@contember/engine-tenant-api 2.1.0-beta.2 → 2.2.0-alpha.1

package/dist/production/src/model/queries/idp/IdpSessionByApiKeyQuery.cjs

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+class IdpSessionByApiKeyQuery extends Database.DatabaseQuery {
+  constructor(apiKeyId, providers) {
+    super();
+    this.apiKeyId = apiKeyId;
+    this.providers = providers;
+  }
+  async fetch({ db }) {
+    const row = await Database.SelectBuilder.create().from("idp_session").join(
+      "identity_provider",
+      "identity_provider",
+      (on) => on.compareColumns(["idp_session", "identity_provider_id"], Database.Operator.eq, ["identity_provider", "id"])
+    ).where({ api_key_id: this.apiKeyId }).select(["idp_session", "id"]).select(["idp_session", "identity_provider_id"]).select(["idp_session", "idp_session_id"]).select(["idp_session", "tokens"]).select(["idp_session", "tokens_version"]).select(["idp_session", "idp_expires_at"]).select(["idp_session", "token_obtained_at"]).select(["idp_session", "last_validated_at"]).select(["idp_session", "created_at"]).select(["identity_provider", "type"], "provider_type").select(["identity_provider", "configuration"], "provider_configuration").select(["identity_provider", "disabled_at"], "provider_disabled_at").getResult(db).then((rows) => rows[0] ?? null);
+    if (!row) {
+      return null;
+    }
+    const tokens = row.tokens !== null && row.tokens_version !== null ? JSON.parse((await this.providers.decrypt(row.tokens, row.tokens_version)).value.toString("utf8")) : void 0;
+    return {
+      id: row.id,
+      identityProviderId: row.identity_provider_id,
+      providerType: row.provider_type,
+      providerConfiguration: row.provider_configuration,
+      providerDisabledAt: row.provider_disabled_at,
+      tokenObtainedAt: row.token_obtained_at,
+      lastValidatedAt: row.last_validated_at,
+      createdAt: row.created_at,
+      session: {
+        sessionId: row.idp_session_id ?? void 0,
+        tokens,
+        expiresAt: row.idp_expires_at ?? void 0
+      }
+    };
+  }
+}
+exports.IdpSessionByApiKeyQuery = IdpSessionByApiKeyQuery;
+//# sourceMappingURL=IdpSessionByApiKeyQuery.cjs.map

package/dist/production/src/model/queries/idp/IdpSessionByApiKeyQuery.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdpSessionByApiKeyQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/idp/IdpSessionByApiKeyQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Operator, SelectBuilder } from '@contember/database'\nimport { Providers } from '../../providers.js'\nimport type { IDPSessionState } from '../../service/idp/index.js'\n\nexport type IdpSessionRow = {\n\tid: string\n\tidentityProviderId: string\n\tproviderType: string\n\tproviderConfiguration: Record<string, unknown>\n\tproviderDisabledAt: Date | null\n\tsession: IDPSessionState\n\t/** When the current access token was obtained (sign-in / last refresh) — drives the soft-refresh threshold. */\n\ttokenObtainedAt: Date | null\n\tlastValidatedAt: Date\n\tcreatedAt: Date\n}\n\ntype Row = {\n\tid: string\n\tidentity_provider_id: string\n\tidp_session_id: string | null\n\ttokens: Buffer | null\n\ttokens_version: number | null\n\tidp_expires_at: Date | null\n\ttoken_obtained_at: Date | null\n\tlast_validated_at: Date\n\tcreated_at: Date\n\tprovider_type: string\n\tprovider_configuration: Record<string, unknown>\n\tprovider_disabled_at: Date | null\n}\n\n/**\n * Fetch the federated-session state bound to a session API key (if any), joined with its\n * identity provider (type + configuration), and decrypt the stored tokens. Returns null for\n * password sessions / IdPs without revalidation. Used on the verify hot path, so it pulls\n * everything the re-validation hook needs in a single round trip.\n */\nexport class IdpSessionByApiKeyQuery extends DatabaseQuery<IdpSessionRow | null> {\n\tconstructor(private readonly apiKeyId: string, private readonly providers: Providers) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<IdpSessionRow | null> {\n\t\tconst row = await SelectBuilder.create<Row>()\n\t\t\t.from('idp_session')\n\t\t\t.join(\n\t\t\t\t'identity_provider',\n\t\t\t\t'identity_provider',\n\t\t\t\ton => on.compareColumns(['idp_session', 'identity_provider_id'], Operator.eq, ['identity_provider', 'id']),\n\t\t\t)\n\t\t\t.where({ api_key_id: this.apiKeyId })\n\t\t\t.select(['idp_session', 'id'])\n\t\t\t.select(['idp_session', 'identity_provider_id'])\n\t\t\t.select(['idp_session', 'idp_session_id'])\n\t\t\t.select(['idp_session', 'tokens'])\n\t\t\t.select(['idp_session', 'tokens_version'])\n\t\t\t.select(['idp_session', 'idp_expires_at'])\n\t\t\t.select(['idp_session', 'token_obtained_at'])\n\t\t\t.select(['idp_session', 'last_validated_at'])\n\t\t\t.select(['idp_session', 'created_at'])\n\t\t\t.select(['identity_provider', 'type'], 'provider_type')\n\t\t\t.select(['identity_provider', 'configuration'], 'provider_configuration')\n\t\t\t.select(['identity_provider', 'disabled_at'], 'provider_disabled_at')\n\t\t\t.getResult(db)\n\t\t\t.then(rows => rows[0] ?? null)\n\n\t\tif (!row) {\n\t\t\treturn null\n\t\t}\n\n\t\tconst tokens = row.tokens !== null && row.tokens_version !== null\n\t\t\t? JSON.parse((await this.providers.decrypt(row.tokens, row.tokens_version)).value.toString('utf8')) as Record<string, unknown>\n\t\t\t: undefined\n\n\t\treturn {\n\t\t\tid: row.id,\n\t\t\tidentityProviderId: row.identity_provider_id,\n\t\t\tproviderType: row.provider_type,\n\t\t\tproviderConfiguration: row.provider_configuration,\n\t\t\tproviderDisabledAt: row.provider_disabled_at,\n\t\t\ttokenObtainedAt: row.token_obtained_at,\n\t\t\tlastValidatedAt: row.last_validated_at,\n\t\t\tcreatedAt: row.created_at,\n\t\t\tsession: {\n\t\t\t\tsessionId: row.idp_session_id ?? undefined,\n\t\t\t\ttokens,\n\t\t\t\texpiresAt: row.idp_expires_at ?? undefined,\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":["DatabaseQuery","SelectBuilder","Operator"],"mappings":";;;AAsCO,MAAM,gCAAgCA,SAAAA,cAAoC;AAAA,EAChF,YAA6B,UAAmC,WAAsB;AACrF,UAAA;AAD4B,SAAA,WAAA;AAAmC,SAAA,YAAA;AAAA,EAEhE;AAAA,EAEA,MAAM,MAAM,EAAE,MAAwD;AACrE,UAAM,MAAM,MAAMC,uBAAc,SAC9B,KAAK,aAAa,EAClB;AAAA,MACA;AAAA,MACA;AAAA,MACA,CAAA,OAAM,GAAG,eAAe,CAAC,eAAe,sBAAsB,GAAGC,kBAAS,IAAI,CAAC,qBAAqB,IAAI,CAAC;AAAA,IAAA,EAEzG,MAAM,EAAE,YAAY,KAAK,SAAA,CAAU,EACnC,OAAO,CAAC,eAAe,IAAI,CAAC,EAC5B,OAAO,CAAC,eAAe,sBAAsB,CAAC,EAC9C,OAAO,CAAC,eAAe,gBAAgB,CAAC,EACxC,OAAO,CAAC,eAAe,QAAQ,CAAC,EAChC,OAAO,CAAC,eAAe,gBAAgB,CAAC,EACxC,OAAO,CAAC,eAAe,gBAAgB,CAAC,EACxC,OAAO,CAAC,eAAe,mBAAmB,CAAC,EAC3C,OAAO,CAAC,eAAe,mBAAmB,CAAC,EAC3C,OAAO,CAAC,eAAe,YAAY,CAAC,EACpC,OAAO,CAAC,qBAAqB,MAAM,GAAG,eAAe,EACrD,OAAO,CAAC,qBAAqB,eAAe,GAAG,wBAAwB,EACvE,OAAO,CAAC,qBAAqB,aAAa,GAAG,sBAAsB,EACnE,UAAU,EAAE,EACZ,KAAK,UAAQ,KAAK,CAAC,KAAK,IAAI;AAE9B,QAAI,CAAC,KAAK;AACT,aAAO;AAAA,IACR;AAEA,UAAM,SAAS,IAAI,WAAW,QAAQ,IAAI,mBAAmB,OAC1D,KAAK,OAAO,MAAM,KAAK,UAAU,QAAQ,IAAI,QAAQ,IAAI,cAAc,GAAG,MAAM,SAAS,MAAM,CAAC,IAChG;AAEH,WAAO;AAAA,MACN,IAAI,IAAI;AAAA,MACR,oBAAoB,IAAI;AAAA,MACxB,cAAc,IAAI;AAAA,MAClB,uBAAuB,IAAI;AAAA,MAC3B,oBAAoB,IAAI;AAAA,MACxB,iBAAiB,IAAI;AAAA,MACrB,iBAAiB,IAAI;AAAA,MACrB,WAAW,IAAI;AAAA,MACf,SAAS;AAAA,QACR,WAAW,IAAI,kBAAkB;AAAA,QACjC;AAAA,QACA,WAAW,IAAI,kBAAkB;AAAA,MAAA;AAAA,IAClC;AAAA,EAEF;AACD;;"}

package/dist/production/src/model/queries/idp/IdpSessionByApiKeyQuery.js

@@ -0,0 +1,38 @@
+import { DatabaseQuery, SelectBuilder, Operator } from "@contember/database";
+class IdpSessionByApiKeyQuery extends DatabaseQuery {
+  constructor(apiKeyId, providers) {
+    super();
+    this.apiKeyId = apiKeyId;
+    this.providers = providers;
+  }
+  async fetch({ db }) {
+    const row = await SelectBuilder.create().from("idp_session").join(
+      "identity_provider",
+      "identity_provider",
+      (on) => on.compareColumns(["idp_session", "identity_provider_id"], Operator.eq, ["identity_provider", "id"])
+    ).where({ api_key_id: this.apiKeyId }).select(["idp_session", "id"]).select(["idp_session", "identity_provider_id"]).select(["idp_session", "idp_session_id"]).select(["idp_session", "tokens"]).select(["idp_session", "tokens_version"]).select(["idp_session", "idp_expires_at"]).select(["idp_session", "token_obtained_at"]).select(["idp_session", "last_validated_at"]).select(["idp_session", "created_at"]).select(["identity_provider", "type"], "provider_type").select(["identity_provider", "configuration"], "provider_configuration").select(["identity_provider", "disabled_at"], "provider_disabled_at").getResult(db).then((rows) => rows[0] ?? null);
+    if (!row) {
+      return null;
+    }
+    const tokens = row.tokens !== null && row.tokens_version !== null ? JSON.parse((await this.providers.decrypt(row.tokens, row.tokens_version)).value.toString("utf8")) : void 0;
+    return {
+      id: row.id,
+      identityProviderId: row.identity_provider_id,
+      providerType: row.provider_type,
+      providerConfiguration: row.provider_configuration,
+      providerDisabledAt: row.provider_disabled_at,
+      tokenObtainedAt: row.token_obtained_at,
+      lastValidatedAt: row.last_validated_at,
+      createdAt: row.created_at,
+      session: {
+        sessionId: row.idp_session_id ?? void 0,
+        tokens,
+        expiresAt: row.idp_expires_at ?? void 0
+      }
+    };
+  }
+}
+export {
+  IdpSessionByApiKeyQuery
+};
+//# sourceMappingURL=IdpSessionByApiKeyQuery.js.map

package/dist/production/src/model/queries/idp/IdpSessionByApiKeyQuery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdpSessionByApiKeyQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/idp/IdpSessionByApiKeyQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Operator, SelectBuilder } from '@contember/database'\nimport { Providers } from '../../providers.js'\nimport type { IDPSessionState } from '../../service/idp/index.js'\n\nexport type IdpSessionRow = {\n\tid: string\n\tidentityProviderId: string\n\tproviderType: string\n\tproviderConfiguration: Record<string, unknown>\n\tproviderDisabledAt: Date | null\n\tsession: IDPSessionState\n\t/** When the current access token was obtained (sign-in / last refresh) — drives the soft-refresh threshold. */\n\ttokenObtainedAt: Date | null\n\tlastValidatedAt: Date\n\tcreatedAt: Date\n}\n\ntype Row = {\n\tid: string\n\tidentity_provider_id: string\n\tidp_session_id: string | null\n\ttokens: Buffer | null\n\ttokens_version: number | null\n\tidp_expires_at: Date | null\n\ttoken_obtained_at: Date | null\n\tlast_validated_at: Date\n\tcreated_at: Date\n\tprovider_type: string\n\tprovider_configuration: Record<string, unknown>\n\tprovider_disabled_at: Date | null\n}\n\n/**\n * Fetch the federated-session state bound to a session API key (if any), joined with its\n * identity provider (type + configuration), and decrypt the stored tokens. Returns null for\n * password sessions / IdPs without revalidation. Used on the verify hot path, so it pulls\n * everything the re-validation hook needs in a single round trip.\n */\nexport class IdpSessionByApiKeyQuery extends DatabaseQuery<IdpSessionRow | null> {\n\tconstructor(private readonly apiKeyId: string, private readonly providers: Providers) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<IdpSessionRow | null> {\n\t\tconst row = await SelectBuilder.create<Row>()\n\t\t\t.from('idp_session')\n\t\t\t.join(\n\t\t\t\t'identity_provider',\n\t\t\t\t'identity_provider',\n\t\t\t\ton => on.compareColumns(['idp_session', 'identity_provider_id'], Operator.eq, ['identity_provider', 'id']),\n\t\t\t)\n\t\t\t.where({ api_key_id: this.apiKeyId })\n\t\t\t.select(['idp_session', 'id'])\n\t\t\t.select(['idp_session', 'identity_provider_id'])\n\t\t\t.select(['idp_session', 'idp_session_id'])\n\t\t\t.select(['idp_session', 'tokens'])\n\t\t\t.select(['idp_session', 'tokens_version'])\n\t\t\t.select(['idp_session', 'idp_expires_at'])\n\t\t\t.select(['idp_session', 'token_obtained_at'])\n\t\t\t.select(['idp_session', 'last_validated_at'])\n\t\t\t.select(['idp_session', 'created_at'])\n\t\t\t.select(['identity_provider', 'type'], 'provider_type')\n\t\t\t.select(['identity_provider', 'configuration'], 'provider_configuration')\n\t\t\t.select(['identity_provider', 'disabled_at'], 'provider_disabled_at')\n\t\t\t.getResult(db)\n\t\t\t.then(rows => rows[0] ?? null)\n\n\t\tif (!row) {\n\t\t\treturn null\n\t\t}\n\n\t\tconst tokens = row.tokens !== null && row.tokens_version !== null\n\t\t\t? JSON.parse((await this.providers.decrypt(row.tokens, row.tokens_version)).value.toString('utf8')) as Record<string, unknown>\n\t\t\t: undefined\n\n\t\treturn {\n\t\t\tid: row.id,\n\t\t\tidentityProviderId: row.identity_provider_id,\n\t\t\tproviderType: row.provider_type,\n\t\t\tproviderConfiguration: row.provider_configuration,\n\t\t\tproviderDisabledAt: row.provider_disabled_at,\n\t\t\ttokenObtainedAt: row.token_obtained_at,\n\t\t\tlastValidatedAt: row.last_validated_at,\n\t\t\tcreatedAt: row.created_at,\n\t\t\tsession: {\n\t\t\t\tsessionId: row.idp_session_id ?? undefined,\n\t\t\t\ttokens,\n\t\t\t\texpiresAt: row.idp_expires_at ?? undefined,\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";AAsCO,MAAM,gCAAgC,cAAoC;AAAA,EAChF,YAA6B,UAAmC,WAAsB;AACrF,UAAA;AAD4B,SAAA,WAAA;AAAmC,SAAA,YAAA;AAAA,EAEhE;AAAA,EAEA,MAAM,MAAM,EAAE,MAAwD;AACrE,UAAM,MAAM,MAAM,cAAc,SAC9B,KAAK,aAAa,EAClB;AAAA,MACA;AAAA,MACA;AAAA,MACA,CAAA,OAAM,GAAG,eAAe,CAAC,eAAe,sBAAsB,GAAG,SAAS,IAAI,CAAC,qBAAqB,IAAI,CAAC;AAAA,IAAA,EAEzG,MAAM,EAAE,YAAY,KAAK,SAAA,CAAU,EACnC,OAAO,CAAC,eAAe,IAAI,CAAC,EAC5B,OAAO,CAAC,eAAe,sBAAsB,CAAC,EAC9C,OAAO,CAAC,eAAe,gBAAgB,CAAC,EACxC,OAAO,CAAC,eAAe,QAAQ,CAAC,EAChC,OAAO,CAAC,eAAe,gBAAgB,CAAC,EACxC,OAAO,CAAC,eAAe,gBAAgB,CAAC,EACxC,OAAO,CAAC,eAAe,mBAAmB,CAAC,EAC3C,OAAO,CAAC,eAAe,mBAAmB,CAAC,EAC3C,OAAO,CAAC,eAAe,YAAY,CAAC,EACpC,OAAO,CAAC,qBAAqB,MAAM,GAAG,eAAe,EACrD,OAAO,CAAC,qBAAqB,eAAe,GAAG,wBAAwB,EACvE,OAAO,CAAC,qBAAqB,aAAa,GAAG,sBAAsB,EACnE,UAAU,EAAE,EACZ,KAAK,UAAQ,KAAK,CAAC,KAAK,IAAI;AAE9B,QAAI,CAAC,KAAK;AACT,aAAO;AAAA,IACR;AAEA,UAAM,SAAS,IAAI,WAAW,QAAQ,IAAI,mBAAmB,OAC1D,KAAK,OAAO,MAAM,KAAK,UAAU,QAAQ,IAAI,QAAQ,IAAI,cAAc,GAAG,MAAM,SAAS,MAAM,CAAC,IAChG;AAEH,WAAO;AAAA,MACN,IAAI,IAAI;AAAA,MACR,oBAAoB,IAAI;AAAA,MACxB,cAAc,IAAI;AAAA,MAClB,uBAAuB,IAAI;AAAA,MAC3B,oBAAoB,IAAI;AAAA,MACxB,iBAAiB,IAAI;AAAA,MACrB,iBAAiB,IAAI;AAAA,MACrB,WAAW,IAAI;AAAA,MACf,SAAS;AAAA,QACR,WAAW,IAAI,kBAAkB;AAAA,QACjC;AAAA,QACA,WAAW,IAAI,kBAAkB;AAAA,MAAA;AAAA,IAClC;AAAA,EAEF;AACD;"}

