@contember/engine-tenant-api 2.1.0-beta.1 → 2.2.0-alpha.1

package/dist/types/model/authorization/Identity.d.ts

@@ -1,5 +1,5 @@
-import { ProjectMemberManager } from '../service';
-import { DatabaseContext } from '../utils';
+import { ProjectMemberManager } from '../service/index.js';
+import { DatabaseContext } from '../utils/index.js';
 import { Acl } from '@contember/schema';
 export interface Identity {
     readonly id: string;

package/dist/types/model/authorization/Identity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Identity.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/Identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAC1C,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AAEvC,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IAEjC,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,CAAC,UAAU,EAAE,CAAC,CAAA;CAC9E;AAED,qBAAa,cAAe,YAAW,QAAQ;aAE7B,EAAE,EAAE,MAAM;aACV,KAAK,EAAE,MAAM,EAAE;IAC/B,OAAO,CAAC,kBAAkB;gBAFV,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EAAE,EACvB,kBAAkB,GAAE,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,CAAC,UAAU,EAAE,CAAM;IAG3E,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,CAAC,UAAU,EAAE,CAAC;CAG9E;AAED,qBAAa,oBAAqB,YAAW,QAAQ;aAInC,EAAE,EAAE,MAAM;aACV,KAAK,EAAE,SAAS,MAAM,EAAE;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAN/B,OAAO,CAAC,sBAAsB,CAAyD;gBAGtE,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,SAAS,MAAM,EAAE,EACvB,SAAS,EAAE,eAAe,EAC1B,aAAa,EAAE,oBAAoB;IAG/C,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,CAAC,UAAU,EAAE,CAAC;CAIpF"}
+{"version":3,"file":"Identity.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/Identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AAEvC,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IAEjC,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,CAAC,UAAU,EAAE,CAAC,CAAA;CAC9E;AAED,qBAAa,cAAe,YAAW,QAAQ;aAE7B,EAAE,EAAE,MAAM;aACV,KAAK,EAAE,MAAM,EAAE;IAC/B,OAAO,CAAC,kBAAkB;gBAFV,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EAAE,EACvB,kBAAkB,GAAE,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,CAAC,UAAU,EAAE,CAAM;IAG3E,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,CAAC,UAAU,EAAE,CAAC;CAG9E;AAED,qBAAa,oBAAqB,YAAW,QAAQ;aAInC,EAAE,EAAE,MAAM;aACV,KAAK,EAAE,SAAS,MAAM,EAAE;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAN/B,OAAO,CAAC,sBAAsB,CAAyD;gBAGtE,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,SAAS,MAAM,EAAE,EACvB,SAAS,EAAE,eAAe,EAC1B,aAAa,EAAE,oBAAoB;IAG/C,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,CAAC,UAAU,EAAE,CAAC;CAIpF"}

package/dist/types/model/authorization/IdentityFactory.d.ts

@@ -1,6 +1,6 @@
-import { ProjectMemberManager } from '../service';
-import { Identity } from './Identity';
-import { DatabaseContext } from '../utils';
+import { ProjectMemberManager } from '../service/index.js';
+import { Identity } from './Identity.js';
+import { DatabaseContext } from '../utils/index.js';
 export declare class IdentityFactory {
     private readonly projectMemberManager;
     constructor(projectMemberManager: ProjectMemberManager);

package/dist/types/model/authorization/IdentityFactory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"IdentityFactory.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/IdentityFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AACjD,OAAO,EAAE,QAAQ,EAAwB,MAAM,YAAY,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAE1C,qBAAa,eAAe;IACf,OAAO,CAAC,QAAQ,CAAC,oBAAoB;gBAApB,oBAAoB,EAAE,oBAAoB;IAEhE,MAAM,CAAC,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,GAAG,QAAQ;CAGnG"}
+{"version":3,"file":"IdentityFactory.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/IdentityFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,EAAE,QAAQ,EAAwB,MAAM,eAAe,CAAA;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAEnD,qBAAa,eAAe;IACf,OAAO,CAAC,QAAQ,CAAC,oBAAoB;gBAApB,oBAAoB,EAAE,oBAAoB;IAEhE,MAAM,CAAC,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,GAAG,QAAQ;CAGnG"}

package/dist/types/model/authorization/IdentityScope.d.ts

@@ -1,5 +1,5 @@
 import { AccessNode, AuthorizationScope } from '@contember/authorization';
-import { Identity } from './Identity';
+import { Identity } from './Identity.js';
 declare class IdentityScope implements AuthorizationScope<Identity> {
     private readonly identityId;
     constructor(identityId: string);

package/dist/types/model/authorization/IdentityScope.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"IdentityScope.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/IdentityScope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAEzE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAErC,cAAM,aAAc,YAAW,kBAAkB,CAAC,QAAQ,CAAC;IAC9C,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,EAAE,MAAM;IAEzC,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC;CAGhE;AAED,OAAO,EAAE,aAAa,EAAE,CAAA"}
+{"version":3,"file":"IdentityScope.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/IdentityScope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAEzE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAExC,cAAM,aAAc,YAAW,kBAAkB,CAAC,QAAQ,CAAC;IAC9C,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,EAAE,MAAM;IAEzC,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC;CAGhE;AAED,OAAO,EAAE,aAAa,EAAE,CAAA"}

package/dist/types/model/authorization/PermissionActions.d.ts

@@ -21,6 +21,11 @@ declare namespace PermissionActions {
         privilege: Authorizator.Privilege;
         meta?: undefined;
     };
+    const AUTH_LOG_VIEW: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
     const IDENTITY_VIEW_PERMISSIONS: {
         resource: Authorizator.Resource;
         privilege: Authorizator.Privilege;
@@ -47,11 +52,42 @@ declare namespace PermissionActions {
             roles: readonly string[] | undefined;
         };
     };
+    const PERSON_FORCE_SIGN_OUT: (roles?: readonly string[]) => {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta: {
+            roles: readonly string[] | undefined;
+        };
+    };
+    const PERSON_RESET_MFA: (roles?: readonly string[]) => {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta: {
+            roles: readonly string[] | undefined;
+        };
+    };
+    const PERSON_REVOKE_SESSION: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
+    const PERSON_VIEW_SESSIONS: (roles?: readonly string[]) => {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta: {
+            roles: readonly string[] | undefined;
+        };
+    };
     const PERSON_VIEW: {
         resource: Authorizator.Resource;
         privilege: Authorizator.Privilege;
         meta?: undefined;
     };
+    const PERSON_LIST: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
     const PERSON_SIGN_IN: {
         resource: Authorizator.Resource;
         privilege: Authorizator.Privilege;
@@ -118,6 +154,18 @@ declare namespace PermissionActions {
         privilege: Authorizator.Privilege;
         meta?: undefined;
     };
+    const PERSON_VIEW_IDP: (roles?: readonly string[]) => {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta: {
+            roles: readonly string[] | undefined;
+        };
+    };
+    const PERSON_DISCONNECT_MY_IDP: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
     const PERSON_REQUEST_PASSWORDLESS_SIGN_IN: {
         resource: Authorizator.Resource;
         privilege: Authorizator.Privilege;
@@ -159,6 +207,11 @@ declare namespace PermissionActions {
         privilege: Authorizator.Privilege;
         meta?: undefined;
     };
+    const PROJECT_VIEW_SECRETS: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
     const PROJECT_UPDATE: {
         resource: Authorizator.Resource;
         privilege: Authorizator.Privilege;
@@ -219,6 +272,11 @@ declare namespace PermissionActions {
         privilege: Authorizator.Privilege;
         meta?: undefined;
     };
+    const API_KEY_LIST: {
+        resource: Authorizator.Resource;
+        privilege: Authorizator.Privilege;
+        meta?: undefined;
+    };
     const MAIL_TEMPLATE_ADD: {
         resource: Authorizator.Resource;
         privilege: Authorizator.Privilege;

