@contember/engine-tenant-api 2.1.0-alpha.37 → 2.1.0-alpha.39

package/dist/production/src/model/commands/apiKey/DisableIdentityApiKeysCommand.js

@@ -0,0 +1,16 @@
+import { UpdateBuilder as UpdateBuilder$1 } from "@contember/database";
+class DisableIdentityApiKeysCommand {
+  constructor(identityId) {
+    this.identityId = identityId;
+  }
+  async execute({ db }) {
+    const qb = UpdateBuilder$1.create().table("api_key").where({
+      identity_id: this.identityId
+    }).values({ disabled_at: /* @__PURE__ */ new Date() });
+    await qb.execute(db);
+  }
+}
+export {
+  DisableIdentityApiKeysCommand
+};
+//# sourceMappingURL=DisableIdentityApiKeysCommand.js.map

package/dist/production/src/model/commands/apiKey/DisableIdentityApiKeysCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DisableIdentityApiKeysCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/apiKey/DisableIdentityApiKeysCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { UpdateBuilder } from '@contember/database'\n\nexport class DisableIdentityApiKeysCommand implements Command<void> {\n\tconstructor(private readonly identityId: string) {}\n\n\tasync execute({ db }: Command.Args): Promise<void> {\n\t\tconst qb = UpdateBuilder.create()\n\t\t\t.table('api_key')\n\t\t\t.where({\n\t\t\t\tidentity_id: this.identityId,\n\t\t\t})\n\t\t\t.values({ disabled_at: new Date() })\n\n\t\tawait qb.execute(db)\n\t}\n}\n"],"names":["UpdateBuilder"],"mappings":";AAGO,MAAM,8BAAuD;AAAA,EACnE,YAA6B,YAAoB;AAApB,SAAA,aAAA;AAAA,EAAqB;AAAA,EAElD,MAAM,QAAQ,EAAE,MAAmC;AAClD,UAAM,KAAKA,gBAAc,OAAA,EACvB,MAAM,SAAS,EACf,MAAM;AAAA,MACN,aAAa,KAAK;AAAA,IAAA,CAClB,EACA,OAAO,EAAE,aAAa,oBAAI,KAAA,GAAQ;AAEpC,UAAM,GAAG,QAAQ,EAAE;AAAA,EACpB;AACD;"}

package/dist/production/src/model/commands/apiKey/DisableOneOffApiKeyCommand.cjs

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const ApiKey = require("../../type/ApiKey.cjs");
+const Database = require("@contember/database");
+class DisableOneOffApiKeyCommand {
+  constructor(apiKeyId) {
+    this.apiKeyId = apiKeyId;
+  }
+  async execute({ db }) {
+    const qb = Database.UpdateBuilder.create().table("api_key").where({
+      id: this.apiKeyId,
+      type: ApiKey.ApiKey.Type.ONE_OFF
+    }).values({ disabled_at: /* @__PURE__ */ new Date() });
+    await qb.execute(db);
+  }
+}
+exports.DisableOneOffApiKeyCommand = DisableOneOffApiKeyCommand;
+//# sourceMappingURL=DisableOneOffApiKeyCommand.cjs.map

package/dist/production/src/model/commands/apiKey/DisableOneOffApiKeyCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"DisableOneOffApiKeyCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/apiKey/DisableOneOffApiKeyCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { ApiKey } from '../../type'\nimport { UpdateBuilder } from '@contember/database'\n\nexport class DisableOneOffApiKeyCommand implements Command<void> {\n\tconstructor(private readonly apiKeyId: string) {}\n\n\tasync execute({ db }: Command.Args): Promise<void> {\n\t\tconst qb = UpdateBuilder.create()\n\t\t\t.table('api_key')\n\t\t\t.where({\n\t\t\t\tid: this.apiKeyId,\n\t\t\t\ttype: ApiKey.Type.ONE_OFF,\n\t\t\t})\n\t\t\t.values({ disabled_at: new Date() })\n\n\t\tawait qb.execute(db)\n\t}\n}\n"],"names":["UpdateBuilder","ApiKey"],"mappings":";;;;AAIO,MAAM,2BAAoD;AAAA,EAChE,YAA6B,UAAkB;AAAlB,SAAA,WAAA;AAAA,EAAmB;AAAA,EAEhD,MAAM,QAAQ,EAAE,MAAmC;AAClD,UAAM,KAAKA,SAAAA,cAAc,OAAA,EACvB,MAAM,SAAS,EACf,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,MACT,MAAMC,OAAAA,OAAO,KAAK;AAAA,IAAA,CAClB,EACA,OAAO,EAAE,aAAa,oBAAI,KAAA,GAAQ;AAEpC,UAAM,GAAG,QAAQ,EAAE;AAAA,EACpB;AACD;;"}

package/dist/production/src/model/commands/apiKey/DisableOneOffApiKeyCommand.js

@@ -0,0 +1,18 @@
+import { ApiKey } from "../../type/ApiKey.js";
+import { UpdateBuilder as UpdateBuilder$1 } from "@contember/database";
+class DisableOneOffApiKeyCommand {
+  constructor(apiKeyId) {
+    this.apiKeyId = apiKeyId;
+  }
+  async execute({ db }) {
+    const qb = UpdateBuilder$1.create().table("api_key").where({
+      id: this.apiKeyId,
+      type: ApiKey.Type.ONE_OFF
+    }).values({ disabled_at: /* @__PURE__ */ new Date() });
+    await qb.execute(db);
+  }
+}
+export {
+  DisableOneOffApiKeyCommand
+};
+//# sourceMappingURL=DisableOneOffApiKeyCommand.js.map

package/dist/production/src/model/commands/apiKey/DisableOneOffApiKeyCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DisableOneOffApiKeyCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/apiKey/DisableOneOffApiKeyCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { ApiKey } from '../../type'\nimport { UpdateBuilder } from '@contember/database'\n\nexport class DisableOneOffApiKeyCommand implements Command<void> {\n\tconstructor(private readonly apiKeyId: string) {}\n\n\tasync execute({ db }: Command.Args): Promise<void> {\n\t\tconst qb = UpdateBuilder.create()\n\t\t\t.table('api_key')\n\t\t\t.where({\n\t\t\t\tid: this.apiKeyId,\n\t\t\t\ttype: ApiKey.Type.ONE_OFF,\n\t\t\t})\n\t\t\t.values({ disabled_at: new Date() })\n\n\t\tawait qb.execute(db)\n\t}\n}\n"],"names":["UpdateBuilder"],"mappings":";;AAIO,MAAM,2BAAoD;AAAA,EAChE,YAA6B,UAAkB;AAAlB,SAAA,WAAA;AAAA,EAAmB;AAAA,EAEhD,MAAM,QAAQ,EAAE,MAAmC;AAClD,UAAM,KAAKA,gBAAc,OAAA,EACvB,MAAM,SAAS,EACf,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,MACT,MAAM,OAAO,KAAK;AAAA,IAAA,CAClB,EACA,OAAO,EAAE,aAAa,oBAAI,KAAA,GAAQ;AAEpC,UAAM,GAAG,QAAQ,EAAE;AAAA,EACpB;AACD;"}

package/dist/production/src/model/commands/apiKey/ProlongApiKeyCommand.cjs

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const ApiKeyHelper = require("./ApiKeyHelper.cjs");
+const Database = require("@contember/database");
+const PROLONG_THROTTLE_MS = 6e4;
+class ProlongApiKeyCommand {
+  constructor(id, type, expiration, currentExpiration) {
+    this.id = id;
+    this.type = type;
+    this.expiration = expiration;
+    this.currentExpiration = currentExpiration;
+  }
+  async execute({ db, providers }) {
+    const newExpiration = ApiKeyHelper.ApiKeyHelper.getExpiration(providers, this.type, this.expiration);
+    if (newExpiration === null) {
+      return;
+    }
+    if (this.currentExpiration) {
+      const prolongMs = newExpiration.getTime() - this.currentExpiration.getTime();
+      if (prolongMs > 0 && prolongMs < PROLONG_THROTTLE_MS) {
+        return;
+      }
+    }
+    const qb = Database.UpdateBuilder.create().table("api_key").where({ id: this.id }).values({
+      expires_at: newExpiration
+    });
+    await qb.execute(db);
+  }
+}
+exports.ProlongApiKeyCommand = ProlongApiKeyCommand;
+//# sourceMappingURL=ProlongApiKeyCommand.cjs.map

