@contember/engine-tenant-api 2.1.0-alpha.37 → 2.1.0-alpha.39

package/dist/development/src/resolvers/mutation/project/SetProjectSecretMutationResolver.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"SetProjectSecretMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/project/SetProjectSecretMutationResolver.ts"],"sourcesContent":["import {\n\tAddProjectMemberErrorCode,\n\tCreateProjectResponseErrorCode,\n\tMutationResolvers,\n\tMutationSetProjectSecretArgs,\n\tSetProjectSecretResponse,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, ProjectManager, SecretsManager } from '../../../model'\nimport { createProjectNotFoundResponse } from '../../errorUtils'\n\nexport class SetProjectSecretMutationResolver implements MutationResolvers {\n\tconstructor(private readonly projectManager: ProjectManager, private readonly secretManager: SecretsManager) {}\n\n\tasync setProjectSecret(\n\t\tparent: any,\n\t\targs: MutationSetProjectSecretArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<SetProjectSecretResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, args.projectSlug)\n\t\tawait context.requireAccess({\n\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\taction: PermissionActions.PROJECT_SET_SECRET,\n\t\t\tmessage: 'You are not allowed to set project secrets',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', args.projectSlug)\n\t\t}\n\t\tawait this.secretManager.setSecret(context.db, project.id, args.key, args.value)\n\t\treturn { ok: true }\n\t}\n}\n"],"names":["PermissionActions","createProjectNotFoundResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAWO,MAAM,iCAA8D;AAAA,EAC1E,YAA6B,gBAAiD,eAA+B;AAAhF,SAAA,iBAAA;AAAiD,SAAA,gBAAA;AAAA,EAAgC;AAAA,EAE9G,MAAM,iBACL,QACA,MACA,SACoC;AACpC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,KAAK,WAAW;AACvF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQA,kBAAAA,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACb,aAAOC,yCAA8B,qBAAqB,KAAK,WAAW;AAAA,IAC3E;AACA,UAAM,KAAK,cAAc,UAAU,QAAQ,IAAI,QAAQ,IAAI,KAAK,KAAK,KAAK,KAAK;AAC/E,WAAO,EAAE,IAAI,KAAA;AAAA,EACd;AACD;;"}

package/dist/development/src/resolvers/mutation/project/SetProjectSecretMutationResolver.js

@@ -0,0 +1,42 @@
+import { PermissionActions } from "../../../model/authorization/PermissionActions.js";
+import "@contember/authorization";
+import "../../../model/authorization/PermissionContext.js";
+import "../../../model/authorization/PermissionsFactory.js";
+import "@contember/schema";
+import "../../../model/type/ApiKey.js";
+import "@contember/database";
+import "node:crypto";
+import "../../../model/queries/apiKey/ApiKeyQuery.js";
+import "node:assert";
+import "../../../model/service/idp/providers/AppleProvider.js";
+import "openid-client";
+import "@contember/typesafe";
+import "../../../model/service/idp/providers/OIDCTypes.js";
+import "../../../model/service/idp/providers/FacebookProvider.js";
+import "../../../model/service/AuthLogService.js";
+import "@contember/schema-utils";
+import "otpauth";
+import { createProjectNotFoundResponse } from "../../errorUtils.js";
+class SetProjectSecretMutationResolver {
+  constructor(projectManager, secretManager) {
+    this.projectManager = projectManager;
+    this.secretManager = secretManager;
+  }
+  async setProjectSecret(parent, args, context) {
+    const project = await this.projectManager.getProjectBySlug(context.db, args.projectSlug);
+    await context.requireAccess({
+      scope: await context.permissionContext.createProjectScope(project),
+      action: PermissionActions.PROJECT_SET_SECRET,
+      message: "You are not allowed to set project secrets"
+    });
+    if (!project) {
+      return createProjectNotFoundResponse("PROJECT_NOT_FOUND", args.projectSlug);
+    }
+    await this.secretManager.setSecret(context.db, project.id, args.key, args.value);
+    return { ok: true };
+  }
+}
+export {
+  SetProjectSecretMutationResolver
+};
+//# sourceMappingURL=SetProjectSecretMutationResolver.js.map

package/dist/development/src/resolvers/mutation/project/SetProjectSecretMutationResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SetProjectSecretMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/project/SetProjectSecretMutationResolver.ts"],"sourcesContent":["import {\n\tAddProjectMemberErrorCode,\n\tCreateProjectResponseErrorCode,\n\tMutationResolvers,\n\tMutationSetProjectSecretArgs,\n\tSetProjectSecretResponse,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, ProjectManager, SecretsManager } from '../../../model'\nimport { createProjectNotFoundResponse } from '../../errorUtils'\n\nexport class SetProjectSecretMutationResolver implements MutationResolvers {\n\tconstructor(private readonly projectManager: ProjectManager, private readonly secretManager: SecretsManager) {}\n\n\tasync setProjectSecret(\n\t\tparent: any,\n\t\targs: MutationSetProjectSecretArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<SetProjectSecretResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, args.projectSlug)\n\t\tawait context.requireAccess({\n\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\taction: PermissionActions.PROJECT_SET_SECRET,\n\t\t\tmessage: 'You are not allowed to set project secrets',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', args.projectSlug)\n\t\t}\n\t\tawait this.secretManager.setSecret(context.db, project.id, args.key, args.value)\n\t\treturn { ok: true }\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAWO,MAAM,iCAA8D;AAAA,EAC1E,YAA6B,gBAAiD,eAA+B;AAAhF,SAAA,iBAAA;AAAiD,SAAA,gBAAA;AAAA,EAAgC;AAAA,EAE9G,MAAM,iBACL,QACA,MACA,SACoC;AACpC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,KAAK,WAAW;AACvF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACb,aAAO,8BAA8B,qBAAqB,KAAK,WAAW;AAAA,IAC3E;AACA,UAAM,KAAK,cAAc,UAAU,QAAQ,IAAI,QAAQ,IAAI,KAAK,KAAK,KAAK,KAAK;AAC/E,WAAO,EAAE,IAAI,KAAA;AAAA,EACd;AACD;"}

package/dist/development/src/resolvers/mutation/project/UpdateProjectMutationResolver.cjs

