@contember/engine-tenant-api 2.1.0-alpha.8 → 2.1.0-beta.1

package/dist/production/src/model/service/idp/providers/OIDCHelpers.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"OIDCHelpers.cjs","sources":["../../../../../../../../packages/engine-tenant-api/src/model/service/idp/providers/OIDCHelpers.ts"],"sourcesContent":["import { Client, custom, errors, generators } from 'openid-client'\nimport { OIDCResponseData } from './OIDCTypes'\nimport { IDPValidationError } from '../IDPValidationError'\nimport { IDPResponseError } from '../IDPResponseError'\nimport { IDPResponse, InitIDPAuthResult } from '../IdentityProviderHandler'\n\nexport const initOIDCAuth = async (client: Client, { redirectUrl, scope, responseMode }: { redirectUrl: string; scope?: string; responseMode?: string }): Promise<InitIDPAuthResult> => {\n\tconst nonce = generators.nonce()\n\tconst state = generators.state()\n\tconst url = client.authorizationUrl({\n\t\tredirect_uri: redirectUrl,\n\t\tresponse_mode: responseMode,\n\t\tscope: scope ?? 'openid email',\n\t\tnonce,\n\t\tstate,\n\t})\n\n\treturn {\n\t\tauthUrl: url,\n\t\tsessionData: { nonce, state },\n\t}\n}\n\nexport const handleOIDCResponse = async (client: Client, { sessionData, redirectUrl, ...otherData }: OIDCResponseData, fetchUserInfo?: boolean, returnOIDCResult?: boolean): Promise<IDPResponse> => {\n\tconst params = 'parameters' in otherData ? otherData.parameters : client.callbackParams(otherData.url)\n\tif (params.state && !sessionData?.state) {\n\t\tthrow new IDPValidationError(`state is present in parameters, but missing in session data`)\n\t}\n\ttry {\n\t\tconst result = await client.callback(redirectUrl, params, sessionData)\n\t\tconst claims = result.claims()\n\t\tconst { at_hash, c_hash, nonce, ...claimsWithoutHashes } = claims\n\t\tconst userInfo = result.access_token && fetchUserInfo ? await client.userinfo(result) : {}\n\t\tconst oidcResult = returnOIDCResult ? result : {}\n\n\t\treturn {\n\t\t\texternalIdentifier: claims.sub,\n\t\t\t...oidcResult,\n\t\t\t...claimsWithoutHashes,\n\t\t\t...userInfo,\n\t\t}\n\t} catch (e: any) {\n\t\tif (e instanceof errors.RPError) {\n\t\t\tthrow new IDPValidationError(e.message)\n\t\t}\n\t\tif (e instanceof errors.OPError) {\n\t\t\tconst body = e.response?.body as any\n\t\t\tif (typeof body === 'object' && typeof body?.error === 'object' && typeof body.error?.message === 'string') {\n\t\t\t\tthrow new IDPResponseError(body.error.message)\n\t\t\t}\n\t\t\tthrow new IDPResponseError(e.message)\n\t\t}\n\t\tthrow e\n\t}\n}\n"],"names":["generators","IDPValidationError","errors","IDPResponseError"],"mappings":";;;;;AAMO,MAAM,eAAe,OAAO,QAAgB,EAAE,aAAa,OAAO,mBAA+G;AACjL,QAAA,QAAQA,wBAAW,MAAM;AACzB,QAAA,QAAQA,wBAAW,MAAM;AACzB,QAAA,MAAM,OAAO,iBAAiB;AAAA,IACnC,cAAc;AAAA,IACd,eAAe;AAAA,IACf,OAAO,SAAS;AAAA,IAChB;AAAA,IACA;AAAA,EAAA,CACA;AAEM,SAAA;AAAA,IACN,SAAS;AAAA,IACT,aAAa,EAAE,OAAO,MAAM;AAAA,EAC7B;AACD;AAEa,MAAA,qBAAqB,OAAO,QAAgB,EAAE,aAAa,aAAa,GAAG,UAAA,GAA+B,eAAyB,qBAAqD;AAC9L,QAAA,SAAS,gBAAgB,YAAY,UAAU,aAAa,OAAO,eAAe,UAAU,GAAG;AACrG,MAAI,OAAO,SAAS,CAAC,aAAa,OAAO;AAClC,UAAA,IAAIC,mBAAAA,mBAAmB,6DAA6D;AAAA,EAAA;AAEvF,MAAA;AACH,UAAM,SAAS,MAAM,OAAO,SAAS,aAAa,QAAQ,WAAW;AAC/D,UAAA,SAAS,OAAO,OAAO;AAC7B,UAAM,EAAE,SAAS,QAAQ,OAAO,GAAG,oBAAwB,IAAA;AACrD,UAAA,WAAW,OAAO,gBAAgB,gBAAgB,MAAM,OAAO,SAAS,MAAM,IAAI,CAAC;AACnF,UAAA,aAAa,mBAAmB,SAAS,CAAC;AAEzC,WAAA;AAAA,MACN,oBAAoB,OAAO;AAAA,MAC3B,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,IACJ;AAAA,WACQ,GAAQ;AACZ,QAAA,aAAaC,oBAAO,SAAS;AAC1B,YAAA,IAAID,mBAAAA,mBAAmB,EAAE,OAAO;AAAA,IAAA;AAEnC,QAAA,aAAaC,oBAAO,SAAS;AAC1B,YAAA,OAAO,EAAE,UAAU;AACrB,UAAA,OAAO,SAAS,YAAY,OAAO,MAAM,UAAU,YAAY,OAAO,KAAK,OAAO,YAAY,UAAU;AAC3G,cAAM,IAAIC,iBAAA,iBAAiB,KAAK,MAAM,OAAO;AAAA,MAAA;AAExC,YAAA,IAAIA,iBAAAA,iBAAiB,EAAE,OAAO;AAAA,IAAA;AAE/B,UAAA;AAAA,EAAA;AAER;;;"}
+{"version":3,"file":"OIDCHelpers.cjs","sources":["../../../../../../../../packages/engine-tenant-api/src/model/service/idp/providers/OIDCHelpers.ts"],"sourcesContent":["import { Client, custom, errors, generators } from 'openid-client'\nimport { OIDCResponseData } from './OIDCTypes'\nimport { IDPValidationError } from '../IDPValidationError'\nimport { IDPResponseError } from '../IDPResponseError'\nimport { IDPResponse, InitIDPAuthResult } from '../IdentityProviderHandler'\n\nexport const initOIDCAuth = async (\n\tclient: Client,\n\t{ redirectUrl, scope, responseMode }: { redirectUrl: string; scope?: string; responseMode?: string },\n): Promise<InitIDPAuthResult> => {\n\tconst nonce = generators.nonce()\n\tconst state = generators.state()\n\tconst url = client.authorizationUrl({\n\t\tredirect_uri: redirectUrl,\n\t\tresponse_mode: responseMode,\n\t\tscope: scope ?? 'openid email',\n\t\tnonce,\n\t\tstate,\n\t})\n\n\treturn {\n\t\tauthUrl: url,\n\t\tsessionData: { nonce, state },\n\t}\n}\n\nexport const handleOIDCResponse = async (\n\tclient: Client,\n\t{ sessionData, redirectUrl, ...otherData }: OIDCResponseData,\n\tfetchUserInfo?: boolean,\n\treturnOIDCResult?: boolean,\n): Promise<IDPResponse> => {\n\tconst params = 'parameters' in otherData ? otherData.parameters : client.callbackParams(otherData.url)\n\tif (params.state && !sessionData?.state) {\n\t\tthrow new IDPValidationError(`state is present in parameters, but missing in session data`)\n\t}\n\ttry {\n\t\tconst result = await client.callback(redirectUrl, params, sessionData)\n\t\tconst claims = result.claims()\n\t\tconst { at_hash, c_hash, nonce, ...claimsWithoutHashes } = claims\n\t\tconst userInfo = result.access_token && fetchUserInfo ? await client.userinfo(result) : {}\n\t\tconst oidcResult = returnOIDCResult ? result : {}\n\n\t\treturn {\n\t\t\texternalIdentifier: claims.sub,\n\t\t\t...oidcResult,\n\t\t\t...claimsWithoutHashes,\n\t\t\t...userInfo,\n\t\t}\n\t} catch (e: any) {\n\t\tif (e instanceof errors.RPError) {\n\t\t\tthrow new IDPValidationError(e.message)\n\t\t}\n\t\tif (e instanceof errors.OPError) {\n\t\t\tconst body = e.response?.body as any\n\t\t\tif (typeof body === 'object' && typeof body?.error === 'object' && typeof body.error?.message === 'string') {\n\t\t\t\tthrow new IDPResponseError(body.error.message)\n\t\t\t}\n\t\t\tthrow new IDPResponseError(e.message)\n\t\t}\n\t\tthrow e\n\t}\n}\n"],"names":["generators","IDPValidationError","errors","IDPResponseError"],"mappings":";;;;;AAMO,MAAM,eAAe,OAC3B,QACA,EAAE,aAAa,OAAO,mBACU;AAChC,QAAM,QAAQA,aAAAA,WAAW,MAAA;AACzB,QAAM,QAAQA,aAAAA,WAAW,MAAA;AACzB,QAAM,MAAM,OAAO,iBAAiB;AAAA,IACnC,cAAc;AAAA,IACd,eAAe;AAAA,IACf,OAAO,SAAS;AAAA,IAChB;AAAA,IACA;AAAA,EAAA,CACA;AAED,SAAO;AAAA,IACN,SAAS;AAAA,IACT,aAAa,EAAE,OAAO,MAAA;AAAA,EAAM;AAE9B;AAEO,MAAM,qBAAqB,OACjC,QACA,EAAE,aAAa,aAAa,GAAG,UAAA,GAC/B,eACA,qBAC0B;AAC1B,QAAM,SAAS,gBAAgB,YAAY,UAAU,aAAa,OAAO,eAAe,UAAU,GAAG;AACrG,MAAI,OAAO,SAAS,CAAC,aAAa,OAAO;AACxC,UAAM,IAAIC,mBAAAA,mBAAmB,6DAA6D;AAAA,EAC3F;AACA,MAAI;AACH,UAAM,SAAS,MAAM,OAAO,SAAS,aAAa,QAAQ,WAAW;AACrE,UAAM,SAAS,OAAO,OAAA;AACtB,UAAM,EAAE,SAAS,QAAQ,OAAO,GAAG,wBAAwB;AAC3D,UAAM,WAAW,OAAO,gBAAgB,gBAAgB,MAAM,OAAO,SAAS,MAAM,IAAI,CAAA;AACxF,UAAM,aAAa,mBAAmB,SAAS,CAAA;AAE/C,WAAO;AAAA,MACN,oBAAoB,OAAO;AAAA,MAC3B,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,IAAA;AAAA,EAEL,SAAS,GAAQ;AAChB,QAAI,aAAaC,aAAAA,OAAO,SAAS;AAChC,YAAM,IAAID,mBAAAA,mBAAmB,EAAE,OAAO;AAAA,IACvC;AACA,QAAI,aAAaC,aAAAA,OAAO,SAAS;AAChC,YAAM,OAAO,EAAE,UAAU;AACzB,UAAI,OAAO,SAAS,YAAY,OAAO,MAAM,UAAU,YAAY,OAAO,KAAK,OAAO,YAAY,UAAU;AAC3G,cAAM,IAAIC,iBAAAA,iBAAiB,KAAK,MAAM,OAAO;AAAA,MAC9C;AACA,YAAM,IAAIA,iBAAAA,iBAAiB,EAAE,OAAO;AAAA,IACrC;AACA,UAAM;AAAA,EACP;AACD;;;"}

