({\n\t\t\tparameters: Typesafe.record(Typesafe.string, Typesafe.string),\n\t\t}),\n\t),\n\tTypesafe.partial({\n\t\tredirectUrl: Typesafe.string,\n\t\tsessionData: Typesafe.partial({\n\t\t\tnonce: Typesafe.string,\n\t\t\tstate: Typesafe.string,\n\t\t}),\n\n\t}),\n)\n\nexport type OIDCResponseData = ReturnType<typeof OIDCResponseData>\n\nexport const OIDCInitData = Typesafe.noExtraProps(Typesafe.intersection(\n\tTypesafe.object({\n\t\tredirectUrl: Typesafe.string,\n\t}),\n\tTypesafe.partial({\n\t\tresponseMode: Typesafe.string,\n\t}),\n))\n\nexport type OIDCInitData = ReturnType<typeof OIDCInitData>\n"],"names":[],"mappings":";AAQa,MAAA,2BAA2B,SAAS,QAAQ;AAAA,EACxD,cAAc,SAAS,YAA0B,QAAQ,iBAAiB,uBAAuB,cAAc,YAAY,kBAAkB,MAAM;AAAA,EACnJ,QAAQ,SAAS;AAAA;AAAA,EACjB,OAAO,SAAS;AAAA,EAChB,6BAA6B,SAAS,MAAM,SAAS,MAAM;AAAA,EAC3D,0BAA0B,SAAS;AAAA,EACnC,eAAe,SAAS;AAAA,EACxB,kBAAkB,SAAS;AAC5B,CAAC;AACM,MAAM,wBAAwB,SAAS;AAAA,EAC7C,SAAS,OAAO;AAAA,IACf,KAAK,SAAS;AAAA,IACd,UAAU,SAAS;AAAA,IACnB,cAAc,SAAS;AAAA,EAAA,CACvB;AAAA,EACD;AACD;AAEO,MAAM,oBAAoB,SAAS;AAAA,EACzC;AAAA,EACA,SAAS,OAAO;AAAA,IACf,KAAK,SAAS;AAAA,EACd,CAAA;AACF;AAIO,MAAM,mBAAmB,SAAS;AAAA,EACxC,SAAS;AAAA,IACR,SAAS,OAAO;AAAA,MACf,KAAK,SAAS;AAAA,IAAA,CACd;AAAA,IACD,SAAS,OAAO;AAAA,MACf,YAAY,SAAS,OAAO,SAAS,QAAQ,SAAS,MAAM;AAAA,IAC5D,CAAA;AAAA,EACF;AAAA,EACA,SAAS,QAAQ;AAAA,IAChB,aAAa,SAAS;AAAA,IACtB,aAAa,SAAS,QAAQ;AAAA,MAC7B,OAAO,SAAS;AAAA,MAChB,OAAO,SAAS;AAAA,IAChB,CAAA;AAAA,EAED,CAAA;AACF;AAIa,MAAA,eAAe,SAAS,aAAa,SAAS;AAAA,EAC1D,SAAS,OAAO;AAAA,IACf,aAAa,SAAS;AAAA,EAAA,CACtB;AAAA,EACD,SAAS,QAAQ;AAAA,IAChB,cAAc,SAAS;AAAA,EACvB,CAAA;AACF,CAAC;"}

package/dist/production/src/model/service/idp/providers/helpers.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.cjs","sources":["../../../../../../../../packages/engine-tenant-api/src/model/service/idp/providers/helpers.ts"],"sourcesContent":["import * as Typesafe from '@contember/typesafe'\n\nexport const catchTypesafe = <T extends Typesafe.Json>(type: Typesafe.Type<T>, errorConstructor: { new(message: string): Error }) => (value: unknown): T => {\n\ttry {\n\t\treturn type(value)\n\t} catch (e) {\n\t\tif (e instanceof Typesafe.ParseError) {\n\t\t\tthrow new errorConstructor(e.message)\n\t\t}\n\t\tthrow e\n\t}\n}\n"],"names":["Typesafe"],"mappings":";;;;;;;;;;;;;;;;;;;;AAEO,MAAM,gBAAgB,CAA0B,MAAwB,qBAAsD,CAAC,UAAsB;AACvJ,MAAA;AACH,WAAO,KAAK,KAAK;AAAA,WACT,GAAG;AACP,QAAA,aAAaA,oBAAS,YAAY;AAC/B,YAAA,IAAI,iBAAiB,EAAE,OAAO;AAAA,IACrC;AACM,UAAA;AAAA,EACP;AACD;;"}
+{"version":3,"file":"helpers.cjs","sources":["../../../../../../../../packages/engine-tenant-api/src/model/service/idp/providers/helpers.ts"],"sourcesContent":["import * as Typesafe from '@contember/typesafe'\n\nexport const catchTypesafe = <T extends Typesafe.Json>(type: Typesafe.Type<T>, errorConstructor: { new(message: string): Error }) => (value: unknown): T => {\n\ttry {\n\t\treturn type(value)\n\t} catch (e) {\n\t\tif (e instanceof Typesafe.ParseError) {\n\t\t\tthrow new errorConstructor(e.message)\n\t\t}\n\t\tthrow e\n\t}\n}\n"],"names":["Typesafe"],"mappings":";;;;;;;;;;;;;;;;;;;;AAEO,MAAM,gBAAgB,CAA0B,MAAwB,qBAAsD,CAAC,UAAsB;AACvJ,MAAA;AACH,WAAO,KAAK,KAAK;AAAA,WACT,GAAG;AACP,QAAA,aAAaA,oBAAS,YAAY;AAC/B,YAAA,IAAI,iBAAiB,EAAE,OAAO;AAAA,IAAA;AAE/B,UAAA;AAAA,EAAA;AAER;;"}

package/dist/production/src/model/service/idp/providers/helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.js","sources":["../../../../../../../../packages/engine-tenant-api/src/model/service/idp/providers/helpers.ts"],"sourcesContent":["import * as Typesafe from '@contember/typesafe'\n\nexport const catchTypesafe = <T extends Typesafe.Json>(type: Typesafe.Type<T>, errorConstructor: { new(message: string): Error }) => (value: unknown): T => {\n\ttry {\n\t\treturn type(value)\n\t} catch (e) {\n\t\tif (e instanceof Typesafe.ParseError) {\n\t\t\tthrow new errorConstructor(e.message)\n\t\t}\n\t\tthrow e\n\t}\n}\n"],"names":[],"mappings":";AAEO,MAAM,gBAAgB,CAA0B,MAAwB,qBAAsD,CAAC,UAAsB;AACvJ,MAAA;AACH,WAAO,KAAK,KAAK;AAAA,WACT,GAAG;AACP,QAAA,aAAa,SAAS,YAAY;AAC/B,YAAA,IAAI,iBAAiB,EAAE,OAAO;AAAA,IACrC;AACM,UAAA;AAAA,EACP;AACD;"}
+{"version":3,"file":"helpers.js","sources":["../../../../../../../../packages/engine-tenant-api/src/model/service/idp/providers/helpers.ts"],"sourcesContent":["import * as Typesafe from '@contember/typesafe'\n\nexport const catchTypesafe = <T extends Typesafe.Json>(type: Typesafe.Type<T>, errorConstructor: { new(message: string): Error }) => (value: unknown): T => {\n\ttry {\n\t\treturn type(value)\n\t} catch (e) {\n\t\tif (e instanceof Typesafe.ParseError) {\n\t\t\tthrow new errorConstructor(e.message)\n\t\t}\n\t\tthrow e\n\t}\n}\n"],"names":[],"mappings":";AAEO,MAAM,gBAAgB,CAA0B,MAAwB,qBAAsD,CAAC,UAAsB;AACvJ,MAAA;AACH,WAAO,KAAK,KAAK;AAAA,WACT,GAAG;AACP,QAAA,aAAa,SAAS,YAAY;AAC/B,YAAA,IAAI,iBAAiB,EAAE,OAAO;AAAA,IAAA;AAE/B,UAAA;AAAA,EAAA;AAER;"}

package/dist/production/src/model/service/membershipUtils.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"membershipUtils.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/service/membershipUtils.ts"],"sourcesContent":["import { MembershipInput, MembershipUpdateInput, VariableUpdateInput } from '../commands'\nimport { Acl } from '@contember/schema'\n\nexport const createSetMembershipVariables = (memberships: readonly Acl.Membership[]): MembershipInput[] => {\n\treturn memberships.map(it => ({\n\t\trole: it.role,\n\t\tvariables: it.variables.map(it => ({ name: it.name, set: it.values })),\n\t}))\n}\nexport const createAppendMembershipVariables = (memberships: readonly Acl.Membership[]): MembershipInput[] => {\n\treturn memberships.map(it => ({\n\t\trole: it.role,\n\t\tvariables: it.variables.map(it => ({ name: it.name, append: it.values, remove: [] })),\n\t}))\n}\n\nexport const createMembershipModification = (\n\toldMemberships: readonly Acl.Membership[],\n\tnewMemberships: readonly Acl.Membership[],\n): MembershipUpdateInput[] => {\n\tconst input: MembershipUpdateInput[] = []\n\tfor (const membership of newMemberships) {\n\t\tconst old = oldMemberships.find(it => it.role === membership.role)\n\t\tif (!old) {\n\t\t\tinput.push({\n\t\t\t\trole: membership.role,\n\t\t\t\toperation: 'create',\n\t\t\t\tvariables: createMembershipVariablePatch([], membership.variables),\n\t\t\t})\n\t\t} else {\n\t\t\tinput.push({\n\t\t\t\trole: membership.role,\n\t\t\t\toperation: 'update',\n\t\t\t\tvariables: createMembershipVariablePatch(old.variables, membership.variables),\n\t\t\t})\n\t\t}\n\t}\n\tfor (const old of oldMemberships) {\n\t\tconst newMembership = newMemberships.find(it => it.role === old.role)\n\t\tif (!newMembership) {\n\t\t\tinput.push({\n\t\t\t\trole: old.role,\n\t\t\t\toperation: 'remove',\n\t\t\t\tvariables: createMembershipVariablePatch(old.variables, []), // for acl check\n\t\t\t})\n\t\t}\n\t}\n\n\treturn input\n}\n\nconst createMembershipVariablePatch = (\n\toldVariables: readonly Acl.MembershipVariable[],\n\tnewVariables: readonly Acl.MembershipVariable[],\n): VariableUpdateInput[] => {\n\tconst update: VariableUpdateInput[] = []\n\tconst varANames = newVariables.map(it => it.name)\n\tfor (const varA of newVariables) {\n\t\tconst varB = oldVariables.find(it => it.name === varA.name)\n\t\tif (!varB) {\n\t\t\tupdate.push({\n\t\t\t\tname: varA.name,\n\t\t\t\tset: varA.values,\n\t\t\t})\n\t\t} else {\n\t\t\tupdate.push({\n\t\t\t\tname: varA.name,\n\t\t\t\tappend: varA.values.filter(valA => !varB.values.includes(valA)),\n\t\t\t\tremove: varB.values.filter(valB => !varA.values.includes(valB)),\n\t\t\t})\n\t\t}\n\t}\n\tupdate.push(\n\t\t...oldVariables\n\t\t\t.filter(varB => !varANames.includes(varB.name))\n\t\t\t.map(it => ({\n\t\t\t\tname: it.name,\n\t\t\t\tset: [],\n\t\t\t})),\n\t)\n\treturn update\n}\n"],"names":["it"],"mappings":";;AAGa,MAAA,+BAA+B,CAAC,gBAA8D;AACnG,SAAA,YAAY,IAAI,CAAO,QAAA;AAAA,IAC7B,MAAM,GAAG;AAAA,IACT,WAAW,GAAG,UAAU,IAAI,CAAAA,SAAO,EAAE,MAAMA,IAAG,MAAM,KAAKA,IAAG,OAAS,EAAA;AAAA,EACpE,EAAA;AACH;AACa,MAAA,kCAAkC,CAAC,gBAA8D;AACtG,SAAA,YAAY,IAAI,CAAO,QAAA;AAAA,IAC7B,MAAM,GAAG;AAAA,IACT,WAAW,GAAG,UAAU,IAAI,CAAAA,SAAO,EAAE,MAAMA,IAAG,MAAM,QAAQA,IAAG,QAAQ,QAAQ,KAAK;AAAA,EACnF,EAAA;AACH;AAEa,MAAA,+BAA+B,CAC3C,gBACA,mBAC6B;AAC7B,QAAM,QAAiC,CAAA;AACvC,aAAW,cAAc,gBAAgB;AACxC,UAAM,MAAM,eAAe,KAAK,QAAM,GAAG,SAAS,WAAW,IAAI;AACjE,QAAI,CAAC,KAAK;AACT,YAAM,KAAK;AAAA,QACV,MAAM,WAAW;AAAA,QACjB,WAAW;AAAA,QACX,WAAW,8BAA8B,IAAI,WAAW,SAAS;AAAA,MAAA,CACjE;AAAA,IAAA,OACK;AACN,YAAM,KAAK;AAAA,QACV,MAAM,WAAW;AAAA,QACjB,WAAW;AAAA,QACX,WAAW,8BAA8B,IAAI,WAAW,WAAW,SAAS;AAAA,MAAA,CAC5E;AAAA,IACF;AAAA,EACD;AACA,aAAW,OAAO,gBAAgB;AACjC,UAAM,gBAAgB,eAAe,KAAK,QAAM,GAAG,SAAS,IAAI,IAAI;AACpE,QAAI,CAAC,eAAe;AACnB,YAAM,KAAK;AAAA,QACV,MAAM,IAAI;AAAA,QACV,WAAW;AAAA,QACX,WAAW,8BAA8B,IAAI,WAAW,CAAA,CAAE;AAAA;AAAA,MAAA,CAC1D;AAAA,IACF;AAAA,EACD;AAEO,SAAA;AACR;AAEA,MAAM,gCAAgC,CACrC,cACA,iBAC2B;AAC3B,QAAM,SAAgC,CAAA;AACtC,QAAM,YAAY,aAAa,IAAI,CAAA,OAAM,GAAG,IAAI;AAChD,aAAW,QAAQ,cAAc;AAChC,UAAM,OAAO,aAAa,KAAK,QAAM,GAAG,SAAS,KAAK,IAAI;AAC1D,QAAI,CAAC,MAAM;AACV,aAAO,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX,KAAK,KAAK;AAAA,MAAA,CACV;AAAA,IAAA,OACK;AACN,aAAO,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX,QAAQ,KAAK,OAAO,OAAO,CAAA,SAAQ,CAAC,KAAK,OAAO,SAAS,IAAI,CAAC;AAAA,QAC9D,QAAQ,KAAK,OAAO,OAAO,CAAA,SAAQ,CAAC,KAAK,OAAO,SAAS,IAAI,CAAC;AAAA,MAAA,CAC9D;AAAA,IACF;AAAA,EACD;AACO,SAAA;AAAA,IACN,GAAG,aACD,OAAO,CAAA,SAAQ,CAAC,UAAU,SAAS,KAAK,IAAI,CAAC,EAC7C,IAAI,CAAO,QAAA;AAAA,MACX,MAAM,GAAG;AAAA,MACT,KAAK,CAAC;AAAA,IAAA,EACL;AAAA,EAAA;AAEG,SAAA;AACR;;;;"}
+{"version":3,"file":"membershipUtils.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/service/membershipUtils.ts"],"sourcesContent":["import { MembershipInput, MembershipUpdateInput, VariableUpdateInput } from '../commands'\nimport { Acl } from '@contember/schema'\n\nexport const createSetMembershipVariables = (memberships: readonly Acl.Membership[]): MembershipInput[] => {\n\treturn memberships.map(it => ({\n\t\trole: it.role,\n\t\tvariables: it.variables.map(it => ({ name: it.name, set: it.values })),\n\t}))\n}\nexport const createAppendMembershipVariables = (memberships: readonly Acl.Membership[]): MembershipInput[] => {\n\treturn memberships.map(it => ({\n\t\trole: it.role,\n\t\tvariables: it.variables.map(it => ({ name: it.name, append: it.values, remove: [] })),\n\t}))\n}\n\nexport const createMembershipModification = (\n\toldMemberships: readonly Acl.Membership[],\n\tnewMemberships: readonly Acl.Membership[],\n): MembershipUpdateInput[] => {\n\tconst input: MembershipUpdateInput[] = []\n\tfor (const membership of newMemberships) {\n\t\tconst old = oldMemberships.find(it => it.role === membership.role)\n\t\tif (!old) {\n\t\t\tinput.push({\n\t\t\t\trole: membership.role,\n\t\t\t\toperation: 'create',\n\t\t\t\tvariables: createMembershipVariablePatch([], membership.variables),\n\t\t\t})\n\t\t} else {\n\t\t\tinput.push({\n\t\t\t\trole: membership.role,\n\t\t\t\toperation: 'update',\n\t\t\t\tvariables: createMembershipVariablePatch(old.variables, membership.variables),\n\t\t\t})\n\t\t}\n\t}\n\tfor (const old of oldMemberships) {\n\t\tconst newMembership = newMemberships.find(it => it.role === old.role)\n\t\tif (!newMembership) {\n\t\t\tinput.push({\n\t\t\t\trole: old.role,\n\t\t\t\toperation: 'remove',\n\t\t\t\tvariables: createMembershipVariablePatch(old.variables, []), // for acl check\n\t\t\t})\n\t\t}\n\t}\n\n\treturn input\n}\n\nconst createMembershipVariablePatch = (\n\toldVariables: readonly Acl.MembershipVariable[],\n\tnewVariables: readonly Acl.MembershipVariable[],\n): VariableUpdateInput[] => {\n\tconst update: VariableUpdateInput[] = []\n\tconst varANames = newVariables.map(it => it.name)\n\tfor (const varA of newVariables) {\n\t\tconst varB = oldVariables.find(it => it.name === varA.name)\n\t\tif (!varB) {\n\t\t\tupdate.push({\n\t\t\t\tname: varA.name,\n\t\t\t\tset: varA.values,\n\t\t\t})\n\t\t} else {\n\t\t\tupdate.push({\n\t\t\t\tname: varA.name,\n\t\t\t\tappend: varA.values.filter(valA => !varB.values.includes(valA)),\n\t\t\t\tremove: varB.values.filter(valB => !varA.values.includes(valB)),\n\t\t\t})\n\t\t}\n\t}\n\tupdate.push(\n\t\t...oldVariables\n\t\t\t.filter(varB => !varANames.includes(varB.name))\n\t\t\t.map(it => ({\n\t\t\t\tname: it.name,\n\t\t\t\tset: [],\n\t\t\t})),\n\t)\n\treturn update\n}\n"],"names":["it"],"mappings":";;AAGa,MAAA,+BAA+B,CAAC,gBAA8D;AACnG,SAAA,YAAY,IAAI,CAAO,QAAA;AAAA,IAC7B,MAAM,GAAG;AAAA,IACT,WAAW,GAAG,UAAU,IAAI,CAAAA,SAAO,EAAE,MAAMA,IAAG,MAAM,KAAKA,IAAG,SAAS;AAAA,EAAA,EACpE;AACH;AACa,MAAA,kCAAkC,CAAC,gBAA8D;AACtG,SAAA,YAAY,IAAI,CAAO,QAAA;AAAA,IAC7B,MAAM,GAAG;AAAA,IACT,WAAW,GAAG,UAAU,IAAI,CAAAA,SAAO,EAAE,MAAMA,IAAG,MAAM,QAAQA,IAAG,QAAQ,QAAQ,KAAK;AAAA,EAAA,EACnF;AACH;AAEa,MAAA,+BAA+B,CAC3C,gBACA,mBAC6B;AAC7B,QAAM,QAAiC,CAAC;AACxC,aAAW,cAAc,gBAAgB;AACxC,UAAM,MAAM,eAAe,KAAK,QAAM,GAAG,SAAS,WAAW,IAAI;AACjE,QAAI,CAAC,KAAK;AACT,YAAM,KAAK;AAAA,QACV,MAAM,WAAW;AAAA,QACjB,WAAW;AAAA,QACX,WAAW,8BAA8B,IAAI,WAAW,SAAS;AAAA,MAAA,CACjE;AAAA,IAAA,OACK;AACN,YAAM,KAAK;AAAA,QACV,MAAM,WAAW;AAAA,QACjB,WAAW;AAAA,QACX,WAAW,8BAA8B,IAAI,WAAW,WAAW,SAAS;AAAA,MAAA,CAC5E;AAAA,IAAA;AAAA,EACF;AAED,aAAW,OAAO,gBAAgB;AACjC,UAAM,gBAAgB,eAAe,KAAK,QAAM,GAAG,SAAS,IAAI,IAAI;AACpE,QAAI,CAAC,eAAe;AACnB,YAAM,KAAK;AAAA,QACV,MAAM,IAAI;AAAA,QACV,WAAW;AAAA,QACX,WAAW,8BAA8B,IAAI,WAAW,CAAE,CAAA;AAAA;AAAA,MAAA,CAC1D;AAAA,IAAA;AAAA,EACF;AAGM,SAAA;AACR;AAEA,MAAM,gCAAgC,CACrC,cACA,iBAC2B;AAC3B,QAAM,SAAgC,CAAC;AACvC,QAAM,YAAY,aAAa,IAAI,CAAA,OAAM,GAAG,IAAI;AAChD,aAAW,QAAQ,cAAc;AAChC,UAAM,OAAO,aAAa,KAAK,QAAM,GAAG,SAAS,KAAK,IAAI;AAC1D,QAAI,CAAC,MAAM;AACV,aAAO,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX,KAAK,KAAK;AAAA,MAAA,CACV;AAAA,IAAA,OACK;AACN,aAAO,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX,QAAQ,KAAK,OAAO,OAAO,CAAA,SAAQ,CAAC,KAAK,OAAO,SAAS,IAAI,CAAC;AAAA,QAC9D,QAAQ,KAAK,OAAO,OAAO,CAAA,SAAQ,CAAC,KAAK,OAAO,SAAS,IAAI,CAAC;AAAA,MAAA,CAC9D;AAAA,IAAA;AAAA,EACF;AAEM,SAAA;AAAA,IACN,GAAG,aACD,OAAO,CAAA,SAAQ,CAAC,UAAU,SAAS,KAAK,IAAI,CAAC,EAC7C,IAAI,CAAO,QAAA;AAAA,MACX,MAAM,GAAG;AAAA,MACT,KAAK,CAAA;AAAA,IAAC,EACL;AAAA,EACJ;AACO,SAAA;AACR;;;;"}