package/dist/types/model/authorization/PermissionActions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PermissionActions.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/PermissionActions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AAEvC,kBAAU,iBAAiB,CAAC;IAC3B,KAAY,SAAS;QACpB,MAAM,WAAW;QACjB,UAAU,eAAe;QACzB,MAAM,WAAW;QACjB,QAAQ,aAAa;QACrB,OAAO,YAAY;QACnB,MAAM,WAAW;QACjB,YAAY,iBAAiB;QAC7B,GAAG,QAAQ;KACX;IAEM,MAAM,SAAS;;;;KAA2D,CAAA;IAC1E,MAAM,WAAW;;;;KAA4D,CAAA;IAE7E,MAAM,yBAAyB;;;;KAAmE,CAAA;IAClG,MAAM,yBAAyB,GAAI,QAAQ,SAAS,MAAM,EAAE;;;;;;KAA+E,CAAA;IAC3I,MAAM,4BAA4B,GAAI,QAAQ,SAAS,MAAM,EAAE;;;;;;KACQ,CAAA;IAEvE,MAAM,cAAc,GAAI,QAAQ,SAAS,MAAM,EAAE;;;;;;KAAsE,CAAA;IAEvH,MAAM,WAAW;;;;KAAsD,CAAA;IACvE,MAAM,cAAc;;;;KAAwD,CAAA;IAC5E,MAAM,cAAc,GAAI,QAAQ,SAAS,MAAM,EAAE;;;;;;KAAqE,CAAA;IACtH,MAAM,eAAe;;;;KAAyD,CAAA;IAC9E,MAAM,gBAAgB;;;;KAA0D,CAAA;IAChF,MAAM,qBAAqB,GAAI,QAAQ,SAAS,MAAM,EAAE;;;;;;KAA4E,CAAA;IACpI,MAAM,wBAAwB;;;;KAAiE,CAAA;IAC/F,MAAM,0BAA0B;;;;KAAoE,CAAA;IACpG,MAAM,sBAAsB,GAAI,QAAQ,SAAS,MAAM,EAAE;;;;;;KAA6E,CAAA;IACtI,MAAM,yBAAyB;;;;KAAkE,CAAA;IACjG,MAAM,qBAAqB;;;;KAA+D,CAAA;IAC1F,MAAM,qBAAqB;;;;KAA8D,CAAA;IACzF,MAAM,kBAAkB;;;;KAA2D,CAAA;IACnF,MAAM,mCAAmC;;;;KAA2E,CAAA;IACpH,MAAM,2BAA2B;;;;KAAoE,CAAA;IACrG,MAAM,yBAAyB,GAAI,QAAQ,SAAS,MAAM,EAAE;;;;;;KAAiF,CAAA;IAE7I,MAAM,aAAa,GAAI,aAAa,SAAS,GAAG,CAAC,UAAU,EAAE;;;;;;KAA2E,CAAA;IACxI,MAAM,uBAAuB,GAAI,aAAa,SAAS,GAAG,CAAC,UAAU,EAAE;;;;;;KACG,CAAA;IAE1E,MAAM,YAAY;;;;KAAuD,CAAA;IACzE,MAAM,kBAAkB;;;;KAA4D,CAAA;IACpF,MAAM,cAAc;;;;KAAyD,CAAA;IAE7E,MAAM,cAAc;;;;KAAyD,CAAA;IAC7E,MAAM,iBAAiB;;;;KAAsE,CAAA;IAE7F,MAAM,mBAAmB,GAAI,aAAa,SAAS,GAAG,CAAC,UAAU,EAAE;;;;;;KACG,CAAA;IACtE,MAAM,kBAAkB,GAAI,aAAa,SAAS,GAAG,CAAC,UAAU,EAAE;;;;;;KACE,CAAA;IACpE,MAAM,qBAAqB,GAAI,aAAa,SAAS,GAAG,CAAC,UAAU,EAAE;;;;;;KACE,CAAA;IACvE,MAAM,qBAAqB,GAAI,aAAa,SAAS,GAAG,CAAC,UAAU,EAAE;;;;;;KACE,CAAA;IAEvE,MAAM,cAAc;;;;KAAwD,CAAA;IAC5E,MAAM,qBAAqB,GAAI,QAAQ,SAAS,MAAM,EAAE;;;;;;KAA2E,CAAA;IACnI,MAAM,eAAe;;;;KAAyD,CAAA;IAE9E,MAAM,iBAAiB;;;;KAA2D,CAAA;IAClF,MAAM,oBAAoB;;;;KAA8D,CAAA;IACxF,MAAM,kBAAkB;;;;KAA4D,CAAA;IAEpF,MAAM,OAAO;;;;KAAkD,CAAA;IAC/D,MAAM,UAAU;;;;KAAqD,CAAA;IACrE,MAAM,WAAW;;;;KAAsD,CAAA;IACvE,MAAM,UAAU;;;;KAAqD,CAAA;IACrE,MAAM,QAAQ;;;;KAAmD,CAAA;CACxE;AAED,OAAO,EAAE,iBAAiB,EAAE,CAAA"}
