@contember/engine-tenant-api 2.1.0-alpha.36 → 2.1.0-alpha.39

package/dist/production/src/migrations/2023-01-20-135500-person-email-normalize.js

@@ -0,0 +1,28 @@
+const sql = `
+WITH
+	normalized AS (
+		SELECT id, email, REGEXP_REPLACE(LOWER(email), '\\s', '', 'g') AS normalized
+		FROM person
+	),
+	not_exist AS (
+		SELECT *
+		FROM normalized
+		 WHERE NOT EXISTS(SELECT FROM person WHERE person.email = normalized.normalized)
+	),
+	uniq AS (
+		SELECT DISTINCT ON (normalized) *
+		FROM not_exist
+		ORDER BY normalized
+	)
+UPDATE person
+SET email = uniq.normalized
+FROM uniq
+WHERE person.id = uniq.id;
+`;
+async function _20230120135500personemailnormalize(builder) {
+  builder.sql(sql);
+}
+export {
+  _20230120135500personemailnormalize as default
+};
+//# sourceMappingURL=2023-01-20-135500-person-email-normalize.js.map

package/dist/production/src/migrations/2023-01-20-135500-person-email-normalize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"2023-01-20-135500-person-email-normalize.js","sources":["../../../../../packages/engine-tenant-api/src/migrations/2023-01-20-135500-person-email-normalize.ts"],"sourcesContent":["import { MigrationBuilder } from '@contember/database-migrations'\n\nconst sql = `\nWITH\n\tnormalized AS (\n\t\tSELECT id, email, REGEXP_REPLACE(LOWER(email), '\\\\s', '', 'g') AS normalized\n\t\tFROM person\n\t),\n\tnot_exist AS (\n\t\tSELECT *\n\t\tFROM normalized\n\t\t WHERE NOT EXISTS(SELECT FROM person WHERE person.email = normalized.normalized)\n\t),\n\tuniq AS (\n\t\tSELECT DISTINCT ON (normalized) *\n\t\tFROM not_exist\n\t\tORDER BY normalized\n\t)\nUPDATE person\nSET email = uniq.normalized\nFROM uniq\nWHERE person.id = uniq.id;\n`\n\nexport default async function(builder: MigrationBuilder) {\n\tbuilder.sql(sql)\n}\n"],"names":[],"mappings":"AAEA,MAAM,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAsBZ,eAAA,oCAA8B,SAA2B;AACxD,UAAQ,IAAI,GAAG;AAChB;"}

package/dist/production/src/migrations/2023-06-03-104000-person-disabled.cjs

@@ -0,0 +1,10 @@
+"use strict";
+const sql = `
+ALTER TABLE person
+	ADD disabled_at TIMESTAMP WITH TIME ZONE;
+`;
+async function _20230603104000persondisabled(builder) {
+  builder.sql(sql);
+}
+module.exports = _20230603104000persondisabled;
+//# sourceMappingURL=2023-06-03-104000-person-disabled.cjs.map

package/dist/production/src/migrations/2023-06-03-104000-person-disabled.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"2023-06-03-104000-person-disabled.cjs","sources":["../../../../../packages/engine-tenant-api/src/migrations/2023-06-03-104000-person-disabled.ts"],"sourcesContent":["import { MigrationBuilder } from '@contember/database-migrations'\n\nconst sql = `\nALTER TABLE person\n\tADD disabled_at TIMESTAMP WITH TIME ZONE;\n`\n\nexport default async function(builder: MigrationBuilder) {\n\tbuilder.sql(sql)\n}\n"],"names":[],"mappings":";AAEA,MAAM,MAAM;AAAA;AAAA;AAAA;AAKZ,eAAA,8BAA8B,SAA2B;AACxD,UAAQ,IAAI,GAAG;AAChB;;"}

package/dist/production/src/migrations/2023-06-03-104000-person-disabled.js

@@ -0,0 +1,11 @@
+const sql = `
+ALTER TABLE person
+	ADD disabled_at TIMESTAMP WITH TIME ZONE;
+`;
+async function _20230603104000persondisabled(builder) {
+  builder.sql(sql);
+}
+export {
+  _20230603104000persondisabled as default
+};
+//# sourceMappingURL=2023-06-03-104000-person-disabled.js.map

package/dist/production/src/migrations/2023-06-03-104000-person-disabled.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"2023-06-03-104000-person-disabled.js","sources":["../../../../../packages/engine-tenant-api/src/migrations/2023-06-03-104000-person-disabled.ts"],"sourcesContent":["import { MigrationBuilder } from '@contember/database-migrations'\n\nconst sql = `\nALTER TABLE person\n\tADD disabled_at TIMESTAMP WITH TIME ZONE;\n`\n\nexport default async function(builder: MigrationBuilder) {\n\tbuilder.sql(sql)\n}\n"],"names":[],"mappings":"AAEA,MAAM,MAAM;AAAA;AAAA;AAAA;AAKZ,eAAA,8BAA8B,SAA2B;AACxD,UAAQ,IAAI,GAAG;AAChB;"}

package/dist/production/src/migrations/2023-09-01-165000-idp-return-config.cjs

@@ -0,0 +1,10 @@
+"use strict";
+const sql = `
+ALTER TABLE identity_provider
+	ADD COLUMN init_returns_config BOOLEAN NOT NULL DEFAULT FALSE;
+`;
+async function _20230901165000idpreturnconfig(builder) {
+  builder.sql(sql);
+}
+module.exports = _20230901165000idpreturnconfig;
+//# sourceMappingURL=2023-09-01-165000-idp-return-config.cjs.map

package/dist/production/src/migrations/2023-09-01-165000-idp-return-config.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"2023-09-01-165000-idp-return-config.cjs","sources":["../../../../../packages/engine-tenant-api/src/migrations/2023-09-01-165000-idp-return-config.ts"],"sourcesContent":["import { MigrationBuilder } from '@contember/database-migrations'\n\nconst sql = `\nALTER TABLE identity_provider\n\tADD COLUMN init_returns_config BOOLEAN NOT NULL DEFAULT FALSE;\n`\n\nexport default async function(builder: MigrationBuilder) {\n\tbuilder.sql(sql)\n}\n"],"names":[],"mappings":";AAEA,MAAM,MAAM;AAAA;AAAA;AAAA;AAKZ,eAAA,+BAA8B,SAA2B;AACxD,UAAQ,IAAI,GAAG;AAChB;;"}

package/dist/production/src/migrations/2023-09-01-165000-idp-return-config.js

@@ -0,0 +1,11 @@
+const sql = `
+ALTER TABLE identity_provider
+	ADD COLUMN init_returns_config BOOLEAN NOT NULL DEFAULT FALSE;
+`;
+async function _20230901165000idpreturnconfig(builder) {
+  builder.sql(sql);
+}
+export {
+  _20230901165000idpreturnconfig as default
+};
+//# sourceMappingURL=2023-09-01-165000-idp-return-config.js.map

package/dist/production/src/migrations/2023-09-01-165000-idp-return-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"2023-09-01-165000-idp-return-config.js","sources":["../../../../../packages/engine-tenant-api/src/migrations/2023-09-01-165000-idp-return-config.ts"],"sourcesContent":["import { MigrationBuilder } from '@contember/database-migrations'\n\nconst sql = `\nALTER TABLE identity_provider\n\tADD COLUMN init_returns_config BOOLEAN NOT NULL DEFAULT FALSE;\n`\n\nexport default async function(builder: MigrationBuilder) {\n\tbuilder.sql(sql)\n}\n"],"names":[],"mappings":"AAEA,MAAM,MAAM;AAAA;AAAA;AAAA;AAKZ,eAAA,+BAA8B,SAA2B;AACxD,UAAQ,IAAI,GAAG;AAChB;"}