package/dist/production/src/model/service/membershipUtils.js.map

@@ -1 +1 @@
-{"version":3,"file":"membershipUtils.js","sources":["../../../../../../packages/engine-tenant-api/src/model/service/membershipUtils.ts"],"sourcesContent":["import { MembershipInput, MembershipUpdateInput, VariableUpdateInput } from '../commands'\nimport { Acl } from '@contember/schema'\n\nexport const createSetMembershipVariables = (memberships: readonly Acl.Membership[]): MembershipInput[] => {\n\treturn memberships.map(it => ({\n\t\trole: it.role,\n\t\tvariables: it.variables.map(it => ({ name: it.name, set: it.values })),\n\t}))\n}\nexport const createAppendMembershipVariables = (memberships: readonly Acl.Membership[]): MembershipInput[] => {\n\treturn memberships.map(it => ({\n\t\trole: it.role,\n\t\tvariables: it.variables.map(it => ({ name: it.name, append: it.values, remove: [] })),\n\t}))\n}\n\nexport const createMembershipModification = (\n\toldMemberships: readonly Acl.Membership[],\n\tnewMemberships: readonly Acl.Membership[],\n): MembershipUpdateInput[] => {\n\tconst input: MembershipUpdateInput[] = []\n\tfor (const membership of newMemberships) {\n\t\tconst old = oldMemberships.find(it => it.role === membership.role)\n\t\tif (!old) {\n\t\t\tinput.push({\n\t\t\t\trole: membership.role,\n\t\t\t\toperation: 'create',\n\t\t\t\tvariables: createMembershipVariablePatch([], membership.variables),\n\t\t\t})\n\t\t} else {\n\t\t\tinput.push({\n\t\t\t\trole: membership.role,\n\t\t\t\toperation: 'update',\n\t\t\t\tvariables: createMembershipVariablePatch(old.variables, membership.variables),\n\t\t\t})\n\t\t}\n\t}\n\tfor (const old of oldMemberships) {\n\t\tconst newMembership = newMemberships.find(it => it.role === old.role)\n\t\tif (!newMembership) {\n\t\t\tinput.push({\n\t\t\t\trole: old.role,\n\t\t\t\toperation: 'remove',\n\t\t\t\tvariables: createMembershipVariablePatch(old.variables, []), // for acl check\n\t\t\t})\n\t\t}\n\t}\n\n\treturn input\n}\n\nconst createMembershipVariablePatch = (\n\toldVariables: readonly Acl.MembershipVariable[],\n\tnewVariables: readonly Acl.MembershipVariable[],\n): VariableUpdateInput[] => {\n\tconst update: VariableUpdateInput[] = []\n\tconst varANames = newVariables.map(it => it.name)\n\tfor (const varA of newVariables) {\n\t\tconst varB = oldVariables.find(it => it.name === varA.name)\n\t\tif (!varB) {\n\t\t\tupdate.push({\n\t\t\t\tname: varA.name,\n\t\t\t\tset: varA.values,\n\t\t\t})\n\t\t} else {\n\t\t\tupdate.push({\n\t\t\t\tname: varA.name,\n\t\t\t\tappend: varA.values.filter(valA => !varB.values.includes(valA)),\n\t\t\t\tremove: varB.values.filter(valB => !varA.values.includes(valB)),\n\t\t\t})\n\t\t}\n\t}\n\tupdate.push(\n\t\t...oldVariables\n\t\t\t.filter(varB => !varANames.includes(varB.name))\n\t\t\t.map(it => ({\n\t\t\t\tname: it.name,\n\t\t\t\tset: [],\n\t\t\t})),\n\t)\n\treturn update\n}\n"],"names":["it"],"mappings":"AAGa,MAAA,+BAA+B,CAAC,gBAA8D;AACnG,SAAA,YAAY,IAAI,CAAO,QAAA;AAAA,IAC7B,MAAM,GAAG;AAAA,IACT,WAAW,GAAG,UAAU,IAAI,CAAAA,SAAO,EAAE,MAAMA,IAAG,MAAM,KAAKA,IAAG,OAAS,EAAA;AAAA,EACpE,EAAA;AACH;AACa,MAAA,kCAAkC,CAAC,gBAA8D;AACtG,SAAA,YAAY,IAAI,CAAO,QAAA;AAAA,IAC7B,MAAM,GAAG;AAAA,IACT,WAAW,GAAG,UAAU,IAAI,CAAAA,SAAO,EAAE,MAAMA,IAAG,MAAM,QAAQA,IAAG,QAAQ,QAAQ,KAAK;AAAA,EACnF,EAAA;AACH;AAEa,MAAA,+BAA+B,CAC3C,gBACA,mBAC6B;AAC7B,QAAM,QAAiC,CAAA;AACvC,aAAW,cAAc,gBAAgB;AACxC,UAAM,MAAM,eAAe,KAAK,QAAM,GAAG,SAAS,WAAW,IAAI;AACjE,QAAI,CAAC,KAAK;AACT,YAAM,KAAK;AAAA,QACV,MAAM,WAAW;AAAA,QACjB,WAAW;AAAA,QACX,WAAW,8BAA8B,IAAI,WAAW,SAAS;AAAA,MAAA,CACjE;AAAA,IAAA,OACK;AACN,YAAM,KAAK;AAAA,QACV,MAAM,WAAW;AAAA,QACjB,WAAW;AAAA,QACX,WAAW,8BAA8B,IAAI,WAAW,WAAW,SAAS;AAAA,MAAA,CAC5E;AAAA,IACF;AAAA,EACD;AACA,aAAW,OAAO,gBAAgB;AACjC,UAAM,gBAAgB,eAAe,KAAK,QAAM,GAAG,SAAS,IAAI,IAAI;AACpE,QAAI,CAAC,eAAe;AACnB,YAAM,KAAK;AAAA,QACV,MAAM,IAAI;AAAA,QACV,WAAW;AAAA,QACX,WAAW,8BAA8B,IAAI,WAAW,CAAA,CAAE;AAAA;AAAA,MAAA,CAC1D;AAAA,IACF;AAAA,EACD;AAEO,SAAA;AACR;AAEA,MAAM,gCAAgC,CACrC,cACA,iBAC2B;AAC3B,QAAM,SAAgC,CAAA;AACtC,QAAM,YAAY,aAAa,IAAI,CAAA,OAAM,GAAG,IAAI;AAChD,aAAW,QAAQ,cAAc;AAChC,UAAM,OAAO,aAAa,KAAK,QAAM,GAAG,SAAS,KAAK,IAAI;AAC1D,QAAI,CAAC,MAAM;AACV,aAAO,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX,KAAK,KAAK;AAAA,MAAA,CACV;AAAA,IAAA,OACK;AACN,aAAO,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX,QAAQ,KAAK,OAAO,OAAO,CAAA,SAAQ,CAAC,KAAK,OAAO,SAAS,IAAI,CAAC;AAAA,QAC9D,QAAQ,KAAK,OAAO,OAAO,CAAA,SAAQ,CAAC,KAAK,OAAO,SAAS,IAAI,CAAC;AAAA,MAAA,CAC9D;AAAA,IACF;AAAA,EACD;AACO,SAAA;AAAA,IACN,GAAG,aACD,OAAO,CAAA,SAAQ,CAAC,UAAU,SAAS,KAAK,IAAI,CAAC,EAC7C,IAAI,CAAO,QAAA;AAAA,MACX,MAAM,GAAG;AAAA,MACT,KAAK,CAAC;AAAA,IAAA,EACL;AAAA,EAAA;AAEG,SAAA;AACR;"}
+{"version":3,"file":"membershipUtils.js","sources":["../../../../../../packages/engine-tenant-api/src/model/service/membershipUtils.ts"],"sourcesContent":["import { MembershipInput, MembershipUpdateInput, VariableUpdateInput } from '../commands'\nimport { Acl } from '@contember/schema'\n\nexport const createSetMembershipVariables = (memberships: readonly Acl.Membership[]): MembershipInput[] => {\n\treturn memberships.map(it => ({\n\t\trole: it.role,\n\t\tvariables: it.variables.map(it => ({ name: it.name, set: it.values })),\n\t}))\n}\nexport const createAppendMembershipVariables = (memberships: readonly Acl.Membership[]): MembershipInput[] => {\n\treturn memberships.map(it => ({\n\t\trole: it.role,\n\t\tvariables: it.variables.map(it => ({ name: it.name, append: it.values, remove: [] })),\n\t}))\n}\n\nexport const createMembershipModification = (\n\toldMemberships: readonly Acl.Membership[],\n\tnewMemberships: readonly Acl.Membership[],\n): MembershipUpdateInput[] => {\n\tconst input: MembershipUpdateInput[] = []\n\tfor (const membership of newMemberships) {\n\t\tconst old = oldMemberships.find(it => it.role === membership.role)\n\t\tif (!old) {\n\t\t\tinput.push({\n\t\t\t\trole: membership.role,\n\t\t\t\toperation: 'create',\n\t\t\t\tvariables: createMembershipVariablePatch([], membership.variables),\n\t\t\t})\n\t\t} else {\n\t\t\tinput.push({\n\t\t\t\trole: membership.role,\n\t\t\t\toperation: 'update',\n\t\t\t\tvariables: createMembershipVariablePatch(old.variables, membership.variables),\n\t\t\t})\n\t\t}\n\t}\n\tfor (const old of oldMemberships) {\n\t\tconst newMembership = newMemberships.find(it => it.role === old.role)\n\t\tif (!newMembership) {\n\t\t\tinput.push({\n\t\t\t\trole: old.role,\n\t\t\t\toperation: 'remove',\n\t\t\t\tvariables: createMembershipVariablePatch(old.variables, []), // for acl check\n\t\t\t})\n\t\t}\n\t}\n\n\treturn input\n}\n\nconst createMembershipVariablePatch = (\n\toldVariables: readonly Acl.MembershipVariable[],\n\tnewVariables: readonly Acl.MembershipVariable[],\n): VariableUpdateInput[] => {\n\tconst update: VariableUpdateInput[] = []\n\tconst varANames = newVariables.map(it => it.name)\n\tfor (const varA of newVariables) {\n\t\tconst varB = oldVariables.find(it => it.name === varA.name)\n\t\tif (!varB) {\n\t\t\tupdate.push({\n\t\t\t\tname: varA.name,\n\t\t\t\tset: varA.values,\n\t\t\t})\n\t\t} else {\n\t\t\tupdate.push({\n\t\t\t\tname: varA.name,\n\t\t\t\tappend: varA.values.filter(valA => !varB.values.includes(valA)),\n\t\t\t\tremove: varB.values.filter(valB => !varA.values.includes(valB)),\n\t\t\t})\n\t\t}\n\t}\n\tupdate.push(\n\t\t...oldVariables\n\t\t\t.filter(varB => !varANames.includes(varB.name))\n\t\t\t.map(it => ({\n\t\t\t\tname: it.name,\n\t\t\t\tset: [],\n\t\t\t})),\n\t)\n\treturn update\n}\n"],"names":["it"],"mappings":"AAGa,MAAA,+BAA+B,CAAC,gBAA8D;AACnG,SAAA,YAAY,IAAI,CAAO,QAAA;AAAA,IAC7B,MAAM,GAAG;AAAA,IACT,WAAW,GAAG,UAAU,IAAI,CAAAA,SAAO,EAAE,MAAMA,IAAG,MAAM,KAAKA,IAAG,SAAS;AAAA,EAAA,EACpE;AACH;AACa,MAAA,kCAAkC,CAAC,gBAA8D;AACtG,SAAA,YAAY,IAAI,CAAO,QAAA;AAAA,IAC7B,MAAM,GAAG;AAAA,IACT,WAAW,GAAG,UAAU,IAAI,CAAAA,SAAO,EAAE,MAAMA,IAAG,MAAM,QAAQA,IAAG,QAAQ,QAAQ,KAAK;AAAA,EAAA,EACnF;AACH;AAEa,MAAA,+BAA+B,CAC3C,gBACA,mBAC6B;AAC7B,QAAM,QAAiC,CAAC;AACxC,aAAW,cAAc,gBAAgB;AACxC,UAAM,MAAM,eAAe,KAAK,QAAM,GAAG,SAAS,WAAW,IAAI;AACjE,QAAI,CAAC,KAAK;AACT,YAAM,KAAK;AAAA,QACV,MAAM,WAAW;AAAA,QACjB,WAAW;AAAA,QACX,WAAW,8BAA8B,IAAI,WAAW,SAAS;AAAA,MAAA,CACjE;AAAA,IAAA,OACK;AACN,YAAM,KAAK;AAAA,QACV,MAAM,WAAW;AAAA,QACjB,WAAW;AAAA,QACX,WAAW,8BAA8B,IAAI,WAAW,WAAW,SAAS;AAAA,MAAA,CAC5E;AAAA,IAAA;AAAA,EACF;AAED,aAAW,OAAO,gBAAgB;AACjC,UAAM,gBAAgB,eAAe,KAAK,QAAM,GAAG,SAAS,IAAI,IAAI;AACpE,QAAI,CAAC,eAAe;AACnB,YAAM,KAAK;AAAA,QACV,MAAM,IAAI;AAAA,QACV,WAAW;AAAA,QACX,WAAW,8BAA8B,IAAI,WAAW,CAAE,CAAA;AAAA;AAAA,MAAA,CAC1D;AAAA,IAAA;AAAA,EACF;AAGM,SAAA;AACR;AAEA,MAAM,gCAAgC,CACrC,cACA,iBAC2B;AAC3B,QAAM,SAAgC,CAAC;AACvC,QAAM,YAAY,aAAa,IAAI,CAAA,OAAM,GAAG,IAAI;AAChD,aAAW,QAAQ,cAAc;AAChC,UAAM,OAAO,aAAa,KAAK,QAAM,GAAG,SAAS,KAAK,IAAI;AAC1D,QAAI,CAAC,MAAM;AACV,aAAO,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX,KAAK,KAAK;AAAA,MAAA,CACV;AAAA,IAAA,OACK;AACN,aAAO,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX,QAAQ,KAAK,OAAO,OAAO,CAAA,SAAQ,CAAC,KAAK,OAAO,SAAS,IAAI,CAAC;AAAA,QAC9D,QAAQ,KAAK,OAAO,OAAO,CAAA,SAAQ,CAAC,KAAK,OAAO,SAAS,IAAI,CAAC;AAAA,MAAA,CAC9D;AAAA,IAAA;AAAA,EACF;AAEM,SAAA;AAAA,IACN,GAAG,aACD,OAAO,CAAA,SAAQ,CAAC,UAAU,SAAS,KAAK,IAAI,CAAC,EAC7C,IAAI,CAAO,QAAA;AAAA,MACX,MAAM,GAAG;AAAA,MACT,KAAK,CAAA;AAAA,IAAC,EACL;AAAA,EACJ;AACO,SAAA;AACR;"}