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const PermissionActions = require("../../../model/authorization/PermissionActions.cjs");
+require("@contember/authorization");
+require("../../../model/authorization/PermissionContext.cjs");
+require("../../../model/authorization/PermissionsFactory.cjs");
+require("@contember/schema");
+require("../../../model/type/ApiKey.cjs");
+require("@contember/database");
+require("node:crypto");
+require("../../../model/queries/apiKey/ApiKeyQuery.cjs");
+require("node:assert");
+require("../../../model/service/idp/providers/AppleProvider.cjs");
+require("openid-client");
+require("@contember/typesafe");
+require("../../../model/service/idp/providers/OIDCTypes.cjs");
+require("../../../model/service/idp/providers/FacebookProvider.cjs");
+require("../../../model/service/AuthLogService.cjs");
+require("@contember/schema-utils");
+require("otpauth");
+const errorUtils = require("../../errorUtils.cjs");
+const configLoader = require("@contember/config-loader");
+class UpdateProjectMutationResolver {
+  constructor(projectManager) {
+    this.projectManager = projectManager;
+  }
+  async updateProject(parent, args, context) {
+    const project = await this.projectManager.getProjectBySlug(context.db, args.projectSlug);
+    await context.requireAccess({
+      scope: await context.permissionContext.createProjectScope(project),
+      action: PermissionActions.PermissionActions.PROJECT_UPDATE,
+      message: "You are not allowed to update a project"
+    });
+    if (!project) {
+      return errorUtils.createProjectNotFoundResponse("PROJECT_NOT_FOUND", args.projectSlug);
+    }
+    await this.projectManager.updateProject(context.db, project.id, {
+      name: args.name || void 0,
+      config: args.config !== void 0 ? configLoader.Merger.merge(args.mergeConfig ? project.config : {}, args.config) : void 0
+    });
+    return { ok: true };
+  }
+}
+exports.UpdateProjectMutationResolver = UpdateProjectMutationResolver;
+//# sourceMappingURL=UpdateProjectMutationResolver.cjs.map

package/dist/development/src/resolvers/mutation/project/UpdateProjectMutationResolver.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"UpdateProjectMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/project/UpdateProjectMutationResolver.ts"],"sourcesContent":["import { MutationResolvers, MutationUpdateProjectArgs, UpdateProjectResponse } from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, ProjectManager } from '../../../model'\nimport { createProjectNotFoundResponse } from '../../errorUtils'\nimport { Merger } from '@contember/config-loader'\n\nexport class UpdateProjectMutationResolver implements MutationResolvers {\n\tconstructor(private readonly projectManager: ProjectManager) {}\n\n\tasync updateProject(\n\t\tparent: any,\n\t\targs: MutationUpdateProjectArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<UpdateProjectResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, args.projectSlug)\n\t\tawait context.requireAccess({\n\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\taction: PermissionActions.PROJECT_UPDATE,\n\t\t\tmessage: 'You are not allowed to update a project',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', args.projectSlug)\n\t\t}\n\t\tawait this.projectManager.updateProject(context.db, project.id, {\n\t\t\tname: args.name || undefined,\n\t\t\tconfig: args.config !== undefined ? Merger.merge(args.mergeConfig ? project.config : {}, args.config as any) : undefined,\n\t\t})\n\t\treturn { ok: true }\n\t}\n}\n"],"names":["PermissionActions","createProjectNotFoundResponse","Merger"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAMO,MAAM,8BAA2D;AAAA,EACvE,YAA6B,gBAAgC;AAAhC,SAAA,iBAAA;AAAA,EAAiC;AAAA,EAE9D,MAAM,cACL,QACA,MACA,SACiC;AACjC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,KAAK,WAAW;AACvF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQA,kBAAAA,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACb,aAAOC,yCAA8B,qBAAqB,KAAK,WAAW;AAAA,IAC3E;AACA,UAAM,KAAK,eAAe,cAAc,QAAQ,IAAI,QAAQ,IAAI;AAAA,MAC/D,MAAM,KAAK,QAAQ;AAAA,MACnB,QAAQ,KAAK,WAAW,SAAYC,aAAAA,OAAO,MAAM,KAAK,cAAc,QAAQ,SAAS,CAAA,GAAI,KAAK,MAAa,IAAI;AAAA,IAAA,CAC/G;AACD,WAAO,EAAE,IAAI,KAAA;AAAA,EACd;AACD;;"}

package/dist/development/src/resolvers/mutation/project/UpdateProjectMutationResolver.js

@@ -0,0 +1,45 @@
+import { PermissionActions } from "../../../model/authorization/PermissionActions.js";
+import "@contember/authorization";
+import "../../../model/authorization/PermissionContext.js";
+import "../../../model/authorization/PermissionsFactory.js";
+import "@contember/schema";
+import "../../../model/type/ApiKey.js";
+import "@contember/database";
+import "node:crypto";
+import "../../../model/queries/apiKey/ApiKeyQuery.js";
+import "node:assert";
+import "../../../model/service/idp/providers/AppleProvider.js";
+import "openid-client";
+import "@contember/typesafe";
+import "../../../model/service/idp/providers/OIDCTypes.js";
+import "../../../model/service/idp/providers/FacebookProvider.js";
+import "../../../model/service/AuthLogService.js";
+import "@contember/schema-utils";
+import "otpauth";
+import { createProjectNotFoundResponse } from "../../errorUtils.js";
+import { Merger } from "@contember/config-loader";
+class UpdateProjectMutationResolver {
+  constructor(projectManager) {
+    this.projectManager = projectManager;
+  }
+  async updateProject(parent, args, context) {
+    const project = await this.projectManager.getProjectBySlug(context.db, args.projectSlug);
+    await context.requireAccess({
+      scope: await context.permissionContext.createProjectScope(project),
+      action: PermissionActions.PROJECT_UPDATE,
+      message: "You are not allowed to update a project"
+    });
+    if (!project) {
+      return createProjectNotFoundResponse("PROJECT_NOT_FOUND", args.projectSlug);
+    }
+    await this.projectManager.updateProject(context.db, project.id, {
+      name: args.name || void 0,
+      config: args.config !== void 0 ? Merger.merge(args.mergeConfig ? project.config : {}, args.config) : void 0
+    });
+    return { ok: true };
+  }
+}
+export {
+  UpdateProjectMutationResolver
+};
+//# sourceMappingURL=UpdateProjectMutationResolver.js.map

