@contember/engine-tenant-api 2.1.0-alpha.37 → 2.1.0-alpha.39

package/dist/development/src/resolvers/TenantResolverContextFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantResolverContextFactory.js","sources":["../../../../../packages/engine-tenant-api/src/resolvers/TenantResolverContextFactory.ts"],"sourcesContent":["import { TenantResolverContext } from './TenantResolverContext'\nimport { DatabaseContext, PermissionContext, PermissionContextFactory } from '../model'\nimport { Logger } from '@contember/logger'\nimport { AuthLogService } from '../model/service/AuthLogService'\n\nexport const createResolverContext = (permissionContext: PermissionContext, apiKeyId: string) => {\n\treturn {\n\t\tapiKeyId: apiKeyId,\n\t\tpermissionContext,\n\t\tidentity: permissionContext.identity,\n\t\tisAllowed: permissionContext.isAllowed.bind(permissionContext),\n\t\trequireAccess: permissionContext.requireAccess.bind(permissionContext),\n\t}\n}\n\nexport class TenantResolverContextFactory {\n\tconstructor(\n\t\tprivate readonly permissionContextFactory: PermissionContextFactory,\n\t\tprivate readonly authLogService: AuthLogService,\n\t) {}\n\n\tpublic create(\n\t\tauthContext: { apiKeyId: string; identityId: string; roles: string[] },\n\t\thttpInfo: { ip: string; userAgent?: string },\n\t\tdb: DatabaseContext,\n\t\tlogger: Logger,\n\t): TenantResolverContext {\n\t\tconst permissionContext = this.permissionContextFactory.create(db, {\n\t\t\tid: authContext.identityId,\n\t\t\troles: authContext.roles,\n\t\t})\n\t\treturn {\n\t\t\t...createResolverContext(permissionContext, authContext.apiKeyId),\n\t\t\tlogAuthAction: async data => {\n\t\t\t\tawait this.authLogService.logAuthAction(db, {\n\t\t\t\t\tidentityId: authContext.identityId,\n\t\t\t\t\tuserAgent: httpInfo.userAgent,\n\t\t\t\t\tclientIp: httpInfo.ip,\n\t\t\t\t}, data)\n\t\t\t},\n\t\t\tdb,\n\t\t\tlogger,\n\t\t}\n\t}\n}\n"],"names":[],"mappings":"AAKO,MAAM,wBAAwB,CAAC,mBAAsC,aAAqB;AAChG,SAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA,UAAU,kBAAkB;AAAA,IAC5B,WAAW,kBAAkB,UAAU,KAAK,iBAAiB;AAAA,IAC7D,eAAe,kBAAkB,cAAc,KAAK,iBAAiB;AAAA,EAAA;AAEvE;AAEO,MAAM,6BAA6B;AAAA,EACzC,YACkB,0BACA,gBAChB;AAFgB,SAAA,2BAAA;AACA,SAAA,iBAAA;AAAA,EACf;AAAA,EAEI,OACN,aACA,UACA,IACA,QACwB;AACxB,UAAM,oBAAoB,KAAK,yBAAyB,OAAO,IAAI;AAAA,MAClE,IAAI,YAAY;AAAA,MAChB,OAAO,YAAY;AAAA,IAAA,CACnB;AACD,WAAO;AAAA,MACN,GAAG,sBAAsB,mBAAmB,YAAY,QAAQ;AAAA,MAChE,eAAe,OAAM,SAAQ;AAC5B,cAAM,KAAK,eAAe,cAAc,IAAI;AAAA,UAC3C,YAAY,YAAY;AAAA,UACxB,WAAW,SAAS;AAAA,UACpB,UAAU,SAAS;AAAA,QAAA,GACjB,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IAAA;AAAA,EAEF;AACD;"}

package/dist/development/src/resolvers/errorUtils.cjs

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+function createErrorResponse(codeOrErrorResponse, developerMessage) {
+  if (typeof codeOrErrorResponse === "string") {
+    if (!developerMessage) {
+      throw new Error("Developer message is required when passing a string as code.");
+    }
+    const error2 = { code: codeOrErrorResponse, developerMessage };
+    return { ok: false, error: error2, errors: [error2] };
+  }
+  const error = { code: codeOrErrorResponse.error, developerMessage: codeOrErrorResponse.errorMessage, ...codeOrErrorResponse.metadata ?? {} };
+  return {
+    ok: false,
+    error,
+    errors: [error]
+  };
+}
+const createProjectNotFoundResponse = (code, projectSlug) => createErrorResponse(code, `Project ${projectSlug} was not found or you are not allowed to access it.`);
+exports.createErrorResponse = createErrorResponse;
+exports.createProjectNotFoundResponse = createProjectNotFoundResponse;
+//# sourceMappingURL=errorUtils.cjs.map

package/dist/development/src/resolvers/errorUtils.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"errorUtils.cjs","sources":["../../../../../packages/engine-tenant-api/src/resolvers/errorUtils.ts"],"sourcesContent":["import { ResponseError } from '../model/utils/Response'\n\ntype Error<T> = { code: T; developerMessage: string }\ntype ErrorResponse<T, Meta = {}> = { ok: false; error: Error<T> & Meta; errors: [Error<T> & Meta] }\n\nexport function createErrorResponse<const T extends string, Meta extends {} | undefined>(\n\tresponseError: ResponseError<T, Meta>,\n): ErrorResponse<T, Meta>\nexport function createErrorResponse<const T extends string>(code: T, developerMessage: string): ErrorResponse<T>\nexport function createErrorResponse(codeOrErrorResponse: string | ResponseError<any>, developerMessage?: string): ErrorResponse<any> {\n\tif (typeof codeOrErrorResponse === 'string') {\n\t\tif (!developerMessage) {\n\t\t\tthrow new Error('Developer message is required when passing a string as code.')\n\t\t}\n\t\tconst error = { code: codeOrErrorResponse, developerMessage }\n\t\treturn { ok: false, error, errors: [error] }\n\t}\n\tconst error = { code: codeOrErrorResponse.error, developerMessage: codeOrErrorResponse.errorMessage, ...(codeOrErrorResponse.metadata ?? {}) }\n\treturn {\n\t\tok: false,\n\t\terror,\n\t\terrors: [error],\n\t}\n}\n\nexport const createProjectNotFoundResponse = <const T extends string>(code: T, projectSlug: string): ErrorResponse<T> =>\n\tcreateErrorResponse(code, `Project ${projectSlug} was not found or you are not allowed to access it.`)\n"],"names":["error"],"mappings":";;AASO,SAAS,oBAAoB,qBAAkD,kBAA+C;AACpI,MAAI,OAAO,wBAAwB,UAAU;AAC5C,QAAI,CAAC,kBAAkB;AACtB,YAAM,IAAI,MAAM,8DAA8D;AAAA,IAC/E;AACA,UAAMA,SAAQ,EAAE,MAAM,qBAAqB,iBAAA;AAC3C,WAAO,EAAE,IAAI,OAAO,OAAAA,QAAO,QAAQ,CAACA,MAAK,EAAA;AAAA,EAC1C;AACA,QAAM,QAAQ,EAAE,MAAM,oBAAoB,OAAO,kBAAkB,oBAAoB,cAAc,GAAI,oBAAoB,YAAY,CAAA,EAAC;AAC1I,SAAO;AAAA,IACN,IAAI;AAAA,IACJ;AAAA,IACA,QAAQ,CAAC,KAAK;AAAA,EAAA;AAEhB;AAEO,MAAM,gCAAgC,CAAyB,MAAS,gBAC9E,oBAAoB,MAAM,WAAW,WAAW,qDAAqD;;;"}

package/dist/development/src/resolvers/errorUtils.js

@@ -0,0 +1,21 @@
+function createErrorResponse(codeOrErrorResponse, developerMessage) {
+  if (typeof codeOrErrorResponse === "string") {
+    if (!developerMessage) {
+      throw new Error("Developer message is required when passing a string as code.");
+    }
+    const error2 = { code: codeOrErrorResponse, developerMessage };
+    return { ok: false, error: error2, errors: [error2] };
+  }
+  const error = { code: codeOrErrorResponse.error, developerMessage: codeOrErrorResponse.errorMessage, ...codeOrErrorResponse.metadata ?? {} };
+  return {
+    ok: false,
+    error,
+    errors: [error]
+  };
+}
+const createProjectNotFoundResponse = (code, projectSlug) => createErrorResponse(code, `Project ${projectSlug} was not found or you are not allowed to access it.`);
+export {
+  createErrorResponse,
+  createProjectNotFoundResponse
+};
+//# sourceMappingURL=errorUtils.js.map