package/dist/production/src/model/commands/apiKey/ProlongApiKeyCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProlongApiKeyCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/apiKey/ProlongApiKeyCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { ApiKey } from '../../type'\nimport { ApiKeyHelper } from './ApiKeyHelper'\nimport { UpdateBuilder } from '@contember/database'\n\nconst PROLONG_THROTTLE_MS = 60_000\n\nexport class ProlongApiKeyCommand implements Command<void> {\n\tconstructor(\n\t\tprivate readonly id: string,\n\t\tprivate readonly type: ApiKey.Type,\n\t\tprivate readonly expiration: number | null,\n\t\tprivate readonly currentExpiration: Date | null,\n\t) {}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tconst newExpiration = ApiKeyHelper.getExpiration(providers, this.type, this.expiration)\n\t\tif (newExpiration === null) {\n\t\t\treturn\n\t\t}\n\n\t\tif (this.currentExpiration) {\n\t\t\tconst prolongMs = newExpiration.getTime() - this.currentExpiration.getTime()\n\t\t\tif (prolongMs > 0 && prolongMs < PROLONG_THROTTLE_MS) {\n\t\t\t\treturn\n\t\t\t}\n\t\t}\n\n\t\tconst qb = UpdateBuilder.create()\n\t\t\t.table('api_key')\n\t\t\t.where({ id: this.id })\n\t\t\t.values({\n\t\t\t\texpires_at: newExpiration,\n\t\t\t})\n\t\tawait qb.execute(db)\n\t}\n}\n"],"names":["ApiKeyHelper","UpdateBuilder"],"mappings":";;;;AAKA,MAAM,sBAAsB;AAErB,MAAM,qBAA8C;AAAA,EAC1D,YACkB,IACA,MACA,YACA,mBAChB;AAJgB,SAAA,KAAA;AACA,SAAA,OAAA;AACA,SAAA,aAAA;AACA,SAAA,oBAAA;AAAA,EACf;AAAA,EAEH,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAM,gBAAgBA,aAAAA,aAAa,cAAc,WAAW,KAAK,MAAM,KAAK,UAAU;AACtF,QAAI,kBAAkB,MAAM;AAC3B;AAAA,IACD;AAEA,QAAI,KAAK,mBAAmB;AAC3B,YAAM,YAAY,cAAc,QAAA,IAAY,KAAK,kBAAkB,QAAA;AACnE,UAAI,YAAY,KAAK,YAAY,qBAAqB;AACrD;AAAA,MACD;AAAA,IACD;AAEA,UAAM,KAAKC,SAAAA,cAAc,OAAA,EACvB,MAAM,SAAS,EACf,MAAM,EAAE,IAAI,KAAK,GAAA,CAAI,EACrB,OAAO;AAAA,MACP,YAAY;AAAA,IAAA,CACZ;AACF,UAAM,GAAG,QAAQ,EAAE;AAAA,EACpB;AACD;;"}

package/dist/production/src/model/commands/apiKey/ProlongApiKeyCommand.js

@@ -0,0 +1,31 @@
+import { ApiKeyHelper } from "./ApiKeyHelper.js";
+import { UpdateBuilder as UpdateBuilder$1 } from "@contember/database";
+const PROLONG_THROTTLE_MS = 6e4;
+class ProlongApiKeyCommand {
+  constructor(id, type, expiration, currentExpiration) {
+    this.id = id;
+    this.type = type;
+    this.expiration = expiration;
+    this.currentExpiration = currentExpiration;
+  }
+  async execute({ db, providers }) {
+    const newExpiration = ApiKeyHelper.getExpiration(providers, this.type, this.expiration);
+    if (newExpiration === null) {
+      return;
+    }
+    if (this.currentExpiration) {
+      const prolongMs = newExpiration.getTime() - this.currentExpiration.getTime();
+      if (prolongMs > 0 && prolongMs < PROLONG_THROTTLE_MS) {
+        return;
+      }
+    }
+    const qb = UpdateBuilder$1.create().table("api_key").where({ id: this.id }).values({
+      expires_at: newExpiration
+    });
+    await qb.execute(db);
+  }
+}
+export {
+  ProlongApiKeyCommand
+};
+//# sourceMappingURL=ProlongApiKeyCommand.js.map

package/dist/production/src/model/commands/apiKey/ProlongApiKeyCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProlongApiKeyCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/apiKey/ProlongApiKeyCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { ApiKey } from '../../type'\nimport { ApiKeyHelper } from './ApiKeyHelper'\nimport { UpdateBuilder } from '@contember/database'\n\nconst PROLONG_THROTTLE_MS = 60_000\n\nexport class ProlongApiKeyCommand implements Command<void> {\n\tconstructor(\n\t\tprivate readonly id: string,\n\t\tprivate readonly type: ApiKey.Type,\n\t\tprivate readonly expiration: number | null,\n\t\tprivate readonly currentExpiration: Date | null,\n\t) {}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tconst newExpiration = ApiKeyHelper.getExpiration(providers, this.type, this.expiration)\n\t\tif (newExpiration === null) {\n\t\t\treturn\n\t\t}\n\n\t\tif (this.currentExpiration) {\n\t\t\tconst prolongMs = newExpiration.getTime() - this.currentExpiration.getTime()\n\t\t\tif (prolongMs > 0 && prolongMs < PROLONG_THROTTLE_MS) {\n\t\t\t\treturn\n\t\t\t}\n\t\t}\n\n\t\tconst qb = UpdateBuilder.create()\n\t\t\t.table('api_key')\n\t\t\t.where({ id: this.id })\n\t\t\t.values({\n\t\t\t\texpires_at: newExpiration,\n\t\t\t})\n\t\tawait qb.execute(db)\n\t}\n}\n"],"names":["UpdateBuilder"],"mappings":";;AAKA,MAAM,sBAAsB;AAErB,MAAM,qBAA8C;AAAA,EAC1D,YACkB,IACA,MACA,YACA,mBAChB;AAJgB,SAAA,KAAA;AACA,SAAA,OAAA;AACA,SAAA,aAAA;AACA,SAAA,oBAAA;AAAA,EACf;AAAA,EAEH,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAM,gBAAgB,aAAa,cAAc,WAAW,KAAK,MAAM,KAAK,UAAU;AACtF,QAAI,kBAAkB,MAAM;AAC3B;AAAA,IACD;AAEA,QAAI,KAAK,mBAAmB;AAC3B,YAAM,YAAY,cAAc,QAAA,IAAY,KAAK,kBAAkB,QAAA;AACnE,UAAI,YAAY,KAAK,YAAY,qBAAqB;AACrD;AAAA,MACD;AAAA,IACD;AAEA,UAAM,KAAKA,gBAAc,OAAA,EACvB,MAAM,SAAS,EACf,MAAM,EAAE,IAAI,KAAK,GAAA,CAAI,EACrB,OAAO;AAAA,MACP,YAAY;AAAA,IAAA,CACZ;AACF,UAAM,GAAG,QAAQ,EAAE;AAAA,EACpB;AACD;"}