package/dist/development/src/resolvers/mutation/project/UpdateProjectMutationResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UpdateProjectMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/project/UpdateProjectMutationResolver.ts"],"sourcesContent":["import { MutationResolvers, MutationUpdateProjectArgs, UpdateProjectResponse } from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, ProjectManager } from '../../../model'\nimport { createProjectNotFoundResponse } from '../../errorUtils'\nimport { Merger } from '@contember/config-loader'\n\nexport class UpdateProjectMutationResolver implements MutationResolvers {\n\tconstructor(private readonly projectManager: ProjectManager) {}\n\n\tasync updateProject(\n\t\tparent: any,\n\t\targs: MutationUpdateProjectArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<UpdateProjectResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, args.projectSlug)\n\t\tawait context.requireAccess({\n\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\taction: PermissionActions.PROJECT_UPDATE,\n\t\t\tmessage: 'You are not allowed to update a project',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', args.projectSlug)\n\t\t}\n\t\tawait this.projectManager.updateProject(context.db, project.id, {\n\t\t\tname: args.name || undefined,\n\t\t\tconfig: args.config !== undefined ? Merger.merge(args.mergeConfig ? project.config : {}, args.config as any) : undefined,\n\t\t})\n\t\treturn { ok: true }\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAMO,MAAM,8BAA2D;AAAA,EACvE,YAA6B,gBAAgC;AAAhC,SAAA,iBAAA;AAAA,EAAiC;AAAA,EAE9D,MAAM,cACL,QACA,MACA,SACiC;AACjC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,KAAK,WAAW;AACvF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACb,aAAO,8BAA8B,qBAAqB,KAAK,WAAW;AAAA,IAC3E;AACA,UAAM,KAAK,eAAe,cAAc,QAAQ,IAAI,QAAQ,IAAI;AAAA,MAC/D,MAAM,KAAK,QAAQ;AAAA,MACnB,QAAQ,KAAK,WAAW,SAAY,OAAO,MAAM,KAAK,cAAc,QAAQ,SAAS,CAAA,GAAI,KAAK,MAAa,IAAI;AAAA,IAAA,CAC/G;AACD,WAAO,EAAE,IAAI,KAAA;AAAA,EACd;AACD;"}

package/dist/development/src/resolvers/mutation/projectMember/AddProjectMemberMutationResolver.cjs

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const PermissionActions = require("../../../model/authorization/PermissionActions.cjs");
+require("@contember/authorization");
+require("../../../model/authorization/PermissionContext.cjs");
+require("../../../model/authorization/PermissionsFactory.cjs");
+require("@contember/schema");
+require("../../../model/type/ApiKey.cjs");
+require("@contember/database");
+require("node:crypto");
+require("../../../model/queries/apiKey/ApiKeyQuery.cjs");
+require("node:assert");
+require("../../../model/service/idp/providers/AppleProvider.cjs");
+require("openid-client");
+require("@contember/typesafe");
+require("../../../model/service/idp/providers/OIDCTypes.cjs");
+require("../../../model/service/idp/providers/FacebookProvider.cjs");
+require("../../../model/service/AuthLogService.cjs");
+require("@contember/schema-utils");
+require("otpauth");
+const membershipUtils = require("../../membershipUtils.cjs");
+const errorUtils = require("../../errorUtils.cjs");
+class AddProjectMemberMutationResolver {
+  constructor(projectMemberManager, projectManager, membershipValidator) {
+    this.projectMemberManager = projectMemberManager;
+    this.projectManager = projectManager;
+    this.membershipValidator = membershipValidator;
+  }
+  async addProjectMember(parent, { projectSlug, identityId, memberships }, context) {
+    const project = await this.projectManager.getProjectBySlug(context.db, projectSlug);
+    await context.requireAccess({
+      scope: await context.permissionContext.createProjectScope(project),
+      action: PermissionActions.PermissionActions.PROJECT_ADD_MEMBER(memberships),
+      message: "You are not allowed to add a project member"
+    });
+    if (!project) {
+      return errorUtils.createProjectNotFoundResponse("PROJECT_NOT_FOUND", projectSlug);
+    }
+    const validationResult = await this.membershipValidator.validate(project.slug, memberships);
+    if (validationResult.length > 0) {
+      const errors = membershipUtils.createMembershipValidationErrorResult(validationResult);
+      return {
+        ok: false,
+        errors,
+        error: errors[0]
+      };
+    }
+    const result = await this.projectMemberManager.addProjectMember(context.db, project.id, identityId, memberships);
+    if (!result.ok) {
+      return errorUtils.createErrorResponse(result.error, result.errorMessage);
+    }
+    return {
+      ok: true,
+      errors: []
+    };
+  }
+}
+exports.AddProjectMemberMutationResolver = AddProjectMemberMutationResolver;
+//# sourceMappingURL=AddProjectMemberMutationResolver.cjs.map

