@contember/engine-tenant-api 2.1.0-alpha.37 → 2.1.0-alpha.39

package/dist/types/migrations/2023-01-20-135500-person-email-normalize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"2023-01-20-135500-person-email-normalize.d.ts","sourceRoot":"","sources":["../../../src/migrations/2023-01-20-135500-person-email-normalize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AAwBjE,yBAA8B,OAAO,EAAE,gBAAgB,iBAEtD"}

package/dist/types/migrations/2023-06-03-104000-person-disabled.d.ts

@@ -0,0 +1,3 @@
+import { MigrationBuilder } from '@contember/database-migrations';
+export default function (builder: MigrationBuilder): Promise<void>;
+//# sourceMappingURL=2023-06-03-104000-person-disabled.d.ts.map

package/dist/types/migrations/2023-06-03-104000-person-disabled.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"2023-06-03-104000-person-disabled.d.ts","sourceRoot":"","sources":["../../../src/migrations/2023-06-03-104000-person-disabled.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AAOjE,yBAA8B,OAAO,EAAE,gBAAgB,iBAEtD"}

package/dist/types/migrations/2023-09-01-165000-idp-return-config.d.ts

@@ -0,0 +1,3 @@
+import { MigrationBuilder } from '@contember/database-migrations';
+export default function (builder: MigrationBuilder): Promise<void>;
+//# sourceMappingURL=2023-09-01-165000-idp-return-config.d.ts.map

package/dist/types/migrations/2023-09-01-165000-idp-return-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"2023-09-01-165000-idp-return-config.d.ts","sourceRoot":"","sources":["../../../src/migrations/2023-09-01-165000-idp-return-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AAOjE,yBAA8B,OAAO,EAAE,gBAAgB,iBAEtD"}

package/dist/types/migrations/2024-06-20-140000-mail-reply.d.ts

@@ -0,0 +1,3 @@
+import { MigrationBuilder } from '@contember/database-migrations';
+export default function (builder: MigrationBuilder): Promise<void>;
+//# sourceMappingURL=2024-06-20-140000-mail-reply.d.ts.map

package/dist/types/migrations/2024-06-20-140000-mail-reply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"2024-06-20-140000-mail-reply.d.ts","sourceRoot":"","sources":["../../../src/migrations/2024-06-20-140000-mail-reply.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AAOjE,yBAA8B,OAAO,EAAE,gBAAgB,iBAEtD"}

package/dist/types/migrations/2024-08-26-120000-passwordless.d.ts

@@ -0,0 +1,3 @@
+import { MigrationBuilder } from '@contember/database-migrations';
+export default function (builder: MigrationBuilder): Promise<void>;
+//# sourceMappingURL=2024-08-26-120000-passwordless.d.ts.map

package/dist/types/migrations/2024-08-26-120000-passwordless.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"2024-08-26-120000-passwordless.d.ts","sourceRoot":"","sources":["../../../src/migrations/2024-08-26-120000-passwordless.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AA4BjE,yBAA8B,OAAO,EAAE,gBAAgB,iBAEtD"}

package/dist/types/migrations/2025-04-16-180000-config-up.d.ts

@@ -0,0 +1,3 @@
+import { MigrationBuilder } from '@contember/database-migrations';
+export default function (builder: MigrationBuilder): Promise<void>;
+//# sourceMappingURL=2025-04-16-180000-config-up.d.ts.map

package/dist/types/migrations/2025-04-16-180000-config-up.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"2025-04-16-180000-config-up.d.ts","sourceRoot":"","sources":["../../../src/migrations/2025-04-16-180000-config-up.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AAoCjE,yBAA8B,OAAO,EAAE,gBAAgB,iBAEtD"}

package/dist/types/migrations/2025-04-17-160000-auth-log.d.ts

@@ -0,0 +1,3 @@
+import { MigrationBuilder } from '@contember/database-migrations';
+export default function (builder: MigrationBuilder): Promise<void>;
+//# sourceMappingURL=2025-04-17-160000-auth-log.d.ts.map

package/dist/types/migrations/2025-04-17-160000-auth-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"2025-04-17-160000-auth-log.d.ts","sourceRoot":"","sources":["../../../src/migrations/2025-04-17-160000-auth-log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AA0CjE,yBAA8B,OAAO,EAAE,gBAAgB,iBAEtD"}