package/dist/production/src/model/commands/authLog/CreateAuthLogEntryCommand.cjs

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+class CreateAuthLogEntryCommand {
+  constructor(data) {
+    this.data = data;
+  }
+  async execute({ db, providers }) {
+    await Database.InsertBuilder.create().into("person_auth_log").values({
+      id: providers.uuid(),
+      invoked_by_id: this.data.invokedById,
+      person_id: this.data.personId,
+      person_input_identifier: this.data.personInputIdentifier,
+      person_token_id: this.data.personTokenId,
+      type: this.data.type,
+      success: this.data.success,
+      error_code: this.data.errorCode,
+      error_message: this.data.errorMessage,
+      ip_address: this.data.ipAddress,
+      user_agent: this.data.userAgent,
+      identity_provider_id: this.data.identityProviderId,
+      metadata: this.data.metadata ?? {}
+    }).execute(db);
+  }
+}
+exports.CreateAuthLogEntryCommand = CreateAuthLogEntryCommand;
+//# sourceMappingURL=CreateAuthLogEntryCommand.cjs.map

package/dist/production/src/model/commands/authLog/CreateAuthLogEntryCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateAuthLogEntryCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/authLog/CreateAuthLogEntryCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { AuthActionType } from '../../type/AuthLog'\nimport { InsertBuilder } from '@contember/database'\nimport { JSONValue } from '@contember/schema'\n\nexport class CreateAuthLogEntryCommand implements Command<void> {\n\tconstructor(\n\t\tprivate readonly data: CreateAuthLogEntryCommand.Entry,\n\t) {\n\t}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tawait InsertBuilder.create()\n\t\t\t.into('person_auth_log')\n\t\t\t.values({\n\t\t\t\tid: providers.uuid(),\n\t\t\t\tinvoked_by_id: this.data.invokedById,\n\t\t\t\tperson_id: this.data.personId,\n\t\t\t\tperson_input_identifier: this.data.personInputIdentifier,\n\t\t\t\tperson_token_id: this.data.personTokenId,\n\t\t\t\ttype: this.data.type,\n\t\t\t\tsuccess: this.data.success,\n\t\t\t\terror_code: this.data.errorCode,\n\t\t\t\terror_message: this.data.errorMessage,\n\t\t\t\tip_address: this.data.ipAddress,\n\t\t\t\tuser_agent: this.data.userAgent,\n\t\t\t\tidentity_provider_id: this.data.identityProviderId,\n\t\t\t\tmetadata: this.data.metadata ?? {},\n\t\t\t})\n\t\t\t.execute(db)\n\t}\n}\n\nnamespace CreateAuthLogEntryCommand {\n\texport type Entry = {\n\t\ttype: AuthActionType\n\t\tinvokedById: string\n\t\tpersonInputIdentifier?: string\n\t\tpersonId?: string\n\t\tpersonTokenId?: string\n\t\tsuccess: boolean\n\t\terrorCode?: string\n\t\terrorMessage?: string\n\t\tipAddress?: string\n\t\tuserAgent?: string\n\t\tidentityProviderId?: string\n\t\tmetadata?: JSONValue\n\t}\n}\n"],"names":["InsertBuilder"],"mappings":";;;AAKO,MAAM,0BAAmD;AAAA,EAC/D,YACkB,MAChB;AADgB,SAAA,OAAA;AAAA,EAElB;AAAA,EAEA,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAMA,SAAAA,cAAc,OAAA,EAClB,KAAK,iBAAiB,EACtB,OAAO;AAAA,MACP,IAAI,UAAU,KAAA;AAAA,MACd,eAAe,KAAK,KAAK;AAAA,MACzB,WAAW,KAAK,KAAK;AAAA,MACrB,yBAAyB,KAAK,KAAK;AAAA,MACnC,iBAAiB,KAAK,KAAK;AAAA,MAC3B,MAAM,KAAK,KAAK;AAAA,MAChB,SAAS,KAAK,KAAK;AAAA,MACnB,YAAY,KAAK,KAAK;AAAA,MACtB,eAAe,KAAK,KAAK;AAAA,MACzB,YAAY,KAAK,KAAK;AAAA,MACtB,YAAY,KAAK,KAAK;AAAA,MACtB,sBAAsB,KAAK,KAAK;AAAA,MAChC,UAAU,KAAK,KAAK,YAAY,CAAA;AAAA,IAAC,CACjC,EACA,QAAQ,EAAE;AAAA,EACb;AACD;;"}

package/dist/production/src/model/commands/authLog/CreateAuthLogEntryCommand.js

@@ -0,0 +1,27 @@
+import { InsertBuilder as InsertBuilder$1 } from "@contember/database";
+class CreateAuthLogEntryCommand {
+  constructor(data) {
+    this.data = data;
+  }
+  async execute({ db, providers }) {
+    await InsertBuilder$1.create().into("person_auth_log").values({
+      id: providers.uuid(),
+      invoked_by_id: this.data.invokedById,
+      person_id: this.data.personId,
+      person_input_identifier: this.data.personInputIdentifier,
+      person_token_id: this.data.personTokenId,
+      type: this.data.type,
+      success: this.data.success,
+      error_code: this.data.errorCode,
+      error_message: this.data.errorMessage,
+      ip_address: this.data.ipAddress,
+      user_agent: this.data.userAgent,
+      identity_provider_id: this.data.identityProviderId,
+      metadata: this.data.metadata ?? {}
+    }).execute(db);
+  }
+}
+export {
+  CreateAuthLogEntryCommand
+};
+//# sourceMappingURL=CreateAuthLogEntryCommand.js.map

package/dist/production/src/model/commands/authLog/CreateAuthLogEntryCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateAuthLogEntryCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/authLog/CreateAuthLogEntryCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { AuthActionType } from '../../type/AuthLog'\nimport { InsertBuilder } from '@contember/database'\nimport { JSONValue } from '@contember/schema'\n\nexport class CreateAuthLogEntryCommand implements Command<void> {\n\tconstructor(\n\t\tprivate readonly data: CreateAuthLogEntryCommand.Entry,\n\t) {\n\t}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tawait InsertBuilder.create()\n\t\t\t.into('person_auth_log')\n\t\t\t.values({\n\t\t\t\tid: providers.uuid(),\n\t\t\t\tinvoked_by_id: this.data.invokedById,\n\t\t\t\tperson_id: this.data.personId,\n\t\t\t\tperson_input_identifier: this.data.personInputIdentifier,\n\t\t\t\tperson_token_id: this.data.personTokenId,\n\t\t\t\ttype: this.data.type,\n\t\t\t\tsuccess: this.data.success,\n\t\t\t\terror_code: this.data.errorCode,\n\t\t\t\terror_message: this.data.errorMessage,\n\t\t\t\tip_address: this.data.ipAddress,\n\t\t\t\tuser_agent: this.data.userAgent,\n\t\t\t\tidentity_provider_id: this.data.identityProviderId,\n\t\t\t\tmetadata: this.data.metadata ?? {},\n\t\t\t})\n\t\t\t.execute(db)\n\t}\n}\n\nnamespace CreateAuthLogEntryCommand {\n\texport type Entry = {\n\t\ttype: AuthActionType\n\t\tinvokedById: string\n\t\tpersonInputIdentifier?: string\n\t\tpersonId?: string\n\t\tpersonTokenId?: string\n\t\tsuccess: boolean\n\t\terrorCode?: string\n\t\terrorMessage?: string\n\t\tipAddress?: string\n\t\tuserAgent?: string\n\t\tidentityProviderId?: string\n\t\tmetadata?: JSONValue\n\t}\n}\n"],"names":["InsertBuilder"],"mappings":";AAKO,MAAM,0BAAmD;AAAA,EAC/D,YACkB,MAChB;AADgB,SAAA,OAAA;AAAA,EAElB;AAAA,EAEA,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAMA,gBAAc,OAAA,EAClB,KAAK,iBAAiB,EACtB,OAAO;AAAA,MACP,IAAI,UAAU,KAAA;AAAA,MACd,eAAe,KAAK,KAAK;AAAA,MACzB,WAAW,KAAK,KAAK;AAAA,MACrB,yBAAyB,KAAK,KAAK;AAAA,MACnC,iBAAiB,KAAK,KAAK;AAAA,MAC3B,MAAM,KAAK,KAAK;AAAA,MAChB,SAAS,KAAK,KAAK;AAAA,MACnB,YAAY,KAAK,KAAK;AAAA,MACtB,eAAe,KAAK,KAAK;AAAA,MACzB,YAAY,KAAK,KAAK;AAAA,MACtB,YAAY,KAAK,KAAK;AAAA,MACtB,sBAAsB,KAAK,KAAK;AAAA,MAChC,UAAU,KAAK,KAAK,YAAY,CAAA;AAAA,IAAC,CACjC,EACA,QAAQ,EAAE;AAAA,EACb;AACD;"}

package/dist/production/src/model/commands/configuration/UpdateConfigurationCommand.cjs

