@contember/engine-tenant-api 2.1.0-alpha.9 → 2.1.0-beta.2

package/dist/production/src/resolvers/mutation/projectMember/AddProjectMemberMutationResolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"AddProjectMemberMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/projectMember/AddProjectMemberMutationResolver.ts"],"sourcesContent":["import {\n\tAddProjectMemberErrorCode,\n\tAddProjectMemberResponse,\n\tMutationAddProjectMemberArgs,\n\tMutationResolvers,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { MembershipValidator, PermissionActions, ProjectManager, ProjectMemberManager } from '../../../model'\nimport { createMembershipValidationErrorResult } from '../../membershipUtils'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\n\nexport class AddProjectMemberMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly membershipValidator: MembershipValidator,\n\t) {}\n\n\tasync addProjectMember(\n\t\tparent: any,\n\t\t{ projectSlug, identityId, memberships }: MutationAddProjectMemberArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<AddProjectMemberResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tawait context.requireAccess({\n\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\taction: PermissionActions.PROJECT_ADD_MEMBER(memberships),\n\t\t\tmessage: 'You are not allowed to add a project member',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tconst validationResult = await this.membershipValidator.validate(project.slug, memberships)\n\t\tif (validationResult.length > 0) {\n\t\t\tconst errors = createMembershipValidationErrorResult(validationResult)\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terrors: errors,\n\t\t\t\terror: errors[0],\n\t\t\t}\n\t\t}\n\n\t\tconst result = await this.projectMemberManager.addProjectMember(context.db, project.id, identityId, memberships)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAWO,MAAM,iCAA8D;AAAA,EAC1E,YACkB,sBACA,gBACA,qBAChB;AAHgB,SAAA,uBAAA;AACA,SAAA,iBAAA;AACA,SAAA,sBAAA;AAAA,EAAA;AAAA,EAGlB,MAAM,iBACL,QACA,EAAE,aAAa,YAAY,eAC3B,SACoC;AACpC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQ,kBAAkB,mBAAmB,WAAW;AAAA,MACxD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACN,aAAA,8BAA8B,qBAAqB,WAAW;AAAA,IAAA;AAEtE,UAAM,mBAAmB,MAAM,KAAK,oBAAoB,SAAS,QAAQ,MAAM,WAAW;AACtF,QAAA,iBAAiB,SAAS,GAAG;AAC1B,YAAA,SAAS,sCAAsC,gBAAgB;AAC9D,aAAA;AAAA,QACN,IAAI;AAAA,QACJ;AAAA,QACA,OAAO,OAAO,CAAC;AAAA,MAChB;AAAA,IAAA;AAGK,UAAA,SAAS,MAAM,KAAK,qBAAqB,iBAAiB,QAAQ,IAAI,QAAQ,IAAI,YAAY,WAAW;AAE3G,QAAA,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAAA;AAGtD,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IACT;AAAA,EAAA;AAEF;"}
+{"version":3,"file":"AddProjectMemberMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/projectMember/AddProjectMemberMutationResolver.ts"],"sourcesContent":["import { AddProjectMemberErrorCode, AddProjectMemberResponse, MutationAddProjectMemberArgs, MutationResolvers } from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { MembershipValidator, PermissionActions, ProjectManager, ProjectMemberManager } from '../../../model'\nimport { createMembershipValidationErrorResult } from '../../membershipUtils'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\n\nexport class AddProjectMemberMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly membershipValidator: MembershipValidator,\n\t) {}\n\n\tasync addProjectMember(\n\t\tparent: any,\n\t\t{ projectSlug, identityId, memberships }: MutationAddProjectMemberArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<AddProjectMemberResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tawait context.requireAccess({\n\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\taction: PermissionActions.PROJECT_ADD_MEMBER(memberships),\n\t\t\tmessage: 'You are not allowed to add a project member',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tconst validationResult = await this.membershipValidator.validate(project.slug, memberships)\n\t\tif (validationResult.length > 0) {\n\t\t\tconst errors = createMembershipValidationErrorResult(validationResult)\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terrors: errors,\n\t\t\t\terror: errors[0],\n\t\t\t}\n\t\t}\n\n\t\tconst result = await this.projectMemberManager.addProjectMember(context.db, project.id, identityId, memberships)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAMO,MAAM,iCAA8D;AAAA,EAC1E,YACkB,sBACA,gBACA,qBAChB;AAHgB,SAAA,uBAAA;AACA,SAAA,iBAAA;AACA,SAAA,sBAAA;AAAA,EACf;AAAA,EAEH,MAAM,iBACL,QACA,EAAE,aAAa,YAAY,YAAA,GAC3B,SACoC;AACpC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQ,kBAAkB,mBAAmB,WAAW;AAAA,MACxD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACb,aAAO,8BAA8B,qBAAqB,WAAW;AAAA,IACtE;AACA,UAAM,mBAAmB,MAAM,KAAK,oBAAoB,SAAS,QAAQ,MAAM,WAAW;AAC1F,QAAI,iBAAiB,SAAS,GAAG;AAChC,YAAM,SAAS,sCAAsC,gBAAgB;AACrE,aAAO;AAAA,QACN,IAAI;AAAA,QACJ;AAAA,QACA,OAAO,OAAO,CAAC;AAAA,MAAA;AAAA,IAEjB;AAEA,UAAM,SAAS,MAAM,KAAK,qBAAqB,iBAAiB,QAAQ,IAAI,QAAQ,IAAI,YAAY,WAAW;AAE/G,QAAI,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEA,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IAAC;AAAA,EAEX;AACD;"}

package/dist/production/src/resolvers/mutation/projectMember/RemoveProjectMemberMutationResolver.cjs

@@ -15,6 +15,7 @@ require("openid-client");
 require("@contember/typesafe");
 require("../../../model/service/idp/providers/OIDCTypes.cjs");
 require("../../../model/service/idp/providers/FacebookProvider.cjs");
+require("../../../model/service/AuthLogService.cjs");
 require("@contember/schema-utils");
 require("otpauth");
 const errorUtils = require("../../errorUtils.cjs");

package/dist/production/src/resolvers/mutation/projectMember/RemoveProjectMemberMutationResolver.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"RemoveProjectMemberMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/projectMember/RemoveProjectMemberMutationResolver.ts"],"sourcesContent":["import {\n\tMutationRemoveProjectMemberArgs,\n\tMutationResolvers,\n\tRemoveProjectMemberErrorCode,\n\tRemoveProjectMemberResponse,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, ProjectManager, ProjectMemberManager } from '../../../model'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\n\nexport class RemoveProjectMemberMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t) {}\n\n\tasync removeProjectMember(\n\t\tparent: any,\n\t\t{ projectSlug, identityId }: MutationRemoveProjectMemberArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<RemoveProjectMemberResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tconst projectScope = await context.permissionContext.createProjectScope(project)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_REMOVE_MEMBER([]),\n\t\t\tmessage: 'You are not allowed to remove a project member',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tconst memberships = await this.projectMemberManager.getStoredProjectsMemberships(\n\t\t\tcontext.db,\n\t\t\t{ id: project.id },\n\t\t\t{ id: identityId },\n\t\t\tcontext.permissionContext.createAccessVerifier(projectScope),\n\t\t)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_REMOVE_MEMBER(memberships),\n\t\t\tmessage: 'You are not allowed to remove a project member',\n\t\t})\n\n\t\tconst result = await this.projectMemberManager.removeProjectMember(context.db, project.id, identityId)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":["PermissionActions","createProjectNotFoundResponse","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;AAUO,MAAM,oCAAiE;AAAA,EAC7E,YACkB,sBACA,gBAChB;AAFgB,SAAA,uBAAA;AACA,SAAA,iBAAA;AAAA,EAAA;AAAA,EAGlB,MAAM,oBACL,QACA,EAAE,aAAa,WAAA,GACf,SACuC;AACvC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,eAAe,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAC/E,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQA,kBAAAA,kBAAkB,sBAAsB,EAAE;AAAA,MAClD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACN,aAAAC,WAAA,8BAA8B,qBAAqB,WAAW;AAAA,IAAA;AAEhE,UAAA,cAAc,MAAM,KAAK,qBAAqB;AAAA,MACnD,QAAQ;AAAA,MACR,EAAE,IAAI,QAAQ,GAAG;AAAA,MACjB,EAAE,IAAI,WAAW;AAAA,MACjB,QAAQ,kBAAkB,qBAAqB,YAAY;AAAA,IAC5D;AACA,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQD,kBAAAA,kBAAkB,sBAAsB,WAAW;AAAA,MAC3D,SAAS;AAAA,IAAA,CACT;AAEK,UAAA,SAAS,MAAM,KAAK,qBAAqB,oBAAoB,QAAQ,IAAI,QAAQ,IAAI,UAAU;AAEjG,QAAA,CAAC,OAAO,IAAI;AACf,aAAOE,WAAoB,oBAAA,OAAO,OAAO,OAAO,YAAY;AAAA,IAAA;AAGtD,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IACT;AAAA,EAAA;AAEF;;"}
+{"version":3,"file":"RemoveProjectMemberMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/projectMember/RemoveProjectMemberMutationResolver.ts"],"sourcesContent":["import { MutationRemoveProjectMemberArgs, MutationResolvers, RemoveProjectMemberErrorCode, RemoveProjectMemberResponse } from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, ProjectManager, ProjectMemberManager } from '../../../model'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\n\nexport class RemoveProjectMemberMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t) {}\n\n\tasync removeProjectMember(\n\t\tparent: any,\n\t\t{ projectSlug, identityId }: MutationRemoveProjectMemberArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<RemoveProjectMemberResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tconst projectScope = await context.permissionContext.createProjectScope(project)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_REMOVE_MEMBER([]),\n\t\t\tmessage: 'You are not allowed to remove a project member',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tconst memberships = await this.projectMemberManager.getStoredProjectsMemberships(\n\t\t\tcontext.db,\n\t\t\t{ id: project.id },\n\t\t\t{ id: identityId },\n\t\t\tcontext.permissionContext.createAccessVerifier(projectScope),\n\t\t)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_REMOVE_MEMBER(memberships),\n\t\t\tmessage: 'You are not allowed to remove a project member',\n\t\t})\n\n\t\tconst result = await this.projectMemberManager.removeProjectMember(context.db, project.id, identityId)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":["PermissionActions","createProjectNotFoundResponse","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAKO,MAAM,oCAAiE;AAAA,EAC7E,YACkB,sBACA,gBAChB;AAFgB,SAAA,uBAAA;AACA,SAAA,iBAAA;AAAA,EACf;AAAA,EAEH,MAAM,oBACL,QACA,EAAE,aAAa,WAAA,GACf,SACuC;AACvC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,eAAe,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAC/E,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQA,kBAAAA,kBAAkB,sBAAsB,EAAE;AAAA,MAClD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACb,aAAOC,WAAAA,8BAA8B,qBAAqB,WAAW;AAAA,IACtE;AACA,UAAM,cAAc,MAAM,KAAK,qBAAqB;AAAA,MACnD,QAAQ;AAAA,MACR,EAAE,IAAI,QAAQ,GAAA;AAAA,MACd,EAAE,IAAI,WAAA;AAAA,MACN,QAAQ,kBAAkB,qBAAqB,YAAY;AAAA,IAAA;AAE5D,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQD,kBAAAA,kBAAkB,sBAAsB,WAAW;AAAA,MAC3D,SAAS;AAAA,IAAA,CACT;AAED,UAAM,SAAS,MAAM,KAAK,qBAAqB,oBAAoB,QAAQ,IAAI,QAAQ,IAAI,UAAU;AAErG,QAAI,CAAC,OAAO,IAAI;AACf,aAAOE,WAAAA,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEA,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IAAC;AAAA,EAEX;AACD;;"}

package/dist/production/src/resolvers/mutation/projectMember/RemoveProjectMemberMutationResolver.js

@@ -13,6 +13,7 @@ import "openid-client";
 import "@contember/typesafe";
 import "../../../model/service/idp/providers/OIDCTypes.js";
 import "../../../model/service/idp/providers/FacebookProvider.js";
+import "../../../model/service/AuthLogService.js";
 import "@contember/schema-utils";
 import "otpauth";
 import { createProjectNotFoundResponse, createErrorResponse } from "../../errorUtils.js";