package/dist/development/src/resolvers/errorUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errorUtils.js","sources":["../../../../../packages/engine-tenant-api/src/resolvers/errorUtils.ts"],"sourcesContent":["import { ResponseError } from '../model/utils/Response'\n\ntype Error<T> = { code: T; developerMessage: string }\ntype ErrorResponse<T, Meta = {}> = { ok: false; error: Error<T> & Meta; errors: [Error<T> & Meta] }\n\nexport function createErrorResponse<const T extends string, Meta extends {} | undefined>(\n\tresponseError: ResponseError<T, Meta>,\n): ErrorResponse<T, Meta>\nexport function createErrorResponse<const T extends string>(code: T, developerMessage: string): ErrorResponse<T>\nexport function createErrorResponse(codeOrErrorResponse: string | ResponseError<any>, developerMessage?: string): ErrorResponse<any> {\n\tif (typeof codeOrErrorResponse === 'string') {\n\t\tif (!developerMessage) {\n\t\t\tthrow new Error('Developer message is required when passing a string as code.')\n\t\t}\n\t\tconst error = { code: codeOrErrorResponse, developerMessage }\n\t\treturn { ok: false, error, errors: [error] }\n\t}\n\tconst error = { code: codeOrErrorResponse.error, developerMessage: codeOrErrorResponse.errorMessage, ...(codeOrErrorResponse.metadata ?? {}) }\n\treturn {\n\t\tok: false,\n\t\terror,\n\t\terrors: [error],\n\t}\n}\n\nexport const createProjectNotFoundResponse = <const T extends string>(code: T, projectSlug: string): ErrorResponse<T> =>\n\tcreateErrorResponse(code, `Project ${projectSlug} was not found or you are not allowed to access it.`)\n"],"names":["error"],"mappings":"AASO,SAAS,oBAAoB,qBAAkD,kBAA+C;AACpI,MAAI,OAAO,wBAAwB,UAAU;AAC5C,QAAI,CAAC,kBAAkB;AACtB,YAAM,IAAI,MAAM,8DAA8D;AAAA,IAC/E;AACA,UAAMA,SAAQ,EAAE,MAAM,qBAAqB,iBAAA;AAC3C,WAAO,EAAE,IAAI,OAAO,OAAAA,QAAO,QAAQ,CAACA,MAAK,EAAA;AAAA,EAC1C;AACA,QAAM,QAAQ,EAAE,MAAM,oBAAoB,OAAO,kBAAkB,oBAAoB,cAAc,GAAI,oBAAoB,YAAY,CAAA,EAAC;AAC1I,SAAO;AAAA,IACN,IAAI;AAAA,IACJ;AAAA,IACA,QAAQ,CAAC,KAAK;AAAA,EAAA;AAEhB;AAEO,MAAM,gCAAgC,CAAyB,MAAS,gBAC9E,oBAAoB,MAAM,WAAW,WAAW,qDAAqD;"}

package/dist/development/src/resolvers/membershipUtils.cjs

@@ -0,0 +1,75 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const schemaUtils = require("@contember/schema-utils");
+const createMembershipValidationErrorResult = (result) => {
+  const formatDeveloperError = (it) => {
+    switch (it.error) {
+      case schemaUtils.MembershipValidationErrorType.ROLE_NOT_FOUND:
+        return `Role ${it.role} is not defined in a schema`;
+      case schemaUtils.MembershipValidationErrorType.VARIABLE_EMPTY:
+        return `Variable ${it.variable} of role ${it.role} is empty`;
+      case schemaUtils.MembershipValidationErrorType.VARIABLE_NOT_FOUND:
+        return `Variable ${it.variable} of role ${it.role} is not defined in a schema`;
+      case schemaUtils.MembershipValidationErrorType.VARIABLE_INVALID:
+        return `Variable ${it.variable} of role ${it.role} contains invalid value`;
+    }
+  };
+  const legacyErrors = result.map((it) => {
+    switch (it.error) {
+      case schemaUtils.MembershipValidationErrorType.ROLE_NOT_FOUND:
+        return {
+          code: "ROLE_NOT_FOUND",
+          endUserMessage: "Given role not found",
+          developerMessage: formatDeveloperError(it)
+        };
+      case schemaUtils.MembershipValidationErrorType.VARIABLE_EMPTY:
+        return {
+          code: "VARIABLE_EMPTY",
+          endUserMessage: "Required variable is empty",
+          developerMessage: formatDeveloperError(it)
+        };
+      case schemaUtils.MembershipValidationErrorType.VARIABLE_NOT_FOUND:
+        return {
+          code: "VARIABLE_NOT_FOUND",
+          endUserMessage: "Provided variable does not exist",
+          developerMessage: formatDeveloperError(it)
+        };
+    }
+  }).filter((it) => it !== void 0);
+  return [
+    {
+      code: "INVALID_MEMBERSHIP",
+      developerMessage: "Provided membership is invalid: " + result.map((it) => formatDeveloperError(it)).join(". ") + ". You can also check membershipValidation field for structured details.",
+      membershipValidation: result.map((it) => {
+        switch (it.error) {
+          case schemaUtils.MembershipValidationErrorType.ROLE_NOT_FOUND:
+            return {
+              code: "ROLE_NOT_FOUND",
+              role: it.role
+            };
+          case schemaUtils.MembershipValidationErrorType.VARIABLE_EMPTY:
+            return {
+              code: "VARIABLE_EMPTY",
+              role: it.role,
+              variable: it.variable
+            };
+          case schemaUtils.MembershipValidationErrorType.VARIABLE_NOT_FOUND:
+            return {
+              code: "VARIABLE_NOT_FOUND",
+              role: it.role,
+              variable: it.variable
+            };
+          case schemaUtils.MembershipValidationErrorType.VARIABLE_INVALID:
+            return {
+              code: "VARIABLE_INVALID",
+              role: it.role,
+              variable: it.variable
+            };
+        }
+      })
+    },
+    ...legacyErrors
+  ];
+};
+exports.createMembershipValidationErrorResult = createMembershipValidationErrorResult;
+//# sourceMappingURL=membershipUtils.cjs.map