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+class UpdateConfigurationCommand {
+  constructor(configuration) {
+    this.configuration = configuration;
+  }
+  async execute({ db }) {
+    const result = await Database.UpdateBuilder.create().table("config").where({ id: "singleton" }).values(
+      {
+        passwordless_enabled: this.configuration.passwordless?.enabled ?? void 0,
+        passwordless_url: this.configuration.passwordless?.url,
+        passwordless_expiration: this.configuration.passwordless?.expiration ?? void 0,
+        password_min_length: this.configuration.password?.minLength ?? void 0,
+        password_require_uppercase: this.configuration.password?.requireUppercase ?? void 0,
+        password_require_lowercase: this.configuration.password?.requireLowercase ?? void 0,
+        password_require_digit: this.configuration.password?.requireDigit ?? void 0,
+        password_require_special: this.configuration.password?.requireSpecial ?? void 0,
+        password_pattern: this.configuration.password?.pattern,
+        password_check_blacklist: this.configuration.password?.checkBlacklist ?? void 0,
+        login_base_backoff: this.configuration.login?.baseBackoff ?? void 0,
+        login_max_backoff: this.configuration.login?.maxBackoff ?? void 0,
+        login_attempt_window: this.configuration.login?.attemptWindow ?? void 0,
+        login_reveal_user_exits: this.configuration.login?.revealUserExists ?? void 0,
+        login_default_token_expiration: this.configuration.login?.defaultTokenExpiration ?? void 0,
+        login_max_token_expiration: this.configuration.login?.maxTokenExpiration
+      }
+    ).execute(db);
+    if (!result) {
+      throw new Error("Configuration not found");
+    }
+  }
+}
+exports.UpdateConfigurationCommand = UpdateConfigurationCommand;
+//# sourceMappingURL=UpdateConfigurationCommand.cjs.map

package/dist/production/src/model/commands/configuration/UpdateConfigurationCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"UpdateConfigurationCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/configuration/UpdateConfigurationCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { ConfigInput } from '../../../schema'\nimport { UpdateBuilder } from '@contember/database'\nimport { ConfigRow } from '../../type/Config'\nimport { IPostgresInterval } from 'postgres-interval'\n\nexport class UpdateConfigurationCommand implements Command<void> {\n\tconstructor(\n\t\tprivate readonly configuration: ConfigInput,\n\t) {\n\t}\n\n\tasync execute({ db }: Command.Args): Promise<void> {\n\t\tconst result = await UpdateBuilder.create()\n\t\t\t.table('config')\n\t\t\t.where({ id: 'singleton' })\n\t\t\t.values(\n\t\t\t\t{\n\t\t\t\t\tpasswordless_enabled: this.configuration.passwordless?.enabled ?? undefined,\n\t\t\t\t\tpasswordless_url: this.configuration.passwordless?.url,\n\t\t\t\t\tpasswordless_expiration: this.configuration.passwordless?.expiration ?? undefined,\n\t\t\t\t\tpassword_min_length: this.configuration.password?.minLength ?? undefined,\n\t\t\t\t\tpassword_require_uppercase: this.configuration.password?.requireUppercase ?? undefined,\n\t\t\t\t\tpassword_require_lowercase: this.configuration.password?.requireLowercase ?? undefined,\n\t\t\t\t\tpassword_require_digit: this.configuration.password?.requireDigit ?? undefined,\n\t\t\t\t\tpassword_require_special: this.configuration.password?.requireSpecial ?? undefined,\n\t\t\t\t\tpassword_pattern: this.configuration.password?.pattern,\n\t\t\t\t\tpassword_check_blacklist: this.configuration.password?.checkBlacklist ?? undefined,\n\t\t\t\t\tlogin_base_backoff: this.configuration.login?.baseBackoff ?? undefined,\n\t\t\t\t\tlogin_max_backoff: this.configuration.login?.maxBackoff ?? undefined,\n\t\t\t\t\tlogin_attempt_window: this.configuration.login?.attemptWindow ?? undefined,\n\t\t\t\t\tlogin_reveal_user_exits: this.configuration.login?.revealUserExists ?? undefined,\n\t\t\t\t\tlogin_default_token_expiration: this.configuration.login?.defaultTokenExpiration ?? undefined,\n\t\t\t\t\tlogin_max_token_expiration: this.configuration.login?.maxTokenExpiration,\n\t\t\t\t} satisfies {\n\t\t\t\t\t[K in keyof ConfigRow]: (IPostgresInterval extends ConfigRow[K] ? string : never) | Exclude<ConfigRow[K], IPostgresInterval> | undefined\n\t\t\t\t},\n\t\t\t)\n\t\t\t.execute(db)\n\t\tif (!result) {\n\t\t\tthrow new Error('Configuration not found')\n\t\t}\n\t}\n}\n"],"names":["UpdateBuilder"],"mappings":";;;AAMO,MAAM,2BAAoD;AAAA,EAChE,YACkB,eAChB;AADgB,SAAA,gBAAA;AAAA,EAElB;AAAA,EAEA,MAAM,QAAQ,EAAE,MAAmC;AAClD,UAAM,SAAS,MAAMA,uBAAc,OAAA,EACjC,MAAM,QAAQ,EACd,MAAM,EAAE,IAAI,YAAA,CAAa,EACzB;AAAA,MACA;AAAA,QACC,sBAAsB,KAAK,cAAc,cAAc,WAAW;AAAA,QAClE,kBAAkB,KAAK,cAAc,cAAc;AAAA,QACnD,yBAAyB,KAAK,cAAc,cAAc,cAAc;AAAA,QACxE,qBAAqB,KAAK,cAAc,UAAU,aAAa;AAAA,QAC/D,4BAA4B,KAAK,cAAc,UAAU,oBAAoB;AAAA,QAC7E,4BAA4B,KAAK,cAAc,UAAU,oBAAoB;AAAA,QAC7E,wBAAwB,KAAK,cAAc,UAAU,gBAAgB;AAAA,QACrE,0BAA0B,KAAK,cAAc,UAAU,kBAAkB;AAAA,QACzE,kBAAkB,KAAK,cAAc,UAAU;AAAA,QAC/C,0BAA0B,KAAK,cAAc,UAAU,kBAAkB;AAAA,QACzE,oBAAoB,KAAK,cAAc,OAAO,eAAe;AAAA,QAC7D,mBAAmB,KAAK,cAAc,OAAO,cAAc;AAAA,QAC3D,sBAAsB,KAAK,cAAc,OAAO,iBAAiB;AAAA,QACjE,yBAAyB,KAAK,cAAc,OAAO,oBAAoB;AAAA,QACvE,gCAAgC,KAAK,cAAc,OAAO,0BAA0B;AAAA,QACpF,4BAA4B,KAAK,cAAc,OAAO;AAAA,MAAA;AAAA,IACvD,EAIA,QAAQ,EAAE;AACZ,QAAI,CAAC,QAAQ;AACZ,YAAM,IAAI,MAAM,yBAAyB;AAAA,IAC1C;AAAA,EACD;AACD;;"}

package/dist/production/src/model/commands/configuration/UpdateConfigurationCommand.js