package/dist/production/src/model/queries/idp/IdpSessionsBySidQuery.cjs

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+class IdpSessionsBySidQuery extends Database.DatabaseQuery {
+  constructor(identityProviderId, sid) {
+    super();
+    this.identityProviderId = identityProviderId;
+    this.sid = sid;
+  }
+  async fetch({ db }) {
+    const rows = await Database.SelectBuilder.create().from("idp_session").where({
+      identity_provider_id: this.identityProviderId,
+      idp_session_id: this.sid
+    }).select("id").select("api_key_id").getResult(db);
+    return rows.map((row) => ({ id: row.id, apiKeyId: row.api_key_id }));
+  }
+}
+exports.IdpSessionsBySidQuery = IdpSessionsBySidQuery;
+//# sourceMappingURL=IdpSessionsBySidQuery.cjs.map

package/dist/production/src/model/queries/idp/IdpSessionsBySidQuery.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdpSessionsBySidQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/idp/IdpSessionsBySidQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\n\nexport type IdpSessionBySidRow = {\n\tid: string\n\tapiKeyId: string\n}\n\n/**\n * Find the federated sessions established for a given IdP session id (`sid`) under a specific\n * identity provider — the lookup an OIDC back-channel logout performs to map the IdP's `sid` to the\n * local session(s) to revoke (A10). Hits the `(identity_provider_id, idp_session_id)` index added by\n * A24. A single `sid` can in principle back more than one local session, so this returns all matches.\n */\nexport class IdpSessionsBySidQuery extends DatabaseQuery<IdpSessionBySidRow[]> {\n\tconstructor(\n\t\tprivate readonly identityProviderId: string,\n\t\tprivate readonly sid: string,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<IdpSessionBySidRow[]> {\n\t\tconst rows = await SelectBuilder.create<{ id: string; api_key_id: string }>()\n\t\t\t.from('idp_session')\n\t\t\t.where({\n\t\t\t\tidentity_provider_id: this.identityProviderId,\n\t\t\t\tidp_session_id: this.sid,\n\t\t\t})\n\t\t\t.select('id')\n\t\t\t.select('api_key_id')\n\t\t\t.getResult(db)\n\n\t\treturn rows.map(row => ({ id: row.id, apiKeyId: row.api_key_id }))\n\t}\n}\n"],"names":["DatabaseQuery","SelectBuilder"],"mappings":";;;AAaO,MAAM,8BAA8BA,SAAAA,cAAoC;AAAA,EAC9E,YACkB,oBACA,KAChB;AACD,UAAA;AAHiB,SAAA,qBAAA;AACA,SAAA,MAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAAwD;AACrE,UAAM,OAAO,MAAMC,uBAAc,OAAA,EAC/B,KAAK,aAAa,EAClB,MAAM;AAAA,MACN,sBAAsB,KAAK;AAAA,MAC3B,gBAAgB,KAAK;AAAA,IAAA,CACrB,EACA,OAAO,IAAI,EACX,OAAO,YAAY,EACnB,UAAU,EAAE;AAEd,WAAO,KAAK,IAAI,CAAA,SAAQ,EAAE,IAAI,IAAI,IAAI,UAAU,IAAI,WAAA,EAAa;AAAA,EAClE;AACD;;"}

package/dist/production/src/model/queries/idp/IdpSessionsBySidQuery.js

@@ -0,0 +1,19 @@
+import { DatabaseQuery, SelectBuilder } from "@contember/database";
+class IdpSessionsBySidQuery extends DatabaseQuery {
+  constructor(identityProviderId, sid) {
+    super();
+    this.identityProviderId = identityProviderId;
+    this.sid = sid;
+  }
+  async fetch({ db }) {
+    const rows = await SelectBuilder.create().from("idp_session").where({
+      identity_provider_id: this.identityProviderId,
+      idp_session_id: this.sid
+    }).select("id").select("api_key_id").getResult(db);
+    return rows.map((row) => ({ id: row.id, apiKeyId: row.api_key_id }));
+  }
+}
+export {
+  IdpSessionsBySidQuery
+};
+//# sourceMappingURL=IdpSessionsBySidQuery.js.map

package/dist/production/src/model/queries/idp/IdpSessionsBySidQuery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdpSessionsBySidQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/idp/IdpSessionsBySidQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\n\nexport type IdpSessionBySidRow = {\n\tid: string\n\tapiKeyId: string\n}\n\n/**\n * Find the federated sessions established for a given IdP session id (`sid`) under a specific\n * identity provider — the lookup an OIDC back-channel logout performs to map the IdP's `sid` to the\n * local session(s) to revoke (A10). Hits the `(identity_provider_id, idp_session_id)` index added by\n * A24. A single `sid` can in principle back more than one local session, so this returns all matches.\n */\nexport class IdpSessionsBySidQuery extends DatabaseQuery<IdpSessionBySidRow[]> {\n\tconstructor(\n\t\tprivate readonly identityProviderId: string,\n\t\tprivate readonly sid: string,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<IdpSessionBySidRow[]> {\n\t\tconst rows = await SelectBuilder.create<{ id: string; api_key_id: string }>()\n\t\t\t.from('idp_session')\n\t\t\t.where({\n\t\t\t\tidentity_provider_id: this.identityProviderId,\n\t\t\t\tidp_session_id: this.sid,\n\t\t\t})\n\t\t\t.select('id')\n\t\t\t.select('api_key_id')\n\t\t\t.getResult(db)\n\n\t\treturn rows.map(row => ({ id: row.id, apiKeyId: row.api_key_id }))\n\t}\n}\n"],"names":[],"mappings":";AAaO,MAAM,8BAA8B,cAAoC;AAAA,EAC9E,YACkB,oBACA,KAChB;AACD,UAAA;AAHiB,SAAA,qBAAA;AACA,SAAA,MAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAAwD;AACrE,UAAM,OAAO,MAAM,cAAc,OAAA,EAC/B,KAAK,aAAa,EAClB,MAAM;AAAA,MACN,sBAAsB,KAAK;AAAA,MAC3B,gBAAgB,KAAK;AAAA,IAAA,CACrB,EACA,OAAO,IAAI,EACX,OAAO,YAAY,EACnB,UAAU,EAAE;AAEd,WAAO,KAAK,IAAI,CAAA,SAAQ,EAAE,IAAI,IAAI,IAAI,UAAU,IAAI,WAAA,EAAa;AAAA,EAClE;AACD;"}

package/dist/production/src/model/queries/idp/IdpSessionsBySubQuery.cjs

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+class IdpSessionsBySubQuery extends Database.DatabaseQuery {
+  constructor(identityProviderId, sub) {
+    super();
+    this.identityProviderId = identityProviderId;
+    this.sub = sub;
+  }
+  async fetch({ db }) {
+    const rows = await Database.SelectBuilder.create().from("idp_session").join("api_key", "api_key", (on) => on.compareColumns(["idp_session", "api_key_id"], Database.Operator.eq, ["api_key", "id"])).join("person", "person", (on) => on.compareColumns(["api_key", "identity_id"], Database.Operator.eq, ["person", "identity_id"])).join("person_identity_provider", "pip", (on) => on.compareColumns(["person", "id"], Database.Operator.eq, ["pip", "person_id"])).where(
+      (where) => where.compare(["idp_session", "identity_provider_id"], Database.Operator.eq, this.identityProviderId).compare(["pip", "identity_provider_id"], Database.Operator.eq, this.identityProviderId).compare(["pip", "external_identifier"], Database.Operator.eq, this.sub)
+    ).select(["idp_session", "id"]).select(["idp_session", "api_key_id"]).getResult(db);
+    return rows.map((row) => ({ id: row.id, apiKeyId: row.api_key_id }));
+  }
+}
+exports.IdpSessionsBySubQuery = IdpSessionsBySubQuery;
+//# sourceMappingURL=IdpSessionsBySubQuery.cjs.map

package/dist/production/src/model/queries/idp/IdpSessionsBySubQuery.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdpSessionsBySubQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/idp/IdpSessionsBySubQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Operator, SelectBuilder } from '@contember/database'\nimport { IdpSessionBySidRow } from './IdpSessionsBySidQuery.js'\n\n/**\n * Find the federated sessions for a given subject (`sub`) under a specific identity provider — the\n * lookup an OIDC back-channel logout performs when the IdP sends a `sub`-only logout token (no `sid`),\n * which targets *all* of that subject's sessions (OIDC Back-Channel Logout 1.0 §2.4). The subject is\n * the `external_identifier` recorded in `person_identity_provider` at sign-in, so we walk\n * `idp_session → api_key → person → person_identity_provider` to map `sub` to the local session(s) to\n * revoke. Both the session row and the `person_identity_provider` row are constrained to the same\n * provider so a `sub` is only ever interpreted under the IdP that asserted it.\n *\n * Assumption: a person maps to a single subject per provider (the normal case — one IdP link per\n * person). `idp_session` stores no `sub` of its own, so once a person is matched we revoke *all* of\n * that person's sessions under the provider. If a person were ever linked to the same IdP under two\n * subjects, a logout for one subject would also revoke the other's sessions — over-revocation, which\n * is the safe direction for a logout (it never leaves a session the IdP asked to terminate alive).\n */\nexport class IdpSessionsBySubQuery extends DatabaseQuery<IdpSessionBySidRow[]> {\n\tconstructor(\n\t\tprivate readonly identityProviderId: string,\n\t\tprivate readonly sub: string,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<IdpSessionBySidRow[]> {\n\t\tconst rows = await SelectBuilder.create<{ id: string; api_key_id: string }>()\n\t\t\t.from('idp_session')\n\t\t\t.join('api_key', 'api_key', on => on.compareColumns(['idp_session', 'api_key_id'], Operator.eq, ['api_key', 'id']))\n\t\t\t.join('person', 'person', on => on.compareColumns(['api_key', 'identity_id'], Operator.eq, ['person', 'identity_id']))\n\t\t\t.join('person_identity_provider', 'pip', on => on.compareColumns(['person', 'id'], Operator.eq, ['pip', 'person_id']))\n\t\t\t.where(where =>\n\t\t\t\twhere\n\t\t\t\t\t.compare(['idp_session', 'identity_provider_id'], Operator.eq, this.identityProviderId)\n\t\t\t\t\t.compare(['pip', 'identity_provider_id'], Operator.eq, this.identityProviderId)\n\t\t\t\t\t.compare(['pip', 'external_identifier'], Operator.eq, this.sub)\n\t\t\t)\n\t\t\t.select(['idp_session', 'id'])\n\t\t\t.select(['idp_session', 'api_key_id'])\n\t\t\t.getResult(db)\n\n\t\treturn rows.map(row => ({ id: row.id, apiKeyId: row.api_key_id }))\n\t}\n}\n"],"names":["DatabaseQuery","SelectBuilder","Operator"],"mappings":";;;AAkBO,MAAM,8BAA8BA,SAAAA,cAAoC;AAAA,EAC9E,YACkB,oBACA,KAChB;AACD,UAAA;AAHiB,SAAA,qBAAA;AACA,SAAA,MAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAAwD;AACrE,UAAM,OAAO,MAAMC,uBAAc,OAAA,EAC/B,KAAK,aAAa,EAClB,KAAK,WAAW,WAAW,CAAA,OAAM,GAAG,eAAe,CAAC,eAAe,YAAY,GAAGC,SAAAA,SAAS,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,EACjH,KAAK,UAAU,UAAU,CAAA,OAAM,GAAG,eAAe,CAAC,WAAW,aAAa,GAAGA,SAAAA,SAAS,IAAI,CAAC,UAAU,aAAa,CAAC,CAAC,EACpH,KAAK,4BAA4B,OAAO,CAAA,OAAM,GAAG,eAAe,CAAC,UAAU,IAAI,GAAGA,kBAAS,IAAI,CAAC,OAAO,WAAW,CAAC,CAAC,EACpH;AAAA,MAAM,CAAA,UACN,MACE,QAAQ,CAAC,eAAe,sBAAsB,GAAGA,SAAAA,SAAS,IAAI,KAAK,kBAAkB,EACrF,QAAQ,CAAC,OAAO,sBAAsB,GAAGA,SAAAA,SAAS,IAAI,KAAK,kBAAkB,EAC7E,QAAQ,CAAC,OAAO,qBAAqB,GAAGA,SAAAA,SAAS,IAAI,KAAK,GAAG;AAAA,IAAA,EAE/D,OAAO,CAAC,eAAe,IAAI,CAAC,EAC5B,OAAO,CAAC,eAAe,YAAY,CAAC,EACpC,UAAU,EAAE;AAEd,WAAO,KAAK,IAAI,CAAA,SAAQ,EAAE,IAAI,IAAI,IAAI,UAAU,IAAI,WAAA,EAAa;AAAA,EAClE;AACD;;"}

package/dist/production/src/model/queries/idp/IdpSessionsBySubQuery.js

@@ -0,0 +1,18 @@
+import { DatabaseQuery, SelectBuilder, Operator } from "@contember/database";
+class IdpSessionsBySubQuery extends DatabaseQuery {
+  constructor(identityProviderId, sub) {
+    super();
+    this.identityProviderId = identityProviderId;
+    this.sub = sub;
+  }
+  async fetch({ db }) {
+    const rows = await SelectBuilder.create().from("idp_session").join("api_key", "api_key", (on) => on.compareColumns(["idp_session", "api_key_id"], Operator.eq, ["api_key", "id"])).join("person", "person", (on) => on.compareColumns(["api_key", "identity_id"], Operator.eq, ["person", "identity_id"])).join("person_identity_provider", "pip", (on) => on.compareColumns(["person", "id"], Operator.eq, ["pip", "person_id"])).where(
+      (where) => where.compare(["idp_session", "identity_provider_id"], Operator.eq, this.identityProviderId).compare(["pip", "identity_provider_id"], Operator.eq, this.identityProviderId).compare(["pip", "external_identifier"], Operator.eq, this.sub)
+    ).select(["idp_session", "id"]).select(["idp_session", "api_key_id"]).getResult(db);
+    return rows.map((row) => ({ id: row.id, apiKeyId: row.api_key_id }));
+  }
+}
+export {
+  IdpSessionsBySubQuery
+};
+//# sourceMappingURL=IdpSessionsBySubQuery.js.map