package/dist/production/src/model/service/idp/providers/OIDCHelpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"OIDCHelpers.js","sources":["../../../../../../../../packages/engine-tenant-api/src/model/service/idp/providers/OIDCHelpers.ts"],"sourcesContent":["import { Client, custom, errors, generators } from 'openid-client'\nimport { OIDCResponseData } from './OIDCTypes'\nimport { IDPValidationError } from '../IDPValidationError'\nimport { IDPResponseError } from '../IDPResponseError'\nimport { IDPResponse, InitIDPAuthResult } from '../IdentityProviderHandler'\n\nexport const initOIDCAuth = async (client: Client, { redirectUrl, scope, responseMode }: { redirectUrl: string; scope?: string; responseMode?: string }): Promise<InitIDPAuthResult> => {\n\tconst nonce = generators.nonce()\n\tconst state = generators.state()\n\tconst url = client.authorizationUrl({\n\t\tredirect_uri: redirectUrl,\n\t\tresponse_mode: responseMode,\n\t\tscope: scope ?? 'openid email',\n\t\tnonce,\n\t\tstate,\n\t})\n\n\treturn {\n\t\tauthUrl: url,\n\t\tsessionData: { nonce, state },\n\t}\n}\n\nexport const handleOIDCResponse = async (client: Client, { sessionData, redirectUrl, ...otherData }: OIDCResponseData, fetchUserInfo?: boolean, returnOIDCResult?: boolean): Promise<IDPResponse> => {\n\tconst params = 'parameters' in otherData ? otherData.parameters : client.callbackParams(otherData.url)\n\tif (params.state && !sessionData?.state) {\n\t\tthrow new IDPValidationError(`state is present in parameters, but missing in session data`)\n\t}\n\ttry {\n\t\tconst result = await client.callback(redirectUrl, params, sessionData)\n\t\tconst claims = result.claims()\n\t\tconst { at_hash, c_hash, nonce, ...claimsWithoutHashes } = claims\n\t\tconst userInfo = result.access_token && fetchUserInfo ? await client.userinfo(result) : {}\n\t\tconst oidcResult = returnOIDCResult ? result : {}\n\n\t\treturn {\n\t\t\texternalIdentifier: claims.sub,\n\t\t\t...oidcResult,\n\t\t\t...claimsWithoutHashes,\n\t\t\t...userInfo,\n\t\t}\n\t} catch (e: any) {\n\t\tif (e instanceof errors.RPError) {\n\t\t\tthrow new IDPValidationError(e.message)\n\t\t}\n\t\tif (e instanceof errors.OPError) {\n\t\t\tconst body = e.response?.body as any\n\t\t\tif (typeof body === 'object' && typeof body?.error === 'object' && typeof body.error?.message === 'string') {\n\t\t\t\tthrow new IDPResponseError(body.error.message)\n\t\t\t}\n\t\t\tthrow new IDPResponseError(e.message)\n\t\t}\n\t\tthrow e\n\t}\n}\n"],"names":[],"mappings":";;;AAMO,MAAM,eAAe,OAAO,QAAgB,EAAE,aAAa,OAAO,mBAA+G;AACjL,QAAA,QAAQ,WAAW,MAAM;AACzB,QAAA,QAAQ,WAAW,MAAM;AACzB,QAAA,MAAM,OAAO,iBAAiB;AAAA,IACnC,cAAc;AAAA,IACd,eAAe;AAAA,IACf,OAAO,SAAS;AAAA,IAChB;AAAA,IACA;AAAA,EAAA,CACA;AAEM,SAAA;AAAA,IACN,SAAS;AAAA,IACT,aAAa,EAAE,OAAO,MAAM;AAAA,EAC7B;AACD;AAEa,MAAA,qBAAqB,OAAO,QAAgB,EAAE,aAAa,aAAa,GAAG,UAAA,GAA+B,eAAyB,qBAAqD;AAC9L,QAAA,SAAS,gBAAgB,YAAY,UAAU,aAAa,OAAO,eAAe,UAAU,GAAG;AACrG,MAAI,OAAO,SAAS,CAAC,aAAa,OAAO;AAClC,UAAA,IAAI,mBAAmB,6DAA6D;AAAA,EAAA;AAEvF,MAAA;AACH,UAAM,SAAS,MAAM,OAAO,SAAS,aAAa,QAAQ,WAAW;AAC/D,UAAA,SAAS,OAAO,OAAO;AAC7B,UAAM,EAAE,SAAS,QAAQ,OAAO,GAAG,oBAAwB,IAAA;AACrD,UAAA,WAAW,OAAO,gBAAgB,gBAAgB,MAAM,OAAO,SAAS,MAAM,IAAI,CAAC;AACnF,UAAA,aAAa,mBAAmB,SAAS,CAAC;AAEzC,WAAA;AAAA,MACN,oBAAoB,OAAO;AAAA,MAC3B,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,IACJ;AAAA,WACQ,GAAQ;AACZ,QAAA,aAAa,OAAO,SAAS;AAC1B,YAAA,IAAI,mBAAmB,EAAE,OAAO;AAAA,IAAA;AAEnC,QAAA,aAAa,OAAO,SAAS;AAC1B,YAAA,OAAO,EAAE,UAAU;AACrB,UAAA,OAAO,SAAS,YAAY,OAAO,MAAM,UAAU,YAAY,OAAO,KAAK,OAAO,YAAY,UAAU;AAC3G,cAAM,IAAI,iBAAiB,KAAK,MAAM,OAAO;AAAA,MAAA;AAExC,YAAA,IAAI,iBAAiB,EAAE,OAAO;AAAA,IAAA;AAE/B,UAAA;AAAA,EAAA;AAER;"}
+{"version":3,"file":"OIDCHelpers.js","sources":["../../../../../../../../packages/engine-tenant-api/src/model/service/idp/providers/OIDCHelpers.ts"],"sourcesContent":["import { Client, custom, errors, generators } from 'openid-client'\nimport { OIDCResponseData } from './OIDCTypes'\nimport { IDPValidationError } from '../IDPValidationError'\nimport { IDPResponseError } from '../IDPResponseError'\nimport { IDPResponse, InitIDPAuthResult } from '../IdentityProviderHandler'\n\nexport const initOIDCAuth = async (\n\tclient: Client,\n\t{ redirectUrl, scope, responseMode }: { redirectUrl: string; scope?: string; responseMode?: string },\n): Promise<InitIDPAuthResult> => {\n\tconst nonce = generators.nonce()\n\tconst state = generators.state()\n\tconst url = client.authorizationUrl({\n\t\tredirect_uri: redirectUrl,\n\t\tresponse_mode: responseMode,\n\t\tscope: scope ?? 'openid email',\n\t\tnonce,\n\t\tstate,\n\t})\n\n\treturn {\n\t\tauthUrl: url,\n\t\tsessionData: { nonce, state },\n\t}\n}\n\nexport const handleOIDCResponse = async (\n\tclient: Client,\n\t{ sessionData, redirectUrl, ...otherData }: OIDCResponseData,\n\tfetchUserInfo?: boolean,\n\treturnOIDCResult?: boolean,\n): Promise<IDPResponse> => {\n\tconst params = 'parameters' in otherData ? otherData.parameters : client.callbackParams(otherData.url)\n\tif (params.state && !sessionData?.state) {\n\t\tthrow new IDPValidationError(`state is present in parameters, but missing in session data`)\n\t}\n\ttry {\n\t\tconst result = await client.callback(redirectUrl, params, sessionData)\n\t\tconst claims = result.claims()\n\t\tconst { at_hash, c_hash, nonce, ...claimsWithoutHashes } = claims\n\t\tconst userInfo = result.access_token && fetchUserInfo ? await client.userinfo(result) : {}\n\t\tconst oidcResult = returnOIDCResult ? result : {}\n\n\t\treturn {\n\t\t\texternalIdentifier: claims.sub,\n\t\t\t...oidcResult,\n\t\t\t...claimsWithoutHashes,\n\t\t\t...userInfo,\n\t\t}\n\t} catch (e: any) {\n\t\tif (e instanceof errors.RPError) {\n\t\t\tthrow new IDPValidationError(e.message)\n\t\t}\n\t\tif (e instanceof errors.OPError) {\n\t\t\tconst body = e.response?.body as any\n\t\t\tif (typeof body === 'object' && typeof body?.error === 'object' && typeof body.error?.message === 'string') {\n\t\t\t\tthrow new IDPResponseError(body.error.message)\n\t\t\t}\n\t\t\tthrow new IDPResponseError(e.message)\n\t\t}\n\t\tthrow e\n\t}\n}\n"],"names":[],"mappings":";;;AAMO,MAAM,eAAe,OAC3B,QACA,EAAE,aAAa,OAAO,mBACU;AAChC,QAAM,QAAQ,WAAW,MAAA;AACzB,QAAM,QAAQ,WAAW,MAAA;AACzB,QAAM,MAAM,OAAO,iBAAiB;AAAA,IACnC,cAAc;AAAA,IACd,eAAe;AAAA,IACf,OAAO,SAAS;AAAA,IAChB;AAAA,IACA;AAAA,EAAA,CACA;AAED,SAAO;AAAA,IACN,SAAS;AAAA,IACT,aAAa,EAAE,OAAO,MAAA;AAAA,EAAM;AAE9B;AAEO,MAAM,qBAAqB,OACjC,QACA,EAAE,aAAa,aAAa,GAAG,UAAA,GAC/B,eACA,qBAC0B;AAC1B,QAAM,SAAS,gBAAgB,YAAY,UAAU,aAAa,OAAO,eAAe,UAAU,GAAG;AACrG,MAAI,OAAO,SAAS,CAAC,aAAa,OAAO;AACxC,UAAM,IAAI,mBAAmB,6DAA6D;AAAA,EAC3F;AACA,MAAI;AACH,UAAM,SAAS,MAAM,OAAO,SAAS,aAAa,QAAQ,WAAW;AACrE,UAAM,SAAS,OAAO,OAAA;AACtB,UAAM,EAAE,SAAS,QAAQ,OAAO,GAAG,wBAAwB;AAC3D,UAAM,WAAW,OAAO,gBAAgB,gBAAgB,MAAM,OAAO,SAAS,MAAM,IAAI,CAAA;AACxF,UAAM,aAAa,mBAAmB,SAAS,CAAA;AAE/C,WAAO;AAAA,MACN,oBAAoB,OAAO;AAAA,MAC3B,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,IAAA;AAAA,EAEL,SAAS,GAAQ;AAChB,QAAI,aAAa,OAAO,SAAS;AAChC,YAAM,IAAI,mBAAmB,EAAE,OAAO;AAAA,IACvC;AACA,QAAI,aAAa,OAAO,SAAS;AAChC,YAAM,OAAO,EAAE,UAAU;AACzB,UAAI,OAAO,SAAS,YAAY,OAAO,MAAM,UAAU,YAAY,OAAO,KAAK,OAAO,YAAY,UAAU;AAC3G,cAAM,IAAI,iBAAiB,KAAK,MAAM,OAAO;AAAA,MAC9C;AACA,YAAM,IAAI,iBAAiB,EAAE,OAAO;AAAA,IACrC;AACA,UAAM;AAAA,EACP;AACD;"}

package/dist/production/src/model/service/idp/providers/OIDCProvider.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"OIDCProvider.cjs","sources":["../../../../../../../../packages/engine-tenant-api/src/model/service/idp/providers/OIDCProvider.ts"],"sourcesContent":["import { Client, custom, Issuer } from 'openid-client'\nimport { IdentityProviderHandler, IDPResponse, InitIDPAuthResult } from '../IdentityProviderHandler'\nimport { InvalidIDPConfigurationError } from '../InvalidIDPConfigurationError'\nimport { catchTypesafe } from './helpers'\nimport { OIDCConfiguration, OIDCInitData, OIDCResponseData } from './OIDCTypes'\nimport { handleOIDCResponse, initOIDCAuth } from './OIDCHelpers'\nimport { IDPValidationError } from '../IDPValidationError'\n\nconst DEFAULT_OIDC_TIMEOUT = 5000\n\nexport class OIDCProvider implements IdentityProviderHandler<OIDCConfiguration> {\n\tprivate issuerCache: Record<string, Issuer<Client>> = {}\n\n\tvalidateConfiguration = catchTypesafe(OIDCConfiguration, InvalidIDPConfigurationError)\n\n\tpublic async initAuth(configuration: OIDCConfiguration, data: unknown): Promise<InitIDPAuthResult> {\n\t\tconst initData = catchTypesafe(OIDCInitData, IDPValidationError)(data)\n\t\tconst client = await this.createOIDCClient(configuration)\n\t\treturn await initOIDCAuth(client, {\n\t\t\tscope: configuration.scope ?? configuration.claims,\n\t\t\t...initData,\n\t\t})\n\t}\n\n\tpublic async processResponse(configuration: OIDCConfiguration, data: unknown): Promise<IDPResponse> {\n\t\tconst responseData = catchTypesafe(OIDCResponseData, IDPValidationError)(data)\n\t\tconst client = await this.createOIDCClient(configuration)\n\t\treturn await handleOIDCResponse(\n\t\t\tclient,\n\t\t\tresponseData,\n\t\t\tconfiguration.fetchUserInfo,\n\t\t\tconfiguration.returnOIDCResult,\n\t\t)\n\t}\n\n\n\tgetPublicConfiguration({ clientSecret, ...config }: OIDCConfiguration): Partial<OIDCConfiguration> {\n\t\treturn config\n\t}\n\n\tprivate async createOIDCClient(configuration: OIDCConfiguration): Promise<Client> {\n\t\tthis.issuerCache[configuration.url] ??= await Issuer.discover(configuration.url)\n\n\t\tconst client = new this.issuerCache[configuration.url].Client(\n\t\t\t{\n\t\t\t\tclient_id: configuration.clientId,\n\t\t\t\tclient_secret: configuration.clientSecret,\n\t\t\t\tresponse_types: [configuration.responseType || 'code'],\n\t\t\t\tid_token_signed_response_alg: configuration.idTokenSignedResponseAlg ?? 'RS256',\n\t\t\t},\n\t\t\tundefined,\n\t\t\t{\n\t\t\t\tadditionalAuthorizedParties: [...(configuration.additionalAuthorizedParties ?? [])],\n\t\t\t},\n\t\t)\n\n\t\tclient[custom.http_options] = () => ({ timeout: configuration.timeout ?? DEFAULT_OIDC_TIMEOUT })\n\n\t\treturn client\n\t}\n}\n"],"names":["catchTypesafe","OIDCConfiguration","InvalidIDPConfigurationError","OIDCInitData","IDPValidationError","initOIDCAuth","OIDCResponseData","handleOIDCResponse","Issuer","custom"],"mappings":";;;;;;;;;;;AAQA,MAAM,uBAAuB;AAEtB,MAAM,aAAmE;AAAA,EAAzE,cAAA;AACN,kBAAA,MAAQ,eAA8C,EAAC;AAE/B,kBAAA,MAAA,yBAAAA,QAAA,cAAcC,6BAAmBC,6BAA4B,4BAAA,CAAA;AAAA,EAAA;AAAA,EAErF,MAAa,SAAS,eAAkC,MAA2C;AAClG,UAAM,WAAWF,QAAA,cAAcG,UAAc,cAAAC,mBAAkB,kBAAA,EAAE,IAAI;AACrE,UAAM,SAAS,MAAM,KAAK,iBAAiB,aAAa;AACjD,WAAA,MAAMC,yBAAa,QAAQ;AAAA,MACjC,OAAO,cAAc,SAAS,cAAc;AAAA,MAC5C,GAAG;AAAA,IAAA,CACH;AAAA,EAAA;AAAA,EAGF,MAAa,gBAAgB,eAAkC,MAAqC;AACnG,UAAM,eAAeL,QAAA,cAAcM,UAAkB,kBAAAF,mBAAkB,kBAAA,EAAE,IAAI;AAC7E,UAAM,SAAS,MAAM,KAAK,iBAAiB,aAAa;AACxD,WAAO,MAAMG,YAAA;AAAA,MACZ;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,cAAc;AAAA,IACf;AAAA,EAAA;AAAA,EAID,uBAAuB,EAAE,cAAc,GAAG,UAAyD;AAC3F,WAAA;AAAA,EAAA;AAAA,EAGR,MAAc,iBAAiB,eAAmD;AAxCnF,QAAA,IAAA;AAyCO,KAAA,KAAA,KAAA,aAAL,KAAiB,cAAc,GAAA,MAA/B,SAAwC,MAAMC,aAAA,OAAO,SAAS,cAAc,GAAG;AAE/E,UAAM,SAAS,IAAI,KAAK,YAAY,cAAc,GAAG,EAAE;AAAA,MACtD;AAAA,QACC,WAAW,cAAc;AAAA,QACzB,eAAe,cAAc;AAAA,QAC7B,gBAAgB,CAAC,cAAc,gBAAgB,MAAM;AAAA,QACrD,8BAA8B,cAAc,4BAA4B;AAAA,MACzE;AAAA,MACA;AAAA,MACA;AAAA,QACC,6BAA6B,CAAC,GAAI,cAAc,+BAA+B,CAAG,CAAA;AAAA,MAAA;AAAA,IAEpF;AAEO,WAAAC,aAAAA,OAAO,YAAY,IAAI,OAAO,EAAE,SAAS,cAAc,WAAW;AAElE,WAAA;AAAA,EAAA;AAET;;"}
+{"version":3,"file":"OIDCProvider.cjs","sources":["../../../../../../../../packages/engine-tenant-api/src/model/service/idp/providers/OIDCProvider.ts"],"sourcesContent":["import { Client, custom, Issuer } from 'openid-client'\nimport { IdentityProviderHandler, IDPResponse, InitIDPAuthResult } from '../IdentityProviderHandler'\nimport { InvalidIDPConfigurationError } from '../InvalidIDPConfigurationError'\nimport { catchTypesafe } from './helpers'\nimport { OIDCConfiguration, OIDCInitData, OIDCResponseData } from './OIDCTypes'\nimport { handleOIDCResponse, initOIDCAuth } from './OIDCHelpers'\nimport { IDPValidationError } from '../IDPValidationError'\n\nconst DEFAULT_OIDC_TIMEOUT = 5000\n\nexport class OIDCProvider implements IdentityProviderHandler<OIDCConfiguration> {\n\tprivate issuerCache: Record<string, Issuer<Client>> = {}\n\n\tvalidateConfiguration = catchTypesafe(OIDCConfiguration, InvalidIDPConfigurationError)\n\n\tpublic async initAuth(configuration: OIDCConfiguration, data: unknown): Promise<InitIDPAuthResult> {\n\t\tconst initData = catchTypesafe(OIDCInitData, IDPValidationError)(data)\n\t\tconst client = await this.createOIDCClient(configuration)\n\t\treturn await initOIDCAuth(client, {\n\t\t\tscope: configuration.scope ?? configuration.claims,\n\t\t\t...initData,\n\t\t})\n\t}\n\n\tpublic async processResponse(configuration: OIDCConfiguration, data: unknown): Promise<IDPResponse> {\n\t\tconst responseData = catchTypesafe(OIDCResponseData, IDPValidationError)(data)\n\t\tconst client = await this.createOIDCClient(configuration)\n\t\treturn await handleOIDCResponse(\n\t\t\tclient,\n\t\t\tresponseData,\n\t\t\tconfiguration.fetchUserInfo,\n\t\t\tconfiguration.returnOIDCResult,\n\t\t)\n\t}\n\n\tgetPublicConfiguration({ clientSecret, ...config }: OIDCConfiguration): Partial<OIDCConfiguration> {\n\t\treturn config\n\t}\n\n\tprivate async createOIDCClient(configuration: OIDCConfiguration): Promise<Client> {\n\t\tthis.issuerCache[configuration.url] ??= await Issuer.discover(configuration.url)\n\n\t\tconst client = new this.issuerCache[configuration.url].Client(\n\t\t\t{\n\t\t\t\tclient_id: configuration.clientId,\n\t\t\t\tclient_secret: configuration.clientSecret,\n\t\t\t\tresponse_types: [configuration.responseType || 'code'],\n\t\t\t\tid_token_signed_response_alg: configuration.idTokenSignedResponseAlg ?? 'RS256',\n\t\t\t},\n\t\t\tundefined,\n\t\t\t{\n\t\t\t\tadditionalAuthorizedParties: [...(configuration.additionalAuthorizedParties ?? [])],\n\t\t\t},\n\t\t)\n\n\t\tclient[custom.http_options] = () => ({ timeout: configuration.timeout ?? DEFAULT_OIDC_TIMEOUT })\n\n\t\treturn client\n\t}\n}\n"],"names":["catchTypesafe","OIDCConfiguration","InvalidIDPConfigurationError","OIDCInitData","IDPValidationError","initOIDCAuth","OIDCResponseData","handleOIDCResponse","Issuer","custom"],"mappings":";;;;;;;;;;;AAQA,MAAM,uBAAuB;AAEtB,MAAM,aAAmE;AAAA,EAAzE,cAAA;AACN,kBAAA,MAAQ,eAA8C,EAAC;AAEvD,kBAAA,MAAA,yBAAwBA,QAAAA,cAAcC,UAAAA,mBAAmBC,6BAAAA,4BAA4B,CAAA;AAAA,EAAA;AAAA,EAErF,MAAa,SAAS,eAAkC,MAA2C;AAClG,UAAM,WAAWF,QAAAA,cAAcG,UAAAA,cAAcC,mBAAAA,kBAAkB,EAAE,IAAI;AACrE,UAAM,SAAS,MAAM,KAAK,iBAAiB,aAAa;AACxD,WAAO,MAAMC,YAAAA,aAAa,QAAQ;AAAA,MACjC,OAAO,cAAc,SAAS,cAAc;AAAA,MAC5C,GAAG;AAAA,IAAA,CACH;AAAA,EACF;AAAA,EAEA,MAAa,gBAAgB,eAAkC,MAAqC;AACnG,UAAM,eAAeL,QAAAA,cAAcM,UAAAA,kBAAkBF,mBAAAA,kBAAkB,EAAE,IAAI;AAC7E,UAAM,SAAS,MAAM,KAAK,iBAAiB,aAAa;AACxD,WAAO,MAAMG,YAAAA;AAAAA,MACZ;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,cAAc;AAAA,IAAA;AAAA,EAEhB;AAAA,EAEA,uBAAuB,EAAE,cAAc,GAAG,UAAyD;AAClG,WAAO;AAAA,EACR;AAAA,EAEA,MAAc,iBAAiB,eAAmD;AAvCnF,QAAA,IAAA;AAwCE,KAAA,KAAA,KAAK,aAAL,KAAiB,cAAc,GAAA,MAA/B,SAAwC,MAAMC,aAAAA,OAAO,SAAS,cAAc,GAAG;AAE/E,UAAM,SAAS,IAAI,KAAK,YAAY,cAAc,GAAG,EAAE;AAAA,MACtD;AAAA,QACC,WAAW,cAAc;AAAA,QACzB,eAAe,cAAc;AAAA,QAC7B,gBAAgB,CAAC,cAAc,gBAAgB,MAAM;AAAA,QACrD,8BAA8B,cAAc,4BAA4B;AAAA,MAAA;AAAA,MAEzE;AAAA,MACA;AAAA,QACC,6BAA6B,CAAC,GAAI,cAAc,+BAA+B,CAAA,CAAG;AAAA,MAAA;AAAA,IACnF;AAGD,WAAOC,aAAAA,OAAO,YAAY,IAAI,OAAO,EAAE,SAAS,cAAc,WAAW;AAEzE,WAAO;AAAA,EACR;AACD;;"}