package/dist/development/src/resolvers/mutation/projectMember/AddProjectMemberMutationResolver.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"AddProjectMemberMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/projectMember/AddProjectMemberMutationResolver.ts"],"sourcesContent":["import { AddProjectMemberErrorCode, AddProjectMemberResponse, MutationAddProjectMemberArgs, MutationResolvers } from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { MembershipValidator, PermissionActions, ProjectManager, ProjectMemberManager } from '../../../model'\nimport { createMembershipValidationErrorResult } from '../../membershipUtils'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\n\nexport class AddProjectMemberMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly membershipValidator: MembershipValidator,\n\t) {}\n\n\tasync addProjectMember(\n\t\tparent: any,\n\t\t{ projectSlug, identityId, memberships }: MutationAddProjectMemberArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<AddProjectMemberResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tawait context.requireAccess({\n\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\taction: PermissionActions.PROJECT_ADD_MEMBER(memberships),\n\t\t\tmessage: 'You are not allowed to add a project member',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tconst validationResult = await this.membershipValidator.validate(project.slug, memberships)\n\t\tif (validationResult.length > 0) {\n\t\t\tconst errors = createMembershipValidationErrorResult(validationResult)\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terrors: errors,\n\t\t\t\terror: errors[0],\n\t\t\t}\n\t\t}\n\n\t\tconst result = await this.projectMemberManager.addProjectMember(context.db, project.id, identityId, memberships)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":["PermissionActions","createProjectNotFoundResponse","createMembershipValidationErrorResult","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAMO,MAAM,iCAA8D;AAAA,EAC1E,YACkB,sBACA,gBACA,qBAChB;AAHgB,SAAA,uBAAA;AACA,SAAA,iBAAA;AACA,SAAA,sBAAA;AAAA,EACf;AAAA,EAEH,MAAM,iBACL,QACA,EAAE,aAAa,YAAY,YAAA,GAC3B,SACoC;AACpC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQA,kBAAAA,kBAAkB,mBAAmB,WAAW;AAAA,MACxD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACb,aAAOC,WAAAA,8BAA8B,qBAAqB,WAAW;AAAA,IACtE;AACA,UAAM,mBAAmB,MAAM,KAAK,oBAAoB,SAAS,QAAQ,MAAM,WAAW;AAC1F,QAAI,iBAAiB,SAAS,GAAG;AAChC,YAAM,SAASC,gBAAAA,sCAAsC,gBAAgB;AACrE,aAAO;AAAA,QACN,IAAI;AAAA,QACJ;AAAA,QACA,OAAO,OAAO,CAAC;AAAA,MAAA;AAAA,IAEjB;AAEA,UAAM,SAAS,MAAM,KAAK,qBAAqB,iBAAiB,QAAQ,IAAI,QAAQ,IAAI,YAAY,WAAW;AAE/G,QAAI,CAAC,OAAO,IAAI;AACf,aAAOC,WAAAA,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEA,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IAAC;AAAA,EAEX;AACD;;"}

package/dist/development/src/resolvers/mutation/projectMember/AddProjectMemberMutationResolver.js

@@ -0,0 +1,59 @@
+import { PermissionActions } from "../../../model/authorization/PermissionActions.js";
+import "@contember/authorization";
+import "../../../model/authorization/PermissionContext.js";
+import "../../../model/authorization/PermissionsFactory.js";
+import "@contember/schema";
+import "../../../model/type/ApiKey.js";
+import "@contember/database";
+import "node:crypto";
+import "../../../model/queries/apiKey/ApiKeyQuery.js";
+import "node:assert";
+import "../../../model/service/idp/providers/AppleProvider.js";
+import "openid-client";
+import "@contember/typesafe";
+import "../../../model/service/idp/providers/OIDCTypes.js";
+import "../../../model/service/idp/providers/FacebookProvider.js";
+import "../../../model/service/AuthLogService.js";
+import "@contember/schema-utils";
+import "otpauth";
+import { createMembershipValidationErrorResult } from "../../membershipUtils.js";
+import { createProjectNotFoundResponse, createErrorResponse } from "../../errorUtils.js";
+class AddProjectMemberMutationResolver {
+  constructor(projectMemberManager, projectManager, membershipValidator) {
+    this.projectMemberManager = projectMemberManager;
+    this.projectManager = projectManager;
+    this.membershipValidator = membershipValidator;
+  }
+  async addProjectMember(parent, { projectSlug, identityId, memberships }, context) {
+    const project = await this.projectManager.getProjectBySlug(context.db, projectSlug);
+    await context.requireAccess({
+      scope: await context.permissionContext.createProjectScope(project),
+      action: PermissionActions.PROJECT_ADD_MEMBER(memberships),
+      message: "You are not allowed to add a project member"
+    });
+    if (!project) {
+      return createProjectNotFoundResponse("PROJECT_NOT_FOUND", projectSlug);
+    }
+    const validationResult = await this.membershipValidator.validate(project.slug, memberships);
+    if (validationResult.length > 0) {
+      const errors = createMembershipValidationErrorResult(validationResult);
+      return {
+        ok: false,
+        errors,
+        error: errors[0]
+      };
+    }
+    const result = await this.projectMemberManager.addProjectMember(context.db, project.id, identityId, memberships);
+    if (!result.ok) {
+      return createErrorResponse(result.error, result.errorMessage);
+    }
+    return {
+      ok: true,
+      errors: []
+    };
+  }
+}
+export {
+  AddProjectMemberMutationResolver
+};
+//# sourceMappingURL=AddProjectMemberMutationResolver.js.map

package/dist/development/src/resolvers/mutation/projectMember/AddProjectMemberMutationResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AddProjectMemberMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/projectMember/AddProjectMemberMutationResolver.ts"],"sourcesContent":["import { AddProjectMemberErrorCode, AddProjectMemberResponse, MutationAddProjectMemberArgs, MutationResolvers } from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { MembershipValidator, PermissionActions, ProjectManager, ProjectMemberManager } from '../../../model'\nimport { createMembershipValidationErrorResult } from '../../membershipUtils'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\n\nexport class AddProjectMemberMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly membershipValidator: MembershipValidator,\n\t) {}\n\n\tasync addProjectMember(\n\t\tparent: any,\n\t\t{ projectSlug, identityId, memberships }: MutationAddProjectMemberArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<AddProjectMemberResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tawait context.requireAccess({\n\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\taction: PermissionActions.PROJECT_ADD_MEMBER(memberships),\n\t\t\tmessage: 'You are not allowed to add a project member',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tconst validationResult = await this.membershipValidator.validate(project.slug, memberships)\n\t\tif (validationResult.length > 0) {\n\t\t\tconst errors = createMembershipValidationErrorResult(validationResult)\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terrors: errors,\n\t\t\t\terror: errors[0],\n\t\t\t}\n\t\t}\n\n\t\tconst result = await this.projectMemberManager.addProjectMember(context.db, project.id, identityId, memberships)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAMO,MAAM,iCAA8D;AAAA,EAC1E,YACkB,sBACA,gBACA,qBAChB;AAHgB,SAAA,uBAAA;AACA,SAAA,iBAAA;AACA,SAAA,sBAAA;AAAA,EACf;AAAA,EAEH,MAAM,iBACL,QACA,EAAE,aAAa,YAAY,YAAA,GAC3B,SACoC;AACpC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQ,kBAAkB,mBAAmB,WAAW;AAAA,MACxD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACb,aAAO,8BAA8B,qBAAqB,WAAW;AAAA,IACtE;AACA,UAAM,mBAAmB,MAAM,KAAK,oBAAoB,SAAS,QAAQ,MAAM,WAAW;AAC1F,QAAI,iBAAiB,SAAS,GAAG;AAChC,YAAM,SAAS,sCAAsC,gBAAgB;AACrE,aAAO;AAAA,QACN,IAAI;AAAA,QACJ;AAAA,QACA,OAAO,OAAO,CAAC;AAAA,MAAA;AAAA,IAEjB;AAEA,UAAM,SAAS,MAAM,KAAK,qBAAqB,iBAAiB,QAAQ,IAAI,QAAQ,IAAI,YAAY,WAAW;AAE/G,QAAI,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEA,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IAAC;AAAA,EAEX;AACD;"}