package/dist/types/migrations/index.d.ts

@@ -0,0 +1,3 @@
+export * from './types';
+export * from './runner';
+//# sourceMappingURL=index.d.ts.map

package/dist/types/migrations/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/migrations/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAA;AACvB,cAAc,UAAU,CAAA"}

package/dist/types/migrations/runner.d.ts

@@ -0,0 +1,21 @@
+import { DatabaseConfig } from '@contember/database';
+import { Providers } from '../model';
+import { Logger } from '@contember/logger';
+export interface TenantCredentials {
+    loginToken?: string;
+    rootEmail?: string;
+    rootToken?: string;
+    rootTokenHash?: string;
+    rootPassword?: string;
+}
+export declare class TenantMigrationsRunner {
+    private readonly db;
+    private readonly schema;
+    private readonly tenantCredentials;
+    private readonly providers;
+    constructor(db: DatabaseConfig, schema: string, tenantCredentials: TenantCredentials, providers: Pick<Providers, 'bcrypt' | 'uuid'>);
+    run(logger: Logger): Promise<{
+        name: string;
+    }[]>;
+}
+//# sourceMappingURL=runner.d.ts.map

package/dist/types/migrations/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../../src/migrations/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAyC,cAAc,EAAgB,MAAM,qBAAqB,CAAA;AA2CzG,OAAO,EAAoB,SAAS,EAAE,MAAM,UAAU,CAAA;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAE1C,MAAM,WAAW,iBAAiB;IACjC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,CAAA;CACrB;AA4CD,qBAAa,sBAAsB;IAEjC,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAHT,EAAE,EAAE,cAAc,EAClB,MAAM,EAAE,MAAM,EACd,iBAAiB,EAAE,iBAAiB,EACpC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,GAAG,MAAM,CAAC;IAIlD,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAqB7D"}

package/dist/types/migrations/snapshot-factory.d.ts

@@ -0,0 +1,5 @@
+import { MigrationArgs, MigrationBuilder } from '@contember/database-migrations';
+import { TenantMigrationArgs } from './types';
+declare const _default: (sqlFactory: () => string) => Promise<(builder: MigrationBuilder, args: MigrationArgs<TenantMigrationArgs>) => Promise<void>>;
+export default _default;
+//# sourceMappingURL=snapshot-factory.d.ts.map

package/dist/types/migrations/snapshot-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-factory.d.ts","sourceRoot":"","sources":["../../../src/migrations/snapshot-factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAA;yBAGvB,YAAY,MAAM,MAAM,uBACtB,gBAAgB,QAAQ,aAAa,CAAC,mBAAmB,CAAC;AADlF,wBAeC"}

package/dist/types/migrations/snapshot.d.ts

@@ -0,0 +1,4 @@
+import { MigrationBuilder } from '@contember/database-migrations';
+import { TenantMigrationArgs } from './types';
+export default function (builder: MigrationBuilder, args: TenantMigrationArgs): Promise<void>;
+//# sourceMappingURL=snapshot.d.ts.map

package/dist/types/migrations/snapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.d.ts","sourceRoot":"","sources":["../../../src/migrations/snapshot.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAA;AAG7C,yBAA8B,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,mBAAmB,iBA2RjF"}

package/dist/types/migrations/tenantCredentials.d.ts

@@ -0,0 +1,4 @@
+import { MigrationBuilder } from '@contember/database-migrations';
+import { TenantMigrationArgs } from './types';
+export declare const createCredentials: (builder: MigrationBuilder, args: TenantMigrationArgs) => Promise<void>;
+//# sourceMappingURL=tenantCredentials.d.ts.map

package/dist/types/migrations/tenantCredentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenantCredentials.d.ts","sourceRoot":"","sources":["../../../src/migrations/tenantCredentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAA;AAE7C,eAAO,MAAM,iBAAiB,GAAU,SAAS,gBAAgB,EAAE,MAAM,mBAAmB,kBAsD3F,CAAA"}