+{"version":3,"file":"PermissionActions.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/PermissionActions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AAEvC,kBAAU,iBAAiB,CAAC;IAC3B,KAAY,SAAS;QACpB,MAAM,WAAW;QACjB,UAAU,eAAe;QACzB,MAAM,WAAW;QACjB,QAAQ,aAAa;QACrB,OAAO,YAAY;QACnB,MAAM,WAAW;QACjB,YAAY,iBAAiB;QAC7B,GAAG,QAAQ;KACX;IAEM,MAAM,SAAS;;;;KAA2D,CAAA;IAC1E,MAAM,WAAW;;;;KAA4D,CAAA;IAC7E,MAAM,aAAa;;;;KAA6D,CAAA;IAEhF,MAAM,yBAAyB;;;;KAAmE,CAAA;IAClG,MAAM,yBAAyB,GAAI,QAAQ,SAAS,MAAM,EAAE;;;;;;KAA+E,CAAA;IAC3I,MAAM,4BAA4B,GAAI,QAAQ,SAAS,MAAM,EAAE;;;;;;KACQ,CAAA;IAEvE,MAAM,cAAc,GAAI,QAAQ,SAAS,MAAM,EAAE;;;;;;KAAsE,CAAA;IACvH,MAAM,qBAAqB,GAAI,QAAQ,SAAS,MAAM,EAAE;;;;;;KAA2E,CAAA;IACnI,MAAM,gBAAgB,GAAI,QAAQ,SAAS,MAAM,EAAE;;;;;;KAAuE,CAAA;IAC1H,MAAM,qBAAqB;;;;KAA+D,CAAA;IAC1F,MAAM,oBAAoB,GAAI,QAAQ,SAAS,MAAM,EAAE;;;;;;KAA2E,CAAA;IAElI,MAAM,WAAW;;;;KAAsD,CAAA;IACvE,MAAM,WAAW;;;;KAAsD,CAAA;IACvE,MAAM,cAAc;;;;KAAwD,CAAA;IAC5E,MAAM,cAAc,GAAI,QAAQ,SAAS,MAAM,EAAE;;;;;;KAAqE,CAAA;IACtH,MAAM,eAAe;;;;KAAyD,CAAA;IAC9E,MAAM,gBAAgB;;;;KAA0D,CAAA;IAChF,MAAM,qBAAqB,GAAI,QAAQ,SAAS,MAAM,EAAE;;;;;;KAA4E,CAAA;IACpI,MAAM,wBAAwB;;;;KAAiE,CAAA;IAC/F,MAAM,0BAA0B;;;;KAAoE,CAAA;IACpG,MAAM,sBAAsB,GAAI,QAAQ,SAAS,MAAM,EAAE;;;;;;KAA6E,CAAA;IACtI,MAAM,yBAAyB;;;;KAAkE,CAAA;IACjG,MAAM,qBAAqB;;;;KAA+D,CAAA;IAC1F,MAAM,qBAAqB;;;;KAA8D,CAAA;IACzF,MAAM,kBAAkB;;;;KAA2D,CAAA;IACnF,MAAM,eAAe,GAAI,QAAQ,SAAS,MAAM,EAAE;;;;;;KAAsE,CAAA;IACxH,MAAM,wBAAwB;;;;KAAiE,CAAA;IAC/F,MAAM,mCAAmC;;;;KAA2E,CAAA;IACpH,MAAM,2BAA2B;;;;KAAoE,CAAA;IACrG,MAAM,yBAAyB,GAAI,QAAQ,SAAS,MAAM,EAAE;;;;;;KAAiF,CAAA;IAE7I,MAAM,aAAa,GAAI,aAAa,SAAS,GAAG,CAAC,UAAU,EAAE;;;;;;KAA2E,CAAA;IACxI,MAAM,uBAAuB,GAAI,aAAa,SAAS,GAAG,CAAC,UAAU,EAAE;;;;;;KACG,CAAA;IAE1E,MAAM,YAAY;;;;KAAuD,CAAA;IACzE,MAAM,kBAAkB;;;;KAA4D,CAAA;IACpF,MAAM,oBAAoB;;;;KAA8D,CAAA;IACxF,MAAM,cAAc;;;;KAAyD,CAAA;IAE7E,MAAM,cAAc;;;;KAAyD,CAAA;IAC7E,MAAM,iBAAiB;;;;KAAsE,CAAA;IAE7F,MAAM,mBAAmB,GAAI,aAAa,SAAS,GAAG,CAAC,UAAU,EAAE;;;;;;KACG,CAAA;IACtE,MAAM,kBAAkB,GAAI,aAAa,SAAS,GAAG,CAAC,UAAU,EAAE;;;;;;KACE,CAAA;IACpE,MAAM,qBAAqB,GAAI,aAAa,SAAS,GAAG,CAAC,UAAU,EAAE;;;;;;KACE,CAAA;IACvE,MAAM,qBAAqB,GAAI,aAAa,SAAS,GAAG,CAAC,UAAU,EAAE;;;;;;KACE,CAAA;IAEvE,MAAM,cAAc;;;;KAAwD,CAAA;IAC5E,MAAM,qBAAqB,GAAI,QAAQ,SAAS,MAAM,EAAE;;;;;;KAA2E,CAAA;IACnI,MAAM,eAAe;;;;KAAyD,CAAA;IAC9E,MAAM,YAAY;;;;KAAsD,CAAA;IAExE,MAAM,iBAAiB;;;;KAA2D,CAAA;IAClF,MAAM,oBAAoB;;;;KAA8D,CAAA;IACxF,MAAM,kBAAkB;;;;KAA4D,CAAA;IAEpF,MAAM,OAAO;;;;KAAkD,CAAA;IAC/D,MAAM,UAAU;;;;KAAqD,CAAA;IACrE,MAAM,WAAW;;;;KAAsD,CAAA;IACvE,MAAM,UAAU;;;;KAAqD,CAAA;IACrE,MAAM,QAAQ;;;;KAAmD,CAAA;CACxE;AAED,OAAO,EAAE,iBAAiB,EAAE,CAAA"}