package/dist/production/src/model/service/idp/providers/OIDCProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"OIDCProvider.js","sources":["../../../../../../../../packages/engine-tenant-api/src/model/service/idp/providers/OIDCProvider.ts"],"sourcesContent":["import { Client, custom, Issuer } from 'openid-client'\nimport { IdentityProviderHandler, IDPResponse, InitIDPAuthResult } from '../IdentityProviderHandler'\nimport { InvalidIDPConfigurationError } from '../InvalidIDPConfigurationError'\nimport { catchTypesafe } from './helpers'\nimport { OIDCConfiguration, OIDCInitData, OIDCResponseData } from './OIDCTypes'\nimport { handleOIDCResponse, initOIDCAuth } from './OIDCHelpers'\nimport { IDPValidationError } from '../IDPValidationError'\n\nconst DEFAULT_OIDC_TIMEOUT = 5000\n\nexport class OIDCProvider implements IdentityProviderHandler<OIDCConfiguration> {\n\tprivate issuerCache: Record<string, Issuer<Client>> = {}\n\n\tvalidateConfiguration = catchTypesafe(OIDCConfiguration, InvalidIDPConfigurationError)\n\n\tpublic async initAuth(configuration: OIDCConfiguration, data: unknown): Promise<InitIDPAuthResult> {\n\t\tconst initData = catchTypesafe(OIDCInitData, IDPValidationError)(data)\n\t\tconst client = await this.createOIDCClient(configuration)\n\t\treturn await initOIDCAuth(client, {\n\t\t\tscope: configuration.scope ?? configuration.claims,\n\t\t\t...initData,\n\t\t})\n\t}\n\n\tpublic async processResponse(configuration: OIDCConfiguration, data: unknown): Promise<IDPResponse> {\n\t\tconst responseData = catchTypesafe(OIDCResponseData, IDPValidationError)(data)\n\t\tconst client = await this.createOIDCClient(configuration)\n\t\treturn await handleOIDCResponse(\n\t\t\tclient,\n\t\t\tresponseData,\n\t\t\tconfiguration.fetchUserInfo,\n\t\t\tconfiguration.returnOIDCResult,\n\t\t)\n\t}\n\n\n\tgetPublicConfiguration({ clientSecret, ...config }: OIDCConfiguration): Partial<OIDCConfiguration> {\n\t\treturn config\n\t}\n\n\tprivate async createOIDCClient(configuration: OIDCConfiguration): Promise<Client> {\n\t\tthis.issuerCache[configuration.url] ??= await Issuer.discover(configuration.url)\n\n\t\tconst client = new this.issuerCache[configuration.url].Client(\n\t\t\t{\n\t\t\t\tclient_id: configuration.clientId,\n\t\t\t\tclient_secret: configuration.clientSecret,\n\t\t\t\tresponse_types: [configuration.responseType || 'code'],\n\t\t\t\tid_token_signed_response_alg: configuration.idTokenSignedResponseAlg ?? 'RS256',\n\t\t\t},\n\t\t\tundefined,\n\t\t\t{\n\t\t\t\tadditionalAuthorizedParties: [...(configuration.additionalAuthorizedParties ?? [])],\n\t\t\t},\n\t\t)\n\n\t\tclient[custom.http_options] = () => ({ timeout: configuration.timeout ?? DEFAULT_OIDC_TIMEOUT })\n\n\t\treturn client\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;AAQA,MAAM,uBAAuB;AAEtB,MAAM,aAAmE;AAAA,EAAzE,cAAA;AACN,kBAAA,MAAQ,eAA8C,EAAC;AAE/B,kBAAA,MAAA,yBAAA,cAAc,mBAAmB,4BAA4B,CAAA;AAAA,EAAA;AAAA,EAErF,MAAa,SAAS,eAAkC,MAA2C;AAClG,UAAM,WAAW,cAAc,cAAc,kBAAkB,EAAE,IAAI;AACrE,UAAM,SAAS,MAAM,KAAK,iBAAiB,aAAa;AACjD,WAAA,MAAM,aAAa,QAAQ;AAAA,MACjC,OAAO,cAAc,SAAS,cAAc;AAAA,MAC5C,GAAG;AAAA,IAAA,CACH;AAAA,EAAA;AAAA,EAGF,MAAa,gBAAgB,eAAkC,MAAqC;AACnG,UAAM,eAAe,cAAc,kBAAkB,kBAAkB,EAAE,IAAI;AAC7E,UAAM,SAAS,MAAM,KAAK,iBAAiB,aAAa;AACxD,WAAO,MAAM;AAAA,MACZ;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,cAAc;AAAA,IACf;AAAA,EAAA;AAAA,EAID,uBAAuB,EAAE,cAAc,GAAG,UAAyD;AAC3F,WAAA;AAAA,EAAA;AAAA,EAGR,MAAc,iBAAiB,eAAmD;AAxCnF,QAAA,IAAA;AAyCO,KAAA,KAAA,KAAA,aAAL,KAAiB,cAAc,GAAA,MAA/B,SAAwC,MAAM,OAAO,SAAS,cAAc,GAAG;AAE/E,UAAM,SAAS,IAAI,KAAK,YAAY,cAAc,GAAG,EAAE;AAAA,MACtD;AAAA,QACC,WAAW,cAAc;AAAA,QACzB,eAAe,cAAc;AAAA,QAC7B,gBAAgB,CAAC,cAAc,gBAAgB,MAAM;AAAA,QACrD,8BAA8B,cAAc,4BAA4B;AAAA,MACzE;AAAA,MACA;AAAA,MACA;AAAA,QACC,6BAA6B,CAAC,GAAI,cAAc,+BAA+B,CAAG,CAAA;AAAA,MAAA;AAAA,IAEpF;AAEO,WAAA,OAAO,YAAY,IAAI,OAAO,EAAE,SAAS,cAAc,WAAW;AAElE,WAAA;AAAA,EAAA;AAET;"}
+{"version":3,"file":"OIDCProvider.js","sources":["../../../../../../../../packages/engine-tenant-api/src/model/service/idp/providers/OIDCProvider.ts"],"sourcesContent":["import { Client, custom, Issuer } from 'openid-client'\nimport { IdentityProviderHandler, IDPResponse, InitIDPAuthResult } from '../IdentityProviderHandler'\nimport { InvalidIDPConfigurationError } from '../InvalidIDPConfigurationError'\nimport { catchTypesafe } from './helpers'\nimport { OIDCConfiguration, OIDCInitData, OIDCResponseData } from './OIDCTypes'\nimport { handleOIDCResponse, initOIDCAuth } from './OIDCHelpers'\nimport { IDPValidationError } from '../IDPValidationError'\n\nconst DEFAULT_OIDC_TIMEOUT = 5000\n\nexport class OIDCProvider implements IdentityProviderHandler<OIDCConfiguration> {\n\tprivate issuerCache: Record<string, Issuer<Client>> = {}\n\n\tvalidateConfiguration = catchTypesafe(OIDCConfiguration, InvalidIDPConfigurationError)\n\n\tpublic async initAuth(configuration: OIDCConfiguration, data: unknown): Promise<InitIDPAuthResult> {\n\t\tconst initData = catchTypesafe(OIDCInitData, IDPValidationError)(data)\n\t\tconst client = await this.createOIDCClient(configuration)\n\t\treturn await initOIDCAuth(client, {\n\t\t\tscope: configuration.scope ?? configuration.claims,\n\t\t\t...initData,\n\t\t})\n\t}\n\n\tpublic async processResponse(configuration: OIDCConfiguration, data: unknown): Promise<IDPResponse> {\n\t\tconst responseData = catchTypesafe(OIDCResponseData, IDPValidationError)(data)\n\t\tconst client = await this.createOIDCClient(configuration)\n\t\treturn await handleOIDCResponse(\n\t\t\tclient,\n\t\t\tresponseData,\n\t\t\tconfiguration.fetchUserInfo,\n\t\t\tconfiguration.returnOIDCResult,\n\t\t)\n\t}\n\n\tgetPublicConfiguration({ clientSecret, ...config }: OIDCConfiguration): Partial<OIDCConfiguration> {\n\t\treturn config\n\t}\n\n\tprivate async createOIDCClient(configuration: OIDCConfiguration): Promise<Client> {\n\t\tthis.issuerCache[configuration.url] ??= await Issuer.discover(configuration.url)\n\n\t\tconst client = new this.issuerCache[configuration.url].Client(\n\t\t\t{\n\t\t\t\tclient_id: configuration.clientId,\n\t\t\t\tclient_secret: configuration.clientSecret,\n\t\t\t\tresponse_types: [configuration.responseType || 'code'],\n\t\t\t\tid_token_signed_response_alg: configuration.idTokenSignedResponseAlg ?? 'RS256',\n\t\t\t},\n\t\t\tundefined,\n\t\t\t{\n\t\t\t\tadditionalAuthorizedParties: [...(configuration.additionalAuthorizedParties ?? [])],\n\t\t\t},\n\t\t)\n\n\t\tclient[custom.http_options] = () => ({ timeout: configuration.timeout ?? DEFAULT_OIDC_TIMEOUT })\n\n\t\treturn client\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;AAQA,MAAM,uBAAuB;AAEtB,MAAM,aAAmE;AAAA,EAAzE,cAAA;AACN,kBAAA,MAAQ,eAA8C,EAAC;AAEvD,kBAAA,MAAA,yBAAwB,cAAc,mBAAmB,4BAA4B,CAAA;AAAA,EAAA;AAAA,EAErF,MAAa,SAAS,eAAkC,MAA2C;AAClG,UAAM,WAAW,cAAc,cAAc,kBAAkB,EAAE,IAAI;AACrE,UAAM,SAAS,MAAM,KAAK,iBAAiB,aAAa;AACxD,WAAO,MAAM,aAAa,QAAQ;AAAA,MACjC,OAAO,cAAc,SAAS,cAAc;AAAA,MAC5C,GAAG;AAAA,IAAA,CACH;AAAA,EACF;AAAA,EAEA,MAAa,gBAAgB,eAAkC,MAAqC;AACnG,UAAM,eAAe,cAAc,kBAAkB,kBAAkB,EAAE,IAAI;AAC7E,UAAM,SAAS,MAAM,KAAK,iBAAiB,aAAa;AACxD,WAAO,MAAM;AAAA,MACZ;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,cAAc;AAAA,IAAA;AAAA,EAEhB;AAAA,EAEA,uBAAuB,EAAE,cAAc,GAAG,UAAyD;AAClG,WAAO;AAAA,EACR;AAAA,EAEA,MAAc,iBAAiB,eAAmD;AAvCnF,QAAA,IAAA;AAwCE,KAAA,KAAA,KAAK,aAAL,KAAiB,cAAc,GAAA,MAA/B,SAAwC,MAAM,OAAO,SAAS,cAAc,GAAG;AAE/E,UAAM,SAAS,IAAI,KAAK,YAAY,cAAc,GAAG,EAAE;AAAA,MACtD;AAAA,QACC,WAAW,cAAc;AAAA,QACzB,eAAe,cAAc;AAAA,QAC7B,gBAAgB,CAAC,cAAc,gBAAgB,MAAM;AAAA,QACrD,8BAA8B,cAAc,4BAA4B;AAAA,MAAA;AAAA,MAEzE;AAAA,MACA;AAAA,QACC,6BAA6B,CAAC,GAAI,cAAc,+BAA+B,CAAA,CAAG;AAAA,MAAA;AAAA,IACnF;AAGD,WAAO,OAAO,YAAY,IAAI,OAAO,EAAE,SAAS,cAAc,WAAW;AAEzE,WAAO;AAAA,EACR;AACD;"}