package/dist/production/src/model/type/ApiKey.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ApiKey.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/type/ApiKey.ts"],"sourcesContent":["namespace ApiKey {\n\texport const enum Type {\n\t\tSESSION = 'session',\n\t\tPERMANENT = 'permanent',\n\t\tONE_OFF = 'one_off',\n\t}\n}\n\nexport { ApiKey }\n"],"names":["ApiKey","Type"],"mappings":";;AAAUA,QAAA,SAAA;AAAA,CAAV,CAAUA,YAAV;AACQ,GAAA,CAAWC,UAAX;AACNA,UAAA,SAAU,IAAA;AACVA,UAAA,WAAY,IAAA;AACZA,UAAA,SAAU,IAAA;AAAA,EAAA,GAHOD,QAAA,SAAAA,QAAA,OAAA,CAAA,EAAA;AAAA,GADTA,QAAA,WAAAA,iBAAA,CAAA,EAAA;"}
+{"version":3,"file":"ApiKey.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/type/ApiKey.ts"],"sourcesContent":["namespace ApiKey {\n\texport const enum Type {\n\t\tSESSION = 'session',\n\t\tPERMANENT = 'permanent',\n\t\tONE_OFF = 'one_off',\n\t}\n}\n\nexport { ApiKey }\n"],"names":["ApiKey","Type"],"mappings":";;AAAUA,QAAAA,SAAAA;AAAAA,CAAV,CAAUA,YAAV;AACQ,GAAA,CAAWC,UAAX;AACNA,UAAA,SAAU,IAAA;AACVA,UAAA,WAAY,IAAA;AACZA,UAAA,SAAU,IAAA;AAAA,EAHO,GAAAD,QAAA,SAAAA,QAAA,OAAA,CAAA,EAAA;AAAA,GADTA,QAAA,WAAAA,iBAAA,CAAA,EAAA;"}

package/dist/production/src/model/type/ApiKey.js.map

@@ -1 +1 @@
-{"version":3,"file":"ApiKey.js","sources":["../../../../../../packages/engine-tenant-api/src/model/type/ApiKey.ts"],"sourcesContent":["namespace ApiKey {\n\texport const enum Type {\n\t\tSESSION = 'session',\n\t\tPERMANENT = 'permanent',\n\t\tONE_OFF = 'one_off',\n\t}\n}\n\nexport { ApiKey }\n"],"names":["ApiKey","Type"],"mappings":"AAAU,IAAA;AAAA,CAAV,CAAUA,YAAV;AACQ,GAAA,CAAWC,UAAX;AACNA,UAAA,SAAU,IAAA;AACVA,UAAA,WAAY,IAAA;AACZA,UAAA,SAAU,IAAA;AAAA,EAAA,GAHOD,QAAA,SAAAA,QAAA,OAAA,CAAA,EAAA;AAAA,GADT,WAAA,SAAA,CAAA,EAAA;"}
+{"version":3,"file":"ApiKey.js","sources":["../../../../../../packages/engine-tenant-api/src/model/type/ApiKey.ts"],"sourcesContent":["namespace ApiKey {\n\texport const enum Type {\n\t\tSESSION = 'session',\n\t\tPERMANENT = 'permanent',\n\t\tONE_OFF = 'one_off',\n\t}\n}\n\nexport { ApiKey }\n"],"names":["ApiKey","Type"],"mappings":"AAAU,IAAA;AAAA,CAAV,CAAUA,YAAV;AACQ,GAAA,CAAWC,UAAX;AACNA,UAAA,SAAU,IAAA;AACVA,UAAA,WAAY,IAAA;AACZA,UAAA,SAAU,IAAA;AAAA,EAHO,GAAAD,QAAA,SAAAA,QAAA,OAAA,CAAA,EAAA;AAAA,GADT,WAAA,SAAA,CAAA,EAAA;"}

package/dist/production/src/model/utils/DatabaseContext.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"DatabaseContext.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/DatabaseContext.ts"],"sourcesContent":["import { Client, Connection } from '@contember/database'\nimport { Providers } from '../providers'\nimport { CommandBus } from '../commands'\nimport { BatchLoaderArgs, initBatchLoader, ItemLoader } from '../../utils/batchQuery'\n\n\nexport class DatabaseContext<Conn extends Connection.ConnectionLike = Connection.ConnectionLike> {\n\tprivate loaders = new Map<BatchLoaderArgs<any, any, any>, ItemLoader<any, any>>()\n\n\tconstructor(\n\t\tpublic readonly client: Client<Conn>,\n\t\tpublic readonly providers: Providers,\n\t) {\n\t}\n\n\tpublic get commandBus() {\n\t\treturn new CommandBus(this.client, this.providers)\n\t}\n\n\tpublic get queryHandler() {\n\t\treturn this.client.createQueryHandler()\n\t}\n\n\tpublic async transaction<T>(cb: (dbContext: DatabaseContext<Connection.TransactionLike>) => Promise<T>): Promise<T> {\n\t\treturn await this.client.transaction(async db => {\n\t\t\tawait db.query(Connection.REPEATABLE_READ)\n\t\t\treturn await cb(new DatabaseContext(db, this.providers))\n\t\t})\n\t}\n\n\tpublic async scope<T>(cb: (dbContext: DatabaseContext<Connection.AcquiredConnectionLike>) => Promise<T>): Promise<T> {\n\t\treturn await this.client.scope(async db => {\n\t\t\treturn await cb(new DatabaseContext(db, this.providers))\n\t\t})\n\t}\n\n\tpublic batchLoad<Arg, Result, Item>(loaderArgs: BatchLoaderArgs<Arg, Result, Item>, arg: Arg): Promise<Item> {\n\t\tconst existing = this.loaders.get(loaderArgs)\n\t\tif (existing) {\n\t\t\treturn existing(arg)\n\t\t}\n\t\tconst newLoader = initBatchLoader(loaderArgs, this)\n\t\tthis.loaders.set(loaderArgs, newLoader)\n\t\treturn newLoader(arg)\n\t}\n}\n"],"names":["CommandBus","Connection","initBatchLoader"],"mappings":";;;;;;;;;;AAMO,MAAM,gBAAoF;AAAA,EAGhG,YACiB,QACA,WACf;AAFe,SAAA,SAAA;AACA,SAAA,YAAA;AAJT,kBAAA,MAAA,+BAAc,IAA0D,CAAA;AAAA,EAMhF;AAAA,EAEA,IAAW,aAAa;AACvB,WAAO,IAAIA,WAAA,WAAW,KAAK,QAAQ,KAAK,SAAS;AAAA,EAClD;AAAA,EAEA,IAAW,eAAe;AAClB,WAAA,KAAK,OAAO;EACpB;AAAA,EAEA,MAAa,YAAe,IAAwF;AACnH,WAAO,MAAM,KAAK,OAAO,YAAY,OAAM,OAAM;AAC1C,YAAA,GAAG,MAAMC,SAAA,WAAW,eAAe;AACzC,aAAO,MAAM,GAAG,IAAI,gBAAgB,IAAI,KAAK,SAAS,CAAC;AAAA,IAAA,CACvD;AAAA,EACF;AAAA,EAEA,MAAa,MAAS,IAA+F;AACpH,WAAO,MAAM,KAAK,OAAO,MAAM,OAAM,OAAM;AAC1C,aAAO,MAAM,GAAG,IAAI,gBAAgB,IAAI,KAAK,SAAS,CAAC;AAAA,IAAA,CACvD;AAAA,EACF;AAAA,EAEO,UAA6B,YAAgD,KAAyB;AAC5G,UAAM,WAAW,KAAK,QAAQ,IAAI,UAAU;AAC5C,QAAI,UAAU;AACb,aAAO,SAAS,GAAG;AAAA,IACpB;AACM,UAAA,YAAYC,WAAAA,gBAAgB,YAAY,IAAI;AAC7C,SAAA,QAAQ,IAAI,YAAY,SAAS;AACtC,WAAO,UAAU,GAAG;AAAA,EACrB;AACD;;"}
+{"version":3,"file":"DatabaseContext.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/DatabaseContext.ts"],"sourcesContent":["import { Client, Connection } from '@contember/database'\nimport { Providers } from '../providers'\nimport { CommandBus } from '../commands'\nimport { BatchLoaderArgs, initBatchLoader, ItemLoader } from '../../utils/batchQuery'\n\n\nexport class DatabaseContext<Conn extends Connection.ConnectionLike = Connection.ConnectionLike> {\n\tprivate loaders = new Map<BatchLoaderArgs<any, any, any>, ItemLoader<any, any>>()\n\n\tconstructor(\n\t\tpublic readonly client: Client<Conn>,\n\t\tpublic readonly providers: Providers,\n\t) {\n\t}\n\n\tpublic get commandBus() {\n\t\treturn new CommandBus(this.client, this.providers)\n\t}\n\n\tpublic get queryHandler() {\n\t\treturn this.client.createQueryHandler()\n\t}\n\n\tpublic async transaction<T>(cb: (dbContext: DatabaseContext<Connection.TransactionLike>) => Promise<T>): Promise<T> {\n\t\treturn await this.client.transaction(async db => {\n\t\t\tawait db.query(Connection.REPEATABLE_READ)\n\t\t\treturn await cb(new DatabaseContext(db, this.providers))\n\t\t})\n\t}\n\n\tpublic async scope<T>(cb: (dbContext: DatabaseContext<Connection.AcquiredConnectionLike>) => Promise<T>): Promise<T> {\n\t\treturn await this.client.scope(async db => {\n\t\t\treturn await cb(new DatabaseContext(db, this.providers))\n\t\t})\n\t}\n\n\tpublic batchLoad<Arg, Result, Item>(loaderArgs: BatchLoaderArgs<Arg, Result, Item>, arg: Arg): Promise<Item> {\n\t\tconst existing = this.loaders.get(loaderArgs)\n\t\tif (existing) {\n\t\t\treturn existing(arg)\n\t\t}\n\t\tconst newLoader = initBatchLoader(loaderArgs, this)\n\t\tthis.loaders.set(loaderArgs, newLoader)\n\t\treturn newLoader(arg)\n\t}\n}\n"],"names":["CommandBus","Connection","initBatchLoader"],"mappings":";;;;;;;;;;AAMO,MAAM,gBAAoF;AAAA,EAGhG,YACiB,QACA,WACf;AAFe,SAAA,SAAA;AACA,SAAA,YAAA;AAJT,kBAAA,MAAA,+BAAc,IAA0D,CAAA;AAAA,EAAA;AAAA,EAQhF,IAAW,aAAa;AACvB,WAAO,IAAIA,WAAAA,WAAW,KAAK,QAAQ,KAAK,SAAS;AAAA,EAAA;AAAA,EAGlD,IAAW,eAAe;AAClB,WAAA,KAAK,OAAO,mBAAmB;AAAA,EAAA;AAAA,EAGvC,MAAa,YAAe,IAAwF;AACnH,WAAO,MAAM,KAAK,OAAO,YAAY,OAAM,OAAM;AAC1C,YAAA,GAAG,MAAMC,SAAA,WAAW,eAAe;AACzC,aAAO,MAAM,GAAG,IAAI,gBAAgB,IAAI,KAAK,SAAS,CAAC;AAAA,IAAA,CACvD;AAAA,EAAA;AAAA,EAGF,MAAa,MAAS,IAA+F;AACpH,WAAO,MAAM,KAAK,OAAO,MAAM,OAAM,OAAM;AAC1C,aAAO,MAAM,GAAG,IAAI,gBAAgB,IAAI,KAAK,SAAS,CAAC;AAAA,IAAA,CACvD;AAAA,EAAA;AAAA,EAGK,UAA6B,YAAgD,KAAyB;AAC5G,UAAM,WAAW,KAAK,QAAQ,IAAI,UAAU;AAC5C,QAAI,UAAU;AACb,aAAO,SAAS,GAAG;AAAA,IAAA;AAEd,UAAA,YAAYC,WAAAA,gBAAgB,YAAY,IAAI;AAC7C,SAAA,QAAQ,IAAI,YAAY,SAAS;AACtC,WAAO,UAAU,GAAG;AAAA,EAAA;AAEtB;;"}