package/dist/types/migrations/types.d.ts

@@ -0,0 +1,11 @@
+import { Providers } from '../model';
+export interface TenantMigrationArgs {
+    getCredentials: () => Promise<{
+        loginTokenHash?: string;
+        rootEmail?: string;
+        rootTokenHash?: string;
+        rootPasswordBcrypted?: string;
+    }>;
+    providers: Pick<Providers, 'uuid'>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types/migrations/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/migrations/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AAEpC,MAAM,WAAW,mBAAmB;IACnC,cAAc,EAAE,MAAM,OAAO,CAAC;QAC7B,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,oBAAoB,CAAC,EAAE,MAAM,CAAA;KAC7B,CAAC,CAAA;IACF,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;CAClC"}

package/dist/types/model/authorization/AclSchemaAccessNodeFactory.d.ts

@@ -0,0 +1,6 @@
+import { AccessNode } from '@contember/authorization';
+import { Acl } from '@contember/schema';
+export declare class AclSchemaAccessNodeFactory {
+    create(schema: Acl.Schema, memberships: readonly Acl.Membership[]): AccessNode;
+}
+//# sourceMappingURL=AclSchemaAccessNodeFactory.d.ts.map

package/dist/types/model/authorization/AclSchemaAccessNodeFactory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AclSchemaAccessNodeFactory.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/AclSchemaAccessNodeFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAErD,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AAIvC,qBAAa,0BAA0B;IACtC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,GAAG,CAAC,UAAU,EAAE,GAAG,UAAU;CAwC9E"}

package/dist/types/model/authorization/DirectPermissionsAccessNode.d.ts

@@ -0,0 +1,7 @@
+import { AccessEvaluator, AccessNode, Authorizator } from '@contember/authorization';
+export declare class DirectPermissionsAccessNode implements AccessNode {
+    private permissions;
+    allow<Meta extends {} | undefined = undefined>({ resource, privilege }: Authorizator.Action<Meta>, verifier?: (meta: Meta) => boolean): void;
+    isAllowed(accessEvaluator: AccessEvaluator, { resource, meta, privilege }: Authorizator.Action): Promise<boolean>;
+}
+//# sourceMappingURL=DirectPermissionsAccessNode.d.ts.map

package/dist/types/model/authorization/DirectPermissionsAccessNode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DirectPermissionsAccessNode.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/DirectPermissionsAccessNode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAQpF,qBAAa,2BAA4B,YAAW,UAAU;IAC7D,OAAO,CAAC,WAAW,CAAqB;IAEjC,KAAK,CAAC,IAAI,SAAS,EAAE,GAAG,SAAS,GAAG,SAAS,EACnD,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,EAClD,QAAQ,GAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAoB;IAM/C,SAAS,CAAC,eAAe,EAAE,eAAe,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,YAAY,CAAC,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAGjH"}

package/dist/types/model/authorization/Identity.d.ts

@@ -0,0 +1,25 @@
+import { ProjectMemberManager } from '../service';
+import { DatabaseContext } from '../utils';
+import { Acl } from '@contember/schema';
+export interface Identity {
+    readonly id: string;
+    readonly roles: readonly string[];
+    getProjectMemberships(projectSlug: string): Promise<readonly Acl.Membership[]>;
+}
+export declare class StaticIdentity implements Identity {
+    readonly id: string;
+    readonly roles: string[];
+    private projectMemberships;
+    constructor(id: string, roles: string[], projectMemberships?: Record<string, readonly Acl.Membership[]>);
+    getProjectMemberships(projectSlug: string): Promise<readonly Acl.Membership[]>;
+}
+export declare class ProjectAwareIdentity implements Identity {
+    readonly id: string;
+    readonly roles: readonly string[];
+    private readonly dbContext;
+    private readonly memberManager;
+    private projectMembershipCache;
+    constructor(id: string, roles: readonly string[], dbContext: DatabaseContext, memberManager: ProjectMemberManager);
+    getProjectMemberships(projectSlug: string): Promise<readonly Acl.Membership[]>;
+}
+//# sourceMappingURL=Identity.d.ts.map