package/dist/development/src/resolvers/membershipUtils.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"membershipUtils.cjs","sources":["../../../../../packages/engine-tenant-api/src/resolvers/membershipUtils.ts"],"sourcesContent":["import { MembershipValidationError, MembershipValidationErrorType } from '../model/service/MembershipValidator'\nimport { MembershipValidationError as MembershipValidationErrorSchema, MembershipValidationErrorCode } from '../schema'\n\nexport type MembershipErrorCode =\n\t| 'INVALID_MEMBERSHIP'\n\t| 'ROLE_NOT_FOUND'\n\t| 'VARIABLE_EMPTY'\n\t| 'VARIABLE_NOT_FOUND'\n\nexport interface MembershipErrorVariable {\n\tcode: MembershipErrorCode\n\tmembershipValidation?: MembershipValidationErrorSchema[]\n\tendUserMessage?: string\n\tdeveloperMessage: string\n}\n\nexport const createMembershipValidationErrorResult = (\n\tresult: MembershipValidationError[],\n): MembershipErrorVariable[] => {\n\tconst formatDeveloperError = (it: MembershipValidationError) => {\n\t\tswitch (it.error) {\n\t\t\tcase MembershipValidationErrorType.ROLE_NOT_FOUND:\n\t\t\t\treturn `Role ${it.role} is not defined in a schema`\n\t\t\tcase MembershipValidationErrorType.VARIABLE_EMPTY:\n\t\t\t\treturn `Variable ${it.variable} of role ${it.role} is empty`\n\t\t\tcase MembershipValidationErrorType.VARIABLE_NOT_FOUND:\n\t\t\t\treturn `Variable ${it.variable} of role ${it.role} is not defined in a schema`\n\t\t\tcase MembershipValidationErrorType.VARIABLE_INVALID:\n\t\t\t\treturn `Variable ${it.variable} of role ${it.role} contains invalid value`\n\t\t}\n\t}\n\n\tconst legacyErrors = result.map((it): MembershipErrorVariable | undefined => {\n\t\tswitch (it.error) {\n\t\t\tcase MembershipValidationErrorType.ROLE_NOT_FOUND:\n\t\t\t\treturn {\n\t\t\t\t\tcode: 'ROLE_NOT_FOUND',\n\t\t\t\t\tendUserMessage: 'Given role not found',\n\t\t\t\t\tdeveloperMessage: formatDeveloperError(it),\n\t\t\t\t}\n\t\t\tcase MembershipValidationErrorType.VARIABLE_EMPTY:\n\t\t\t\treturn {\n\t\t\t\t\tcode: 'VARIABLE_EMPTY',\n\t\t\t\t\tendUserMessage: 'Required variable is empty',\n\t\t\t\t\tdeveloperMessage: formatDeveloperError(it),\n\t\t\t\t}\n\t\t\tcase MembershipValidationErrorType.VARIABLE_NOT_FOUND:\n\t\t\t\treturn {\n\t\t\t\t\tcode: 'VARIABLE_NOT_FOUND',\n\t\t\t\t\tendUserMessage: 'Provided variable does not exist',\n\t\t\t\t\tdeveloperMessage: formatDeveloperError(it),\n\t\t\t\t}\n\t\t}\n\t}).filter((it): it is MembershipErrorVariable => it !== undefined)\n\n\treturn [\n\t\t{\n\t\t\tcode: 'INVALID_MEMBERSHIP',\n\t\t\tdeveloperMessage: 'Provided membership is invalid: '\n\t\t\t\t+ result.map(it => formatDeveloperError(it)).join('. ')\n\t\t\t\t+ '. You can also check membershipValidation field for structured details.',\n\t\t\tmembershipValidation: result.map((it): MembershipValidationErrorSchema => {\n\t\t\t\tswitch (it.error) {\n\t\t\t\t\tcase MembershipValidationErrorType.ROLE_NOT_FOUND:\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tcode: 'ROLE_NOT_FOUND',\n\t\t\t\t\t\t\trole: it.role,\n\t\t\t\t\t\t}\n\t\t\t\t\tcase MembershipValidationErrorType.VARIABLE_EMPTY:\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tcode: 'VARIABLE_EMPTY',\n\t\t\t\t\t\t\trole: it.role,\n\t\t\t\t\t\t\tvariable: it.variable,\n\t\t\t\t\t\t}\n\t\t\t\t\tcase MembershipValidationErrorType.VARIABLE_NOT_FOUND:\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tcode: 'VARIABLE_NOT_FOUND',\n\t\t\t\t\t\t\trole: it.role,\n\t\t\t\t\t\t\tvariable: it.variable,\n\t\t\t\t\t\t}\n\t\t\t\t\tcase MembershipValidationErrorType.VARIABLE_INVALID:\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tcode: 'VARIABLE_INVALID',\n\t\t\t\t\t\t\trole: it.role,\n\t\t\t\t\t\t\tvariable: it.variable,\n\t\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}),\n\t\t},\n\t\t...legacyErrors,\n\t]\n}\n"],"names":["MembershipValidationErrorType"],"mappings":";;;AAgBO,MAAM,wCAAwC,CACpD,WAC+B;AAC/B,QAAM,uBAAuB,CAAC,OAAkC;AAC/D,YAAQ,GAAG,OAAA;AAAA,MACV,KAAKA,YAAAA,8BAA8B;AAClC,eAAO,QAAQ,GAAG,IAAI;AAAA,MACvB,KAAKA,YAAAA,8BAA8B;AAClC,eAAO,YAAY,GAAG,QAAQ,YAAY,GAAG,IAAI;AAAA,MAClD,KAAKA,YAAAA,8BAA8B;AAClC,eAAO,YAAY,GAAG,QAAQ,YAAY,GAAG,IAAI;AAAA,MAClD,KAAKA,YAAAA,8BAA8B;AAClC,eAAO,YAAY,GAAG,QAAQ,YAAY,GAAG,IAAI;AAAA,IAAA;AAAA,EAEpD;AAEA,QAAM,eAAe,OAAO,IAAI,CAAC,OAA4C;AAC5E,YAAQ,GAAG,OAAA;AAAA,MACV,KAAKA,YAAAA,8BAA8B;AAClC,eAAO;AAAA,UACN,MAAM;AAAA,UACN,gBAAgB;AAAA,UAChB,kBAAkB,qBAAqB,EAAE;AAAA,QAAA;AAAA,MAE3C,KAAKA,YAAAA,8BAA8B;AAClC,eAAO;AAAA,UACN,MAAM;AAAA,UACN,gBAAgB;AAAA,UAChB,kBAAkB,qBAAqB,EAAE;AAAA,QAAA;AAAA,MAE3C,KAAKA,YAAAA,8BAA8B;AAClC,eAAO;AAAA,UACN,MAAM;AAAA,UACN,gBAAgB;AAAA,UAChB,kBAAkB,qBAAqB,EAAE;AAAA,QAAA;AAAA,IAC1C;AAAA,EAEH,CAAC,EAAE,OAAO,CAAC,OAAsC,OAAO,MAAS;AAEjE,SAAO;AAAA,IACN;AAAA,MACC,MAAM;AAAA,MACN,kBAAkB,qCACf,OAAO,IAAI,CAAA,OAAM,qBAAqB,EAAE,CAAC,EAAE,KAAK,IAAI,IACpD;AAAA,MACH,sBAAsB,OAAO,IAAI,CAAC,OAAwC;AACzE,gBAAQ,GAAG,OAAA;AAAA,UACV,KAAKA,YAAAA,8BAA8B;AAClC,mBAAO;AAAA,cACN,MAAM;AAAA,cACN,MAAM,GAAG;AAAA,YAAA;AAAA,UAEX,KAAKA,YAAAA,8BAA8B;AAClC,mBAAO;AAAA,cACN,MAAM;AAAA,cACN,MAAM,GAAG;AAAA,cACT,UAAU,GAAG;AAAA,YAAA;AAAA,UAEf,KAAKA,YAAAA,8BAA8B;AAClC,mBAAO;AAAA,cACN,MAAM;AAAA,cACN,MAAM,GAAG;AAAA,cACT,UAAU,GAAG;AAAA,YAAA;AAAA,UAEf,KAAKA,YAAAA,8BAA8B;AAClC,mBAAO;AAAA,cACN,MAAM;AAAA,cACN,MAAM,GAAG;AAAA,cACT,UAAU,GAAG;AAAA,YAAA;AAAA,QACd;AAAA,MAEH,CAAC;AAAA,IAAA;AAAA,IAEF,GAAG;AAAA,EAAA;AAEL;;"}

package/dist/development/src/resolvers/membershipUtils.js

@@ -0,0 +1,75 @@
+import { MembershipValidationErrorType } from "@contember/schema-utils";
+const createMembershipValidationErrorResult = (result) => {
+  const formatDeveloperError = (it) => {
+    switch (it.error) {
+      case MembershipValidationErrorType.ROLE_NOT_FOUND:
+        return `Role ${it.role} is not defined in a schema`;
+      case MembershipValidationErrorType.VARIABLE_EMPTY:
+        return `Variable ${it.variable} of role ${it.role} is empty`;
+      case MembershipValidationErrorType.VARIABLE_NOT_FOUND:
+        return `Variable ${it.variable} of role ${it.role} is not defined in a schema`;
+      case MembershipValidationErrorType.VARIABLE_INVALID:
+        return `Variable ${it.variable} of role ${it.role} contains invalid value`;
+    }
+  };
+  const legacyErrors = result.map((it) => {
+    switch (it.error) {
+      case MembershipValidationErrorType.ROLE_NOT_FOUND:
+        return {
+          code: "ROLE_NOT_FOUND",
+          endUserMessage: "Given role not found",
+          developerMessage: formatDeveloperError(it)
+        };
+      case MembershipValidationErrorType.VARIABLE_EMPTY:
+        return {
+          code: "VARIABLE_EMPTY",
+          endUserMessage: "Required variable is empty",
+          developerMessage: formatDeveloperError(it)
+        };
+      case MembershipValidationErrorType.VARIABLE_NOT_FOUND:
+        return {
+          code: "VARIABLE_NOT_FOUND",
+          endUserMessage: "Provided variable does not exist",
+          developerMessage: formatDeveloperError(it)
+        };
+    }
+  }).filter((it) => it !== void 0);
+  return [
+    {
+      code: "INVALID_MEMBERSHIP",
+      developerMessage: "Provided membership is invalid: " + result.map((it) => formatDeveloperError(it)).join(". ") + ". You can also check membershipValidation field for structured details.",
+      membershipValidation: result.map((it) => {
+        switch (it.error) {
+          case MembershipValidationErrorType.ROLE_NOT_FOUND:
+            return {
+              code: "ROLE_NOT_FOUND",
+              role: it.role
+            };
+          case MembershipValidationErrorType.VARIABLE_EMPTY:
+            return {
+              code: "VARIABLE_EMPTY",
+              role: it.role,
+              variable: it.variable
+            };
+          case MembershipValidationErrorType.VARIABLE_NOT_FOUND:
+            return {
+              code: "VARIABLE_NOT_FOUND",
+              role: it.role,
+              variable: it.variable
+            };
+          case MembershipValidationErrorType.VARIABLE_INVALID:
+            return {
+              code: "VARIABLE_INVALID",
+              role: it.role,
+              variable: it.variable
+            };
+        }
+      })
+    },
+    ...legacyErrors
+  ];
+};
+export {
+  createMembershipValidationErrorResult
+};
+//# sourceMappingURL=membershipUtils.js.map