package/dist/development/src/resolvers/mutation/projectMember/RemoveProjectMemberMutationResolver.cjs

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const PermissionActions = require("../../../model/authorization/PermissionActions.cjs");
+require("@contember/authorization");
+require("../../../model/authorization/PermissionContext.cjs");
+require("../../../model/authorization/PermissionsFactory.cjs");
+require("@contember/schema");
+require("../../../model/type/ApiKey.cjs");
+require("@contember/database");
+require("node:crypto");
+require("../../../model/queries/apiKey/ApiKeyQuery.cjs");
+require("node:assert");
+require("../../../model/service/idp/providers/AppleProvider.cjs");
+require("openid-client");
+require("@contember/typesafe");
+require("../../../model/service/idp/providers/OIDCTypes.cjs");
+require("../../../model/service/idp/providers/FacebookProvider.cjs");
+require("../../../model/service/AuthLogService.cjs");
+require("@contember/schema-utils");
+require("otpauth");
+const errorUtils = require("../../errorUtils.cjs");
+class RemoveProjectMemberMutationResolver {
+  constructor(projectMemberManager, projectManager) {
+    this.projectMemberManager = projectMemberManager;
+    this.projectManager = projectManager;
+  }
+  async removeProjectMember(parent, { projectSlug, identityId }, context) {
+    const project = await this.projectManager.getProjectBySlug(context.db, projectSlug);
+    const projectScope = await context.permissionContext.createProjectScope(project);
+    await context.requireAccess({
+      scope: projectScope,
+      action: PermissionActions.PermissionActions.PROJECT_REMOVE_MEMBER([]),
+      message: "You are not allowed to remove a project member"
+    });
+    if (!project) {
+      return errorUtils.createProjectNotFoundResponse("PROJECT_NOT_FOUND", projectSlug);
+    }
+    const memberships = await this.projectMemberManager.getStoredProjectsMemberships(
+      context.db,
+      { id: project.id },
+      { id: identityId },
+      context.permissionContext.createAccessVerifier(projectScope)
+    );
+    await context.requireAccess({
+      scope: projectScope,
+      action: PermissionActions.PermissionActions.PROJECT_REMOVE_MEMBER(memberships),
+      message: "You are not allowed to remove a project member"
+    });
+    const result = await this.projectMemberManager.removeProjectMember(context.db, project.id, identityId);
+    if (!result.ok) {
+      return errorUtils.createErrorResponse(result.error, result.errorMessage);
+    }
+    return {
+      ok: true,
+      errors: []
+    };
+  }
+}
+exports.RemoveProjectMemberMutationResolver = RemoveProjectMemberMutationResolver;
+//# sourceMappingURL=RemoveProjectMemberMutationResolver.cjs.map

package/dist/development/src/resolvers/mutation/projectMember/RemoveProjectMemberMutationResolver.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"RemoveProjectMemberMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/projectMember/RemoveProjectMemberMutationResolver.ts"],"sourcesContent":["import { MutationRemoveProjectMemberArgs, MutationResolvers, RemoveProjectMemberErrorCode, RemoveProjectMemberResponse } from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, ProjectManager, ProjectMemberManager } from '../../../model'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\n\nexport class RemoveProjectMemberMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t) {}\n\n\tasync removeProjectMember(\n\t\tparent: any,\n\t\t{ projectSlug, identityId }: MutationRemoveProjectMemberArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<RemoveProjectMemberResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tconst projectScope = await context.permissionContext.createProjectScope(project)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_REMOVE_MEMBER([]),\n\t\t\tmessage: 'You are not allowed to remove a project member',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tconst memberships = await this.projectMemberManager.getStoredProjectsMemberships(\n\t\t\tcontext.db,\n\t\t\t{ id: project.id },\n\t\t\t{ id: identityId },\n\t\t\tcontext.permissionContext.createAccessVerifier(projectScope),\n\t\t)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_REMOVE_MEMBER(memberships),\n\t\t\tmessage: 'You are not allowed to remove a project member',\n\t\t})\n\n\t\tconst result = await this.projectMemberManager.removeProjectMember(context.db, project.id, identityId)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":["PermissionActions","createProjectNotFoundResponse","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAKO,MAAM,oCAAiE;AAAA,EAC7E,YACkB,sBACA,gBAChB;AAFgB,SAAA,uBAAA;AACA,SAAA,iBAAA;AAAA,EACf;AAAA,EAEH,MAAM,oBACL,QACA,EAAE,aAAa,WAAA,GACf,SACuC;AACvC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,eAAe,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAC/E,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQA,kBAAAA,kBAAkB,sBAAsB,EAAE;AAAA,MAClD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACb,aAAOC,WAAAA,8BAA8B,qBAAqB,WAAW;AAAA,IACtE;AACA,UAAM,cAAc,MAAM,KAAK,qBAAqB;AAAA,MACnD,QAAQ;AAAA,MACR,EAAE,IAAI,QAAQ,GAAA;AAAA,MACd,EAAE,IAAI,WAAA;AAAA,MACN,QAAQ,kBAAkB,qBAAqB,YAAY;AAAA,IAAA;AAE5D,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQD,kBAAAA,kBAAkB,sBAAsB,WAAW;AAAA,MAC3D,SAAS;AAAA,IAAA,CACT;AAED,UAAM,SAAS,MAAM,KAAK,qBAAqB,oBAAoB,QAAQ,IAAI,QAAQ,IAAI,UAAU;AAErG,QAAI,CAAC,OAAO,IAAI;AACf,aAAOE,WAAAA,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEA,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IAAC;AAAA,EAEX;AACD;;"}

package/dist/development/src/resolvers/mutation/projectMember/RemoveProjectMemberMutationResolver.js