package/dist/production/src/resolvers/mutation/projectMember/RemoveProjectMemberMutationResolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"RemoveProjectMemberMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/projectMember/RemoveProjectMemberMutationResolver.ts"],"sourcesContent":["import {\n\tMutationRemoveProjectMemberArgs,\n\tMutationResolvers,\n\tRemoveProjectMemberErrorCode,\n\tRemoveProjectMemberResponse,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, ProjectManager, ProjectMemberManager } from '../../../model'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\n\nexport class RemoveProjectMemberMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t) {}\n\n\tasync removeProjectMember(\n\t\tparent: any,\n\t\t{ projectSlug, identityId }: MutationRemoveProjectMemberArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<RemoveProjectMemberResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tconst projectScope = await context.permissionContext.createProjectScope(project)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_REMOVE_MEMBER([]),\n\t\t\tmessage: 'You are not allowed to remove a project member',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tconst memberships = await this.projectMemberManager.getStoredProjectsMemberships(\n\t\t\tcontext.db,\n\t\t\t{ id: project.id },\n\t\t\t{ id: identityId },\n\t\t\tcontext.permissionContext.createAccessVerifier(projectScope),\n\t\t)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_REMOVE_MEMBER(memberships),\n\t\t\tmessage: 'You are not allowed to remove a project member',\n\t\t})\n\n\t\tconst result = await this.projectMemberManager.removeProjectMember(context.db, project.id, identityId)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAUO,MAAM,oCAAiE;AAAA,EAC7E,YACkB,sBACA,gBAChB;AAFgB,SAAA,uBAAA;AACA,SAAA,iBAAA;AAAA,EAAA;AAAA,EAGlB,MAAM,oBACL,QACA,EAAE,aAAa,WAAA,GACf,SACuC;AACvC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,eAAe,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAC/E,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQ,kBAAkB,sBAAsB,EAAE;AAAA,MAClD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACN,aAAA,8BAA8B,qBAAqB,WAAW;AAAA,IAAA;AAEhE,UAAA,cAAc,MAAM,KAAK,qBAAqB;AAAA,MACnD,QAAQ;AAAA,MACR,EAAE,IAAI,QAAQ,GAAG;AAAA,MACjB,EAAE,IAAI,WAAW;AAAA,MACjB,QAAQ,kBAAkB,qBAAqB,YAAY;AAAA,IAC5D;AACA,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQ,kBAAkB,sBAAsB,WAAW;AAAA,MAC3D,SAAS;AAAA,IAAA,CACT;AAEK,UAAA,SAAS,MAAM,KAAK,qBAAqB,oBAAoB,QAAQ,IAAI,QAAQ,IAAI,UAAU;AAEjG,QAAA,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAAA;AAGtD,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IACT;AAAA,EAAA;AAEF;"}
+{"version":3,"file":"RemoveProjectMemberMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/projectMember/RemoveProjectMemberMutationResolver.ts"],"sourcesContent":["import { MutationRemoveProjectMemberArgs, MutationResolvers, RemoveProjectMemberErrorCode, RemoveProjectMemberResponse } from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, ProjectManager, ProjectMemberManager } from '../../../model'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\n\nexport class RemoveProjectMemberMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t) {}\n\n\tasync removeProjectMember(\n\t\tparent: any,\n\t\t{ projectSlug, identityId }: MutationRemoveProjectMemberArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<RemoveProjectMemberResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tconst projectScope = await context.permissionContext.createProjectScope(project)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_REMOVE_MEMBER([]),\n\t\t\tmessage: 'You are not allowed to remove a project member',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tconst memberships = await this.projectMemberManager.getStoredProjectsMemberships(\n\t\t\tcontext.db,\n\t\t\t{ id: project.id },\n\t\t\t{ id: identityId },\n\t\t\tcontext.permissionContext.createAccessVerifier(projectScope),\n\t\t)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_REMOVE_MEMBER(memberships),\n\t\t\tmessage: 'You are not allowed to remove a project member',\n\t\t})\n\n\t\tconst result = await this.projectMemberManager.removeProjectMember(context.db, project.id, identityId)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAKO,MAAM,oCAAiE;AAAA,EAC7E,YACkB,sBACA,gBAChB;AAFgB,SAAA,uBAAA;AACA,SAAA,iBAAA;AAAA,EACf;AAAA,EAEH,MAAM,oBACL,QACA,EAAE,aAAa,WAAA,GACf,SACuC;AACvC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,eAAe,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAC/E,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQ,kBAAkB,sBAAsB,EAAE;AAAA,MAClD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACb,aAAO,8BAA8B,qBAAqB,WAAW;AAAA,IACtE;AACA,UAAM,cAAc,MAAM,KAAK,qBAAqB;AAAA,MACnD,QAAQ;AAAA,MACR,EAAE,IAAI,QAAQ,GAAA;AAAA,MACd,EAAE,IAAI,WAAA;AAAA,MACN,QAAQ,kBAAkB,qBAAqB,YAAY;AAAA,IAAA;AAE5D,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQ,kBAAkB,sBAAsB,WAAW;AAAA,MAC3D,SAAS;AAAA,IAAA,CACT;AAED,UAAM,SAAS,MAAM,KAAK,qBAAqB,oBAAoB,QAAQ,IAAI,QAAQ,IAAI,UAAU;AAErG,QAAI,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEA,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IAAC;AAAA,EAEX;AACD;"}

package/dist/production/src/resolvers/mutation/projectMember/UpdateProjectMemberMutationResolver.cjs

@@ -16,6 +16,7 @@ require("openid-client");
 require("@contember/typesafe");
 require("../../../model/service/idp/providers/OIDCTypes.cjs");
 require("../../../model/service/idp/providers/FacebookProvider.cjs");
+require("../../../model/service/AuthLogService.cjs");
 const schemaUtils = require("@contember/schema-utils");
 require("otpauth");
 const membershipUtils$1 = require("../../membershipUtils.cjs");

package/dist/production/src/resolvers/mutation/projectMember/UpdateProjectMemberMutationResolver.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"UpdateProjectMemberMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/projectMember/UpdateProjectMemberMutationResolver.ts"],"sourcesContent":["import {\n\tMutationResolvers,\n\tMutationUpdateProjectMemberArgs,\n\tUpdateProjectMemberErrorCode,\n\tUpdateProjectMemberResponse,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport {\n\tMembershipValidationErrorType,\n\tMembershipValidator,\n\tPermissionActions,\n\tProjectManager,\n\tProjectMemberManager,\n} from '../../../model'\nimport { createMembershipValidationErrorResult } from '../../membershipUtils'\nimport { createMembershipModification } from '../../../model/service/membershipUtils'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\nimport { Acl } from '@contember/schema'\n\nexport class UpdateProjectMemberMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly membershipValidator: MembershipValidator,\n\t) {}\n\n\tasync updateProjectMember(\n\t\tparent: any,\n\t\t{ projectSlug, identityId, memberships }: MutationUpdateProjectMemberArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<UpdateProjectMemberResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tconst projectScope = await context.permissionContext.createProjectScope(project)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_UPDATE_MEMBER([]),\n\t\t\tmessage: 'You are not allowed to update project member variables',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tconst visibleMemberships = await this.projectMemberManager.getStoredProjectsMemberships(\n\t\t\tcontext.db,\n\t\t\t{ id: project.id },\n\t\t\t{ id: identityId },\n\t\t\tcontext.permissionContext.createAccessVerifier(projectScope),\n\t\t)\n\t\tconst membershipPatch = createMembershipModification(visibleMemberships, memberships)\n\n\t\tconst aclMemberships: Acl.Membership[] = membershipPatch.map(it => ({\n\t\t\trole: it.role,\n\t\t\tvariables: it.variables.map(it => ({\n\t\t\t\tname: it.name,\n\t\t\t\tvalues: 'set' in it ? it.set : [...it.remove, ...it.append],\n\t\t\t})),\n\t\t}))\n\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_UPDATE_MEMBER(aclMemberships),\n\t\t\tmessage: 'You are not allowed to update project member variables',\n\t\t})\n\n\t\tconst validationResult = (await this.membershipValidator.validate(project.slug, memberships)).filter(\n\t\t\tit => it.error !== MembershipValidationErrorType.VARIABLE_EMPTY,\n\t\t)\n\t\tif (validationResult.length > 0) {\n\t\t\tconst errors = createMembershipValidationErrorResult(validationResult)\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terrors: errors,\n\t\t\t\terror: errors[0],\n\t\t\t}\n\t\t}\n\n\t\tconst result = await this.projectMemberManager.updateProjectMember(context.db, project.id, identityId, membershipPatch)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":["PermissionActions","createProjectNotFoundResponse","createMembershipModification","it","MembershipValidationErrorType","createMembershipValidationErrorResult","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAmBO,MAAM,oCAAiE;AAAA,EAC7E,YACkB,sBACA,gBACA,qBAChB;AAHgB,SAAA,uBAAA;AACA,SAAA,iBAAA;AACA,SAAA,sBAAA;AAAA,EAAA;AAAA,EAGlB,MAAM,oBACL,QACA,EAAE,aAAa,YAAY,eAC3B,SACuC;AACvC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,eAAe,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAC/E,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQA,kBAAAA,kBAAkB,sBAAsB,EAAE;AAAA,MAClD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACN,aAAAC,WAAA,8BAA8B,qBAAqB,WAAW;AAAA,IAAA;AAEhE,UAAA,qBAAqB,MAAM,KAAK,qBAAqB;AAAA,MAC1D,QAAQ;AAAA,MACR,EAAE,IAAI,QAAQ,GAAG;AAAA,MACjB,EAAE,IAAI,WAAW;AAAA,MACjB,QAAQ,kBAAkB,qBAAqB,YAAY;AAAA,IAC5D;AACM,UAAA,kBAAkBC,gBAAAA,6BAA6B,oBAAoB,WAAW;AAE9E,UAAA,iBAAmC,gBAAgB,IAAI,CAAO,QAAA;AAAA,MACnE,MAAM,GAAG;AAAA,MACT,WAAW,GAAG,UAAU,IAAI,CAAAC,SAAO;AAAA,QAClC,MAAMA,IAAG;AAAA,QACT,QAAQ,SAASA,MAAKA,IAAG,MAAM,CAAC,GAAGA,IAAG,QAAQ,GAAGA,IAAG,MAAM;AAAA,MAAA,EACzD;AAAA,IAAA,EACD;AAEF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQH,kBAAAA,kBAAkB,sBAAsB,cAAc;AAAA,MAC9D,SAAS;AAAA,IAAA,CACT;AAEK,UAAA,oBAAoB,MAAM,KAAK,oBAAoB,SAAS,QAAQ,MAAM,WAAW,GAAG;AAAA,MAC7F,CAAA,OAAM,GAAG,UAAUI,0CAA8B;AAAA,IAClD;AACI,QAAA,iBAAiB,SAAS,GAAG;AAC1B,YAAA,SAASC,wDAAsC,gBAAgB;AAC9D,aAAA;AAAA,QACN,IAAI;AAAA,QACJ;AAAA,QACA,OAAO,OAAO,CAAC;AAAA,MAChB;AAAA,IAAA;AAGK,UAAA,SAAS,MAAM,KAAK,qBAAqB,oBAAoB,QAAQ,IAAI,QAAQ,IAAI,YAAY,eAAe;AAElH,QAAA,CAAC,OAAO,IAAI;AACf,aAAOC,WAAoB,oBAAA,OAAO,OAAO,OAAO,YAAY;AAAA,IAAA;AAGtD,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IACT;AAAA,EAAA;AAEF;;"}
+{"version":3,"file":"UpdateProjectMemberMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/projectMember/UpdateProjectMemberMutationResolver.ts"],"sourcesContent":["import { MutationResolvers, MutationUpdateProjectMemberArgs, UpdateProjectMemberErrorCode, UpdateProjectMemberResponse } from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { MembershipValidationErrorType, MembershipValidator, PermissionActions, ProjectManager, ProjectMemberManager } from '../../../model'\nimport { createMembershipValidationErrorResult } from '../../membershipUtils'\nimport { createMembershipModification } from '../../../model/service/membershipUtils'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\nimport { Acl } from '@contember/schema'\n\nexport class UpdateProjectMemberMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly membershipValidator: MembershipValidator,\n\t) {}\n\n\tasync updateProjectMember(\n\t\tparent: any,\n\t\t{ projectSlug, identityId, memberships }: MutationUpdateProjectMemberArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<UpdateProjectMemberResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tconst projectScope = await context.permissionContext.createProjectScope(project)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_UPDATE_MEMBER([]),\n\t\t\tmessage: 'You are not allowed to update project member variables',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tconst visibleMemberships = await this.projectMemberManager.getStoredProjectsMemberships(\n\t\t\tcontext.db,\n\t\t\t{ id: project.id },\n\t\t\t{ id: identityId },\n\t\t\tcontext.permissionContext.createAccessVerifier(projectScope),\n\t\t)\n\t\tconst membershipPatch = createMembershipModification(visibleMemberships, memberships)\n\n\t\tconst aclMemberships: Acl.Membership[] = membershipPatch.map(it => ({\n\t\t\trole: it.role,\n\t\t\tvariables: it.variables.map(it => ({\n\t\t\t\tname: it.name,\n\t\t\t\tvalues: 'set' in it ? it.set : [...it.remove, ...it.append],\n\t\t\t})),\n\t\t}))\n\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_UPDATE_MEMBER(aclMemberships),\n\t\t\tmessage: 'You are not allowed to update project member variables',\n\t\t})\n\n\t\tconst validationResult = (await this.membershipValidator.validate(project.slug, memberships)).filter(\n\t\t\tit => it.error !== MembershipValidationErrorType.VARIABLE_EMPTY,\n\t\t)\n\t\tif (validationResult.length > 0) {\n\t\t\tconst errors = createMembershipValidationErrorResult(validationResult)\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terrors: errors,\n\t\t\t\terror: errors[0],\n\t\t\t}\n\t\t}\n\n\t\tconst result = await this.projectMemberManager.updateProjectMember(context.db, project.id, identityId, membershipPatch)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":["PermissionActions","createProjectNotFoundResponse","createMembershipModification","it","MembershipValidationErrorType","createMembershipValidationErrorResult","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAQO,MAAM,oCAAiE;AAAA,EAC7E,YACkB,sBACA,gBACA,qBAChB;AAHgB,SAAA,uBAAA;AACA,SAAA,iBAAA;AACA,SAAA,sBAAA;AAAA,EACf;AAAA,EAEH,MAAM,oBACL,QACA,EAAE,aAAa,YAAY,YAAA,GAC3B,SACuC;AACvC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,eAAe,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAC/E,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQA,kBAAAA,kBAAkB,sBAAsB,EAAE;AAAA,MAClD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACb,aAAOC,WAAAA,8BAA8B,qBAAqB,WAAW;AAAA,IACtE;AACA,UAAM,qBAAqB,MAAM,KAAK,qBAAqB;AAAA,MAC1D,QAAQ;AAAA,MACR,EAAE,IAAI,QAAQ,GAAA;AAAA,MACd,EAAE,IAAI,WAAA;AAAA,MACN,QAAQ,kBAAkB,qBAAqB,YAAY;AAAA,IAAA;AAE5D,UAAM,kBAAkBC,gBAAAA,6BAA6B,oBAAoB,WAAW;AAEpF,UAAM,iBAAmC,gBAAgB,IAAI,CAAA,QAAO;AAAA,MACnE,MAAM,GAAG;AAAA,MACT,WAAW,GAAG,UAAU,IAAI,CAAAC,SAAO;AAAA,QAClC,MAAMA,IAAG;AAAA,QACT,QAAQ,SAASA,MAAKA,IAAG,MAAM,CAAC,GAAGA,IAAG,QAAQ,GAAGA,IAAG,MAAM;AAAA,MAAA,EACzD;AAAA,IAAA,EACD;AAEF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQH,kBAAAA,kBAAkB,sBAAsB,cAAc;AAAA,MAC9D,SAAS;AAAA,IAAA,CACT;AAED,UAAM,oBAAoB,MAAM,KAAK,oBAAoB,SAAS,QAAQ,MAAM,WAAW,GAAG;AAAA,MAC7F,CAAA,OAAM,GAAG,UAAUI,0CAA8B;AAAA,IAAA;AAElD,QAAI,iBAAiB,SAAS,GAAG;AAChC,YAAM,SAASC,kBAAAA,sCAAsC,gBAAgB;AACrE,aAAO;AAAA,QACN,IAAI;AAAA,QACJ;AAAA,QACA,OAAO,OAAO,CAAC;AAAA,MAAA;AAAA,IAEjB;AAEA,UAAM,SAAS,MAAM,KAAK,qBAAqB,oBAAoB,QAAQ,IAAI,QAAQ,IAAI,YAAY,eAAe;AAEtH,QAAI,CAAC,OAAO,IAAI;AACf,aAAOC,WAAAA,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEA,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IAAC;AAAA,EAEX;AACD;;"}

package/dist/production/src/resolvers/mutation/projectMember/UpdateProjectMemberMutationResolver.js