package/dist/types/model/authorization/Identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Identity.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/Identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAC1C,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AAEvC,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IAEjC,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,CAAC,UAAU,EAAE,CAAC,CAAA;CAC9E;AAED,qBAAa,cAAe,YAAW,QAAQ;aAE7B,EAAE,EAAE,MAAM;aACV,KAAK,EAAE,MAAM,EAAE;IAC/B,OAAO,CAAC,kBAAkB;gBAFV,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EAAE,EACvB,kBAAkB,GAAE,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,CAAC,UAAU,EAAE,CAAM;IAG3E,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,CAAC,UAAU,EAAE,CAAC;CAG9E;AAED,qBAAa,oBAAqB,YAAW,QAAQ;aAInC,EAAE,EAAE,MAAM;aACV,KAAK,EAAE,SAAS,MAAM,EAAE;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAN/B,OAAO,CAAC,sBAAsB,CAAyD;gBAGtE,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,SAAS,MAAM,EAAE,EACvB,SAAS,EAAE,eAAe,EAC1B,aAAa,EAAE,oBAAoB;IAG/C,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,CAAC,UAAU,EAAE,CAAC;CAIpF"}

package/dist/types/model/authorization/IdentityFactory.d.ts

@@ -0,0 +1,12 @@
+import { ProjectMemberManager } from '../service';
+import { Identity } from './Identity';
+import { DatabaseContext } from '../utils';
+export declare class IdentityFactory {
+    private readonly projectMemberManager;
+    constructor(projectMemberManager: ProjectMemberManager);
+    create(dbContext: DatabaseContext, args: {
+        id: string;
+        roles: readonly string[];
+    }): Identity;
+}
+//# sourceMappingURL=IdentityFactory.d.ts.map

package/dist/types/model/authorization/IdentityFactory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdentityFactory.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/IdentityFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AACjD,OAAO,EAAE,QAAQ,EAAwB,MAAM,YAAY,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAE1C,qBAAa,eAAe;IACf,OAAO,CAAC,QAAQ,CAAC,oBAAoB;gBAApB,oBAAoB,EAAE,oBAAoB;IAEhE,MAAM,CAAC,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,GAAG,QAAQ;CAGnG"}

package/dist/types/model/authorization/IdentityScope.d.ts

@@ -0,0 +1,9 @@
+import { AccessNode, AuthorizationScope } from '@contember/authorization';
+import { Identity } from './Identity';
+declare class IdentityScope implements AuthorizationScope<Identity> {
+    private readonly identityId;
+    constructor(identityId: string);
+    getIdentityAccess(identity: Identity): Promise<AccessNode>;
+}
+export { IdentityScope };
+//# sourceMappingURL=IdentityScope.d.ts.map

package/dist/types/model/authorization/IdentityScope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdentityScope.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/IdentityScope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAEzE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAErC,cAAM,aAAc,YAAW,kBAAkB,CAAC,QAAQ,CAAC;IAC9C,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,EAAE,MAAM;IAEzC,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC;CAGhE;AAED,OAAO,EAAE,aAAa,EAAE,CAAA"}

package/dist/types/model/authorization/MembershipMatcher.d.ts

@@ -0,0 +1,10 @@
+import { Acl } from '@contember/schema';
+export type MembershipWithSubMembershipMatchRules = Acl.Membership & {
+    matchRule: Acl.MembershipMatchRule;
+};
+export declare class MembershipMatcher {
+    private readonly memberships;
+    constructor(memberships: readonly MembershipWithSubMembershipMatchRules[]);
+    matches(membership: Acl.Membership): boolean;
+}
+//# sourceMappingURL=MembershipMatcher.d.ts.map

package/dist/types/model/authorization/MembershipMatcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MembershipMatcher.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/MembershipMatcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AAEvC,MAAM,MAAM,qCAAqC,GAC9C,GAAG,CAAC,UAAU,GACd;IACD,SAAS,EAAE,GAAG,CAAC,mBAAmB,CAAA;CAClC,CAAA;AAEF,qBAAa,iBAAiB;IACjB,OAAO,CAAC,QAAQ,CAAC,WAAW;gBAAX,WAAW,EAAE,SAAS,qCAAqC,EAAE;IAG1F,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,GAAG,OAAO;CAoC5C"}