@@ -0,0 +1,35 @@
+import { UpdateBuilder as UpdateBuilder$1 } from "@contember/database";
+class UpdateConfigurationCommand {
+  constructor(configuration) {
+    this.configuration = configuration;
+  }
+  async execute({ db }) {
+    const result = await UpdateBuilder$1.create().table("config").where({ id: "singleton" }).values(
+      {
+        passwordless_enabled: this.configuration.passwordless?.enabled ?? void 0,
+        passwordless_url: this.configuration.passwordless?.url,
+        passwordless_expiration: this.configuration.passwordless?.expiration ?? void 0,
+        password_min_length: this.configuration.password?.minLength ?? void 0,
+        password_require_uppercase: this.configuration.password?.requireUppercase ?? void 0,
+        password_require_lowercase: this.configuration.password?.requireLowercase ?? void 0,
+        password_require_digit: this.configuration.password?.requireDigit ?? void 0,
+        password_require_special: this.configuration.password?.requireSpecial ?? void 0,
+        password_pattern: this.configuration.password?.pattern,
+        password_check_blacklist: this.configuration.password?.checkBlacklist ?? void 0,
+        login_base_backoff: this.configuration.login?.baseBackoff ?? void 0,
+        login_max_backoff: this.configuration.login?.maxBackoff ?? void 0,
+        login_attempt_window: this.configuration.login?.attemptWindow ?? void 0,
+        login_reveal_user_exits: this.configuration.login?.revealUserExists ?? void 0,
+        login_default_token_expiration: this.configuration.login?.defaultTokenExpiration ?? void 0,
+        login_max_token_expiration: this.configuration.login?.maxTokenExpiration
+      }
+    ).execute(db);
+    if (!result) {
+      throw new Error("Configuration not found");
+    }
+  }
+}
+export {
+  UpdateConfigurationCommand
+};
+//# sourceMappingURL=UpdateConfigurationCommand.js.map

package/dist/production/src/model/commands/configuration/UpdateConfigurationCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UpdateConfigurationCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/configuration/UpdateConfigurationCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { ConfigInput } from '../../../schema'\nimport { UpdateBuilder } from '@contember/database'\nimport { ConfigRow } from '../../type/Config'\nimport { IPostgresInterval } from 'postgres-interval'\n\nexport class UpdateConfigurationCommand implements Command<void> {\n\tconstructor(\n\t\tprivate readonly configuration: ConfigInput,\n\t) {\n\t}\n\n\tasync execute({ db }: Command.Args): Promise<void> {\n\t\tconst result = await UpdateBuilder.create()\n\t\t\t.table('config')\n\t\t\t.where({ id: 'singleton' })\n\t\t\t.values(\n\t\t\t\t{\n\t\t\t\t\tpasswordless_enabled: this.configuration.passwordless?.enabled ?? undefined,\n\t\t\t\t\tpasswordless_url: this.configuration.passwordless?.url,\n\t\t\t\t\tpasswordless_expiration: this.configuration.passwordless?.expiration ?? undefined,\n\t\t\t\t\tpassword_min_length: this.configuration.password?.minLength ?? undefined,\n\t\t\t\t\tpassword_require_uppercase: this.configuration.password?.requireUppercase ?? undefined,\n\t\t\t\t\tpassword_require_lowercase: this.configuration.password?.requireLowercase ?? undefined,\n\t\t\t\t\tpassword_require_digit: this.configuration.password?.requireDigit ?? undefined,\n\t\t\t\t\tpassword_require_special: this.configuration.password?.requireSpecial ?? undefined,\n\t\t\t\t\tpassword_pattern: this.configuration.password?.pattern,\n\t\t\t\t\tpassword_check_blacklist: this.configuration.password?.checkBlacklist ?? undefined,\n\t\t\t\t\tlogin_base_backoff: this.configuration.login?.baseBackoff ?? undefined,\n\t\t\t\t\tlogin_max_backoff: this.configuration.login?.maxBackoff ?? undefined,\n\t\t\t\t\tlogin_attempt_window: this.configuration.login?.attemptWindow ?? undefined,\n\t\t\t\t\tlogin_reveal_user_exits: this.configuration.login?.revealUserExists ?? undefined,\n\t\t\t\t\tlogin_default_token_expiration: this.configuration.login?.defaultTokenExpiration ?? undefined,\n\t\t\t\t\tlogin_max_token_expiration: this.configuration.login?.maxTokenExpiration,\n\t\t\t\t} satisfies {\n\t\t\t\t\t[K in keyof ConfigRow]: (IPostgresInterval extends ConfigRow[K] ? string : never) | Exclude<ConfigRow[K], IPostgresInterval> | undefined\n\t\t\t\t},\n\t\t\t)\n\t\t\t.execute(db)\n\t\tif (!result) {\n\t\t\tthrow new Error('Configuration not found')\n\t\t}\n\t}\n}\n"],"names":["UpdateBuilder"],"mappings":";AAMO,MAAM,2BAAoD;AAAA,EAChE,YACkB,eAChB;AADgB,SAAA,gBAAA;AAAA,EAElB;AAAA,EAEA,MAAM,QAAQ,EAAE,MAAmC;AAClD,UAAM,SAAS,MAAMA,gBAAc,OAAA,EACjC,MAAM,QAAQ,EACd,MAAM,EAAE,IAAI,YAAA,CAAa,EACzB;AAAA,MACA;AAAA,QACC,sBAAsB,KAAK,cAAc,cAAc,WAAW;AAAA,QAClE,kBAAkB,KAAK,cAAc,cAAc;AAAA,QACnD,yBAAyB,KAAK,cAAc,cAAc,cAAc;AAAA,QACxE,qBAAqB,KAAK,cAAc,UAAU,aAAa;AAAA,QAC/D,4BAA4B,KAAK,cAAc,UAAU,oBAAoB;AAAA,QAC7E,4BAA4B,KAAK,cAAc,UAAU,oBAAoB;AAAA,QAC7E,wBAAwB,KAAK,cAAc,UAAU,gBAAgB;AAAA,QACrE,0BAA0B,KAAK,cAAc,UAAU,kBAAkB;AAAA,QACzE,kBAAkB,KAAK,cAAc,UAAU;AAAA,QAC/C,0BAA0B,KAAK,cAAc,UAAU,kBAAkB;AAAA,QACzE,oBAAoB,KAAK,cAAc,OAAO,eAAe;AAAA,QAC7D,mBAAmB,KAAK,cAAc,OAAO,cAAc;AAAA,QAC3D,sBAAsB,KAAK,cAAc,OAAO,iBAAiB;AAAA,QACjE,yBAAyB,KAAK,cAAc,OAAO,oBAAoB;AAAA,QACvE,gCAAgC,KAAK,cAAc,OAAO,0BAA0B;AAAA,QACpF,4BAA4B,KAAK,cAAc,OAAO;AAAA,MAAA;AAAA,IACvD,EAIA,QAAQ,EAAE;AACZ,QAAI,CAAC,QAAQ;AACZ,YAAM,IAAI,MAAM,yBAAyB;AAAA,IAC1C;AAAA,EACD;AACD;"}

package/dist/production/src/model/commands/identity/CreateIdentityCommand.cjs

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+class CreateIdentityCommand {
+  constructor(roles, description) {
+    this.roles = roles;
+    this.description = description;
+  }
+  async execute({ db, providers }) {
+    const identityId = providers.uuid();
+    await Database.InsertBuilder.create().into("identity").values({
+      id: identityId,
+      parent_id: null,
+      roles: JSON.stringify(this.roles),
+      description: this.description || null,
+      created_at: providers.now()
+    }).execute(db);
+    return identityId;
+  }
+}
+exports.CreateIdentityCommand = CreateIdentityCommand;
+//# sourceMappingURL=CreateIdentityCommand.cjs.map