package/dist/production/src/migrations/2024-06-20-140000-mail-reply.cjs

@@ -0,0 +1,10 @@
+"use strict";
+const sql = `
+ALTER TABLE mail_template
+	ADD COLUMN reply_to TEXT;
+`;
+async function _20240620140000mailreply(builder) {
+  builder.sql(sql);
+}
+module.exports = _20240620140000mailreply;
+//# sourceMappingURL=2024-06-20-140000-mail-reply.cjs.map

package/dist/production/src/migrations/2024-06-20-140000-mail-reply.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"2024-06-20-140000-mail-reply.cjs","sources":["../../../../../packages/engine-tenant-api/src/migrations/2024-06-20-140000-mail-reply.ts"],"sourcesContent":["import { MigrationBuilder } from '@contember/database-migrations'\n\nconst sql = `\nALTER TABLE mail_template\n\tADD COLUMN reply_to TEXT;\n`\n\nexport default async function(builder: MigrationBuilder) {\n\tbuilder.sql(sql)\n}\n"],"names":[],"mappings":";AAEA,MAAM,MAAM;AAAA;AAAA;AAAA;AAKZ,eAAA,yBAA8B,SAA2B;AACxD,UAAQ,IAAI,GAAG;AAChB;;"}

package/dist/production/src/migrations/2024-06-20-140000-mail-reply.js

@@ -0,0 +1,11 @@
+const sql = `
+ALTER TABLE mail_template
+	ADD COLUMN reply_to TEXT;
+`;
+async function _20240620140000mailreply(builder) {
+  builder.sql(sql);
+}
+export {
+  _20240620140000mailreply as default
+};
+//# sourceMappingURL=2024-06-20-140000-mail-reply.js.map

package/dist/production/src/migrations/2024-06-20-140000-mail-reply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"2024-06-20-140000-mail-reply.js","sources":["../../../../../packages/engine-tenant-api/src/migrations/2024-06-20-140000-mail-reply.ts"],"sourcesContent":["import { MigrationBuilder } from '@contember/database-migrations'\n\nconst sql = `\nALTER TABLE mail_template\n\tADD COLUMN reply_to TEXT;\n`\n\nexport default async function(builder: MigrationBuilder) {\n\tbuilder.sql(sql)\n}\n"],"names":[],"mappings":"AAEA,MAAM,MAAM;AAAA;AAAA;AAAA;AAKZ,eAAA,yBAA8B,SAA2B;AACxD,UAAQ,IAAI,GAAG;AAChB;"}

package/dist/production/src/migrations/2024-08-26-120000-passwordless.cjs

@@ -0,0 +1,31 @@
+"use strict";
+const sql = `
+CREATE TYPE CONFIG_SINGLETON AS ENUM ('singleton');
+CREATE TYPE CONFIG_POLICY AS ENUM ('always', 'never', 'optIn', 'optOut');
+CREATE TABLE "config"
+(
+	id                              CONFIG_SINGLETON PRIMARY KEY DEFAULT 'singleton',
+	passwordless_enabled            CONFIG_POLICY NOT NULL       DEFAULT 'never',
+	passwordless_url                TEXT,
+	passwordless_expiration_minutes INTEGER       NOT NULL       DEFAULT 5
+);
+INSERT INTO "config" (id)
+VALUES (DEFAULT);
+
+ALTER TABLE person_password_reset
+	RENAME TO person_token;
+CREATE TYPE PERSON_TOKEN_TYPE AS ENUM ('password_reset', 'passwordless');
+ALTER TABLE person_token
+	ADD COLUMN type PERSON_TOKEN_TYPE NOT NULL DEFAULT 'password_reset',
+	ADD COLUMN otp_hash TEXT DEFAULT NULL,
+	ADD COLUMN otp_attempts INTEGER NOT NULL DEFAULT 0;
+
+ALTER TABLE person
+	ADD COLUMN passwordless_enabled BOOLEAN DEFAULT NULL;
+
+`;
+async function _20240826120000passwordless(builder) {
+  builder.sql(sql);
+}
+module.exports = _20240826120000passwordless;
+//# sourceMappingURL=2024-08-26-120000-passwordless.cjs.map

package/dist/production/src/migrations/2024-08-26-120000-passwordless.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"2024-08-26-120000-passwordless.cjs","sources":["../../../../../packages/engine-tenant-api/src/migrations/2024-08-26-120000-passwordless.ts"],"sourcesContent":["import { MigrationBuilder } from '@contember/database-migrations'\n\nconst sql = `\nCREATE TYPE CONFIG_SINGLETON AS ENUM ('singleton');\nCREATE TYPE CONFIG_POLICY AS ENUM ('always', 'never', 'optIn', 'optOut');\nCREATE TABLE \"config\"\n(\n\tid                              CONFIG_SINGLETON PRIMARY KEY DEFAULT 'singleton',\n\tpasswordless_enabled            CONFIG_POLICY NOT NULL       DEFAULT 'never',\n\tpasswordless_url                TEXT,\n\tpasswordless_expiration_minutes INTEGER       NOT NULL       DEFAULT 5\n);\nINSERT INTO \"config\" (id)\nVALUES (DEFAULT);\n\nALTER TABLE person_password_reset\n\tRENAME TO person_token;\nCREATE TYPE PERSON_TOKEN_TYPE AS ENUM ('password_reset', 'passwordless');\nALTER TABLE person_token\n\tADD COLUMN type PERSON_TOKEN_TYPE NOT NULL DEFAULT 'password_reset',\n\tADD COLUMN otp_hash TEXT DEFAULT NULL,\n\tADD COLUMN otp_attempts INTEGER NOT NULL DEFAULT 0;\n\nALTER TABLE person\n\tADD COLUMN passwordless_enabled BOOLEAN DEFAULT NULL;\n\n`\n\nexport default async function(builder: MigrationBuilder) {\n\tbuilder.sql(sql)\n}\n"],"names":[],"mappings":";AAEA,MAAM,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA0BZ,eAAA,4BAA8B,SAA2B;AACxD,UAAQ,IAAI,GAAG;AAChB;;"}

package/dist/production/src/migrations/2024-08-26-120000-passwordless.js

@@ -0,0 +1,32 @@
+const sql = `
+CREATE TYPE CONFIG_SINGLETON AS ENUM ('singleton');
+CREATE TYPE CONFIG_POLICY AS ENUM ('always', 'never', 'optIn', 'optOut');
+CREATE TABLE "config"
+(
+	id                              CONFIG_SINGLETON PRIMARY KEY DEFAULT 'singleton',
+	passwordless_enabled            CONFIG_POLICY NOT NULL       DEFAULT 'never',
+	passwordless_url                TEXT,
+	passwordless_expiration_minutes INTEGER       NOT NULL       DEFAULT 5
+);
+INSERT INTO "config" (id)
+VALUES (DEFAULT);
+
+ALTER TABLE person_password_reset
+	RENAME TO person_token;
+CREATE TYPE PERSON_TOKEN_TYPE AS ENUM ('password_reset', 'passwordless');
+ALTER TABLE person_token
+	ADD COLUMN type PERSON_TOKEN_TYPE NOT NULL DEFAULT 'password_reset',
+	ADD COLUMN otp_hash TEXT DEFAULT NULL,
+	ADD COLUMN otp_attempts INTEGER NOT NULL DEFAULT 0;
+
+ALTER TABLE person
+	ADD COLUMN passwordless_enabled BOOLEAN DEFAULT NULL;
+
+`;
+async function _20240826120000passwordless(builder) {
+  builder.sql(sql);
+}
+export {
+  _20240826120000passwordless as default
+};
+//# sourceMappingURL=2024-08-26-120000-passwordless.js.map