package/dist/production/src/model/utils/DatabaseContext.js.map

@@ -1 +1 @@
-{"version":3,"file":"DatabaseContext.js","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/DatabaseContext.ts"],"sourcesContent":["import { Client, Connection } from '@contember/database'\nimport { Providers } from '../providers'\nimport { CommandBus } from '../commands'\nimport { BatchLoaderArgs, initBatchLoader, ItemLoader } from '../../utils/batchQuery'\n\n\nexport class DatabaseContext<Conn extends Connection.ConnectionLike = Connection.ConnectionLike> {\n\tprivate loaders = new Map<BatchLoaderArgs<any, any, any>, ItemLoader<any, any>>()\n\n\tconstructor(\n\t\tpublic readonly client: Client<Conn>,\n\t\tpublic readonly providers: Providers,\n\t) {\n\t}\n\n\tpublic get commandBus() {\n\t\treturn new CommandBus(this.client, this.providers)\n\t}\n\n\tpublic get queryHandler() {\n\t\treturn this.client.createQueryHandler()\n\t}\n\n\tpublic async transaction<T>(cb: (dbContext: DatabaseContext<Connection.TransactionLike>) => Promise<T>): Promise<T> {\n\t\treturn await this.client.transaction(async db => {\n\t\t\tawait db.query(Connection.REPEATABLE_READ)\n\t\t\treturn await cb(new DatabaseContext(db, this.providers))\n\t\t})\n\t}\n\n\tpublic async scope<T>(cb: (dbContext: DatabaseContext<Connection.AcquiredConnectionLike>) => Promise<T>): Promise<T> {\n\t\treturn await this.client.scope(async db => {\n\t\t\treturn await cb(new DatabaseContext(db, this.providers))\n\t\t})\n\t}\n\n\tpublic batchLoad<Arg, Result, Item>(loaderArgs: BatchLoaderArgs<Arg, Result, Item>, arg: Arg): Promise<Item> {\n\t\tconst existing = this.loaders.get(loaderArgs)\n\t\tif (existing) {\n\t\t\treturn existing(arg)\n\t\t}\n\t\tconst newLoader = initBatchLoader(loaderArgs, this)\n\t\tthis.loaders.set(loaderArgs, newLoader)\n\t\treturn newLoader(arg)\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;AAMO,MAAM,gBAAoF;AAAA,EAGhG,YACiB,QACA,WACf;AAFe,SAAA,SAAA;AACA,SAAA,YAAA;AAJT,kBAAA,MAAA,+BAAc,IAA0D,CAAA;AAAA,EAMhF;AAAA,EAEA,IAAW,aAAa;AACvB,WAAO,IAAI,WAAW,KAAK,QAAQ,KAAK,SAAS;AAAA,EAClD;AAAA,EAEA,IAAW,eAAe;AAClB,WAAA,KAAK,OAAO;EACpB;AAAA,EAEA,MAAa,YAAe,IAAwF;AACnH,WAAO,MAAM,KAAK,OAAO,YAAY,OAAM,OAAM;AAC1C,YAAA,GAAG,MAAM,WAAW,eAAe;AACzC,aAAO,MAAM,GAAG,IAAI,gBAAgB,IAAI,KAAK,SAAS,CAAC;AAAA,IAAA,CACvD;AAAA,EACF;AAAA,EAEA,MAAa,MAAS,IAA+F;AACpH,WAAO,MAAM,KAAK,OAAO,MAAM,OAAM,OAAM;AAC1C,aAAO,MAAM,GAAG,IAAI,gBAAgB,IAAI,KAAK,SAAS,CAAC;AAAA,IAAA,CACvD;AAAA,EACF;AAAA,EAEO,UAA6B,YAAgD,KAAyB;AAC5G,UAAM,WAAW,KAAK,QAAQ,IAAI,UAAU;AAC5C,QAAI,UAAU;AACb,aAAO,SAAS,GAAG;AAAA,IACpB;AACM,UAAA,YAAY,gBAAgB,YAAY,IAAI;AAC7C,SAAA,QAAQ,IAAI,YAAY,SAAS;AACtC,WAAO,UAAU,GAAG;AAAA,EACrB;AACD;"}
+{"version":3,"file":"DatabaseContext.js","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/DatabaseContext.ts"],"sourcesContent":["import { Client, Connection } from '@contember/database'\nimport { Providers } from '../providers'\nimport { CommandBus } from '../commands'\nimport { BatchLoaderArgs, initBatchLoader, ItemLoader } from '../../utils/batchQuery'\n\n\nexport class DatabaseContext<Conn extends Connection.ConnectionLike = Connection.ConnectionLike> {\n\tprivate loaders = new Map<BatchLoaderArgs<any, any, any>, ItemLoader<any, any>>()\n\n\tconstructor(\n\t\tpublic readonly client: Client<Conn>,\n\t\tpublic readonly providers: Providers,\n\t) {\n\t}\n\n\tpublic get commandBus() {\n\t\treturn new CommandBus(this.client, this.providers)\n\t}\n\n\tpublic get queryHandler() {\n\t\treturn this.client.createQueryHandler()\n\t}\n\n\tpublic async transaction<T>(cb: (dbContext: DatabaseContext<Connection.TransactionLike>) => Promise<T>): Promise<T> {\n\t\treturn await this.client.transaction(async db => {\n\t\t\tawait db.query(Connection.REPEATABLE_READ)\n\t\t\treturn await cb(new DatabaseContext(db, this.providers))\n\t\t})\n\t}\n\n\tpublic async scope<T>(cb: (dbContext: DatabaseContext<Connection.AcquiredConnectionLike>) => Promise<T>): Promise<T> {\n\t\treturn await this.client.scope(async db => {\n\t\t\treturn await cb(new DatabaseContext(db, this.providers))\n\t\t})\n\t}\n\n\tpublic batchLoad<Arg, Result, Item>(loaderArgs: BatchLoaderArgs<Arg, Result, Item>, arg: Arg): Promise<Item> {\n\t\tconst existing = this.loaders.get(loaderArgs)\n\t\tif (existing) {\n\t\t\treturn existing(arg)\n\t\t}\n\t\tconst newLoader = initBatchLoader(loaderArgs, this)\n\t\tthis.loaders.set(loaderArgs, newLoader)\n\t\treturn newLoader(arg)\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;AAMO,MAAM,gBAAoF;AAAA,EAGhG,YACiB,QACA,WACf;AAFe,SAAA,SAAA;AACA,SAAA,YAAA;AAJT,kBAAA,MAAA,+BAAc,IAA0D,CAAA;AAAA,EAAA;AAAA,EAQhF,IAAW,aAAa;AACvB,WAAO,IAAI,WAAW,KAAK,QAAQ,KAAK,SAAS;AAAA,EAAA;AAAA,EAGlD,IAAW,eAAe;AAClB,WAAA,KAAK,OAAO,mBAAmB;AAAA,EAAA;AAAA,EAGvC,MAAa,YAAe,IAAwF;AACnH,WAAO,MAAM,KAAK,OAAO,YAAY,OAAM,OAAM;AAC1C,YAAA,GAAG,MAAM,WAAW,eAAe;AACzC,aAAO,MAAM,GAAG,IAAI,gBAAgB,IAAI,KAAK,SAAS,CAAC;AAAA,IAAA,CACvD;AAAA,EAAA;AAAA,EAGF,MAAa,MAAS,IAA+F;AACpH,WAAO,MAAM,KAAK,OAAO,MAAM,OAAM,OAAM;AAC1C,aAAO,MAAM,GAAG,IAAI,gBAAgB,IAAI,KAAK,SAAS,CAAC;AAAA,IAAA,CACvD;AAAA,EAAA;AAAA,EAGK,UAA6B,YAAgD,KAAyB;AAC5G,UAAM,WAAW,KAAK,QAAQ,IAAI,UAAU;AAC5C,QAAI,UAAU;AACb,aAAO,SAAS,GAAG;AAAA,IAAA;AAEd,UAAA,YAAY,gBAAgB,YAAY,IAAI;AAC7C,SAAA,QAAQ,IAAI,YAAY,SAAS;AACtC,WAAO,UAAU,GAAG;AAAA,EAAA;AAEtB;"}

package/dist/production/src/model/utils/Response.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"Response.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/Response.ts"],"sourcesContent":["export type Response<Result, Error> = ResponseOk<Result> | (Error extends never ? never : ResponseError<Error>)\n\nexport class ResponseOk<Result> {\n\tpublic readonly ok = true\n\n\tconstructor(public readonly result: Result) {}\n}\n\nexport class ResponseError<const Error> {\n\tpublic readonly ok = false\n\n\tconstructor(public readonly error: Error, public readonly errorMessage: string) {}\n}\n"],"names":[],"mappings":";;;;;AAEO,MAAM,WAAmB;AAAA,EAG/B,YAA4B,QAAgB;AAAhB,SAAA,SAAA;AAF5B,kBAAA,MAAgB,MAAK,IAAA;AAAA,EAEwB;AAC9C;AAEO,MAAM,cAA2B;AAAA,EAGvC,YAA4B,OAA8B,cAAsB;AAApD,SAAA,QAAA;AAA8B,SAAA,eAAA;AAF1D,kBAAA,MAAgB,MAAK,KAAA;AAAA,EAE4D;AAClF;;;"}
+{"version":3,"file":"Response.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/Response.ts"],"sourcesContent":["export type Response<Result, Error> = ResponseOk<Result> | (Error extends never ? never : ResponseError<Error>)\n\nexport class ResponseOk<Result> {\n\tpublic readonly ok = true\n\n\tconstructor(public readonly result: Result) {}\n}\n\nexport class ResponseError<const Error> {\n\tpublic readonly ok = false\n\n\tconstructor(public readonly error: Error, public readonly errorMessage: string) {}\n}\n"],"names":[],"mappings":";;;;;AAEO,MAAM,WAAmB;AAAA,EAG/B,YAA4B,QAAgB;AAAhB,SAAA,SAAA;AAF5B,kBAAA,MAAgB,MAAK,IAAA;AAAA,EAAA;AAGtB;AAEO,MAAM,cAA2B;AAAA,EAGvC,YAA4B,OAA8B,cAAsB;AAApD,SAAA,QAAA;AAA8B,SAAA,eAAA;AAF1D,kBAAA,MAAgB,MAAK,KAAA;AAAA,EAAA;AAGtB;;;"}

package/dist/production/src/model/utils/Response.js.map

@@ -1 +1 @@
-{"version":3,"file":"Response.js","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/Response.ts"],"sourcesContent":["export type Response<Result, Error> = ResponseOk<Result> | (Error extends never ? never : ResponseError<Error>)\n\nexport class ResponseOk<Result> {\n\tpublic readonly ok = true\n\n\tconstructor(public readonly result: Result) {}\n}\n\nexport class ResponseError<const Error> {\n\tpublic readonly ok = false\n\n\tconstructor(public readonly error: Error, public readonly errorMessage: string) {}\n}\n"],"names":[],"mappings":";;;AAEO,MAAM,WAAmB;AAAA,EAG/B,YAA4B,QAAgB;AAAhB,SAAA,SAAA;AAF5B,kBAAA,MAAgB,MAAK,IAAA;AAAA,EAEwB;AAC9C;AAEO,MAAM,cAA2B;AAAA,EAGvC,YAA4B,OAA8B,cAAsB;AAApD,SAAA,QAAA;AAA8B,SAAA,eAAA;AAF1D,kBAAA,MAAgB,MAAK,KAAA;AAAA,EAE4D;AAClF;"}
+{"version":3,"file":"Response.js","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/Response.ts"],"sourcesContent":["export type Response<Result, Error> = ResponseOk<Result> | (Error extends never ? never : ResponseError<Error>)\n\nexport class ResponseOk<Result> {\n\tpublic readonly ok = true\n\n\tconstructor(public readonly result: Result) {}\n}\n\nexport class ResponseError<const Error> {\n\tpublic readonly ok = false\n\n\tconstructor(public readonly error: Error, public readonly errorMessage: string) {}\n}\n"],"names":[],"mappings":";;;AAEO,MAAM,WAAmB;AAAA,EAG/B,YAA4B,QAAgB;AAAhB,SAAA,SAAA;AAF5B,kBAAA,MAAgB,MAAK,IAAA;AAAA,EAAA;AAGtB;AAEO,MAAM,cAA2B;AAAA,EAGvC,YAA4B,OAA8B,cAAsB;AAApD,SAAA,QAAA;AAA8B,SAAA,eAAA;AAF1D,kBAAA,MAAgB,MAAK,KAAA;AAAA,EAAA;AAGtB;"}

package/dist/production/src/model/utils/password.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"password.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/password.ts"],"sourcesContent":["export const MIN_PASSWORD_LENGTH = 6\nexport const isWeakPassword = (password: string) => password.length < MIN_PASSWORD_LENGTH\nexport const getPasswordWeaknessMessage = (password: string): null | string => {\n\tif (password.length < MIN_PASSWORD_LENGTH) {\n\t\treturn `Password is too weak. Minimum length is ${MIN_PASSWORD_LENGTH}`\n\t}\n\treturn null\n}\n"],"names":[],"mappings":";;AAAO,MAAM,sBAAsB;AAEtB,MAAA,6BAA6B,CAAC,aAAoC;AAC1E,MAAA,SAAS,SAAS,qBAAqB;AAC1C,WAAO,2CAA2C,mBAAmB;AAAA,EACtE;AACO,SAAA;AACR;;;"}
+{"version":3,"file":"password.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/password.ts"],"sourcesContent":["export const MIN_PASSWORD_LENGTH = 6\nexport const isWeakPassword = (password: string) => password.length < MIN_PASSWORD_LENGTH\nexport const getPasswordWeaknessMessage = (password: string): null | string => {\n\tif (password.length < MIN_PASSWORD_LENGTH) {\n\t\treturn `Password is too weak. Minimum length is ${MIN_PASSWORD_LENGTH}`\n\t}\n\treturn null\n}\n"],"names":[],"mappings":";;AAAO,MAAM,sBAAsB;AAEtB,MAAA,6BAA6B,CAAC,aAAoC;AAC1E,MAAA,SAAS,SAAS,qBAAqB;AAC1C,WAAO,2CAA2C,mBAAmB;AAAA,EAAA;AAE/D,SAAA;AACR;;;"}

package/dist/production/src/model/utils/password.js.map

@@ -1 +1 @@
-{"version":3,"file":"password.js","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/password.ts"],"sourcesContent":["export const MIN_PASSWORD_LENGTH = 6\nexport const isWeakPassword = (password: string) => password.length < MIN_PASSWORD_LENGTH\nexport const getPasswordWeaknessMessage = (password: string): null | string => {\n\tif (password.length < MIN_PASSWORD_LENGTH) {\n\t\treturn `Password is too weak. Minimum length is ${MIN_PASSWORD_LENGTH}`\n\t}\n\treturn null\n}\n"],"names":[],"mappings":"AAAO,MAAM,sBAAsB;AAEtB,MAAA,6BAA6B,CAAC,aAAoC;AAC1E,MAAA,SAAS,SAAS,qBAAqB;AAC1C,WAAO,2CAA2C,mBAAmB;AAAA,EACtE;AACO,SAAA;AACR;"}
+{"version":3,"file":"password.js","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/password.ts"],"sourcesContent":["export const MIN_PASSWORD_LENGTH = 6\nexport const isWeakPassword = (password: string) => password.length < MIN_PASSWORD_LENGTH\nexport const getPasswordWeaknessMessage = (password: string): null | string => {\n\tif (password.length < MIN_PASSWORD_LENGTH) {\n\t\treturn `Password is too weak. Minimum length is ${MIN_PASSWORD_LENGTH}`\n\t}\n\treturn null\n}\n"],"names":[],"mappings":"AAAO,MAAM,sBAAsB;AAEtB,MAAA,6BAA6B,CAAC,aAAoC;AAC1E,MAAA,SAAS,SAAS,qBAAqB;AAC1C,WAAO,2CAA2C,mBAAmB;AAAA,EAAA;AAE/D,SAAA;AACR;"}

package/dist/production/src/model/utils/tokenUtils.cjs

@@ -2,6 +2,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const crypto = require("node:crypto");
 const typeUtils = require("./typeUtils.cjs");
+const exceptions = require("../../exceptions.cjs");
+const Response = require("./Response.cjs");
 const generateToken = async (generator) => {
   return (await generator.randomBytes(20)).toString("hex");
 };
@@ -9,7 +11,44 @@ const computeTokenHash = (token) => {
   return crypto.createHash("sha256").update(token, "ascii").digest("hex");
 };
 const isTokenHash = (token) => typeUtils.isFixedLengthHexString(token, 64);
+const MAX_OTP_ATTEMPTS = 3;
+const validateToken = ({ entry, validationType, token, now }) => {
+  if (!entry) {
+    return new Response.ResponseError("TOKEN_NOT_FOUND", "Token not found");
+  }
+  if (validationType === "otp" && entry.otp_attempts >= MAX_OTP_ATTEMPTS) {
+    return new Response.ResponseError("TOKEN_EXPIRED", "OTP attempts exceeded");
+  }
+  switch (validationType) {
+    case "token":
+      if (entry.otp_hash !== null) {
+        return new Response.ResponseError("TOKEN_INVALID", "The token was exchanged for OTP");
+      }
+      if (entry.token_hash !== computeTokenHash(token)) {
+        return new Response.ResponseError("TOKEN_INVALID", "Token invalid");
+      }
+      break;
+    case "otp":
+      if (entry.otp_hash === null) {
+        return new Response.ResponseError("TOKEN_INVALID", "OTP not set");
+      }
+      if (entry.otp_hash !== computeTokenHash(token)) {
+        return new Response.ResponseError("TOKEN_INVALID", "OTP invalid");
+      }
+      break;
+    default:
+      throw new exceptions.ImplementationException();
+  }
+  if (entry.used_at) {
+    return new Response.ResponseError("TOKEN_USED", "Token used at " + entry.used_at.toISOString());
+  }
+  if (entry.expires_at < now) {
+    return new Response.ResponseError("TOKEN_EXPIRED", "Token expired at " + entry.expires_at.toISOString());
+  }
+  return new Response.ResponseOk(entry);
+};
 exports.computeTokenHash = computeTokenHash;
 exports.generateToken = generateToken;
 exports.isTokenHash = isTokenHash;
+exports.validateToken = validateToken;
 //# sourceMappingURL=tokenUtils.cjs.map