package/dist/production/src/model/commands/identity/CreateIdentityCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateIdentityCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/identity/CreateIdentityCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { InsertBuilder } from '@contember/database'\n\nexport class CreateIdentityCommand implements Command<string> {\n\tconstructor(private readonly roles: readonly string[], private readonly description?: string) {}\n\n\tpublic async execute({ db, providers }: Command.Args): Promise<string> {\n\t\tconst identityId = providers.uuid()\n\t\tawait InsertBuilder.create()\n\t\t\t.into('identity')\n\t\t\t.values({\n\t\t\t\tid: identityId,\n\t\t\t\tparent_id: null,\n\t\t\t\troles: JSON.stringify(this.roles),\n\t\t\t\tdescription: this.description || null,\n\t\t\t\tcreated_at: providers.now(),\n\t\t\t})\n\t\t\t.execute(db)\n\n\t\treturn identityId\n\t}\n}\n"],"names":["InsertBuilder"],"mappings":";;;AAGO,MAAM,sBAAiD;AAAA,EAC7D,YAA6B,OAA2C,aAAsB;AAAjE,SAAA,QAAA;AAA2C,SAAA,cAAA;AAAA,EAAuB;AAAA,EAE/F,MAAa,QAAQ,EAAE,IAAI,aAA4C;AACtE,UAAM,aAAa,UAAU,KAAA;AAC7B,UAAMA,SAAAA,cAAc,OAAA,EAClB,KAAK,UAAU,EACf,OAAO;AAAA,MACP,IAAI;AAAA,MACJ,WAAW;AAAA,MACX,OAAO,KAAK,UAAU,KAAK,KAAK;AAAA,MAChC,aAAa,KAAK,eAAe;AAAA,MACjC,YAAY,UAAU,IAAA;AAAA,IAAI,CAC1B,EACA,QAAQ,EAAE;AAEZ,WAAO;AAAA,EACR;AACD;;"}

package/dist/production/src/model/commands/identity/CreateIdentityCommand.js

@@ -0,0 +1,22 @@
+import { InsertBuilder as InsertBuilder$1 } from "@contember/database";
+class CreateIdentityCommand {
+  constructor(roles, description) {
+    this.roles = roles;
+    this.description = description;
+  }
+  async execute({ db, providers }) {
+    const identityId = providers.uuid();
+    await InsertBuilder$1.create().into("identity").values({
+      id: identityId,
+      parent_id: null,
+      roles: JSON.stringify(this.roles),
+      description: this.description || null,
+      created_at: providers.now()
+    }).execute(db);
+    return identityId;
+  }
+}
+export {
+  CreateIdentityCommand
+};
+//# sourceMappingURL=CreateIdentityCommand.js.map

package/dist/production/src/model/commands/identity/CreateIdentityCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateIdentityCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/identity/CreateIdentityCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { InsertBuilder } from '@contember/database'\n\nexport class CreateIdentityCommand implements Command<string> {\n\tconstructor(private readonly roles: readonly string[], private readonly description?: string) {}\n\n\tpublic async execute({ db, providers }: Command.Args): Promise<string> {\n\t\tconst identityId = providers.uuid()\n\t\tawait InsertBuilder.create()\n\t\t\t.into('identity')\n\t\t\t.values({\n\t\t\t\tid: identityId,\n\t\t\t\tparent_id: null,\n\t\t\t\troles: JSON.stringify(this.roles),\n\t\t\t\tdescription: this.description || null,\n\t\t\t\tcreated_at: providers.now(),\n\t\t\t})\n\t\t\t.execute(db)\n\n\t\treturn identityId\n\t}\n}\n"],"names":["InsertBuilder"],"mappings":";AAGO,MAAM,sBAAiD;AAAA,EAC7D,YAA6B,OAA2C,aAAsB;AAAjE,SAAA,QAAA;AAA2C,SAAA,cAAA;AAAA,EAAuB;AAAA,EAE/F,MAAa,QAAQ,EAAE,IAAI,aAA4C;AACtE,UAAM,aAAa,UAAU,KAAA;AAC7B,UAAMA,gBAAc,OAAA,EAClB,KAAK,UAAU,EACf,OAAO;AAAA,MACP,IAAI;AAAA,MACJ,WAAW;AAAA,MACX,OAAO,KAAK,UAAU,KAAK,KAAK;AAAA,MAChC,aAAa,KAAK,eAAe;AAAA,MACjC,YAAY,UAAU,IAAA;AAAA,IAAI,CAC1B,EACA,QAAQ,EAAE;AAEZ,WAAO;AAAA,EACR;AACD;"}

package/dist/production/src/model/commands/identity/PatchIdentityGlobalRoles.cjs

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+class PatchIdentityGlobalRoles {
+  constructor(id, add, remove) {
+    this.id = id;
+    this.add = add;
+    this.remove = remove;
+  }
+  async execute({ db, providers }) {
+    const result = await Database.UpdateBuilder.create().table("identity").where({
+      id: this.id
+    }).values({
+      roles: (it) => it.raw(
+        `(
+						SELECT JSONB_AGG(DISTINCT out_role)
+						FROM JSONB_ARRAY_ELEMENTS_TEXT(roles || ?::jsonb) t(out_role)
+						WHERE NOT(out_role = ANY (?::text[]))
+					)`,
+        JSON.stringify(this.add),
+        this.remove
+      )
+    }).execute(db);
+    return result > 0;
+  }
+}
+exports.PatchIdentityGlobalRoles = PatchIdentityGlobalRoles;
+//# sourceMappingURL=PatchIdentityGlobalRoles.cjs.map

package/dist/production/src/model/commands/identity/PatchIdentityGlobalRoles.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"PatchIdentityGlobalRoles.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/identity/PatchIdentityGlobalRoles.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { UpdateBuilder } from '@contember/database'\n\nexport class PatchIdentityGlobalRoles implements Command<boolean> {\n\tconstructor(\n\t\tprivate readonly id: string,\n\t\tprivate readonly add: readonly string[],\n\t\tprivate readonly remove: readonly string[],\n\t) {\n\t}\n\n\tpublic async execute({ db, providers }: Command.Args): Promise<boolean> {\n\t\tconst result = await UpdateBuilder.create()\n\t\t\t.table('identity')\n\t\t\t.where({\n\t\t\t\tid: this.id,\n\t\t\t})\n\t\t\t.values({\n\t\t\t\troles: it =>\n\t\t\t\t\tit.raw(\n\t\t\t\t\t\t`(\n\t\t\t\t\t\tSELECT JSONB_AGG(DISTINCT out_role)\n\t\t\t\t\t\tFROM JSONB_ARRAY_ELEMENTS_TEXT(roles || ?::jsonb) t(out_role)\n\t\t\t\t\t\tWHERE NOT(out_role = ANY (?::text[]))\n\t\t\t\t\t)`,\n\t\t\t\t\t\tJSON.stringify(this.add),\n\t\t\t\t\t\tthis.remove,\n\t\t\t\t\t),\n\t\t\t})\n\t\t\t.execute(db)\n\t\treturn result > 0\n\t}\n}\n"],"names":["UpdateBuilder"],"mappings":";;;AAGO,MAAM,yBAAqD;AAAA,EACjE,YACkB,IACA,KACA,QAChB;AAHgB,SAAA,KAAA;AACA,SAAA,MAAA;AACA,SAAA,SAAA;AAAA,EAElB;AAAA,EAEA,MAAa,QAAQ,EAAE,IAAI,aAA6C;AACvE,UAAM,SAAS,MAAMA,uBAAc,OAAA,EACjC,MAAM,UAAU,EAChB,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,IAAA,CACT,EACA,OAAO;AAAA,MACP,OAAO,QACN,GAAG;AAAA,QACF;AAAA;AAAA;AAAA;AAAA;AAAA,QAKA,KAAK,UAAU,KAAK,GAAG;AAAA,QACvB,KAAK;AAAA,MAAA;AAAA,IACN,CACD,EACA,QAAQ,EAAE;AACZ,WAAO,SAAS;AAAA,EACjB;AACD;;"}