@@ -14,6 +14,7 @@ import "openid-client";
 import "@contember/typesafe";
 import "../../../model/service/idp/providers/OIDCTypes.js";
 import "../../../model/service/idp/providers/FacebookProvider.js";
+import "../../../model/service/AuthLogService.js";
 import { MembershipValidationErrorType } from "@contember/schema-utils";
 import "otpauth";
 import { createMembershipValidationErrorResult } from "../../membershipUtils.js";

package/dist/production/src/resolvers/mutation/projectMember/UpdateProjectMemberMutationResolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"UpdateProjectMemberMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/projectMember/UpdateProjectMemberMutationResolver.ts"],"sourcesContent":["import {\n\tMutationResolvers,\n\tMutationUpdateProjectMemberArgs,\n\tUpdateProjectMemberErrorCode,\n\tUpdateProjectMemberResponse,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport {\n\tMembershipValidationErrorType,\n\tMembershipValidator,\n\tPermissionActions,\n\tProjectManager,\n\tProjectMemberManager,\n} from '../../../model'\nimport { createMembershipValidationErrorResult } from '../../membershipUtils'\nimport { createMembershipModification } from '../../../model/service/membershipUtils'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\nimport { Acl } from '@contember/schema'\n\nexport class UpdateProjectMemberMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly membershipValidator: MembershipValidator,\n\t) {}\n\n\tasync updateProjectMember(\n\t\tparent: any,\n\t\t{ projectSlug, identityId, memberships }: MutationUpdateProjectMemberArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<UpdateProjectMemberResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tconst projectScope = await context.permissionContext.createProjectScope(project)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_UPDATE_MEMBER([]),\n\t\t\tmessage: 'You are not allowed to update project member variables',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tconst visibleMemberships = await this.projectMemberManager.getStoredProjectsMemberships(\n\t\t\tcontext.db,\n\t\t\t{ id: project.id },\n\t\t\t{ id: identityId },\n\t\t\tcontext.permissionContext.createAccessVerifier(projectScope),\n\t\t)\n\t\tconst membershipPatch = createMembershipModification(visibleMemberships, memberships)\n\n\t\tconst aclMemberships: Acl.Membership[] = membershipPatch.map(it => ({\n\t\t\trole: it.role,\n\t\t\tvariables: it.variables.map(it => ({\n\t\t\t\tname: it.name,\n\t\t\t\tvalues: 'set' in it ? it.set : [...it.remove, ...it.append],\n\t\t\t})),\n\t\t}))\n\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_UPDATE_MEMBER(aclMemberships),\n\t\t\tmessage: 'You are not allowed to update project member variables',\n\t\t})\n\n\t\tconst validationResult = (await this.membershipValidator.validate(project.slug, memberships)).filter(\n\t\t\tit => it.error !== MembershipValidationErrorType.VARIABLE_EMPTY,\n\t\t)\n\t\tif (validationResult.length > 0) {\n\t\t\tconst errors = createMembershipValidationErrorResult(validationResult)\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terrors: errors,\n\t\t\t\terror: errors[0],\n\t\t\t}\n\t\t}\n\n\t\tconst result = await this.projectMemberManager.updateProjectMember(context.db, project.id, identityId, membershipPatch)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":["it"],"mappings":";;;;;;;;;;;;;;;;;;;;AAmBO,MAAM,oCAAiE;AAAA,EAC7E,YACkB,sBACA,gBACA,qBAChB;AAHgB,SAAA,uBAAA;AACA,SAAA,iBAAA;AACA,SAAA,sBAAA;AAAA,EAAA;AAAA,EAGlB,MAAM,oBACL,QACA,EAAE,aAAa,YAAY,eAC3B,SACuC;AACvC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,eAAe,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAC/E,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQ,kBAAkB,sBAAsB,EAAE;AAAA,MAClD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACN,aAAA,8BAA8B,qBAAqB,WAAW;AAAA,IAAA;AAEhE,UAAA,qBAAqB,MAAM,KAAK,qBAAqB;AAAA,MAC1D,QAAQ;AAAA,MACR,EAAE,IAAI,QAAQ,GAAG;AAAA,MACjB,EAAE,IAAI,WAAW;AAAA,MACjB,QAAQ,kBAAkB,qBAAqB,YAAY;AAAA,IAC5D;AACM,UAAA,kBAAkB,6BAA6B,oBAAoB,WAAW;AAE9E,UAAA,iBAAmC,gBAAgB,IAAI,CAAO,QAAA;AAAA,MACnE,MAAM,GAAG;AAAA,MACT,WAAW,GAAG,UAAU,IAAI,CAAAA,SAAO;AAAA,QAClC,MAAMA,IAAG;AAAA,QACT,QAAQ,SAASA,MAAKA,IAAG,MAAM,CAAC,GAAGA,IAAG,QAAQ,GAAGA,IAAG,MAAM;AAAA,MAAA,EACzD;AAAA,IAAA,EACD;AAEF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQ,kBAAkB,sBAAsB,cAAc;AAAA,MAC9D,SAAS;AAAA,IAAA,CACT;AAEK,UAAA,oBAAoB,MAAM,KAAK,oBAAoB,SAAS,QAAQ,MAAM,WAAW,GAAG;AAAA,MAC7F,CAAA,OAAM,GAAG,UAAU,8BAA8B;AAAA,IAClD;AACI,QAAA,iBAAiB,SAAS,GAAG;AAC1B,YAAA,SAAS,sCAAsC,gBAAgB;AAC9D,aAAA;AAAA,QACN,IAAI;AAAA,QACJ;AAAA,QACA,OAAO,OAAO,CAAC;AAAA,MAChB;AAAA,IAAA;AAGK,UAAA,SAAS,MAAM,KAAK,qBAAqB,oBAAoB,QAAQ,IAAI,QAAQ,IAAI,YAAY,eAAe;AAElH,QAAA,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAAA;AAGtD,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IACT;AAAA,EAAA;AAEF;"}
+{"version":3,"file":"UpdateProjectMemberMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/projectMember/UpdateProjectMemberMutationResolver.ts"],"sourcesContent":["import { MutationResolvers, MutationUpdateProjectMemberArgs, UpdateProjectMemberErrorCode, UpdateProjectMemberResponse } from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { MembershipValidationErrorType, MembershipValidator, PermissionActions, ProjectManager, ProjectMemberManager } from '../../../model'\nimport { createMembershipValidationErrorResult } from '../../membershipUtils'\nimport { createMembershipModification } from '../../../model/service/membershipUtils'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\nimport { Acl } from '@contember/schema'\n\nexport class UpdateProjectMemberMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly membershipValidator: MembershipValidator,\n\t) {}\n\n\tasync updateProjectMember(\n\t\tparent: any,\n\t\t{ projectSlug, identityId, memberships }: MutationUpdateProjectMemberArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<UpdateProjectMemberResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tconst projectScope = await context.permissionContext.createProjectScope(project)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_UPDATE_MEMBER([]),\n\t\t\tmessage: 'You are not allowed to update project member variables',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tconst visibleMemberships = await this.projectMemberManager.getStoredProjectsMemberships(\n\t\t\tcontext.db,\n\t\t\t{ id: project.id },\n\t\t\t{ id: identityId },\n\t\t\tcontext.permissionContext.createAccessVerifier(projectScope),\n\t\t)\n\t\tconst membershipPatch = createMembershipModification(visibleMemberships, memberships)\n\n\t\tconst aclMemberships: Acl.Membership[] = membershipPatch.map(it => ({\n\t\t\trole: it.role,\n\t\t\tvariables: it.variables.map(it => ({\n\t\t\t\tname: it.name,\n\t\t\t\tvalues: 'set' in it ? it.set : [...it.remove, ...it.append],\n\t\t\t})),\n\t\t}))\n\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_UPDATE_MEMBER(aclMemberships),\n\t\t\tmessage: 'You are not allowed to update project member variables',\n\t\t})\n\n\t\tconst validationResult = (await this.membershipValidator.validate(project.slug, memberships)).filter(\n\t\t\tit => it.error !== MembershipValidationErrorType.VARIABLE_EMPTY,\n\t\t)\n\t\tif (validationResult.length > 0) {\n\t\t\tconst errors = createMembershipValidationErrorResult(validationResult)\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terrors: errors,\n\t\t\t\terror: errors[0],\n\t\t\t}\n\t\t}\n\n\t\tconst result = await this.projectMemberManager.updateProjectMember(context.db, project.id, identityId, membershipPatch)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":["it"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAQO,MAAM,oCAAiE;AAAA,EAC7E,YACkB,sBACA,gBACA,qBAChB;AAHgB,SAAA,uBAAA;AACA,SAAA,iBAAA;AACA,SAAA,sBAAA;AAAA,EACf;AAAA,EAEH,MAAM,oBACL,QACA,EAAE,aAAa,YAAY,YAAA,GAC3B,SACuC;AACvC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,eAAe,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAC/E,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQ,kBAAkB,sBAAsB,EAAE;AAAA,MAClD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACb,aAAO,8BAA8B,qBAAqB,WAAW;AAAA,IACtE;AACA,UAAM,qBAAqB,MAAM,KAAK,qBAAqB;AAAA,MAC1D,QAAQ;AAAA,MACR,EAAE,IAAI,QAAQ,GAAA;AAAA,MACd,EAAE,IAAI,WAAA;AAAA,MACN,QAAQ,kBAAkB,qBAAqB,YAAY;AAAA,IAAA;AAE5D,UAAM,kBAAkB,6BAA6B,oBAAoB,WAAW;AAEpF,UAAM,iBAAmC,gBAAgB,IAAI,CAAA,QAAO;AAAA,MACnE,MAAM,GAAG;AAAA,MACT,WAAW,GAAG,UAAU,IAAI,CAAAA,SAAO;AAAA,QAClC,MAAMA,IAAG;AAAA,QACT,QAAQ,SAASA,MAAKA,IAAG,MAAM,CAAC,GAAGA,IAAG,QAAQ,GAAGA,IAAG,MAAM;AAAA,MAAA,EACzD;AAAA,IAAA,EACD;AAEF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQ,kBAAkB,sBAAsB,cAAc;AAAA,MAC9D,SAAS;AAAA,IAAA,CACT;AAED,UAAM,oBAAoB,MAAM,KAAK,oBAAoB,SAAS,QAAQ,MAAM,WAAW,GAAG;AAAA,MAC7F,CAAA,OAAM,GAAG,UAAU,8BAA8B;AAAA,IAAA;AAElD,QAAI,iBAAiB,SAAS,GAAG;AAChC,YAAM,SAAS,sCAAsC,gBAAgB;AACrE,aAAO;AAAA,QACN,IAAI;AAAA,QACJ;AAAA,QACA,OAAO,OAAO,CAAC;AAAA,MAAA;AAAA,IAEjB;AAEA,UAAM,SAAS,MAAM,KAAK,qBAAqB,oBAAoB,QAAQ,IAAI,QAAQ,IAAI,YAAY,eAAe;AAEtH,QAAI,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEA,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IAAC;AAAA,EAEX;AACD;"}

package/dist/production/src/resolvers/query/ConfigurationQueryResolver.cjs

@@ -9,12 +9,14 @@ require("../../model/type/ApiKey.cjs");
 require("@contember/database");
 require("node:crypto");
 require("../../model/queries/apiKey/ApiKeyQuery.cjs");
+const ConfigurationQuery = require("../../model/queries/configuration/ConfigurationQuery.cjs");
 require("node:assert");
 require("../../model/service/idp/providers/AppleProvider.cjs");
 require("openid-client");
 require("@contember/typesafe");
 require("../../model/service/idp/providers/OIDCTypes.cjs");
 require("../../model/service/idp/providers/FacebookProvider.cjs");
+require("../../model/service/AuthLogService.cjs");
 require("@contember/schema-utils");
 require("otpauth");
 class ConfigurationQueryResolver {
@@ -26,7 +28,7 @@ class ConfigurationQueryResolver {
       action: PermissionActions.PermissionActions.CONFIG_VIEW,
       message: "You are not allowed to view configuration"
     });
-    return await this.configurationManager.fetchConfiguration(context.db);
+    return await context.db.queryHandler.fetch(new ConfigurationQuery.ConfigurationQuery());
   }
 }
 exports.ConfigurationQueryResolver = ConfigurationQueryResolver;

package/dist/production/src/resolvers/query/ConfigurationQueryResolver.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ConfigurationQueryResolver.cjs","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/ConfigurationQueryResolver.ts"],"sourcesContent":["import { Config, QueryResolvers } from '../../schema'\nimport { PermissionActions } from '../../model'\nimport { TenantResolverContext } from '../TenantResolverContext'\nimport { ConfigurationManager } from '../../model/service/ConfigurationManager'\n\nexport class ConfigurationQueryResolver implements Pick<QueryResolvers, 'configuration'> {\n\n\tconstructor(\n\t\tprivate readonly configurationManager: ConfigurationManager,\n\t) {\n\t}\n\n\tasync configuration(parent: unknown, args: unknown, context: TenantResolverContext): Promise<Config> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.CONFIG_VIEW,\n\t\t\tmessage: 'You are not allowed to view configuration',\n\t\t})\n\n\t\treturn await this.configurationManager.fetchConfiguration(context.db)\n\t}\n}\n"],"names":["PermissionActions"],"mappings":";;;;;;;;;;;;;;;;;;;AAKO,MAAM,2BAA4E;AAAA,EAExF,YACkB,sBAChB;AADgB,SAAA,uBAAA;AAAA,EAAA;AAAA,EAIlB,MAAM,cAAc,QAAiB,MAAe,SAAiD;AACpG,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAkB,kBAAA;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAED,WAAO,MAAM,KAAK,qBAAqB,mBAAmB,QAAQ,EAAE;AAAA,EAAA;AAEtE;;"}
+{"version":3,"file":"ConfigurationQueryResolver.cjs","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/ConfigurationQueryResolver.ts"],"sourcesContent":["import { Config, QueryResolvers } from '../../schema'\nimport { ConfigurationQuery, PermissionActions } from '../../model'\nimport { TenantResolverContext } from '../TenantResolverContext'\nimport { ConfigurationManager } from '../../model/service/ConfigurationManager'\n\nexport class ConfigurationQueryResolver implements Pick<QueryResolvers, 'configuration'> {\n\tconstructor(\n\t\tprivate readonly configurationManager: ConfigurationManager,\n\t) {\n\t}\n\n\tasync configuration(parent: unknown, args: unknown, context: TenantResolverContext): Promise<Config> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.CONFIG_VIEW,\n\t\t\tmessage: 'You are not allowed to view configuration',\n\t\t})\n\n\t\treturn await context.db.queryHandler.fetch(new ConfigurationQuery())\n\t}\n}\n"],"names":["PermissionActions","ConfigurationQuery"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAKO,MAAM,2BAA4E;AAAA,EACxF,YACkB,sBAChB;AADgB,SAAA,uBAAA;AAAA,EAElB;AAAA,EAEA,MAAM,cAAc,QAAiB,MAAe,SAAiD;AACpG,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAAA,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAED,WAAO,MAAM,QAAQ,GAAG,aAAa,MAAM,IAAIC,mBAAAA,oBAAoB;AAAA,EACpE;AACD;;"}