@@ -0,0 +1,60 @@
+import { PermissionActions } from "../../../model/authorization/PermissionActions.js";
+import "@contember/authorization";
+import "../../../model/authorization/PermissionContext.js";
+import "../../../model/authorization/PermissionsFactory.js";
+import "@contember/schema";
+import "../../../model/type/ApiKey.js";
+import "@contember/database";
+import "node:crypto";
+import "../../../model/queries/apiKey/ApiKeyQuery.js";
+import "node:assert";
+import "../../../model/service/idp/providers/AppleProvider.js";
+import "openid-client";
+import "@contember/typesafe";
+import "../../../model/service/idp/providers/OIDCTypes.js";
+import "../../../model/service/idp/providers/FacebookProvider.js";
+import "../../../model/service/AuthLogService.js";
+import "@contember/schema-utils";
+import "otpauth";
+import { createProjectNotFoundResponse, createErrorResponse } from "../../errorUtils.js";
+class RemoveProjectMemberMutationResolver {
+  constructor(projectMemberManager, projectManager) {
+    this.projectMemberManager = projectMemberManager;
+    this.projectManager = projectManager;
+  }
+  async removeProjectMember(parent, { projectSlug, identityId }, context) {
+    const project = await this.projectManager.getProjectBySlug(context.db, projectSlug);
+    const projectScope = await context.permissionContext.createProjectScope(project);
+    await context.requireAccess({
+      scope: projectScope,
+      action: PermissionActions.PROJECT_REMOVE_MEMBER([]),
+      message: "You are not allowed to remove a project member"
+    });
+    if (!project) {
+      return createProjectNotFoundResponse("PROJECT_NOT_FOUND", projectSlug);
+    }
+    const memberships = await this.projectMemberManager.getStoredProjectsMemberships(
+      context.db,
+      { id: project.id },
+      { id: identityId },
+      context.permissionContext.createAccessVerifier(projectScope)
+    );
+    await context.requireAccess({
+      scope: projectScope,
+      action: PermissionActions.PROJECT_REMOVE_MEMBER(memberships),
+      message: "You are not allowed to remove a project member"
+    });
+    const result = await this.projectMemberManager.removeProjectMember(context.db, project.id, identityId);
+    if (!result.ok) {
+      return createErrorResponse(result.error, result.errorMessage);
+    }
+    return {
+      ok: true,
+      errors: []
+    };
+  }
+}
+export {
+  RemoveProjectMemberMutationResolver
+};
+//# sourceMappingURL=RemoveProjectMemberMutationResolver.js.map

package/dist/development/src/resolvers/mutation/projectMember/RemoveProjectMemberMutationResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RemoveProjectMemberMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/projectMember/RemoveProjectMemberMutationResolver.ts"],"sourcesContent":["import { MutationRemoveProjectMemberArgs, MutationResolvers, RemoveProjectMemberErrorCode, RemoveProjectMemberResponse } from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, ProjectManager, ProjectMemberManager } from '../../../model'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\n\nexport class RemoveProjectMemberMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t) {}\n\n\tasync removeProjectMember(\n\t\tparent: any,\n\t\t{ projectSlug, identityId }: MutationRemoveProjectMemberArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<RemoveProjectMemberResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tconst projectScope = await context.permissionContext.createProjectScope(project)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_REMOVE_MEMBER([]),\n\t\t\tmessage: 'You are not allowed to remove a project member',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tconst memberships = await this.projectMemberManager.getStoredProjectsMemberships(\n\t\t\tcontext.db,\n\t\t\t{ id: project.id },\n\t\t\t{ id: identityId },\n\t\t\tcontext.permissionContext.createAccessVerifier(projectScope),\n\t\t)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_REMOVE_MEMBER(memberships),\n\t\t\tmessage: 'You are not allowed to remove a project member',\n\t\t})\n\n\t\tconst result = await this.projectMemberManager.removeProjectMember(context.db, project.id, identityId)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAKO,MAAM,oCAAiE;AAAA,EAC7E,YACkB,sBACA,gBAChB;AAFgB,SAAA,uBAAA;AACA,SAAA,iBAAA;AAAA,EACf;AAAA,EAEH,MAAM,oBACL,QACA,EAAE,aAAa,WAAA,GACf,SACuC;AACvC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,eAAe,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAC/E,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQ,kBAAkB,sBAAsB,EAAE;AAAA,MAClD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACb,aAAO,8BAA8B,qBAAqB,WAAW;AAAA,IACtE;AACA,UAAM,cAAc,MAAM,KAAK,qBAAqB;AAAA,MACnD,QAAQ;AAAA,MACR,EAAE,IAAI,QAAQ,GAAA;AAAA,MACd,EAAE,IAAI,WAAA;AAAA,MACN,QAAQ,kBAAkB,qBAAqB,YAAY;AAAA,IAAA;AAE5D,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQ,kBAAkB,sBAAsB,WAAW;AAAA,MAC3D,SAAS;AAAA,IAAA,CACT;AAED,UAAM,SAAS,MAAM,KAAK,qBAAqB,oBAAoB,QAAQ,IAAI,QAAQ,IAAI,UAAU;AAErG,QAAI,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEA,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IAAC;AAAA,EAEX;AACD;"}

package/dist/development/src/resolvers/mutation/projectMember/UpdateProjectMemberMutationResolver.cjs