package/dist/production/src/model/commands/identity/PatchIdentityGlobalRoles.js

@@ -0,0 +1,28 @@
+import { UpdateBuilder as UpdateBuilder$1 } from "@contember/database";
+class PatchIdentityGlobalRoles {
+  constructor(id, add, remove) {
+    this.id = id;
+    this.add = add;
+    this.remove = remove;
+  }
+  async execute({ db, providers }) {
+    const result = await UpdateBuilder$1.create().table("identity").where({
+      id: this.id
+    }).values({
+      roles: (it) => it.raw(
+        `(
+						SELECT JSONB_AGG(DISTINCT out_role)
+						FROM JSONB_ARRAY_ELEMENTS_TEXT(roles || ?::jsonb) t(out_role)
+						WHERE NOT(out_role = ANY (?::text[]))
+					)`,
+        JSON.stringify(this.add),
+        this.remove
+      )
+    }).execute(db);
+    return result > 0;
+  }
+}
+export {
+  PatchIdentityGlobalRoles
+};
+//# sourceMappingURL=PatchIdentityGlobalRoles.js.map

package/dist/production/src/model/commands/identity/PatchIdentityGlobalRoles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PatchIdentityGlobalRoles.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/identity/PatchIdentityGlobalRoles.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { UpdateBuilder } from '@contember/database'\n\nexport class PatchIdentityGlobalRoles implements Command<boolean> {\n\tconstructor(\n\t\tprivate readonly id: string,\n\t\tprivate readonly add: readonly string[],\n\t\tprivate readonly remove: readonly string[],\n\t) {\n\t}\n\n\tpublic async execute({ db, providers }: Command.Args): Promise<boolean> {\n\t\tconst result = await UpdateBuilder.create()\n\t\t\t.table('identity')\n\t\t\t.where({\n\t\t\t\tid: this.id,\n\t\t\t})\n\t\t\t.values({\n\t\t\t\troles: it =>\n\t\t\t\t\tit.raw(\n\t\t\t\t\t\t`(\n\t\t\t\t\t\tSELECT JSONB_AGG(DISTINCT out_role)\n\t\t\t\t\t\tFROM JSONB_ARRAY_ELEMENTS_TEXT(roles || ?::jsonb) t(out_role)\n\t\t\t\t\t\tWHERE NOT(out_role = ANY (?::text[]))\n\t\t\t\t\t)`,\n\t\t\t\t\t\tJSON.stringify(this.add),\n\t\t\t\t\t\tthis.remove,\n\t\t\t\t\t),\n\t\t\t})\n\t\t\t.execute(db)\n\t\treturn result > 0\n\t}\n}\n"],"names":["UpdateBuilder"],"mappings":";AAGO,MAAM,yBAAqD;AAAA,EACjE,YACkB,IACA,KACA,QAChB;AAHgB,SAAA,KAAA;AACA,SAAA,MAAA;AACA,SAAA,SAAA;AAAA,EAElB;AAAA,EAEA,MAAa,QAAQ,EAAE,IAAI,aAA6C;AACvE,UAAM,SAAS,MAAMA,gBAAc,OAAA,EACjC,MAAM,UAAU,EAChB,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,IAAA,CACT,EACA,OAAO;AAAA,MACP,OAAO,QACN,GAAG;AAAA,QACF;AAAA;AAAA;AAAA;AAAA;AAAA,QAKA,KAAK,UAAU,KAAK,GAAG;AAAA,QACvB,KAAK;AAAA,MAAA;AAAA,IACN,CACD,EACA,QAAQ,EAAE;AACZ,WAAO,SAAS;AAAA,EACjB;AACD;"}

package/dist/production/src/model/commands/idp/CreateIdpCommand.cjs

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+class CreateIdpCommand {
+  constructor(data) {
+    this.data = data;
+  }
+  async execute({ db, providers }) {
+    const { configuration, options: { autoSignUp, exclusive, initReturnsConfig }, slug, type } = this.data;
+    await Database.InsertBuilder.create().into("identity_provider").values({
+      id: providers.uuid(),
+      configuration,
+      slug,
+      type,
+      auto_sign_up: autoSignUp,
+      exclusive,
+      init_returns_config: initReturnsConfig
+    }).execute(db);
+  }
+}
+exports.CreateIdpCommand = CreateIdpCommand;
+//# sourceMappingURL=CreateIdpCommand.cjs.map

package/dist/production/src/model/commands/idp/CreateIdpCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateIdpCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/idp/CreateIdpCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { InsertBuilder } from '@contember/database'\nimport { IdentityProviderData } from '../../type'\n\nexport class CreateIdpCommand implements Command<void> {\n\tconstructor(\n\t\tprivate data: IdentityProviderData,\n\t) {\n\t}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tconst { configuration, options: { autoSignUp, exclusive, initReturnsConfig }, slug, type } = this.data\n\t\tawait InsertBuilder.create()\n\t\t\t.into('identity_provider')\n\t\t\t.values({\n\t\t\t\tid: providers.uuid(),\n\t\t\t\tconfiguration,\n\t\t\t\tslug,\n\t\t\t\ttype,\n\t\t\t\tauto_sign_up: autoSignUp,\n\t\t\t\texclusive,\n\t\t\t\tinit_returns_config: initReturnsConfig,\n\t\t\t})\n\t\t\t.execute(db)\n\t}\n}\n"],"names":["InsertBuilder"],"mappings":";;;AAIO,MAAM,iBAA0C;AAAA,EACtD,YACS,MACP;AADO,SAAA,OAAA;AAAA,EAET;AAAA,EAEA,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAM,EAAE,eAAe,SAAS,EAAE,YAAY,WAAW,kBAAA,GAAqB,MAAM,KAAA,IAAS,KAAK;AAClG,UAAMA,SAAAA,cAAc,OAAA,EAClB,KAAK,mBAAmB,EACxB,OAAO;AAAA,MACP,IAAI,UAAU,KAAA;AAAA,MACd;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd;AAAA,MACA,qBAAqB;AAAA,IAAA,CACrB,EACA,QAAQ,EAAE;AAAA,EACb;AACD;;"}

package/dist/production/src/model/commands/idp/CreateIdpCommand.js

@@ -0,0 +1,22 @@
+import { InsertBuilder as InsertBuilder$1 } from "@contember/database";
+class CreateIdpCommand {
+  constructor(data) {
+    this.data = data;
+  }
+  async execute({ db, providers }) {
+    const { configuration, options: { autoSignUp, exclusive, initReturnsConfig }, slug, type } = this.data;
+    await InsertBuilder$1.create().into("identity_provider").values({
+      id: providers.uuid(),
+      configuration,
+      slug,
+      type,
+      auto_sign_up: autoSignUp,
+      exclusive,
+      init_returns_config: initReturnsConfig
+    }).execute(db);
+  }
+}
+export {
+  CreateIdpCommand
+};
+//# sourceMappingURL=CreateIdpCommand.js.map

package/dist/production/src/model/commands/idp/CreateIdpCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateIdpCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/idp/CreateIdpCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { InsertBuilder } from '@contember/database'\nimport { IdentityProviderData } from '../../type'\n\nexport class CreateIdpCommand implements Command<void> {\n\tconstructor(\n\t\tprivate data: IdentityProviderData,\n\t) {\n\t}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tconst { configuration, options: { autoSignUp, exclusive, initReturnsConfig }, slug, type } = this.data\n\t\tawait InsertBuilder.create()\n\t\t\t.into('identity_provider')\n\t\t\t.values({\n\t\t\t\tid: providers.uuid(),\n\t\t\t\tconfiguration,\n\t\t\t\tslug,\n\t\t\t\ttype,\n\t\t\t\tauto_sign_up: autoSignUp,\n\t\t\t\texclusive,\n\t\t\t\tinit_returns_config: initReturnsConfig,\n\t\t\t})\n\t\t\t.execute(db)\n\t}\n}\n"],"names":["InsertBuilder"],"mappings":";AAIO,MAAM,iBAA0C;AAAA,EACtD,YACS,MACP;AADO,SAAA,OAAA;AAAA,EAET;AAAA,EAEA,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAM,EAAE,eAAe,SAAS,EAAE,YAAY,WAAW,kBAAA,GAAqB,MAAM,KAAA,IAAS,KAAK;AAClG,UAAMA,gBAAc,OAAA,EAClB,KAAK,mBAAmB,EACxB,OAAO;AAAA,MACP,IAAI,UAAU,KAAA;AAAA,MACd;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd;AAAA,MACA,qBAAqB;AAAA,IAAA,CACrB,EACA,QAAQ,EAAE;AAAA,EACb;AACD;"}