package/dist/production/src/model/queries/idp/IdpSessionsBySubQuery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IdpSessionsBySubQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/idp/IdpSessionsBySubQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Operator, SelectBuilder } from '@contember/database'\nimport { IdpSessionBySidRow } from './IdpSessionsBySidQuery.js'\n\n/**\n * Find the federated sessions for a given subject (`sub`) under a specific identity provider — the\n * lookup an OIDC back-channel logout performs when the IdP sends a `sub`-only logout token (no `sid`),\n * which targets *all* of that subject's sessions (OIDC Back-Channel Logout 1.0 §2.4). The subject is\n * the `external_identifier` recorded in `person_identity_provider` at sign-in, so we walk\n * `idp_session → api_key → person → person_identity_provider` to map `sub` to the local session(s) to\n * revoke. Both the session row and the `person_identity_provider` row are constrained to the same\n * provider so a `sub` is only ever interpreted under the IdP that asserted it.\n *\n * Assumption: a person maps to a single subject per provider (the normal case — one IdP link per\n * person). `idp_session` stores no `sub` of its own, so once a person is matched we revoke *all* of\n * that person's sessions under the provider. If a person were ever linked to the same IdP under two\n * subjects, a logout for one subject would also revoke the other's sessions — over-revocation, which\n * is the safe direction for a logout (it never leaves a session the IdP asked to terminate alive).\n */\nexport class IdpSessionsBySubQuery extends DatabaseQuery<IdpSessionBySidRow[]> {\n\tconstructor(\n\t\tprivate readonly identityProviderId: string,\n\t\tprivate readonly sub: string,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<IdpSessionBySidRow[]> {\n\t\tconst rows = await SelectBuilder.create<{ id: string; api_key_id: string }>()\n\t\t\t.from('idp_session')\n\t\t\t.join('api_key', 'api_key', on => on.compareColumns(['idp_session', 'api_key_id'], Operator.eq, ['api_key', 'id']))\n\t\t\t.join('person', 'person', on => on.compareColumns(['api_key', 'identity_id'], Operator.eq, ['person', 'identity_id']))\n\t\t\t.join('person_identity_provider', 'pip', on => on.compareColumns(['person', 'id'], Operator.eq, ['pip', 'person_id']))\n\t\t\t.where(where =>\n\t\t\t\twhere\n\t\t\t\t\t.compare(['idp_session', 'identity_provider_id'], Operator.eq, this.identityProviderId)\n\t\t\t\t\t.compare(['pip', 'identity_provider_id'], Operator.eq, this.identityProviderId)\n\t\t\t\t\t.compare(['pip', 'external_identifier'], Operator.eq, this.sub)\n\t\t\t)\n\t\t\t.select(['idp_session', 'id'])\n\t\t\t.select(['idp_session', 'api_key_id'])\n\t\t\t.getResult(db)\n\n\t\treturn rows.map(row => ({ id: row.id, apiKeyId: row.api_key_id }))\n\t}\n}\n"],"names":[],"mappings":";AAkBO,MAAM,8BAA8B,cAAoC;AAAA,EAC9E,YACkB,oBACA,KAChB;AACD,UAAA;AAHiB,SAAA,qBAAA;AACA,SAAA,MAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAAwD;AACrE,UAAM,OAAO,MAAM,cAAc,OAAA,EAC/B,KAAK,aAAa,EAClB,KAAK,WAAW,WAAW,CAAA,OAAM,GAAG,eAAe,CAAC,eAAe,YAAY,GAAG,SAAS,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,EACjH,KAAK,UAAU,UAAU,CAAA,OAAM,GAAG,eAAe,CAAC,WAAW,aAAa,GAAG,SAAS,IAAI,CAAC,UAAU,aAAa,CAAC,CAAC,EACpH,KAAK,4BAA4B,OAAO,CAAA,OAAM,GAAG,eAAe,CAAC,UAAU,IAAI,GAAG,SAAS,IAAI,CAAC,OAAO,WAAW,CAAC,CAAC,EACpH;AAAA,MAAM,CAAA,UACN,MACE,QAAQ,CAAC,eAAe,sBAAsB,GAAG,SAAS,IAAI,KAAK,kBAAkB,EACrF,QAAQ,CAAC,OAAO,sBAAsB,GAAG,SAAS,IAAI,KAAK,kBAAkB,EAC7E,QAAQ,CAAC,OAAO,qBAAqB,GAAG,SAAS,IAAI,KAAK,GAAG;AAAA,IAAA,EAE/D,OAAO,CAAC,eAAe,IAAI,CAAC,EAC5B,OAAO,CAAC,eAAe,YAAY,CAAC,EACpC,UAAU,EAAE;AAEd,WAAO,KAAK,IAAI,CAAA,SAAQ,EAAE,IAAI,IAAI,IAAI,UAAU,IAAI,WAAA,EAAa;AAAA,EAClE;AACD;"}

package/dist/production/src/model/queries/idp/PersonIdentityProvidersQuery.cjs

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+class PersonIdentityProvidersQuery extends Database.DatabaseQuery {
+  constructor(personId) {
+    super();
+    this.personId = personId;
+  }
+  async fetch({ db }) {
+    return await Database.SelectBuilder.create().select(["person_identity_provider", "id"]).select(["person_identity_provider", "created_at"], "createdAt").select(["person_identity_provider", "external_identifier"], "externalIdentifier").select(["identity_provider", "slug"], "identityProviderSlug").select(["identity_provider", "type"], "identityProviderType").select(["identity_provider", "disabled_at"], "identityProviderDisabledAt").from("person_identity_provider").join(
+      "identity_provider",
+      "identity_provider",
+      (expr) => expr.columnsEq(["identity_provider", "id"], ["person_identity_provider", "identity_provider_id"])
+    ).where({ person_id: this.personId }).orderBy(["person_identity_provider", "created_at"]).orderBy(["person_identity_provider", "id"]).getResult(db);
+  }
+}
+exports.PersonIdentityProvidersQuery = PersonIdentityProvidersQuery;
+//# sourceMappingURL=PersonIdentityProvidersQuery.cjs.map

package/dist/production/src/model/queries/idp/PersonIdentityProvidersQuery.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"PersonIdentityProvidersQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/idp/PersonIdentityProvidersQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\n\nexport interface PersonIdentityProviderRow {\n\treadonly id: string\n\treadonly createdAt: Date\n\treadonly externalIdentifier: string\n\treadonly identityProviderSlug: string\n\treadonly identityProviderType: string\n\treadonly identityProviderDisabledAt: Date | null\n}\n\n/**\n * Lists the external IdP connections of a single person, joined with the\n * identity provider they belong to. Used by the `Person.identityProviders`\n * field and by the disconnect flow to enforce ownership and lock-out protection.\n */\nexport class PersonIdentityProvidersQuery extends DatabaseQuery<PersonIdentityProviderRow[]> {\n\tconstructor(\n\t\tprivate readonly personId: string,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<PersonIdentityProviderRow[]> {\n\t\treturn await SelectBuilder.create<PersonIdentityProviderRow>()\n\t\t\t.select(['person_identity_provider', 'id'])\n\t\t\t.select(['person_identity_provider', 'created_at'], 'createdAt')\n\t\t\t.select(['person_identity_provider', 'external_identifier'], 'externalIdentifier')\n\t\t\t.select(['identity_provider', 'slug'], 'identityProviderSlug')\n\t\t\t.select(['identity_provider', 'type'], 'identityProviderType')\n\t\t\t.select(['identity_provider', 'disabled_at'], 'identityProviderDisabledAt')\n\t\t\t.from('person_identity_provider')\n\t\t\t.join(\n\t\t\t\t'identity_provider',\n\t\t\t\t'identity_provider',\n\t\t\t\texpr => expr.columnsEq(['identity_provider', 'id'], ['person_identity_provider', 'identity_provider_id']),\n\t\t\t)\n\t\t\t.where({ person_id: this.personId })\n\t\t\t.orderBy(['person_identity_provider', 'created_at'])\n\t\t\t.orderBy(['person_identity_provider', 'id'])\n\t\t\t.getResult(db)\n\t}\n}\n"],"names":["DatabaseQuery","SelectBuilder"],"mappings":";;;AAgBO,MAAM,qCAAqCA,SAAAA,cAA2C;AAAA,EAC5F,YACkB,UAChB;AACD,UAAA;AAFiB,SAAA,WAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAA+D;AAC5E,WAAO,MAAMC,SAAAA,cAAc,SACzB,OAAO,CAAC,4BAA4B,IAAI,CAAC,EACzC,OAAO,CAAC,4BAA4B,YAAY,GAAG,WAAW,EAC9D,OAAO,CAAC,4BAA4B,qBAAqB,GAAG,oBAAoB,EAChF,OAAO,CAAC,qBAAqB,MAAM,GAAG,sBAAsB,EAC5D,OAAO,CAAC,qBAAqB,MAAM,GAAG,sBAAsB,EAC5D,OAAO,CAAC,qBAAqB,aAAa,GAAG,4BAA4B,EACzE,KAAK,0BAA0B,EAC/B;AAAA,MACA;AAAA,MACA;AAAA,MACA,CAAA,SAAQ,KAAK,UAAU,CAAC,qBAAqB,IAAI,GAAG,CAAC,4BAA4B,sBAAsB,CAAC;AAAA,IAAA,EAExG,MAAM,EAAE,WAAW,KAAK,SAAA,CAAU,EAClC,QAAQ,CAAC,4BAA4B,YAAY,CAAC,EAClD,QAAQ,CAAC,4BAA4B,IAAI,CAAC,EAC1C,UAAU,EAAE;AAAA,EACf;AACD;;"}

package/dist/production/src/model/queries/idp/PersonIdentityProvidersQuery.js

@@ -0,0 +1,18 @@
+import { DatabaseQuery, SelectBuilder } from "@contember/database";
+class PersonIdentityProvidersQuery extends DatabaseQuery {
+  constructor(personId) {
+    super();
+    this.personId = personId;
+  }
+  async fetch({ db }) {
+    return await SelectBuilder.create().select(["person_identity_provider", "id"]).select(["person_identity_provider", "created_at"], "createdAt").select(["person_identity_provider", "external_identifier"], "externalIdentifier").select(["identity_provider", "slug"], "identityProviderSlug").select(["identity_provider", "type"], "identityProviderType").select(["identity_provider", "disabled_at"], "identityProviderDisabledAt").from("person_identity_provider").join(
+      "identity_provider",
+      "identity_provider",
+      (expr) => expr.columnsEq(["identity_provider", "id"], ["person_identity_provider", "identity_provider_id"])
+    ).where({ person_id: this.personId }).orderBy(["person_identity_provider", "created_at"]).orderBy(["person_identity_provider", "id"]).getResult(db);
+  }
+}
+export {
+  PersonIdentityProvidersQuery
+};
+//# sourceMappingURL=PersonIdentityProvidersQuery.js.map

package/dist/production/src/model/queries/idp/PersonIdentityProvidersQuery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PersonIdentityProvidersQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/idp/PersonIdentityProvidersQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\n\nexport interface PersonIdentityProviderRow {\n\treadonly id: string\n\treadonly createdAt: Date\n\treadonly externalIdentifier: string\n\treadonly identityProviderSlug: string\n\treadonly identityProviderType: string\n\treadonly identityProviderDisabledAt: Date | null\n}\n\n/**\n * Lists the external IdP connections of a single person, joined with the\n * identity provider they belong to. Used by the `Person.identityProviders`\n * field and by the disconnect flow to enforce ownership and lock-out protection.\n */\nexport class PersonIdentityProvidersQuery extends DatabaseQuery<PersonIdentityProviderRow[]> {\n\tconstructor(\n\t\tprivate readonly personId: string,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<PersonIdentityProviderRow[]> {\n\t\treturn await SelectBuilder.create<PersonIdentityProviderRow>()\n\t\t\t.select(['person_identity_provider', 'id'])\n\t\t\t.select(['person_identity_provider', 'created_at'], 'createdAt')\n\t\t\t.select(['person_identity_provider', 'external_identifier'], 'externalIdentifier')\n\t\t\t.select(['identity_provider', 'slug'], 'identityProviderSlug')\n\t\t\t.select(['identity_provider', 'type'], 'identityProviderType')\n\t\t\t.select(['identity_provider', 'disabled_at'], 'identityProviderDisabledAt')\n\t\t\t.from('person_identity_provider')\n\t\t\t.join(\n\t\t\t\t'identity_provider',\n\t\t\t\t'identity_provider',\n\t\t\t\texpr => expr.columnsEq(['identity_provider', 'id'], ['person_identity_provider', 'identity_provider_id']),\n\t\t\t)\n\t\t\t.where({ person_id: this.personId })\n\t\t\t.orderBy(['person_identity_provider', 'created_at'])\n\t\t\t.orderBy(['person_identity_provider', 'id'])\n\t\t\t.getResult(db)\n\t}\n}\n"],"names":[],"mappings":";AAgBO,MAAM,qCAAqC,cAA2C;AAAA,EAC5F,YACkB,UAChB;AACD,UAAA;AAFiB,SAAA,WAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAA+D;AAC5E,WAAO,MAAM,cAAc,SACzB,OAAO,CAAC,4BAA4B,IAAI,CAAC,EACzC,OAAO,CAAC,4BAA4B,YAAY,GAAG,WAAW,EAC9D,OAAO,CAAC,4BAA4B,qBAAqB,GAAG,oBAAoB,EAChF,OAAO,CAAC,qBAAqB,MAAM,GAAG,sBAAsB,EAC5D,OAAO,CAAC,qBAAqB,MAAM,GAAG,sBAAsB,EAC5D,OAAO,CAAC,qBAAqB,aAAa,GAAG,4BAA4B,EACzE,KAAK,0BAA0B,EAC/B;AAAA,MACA;AAAA,MACA;AAAA,MACA,CAAA,SAAQ,KAAK,UAAU,CAAC,qBAAqB,IAAI,GAAG,CAAC,4BAA4B,sBAAsB,CAAC;AAAA,IAAA,EAExG,MAAM,EAAE,WAAW,KAAK,SAAA,CAAU,EAClC,QAAQ,CAAC,4BAA4B,YAAY,CAAC,EAClD,QAAQ,CAAC,4BAA4B,IAAI,CAAC,EAC1C,UAAU,EAAE;AAAA,EACf;AACD;"}

package/dist/production/src/model/queries/idp/helpers.cjs

@@ -1,11 +1,11 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const Database = require("@contember/database");
-const createBaseIdpQuery = () => Database.SelectBuilder.create().select("id").select("slug").select("type").select("configuration").select("disabled_at", "disabledAt").select("auto_sign_up", "autoSignUp").select("exclusive").select("init_returns_config", "initReturnsConfig").from("identity_provider");
-const createIdpDto = ({ exclusive, autoSignUp, initReturnsConfig, ...row }) => {
+const createBaseIdpQuery = () => Database.SelectBuilder.create().select("id").select("slug").select("type").select("configuration").select("disabled_at", "disabledAt").select("auto_sign_up", "autoSignUp").select("exclusive").select("init_returns_config", "initReturnsConfig").select("require_verified_email", "requireVerifiedEmail").select("assume_email_verified", "assumeEmailVerified").from("identity_provider");
+const createIdpDto = ({ exclusive, autoSignUp, initReturnsConfig, requireVerifiedEmail, assumeEmailVerified, ...row }) => {
   return {
     ...row,
-    options: { autoSignUp, exclusive, initReturnsConfig }
+    options: { autoSignUp, exclusive, initReturnsConfig, requireVerifiedEmail, assumeEmailVerified }
   };
 };
 exports.createBaseIdpQuery = createBaseIdpQuery;

package/dist/production/src/model/queries/idp/helpers.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/idp/helpers.ts"],"sourcesContent":["import { SelectBuilder } from '@contember/database'\nimport { IdentityProviderDto, IdentityProviderRow } from './types'\n\nexport const createBaseIdpQuery = () =>\n\tSelectBuilder.create<IdentityProviderRow>()\n\t\t.select('id')\n\t\t.select('slug')\n\t\t.select('type')\n\t\t.select('configuration')\n\t\t.select('disabled_at', 'disabledAt')\n\t\t.select('auto_sign_up', 'autoSignUp')\n\t\t.select('exclusive')\n\t\t.select('init_returns_config', 'initReturnsConfig')\n\t\t.from('identity_provider')\n\nexport const createIdpDto = ({ exclusive, autoSignUp, initReturnsConfig, ...row }: IdentityProviderRow): IdentityProviderDto => {\n\treturn {\n\t\t...row,\n\t\toptions: { autoSignUp, exclusive, initReturnsConfig },\n\t}\n}\n"],"names":["SelectBuilder"],"mappings":";;;AAGO,MAAM,qBAAqB,MACjCA,SAAAA,cAAc,OAAA,EACZ,OAAO,IAAI,EACX,OAAO,MAAM,EACb,OAAO,MAAM,EACb,OAAO,eAAe,EACtB,OAAO,eAAe,YAAY,EAClC,OAAO,gBAAgB,YAAY,EACnC,OAAO,WAAW,EAClB,OAAO,uBAAuB,mBAAmB,EACjD,KAAK,mBAAmB;AAEpB,MAAM,eAAe,CAAC,EAAE,WAAW,YAAY,mBAAmB,GAAG,UAAoD;AAC/H,SAAO;AAAA,IACN,GAAG;AAAA,IACH,SAAS,EAAE,YAAY,WAAW,kBAAA;AAAA,EAAkB;AAEtD;;;"}
+{"version":3,"file":"helpers.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/idp/helpers.ts"],"sourcesContent":["import { SelectBuilder } from '@contember/database'\nimport { IdentityProviderDto, IdentityProviderRow } from './types.js'\n\nexport const createBaseIdpQuery = () =>\n\tSelectBuilder.create<IdentityProviderRow>()\n\t\t.select('id')\n\t\t.select('slug')\n\t\t.select('type')\n\t\t.select('configuration')\n\t\t.select('disabled_at', 'disabledAt')\n\t\t.select('auto_sign_up', 'autoSignUp')\n\t\t.select('exclusive')\n\t\t.select('init_returns_config', 'initReturnsConfig')\n\t\t.select('require_verified_email', 'requireVerifiedEmail')\n\t\t.select('assume_email_verified', 'assumeEmailVerified')\n\t\t.from('identity_provider')\n\nexport const createIdpDto = (\n\t{ exclusive, autoSignUp, initReturnsConfig, requireVerifiedEmail, assumeEmailVerified, ...row }: IdentityProviderRow,\n): IdentityProviderDto => {\n\treturn {\n\t\t...row,\n\t\toptions: { autoSignUp, exclusive, initReturnsConfig, requireVerifiedEmail, assumeEmailVerified },\n\t}\n}\n"],"names":["SelectBuilder"],"mappings":";;;AAGO,MAAM,qBAAqB,MACjCA,SAAAA,cAAc,SACZ,OAAO,IAAI,EACX,OAAO,MAAM,EACb,OAAO,MAAM,EACb,OAAO,eAAe,EACtB,OAAO,eAAe,YAAY,EAClC,OAAO,gBAAgB,YAAY,EACnC,OAAO,WAAW,EAClB,OAAO,uBAAuB,mBAAmB,EACjD,OAAO,0BAA0B,sBAAsB,EACvD,OAAO,yBAAyB,qBAAqB,EACrD,KAAK,mBAAmB;AAEpB,MAAM,eAAe,CAC3B,EAAE,WAAW,YAAY,mBAAmB,sBAAsB,qBAAqB,GAAG,UACjE;AACzB,SAAO;AAAA,IACN,GAAG;AAAA,IACH,SAAS,EAAE,YAAY,WAAW,mBAAmB,sBAAsB,oBAAA;AAAA,EAAoB;AAEjG;;;"}