@@ -0,0 +1,82 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const PermissionActions = require("../../../model/authorization/PermissionActions.cjs");
+require("@contember/authorization");
+require("../../../model/authorization/PermissionContext.cjs");
+require("../../../model/authorization/PermissionsFactory.cjs");
+require("@contember/schema");
+require("../../../model/type/ApiKey.cjs");
+require("@contember/database");
+require("node:crypto");
+require("../../../model/queries/apiKey/ApiKeyQuery.cjs");
+require("node:assert");
+const membershipUtils = require("../../../model/service/membershipUtils.cjs");
+require("../../../model/service/idp/providers/AppleProvider.cjs");
+require("openid-client");
+require("@contember/typesafe");
+require("../../../model/service/idp/providers/OIDCTypes.cjs");
+require("../../../model/service/idp/providers/FacebookProvider.cjs");
+require("../../../model/service/AuthLogService.cjs");
+const schemaUtils = require("@contember/schema-utils");
+require("otpauth");
+const membershipUtils$1 = require("../../membershipUtils.cjs");
+const errorUtils = require("../../errorUtils.cjs");
+class UpdateProjectMemberMutationResolver {
+  constructor(projectMemberManager, projectManager, membershipValidator) {
+    this.projectMemberManager = projectMemberManager;
+    this.projectManager = projectManager;
+    this.membershipValidator = membershipValidator;
+  }
+  async updateProjectMember(parent, { projectSlug, identityId, memberships }, context) {
+    const project = await this.projectManager.getProjectBySlug(context.db, projectSlug);
+    const projectScope = await context.permissionContext.createProjectScope(project);
+    await context.requireAccess({
+      scope: projectScope,
+      action: PermissionActions.PermissionActions.PROJECT_UPDATE_MEMBER([]),
+      message: "You are not allowed to update project member variables"
+    });
+    if (!project) {
+      return errorUtils.createProjectNotFoundResponse("PROJECT_NOT_FOUND", projectSlug);
+    }
+    const visibleMemberships = await this.projectMemberManager.getStoredProjectsMemberships(
+      context.db,
+      { id: project.id },
+      { id: identityId },
+      context.permissionContext.createAccessVerifier(projectScope)
+    );
+    const membershipPatch = membershipUtils.createMembershipModification(visibleMemberships, memberships);
+    const aclMemberships = membershipPatch.map((it) => ({
+      role: it.role,
+      variables: it.variables.map((it2) => ({
+        name: it2.name,
+        values: "set" in it2 ? it2.set : [...it2.remove, ...it2.append]
+      }))
+    }));
+    await context.requireAccess({
+      scope: projectScope,
+      action: PermissionActions.PermissionActions.PROJECT_UPDATE_MEMBER(aclMemberships),
+      message: "You are not allowed to update project member variables"
+    });
+    const validationResult = (await this.membershipValidator.validate(project.slug, memberships)).filter(
+      (it) => it.error !== schemaUtils.MembershipValidationErrorType.VARIABLE_EMPTY
+    );
+    if (validationResult.length > 0) {
+      const errors = membershipUtils$1.createMembershipValidationErrorResult(validationResult);
+      return {
+        ok: false,
+        errors,
+        error: errors[0]
+      };
+    }
+    const result = await this.projectMemberManager.updateProjectMember(context.db, project.id, identityId, membershipPatch);
+    if (!result.ok) {
+      return errorUtils.createErrorResponse(result.error, result.errorMessage);
+    }
+    return {
+      ok: true,
+      errors: []
+    };
+  }
+}
+exports.UpdateProjectMemberMutationResolver = UpdateProjectMemberMutationResolver;
+//# sourceMappingURL=UpdateProjectMemberMutationResolver.cjs.map

package/dist/development/src/resolvers/mutation/projectMember/UpdateProjectMemberMutationResolver.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"UpdateProjectMemberMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/projectMember/UpdateProjectMemberMutationResolver.ts"],"sourcesContent":["import { MutationResolvers, MutationUpdateProjectMemberArgs, UpdateProjectMemberErrorCode, UpdateProjectMemberResponse } from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { MembershipValidationErrorType, MembershipValidator, PermissionActions, ProjectManager, ProjectMemberManager } from '../../../model'\nimport { createMembershipValidationErrorResult } from '../../membershipUtils'\nimport { createMembershipModification } from '../../../model/service/membershipUtils'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\nimport { Acl } from '@contember/schema'\n\nexport class UpdateProjectMemberMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly membershipValidator: MembershipValidator,\n\t) {}\n\n\tasync updateProjectMember(\n\t\tparent: any,\n\t\t{ projectSlug, identityId, memberships }: MutationUpdateProjectMemberArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<UpdateProjectMemberResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tconst projectScope = await context.permissionContext.createProjectScope(project)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_UPDATE_MEMBER([]),\n\t\t\tmessage: 'You are not allowed to update project member variables',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tconst visibleMemberships = await this.projectMemberManager.getStoredProjectsMemberships(\n\t\t\tcontext.db,\n\t\t\t{ id: project.id },\n\t\t\t{ id: identityId },\n\t\t\tcontext.permissionContext.createAccessVerifier(projectScope),\n\t\t)\n\t\tconst membershipPatch = createMembershipModification(visibleMemberships, memberships)\n\n\t\tconst aclMemberships: Acl.Membership[] = membershipPatch.map(it => ({\n\t\t\trole: it.role,\n\t\t\tvariables: it.variables.map(it => ({\n\t\t\t\tname: it.name,\n\t\t\t\tvalues: 'set' in it ? it.set : [...it.remove, ...it.append],\n\t\t\t})),\n\t\t}))\n\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_UPDATE_MEMBER(aclMemberships),\n\t\t\tmessage: 'You are not allowed to update project member variables',\n\t\t})\n\n\t\tconst validationResult = (await this.membershipValidator.validate(project.slug, memberships)).filter(\n\t\t\tit => it.error !== MembershipValidationErrorType.VARIABLE_EMPTY,\n\t\t)\n\t\tif (validationResult.length > 0) {\n\t\t\tconst errors = createMembershipValidationErrorResult(validationResult)\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terrors: errors,\n\t\t\t\terror: errors[0],\n\t\t\t}\n\t\t}\n\n\t\tconst result = await this.projectMemberManager.updateProjectMember(context.db, project.id, identityId, membershipPatch)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":["PermissionActions","createProjectNotFoundResponse","createMembershipModification","it","MembershipValidationErrorType","createMembershipValidationErrorResult","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAQO,MAAM,oCAAiE;AAAA,EAC7E,YACkB,sBACA,gBACA,qBAChB;AAHgB,SAAA,uBAAA;AACA,SAAA,iBAAA;AACA,SAAA,sBAAA;AAAA,EACf;AAAA,EAEH,MAAM,oBACL,QACA,EAAE,aAAa,YAAY,YAAA,GAC3B,SACuC;AACvC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,eAAe,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAC/E,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQA,kBAAAA,kBAAkB,sBAAsB,EAAE;AAAA,MAClD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACb,aAAOC,WAAAA,8BAA8B,qBAAqB,WAAW;AAAA,IACtE;AACA,UAAM,qBAAqB,MAAM,KAAK,qBAAqB;AAAA,MAC1D,QAAQ;AAAA,MACR,EAAE,IAAI,QAAQ,GAAA;AAAA,MACd,EAAE,IAAI,WAAA;AAAA,MACN,QAAQ,kBAAkB,qBAAqB,YAAY;AAAA,IAAA;AAE5D,UAAM,kBAAkBC,gBAAAA,6BAA6B,oBAAoB,WAAW;AAEpF,UAAM,iBAAmC,gBAAgB,IAAI,CAAA,QAAO;AAAA,MACnE,MAAM,GAAG;AAAA,MACT,WAAW,GAAG,UAAU,IAAI,CAAAC,SAAO;AAAA,QAClC,MAAMA,IAAG;AAAA,QACT,QAAQ,SAASA,MAAKA,IAAG,MAAM,CAAC,GAAGA,IAAG,QAAQ,GAAGA,IAAG,MAAM;AAAA,MAAA,EACzD;AAAA,IAAA,EACD;AAEF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQH,kBAAAA,kBAAkB,sBAAsB,cAAc;AAAA,MAC9D,SAAS;AAAA,IAAA,CACT;AAED,UAAM,oBAAoB,MAAM,KAAK,oBAAoB,SAAS,QAAQ,MAAM,WAAW,GAAG;AAAA,MAC7F,CAAA,OAAM,GAAG,UAAUI,0CAA8B;AAAA,IAAA;AAElD,QAAI,iBAAiB,SAAS,GAAG;AAChC,YAAM,SAASC,kBAAAA,sCAAsC,gBAAgB;AACrE,aAAO;AAAA,QACN,IAAI;AAAA,QACJ;AAAA,QACA,OAAO,OAAO,CAAC;AAAA,MAAA;AAAA,IAEjB;AAEA,UAAM,SAAS,MAAM,KAAK,qBAAqB,oBAAoB,QAAQ,IAAI,QAAQ,IAAI,YAAY,eAAe;AAEtH,QAAI,CAAC,OAAO,IAAI;AACf,aAAOC,WAAAA,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEA,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IAAC;AAAA,EAEX;AACD;;"}