package/dist/types/model/authorization/PermissionActions.d.ts

@@ -0,0 +1,264 @@
+import { Authorizator } from '@contember/authorization';
+import { Acl } from '@contember/schema';
+declare namespace PermissionActions {
+    enum Resources {
+        system = "system",
+        entrypoint = "entrypoint",
+        person = "person",
+        identity = "identity",
+        project = "project",
+        apiKey = "apiKey",
+        mailTemplate = "mailTemplate",
+        idp = "idp"
+    }
+    const CONFIGURE: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const CONFIG_VIEW: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const IDENTITY_VIEW_PERMISSIONS: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const IDENTITY_ADD_GLOBAL_ROLES: (roles?: readonly string[]) => {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta: {
+            roles: readonly string[] | undefined;
+        };
+    };
+    const IDENTITY_REMOVE_GLOBAL_ROLES: (roles?: readonly string[]) => {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta: {
+            roles: readonly string[] | undefined;
+        };
+    };
+    const PERSON_DISABLE: (roles?: readonly string[]) => {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta: {
+            roles: readonly string[] | undefined;
+        };
+    };
+    const PERSON_VIEW: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const PERSON_SIGN_IN: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const PERSON_SIGN_UP: (roles?: readonly string[]) => {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta: {
+            roles: readonly string[] | undefined;
+        };
+    };
+    const PERSON_SIGN_OUT: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const PERSON_SETUP_OTP: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const PERSON_CHANGE_PROFILE: (roles?: readonly string[]) => {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta: {
+            roles: readonly string[] | undefined;
+        };
+    };
+    const PERSON_CHANGE_MY_PROFILE: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const PERSON_TOGGLE_PASSWORDLESS: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const PERSON_CHANGE_PASSWORD: (roles?: readonly string[]) => {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta: {
+            roles: readonly string[] | undefined;
+        };
+    };
+    const PERSON_CHANGE_MY_PASSWORD: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const PERSON_RESET_PASSWORD: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const PERSON_CREATE_IDP_URL: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const PERSON_SIGN_IN_IDP: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const PERSON_REQUEST_PASSWORDLESS_SIGN_IN: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const PERSON_PASSWORDLESS_SIGN_IN: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const PERSON_CREATE_SESSION_KEY: (roles?: readonly string[]) => {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta: {
+            roles: readonly string[] | undefined;
+        };
+    };
+    const PERSON_INVITE: (memberships: readonly Acl.Membership[]) => {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta: {
+            memberships: readonly Acl.Membership[];
+        };
+    };
+    const PERSON_INVITE_UNMANAGED: (memberships: readonly Acl.Membership[]) => {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta: {
+            memberships: readonly Acl.Membership[];
+        };
+    };
+    const PROJECT_VIEW: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const PROJECT_SET_SECRET: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const PROJECT_UPDATE: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const PROJECT_CREATE: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const ENTRYPOINT_DEPLOY: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const PROJECT_VIEW_MEMBER: (memberships: readonly Acl.Membership[]) => {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta: {
+            memberships: readonly Acl.Membership[];
+        };
+    };
+    const PROJECT_ADD_MEMBER: (memberships: readonly Acl.Membership[]) => {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta: {
+            memberships: readonly Acl.Membership[];
+        };
+    };
+    const PROJECT_REMOVE_MEMBER: (memberships: readonly Acl.Membership[]) => {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta: {
+            memberships: readonly Acl.Membership[];
+        };
+    };
+    const PROJECT_UPDATE_MEMBER: (memberships: readonly Acl.Membership[]) => {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta: {
+            memberships: readonly Acl.Membership[];
+        };
+    };
+    const API_KEY_CREATE: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const API_KEY_CREATE_GLOBAL: (roles?: readonly string[]) => {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta: {
+            roles: readonly string[] | undefined;
+        };
+    };
+    const API_KEY_DISABLE: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const MAIL_TEMPLATE_ADD: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const MAIL_TEMPLATE_REMOVE: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const MAIL_TEMPLATE_LIST: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const IDP_ADD: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const IDP_UPDATE: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const IDP_DISABLE: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const IDP_ENABLE: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const IDP_LIST: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+}
+export { PermissionActions };
+//# sourceMappingURL=PermissionActions.d.ts.map