package/dist/production/src/model/queries/idp/helpers.js

@@ -1,9 +1,9 @@
 import { SelectBuilder } from "@contember/database";
-const createBaseIdpQuery = () => SelectBuilder.create().select("id").select("slug").select("type").select("configuration").select("disabled_at", "disabledAt").select("auto_sign_up", "autoSignUp").select("exclusive").select("init_returns_config", "initReturnsConfig").from("identity_provider");
-const createIdpDto = ({ exclusive, autoSignUp, initReturnsConfig, ...row }) => {
+const createBaseIdpQuery = () => SelectBuilder.create().select("id").select("slug").select("type").select("configuration").select("disabled_at", "disabledAt").select("auto_sign_up", "autoSignUp").select("exclusive").select("init_returns_config", "initReturnsConfig").select("require_verified_email", "requireVerifiedEmail").select("assume_email_verified", "assumeEmailVerified").from("identity_provider");
+const createIdpDto = ({ exclusive, autoSignUp, initReturnsConfig, requireVerifiedEmail, assumeEmailVerified, ...row }) => {
   return {
     ...row,
-    options: { autoSignUp, exclusive, initReturnsConfig }
+    options: { autoSignUp, exclusive, initReturnsConfig, requireVerifiedEmail, assumeEmailVerified }
   };
 };
 export {

package/dist/production/src/model/queries/idp/helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/idp/helpers.ts"],"sourcesContent":["import { SelectBuilder } from '@contember/database'\nimport { IdentityProviderDto, IdentityProviderRow } from './types'\n\nexport const createBaseIdpQuery = () =>\n\tSelectBuilder.create<IdentityProviderRow>()\n\t\t.select('id')\n\t\t.select('slug')\n\t\t.select('type')\n\t\t.select('configuration')\n\t\t.select('disabled_at', 'disabledAt')\n\t\t.select('auto_sign_up', 'autoSignUp')\n\t\t.select('exclusive')\n\t\t.select('init_returns_config', 'initReturnsConfig')\n\t\t.from('identity_provider')\n\nexport const createIdpDto = ({ exclusive, autoSignUp, initReturnsConfig, ...row }: IdentityProviderRow): IdentityProviderDto => {\n\treturn {\n\t\t...row,\n\t\toptions: { autoSignUp, exclusive, initReturnsConfig },\n\t}\n}\n"],"names":[],"mappings":";AAGO,MAAM,qBAAqB,MACjC,cAAc,OAAA,EACZ,OAAO,IAAI,EACX,OAAO,MAAM,EACb,OAAO,MAAM,EACb,OAAO,eAAe,EACtB,OAAO,eAAe,YAAY,EAClC,OAAO,gBAAgB,YAAY,EACnC,OAAO,WAAW,EAClB,OAAO,uBAAuB,mBAAmB,EACjD,KAAK,mBAAmB;AAEpB,MAAM,eAAe,CAAC,EAAE,WAAW,YAAY,mBAAmB,GAAG,UAAoD;AAC/H,SAAO;AAAA,IACN,GAAG;AAAA,IACH,SAAS,EAAE,YAAY,WAAW,kBAAA;AAAA,EAAkB;AAEtD;"}
+{"version":3,"file":"helpers.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/idp/helpers.ts"],"sourcesContent":["import { SelectBuilder } from '@contember/database'\nimport { IdentityProviderDto, IdentityProviderRow } from './types.js'\n\nexport const createBaseIdpQuery = () =>\n\tSelectBuilder.create<IdentityProviderRow>()\n\t\t.select('id')\n\t\t.select('slug')\n\t\t.select('type')\n\t\t.select('configuration')\n\t\t.select('disabled_at', 'disabledAt')\n\t\t.select('auto_sign_up', 'autoSignUp')\n\t\t.select('exclusive')\n\t\t.select('init_returns_config', 'initReturnsConfig')\n\t\t.select('require_verified_email', 'requireVerifiedEmail')\n\t\t.select('assume_email_verified', 'assumeEmailVerified')\n\t\t.from('identity_provider')\n\nexport const createIdpDto = (\n\t{ exclusive, autoSignUp, initReturnsConfig, requireVerifiedEmail, assumeEmailVerified, ...row }: IdentityProviderRow,\n): IdentityProviderDto => {\n\treturn {\n\t\t...row,\n\t\toptions: { autoSignUp, exclusive, initReturnsConfig, requireVerifiedEmail, assumeEmailVerified },\n\t}\n}\n"],"names":[],"mappings":";AAGO,MAAM,qBAAqB,MACjC,cAAc,SACZ,OAAO,IAAI,EACX,OAAO,MAAM,EACb,OAAO,MAAM,EACb,OAAO,eAAe,EACtB,OAAO,eAAe,YAAY,EAClC,OAAO,gBAAgB,YAAY,EACnC,OAAO,WAAW,EAClB,OAAO,uBAAuB,mBAAmB,EACjD,OAAO,0BAA0B,sBAAsB,EACvD,OAAO,yBAAyB,qBAAqB,EACrD,KAAK,mBAAmB;AAEpB,MAAM,eAAe,CAC3B,EAAE,WAAW,YAAY,mBAAmB,sBAAsB,qBAAqB,GAAG,UACjE;AACzB,SAAO;AAAA,IACN,GAAG;AAAA,IACH,SAAS,EAAE,YAAY,WAAW,mBAAmB,sBAAsB,oBAAA;AAAA,EAAoB;AAEjG;"}

package/dist/production/src/model/queries/mailTemplate/MailTemplateListQuery.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"MailTemplateListQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/mailTemplate/MailTemplateListQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable } from '@contember/database'\nimport { createMailTemplateQuery, MailTemplateRow } from './helpers'\n\nexport type MailTemplateListRow =\n\t& MailTemplateRow\n\t& {\n\t\tprojectSlug: string | null\n\t}\nexport class MailTemplateListQuery extends DatabaseQuery<MailTemplateListRow[]> {\n\tasync fetch({ db }: DatabaseQueryable): Promise<MailTemplateListRow[]> {\n\t\treturn await createMailTemplateQuery<MailTemplateListRow>()\n\t\t\t.leftJoin('project', undefined, expr => expr.columnsEq(['project', 'id'], ['mail_template', 'project_id']))\n\t\t\t.select(['project', 'slug'], 'projectSlug')\n\t\t\t.getResult(db)\n\t}\n}\n"],"names":["DatabaseQuery","createMailTemplateQuery"],"mappings":";;;;AAQO,MAAM,8BAA8BA,SAAAA,cAAqC;AAAA,EAC/E,MAAM,MAAM,EAAE,MAAyD;AACtE,WAAO,MAAMC,QAAAA,wBAAA,EACX,SAAS,WAAW,QAAW,CAAA,SAAQ,KAAK,UAAU,CAAC,WAAW,IAAI,GAAG,CAAC,iBAAiB,YAAY,CAAC,CAAC,EACzG,OAAO,CAAC,WAAW,MAAM,GAAG,aAAa,EACzC,UAAU,EAAE;AAAA,EACf;AACD;;"}
+{"version":3,"file":"MailTemplateListQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/mailTemplate/MailTemplateListQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable } from '@contember/database'\nimport { createMailTemplateQuery, MailTemplateRow } from './helpers.js'\n\nexport type MailTemplateListRow =\n\t& MailTemplateRow\n\t& {\n\t\tprojectSlug: string | null\n\t}\nexport class MailTemplateListQuery extends DatabaseQuery<MailTemplateListRow[]> {\n\tasync fetch({ db }: DatabaseQueryable): Promise<MailTemplateListRow[]> {\n\t\treturn await createMailTemplateQuery<MailTemplateListRow>()\n\t\t\t.leftJoin('project', undefined, expr => expr.columnsEq(['project', 'id'], ['mail_template', 'project_id']))\n\t\t\t.select(['project', 'slug'], 'projectSlug')\n\t\t\t.getResult(db)\n\t}\n}\n"],"names":["DatabaseQuery","createMailTemplateQuery"],"mappings":";;;;AAQO,MAAM,8BAA8BA,SAAAA,cAAqC;AAAA,EAC/E,MAAM,MAAM,EAAE,MAAyD;AACtE,WAAO,MAAMC,QAAAA,wBAAA,EACX,SAAS,WAAW,QAAW,CAAA,SAAQ,KAAK,UAAU,CAAC,WAAW,IAAI,GAAG,CAAC,iBAAiB,YAAY,CAAC,CAAC,EACzG,OAAO,CAAC,WAAW,MAAM,GAAG,aAAa,EACzC,UAAU,EAAE;AAAA,EACf;AACD;;"}

package/dist/production/src/model/queries/mailTemplate/MailTemplateListQuery.js.map

@@ -1 +1 @@
-{"version":3,"file":"MailTemplateListQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/mailTemplate/MailTemplateListQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable } from '@contember/database'\nimport { createMailTemplateQuery, MailTemplateRow } from './helpers'\n\nexport type MailTemplateListRow =\n\t& MailTemplateRow\n\t& {\n\t\tprojectSlug: string | null\n\t}\nexport class MailTemplateListQuery extends DatabaseQuery<MailTemplateListRow[]> {\n\tasync fetch({ db }: DatabaseQueryable): Promise<MailTemplateListRow[]> {\n\t\treturn await createMailTemplateQuery<MailTemplateListRow>()\n\t\t\t.leftJoin('project', undefined, expr => expr.columnsEq(['project', 'id'], ['mail_template', 'project_id']))\n\t\t\t.select(['project', 'slug'], 'projectSlug')\n\t\t\t.getResult(db)\n\t}\n}\n"],"names":[],"mappings":";;AAQO,MAAM,8BAA8B,cAAqC;AAAA,EAC/E,MAAM,MAAM,EAAE,MAAyD;AACtE,WAAO,MAAM,wBAAA,EACX,SAAS,WAAW,QAAW,CAAA,SAAQ,KAAK,UAAU,CAAC,WAAW,IAAI,GAAG,CAAC,iBAAiB,YAAY,CAAC,CAAC,EACzG,OAAO,CAAC,WAAW,MAAM,GAAG,aAAa,EACzC,UAAU,EAAE;AAAA,EACf;AACD;"}
+{"version":3,"file":"MailTemplateListQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/mailTemplate/MailTemplateListQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable } from '@contember/database'\nimport { createMailTemplateQuery, MailTemplateRow } from './helpers.js'\n\nexport type MailTemplateListRow =\n\t& MailTemplateRow\n\t& {\n\t\tprojectSlug: string | null\n\t}\nexport class MailTemplateListQuery extends DatabaseQuery<MailTemplateListRow[]> {\n\tasync fetch({ db }: DatabaseQueryable): Promise<MailTemplateListRow[]> {\n\t\treturn await createMailTemplateQuery<MailTemplateListRow>()\n\t\t\t.leftJoin('project', undefined, expr => expr.columnsEq(['project', 'id'], ['mail_template', 'project_id']))\n\t\t\t.select(['project', 'slug'], 'projectSlug')\n\t\t\t.getResult(db)\n\t}\n}\n"],"names":[],"mappings":";;AAQO,MAAM,8BAA8B,cAAqC;AAAA,EAC/E,MAAM,MAAM,EAAE,MAAyD;AACtE,WAAO,MAAM,wBAAA,EACX,SAAS,WAAW,QAAW,CAAA,SAAQ,KAAK,UAAU,CAAC,WAAW,IAAI,GAAG,CAAC,iBAAiB,YAAY,CAAC,CAAC,EACzG,OAAO,CAAC,WAAW,MAAM,GAAG,aAAa,EACzC,UAAU,EAAE;AAAA,EACf;AACD;"}

package/dist/production/src/model/queries/mailTemplate/MailTemplateQuery.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"MailTemplateQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/mailTemplate/MailTemplateQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable } from '@contember/database'\nimport { MailTemplateIdentifier } from '../../mailing'\nimport { createMailTemplateQuery, MailTemplateRow } from './helpers'\n\nexport class MailTemplateQuery extends DatabaseQuery<MailTemplateRow | null> {\n\tconstructor(\n\t\tprivate mailTemplateIdentifier: MailTemplateIdentifier,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<MailTemplateRow | null> {\n\t\tconst rows = await createMailTemplateQuery()\n\t\t\t.where({\n\t\t\t\tproject_id: this.mailTemplateIdentifier.projectId,\n\t\t\t\tmail_type: this.mailTemplateIdentifier.type,\n\t\t\t\tvariant: this.mailTemplateIdentifier.variant,\n\t\t\t})\n\t\t\t.getResult(db)\n\n\t\treturn this.fetchOneOrNull(rows)\n\t}\n}\n"],"names":["DatabaseQuery","createMailTemplateQuery"],"mappings":";;;;AAIO,MAAM,0BAA0BA,SAAAA,cAAsC;AAAA,EAC5E,YACS,wBACP;AACD,UAAA;AAFQ,SAAA,yBAAA;AAAA,EAGT;AAAA,EAEA,MAAM,MAAM,EAAE,MAA0D;AACvE,UAAM,OAAO,MAAMC,gCAAA,EACjB,MAAM;AAAA,MACN,YAAY,KAAK,uBAAuB;AAAA,MACxC,WAAW,KAAK,uBAAuB;AAAA,MACvC,SAAS,KAAK,uBAAuB;AAAA,IAAA,CACrC,EACA,UAAU,EAAE;AAEd,WAAO,KAAK,eAAe,IAAI;AAAA,EAChC;AACD;;"}
+{"version":3,"file":"MailTemplateQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/mailTemplate/MailTemplateQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable } from '@contember/database'\nimport { MailTemplateIdentifier } from '../../mailing/index.js'\nimport { createMailTemplateQuery, MailTemplateRow } from './helpers.js'\n\nexport class MailTemplateQuery extends DatabaseQuery<MailTemplateRow | null> {\n\tconstructor(\n\t\tprivate mailTemplateIdentifier: MailTemplateIdentifier,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<MailTemplateRow | null> {\n\t\tconst rows = await createMailTemplateQuery()\n\t\t\t.where({\n\t\t\t\tproject_id: this.mailTemplateIdentifier.projectId,\n\t\t\t\tmail_type: this.mailTemplateIdentifier.type,\n\t\t\t\tvariant: this.mailTemplateIdentifier.variant,\n\t\t\t})\n\t\t\t.getResult(db)\n\n\t\treturn this.fetchOneOrNull(rows)\n\t}\n}\n"],"names":["DatabaseQuery","createMailTemplateQuery"],"mappings":";;;;AAIO,MAAM,0BAA0BA,SAAAA,cAAsC;AAAA,EAC5E,YACS,wBACP;AACD,UAAA;AAFQ,SAAA,yBAAA;AAAA,EAGT;AAAA,EAEA,MAAM,MAAM,EAAE,MAA0D;AACvE,UAAM,OAAO,MAAMC,gCAAA,EACjB,MAAM;AAAA,MACN,YAAY,KAAK,uBAAuB;AAAA,MACxC,WAAW,KAAK,uBAAuB;AAAA,MACvC,SAAS,KAAK,uBAAuB;AAAA,IAAA,CACrC,EACA,UAAU,EAAE;AAEd,WAAO,KAAK,eAAe,IAAI;AAAA,EAChC;AACD;;"}

package/dist/production/src/model/queries/mailTemplate/MailTemplateQuery.js.map

@@ -1 +1 @@
-{"version":3,"file":"MailTemplateQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/mailTemplate/MailTemplateQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable } from '@contember/database'\nimport { MailTemplateIdentifier } from '../../mailing'\nimport { createMailTemplateQuery, MailTemplateRow } from './helpers'\n\nexport class MailTemplateQuery extends DatabaseQuery<MailTemplateRow | null> {\n\tconstructor(\n\t\tprivate mailTemplateIdentifier: MailTemplateIdentifier,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<MailTemplateRow | null> {\n\t\tconst rows = await createMailTemplateQuery()\n\t\t\t.where({\n\t\t\t\tproject_id: this.mailTemplateIdentifier.projectId,\n\t\t\t\tmail_type: this.mailTemplateIdentifier.type,\n\t\t\t\tvariant: this.mailTemplateIdentifier.variant,\n\t\t\t})\n\t\t\t.getResult(db)\n\n\t\treturn this.fetchOneOrNull(rows)\n\t}\n}\n"],"names":[],"mappings":";;AAIO,MAAM,0BAA0B,cAAsC;AAAA,EAC5E,YACS,wBACP;AACD,UAAA;AAFQ,SAAA,yBAAA;AAAA,EAGT;AAAA,EAEA,MAAM,MAAM,EAAE,MAA0D;AACvE,UAAM,OAAO,MAAM,wBAAA,EACjB,MAAM;AAAA,MACN,YAAY,KAAK,uBAAuB;AAAA,MACxC,WAAW,KAAK,uBAAuB;AAAA,MACvC,SAAS,KAAK,uBAAuB;AAAA,IAAA,CACrC,EACA,UAAU,EAAE;AAEd,WAAO,KAAK,eAAe,IAAI;AAAA,EAChC;AACD;"}
+{"version":3,"file":"MailTemplateQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/mailTemplate/MailTemplateQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable } from '@contember/database'\nimport { MailTemplateIdentifier } from '../../mailing/index.js'\nimport { createMailTemplateQuery, MailTemplateRow } from './helpers.js'\n\nexport class MailTemplateQuery extends DatabaseQuery<MailTemplateRow | null> {\n\tconstructor(\n\t\tprivate mailTemplateIdentifier: MailTemplateIdentifier,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<MailTemplateRow | null> {\n\t\tconst rows = await createMailTemplateQuery()\n\t\t\t.where({\n\t\t\t\tproject_id: this.mailTemplateIdentifier.projectId,\n\t\t\t\tmail_type: this.mailTemplateIdentifier.type,\n\t\t\t\tvariant: this.mailTemplateIdentifier.variant,\n\t\t\t})\n\t\t\t.getResult(db)\n\n\t\treturn this.fetchOneOrNull(rows)\n\t}\n}\n"],"names":[],"mappings":";;AAIO,MAAM,0BAA0B,cAAsC;AAAA,EAC5E,YACS,wBACP;AACD,UAAA;AAFQ,SAAA,yBAAA;AAAA,EAGT;AAAA,EAEA,MAAM,MAAM,EAAE,MAA0D;AACvE,UAAM,OAAO,MAAM,wBAAA,EACjB,MAAM;AAAA,MACN,YAAY,KAAK,uBAAuB;AAAA,MACxC,WAAW,KAAK,uBAAuB;AAAA,MACvC,SAAS,KAAK,uBAAuB;AAAA,IAAA,CACrC,EACA,UAAU,EAAE;AAEd,WAAO,KAAK,eAAe,IAAI;AAAA,EAChC;AACD;"}

