@contember/engine-tenant-api 2.1.0-rc.3 → 2.2.0-alpha.10

package/dist/tests/cases/integration/mocked/sql/getConfigSql.d.ts

@@ -1,3 +1,3 @@
 import { ExpectedQuery } from '@contember/database-tester';
-export declare const getConfigSql: () => ExpectedQuery;
+export declare const getConfigSql: (overrides?: Record<string, unknown>) => ExpectedQuery;
 //# sourceMappingURL=getConfigSql.d.ts.map

package/dist/tests/cases/integration/mocked/sql/getConfigSql.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getConfigSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getConfigSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAE1D,eAAO,MAAM,YAAY,QAAO,aA0B9B,CAAA"}
+{"version":3,"file":"getConfigSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getConfigSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAE1D,eAAO,MAAM,YAAY,eAAe,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAQ,aAkErE,CAAA"}

package/dist/tests/cases/integration/mocked/sql/getCustomRolesSql.d.ts

@@ -0,0 +1,18 @@
+import { ExpectedQuery } from '@contember/database-tester';
+type CustomRoleRow = {
+    id: string;
+    slug: string;
+    description: string | null;
+    grants: unknown;
+    created_at: Date;
+    updated_at: Date;
+};
+/** Request-scoped lookup used when a custom role participates in authorization. */
+export declare const getCustomRolesSql: (response?: CustomRoleRow[]) => ExpectedQuery;
+/** Locked role lookup used before assigning or referencing a custom role. */
+export declare const getCustomRolesForValidationSql: (args: {
+    slugs: string[];
+    response?: CustomRoleRow[];
+}) => ExpectedQuery;
+export {};
+//# sourceMappingURL=getCustomRolesSql.d.ts.map

package/dist/tests/cases/integration/mocked/sql/getCustomRolesSql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getCustomRolesSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getCustomRolesSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,KAAK,aAAa,GAAG;IACpB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,MAAM,EAAE,OAAO,CAAA;IACf,UAAU,EAAE,IAAI,CAAA;IAChB,UAAU,EAAE,IAAI,CAAA;CAChB,CAAA;AAED,mFAAmF;AACnF,eAAO,MAAM,iBAAiB,cAAc,aAAa,EAAE,KAAQ,aAIjE,CAAA;AAEF,6EAA6E;AAC7E,eAAO,MAAM,8BAA8B,SAAU;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAA;CAAE,KAAG,aAIrG,CAAA"}

package/dist/tests/cases/integration/mocked/sql/getIdentityByIdSql.d.ts

@@ -0,0 +1,10 @@
+import { ExpectedQuery } from '@contember/database-tester';
+/**
+ * IdentityQuery used by ApiKeyManager.createSessionApiKey to fetch the
+ * identity's global roles for A19 session-policy resolution.
+ */
+export declare const getIdentityByIdSql: (args: {
+    identityId: string;
+    roles?: string[];
+}) => ExpectedQuery;
+//# sourceMappingURL=getIdentityByIdSql.d.ts.map

package/dist/tests/cases/integration/mocked/sql/getIdentityByIdSql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getIdentityByIdSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getIdentityByIdSql.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAE1D;;;GAGG;AACH,eAAO,MAAM,kBAAkB,SAAU;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,KAAG,aAMlF,CAAA"}

package/dist/tests/cases/integration/mocked/sql/getIdentityProjectMembershipPresenceSql.d.ts

@@ -0,0 +1,3 @@
+import { ExpectedQuery } from '@contember/database-tester';
+export declare const getIdentityProjectMembershipPresenceSql: (identityId: string, hasProjectMemberships?: boolean) => ExpectedQuery;
+//# sourceMappingURL=getIdentityProjectMembershipPresenceSql.d.ts.map

package/dist/tests/cases/integration/mocked/sql/getIdentityProjectMembershipPresenceSql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getIdentityProjectMembershipPresenceSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getIdentityProjectMembershipPresenceSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,eAAO,MAAM,uCAAuC,eACvC,MAAM,sCAEhB,aAID,CAAA"}

package/dist/tests/cases/integration/mocked/sql/getIdentityProjectsSql.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getIdentityProjectsSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getIdentityProjectsSql.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,sBAAsB,GAAY,2BAA2B;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;;;;;;;;;;CAWlH,CAAA"}
+{"version":3,"file":"getIdentityProjectsSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getIdentityProjectsSql.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,sBAAsB,8BAAuC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;;;;;;;;;;CAWlH,CAAA"}

package/dist/tests/cases/integration/mocked/sql/getIdpBySlugSql.d.ts

@@ -1,5 +1,5 @@
 import { ExpectedQuery } from '@contember/database-tester';
-import { IdentityProviderRow } from '../../../../../src/model/queries/idp/types';
+import { IdentityProviderRow } from '../../../../../src/model/queries/idp/types.js';
 export declare const getIdpBySlugSql: (args: {
     slug: string;
     response: null | IdentityProviderRow;