package/dist/types/model/authorization/PermissionActions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionActions.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/PermissionActions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AAEvC,kBAAU,iBAAiB,CAAC;IAC3B,KAAY,SAAS;QACpB,MAAM,WAAW;QACjB,UAAU,eAAe;QACzB,MAAM,WAAW;QACjB,QAAQ,aAAa;QACrB,OAAO,YAAY;QACnB,MAAM,WAAW;QACjB,YAAY,iBAAiB;QAC7B,GAAG,QAAQ;KACX;IAEM,MAAM,SAAS;;;;KAA2D,CAAA;IAC1E,MAAM,WAAW;;;;KAA4D,CAAA;IAE7E,MAAM,yBAAyB;;;;KAAmE,CAAA;IAClG,MAAM,yBAAyB,GAAI,QAAQ,SAAS,MAAM,EAAE;;;;;;KAA+E,CAAA;IAC3I,MAAM,4BAA4B,GAAI,QAAQ,SAAS,MAAM,EAAE;;;;;;KACQ,CAAA;IAEvE,MAAM,cAAc,GAAI,QAAQ,SAAS,MAAM,EAAE;;;;;;KAAsE,CAAA;IAEvH,MAAM,WAAW;;;;KAAsD,CAAA;IACvE,MAAM,cAAc;;;;KAAwD,CAAA;IAC5E,MAAM,cAAc,GAAI,QAAQ,SAAS,MAAM,EAAE;;;;;;KAAqE,CAAA;IACtH,MAAM,eAAe;;;;KAAyD,CAAA;IAC9E,MAAM,gBAAgB;;;;KAA0D,CAAA;IAChF,MAAM,qBAAqB,GAAI,QAAQ,SAAS,MAAM,EAAE;;;;;;KAA4E,CAAA;IACpI,MAAM,wBAAwB;;;;KAAiE,CAAA;IAC/F,MAAM,0BAA0B;;;;KAAoE,CAAA;IACpG,MAAM,sBAAsB,GAAI,QAAQ,SAAS,MAAM,EAAE;;;;;;KAA6E,CAAA;IACtI,MAAM,yBAAyB;;;;KAAkE,CAAA;IACjG,MAAM,qBAAqB;;;;KAA+D,CAAA;IAC1F,MAAM,qBAAqB;;;;KAA8D,CAAA;IACzF,MAAM,kBAAkB;;;;KAA2D,CAAA;IACnF,MAAM,mCAAmC;;;;KAA2E,CAAA;IACpH,MAAM,2BAA2B;;;;KAAoE,CAAA;IACrG,MAAM,yBAAyB,GAAI,QAAQ,SAAS,MAAM,EAAE;;;;;;KAAiF,CAAA;IAE7I,MAAM,aAAa,GAAI,aAAa,SAAS,GAAG,CAAC,UAAU,EAAE;;;;;;KAA2E,CAAA;IACxI,MAAM,uBAAuB,GAAI,aAAa,SAAS,GAAG,CAAC,UAAU,EAAE;;;;;;KACG,CAAA;IAE1E,MAAM,YAAY;;;;KAAuD,CAAA;IACzE,MAAM,kBAAkB;;;;KAA4D,CAAA;IACpF,MAAM,cAAc;;;;KAAyD,CAAA;IAE7E,MAAM,cAAc;;;;KAAyD,CAAA;IAC7E,MAAM,iBAAiB;;;;KAAsE,CAAA;IAE7F,MAAM,mBAAmB,GAAI,aAAa,SAAS,GAAG,CAAC,UAAU,EAAE;;;;;;KACG,CAAA;IACtE,MAAM,kBAAkB,GAAI,aAAa,SAAS,GAAG,CAAC,UAAU,EAAE;;;;;;KACE,CAAA;IACpE,MAAM,qBAAqB,GAAI,aAAa,SAAS,GAAG,CAAC,UAAU,EAAE;;;;;;KACE,CAAA;IACvE,MAAM,qBAAqB,GAAI,aAAa,SAAS,GAAG,CAAC,UAAU,EAAE;;;;;;KACE,CAAA;IAEvE,MAAM,cAAc;;;;KAAwD,CAAA;IAC5E,MAAM,qBAAqB,GAAI,QAAQ,SAAS,MAAM,EAAE;;;;;;KAA2E,CAAA;IACnI,MAAM,eAAe;;;;KAAyD,CAAA;IAE9E,MAAM,iBAAiB;;;;KAA2D,CAAA;IAClF,MAAM,oBAAoB;;;;KAA8D,CAAA;IACxF,MAAM,kBAAkB;;;;KAA4D,CAAA;IAEpF,MAAM,OAAO;;;;KAAkD,CAAA;IAC/D,MAAM,UAAU;;;;KAAqD,CAAA;IACrE,MAAM,WAAW;;;;KAAsD,CAAA;IACvE,MAAM,UAAU;;;;KAAqD,CAAA;IACrE,MAAM,QAAQ;;;;KAAmD,CAAA;CACxE;AAED,OAAO,EAAE,iBAAiB,EAAE,CAAA"}