package/dist/production/src/model/service/idp/providers/OIDCTypes.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"OIDCTypes.cjs","sources":["../../../../../../../../packages/engine-tenant-api/src/model/service/idp/providers/OIDCTypes.ts"],"sourcesContent":["import * as Typesafe from '@contember/typesafe'\nimport { ResponseType } from 'openid-client'\n\nexport interface OIDCSessionData {\n\tnonce: string\n\tstate: string\n}\n\nexport const OIDCConfigurationOptions = Typesafe.partial({\n\tresponseType: Typesafe.enumeration<ResponseType>('code', 'code id_token', 'code id_token token', 'code token', 'id_token', 'id_token token', 'none'),\n\tclaims: Typesafe.string, // deprecated, use scope instead\n\tscope: Typesafe.string,\n\tadditionalAuthorizedParties: Typesafe.array(Typesafe.string),\n\tidTokenSignedResponseAlg: Typesafe.string,\n\tfetchUserInfo: Typesafe.boolean,\n\treturnOIDCResult: Typesafe.boolean,\n\ttimeout: Typesafe.number,\n})\nexport const BaseOIDCConfiguration = Typesafe.intersection(\n\tTypesafe.object({\n\t\turl: Typesafe.string,\n\t\tclientId: Typesafe.string,\n\t\tclientSecret: Typesafe.string,\n\t}),\n\tOIDCConfigurationOptions,\n)\n\nexport const OIDCConfiguration = Typesafe.intersection(\n\tBaseOIDCConfiguration,\n\tTypesafe.object({\n\t\turl: Typesafe.string,\n\t}),\n)\n\nexport type OIDCConfiguration = ReturnType<typeof OIDCConfiguration>\n\nexport const OIDCResponseData = Typesafe.intersection(\n\tTypesafe.union(\n\t\tTypesafe.object({\n\t\t\turl: Typesafe.string,\n\t\t}),\n\t\tTypesafe.object({\n\t\t\tparameters: Typesafe.record(Typesafe.string, Typesafe.string),\n\t\t}),\n\t),\n\tTypesafe.partial({\n\t\tredirectUrl: Typesafe.string,\n\t\tsessionData: Typesafe.partial({\n\t\t\tnonce: Typesafe.string,\n\t\t\tstate: Typesafe.string,\n\t\t}),\n\n\t}),\n)\n\nexport type OIDCResponseData = ReturnType<typeof OIDCResponseData>\n\nexport const OIDCInitData = Typesafe.noExtraProps(Typesafe.intersection(\n\tTypesafe.object({\n\t\tredirectUrl: Typesafe.string,\n\t}),\n\tTypesafe.partial({\n\t\tresponseMode: Typesafe.string,\n\t}),\n))\n\nexport type OIDCInitData = ReturnType<typeof OIDCInitData>\n"],"names":["Typesafe"],"mappings":";;;;;;;;;;;;;;;;;;;;AAQa,MAAA,2BAA2BA,oBAAS,QAAQ;AAAA,EACxD,cAAcA,oBAAS,YAA0B,QAAQ,iBAAiB,uBAAuB,cAAc,YAAY,kBAAkB,MAAM;AAAA,EACnJ,QAAQA,oBAAS;AAAA;AAAA,EACjB,OAAOA,oBAAS;AAAA,EAChB,6BAA6BA,oBAAS,MAAMA,oBAAS,MAAM;AAAA,EAC3D,0BAA0BA,oBAAS;AAAA,EACnC,eAAeA,oBAAS;AAAA,EACxB,kBAAkBA,oBAAS;AAAA,EAC3B,SAASA,oBAAS;AACnB,CAAC;AACM,MAAM,wBAAwBA,oBAAS;AAAA,EAC7CA,oBAAS,OAAO;AAAA,IACf,KAAKA,oBAAS;AAAA,IACd,UAAUA,oBAAS;AAAA,IACnB,cAAcA,oBAAS;AAAA,EAAA,CACvB;AAAA,EACD;AACD;AAEO,MAAM,oBAAoBA,oBAAS;AAAA,EACzC;AAAA,EACAA,oBAAS,OAAO;AAAA,IACf,KAAKA,oBAAS;AAAA,EACd,CAAA;AACF;AAIO,MAAM,mBAAmBA,oBAAS;AAAA,EACxCA,oBAAS;AAAA,IACRA,oBAAS,OAAO;AAAA,MACf,KAAKA,oBAAS;AAAA,IAAA,CACd;AAAA,IACDA,oBAAS,OAAO;AAAA,MACf,YAAYA,oBAAS,OAAOA,oBAAS,QAAQA,oBAAS,MAAM;AAAA,IAC5D,CAAA;AAAA,EACF;AAAA,EACAA,oBAAS,QAAQ;AAAA,IAChB,aAAaA,oBAAS;AAAA,IACtB,aAAaA,oBAAS,QAAQ;AAAA,MAC7B,OAAOA,oBAAS;AAAA,MAChB,OAAOA,oBAAS;AAAA,IAChB,CAAA;AAAA,EAED,CAAA;AACF;AAIa,MAAA,eAAeA,oBAAS,aAAaA,oBAAS;AAAA,EAC1DA,oBAAS,OAAO;AAAA,IACf,aAAaA,oBAAS;AAAA,EAAA,CACtB;AAAA,EACDA,oBAAS,QAAQ;AAAA,IAChB,cAAcA,oBAAS;AAAA,EACvB,CAAA;AACF,CAAC;;;;;;"}
+{"version":3,"file":"OIDCTypes.cjs","sources":["../../../../../../../../packages/engine-tenant-api/src/model/service/idp/providers/OIDCTypes.ts"],"sourcesContent":["import * as Typesafe from '@contember/typesafe'\nimport { ResponseType } from 'openid-client'\n\nexport interface OIDCSessionData {\n\tnonce: string\n\tstate: string\n}\n\nexport const OIDCConfigurationOptions = Typesafe.partial({\n\tresponseType: Typesafe.enumeration<ResponseType>('code', 'code id_token', 'code id_token token', 'code token', 'id_token', 'id_token token', 'none'),\n\tclaims: Typesafe.string, // deprecated, use scope instead\n\tscope: Typesafe.string,\n\tadditionalAuthorizedParties: Typesafe.array(Typesafe.string),\n\tidTokenSignedResponseAlg: Typesafe.string,\n\tfetchUserInfo: Typesafe.boolean,\n\treturnOIDCResult: Typesafe.boolean,\n\ttimeout: Typesafe.number,\n})\nexport const BaseOIDCConfiguration = Typesafe.intersection(\n\tTypesafe.object({\n\t\turl: Typesafe.string,\n\t\tclientId: Typesafe.string,\n\t\tclientSecret: Typesafe.string,\n\t}),\n\tOIDCConfigurationOptions,\n)\n\nexport const OIDCConfiguration = Typesafe.intersection(\n\tBaseOIDCConfiguration,\n\tTypesafe.object({\n\t\turl: Typesafe.string,\n\t}),\n)\n\nexport type OIDCConfiguration = ReturnType<typeof OIDCConfiguration>\n\nexport const OIDCResponseData = Typesafe.intersection(\n\tTypesafe.union(\n\t\tTypesafe.object({\n\t\t\turl: Typesafe.string,\n\t\t}),\n\t\tTypesafe.object({\n\t\t\tparameters: Typesafe.record(Typesafe.string, Typesafe.string),\n\t\t}),\n\t),\n\tTypesafe.partial({\n\t\tredirectUrl: Typesafe.string,\n\t\tsessionData: Typesafe.partial({\n\t\t\tnonce: Typesafe.string,\n\t\t\tstate: Typesafe.string,\n\t\t}),\n\t}),\n)\n\nexport type OIDCResponseData = ReturnType<typeof OIDCResponseData>\n\nexport const OIDCInitData = Typesafe.noExtraProps(Typesafe.intersection(\n\tTypesafe.object({\n\t\tredirectUrl: Typesafe.string,\n\t}),\n\tTypesafe.partial({\n\t\tresponseMode: Typesafe.string,\n\t}),\n))\n\nexport type OIDCInitData = ReturnType<typeof OIDCInitData>\n"],"names":["Typesafe"],"mappings":";;;;;;;;;;;;;;;;;;;;AAQO,MAAM,2BAA2BA,oBAAS,QAAQ;AAAA,EACxD,cAAcA,oBAAS,YAA0B,QAAQ,iBAAiB,uBAAuB,cAAc,YAAY,kBAAkB,MAAM;AAAA,EACnJ,QAAQA,oBAAS;AAAA;AAAA,EACjB,OAAOA,oBAAS;AAAA,EAChB,6BAA6BA,oBAAS,MAAMA,oBAAS,MAAM;AAAA,EAC3D,0BAA0BA,oBAAS;AAAA,EACnC,eAAeA,oBAAS;AAAA,EACxB,kBAAkBA,oBAAS;AAAA,EAC3B,SAASA,oBAAS;AACnB,CAAC;AACM,MAAM,wBAAwBA,oBAAS;AAAA,EAC7CA,oBAAS,OAAO;AAAA,IACf,KAAKA,oBAAS;AAAA,IACd,UAAUA,oBAAS;AAAA,IACnB,cAAcA,oBAAS;AAAA,EAAA,CACvB;AAAA,EACD;AACD;AAEO,MAAM,oBAAoBA,oBAAS;AAAA,EACzC;AAAA,EACAA,oBAAS,OAAO;AAAA,IACf,KAAKA,oBAAS;AAAA,EAAA,CACd;AACF;AAIO,MAAM,mBAAmBA,oBAAS;AAAA,EACxCA,oBAAS;AAAA,IACRA,oBAAS,OAAO;AAAA,MACf,KAAKA,oBAAS;AAAA,IAAA,CACd;AAAA,IACDA,oBAAS,OAAO;AAAA,MACf,YAAYA,oBAAS,OAAOA,oBAAS,QAAQA,oBAAS,MAAM;AAAA,IAAA,CAC5D;AAAA,EAAA;AAAA,EAEFA,oBAAS,QAAQ;AAAA,IAChB,aAAaA,oBAAS;AAAA,IACtB,aAAaA,oBAAS,QAAQ;AAAA,MAC7B,OAAOA,oBAAS;AAAA,MAChB,OAAOA,oBAAS;AAAA,IAAA,CAChB;AAAA,EAAA,CACD;AACF;AAIO,MAAM,eAAeA,oBAAS,aAAaA,oBAAS;AAAA,EAC1DA,oBAAS,OAAO;AAAA,IACf,aAAaA,oBAAS;AAAA,EAAA,CACtB;AAAA,EACDA,oBAAS,QAAQ;AAAA,IAChB,cAAcA,oBAAS;AAAA,EAAA,CACvB;AACF,CAAC;;;;;;"}

package/dist/production/src/model/service/idp/providers/OIDCTypes.js.map

@@ -1 +1 @@
-{"version":3,"file":"OIDCTypes.js","sources":["../../../../../../../../packages/engine-tenant-api/src/model/service/idp/providers/OIDCTypes.ts"],"sourcesContent":["import * as Typesafe from '@contember/typesafe'\nimport { ResponseType } from 'openid-client'\n\nexport interface OIDCSessionData {\n\tnonce: string\n\tstate: string\n}\n\nexport const OIDCConfigurationOptions = Typesafe.partial({\n\tresponseType: Typesafe.enumeration<ResponseType>('code', 'code id_token', 'code id_token token', 'code token', 'id_token', 'id_token token', 'none'),\n\tclaims: Typesafe.string, // deprecated, use scope instead\n\tscope: Typesafe.string,\n\tadditionalAuthorizedParties: Typesafe.array(Typesafe.string),\n\tidTokenSignedResponseAlg: Typesafe.string,\n\tfetchUserInfo: Typesafe.boolean,\n\treturnOIDCResult: Typesafe.boolean,\n\ttimeout: Typesafe.number,\n})\nexport const BaseOIDCConfiguration = Typesafe.intersection(\n\tTypesafe.object({\n\t\turl: Typesafe.string,\n\t\tclientId: Typesafe.string,\n\t\tclientSecret: Typesafe.string,\n\t}),\n\tOIDCConfigurationOptions,\n)\n\nexport const OIDCConfiguration = Typesafe.intersection(\n\tBaseOIDCConfiguration,\n\tTypesafe.object({\n\t\turl: Typesafe.string,\n\t}),\n)\n\nexport type OIDCConfiguration = ReturnType<typeof OIDCConfiguration>\n\nexport const OIDCResponseData = Typesafe.intersection(\n\tTypesafe.union(\n\t\tTypesafe.object({\n\t\t\turl: Typesafe.string,\n\t\t}),\n\t\tTypesafe.object({\n\t\t\tparameters: Typesafe.record(Typesafe.string, Typesafe.string),\n\t\t}),\n\t),\n\tTypesafe.partial({\n\t\tredirectUrl: Typesafe.string,\n\t\tsessionData: Typesafe.partial({\n\t\t\tnonce: Typesafe.string,\n\t\t\tstate: Typesafe.string,\n\t\t}),\n\n\t}),\n)\n\nexport type OIDCResponseData = ReturnType<typeof OIDCResponseData>\n\nexport const OIDCInitData = Typesafe.noExtraProps(Typesafe.intersection(\n\tTypesafe.object({\n\t\tredirectUrl: Typesafe.string,\n\t}),\n\tTypesafe.partial({\n\t\tresponseMode: Typesafe.string,\n\t}),\n))\n\nexport type OIDCInitData = ReturnType<typeof OIDCInitData>\n"],"names":[],"mappings":";AAQa,MAAA,2BAA2B,SAAS,QAAQ;AAAA,EACxD,cAAc,SAAS,YAA0B,QAAQ,iBAAiB,uBAAuB,cAAc,YAAY,kBAAkB,MAAM;AAAA,EACnJ,QAAQ,SAAS;AAAA;AAAA,EACjB,OAAO,SAAS;AAAA,EAChB,6BAA6B,SAAS,MAAM,SAAS,MAAM;AAAA,EAC3D,0BAA0B,SAAS;AAAA,EACnC,eAAe,SAAS;AAAA,EACxB,kBAAkB,SAAS;AAAA,EAC3B,SAAS,SAAS;AACnB,CAAC;AACM,MAAM,wBAAwB,SAAS;AAAA,EAC7C,SAAS,OAAO;AAAA,IACf,KAAK,SAAS;AAAA,IACd,UAAU,SAAS;AAAA,IACnB,cAAc,SAAS;AAAA,EAAA,CACvB;AAAA,EACD;AACD;AAEO,MAAM,oBAAoB,SAAS;AAAA,EACzC;AAAA,EACA,SAAS,OAAO;AAAA,IACf,KAAK,SAAS;AAAA,EACd,CAAA;AACF;AAIO,MAAM,mBAAmB,SAAS;AAAA,EACxC,SAAS;AAAA,IACR,SAAS,OAAO;AAAA,MACf,KAAK,SAAS;AAAA,IAAA,CACd;AAAA,IACD,SAAS,OAAO;AAAA,MACf,YAAY,SAAS,OAAO,SAAS,QAAQ,SAAS,MAAM;AAAA,IAC5D,CAAA;AAAA,EACF;AAAA,EACA,SAAS,QAAQ;AAAA,IAChB,aAAa,SAAS;AAAA,IACtB,aAAa,SAAS,QAAQ;AAAA,MAC7B,OAAO,SAAS;AAAA,MAChB,OAAO,SAAS;AAAA,IAChB,CAAA;AAAA,EAED,CAAA;AACF;AAIa,MAAA,eAAe,SAAS,aAAa,SAAS;AAAA,EAC1D,SAAS,OAAO;AAAA,IACf,aAAa,SAAS;AAAA,EAAA,CACtB;AAAA,EACD,SAAS,QAAQ;AAAA,IAChB,cAAc,SAAS;AAAA,EACvB,CAAA;AACF,CAAC;"}
+{"version":3,"file":"OIDCTypes.js","sources":["../../../../../../../../packages/engine-tenant-api/src/model/service/idp/providers/OIDCTypes.ts"],"sourcesContent":["import * as Typesafe from '@contember/typesafe'\nimport { ResponseType } from 'openid-client'\n\nexport interface OIDCSessionData {\n\tnonce: string\n\tstate: string\n}\n\nexport const OIDCConfigurationOptions = Typesafe.partial({\n\tresponseType: Typesafe.enumeration<ResponseType>('code', 'code id_token', 'code id_token token', 'code token', 'id_token', 'id_token token', 'none'),\n\tclaims: Typesafe.string, // deprecated, use scope instead\n\tscope: Typesafe.string,\n\tadditionalAuthorizedParties: Typesafe.array(Typesafe.string),\n\tidTokenSignedResponseAlg: Typesafe.string,\n\tfetchUserInfo: Typesafe.boolean,\n\treturnOIDCResult: Typesafe.boolean,\n\ttimeout: Typesafe.number,\n})\nexport const BaseOIDCConfiguration = Typesafe.intersection(\n\tTypesafe.object({\n\t\turl: Typesafe.string,\n\t\tclientId: Typesafe.string,\n\t\tclientSecret: Typesafe.string,\n\t}),\n\tOIDCConfigurationOptions,\n)\n\nexport const OIDCConfiguration = Typesafe.intersection(\n\tBaseOIDCConfiguration,\n\tTypesafe.object({\n\t\turl: Typesafe.string,\n\t}),\n)\n\nexport type OIDCConfiguration = ReturnType<typeof OIDCConfiguration>\n\nexport const OIDCResponseData = Typesafe.intersection(\n\tTypesafe.union(\n\t\tTypesafe.object({\n\t\t\turl: Typesafe.string,\n\t\t}),\n\t\tTypesafe.object({\n\t\t\tparameters: Typesafe.record(Typesafe.string, Typesafe.string),\n\t\t}),\n\t),\n\tTypesafe.partial({\n\t\tredirectUrl: Typesafe.string,\n\t\tsessionData: Typesafe.partial({\n\t\t\tnonce: Typesafe.string,\n\t\t\tstate: Typesafe.string,\n\t\t}),\n\t}),\n)\n\nexport type OIDCResponseData = ReturnType<typeof OIDCResponseData>\n\nexport const OIDCInitData = Typesafe.noExtraProps(Typesafe.intersection(\n\tTypesafe.object({\n\t\tredirectUrl: Typesafe.string,\n\t}),\n\tTypesafe.partial({\n\t\tresponseMode: Typesafe.string,\n\t}),\n))\n\nexport type OIDCInitData = ReturnType<typeof OIDCInitData>\n"],"names":[],"mappings":";AAQO,MAAM,2BAA2B,SAAS,QAAQ;AAAA,EACxD,cAAc,SAAS,YAA0B,QAAQ,iBAAiB,uBAAuB,cAAc,YAAY,kBAAkB,MAAM;AAAA,EACnJ,QAAQ,SAAS;AAAA;AAAA,EACjB,OAAO,SAAS;AAAA,EAChB,6BAA6B,SAAS,MAAM,SAAS,MAAM;AAAA,EAC3D,0BAA0B,SAAS;AAAA,EACnC,eAAe,SAAS;AAAA,EACxB,kBAAkB,SAAS;AAAA,EAC3B,SAAS,SAAS;AACnB,CAAC;AACM,MAAM,wBAAwB,SAAS;AAAA,EAC7C,SAAS,OAAO;AAAA,IACf,KAAK,SAAS;AAAA,IACd,UAAU,SAAS;AAAA,IACnB,cAAc,SAAS;AAAA,EAAA,CACvB;AAAA,EACD;AACD;AAEO,MAAM,oBAAoB,SAAS;AAAA,EACzC;AAAA,EACA,SAAS,OAAO;AAAA,IACf,KAAK,SAAS;AAAA,EAAA,CACd;AACF;AAIO,MAAM,mBAAmB,SAAS;AAAA,EACxC,SAAS;AAAA,IACR,SAAS,OAAO;AAAA,MACf,KAAK,SAAS;AAAA,IAAA,CACd;AAAA,IACD,SAAS,OAAO;AAAA,MACf,YAAY,SAAS,OAAO,SAAS,QAAQ,SAAS,MAAM;AAAA,IAAA,CAC5D;AAAA,EAAA;AAAA,EAEF,SAAS,QAAQ;AAAA,IAChB,aAAa,SAAS;AAAA,IACtB,aAAa,SAAS,QAAQ;AAAA,MAC7B,OAAO,SAAS;AAAA,MAChB,OAAO,SAAS;AAAA,IAAA,CAChB;AAAA,EAAA,CACD;AACF;AAIO,MAAM,eAAe,SAAS,aAAa,SAAS;AAAA,EAC1D,SAAS,OAAO;AAAA,IACf,aAAa,SAAS;AAAA,EAAA,CACtB;AAAA,EACD,SAAS,QAAQ;AAAA,IAChB,cAAc,SAAS;AAAA,EAAA,CACvB;AACF,CAAC;"}