package/dist/development/src/resolvers/membershipUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"membershipUtils.js","sources":["../../../../../packages/engine-tenant-api/src/resolvers/membershipUtils.ts"],"sourcesContent":["import { MembershipValidationError, MembershipValidationErrorType } from '../model/service/MembershipValidator'\nimport { MembershipValidationError as MembershipValidationErrorSchema, MembershipValidationErrorCode } from '../schema'\n\nexport type MembershipErrorCode =\n\t| 'INVALID_MEMBERSHIP'\n\t| 'ROLE_NOT_FOUND'\n\t| 'VARIABLE_EMPTY'\n\t| 'VARIABLE_NOT_FOUND'\n\nexport interface MembershipErrorVariable {\n\tcode: MembershipErrorCode\n\tmembershipValidation?: MembershipValidationErrorSchema[]\n\tendUserMessage?: string\n\tdeveloperMessage: string\n}\n\nexport const createMembershipValidationErrorResult = (\n\tresult: MembershipValidationError[],\n): MembershipErrorVariable[] => {\n\tconst formatDeveloperError = (it: MembershipValidationError) => {\n\t\tswitch (it.error) {\n\t\t\tcase MembershipValidationErrorType.ROLE_NOT_FOUND:\n\t\t\t\treturn `Role ${it.role} is not defined in a schema`\n\t\t\tcase MembershipValidationErrorType.VARIABLE_EMPTY:\n\t\t\t\treturn `Variable ${it.variable} of role ${it.role} is empty`\n\t\t\tcase MembershipValidationErrorType.VARIABLE_NOT_FOUND:\n\t\t\t\treturn `Variable ${it.variable} of role ${it.role} is not defined in a schema`\n\t\t\tcase MembershipValidationErrorType.VARIABLE_INVALID:\n\t\t\t\treturn `Variable ${it.variable} of role ${it.role} contains invalid value`\n\t\t}\n\t}\n\n\tconst legacyErrors = result.map((it): MembershipErrorVariable | undefined => {\n\t\tswitch (it.error) {\n\t\t\tcase MembershipValidationErrorType.ROLE_NOT_FOUND:\n\t\t\t\treturn {\n\t\t\t\t\tcode: 'ROLE_NOT_FOUND',\n\t\t\t\t\tendUserMessage: 'Given role not found',\n\t\t\t\t\tdeveloperMessage: formatDeveloperError(it),\n\t\t\t\t}\n\t\t\tcase MembershipValidationErrorType.VARIABLE_EMPTY:\n\t\t\t\treturn {\n\t\t\t\t\tcode: 'VARIABLE_EMPTY',\n\t\t\t\t\tendUserMessage: 'Required variable is empty',\n\t\t\t\t\tdeveloperMessage: formatDeveloperError(it),\n\t\t\t\t}\n\t\t\tcase MembershipValidationErrorType.VARIABLE_NOT_FOUND:\n\t\t\t\treturn {\n\t\t\t\t\tcode: 'VARIABLE_NOT_FOUND',\n\t\t\t\t\tendUserMessage: 'Provided variable does not exist',\n\t\t\t\t\tdeveloperMessage: formatDeveloperError(it),\n\t\t\t\t}\n\t\t}\n\t}).filter((it): it is MembershipErrorVariable => it !== undefined)\n\n\treturn [\n\t\t{\n\t\t\tcode: 'INVALID_MEMBERSHIP',\n\t\t\tdeveloperMessage: 'Provided membership is invalid: '\n\t\t\t\t+ result.map(it => formatDeveloperError(it)).join('. ')\n\t\t\t\t+ '. You can also check membershipValidation field for structured details.',\n\t\t\tmembershipValidation: result.map((it): MembershipValidationErrorSchema => {\n\t\t\t\tswitch (it.error) {\n\t\t\t\t\tcase MembershipValidationErrorType.ROLE_NOT_FOUND:\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tcode: 'ROLE_NOT_FOUND',\n\t\t\t\t\t\t\trole: it.role,\n\t\t\t\t\t\t}\n\t\t\t\t\tcase MembershipValidationErrorType.VARIABLE_EMPTY:\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tcode: 'VARIABLE_EMPTY',\n\t\t\t\t\t\t\trole: it.role,\n\t\t\t\t\t\t\tvariable: it.variable,\n\t\t\t\t\t\t}\n\t\t\t\t\tcase MembershipValidationErrorType.VARIABLE_NOT_FOUND:\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tcode: 'VARIABLE_NOT_FOUND',\n\t\t\t\t\t\t\trole: it.role,\n\t\t\t\t\t\t\tvariable: it.variable,\n\t\t\t\t\t\t}\n\t\t\t\t\tcase MembershipValidationErrorType.VARIABLE_INVALID:\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tcode: 'VARIABLE_INVALID',\n\t\t\t\t\t\t\trole: it.role,\n\t\t\t\t\t\t\tvariable: it.variable,\n\t\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}),\n\t\t},\n\t\t...legacyErrors,\n\t]\n}\n"],"names":[],"mappings":";AAgBO,MAAM,wCAAwC,CACpD,WAC+B;AAC/B,QAAM,uBAAuB,CAAC,OAAkC;AAC/D,YAAQ,GAAG,OAAA;AAAA,MACV,KAAK,8BAA8B;AAClC,eAAO,QAAQ,GAAG,IAAI;AAAA,MACvB,KAAK,8BAA8B;AAClC,eAAO,YAAY,GAAG,QAAQ,YAAY,GAAG,IAAI;AAAA,MAClD,KAAK,8BAA8B;AAClC,eAAO,YAAY,GAAG,QAAQ,YAAY,GAAG,IAAI;AAAA,MAClD,KAAK,8BAA8B;AAClC,eAAO,YAAY,GAAG,QAAQ,YAAY,GAAG,IAAI;AAAA,IAAA;AAAA,EAEpD;AAEA,QAAM,eAAe,OAAO,IAAI,CAAC,OAA4C;AAC5E,YAAQ,GAAG,OAAA;AAAA,MACV,KAAK,8BAA8B;AAClC,eAAO;AAAA,UACN,MAAM;AAAA,UACN,gBAAgB;AAAA,UAChB,kBAAkB,qBAAqB,EAAE;AAAA,QAAA;AAAA,MAE3C,KAAK,8BAA8B;AAClC,eAAO;AAAA,UACN,MAAM;AAAA,UACN,gBAAgB;AAAA,UAChB,kBAAkB,qBAAqB,EAAE;AAAA,QAAA;AAAA,MAE3C,KAAK,8BAA8B;AAClC,eAAO;AAAA,UACN,MAAM;AAAA,UACN,gBAAgB;AAAA,UAChB,kBAAkB,qBAAqB,EAAE;AAAA,QAAA;AAAA,IAC1C;AAAA,EAEH,CAAC,EAAE,OAAO,CAAC,OAAsC,OAAO,MAAS;AAEjE,SAAO;AAAA,IACN;AAAA,MACC,MAAM;AAAA,MACN,kBAAkB,qCACf,OAAO,IAAI,CAAA,OAAM,qBAAqB,EAAE,CAAC,EAAE,KAAK,IAAI,IACpD;AAAA,MACH,sBAAsB,OAAO,IAAI,CAAC,OAAwC;AACzE,gBAAQ,GAAG,OAAA;AAAA,UACV,KAAK,8BAA8B;AAClC,mBAAO;AAAA,cACN,MAAM;AAAA,cACN,MAAM,GAAG;AAAA,YAAA;AAAA,UAEX,KAAK,8BAA8B;AAClC,mBAAO;AAAA,cACN,MAAM;AAAA,cACN,MAAM,GAAG;AAAA,cACT,UAAU,GAAG;AAAA,YAAA;AAAA,UAEf,KAAK,8BAA8B;AAClC,mBAAO;AAAA,cACN,MAAM;AAAA,cACN,MAAM,GAAG;AAAA,cACT,UAAU,GAAG;AAAA,YAAA;AAAA,UAEf,KAAK,8BAA8B;AAClC,mBAAO;AAAA,cACN,MAAM;AAAA,cACN,MAAM,GAAG;AAAA,cACT,UAAU,GAAG;AAAA,YAAA;AAAA,QACd;AAAA,MAEH,CAAC;AAAA,IAAA;AAAA,IAEF,GAAG;AAAA,EAAA;AAEL;"}

package/dist/development/src/resolvers/mutation/apiKey/CreateApiKeyMutationResolver.cjs