package/dist/production/src/migrations/2024-08-26-120000-passwordless.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"2024-08-26-120000-passwordless.js","sources":["../../../../../packages/engine-tenant-api/src/migrations/2024-08-26-120000-passwordless.ts"],"sourcesContent":["import { MigrationBuilder } from '@contember/database-migrations'\n\nconst sql = `\nCREATE TYPE CONFIG_SINGLETON AS ENUM ('singleton');\nCREATE TYPE CONFIG_POLICY AS ENUM ('always', 'never', 'optIn', 'optOut');\nCREATE TABLE \"config\"\n(\n\tid                              CONFIG_SINGLETON PRIMARY KEY DEFAULT 'singleton',\n\tpasswordless_enabled            CONFIG_POLICY NOT NULL       DEFAULT 'never',\n\tpasswordless_url                TEXT,\n\tpasswordless_expiration_minutes INTEGER       NOT NULL       DEFAULT 5\n);\nINSERT INTO \"config\" (id)\nVALUES (DEFAULT);\n\nALTER TABLE person_password_reset\n\tRENAME TO person_token;\nCREATE TYPE PERSON_TOKEN_TYPE AS ENUM ('password_reset', 'passwordless');\nALTER TABLE person_token\n\tADD COLUMN type PERSON_TOKEN_TYPE NOT NULL DEFAULT 'password_reset',\n\tADD COLUMN otp_hash TEXT DEFAULT NULL,\n\tADD COLUMN otp_attempts INTEGER NOT NULL DEFAULT 0;\n\nALTER TABLE person\n\tADD COLUMN passwordless_enabled BOOLEAN DEFAULT NULL;\n\n`\n\nexport default async function(builder: MigrationBuilder) {\n\tbuilder.sql(sql)\n}\n"],"names":[],"mappings":"AAEA,MAAM,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA0BZ,eAAA,4BAA8B,SAA2B;AACxD,UAAQ,IAAI,GAAG;AAChB;"}

package/dist/production/src/migrations/2025-04-16-180000-config-up.cjs

@@ -0,0 +1,39 @@
+"use strict";
+const sql = `
+    ALTER TABLE "config"
+        ADD COLUMN "password_min_length"            INTEGER  NOT NULL DEFAULT 8,
+        ADD COLUMN "password_require_uppercase"     INTEGER  NOT NULL DEFAULT 1,
+        ADD COLUMN "password_require_lowercase"     INTEGER  NOT NULL DEFAULT 1,
+        ADD COLUMN "password_require_digit"         INTEGER  NOT NULL DEFAULT 1,
+        ADD COLUMN "password_require_special"       INTEGER  NOT NULL DEFAULT 0,
+        ADD COLUMN "password_pattern"               TEXT     DEFAULT NULL,
+        ADD COLUMN "password_check_blacklist"       BOOLEAN  NOT NULL DEFAULT TRUE,
+        ADD COLUMN "login_base_backoff"             INTERVAL NOT NULL DEFAULT '1 second',
+        ADD COLUMN "login_max_backoff"              INTERVAL NOT NULL DEFAULT '60 second',
+        ADD COLUMN "login_attempt_window"           INTERVAL NOT NULL DEFAULT '5 minute',
+        ADD COLUMN "login_reveal_user_exits"        BOOLEAN  NOT NULL DEFAULT TRUE,
+        ADD COLUMN "login_default_token_expiration" INTERVAL NOT NULL DEFAULT '30 minute',
+        ADD COLUMN "login_max_token_expiration"     INTERVAL DEFAULT '6 month';
+    ALTER TABLE "config"
+        RENAME passwordless_expiration_minutes TO passwordless_expiration;
+
+    ALTER TABLE "config"
+        ALTER COLUMN passwordless_expiration DROP DEFAULT,
+        ALTER COLUMN passwordless_expiration TYPE INTERVAL USING passwordless_expiration * INTERVAL '1 minute',
+        ALTER COLUMN passwordless_expiration SET DEFAULT INTERVAL '5 minute';
+
+-- revert defaults for existing projects
+    UPDATE "config"
+    SET password_min_length        = 6,
+        password_require_uppercase = 0,
+        password_require_lowercase = 0,
+        password_require_digit     = 0,
+        password_check_blacklist   = FALSE,
+        login_max_token_expiration = NULL;
+
+`;
+async function _20250416180000configup(builder) {
+  builder.sql(sql);
+}
+module.exports = _20250416180000configup;
+//# sourceMappingURL=2025-04-16-180000-config-up.cjs.map

package/dist/production/src/migrations/2025-04-16-180000-config-up.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"2025-04-16-180000-config-up.cjs","sources":["../../../../../packages/engine-tenant-api/src/migrations/2025-04-16-180000-config-up.ts"],"sourcesContent":["import { MigrationBuilder } from '@contember/database-migrations'\n\nconst sql = `\n    ALTER TABLE \"config\"\n        ADD COLUMN \"password_min_length\"            INTEGER  NOT NULL DEFAULT 8,\n        ADD COLUMN \"password_require_uppercase\"     INTEGER  NOT NULL DEFAULT 1,\n        ADD COLUMN \"password_require_lowercase\"     INTEGER  NOT NULL DEFAULT 1,\n        ADD COLUMN \"password_require_digit\"         INTEGER  NOT NULL DEFAULT 1,\n        ADD COLUMN \"password_require_special\"       INTEGER  NOT NULL DEFAULT 0,\n        ADD COLUMN \"password_pattern\"               TEXT     DEFAULT NULL,\n        ADD COLUMN \"password_check_blacklist\"       BOOLEAN  NOT NULL DEFAULT TRUE,\n        ADD COLUMN \"login_base_backoff\"             INTERVAL NOT NULL DEFAULT '1 second',\n        ADD COLUMN \"login_max_backoff\"              INTERVAL NOT NULL DEFAULT '60 second',\n        ADD COLUMN \"login_attempt_window\"           INTERVAL NOT NULL DEFAULT '5 minute',\n        ADD COLUMN \"login_reveal_user_exits\"        BOOLEAN  NOT NULL DEFAULT TRUE,\n        ADD COLUMN \"login_default_token_expiration\" INTERVAL NOT NULL DEFAULT '30 minute',\n        ADD COLUMN \"login_max_token_expiration\"     INTERVAL DEFAULT '6 month';\n    ALTER TABLE \"config\"\n        RENAME passwordless_expiration_minutes TO passwordless_expiration;\n\n    ALTER TABLE \"config\"\n        ALTER COLUMN passwordless_expiration DROP DEFAULT,\n        ALTER COLUMN passwordless_expiration TYPE INTERVAL USING passwordless_expiration * INTERVAL '1 minute',\n        ALTER COLUMN passwordless_expiration SET DEFAULT INTERVAL '5 minute';\n\n-- revert defaults for existing projects\n    UPDATE \"config\"\n    SET password_min_length        = 6,\n        password_require_uppercase = 0,\n        password_require_lowercase = 0,\n        password_require_digit     = 0,\n        password_check_blacklist   = FALSE,\n        login_max_token_expiration = NULL;\n\n`\n\nexport default async function(builder: MigrationBuilder) {\n\tbuilder.sql(sql)\n}\n"],"names":[],"mappings":";AAEA,MAAM,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAkCZ,eAAA,wBAA8B,SAA2B;AACxD,UAAQ,IAAI,GAAG;AAChB;;"}