package/dist/production/src/model/service/idp/providers/helpers.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.cjs","sources":["../../../../../../../../packages/engine-tenant-api/src/model/service/idp/providers/helpers.ts"],"sourcesContent":["import * as Typesafe from '@contember/typesafe'\n\nexport const catchTypesafe = <T extends Typesafe.Json>(type: Typesafe.Type<T>, errorConstructor: { new(message: string): Error }) => (value: unknown): T => {\n\ttry {\n\t\treturn type(value)\n\t} catch (e) {\n\t\tif (e instanceof Typesafe.ParseError) {\n\t\t\tthrow new errorConstructor(e.message)\n\t\t}\n\t\tthrow e\n\t}\n}\n"],"names":["Typesafe"],"mappings":";;;;;;;;;;;;;;;;;;;;AAEO,MAAM,gBAAgB,CAA0B,MAAwB,qBAAsD,CAAC,UAAsB;AACvJ,MAAA;AACH,WAAO,KAAK,KAAK;AAAA,WACT,GAAG;AACP,QAAA,aAAaA,oBAAS,YAAY;AAC/B,YAAA,IAAI,iBAAiB,EAAE,OAAO;AAAA,IAAA;AAE/B,UAAA;AAAA,EAAA;AAER;;"}
+{"version":3,"file":"helpers.cjs","sources":["../../../../../../../../packages/engine-tenant-api/src/model/service/idp/providers/helpers.ts"],"sourcesContent":["import * as Typesafe from '@contember/typesafe'\n\nexport const catchTypesafe =\n\t<T extends Typesafe.Json>(type: Typesafe.Type<T>, errorConstructor: { new(message: string): Error }) => (value: unknown): T => {\n\t\ttry {\n\t\t\treturn type(value)\n\t\t} catch (e) {\n\t\t\tif (e instanceof Typesafe.ParseError) {\n\t\t\t\tthrow new errorConstructor(e.message)\n\t\t\t}\n\t\t\tthrow e\n\t\t}\n\t}\n"],"names":["Typesafe"],"mappings":";;;;;;;;;;;;;;;;;;;;AAEO,MAAM,gBACZ,CAA0B,MAAwB,qBAAsD,CAAC,UAAsB;AAC9H,MAAI;AACH,WAAO,KAAK,KAAK;AAAA,EAClB,SAAS,GAAG;AACX,QAAI,aAAaA,oBAAS,YAAY;AACrC,YAAM,IAAI,iBAAiB,EAAE,OAAO;AAAA,IACrC;AACA,UAAM;AAAA,EACP;AACD;;"}

package/dist/production/src/model/service/idp/providers/helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.js","sources":["../../../../../../../../packages/engine-tenant-api/src/model/service/idp/providers/helpers.ts"],"sourcesContent":["import * as Typesafe from '@contember/typesafe'\n\nexport const catchTypesafe = <T extends Typesafe.Json>(type: Typesafe.Type<T>, errorConstructor: { new(message: string): Error }) => (value: unknown): T => {\n\ttry {\n\t\treturn type(value)\n\t} catch (e) {\n\t\tif (e instanceof Typesafe.ParseError) {\n\t\t\tthrow new errorConstructor(e.message)\n\t\t}\n\t\tthrow e\n\t}\n}\n"],"names":[],"mappings":";AAEO,MAAM,gBAAgB,CAA0B,MAAwB,qBAAsD,CAAC,UAAsB;AACvJ,MAAA;AACH,WAAO,KAAK,KAAK;AAAA,WACT,GAAG;AACP,QAAA,aAAa,SAAS,YAAY;AAC/B,YAAA,IAAI,iBAAiB,EAAE,OAAO;AAAA,IAAA;AAE/B,UAAA;AAAA,EAAA;AAER;"}
+{"version":3,"file":"helpers.js","sources":["../../../../../../../../packages/engine-tenant-api/src/model/service/idp/providers/helpers.ts"],"sourcesContent":["import * as Typesafe from '@contember/typesafe'\n\nexport const catchTypesafe =\n\t<T extends Typesafe.Json>(type: Typesafe.Type<T>, errorConstructor: { new(message: string): Error }) => (value: unknown): T => {\n\t\ttry {\n\t\t\treturn type(value)\n\t\t} catch (e) {\n\t\t\tif (e instanceof Typesafe.ParseError) {\n\t\t\t\tthrow new errorConstructor(e.message)\n\t\t\t}\n\t\t\tthrow e\n\t\t}\n\t}\n"],"names":[],"mappings":";AAEO,MAAM,gBACZ,CAA0B,MAAwB,qBAAsD,CAAC,UAAsB;AAC9H,MAAI;AACH,WAAO,KAAK,KAAK;AAAA,EAClB,SAAS,GAAG;AACX,QAAI,aAAa,SAAS,YAAY;AACrC,YAAM,IAAI,iBAAiB,EAAE,OAAO;AAAA,IACrC;AACA,UAAM;AAAA,EACP;AACD;"}

package/dist/production/src/model/service/membershipUtils.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"membershipUtils.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/service/membershipUtils.ts"],"sourcesContent":["import { MembershipInput, MembershipUpdateInput, VariableUpdateInput } from '../commands'\nimport { Acl } from '@contember/schema'\n\nexport const createSetMembershipVariables = (memberships: readonly Acl.Membership[]): MembershipInput[] => {\n\treturn memberships.map(it => ({\n\t\trole: it.role,\n\t\tvariables: it.variables.map(it => ({ name: it.name, set: it.values })),\n\t}))\n}\nexport const createAppendMembershipVariables = (memberships: readonly Acl.Membership[]): MembershipInput[] => {\n\treturn memberships.map(it => ({\n\t\trole: it.role,\n\t\tvariables: it.variables.map(it => ({ name: it.name, append: it.values, remove: [] })),\n\t}))\n}\n\nexport const createMembershipModification = (\n\toldMemberships: readonly Acl.Membership[],\n\tnewMemberships: readonly Acl.Membership[],\n): MembershipUpdateInput[] => {\n\tconst input: MembershipUpdateInput[] = []\n\tfor (const membership of newMemberships) {\n\t\tconst old = oldMemberships.find(it => it.role === membership.role)\n\t\tif (!old) {\n\t\t\tinput.push({\n\t\t\t\trole: membership.role,\n\t\t\t\toperation: 'create',\n\t\t\t\tvariables: createMembershipVariablePatch([], membership.variables),\n\t\t\t})\n\t\t} else {\n\t\t\tinput.push({\n\t\t\t\trole: membership.role,\n\t\t\t\toperation: 'update',\n\t\t\t\tvariables: createMembershipVariablePatch(old.variables, membership.variables),\n\t\t\t})\n\t\t}\n\t}\n\tfor (const old of oldMemberships) {\n\t\tconst newMembership = newMemberships.find(it => it.role === old.role)\n\t\tif (!newMembership) {\n\t\t\tinput.push({\n\t\t\t\trole: old.role,\n\t\t\t\toperation: 'remove',\n\t\t\t\tvariables: createMembershipVariablePatch(old.variables, []), // for acl check\n\t\t\t})\n\t\t}\n\t}\n\n\treturn input\n}\n\nconst createMembershipVariablePatch = (\n\toldVariables: readonly Acl.MembershipVariable[],\n\tnewVariables: readonly Acl.MembershipVariable[],\n): VariableUpdateInput[] => {\n\tconst update: VariableUpdateInput[] = []\n\tconst varANames = newVariables.map(it => it.name)\n\tfor (const varA of newVariables) {\n\t\tconst varB = oldVariables.find(it => it.name === varA.name)\n\t\tif (!varB) {\n\t\t\tupdate.push({\n\t\t\t\tname: varA.name,\n\t\t\t\tset: varA.values,\n\t\t\t})\n\t\t} else {\n\t\t\tupdate.push({\n\t\t\t\tname: varA.name,\n\t\t\t\tappend: varA.values.filter(valA => !varB.values.includes(valA)),\n\t\t\t\tremove: varB.values.filter(valB => !varA.values.includes(valB)),\n\t\t\t})\n\t\t}\n\t}\n\tupdate.push(\n\t\t...oldVariables\n\t\t\t.filter(varB => !varANames.includes(varB.name))\n\t\t\t.map(it => ({\n\t\t\t\tname: it.name,\n\t\t\t\tset: [],\n\t\t\t})),\n\t)\n\treturn update\n}\n"],"names":["it"],"mappings":";;AAGa,MAAA,+BAA+B,CAAC,gBAA8D;AACnG,SAAA,YAAY,IAAI,CAAO,QAAA;AAAA,IAC7B,MAAM,GAAG;AAAA,IACT,WAAW,GAAG,UAAU,IAAI,CAAAA,SAAO,EAAE,MAAMA,IAAG,MAAM,KAAKA,IAAG,SAAS;AAAA,EAAA,EACpE;AACH;AACa,MAAA,kCAAkC,CAAC,gBAA8D;AACtG,SAAA,YAAY,IAAI,CAAO,QAAA;AAAA,IAC7B,MAAM,GAAG;AAAA,IACT,WAAW,GAAG,UAAU,IAAI,CAAAA,SAAO,EAAE,MAAMA,IAAG,MAAM,QAAQA,IAAG,QAAQ,QAAQ,KAAK;AAAA,EAAA,EACnF;AACH;AAEa,MAAA,+BAA+B,CAC3C,gBACA,mBAC6B;AAC7B,QAAM,QAAiC,CAAC;AACxC,aAAW,cAAc,gBAAgB;AACxC,UAAM,MAAM,eAAe,KAAK,QAAM,GAAG,SAAS,WAAW,IAAI;AACjE,QAAI,CAAC,KAAK;AACT,YAAM,KAAK;AAAA,QACV,MAAM,WAAW;AAAA,QACjB,WAAW;AAAA,QACX,WAAW,8BAA8B,IAAI,WAAW,SAAS;AAAA,MAAA,CACjE;AAAA,IAAA,OACK;AACN,YAAM,KAAK;AAAA,QACV,MAAM,WAAW;AAAA,QACjB,WAAW;AAAA,QACX,WAAW,8BAA8B,IAAI,WAAW,WAAW,SAAS;AAAA,MAAA,CAC5E;AAAA,IAAA;AAAA,EACF;AAED,aAAW,OAAO,gBAAgB;AACjC,UAAM,gBAAgB,eAAe,KAAK,QAAM,GAAG,SAAS,IAAI,IAAI;AACpE,QAAI,CAAC,eAAe;AACnB,YAAM,KAAK;AAAA,QACV,MAAM,IAAI;AAAA,QACV,WAAW;AAAA,QACX,WAAW,8BAA8B,IAAI,WAAW,CAAE,CAAA;AAAA;AAAA,MAAA,CAC1D;AAAA,IAAA;AAAA,EACF;AAGM,SAAA;AACR;AAEA,MAAM,gCAAgC,CACrC,cACA,iBAC2B;AAC3B,QAAM,SAAgC,CAAC;AACvC,QAAM,YAAY,aAAa,IAAI,CAAA,OAAM,GAAG,IAAI;AAChD,aAAW,QAAQ,cAAc;AAChC,UAAM,OAAO,aAAa,KAAK,QAAM,GAAG,SAAS,KAAK,IAAI;AAC1D,QAAI,CAAC,MAAM;AACV,aAAO,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX,KAAK,KAAK;AAAA,MAAA,CACV;AAAA,IAAA,OACK;AACN,aAAO,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX,QAAQ,KAAK,OAAO,OAAO,CAAA,SAAQ,CAAC,KAAK,OAAO,SAAS,IAAI,CAAC;AAAA,QAC9D,QAAQ,KAAK,OAAO,OAAO,CAAA,SAAQ,CAAC,KAAK,OAAO,SAAS,IAAI,CAAC;AAAA,MAAA,CAC9D;AAAA,IAAA;AAAA,EACF;AAEM,SAAA;AAAA,IACN,GAAG,aACD,OAAO,CAAA,SAAQ,CAAC,UAAU,SAAS,KAAK,IAAI,CAAC,EAC7C,IAAI,CAAO,QAAA;AAAA,MACX,MAAM,GAAG;AAAA,MACT,KAAK,CAAA;AAAA,IAAC,EACL;AAAA,EACJ;AACO,SAAA;AACR;;;;"}
+{"version":3,"file":"membershipUtils.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/service/membershipUtils.ts"],"sourcesContent":["import { MembershipInput, MembershipUpdateInput, VariableUpdateInput } from '../commands'\nimport { Acl } from '@contember/schema'\n\nexport const createSetMembershipVariables = (memberships: readonly Acl.Membership[]): MembershipInput[] => {\n\treturn memberships.map(it => ({\n\t\trole: it.role,\n\t\tvariables: it.variables.map(it => ({ name: it.name, set: it.values })),\n\t}))\n}\nexport const createAppendMembershipVariables = (memberships: readonly Acl.Membership[]): MembershipInput[] => {\n\treturn memberships.map(it => ({\n\t\trole: it.role,\n\t\tvariables: it.variables.map(it => ({ name: it.name, append: it.values, remove: [] })),\n\t}))\n}\n\nexport const createMembershipModification = (\n\toldMemberships: readonly Acl.Membership[],\n\tnewMemberships: readonly Acl.Membership[],\n): MembershipUpdateInput[] => {\n\tconst input: MembershipUpdateInput[] = []\n\tfor (const membership of newMemberships) {\n\t\tconst old = oldMemberships.find(it => it.role === membership.role)\n\t\tif (!old) {\n\t\t\tinput.push({\n\t\t\t\trole: membership.role,\n\t\t\t\toperation: 'create',\n\t\t\t\tvariables: createMembershipVariablePatch([], membership.variables),\n\t\t\t})\n\t\t} else {\n\t\t\tinput.push({\n\t\t\t\trole: membership.role,\n\t\t\t\toperation: 'update',\n\t\t\t\tvariables: createMembershipVariablePatch(old.variables, membership.variables),\n\t\t\t})\n\t\t}\n\t}\n\tfor (const old of oldMemberships) {\n\t\tconst newMembership = newMemberships.find(it => it.role === old.role)\n\t\tif (!newMembership) {\n\t\t\tinput.push({\n\t\t\t\trole: old.role,\n\t\t\t\toperation: 'remove',\n\t\t\t\tvariables: createMembershipVariablePatch(old.variables, []), // for acl check\n\t\t\t})\n\t\t}\n\t}\n\n\treturn input\n}\n\nconst createMembershipVariablePatch = (\n\toldVariables: readonly Acl.MembershipVariable[],\n\tnewVariables: readonly Acl.MembershipVariable[],\n): VariableUpdateInput[] => {\n\tconst update: VariableUpdateInput[] = []\n\tconst varANames = newVariables.map(it => it.name)\n\tfor (const varA of newVariables) {\n\t\tconst varB = oldVariables.find(it => it.name === varA.name)\n\t\tif (!varB) {\n\t\t\tupdate.push({\n\t\t\t\tname: varA.name,\n\t\t\t\tset: varA.values,\n\t\t\t})\n\t\t} else {\n\t\t\tupdate.push({\n\t\t\t\tname: varA.name,\n\t\t\t\tappend: varA.values.filter(valA => !varB.values.includes(valA)),\n\t\t\t\tremove: varB.values.filter(valB => !varA.values.includes(valB)),\n\t\t\t})\n\t\t}\n\t}\n\tupdate.push(\n\t\t...oldVariables\n\t\t\t.filter(varB => !varANames.includes(varB.name))\n\t\t\t.map(it => ({\n\t\t\t\tname: it.name,\n\t\t\t\tset: [],\n\t\t\t})),\n\t)\n\treturn update\n}\n"],"names":["it"],"mappings":";;AAGO,MAAM,+BAA+B,CAAC,gBAA8D;AAC1G,SAAO,YAAY,IAAI,CAAA,QAAO;AAAA,IAC7B,MAAM,GAAG;AAAA,IACT,WAAW,GAAG,UAAU,IAAI,CAAAA,SAAO,EAAE,MAAMA,IAAG,MAAM,KAAKA,IAAG,SAAS;AAAA,EAAA,EACpE;AACH;AACO,MAAM,kCAAkC,CAAC,gBAA8D;AAC7G,SAAO,YAAY,IAAI,CAAA,QAAO;AAAA,IAC7B,MAAM,GAAG;AAAA,IACT,WAAW,GAAG,UAAU,IAAI,CAAAA,SAAO,EAAE,MAAMA,IAAG,MAAM,QAAQA,IAAG,QAAQ,QAAQ,CAAA,IAAK;AAAA,EAAA,EACnF;AACH;AAEO,MAAM,+BAA+B,CAC3C,gBACA,mBAC6B;AAC7B,QAAM,QAAiC,CAAA;AACvC,aAAW,cAAc,gBAAgB;AACxC,UAAM,MAAM,eAAe,KAAK,QAAM,GAAG,SAAS,WAAW,IAAI;AACjE,QAAI,CAAC,KAAK;AACT,YAAM,KAAK;AAAA,QACV,MAAM,WAAW;AAAA,QACjB,WAAW;AAAA,QACX,WAAW,8BAA8B,IAAI,WAAW,SAAS;AAAA,MAAA,CACjE;AAAA,IACF,OAAO;AACN,YAAM,KAAK;AAAA,QACV,MAAM,WAAW;AAAA,QACjB,WAAW;AAAA,QACX,WAAW,8BAA8B,IAAI,WAAW,WAAW,SAAS;AAAA,MAAA,CAC5E;AAAA,IACF;AAAA,EACD;AACA,aAAW,OAAO,gBAAgB;AACjC,UAAM,gBAAgB,eAAe,KAAK,QAAM,GAAG,SAAS,IAAI,IAAI;AACpE,QAAI,CAAC,eAAe;AACnB,YAAM,KAAK;AAAA,QACV,MAAM,IAAI;AAAA,QACV,WAAW;AAAA,QACX,WAAW,8BAA8B,IAAI,WAAW,CAAA,CAAE;AAAA;AAAA,MAAA,CAC1D;AAAA,IACF;AAAA,EACD;AAEA,SAAO;AACR;AAEA,MAAM,gCAAgC,CACrC,cACA,iBAC2B;AAC3B,QAAM,SAAgC,CAAA;AACtC,QAAM,YAAY,aAAa,IAAI,CAAA,OAAM,GAAG,IAAI;AAChD,aAAW,QAAQ,cAAc;AAChC,UAAM,OAAO,aAAa,KAAK,QAAM,GAAG,SAAS,KAAK,IAAI;AAC1D,QAAI,CAAC,MAAM;AACV,aAAO,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX,KAAK,KAAK;AAAA,MAAA,CACV;AAAA,IACF,OAAO;AACN,aAAO,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX,QAAQ,KAAK,OAAO,OAAO,CAAA,SAAQ,CAAC,KAAK,OAAO,SAAS,IAAI,CAAC;AAAA,QAC9D,QAAQ,KAAK,OAAO,OAAO,CAAA,SAAQ,CAAC,KAAK,OAAO,SAAS,IAAI,CAAC;AAAA,MAAA,CAC9D;AAAA,IACF;AAAA,EACD;AACA,SAAO;AAAA,IACN,GAAG,aACD,OAAO,CAAA,SAAQ,CAAC,UAAU,SAAS,KAAK,IAAI,CAAC,EAC7C,IAAI,CAAA,QAAO;AAAA,MACX,MAAM,GAAG;AAAA,MACT,KAAK,CAAA;AAAA,IAAC,EACL;AAAA,EAAA;AAEJ,SAAO;AACR;;;;"}