@@ -0,0 +1,81 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const PermissionActions = require("../../../model/authorization/PermissionActions.cjs");
+require("@contember/authorization");
+require("../../../model/authorization/PermissionContext.cjs");
+require("../../../model/authorization/PermissionsFactory.cjs");
+require("@contember/schema");
+require("../../../model/type/ApiKey.cjs");
+require("@contember/database");
+const token = require("../../../model/utils/token.cjs");
+require("../../../model/queries/apiKey/ApiKeyQuery.cjs");
+require("node:assert");
+require("../../../model/service/idp/providers/AppleProvider.cjs");
+require("openid-client");
+require("@contember/typesafe");
+require("../../../model/service/idp/providers/OIDCTypes.cjs");
+require("../../../model/service/idp/providers/FacebookProvider.cjs");
+require("../../../model/service/AuthLogService.cjs");
+require("@contember/schema-utils");
+require("otpauth");
+const membershipUtils = require("../../membershipUtils.cjs");
+const errorUtils = require("../../errorUtils.cjs");
+const graphqlUtils = require("@contember/graphql-utils");
+class CreateApiKeyMutationResolver {
+  constructor(apiKeyManager, projectManager, membershipValidator) {
+    this.apiKeyManager = apiKeyManager;
+    this.projectManager = projectManager;
+    this.membershipValidator = membershipValidator;
+  }
+  async createApiKey(parent, { projectSlug, memberships, description, tokenHash }, context, info) {
+    const project = await this.projectManager.getProjectBySlug(context.db, projectSlug);
+    await context.requireAccess({
+      scope: await context.permissionContext.createProjectScope(project),
+      action: PermissionActions.PermissionActions.API_KEY_CREATE,
+      message: "You are not allowed to create an API key for this project"
+    });
+    if (!project) {
+      return errorUtils.createProjectNotFoundResponse("PROJECT_NOT_FOUND", projectSlug);
+    }
+    if (typeof tokenHash === "string" && !token.isTokenHash(tokenHash)) {
+      throw new graphqlUtils.UserInputError("Invalid format of tokenHash. Must be hex-encoded sha256.");
+    }
+    const validationResult = await this.membershipValidator.validate(project.slug, memberships);
+    if (validationResult.length > 0) {
+      const errors = membershipUtils.createMembershipValidationErrorResult(validationResult);
+      return {
+        ok: false,
+        errors,
+        error: errors[0]
+      };
+    }
+    const result = await this.apiKeyManager.createProjectPermanentApiKey(context.db, project.id, memberships, description, tokenHash ?? void 0);
+    return {
+      ok: true,
+      errors: [],
+      result: {
+        apiKey: result.result.toApiKeyWithToken()
+      }
+    };
+  }
+  async createGlobalApiKey(parent, { roles, description, tokenHash }, context, info) {
+    roles ?? (roles = []);
+    await context.requireAccess({
+      action: PermissionActions.PermissionActions.API_KEY_CREATE_GLOBAL(roles),
+      message: "You are not allowed to create a global API key"
+    });
+    if (typeof tokenHash === "string" && !token.isTokenHash(tokenHash)) {
+      throw new graphqlUtils.UserInputError("Invalid format of tokenHash. Must be hex-encoded sha256.");
+    }
+    const result = await this.apiKeyManager.createGlobalPermanentApiKey(context.db, description, roles, tokenHash ?? void 0);
+    return {
+      ok: true,
+      errors: [],
+      result: {
+        apiKey: result.result.toApiKeyWithToken()
+      }
+    };
+  }
+}
+exports.CreateApiKeyMutationResolver = CreateApiKeyMutationResolver;
+//# sourceMappingURL=CreateApiKeyMutationResolver.cjs.map

package/dist/development/src/resolvers/mutation/apiKey/CreateApiKeyMutationResolver.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateApiKeyMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/apiKey/CreateApiKeyMutationResolver.ts"],"sourcesContent":["import {\n\tCreateApiKeyErrorCode,\n\tCreateApiKeyResponse,\n\tMutationCreateApiKeyArgs,\n\tMutationCreateGlobalApiKeyArgs,\n\tMutationResolvers,\n} from '../../../schema'\nimport { GraphQLResolveInfo } from 'graphql'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { ApiKeyManager, isTokenHash, MembershipValidator, PermissionActions, ProjectManager } from '../../../model'\nimport { createMembershipValidationErrorResult } from '../../membershipUtils'\nimport { createProjectNotFoundResponse } from '../../errorUtils'\nimport { UserInputError } from '@contember/graphql-utils'\n\nexport class CreateApiKeyMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly apiKeyManager: ApiKeyManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly membershipValidator: MembershipValidator,\n\t) {}\n\n\tasync createApiKey(\n\t\tparent: any,\n\t\t{ projectSlug, memberships, description, tokenHash }: MutationCreateApiKeyArgs,\n\t\tcontext: TenantResolverContext,\n\t\tinfo: GraphQLResolveInfo,\n\t): Promise<CreateApiKeyResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tawait context.requireAccess({\n\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\taction: PermissionActions.API_KEY_CREATE,\n\t\t\tmessage: 'You are not allowed to create an API key for this project',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tif (typeof tokenHash === 'string' && !isTokenHash(tokenHash)) {\n\t\t\tthrow new UserInputError('Invalid format of tokenHash. Must be hex-encoded sha256.')\n\t\t}\n\t\tconst validationResult = await this.membershipValidator.validate(project.slug, memberships)\n\t\tif (validationResult.length > 0) {\n\t\t\tconst errors = createMembershipValidationErrorResult(validationResult)\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terrors: errors,\n\t\t\t\terror: errors[0],\n\t\t\t}\n\t\t}\n\n\t\tconst result = await this.apiKeyManager.createProjectPermanentApiKey(context.db, project.id, memberships, description, tokenHash ?? undefined)\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t\tresult: {\n\t\t\t\tapiKey: result.result.toApiKeyWithToken(),\n\t\t\t},\n\t\t}\n\t}\n\n\tasync createGlobalApiKey(\n\t\tparent: any,\n\t\t{ roles, description, tokenHash }: MutationCreateGlobalApiKeyArgs,\n\t\tcontext: TenantResolverContext,\n\t\tinfo: GraphQLResolveInfo,\n\t): Promise<CreateApiKeyResponse> {\n\t\troles ??= []\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.API_KEY_CREATE_GLOBAL(roles),\n\t\t\tmessage: 'You are not allowed to create a global API key',\n\t\t})\n\t\tif (typeof tokenHash === 'string' && !isTokenHash(tokenHash)) {\n\t\t\tthrow new UserInputError('Invalid format of tokenHash. Must be hex-encoded sha256.')\n\t\t}\n\t\tconst result = await this.apiKeyManager.createGlobalPermanentApiKey(context.db, description, roles, tokenHash ?? undefined)\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t\tresult: {\n\t\t\t\tapiKey: result.result.toApiKeyWithToken(),\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":["PermissionActions","createProjectNotFoundResponse","isTokenHash","UserInputError","createMembershipValidationErrorResult"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAcO,MAAM,6BAA0D;AAAA,EACtE,YACkB,eACA,gBACA,qBAChB;AAHgB,SAAA,gBAAA;AACA,SAAA,iBAAA;AACA,SAAA,sBAAA;AAAA,EACf;AAAA,EAEH,MAAM,aACL,QACA,EAAE,aAAa,aAAa,aAAa,UAAA,GACzC,SACA,MACgC;AAChC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQA,kBAAAA,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACb,aAAOC,WAAAA,8BAA8B,qBAAqB,WAAW;AAAA,IACtE;AACA,QAAI,OAAO,cAAc,YAAY,CAACC,MAAAA,YAAY,SAAS,GAAG;AAC7D,YAAM,IAAIC,aAAAA,eAAe,0DAA0D;AAAA,IACpF;AACA,UAAM,mBAAmB,MAAM,KAAK,oBAAoB,SAAS,QAAQ,MAAM,WAAW;AAC1F,QAAI,iBAAiB,SAAS,GAAG;AAChC,YAAM,SAASC,gBAAAA,sCAAsC,gBAAgB;AACrE,aAAO;AAAA,QACN,IAAI;AAAA,QACJ;AAAA,QACA,OAAO,OAAO,CAAC;AAAA,MAAA;AAAA,IAEjB;AAEA,UAAM,SAAS,MAAM,KAAK,cAAc,6BAA6B,QAAQ,IAAI,QAAQ,IAAI,aAAa,aAAa,aAAa,MAAS;AAE7I,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,MACR,QAAQ;AAAA,QACP,QAAQ,OAAO,OAAO,kBAAA;AAAA,MAAkB;AAAA,IACzC;AAAA,EAEF;AAAA,EAEA,MAAM,mBACL,QACA,EAAE,OAAO,aAAa,UAAA,GACtB,SACA,MACgC;AAChC,cAAA,QAAU;AACV,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQJ,kBAAAA,kBAAkB,sBAAsB,KAAK;AAAA,MACrD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,OAAO,cAAc,YAAY,CAACE,MAAAA,YAAY,SAAS,GAAG;AAC7D,YAAM,IAAIC,aAAAA,eAAe,0DAA0D;AAAA,IACpF;AACA,UAAM,SAAS,MAAM,KAAK,cAAc,4BAA4B,QAAQ,IAAI,aAAa,OAAO,aAAa,MAAS;AAC1H,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,MACR,QAAQ;AAAA,QACP,QAAQ,OAAO,OAAO,kBAAA;AAAA,MAAkB;AAAA,IACzC;AAAA,EAEF;AACD;;"}