package/dist/production/src/model/utils/tokenUtils.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"tokenUtils.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/tokenUtils.ts"],"sourcesContent":["import crypto from 'node:crypto'\nimport { FixedLengthHexString, isFixedLengthHexString } from './typeUtils'\n\nexport const generateToken = async (generator: {\n\trandomBytes: (bytes: number) => Promise<Buffer>\n}): Promise<string> => {\n\treturn (await generator.randomBytes(20)).toString('hex')\n}\n\nexport type TokenHash = FixedLengthHexString<64>\n\nexport const computeTokenHash = (token: string): TokenHash => {\n\treturn crypto //\n\t\t.createHash('sha256')\n\t\t.update(token, 'ascii')\n\t\t.digest('hex') as TokenHash\n}\n\nexport const isTokenHash = (token: string): token is TokenHash => isFixedLengthHexString(token, 64)\n"],"names":["isFixedLengthHexString"],"mappings":";;;;AAGa,MAAA,gBAAgB,OAAO,cAEb;AACtB,UAAQ,MAAM,UAAU,YAAY,EAAE,GAAG,SAAS,KAAK;AACxD;AAIa,MAAA,mBAAmB,CAAC,UAA6B;AACtD,SAAA,OACL,WAAW,QAAQ,EACnB,OAAO,OAAO,OAAO,EACrB,OAAO,KAAK;AACf;AAEO,MAAM,cAAc,CAAC,UAAsCA,UAAA,uBAAuB,OAAO,EAAE;;;;"}
+{"version":3,"file":"tokenUtils.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/tokenUtils.ts"],"sourcesContent":["import crypto from 'node:crypto'\nimport { FixedLengthHexString, isFixedLengthHexString } from './typeUtils'\nimport { PersonToken } from '../type'\nimport { ImplementationException } from '../../exceptions'\nimport { Response, ResponseError, ResponseOk } from './Response'\n\nexport const generateToken = async (generator: {\n\trandomBytes: (bytes: number) => Promise<Buffer>\n}): Promise<string> => {\n\treturn (await generator.randomBytes(20)).toString('hex')\n}\n\nexport type TokenHash = FixedLengthHexString<64>\n\nexport const computeTokenHash = (token: string): TokenHash => {\n\treturn crypto //\n\t\t.createHash('sha256')\n\t\t.update(token, 'ascii')\n\t\t.digest('hex') as TokenHash\n}\n\nexport const isTokenHash = (token: string): token is TokenHash => isFixedLengthHexString(token, 64)\n\n\nconst MAX_OTP_ATTEMPTS = 3\n\nexport const validateToken = ({ entry, validationType, token, now }: {\n\tentry: PersonToken.Row | null\n\tvalidationType: PersonToken.ValidationType\n\ttoken: string\n\tnow: Date\n}): Response<PersonToken.Row, PersonToken.TokenValidationError> => {\n\tif (!entry) {\n\t\treturn new ResponseError('TOKEN_NOT_FOUND', 'Token not found')\n\t}\n\tif (validationType === 'otp' && entry.otp_attempts >= MAX_OTP_ATTEMPTS) {\n\t\treturn new ResponseError('TOKEN_EXPIRED', 'OTP attempts exceeded')\n\t}\n\tswitch (validationType) {\n\t\tcase 'token':\n\t\t\tif (entry.otp_hash !== null) {\n\t\t\t\treturn new ResponseError('TOKEN_INVALID', 'The token was exchanged for OTP')\n\t\t\t}\n\t\t\tif (entry.token_hash !== computeTokenHash(token)) {\n\t\t\t\treturn new ResponseError('TOKEN_INVALID', 'Token invalid')\n\t\t\t}\n\t\t\tbreak\n\t\tcase 'otp':\n\t\t\tif (entry.otp_hash === null) {\n\t\t\t\treturn new ResponseError('TOKEN_INVALID', 'OTP not set')\n\t\t\t}\n\t\t\tif (entry.otp_hash !== computeTokenHash(token)) {\n\t\t\t\treturn new ResponseError('TOKEN_INVALID', 'OTP invalid')\n\t\t\t}\n\t\t\tbreak\n\t\tdefault:\n\t\t\tthrow new ImplementationException()\n\t}\n\tif (entry.used_at) {\n\t\treturn new ResponseError('TOKEN_USED', 'Token used at ' + entry.used_at.toISOString())\n\t}\n\tif (entry.expires_at < now) {\n\t\treturn new ResponseError('TOKEN_EXPIRED', 'Token expired at ' + entry.expires_at.toISOString())\n\t}\n\treturn new ResponseOk(entry)\n}\n"],"names":["isFixedLengthHexString","ResponseError","ImplementationException","ResponseOk"],"mappings":";;;;;;AAMa,MAAA,gBAAgB,OAAO,cAEb;AACtB,UAAQ,MAAM,UAAU,YAAY,EAAE,GAAG,SAAS,KAAK;AACxD;AAIa,MAAA,mBAAmB,CAAC,UAA6B;AACtD,SAAA,OACL,WAAW,QAAQ,EACnB,OAAO,OAAO,OAAO,EACrB,OAAO,KAAK;AACf;AAEO,MAAM,cAAc,CAAC,UAAsCA,UAAA,uBAAuB,OAAO,EAAE;AAGlG,MAAM,mBAAmB;AAElB,MAAM,gBAAgB,CAAC,EAAE,OAAO,gBAAgB,OAAO,UAKK;AAClE,MAAI,CAAC,OAAO;AACJ,WAAA,IAAIC,SAAAA,cAAc,mBAAmB,iBAAiB;AAAA,EAAA;AAE9D,MAAI,mBAAmB,SAAS,MAAM,gBAAgB,kBAAkB;AAChE,WAAA,IAAIA,SAAAA,cAAc,iBAAiB,uBAAuB;AAAA,EAAA;AAElE,UAAQ,gBAAgB;AAAA,IACvB,KAAK;AACA,UAAA,MAAM,aAAa,MAAM;AACrB,eAAA,IAAIA,SAAAA,cAAc,iBAAiB,iCAAiC;AAAA,MAAA;AAE5E,UAAI,MAAM,eAAe,iBAAiB,KAAK,GAAG;AAC1C,eAAA,IAAIA,SAAAA,cAAc,iBAAiB,eAAe;AAAA,MAAA;AAE1D;AAAA,IACD,KAAK;AACA,UAAA,MAAM,aAAa,MAAM;AACrB,eAAA,IAAIA,SAAAA,cAAc,iBAAiB,aAAa;AAAA,MAAA;AAExD,UAAI,MAAM,aAAa,iBAAiB,KAAK,GAAG;AACxC,eAAA,IAAIA,SAAAA,cAAc,iBAAiB,aAAa;AAAA,MAAA;AAExD;AAAA,IACD;AACC,YAAM,IAAIC,WAAAA,wBAAwB;AAAA,EAAA;AAEpC,MAAI,MAAM,SAAS;AAClB,WAAO,IAAID,SAAc,cAAA,cAAc,mBAAmB,MAAM,QAAQ,aAAa;AAAA,EAAA;AAElF,MAAA,MAAM,aAAa,KAAK;AAC3B,WAAO,IAAIA,SAAc,cAAA,iBAAiB,sBAAsB,MAAM,WAAW,aAAa;AAAA,EAAA;AAExF,SAAA,IAAIE,oBAAW,KAAK;AAC5B;;;;;"}

package/dist/production/src/model/utils/tokenUtils.js

@@ -1,5 +1,7 @@
 import crypto__default from "node:crypto";
 import { isFixedLengthHexString } from "./typeUtils.js";
+import { ImplementationException } from "../../exceptions.js";
+import { ResponseError, ResponseOk } from "./Response.js";
 const generateToken = async (generator) => {
   return (await generator.randomBytes(20)).toString("hex");
 };
@@ -7,9 +9,46 @@ const computeTokenHash = (token) => {
   return crypto__default.createHash("sha256").update(token, "ascii").digest("hex");
 };
 const isTokenHash = (token) => isFixedLengthHexString(token, 64);
+const MAX_OTP_ATTEMPTS = 3;
+const validateToken = ({ entry, validationType, token, now }) => {
+  if (!entry) {
+    return new ResponseError("TOKEN_NOT_FOUND", "Token not found");
+  }
+  if (validationType === "otp" && entry.otp_attempts >= MAX_OTP_ATTEMPTS) {
+    return new ResponseError("TOKEN_EXPIRED", "OTP attempts exceeded");
+  }
+  switch (validationType) {
+    case "token":
+      if (entry.otp_hash !== null) {
+        return new ResponseError("TOKEN_INVALID", "The token was exchanged for OTP");
+      }
+      if (entry.token_hash !== computeTokenHash(token)) {
+        return new ResponseError("TOKEN_INVALID", "Token invalid");
+      }
+      break;
+    case "otp":
+      if (entry.otp_hash === null) {
+        return new ResponseError("TOKEN_INVALID", "OTP not set");
+      }
+      if (entry.otp_hash !== computeTokenHash(token)) {
+        return new ResponseError("TOKEN_INVALID", "OTP invalid");
+      }
+      break;
+    default:
+      throw new ImplementationException();
+  }
+  if (entry.used_at) {
+    return new ResponseError("TOKEN_USED", "Token used at " + entry.used_at.toISOString());
+  }
+  if (entry.expires_at < now) {
+    return new ResponseError("TOKEN_EXPIRED", "Token expired at " + entry.expires_at.toISOString());
+  }
+  return new ResponseOk(entry);
+};
 export {
   computeTokenHash,
   generateToken,
-  isTokenHash
+  isTokenHash,
+  validateToken
 };
 //# sourceMappingURL=tokenUtils.js.map

package/dist/production/src/model/utils/tokenUtils.js.map

@@ -1 +1 @@
-{"version":3,"file":"tokenUtils.js","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/tokenUtils.ts"],"sourcesContent":["import crypto from 'node:crypto'\nimport { FixedLengthHexString, isFixedLengthHexString } from './typeUtils'\n\nexport const generateToken = async (generator: {\n\trandomBytes: (bytes: number) => Promise<Buffer>\n}): Promise<string> => {\n\treturn (await generator.randomBytes(20)).toString('hex')\n}\n\nexport type TokenHash = FixedLengthHexString<64>\n\nexport const computeTokenHash = (token: string): TokenHash => {\n\treturn crypto //\n\t\t.createHash('sha256')\n\t\t.update(token, 'ascii')\n\t\t.digest('hex') as TokenHash\n}\n\nexport const isTokenHash = (token: string): token is TokenHash => isFixedLengthHexString(token, 64)\n"],"names":["crypto"],"mappings":";;AAGa,MAAA,gBAAgB,OAAO,cAEb;AACtB,UAAQ,MAAM,UAAU,YAAY,EAAE,GAAG,SAAS,KAAK;AACxD;AAIa,MAAA,mBAAmB,CAAC,UAA6B;AACtD,SAAAA,gBACL,WAAW,QAAQ,EACnB,OAAO,OAAO,OAAO,EACrB,OAAO,KAAK;AACf;AAEO,MAAM,cAAc,CAAC,UAAsC,uBAAuB,OAAO,EAAE;"}
+{"version":3,"file":"tokenUtils.js","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/tokenUtils.ts"],"sourcesContent":["import crypto from 'node:crypto'\nimport { FixedLengthHexString, isFixedLengthHexString } from './typeUtils'\nimport { PersonToken } from '../type'\nimport { ImplementationException } from '../../exceptions'\nimport { Response, ResponseError, ResponseOk } from './Response'\n\nexport const generateToken = async (generator: {\n\trandomBytes: (bytes: number) => Promise<Buffer>\n}): Promise<string> => {\n\treturn (await generator.randomBytes(20)).toString('hex')\n}\n\nexport type TokenHash = FixedLengthHexString<64>\n\nexport const computeTokenHash = (token: string): TokenHash => {\n\treturn crypto //\n\t\t.createHash('sha256')\n\t\t.update(token, 'ascii')\n\t\t.digest('hex') as TokenHash\n}\n\nexport const isTokenHash = (token: string): token is TokenHash => isFixedLengthHexString(token, 64)\n\n\nconst MAX_OTP_ATTEMPTS = 3\n\nexport const validateToken = ({ entry, validationType, token, now }: {\n\tentry: PersonToken.Row | null\n\tvalidationType: PersonToken.ValidationType\n\ttoken: string\n\tnow: Date\n}): Response<PersonToken.Row, PersonToken.TokenValidationError> => {\n\tif (!entry) {\n\t\treturn new ResponseError('TOKEN_NOT_FOUND', 'Token not found')\n\t}\n\tif (validationType === 'otp' && entry.otp_attempts >= MAX_OTP_ATTEMPTS) {\n\t\treturn new ResponseError('TOKEN_EXPIRED', 'OTP attempts exceeded')\n\t}\n\tswitch (validationType) {\n\t\tcase 'token':\n\t\t\tif (entry.otp_hash !== null) {\n\t\t\t\treturn new ResponseError('TOKEN_INVALID', 'The token was exchanged for OTP')\n\t\t\t}\n\t\t\tif (entry.token_hash !== computeTokenHash(token)) {\n\t\t\t\treturn new ResponseError('TOKEN_INVALID', 'Token invalid')\n\t\t\t}\n\t\t\tbreak\n\t\tcase 'otp':\n\t\t\tif (entry.otp_hash === null) {\n\t\t\t\treturn new ResponseError('TOKEN_INVALID', 'OTP not set')\n\t\t\t}\n\t\t\tif (entry.otp_hash !== computeTokenHash(token)) {\n\t\t\t\treturn new ResponseError('TOKEN_INVALID', 'OTP invalid')\n\t\t\t}\n\t\t\tbreak\n\t\tdefault:\n\t\t\tthrow new ImplementationException()\n\t}\n\tif (entry.used_at) {\n\t\treturn new ResponseError('TOKEN_USED', 'Token used at ' + entry.used_at.toISOString())\n\t}\n\tif (entry.expires_at < now) {\n\t\treturn new ResponseError('TOKEN_EXPIRED', 'Token expired at ' + entry.expires_at.toISOString())\n\t}\n\treturn new ResponseOk(entry)\n}\n"],"names":["crypto"],"mappings":";;;;AAMa,MAAA,gBAAgB,OAAO,cAEb;AACtB,UAAQ,MAAM,UAAU,YAAY,EAAE,GAAG,SAAS,KAAK;AACxD;AAIa,MAAA,mBAAmB,CAAC,UAA6B;AACtD,SAAAA,gBACL,WAAW,QAAQ,EACnB,OAAO,OAAO,OAAO,EACrB,OAAO,KAAK;AACf;AAEO,MAAM,cAAc,CAAC,UAAsC,uBAAuB,OAAO,EAAE;AAGlG,MAAM,mBAAmB;AAElB,MAAM,gBAAgB,CAAC,EAAE,OAAO,gBAAgB,OAAO,UAKK;AAClE,MAAI,CAAC,OAAO;AACJ,WAAA,IAAI,cAAc,mBAAmB,iBAAiB;AAAA,EAAA;AAE9D,MAAI,mBAAmB,SAAS,MAAM,gBAAgB,kBAAkB;AAChE,WAAA,IAAI,cAAc,iBAAiB,uBAAuB;AAAA,EAAA;AAElE,UAAQ,gBAAgB;AAAA,IACvB,KAAK;AACA,UAAA,MAAM,aAAa,MAAM;AACrB,eAAA,IAAI,cAAc,iBAAiB,iCAAiC;AAAA,MAAA;AAE5E,UAAI,MAAM,eAAe,iBAAiB,KAAK,GAAG;AAC1C,eAAA,IAAI,cAAc,iBAAiB,eAAe;AAAA,MAAA;AAE1D;AAAA,IACD,KAAK;AACA,UAAA,MAAM,aAAa,MAAM;AACrB,eAAA,IAAI,cAAc,iBAAiB,aAAa;AAAA,MAAA;AAExD,UAAI,MAAM,aAAa,iBAAiB,KAAK,GAAG;AACxC,eAAA,IAAI,cAAc,iBAAiB,aAAa;AAAA,MAAA;AAExD;AAAA,IACD;AACC,YAAM,IAAI,wBAAwB;AAAA,EAAA;AAEpC,MAAI,MAAM,SAAS;AAClB,WAAO,IAAI,cAAc,cAAc,mBAAmB,MAAM,QAAQ,aAAa;AAAA,EAAA;AAElF,MAAA,MAAM,aAAa,KAAK;AAC3B,WAAO,IAAI,cAAc,iBAAiB,sBAAsB,MAAM,WAAW,aAAa;AAAA,EAAA;AAExF,SAAA,IAAI,WAAW,KAAK;AAC5B;"}