package/dist/production/src/resolvers/query/ConfigurationQueryResolver.js

@@ -7,12 +7,14 @@ import "../../model/type/ApiKey.js";
 import "@contember/database";
 import "node:crypto";
 import "../../model/queries/apiKey/ApiKeyQuery.js";
+import { ConfigurationQuery } from "../../model/queries/configuration/ConfigurationQuery.js";
 import "node:assert";
 import "../../model/service/idp/providers/AppleProvider.js";
 import "openid-client";
 import "@contember/typesafe";
 import "../../model/service/idp/providers/OIDCTypes.js";
 import "../../model/service/idp/providers/FacebookProvider.js";
+import "../../model/service/AuthLogService.js";
 import "@contember/schema-utils";
 import "otpauth";
 class ConfigurationQueryResolver {
@@ -24,7 +26,7 @@ class ConfigurationQueryResolver {
       action: PermissionActions.CONFIG_VIEW,
       message: "You are not allowed to view configuration"
     });
-    return await this.configurationManager.fetchConfiguration(context.db);
+    return await context.db.queryHandler.fetch(new ConfigurationQuery());
   }
 }
 export {

package/dist/production/src/resolvers/query/ConfigurationQueryResolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"ConfigurationQueryResolver.js","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/ConfigurationQueryResolver.ts"],"sourcesContent":["import { Config, QueryResolvers } from '../../schema'\nimport { PermissionActions } from '../../model'\nimport { TenantResolverContext } from '../TenantResolverContext'\nimport { ConfigurationManager } from '../../model/service/ConfigurationManager'\n\nexport class ConfigurationQueryResolver implements Pick<QueryResolvers, 'configuration'> {\n\n\tconstructor(\n\t\tprivate readonly configurationManager: ConfigurationManager,\n\t) {\n\t}\n\n\tasync configuration(parent: unknown, args: unknown, context: TenantResolverContext): Promise<Config> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.CONFIG_VIEW,\n\t\t\tmessage: 'You are not allowed to view configuration',\n\t\t})\n\n\t\treturn await this.configurationManager.fetchConfiguration(context.db)\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAKO,MAAM,2BAA4E;AAAA,EAExF,YACkB,sBAChB;AADgB,SAAA,uBAAA;AAAA,EAAA;AAAA,EAIlB,MAAM,cAAc,QAAiB,MAAe,SAAiD;AACpG,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAED,WAAO,MAAM,KAAK,qBAAqB,mBAAmB,QAAQ,EAAE;AAAA,EAAA;AAEtE;"}
+{"version":3,"file":"ConfigurationQueryResolver.js","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/ConfigurationQueryResolver.ts"],"sourcesContent":["import { Config, QueryResolvers } from '../../schema'\nimport { ConfigurationQuery, PermissionActions } from '../../model'\nimport { TenantResolverContext } from '../TenantResolverContext'\nimport { ConfigurationManager } from '../../model/service/ConfigurationManager'\n\nexport class ConfigurationQueryResolver implements Pick<QueryResolvers, 'configuration'> {\n\tconstructor(\n\t\tprivate readonly configurationManager: ConfigurationManager,\n\t) {\n\t}\n\n\tasync configuration(parent: unknown, args: unknown, context: TenantResolverContext): Promise<Config> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.CONFIG_VIEW,\n\t\t\tmessage: 'You are not allowed to view configuration',\n\t\t})\n\n\t\treturn await context.db.queryHandler.fetch(new ConfigurationQuery())\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAKO,MAAM,2BAA4E;AAAA,EACxF,YACkB,sBAChB;AADgB,SAAA,uBAAA;AAAA,EAElB;AAAA,EAEA,MAAM,cAAc,QAAiB,MAAe,SAAiD;AACpG,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAED,WAAO,MAAM,QAAQ,GAAG,aAAa,MAAM,IAAI,oBAAoB;AAAA,EACpE;AACD;"}

package/dist/production/src/resolvers/query/IDPQueryResolver.cjs

@@ -15,6 +15,7 @@ require("openid-client");
 require("@contember/typesafe");
 require("../../model/service/idp/providers/OIDCTypes.cjs");
 require("../../model/service/idp/providers/FacebookProvider.cjs");
+require("../../model/service/AuthLogService.cjs");
 require("@contember/schema-utils");
 require("otpauth");
 class IDPQueryResolver {

package/dist/production/src/resolvers/query/IDPQueryResolver.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"IDPQueryResolver.cjs","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/IDPQueryResolver.ts"],"sourcesContent":["import { IdentityProvider, QueryResolvers } from '../../schema'\nimport { PermissionActions } from '../../model'\nimport { TenantResolverContext } from '../TenantResolverContext'\nimport { IDPManager } from '../../model/service/idp/IDPManager'\n\nexport class IDPQueryResolver implements QueryResolvers {\n\n\tconstructor(\n\t\tprivate readonly idpManager: IDPManager,\n\t) {\n\t}\n\n\tasync identityProviders(parent: unknown, args: unknown, context: TenantResolverContext): Promise<IdentityProvider[]> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDP_LIST,\n\t\t\tmessage: 'You are not allowed to list IDP',\n\t\t})\n\n\t\treturn await this.idpManager.listIDP(context.db)\n\t}\n}\n"],"names":["PermissionActions"],"mappings":";;;;;;;;;;;;;;;;;;;AAKO,MAAM,iBAA2C;AAAA,EAEvD,YACkB,YAChB;AADgB,SAAA,aAAA;AAAA,EAAA;AAAA,EAIlB,MAAM,kBAAkB,QAAiB,MAAe,SAA6D;AACpH,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAkB,kBAAA;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAED,WAAO,MAAM,KAAK,WAAW,QAAQ,QAAQ,EAAE;AAAA,EAAA;AAEjD;;"}
+{"version":3,"file":"IDPQueryResolver.cjs","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/IDPQueryResolver.ts"],"sourcesContent":["import { IdentityProvider, QueryResolvers } from '../../schema'\nimport { PermissionActions } from '../../model'\nimport { TenantResolverContext } from '../TenantResolverContext'\nimport { IDPManager } from '../../model/service/idp/IDPManager'\n\nexport class IDPQueryResolver implements QueryResolvers {\n\tconstructor(\n\t\tprivate readonly idpManager: IDPManager,\n\t) {\n\t}\n\n\tasync identityProviders(parent: unknown, args: unknown, context: TenantResolverContext): Promise<IdentityProvider[]> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDP_LIST,\n\t\t\tmessage: 'You are not allowed to list IDP',\n\t\t})\n\n\t\treturn await this.idpManager.listIDP(context.db)\n\t}\n}\n"],"names":["PermissionActions"],"mappings":";;;;;;;;;;;;;;;;;;;;AAKO,MAAM,iBAA2C;AAAA,EACvD,YACkB,YAChB;AADgB,SAAA,aAAA;AAAA,EAElB;AAAA,EAEA,MAAM,kBAAkB,QAAiB,MAAe,SAA6D;AACpH,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAAA,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAED,WAAO,MAAM,KAAK,WAAW,QAAQ,QAAQ,EAAE;AAAA,EAChD;AACD;;"}

package/dist/production/src/resolvers/query/IDPQueryResolver.js

@@ -13,6 +13,7 @@ import "openid-client";
 import "@contember/typesafe";
 import "../../model/service/idp/providers/OIDCTypes.js";
 import "../../model/service/idp/providers/FacebookProvider.js";
+import "../../model/service/AuthLogService.js";
 import "@contember/schema-utils";
 import "otpauth";
 class IDPQueryResolver {

package/dist/production/src/resolvers/query/IDPQueryResolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"IDPQueryResolver.js","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/IDPQueryResolver.ts"],"sourcesContent":["import { IdentityProvider, QueryResolvers } from '../../schema'\nimport { PermissionActions } from '../../model'\nimport { TenantResolverContext } from '../TenantResolverContext'\nimport { IDPManager } from '../../model/service/idp/IDPManager'\n\nexport class IDPQueryResolver implements QueryResolvers {\n\n\tconstructor(\n\t\tprivate readonly idpManager: IDPManager,\n\t) {\n\t}\n\n\tasync identityProviders(parent: unknown, args: unknown, context: TenantResolverContext): Promise<IdentityProvider[]> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDP_LIST,\n\t\t\tmessage: 'You are not allowed to list IDP',\n\t\t})\n\n\t\treturn await this.idpManager.listIDP(context.db)\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAKO,MAAM,iBAA2C;AAAA,EAEvD,YACkB,YAChB;AADgB,SAAA,aAAA;AAAA,EAAA;AAAA,EAIlB,MAAM,kBAAkB,QAAiB,MAAe,SAA6D;AACpH,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAED,WAAO,MAAM,KAAK,WAAW,QAAQ,QAAQ,EAAE;AAAA,EAAA;AAEjD;"}
+{"version":3,"file":"IDPQueryResolver.js","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/IDPQueryResolver.ts"],"sourcesContent":["import { IdentityProvider, QueryResolvers } from '../../schema'\nimport { PermissionActions } from '../../model'\nimport { TenantResolverContext } from '../TenantResolverContext'\nimport { IDPManager } from '../../model/service/idp/IDPManager'\n\nexport class IDPQueryResolver implements QueryResolvers {\n\tconstructor(\n\t\tprivate readonly idpManager: IDPManager,\n\t) {\n\t}\n\n\tasync identityProviders(parent: unknown, args: unknown, context: TenantResolverContext): Promise<IdentityProvider[]> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDP_LIST,\n\t\t\tmessage: 'You are not allowed to list IDP',\n\t\t})\n\n\t\treturn await this.idpManager.listIDP(context.db)\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAKO,MAAM,iBAA2C;AAAA,EACvD,YACkB,YAChB;AADgB,SAAA,aAAA;AAAA,EAElB;AAAA,EAEA,MAAM,kBAAkB,QAAiB,MAAe,SAA6D;AACpH,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAED,WAAO,MAAM,KAAK,WAAW,QAAQ,QAAQ,EAAE;AAAA,EAChD;AACD;"}

package/dist/production/src/resolvers/query/MailTemplateQueryResolver.cjs

@@ -17,6 +17,7 @@ require("openid-client");
 require("@contember/typesafe");
 require("../../model/service/idp/providers/OIDCTypes.cjs");
 require("../../model/service/idp/providers/FacebookProvider.cjs");
+require("../../model/service/AuthLogService.cjs");
 require("@contember/schema-utils");
 require("otpauth");
 class MailTemplateQueryResolver {

package/dist/production/src/resolvers/query/MailTemplateQueryResolver.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"MailTemplateQueryResolver.cjs","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/MailTemplateQueryResolver.ts"],"sourcesContent":["import { MailTemplateData, QueryResolvers } from '../../schema'\nimport { MailTemplateListQuery, mailTypeFromDbToSchema, PermissionActions } from '../../model'\nimport { TenantResolverContext } from '../TenantResolverContext'\n\nexport class MailTemplateQueryResolver implements QueryResolvers {\n\tasync mailTemplates(parent: unknown, args: unknown, context: TenantResolverContext): Promise<MailTemplateData[]> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.MAIL_TEMPLATE_LIST,\n\t\t\tmessage: 'You are not allowed to list mail templates',\n\t\t})\n\t\treturn (await context.db.queryHandler.fetch(new MailTemplateListQuery())).map(it => ({\n\t\t\t...it,\n\t\t\tvariant: it.variant || null,\n\t\t\ttype: mailTypeFromDbToSchema(it.type),\n\t\t}))\n\t}\n}\n"],"names":["PermissionActions","MailTemplateListQuery","mailTypeFromDbToSchema"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAIO,MAAM,0BAAoD;AAAA,EAChE,MAAM,cAAc,QAAiB,MAAe,SAA6D;AAChH,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAkB,kBAAA;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACO,YAAA,MAAM,QAAQ,GAAG,aAAa,MAAM,IAAIC,sBAAAA,uBAAuB,GAAG,IAAI,CAAO,QAAA;AAAA,MACpF,GAAG;AAAA,MACH,SAAS,GAAG,WAAW;AAAA,MACvB,MAAMC,KAAAA,uBAAuB,GAAG,IAAI;AAAA,IAAA,EACnC;AAAA,EAAA;AAEJ;;"}
+{"version":3,"file":"MailTemplateQueryResolver.cjs","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/MailTemplateQueryResolver.ts"],"sourcesContent":["import { MailTemplateData, QueryResolvers } from '../../schema'\nimport { MailTemplateListQuery, mailTypeFromDbToSchema, PermissionActions } from '../../model'\nimport { TenantResolverContext } from '../TenantResolverContext'\n\nexport class MailTemplateQueryResolver implements QueryResolvers {\n\tasync mailTemplates(parent: unknown, args: unknown, context: TenantResolverContext): Promise<MailTemplateData[]> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.MAIL_TEMPLATE_LIST,\n\t\t\tmessage: 'You are not allowed to list mail templates',\n\t\t})\n\t\treturn (await context.db.queryHandler.fetch(new MailTemplateListQuery())).map(it => ({\n\t\t\t...it,\n\t\t\tvariant: it.variant || null,\n\t\t\ttype: mailTypeFromDbToSchema(it.type),\n\t\t}))\n\t}\n}\n"],"names":["PermissionActions","MailTemplateListQuery","mailTypeFromDbToSchema"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAIO,MAAM,0BAAoD;AAAA,EAChE,MAAM,cAAc,QAAiB,MAAe,SAA6D;AAChH,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAAA,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,YAAQ,MAAM,QAAQ,GAAG,aAAa,MAAM,IAAIC,sBAAAA,uBAAuB,GAAG,IAAI,CAAA,QAAO;AAAA,MACpF,GAAG;AAAA,MACH,SAAS,GAAG,WAAW;AAAA,MACvB,MAAMC,KAAAA,uBAAuB,GAAG,IAAI;AAAA,IAAA,EACnC;AAAA,EACH;AACD;;"}