package/dist/production/src/model/queries/mailTemplate/helpers.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/mailTemplate/helpers.ts"],"sourcesContent":["import { SelectBuilder } from '@contember/database'\nimport { MailTemplateData, MailTemplateIdentifier } from '../../mailing'\n\nexport type MailTemplateRow =\n\t& {\n\t\treadonly id: string\n\t}\n\t& MailTemplateData\n\t& MailTemplateIdentifier\n\nexport const createMailTemplateQuery = <T extends MailTemplateRow>() =>\n\tSelectBuilder.create<T>()\n\t\t.select(['mail_template', 'id'])\n\t\t.select('subject')\n\t\t.select('content')\n\t\t.select('use_layout', 'useLayout')\n\t\t.select('reply_to', 'replyTo')\n\t\t.select('project_id', 'projectId')\n\t\t.select('mail_type', 'type')\n\t\t.select('variant')\n\t\t.from('mail_template')\n"],"names":["SelectBuilder"],"mappings":";;;AAUO,MAAM,0BAA0B,MACtCA,SAAAA,cAAc,OAAA,EACZ,OAAO,CAAC,iBAAiB,IAAI,CAAC,EAC9B,OAAO,SAAS,EAChB,OAAO,SAAS,EAChB,OAAO,cAAc,WAAW,EAChC,OAAO,YAAY,SAAS,EAC5B,OAAO,cAAc,WAAW,EAChC,OAAO,aAAa,MAAM,EAC1B,OAAO,SAAS,EAChB,KAAK,eAAe;;"}
+{"version":3,"file":"helpers.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/mailTemplate/helpers.ts"],"sourcesContent":["import { SelectBuilder } from '@contember/database'\nimport { MailTemplateData, MailTemplateIdentifier } from '../../mailing/index.js'\n\nexport type MailTemplateRow =\n\t& {\n\t\treadonly id: string\n\t}\n\t& MailTemplateData\n\t& MailTemplateIdentifier\n\nexport const createMailTemplateQuery = <T extends MailTemplateRow>() =>\n\tSelectBuilder.create<T>()\n\t\t.select(['mail_template', 'id'])\n\t\t.select('subject')\n\t\t.select('content')\n\t\t.select('use_layout', 'useLayout')\n\t\t.select('reply_to', 'replyTo')\n\t\t.select('project_id', 'projectId')\n\t\t.select('mail_type', 'type')\n\t\t.select('variant')\n\t\t.from('mail_template')\n"],"names":["SelectBuilder"],"mappings":";;;AAUO,MAAM,0BAA0B,MACtCA,SAAAA,cAAc,OAAA,EACZ,OAAO,CAAC,iBAAiB,IAAI,CAAC,EAC9B,OAAO,SAAS,EAChB,OAAO,SAAS,EAChB,OAAO,cAAc,WAAW,EAChC,OAAO,YAAY,SAAS,EAC5B,OAAO,cAAc,WAAW,EAChC,OAAO,aAAa,MAAM,EAC1B,OAAO,SAAS,EAChB,KAAK,eAAe;;"}

package/dist/production/src/model/queries/mailTemplate/helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/mailTemplate/helpers.ts"],"sourcesContent":["import { SelectBuilder } from '@contember/database'\nimport { MailTemplateData, MailTemplateIdentifier } from '../../mailing'\n\nexport type MailTemplateRow =\n\t& {\n\t\treadonly id: string\n\t}\n\t& MailTemplateData\n\t& MailTemplateIdentifier\n\nexport const createMailTemplateQuery = <T extends MailTemplateRow>() =>\n\tSelectBuilder.create<T>()\n\t\t.select(['mail_template', 'id'])\n\t\t.select('subject')\n\t\t.select('content')\n\t\t.select('use_layout', 'useLayout')\n\t\t.select('reply_to', 'replyTo')\n\t\t.select('project_id', 'projectId')\n\t\t.select('mail_type', 'type')\n\t\t.select('variant')\n\t\t.from('mail_template')\n"],"names":[],"mappings":";AAUO,MAAM,0BAA0B,MACtC,cAAc,OAAA,EACZ,OAAO,CAAC,iBAAiB,IAAI,CAAC,EAC9B,OAAO,SAAS,EAChB,OAAO,SAAS,EAChB,OAAO,cAAc,WAAW,EAChC,OAAO,YAAY,SAAS,EAC5B,OAAO,cAAc,WAAW,EAChC,OAAO,aAAa,MAAM,EAC1B,OAAO,SAAS,EAChB,KAAK,eAAe;"}
+{"version":3,"file":"helpers.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/mailTemplate/helpers.ts"],"sourcesContent":["import { SelectBuilder } from '@contember/database'\nimport { MailTemplateData, MailTemplateIdentifier } from '../../mailing/index.js'\n\nexport type MailTemplateRow =\n\t& {\n\t\treadonly id: string\n\t}\n\t& MailTemplateData\n\t& MailTemplateIdentifier\n\nexport const createMailTemplateQuery = <T extends MailTemplateRow>() =>\n\tSelectBuilder.create<T>()\n\t\t.select(['mail_template', 'id'])\n\t\t.select('subject')\n\t\t.select('content')\n\t\t.select('use_layout', 'useLayout')\n\t\t.select('reply_to', 'replyTo')\n\t\t.select('project_id', 'projectId')\n\t\t.select('mail_type', 'type')\n\t\t.select('variant')\n\t\t.from('mail_template')\n"],"names":[],"mappings":";AAUO,MAAM,0BAA0B,MACtC,cAAc,OAAA,EACZ,OAAO,CAAC,iBAAiB,IAAI,CAAC,EAC9B,OAAO,SAAS,EAChB,OAAO,SAAS,EAChB,OAAO,cAAc,WAAW,EAChC,OAAO,YAAY,SAAS,EAC5B,OAAO,cAAc,WAAW,EAChC,OAAO,aAAa,MAAM,EAC1B,OAAO,SAAS,EAChB,KAAK,eAAe;"}

package/dist/production/src/model/queries/membership/AllProjectRolesByIdentityQuery.cjs

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+class AllProjectRolesByIdentityQuery extends Database.DatabaseQuery {
+  constructor(identityId) {
+    super();
+    this.identityId = identityId;
+  }
+  async fetch({ db }) {
+    const result = await Database.SelectBuilder.create().select("project_id").select("role").from("project_membership").where({
+      identity_id: this.identityId
+    }).getResult(db);
+    return result.map((it) => ({ projectId: it.project_id, role: it.role }));
+  }
+}
+exports.AllProjectRolesByIdentityQuery = AllProjectRolesByIdentityQuery;
+//# sourceMappingURL=AllProjectRolesByIdentityQuery.cjs.map

package/dist/production/src/model/queries/membership/AllProjectRolesByIdentityQuery.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"AllProjectRolesByIdentityQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/membership/AllProjectRolesByIdentityQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\n\n/**\n * Returns every (project_id, role) pair the identity holds across ALL projects.\n *\n * Unlike {@link ProjectRolesByIdentityQuery}, which is scoped to a single\n * project, this aggregates over the identity's entire project-membership set.\n * Required by {@link AuthPolicyResolver}, because signIn issues a project-agnostic\n * (global) session and must evaluate MFA / session policy against the whole role\n * set.\n */\nclass AllProjectRolesByIdentityQuery extends DatabaseQuery<AllProjectRolesByIdentityQuery.Result> {\n\tconstructor(private readonly identityId: string) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<AllProjectRolesByIdentityQuery.Result> {\n\t\tconst result = await SelectBuilder.create<{ project_id: string; role: string }>()\n\t\t\t.select('project_id')\n\t\t\t.select('role')\n\t\t\t.from('project_membership')\n\t\t\t.where({\n\t\t\t\tidentity_id: this.identityId,\n\t\t\t})\n\t\t\t.getResult(db)\n\n\t\treturn result.map(it => ({ projectId: it.project_id, role: it.role }))\n\t}\n}\n\nnamespace AllProjectRolesByIdentityQuery {\n\texport type Row = { projectId: string; role: string }\n\texport type Result = readonly Row[]\n}\n\nexport { AllProjectRolesByIdentityQuery }\n"],"names":["DatabaseQuery","SelectBuilder"],"mappings":";;;AAWA,MAAM,uCAAuCA,SAAAA,cAAqD;AAAA,EACjG,YAA6B,YAAoB;AAChD,UAAA;AAD4B,SAAA,aAAA;AAAA,EAE7B;AAAA,EAEA,MAAM,MAAM,EAAE,MAAyE;AACtF,UAAM,SAAS,MAAMC,SAAAA,cAAc,OAAA,EACjC,OAAO,YAAY,EACnB,OAAO,MAAM,EACb,KAAK,oBAAoB,EACzB,MAAM;AAAA,MACN,aAAa,KAAK;AAAA,IAAA,CAClB,EACA,UAAU,EAAE;AAEd,WAAO,OAAO,IAAI,CAAA,QAAO,EAAE,WAAW,GAAG,YAAY,MAAM,GAAG,KAAA,EAAO;AAAA,EACtE;AACD;;"}

package/dist/production/src/model/queries/membership/AllProjectRolesByIdentityQuery.js

@@ -0,0 +1,17 @@
+import { DatabaseQuery, SelectBuilder } from "@contember/database";
+class AllProjectRolesByIdentityQuery extends DatabaseQuery {
+  constructor(identityId) {
+    super();
+    this.identityId = identityId;
+  }
+  async fetch({ db }) {
+    const result = await SelectBuilder.create().select("project_id").select("role").from("project_membership").where({
+      identity_id: this.identityId
+    }).getResult(db);
+    return result.map((it) => ({ projectId: it.project_id, role: it.role }));
+  }
+}
+export {
+  AllProjectRolesByIdentityQuery
+};
+//# sourceMappingURL=AllProjectRolesByIdentityQuery.js.map

package/dist/production/src/model/queries/membership/AllProjectRolesByIdentityQuery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AllProjectRolesByIdentityQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/membership/AllProjectRolesByIdentityQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\n\n/**\n * Returns every (project_id, role) pair the identity holds across ALL projects.\n *\n * Unlike {@link ProjectRolesByIdentityQuery}, which is scoped to a single\n * project, this aggregates over the identity's entire project-membership set.\n * Required by {@link AuthPolicyResolver}, because signIn issues a project-agnostic\n * (global) session and must evaluate MFA / session policy against the whole role\n * set.\n */\nclass AllProjectRolesByIdentityQuery extends DatabaseQuery<AllProjectRolesByIdentityQuery.Result> {\n\tconstructor(private readonly identityId: string) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<AllProjectRolesByIdentityQuery.Result> {\n\t\tconst result = await SelectBuilder.create<{ project_id: string; role: string }>()\n\t\t\t.select('project_id')\n\t\t\t.select('role')\n\t\t\t.from('project_membership')\n\t\t\t.where({\n\t\t\t\tidentity_id: this.identityId,\n\t\t\t})\n\t\t\t.getResult(db)\n\n\t\treturn result.map(it => ({ projectId: it.project_id, role: it.role }))\n\t}\n}\n\nnamespace AllProjectRolesByIdentityQuery {\n\texport type Row = { projectId: string; role: string }\n\texport type Result = readonly Row[]\n}\n\nexport { AllProjectRolesByIdentityQuery }\n"],"names":[],"mappings":";AAWA,MAAM,uCAAuC,cAAqD;AAAA,EACjG,YAA6B,YAAoB;AAChD,UAAA;AAD4B,SAAA,aAAA;AAAA,EAE7B;AAAA,EAEA,MAAM,MAAM,EAAE,MAAyE;AACtF,UAAM,SAAS,MAAM,cAAc,OAAA,EACjC,OAAO,YAAY,EACnB,OAAO,MAAM,EACb,KAAK,oBAAoB,EACzB,MAAM;AAAA,MACN,aAAa,KAAK;AAAA,IAAA,CAClB,EACA,UAAU,EAAE;AAEd,WAAO,OAAO,IAAI,CAAA,QAAO,EAAE,WAAW,GAAG,YAAY,MAAM,GAAG,KAAA,EAAO;AAAA,EACtE;AACD;"}