package/dist/production/src/resolvers/ResolverFactory.cjs

@@ -27,6 +27,7 @@ class ResolverFactory {
         projectMemberships: this.resolvers.projectMembersQueryResolver.projectMemberships.bind(this.resolvers.projectMembersQueryResolver),
         identityProviders: this.resolvers.idpQueryResolver.identityProviders.bind(this.resolvers.idpQueryResolver),
         mailTemplates: this.resolvers.mailTemplateQueryResolver.mailTemplates.bind(this.resolvers.mailTemplateQueryResolver),
+        configuration: this.resolvers.configurationQueryResolver.configuration.bind(this.resolvers.configurationQueryResolver),
         checkResetPasswordToken: () => {
           throw new Error("not implemented");
         }
@@ -49,6 +50,11 @@ class ResolverFactory {
         enableIDP: this.resolvers.enableIdpMutationResolver.enableIDP.bind(this.resolvers.enableIdpMutationResolver),
         updateIDP: this.resolvers.updateIdpMutationResolver.updateIDP.bind(this.resolvers.updateIdpMutationResolver),
         disablePerson: this.resolvers.disablePersonMutationResolver.disablePerson.bind(this.resolvers.disablePersonMutationResolver),
+        signInPasswordless: this.resolvers.passwordlessMutationResolver.signInPasswordless.bind(this.resolvers.passwordlessMutationResolver),
+        initSignInPasswordless: this.resolvers.passwordlessMutationResolver.initSignInPasswordless.bind(this.resolvers.passwordlessMutationResolver),
+        activatePasswordlessOtp: this.resolvers.passwordlessMutationResolver.activatePasswordlessOtp.bind(this.resolvers.passwordlessMutationResolver),
+        disableMyPasswordless: this.resolvers.togglePasswordlessMutationResolver.disableMyPasswordless.bind(this.resolvers.togglePasswordlessMutationResolver),
+        enableMyPasswordless: this.resolvers.togglePasswordlessMutationResolver.enableMyPasswordless.bind(this.resolvers.togglePasswordlessMutationResolver),
         invite: this.resolvers.inviteMutationResolver.invite.bind(this.resolvers.inviteMutationResolver),
         unmanagedInvite: this.resolvers.inviteMutationResolver.unmanagedInvite.bind(this.resolvers.inviteMutationResolver),
         addProjectMember: this.resolvers.addProjectMemberMutationResolver.addProjectMember.bind(this.resolvers.addProjectMemberMutationResolver),
@@ -68,7 +74,8 @@ class ResolverFactory {
         updateProject: this.resolvers.updateProjectMutationResolver.updateProject.bind(this.resolvers.updateProjectMutationResolver),
         setProjectSecret: this.resolvers.setProjectSecretMutationResolver.setProjectSecret.bind(this.resolvers.setProjectSecretMutationResolver),
         addGlobalIdentityRoles: this.resolvers.identityGlobalRolesMutationResolver.addGlobalIdentityRoles.bind(this.resolvers.identityGlobalRolesMutationResolver),
-        removeGlobalIdentityRoles: this.resolvers.identityGlobalRolesMutationResolver.removeGlobalIdentityRoles.bind(this.resolvers.identityGlobalRolesMutationResolver)
+        removeGlobalIdentityRoles: this.resolvers.identityGlobalRolesMutationResolver.removeGlobalIdentityRoles.bind(this.resolvers.identityGlobalRolesMutationResolver),
+        configure: this.resolvers.configurationMutationResolver.configure.bind(this.resolvers.configurationMutationResolver)
       }
     };
   }