package/dist/development/src/resolvers/mutation/apiKey/CreateApiKeyMutationResolver.js

@@ -0,0 +1,81 @@
+import { PermissionActions } from "../../../model/authorization/PermissionActions.js";
+import "@contember/authorization";
+import "../../../model/authorization/PermissionContext.js";
+import "../../../model/authorization/PermissionsFactory.js";
+import "@contember/schema";
+import "../../../model/type/ApiKey.js";
+import "@contember/database";
+import { isTokenHash } from "../../../model/utils/token.js";
+import "../../../model/queries/apiKey/ApiKeyQuery.js";
+import "node:assert";
+import "../../../model/service/idp/providers/AppleProvider.js";
+import "openid-client";
+import "@contember/typesafe";
+import "../../../model/service/idp/providers/OIDCTypes.js";
+import "../../../model/service/idp/providers/FacebookProvider.js";
+import "../../../model/service/AuthLogService.js";
+import "@contember/schema-utils";
+import "otpauth";
+import { createMembershipValidationErrorResult } from "../../membershipUtils.js";
+import { createProjectNotFoundResponse } from "../../errorUtils.js";
+import { UserInputError } from "@contember/graphql-utils";
+class CreateApiKeyMutationResolver {
+  constructor(apiKeyManager, projectManager, membershipValidator) {
+    this.apiKeyManager = apiKeyManager;
+    this.projectManager = projectManager;
+    this.membershipValidator = membershipValidator;
+  }
+  async createApiKey(parent, { projectSlug, memberships, description, tokenHash }, context, info) {
+    const project = await this.projectManager.getProjectBySlug(context.db, projectSlug);
+    await context.requireAccess({
+      scope: await context.permissionContext.createProjectScope(project),
+      action: PermissionActions.API_KEY_CREATE,
+      message: "You are not allowed to create an API key for this project"
+    });
+    if (!project) {
+      return createProjectNotFoundResponse("PROJECT_NOT_FOUND", projectSlug);
+    }
+    if (typeof tokenHash === "string" && !isTokenHash(tokenHash)) {
+      throw new UserInputError("Invalid format of tokenHash. Must be hex-encoded sha256.");
+    }
+    const validationResult = await this.membershipValidator.validate(project.slug, memberships);
+    if (validationResult.length > 0) {
+      const errors = createMembershipValidationErrorResult(validationResult);
+      return {
+        ok: false,
+        errors,
+        error: errors[0]
+      };
+    }
+    const result = await this.apiKeyManager.createProjectPermanentApiKey(context.db, project.id, memberships, description, tokenHash ?? void 0);
+    return {
+      ok: true,
+      errors: [],
+      result: {
+        apiKey: result.result.toApiKeyWithToken()
+      }
+    };
+  }
+  async createGlobalApiKey(parent, { roles, description, tokenHash }, context, info) {
+    roles ?? (roles = []);
+    await context.requireAccess({
+      action: PermissionActions.API_KEY_CREATE_GLOBAL(roles),
+      message: "You are not allowed to create a global API key"
+    });
+    if (typeof tokenHash === "string" && !isTokenHash(tokenHash)) {
+      throw new UserInputError("Invalid format of tokenHash. Must be hex-encoded sha256.");
+    }
+    const result = await this.apiKeyManager.createGlobalPermanentApiKey(context.db, description, roles, tokenHash ?? void 0);
+    return {
+      ok: true,
+      errors: [],
+      result: {
+        apiKey: result.result.toApiKeyWithToken()
+      }
+    };
+  }
+}
+export {
+  CreateApiKeyMutationResolver
+};
+//# sourceMappingURL=CreateApiKeyMutationResolver.js.map