package/dist/production/src/resolvers/query/MailTemplateQueryResolver.js

@@ -15,6 +15,7 @@ import "openid-client";
 import "@contember/typesafe";
 import "../../model/service/idp/providers/OIDCTypes.js";
 import "../../model/service/idp/providers/FacebookProvider.js";
+import "../../model/service/AuthLogService.js";
 import "@contember/schema-utils";
 import "otpauth";
 class MailTemplateQueryResolver {

package/dist/production/src/resolvers/query/MailTemplateQueryResolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"MailTemplateQueryResolver.js","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/MailTemplateQueryResolver.ts"],"sourcesContent":["import { MailTemplateData, QueryResolvers } from '../../schema'\nimport { MailTemplateListQuery, mailTypeFromDbToSchema, PermissionActions } from '../../model'\nimport { TenantResolverContext } from '../TenantResolverContext'\n\nexport class MailTemplateQueryResolver implements QueryResolvers {\n\tasync mailTemplates(parent: unknown, args: unknown, context: TenantResolverContext): Promise<MailTemplateData[]> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.MAIL_TEMPLATE_LIST,\n\t\t\tmessage: 'You are not allowed to list mail templates',\n\t\t})\n\t\treturn (await context.db.queryHandler.fetch(new MailTemplateListQuery())).map(it => ({\n\t\t\t...it,\n\t\t\tvariant: it.variant || null,\n\t\t\ttype: mailTypeFromDbToSchema(it.type),\n\t\t}))\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAIO,MAAM,0BAAoD;AAAA,EAChE,MAAM,cAAc,QAAiB,MAAe,SAA6D;AAChH,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACO,YAAA,MAAM,QAAQ,GAAG,aAAa,MAAM,IAAI,uBAAuB,GAAG,IAAI,CAAO,QAAA;AAAA,MACpF,GAAG;AAAA,MACH,SAAS,GAAG,WAAW;AAAA,MACvB,MAAM,uBAAuB,GAAG,IAAI;AAAA,IAAA,EACnC;AAAA,EAAA;AAEJ;"}
+{"version":3,"file":"MailTemplateQueryResolver.js","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/MailTemplateQueryResolver.ts"],"sourcesContent":["import { MailTemplateData, QueryResolvers } from '../../schema'\nimport { MailTemplateListQuery, mailTypeFromDbToSchema, PermissionActions } from '../../model'\nimport { TenantResolverContext } from '../TenantResolverContext'\n\nexport class MailTemplateQueryResolver implements QueryResolvers {\n\tasync mailTemplates(parent: unknown, args: unknown, context: TenantResolverContext): Promise<MailTemplateData[]> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.MAIL_TEMPLATE_LIST,\n\t\t\tmessage: 'You are not allowed to list mail templates',\n\t\t})\n\t\treturn (await context.db.queryHandler.fetch(new MailTemplateListQuery())).map(it => ({\n\t\t\t...it,\n\t\t\tvariant: it.variant || null,\n\t\t\ttype: mailTypeFromDbToSchema(it.type),\n\t\t}))\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAIO,MAAM,0BAAoD;AAAA,EAChE,MAAM,cAAc,QAAiB,MAAe,SAA6D;AAChH,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,YAAQ,MAAM,QAAQ,GAAG,aAAa,MAAM,IAAI,uBAAuB,GAAG,IAAI,CAAA,QAAO;AAAA,MACpF,GAAG;AAAA,MACH,SAAS,GAAG,WAAW;AAAA,MACvB,MAAM,uBAAuB,GAAG,IAAI;AAAA,IAAA,EACnC;AAAA,EACH;AACD;"}

package/dist/production/src/resolvers/query/MeQueryResolver.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"MeQueryResolver.cjs","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/MeQueryResolver.ts"],"sourcesContent":["import { Identity, QueryResolvers } from '../../schema'\nimport { TenantResolverContext } from '../TenantResolverContext'\n\nexport class MeQueryResolver implements QueryResolvers {\n\tme(parent: unknown, args: unknown, context: TenantResolverContext): Identity {\n\t\treturn {\n\t\t\tid: context.identity.id,\n\t\t\tprojects: [],\n\t\t\tperson: null,\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;AAGO,MAAM,gBAA0C;AAAA,EACtD,GAAG,QAAiB,MAAe,SAA0C;AACrE,WAAA;AAAA,MACN,IAAI,QAAQ,SAAS;AAAA,MACrB,UAAU,CAAC;AAAA,MACX,QAAQ;AAAA,IACT;AAAA,EAAA;AAEF;;"}
+{"version":3,"file":"MeQueryResolver.cjs","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/MeQueryResolver.ts"],"sourcesContent":["import { Identity, QueryResolvers } from '../../schema'\nimport { TenantResolverContext } from '../TenantResolverContext'\n\nexport class MeQueryResolver implements QueryResolvers {\n\tme(parent: unknown, args: unknown, context: TenantResolverContext): Identity {\n\t\treturn {\n\t\t\tid: context.identity.id,\n\t\t\tprojects: [],\n\t\t\tperson: null,\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;AAGO,MAAM,gBAA0C;AAAA,EACtD,GAAG,QAAiB,MAAe,SAA0C;AAC5E,WAAO;AAAA,MACN,IAAI,QAAQ,SAAS;AAAA,MACrB,UAAU,CAAA;AAAA,MACV,QAAQ;AAAA,IAAA;AAAA,EAEV;AACD;;"}

package/dist/production/src/resolvers/query/MeQueryResolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"MeQueryResolver.js","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/MeQueryResolver.ts"],"sourcesContent":["import { Identity, QueryResolvers } from '../../schema'\nimport { TenantResolverContext } from '../TenantResolverContext'\n\nexport class MeQueryResolver implements QueryResolvers {\n\tme(parent: unknown, args: unknown, context: TenantResolverContext): Identity {\n\t\treturn {\n\t\t\tid: context.identity.id,\n\t\t\tprojects: [],\n\t\t\tperson: null,\n\t\t}\n\t}\n}\n"],"names":[],"mappings":"AAGO,MAAM,gBAA0C;AAAA,EACtD,GAAG,QAAiB,MAAe,SAA0C;AACrE,WAAA;AAAA,MACN,IAAI,QAAQ,SAAS;AAAA,MACrB,UAAU,CAAC;AAAA,MACX,QAAQ;AAAA,IACT;AAAA,EAAA;AAEF;"}
+{"version":3,"file":"MeQueryResolver.js","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/MeQueryResolver.ts"],"sourcesContent":["import { Identity, QueryResolvers } from '../../schema'\nimport { TenantResolverContext } from '../TenantResolverContext'\n\nexport class MeQueryResolver implements QueryResolvers {\n\tme(parent: unknown, args: unknown, context: TenantResolverContext): Identity {\n\t\treturn {\n\t\t\tid: context.identity.id,\n\t\t\tprojects: [],\n\t\t\tperson: null,\n\t\t}\n\t}\n}\n"],"names":[],"mappings":"AAGO,MAAM,gBAA0C;AAAA,EACtD,GAAG,QAAiB,MAAe,SAA0C;AAC5E,WAAO;AAAA,MACN,IAAI,QAAQ,SAAS;AAAA,MACrB,UAAU,CAAA;AAAA,MACV,QAAQ;AAAA,IAAA;AAAA,EAEV;AACD;"}

package/dist/production/src/resolvers/query/PersonQueryResolver.cjs

@@ -15,6 +15,7 @@ require("openid-client");
 require("@contember/typesafe");
 require("../../model/service/idp/providers/OIDCTypes.cjs");
 require("../../model/service/idp/providers/FacebookProvider.cjs");
+require("../../model/service/AuthLogService.cjs");
 require("@contember/schema-utils");
 require("otpauth");
 const PersonResponseFactory = require("../responseHelpers/PersonResponseFactory.cjs");

package/dist/production/src/resolvers/query/PersonQueryResolver.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"PersonQueryResolver.cjs","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/PersonQueryResolver.ts"],"sourcesContent":["import {\n\tMaybe,\n\tPerson,\n\tQueryPersonByIdArgs,\n\tQueryResolvers,\n} from '../../schema'\nimport { TenantResolverContext } from '../TenantResolverContext'\nimport { PermissionActions, PersonManager } from '../../model'\nimport { PersonResponseFactory } from '../responseHelpers/PersonResponseFactory'\n\nexport class PersonQueryResolver implements QueryResolvers {\n\tconstructor(private readonly personManager: PersonManager) {}\n\n\tasync personById(\n\t\tparent: unknown,\n\t\targs: QueryPersonByIdArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<Maybe<Person>> {\n\t\tconst person = await this.personManager.findPersonById(context.db, args.id)\n\t\tif (!person || !(await context.isAllowed({ action: PermissionActions.PERSON_VIEW }))) {\n\t\t\treturn null\n\t\t}\n\n\t\treturn await PersonResponseFactory.createPersonResponse(person)\n\t}\n}\n"],"names":["PermissionActions","PersonResponseFactory"],"mappings":";;;;;;;;;;;;;;;;;;;;AAUO,MAAM,oBAA8C;AAAA,EAC1D,YAA6B,eAA8B;AAA9B,SAAA,gBAAA;AAAA,EAAA;AAAA,EAE7B,MAAM,WACL,QACA,MACA,SACyB;AACnB,UAAA,SAAS,MAAM,KAAK,cAAc,eAAe,QAAQ,IAAI,KAAK,EAAE;AACtE,QAAA,CAAC,UAAU,CAAE,MAAM,QAAQ,UAAU,EAAE,QAAQA,kBAAAA,kBAAkB,YAAY,CAAC,GAAI;AAC9E,aAAA;AAAA,IAAA;AAGD,WAAA,MAAMC,sBAAAA,sBAAsB,qBAAqB,MAAM;AAAA,EAAA;AAEhE;;"}
+{"version":3,"file":"PersonQueryResolver.cjs","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/PersonQueryResolver.ts"],"sourcesContent":["import { Maybe, Person, QueryPersonByIdArgs, QueryResolvers } from '../../schema'\nimport { TenantResolverContext } from '../TenantResolverContext'\nimport { PermissionActions, PersonManager } from '../../model'\nimport { PersonResponseFactory } from '../responseHelpers/PersonResponseFactory'\n\nexport class PersonQueryResolver implements QueryResolvers {\n\tconstructor(private readonly personManager: PersonManager) {}\n\n\tasync personById(\n\t\tparent: unknown,\n\t\targs: QueryPersonByIdArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<Maybe<Person>> {\n\t\tconst person = await this.personManager.findPersonById(context.db, args.id)\n\t\tif (!person || !(await context.isAllowed({ action: PermissionActions.PERSON_VIEW }))) {\n\t\t\treturn null\n\t\t}\n\n\t\treturn await PersonResponseFactory.createPersonResponse(person)\n\t}\n}\n"],"names":["PermissionActions","PersonResponseFactory"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAKO,MAAM,oBAA8C;AAAA,EAC1D,YAA6B,eAA8B;AAA9B,SAAA,gBAAA;AAAA,EAA+B;AAAA,EAE5D,MAAM,WACL,QACA,MACA,SACyB;AACzB,UAAM,SAAS,MAAM,KAAK,cAAc,eAAe,QAAQ,IAAI,KAAK,EAAE;AAC1E,QAAI,CAAC,UAAU,CAAE,MAAM,QAAQ,UAAU,EAAE,QAAQA,kBAAAA,kBAAkB,YAAA,CAAa,GAAI;AACrF,aAAO;AAAA,IACR;AAEA,WAAO,MAAMC,sBAAAA,sBAAsB,qBAAqB,MAAM;AAAA,EAC/D;AACD;;"}

package/dist/production/src/resolvers/query/PersonQueryResolver.js

@@ -13,6 +13,7 @@ import "openid-client";
 import "@contember/typesafe";
 import "../../model/service/idp/providers/OIDCTypes.js";
 import "../../model/service/idp/providers/FacebookProvider.js";
+import "../../model/service/AuthLogService.js";
 import "@contember/schema-utils";
 import "otpauth";
 import { PersonResponseFactory } from "../responseHelpers/PersonResponseFactory.js";