package/dist/types/model/authorization/PermissionContext.d.ts

@@ -1,7 +1,7 @@
 import { AuthorizationScope, Authorizator } from '@contember/authorization';
-import { ProjectScopeFactory } from './ProjectScopeFactory';
-import { Project, ProjectSchemaResolver } from '../type';
-import { Identity } from './Identity';
+import { ProjectScopeFactory } from './ProjectScopeFactory.js';
+import { Project, ProjectSchemaResolver } from '../type/index.js';
+import { Identity } from './Identity.js';
 export type AccessVerifier = (action: Authorizator.Action) => Promise<boolean>;
 export declare class PermissionContext {
     readonly identity: Identity;

package/dist/types/model/authorization/PermissionContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PermissionContext.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/PermissionContext.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,kBAAkB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAEvF,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAA;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAErC,MAAM,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AAI9E,qBAAa,iBAAiB;aAIZ,QAAQ,EAAE,QAAQ;aAClB,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC;IACpD,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,cAAc;IANhC,OAAO,CAAC,aAAa,CAAmD;gBAGvD,QAAQ,EAAE,QAAQ,EAClB,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC,EACnC,mBAAmB,EAAE,mBAAmB,EACxC,cAAc,EAAE,qBAAqB;IAG1C,SAAS,CAAC,IAAI,SAAS,EAAE,GAAG,SAAS,EAAE,EACnD,KAAK,EACL,MAAM,GACN,EAAE;QACF,KAAK,CAAC,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAA;QACpC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;KACjC,GAAG,OAAO,CAAC,OAAO,CAAC;IAIb,oBAAoB,CAAC,KAAK,EAAE,kBAAkB,CAAC,QAAQ,CAAC,GAAG,cAAc;IAInE,aAAa,CAAC,IAAI,SAAS,EAAE,GAAG,SAAS,EAAE,EACvD,KAAK,EACL,MAAM,EACN,OAAO,GACP,EAAE;QACF,KAAK,CAAC,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAA;QACpC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACjC,OAAO,CAAC,EAAE,MAAM,CAAA;KAChB,GAAG,OAAO,CAAC,IAAI,CAAC;IAMJ,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,IAAI,GAAG,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;CAS7G"}
+{"version":3,"file":"PermissionContext.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/PermissionContext.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,kBAAkB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAEvF,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAA;AACjE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAExC,MAAM,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AAI9E,qBAAa,iBAAiB;aAIZ,QAAQ,EAAE,QAAQ;aAClB,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC;IACpD,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,cAAc;IANhC,OAAO,CAAC,aAAa,CAAmD;gBAGvD,QAAQ,EAAE,QAAQ,EAClB,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC,EACnC,mBAAmB,EAAE,mBAAmB,EACxC,cAAc,EAAE,qBAAqB;IAG1C,SAAS,CAAC,IAAI,SAAS,EAAE,GAAG,SAAS,EAAE,EACnD,KAAK,EACL,MAAM,GACN,EAAE;QACF,KAAK,CAAC,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAA;QACpC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;KACjC,GAAG,OAAO,CAAC,OAAO,CAAC;IAIb,oBAAoB,CAAC,KAAK,EAAE,kBAAkB,CAAC,QAAQ,CAAC,GAAG,cAAc;IAInE,aAAa,CAAC,IAAI,SAAS,EAAE,GAAG,SAAS,EAAE,EACvD,KAAK,EACL,MAAM,EACN,OAAO,GACP,EAAE;QACF,KAAK,CAAC,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAA;QACpC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACjC,OAAO,CAAC,EAAE,MAAM,CAAA;KAChB,GAAG,OAAO,CAAC,IAAI,CAAC;IAMJ,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,IAAI,GAAG,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;CAS7G"}

package/dist/types/model/authorization/PermissionContextFactory.d.ts

@@ -1,9 +1,9 @@
 import { Authorizator } from '@contember/authorization';
-import { IdentityFactory } from './IdentityFactory';
-import { PermissionContext } from './PermissionContext';
-import { ProjectScopeFactory } from './ProjectScopeFactory';
-import { ProjectSchemaResolver } from '../type';
-import { DatabaseContext } from '../utils';
+import { IdentityFactory } from './IdentityFactory.js';
+import { PermissionContext } from './PermissionContext.js';
+import { ProjectScopeFactory } from './ProjectScopeFactory.js';
+import { ProjectSchemaResolver } from '../type/index.js';
+import { DatabaseContext } from '../utils/index.js';
 export declare class PermissionContextFactory {
     private readonly authorizator;
     private readonly identityFactory;

package/dist/types/model/authorization/PermissionContextFactory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PermissionContextFactory.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/PermissionContextFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAA;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAE1C,qBAAa,wBAAwB;IAEnC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,cAAc;gBAHd,YAAY,EAAE,YAAY,EAC1B,eAAe,EAAE,eAAe,EAChC,mBAAmB,EAAE,mBAAmB,EACxC,cAAc,EAAE,qBAAqB;IAGhD,MAAM,CAAC,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,GAAG,iBAAiB;CAIrG"}
+{"version":3,"file":"PermissionContextFactory.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/PermissionContextFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAA;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAEnD,qBAAa,wBAAwB;IAEnC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,cAAc;gBAHd,YAAY,EAAE,YAAY,EAC1B,eAAe,EAAE,eAAe,EAChC,mBAAmB,EAAE,mBAAmB,EACxC,cAAc,EAAE,qBAAqB;IAGhD,MAAM,CAAC,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,GAAG,iBAAiB;CAIrG"}

package/dist/types/model/authorization/PermissionsFactory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PermissionsFactory.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/PermissionsFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AAgBtD,cAAM,kBAAkB;IAChB,MAAM,IAAI,WAAW;CA+D5B;AAED,OAAO,EAAE,kBAAkB,EAAE,CAAA"}
+{"version":3,"file":"PermissionsFactory.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/PermissionsFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AAgBtD,cAAM,kBAAkB;IAChB,MAAM,IAAI,WAAW;CAsE5B;AAED,OAAO,EAAE,kBAAkB,EAAE,CAAA"}

package/dist/types/model/authorization/ProjectScope.d.ts

@@ -1,8 +1,8 @@
 import { AccessNode, AuthorizationScope } from '@contember/authorization';
-import { Project } from '../type';
+import { Project } from '../type/index.js';
 import { Acl } from '@contember/schema';
-import { AclSchemaAccessNodeFactory } from './AclSchemaAccessNodeFactory';
-import { Identity } from './Identity';
+import { AclSchemaAccessNodeFactory } from './AclSchemaAccessNodeFactory.js';
+import { Identity } from './Identity.js';
 export declare class ProjectScope implements AuthorizationScope<Identity> {
     private readonly project;
     private readonly aclSchema;

package/dist/types/model/authorization/ProjectScope.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ProjectScope.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/ProjectScope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AACzE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAEjC,OAAO,EAAE,GAAG,EAAe,MAAM,mBAAmB,CAAA;AACpD,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAA;AACzE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAErC,qBAAa,YAAa,YAAW,kBAAkB,CAAC,QAAQ,CAAC;IAE/D,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,0BAA0B;gBAF1B,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAC9B,SAAS,EAAE,GAAG,CAAC,MAAM,EACrB,0BAA0B,EAAE,0BAA0B;IAGlE,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC;CAgBhE"}
+{"version":3,"file":"ProjectScope.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/ProjectScope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AACzE,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAE1C,OAAO,EAAE,GAAG,EAAe,MAAM,mBAAmB,CAAA;AACpD,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAA;AAC5E,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAExC,qBAAa,YAAa,YAAW,kBAAkB,CAAC,QAAQ,CAAC;IAE/D,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,0BAA0B;gBAF1B,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAC9B,SAAS,EAAE,GAAG,CAAC,MAAM,EACrB,0BAA0B,EAAE,0BAA0B;IAGlE,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC;CAgBhE"}