package/dist/development/src/resolvers/mutation/apiKey/CreateApiKeyMutationResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateApiKeyMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/apiKey/CreateApiKeyMutationResolver.ts"],"sourcesContent":["import {\n\tCreateApiKeyErrorCode,\n\tCreateApiKeyResponse,\n\tMutationCreateApiKeyArgs,\n\tMutationCreateGlobalApiKeyArgs,\n\tMutationResolvers,\n} from '../../../schema'\nimport { GraphQLResolveInfo } from 'graphql'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { ApiKeyManager, isTokenHash, MembershipValidator, PermissionActions, ProjectManager } from '../../../model'\nimport { createMembershipValidationErrorResult } from '../../membershipUtils'\nimport { createProjectNotFoundResponse } from '../../errorUtils'\nimport { UserInputError } from '@contember/graphql-utils'\n\nexport class CreateApiKeyMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly apiKeyManager: ApiKeyManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly membershipValidator: MembershipValidator,\n\t) {}\n\n\tasync createApiKey(\n\t\tparent: any,\n\t\t{ projectSlug, memberships, description, tokenHash }: MutationCreateApiKeyArgs,\n\t\tcontext: TenantResolverContext,\n\t\tinfo: GraphQLResolveInfo,\n\t): Promise<CreateApiKeyResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tawait context.requireAccess({\n\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\taction: PermissionActions.API_KEY_CREATE,\n\t\t\tmessage: 'You are not allowed to create an API key for this project',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tif (typeof tokenHash === 'string' && !isTokenHash(tokenHash)) {\n\t\t\tthrow new UserInputError('Invalid format of tokenHash. Must be hex-encoded sha256.')\n\t\t}\n\t\tconst validationResult = await this.membershipValidator.validate(project.slug, memberships)\n\t\tif (validationResult.length > 0) {\n\t\t\tconst errors = createMembershipValidationErrorResult(validationResult)\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terrors: errors,\n\t\t\t\terror: errors[0],\n\t\t\t}\n\t\t}\n\n\t\tconst result = await this.apiKeyManager.createProjectPermanentApiKey(context.db, project.id, memberships, description, tokenHash ?? undefined)\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t\tresult: {\n\t\t\t\tapiKey: result.result.toApiKeyWithToken(),\n\t\t\t},\n\t\t}\n\t}\n\n\tasync createGlobalApiKey(\n\t\tparent: any,\n\t\t{ roles, description, tokenHash }: MutationCreateGlobalApiKeyArgs,\n\t\tcontext: TenantResolverContext,\n\t\tinfo: GraphQLResolveInfo,\n\t): Promise<CreateApiKeyResponse> {\n\t\troles ??= []\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.API_KEY_CREATE_GLOBAL(roles),\n\t\t\tmessage: 'You are not allowed to create a global API key',\n\t\t})\n\t\tif (typeof tokenHash === 'string' && !isTokenHash(tokenHash)) {\n\t\t\tthrow new UserInputError('Invalid format of tokenHash. Must be hex-encoded sha256.')\n\t\t}\n\t\tconst result = await this.apiKeyManager.createGlobalPermanentApiKey(context.db, description, roles, tokenHash ?? undefined)\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t\tresult: {\n\t\t\t\tapiKey: result.result.toApiKeyWithToken(),\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;AAcO,MAAM,6BAA0D;AAAA,EACtE,YACkB,eACA,gBACA,qBAChB;AAHgB,SAAA,gBAAA;AACA,SAAA,iBAAA;AACA,SAAA,sBAAA;AAAA,EACf;AAAA,EAEH,MAAM,aACL,QACA,EAAE,aAAa,aAAa,aAAa,UAAA,GACzC,SACA,MACgC;AAChC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACb,aAAO,8BAA8B,qBAAqB,WAAW;AAAA,IACtE;AACA,QAAI,OAAO,cAAc,YAAY,CAAC,YAAY,SAAS,GAAG;AAC7D,YAAM,IAAI,eAAe,0DAA0D;AAAA,IACpF;AACA,UAAM,mBAAmB,MAAM,KAAK,oBAAoB,SAAS,QAAQ,MAAM,WAAW;AAC1F,QAAI,iBAAiB,SAAS,GAAG;AAChC,YAAM,SAAS,sCAAsC,gBAAgB;AACrE,aAAO;AAAA,QACN,IAAI;AAAA,QACJ;AAAA,QACA,OAAO,OAAO,CAAC;AAAA,MAAA;AAAA,IAEjB;AAEA,UAAM,SAAS,MAAM,KAAK,cAAc,6BAA6B,QAAQ,IAAI,QAAQ,IAAI,aAAa,aAAa,aAAa,MAAS;AAE7I,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,MACR,QAAQ;AAAA,QACP,QAAQ,OAAO,OAAO,kBAAA;AAAA,MAAkB;AAAA,IACzC;AAAA,EAEF;AAAA,EAEA,MAAM,mBACL,QACA,EAAE,OAAO,aAAa,UAAA,GACtB,SACA,MACgC;AAChC,cAAA,QAAU;AACV,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB,sBAAsB,KAAK;AAAA,MACrD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,OAAO,cAAc,YAAY,CAAC,YAAY,SAAS,GAAG;AAC7D,YAAM,IAAI,eAAe,0DAA0D;AAAA,IACpF;AACA,UAAM,SAAS,MAAM,KAAK,cAAc,4BAA4B,QAAQ,IAAI,aAAa,OAAO,aAAa,MAAS;AAC1H,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,MACR,QAAQ;AAAA,QACP,QAAQ,OAAO,OAAO,kBAAA;AAAA,MAAkB;AAAA,IACzC;AAAA,EAEF;AACD;"}

package/dist/development/src/resolvers/mutation/apiKey/DisableApiKeyMutationResolver.cjs

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const PermissionActions = require("../../../model/authorization/PermissionActions.cjs");
+require("@contember/authorization");
+require("../../../model/authorization/PermissionContext.cjs");
+require("../../../model/authorization/PermissionsFactory.cjs");
+require("@contember/schema");
+require("../../../model/type/ApiKey.cjs");
+require("@contember/database");
+require("node:crypto");
+require("../../../model/queries/apiKey/ApiKeyQuery.cjs");
+require("node:assert");
+require("../../../model/service/idp/providers/AppleProvider.cjs");
+require("openid-client");
+require("@contember/typesafe");
+require("../../../model/service/idp/providers/OIDCTypes.cjs");
+require("../../../model/service/idp/providers/FacebookProvider.cjs");
+require("../../../model/service/AuthLogService.cjs");
+require("@contember/schema-utils");
+require("otpauth");
+const errorUtils = require("../../errorUtils.cjs");
+class DisableApiKeyMutationResolver {
+  constructor(apiKeyManager) {
+    this.apiKeyManager = apiKeyManager;
+  }
+  async disableApiKey(parent, { id }, context, info) {
+    await context.requireAccess({
+      action: PermissionActions.PermissionActions.API_KEY_DISABLE,
+      message: "You are not allowed to disable api key"
+    });
+    const result = await this.apiKeyManager.disableApiKey(context.db, id);
+    if (!result) {
+      return errorUtils.createErrorResponse("KEY_NOT_FOUND", "API key not found");
+    }
+    return {
+      ok: true,
+      errors: []
+    };
+  }
+}
+exports.DisableApiKeyMutationResolver = DisableApiKeyMutationResolver;
+//# sourceMappingURL=DisableApiKeyMutationResolver.cjs.map

package/dist/development/src/resolvers/mutation/apiKey/DisableApiKeyMutationResolver.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"DisableApiKeyMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/apiKey/DisableApiKeyMutationResolver.ts"],"sourcesContent":["import { DisableApiKeyErrorCode, DisableApiKeyResponse, MutationDisableApiKeyArgs, MutationResolvers } from '../../../schema'\nimport { GraphQLResolveInfo } from 'graphql'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { ApiKeyManager, PermissionActions } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\n\nexport class DisableApiKeyMutationResolver implements MutationResolvers {\n\tconstructor(private readonly apiKeyManager: ApiKeyManager) {}\n\n\tasync disableApiKey(\n\t\tparent: any,\n\t\t{ id }: MutationDisableApiKeyArgs,\n\t\tcontext: TenantResolverContext,\n\t\tinfo: GraphQLResolveInfo,\n\t): Promise<DisableApiKeyResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.API_KEY_DISABLE,\n\t\t\tmessage: 'You are not allowed to disable api key',\n\t\t})\n\n\t\tconst result = await this.apiKeyManager.disableApiKey(context.db, id)\n\n\t\tif (!result) {\n\t\t\treturn createErrorResponse('KEY_NOT_FOUND', 'API key not found')\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":["PermissionActions","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAMO,MAAM,8BAA2D;AAAA,EACvE,YAA6B,eAA8B;AAA9B,SAAA,gBAAA;AAAA,EAA+B;AAAA,EAE5D,MAAM,cACL,QACA,EAAE,GAAA,GACF,SACA,MACiC;AACjC,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAAA,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAED,UAAM,SAAS,MAAM,KAAK,cAAc,cAAc,QAAQ,IAAI,EAAE;AAEpE,QAAI,CAAC,QAAQ;AACZ,aAAOC,WAAAA,oBAAoB,iBAAiB,mBAAmB;AAAA,IAChE;AAEA,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IAAC;AAAA,EAEX;AACD;;"}

package/dist/development/src/resolvers/mutation/apiKey/DisableApiKeyMutationResolver.js

@@ -0,0 +1,42 @@
+import { PermissionActions } from "../../../model/authorization/PermissionActions.js";
+import "@contember/authorization";
+import "../../../model/authorization/PermissionContext.js";
+import "../../../model/authorization/PermissionsFactory.js";
+import "@contember/schema";
+import "../../../model/type/ApiKey.js";
+import "@contember/database";
+import "node:crypto";
+import "../../../model/queries/apiKey/ApiKeyQuery.js";
+import "node:assert";
+import "../../../model/service/idp/providers/AppleProvider.js";
+import "openid-client";
+import "@contember/typesafe";
+import "../../../model/service/idp/providers/OIDCTypes.js";
+import "../../../model/service/idp/providers/FacebookProvider.js";
+import "../../../model/service/AuthLogService.js";
+import "@contember/schema-utils";
+import "otpauth";
+import { createErrorResponse } from "../../errorUtils.js";
+class DisableApiKeyMutationResolver {
+  constructor(apiKeyManager) {
+    this.apiKeyManager = apiKeyManager;
+  }
+  async disableApiKey(parent, { id }, context, info) {
+    await context.requireAccess({
+      action: PermissionActions.API_KEY_DISABLE,
+      message: "You are not allowed to disable api key"
+    });
+    const result = await this.apiKeyManager.disableApiKey(context.db, id);
+    if (!result) {
+      return createErrorResponse("KEY_NOT_FOUND", "API key not found");
+    }
+    return {
+      ok: true,
+      errors: []
+    };
+  }
+}
+export {
+  DisableApiKeyMutationResolver
+};
+//# sourceMappingURL=DisableApiKeyMutationResolver.js.map