package/dist/production/src/model/queries/membership/ProjectMembersQuery.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ProjectMembersQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/membership/ProjectMembersQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\nimport { MemberType, ProjectMembersInput } from '../../../schema'\nimport { ImplementationException } from '../../../exceptions'\n\nexport class ProjectMembersQuery extends DatabaseQuery<ProjectMembersQueryResult> {\n\tconstructor(\n\t\tprivate readonly projectId: string,\n\t\tprivate readonly projectMemberInput: ProjectMembersInput,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectMembersQueryResult> {\n\t\treturn await SelectBuilder.create<{ id: string; description: string }>()\n\t\t\t.select('id')\n\t\t\t.select('description')\n\t\t\t.from('identity')\n\t\t\t.where(it =>\n\t\t\t\tit.exists(\n\t\t\t\t\tbuilder =>\n\t\t\t\t\t\tbuilder\n\t\t\t\t\t\t\t.from('project_membership')\n\t\t\t\t\t\t\t.where(expr => expr.columnsEq(['project_membership', 'identity_id'], ['identity', 'id']))\n\t\t\t\t\t\t\t.where({ project_id: this.projectId }),\n\t\t\t\t)\n\t\t\t)\n\t\t\t.match(qb => {\n\t\t\t\tconst identityId = this.projectMemberInput.filter?.identityId\n\t\t\t\treturn identityId ? qb.where(it => it.in(['identity', 'id'], identityId)) : qb\n\t\t\t})\n\t\t\t.match(qb => {\n\t\t\t\tconst { email, memberType, personId } = this.projectMemberInput.filter ?? {}\n\t\t\t\tif ((email || personId) && memberType === 'API_KEY') {\n\t\t\t\t\tthrow new ImplementationException()\n\t\t\t\t}\n\n\t\t\t\tconst personQuery = SelectBuilder.create()\n\t\t\t\t\t.from('person')\n\t\t\t\t\t.where(expr => expr.columnsEq(['person', 'identity_id'], ['identity', 'id']))\n\t\t\t\t\t.match(qb => email ? qb.where(it => it.in('email', email)) : qb)\n\t\t\t\t\t.match(qb => personId ? qb.where(it => it.in(['person', 'id'], personId)) : qb)\n\n\t\t\t\tif (email || personId || memberType === 'PERSON') {\n\t\t\t\t\treturn qb.where(it => it.exists(personQuery))\n\t\t\t\t}\n\n\t\t\t\tif (memberType === 'API_KEY') {\n\t\t\t\t\treturn qb.where(it => it.not(it => it.exists(personQuery)))\n\t\t\t\t}\n\n\t\t\t\treturn qb\n\t\t\t})\n\t\t\t.limit(this.projectMemberInput.limit ?? undefined, this.projectMemberInput.offset ?? undefined)\n\t\t\t.getResult(db)\n\t}\n}\n\nexport interface ProjectMembersQueryRow {\n\tid: string\n\tdescription: string\n}\n\nexport type ProjectMembersQueryResult = ProjectMembersQueryRow[]\n"],"names":["DatabaseQuery","SelectBuilder","ImplementationException","qb","it"],"mappings":";;;;AAIO,MAAM,4BAA4BA,SAAAA,cAAyC;AAAA,EACjF,YACkB,WACA,oBAChB;AACD,UAAA;AAHiB,SAAA,YAAA;AACA,SAAA,qBAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAA6D;AAC1E,WAAO,MAAMC,SAAAA,cAAc,OAAA,EACzB,OAAO,IAAI,EACX,OAAO,aAAa,EACpB,KAAK,UAAU,EACf;AAAA,MAAM,QACN,GAAG;AAAA,QACF,CAAA,YACC,QACE,KAAK,oBAAoB,EACzB,MAAM,CAAA,SAAQ,KAAK,UAAU,CAAC,sBAAsB,aAAa,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,EACvF,MAAM,EAAE,YAAY,KAAK,UAAA,CAAW;AAAA,MAAA;AAAA,IACxC,EAEA,MAAM,CAAA,OAAM;AACZ,YAAM,aAAa,KAAK,mBAAmB,QAAQ;AACnD,aAAO,aAAa,GAAG,MAAM,CAAA,OAAM,GAAG,GAAG,CAAC,YAAY,IAAI,GAAG,UAAU,CAAC,IAAI;AAAA,IAC7E,CAAC,EACA,MAAM,CAAA,OAAM;AACZ,YAAM,EAAE,OAAO,YAAY,SAAA,IAAa,KAAK,mBAAmB,UAAU,CAAA;AAC1E,WAAK,SAAS,aAAa,eAAe,WAAW;AACpD,cAAM,IAAIC,WAAAA,wBAAA;AAAA,MACX;AAEA,YAAM,cAAcD,SAAAA,cAAc,OAAA,EAChC,KAAK,QAAQ,EACb,MAAM,CAAA,SAAQ,KAAK,UAAU,CAAC,UAAU,aAAa,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,EAC3E,MAAM,CAAAE,QAAM,QAAQA,IAAG,MAAM,CAAA,OAAM,GAAG,GAAG,SAAS,KAAK,CAAC,IAAIA,GAAE,EAC9D,MAAM,CAAAA,QAAM,WAAWA,IAAG,MAAM,CAAA,OAAM,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,QAAQ,CAAC,IAAIA,GAAE;AAE/E,UAAI,SAAS,YAAY,eAAe,UAAU;AACjD,eAAO,GAAG,MAAM,CAAA,OAAM,GAAG,OAAO,WAAW,CAAC;AAAA,MAC7C;AAEA,UAAI,eAAe,WAAW;AAC7B,eAAO,GAAG,MAAM,CAAA,OAAM,GAAG,IAAI,CAAAC,QAAMA,IAAG,OAAO,WAAW,CAAC,CAAC;AAAA,MAC3D;AAEA,aAAO;AAAA,IACR,CAAC,EACA,MAAM,KAAK,mBAAmB,SAAS,QAAW,KAAK,mBAAmB,UAAU,MAAS,EAC7F,UAAU,EAAE;AAAA,EACf;AACD;;"}
+{"version":3,"file":"ProjectMembersQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/membership/ProjectMembersQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\nimport { MemberType, ProjectMembersInput } from '../../../schema/index.js'\nimport { ImplementationException } from '../../../exceptions.js'\n\nexport class ProjectMembersQuery extends DatabaseQuery<ProjectMembersQueryResult> {\n\tconstructor(\n\t\tprivate readonly projectId: string,\n\t\tprivate readonly projectMemberInput: ProjectMembersInput,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectMembersQueryResult> {\n\t\treturn await SelectBuilder.create<{ id: string; description: string }>()\n\t\t\t.select('id')\n\t\t\t.select('description')\n\t\t\t.from('identity')\n\t\t\t.where(it =>\n\t\t\t\tit.exists(\n\t\t\t\t\tbuilder =>\n\t\t\t\t\t\tbuilder\n\t\t\t\t\t\t\t.from('project_membership')\n\t\t\t\t\t\t\t.where(expr => expr.columnsEq(['project_membership', 'identity_id'], ['identity', 'id']))\n\t\t\t\t\t\t\t.where({ project_id: this.projectId }),\n\t\t\t\t)\n\t\t\t)\n\t\t\t.match(qb => {\n\t\t\t\tconst identityId = this.projectMemberInput.filter?.identityId\n\t\t\t\treturn identityId ? qb.where(it => it.in(['identity', 'id'], identityId)) : qb\n\t\t\t})\n\t\t\t.match(qb => {\n\t\t\t\tconst { email, memberType, personId } = this.projectMemberInput.filter ?? {}\n\t\t\t\tif ((email || personId) && memberType === 'API_KEY') {\n\t\t\t\t\tthrow new ImplementationException()\n\t\t\t\t}\n\n\t\t\t\tconst personQuery = SelectBuilder.create()\n\t\t\t\t\t.from('person')\n\t\t\t\t\t.where(expr => expr.columnsEq(['person', 'identity_id'], ['identity', 'id']))\n\t\t\t\t\t.match(qb => email ? qb.where(it => it.in('email', email)) : qb)\n\t\t\t\t\t.match(qb => personId ? qb.where(it => it.in(['person', 'id'], personId)) : qb)\n\n\t\t\t\tif (email || personId || memberType === 'PERSON') {\n\t\t\t\t\treturn qb.where(it => it.exists(personQuery))\n\t\t\t\t}\n\n\t\t\t\tif (memberType === 'API_KEY') {\n\t\t\t\t\treturn qb.where(it => it.not(it => it.exists(personQuery)))\n\t\t\t\t}\n\n\t\t\t\treturn qb\n\t\t\t})\n\t\t\t.limit(this.projectMemberInput.limit ?? undefined, this.projectMemberInput.offset ?? undefined)\n\t\t\t.getResult(db)\n\t}\n}\n\nexport interface ProjectMembersQueryRow {\n\tid: string\n\tdescription: string\n}\n\nexport type ProjectMembersQueryResult = ProjectMembersQueryRow[]\n"],"names":["DatabaseQuery","SelectBuilder","ImplementationException","qb","it"],"mappings":";;;;AAIO,MAAM,4BAA4BA,SAAAA,cAAyC;AAAA,EACjF,YACkB,WACA,oBAChB;AACD,UAAA;AAHiB,SAAA,YAAA;AACA,SAAA,qBAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAA6D;AAC1E,WAAO,MAAMC,SAAAA,cAAc,OAAA,EACzB,OAAO,IAAI,EACX,OAAO,aAAa,EACpB,KAAK,UAAU,EACf;AAAA,MAAM,QACN,GAAG;AAAA,QACF,CAAA,YACC,QACE,KAAK,oBAAoB,EACzB,MAAM,CAAA,SAAQ,KAAK,UAAU,CAAC,sBAAsB,aAAa,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,EACvF,MAAM,EAAE,YAAY,KAAK,UAAA,CAAW;AAAA,MAAA;AAAA,IACxC,EAEA,MAAM,CAAA,OAAM;AACZ,YAAM,aAAa,KAAK,mBAAmB,QAAQ;AACnD,aAAO,aAAa,GAAG,MAAM,CAAA,OAAM,GAAG,GAAG,CAAC,YAAY,IAAI,GAAG,UAAU,CAAC,IAAI;AAAA,IAC7E,CAAC,EACA,MAAM,CAAA,OAAM;AACZ,YAAM,EAAE,OAAO,YAAY,SAAA,IAAa,KAAK,mBAAmB,UAAU,CAAA;AAC1E,WAAK,SAAS,aAAa,eAAe,WAAW;AACpD,cAAM,IAAIC,WAAAA,wBAAA;AAAA,MACX;AAEA,YAAM,cAAcD,SAAAA,cAAc,OAAA,EAChC,KAAK,QAAQ,EACb,MAAM,CAAA,SAAQ,KAAK,UAAU,CAAC,UAAU,aAAa,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,EAC3E,MAAM,CAAAE,QAAM,QAAQA,IAAG,MAAM,CAAA,OAAM,GAAG,GAAG,SAAS,KAAK,CAAC,IAAIA,GAAE,EAC9D,MAAM,CAAAA,QAAM,WAAWA,IAAG,MAAM,CAAA,OAAM,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,QAAQ,CAAC,IAAIA,GAAE;AAE/E,UAAI,SAAS,YAAY,eAAe,UAAU;AACjD,eAAO,GAAG,MAAM,CAAA,OAAM,GAAG,OAAO,WAAW,CAAC;AAAA,MAC7C;AAEA,UAAI,eAAe,WAAW;AAC7B,eAAO,GAAG,MAAM,CAAA,OAAM,GAAG,IAAI,CAAAC,QAAMA,IAAG,OAAO,WAAW,CAAC,CAAC;AAAA,MAC3D;AAEA,aAAO;AAAA,IACR,CAAC,EACA,MAAM,KAAK,mBAAmB,SAAS,QAAW,KAAK,mBAAmB,UAAU,MAAS,EAC7F,UAAU,EAAE;AAAA,EACf;AACD;;"}

package/dist/production/src/model/queries/membership/ProjectMembersQuery.js.map

@@ -1 +1 @@
-{"version":3,"file":"ProjectMembersQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/membership/ProjectMembersQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\nimport { MemberType, ProjectMembersInput } from '../../../schema'\nimport { ImplementationException } from '../../../exceptions'\n\nexport class ProjectMembersQuery extends DatabaseQuery<ProjectMembersQueryResult> {\n\tconstructor(\n\t\tprivate readonly projectId: string,\n\t\tprivate readonly projectMemberInput: ProjectMembersInput,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectMembersQueryResult> {\n\t\treturn await SelectBuilder.create<{ id: string; description: string }>()\n\t\t\t.select('id')\n\t\t\t.select('description')\n\t\t\t.from('identity')\n\t\t\t.where(it =>\n\t\t\t\tit.exists(\n\t\t\t\t\tbuilder =>\n\t\t\t\t\t\tbuilder\n\t\t\t\t\t\t\t.from('project_membership')\n\t\t\t\t\t\t\t.where(expr => expr.columnsEq(['project_membership', 'identity_id'], ['identity', 'id']))\n\t\t\t\t\t\t\t.where({ project_id: this.projectId }),\n\t\t\t\t)\n\t\t\t)\n\t\t\t.match(qb => {\n\t\t\t\tconst identityId = this.projectMemberInput.filter?.identityId\n\t\t\t\treturn identityId ? qb.where(it => it.in(['identity', 'id'], identityId)) : qb\n\t\t\t})\n\t\t\t.match(qb => {\n\t\t\t\tconst { email, memberType, personId } = this.projectMemberInput.filter ?? {}\n\t\t\t\tif ((email || personId) && memberType === 'API_KEY') {\n\t\t\t\t\tthrow new ImplementationException()\n\t\t\t\t}\n\n\t\t\t\tconst personQuery = SelectBuilder.create()\n\t\t\t\t\t.from('person')\n\t\t\t\t\t.where(expr => expr.columnsEq(['person', 'identity_id'], ['identity', 'id']))\n\t\t\t\t\t.match(qb => email ? qb.where(it => it.in('email', email)) : qb)\n\t\t\t\t\t.match(qb => personId ? qb.where(it => it.in(['person', 'id'], personId)) : qb)\n\n\t\t\t\tif (email || personId || memberType === 'PERSON') {\n\t\t\t\t\treturn qb.where(it => it.exists(personQuery))\n\t\t\t\t}\n\n\t\t\t\tif (memberType === 'API_KEY') {\n\t\t\t\t\treturn qb.where(it => it.not(it => it.exists(personQuery)))\n\t\t\t\t}\n\n\t\t\t\treturn qb\n\t\t\t})\n\t\t\t.limit(this.projectMemberInput.limit ?? undefined, this.projectMemberInput.offset ?? undefined)\n\t\t\t.getResult(db)\n\t}\n}\n\nexport interface ProjectMembersQueryRow {\n\tid: string\n\tdescription: string\n}\n\nexport type ProjectMembersQueryResult = ProjectMembersQueryRow[]\n"],"names":["qb","it"],"mappings":";;AAIO,MAAM,4BAA4B,cAAyC;AAAA,EACjF,YACkB,WACA,oBAChB;AACD,UAAA;AAHiB,SAAA,YAAA;AACA,SAAA,qBAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAA6D;AAC1E,WAAO,MAAM,cAAc,OAAA,EACzB,OAAO,IAAI,EACX,OAAO,aAAa,EACpB,KAAK,UAAU,EACf;AAAA,MAAM,QACN,GAAG;AAAA,QACF,CAAA,YACC,QACE,KAAK,oBAAoB,EACzB,MAAM,CAAA,SAAQ,KAAK,UAAU,CAAC,sBAAsB,aAAa,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,EACvF,MAAM,EAAE,YAAY,KAAK,UAAA,CAAW;AAAA,MAAA;AAAA,IACxC,EAEA,MAAM,CAAA,OAAM;AACZ,YAAM,aAAa,KAAK,mBAAmB,QAAQ;AACnD,aAAO,aAAa,GAAG,MAAM,CAAA,OAAM,GAAG,GAAG,CAAC,YAAY,IAAI,GAAG,UAAU,CAAC,IAAI;AAAA,IAC7E,CAAC,EACA,MAAM,CAAA,OAAM;AACZ,YAAM,EAAE,OAAO,YAAY,SAAA,IAAa,KAAK,mBAAmB,UAAU,CAAA;AAC1E,WAAK,SAAS,aAAa,eAAe,WAAW;AACpD,cAAM,IAAI,wBAAA;AAAA,MACX;AAEA,YAAM,cAAc,cAAc,OAAA,EAChC,KAAK,QAAQ,EACb,MAAM,CAAA,SAAQ,KAAK,UAAU,CAAC,UAAU,aAAa,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,EAC3E,MAAM,CAAAA,QAAM,QAAQA,IAAG,MAAM,CAAA,OAAM,GAAG,GAAG,SAAS,KAAK,CAAC,IAAIA,GAAE,EAC9D,MAAM,CAAAA,QAAM,WAAWA,IAAG,MAAM,CAAA,OAAM,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,QAAQ,CAAC,IAAIA,GAAE;AAE/E,UAAI,SAAS,YAAY,eAAe,UAAU;AACjD,eAAO,GAAG,MAAM,CAAA,OAAM,GAAG,OAAO,WAAW,CAAC;AAAA,MAC7C;AAEA,UAAI,eAAe,WAAW;AAC7B,eAAO,GAAG,MAAM,CAAA,OAAM,GAAG,IAAI,CAAAC,QAAMA,IAAG,OAAO,WAAW,CAAC,CAAC;AAAA,MAC3D;AAEA,aAAO;AAAA,IACR,CAAC,EACA,MAAM,KAAK,mBAAmB,SAAS,QAAW,KAAK,mBAAmB,UAAU,MAAS,EAC7F,UAAU,EAAE;AAAA,EACf;AACD;"}
+{"version":3,"file":"ProjectMembersQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/membership/ProjectMembersQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\nimport { MemberType, ProjectMembersInput } from '../../../schema/index.js'\nimport { ImplementationException } from '../../../exceptions.js'\n\nexport class ProjectMembersQuery extends DatabaseQuery<ProjectMembersQueryResult> {\n\tconstructor(\n\t\tprivate readonly projectId: string,\n\t\tprivate readonly projectMemberInput: ProjectMembersInput,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectMembersQueryResult> {\n\t\treturn await SelectBuilder.create<{ id: string; description: string }>()\n\t\t\t.select('id')\n\t\t\t.select('description')\n\t\t\t.from('identity')\n\t\t\t.where(it =>\n\t\t\t\tit.exists(\n\t\t\t\t\tbuilder =>\n\t\t\t\t\t\tbuilder\n\t\t\t\t\t\t\t.from('project_membership')\n\t\t\t\t\t\t\t.where(expr => expr.columnsEq(['project_membership', 'identity_id'], ['identity', 'id']))\n\t\t\t\t\t\t\t.where({ project_id: this.projectId }),\n\t\t\t\t)\n\t\t\t)\n\t\t\t.match(qb => {\n\t\t\t\tconst identityId = this.projectMemberInput.filter?.identityId\n\t\t\t\treturn identityId ? qb.where(it => it.in(['identity', 'id'], identityId)) : qb\n\t\t\t})\n\t\t\t.match(qb => {\n\t\t\t\tconst { email, memberType, personId } = this.projectMemberInput.filter ?? {}\n\t\t\t\tif ((email || personId) && memberType === 'API_KEY') {\n\t\t\t\t\tthrow new ImplementationException()\n\t\t\t\t}\n\n\t\t\t\tconst personQuery = SelectBuilder.create()\n\t\t\t\t\t.from('person')\n\t\t\t\t\t.where(expr => expr.columnsEq(['person', 'identity_id'], ['identity', 'id']))\n\t\t\t\t\t.match(qb => email ? qb.where(it => it.in('email', email)) : qb)\n\t\t\t\t\t.match(qb => personId ? qb.where(it => it.in(['person', 'id'], personId)) : qb)\n\n\t\t\t\tif (email || personId || memberType === 'PERSON') {\n\t\t\t\t\treturn qb.where(it => it.exists(personQuery))\n\t\t\t\t}\n\n\t\t\t\tif (memberType === 'API_KEY') {\n\t\t\t\t\treturn qb.where(it => it.not(it => it.exists(personQuery)))\n\t\t\t\t}\n\n\t\t\t\treturn qb\n\t\t\t})\n\t\t\t.limit(this.projectMemberInput.limit ?? undefined, this.projectMemberInput.offset ?? undefined)\n\t\t\t.getResult(db)\n\t}\n}\n\nexport interface ProjectMembersQueryRow {\n\tid: string\n\tdescription: string\n}\n\nexport type ProjectMembersQueryResult = ProjectMembersQueryRow[]\n"],"names":["qb","it"],"mappings":";;AAIO,MAAM,4BAA4B,cAAyC;AAAA,EACjF,YACkB,WACA,oBAChB;AACD,UAAA;AAHiB,SAAA,YAAA;AACA,SAAA,qBAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAA6D;AAC1E,WAAO,MAAM,cAAc,OAAA,EACzB,OAAO,IAAI,EACX,OAAO,aAAa,EACpB,KAAK,UAAU,EACf;AAAA,MAAM,QACN,GAAG;AAAA,QACF,CAAA,YACC,QACE,KAAK,oBAAoB,EACzB,MAAM,CAAA,SAAQ,KAAK,UAAU,CAAC,sBAAsB,aAAa,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,EACvF,MAAM,EAAE,YAAY,KAAK,UAAA,CAAW;AAAA,MAAA;AAAA,IACxC,EAEA,MAAM,CAAA,OAAM;AACZ,YAAM,aAAa,KAAK,mBAAmB,QAAQ;AACnD,aAAO,aAAa,GAAG,MAAM,CAAA,OAAM,GAAG,GAAG,CAAC,YAAY,IAAI,GAAG,UAAU,CAAC,IAAI;AAAA,IAC7E,CAAC,EACA,MAAM,CAAA,OAAM;AACZ,YAAM,EAAE,OAAO,YAAY,SAAA,IAAa,KAAK,mBAAmB,UAAU,CAAA;AAC1E,WAAK,SAAS,aAAa,eAAe,WAAW;AACpD,cAAM,IAAI,wBAAA;AAAA,MACX;AAEA,YAAM,cAAc,cAAc,OAAA,EAChC,KAAK,QAAQ,EACb,MAAM,CAAA,SAAQ,KAAK,UAAU,CAAC,UAAU,aAAa,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,EAC3E,MAAM,CAAAA,QAAM,QAAQA,IAAG,MAAM,CAAA,OAAM,GAAG,GAAG,SAAS,KAAK,CAAC,IAAIA,GAAE,EAC9D,MAAM,CAAAA,QAAM,WAAWA,IAAG,MAAM,CAAA,OAAM,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,QAAQ,CAAC,IAAIA,GAAE;AAE/E,UAAI,SAAS,YAAY,eAAe,UAAU;AACjD,eAAO,GAAG,MAAM,CAAA,OAAM,GAAG,OAAO,WAAW,CAAC;AAAA,MAC7C;AAEA,UAAI,eAAe,WAAW;AAC7B,eAAO,GAAG,MAAM,CAAA,OAAM,GAAG,IAAI,CAAAC,QAAMA,IAAG,OAAO,WAAW,CAAC,CAAC;AAAA,MAC3D;AAEA,aAAO;AAAA,IACR,CAAC,EACA,MAAM,KAAK,mBAAmB,SAAS,QAAW,KAAK,mBAAmB,UAAU,MAAS,EAC7F,UAAU,EAAE;AAAA,EACf;AACD;"}