package/dist/development/src/resolvers/mutation/projectMember/UpdateProjectMemberMutationResolver.js

@@ -0,0 +1,82 @@
+import { PermissionActions } from "../../../model/authorization/PermissionActions.js";
+import "@contember/authorization";
+import "../../../model/authorization/PermissionContext.js";
+import "../../../model/authorization/PermissionsFactory.js";
+import "@contember/schema";
+import "../../../model/type/ApiKey.js";
+import "@contember/database";
+import "node:crypto";
+import "../../../model/queries/apiKey/ApiKeyQuery.js";
+import "node:assert";
+import { createMembershipModification } from "../../../model/service/membershipUtils.js";
+import "../../../model/service/idp/providers/AppleProvider.js";
+import "openid-client";
+import "@contember/typesafe";
+import "../../../model/service/idp/providers/OIDCTypes.js";
+import "../../../model/service/idp/providers/FacebookProvider.js";
+import "../../../model/service/AuthLogService.js";
+import { MembershipValidationErrorType } from "@contember/schema-utils";
+import "otpauth";
+import { createMembershipValidationErrorResult } from "../../membershipUtils.js";
+import { createProjectNotFoundResponse, createErrorResponse } from "../../errorUtils.js";
+class UpdateProjectMemberMutationResolver {
+  constructor(projectMemberManager, projectManager, membershipValidator) {
+    this.projectMemberManager = projectMemberManager;
+    this.projectManager = projectManager;
+    this.membershipValidator = membershipValidator;
+  }
+  async updateProjectMember(parent, { projectSlug, identityId, memberships }, context) {
+    const project = await this.projectManager.getProjectBySlug(context.db, projectSlug);
+    const projectScope = await context.permissionContext.createProjectScope(project);
+    await context.requireAccess({
+      scope: projectScope,
+      action: PermissionActions.PROJECT_UPDATE_MEMBER([]),
+      message: "You are not allowed to update project member variables"
+    });
+    if (!project) {
+      return createProjectNotFoundResponse("PROJECT_NOT_FOUND", projectSlug);
+    }
+    const visibleMemberships = await this.projectMemberManager.getStoredProjectsMemberships(
+      context.db,
+      { id: project.id },
+      { id: identityId },
+      context.permissionContext.createAccessVerifier(projectScope)
+    );
+    const membershipPatch = createMembershipModification(visibleMemberships, memberships);
+    const aclMemberships = membershipPatch.map((it) => ({
+      role: it.role,
+      variables: it.variables.map((it2) => ({
+        name: it2.name,
+        values: "set" in it2 ? it2.set : [...it2.remove, ...it2.append]
+      }))
+    }));
+    await context.requireAccess({
+      scope: projectScope,
+      action: PermissionActions.PROJECT_UPDATE_MEMBER(aclMemberships),
+      message: "You are not allowed to update project member variables"
+    });
+    const validationResult = (await this.membershipValidator.validate(project.slug, memberships)).filter(
+      (it) => it.error !== MembershipValidationErrorType.VARIABLE_EMPTY
+    );
+    if (validationResult.length > 0) {
+      const errors = createMembershipValidationErrorResult(validationResult);
+      return {
+        ok: false,
+        errors,
+        error: errors[0]
+      };
+    }
+    const result = await this.projectMemberManager.updateProjectMember(context.db, project.id, identityId, membershipPatch);
+    if (!result.ok) {
+      return createErrorResponse(result.error, result.errorMessage);
+    }
+    return {
+      ok: true,
+      errors: []
+    };
+  }
+}
+export {
+  UpdateProjectMemberMutationResolver
+};
+//# sourceMappingURL=UpdateProjectMemberMutationResolver.js.map