package/dist/production/src/model/service/membershipUtils.js.map

@@ -1 +1 @@
-{"version":3,"file":"membershipUtils.js","sources":["../../../../../../packages/engine-tenant-api/src/model/service/membershipUtils.ts"],"sourcesContent":["import { MembershipInput, MembershipUpdateInput, VariableUpdateInput } from '../commands'\nimport { Acl } from '@contember/schema'\n\nexport const createSetMembershipVariables = (memberships: readonly Acl.Membership[]): MembershipInput[] => {\n\treturn memberships.map(it => ({\n\t\trole: it.role,\n\t\tvariables: it.variables.map(it => ({ name: it.name, set: it.values })),\n\t}))\n}\nexport const createAppendMembershipVariables = (memberships: readonly Acl.Membership[]): MembershipInput[] => {\n\treturn memberships.map(it => ({\n\t\trole: it.role,\n\t\tvariables: it.variables.map(it => ({ name: it.name, append: it.values, remove: [] })),\n\t}))\n}\n\nexport const createMembershipModification = (\n\toldMemberships: readonly Acl.Membership[],\n\tnewMemberships: readonly Acl.Membership[],\n): MembershipUpdateInput[] => {\n\tconst input: MembershipUpdateInput[] = []\n\tfor (const membership of newMemberships) {\n\t\tconst old = oldMemberships.find(it => it.role === membership.role)\n\t\tif (!old) {\n\t\t\tinput.push({\n\t\t\t\trole: membership.role,\n\t\t\t\toperation: 'create',\n\t\t\t\tvariables: createMembershipVariablePatch([], membership.variables),\n\t\t\t})\n\t\t} else {\n\t\t\tinput.push({\n\t\t\t\trole: membership.role,\n\t\t\t\toperation: 'update',\n\t\t\t\tvariables: createMembershipVariablePatch(old.variables, membership.variables),\n\t\t\t})\n\t\t}\n\t}\n\tfor (const old of oldMemberships) {\n\t\tconst newMembership = newMemberships.find(it => it.role === old.role)\n\t\tif (!newMembership) {\n\t\t\tinput.push({\n\t\t\t\trole: old.role,\n\t\t\t\toperation: 'remove',\n\t\t\t\tvariables: createMembershipVariablePatch(old.variables, []), // for acl check\n\t\t\t})\n\t\t}\n\t}\n\n\treturn input\n}\n\nconst createMembershipVariablePatch = (\n\toldVariables: readonly Acl.MembershipVariable[],\n\tnewVariables: readonly Acl.MembershipVariable[],\n): VariableUpdateInput[] => {\n\tconst update: VariableUpdateInput[] = []\n\tconst varANames = newVariables.map(it => it.name)\n\tfor (const varA of newVariables) {\n\t\tconst varB = oldVariables.find(it => it.name === varA.name)\n\t\tif (!varB) {\n\t\t\tupdate.push({\n\t\t\t\tname: varA.name,\n\t\t\t\tset: varA.values,\n\t\t\t})\n\t\t} else {\n\t\t\tupdate.push({\n\t\t\t\tname: varA.name,\n\t\t\t\tappend: varA.values.filter(valA => !varB.values.includes(valA)),\n\t\t\t\tremove: varB.values.filter(valB => !varA.values.includes(valB)),\n\t\t\t})\n\t\t}\n\t}\n\tupdate.push(\n\t\t...oldVariables\n\t\t\t.filter(varB => !varANames.includes(varB.name))\n\t\t\t.map(it => ({\n\t\t\t\tname: it.name,\n\t\t\t\tset: [],\n\t\t\t})),\n\t)\n\treturn update\n}\n"],"names":["it"],"mappings":"AAGa,MAAA,+BAA+B,CAAC,gBAA8D;AACnG,SAAA,YAAY,IAAI,CAAO,QAAA;AAAA,IAC7B,MAAM,GAAG;AAAA,IACT,WAAW,GAAG,UAAU,IAAI,CAAAA,SAAO,EAAE,MAAMA,IAAG,MAAM,KAAKA,IAAG,SAAS;AAAA,EAAA,EACpE;AACH;AACa,MAAA,kCAAkC,CAAC,gBAA8D;AACtG,SAAA,YAAY,IAAI,CAAO,QAAA;AAAA,IAC7B,MAAM,GAAG;AAAA,IACT,WAAW,GAAG,UAAU,IAAI,CAAAA,SAAO,EAAE,MAAMA,IAAG,MAAM,QAAQA,IAAG,QAAQ,QAAQ,KAAK;AAAA,EAAA,EACnF;AACH;AAEa,MAAA,+BAA+B,CAC3C,gBACA,mBAC6B;AAC7B,QAAM,QAAiC,CAAC;AACxC,aAAW,cAAc,gBAAgB;AACxC,UAAM,MAAM,eAAe,KAAK,QAAM,GAAG,SAAS,WAAW,IAAI;AACjE,QAAI,CAAC,KAAK;AACT,YAAM,KAAK;AAAA,QACV,MAAM,WAAW;AAAA,QACjB,WAAW;AAAA,QACX,WAAW,8BAA8B,IAAI,WAAW,SAAS;AAAA,MAAA,CACjE;AAAA,IAAA,OACK;AACN,YAAM,KAAK;AAAA,QACV,MAAM,WAAW;AAAA,QACjB,WAAW;AAAA,QACX,WAAW,8BAA8B,IAAI,WAAW,WAAW,SAAS;AAAA,MAAA,CAC5E;AAAA,IAAA;AAAA,EACF;AAED,aAAW,OAAO,gBAAgB;AACjC,UAAM,gBAAgB,eAAe,KAAK,QAAM,GAAG,SAAS,IAAI,IAAI;AACpE,QAAI,CAAC,eAAe;AACnB,YAAM,KAAK;AAAA,QACV,MAAM,IAAI;AAAA,QACV,WAAW;AAAA,QACX,WAAW,8BAA8B,IAAI,WAAW,CAAE,CAAA;AAAA;AAAA,MAAA,CAC1D;AAAA,IAAA;AAAA,EACF;AAGM,SAAA;AACR;AAEA,MAAM,gCAAgC,CACrC,cACA,iBAC2B;AAC3B,QAAM,SAAgC,CAAC;AACvC,QAAM,YAAY,aAAa,IAAI,CAAA,OAAM,GAAG,IAAI;AAChD,aAAW,QAAQ,cAAc;AAChC,UAAM,OAAO,aAAa,KAAK,QAAM,GAAG,SAAS,KAAK,IAAI;AAC1D,QAAI,CAAC,MAAM;AACV,aAAO,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX,KAAK,KAAK;AAAA,MAAA,CACV;AAAA,IAAA,OACK;AACN,aAAO,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX,QAAQ,KAAK,OAAO,OAAO,CAAA,SAAQ,CAAC,KAAK,OAAO,SAAS,IAAI,CAAC;AAAA,QAC9D,QAAQ,KAAK,OAAO,OAAO,CAAA,SAAQ,CAAC,KAAK,OAAO,SAAS,IAAI,CAAC;AAAA,MAAA,CAC9D;AAAA,IAAA;AAAA,EACF;AAEM,SAAA;AAAA,IACN,GAAG,aACD,OAAO,CAAA,SAAQ,CAAC,UAAU,SAAS,KAAK,IAAI,CAAC,EAC7C,IAAI,CAAO,QAAA;AAAA,MACX,MAAM,GAAG;AAAA,MACT,KAAK,CAAA;AAAA,IAAC,EACL;AAAA,EACJ;AACO,SAAA;AACR;"}
+{"version":3,"file":"membershipUtils.js","sources":["../../../../../../packages/engine-tenant-api/src/model/service/membershipUtils.ts"],"sourcesContent":["import { MembershipInput, MembershipUpdateInput, VariableUpdateInput } from '../commands'\nimport { Acl } from '@contember/schema'\n\nexport const createSetMembershipVariables = (memberships: readonly Acl.Membership[]): MembershipInput[] => {\n\treturn memberships.map(it => ({\n\t\trole: it.role,\n\t\tvariables: it.variables.map(it => ({ name: it.name, set: it.values })),\n\t}))\n}\nexport const createAppendMembershipVariables = (memberships: readonly Acl.Membership[]): MembershipInput[] => {\n\treturn memberships.map(it => ({\n\t\trole: it.role,\n\t\tvariables: it.variables.map(it => ({ name: it.name, append: it.values, remove: [] })),\n\t}))\n}\n\nexport const createMembershipModification = (\n\toldMemberships: readonly Acl.Membership[],\n\tnewMemberships: readonly Acl.Membership[],\n): MembershipUpdateInput[] => {\n\tconst input: MembershipUpdateInput[] = []\n\tfor (const membership of newMemberships) {\n\t\tconst old = oldMemberships.find(it => it.role === membership.role)\n\t\tif (!old) {\n\t\t\tinput.push({\n\t\t\t\trole: membership.role,\n\t\t\t\toperation: 'create',\n\t\t\t\tvariables: createMembershipVariablePatch([], membership.variables),\n\t\t\t})\n\t\t} else {\n\t\t\tinput.push({\n\t\t\t\trole: membership.role,\n\t\t\t\toperation: 'update',\n\t\t\t\tvariables: createMembershipVariablePatch(old.variables, membership.variables),\n\t\t\t})\n\t\t}\n\t}\n\tfor (const old of oldMemberships) {\n\t\tconst newMembership = newMemberships.find(it => it.role === old.role)\n\t\tif (!newMembership) {\n\t\t\tinput.push({\n\t\t\t\trole: old.role,\n\t\t\t\toperation: 'remove',\n\t\t\t\tvariables: createMembershipVariablePatch(old.variables, []), // for acl check\n\t\t\t})\n\t\t}\n\t}\n\n\treturn input\n}\n\nconst createMembershipVariablePatch = (\n\toldVariables: readonly Acl.MembershipVariable[],\n\tnewVariables: readonly Acl.MembershipVariable[],\n): VariableUpdateInput[] => {\n\tconst update: VariableUpdateInput[] = []\n\tconst varANames = newVariables.map(it => it.name)\n\tfor (const varA of newVariables) {\n\t\tconst varB = oldVariables.find(it => it.name === varA.name)\n\t\tif (!varB) {\n\t\t\tupdate.push({\n\t\t\t\tname: varA.name,\n\t\t\t\tset: varA.values,\n\t\t\t})\n\t\t} else {\n\t\t\tupdate.push({\n\t\t\t\tname: varA.name,\n\t\t\t\tappend: varA.values.filter(valA => !varB.values.includes(valA)),\n\t\t\t\tremove: varB.values.filter(valB => !varA.values.includes(valB)),\n\t\t\t})\n\t\t}\n\t}\n\tupdate.push(\n\t\t...oldVariables\n\t\t\t.filter(varB => !varANames.includes(varB.name))\n\t\t\t.map(it => ({\n\t\t\t\tname: it.name,\n\t\t\t\tset: [],\n\t\t\t})),\n\t)\n\treturn update\n}\n"],"names":["it"],"mappings":"AAGO,MAAM,+BAA+B,CAAC,gBAA8D;AAC1G,SAAO,YAAY,IAAI,CAAA,QAAO;AAAA,IAC7B,MAAM,GAAG;AAAA,IACT,WAAW,GAAG,UAAU,IAAI,CAAAA,SAAO,EAAE,MAAMA,IAAG,MAAM,KAAKA,IAAG,SAAS;AAAA,EAAA,EACpE;AACH;AACO,MAAM,kCAAkC,CAAC,gBAA8D;AAC7G,SAAO,YAAY,IAAI,CAAA,QAAO;AAAA,IAC7B,MAAM,GAAG;AAAA,IACT,WAAW,GAAG,UAAU,IAAI,CAAAA,SAAO,EAAE,MAAMA,IAAG,MAAM,QAAQA,IAAG,QAAQ,QAAQ,CAAA,IAAK;AAAA,EAAA,EACnF;AACH;AAEO,MAAM,+BAA+B,CAC3C,gBACA,mBAC6B;AAC7B,QAAM,QAAiC,CAAA;AACvC,aAAW,cAAc,gBAAgB;AACxC,UAAM,MAAM,eAAe,KAAK,QAAM,GAAG,SAAS,WAAW,IAAI;AACjE,QAAI,CAAC,KAAK;AACT,YAAM,KAAK;AAAA,QACV,MAAM,WAAW;AAAA,QACjB,WAAW;AAAA,QACX,WAAW,8BAA8B,IAAI,WAAW,SAAS;AAAA,MAAA,CACjE;AAAA,IACF,OAAO;AACN,YAAM,KAAK;AAAA,QACV,MAAM,WAAW;AAAA,QACjB,WAAW;AAAA,QACX,WAAW,8BAA8B,IAAI,WAAW,WAAW,SAAS;AAAA,MAAA,CAC5E;AAAA,IACF;AAAA,EACD;AACA,aAAW,OAAO,gBAAgB;AACjC,UAAM,gBAAgB,eAAe,KAAK,QAAM,GAAG,SAAS,IAAI,IAAI;AACpE,QAAI,CAAC,eAAe;AACnB,YAAM,KAAK;AAAA,QACV,MAAM,IAAI;AAAA,QACV,WAAW;AAAA,QACX,WAAW,8BAA8B,IAAI,WAAW,CAAA,CAAE;AAAA;AAAA,MAAA,CAC1D;AAAA,IACF;AAAA,EACD;AAEA,SAAO;AACR;AAEA,MAAM,gCAAgC,CACrC,cACA,iBAC2B;AAC3B,QAAM,SAAgC,CAAA;AACtC,QAAM,YAAY,aAAa,IAAI,CAAA,OAAM,GAAG,IAAI;AAChD,aAAW,QAAQ,cAAc;AAChC,UAAM,OAAO,aAAa,KAAK,QAAM,GAAG,SAAS,KAAK,IAAI;AAC1D,QAAI,CAAC,MAAM;AACV,aAAO,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX,KAAK,KAAK;AAAA,MAAA,CACV;AAAA,IACF,OAAO;AACN,aAAO,KAAK;AAAA,QACX,MAAM,KAAK;AAAA,QACX,QAAQ,KAAK,OAAO,OAAO,CAAA,SAAQ,CAAC,KAAK,OAAO,SAAS,IAAI,CAAC;AAAA,QAC9D,QAAQ,KAAK,OAAO,OAAO,CAAA,SAAQ,CAAC,KAAK,OAAO,SAAS,IAAI,CAAC;AAAA,MAAA,CAC9D;AAAA,IACF;AAAA,EACD;AACA,SAAO;AAAA,IACN,GAAG,aACD,OAAO,CAAA,SAAQ,CAAC,UAAU,SAAS,KAAK,IAAI,CAAC,EAC7C,IAAI,CAAA,QAAO;AAAA,MACX,MAAM,GAAG;AAAA,MACT,KAAK,CAAA;AAAA,IAAC,EACL;AAAA,EAAA;AAEJ,SAAO;AACR;"}