package/dist/production/src/resolvers/query/PersonQueryResolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"PersonQueryResolver.js","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/PersonQueryResolver.ts"],"sourcesContent":["import {\n\tMaybe,\n\tPerson,\n\tQueryPersonByIdArgs,\n\tQueryResolvers,\n} from '../../schema'\nimport { TenantResolverContext } from '../TenantResolverContext'\nimport { PermissionActions, PersonManager } from '../../model'\nimport { PersonResponseFactory } from '../responseHelpers/PersonResponseFactory'\n\nexport class PersonQueryResolver implements QueryResolvers {\n\tconstructor(private readonly personManager: PersonManager) {}\n\n\tasync personById(\n\t\tparent: unknown,\n\t\targs: QueryPersonByIdArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<Maybe<Person>> {\n\t\tconst person = await this.personManager.findPersonById(context.db, args.id)\n\t\tif (!person || !(await context.isAllowed({ action: PermissionActions.PERSON_VIEW }))) {\n\t\t\treturn null\n\t\t}\n\n\t\treturn await PersonResponseFactory.createPersonResponse(person)\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAUO,MAAM,oBAA8C;AAAA,EAC1D,YAA6B,eAA8B;AAA9B,SAAA,gBAAA;AAAA,EAAA;AAAA,EAE7B,MAAM,WACL,QACA,MACA,SACyB;AACnB,UAAA,SAAS,MAAM,KAAK,cAAc,eAAe,QAAQ,IAAI,KAAK,EAAE;AACtE,QAAA,CAAC,UAAU,CAAE,MAAM,QAAQ,UAAU,EAAE,QAAQ,kBAAkB,YAAY,CAAC,GAAI;AAC9E,aAAA;AAAA,IAAA;AAGD,WAAA,MAAM,sBAAsB,qBAAqB,MAAM;AAAA,EAAA;AAEhE;"}
+{"version":3,"file":"PersonQueryResolver.js","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/PersonQueryResolver.ts"],"sourcesContent":["import { Maybe, Person, QueryPersonByIdArgs, QueryResolvers } from '../../schema'\nimport { TenantResolverContext } from '../TenantResolverContext'\nimport { PermissionActions, PersonManager } from '../../model'\nimport { PersonResponseFactory } from '../responseHelpers/PersonResponseFactory'\n\nexport class PersonQueryResolver implements QueryResolvers {\n\tconstructor(private readonly personManager: PersonManager) {}\n\n\tasync personById(\n\t\tparent: unknown,\n\t\targs: QueryPersonByIdArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<Maybe<Person>> {\n\t\tconst person = await this.personManager.findPersonById(context.db, args.id)\n\t\tif (!person || !(await context.isAllowed({ action: PermissionActions.PERSON_VIEW }))) {\n\t\t\treturn null\n\t\t}\n\n\t\treturn await PersonResponseFactory.createPersonResponse(person)\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAKO,MAAM,oBAA8C;AAAA,EAC1D,YAA6B,eAA8B;AAA9B,SAAA,gBAAA;AAAA,EAA+B;AAAA,EAE5D,MAAM,WACL,QACA,MACA,SACyB;AACzB,UAAM,SAAS,MAAM,KAAK,cAAc,eAAe,QAAQ,IAAI,KAAK,EAAE;AAC1E,QAAI,CAAC,UAAU,CAAE,MAAM,QAAQ,UAAU,EAAE,QAAQ,kBAAkB,YAAA,CAAa,GAAI;AACrF,aAAO;AAAA,IACR;AAEA,WAAO,MAAM,sBAAsB,qBAAqB,MAAM;AAAA,EAC/D;AACD;"}

package/dist/production/src/resolvers/query/ProjectMembersQueryResolver.cjs

@@ -15,6 +15,7 @@ require("openid-client");
 require("@contember/typesafe");
 require("../../model/service/idp/providers/OIDCTypes.cjs");
 require("../../model/service/idp/providers/FacebookProvider.cjs");
+require("../../model/service/AuthLogService.cjs");
 require("@contember/schema-utils");
 require("otpauth");
 class ProjectMembersQueryResolver {

package/dist/production/src/resolvers/query/ProjectMembersQueryResolver.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ProjectMembersQueryResolver.cjs","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/ProjectMembersQueryResolver.ts"],"sourcesContent":["import { Membership, QueryProjectMembershipsArgs, QueryResolvers } from '../../schema'\nimport { TenantResolverContext } from '../TenantResolverContext'\nimport { PermissionActions, ProjectManager, ProjectMemberManager } from '../../model'\n\nexport class ProjectMembersQueryResolver implements QueryResolvers {\n\tconstructor(\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t) {}\n\n\tasync projectMemberships(\n\t\tparent: unknown,\n\t\targs: QueryProjectMembershipsArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<readonly Membership[]> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, args.projectSlug)\n\t\tconst projectScope = await context.permissionContext.createProjectScope(project)\n\t\tif (\n\t\t\t!project ||\n\t\t\t!(await context.isAllowed({\n\t\t\t\tscope: projectScope,\n\t\t\t\taction: PermissionActions.PROJECT_VIEW_MEMBER([]),\n\t\t\t}))\n\t\t) {\n\t\t\treturn []\n\t\t}\n\t\tconst verifier = context.permissionContext.createAccessVerifier(projectScope)\n\n\t\treturn await this.projectMemberManager.getAllProjectMemberships(context.db, { id: project.id }, { id: args.identityId }, verifier)\n\t}\n}\n"],"names":["PermissionActions"],"mappings":";;;;;;;;;;;;;;;;;;;AAIO,MAAM,4BAAsD;AAAA,EAClE,YACkB,gBACA,sBAChB;AAFgB,SAAA,iBAAA;AACA,SAAA,uBAAA;AAAA,EAAA;AAAA,EAGlB,MAAM,mBACL,QACA,MACA,SACiC;AAC3B,UAAA,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,KAAK,WAAW;AACvF,UAAM,eAAe,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAC/E,QACC,CAAC,WACD,CAAE,MAAM,QAAQ,UAAU;AAAA,MACzB,OAAO;AAAA,MACP,QAAQA,kBAAAA,kBAAkB,oBAAoB,CAAE,CAAA;AAAA,IAAA,CAChD,GACA;AACD,aAAO,CAAC;AAAA,IAAA;AAET,UAAM,WAAW,QAAQ,kBAAkB,qBAAqB,YAAY;AAE5E,WAAO,MAAM,KAAK,qBAAqB,yBAAyB,QAAQ,IAAI,EAAE,IAAI,QAAQ,MAAM,EAAE,IAAI,KAAK,cAAc,QAAQ;AAAA,EAAA;AAEnI;;"}
+{"version":3,"file":"ProjectMembersQueryResolver.cjs","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/ProjectMembersQueryResolver.ts"],"sourcesContent":["import { Membership, QueryProjectMembershipsArgs, QueryResolvers } from '../../schema'\nimport { TenantResolverContext } from '../TenantResolverContext'\nimport { PermissionActions, ProjectManager, ProjectMemberManager } from '../../model'\n\nexport class ProjectMembersQueryResolver implements QueryResolvers {\n\tconstructor(\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t) {}\n\n\tasync projectMemberships(\n\t\tparent: unknown,\n\t\targs: QueryProjectMembershipsArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<readonly Membership[]> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, args.projectSlug)\n\t\tconst projectScope = await context.permissionContext.createProjectScope(project)\n\t\tif (\n\t\t\t!project\n\t\t\t|| !(await context.isAllowed({\n\t\t\t\tscope: projectScope,\n\t\t\t\taction: PermissionActions.PROJECT_VIEW_MEMBER([]),\n\t\t\t}))\n\t\t) {\n\t\t\treturn []\n\t\t}\n\t\tconst verifier = context.permissionContext.createAccessVerifier(projectScope)\n\n\t\treturn await this.projectMemberManager.getAllProjectMemberships(context.db, { id: project.id }, { id: args.identityId }, verifier)\n\t}\n}\n"],"names":["PermissionActions"],"mappings":";;;;;;;;;;;;;;;;;;;;AAIO,MAAM,4BAAsD;AAAA,EAClE,YACkB,gBACA,sBAChB;AAFgB,SAAA,iBAAA;AACA,SAAA,uBAAA;AAAA,EACf;AAAA,EAEH,MAAM,mBACL,QACA,MACA,SACiC;AACjC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,KAAK,WAAW;AACvF,UAAM,eAAe,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAC/E,QACC,CAAC,WACE,CAAE,MAAM,QAAQ,UAAU;AAAA,MAC5B,OAAO;AAAA,MACP,QAAQA,kBAAAA,kBAAkB,oBAAoB,CAAA,CAAE;AAAA,IAAA,CAChD,GACA;AACD,aAAO,CAAA;AAAA,IACR;AACA,UAAM,WAAW,QAAQ,kBAAkB,qBAAqB,YAAY;AAE5E,WAAO,MAAM,KAAK,qBAAqB,yBAAyB,QAAQ,IAAI,EAAE,IAAI,QAAQ,GAAA,GAAM,EAAE,IAAI,KAAK,WAAA,GAAc,QAAQ;AAAA,EAClI;AACD;;"}

package/dist/production/src/resolvers/query/ProjectMembersQueryResolver.js

@@ -13,6 +13,7 @@ import "openid-client";
 import "@contember/typesafe";
 import "../../model/service/idp/providers/OIDCTypes.js";
 import "../../model/service/idp/providers/FacebookProvider.js";
+import "../../model/service/AuthLogService.js";
 import "@contember/schema-utils";
 import "otpauth";
 class ProjectMembersQueryResolver {

package/dist/production/src/resolvers/query/ProjectMembersQueryResolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"ProjectMembersQueryResolver.js","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/ProjectMembersQueryResolver.ts"],"sourcesContent":["import { Membership, QueryProjectMembershipsArgs, QueryResolvers } from '../../schema'\nimport { TenantResolverContext } from '../TenantResolverContext'\nimport { PermissionActions, ProjectManager, ProjectMemberManager } from '../../model'\n\nexport class ProjectMembersQueryResolver implements QueryResolvers {\n\tconstructor(\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t) {}\n\n\tasync projectMemberships(\n\t\tparent: unknown,\n\t\targs: QueryProjectMembershipsArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<readonly Membership[]> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, args.projectSlug)\n\t\tconst projectScope = await context.permissionContext.createProjectScope(project)\n\t\tif (\n\t\t\t!project ||\n\t\t\t!(await context.isAllowed({\n\t\t\t\tscope: projectScope,\n\t\t\t\taction: PermissionActions.PROJECT_VIEW_MEMBER([]),\n\t\t\t}))\n\t\t) {\n\t\t\treturn []\n\t\t}\n\t\tconst verifier = context.permissionContext.createAccessVerifier(projectScope)\n\n\t\treturn await this.projectMemberManager.getAllProjectMemberships(context.db, { id: project.id }, { id: args.identityId }, verifier)\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAIO,MAAM,4BAAsD;AAAA,EAClE,YACkB,gBACA,sBAChB;AAFgB,SAAA,iBAAA;AACA,SAAA,uBAAA;AAAA,EAAA;AAAA,EAGlB,MAAM,mBACL,QACA,MACA,SACiC;AAC3B,UAAA,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,KAAK,WAAW;AACvF,UAAM,eAAe,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAC/E,QACC,CAAC,WACD,CAAE,MAAM,QAAQ,UAAU;AAAA,MACzB,OAAO;AAAA,MACP,QAAQ,kBAAkB,oBAAoB,CAAE,CAAA;AAAA,IAAA,CAChD,GACA;AACD,aAAO,CAAC;AAAA,IAAA;AAET,UAAM,WAAW,QAAQ,kBAAkB,qBAAqB,YAAY;AAE5E,WAAO,MAAM,KAAK,qBAAqB,yBAAyB,QAAQ,IAAI,EAAE,IAAI,QAAQ,MAAM,EAAE,IAAI,KAAK,cAAc,QAAQ;AAAA,EAAA;AAEnI;"}
+{"version":3,"file":"ProjectMembersQueryResolver.js","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/ProjectMembersQueryResolver.ts"],"sourcesContent":["import { Membership, QueryProjectMembershipsArgs, QueryResolvers } from '../../schema'\nimport { TenantResolverContext } from '../TenantResolverContext'\nimport { PermissionActions, ProjectManager, ProjectMemberManager } from '../../model'\n\nexport class ProjectMembersQueryResolver implements QueryResolvers {\n\tconstructor(\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t) {}\n\n\tasync projectMemberships(\n\t\tparent: unknown,\n\t\targs: QueryProjectMembershipsArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<readonly Membership[]> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, args.projectSlug)\n\t\tconst projectScope = await context.permissionContext.createProjectScope(project)\n\t\tif (\n\t\t\t!project\n\t\t\t|| !(await context.isAllowed({\n\t\t\t\tscope: projectScope,\n\t\t\t\taction: PermissionActions.PROJECT_VIEW_MEMBER([]),\n\t\t\t}))\n\t\t) {\n\t\t\treturn []\n\t\t}\n\t\tconst verifier = context.permissionContext.createAccessVerifier(projectScope)\n\n\t\treturn await this.projectMemberManager.getAllProjectMemberships(context.db, { id: project.id }, { id: args.identityId }, verifier)\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAIO,MAAM,4BAAsD;AAAA,EAClE,YACkB,gBACA,sBAChB;AAFgB,SAAA,iBAAA;AACA,SAAA,uBAAA;AAAA,EACf;AAAA,EAEH,MAAM,mBACL,QACA,MACA,SACiC;AACjC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,KAAK,WAAW;AACvF,UAAM,eAAe,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAC/E,QACC,CAAC,WACE,CAAE,MAAM,QAAQ,UAAU;AAAA,MAC5B,OAAO;AAAA,MACP,QAAQ,kBAAkB,oBAAoB,CAAA,CAAE;AAAA,IAAA,CAChD,GACA;AACD,aAAO,CAAA;AAAA,IACR;AACA,UAAM,WAAW,QAAQ,kBAAkB,qBAAqB,YAAY;AAE5E,WAAO,MAAM,KAAK,qBAAqB,yBAAyB,QAAQ,IAAI,EAAE,IAAI,QAAQ,GAAA,GAAM,EAAE,IAAI,KAAK,WAAA,GAAc,QAAQ;AAAA,EAClI;AACD;"}

package/dist/production/src/resolvers/query/ProjectQueryResolver.cjs

@@ -15,6 +15,7 @@ require("openid-client");
 require("@contember/typesafe");
 require("../../model/service/idp/providers/OIDCTypes.cjs");
 require("../../model/service/idp/providers/FacebookProvider.cjs");
+require("../../model/service/AuthLogService.cjs");
 require("@contember/schema-utils");
 require("otpauth");
 class ProjectQueryResolver {