package/dist/production/src/model/queries/membership/ProjectMembershipByIdentityQuery.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ProjectMembershipByIdentityQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/membership/ProjectMembershipByIdentityQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\nimport { byProjectSlug } from './ProjectSlugSpecification'\nimport { Acl } from '@contember/schema'\n\nclass ProjectMembershipByIdentityQuery extends DatabaseQuery<ProjectMembershipByIdentityQuery.Result> {\n\tconstructor(private readonly project: { id: string } | { slug: string }, private readonly identityId: string[]) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectMembershipByIdentityQuery.Result> {\n\t\tlet qb = SelectBuilder.create<ProjectMembershipByIdentityQuery.Row>()\n\t\tqb = qb\n\t\t\t.with('memberships', qb =>\n\t\t\t\tqb\n\t\t\t\t\t.select(['project_membership', 'id'])\n\t\t\t\t\t.select(['project_membership', 'role'])\n\t\t\t\t\t.select(['project_membership', 'identity_id'])\n\t\t\t\t\t.where(expr => expr.in('identity_id', this.identityId))\n\t\t\t\t\t.from('project_membership')\n\t\t\t\t\t.match(qb =>\n\t\t\t\t\t\t'id' in this.project\n\t\t\t\t\t\t\t? qb.where({\n\t\t\t\t\t\t\t\tproject_id: this.project.id,\n\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\t: qb.match(byProjectSlug(this.project.slug))\n\t\t\t\t\t))\n\t\t\t.with('variables', qb =>\n\t\t\t\tqb\n\t\t\t\t\t.select('membership_id')\n\t\t\t\t\t.select(cb => cb.raw(\"json_agg(json_build_object('name', variable, 'values', value))\"), 'variables')\n\t\t\t\t\t.from('project_membership_variable')\n\t\t\t\t\t.join('memberships', undefined, expr => expr.columnsEq(['project_membership_variable', 'membership_id'], ['memberships', 'id']))\n\t\t\t\t\t.groupBy('membership_id'))\n\t\t\t.select('role')\n\t\t\t.select(expr => expr.raw(\"coalesce(variables, '[]'::json)\"), 'variables')\n\t\t\t.select('identity_id', 'identityId')\n\t\t\t.from('memberships')\n\t\t\t.leftJoin('variables', undefined, expr => expr.columnsEq(['memberships', 'id'], ['variables', 'membership_id']))\n\n\t\treturn await qb.getResult(db)\n\t}\n}\n\nnamespace ProjectMembershipByIdentityQuery {\n\texport type Row = Acl.Membership & { identityId: string }\n\texport type Result = readonly Row[]\n}\n\nexport { ProjectMembershipByIdentityQuery }\n"],"names":["DatabaseQuery","SelectBuilder","qb","byProjectSlug"],"mappings":";;;;AAIA,MAAM,yCAAyCA,SAAAA,cAAuD;AAAA,EACrG,YAA6B,SAA6D,YAAsB;AAC/G,UAAA;AAD4B,SAAA,UAAA;AAA6D,SAAA,aAAA;AAAA,EAE1F;AAAA,EAEA,MAAM,MAAM,EAAE,MAA2E;AACxF,QAAI,KAAKC,SAAAA,cAAc,OAAA;AACvB,SAAK,GACH,KAAK,eAAe,CAAAC,QACpBA,IACE,OAAO,CAAC,sBAAsB,IAAI,CAAC,EACnC,OAAO,CAAC,sBAAsB,MAAM,CAAC,EACrC,OAAO,CAAC,sBAAsB,aAAa,CAAC,EAC5C,MAAM,CAAA,SAAQ,KAAK,GAAG,eAAe,KAAK,UAAU,CAAC,EACrD,KAAK,oBAAoB,EACzB;AAAA,MAAM,CAAAA,QACN,QAAQ,KAAK,UACVA,IAAG,MAAM;AAAA,QACV,YAAY,KAAK,QAAQ;AAAA,MAAA,CACzB,IACCA,IAAG,MAAMC,yBAAAA,cAAc,KAAK,QAAQ,IAAI,CAAC;AAAA,IAAA,CAC5C,EACF,KAAK,aAAa,CAAAD,QAClBA,IACE,OAAO,eAAe,EACtB,OAAO,CAAA,OAAM,GAAG,IAAI,gEAAgE,GAAG,WAAW,EAClG,KAAK,6BAA6B,EAClC,KAAK,eAAe,QAAW,CAAA,SAAQ,KAAK,UAAU,CAAC,+BAA+B,eAAe,GAAG,CAAC,eAAe,IAAI,CAAC,CAAC,EAC9H,QAAQ,eAAe,CAAC,EAC1B,OAAO,MAAM,EACb,OAAO,CAAA,SAAQ,KAAK,IAAI,iCAAiC,GAAG,WAAW,EACvE,OAAO,eAAe,YAAY,EAClC,KAAK,aAAa,EAClB,SAAS,aAAa,QAAW,UAAQ,KAAK,UAAU,CAAC,eAAe,IAAI,GAAG,CAAC,aAAa,eAAe,CAAC,CAAC;AAEhH,WAAO,MAAM,GAAG,UAAU,EAAE;AAAA,EAC7B;AACD;;"}
+{"version":3,"file":"ProjectMembershipByIdentityQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/membership/ProjectMembershipByIdentityQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\nimport { byProjectSlug } from './ProjectSlugSpecification.js'\nimport { Acl } from '@contember/schema'\n\nclass ProjectMembershipByIdentityQuery extends DatabaseQuery<ProjectMembershipByIdentityQuery.Result> {\n\tconstructor(private readonly project: { id: string } | { slug: string }, private readonly identityId: string[]) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectMembershipByIdentityQuery.Result> {\n\t\tlet qb = SelectBuilder.create<ProjectMembershipByIdentityQuery.Row>()\n\t\tqb = qb\n\t\t\t.with('memberships', qb =>\n\t\t\t\tqb\n\t\t\t\t\t.select(['project_membership', 'id'])\n\t\t\t\t\t.select(['project_membership', 'role'])\n\t\t\t\t\t.select(['project_membership', 'identity_id'])\n\t\t\t\t\t.where(expr => expr.in('identity_id', this.identityId))\n\t\t\t\t\t.from('project_membership')\n\t\t\t\t\t.match(qb =>\n\t\t\t\t\t\t'id' in this.project\n\t\t\t\t\t\t\t? qb.where({\n\t\t\t\t\t\t\t\tproject_id: this.project.id,\n\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\t: qb.match(byProjectSlug(this.project.slug))\n\t\t\t\t\t))\n\t\t\t.with('variables', qb =>\n\t\t\t\tqb\n\t\t\t\t\t.select('membership_id')\n\t\t\t\t\t.select(cb => cb.raw(\"json_agg(json_build_object('name', variable, 'values', value))\"), 'variables')\n\t\t\t\t\t.from('project_membership_variable')\n\t\t\t\t\t.join('memberships', undefined, expr => expr.columnsEq(['project_membership_variable', 'membership_id'], ['memberships', 'id']))\n\t\t\t\t\t.groupBy('membership_id'))\n\t\t\t.select('role')\n\t\t\t.select(expr => expr.raw(\"coalesce(variables, '[]'::json)\"), 'variables')\n\t\t\t.select('identity_id', 'identityId')\n\t\t\t.from('memberships')\n\t\t\t.leftJoin('variables', undefined, expr => expr.columnsEq(['memberships', 'id'], ['variables', 'membership_id']))\n\n\t\treturn await qb.getResult(db)\n\t}\n}\n\nnamespace ProjectMembershipByIdentityQuery {\n\texport type Row = Acl.Membership & { identityId: string }\n\texport type Result = readonly Row[]\n}\n\nexport { ProjectMembershipByIdentityQuery }\n"],"names":["DatabaseQuery","SelectBuilder","qb","byProjectSlug"],"mappings":";;;;AAIA,MAAM,yCAAyCA,SAAAA,cAAuD;AAAA,EACrG,YAA6B,SAA6D,YAAsB;AAC/G,UAAA;AAD4B,SAAA,UAAA;AAA6D,SAAA,aAAA;AAAA,EAE1F;AAAA,EAEA,MAAM,MAAM,EAAE,MAA2E;AACxF,QAAI,KAAKC,SAAAA,cAAc,OAAA;AACvB,SAAK,GACH,KAAK,eAAe,CAAAC,QACpBA,IACE,OAAO,CAAC,sBAAsB,IAAI,CAAC,EACnC,OAAO,CAAC,sBAAsB,MAAM,CAAC,EACrC,OAAO,CAAC,sBAAsB,aAAa,CAAC,EAC5C,MAAM,CAAA,SAAQ,KAAK,GAAG,eAAe,KAAK,UAAU,CAAC,EACrD,KAAK,oBAAoB,EACzB;AAAA,MAAM,CAAAA,QACN,QAAQ,KAAK,UACVA,IAAG,MAAM;AAAA,QACV,YAAY,KAAK,QAAQ;AAAA,MAAA,CACzB,IACCA,IAAG,MAAMC,yBAAAA,cAAc,KAAK,QAAQ,IAAI,CAAC;AAAA,IAAA,CAC5C,EACF,KAAK,aAAa,CAAAD,QAClBA,IACE,OAAO,eAAe,EACtB,OAAO,CAAA,OAAM,GAAG,IAAI,gEAAgE,GAAG,WAAW,EAClG,KAAK,6BAA6B,EAClC,KAAK,eAAe,QAAW,CAAA,SAAQ,KAAK,UAAU,CAAC,+BAA+B,eAAe,GAAG,CAAC,eAAe,IAAI,CAAC,CAAC,EAC9H,QAAQ,eAAe,CAAC,EAC1B,OAAO,MAAM,EACb,OAAO,CAAA,SAAQ,KAAK,IAAI,iCAAiC,GAAG,WAAW,EACvE,OAAO,eAAe,YAAY,EAClC,KAAK,aAAa,EAClB,SAAS,aAAa,QAAW,UAAQ,KAAK,UAAU,CAAC,eAAe,IAAI,GAAG,CAAC,aAAa,eAAe,CAAC,CAAC;AAEhH,WAAO,MAAM,GAAG,UAAU,EAAE;AAAA,EAC7B;AACD;;"}

package/dist/production/src/model/queries/membership/ProjectMembershipByIdentityQuery.js.map

@@ -1 +1 @@
-{"version":3,"file":"ProjectMembershipByIdentityQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/membership/ProjectMembershipByIdentityQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\nimport { byProjectSlug } from './ProjectSlugSpecification'\nimport { Acl } from '@contember/schema'\n\nclass ProjectMembershipByIdentityQuery extends DatabaseQuery<ProjectMembershipByIdentityQuery.Result> {\n\tconstructor(private readonly project: { id: string } | { slug: string }, private readonly identityId: string[]) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectMembershipByIdentityQuery.Result> {\n\t\tlet qb = SelectBuilder.create<ProjectMembershipByIdentityQuery.Row>()\n\t\tqb = qb\n\t\t\t.with('memberships', qb =>\n\t\t\t\tqb\n\t\t\t\t\t.select(['project_membership', 'id'])\n\t\t\t\t\t.select(['project_membership', 'role'])\n\t\t\t\t\t.select(['project_membership', 'identity_id'])\n\t\t\t\t\t.where(expr => expr.in('identity_id', this.identityId))\n\t\t\t\t\t.from('project_membership')\n\t\t\t\t\t.match(qb =>\n\t\t\t\t\t\t'id' in this.project\n\t\t\t\t\t\t\t? qb.where({\n\t\t\t\t\t\t\t\tproject_id: this.project.id,\n\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\t: qb.match(byProjectSlug(this.project.slug))\n\t\t\t\t\t))\n\t\t\t.with('variables', qb =>\n\t\t\t\tqb\n\t\t\t\t\t.select('membership_id')\n\t\t\t\t\t.select(cb => cb.raw(\"json_agg(json_build_object('name', variable, 'values', value))\"), 'variables')\n\t\t\t\t\t.from('project_membership_variable')\n\t\t\t\t\t.join('memberships', undefined, expr => expr.columnsEq(['project_membership_variable', 'membership_id'], ['memberships', 'id']))\n\t\t\t\t\t.groupBy('membership_id'))\n\t\t\t.select('role')\n\t\t\t.select(expr => expr.raw(\"coalesce(variables, '[]'::json)\"), 'variables')\n\t\t\t.select('identity_id', 'identityId')\n\t\t\t.from('memberships')\n\t\t\t.leftJoin('variables', undefined, expr => expr.columnsEq(['memberships', 'id'], ['variables', 'membership_id']))\n\n\t\treturn await qb.getResult(db)\n\t}\n}\n\nnamespace ProjectMembershipByIdentityQuery {\n\texport type Row = Acl.Membership & { identityId: string }\n\texport type Result = readonly Row[]\n}\n\nexport { ProjectMembershipByIdentityQuery }\n"],"names":["qb"],"mappings":";;AAIA,MAAM,yCAAyC,cAAuD;AAAA,EACrG,YAA6B,SAA6D,YAAsB;AAC/G,UAAA;AAD4B,SAAA,UAAA;AAA6D,SAAA,aAAA;AAAA,EAE1F;AAAA,EAEA,MAAM,MAAM,EAAE,MAA2E;AACxF,QAAI,KAAK,cAAc,OAAA;AACvB,SAAK,GACH,KAAK,eAAe,CAAAA,QACpBA,IACE,OAAO,CAAC,sBAAsB,IAAI,CAAC,EACnC,OAAO,CAAC,sBAAsB,MAAM,CAAC,EACrC,OAAO,CAAC,sBAAsB,aAAa,CAAC,EAC5C,MAAM,CAAA,SAAQ,KAAK,GAAG,eAAe,KAAK,UAAU,CAAC,EACrD,KAAK,oBAAoB,EACzB;AAAA,MAAM,CAAAA,QACN,QAAQ,KAAK,UACVA,IAAG,MAAM;AAAA,QACV,YAAY,KAAK,QAAQ;AAAA,MAAA,CACzB,IACCA,IAAG,MAAM,cAAc,KAAK,QAAQ,IAAI,CAAC;AAAA,IAAA,CAC5C,EACF,KAAK,aAAa,CAAAA,QAClBA,IACE,OAAO,eAAe,EACtB,OAAO,CAAA,OAAM,GAAG,IAAI,gEAAgE,GAAG,WAAW,EAClG,KAAK,6BAA6B,EAClC,KAAK,eAAe,QAAW,CAAA,SAAQ,KAAK,UAAU,CAAC,+BAA+B,eAAe,GAAG,CAAC,eAAe,IAAI,CAAC,CAAC,EAC9H,QAAQ,eAAe,CAAC,EAC1B,OAAO,MAAM,EACb,OAAO,CAAA,SAAQ,KAAK,IAAI,iCAAiC,GAAG,WAAW,EACvE,OAAO,eAAe,YAAY,EAClC,KAAK,aAAa,EAClB,SAAS,aAAa,QAAW,UAAQ,KAAK,UAAU,CAAC,eAAe,IAAI,GAAG,CAAC,aAAa,eAAe,CAAC,CAAC;AAEhH,WAAO,MAAM,GAAG,UAAU,EAAE;AAAA,EAC7B;AACD;"}
+{"version":3,"file":"ProjectMembershipByIdentityQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/membership/ProjectMembershipByIdentityQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\nimport { byProjectSlug } from './ProjectSlugSpecification.js'\nimport { Acl } from '@contember/schema'\n\nclass ProjectMembershipByIdentityQuery extends DatabaseQuery<ProjectMembershipByIdentityQuery.Result> {\n\tconstructor(private readonly project: { id: string } | { slug: string }, private readonly identityId: string[]) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectMembershipByIdentityQuery.Result> {\n\t\tlet qb = SelectBuilder.create<ProjectMembershipByIdentityQuery.Row>()\n\t\tqb = qb\n\t\t\t.with('memberships', qb =>\n\t\t\t\tqb\n\t\t\t\t\t.select(['project_membership', 'id'])\n\t\t\t\t\t.select(['project_membership', 'role'])\n\t\t\t\t\t.select(['project_membership', 'identity_id'])\n\t\t\t\t\t.where(expr => expr.in('identity_id', this.identityId))\n\t\t\t\t\t.from('project_membership')\n\t\t\t\t\t.match(qb =>\n\t\t\t\t\t\t'id' in this.project\n\t\t\t\t\t\t\t? qb.where({\n\t\t\t\t\t\t\t\tproject_id: this.project.id,\n\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\t: qb.match(byProjectSlug(this.project.slug))\n\t\t\t\t\t))\n\t\t\t.with('variables', qb =>\n\t\t\t\tqb\n\t\t\t\t\t.select('membership_id')\n\t\t\t\t\t.select(cb => cb.raw(\"json_agg(json_build_object('name', variable, 'values', value))\"), 'variables')\n\t\t\t\t\t.from('project_membership_variable')\n\t\t\t\t\t.join('memberships', undefined, expr => expr.columnsEq(['project_membership_variable', 'membership_id'], ['memberships', 'id']))\n\t\t\t\t\t.groupBy('membership_id'))\n\t\t\t.select('role')\n\t\t\t.select(expr => expr.raw(\"coalesce(variables, '[]'::json)\"), 'variables')\n\t\t\t.select('identity_id', 'identityId')\n\t\t\t.from('memberships')\n\t\t\t.leftJoin('variables', undefined, expr => expr.columnsEq(['memberships', 'id'], ['variables', 'membership_id']))\n\n\t\treturn await qb.getResult(db)\n\t}\n}\n\nnamespace ProjectMembershipByIdentityQuery {\n\texport type Row = Acl.Membership & { identityId: string }\n\texport type Result = readonly Row[]\n}\n\nexport { ProjectMembershipByIdentityQuery }\n"],"names":["qb"],"mappings":";;AAIA,MAAM,yCAAyC,cAAuD;AAAA,EACrG,YAA6B,SAA6D,YAAsB;AAC/G,UAAA;AAD4B,SAAA,UAAA;AAA6D,SAAA,aAAA;AAAA,EAE1F;AAAA,EAEA,MAAM,MAAM,EAAE,MAA2E;AACxF,QAAI,KAAK,cAAc,OAAA;AACvB,SAAK,GACH,KAAK,eAAe,CAAAA,QACpBA,IACE,OAAO,CAAC,sBAAsB,IAAI,CAAC,EACnC,OAAO,CAAC,sBAAsB,MAAM,CAAC,EACrC,OAAO,CAAC,sBAAsB,aAAa,CAAC,EAC5C,MAAM,CAAA,SAAQ,KAAK,GAAG,eAAe,KAAK,UAAU,CAAC,EACrD,KAAK,oBAAoB,EACzB;AAAA,MAAM,CAAAA,QACN,QAAQ,KAAK,UACVA,IAAG,MAAM;AAAA,QACV,YAAY,KAAK,QAAQ;AAAA,MAAA,CACzB,IACCA,IAAG,MAAM,cAAc,KAAK,QAAQ,IAAI,CAAC;AAAA,IAAA,CAC5C,EACF,KAAK,aAAa,CAAAA,QAClBA,IACE,OAAO,eAAe,EACtB,OAAO,CAAA,OAAM,GAAG,IAAI,gEAAgE,GAAG,WAAW,EAClG,KAAK,6BAA6B,EAClC,KAAK,eAAe,QAAW,CAAA,SAAQ,KAAK,UAAU,CAAC,+BAA+B,eAAe,GAAG,CAAC,eAAe,IAAI,CAAC,CAAC,EAC9H,QAAQ,eAAe,CAAC,EAC1B,OAAO,MAAM,EACb,OAAO,CAAA,SAAQ,KAAK,IAAI,iCAAiC,GAAG,WAAW,EACvE,OAAO,eAAe,YAAY,EAClC,KAAK,aAAa,EAClB,SAAS,aAAa,QAAW,UAAQ,KAAK,UAAU,CAAC,eAAe,IAAI,GAAG,CAAC,aAAa,eAAe,CAAC,CAAC;AAEhH,WAAO,MAAM,GAAG,UAAU,EAAE;AAAA,EAC7B;AACD;"}