package/dist/types/model/authorization/ProjectScopeFactory.d.ts

@@ -1,7 +1,7 @@
-import { Project, ProjectSchemaResolver } from '../type';
-import { AclSchemaAccessNodeFactory } from './AclSchemaAccessNodeFactory';
+import { Project, ProjectSchemaResolver } from '../type/index.js';
+import { AclSchemaAccessNodeFactory } from './AclSchemaAccessNodeFactory.js';
 import { AuthorizationScope } from '@contember/authorization';
-import { Identity } from './Identity';
+import { Identity } from './Identity.js';
 export declare class ProjectScopeFactory {
     private readonly schemaAccessNodeFactory;
     constructor(schemaAccessNodeFactory: AclSchemaAccessNodeFactory);

package/dist/types/model/authorization/ProjectScopeFactory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ProjectScopeFactory.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/ProjectScopeFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAA;AACxD,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAA;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAE7D,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAErC,qBAAa,mBAAmB;IAE9B,OAAO,CAAC,QAAQ,CAAC,uBAAuB;gBAAvB,uBAAuB,EAAE,0BAA0B;IAG/D,MAAM,CAAC,cAAc,EAAE,qBAAqB,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;CAOjI"}
+{"version":3,"file":"ProjectScopeFactory.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/ProjectScopeFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAA;AACjE,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAA;AAC5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAE7D,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAExC,qBAAa,mBAAmB;IAE9B,OAAO,CAAC,QAAQ,CAAC,uBAAuB;gBAAvB,uBAAuB,EAAE,0BAA0B;IAG/D,MAAM,CAAC,cAAc,EAAE,qBAAqB,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;CAOjI"}

package/dist/types/model/authorization/index.d.ts

@@ -1,13 +1,13 @@
-export * from './AclSchemaAccessNodeFactory';
-export * from './Identity';
-export * from './IdentityFactory';
-export * from './IdentityScope';
-export * from './MembershipMatcher';
-export * from './PermissionActions';
-export * from './PermissionContext';
-export * from './PermissionContextFactory';
-export * from './PermissionsFactory';
-export * from './ProjectScope';
-export * from './ProjectScopeFactory';
-export * from './Roles';
+export * from './AclSchemaAccessNodeFactory.js';
+export * from './Identity.js';
+export * from './IdentityFactory.js';
+export * from './IdentityScope.js';
+export * from './MembershipMatcher.js';
+export * from './PermissionActions.js';
+export * from './PermissionContext.js';
+export * from './PermissionContextFactory.js';
+export * from './PermissionsFactory.js';
+export * from './ProjectScope.js';
+export * from './ProjectScopeFactory.js';
+export * from './Roles.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/types/model/authorization/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/index.ts"],"names":[],"mappings":"AAAA,cAAc,8BAA8B,CAAA;AAC5C,cAAc,YAAY,CAAA;AAC1B,cAAc,mBAAmB,CAAA;AACjC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,qBAAqB,CAAA;AACnC,cAAc,qBAAqB,CAAA;AACnC,cAAc,qBAAqB,CAAA;AACnC,cAAc,4BAA4B,CAAA;AAC1C,cAAc,sBAAsB,CAAA;AACpC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,uBAAuB,CAAA;AACrC,cAAc,SAAS,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/model/authorization/index.ts"],"names":[],"mappings":"AAAA,cAAc,iCAAiC,CAAA;AAC/C,cAAc,eAAe,CAAA;AAC7B,cAAc,sBAAsB,CAAA;AACpC,cAAc,oBAAoB,CAAA;AAClC,cAAc,wBAAwB,CAAA;AACtC,cAAc,wBAAwB,CAAA;AACtC,cAAc,wBAAwB,CAAA;AACtC,cAAc,+BAA+B,CAAA;AAC7C,cAAc,yBAAyB,CAAA;AACvC,cAAc,mBAAmB,CAAA;AACjC,cAAc,0BAA0B,CAAA;AACxC,cAAc,YAAY,CAAA"}

package/dist/types/model/commands/Command.d.ts

@@ -1,6 +1,6 @@
 import { Client } from '@contember/database';
-import { Providers } from '../providers';
-import { CommandBus } from './CommandBus';
+import { Providers } from '../providers.js';
+import { CommandBus } from './CommandBus.js';
 interface Command<Result> {
     execute(args: Command.Args): Promise<Result>;
 }

package/dist/types/model/commands/Command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Command.d.ts","sourceRoot":"","sources":["../../../../src/model/commands/Command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAEzC,UAAU,OAAO,CAAC,MAAM;IACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CAC5C;AAED,kBAAU,OAAO,CAAC;IACjB,UAAiB,IAAI;QACpB,EAAE,EAAE,MAAM,CAAA;QACV,SAAS,EAAE,SAAS,CAAA;QACpB,GAAG,EAAE,UAAU,CAAA;KACf;CACD;AACD,YAAY,EAAE,OAAO,EAAE,CAAA"}
+{"version":3,"file":"Command.d.ts","sourceRoot":"","sources":["../../../../src/model/commands/Command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAE5C,UAAU,OAAO,CAAC,MAAM;IACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CAC5C;AAED,kBAAU,OAAO,CAAC;IACjB,UAAiB,IAAI;QACpB,EAAE,EAAE,MAAM,CAAA;QACV,SAAS,EAAE,SAAS,CAAA;QACpB,GAAG,EAAE,UAAU,CAAA;KACf;CACD;AACD,YAAY,EAAE,OAAO,EAAE,CAAA"}

package/dist/types/model/commands/CommandBus.d.ts

@@ -1,6 +1,6 @@
-import { Command } from './Command';
+import { Command } from './Command.js';
 import { Client, Connection } from '@contember/database';
-import { Providers } from '../providers';
+import { Providers } from '../providers.js';
 export declare class CommandBus<ConnectionType extends Connection.ConnectionLike = Connection.ConnectionLike> {
     readonly client: Client<ConnectionType>;
     private readonly providers;

package/dist/types/model/commands/CommandBus.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CommandBus.d.ts","sourceRoot":"","sources":["../../../../src/model/commands/CommandBus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAExC,qBAAa,UAAU,CAAC,cAAc,SAAS,UAAU,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc;aACvE,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;IAAE,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAA1D,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC,EAAmB,SAAS,EAAE,SAAS;IAEpF,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAIlD,WAAW,CAAC,CAAC,EAClB,gBAAgB,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,UAAU,CAAC,eAAe,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GACnF,OAAO,CAAC,CAAC,CAAC;CAGb"}
+{"version":3,"file":"CommandBus.d.ts","sourceRoot":"","sources":["../../../../src/model/commands/CommandBus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAE3C,qBAAa,UAAU,CAAC,cAAc,SAAS,UAAU,CAAC,cAAc,GAAG,UAAU,CAAC,cAAc;aACvE,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;IAAE,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAA1D,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC,EAAmB,SAAS,EAAE,SAAS;IAEpF,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAIlD,WAAW,CAAC,CAAC,EAClB,gBAAgB,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,UAAU,CAAC,eAAe,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GACnF,OAAO,CAAC,CAAC,CAAC;CAGb"}