package/dist/production/src/migrations/2025-04-16-180000-config-up.js

@@ -0,0 +1,40 @@
+const sql = `
+    ALTER TABLE "config"
+        ADD COLUMN "password_min_length"            INTEGER  NOT NULL DEFAULT 8,
+        ADD COLUMN "password_require_uppercase"     INTEGER  NOT NULL DEFAULT 1,
+        ADD COLUMN "password_require_lowercase"     INTEGER  NOT NULL DEFAULT 1,
+        ADD COLUMN "password_require_digit"         INTEGER  NOT NULL DEFAULT 1,
+        ADD COLUMN "password_require_special"       INTEGER  NOT NULL DEFAULT 0,
+        ADD COLUMN "password_pattern"               TEXT     DEFAULT NULL,
+        ADD COLUMN "password_check_blacklist"       BOOLEAN  NOT NULL DEFAULT TRUE,
+        ADD COLUMN "login_base_backoff"             INTERVAL NOT NULL DEFAULT '1 second',
+        ADD COLUMN "login_max_backoff"              INTERVAL NOT NULL DEFAULT '60 second',
+        ADD COLUMN "login_attempt_window"           INTERVAL NOT NULL DEFAULT '5 minute',
+        ADD COLUMN "login_reveal_user_exits"        BOOLEAN  NOT NULL DEFAULT TRUE,
+        ADD COLUMN "login_default_token_expiration" INTERVAL NOT NULL DEFAULT '30 minute',
+        ADD COLUMN "login_max_token_expiration"     INTERVAL DEFAULT '6 month';
+    ALTER TABLE "config"
+        RENAME passwordless_expiration_minutes TO passwordless_expiration;
+
+    ALTER TABLE "config"
+        ALTER COLUMN passwordless_expiration DROP DEFAULT,
+        ALTER COLUMN passwordless_expiration TYPE INTERVAL USING passwordless_expiration * INTERVAL '1 minute',
+        ALTER COLUMN passwordless_expiration SET DEFAULT INTERVAL '5 minute';
+
+-- revert defaults for existing projects
+    UPDATE "config"
+    SET password_min_length        = 6,
+        password_require_uppercase = 0,
+        password_require_lowercase = 0,
+        password_require_digit     = 0,
+        password_check_blacklist   = FALSE,
+        login_max_token_expiration = NULL;
+
+`;
+async function _20250416180000configup(builder) {
+  builder.sql(sql);
+}
+export {
+  _20250416180000configup as default
+};
+//# sourceMappingURL=2025-04-16-180000-config-up.js.map

package/dist/production/src/migrations/2025-04-16-180000-config-up.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"2025-04-16-180000-config-up.js","sources":["../../../../../packages/engine-tenant-api/src/migrations/2025-04-16-180000-config-up.ts"],"sourcesContent":["import { MigrationBuilder } from '@contember/database-migrations'\n\nconst sql = `\n    ALTER TABLE \"config\"\n        ADD COLUMN \"password_min_length\"            INTEGER  NOT NULL DEFAULT 8,\n        ADD COLUMN \"password_require_uppercase\"     INTEGER  NOT NULL DEFAULT 1,\n        ADD COLUMN \"password_require_lowercase\"     INTEGER  NOT NULL DEFAULT 1,\n        ADD COLUMN \"password_require_digit\"         INTEGER  NOT NULL DEFAULT 1,\n        ADD COLUMN \"password_require_special\"       INTEGER  NOT NULL DEFAULT 0,\n        ADD COLUMN \"password_pattern\"               TEXT     DEFAULT NULL,\n        ADD COLUMN \"password_check_blacklist\"       BOOLEAN  NOT NULL DEFAULT TRUE,\n        ADD COLUMN \"login_base_backoff\"             INTERVAL NOT NULL DEFAULT '1 second',\n        ADD COLUMN \"login_max_backoff\"              INTERVAL NOT NULL DEFAULT '60 second',\n        ADD COLUMN \"login_attempt_window\"           INTERVAL NOT NULL DEFAULT '5 minute',\n        ADD COLUMN \"login_reveal_user_exits\"        BOOLEAN  NOT NULL DEFAULT TRUE,\n        ADD COLUMN \"login_default_token_expiration\" INTERVAL NOT NULL DEFAULT '30 minute',\n        ADD COLUMN \"login_max_token_expiration\"     INTERVAL DEFAULT '6 month';\n    ALTER TABLE \"config\"\n        RENAME passwordless_expiration_minutes TO passwordless_expiration;\n\n    ALTER TABLE \"config\"\n        ALTER COLUMN passwordless_expiration DROP DEFAULT,\n        ALTER COLUMN passwordless_expiration TYPE INTERVAL USING passwordless_expiration * INTERVAL '1 minute',\n        ALTER COLUMN passwordless_expiration SET DEFAULT INTERVAL '5 minute';\n\n-- revert defaults for existing projects\n    UPDATE \"config\"\n    SET password_min_length        = 6,\n        password_require_uppercase = 0,\n        password_require_lowercase = 0,\n        password_require_digit     = 0,\n        password_check_blacklist   = FALSE,\n        login_max_token_expiration = NULL;\n\n`\n\nexport default async function(builder: MigrationBuilder) {\n\tbuilder.sql(sql)\n}\n"],"names":[],"mappings":"AAEA,MAAM,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAkCZ,eAAA,wBAA8B,SAA2B;AACxD,UAAQ,IAAI,GAAG;AAChB;"}

package/dist/production/src/migrations/2025-04-17-160000-auth-log.cjs

@@ -0,0 +1,45 @@
+"use strict";
+const sql = `
+CREATE TYPE auth_log_type AS ENUM (
+  'login',
+  'create_session_token',
+  'idp_login',
+  'password_reset_init',
+  'password_reset',
+  'password_change',
+  'email_change',
+  '2fa_disable',
+  '2fa_enable',
+  'passwordless_login_init',
+  'passwordless_login_exchange',
+  'passwordless_login',
+  'person_disable'
+);
+
+CREATE TABLE person_auth_log (
+  id UUID PRIMARY KEY,
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+  invoked_by_id UUID REFERENCES identity(id) ON DELETE SET NULL,
+  person_id UUID REFERENCES person(id) ON DELETE SET NULL,
+  person_token_id UUID REFERENCES person_token(id) ON DELETE SET NULL,
+  person_input_identifier TEXT DEFAULT NULL,
+  type auth_log_type NOT NULL,
+  success BOOLEAN NOT NULL,
+  error_code TEXT,
+  error_message TEXT,
+  ip_address INET,
+  user_agent TEXT,
+  identity_provider_id UUID REFERENCES identity_provider(id) ON DELETE SET NULL,
+  metadata JSONB
+);
+CREATE INDEX ON person_auth_log (person_input_identifier, created_at DESC)
+	WHERE type = 'login' AND success = FALSE;
+
+CREATE INDEX ON person_auth_log (person_id, created_at DESC);
+                                                     
+`;
+async function _20250417160000authlog(builder) {
+  builder.sql(sql);
+}
+module.exports = _20250417160000authlog;
+//# sourceMappingURL=2025-04-17-160000-auth-log.cjs.map