package/dist/types/model/authorization/PermissionContext.d.ts

@@ -0,0 +1,25 @@
+import { AuthorizationScope, Authorizator } from '@contember/authorization';
+import { ProjectScopeFactory } from './ProjectScopeFactory';
+import { Project, ProjectSchemaResolver } from '../type';
+import { Identity } from './Identity';
+export type AccessVerifier = (action: Authorizator.Action) => Promise<boolean>;
+export declare class PermissionContext {
+    readonly identity: Identity;
+    readonly authorizator: Authorizator<Identity>;
+    private readonly projectScopeFactory;
+    private readonly schemaResolver;
+    private projectScopes;
+    constructor(identity: Identity, authorizator: Authorizator<Identity>, projectScopeFactory: ProjectScopeFactory, schemaResolver: ProjectSchemaResolver);
+    isAllowed<Meta extends {} | undefined>({ scope, action, }: {
+        scope?: AuthorizationScope<Identity>;
+        action: Authorizator.Action<Meta>;
+    }): Promise<boolean>;
+    createAccessVerifier(scope: AuthorizationScope<Identity>): AccessVerifier;
+    requireAccess<Meta extends {} | undefined>({ scope, action, message, }: {
+        scope?: AuthorizationScope<Identity>;
+        action: Authorizator.Action<Meta>;
+        message?: string;
+    }): Promise<void>;
+    createProjectScope(project: Pick<Project, 'slug'> | null): Promise<AuthorizationScope<Identity>>;
+}
+//# sourceMappingURL=PermissionContext.d.ts.map

package/dist/types/model/authorization/PermissionContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionContext.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/PermissionContext.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,kBAAkB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAEvF,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAA;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAErC,MAAM,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AAI9E,qBAAa,iBAAiB;aAIZ,QAAQ,EAAE,QAAQ;aAClB,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC;IACpD,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,cAAc;IANhC,OAAO,CAAC,aAAa,CAAmD;gBAGvD,QAAQ,EAAE,QAAQ,EAClB,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC,EACnC,mBAAmB,EAAE,mBAAmB,EACxC,cAAc,EAAE,qBAAqB;IAG1C,SAAS,CAAC,IAAI,SAAS,EAAE,GAAG,SAAS,EAAE,EACnD,KAAK,EACL,MAAM,GACN,EAAE;QACF,KAAK,CAAC,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAA;QACpC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;KACjC,GAAG,OAAO,CAAC,OAAO,CAAC;IAIb,oBAAoB,CAAC,KAAK,EAAE,kBAAkB,CAAC,QAAQ,CAAC,GAAG,cAAc;IAInE,aAAa,CAAC,IAAI,SAAS,EAAE,GAAG,SAAS,EAAE,EACvD,KAAK,EACL,MAAM,EACN,OAAO,GACP,EAAE;QACF,KAAK,CAAC,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAA;QACpC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACjC,OAAO,CAAC,EAAE,MAAM,CAAA;KAChB,GAAG,OAAO,CAAC,IAAI,CAAC;IAMJ,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,IAAI,GAAG,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;CAS7G"}

package/dist/types/model/authorization/PermissionContextFactory.d.ts

@@ -0,0 +1,18 @@
+import { Authorizator } from '@contember/authorization';
+import { IdentityFactory } from './IdentityFactory';
+import { PermissionContext } from './PermissionContext';
+import { ProjectScopeFactory } from './ProjectScopeFactory';
+import { ProjectSchemaResolver } from '../type';
+import { DatabaseContext } from '../utils';
+export declare class PermissionContextFactory {
+    private readonly authorizator;
+    private readonly identityFactory;
+    private readonly projectScopeFactory;
+    private readonly schemaResolver;
+    constructor(authorizator: Authorizator, identityFactory: IdentityFactory, projectScopeFactory: ProjectScopeFactory, schemaResolver: ProjectSchemaResolver);
+    create(db: DatabaseContext, args: {
+        id: string;
+        roles: readonly string[];
+    }): PermissionContext;
+}
+//# sourceMappingURL=PermissionContextFactory.d.ts.map