package/dist/production/src/resolvers/ResolverFactory.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ResolverFactory.cjs","sources":["../../../../../packages/engine-tenant-api/src/resolvers/ResolverFactory.ts"],"sourcesContent":["import {\n\tAddIDPMutationResolver,\n\tAddProjectMemberMutationResolver,\n\tChangePasswordMutationResolver,\n\tChangeProfileMutationResolver,\n\tCreateApiKeyMutationResolver,\n\tCreateProjectMutationResolver,\n\tDisableApiKeyMutationResolver,\n\tDisableIDPMutationResolver,\n\tEnableIDPMutationResolver,\n\tIdentityGlobalRolesMutationResolver,\n\tIDPMutationResolver,\n\tInviteMutationResolver,\n\tMailTemplateMutationResolver,\n\tOtpMutationResolver,\n\tRemoveProjectMemberMutationResolver,\n\tResetPasswordMutationResolver,\n\tSetProjectSecretMutationResolver,\n\tSignInMutationResolver,\n\tSignOutMutationResolver,\n\tSignUpMutationResolver,\n\tUpdateProjectMemberMutationResolver,\n\tUpdateProjectMutationResolver,\n} from './mutation'\n\nimport { Resolvers } from '../schema'\nimport { MeQueryResolver, PersonQueryResolver, ProjectMembersQueryResolver, ProjectQueryResolver } from './query'\nimport { IdentityTypeResolver, ProjectTypeResolver } from './types'\nimport { DateTimeType, JSONType } from '@contember/graphql-utils'\nimport { IDPQueryResolver } from './query/IDPQueryResolver'\nimport { UpdateIDPMutationResolver } from './mutation/idp/UpdateIDPMutationResolver'\nimport { DisablePersonMutationResolver } from './mutation/person/DisablePersonMutationResolver'\nimport { MailTemplateQueryResolver } from './query/MailTemplateQueryResolver'\n\nclass ResolverFactory {\n\tpublic constructor(\n\t\tprivate readonly resolvers: {\n\t\t\tmeQueryResolver: MeQueryResolver\n\t\t\tpersonQueryResolver: PersonQueryResolver\n\t\t\tprojectQueryResolver: ProjectQueryResolver\n\t\t\tprojectMembersQueryResolver: ProjectMembersQueryResolver\n\t\t\tidpQueryResolver: IDPQueryResolver\n\t\t\tmailTemplateQueryResolver: MailTemplateQueryResolver\n\n\t\t\tsignUpMutationResolver: SignUpMutationResolver\n\t\t\tsignInMutationResolver: SignInMutationResolver\n\t\t\tsignOutMutationResolver: SignOutMutationResolver\n\t\t\tchangeProfileMutationResolver: ChangeProfileMutationResolver\n\t\t\tchangePasswordMutationResolver: ChangePasswordMutationResolver\n\t\t\tresetPasswordMutationResolver: ResetPasswordMutationResolver\n\t\t\tidpMutationResolver: IDPMutationResolver\n\t\t\tregisterIdpMutationResolver: AddIDPMutationResolver\n\t\t\tdisableIdpMutationResolver: DisableIDPMutationResolver\n\t\t\tenableIdpMutationResolver: EnableIDPMutationResolver\n\t\t\tupdateIdpMutationResolver: UpdateIDPMutationResolver\n\n\t\t\tdisablePersonMutationResolver: DisablePersonMutationResolver\n\n\t\t\tinviteMutationResolver: InviteMutationResolver\n\t\t\taddProjectMemberMutationResolver: AddProjectMemberMutationResolver\n\t\t\tupdateProjectMemberMutationResolver: UpdateProjectMemberMutationResolver\n\t\t\tremoveProjectMemberMutationResolver: RemoveProjectMemberMutationResolver\n\n\t\t\tcreateApiKeyMutationResolver: CreateApiKeyMutationResolver\n\t\t\tdisableApiKeyMutationResolver: DisableApiKeyMutationResolver\n\n\t\t\totpMutationResolver: OtpMutationResolver\n\n\t\t\tmailTemplateMutationResolver: MailTemplateMutationResolver\n\n\t\t\tcreateProjectMutationResolver: CreateProjectMutationResolver\n\t\t\tsetProjectSecretMutationResolver: SetProjectSecretMutationResolver\n\t\t\tupdateProjectMutationResolver: UpdateProjectMutationResolver\n\n\t\t\tidentityTypeResolver: IdentityTypeResolver\n\t\t\tprojectTypeResolver: ProjectTypeResolver\n\n\t\t\tidentityGlobalRolesMutationResolver: IdentityGlobalRolesMutationResolver\n\n\t\t},\n\t) { }\n\n\tcreate(): Resolvers & { Mutation: Required<Resolvers['Mutation']> } & { Query: Required<Resolvers['Query']> } {\n\t\treturn {\n\t\t\tJson: JSONType,\n\t\t\tDateTime: DateTimeType,\n\t\t\tIdentity: {\n\t\t\t\tprojects: this.resolvers.identityTypeResolver.projects.bind(this.resolvers.identityTypeResolver),\n\t\t\t\tperson: this.resolvers.identityTypeResolver.person.bind(this.resolvers.identityTypeResolver),\n\t\t\t\troles: this.resolvers.identityTypeResolver.roles.bind(this.resolvers.identityTypeResolver),\n\t\t\t\tpermissions: this.resolvers.identityTypeResolver.permissions.bind(this.resolvers.identityTypeResolver),\n\t\t\t},\n\t\t\tProject: {\n\t\t\t\tmembers: this.resolvers.projectTypeResolver.members.bind(this.resolvers.projectTypeResolver),\n\t\t\t\troles: this.resolvers.projectTypeResolver.roles.bind(this.resolvers.projectTypeResolver),\n\t\t\t},\n\t\t\tQuery: {\n\t\t\t\tme: this.resolvers.meQueryResolver.me.bind(this.resolvers.meQueryResolver),\n\t\t\t\tpersonById: this.resolvers.personQueryResolver.personById.bind(this.resolvers.personQueryResolver),\n\t\t\t\tprojectBySlug: this.resolvers.projectQueryResolver.projectBySlug.bind(this.resolvers.projectQueryResolver),\n\t\t\t\tprojects: this.resolvers.projectQueryResolver.projects.bind(this.resolvers.projectQueryResolver),\n\t\t\t\tprojectMemberships: this.resolvers.projectMembersQueryResolver.projectMemberships.bind(this.resolvers.projectMembersQueryResolver),\n\t\t\t\tidentityProviders: this.resolvers.idpQueryResolver.identityProviders.bind(this.resolvers.idpQueryResolver),\n\t\t\t\tmailTemplates: this.resolvers.mailTemplateQueryResolver.mailTemplates.bind(this.resolvers.mailTemplateQueryResolver),\n\t\t\t\tcheckResetPasswordToken: () => {\n\t\t\t\t\tthrow new Error('not implemented')\n\t\t\t\t},\n\t\t\t},\n\t\t\tMutation: {\n\t\t\t\tsignUp: this.resolvers.signUpMutationResolver.signUp.bind(this.resolvers.signUpMutationResolver),\n\t\t\t\tsignIn: this.resolvers.signInMutationResolver.signIn.bind(this.resolvers.signInMutationResolver),\n\t\t\t\tcreateSessionToken: this.resolvers.signInMutationResolver.createSessionToken.bind(this.resolvers.signInMutationResolver),\n\t\t\t\tsignOut: this.resolvers.signOutMutationResolver.signOut.bind(this.resolvers.signOutMutationResolver),\n\n\t\t\t\tchangeProfile: this.resolvers.changeProfileMutationResolver.changeProfile.bind(this.resolvers.changeProfileMutationResolver),\n\t\t\t\tchangeMyProfile: this.resolvers.changeProfileMutationResolver.changeMyProfile.bind(this.resolvers.changeProfileMutationResolver),\n\t\t\t\tchangePassword: this.resolvers.changePasswordMutationResolver.changePassword.bind(this.resolvers.changePasswordMutationResolver),\n\t\t\t\tchangeMyPassword: this.resolvers.changePasswordMutationResolver.changeMyPassword.bind(this.resolvers.changePasswordMutationResolver),\n\t\t\t\tcreateResetPasswordRequest: this.resolvers.resetPasswordMutationResolver.createResetPasswordRequest.bind(this.resolvers.resetPasswordMutationResolver),\n\t\t\t\tresetPassword: this.resolvers.resetPasswordMutationResolver.resetPassword.bind(this.resolvers.resetPasswordMutationResolver),\n\n\t\t\t\tinitSignInIDP: this.resolvers.idpMutationResolver.initSignInIDP.bind(this.resolvers.idpMutationResolver),\n\t\t\t\tsignInIDP: this.resolvers.idpMutationResolver.signInIDP.bind(this.resolvers.idpMutationResolver),\n\t\t\t\taddIDP: this.resolvers.registerIdpMutationResolver.addIDP.bind(this.resolvers.registerIdpMutationResolver),\n\t\t\t\tdisableIDP: this.resolvers.disableIdpMutationResolver.disableIDP.bind(this.resolvers.disableIdpMutationResolver),\n\t\t\t\tenableIDP: this.resolvers.enableIdpMutationResolver.enableIDP.bind(this.resolvers.enableIdpMutationResolver),\n\t\t\t\tupdateIDP: this.resolvers.updateIdpMutationResolver.updateIDP.bind(this.resolvers.updateIdpMutationResolver),\n\t\t\t\tdisablePerson: this.resolvers.disablePersonMutationResolver.disablePerson.bind(this.resolvers.disablePersonMutationResolver),\n\n\t\t\t\tinvite: this.resolvers.inviteMutationResolver.invite.bind(this.resolvers.inviteMutationResolver),\n\t\t\t\tunmanagedInvite: this.resolvers.inviteMutationResolver.unmanagedInvite.bind(this.resolvers.inviteMutationResolver),\n\n\t\t\t\taddProjectMember: this.resolvers.addProjectMemberMutationResolver.addProjectMember.bind(this.resolvers.addProjectMemberMutationResolver),\n\t\t\t\tupdateProjectMember: this.resolvers.updateProjectMemberMutationResolver.updateProjectMember.bind(this.resolvers.updateProjectMemberMutationResolver),\n\t\t\t\tremoveProjectMember: this.resolvers.removeProjectMemberMutationResolver.removeProjectMember.bind(this.resolvers.updateProjectMemberMutationResolver),\n\n\t\t\t\tcreateApiKey: this.resolvers.createApiKeyMutationResolver.createApiKey.bind(this.resolvers.createApiKeyMutationResolver),\n\t\t\t\tcreateGlobalApiKey: this.resolvers.createApiKeyMutationResolver.createGlobalApiKey.bind(this.resolvers.createApiKeyMutationResolver),\n\t\t\t\tdisableApiKey: this.resolvers.disableApiKeyMutationResolver.disableApiKey.bind(this.resolvers.disableApiKeyMutationResolver),\n\n\t\t\t\tprepareOtp: this.resolvers.otpMutationResolver.prepareOtp.bind(this.resolvers.otpMutationResolver),\n\t\t\t\tconfirmOtp: this.resolvers.otpMutationResolver.confirmOtp.bind(this.resolvers.otpMutationResolver),\n\t\t\t\tdisableOtp: this.resolvers.otpMutationResolver.disableOtp.bind(this.resolvers.otpMutationResolver),\n\n\t\t\t\taddMailTemplate: this.resolvers.mailTemplateMutationResolver.addMailTemplate.bind(this.resolvers.mailTemplateMutationResolver),\n\t\t\t\tremoveMailTemplate: this.resolvers.mailTemplateMutationResolver.removeMailTemplate.bind(this.resolvers.mailTemplateMutationResolver),\n\n\t\t\t\taddProjectMailTemplate: this.resolvers.mailTemplateMutationResolver.addMailTemplate.bind(this.resolvers.mailTemplateMutationResolver),\n\t\t\t\tremoveProjectMailTemplate: this.resolvers.mailTemplateMutationResolver.removeMailTemplate.bind(this.resolvers.mailTemplateMutationResolver),\n\n\t\t\t\tcreateProject: this.resolvers.createProjectMutationResolver.createProject.bind(this.resolvers.createProjectMutationResolver),\n\t\t\t\tupdateProject: this.resolvers.updateProjectMutationResolver.updateProject.bind(this.resolvers.updateProjectMutationResolver),\n\t\t\t\tsetProjectSecret: this.resolvers.setProjectSecretMutationResolver.setProjectSecret.bind(this.resolvers.setProjectSecretMutationResolver),\n\n\t\t\t\taddGlobalIdentityRoles: this.resolvers.identityGlobalRolesMutationResolver.addGlobalIdentityRoles.bind(this.resolvers.identityGlobalRolesMutationResolver),\n\t\t\t\tremoveGlobalIdentityRoles: this.resolvers.identityGlobalRolesMutationResolver.removeGlobalIdentityRoles.bind(this.resolvers.identityGlobalRolesMutationResolver),\n\t\t\t},\n\t\t}\n\t}\n}\n\nnamespace ResolverFactory {\n\texport type FieldResolverArgs = {\n\t\t[argument: string]: any\n\t}\n}\n\nexport { ResolverFactory }\n"],"names":["JSONType","DateTimeType"],"mappings":";;;AAkCA,MAAM,gBAAgB;AAAA,EACd,YACW,WA4ChB;AA5CgB,SAAA,YAAA;AAAA,EA4Cd;AAAA,EAEJ,SAA8G;AACtG,WAAA;AAAA,MACN,MAAMA,aAAA;AAAA,MACN,UAAUC,aAAA;AAAA,MACV,UAAU;AAAA,QACT,UAAU,KAAK,UAAU,qBAAqB,SAAS,KAAK,KAAK,UAAU,oBAAoB;AAAA,QAC/F,QAAQ,KAAK,UAAU,qBAAqB,OAAO,KAAK,KAAK,UAAU,oBAAoB;AAAA,QAC3F,OAAO,KAAK,UAAU,qBAAqB,MAAM,KAAK,KAAK,UAAU,oBAAoB;AAAA,QACzF,aAAa,KAAK,UAAU,qBAAqB,YAAY,KAAK,KAAK,UAAU,oBAAoB;AAAA,MACtG;AAAA,MACA,SAAS;AAAA,QACR,SAAS,KAAK,UAAU,oBAAoB,QAAQ,KAAK,KAAK,UAAU,mBAAmB;AAAA,QAC3F,OAAO,KAAK,UAAU,oBAAoB,MAAM,KAAK,KAAK,UAAU,mBAAmB;AAAA,MACxF;AAAA,MACA,OAAO;AAAA,QACN,IAAI,KAAK,UAAU,gBAAgB,GAAG,KAAK,KAAK,UAAU,eAAe;AAAA,QACzE,YAAY,KAAK,UAAU,oBAAoB,WAAW,KAAK,KAAK,UAAU,mBAAmB;AAAA,QACjG,eAAe,KAAK,UAAU,qBAAqB,cAAc,KAAK,KAAK,UAAU,oBAAoB;AAAA,QACzG,UAAU,KAAK,UAAU,qBAAqB,SAAS,KAAK,KAAK,UAAU,oBAAoB;AAAA,QAC/F,oBAAoB,KAAK,UAAU,4BAA4B,mBAAmB,KAAK,KAAK,UAAU,2BAA2B;AAAA,QACjI,mBAAmB,KAAK,UAAU,iBAAiB,kBAAkB,KAAK,KAAK,UAAU,gBAAgB;AAAA,QACzG,eAAe,KAAK,UAAU,0BAA0B,cAAc,KAAK,KAAK,UAAU,yBAAyB;AAAA,QACnH,yBAAyB,MAAM;AACxB,gBAAA,IAAI,MAAM,iBAAiB;AAAA,QAClC;AAAA,MACD;AAAA,MACA,UAAU;AAAA,QACT,QAAQ,KAAK,UAAU,uBAAuB,OAAO,KAAK,KAAK,UAAU,sBAAsB;AAAA,QAC/F,QAAQ,KAAK,UAAU,uBAAuB,OAAO,KAAK,KAAK,UAAU,sBAAsB;AAAA,QAC/F,oBAAoB,KAAK,UAAU,uBAAuB,mBAAmB,KAAK,KAAK,UAAU,sBAAsB;AAAA,QACvH,SAAS,KAAK,UAAU,wBAAwB,QAAQ,KAAK,KAAK,UAAU,uBAAuB;AAAA,QAEnG,eAAe,KAAK,UAAU,8BAA8B,cAAc,KAAK,KAAK,UAAU,6BAA6B;AAAA,QAC3H,iBAAiB,KAAK,UAAU,8BAA8B,gBAAgB,KAAK,KAAK,UAAU,6BAA6B;AAAA,QAC/H,gBAAgB,KAAK,UAAU,+BAA+B,eAAe,KAAK,KAAK,UAAU,8BAA8B;AAAA,QAC/H,kBAAkB,KAAK,UAAU,+BAA+B,iBAAiB,KAAK,KAAK,UAAU,8BAA8B;AAAA,QACnI,4BAA4B,KAAK,UAAU,8BAA8B,2BAA2B,KAAK,KAAK,UAAU,6BAA6B;AAAA,QACrJ,eAAe,KAAK,UAAU,8BAA8B,cAAc,KAAK,KAAK,UAAU,6BAA6B;AAAA,QAE3H,eAAe,KAAK,UAAU,oBAAoB,cAAc,KAAK,KAAK,UAAU,mBAAmB;AAAA,QACvG,WAAW,KAAK,UAAU,oBAAoB,UAAU,KAAK,KAAK,UAAU,mBAAmB;AAAA,QAC/F,QAAQ,KAAK,UAAU,4BAA4B,OAAO,KAAK,KAAK,UAAU,2BAA2B;AAAA,QACzG,YAAY,KAAK,UAAU,2BAA2B,WAAW,KAAK,KAAK,UAAU,0BAA0B;AAAA,QAC/G,WAAW,KAAK,UAAU,0BAA0B,UAAU,KAAK,KAAK,UAAU,yBAAyB;AAAA,QAC3G,WAAW,KAAK,UAAU,0BAA0B,UAAU,KAAK,KAAK,UAAU,yBAAyB;AAAA,QAC3G,eAAe,KAAK,UAAU,8BAA8B,cAAc,KAAK,KAAK,UAAU,6BAA6B;AAAA,QAE3H,QAAQ,KAAK,UAAU,uBAAuB,OAAO,KAAK,KAAK,UAAU,sBAAsB;AAAA,QAC/F,iBAAiB,KAAK,UAAU,uBAAuB,gBAAgB,KAAK,KAAK,UAAU,sBAAsB;AAAA,QAEjH,kBAAkB,KAAK,UAAU,iCAAiC,iBAAiB,KAAK,KAAK,UAAU,gCAAgC;AAAA,QACvI,qBAAqB,KAAK,UAAU,oCAAoC,oBAAoB,KAAK,KAAK,UAAU,mCAAmC;AAAA,QACnJ,qBAAqB,KAAK,UAAU,oCAAoC,oBAAoB,KAAK,KAAK,UAAU,mCAAmC;AAAA,QAEnJ,cAAc,KAAK,UAAU,6BAA6B,aAAa,KAAK,KAAK,UAAU,4BAA4B;AAAA,QACvH,oBAAoB,KAAK,UAAU,6BAA6B,mBAAmB,KAAK,KAAK,UAAU,4BAA4B;AAAA,QACnI,eAAe,KAAK,UAAU,8BAA8B,cAAc,KAAK,KAAK,UAAU,6BAA6B;AAAA,QAE3H,YAAY,KAAK,UAAU,oBAAoB,WAAW,KAAK,KAAK,UAAU,mBAAmB;AAAA,QACjG,YAAY,KAAK,UAAU,oBAAoB,WAAW,KAAK,KAAK,UAAU,mBAAmB;AAAA,QACjG,YAAY,KAAK,UAAU,oBAAoB,WAAW,KAAK,KAAK,UAAU,mBAAmB;AAAA,QAEjG,iBAAiB,KAAK,UAAU,6BAA6B,gBAAgB,KAAK,KAAK,UAAU,4BAA4B;AAAA,QAC7H,oBAAoB,KAAK,UAAU,6BAA6B,mBAAmB,KAAK,KAAK,UAAU,4BAA4B;AAAA,QAEnI,wBAAwB,KAAK,UAAU,6BAA6B,gBAAgB,KAAK,KAAK,UAAU,4BAA4B;AAAA,QACpI,2BAA2B,KAAK,UAAU,6BAA6B,mBAAmB,KAAK,KAAK,UAAU,4BAA4B;AAAA,QAE1I,eAAe,KAAK,UAAU,8BAA8B,cAAc,KAAK,KAAK,UAAU,6BAA6B;AAAA,QAC3H,eAAe,KAAK,UAAU,8BAA8B,cAAc,KAAK,KAAK,UAAU,6BAA6B;AAAA,QAC3H,kBAAkB,KAAK,UAAU,iCAAiC,iBAAiB,KAAK,KAAK,UAAU,gCAAgC;AAAA,QAEvI,wBAAwB,KAAK,UAAU,oCAAoC,uBAAuB,KAAK,KAAK,UAAU,mCAAmC;AAAA,QACzJ,2BAA2B,KAAK,UAAU,oCAAoC,0BAA0B,KAAK,KAAK,UAAU,mCAAmC;AAAA,MAChK;AAAA,IAAA;AAAA,EAEF;AACD;;"}