package/dist/production/src/migrations/2025-04-17-160000-auth-log.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"2025-04-17-160000-auth-log.cjs","sources":["../../../../../packages/engine-tenant-api/src/migrations/2025-04-17-160000-auth-log.ts"],"sourcesContent":["import { MigrationBuilder } from '@contember/database-migrations'\n\nconst sql = `\nCREATE TYPE auth_log_type AS ENUM (\n  'login',\n  'create_session_token',\n  'idp_login',\n  'password_reset_init',\n  'password_reset',\n  'password_change',\n  'email_change',\n  '2fa_disable',\n  '2fa_enable',\n  'passwordless_login_init',\n  'passwordless_login_exchange',\n  'passwordless_login',\n  'person_disable'\n);\n\nCREATE TABLE person_auth_log (\n  id UUID PRIMARY KEY,\n  created_at TIMESTAMPTZ NOT NULL DEFAULT now(),\n  invoked_by_id UUID REFERENCES identity(id) ON DELETE SET NULL,\n  person_id UUID REFERENCES person(id) ON DELETE SET NULL,\n  person_token_id UUID REFERENCES person_token(id) ON DELETE SET NULL,\n  person_input_identifier TEXT DEFAULT NULL,\n  type auth_log_type NOT NULL,\n  success BOOLEAN NOT NULL,\n  error_code TEXT,\n  error_message TEXT,\n  ip_address INET,\n  user_agent TEXT,\n  identity_provider_id UUID REFERENCES identity_provider(id) ON DELETE SET NULL,\n  metadata JSONB\n);\nCREATE INDEX ON person_auth_log (person_input_identifier, created_at DESC)\n\tWHERE type = 'login' AND success = FALSE;\n\nCREATE INDEX ON person_auth_log (person_id, created_at DESC);\n                                                     \n`\n\nexport default async function(builder: MigrationBuilder) {\n\tbuilder.sql(sql)\n}\n"],"names":[],"mappings":";AAEA,MAAM,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAwCZ,eAAA,uBAA8B,SAA2B;AACxD,UAAQ,IAAI,GAAG;AAChB;;"}

package/dist/production/src/migrations/2025-04-17-160000-auth-log.js

@@ -0,0 +1,46 @@
+const sql = `
+CREATE TYPE auth_log_type AS ENUM (
+  'login',
+  'create_session_token',
+  'idp_login',
+  'password_reset_init',
+  'password_reset',
+  'password_change',
+  'email_change',
+  '2fa_disable',
+  '2fa_enable',
+  'passwordless_login_init',
+  'passwordless_login_exchange',
+  'passwordless_login',
+  'person_disable'
+);
+
+CREATE TABLE person_auth_log (
+  id UUID PRIMARY KEY,
+  created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+  invoked_by_id UUID REFERENCES identity(id) ON DELETE SET NULL,
+  person_id UUID REFERENCES person(id) ON DELETE SET NULL,
+  person_token_id UUID REFERENCES person_token(id) ON DELETE SET NULL,
+  person_input_identifier TEXT DEFAULT NULL,
+  type auth_log_type NOT NULL,
+  success BOOLEAN NOT NULL,
+  error_code TEXT,
+  error_message TEXT,
+  ip_address INET,
+  user_agent TEXT,
+  identity_provider_id UUID REFERENCES identity_provider(id) ON DELETE SET NULL,
+  metadata JSONB
+);
+CREATE INDEX ON person_auth_log (person_input_identifier, created_at DESC)
+	WHERE type = 'login' AND success = FALSE;
+
+CREATE INDEX ON person_auth_log (person_id, created_at DESC);
+                                                     
+`;
+async function _20250417160000authlog(builder) {
+  builder.sql(sql);
+}
+export {
+  _20250417160000authlog as default
+};
+//# sourceMappingURL=2025-04-17-160000-auth-log.js.map

package/dist/production/src/migrations/2025-04-17-160000-auth-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"2025-04-17-160000-auth-log.js","sources":["../../../../../packages/engine-tenant-api/src/migrations/2025-04-17-160000-auth-log.ts"],"sourcesContent":["import { MigrationBuilder } from '@contember/database-migrations'\n\nconst sql = `\nCREATE TYPE auth_log_type AS ENUM (\n  'login',\n  'create_session_token',\n  'idp_login',\n  'password_reset_init',\n  'password_reset',\n  'password_change',\n  'email_change',\n  '2fa_disable',\n  '2fa_enable',\n  'passwordless_login_init',\n  'passwordless_login_exchange',\n  'passwordless_login',\n  'person_disable'\n);\n\nCREATE TABLE person_auth_log (\n  id UUID PRIMARY KEY,\n  created_at TIMESTAMPTZ NOT NULL DEFAULT now(),\n  invoked_by_id UUID REFERENCES identity(id) ON DELETE SET NULL,\n  person_id UUID REFERENCES person(id) ON DELETE SET NULL,\n  person_token_id UUID REFERENCES person_token(id) ON DELETE SET NULL,\n  person_input_identifier TEXT DEFAULT NULL,\n  type auth_log_type NOT NULL,\n  success BOOLEAN NOT NULL,\n  error_code TEXT,\n  error_message TEXT,\n  ip_address INET,\n  user_agent TEXT,\n  identity_provider_id UUID REFERENCES identity_provider(id) ON DELETE SET NULL,\n  metadata JSONB\n);\nCREATE INDEX ON person_auth_log (person_input_identifier, created_at DESC)\n\tWHERE type = 'login' AND success = FALSE;\n\nCREATE INDEX ON person_auth_log (person_id, created_at DESC);\n                                                     \n`\n\nexport default async function(builder: MigrationBuilder) {\n\tbuilder.sql(sql)\n}\n"],"names":[],"mappings":"AAEA,MAAM,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAwCZ,eAAA,uBAA8B,SAA2B;AACxD,UAAQ,IAAI,GAAG;AAChB;"}