package/dist/types/model/commands/apiKey/ApiKeyHelper.d.ts

@@ -1,5 +1,5 @@
-import { ApiKey } from '../../type';
-import { Providers } from '../../providers';
+import { ApiKey } from '../../type/index.js';
+import { Providers } from '../../providers.js';
 export declare class ApiKeyHelper {
     static getExpiration(providers: Providers, type: ApiKey.Type, expiration?: number | null): Date | null;
 }

package/dist/types/model/commands/apiKey/ApiKeyHelper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ApiKeyHelper.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/apiKey/ApiKeyHelper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAI3C,qBAAa,YAAY;WACV,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI;CAY7G"}
+{"version":3,"file":"ApiKeyHelper.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/apiKey/ApiKeyHelper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAI9C,qBAAa,YAAY;WACV,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI;CAY7G"}

package/dist/types/model/commands/apiKey/CreateApiKeyCommand.d.ts

@@ -1,17 +1,29 @@
-import { Command } from '../Command';
-import { ApiKey } from '../../type';
-import { TokenHash } from '../../utils';
+import { Command } from '../Command.js';
+import { ApiKey } from '../../type/index.js';
+import { TokenHash } from '../../utils/index.js';
+import { ApiKeyRequestInfo } from './ProlongApiKeyCommand.js';
 interface CreateSessionApiKeyArgs {
     type: ApiKey.Type.SESSION;
     identityId: string;
     expiration?: number;
     tokenHash?: string;
+    requestInfo?: ApiKeyRequestInfo;
+    trustForwardedInfo?: boolean;
+    /**
+     * A19 session-policy snapshot, fixed at sign-in. NULLs preserve today's
+     * behavior (no idle timeout, no absolute cap on the sliding window).
+     * `idleTimeout` is a Postgres interval literal (e.g. `'15 minutes'`).
+     */
+    idleTimeout?: string | null;
+    maxExpiresAt?: Date | null;
 }
 interface CreatePermanentApiKeyArgs {
     type: ApiKey.Type.PERMANENT;
     identityId: string;
     tokenHash?: TokenHash;
     expiration?: undefined;
+    requestInfo?: ApiKeyRequestInfo;
+    trustForwardedInfo?: boolean;
 }
 export type CreateApiKeyArgs = CreateSessionApiKeyArgs | CreatePermanentApiKeyArgs;
 export declare class CreateApiKeyCommand implements Command<CreateApiKeyCommandResult> {

package/dist/types/model/commands/apiKey/CreateApiKeyCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CreateApiKeyCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/apiKey/CreateApiKeyCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAGnC,OAAO,EAAmC,SAAS,EAAE,MAAM,aAAa,CAAA;AAExE,UAAU,uBAAuB;IAChC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,UAAU,yBAAyB;IAClC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAA;IAC3B,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,UAAU,CAAC,EAAE,SAAS,CAAA;CACtB;AAED,MAAM,MAAM,gBAAgB,GACzB,uBAAuB,GACvB,yBAAyB,CAAA;AAE5B,qBAAa,mBAAoB,YAAW,OAAO,CAAC,yBAAyB,CAAC;IACjE,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE,gBAAgB;IAEpC,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,yBAAyB,CAAC;CAyBlF;AAED,qBAAa,yBAAyB;aACT,EAAE,EAAE,MAAM;aAAkB,KAAK,CAAC,EAAE,MAAM;gBAA1C,EAAE,EAAE,MAAM,EAAkB,KAAK,CAAC,EAAE,MAAM,YAAA;CAEtE"}
+{"version":3,"file":"CreateApiKeyCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/apiKey/CreateApiKeyCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAG5C,OAAO,EAAmC,SAAS,EAAE,MAAM,sBAAsB,CAAA;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAE7D,UAAU,uBAAuB;IAChC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,iBAAiB,CAAA;IAC/B,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,YAAY,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;CAC1B;AAED,UAAU,yBAAyB;IAClC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAA;IAC3B,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,UAAU,CAAC,EAAE,SAAS,CAAA;IACtB,WAAW,CAAC,EAAE,iBAAiB,CAAA;IAC/B,kBAAkB,CAAC,EAAE,OAAO,CAAA;CAC5B;AAED,MAAM,MAAM,gBAAgB,GACzB,uBAAuB,GACvB,yBAAyB,CAAA;AAE5B,qBAAa,mBAAoB,YAAW,OAAO,CAAC,yBAAyB,CAAC;IACjE,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE,gBAAgB;IAEpC,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,yBAAyB,CAAC;CAyClF;AAED,qBAAa,yBAAyB;aACT,EAAE,EAAE,MAAM;aAAkB,KAAK,CAAC,EAAE,MAAM;gBAA1C,EAAE,EAAE,MAAM,EAAkB,KAAK,CAAC,EAAE,MAAM,YAAA;CAEtE"}

package/dist/types/model/commands/apiKey/DisableApiKeyCommand.d.ts

@@ -1,4 +1,4 @@
-import { Command } from '../Command';
+import { Command } from '../Command.js';
 export declare class DisableApiKeyCommand implements Command<boolean> {
     private readonly apiKeyId;
     constructor(apiKeyId: string);

package/dist/types/model/commands/apiKey/DisableApiKeyCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DisableApiKeyCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/apiKey/DisableApiKeyCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAGpC,qBAAa,oBAAqB,YAAW,OAAO,CAAC,OAAO,CAAC;IAChD,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,MAAM;IAEvC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;CAUrD"}
+{"version":3,"file":"DisableApiKeyCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/apiKey/DisableApiKeyCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAGvC,qBAAa,oBAAqB,YAAW,OAAO,CAAC,OAAO,CAAC;IAChD,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,MAAM;IAEvC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;CAUrD"}

package/dist/types/model/commands/apiKey/DisableIdentityApiKeysCommand.d.ts

@@ -1,4 +1,4 @@
-import { Command } from '../Command';
+import { Command } from '../Command.js';
 export declare class DisableIdentityApiKeysCommand implements Command<void> {
     private readonly identityId;
     constructor(identityId: string);

package/dist/types/model/commands/apiKey/DisableIdentityApiKeysCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DisableIdentityApiKeysCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/apiKey/DisableIdentityApiKeysCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAGpC,qBAAa,6BAA8B,YAAW,OAAO,CAAC,IAAI,CAAC;IACtD,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,EAAE,MAAM;IAEzC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;CAUlD"}
+{"version":3,"file":"DisableIdentityApiKeysCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/apiKey/DisableIdentityApiKeysCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAGvC,qBAAa,6BAA8B,YAAW,OAAO,CAAC,IAAI,CAAC;IACtD,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,EAAE,MAAM;IAEzC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;CAUlD"}