package/dist/development/src/resolvers/mutation/apiKey/DisableApiKeyMutationResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DisableApiKeyMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/apiKey/DisableApiKeyMutationResolver.ts"],"sourcesContent":["import { DisableApiKeyErrorCode, DisableApiKeyResponse, MutationDisableApiKeyArgs, MutationResolvers } from '../../../schema'\nimport { GraphQLResolveInfo } from 'graphql'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { ApiKeyManager, PermissionActions } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\n\nexport class DisableApiKeyMutationResolver implements MutationResolvers {\n\tconstructor(private readonly apiKeyManager: ApiKeyManager) {}\n\n\tasync disableApiKey(\n\t\tparent: any,\n\t\t{ id }: MutationDisableApiKeyArgs,\n\t\tcontext: TenantResolverContext,\n\t\tinfo: GraphQLResolveInfo,\n\t): Promise<DisableApiKeyResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.API_KEY_DISABLE,\n\t\t\tmessage: 'You are not allowed to disable api key',\n\t\t})\n\n\t\tconst result = await this.apiKeyManager.disableApiKey(context.db, id)\n\n\t\tif (!result) {\n\t\t\treturn createErrorResponse('KEY_NOT_FOUND', 'API key not found')\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAMO,MAAM,8BAA2D;AAAA,EACvE,YAA6B,eAA8B;AAA9B,SAAA,gBAAA;AAAA,EAA+B;AAAA,EAE5D,MAAM,cACL,QACA,EAAE,GAAA,GACF,SACA,MACiC;AACjC,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAED,UAAM,SAAS,MAAM,KAAK,cAAc,cAAc,QAAQ,IAAI,EAAE;AAEpE,QAAI,CAAC,QAAQ;AACZ,aAAO,oBAAoB,iBAAiB,mBAAmB;AAAA,IAChE;AAEA,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IAAC;AAAA,EAEX;AACD;"}

package/dist/development/src/resolvers/mutation/configuration/ConfigurationMutationResolver.cjs

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const PermissionActions = require("../../../model/authorization/PermissionActions.cjs");
+require("@contember/authorization");
+require("../../../model/authorization/PermissionContext.cjs");
+require("../../../model/authorization/PermissionsFactory.cjs");
+require("@contember/schema");
+require("../../../model/type/ApiKey.cjs");
+require("@contember/database");
+require("node:crypto");
+require("../../../model/queries/apiKey/ApiKeyQuery.cjs");
+require("node:assert");
+require("../../../model/service/idp/providers/AppleProvider.cjs");
+require("openid-client");
+require("@contember/typesafe");
+require("../../../model/service/idp/providers/OIDCTypes.cjs");
+require("../../../model/service/idp/providers/FacebookProvider.cjs");
+require("../../../model/service/AuthLogService.cjs");
+require("@contember/schema-utils");
+require("otpauth");
+const errorUtils = require("../../errorUtils.cjs");
+class ConfigurationMutationResolver {
+  constructor(configurationManager) {
+    this.configurationManager = configurationManager;
+  }
+  async configure(parent, { config }, context) {
+    await context.requireAccess({
+      action: PermissionActions.PermissionActions.CONFIGURE,
+      message: "You are not allowed to configure"
+    });
+    const result = await this.configurationManager.updateConfiguration(context.db, config);
+    if (!result.ok) {
+      return errorUtils.createErrorResponse(result.error, result.errorMessage);
+    }
+    return {
+      ok: true
+    };
+  }
+}
+exports.ConfigurationMutationResolver = ConfigurationMutationResolver;
+//# sourceMappingURL=ConfigurationMutationResolver.cjs.map

package/dist/development/src/resolvers/mutation/configuration/ConfigurationMutationResolver.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigurationMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/configuration/ConfigurationMutationResolver.ts"],"sourcesContent":["import { ConfigureResponse, MutationConfigureArgs, MutationResolvers } from '../../../schema'\nimport { ConfigurationManager } from '../../../model/service/ConfigurationManager'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\n\nexport class ConfigurationMutationResolver implements Pick<MutationResolvers, 'configure'> {\n\tconstructor(\n\t\tprivate readonly configurationManager: ConfigurationManager,\n\t) {\n\t}\n\n\tasync configure(parent: any, { config }: MutationConfigureArgs, context: TenantResolverContext): Promise<ConfigureResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.CONFIGURE,\n\t\t\tmessage: 'You are not allowed to configure',\n\t\t})\n\n\t\tconst result = await this.configurationManager.updateConfiguration(context.db, config)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t}\n\t}\n}\n"],"names":["PermissionActions","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAMO,MAAM,8BAA8E;AAAA,EAC1F,YACkB,sBAChB;AADgB,SAAA,uBAAA;AAAA,EAElB;AAAA,EAEA,MAAM,UAAU,QAAa,EAAE,OAAA,GAAiC,SAA4D;AAC3H,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAAA,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAED,UAAM,SAAS,MAAM,KAAK,qBAAqB,oBAAoB,QAAQ,IAAI,MAAM;AAErF,QAAI,CAAC,OAAO,IAAI;AACf,aAAOC,WAAAA,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEA,WAAO;AAAA,MACN,IAAI;AAAA,IAAA;AAAA,EAEN;AACD;;"}

package/dist/development/src/resolvers/mutation/configuration/ConfigurationMutationResolver.js

@@ -0,0 +1,41 @@
+import { PermissionActions } from "../../../model/authorization/PermissionActions.js";
+import "@contember/authorization";
+import "../../../model/authorization/PermissionContext.js";
+import "../../../model/authorization/PermissionsFactory.js";
+import "@contember/schema";
+import "../../../model/type/ApiKey.js";
+import "@contember/database";
+import "node:crypto";
+import "../../../model/queries/apiKey/ApiKeyQuery.js";
+import "node:assert";
+import "../../../model/service/idp/providers/AppleProvider.js";
+import "openid-client";
+import "@contember/typesafe";
+import "../../../model/service/idp/providers/OIDCTypes.js";
+import "../../../model/service/idp/providers/FacebookProvider.js";
+import "../../../model/service/AuthLogService.js";
+import "@contember/schema-utils";
+import "otpauth";
+import { createErrorResponse } from "../../errorUtils.js";
+class ConfigurationMutationResolver {
+  constructor(configurationManager) {
+    this.configurationManager = configurationManager;
+  }
+  async configure(parent, { config }, context) {
+    await context.requireAccess({
+      action: PermissionActions.CONFIGURE,
+      message: "You are not allowed to configure"
+    });
+    const result = await this.configurationManager.updateConfiguration(context.db, config);
+    if (!result.ok) {
+      return createErrorResponse(result.error, result.errorMessage);
+    }
+    return {
+      ok: true
+    };
+  }
+}
+export {
+  ConfigurationMutationResolver
+};
+//# sourceMappingURL=ConfigurationMutationResolver.js.map

package/dist/development/src/resolvers/mutation/configuration/ConfigurationMutationResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigurationMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/configuration/ConfigurationMutationResolver.ts"],"sourcesContent":["import { ConfigureResponse, MutationConfigureArgs, MutationResolvers } from '../../../schema'\nimport { ConfigurationManager } from '../../../model/service/ConfigurationManager'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\n\nexport class ConfigurationMutationResolver implements Pick<MutationResolvers, 'configure'> {\n\tconstructor(\n\t\tprivate readonly configurationManager: ConfigurationManager,\n\t) {\n\t}\n\n\tasync configure(parent: any, { config }: MutationConfigureArgs, context: TenantResolverContext): Promise<ConfigureResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.CONFIGURE,\n\t\t\tmessage: 'You are not allowed to configure',\n\t\t})\n\n\t\tconst result = await this.configurationManager.updateConfiguration(context.db, config)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAMO,MAAM,8BAA8E;AAAA,EAC1F,YACkB,sBAChB;AADgB,SAAA,uBAAA;AAAA,EAElB;AAAA,EAEA,MAAM,UAAU,QAAa,EAAE,OAAA,GAAiC,SAA4D;AAC3H,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAED,UAAM,SAAS,MAAM,KAAK,qBAAqB,oBAAoB,QAAQ,IAAI,MAAM;AAErF,QAAI,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEA,WAAO;AAAA,MACN,IAAI;AAAA,IAAA;AAAA,EAEN;AACD;"}