package/dist/production/src/migrations/runner.cjs

@@ -0,0 +1,131 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+const databaseMigrations = require("@contember/database-migrations");
+const _20180802174310Init = require("./2018-08-02-174310-init.cjs");
+const _20180903140621IdentityProject = require("./2018-09-03-140621-identity-project.cjs");
+const _20181026165450SetupApiKey = require("./2018-10-26-165450-setup-api-key.cjs");
+const _20181026175155Variables = require("./2018-10-26-175155-variables.cjs");
+const _20190218110949ProjectSlug = require("./2019-02-18-110949-project-slug.cjs");
+const _20190218160155SessionExpiration = require("./2019-02-18-160155-session-expiration.cjs");
+const _20190503163729ApiKeyDisabledAt = require("./2019-05-03-163729-api-key-disabled-at.cjs");
+const _20190814153300ProjectSlugUnique = require("./2019-08-14-153300-project-slug-unique.cjs");
+const _20190906111000Membership = require("./2019-09-06-111000-membership.cjs");
+const _20190906111001DropOldMember = require("./2019-09-06-111001-drop-old-member.cjs");
+const _20200129IdenityNote = require("./2020-01-29-idenity-note.cjs");
+const _20200417FixPersonIndex = require("./2020-04-17-fix-person-index.cjs");
+const _20200501170000ApiKeyIndex = require("./2020-05-01-170000-api-key-index.cjs");
+const _20200608134000TenantCredentials = require("./2020-06-08-134000-tenant-credentials.cjs");
+const _20200807110000PersonOtp = require("./2020-08-07-110000-person-otp.cjs");
+const _20200817162200MailTemplates = require("./2020-08-17-162200-mail-templates.cjs");
+const _20200821143400PersonPasswordReset = require("./2020-08-21-143400-person-password-reset.cjs");
+const _20200907094200IdentityProvider = require("./2020-09-07-094200-identity-provider.cjs");
+const _20210328134000Timestamp = require("./2021-03-28-134000-timestamp.cjs");
+const _20210726105000ProjectConfig = require("./2021-07-26-105000-project-config.cjs");
+const _20210726132000ProjectSecrets = require("./2021-07-26-132000-project-secrets.cjs");
+const _20210727174000ProjectAliasIndex = require("./2021-07-27-174000-project-alias-index.cjs");
+const _20211124130000PersonPasswordNull = require("./2021-11-24-130000-person-password-null.cjs");
+const _20211124161500MailTemplateProjectNull = require("./2021-11-24-161500-mail-template-project-null.cjs");
+const _20220104144000PersonUniqueIdentity = require("./2022-01-04-144000-person-unique-identity.cjs");
+const _20220209111800FixCrypted = require("./2022-02-09-111800-fix-crypted.cjs");
+const _20220211153000IdpAutoSignUp = require("./2022-02-11-153000-idp-auto-sign-up.cjs");
+const _20220629105000PersonIdp = require("./2022-06-29-105000-person-idp.cjs");
+const _20220707135000PersonEmailOptUniq = require("./2022-07-07-135000-person-email-opt-uniq.cjs");
+const _20220707141000PersonDisplayName = require("./2022-07-07-141000-person-display-name.cjs");
+const _20220714145000PersonLoginOptions = require("./2022-07-14-145000-person-login-options.cjs");
+const _20221108ProjectUpdateNotification = require("./2022-11-08-project-update-notification.cjs");
+const _20230120135500PersonEmailNormalize = require("./2023-01-20-135500-person-email-normalize.cjs");
+const _20230603104000PersonDisabled = require("./2023-06-03-104000-person-disabled.cjs");
+const _20230901165000IdpReturnConfig = require("./2023-09-01-165000-idp-return-config.cjs");
+const _20240620140000MailReply = require("./2024-06-20-140000-mail-reply.cjs");
+const _20240826120000Passwordless = require("./2024-08-26-120000-passwordless.cjs");
+const _20250416180000ConfigUp = require("./2025-04-16-180000-config-up.cjs");
+const _20250417160000AuthLog = require("./2025-04-17-160000-auth-log.cjs");
+const snapshot = require("./snapshot.cjs");
+require("../model/authorization/PermissionActions.cjs");
+require("@contember/authorization");
+require("../model/authorization/PermissionContext.cjs");
+require("../model/authorization/PermissionsFactory.cjs");
+require("@contember/schema");
+require("../model/type/ApiKey.cjs");
+const token = require("../model/utils/token.cjs");
+require("../model/queries/apiKey/ApiKeyQuery.cjs");
+require("node:assert");
+require("../model/service/idp/providers/AppleProvider.cjs");
+require("openid-client");
+require("@contember/typesafe");
+require("../model/service/idp/providers/OIDCTypes.cjs");
+require("../model/service/idp/providers/FacebookProvider.cjs");
+require("../model/service/AuthLogService.cjs");
+require("@contember/schema-utils");
+require("otpauth");
+const migrations = {
+  "2018-08-02-174310-init": _20180802174310Init,
+  "2018-09-03-140621-identity-project": _20180903140621IdentityProject,
+  "2018-10-26-165450-setup-api-key": _20181026165450SetupApiKey,
+  "2018-10-26-175155-variables": _20181026175155Variables,
+  "2019-02-18-110949-project-slug": _20190218110949ProjectSlug,
+  "2019-02-18-160155-session-expiration": _20190218160155SessionExpiration,
+  "2019-05-03-163729-api-key-disabled-at": _20190503163729ApiKeyDisabledAt,
+  "2019-08-14-153300-project-slug-unique": _20190814153300ProjectSlugUnique,
+  "2019-09-06-111000-membership": _20190906111000Membership,
+  "2019-09-06-111001-drop-old-member": _20190906111001DropOldMember,
+  "2020-01-29-idenity-note": _20200129IdenityNote,
+  "2020-04-17-fix-person-index": _20200417FixPersonIndex,
+  "2020-05-01-170000-api-key-index": _20200501170000ApiKeyIndex,
+  "2020-06-08-134000-tenant-credentials": _20200608134000TenantCredentials,
+  "2020-08-07-110000-person-otp": _20200807110000PersonOtp,
+  "2020-08-17-162200-mail-templates": _20200817162200MailTemplates,
+  "2020-08-21-143400-person-password-reset": _20200821143400PersonPasswordReset,
+  "2020-09-07-094200-identity-provider": _20200907094200IdentityProvider,
+  "2021-03-28-134000-timestamp": _20210328134000Timestamp,
+  "2021-07-26-105000-project-config": _20210726105000ProjectConfig,
+  "2021-07-26-132000-project-secrets": _20210726132000ProjectSecrets,
+  "2021-07-27-174000-project-alias-index": _20210727174000ProjectAliasIndex,
+  "2021-11-24-130000-person-password-null": _20211124130000PersonPasswordNull,
+  "2021-11-24-161500-mail-template-project-null": _20211124161500MailTemplateProjectNull,
+  "2022-01-04-144000-person-unique-identity": _20220104144000PersonUniqueIdentity,
+  "2022-02-09-111800-fix-crypted": _20220209111800FixCrypted,
+  "2022-02-11-153000-idp-auto-sign-up": _20220211153000IdpAutoSignUp,
+  "2022-06-29-105000-person-idp": _20220629105000PersonIdp,
+  "2022-07-07-135000-person-email-opt-uniq": _20220707135000PersonEmailOptUniq,
+  "2022-07-07-141000-person-display-name": _20220707141000PersonDisplayName,
+  "2022-07-14-145000-person-login-options": _20220714145000PersonLoginOptions,
+  "2022-11-08-project-update-notification": _20221108ProjectUpdateNotification,
+  "2023-01-20-135500-person-email-normalize": _20230120135500PersonEmailNormalize,
+  "2023-06-03-104000-person-disabled": _20230603104000PersonDisabled,
+  "2023-09-01-165000-idp-return-config": _20230901165000IdpReturnConfig,
+  "2024-06-20-140000-mail-reply": _20240620140000MailReply,
+  "2024-08-26-120000-passwordless": _20240826120000Passwordless,
+  "2025-04-16-180000-config-up": _20250416180000ConfigUp,
+  "2025-04-17-160000-auth-log": _20250417160000AuthLog
+};
+class TenantMigrationsRunner {
+  constructor(db, schema, tenantCredentials, providers) {
+    this.db = db;
+    this.schema = schema;
+    this.tenantCredentials = tenantCredentials;
+    this.providers = providers;
+  }
+  async run(logger) {
+    await Database.createDatabaseIfNotExists(this.db, (message) => typeof message === "string" ? logger.warn(message) : logger.error(message));
+    const connection = Database.Connection.createSingle(this.db, (err) => logger.error(err));
+    const result = await connection.scope(async (connection2) => {
+      const migrationsResolver = new databaseMigrations.SnapshotMigrationResolver(snapshot, migrations);
+      const innerRunner = new databaseMigrations.MigrationsRunner(connection2, this.schema, migrationsResolver);
+      return await innerRunner.migrate((message) => logger.warn(message), {
+        getCredentials: async () => ({
+          loginTokenHash: this.tenantCredentials.loginToken ? token.computeTokenHash(this.tenantCredentials.loginToken) : void 0,
+          rootTokenHash: this.tenantCredentials.rootTokenHash ?? (this.tenantCredentials.rootToken ? token.computeTokenHash(this.tenantCredentials.rootToken) : void 0),
+          rootEmail: this.tenantCredentials.rootEmail,
+          rootPasswordBcrypted: this.tenantCredentials.rootPassword ? await this.providers.bcrypt(this.tenantCredentials.rootPassword) : void 0
+        }),
+        providers: this.providers
+      });
+    });
+    await connection.end();
+    return result;
+  }
+}
+exports.TenantMigrationsRunner = TenantMigrationsRunner;
+//# sourceMappingURL=runner.cjs.map