package/dist/types/model/commands/apiKey/DisableOneOffApiKeyCommand.d.ts

@@ -1,4 +1,4 @@
-import { Command } from '../Command';
+import { Command } from '../Command.js';
 export declare class DisableOneOffApiKeyCommand implements Command<void> {
     private readonly apiKeyId;
     constructor(apiKeyId: string);

package/dist/types/model/commands/apiKey/DisableOneOffApiKeyCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DisableOneOffApiKeyCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/apiKey/DisableOneOffApiKeyCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAIpC,qBAAa,0BAA2B,YAAW,OAAO,CAAC,IAAI,CAAC;IACnD,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,MAAM;IAEvC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;CAWlD"}
+{"version":3,"file":"DisableOneOffApiKeyCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/apiKey/DisableOneOffApiKeyCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAIvC,qBAAa,0BAA2B,YAAW,OAAO,CAAC,IAAI,CAAC;IACnD,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,MAAM;IAEvC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;CAWlD"}

package/dist/types/model/commands/apiKey/ProlongApiKeyCommand.d.ts

@@ -1,11 +1,30 @@
-import { Command } from '../Command';
-import { ApiKey } from '../../type';
+import { Command } from '../Command.js';
+import { ApiKey } from '../../type/index.js';
+/**
+ * Tracking writes (`last_used_at`) are throttled to at most once per this window, so
+ * an idle check must add this slack to avoid prematurely expiring an active session
+ * whose `last_used_at` is intentionally stale (see {@link ApiKeyManager.verifyAndProlong}).
+ */
+export declare const PROLONG_THROTTLE_MS = 60000;
+export interface ApiKeyRequestInfo {
+    ip?: string;
+    userAgent?: string;
+}
+export interface ApiKeyTrackingState {
+    lastIp: string | null;
+    lastUserAgent: string | null;
+    lastUsedAt: Date | null;
+}
 export declare class ProlongApiKeyCommand implements Command<void> {
     private readonly id;
     private readonly type;
     private readonly expiration;
     private readonly currentExpiration;
-    constructor(id: string, type: ApiKey.Type, expiration: number | null, currentExpiration: Date | null);
+    private readonly requestInfo?;
+    private readonly tracking?;
+    private readonly maxExpiresAt?;
+    constructor(id: string, type: ApiKey.Type, expiration: number | null, currentExpiration: Date | null, requestInfo?: ApiKeyRequestInfo | undefined, tracking?: ApiKeyTrackingState | undefined, maxExpiresAt?: (Date | null) | undefined);
     execute({ db, providers }: Command.Args): Promise<void>;
+    private shouldUpdateTracking;
 }
 //# sourceMappingURL=ProlongApiKeyCommand.d.ts.map

package/dist/types/model/commands/apiKey/ProlongApiKeyCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ProlongApiKeyCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/apiKey/ProlongApiKeyCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAMnC,qBAAa,oBAAqB,YAAW,OAAO,CAAC,IAAI,CAAC;IAExD,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;gBAHjB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,MAAM,CAAC,IAAI,EACjB,UAAU,EAAE,MAAM,GAAG,IAAI,EACzB,iBAAiB,EAAE,IAAI,GAAG,IAAI;IAG1C,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;CAqB7D"}
+{"version":3,"file":"ProlongApiKeyCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/apiKey/ProlongApiKeyCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAI5C;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,QAAS,CAAA;AAEzC,MAAM,WAAW,iBAAiB;IACjC,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,SAAS,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,mBAAmB;IACnC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,UAAU,EAAE,IAAI,GAAG,IAAI,CAAA;CACvB;AAED,qBAAa,oBAAqB,YAAW,OAAO,CAAC,IAAI,CAAC;IAExD,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;IAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAC1B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;gBANb,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,MAAM,CAAC,IAAI,EACjB,UAAU,EAAE,MAAM,GAAG,IAAI,EACzB,iBAAiB,EAAE,IAAI,GAAG,IAAI,EAC9B,WAAW,CAAC,EAAE,iBAAiB,YAAA,EAC/B,QAAQ,CAAC,EAAE,mBAAmB,YAAA,EAC9B,YAAY,CAAC,GAAE,IAAI,GAAG,IAAI,aAAA;IAGtC,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IA0C7D,OAAO,CAAC,oBAAoB;CAa5B"}

package/dist/types/model/commands/apiKey/index.d.ts

@@ -1,6 +1,6 @@
-export * from './CreateApiKeyCommand';
-export * from './DisableApiKeyCommand';
-export * from './DisableIdentityApiKeysCommand';
-export * from './DisableOneOffApiKeyCommand';
-export * from './ProlongApiKeyCommand';
+export * from './CreateApiKeyCommand.js';
+export * from './DisableApiKeyCommand.js';
+export * from './DisableIdentityApiKeysCommand.js';
+export * from './DisableOneOffApiKeyCommand.js';
+export * from './ProlongApiKeyCommand.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/types/model/commands/apiKey/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/apiKey/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAA;AACrC,cAAc,wBAAwB,CAAA;AACtC,cAAc,iCAAiC,CAAA;AAC/C,cAAc,8BAA8B,CAAA;AAC5C,cAAc,wBAAwB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/apiKey/index.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAA;AACxC,cAAc,2BAA2B,CAAA;AACzC,cAAc,oCAAoC,CAAA;AAClD,cAAc,iCAAiC,CAAA;AAC/C,cAAc,2BAA2B,CAAA"}

package/dist/types/model/commands/authLog/CreateAuthLogEntryCommand.d.ts

@@ -1,5 +1,5 @@
-import { Command } from '../Command';
-import { AuthActionType } from '../../type/AuthLog';
+import { Command } from '../Command.js';
+import { AuthActionType } from '../../type/AuthLog.js';
 import { JSONValue } from '@contember/schema';
 export declare class CreateAuthLogEntryCommand implements Command<void> {
     private readonly data;
@@ -9,7 +9,8 @@ export declare class CreateAuthLogEntryCommand implements Command<void> {
 declare namespace CreateAuthLogEntryCommand {
     type Entry = {
         type: AuthActionType;
-        invokedById: string;
+        /** The identity that initiated the action. Omit (→ NULL) when there is no acting identity, e.g. an IdP-initiated back-channel logout. */
+        invokedById?: string;
         personInputIdentifier?: string;
         personId?: string;
         personTokenId?: string;
@@ -20,6 +21,12 @@ declare namespace CreateAuthLogEntryCommand {
         userAgent?: string;
         identityProviderId?: string;
         metadata?: JSONValue;
+        targetPersonId?: string;
+        eventData?: JSONValue;
+        /** A03: country derived from the trusted reverse-proxy geo header, when present. */
+        geoCountry?: string;
+        /** A03: hash of the client user-agent (never the raw UA). */
+        deviceFingerprint?: string;
     };
 }
 export {};