package/dist/production/src/model/type/ApiKey.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ApiKey.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/type/ApiKey.ts"],"sourcesContent":["namespace ApiKey {\n\texport const enum Type {\n\t\tSESSION = 'session',\n\t\tPERMANENT = 'permanent',\n\t\tONE_OFF = 'one_off',\n\t}\n}\n\nexport { ApiKey }\n"],"names":["ApiKey","Type"],"mappings":";;AAAUA,QAAAA,SAAAA;AAAAA,CAAV,CAAUA,YAAV;AACQ,GAAA,CAAWC,UAAX;AACNA,UAAA,SAAU,IAAA;AACVA,UAAA,WAAY,IAAA;AACZA,UAAA,SAAU,IAAA;AAAA,EAHO,GAAAD,QAAA,SAAAA,QAAA,OAAA,CAAA,EAAA;AAAA,GADTA,QAAA,WAAAA,iBAAA,CAAA,EAAA;"}
+{"version":3,"file":"ApiKey.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/type/ApiKey.ts"],"sourcesContent":["namespace ApiKey {\n\texport enum Type {\n\t\tSESSION = 'session',\n\t\tPERMANENT = 'permanent',\n\t\tONE_OFF = 'one_off',\n\t}\n}\n\nexport { ApiKey }\n"],"names":["ApiKey","Type"],"mappings":";;AAAUA,QAAAA,SAAAA;AAAAA,CAAV,CAAUA,YAAV;AACQ,GAAA,CAAKC,UAAL;AACNA,UAAA,SAAA,IAAU;AACVA,UAAA,WAAA,IAAY;AACZA,UAAA,SAAA,IAAU;AAAA,EAAA,GAHCD,QAAA,SAAAA,QAAA,OAAA,CAAA,EAAA;AAAA,GADHA,QAAAA,WAAAA,iBAAA,CAAA,EAAA;"}

package/dist/production/src/model/type/ApiKey.js.map

@@ -1 +1 @@
-{"version":3,"file":"ApiKey.js","sources":["../../../../../../packages/engine-tenant-api/src/model/type/ApiKey.ts"],"sourcesContent":["namespace ApiKey {\n\texport const enum Type {\n\t\tSESSION = 'session',\n\t\tPERMANENT = 'permanent',\n\t\tONE_OFF = 'one_off',\n\t}\n}\n\nexport { ApiKey }\n"],"names":["ApiKey","Type"],"mappings":"AAAU,IAAA;AAAA,CAAV,CAAUA,YAAV;AACQ,GAAA,CAAWC,UAAX;AACNA,UAAA,SAAU,IAAA;AACVA,UAAA,WAAY,IAAA;AACZA,UAAA,SAAU,IAAA;AAAA,EAHO,GAAAD,QAAA,SAAAA,QAAA,OAAA,CAAA,EAAA;AAAA,GADT,WAAA,SAAA,CAAA,EAAA;"}
+{"version":3,"file":"ApiKey.js","sources":["../../../../../../packages/engine-tenant-api/src/model/type/ApiKey.ts"],"sourcesContent":["namespace ApiKey {\n\texport enum Type {\n\t\tSESSION = 'session',\n\t\tPERMANENT = 'permanent',\n\t\tONE_OFF = 'one_off',\n\t}\n}\n\nexport { ApiKey }\n"],"names":["ApiKey","Type"],"mappings":"AAAA,IAAU;AAAA,CAAV,CAAUA,YAAV;AACQ,GAAA,CAAKC,UAAL;AACNA,UAAA,SAAA,IAAU;AACVA,UAAA,WAAA,IAAY;AACZA,UAAA,SAAA,IAAU;AAAA,EAAA,GAHCD,QAAA,SAAAA,QAAA,OAAA,CAAA,EAAA;AAAA,GADH,WAAA,SAAA,CAAA,EAAA;"}

package/dist/production/src/model/utils/DatabaseContext.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"DatabaseContext.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/DatabaseContext.ts"],"sourcesContent":["import { Client, Connection } from '@contember/database'\nimport { Providers } from '../providers'\nimport { CommandBus } from '../commands'\nimport { BatchLoaderArgs, initBatchLoader, ItemLoader } from '../../utils/batchQuery'\n\n\nexport class DatabaseContext<Conn extends Connection.ConnectionLike = Connection.ConnectionLike> {\n\tprivate loaders = new Map<BatchLoaderArgs<any, any, any>, ItemLoader<any, any>>()\n\n\tconstructor(\n\t\tpublic readonly client: Client<Conn>,\n\t\tpublic readonly providers: Providers,\n\t) {\n\t}\n\n\tpublic get commandBus() {\n\t\treturn new CommandBus(this.client, this.providers)\n\t}\n\n\tpublic get queryHandler() {\n\t\treturn this.client.createQueryHandler()\n\t}\n\n\tpublic async transaction<T>(cb: (dbContext: DatabaseContext<Connection.TransactionLike>) => Promise<T>): Promise<T> {\n\t\treturn await this.client.transaction(async db => {\n\t\t\tawait db.query(Connection.REPEATABLE_READ)\n\t\t\treturn await cb(new DatabaseContext(db, this.providers))\n\t\t})\n\t}\n\n\tpublic async scope<T>(cb: (dbContext: DatabaseContext<Connection.AcquiredConnectionLike>) => Promise<T>): Promise<T> {\n\t\treturn await this.client.scope(async db => {\n\t\t\treturn await cb(new DatabaseContext(db, this.providers))\n\t\t})\n\t}\n\n\tpublic batchLoad<Arg, Result, Item>(loaderArgs: BatchLoaderArgs<Arg, Result, Item>, arg: Arg): Promise<Item> {\n\t\tconst existing = this.loaders.get(loaderArgs)\n\t\tif (existing) {\n\t\t\treturn existing(arg)\n\t\t}\n\t\tconst newLoader = initBatchLoader(loaderArgs, this)\n\t\tthis.loaders.set(loaderArgs, newLoader)\n\t\treturn newLoader(arg)\n\t}\n}\n"],"names":["CommandBus","Connection","initBatchLoader"],"mappings":";;;;;;;;;;AAMO,MAAM,gBAAoF;AAAA,EAGhG,YACiB,QACA,WACf;AAFe,SAAA,SAAA;AACA,SAAA,YAAA;AAJT,kBAAA,MAAA,+BAAc,IAA0D,CAAA;AAAA,EAAA;AAAA,EAQhF,IAAW,aAAa;AACvB,WAAO,IAAIA,WAAAA,WAAW,KAAK,QAAQ,KAAK,SAAS;AAAA,EAAA;AAAA,EAGlD,IAAW,eAAe;AAClB,WAAA,KAAK,OAAO,mBAAmB;AAAA,EAAA;AAAA,EAGvC,MAAa,YAAe,IAAwF;AACnH,WAAO,MAAM,KAAK,OAAO,YAAY,OAAM,OAAM;AAC1C,YAAA,GAAG,MAAMC,SAAA,WAAW,eAAe;AACzC,aAAO,MAAM,GAAG,IAAI,gBAAgB,IAAI,KAAK,SAAS,CAAC;AAAA,IAAA,CACvD;AAAA,EAAA;AAAA,EAGF,MAAa,MAAS,IAA+F;AACpH,WAAO,MAAM,KAAK,OAAO,MAAM,OAAM,OAAM;AAC1C,aAAO,MAAM,GAAG,IAAI,gBAAgB,IAAI,KAAK,SAAS,CAAC;AAAA,IAAA,CACvD;AAAA,EAAA;AAAA,EAGK,UAA6B,YAAgD,KAAyB;AAC5G,UAAM,WAAW,KAAK,QAAQ,IAAI,UAAU;AAC5C,QAAI,UAAU;AACb,aAAO,SAAS,GAAG;AAAA,IAAA;AAEd,UAAA,YAAYC,WAAAA,gBAAgB,YAAY,IAAI;AAC7C,SAAA,QAAQ,IAAI,YAAY,SAAS;AACtC,WAAO,UAAU,GAAG;AAAA,EAAA;AAEtB;;"}
+{"version":3,"file":"DatabaseContext.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/DatabaseContext.ts"],"sourcesContent":["import { Client, Connection } from '@contember/database'\nimport { Providers } from '../providers'\nimport { CommandBus } from '../commands'\nimport { BatchLoaderArgs, initBatchLoader, ItemLoader } from '../../utils/batchQuery'\n\nexport class DatabaseContext<Conn extends Connection.ConnectionLike = Connection.ConnectionLike> {\n\tprivate loaders = new Map<BatchLoaderArgs<any, any, any>, ItemLoader<any, any>>()\n\n\tconstructor(\n\t\tpublic readonly client: Client<Conn>,\n\t\tpublic readonly providers: Providers,\n\t) {\n\t}\n\n\tpublic get commandBus() {\n\t\treturn new CommandBus(this.client, this.providers)\n\t}\n\n\tpublic get queryHandler() {\n\t\treturn this.client.createQueryHandler()\n\t}\n\n\tpublic async transaction<T>(cb: (dbContext: DatabaseContext<Connection.TransactionLike>) => Promise<T>): Promise<T> {\n\t\treturn await this.client.transaction(async db => {\n\t\t\tawait db.query(Connection.REPEATABLE_READ)\n\t\t\treturn await cb(new DatabaseContext(db, this.providers))\n\t\t})\n\t}\n\n\tpublic async scope<T>(cb: (dbContext: DatabaseContext<Connection.AcquiredConnectionLike>) => Promise<T>): Promise<T> {\n\t\treturn await this.client.scope(async db => {\n\t\t\treturn await cb(new DatabaseContext(db, this.providers))\n\t\t})\n\t}\n\n\tpublic batchLoad<Arg, Result, Item>(loaderArgs: BatchLoaderArgs<Arg, Result, Item>, arg: Arg): Promise<Item> {\n\t\tconst existing = this.loaders.get(loaderArgs)\n\t\tif (existing) {\n\t\t\treturn existing(arg)\n\t\t}\n\t\tconst newLoader = initBatchLoader(loaderArgs, this)\n\t\tthis.loaders.set(loaderArgs, newLoader)\n\t\treturn newLoader(arg)\n\t}\n}\n"],"names":["CommandBus","Connection","initBatchLoader"],"mappings":";;;;;;;;;;AAKO,MAAM,gBAAoF;AAAA,EAGhG,YACiB,QACA,WACf;AAFe,SAAA,SAAA;AACA,SAAA,YAAA;AAJjB,kBAAA,MAAQ,+BAAc,IAAA,CAA0D;AAAA,EAMhF;AAAA,EAEA,IAAW,aAAa;AACvB,WAAO,IAAIA,WAAAA,WAAW,KAAK,QAAQ,KAAK,SAAS;AAAA,EAClD;AAAA,EAEA,IAAW,eAAe;AACzB,WAAO,KAAK,OAAO,mBAAA;AAAA,EACpB;AAAA,EAEA,MAAa,YAAe,IAAwF;AACnH,WAAO,MAAM,KAAK,OAAO,YAAY,OAAM,OAAM;AAChD,YAAM,GAAG,MAAMC,SAAAA,WAAW,eAAe;AACzC,aAAO,MAAM,GAAG,IAAI,gBAAgB,IAAI,KAAK,SAAS,CAAC;AAAA,IACxD,CAAC;AAAA,EACF;AAAA,EAEA,MAAa,MAAS,IAA+F;AACpH,WAAO,MAAM,KAAK,OAAO,MAAM,OAAM,OAAM;AAC1C,aAAO,MAAM,GAAG,IAAI,gBAAgB,IAAI,KAAK,SAAS,CAAC;AAAA,IACxD,CAAC;AAAA,EACF;AAAA,EAEO,UAA6B,YAAgD,KAAyB;AAC5G,UAAM,WAAW,KAAK,QAAQ,IAAI,UAAU;AAC5C,QAAI,UAAU;AACb,aAAO,SAAS,GAAG;AAAA,IACpB;AACA,UAAM,YAAYC,WAAAA,gBAAgB,YAAY,IAAI;AAClD,SAAK,QAAQ,IAAI,YAAY,SAAS;AACtC,WAAO,UAAU,GAAG;AAAA,EACrB;AACD;;"}