package/dist/production/src/migrations/runner.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.cjs","sources":["../../../../../packages/engine-tenant-api/src/migrations/runner.ts"],"sourcesContent":["import { Connection, createDatabaseIfNotExists, DatabaseConfig, EventManager } from '@contember/database'\nimport { TenantMigrationArgs } from './types'\nimport { MigrationsRunner as DbMigrationsRunner, SnapshotMigrationResolver } from '@contember/database-migrations'\nimport _20180802174310init from './2018-08-02-174310-init'\nimport _20180903140621identityproject from './2018-09-03-140621-identity-project'\nimport _20181026165450setupapikey from './2018-10-26-165450-setup-api-key'\nimport _20181026175155variables from './2018-10-26-175155-variables'\nimport _20190218110949projectslug from './2019-02-18-110949-project-slug'\nimport _20190218160155sessionexpiration from './2019-02-18-160155-session-expiration'\nimport _20190503163729apikeydisabledat from './2019-05-03-163729-api-key-disabled-at'\nimport _20190814153300projectslugunique from './2019-08-14-153300-project-slug-unique'\nimport _20190906111000membership from './2019-09-06-111000-membership'\nimport _20190906111001dropoldmember from './2019-09-06-111001-drop-old-member'\nimport _20200129idenitynote from './2020-01-29-idenity-note'\nimport _20200417fixpersonindex from './2020-04-17-fix-person-index'\nimport _20200501170000apikeyindex from './2020-05-01-170000-api-key-index'\nimport _20200608134000tenantcredentials from './2020-06-08-134000-tenant-credentials'\nimport _20200807110000personotp from './2020-08-07-110000-person-otp'\nimport _20200817162200mailtemplates from './2020-08-17-162200-mail-templates'\nimport _20200821143400personpasswordreset from './2020-08-21-143400-person-password-reset'\nimport _20200907094200identityprovider from './2020-09-07-094200-identity-provider'\nimport _20210328134000timestamp from './2021-03-28-134000-timestamp'\nimport _20210726105000projectconfig from './2021-07-26-105000-project-config'\nimport _20210726132000projectsecrets from './2021-07-26-132000-project-secrets'\nimport _20210727174000projectaliasindex from './2021-07-27-174000-project-alias-index'\nimport _20211124130000personpasswordnull from './2021-11-24-130000-person-password-null'\nimport _20211124161500mailtemplateprojectnull from './2021-11-24-161500-mail-template-project-null'\nimport _20220104144000personuniqueidentity from './2022-01-04-144000-person-unique-identity'\nimport _20220209111800fixcrypted from './2022-02-09-111800-fix-crypted'\nimport _20220211153000idpautosignup from './2022-02-11-153000-idp-auto-sign-up'\nimport _20220629105000personidp from './2022-06-29-105000-person-idp'\nimport _20220707135000personemailoptuniq from './2022-07-07-135000-person-email-opt-uniq'\nimport _20220707141000persondisplayname from './2022-07-07-141000-person-display-name'\nimport _20220714145000personloginoptions from './2022-07-14-145000-person-login-options'\nimport _20221108projectupdatenotification from './2022-11-08-project-update-notification'\nimport _20230120135500personemailnormalize from './2023-01-20-135500-person-email-normalize'\nimport _20230603104000persondisabled from './2023-06-03-104000-person-disabled'\nimport _20230901165000idpreturnconfig from './2023-09-01-165000-idp-return-config'\nimport _20240620140000mailreply from './2024-06-20-140000-mail-reply'\nimport _20240826120000passwordless from './2024-08-26-120000-passwordless'\nimport _20250416180000configup from './2025-04-16-180000-config-up'\nimport _20250417160000authlog from './2025-04-17-160000-auth-log'\nimport snapshot from './snapshot'\nimport { computeTokenHash, Providers } from '../model'\nimport { Logger } from '@contember/logger'\n\nexport interface TenantCredentials {\n\tloginToken?: string\n\trootEmail?: string\n\trootToken?: string\n\trootTokenHash?: string\n\trootPassword?: string\n}\n\nconst migrations = {\n\t'2018-08-02-174310-init': _20180802174310init,\n\t'2018-09-03-140621-identity-project': _20180903140621identityproject,\n\t'2018-10-26-165450-setup-api-key': _20181026165450setupapikey,\n\t'2018-10-26-175155-variables': _20181026175155variables,\n\t'2019-02-18-110949-project-slug': _20190218110949projectslug,\n\t'2019-02-18-160155-session-expiration': _20190218160155sessionexpiration,\n\t'2019-05-03-163729-api-key-disabled-at': _20190503163729apikeydisabledat,\n\t'2019-08-14-153300-project-slug-unique': _20190814153300projectslugunique,\n\t'2019-09-06-111000-membership': _20190906111000membership,\n\t'2019-09-06-111001-drop-old-member': _20190906111001dropoldmember,\n\t'2020-01-29-idenity-note': _20200129idenitynote,\n\t'2020-04-17-fix-person-index': _20200417fixpersonindex,\n\t'2020-05-01-170000-api-key-index': _20200501170000apikeyindex,\n\t'2020-06-08-134000-tenant-credentials': _20200608134000tenantcredentials,\n\t'2020-08-07-110000-person-otp': _20200807110000personotp,\n\t'2020-08-17-162200-mail-templates': _20200817162200mailtemplates,\n\t'2020-08-21-143400-person-password-reset': _20200821143400personpasswordreset,\n\t'2020-09-07-094200-identity-provider': _20200907094200identityprovider,\n\t'2021-03-28-134000-timestamp': _20210328134000timestamp,\n\t'2021-07-26-105000-project-config': _20210726105000projectconfig,\n\t'2021-07-26-132000-project-secrets': _20210726132000projectsecrets,\n\t'2021-07-27-174000-project-alias-index': _20210727174000projectaliasindex,\n\t'2021-11-24-130000-person-password-null': _20211124130000personpasswordnull,\n\t'2021-11-24-161500-mail-template-project-null': _20211124161500mailtemplateprojectnull,\n\t'2022-01-04-144000-person-unique-identity': _20220104144000personuniqueidentity,\n\t'2022-02-09-