package/dist/types/model/commands/authLog/CreateAuthLogEntryCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CreateAuthLogEntryCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/authLog/CreateAuthLogEntryCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAEnD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAE7C,qBAAa,yBAA0B,YAAW,OAAO,CAAC,IAAI,CAAC;IAE7D,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,yBAAyB,CAAC,KAAK;IAIjD,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;CAoB7D;AAED,kBAAU,yBAAyB,CAAC;IACnC,KAAY,KAAK,GAAG;QACnB,IAAI,EAAE,cAAc,CAAA;QACpB,WAAW,EAAE,MAAM,CAAA;QACnB,qBAAqB,CAAC,EAAE,MAAM,CAAA;QAC9B,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,OAAO,EAAE,OAAO,CAAA;QAChB,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,YAAY,CAAC,EAAE,MAAM,CAAA;QACrB,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,kBAAkB,CAAC,EAAE,MAAM,CAAA;QAC3B,QAAQ,CAAC,EAAE,SAAS,CAAA;KACpB,CAAA;CACD"}
+{"version":3,"file":"CreateAuthLogEntryCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/authLog/CreateAuthLogEntryCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAEtD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAE7C,qBAAa,yBAA0B,YAAW,OAAO,CAAC,IAAI,CAAC;IAE7D,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,yBAAyB,CAAC,KAAK;IAIjD,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;CAwB7D;AAED,kBAAU,yBAAyB,CAAC;IACnC,KAAY,KAAK,GAAG;QACnB,IAAI,EAAE,cAAc,CAAA;QACpB,yIAAyI;QACzI,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,qBAAqB,CAAC,EAAE,MAAM,CAAA;QAC9B,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,OAAO,EAAE,OAAO,CAAA;QAChB,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,YAAY,CAAC,EAAE,MAAM,CAAA;QACrB,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,kBAAkB,CAAC,EAAE,MAAM,CAAA;QAC3B,QAAQ,CAAC,EAAE,SAAS,CAAA;QACpB,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,SAAS,CAAC,EAAE,SAAS,CAAA;QACrB,oFAAoF;QACpF,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,6DAA6D;QAC7D,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAC1B,CAAA;CACD"}

package/dist/types/model/commands/authPolicy/CreateAuthPolicyCommand.d.ts

@@ -0,0 +1,19 @@
+import { Command } from '../Command.js';
+import { AuthPolicyScope } from '../../type/index.js';
+export type AuthPolicyWriteValues = {
+    scope: AuthPolicyScope;
+    projectId: string | null;
+    roles: string[];
+    mfaRequired: boolean | null;
+    tokenExpiration: string | null;
+    idleTimeout: string | null;
+    graceDuration: string | null;
+    rememberMeAllowed: boolean | null;
+};
+/** Inserts a new `auth_policy` row. Returns the generated id. */
+export declare class CreateAuthPolicyCommand implements Command<string> {
+    private readonly values;
+    constructor(values: AuthPolicyWriteValues);
+    execute({ db, providers }: Command.Args): Promise<string>;
+}
+//# sourceMappingURL=CreateAuthPolicyCommand.d.ts.map

package/dist/types/model/commands/authPolicy/CreateAuthPolicyCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateAuthPolicyCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/authPolicy/CreateAuthPolicyCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAEvC,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAErD,MAAM,MAAM,qBAAqB,GAAG;IACnC,KAAK,EAAE,eAAe,CAAA;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,WAAW,EAAE,OAAO,GAAG,IAAI,CAAA;IAC3B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,iBAAiB,EAAE,OAAO,GAAG,IAAI,CAAA;CACjC,CAAA;AAED,iEAAiE;AACjE,qBAAa,uBAAwB,YAAW,OAAO,CAAC,MAAM,CAAC;IAClD,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,qBAAqB;IAEpD,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;CAqB/D"}

package/dist/types/model/commands/authPolicy/DeleteAuthPolicyCommand.d.ts

@@ -0,0 +1,8 @@
+import { Command } from '../Command.js';
+/** Deletes an `auth_policy` row by id. Returns whether a row was removed. */
+export declare class DeleteAuthPolicyCommand implements Command<boolean> {
+    private readonly id;
+    constructor(id: string);
+    execute({ db }: Command.Args): Promise<boolean>;
+}
+//# sourceMappingURL=DeleteAuthPolicyCommand.d.ts.map

package/dist/types/model/commands/authPolicy/DeleteAuthPolicyCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeleteAuthPolicyCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/authPolicy/DeleteAuthPolicyCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAGvC,6EAA6E;AAC7E,qBAAa,uBAAwB,YAAW,OAAO,CAAC,OAAO,CAAC;IACnD,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,MAAM;IAEjC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;CAOrD"}

package/dist/types/model/commands/authPolicy/UpdateAuthPolicyCommand.d.ts

@@ -0,0 +1,23 @@
+import { Command } from '../Command.js';
+import { AuthPolicyScope } from '../../type/index.js';
+/**
+ * Updates an existing `auth_policy` row. Only the supplied fields are written
+ * (an `undefined` field is left untouched; an explicit `null` clears it).
+ * `updated_at` is always bumped. Returns whether a row was affected.
+ */
+export declare class UpdateAuthPolicyCommand implements Command<boolean> {
+    private readonly id;
+    private readonly values;
+    constructor(id: string, values: {
+        scope?: AuthPolicyScope;
+        projectId?: string | null;
+        roles?: string[];
+        mfaRequired?: boolean | null;
+        tokenExpiration?: string | null;
+        idleTimeout?: string | null;
+        graceDuration?: string | null;
+        rememberMeAllowed?: boolean | null;
+    });
+    execute({ db, providers }: Command.Args): Promise<boolean>;
+}
+//# sourceMappingURL=UpdateAuthPolicyCommand.d.ts.map

package/dist/types/model/commands/authPolicy/UpdateAuthPolicyCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UpdateAuthPolicyCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/authPolicy/UpdateAuthPolicyCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAEvC,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAErD;;;;GAIG;AACH,qBAAa,uBAAwB,YAAW,OAAO,CAAC,OAAO,CAAC;IAE9D,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,EAAE,EAAE,MAAM,EACV,MAAM,EAAE;QACxB,KAAK,CAAC,EAAE,eAAe,CAAA;QACvB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACzB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;QAChB,WAAW,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;QAC5B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QAC/B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QAC3B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QAC7B,iBAAiB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;KAClC;IAGI,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;CAkBhE"}

package/dist/types/model/commands/authPolicy/index.d.ts

@@ -0,0 +1,4 @@
+export * from './CreateAuthPolicyCommand.js';
+export * from './UpdateAuthPolicyCommand.js';
+export * from './DeleteAuthPolicyCommand.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/types/model/commands/authPolicy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/authPolicy/index.ts"],"names":[],"mappings":"AAAA,cAAc,8BAA8B,CAAA;AAC5C,cAAc,8BAA8B,CAAA;AAC5C,cAAc,8BAA8B,CAAA"}