package/dist/types/model/authorization/PermissionContextFactory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionContextFactory.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/PermissionContextFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAA;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAE1C,qBAAa,wBAAwB;IAEnC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,cAAc;gBAHd,YAAY,EAAE,YAAY,EAC1B,eAAe,EAAE,eAAe,EAChC,mBAAmB,EAAE,mBAAmB,EACxC,cAAc,EAAE,qBAAqB;IAGhD,MAAM,CAAC,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,GAAG,iBAAiB;CAIrG"}

package/dist/types/model/authorization/PermissionsFactory.d.ts

@@ -0,0 +1,6 @@
+import { Permissions } from '@contember/authorization';
+declare class PermissionsFactory {
+    create(): Permissions;
+}
+export { PermissionsFactory };
+//# sourceMappingURL=PermissionsFactory.d.ts.map

package/dist/types/model/authorization/PermissionsFactory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionsFactory.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/PermissionsFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AAgBtD,cAAM,kBAAkB;IAChB,MAAM,IAAI,WAAW;CA+D5B;AAED,OAAO,EAAE,kBAAkB,EAAE,CAAA"}

package/dist/types/model/authorization/ProjectScope.d.ts

@@ -0,0 +1,13 @@
+import { AccessNode, AuthorizationScope } from '@contember/authorization';
+import { Project } from '../type';
+import { Acl } from '@contember/schema';
+import { AclSchemaAccessNodeFactory } from './AclSchemaAccessNodeFactory';
+import { Identity } from './Identity';
+export declare class ProjectScope implements AuthorizationScope<Identity> {
+    private readonly project;
+    private readonly aclSchema;
+    private readonly aclSchemaAccessNodeFactory;
+    constructor(project: Pick<Project, 'slug'>, aclSchema: Acl.Schema, aclSchemaAccessNodeFactory: AclSchemaAccessNodeFactory);
+    getIdentityAccess(identity: Identity): Promise<AccessNode>;
+}
+//# sourceMappingURL=ProjectScope.d.ts.map

package/dist/types/model/authorization/ProjectScope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProjectScope.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/ProjectScope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AACzE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAEjC,OAAO,EAAE,GAAG,EAAe,MAAM,mBAAmB,CAAA;AACpD,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAA;AACzE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAErC,qBAAa,YAAa,YAAW,kBAAkB,CAAC,QAAQ,CAAC;IAE/D,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,0BAA0B;gBAF1B,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAC9B,SAAS,EAAE,GAAG,CAAC,MAAM,EACrB,0BAA0B,EAAE,0BAA0B;IAGlE,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC;CAgBhE"}

package/dist/types/model/authorization/ProjectScopeFactory.d.ts

@@ -0,0 +1,10 @@
+import { Project, ProjectSchemaResolver } from '../type';
+import { AclSchemaAccessNodeFactory } from './AclSchemaAccessNodeFactory';
+import { AuthorizationScope } from '@contember/authorization';
+import { Identity } from './Identity';
+export declare class ProjectScopeFactory {
+    private readonly schemaAccessNodeFactory;
+    constructor(schemaAccessNodeFactory: AclSchemaAccessNodeFactory);
+    create(schemaResolver: ProjectSchemaResolver, project: Pick<Project, 'slug'>): Promise<AuthorizationScope<Identity> | null>;
+}
+//# sourceMappingURL=ProjectScopeFactory.d.ts.map

package/dist/types/model/authorization/ProjectScopeFactory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProjectScopeFactory.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/ProjectScopeFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAA;AACxD,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAA;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAE7D,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAErC,qBAAa,mBAAmB;IAE9B,OAAO,CAAC,QAAQ,CAAC,uBAAuB;gBAAvB,uBAAuB,EAAE,0BAA0B;IAG/D,MAAM,CAAC,cAAc,EAAE,qBAAqB,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;CAOjI"}

package/dist/types/model/authorization/Roles.d.ts

@@ -0,0 +1,11 @@
+export declare enum TenantRole {
+    LOGIN = "login",
+    SELF = "self",
+    PERSON = "person",
+    SUPER_ADMIN = "super_admin",
+    PROJECT_CREATOR = "project_creator",
+    PROJECT_MEMBER = "project_member",
+    PROJECT_ADMIN = "project_admin",
+    ENTRYPOINT_DEPLOYER = "entrypoint_deployer"
+}
+//# sourceMappingURL=Roles.d.ts.map