package/dist/production/src/resolvers/query/ProjectQueryResolver.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ProjectQueryResolver.cjs","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/ProjectQueryResolver.ts"],"sourcesContent":["import { Maybe, Project, QueryProjectBySlugArgs, QueryResolvers } from '../../schema'\nimport { TenantResolverContext } from '../TenantResolverContext'\nimport { PermissionActions, ProjectManager } from '../../model'\n\nexport class ProjectQueryResolver implements QueryResolvers {\n\tconstructor(private readonly projectManager: ProjectManager) {}\n\n\tasync projects(parent: unknown, args: unknown, context: TenantResolverContext): Promise<readonly Project[]> {\n\t\treturn (await this.projectManager.getProjectsByIdentity(context.db, context.identity.id, context.permissionContext)).map(\n\t\t\tit => ({ ...it, members: [], roles: [] }),\n\t\t)\n\t}\n\n\tasync projectBySlug(\n\t\tparent: unknown,\n\t\targs: QueryProjectBySlugArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<Maybe<Project>> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, args.slug)\n\t\tif (\n\t\t\t!project ||\n\t\t\t!(await context.isAllowed({\n\t\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\t\taction: PermissionActions.PROJECT_VIEW,\n\t\t\t}))\n\t\t) {\n\t\t\treturn null\n\t\t}\n\n\t\treturn { ...project, members: [], roles: [] }\n\t}\n}\n"],"names":["PermissionActions"],"mappings":";;;;;;;;;;;;;;;;;;;AAIO,MAAM,qBAA+C;AAAA,EAC3D,YAA6B,gBAAgC;AAAhC,SAAA,iBAAA;AAAA,EAAA;AAAA,EAE7B,MAAM,SAAS,QAAiB,MAAe,SAA6D;AACnG,YAAA,MAAM,KAAK,eAAe,sBAAsB,QAAQ,IAAI,QAAQ,SAAS,IAAI,QAAQ,iBAAiB,GAAG;AAAA,MACpH,CAAA,QAAO,EAAE,GAAG,IAAI,SAAS,CAAC,GAAG,OAAO,GAAG;AAAA,IACxC;AAAA,EAAA;AAAA,EAGD,MAAM,cACL,QACA,MACA,SAC0B;AACpB,UAAA,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,KAAK,IAAI;AAChF,QACC,CAAC,WACD,CAAE,MAAM,QAAQ,UAAU;AAAA,MACzB,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQA,kBAAAA,kBAAkB;AAAA,IAAA,CAC1B,GACA;AACM,aAAA;AAAA,IAAA;AAGD,WAAA,EAAE,GAAG,SAAS,SAAS,CAAA,GAAI,OAAO,CAAA,EAAG;AAAA,EAAA;AAE9C;;"}
+{"version":3,"file":"ProjectQueryResolver.cjs","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/ProjectQueryResolver.ts"],"sourcesContent":["import { Maybe, Project, QueryProjectBySlugArgs, QueryResolvers } from '../../schema'\nimport { TenantResolverContext } from '../TenantResolverContext'\nimport { PermissionActions, ProjectManager } from '../../model'\n\nexport class ProjectQueryResolver implements QueryResolvers {\n\tconstructor(private readonly projectManager: ProjectManager) {}\n\n\tasync projects(parent: unknown, args: unknown, context: TenantResolverContext): Promise<readonly Project[]> {\n\t\treturn (await this.projectManager.getProjectsByIdentity(context.db, context.identity.id, context.permissionContext)).map(\n\t\t\tit => ({ ...it, members: [], roles: [] }),\n\t\t)\n\t}\n\n\tasync projectBySlug(\n\t\tparent: unknown,\n\t\targs: QueryProjectBySlugArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<Maybe<Project>> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, args.slug)\n\t\tif (\n\t\t\t!project\n\t\t\t|| !(await context.isAllowed({\n\t\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\t\taction: PermissionActions.PROJECT_VIEW,\n\t\t\t}))\n\t\t) {\n\t\t\treturn null\n\t\t}\n\n\t\treturn { ...project, members: [], roles: [] }\n\t}\n}\n"],"names":["PermissionActions"],"mappings":";;;;;;;;;;;;;;;;;;;;AAIO,MAAM,qBAA+C;AAAA,EAC3D,YAA6B,gBAAgC;AAAhC,SAAA,iBAAA;AAAA,EAAiC;AAAA,EAE9D,MAAM,SAAS,QAAiB,MAAe,SAA6D;AAC3G,YAAQ,MAAM,KAAK,eAAe,sBAAsB,QAAQ,IAAI,QAAQ,SAAS,IAAI,QAAQ,iBAAiB,GAAG;AAAA,MACpH,CAAA,QAAO,EAAE,GAAG,IAAI,SAAS,CAAA,GAAI,OAAO,GAAC;AAAA,IAAE;AAAA,EAEzC;AAAA,EAEA,MAAM,cACL,QACA,MACA,SAC0B;AAC1B,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,KAAK,IAAI;AAChF,QACC,CAAC,WACE,CAAE,MAAM,QAAQ,UAAU;AAAA,MAC5B,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQA,kBAAAA,kBAAkB;AAAA,IAAA,CAC1B,GACA;AACD,aAAO;AAAA,IACR;AAEA,WAAO,EAAE,GAAG,SAAS,SAAS,CAAA,GAAI,OAAO,CAAA,EAAC;AAAA,EAC3C;AACD;;"}

package/dist/production/src/resolvers/query/ProjectQueryResolver.js

@@ -13,6 +13,7 @@ import "openid-client";
 import "@contember/typesafe";
 import "../../model/service/idp/providers/OIDCTypes.js";
 import "../../model/service/idp/providers/FacebookProvider.js";
+import "../../model/service/AuthLogService.js";
 import "@contember/schema-utils";
 import "otpauth";
 class ProjectQueryResolver {

package/dist/production/src/resolvers/query/ProjectQueryResolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"ProjectQueryResolver.js","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/ProjectQueryResolver.ts"],"sourcesContent":["import { Maybe, Project, QueryProjectBySlugArgs, QueryResolvers } from '../../schema'\nimport { TenantResolverContext } from '../TenantResolverContext'\nimport { PermissionActions, ProjectManager } from '../../model'\n\nexport class ProjectQueryResolver implements QueryResolvers {\n\tconstructor(private readonly projectManager: ProjectManager) {}\n\n\tasync projects(parent: unknown, args: unknown, context: TenantResolverContext): Promise<readonly Project[]> {\n\t\treturn (await this.projectManager.getProjectsByIdentity(context.db, context.identity.id, context.permissionContext)).map(\n\t\t\tit => ({ ...it, members: [], roles: [] }),\n\t\t)\n\t}\n\n\tasync projectBySlug(\n\t\tparent: unknown,\n\t\targs: QueryProjectBySlugArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<Maybe<Project>> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, args.slug)\n\t\tif (\n\t\t\t!project ||\n\t\t\t!(await context.isAllowed({\n\t\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\t\taction: PermissionActions.PROJECT_VIEW,\n\t\t\t}))\n\t\t) {\n\t\t\treturn null\n\t\t}\n\n\t\treturn { ...project, members: [], roles: [] }\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAIO,MAAM,qBAA+C;AAAA,EAC3D,YAA6B,gBAAgC;AAAhC,SAAA,iBAAA;AAAA,EAAA;AAAA,EAE7B,MAAM,SAAS,QAAiB,MAAe,SAA6D;AACnG,YAAA,MAAM,KAAK,eAAe,sBAAsB,QAAQ,IAAI,QAAQ,SAAS,IAAI,QAAQ,iBAAiB,GAAG;AAAA,MACpH,CAAA,QAAO,EAAE,GAAG,IAAI,SAAS,CAAC,GAAG,OAAO,GAAG;AAAA,IACxC;AAAA,EAAA;AAAA,EAGD,MAAM,cACL,QACA,MACA,SAC0B;AACpB,UAAA,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,KAAK,IAAI;AAChF,QACC,CAAC,WACD,CAAE,MAAM,QAAQ,UAAU;AAAA,MACzB,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQ,kBAAkB;AAAA,IAAA,CAC1B,GACA;AACM,aAAA;AAAA,IAAA;AAGD,WAAA,EAAE,GAAG,SAAS,SAAS,CAAA,GAAI,OAAO,CAAA,EAAG;AAAA,EAAA;AAE9C;"}
+{"version":3,"file":"ProjectQueryResolver.js","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/ProjectQueryResolver.ts"],"sourcesContent":["import { Maybe, Project, QueryProjectBySlugArgs, QueryResolvers } from '../../schema'\nimport { TenantResolverContext } from '../TenantResolverContext'\nimport { PermissionActions, ProjectManager } from '../../model'\n\nexport class ProjectQueryResolver implements QueryResolvers {\n\tconstructor(private readonly projectManager: ProjectManager) {}\n\n\tasync projects(parent: unknown, args: unknown, context: TenantResolverContext): Promise<readonly Project[]> {\n\t\treturn (await this.projectManager.getProjectsByIdentity(context.db, context.identity.id, context.permissionContext)).map(\n\t\t\tit => ({ ...it, members: [], roles: [] }),\n\t\t)\n\t}\n\n\tasync projectBySlug(\n\t\tparent: unknown,\n\t\targs: QueryProjectBySlugArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<Maybe<Project>> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, args.slug)\n\t\tif (\n\t\t\t!project\n\t\t\t|| !(await context.isAllowed({\n\t\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\t\taction: PermissionActions.PROJECT_VIEW,\n\t\t\t}))\n\t\t) {\n\t\t\treturn null\n\t\t}\n\n\t\treturn { ...project, members: [], roles: [] }\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAIO,MAAM,qBAA+C;AAAA,EAC3D,YAA6B,gBAAgC;AAAhC,SAAA,iBAAA;AAAA,EAAiC;AAAA,EAE9D,MAAM,SAAS,QAAiB,MAAe,SAA6D;AAC3G,YAAQ,MAAM,KAAK,eAAe,sBAAsB,QAAQ,IAAI,QAAQ,SAAS,IAAI,QAAQ,iBAAiB,GAAG;AAAA,MACpH,CAAA,QAAO,EAAE,GAAG,IAAI,SAAS,CAAA,GAAI,OAAO,GAAC;AAAA,IAAE;AAAA,EAEzC;AAAA,EAEA,MAAM,cACL,QACA,MACA,SAC0B;AAC1B,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,KAAK,IAAI;AAChF,QACC,CAAC,WACE,CAAE,MAAM,QAAQ,UAAU;AAAA,MAC5B,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQ,kBAAkB;AAAA,IAAA,CAC1B,GACA;AACD,aAAO;AAAA,IACR;AAEA,WAAO,EAAE,GAAG,SAAS,SAAS,CAAA,GAAI,OAAO,CAAA,EAAC;AAAA,EAC3C;AACD;"}

package/dist/production/src/resolvers/responseHelpers/PersonResponseFactory.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"PersonResponseFactory.cjs","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/responseHelpers/PersonResponseFactory.ts"],"sourcesContent":["import { PersonRow } from '../../model'\nimport { IdentityProjectRelation, Person } from '../../schema'\n\nexport class PersonResponseFactory {\n\tpublic static createPersonResponse(personRow: Omit<PersonRow, 'roles'>, projects: ReadonlyArray<IdentityProjectRelation> = []): Person {\n\t\treturn {\n\t\t\tid: personRow.id,\n\t\t\totpEnabled: !!personRow.otp_activated_at,\n\t\t\temail: personRow.email,\n\t\t\tname: personRow.name,\n\t\t\tpasswordlessEnabled: personRow.passwordless_enabled,\n\t\t\tidentity: {\n\t\t\t\tid: personRow.identity_id,\n\t\t\t\tprojects,\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;AAGO,MAAM,sBAAsB;AAAA,EAClC,OAAc,qBAAqB,WAAqC,WAAmD,IAAY;AAC/H,WAAA;AAAA,MACN,IAAI,UAAU;AAAA,MACd,YAAY,CAAC,CAAC,UAAU;AAAA,MACxB,OAAO,UAAU;AAAA,MACjB,MAAM,UAAU;AAAA,MAChB,qBAAqB,UAAU;AAAA,MAC/B,UAAU;AAAA,QACT,IAAI,UAAU;AAAA,QACd;AAAA,MAAA;AAAA,IAEF;AAAA,EAAA;AAEF;;"}
+{"version":3,"file":"PersonResponseFactory.cjs","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/responseHelpers/PersonResponseFactory.ts"],"sourcesContent":["import { PersonRow } from '../../model'\nimport { IdentityProjectRelation, Person } from '../../schema'\n\nexport class PersonResponseFactory {\n\tpublic static createPersonResponse(personRow: Omit<PersonRow, 'roles'>, projects: ReadonlyArray<IdentityProjectRelation> = []): Person {\n\t\treturn {\n\t\t\tid: personRow.id,\n\t\t\totpEnabled: !!personRow.otp_activated_at,\n\t\t\temail: personRow.email,\n\t\t\tname: personRow.name,\n\t\t\tpasswordlessEnabled: personRow.passwordless_enabled,\n\t\t\tidentity: {\n\t\t\t\tid: personRow.identity_id,\n\t\t\t\tprojects,\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;AAGO,MAAM,sBAAsB;AAAA,EAClC,OAAc,qBAAqB,WAAqC,WAAmD,IAAY;AACtI,WAAO;AAAA,MACN,IAAI,UAAU;AAAA,MACd,YAAY,CAAC,CAAC,UAAU;AAAA,MACxB,OAAO,UAAU;AAAA,MACjB,MAAM,UAAU;AAAA,MAChB,qBAAqB,UAAU;AAAA,MAC/B,UAAU;AAAA,QACT,IAAI,UAAU;AAAA,QACd;AAAA,MAAA;AAAA,IACD;AAAA,EAEF;AACD;;"}

package/dist/production/src/resolvers/responseHelpers/PersonResponseFactory.js.map