111800-fix-crypted': _20220209111800fixcrypted,\n\t'2022-02-11-153000-idp-auto-sign-up': _20220211153000idpautosignup,\n\t'2022-06-29-105000-person-idp': _20220629105000personidp,\n\t'2022-07-07-135000-person-email-opt-uniq': _20220707135000personemailoptuniq,\n\t'2022-07-07-141000-person-display-name': _20220707141000persondisplayname,\n\t'2022-07-14-145000-person-login-options': _20220714145000personloginoptions,\n\t'2022-11-08-project-update-notification': _20221108projectupdatenotification,\n\t'2023-01-20-135500-person-email-normalize': _20230120135500personemailnormalize,\n\t'2023-06-03-104000-person-disabled': _20230603104000persondisabled,\n\t'2023-09-01-165000-idp-return-config': _20230901165000idpreturnconfig,\n\t'2024-06-20-140000-mail-reply': _20240620140000mailreply,\n\t'2024-08-26-120000-passwordless': _20240826120000passwordless,\n\t'2025-04-16-180000-config-up': _20250416180000configup,\n\t'2025-04-17-160000-auth-log': _20250417160000authlog,\n}\n\nexport class TenantMigrationsRunner {\n\tconstructor(\n\t\tprivate readonly db: DatabaseConfig,\n\t\tprivate readonly schema: string,\n\t\tprivate readonly tenantCredentials: TenantCredentials,\n\t\tprivate readonly providers: Pick<Providers, 'bcrypt' | 'uuid'>,\n\t) {\n\t}\n\n\tpublic async run(logger: Logger): Promise<{ name: string }[]> {\n\t\tawait createDatabaseIfNotExists(this.db, message => typeof message === 'string' ? logger.warn(message) : logger.error(message))\n\t\tconst connection = Connection.createSingle(this.db, err => logger.error(err))\n\t\tconst result = await connection.scope(async connection => {\n\t\t\tconst migrationsResolver = new SnapshotMigrationResolver(snapshot, migrations)\n\n\t\t\tconst innerRunner = new DbMigrationsRunner<TenantMigrationArgs>(connection, this.schema, migrationsResolver)\n\t\t\treturn await innerRunner.migrate(message => logger.warn(message), {\n\t\t\t\tgetCredentials: async () => ({\n\t\t\t\t\tloginTokenHash: this.tenantCredentials.loginToken ? computeTokenHash(this.tenantCredentials.loginToken) : undefined,\n\t\t\t\t\trootTokenHash: this.tenantCredentials.rootTokenHash\n\t\t\t\t\t\t?? (this.tenantCredentials.rootToken ? computeTokenHash(this.tenantCredentials.rootToken) : undefined),\n\t\t\t\t\trootEmail: this.tenantCredentials.rootEmail,\n\t\t\t\t\trootPasswordBcrypted: this.tenantCredentials.rootPassword ? await this.providers.bcrypt(this.tenantCredentials.rootPassword) : undefined,\n\t\t\t\t}),\n\t\t\t\tproviders: this.providers,\n\t\t\t})\n\t\t})\n\t\tawait connection.end()\n\t\treturn result\n\t}\n}\n"],"names":["_20180802174310init","_20180903140621identityproject","_20181026165450setupapikey","_20181026175155variables","_20190218110949projectslug","_20190218160155sessionexpiration","_20190503163729apikeydisabledat","_20190814153300projectslugunique","_20190906111000membership","_20190906111001dropoldmember","_20200129idenitynote","_20200417fixpersonindex","_20200501170000apikeyindex","_20200608134000tenantcredentials","_20200807110000personotp","_20200817162200mailtemplates","_20200821143400personpasswordreset","_20200907094200identityprovider","_20210328134000timestamp","_20210726105000projectconfig","_20210726132000projectsecrets","_20210727174000projectaliasindex","_20211124130000personpasswordnull","_20211124161500mailtemplateprojectnull","_20220104144000personuniqueidentity","_20220209111800fixcrypted","_20220211153000idpautosignup","_20220629105000personidp","_20220707135000personemailoptuniq","_20220707141000persondisplayname","_20220714145000personloginoptions","_20221108projectupdatenotification","_20230120135500personemailnormalize","_20230603104000persondisabled","_20230901165000idpreturnconfig","_20240620140000mailreply","_20240826120000passwordless","_20250416180000configup","_20250417160000authlog","createDatabaseIfNotExists","Connection","connection","SnapshotMigrationResolver","DbMigrationsRunner","computeTokenHash"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsDA,MAAM,aAAa;AAAA,EAClB,0BAA0BA;AAAAA,EAC1B,sCAAsCC;AAAAA,EACtC,mCAAmCC;AAAAA,EACnC,+BAA+BC;AAAAA,EAC/B,kCAAkCC;AAAAA,EAClC,wCAAwCC;AAAAA,EACxC,yCAAyCC;AAAAA,EACzC,yCAAyCC;AAAAA,EACzC,gCAAgCC;AAAAA,EAChC,qCAAqCC;AAAAA,EACrC,2BAA2BC;AAAAA,EAC3B,+BAA+BC;AAAAA,EAC/B,mCAAmCC;AAAAA,EACnC,wCAAwCC;AAAAA,EACxC,gCAAgCC;AAAAA,EAChC,oCAAoCC;AAAAA,EACpC,2CAA2CC;AAAAA,EAC3C,uCAAuCC;AAAAA,EACvC,+BAA+BC;AAAAA,EAC/B,oCAAoCC;AAAAA,EACpC,qCAAqCC;AAAAA,EACrC,yCAAyCC;AAAAA,EACzC,0CAA0CC;AAAAA,EAC1C,gDAAgDC;AAAAA,EAChD,4CAA4CC;AAAAA,EAC5C,iCAAiCC;AAAAA,EACjC,sCAAsCC;AAAAA,EACtC,gCAAgCC;AAAAA,EAChC,2CAA2CC;AAAAA,EAC3C,yCAAyCC;AAAAA,EACzC,0CAA0CC;AAAAA,EAC1C,0CAA0CC;AAAAA,EAC1C,4CAA4CC;AAAAA,EAC5C,qCAAqCC;AAAAA,EACrC,uCAAuCC;AAAAA,EACvC,gCAAgCC;AAAAA,EAChC,kCAAkCC;AAAAA,EAClC,+BAA+BC;AAAAA,EAC/B,8BAA8BC;AAC/B;AAEO,MAAM,uBAAuB;AAAA,EACnC,YACkB,IACA,QACA,mBACA,WAChB;AAJgB,SAAA,KAAA;AACA,SAAA,SAAA;AACA,SAAA,oBAAA;AACA,SAAA,YAAA;AAAA,EAElB;AAAA,EAEA,MAAa,IAAI,QAA6C;AAC7D,UAAMC,SAAAA,0BAA0B,KAAK,IAAI,CAAA,YAAW,OAAO,YAAY,WAAW,OAAO,KAAK,OAAO,IAAI,OAAO,MAAM,OAAO,CAAC;AAC9H,UAAM,aAAaC,SAAAA,WAAW,aAAa,KAAK,IAAI,CAAA,QAAO,OAAO,MAAM,GAAG,CAAC;AAC5E,UAAM,SAAS,MAAM,WAAW,MAAM,OAAMC,gBAAc;AACzD,YAAM,qBAAqB,IAAIC,6CAA0B,UAAU,UAAU;AAE7E,YAAM,cAAc,IAAIC,mBAAAA,iBAAwCF,aAAY,KAAK,QAAQ,kBAAkB;AAC3G,aAAO,MAAM,YAAY,QAAQ,aAAW,OAAO,KAAK,OAAO,GAAG;AAAA,QACjE,gBAAgB,aAAa;AAAA,UAC5B,gBAAgB,KAAK,kBAAkB,aAAaG,MAAAA,iBAAiB,KAAK,kBAAkB,UAAU,IAAI;AAAA,UAC1G,eAAe,KAAK,kBAAkB,kBACjC,KAAK,kBAAkB,YAAYA,MAAAA,iBAAiB,KAAK,kBAAkB,SAAS,IAAI;AAAA,UAC7F,WAAW,KAAK,kBAAkB;AAAA,UAClC,sBAAsB,KAAK,kBAAkB,eAAe,MAAM,KAAK,UAAU,OAAO,KAAK,kBAAkB,YAAY,IAAI;AAAA,QAAA;AAAA,QAEhI,WAAW,KAAK;AAAA,MAAA,CAChB;AAAA,IACF,CAAC;AACD,UAAM,WAAW,IAAA;AACjB,WAAO;AAAA,EACR;AACD;;"}