+{"version":3,"file":"ResolverFactory.cjs","sources":["../../../../../packages/engine-tenant-api/src/resolvers/ResolverFactory.ts"],"sourcesContent":["import {\n\tAddIDPMutationResolver,\n\tAddProjectMemberMutationResolver,\n\tChangePasswordMutationResolver,\n\tChangeProfileMutationResolver,\n\tCreateApiKeyMutationResolver,\n\tCreateProjectMutationResolver,\n\tDisableApiKeyMutationResolver,\n\tDisableIDPMutationResolver,\n\tEnableIDPMutationResolver,\n\tIdentityGlobalRolesMutationResolver,\n\tIDPMutationResolver,\n\tInviteMutationResolver,\n\tMailTemplateMutationResolver,\n\tOtpMutationResolver,\n\tRemoveProjectMemberMutationResolver,\n\tResetPasswordMutationResolver,\n\tSetProjectSecretMutationResolver,\n\tSignInMutationResolver,\n\tSignOutMutationResolver,\n\tSignUpMutationResolver,\n\tUpdateProjectMemberMutationResolver,\n\tUpdateProjectMutationResolver,\n} from './mutation'\n\nimport { Resolvers } from '../schema'\nimport { MeQueryResolver, PersonQueryResolver, ProjectMembersQueryResolver, ProjectQueryResolver } from './query'\nimport { IdentityTypeResolver, ProjectTypeResolver } from './types'\nimport { DateTimeType, JSONType } from '@contember/graphql-utils'\nimport { IDPQueryResolver } from './query/IDPQueryResolver'\nimport { UpdateIDPMutationResolver } from './mutation/idp/UpdateIDPMutationResolver'\nimport { DisablePersonMutationResolver } from './mutation/person/DisablePersonMutationResolver'\nimport { MailTemplateQueryResolver } from './query/MailTemplateQueryResolver'\nimport { ConfigurationMutationResolver } from './mutation/configuration/ConfigurationMutationResolver'\nimport { ConfigurationQueryResolver } from './query/ConfigurationQueryResolver'\nimport { PasswordlessMutationResolver } from './mutation/person/PasswordlessMutationResolver'\nimport { TogglePasswordlessMutationResolver } from './mutation/person/TogglePasswordlessMutationResolver'\n\nclass ResolverFactory {\n\tpublic constructor(\n\t\tprivate readonly resolvers: {\n\t\t\tmeQueryResolver: MeQueryResolver\n\t\t\tpersonQueryResolver: PersonQueryResolver\n\t\t\tprojectQueryResolver: ProjectQueryResolver\n\t\t\tprojectMembersQueryResolver: ProjectMembersQueryResolver\n\t\t\tidpQueryResolver: IDPQueryResolver\n\t\t\tmailTemplateQueryResolver: MailTemplateQueryResolver\n\n\t\t\tsignUpMutationResolver: SignUpMutationResolver\n\t\t\tsignInMutationResolver: SignInMutationResolver\n\t\t\tsignOutMutationResolver: SignOutMutationResolver\n\t\t\tchangeProfileMutationResolver: ChangeProfileMutationResolver\n\t\t\tchangePasswordMutationResolver: ChangePasswordMutationResolver\n\t\t\tresetPasswordMutationResolver: ResetPasswordMutationResolver\n\t\t\tidpMutationResolver: IDPMutationResolver\n\t\t\tregisterIdpMutationResolver: AddIDPMutationResolver\n\t\t\tdisableIdpMutationResolver: DisableIDPMutationResolver\n\t\t\tenableIdpMutationResolver: EnableIDPMutationResolver\n\t\t\tupdateIdpMutationResolver: UpdateIDPMutationResolver\n\t\t\tpasswordlessMutationResolver: PasswordlessMutationResolver\n\n\t\t\tdisablePersonMutationResolver: DisablePersonMutationResolver\n\n\t\t\tinviteMutationResolver: InviteMutationResolver\n\t\t\taddProjectMemberMutationResolver: AddProjectMemberMutationResolver\n\t\t\tupdateProjectMemberMutationResolver: UpdateProjectMemberMutationResolver\n\t\t\tremoveProjectMemberMutationResolver: RemoveProjectMemberMutationResolver\n\n\t\t\tcreateApiKeyMutationResolver: CreateApiKeyMutationResolver\n\t\t\tdisableApiKeyMutationResolver: DisableApiKeyMutationResolver\n\n\t\t\totpMutationResolver: OtpMutationResolver\n\n\t\t\tmailTemplateMutationResolver: MailTemplateMutationResolver\n\n\t\t\tcreateProjectMutationResolver: CreateProjectMutationResolver\n\t\t\tsetProjectSecretMutationResolver: SetProjectSecretMutationResolver\n\t\t\tupdateProjectMutationResolver: UpdateProjectMutationResolver\n\n\t\t\tidentityTypeResolver: IdentityTypeResolver\n\t\t\tprojectTypeResolver: ProjectTypeResolver\n\n\t\t\tidentityGlobalRolesMutationResolver: IdentityGlobalRolesMutationResolver\n\n\t\t\tconfigurationMutationResolver: ConfigurationMutationResolver\n\t\t\tconfigurationQueryResolver: ConfigurationQueryResolver\n\n\t\t\ttogglePasswordlessMutationResolver: TogglePasswordlessMutationResolver\n\n\t\t},\n\t) { }\n\n\tcreate(): Resolvers & { Mutation: Required<Resolvers['Mutation']> } & { Query: Required<Resolvers['Query']> } {\n\t\treturn {\n\t\t\tJson: JSONType,\n\t\t\tDateTime: DateTimeType,\n\t\t\tIdentity: {\n\t\t\t\tprojects: this.resolvers.identityTypeResolver.projects.bind(this.resolvers.identityTypeResolver),\n\t\t\t\tperson: this.resolvers.identityTypeResolver.person.bind(this.resolvers.identityTypeResolver),\n\t\t\t\troles: this.resolvers.identityTypeResolver.roles.bind(this.resolvers.identityTypeResolver),\n\t\t\t\tpermissions: this.resolvers.identityTypeResolver.permissions.bind(this.resolvers.identityTypeResolver),\n\t\t\t},\n\t\t\tProject: {\n\t\t\t\tmembers: this.resolvers.projectTypeResolver.members.bind(this.resolvers.projectTypeResolver),\n\t\t\t\troles: this.resolvers.projectTypeResolver.roles.bind(this.resolvers.projectTypeResolver),\n\t\t\t},\n\t\t\tQuery: {\n\t\t\t\tme: this.resolvers.meQueryResolver.me.bind(this.resolvers.meQueryResolver),\n\t\t\t\tpersonById: this.resolvers.personQueryResolver.personById.bind(this.resolvers.personQueryResolver),\n\t\t\t\tprojectBySlug: this.resolvers.projectQueryResolver.projectBySlug.bind(this.resolvers.projectQueryResolver),\n\t\t\t\tprojects: this.resolvers.projectQueryResolver.projects.bind(this.resolvers.projectQueryResolver),\n\t\t\t\tprojectMemberships: this.resolvers.projectMembersQueryResolver.projectMemberships.bind(this.resolvers.projectMembersQueryResolver),\n\t\t\t\tidentityProviders: this.resolvers.idpQueryResolver.identityProviders.bind(this.resolvers.idpQueryResolver),\n\t\t\t\tmailTemplates: this.resolvers.mailTemplateQueryResolver.mailTemplates.bind(this.resolvers.mailTemplateQueryResolver),\n\t\t\t\tconfiguration: this.resolvers.configurationQueryResolver.configuration.bind(this.resolvers.configurationQueryResolver),\n\t\t\t\tcheckResetPasswordToken: () => {\n\t\t\t\t\tthrow new Error('not implemented')\n\t\t\t\t},\n\t\t\t},\n\t\t\tMutation: {\n\t\t\t\tsignUp: this.resolvers.signUpMutationResolver.signUp.bind(this.resolvers.signUpMutationResolver),\n\t\t\t\tsignIn: this.resolvers.signInMutationResolver.signIn.bind(this.resolvers.signInMutationResolver),\n\t\t\t\tcreateSessionToken: this.resolvers.signInMutationResolver.createSessionToken.bind(this.resolvers.signInMutationResolver),\n\t\t\t\tsignOut: this.resolvers.signOutMutationResolver.signOut.bind(this.resolvers.signOutMutationResolver),\n\n\t\t\t\tchangeProfile: this.resolvers.changeProfileMutationResolver.changeProfile.bind(this.resolvers.changeProfileMutationResolver),\n\t\t\t\tchangeMyProfile: this.resolvers.changeProfileMutationResolver.changeMyProfile.bind(this.resolvers.changeProfileMutationResolver),\n\t\t\t\tchangePassword: this.resolvers.changePasswordMutationResolver.changePassword.bind(this.resolvers.changePasswordMutationResolver),\n\t\t\t\tchangeMyPassword: this.resolvers.changePasswordMutationResolver.changeMyPassword.bind(this.resolvers.changePasswordMutationResolver),\n\t\t\t\tcreateResetPasswordRequest: this.resolvers.resetPasswordMutationResolver.createResetPasswordRequest.bind(this.resolvers.resetPasswordMutationResolver),\n\t\t\t\tresetPassword: this.resolvers.resetPasswordMutationResolver.resetPassword.bind(this.resolvers.resetPasswordMutationResolver),\n\n\t\t\t\tinitSignInIDP: this.resolvers.idpMutationResolver.initSignInIDP.bind(this.resolvers.idpMutationResolver),\n\t\t\t\tsignInIDP: this.resolvers.idpMutationResolver.signInIDP.bind(this.resolvers.idpMutationResolver),\n\t\t\t\taddIDP: this.resolvers.registerIdpMutationResolver.addIDP.bind(this.resolvers.registerIdpMutationResolver),\n\t\t\t\tdisableIDP: this.resolvers.disableIdpMutationResolver.disableIDP.bind(this.resolvers.disableIdpMutationResolver),\n\t\t\t\tenableIDP: this.resolvers.enableIdpMutationResolver.enableIDP.bind(this.resolvers.enableIdpMutationResolver),\n\t\t\t\tupdateIDP: this.resolvers.updateIdpMutationResolver.updateIDP.bind(this.resolvers.updateIdpMutationResolver),\n\t\t\t\tdisablePerson: this.resolvers.disablePersonMutationResolver.disablePerson.bind(this.resolvers.disablePersonMutationResolver),\n\n\t\t\t\tsignInPasswordless: this.resolvers.passwordlessMutationResolver.signInPasswordless.bind(this.resolvers.passwordlessMutationResolver),\n\t\t\t\tinitSignInPasswordless: this.resolvers.passwordlessMutationResolver.initSignInPasswordless.bind(this.resolvers.passwordlessMutationResolver),\n\t\t\t\tactivatePasswordlessOtp: this.resolvers.passwordlessMutationResolver.activatePasswordlessOtp.bind(this.resolvers.passwordlessMutationResolver),\n\t\t\t\tdisableMyPasswordless: this.resolvers.togglePasswordlessMutationResolver.disableMyPasswordless.bind(this.resolvers.togglePasswordlessMutationResolver),\n\t\t\t\tenableMyPasswordless: this.resolvers.togglePasswordlessMutationResolver.enableMyPasswordless.bind(this.resolvers.togglePasswordlessMutationResolver),\n\n\t\t\t\tinvite: this.resolvers.inviteMutationResolver.invite.bind(this.resolvers.inviteMutationResolver),\n\t\t\t\tunmanagedInvite: this.resolvers.inviteMutationResolver.unmanagedInvite.bind(this.resolvers.inviteMutationResolver),\n\n\t\t\t\taddProjectMember: this.resolvers.addProjectMemberMutationResolver.addProjectMember.bind(this.resolvers.addProjectMemberMutationResolver),\n\t\t\t\tupdateProjectMember: this.resolvers.updateProjectMemberMutationResolver.updateProjectMember.bind(this.resolvers.updateProjectMemberMutationResolver),\n\t\t\t\tremoveProjectMember: this.resolvers.removeProjectMemberMutationResolver.removeProjectMember.bind(this.resolvers.updateProjectMemberMutationResolver),\n\n\t\t\t\tcreateApiKey: this.resolvers.createApiKeyMutationResolver.createApiKey.bind(this.resolvers.createApiKeyMutationResolver),\n\t\t\t\tcreateGlobalApiKey: this.resolvers.createApiKeyMutationResolver.createGlobalApiKey.bind(this.resolvers.createApiKeyMutationResolver),\n\t\t\t\tdisableApiKey: this.resolvers.disableApiKeyMutationResolver.disableApiKey.bind(this.resolvers.disableApiKeyMutationResolver),\n\n\t\t\t\tprepareOtp: this.resolvers.otpMutationResolver.prepareOtp.bind(this.resolvers.otpMutationResolver),\n\t\t\t\tconfirmOtp: this.resolvers.otpMutationResolver.confirmOtp.bind(this.resolvers.otpMutationResolver),\n\t\t\t\tdisableOtp: this.resolvers.otpMutationResolver.disableOtp.bind(this.resolvers.otpMutationResolver),\n\n\t\t\t\taddMailTemplate: this.resolvers.mailTemplateMutationResolver.addMailTemplate.bind(this.resolvers.mailTemplateMutationResolver),\n\t\t\t\tremoveMailTemplate: this.resolvers.mailTemplateMutationResolver.removeMailTemplate.bind(this.resolvers.mailTemplateMutationResolver),\n\n\t\t\t\taddProjectMailTemplate: this.resolvers.mailTemplateMutationResolver.addMailTemplate.bind(this.resolvers.mailTemplateMutationResolver),\n\t\t\t\tremoveProjectMailTemplate: this.resolvers.mailTemplateMutationResolver.removeMailTemplate.bind(this.resolvers.mailTemplateMutationResolver),\n\n\t\t\t\tcreateProject: this.resolvers.createProjectMutationResolver.createProject.bind(this.resolvers.createProjectMutationResolver),\n\t\t\t\tupdateProject: this.resolvers.updateProjectMutationResolver.updateProject.bind(this.resolvers.updateProjectMutationResolver),\n\t\t\t\tsetProjectSecret: this.resolvers.setProjectSecretMutationResolver.setProjectSecret.bind(this.resolvers.setProjectSecretMutationResolver),\n\n\t\t\t\taddGlobalIdentityRoles: this.resolvers.identityGlobalRolesMutationResolver.addGlobalIdentityRoles.bind(this.resolvers.identityGlobalRolesMutationResolver),\n\t\t\t\tremoveGlobalIdentityRoles: this.resolvers.identityGlobalRolesMutationResolver.removeGlobalIdentityRoles.bind(this.resolvers.identityGlobalRolesMutationResolver),\n\n\t\t\t\tconfigure: this.resolvers.configurationMutationResolver.configure.bind(this.resolvers.configurationMutationResolver),\n\t\t\t},\n\t\t}\n\t}\n}\n\nnamespace ResolverFactory {\n\texport type FieldResolverArgs = {\n\t\t[argument: string]: any\n\t}\n}\n\nexport { ResolverFactory }\n"],"names":["JSONType","DateTimeType"],"mappings":";;;AAsCA,MAAM,gBAAgB;AAAA,EACd,YACW,WAkDhB;AAlDgB,SAAA,YAAA;AAAA,EAAA;AAAA,EAoDlB,SAA8G;AACtG,WAAA;AAAA,MACN,MAAMA,aAAA;AAAA,MACN,UAAUC,aAAA;AAAA,MACV,UAAU;AAAA,QACT,UAAU,KAAK,UAAU,qBAAqB,SAAS,KAAK,KAAK,UAAU,oBAAoB;AAAA,QAC/F,QAAQ,KAAK,UAAU,qBAAqB,OAAO,KAAK,KAAK,UAAU,oBAAoB;AAAA,QAC3F,OAAO,KAAK,UAAU,qBAAqB,MAAM,KAAK,KAAK,UAAU,oBAAoB;AAAA,QACzF,aAAa,KAAK,UAAU,qBAAqB,YAAY,KAAK,KAAK,UAAU,oBAAoB;AAAA,MACtG;AAAA,MACA,SAAS;AAAA,QACR,SAAS,KAAK,UAAU,oBAAoB,QAAQ,KAAK,KAAK,UAAU,mBAAmB;AAAA,QAC3F,OAAO,KAAK,UAAU,oBAAoB,MAAM,KAAK,KAAK,UAAU,mBAAmB;AAAA,MACxF;AAAA,MACA,OAAO;AAAA,QACN,IAAI,KAAK,UAAU,gBAAgB,GAAG,KAAK,KAAK,UAAU,eAAe;AAAA,QACzE,YAAY,KAAK,UAAU,oBAAoB,WAAW,KAAK,KAAK,UAAU,mBAAmB;AAAA,QACjG,eAAe,KAAK,UAAU,qBAAqB,cAAc,KAAK,KAAK,UAAU,oBAAoB;AAAA,QACzG,UAAU,KAAK,UAAU,qBAAqB,SAAS,KAAK,KAAK,UAAU,oBAAoB;AAAA,QAC/F,oBAAoB,KAAK,UAAU,4BAA4B,mBAAmB,KAAK,KAAK,UAAU,2BAA2B;AAAA,QACjI,mBAAmB,KAAK,UAAU,iBAAiB,kBAAkB,KAAK,KAAK,UAAU,gBAAgB;AAAA,QACzG,eAAe,KAAK,UAAU,0BAA0B,cAAc,KAAK,KAAK,UAAU,yBAAyB;AAAA,QACnH,eAAe,KAAK,UAAU,2BAA2B,cAAc,KAAK,KAAK,UAAU,0BAA0B;AAAA,QACrH,yBAAyB,MAAM;AACxB,gBAAA,IAAI,MAAM,iBAAiB;AAAA,QAAA;AAAA,MAEnC;AAAA,MACA,UAAU;AAAA,QACT,QAAQ,KAAK,UAAU,uBAAuB,OAAO,KAAK,KAAK,UAAU,sBAAsB;AAAA,QAC/F,QAAQ,KAAK,UAAU,uBAAuB,OAAO,KAAK,KAAK,UAAU,sBAAsB;AAAA,QAC/F,oBAAoB,KAAK,UAAU,uBAAuB,mBAAmB,KAAK,KAAK,UAAU,sBAAsB;AAAA,QACvH,SAAS,KAAK,UAAU,wBAAwB,QAAQ,KAAK,KAAK,UAAU,uBAAuB;AAAA,QAEnG,eAAe,KAAK,UAAU,8BAA8B,cAAc,KAAK,KAAK,UAAU,6BAA6B;AAAA,QAC3H,iBAAiB,KAAK,UAAU,8BAA8B,gBAAgB,KAAK,KAAK,UAAU,6BAA6B;AAAA,QAC/H,gBAAgB,KAAK,UAAU,+BAA+B,eAAe,KAAK,KAAK,UAAU,8BAA8B;AAAA,QAC/H,kBAAkB,KAAK,UAAU,+BAA+B,iBAAiB,KAAK,KAAK,UAAU,8BAA8B;AAAA,QACnI,4BAA4B,KAAK,UAAU,8BAA8B,2BAA2B,KAAK,KAAK,UAAU,6BAA6B;AAAA,QACrJ,eAAe,KAAK,UAAU,8BAA8B,cAAc,KAAK,KAAK,UAAU,6BAA6B;AAAA,QAE3H,eAAe,KAAK,UAAU,oBAAoB,cAAc,KAAK,KAAK,UAAU,mBAAmB;AAAA,QACvG,WAAW,KAAK,UAAU,oBAAoB,UAAU,KAAK,KAAK,UAAU,mBAAmB;AAAA,QAC/F,QAAQ,KAAK,UAAU,4BAA4B,OAAO,KAAK,KAAK,UAAU,2BAA2B;AAAA,QACzG,YAAY,KAAK,UAAU,2BAA2B,WAAW,KAAK,KAAK,UAAU,0BAA0B;AAAA,QAC/G,WAAW,KAAK,UAAU,0BAA0B,UAAU,KAAK,KAAK,UAAU,yBAAyB;AAAA,QAC3G,WAAW,KAAK,UAAU,0BAA0B,UAAU,KAAK,KAAK,UAAU,yBAAyB;AAAA,QAC3G,eAAe,KAAK,UAAU,8BAA8B,cAAc,KAAK,KAAK,UAAU,6BAA6B;AAAA,QAE3H,oBAAoB,KAAK,UAAU,6BAA6B,mBAAmB,KAAK,KAAK,UAAU,4BAA4B;AAAA,QACnI,wBAAwB,KAAK,UAAU,6BAA6B,uBAAuB,KAAK,KAAK,UAAU,4BAA4B;AAAA,QAC3I,yBAAyB,KAAK,UAAU,6BAA6B,wBAAwB,KAAK,KAAK,UAAU,4BAA4B;AAAA,QAC7I,uBAAuB,KAAK,UAAU,mCAAmC,sBAAsB,KAAK,KAAK,UAAU,kCAAkC;AAAA,QACrJ,sBAAsB,KAAK,UAAU,mCAAmC,qBAAqB,KAAK,KAAK,UAAU,kCAAkC;AAAA,QAEnJ,QAAQ,KAAK,UAAU,uBAAuB,OAAO,KAAK,KAAK,UAAU,sBAAsB;AAAA,QAC/F,iBAAiB,KAAK,UAAU,uBAAuB,gBAAgB,KAAK,KAAK,UAAU,sBAAsB;AAAA,QAEjH,kBAAkB,KAAK,UAAU,iCAAiC,iBAAiB,KAAK,KAAK,UAAU,gCAAgC;AAAA,QACvI,qBAAqB,KAAK,UAAU,oCAAoC,oBAAoB,KAAK,KAAK,UAAU,mCAAmC;AAAA,QACnJ,qBAAqB,KAAK,UAAU,oCAAoC,oBAAoB,KAAK,KAAK,UAAU,mCAAmC;AAAA,QAEnJ,cAAc,KAAK,UAAU,6BAA6B,aAAa,KAAK,KAAK,UAAU,4BAA4B;AAAA,QACvH,oBAAoB,KAAK,UAAU,6BAA6B,mBAAmB,KAAK,KAAK,UAAU,4BAA4B;AAAA,QACnI,eAAe,KAAK,UAAU,8BAA8B,cAAc,KAAK,KAAK,UAAU,6BAA6B;AAAA,QAE3H,YAAY,KAAK,UAAU,oBAAoB,WAAW,KAAK,KAAK,UAAU,mBAAmB;AAAA,QACjG,YAAY,KAAK,UAAU,oBAAoB,WAAW,KAAK,KAAK,UAAU,mBAAmB;AAAA,QACjG,YAAY,KAAK,UAAU,oBAAoB,WAAW,KAAK,KAAK,UAAU,mBAAmB;AAAA,QAEjG,iBAAiB,KAAK,UAAU,6BAA6B,gBAAgB,KAAK,KAAK,UAAU,4BAA4B;AAAA,QAC7H,oBAAoB,KAAK,UAAU,6BAA6B,mBAAmB,KAAK,KAAK,UAAU,4BAA4B;AAAA,QAEnI,wBAAwB,KAAK,UAAU,6BAA6B,gBAAgB,KAAK,KAAK,UAAU,4BAA4B;AAAA,QACpI,2BAA2B,KAAK,UAAU,6BAA6B,mBAAmB,KAAK,KAAK,UAAU,4BAA4B;AAAA,QAE1I,eAAe,KAAK,UAAU,8BAA8B,cAAc,KAAK,KAAK,UAAU,6BAA6B;AAAA,QAC3H,eAAe,KAAK,UAAU,8BAA8B,cAAc,KAAK,KAAK,UAAU,6BAA6B;AAAA,QAC3H,kBAAkB,KAAK,UAAU,iCAAiC,iBAAiB,KAAK,KAAK,UAAU,gCAAgC;AAAA,QAEvI,wBAAwB,KAAK,UAAU,oCAAoC,uBAAuB,KAAK,KAAK,UAAU,mCAAmC;AAAA,QACzJ,2BAA2B,KAAK,UAAU,oCAAoC,0BAA0B,KAAK,KAAK,UAAU,mCAAmC;AAAA,QAE/J,WAAW,KAAK,UAAU,8BAA8B,UAAU,KAAK,KAAK,UAAU,6BAA6B;AAAA,MAAA;AAAA,IAErH;AAAA,EAAA;AAEF;;"}