@@ -1 +1 @@
-{"version":3,"file":"PersonResponseFactory.js","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/responseHelpers/PersonResponseFactory.ts"],"sourcesContent":["import { PersonRow } from '../../model'\nimport { IdentityProjectRelation, Person } from '../../schema'\n\nexport class PersonResponseFactory {\n\tpublic static createPersonResponse(personRow: Omit<PersonRow, 'roles'>, projects: ReadonlyArray<IdentityProjectRelation> = []): Person {\n\t\treturn {\n\t\t\tid: personRow.id,\n\t\t\totpEnabled: !!personRow.otp_activated_at,\n\t\t\temail: personRow.email,\n\t\t\tname: personRow.name,\n\t\t\tpasswordlessEnabled: personRow.passwordless_enabled,\n\t\t\tidentity: {\n\t\t\t\tid: personRow.identity_id,\n\t\t\t\tprojects,\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":[],"mappings":"AAGO,MAAM,sBAAsB;AAAA,EAClC,OAAc,qBAAqB,WAAqC,WAAmD,IAAY;AAC/H,WAAA;AAAA,MACN,IAAI,UAAU;AAAA,MACd,YAAY,CAAC,CAAC,UAAU;AAAA,MACxB,OAAO,UAAU;AAAA,MACjB,MAAM,UAAU;AAAA,MAChB,qBAAqB,UAAU;AAAA,MAC/B,UAAU;AAAA,QACT,IAAI,UAAU;AAAA,QACd;AAAA,MAAA;AAAA,IAEF;AAAA,EAAA;AAEF;"}
+{"version":3,"file":"PersonResponseFactory.js","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/responseHelpers/PersonResponseFactory.ts"],"sourcesContent":["import { PersonRow } from '../../model'\nimport { IdentityProjectRelation, Person } from '../../schema'\n\nexport class PersonResponseFactory {\n\tpublic static createPersonResponse(personRow: Omit<PersonRow, 'roles'>, projects: ReadonlyArray<IdentityProjectRelation> = []): Person {\n\t\treturn {\n\t\t\tid: personRow.id,\n\t\t\totpEnabled: !!personRow.otp_activated_at,\n\t\t\temail: personRow.email,\n\t\t\tname: personRow.name,\n\t\t\tpasswordlessEnabled: personRow.passwordless_enabled,\n\t\t\tidentity: {\n\t\t\t\tid: personRow.identity_id,\n\t\t\t\tprojects,\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":[],"mappings":"AAGO,MAAM,sBAAsB;AAAA,EAClC,OAAc,qBAAqB,WAAqC,WAAmD,IAAY;AACtI,WAAO;AAAA,MACN,IAAI,UAAU;AAAA,MACd,YAAY,CAAC,CAAC,UAAU;AAAA,MACxB,OAAO,UAAU;AAAA,MACjB,MAAM,UAAU;AAAA,MAChB,qBAAqB,UAAU;AAAA,MAC/B,UAAU;AAAA,QACT,IAAI,UAAU;AAAA,QACd;AAAA,MAAA;AAAA,IACD;AAAA,EAEF;AACD;"}

package/dist/production/src/resolvers/responseHelpers/SignInResponseFactory.cjs

@@ -15,6 +15,7 @@ require("openid-client");
 require("@contember/typesafe");
 require("../../model/service/idp/providers/OIDCTypes.cjs");
 require("../../model/service/idp/providers/FacebookProvider.cjs");
+require("../../model/service/AuthLogService.cjs");
 require("@contember/schema-utils");
 require("otpauth");
 require("@contember/graphql-utils");

package/dist/production/src/resolvers/responseHelpers/SignInResponseFactory.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"SignInResponseFactory.cjs","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/responseHelpers/SignInResponseFactory.ts"],"sourcesContent":["import { createResolverContext, IdentityTypeResolver, TenantResolverContext } from '../index'\nimport { PermissionContextFactory, SignInResult } from '../../model'\nimport { CommonSignInResult } from '../../schema'\nimport { PersonResponseFactory } from './PersonResponseFactory'\n\nexport class SignInResponseFactory {\n\tconstructor(\n\t\tprivate readonly permissionContextFactory: PermissionContextFactory,\n\t\tprivate readonly identityTypeResolver: IdentityTypeResolver,\n\t) {\n\t}\n\n\tpublic async createResponse(signInResult: SignInResult, context: TenantResolverContext): Promise<CommonSignInResult> {\n\t\tconst identityId = signInResult.person.identity_id\n\t\tconst permissionContext = this.permissionContextFactory.create(context.db, {\n\t\t\tid: identityId,\n\t\t\troles: signInResult.person.roles,\n\t\t})\n\t\tconst projects = await this.identityTypeResolver.projects(\n\t\t\t{ id: identityId, projects: [] },\n\t\t\t{},\n\t\t\t{\n\t\t\t\t...context,\n\t\t\t\t...createResolverContext(permissionContext, context.apiKeyId),\n\t\t\t},\n\t\t)\n\t\treturn {\n\t\t\ttoken: signInResult.token,\n\t\t\tperson: PersonResponseFactory.createPersonResponse(signInResult.person, projects),\n\t\t}\n\t}\n}\n"],"names":["createResolverContext","PersonResponseFactory"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAKO,MAAM,sBAAsB;AAAA,EAClC,YACkB,0BACA,sBAChB;AAFgB,SAAA,2BAAA;AACA,SAAA,uBAAA;AAAA,EAAA;AAAA,EAIlB,MAAa,eAAe,cAA4B,SAA6D;AAC9G,UAAA,aAAa,aAAa,OAAO;AACvC,UAAM,oBAAoB,KAAK,yBAAyB,OAAO,QAAQ,IAAI;AAAA,MAC1E,IAAI;AAAA,MACJ,OAAO,aAAa,OAAO;AAAA,IAAA,CAC3B;AACK,UAAA,WAAW,MAAM,KAAK,qBAAqB;AAAA,MAChD,EAAE,IAAI,YAAY,UAAU,GAAG;AAAA,MAC/B,CAAC;AAAA,MACD;AAAA,QACC,GAAG;AAAA,QACH,GAAGA,6BAAA,sBAAsB,mBAAmB,QAAQ,QAAQ;AAAA,MAAA;AAAA,IAE9D;AACO,WAAA;AAAA,MACN,OAAO,aAAa;AAAA,MACpB,QAAQC,sBAAAA,sBAAsB,qBAAqB,aAAa,QAAQ,QAAQ;AAAA,IACjF;AAAA,EAAA;AAEF;;"}
+{"version":3,"file":"SignInResponseFactory.cjs","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/responseHelpers/SignInResponseFactory.ts"],"sourcesContent":["import { createResolverContext, IdentityTypeResolver, TenantResolverContext } from '../index'\nimport { PermissionContextFactory, SignInResult } from '../../model'\nimport { CommonSignInResult } from '../../schema'\nimport { PersonResponseFactory } from './PersonResponseFactory'\n\nexport class SignInResponseFactory {\n\tconstructor(\n\t\tprivate readonly permissionContextFactory: PermissionContextFactory,\n\t\tprivate readonly identityTypeResolver: IdentityTypeResolver,\n\t) {\n\t}\n\n\tpublic async createResponse(signInResult: SignInResult, context: TenantResolverContext): Promise<CommonSignInResult> {\n\t\tconst identityId = signInResult.person.identity_id\n\t\tconst permissionContext = this.permissionContextFactory.create(context.db, {\n\t\t\tid: identityId,\n\t\t\troles: signInResult.person.roles,\n\t\t})\n\t\tconst projects = await this.identityTypeResolver.projects(\n\t\t\t{ id: identityId, projects: [] },\n\t\t\t{},\n\t\t\t{\n\t\t\t\t...context,\n\t\t\t\t...createResolverContext(permissionContext, context.apiKeyId),\n\t\t\t},\n\t\t)\n\t\treturn {\n\t\t\ttoken: signInResult.token,\n\t\t\tperson: PersonResponseFactory.createPersonResponse(signInResult.person, projects),\n\t\t}\n\t}\n}\n"],"names":["createResolverContext","PersonResponseFactory"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAKO,MAAM,sBAAsB;AAAA,EAClC,YACkB,0BACA,sBAChB;AAFgB,SAAA,2BAAA;AACA,SAAA,uBAAA;AAAA,EAElB;AAAA,EAEA,MAAa,eAAe,cAA4B,SAA6D;AACpH,UAAM,aAAa,aAAa,OAAO;AACvC,UAAM,oBAAoB,KAAK,yBAAyB,OAAO,QAAQ,IAAI;AAAA,MAC1E,IAAI;AAAA,MACJ,OAAO,aAAa,OAAO;AAAA,IAAA,CAC3B;AACD,UAAM,WAAW,MAAM,KAAK,qBAAqB;AAAA,MAChD,EAAE,IAAI,YAAY,UAAU,GAAC;AAAA,MAC7B,CAAA;AAAA,MACA;AAAA,QACC,GAAG;AAAA,QACH,GAAGA,6BAAAA,sBAAsB,mBAAmB,QAAQ,QAAQ;AAAA,MAAA;AAAA,IAC7D;AAED,WAAO;AAAA,MACN,OAAO,aAAa;AAAA,MACpB,QAAQC,sBAAAA,sBAAsB,qBAAqB,aAAa,QAAQ,QAAQ;AAAA,IAAA;AAAA,EAElF;AACD;;"}

package/dist/production/src/resolvers/responseHelpers/SignInResponseFactory.js

@@ -13,6 +13,7 @@ import "openid-client";
 import "@contember/typesafe";
 import "../../model/service/idp/providers/OIDCTypes.js";
 import "../../model/service/idp/providers/FacebookProvider.js";
+import "../../model/service/AuthLogService.js";
 import "@contember/schema-utils";
 import "otpauth";
 import "@contember/graphql-utils";

package/dist/production/src/resolvers/responseHelpers/SignInResponseFactory.js.map

@@ -1 +1 @@
-{"version":3,"file":"SignInResponseFactory.js","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/responseHelpers/SignInResponseFactory.ts"],"sourcesContent":["import { createResolverContext, IdentityTypeResolver, TenantResolverContext } from '../index'\nimport { PermissionContextFactory, SignInResult } from '../../model'\nimport { CommonSignInResult } from '../../schema'\nimport { PersonResponseFactory } from './PersonResponseFactory'\n\nexport class SignInResponseFactory {\n\tconstructor(\n\t\tprivate readonly permissionContextFactory: PermissionContextFactory,\n\t\tprivate readonly identityTypeResolver: IdentityTypeResolver,\n\t) {\n\t}\n\n\tpublic async createResponse(signInResult: SignInResult, context: TenantResolverContext): Promise<CommonSignInResult> {\n\t\tconst identityId = signInResult.person.identity_id\n\t\tconst permissionContext = this.permissionContextFactory.create(context.db, {\n\t\t\tid: identityId,\n\t\t\troles: signInResult.person.roles,\n\t\t})\n\t\tconst projects = await this.identityTypeResolver.projects(\n\t\t\t{ id: identityId, projects: [] },\n\t\t\t{},\n\t\t\t{\n\t\t\t\t...context,\n\t\t\t\t...createResolverContext(permissionContext, context.apiKeyId),\n\t\t\t},\n\t\t)\n\t\treturn {\n\t\t\ttoken: signInResult.token,\n\t\t\tperson: PersonResponseFactory.createPersonResponse(signInResult.person, projects),\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;AAKO,MAAM,sBAAsB;AAAA,EAClC,YACkB,0BACA,sBAChB;AAFgB,SAAA,2BAAA;AACA,SAAA,uBAAA;AAAA,EAAA;AAAA,EAIlB,MAAa,eAAe,cAA4B,SAA6D;AAC9G,UAAA,aAAa,aAAa,OAAO;AACvC,UAAM,oBAAoB,KAAK,yBAAyB,OAAO,QAAQ,IAAI;AAAA,MAC1E,IAAI;AAAA,MACJ,OAAO,aAAa,OAAO;AAAA,IAAA,CAC3B;AACK,UAAA,WAAW,MAAM,KAAK,qBAAqB;AAAA,MAChD,EAAE,IAAI,YAAY,UAAU,GAAG;AAAA,MAC/B,CAAC;AAAA,MACD;AAAA,QACC,GAAG;AAAA,QACH,GAAG,sBAAsB,mBAAmB,QAAQ,QAAQ;AAAA,MAAA;AAAA,IAE9D;AACO,WAAA;AAAA,MACN,OAAO,aAAa;AAAA,MACpB,QAAQ,sBAAsB,qBAAqB,aAAa,QAAQ,QAAQ;AAAA,IACjF;AAAA,EAAA;AAEF;"}
+{"version":3,"file":"SignInResponseFactory.js","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/responseHelpers/SignInResponseFactory.ts"],"sourcesContent":["import { createResolverContext, IdentityTypeResolver, TenantResolverContext } from '../index'\nimport { PermissionContextFactory, SignInResult } from '../../model'\nimport { CommonSignInResult } from '../../schema'\nimport { PersonResponseFactory } from './PersonResponseFactory'\n\nexport class SignInResponseFactory {\n\tconstructor(\n\t\tprivate readonly permissionContextFactory: PermissionContextFactory,\n\t\tprivate readonly identityTypeResolver: IdentityTypeResolver,\n\t) {\n\t}\n\n\tpublic async createResponse(signInResult: SignInResult, context: TenantResolverContext): Promise<CommonSignInResult> {\n\t\tconst identityId = signInResult.person.identity_id\n\t\tconst permissionContext = this.permissionContextFactory.create(context.db, {\n\t\t\tid: identityId,\n\t\t\troles: signInResult.person.roles,\n\t\t})\n\t\tconst projects = await this.identityTypeResolver.projects(\n\t\t\t{ id: identityId, projects: [] },\n\t\t\t{},\n\t\t\t{\n\t\t\t\t...context,\n\t\t\t\t...createResolverContext(permissionContext, context.apiKeyId),\n\t\t\t},\n\t\t)\n\t\treturn {\n\t\t\ttoken: signInResult.token,\n\t\t\tperson: PersonResponseFactory.createPersonResponse(signInResult.person, projects),\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAKO,MAAM,sBAAsB;AAAA,EAClC,YACkB,0BACA,sBAChB;AAFgB,SAAA,2BAAA;AACA,SAAA,uBAAA;AAAA,EAElB;AAAA,EAEA,MAAa,eAAe,cAA4B,SAA6D;AACpH,UAAM,aAAa,aAAa,OAAO;AACvC,UAAM,oBAAoB,KAAK,yBAAyB,OAAO,QAAQ,IAAI;AAAA,MAC1E,IAAI;AAAA,MACJ,OAAO,aAAa,OAAO;AAAA,IAAA,CAC3B;AACD,UAAM,WAAW,MAAM,KAAK,qBAAqB;AAAA,MAChD,EAAE,IAAI,YAAY,UAAU,GAAC;AAAA,MAC7B,CAAA;AAAA,MACA;AAAA,QACC,GAAG;AAAA,QACH,GAAG,sBAAsB,mBAAmB,QAAQ,QAAQ;AAAA,MAAA;AAAA,IAC7D;AAED,WAAO;AAAA,MACN,OAAO,aAAa;AAAA,MACpB,QAAQ,sBAAsB,qBAAqB,aAAa,QAAQ,QAAQ;AAAA,IAAA;AAAA,EAElF;AACD;"}

package/dist/production/src/resolvers/types/IdentityTypeResolver.cjs

@@ -18,6 +18,7 @@ require("openid-client");
 require("@contember/typesafe");
 require("../../model/service/idp/providers/OIDCTypes.cjs");
 require("../../model/service/idp/providers/FacebookProvider.cjs");
+require("../../model/service/AuthLogService.cjs");
 require("@contember/schema-utils");
 require("otpauth");
 const array = require("../../utils/array.cjs");