package/dist/production/src/model/queries/membership/ProjectRolesByIdentityQuery.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ProjectRolesByIdentityQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/membership/ProjectRolesByIdentityQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\nimport { byProjectSlug } from './ProjectSlugSpecification'\n\nclass ProjectRolesByIdentityQuery extends DatabaseQuery<ProjectRolesByIdentityQuery.Result> {\n\tconstructor(private readonly project: { id: string } | { slug: string }, private readonly identityId: string) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectRolesByIdentityQuery.Result> {\n\t\tlet qb = SelectBuilder.create<{ role: string }>() //\n\t\t\t.select('role')\n\t\t\t.from('project_membership')\n\t\t\t.where({\n\t\t\t\tidentity_id: this.identityId,\n\t\t\t})\n\t\tconst qbWithProjectWhere = 'id' in this.project\n\t\t\t? qb.where({\n\t\t\t\tproject_id: this.project.id,\n\t\t\t})\n\t\t\t: qb.match(byProjectSlug(this.project.slug))\n\t\tconst result = await qbWithProjectWhere.getResult(db)\n\n\t\treturn { roles: result.map(it => it.role) }\n\t}\n}\n\nnamespace ProjectRolesByIdentityQuery {\n\texport type Result = {\n\t\troles: string[]\n\t}\n}\n\nexport { ProjectRolesByIdentityQuery }\n"],"names":["DatabaseQuery","SelectBuilder","byProjectSlug"],"mappings":";;;;AAGA,MAAM,oCAAoCA,SAAAA,cAAkD;AAAA,EAC3F,YAA6B,SAA6D,YAAoB;AAC7G,UAAA;AAD4B,SAAA,UAAA;AAA6D,SAAA,aAAA;AAAA,EAE1F;AAAA,EAEA,MAAM,MAAM,EAAE,MAAsE;AACnF,QAAI,KAAKC,uBAAc,SACrB,OAAO,MAAM,EACb,KAAK,oBAAoB,EACzB,MAAM;AAAA,MACN,aAAa,KAAK;AAAA,IAAA,CAClB;AACF,UAAM,qBAAqB,QAAQ,KAAK,UACrC,GAAG,MAAM;AAAA,MACV,YAAY,KAAK,QAAQ;AAAA,IAAA,CACzB,IACC,GAAG,MAAMC,yBAAAA,cAAc,KAAK,QAAQ,IAAI,CAAC;AAC5C,UAAM,SAAS,MAAM,mBAAmB,UAAU,EAAE;AAEpD,WAAO,EAAE,OAAO,OAAO,IAAI,CAAA,OAAM,GAAG,IAAI,EAAA;AAAA,EACzC;AACD;;"}
+{"version":3,"file":"ProjectRolesByIdentityQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/membership/ProjectRolesByIdentityQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\nimport { byProjectSlug } from './ProjectSlugSpecification.js'\n\nclass ProjectRolesByIdentityQuery extends DatabaseQuery<ProjectRolesByIdentityQuery.Result> {\n\tconstructor(private readonly project: { id: string } | { slug: string }, private readonly identityId: string) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectRolesByIdentityQuery.Result> {\n\t\tlet qb = SelectBuilder.create<{ role: string }>() //\n\t\t\t.select('role')\n\t\t\t.from('project_membership')\n\t\t\t.where({\n\t\t\t\tidentity_id: this.identityId,\n\t\t\t})\n\t\tconst qbWithProjectWhere = 'id' in this.project\n\t\t\t? qb.where({\n\t\t\t\tproject_id: this.project.id,\n\t\t\t})\n\t\t\t: qb.match(byProjectSlug(this.project.slug))\n\t\tconst result = await qbWithProjectWhere.getResult(db)\n\n\t\treturn { roles: result.map(it => it.role) }\n\t}\n}\n\nnamespace ProjectRolesByIdentityQuery {\n\texport type Result = {\n\t\troles: string[]\n\t}\n}\n\nexport { ProjectRolesByIdentityQuery }\n"],"names":["DatabaseQuery","SelectBuilder","byProjectSlug"],"mappings":";;;;AAGA,MAAM,oCAAoCA,SAAAA,cAAkD;AAAA,EAC3F,YAA6B,SAA6D,YAAoB;AAC7G,UAAA;AAD4B,SAAA,UAAA;AAA6D,SAAA,aAAA;AAAA,EAE1F;AAAA,EAEA,MAAM,MAAM,EAAE,MAAsE;AACnF,QAAI,KAAKC,uBAAc,SACrB,OAAO,MAAM,EACb,KAAK,oBAAoB,EACzB,MAAM;AAAA,MACN,aAAa,KAAK;AAAA,IAAA,CAClB;AACF,UAAM,qBAAqB,QAAQ,KAAK,UACrC,GAAG,MAAM;AAAA,MACV,YAAY,KAAK,QAAQ;AAAA,IAAA,CACzB,IACC,GAAG,MAAMC,yBAAAA,cAAc,KAAK,QAAQ,IAAI,CAAC;AAC5C,UAAM,SAAS,MAAM,mBAAmB,UAAU,EAAE;AAEpD,WAAO,EAAE,OAAO,OAAO,IAAI,CAAA,OAAM,GAAG,IAAI,EAAA;AAAA,EACzC;AACD;;"}

package/dist/production/src/model/queries/membership/ProjectRolesByIdentityQuery.js.map

@@ -1 +1 @@
-{"version":3,"file":"ProjectRolesByIdentityQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/membership/ProjectRolesByIdentityQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\nimport { byProjectSlug } from './ProjectSlugSpecification'\n\nclass ProjectRolesByIdentityQuery extends DatabaseQuery<ProjectRolesByIdentityQuery.Result> {\n\tconstructor(private readonly project: { id: string } | { slug: string }, private readonly identityId: string) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectRolesByIdentityQuery.Result> {\n\t\tlet qb = SelectBuilder.create<{ role: string }>() //\n\t\t\t.select('role')\n\t\t\t.from('project_membership')\n\t\t\t.where({\n\t\t\t\tidentity_id: this.identityId,\n\t\t\t})\n\t\tconst qbWithProjectWhere = 'id' in this.project\n\t\t\t? qb.where({\n\t\t\t\tproject_id: this.project.id,\n\t\t\t})\n\t\t\t: qb.match(byProjectSlug(this.project.slug))\n\t\tconst result = await qbWithProjectWhere.getResult(db)\n\n\t\treturn { roles: result.map(it => it.role) }\n\t}\n}\n\nnamespace ProjectRolesByIdentityQuery {\n\texport type Result = {\n\t\troles: string[]\n\t}\n}\n\nexport { ProjectRolesByIdentityQuery }\n"],"names":[],"mappings":";;AAGA,MAAM,oCAAoC,cAAkD;AAAA,EAC3F,YAA6B,SAA6D,YAAoB;AAC7G,UAAA;AAD4B,SAAA,UAAA;AAA6D,SAAA,aAAA;AAAA,EAE1F;AAAA,EAEA,MAAM,MAAM,EAAE,MAAsE;AACnF,QAAI,KAAK,cAAc,SACrB,OAAO,MAAM,EACb,KAAK,oBAAoB,EACzB,MAAM;AAAA,MACN,aAAa,KAAK;AAAA,IAAA,CAClB;AACF,UAAM,qBAAqB,QAAQ,KAAK,UACrC,GAAG,MAAM;AAAA,MACV,YAAY,KAAK,QAAQ;AAAA,IAAA,CACzB,IACC,GAAG,MAAM,cAAc,KAAK,QAAQ,IAAI,CAAC;AAC5C,UAAM,SAAS,MAAM,mBAAmB,UAAU,EAAE;AAEpD,WAAO,EAAE,OAAO,OAAO,IAAI,CAAA,OAAM,GAAG,IAAI,EAAA;AAAA,EACzC;AACD;"}
+{"version":3,"file":"ProjectRolesByIdentityQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/membership/ProjectRolesByIdentityQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\nimport { byProjectSlug } from './ProjectSlugSpecification.js'\n\nclass ProjectRolesByIdentityQuery extends DatabaseQuery<ProjectRolesByIdentityQuery.Result> {\n\tconstructor(private readonly project: { id: string } | { slug: string }, private readonly identityId: string) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectRolesByIdentityQuery.Result> {\n\t\tlet qb = SelectBuilder.create<{ role: string }>() //\n\t\t\t.select('role')\n\t\t\t.from('project_membership')\n\t\t\t.where({\n\t\t\t\tidentity_id: this.identityId,\n\t\t\t})\n\t\tconst qbWithProjectWhere = 'id' in this.project\n\t\t\t? qb.where({\n\t\t\t\tproject_id: this.project.id,\n\t\t\t})\n\t\t\t: qb.match(byProjectSlug(this.project.slug))\n\t\tconst result = await qbWithProjectWhere.getResult(db)\n\n\t\treturn { roles: result.map(it => it.role) }\n\t}\n}\n\nnamespace ProjectRolesByIdentityQuery {\n\texport type Result = {\n\t\troles: string[]\n\t}\n}\n\nexport { ProjectRolesByIdentityQuery }\n"],"names":[],"mappings":";;AAGA,MAAM,oCAAoC,cAAkD;AAAA,EAC3F,YAA6B,SAA6D,YAAoB;AAC7G,UAAA;AAD4B,SAAA,UAAA;AAA6D,SAAA,aAAA;AAAA,EAE1F;AAAA,EAEA,MAAM,MAAM,EAAE,MAAsE;AACnF,QAAI,KAAK,cAAc,SACrB,OAAO,MAAM,EACb,KAAK,oBAAoB,EACzB,MAAM;AAAA,MACN,aAAa,KAAK;AAAA,IAAA,CAClB;AACF,UAAM,qBAAqB,QAAQ,KAAK,UACrC,GAAG,MAAM;AAAA,MACV,YAAY,KAAK,QAAQ;AAAA,IAAA,CACzB,IACC,GAAG,MAAM,cAAc,KAAK,QAAQ,IAAI,CAAC;AAC5C,UAAM,SAAS,MAAM,mBAAmB,UAAU,EAAE;AAEpD,WAAO,EAAE,OAAO,OAAO,IAAI,CAAA,OAAM,GAAG,IAAI,EAAA;AAAA,EACzC;AACD;"}

package/dist/production/src/model/queries/person/PersonByIdPQuery.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"PersonByIdPQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/person/PersonByIdPQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable } from '@contember/database'\nimport { MaybePersonRow } from './types'\nimport { PersonQueryBuilderFactory } from './PersonQueryBuilderFactory'\n\nclass PersonByIdPQuery extends DatabaseQuery<MaybePersonRow> {\n\tconstructor(\n\t\tprivate readonly identityProviderId: string,\n\t\tprivate readonly externalIdentifier: string,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<MaybePersonRow> {\n\t\tconst rows = await PersonQueryBuilderFactory.createPersonQueryBuilder()\n\t\t\t.join('person_identity_provider', 'idp', it => it.columnsEq(['idp', 'person_id'], ['person', 'id']))\n\t\t\t.where({\n\t\t\t\tidentity_provider_id: this.identityProviderId,\n\t\t\t\texternal_identifier: this.externalIdentifier,\n\t\t\t})\n\t\t\t.getResult(db)\n\n\t\treturn this.fetchOneOrNull(rows)\n\t}\n}\n\nexport { PersonByIdPQuery }\n"],"names":["DatabaseQuery","PersonQueryBuilderFactory"],"mappings":";;;;AAIA,MAAM,yBAAyBA,SAAAA,cAA8B;AAAA,EAC5D,YACkB,oBACA,oBAChB;AACD,UAAA;AAHiB,SAAA,qBAAA;AACA,SAAA,qBAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAAkD;AAC/D,UAAM,OAAO,MAAMC,0BAAAA,0BAA0B,yBAAA,EAC3C,KAAK,4BAA4B,OAAO,CAAA,OAAM,GAAG,UAAU,CAAC,OAAO,WAAW,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,EAClG,MAAM;AAAA,MACN,sBAAsB,KAAK;AAAA,MAC3B,qBAAqB,KAAK;AAAA,IAAA,CAC1B,EACA,UAAU,EAAE;AAEd,WAAO,KAAK,eAAe,IAAI;AAAA,EAChC;AACD;;"}
+{"version":3,"file":"PersonByIdPQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/person/PersonByIdPQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable } from '@contember/database'\nimport { MaybePersonRow } from './types.js'\nimport { PersonQueryBuilderFactory } from './PersonQueryBuilderFactory.js'\n\nclass PersonByIdPQuery extends DatabaseQuery<MaybePersonRow> {\n\tconstructor(\n\t\tprivate readonly identityProviderId: string,\n\t\tprivate readonly externalIdentifier: string,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<MaybePersonRow> {\n\t\tconst rows = await PersonQueryBuilderFactory.createPersonQueryBuilder()\n\t\t\t.join('person_identity_provider', 'idp', it => it.columnsEq(['idp', 'person_id'], ['person', 'id']))\n\t\t\t.where({\n\t\t\t\tidentity_provider_id: this.identityProviderId,\n\t\t\t\texternal_identifier: this.externalIdentifier,\n\t\t\t})\n\t\t\t.getResult(db)\n\n\t\treturn this.fetchOneOrNull(rows)\n\t}\n}\n\nexport { PersonByIdPQuery }\n"],"names":["DatabaseQuery","PersonQueryBuilderFactory"],"mappings":";;;;AAIA,MAAM,yBAAyBA,SAAAA,cAA8B;AAAA,EAC5D,YACkB,oBACA,oBAChB;AACD,UAAA;AAHiB,SAAA,qBAAA;AACA,SAAA,qBAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAAkD;AAC/D,UAAM,OAAO,MAAMC,0BAAAA,0BAA0B,yBAAA,EAC3C,KAAK,4BAA4B,OAAO,CAAA,OAAM,GAAG,UAAU,CAAC,OAAO,WAAW,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,EAClG,MAAM;AAAA,MACN,sBAAsB,KAAK;AAAA,MAC3B,qBAAqB,KAAK;AAAA,IAAA,CAC1B,EACA,UAAU,EAAE;AAEd,WAAO,KAAK,eAAe,IAAI;AAAA,EAChC;AACD;;"}