package/dist/production/src/model/commands/idp/DisableIdpCommand.cjs

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+class DisableIdpCommand {
+  constructor(id) {
+    this.id = id;
+  }
+  async execute({ db, providers }) {
+    await Database.UpdateBuilder.create().table("identity_provider").values({
+      disabled_at: providers.now()
+    }).where({
+      id: this.id
+    }).execute(db);
+  }
+}
+exports.DisableIdpCommand = DisableIdpCommand;
+//# sourceMappingURL=DisableIdpCommand.cjs.map

package/dist/production/src/model/commands/idp/DisableIdpCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"DisableIdpCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/idp/DisableIdpCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { UpdateBuilder } from '@contember/database'\n\nexport class DisableIdpCommand implements Command<void> {\n\tconstructor(\n\t\tprivate id: string,\n\t) {\n\t}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tawait UpdateBuilder.create()\n\t\t\t.table('identity_provider')\n\t\t\t.values({\n\t\t\t\tdisabled_at: providers.now(),\n\t\t\t})\n\t\t\t.where({\n\t\t\t\tid: this.id,\n\t\t\t})\n\t\t\t.execute(db)\n\t}\n}\n"],"names":["UpdateBuilder"],"mappings":";;;AAGO,MAAM,kBAA2C;AAAA,EACvD,YACS,IACP;AADO,SAAA,KAAA;AAAA,EAET;AAAA,EAEA,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAMA,SAAAA,cAAc,OAAA,EAClB,MAAM,mBAAmB,EACzB,OAAO;AAAA,MACP,aAAa,UAAU,IAAA;AAAA,IAAI,CAC3B,EACA,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,IAAA,CACT,EACA,QAAQ,EAAE;AAAA,EACb;AACD;;"}

package/dist/production/src/model/commands/idp/DisableIdpCommand.js

@@ -0,0 +1,17 @@
+import { UpdateBuilder as UpdateBuilder$1 } from "@contember/database";
+class DisableIdpCommand {
+  constructor(id) {
+    this.id = id;
+  }
+  async execute({ db, providers }) {
+    await UpdateBuilder$1.create().table("identity_provider").values({
+      disabled_at: providers.now()
+    }).where({
+      id: this.id
+    }).execute(db);
+  }
+}
+export {
+  DisableIdpCommand
+};
+//# sourceMappingURL=DisableIdpCommand.js.map

package/dist/production/src/model/commands/idp/DisableIdpCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DisableIdpCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/idp/DisableIdpCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { UpdateBuilder } from '@contember/database'\n\nexport class DisableIdpCommand implements Command<void> {\n\tconstructor(\n\t\tprivate id: string,\n\t) {\n\t}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tawait UpdateBuilder.create()\n\t\t\t.table('identity_provider')\n\t\t\t.values({\n\t\t\t\tdisabled_at: providers.now(),\n\t\t\t})\n\t\t\t.where({\n\t\t\t\tid: this.id,\n\t\t\t})\n\t\t\t.execute(db)\n\t}\n}\n"],"names":["UpdateBuilder"],"mappings":";AAGO,MAAM,kBAA2C;AAAA,EACvD,YACS,IACP;AADO,SAAA,KAAA;AAAA,EAET;AAAA,EAEA,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAMA,gBAAc,OAAA,EAClB,MAAM,mBAAmB,EACzB,OAAO;AAAA,MACP,aAAa,UAAU,IAAA;AAAA,IAAI,CAC3B,EACA,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,IAAA,CACT,EACA,QAAQ,EAAE;AAAA,EACb;AACD;"}

package/dist/production/src/model/commands/idp/EnableIdpCommand.cjs

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+class EnableIdpCommand {
+  constructor(id) {
+    this.id = id;
+  }
+  async execute({ db, providers }) {
+    await Database.UpdateBuilder.create().table("identity_provider").values({
+      disabled_at: null
+    }).where({
+      id: this.id
+    }).execute(db);
+  }
+}
+exports.EnableIdpCommand = EnableIdpCommand;
+//# sourceMappingURL=EnableIdpCommand.cjs.map

package/dist/production/src/model/commands/idp/EnableIdpCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"EnableIdpCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/idp/EnableIdpCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { UpdateBuilder } from '@contember/database'\n\nexport class EnableIdpCommand implements Command<void> {\n\tconstructor(\n\t\tprivate id: string,\n\t) {\n\t}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tawait UpdateBuilder.create()\n\t\t\t.table('identity_provider')\n\t\t\t.values({\n\t\t\t\tdisabled_at: null,\n\t\t\t})\n\t\t\t.where({\n\t\t\t\tid: this.id,\n\t\t\t})\n\t\t\t.execute(db)\n\t}\n}\n"],"names":["UpdateBuilder"],"mappings":";;;AAGO,MAAM,iBAA0C;AAAA,EACtD,YACS,IACP;AADO,SAAA,KAAA;AAAA,EAET;AAAA,EAEA,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAMA,SAAAA,cAAc,OAAA,EAClB,MAAM,mBAAmB,EACzB,OAAO;AAAA,MACP,aAAa;AAAA,IAAA,CACb,EACA,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,IAAA,CACT,EACA,QAAQ,EAAE;AAAA,EACb;AACD;;"}

package/dist/production/src/model/commands/idp/EnableIdpCommand.js

@@ -0,0 +1,17 @@
+import { UpdateBuilder as UpdateBuilder$1 } from "@contember/database";
+class EnableIdpCommand {
+  constructor(id) {
+    this.id = id;
+  }
+  async execute({ db, providers }) {
+    await UpdateBuilder$1.create().table("identity_provider").values({
+      disabled_at: null
+    }).where({
+      id: this.id
+    }).execute(db);
+  }
+}
+export {
+  EnableIdpCommand
+};
+//# sourceMappingURL=EnableIdpCommand.js.map

package/dist/production/src/model/commands/idp/EnableIdpCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EnableIdpCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/idp/EnableIdpCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { UpdateBuilder } from '@contember/database'\n\nexport class EnableIdpCommand implements Command<void> {\n\tconstructor(\n\t\tprivate id: string,\n\t) {\n\t}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tawait UpdateBuilder.create()\n\t\t\t.table('identity_provider')\n\t\t\t.values({\n\t\t\t\tdisabled_at: null,\n\t\t\t})\n\t\t\t.where({\n\t\t\t\tid: this.id,\n\t\t\t})\n\t\t\t.execute(db)\n\t}\n}\n"],"names":["UpdateBuilder"],"mappings":";AAGO,MAAM,iBAA0C;AAAA,EACtD,YACS,IACP;AADO,SAAA,KAAA;AAAA,EAET;AAAA,EAEA,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAMA,gBAAc,OAAA,EAClB,MAAM,mBAAmB,EACzB,OAAO;AAAA,MACP,aAAa;AAAA,IAAA,CACb,EACA,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,IAAA,CACT,EACA,QAAQ,EAAE;AAAA,EACb;AACD;"}

package/dist/production/src/model/commands/idp/UpdateIdpCommand.cjs

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+class UpdateIdpCommand {
+  constructor(id, data) {
+    this.id = id;
+    this.data = data;
+  }
+  async execute({ db }) {
+    const { configuration, options: { autoSignUp, exclusive, initReturnsConfig } = {} } = this.data;
+    await Database.UpdateBuilder.create().table("identity_provider").values({
+      configuration,
+      auto_sign_up: autoSignUp,
+      exclusive,
+      init_returns_config: initReturnsConfig
+    }).where({
+      id: this.id
+    }).execute(db);
+  }
+}
+exports.UpdateIdpCommand = UpdateIdpCommand;
+//# sourceMappingURL=UpdateIdpCommand.cjs.map