package/dist/production/src/model/utils/DatabaseContext.js.map

@@ -1 +1 @@
-{"version":3,"file":"DatabaseContext.js","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/DatabaseContext.ts"],"sourcesContent":["import { Client, Connection } from '@contember/database'\nimport { Providers } from '../providers'\nimport { CommandBus } from '../commands'\nimport { BatchLoaderArgs, initBatchLoader, ItemLoader } from '../../utils/batchQuery'\n\n\nexport class DatabaseContext<Conn extends Connection.ConnectionLike = Connection.ConnectionLike> {\n\tprivate loaders = new Map<BatchLoaderArgs<any, any, any>, ItemLoader<any, any>>()\n\n\tconstructor(\n\t\tpublic readonly client: Client<Conn>,\n\t\tpublic readonly providers: Providers,\n\t) {\n\t}\n\n\tpublic get commandBus() {\n\t\treturn new CommandBus(this.client, this.providers)\n\t}\n\n\tpublic get queryHandler() {\n\t\treturn this.client.createQueryHandler()\n\t}\n\n\tpublic async transaction<T>(cb: (dbContext: DatabaseContext<Connection.TransactionLike>) => Promise<T>): Promise<T> {\n\t\treturn await this.client.transaction(async db => {\n\t\t\tawait db.query(Connection.REPEATABLE_READ)\n\t\t\treturn await cb(new DatabaseContext(db, this.providers))\n\t\t})\n\t}\n\n\tpublic async scope<T>(cb: (dbContext: DatabaseContext<Connection.AcquiredConnectionLike>) => Promise<T>): Promise<T> {\n\t\treturn await this.client.scope(async db => {\n\t\t\treturn await cb(new DatabaseContext(db, this.providers))\n\t\t})\n\t}\n\n\tpublic batchLoad<Arg, Result, Item>(loaderArgs: BatchLoaderArgs<Arg, Result, Item>, arg: Arg): Promise<Item> {\n\t\tconst existing = this.loaders.get(loaderArgs)\n\t\tif (existing) {\n\t\t\treturn existing(arg)\n\t\t}\n\t\tconst newLoader = initBatchLoader(loaderArgs, this)\n\t\tthis.loaders.set(loaderArgs, newLoader)\n\t\treturn newLoader(arg)\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;AAMO,MAAM,gBAAoF;AAAA,EAGhG,YACiB,QACA,WACf;AAFe,SAAA,SAAA;AACA,SAAA,YAAA;AAJT,kBAAA,MAAA,+BAAc,IAA0D,CAAA;AAAA,EAAA;AAAA,EAQhF,IAAW,aAAa;AACvB,WAAO,IAAI,WAAW,KAAK,QAAQ,KAAK,SAAS;AAAA,EAAA;AAAA,EAGlD,IAAW,eAAe;AAClB,WAAA,KAAK,OAAO,mBAAmB;AAAA,EAAA;AAAA,EAGvC,MAAa,YAAe,IAAwF;AACnH,WAAO,MAAM,KAAK,OAAO,YAAY,OAAM,OAAM;AAC1C,YAAA,GAAG,MAAM,WAAW,eAAe;AACzC,aAAO,MAAM,GAAG,IAAI,gBAAgB,IAAI,KAAK,SAAS,CAAC;AAAA,IAAA,CACvD;AAAA,EAAA;AAAA,EAGF,MAAa,MAAS,IAA+F;AACpH,WAAO,MAAM,KAAK,OAAO,MAAM,OAAM,OAAM;AAC1C,aAAO,MAAM,GAAG,IAAI,gBAAgB,IAAI,KAAK,SAAS,CAAC;AAAA,IAAA,CACvD;AAAA,EAAA;AAAA,EAGK,UAA6B,YAAgD,KAAyB;AAC5G,UAAM,WAAW,KAAK,QAAQ,IAAI,UAAU;AAC5C,QAAI,UAAU;AACb,aAAO,SAAS,GAAG;AAAA,IAAA;AAEd,UAAA,YAAY,gBAAgB,YAAY,IAAI;AAC7C,SAAA,QAAQ,IAAI,YAAY,SAAS;AACtC,WAAO,UAAU,GAAG;AAAA,EAAA;AAEtB;"}
+{"version":3,"file":"DatabaseContext.js","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/DatabaseContext.ts"],"sourcesContent":["import { Client, Connection } from '@contember/database'\nimport { Providers } from '../providers'\nimport { CommandBus } from '../commands'\nimport { BatchLoaderArgs, initBatchLoader, ItemLoader } from '../../utils/batchQuery'\n\nexport class DatabaseContext<Conn extends Connection.ConnectionLike = Connection.ConnectionLike> {\n\tprivate loaders = new Map<BatchLoaderArgs<any, any, any>, ItemLoader<any, any>>()\n\n\tconstructor(\n\t\tpublic readonly client: Client<Conn>,\n\t\tpublic readonly providers: Providers,\n\t) {\n\t}\n\n\tpublic get commandBus() {\n\t\treturn new CommandBus(this.client, this.providers)\n\t}\n\n\tpublic get queryHandler() {\n\t\treturn this.client.createQueryHandler()\n\t}\n\n\tpublic async transaction<T>(cb: (dbContext: DatabaseContext<Connection.TransactionLike>) => Promise<T>): Promise<T> {\n\t\treturn await this.client.transaction(async db => {\n\t\t\tawait db.query(Connection.REPEATABLE_READ)\n\t\t\treturn await cb(new DatabaseContext(db, this.providers))\n\t\t})\n\t}\n\n\tpublic async scope<T>(cb: (dbContext: DatabaseContext<Connection.AcquiredConnectionLike>) => Promise<T>): Promise<T> {\n\t\treturn await this.client.scope(async db => {\n\t\t\treturn await cb(new DatabaseContext(db, this.providers))\n\t\t})\n\t}\n\n\tpublic batchLoad<Arg, Result, Item>(loaderArgs: BatchLoaderArgs<Arg, Result, Item>, arg: Arg): Promise<Item> {\n\t\tconst existing = this.loaders.get(loaderArgs)\n\t\tif (existing) {\n\t\t\treturn existing(arg)\n\t\t}\n\t\tconst newLoader = initBatchLoader(loaderArgs, this)\n\t\tthis.loaders.set(loaderArgs, newLoader)\n\t\treturn newLoader(arg)\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;AAKO,MAAM,gBAAoF;AAAA,EAGhG,YACiB,QACA,WACf;AAFe,SAAA,SAAA;AACA,SAAA,YAAA;AAJjB,kBAAA,MAAQ,+BAAc,IAAA,CAA0D;AAAA,EAMhF;AAAA,EAEA,IAAW,aAAa;AACvB,WAAO,IAAI,WAAW,KAAK,QAAQ,KAAK,SAAS;AAAA,EAClD;AAAA,EAEA,IAAW,eAAe;AACzB,WAAO,KAAK,OAAO,mBAAA;AAAA,EACpB;AAAA,EAEA,MAAa,YAAe,IAAwF;AACnH,WAAO,MAAM,KAAK,OAAO,YAAY,OAAM,OAAM;AAChD,YAAM,GAAG,MAAM,WAAW,eAAe;AACzC,aAAO,MAAM,GAAG,IAAI,gBAAgB,IAAI,KAAK,SAAS,CAAC;AAAA,IACxD,CAAC;AAAA,EACF;AAAA,EAEA,MAAa,MAAS,IAA+F;AACpH,WAAO,MAAM,KAAK,OAAO,MAAM,OAAM,OAAM;AAC1C,aAAO,MAAM,GAAG,IAAI,gBAAgB,IAAI,KAAK,SAAS,CAAC;AAAA,IACxD,CAAC;AAAA,EACF;AAAA,EAEO,UAA6B,YAAgD,KAAyB;AAC5G,UAAM,WAAW,KAAK,QAAQ,IAAI,UAAU;AAC5C,QAAI,UAAU;AACb,aAAO,SAAS,GAAG;AAAA,IACpB;AACA,UAAM,YAAY,gBAAgB,YAAY,IAAI;AAClD,SAAK,QAAQ,IAAI,YAAY,SAAS;AACtC,WAAO,UAAU,GAAG;AAAA,EACrB;AACD;"}

package/dist/production/src/model/utils/Response.cjs

@@ -10,9 +10,10 @@ class ResponseOk {
   }
 }
 class ResponseError {
-  constructor(error, errorMessage) {
+  constructor(error, errorMessage, metadata) {
     this.error = error;
     this.errorMessage = errorMessage;
+    this.metadata = metadata;
     __publicField(this, "ok", false);
   }
 }

package/dist/production/src/model/utils/Response.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"Response.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/Response.ts"],"sourcesContent":["export type Response<Result, Error> = ResponseOk<Result> | (Error extends never ? never : ResponseError<Error>)\n\nexport class ResponseOk<Result> {\n\tpublic readonly ok = true\n\n\tconstructor(public readonly result: Result) {}\n}\n\nexport class ResponseError<const Error> {\n\tpublic readonly ok = false\n\n\tconstructor(public readonly error: Error, public readonly errorMessage: string) {}\n}\n"],"names":[],"mappings":";;;;;AAEO,MAAM,WAAmB;AAAA,EAG/B,YAA4B,QAAgB;AAAhB,SAAA,SAAA;AAF5B,kBAAA,MAAgB,MAAK,IAAA;AAAA,EAAA;AAGtB;AAEO,MAAM,cAA2B;AAAA,EAGvC,YAA4B,OAA8B,cAAsB;AAApD,SAAA,QAAA;AAA8B,SAAA,eAAA;AAF1D,kBAAA,MAAgB,MAAK,KAAA;AAAA,EAAA;AAGtB;;;"}
+{"version":3,"file":"Response.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/Response.ts"],"sourcesContent":["export type Response<Result, Error, ErrorMetadata extends {} | undefined = undefined> =\n\t| ResponseOk<Result>\n\t| (Error extends never ? never : ResponseError<Error, ErrorMetadata>)\n\nexport class ResponseOk<Result> {\n\tpublic readonly ok = true\n\n\tconstructor(public readonly result: Result) {}\n}\n\nexport class ResponseError<const Error, Metadata extends {} | undefined = undefined> {\n\tpublic readonly ok = false\n\n\tconstructor(\n\t\tpublic readonly error: Error,\n\t\tpublic readonly errorMessage: string,\n\t\tpublic readonly metadata?: Metadata,\n\t) {}\n}\n"],"names":[],"mappings":";;;;;AAIO,MAAM,WAAmB;AAAA,EAG/B,YAA4B,QAAgB;AAAhB,SAAA,SAAA;AAF5B,kBAAA,MAAgB,MAAK,IAAA;AAAA,EAEwB;AAC9C;AAEO,MAAM,cAAwE;AAAA,EAGpF,YACiB,OACA,cACA,UACf;AAHe,SAAA,QAAA;AACA,SAAA,eAAA;AACA,SAAA,WAAA;AALjB,kBAAA,MAAgB,MAAK,KAAA;AAAA,EAMlB;AACJ;;;"}

package/dist/production/src/model/utils/Response.js

@@ -8,9 +8,10 @@ class ResponseOk {
   }
 }
 class ResponseError {
-  constructor(error, errorMessage) {
+  constructor(error, errorMessage, metadata) {
     this.error = error;
     this.errorMessage = errorMessage;
+    this.metadata = metadata;
     __publicField(this, "ok", false);
   }
 }

package/dist/production/src/model/utils/Response.js.map

@@ -1 +1 @@
-{"version":3,"file":"Response.js","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/Response.ts"],"sourcesContent":["export type Response<Result, Error> = ResponseOk<Result> | (Error extends never ? never : ResponseError<Error>)\n\nexport class ResponseOk<Result> {\n\tpublic readonly ok = true\n\n\tconstructor(public readonly result: Result) {}\n}\n\nexport class ResponseError<const Error> {\n\tpublic readonly ok = false\n\n\tconstructor(public readonly error: Error, public readonly errorMessage: string) {}\n}\n"],"names":[],"mappings":";;;AAEO,MAAM,WAAmB;AAAA,EAG/B,YAA4B,QAAgB;AAAhB,SAAA,SAAA;AAF5B,kBAAA,MAAgB,MAAK,IAAA;AAAA,EAAA;AAGtB;AAEO,MAAM,cAA2B;AAAA,EAGvC,YAA4B,OAA8B,cAAsB;AAApD,SAAA,QAAA;AAA8B,SAAA,eAAA;AAF1D,kBAAA,MAAgB,MAAK,KAAA;AAAA,EAAA;AAGtB;"}
+{"version":3,"file":"Response.js","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/Response.ts"],"sourcesContent":["export type Response<Result, Error, ErrorMetadata extends {} | undefined = undefined> =\n\t| ResponseOk<Result>\n\t| (Error extends never ? never : ResponseError<Error, ErrorMetadata>)\n\nexport class ResponseOk<Result> {\n\tpublic readonly ok = true\n\n\tconstructor(public readonly result: Result) {}\n}\n\nexport class ResponseError<const Error, Metadata extends {} | undefined = undefined> {\n\tpublic readonly ok = false\n\n\tconstructor(\n\t\tpublic readonly error: Error,\n\t\tpublic readonly errorMessage: string,\n\t\tpublic readonly metadata?: Metadata,\n\t) {}\n}\n"],"names":[],"mappings":";;;AAIO,MAAM,WAAmB;AAAA,EAG/B,YAA4B,QAAgB;AAAhB,SAAA,SAAA;AAF5B,kBAAA,MAAgB,MAAK,IAAA;AAAA,EAEwB;AAC9C;AAEO,MAAM,cAAwE;AAAA,EAGpF,YACiB,OACA,cACA,UACf;AAHe,SAAA,QAAA;AACA,SAAA,eAAA;AACA,SAAA,WAAA;AALjB,kBAAA,MAAgB,MAAK,KAAA;AAAA,EAMlB;AACJ;"}