package/dist/tests/cases/integration/mocked/sql/getIdpBySlugSql.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getIdpBySlugSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getIdpBySlugSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAE1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAA;AAEhF,eAAO,MAAM,eAAe,GAAI,MAAM;IACrC,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,IAAI,GAAG,mBAAmB,CAAA;CACpC,KAAG,aAWF,CAAA"}
+{"version":3,"file":"getIdpBySlugSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getIdpBySlugSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAE1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,+CAA+C,CAAA;AAEnF,eAAO,MAAM,eAAe,SAAU;IACrC,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,IAAI,GAAG,mBAAmB,CAAA;CACpC,KAAG,aAWF,CAAA"}

package/dist/tests/cases/integration/mocked/sql/getIdpSessionByApiKeySql.d.ts

@@ -0,0 +1,20 @@
+import { ExpectedQuery } from '@contember/database-tester';
+/**
+ * Mocks {@link IdpSessionByApiKeyQuery} — the lookup the sign-out flow runs to discover whether a
+ * session was federated (and which IdP) so it can build an RP-initiated logout URL (A10).
+ */
+export declare const getIdpSessionByApiKeySql: (args: {
+    apiKeyId: string;
+    response: null | {
+        id: string;
+        identityProviderId: string;
+        providerType: string;
+        providerConfiguration: Record<string, unknown>;
+        providerDisabledAt?: Date | null;
+        idpSessionId?: string | null;
+        /** Encrypted token blob; pair with a `decrypt` provider override to surface tokens. */
+        tokens?: Buffer | null;
+        tokensVersion?: number | null;
+    };
+}) => ExpectedQuery;
+//# sourceMappingURL=getIdpSessionByApiKeySql.d.ts.map

package/dist/tests/cases/integration/mocked/sql/getIdpSessionByApiKeySql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getIdpSessionByApiKeySql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getIdpSessionByApiKeySql.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAE1D;;;GAGG;AACH,eAAO,MAAM,wBAAwB,SAAU;IAC9C,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,IAAI,GAAG;QAChB,EAAE,EAAE,MAAM,CAAA;QACV,kBAAkB,EAAE,MAAM,CAAA;QAC1B,YAAY,EAAE,MAAM,CAAA;QACpB,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC9C,kBAAkB,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;QAChC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QAC5B,uFAAuF;QACvF,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACtB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAC7B,CAAA;CACD,KAAG,aAiCF,CAAA"}

package/dist/tests/cases/integration/mocked/sql/getMailTemplateSql.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getMailTemplateSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getMailTemplateSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAE1D,eAAO,MAAM,kBAAkB,GAC9B,MAAM;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,KAC9C,aAyBA,CAAA"}
+{"version":3,"file":"getMailTemplateSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getMailTemplateSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAE1D,eAAO,MAAM,kBAAkB,SACxB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,KAC9C,aAyBA,CAAA"}

package/dist/tests/cases/integration/mocked/sql/getNextLoginAttemptSql.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getNextLoginAttemptSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getNextLoginAttemptSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAE1D,eAAO,MAAM,sBAAsB,GAAI,OAAO,MAAM,KAAG,aAiBrD,CAAA"}
+{"version":3,"file":"getNextLoginAttemptSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getNextLoginAttemptSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAE1D,eAAO,MAAM,sBAAsB,UAAW,MAAM,KAAG,aAqBrD,CAAA"}

package/dist/tests/cases/integration/mocked/sql/getNextMailAttemptSql.d.ts

@@ -0,0 +1,8 @@
+import { ExpectedQuery } from '@contember/database-tester';
+export declare const getNextMailAttemptSql: (args: {
+    email: string;
+    initType: string;
+    completionType: string;
+    response?: ExpectedQuery['response'];
+}) => ExpectedQuery;
+//# sourceMappingURL=getNextMailAttemptSql.d.ts.map

package/dist/tests/cases/integration/mocked/sql/getNextMailAttemptSql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getNextMailAttemptSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getNextMailAttemptSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAE1D,eAAO,MAAM,qBAAqB,SAAU;IAC3C,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,aAAa,CAAC,UAAU,CAAC,CAAA;CACpC,KAAG,aAqBF,CAAA"}

package/dist/tests/cases/integration/mocked/sql/getPersonByEmailSql.d.ts

@@ -7,6 +7,12 @@ export declare const getPersonByEmailSql: (args: {
         identityId: string;
         roles: string[];
         otpUri?: string;
+        otpPendingUri?: string;
+        emailOtpEnabled?: boolean;
+        mfaGraceUntil?: Date | null;
+        emailVerifiedAt?: Date | null;
+        emailVerificationRequired?: boolean;
+        disabledAt?: Date | null;
     };
 }) => ExpectedQuery;
 //# sourceMappingURL=getPersonByEmailSql.d.ts.map

package/dist/tests/cases/integration/mocked/sql/getPersonByEmailSql.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getPersonByEmailSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getPersonByEmailSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,eAAO,MAAM,mBAAmB,GAAI,MAAM;IACzC,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,IAAI,GAAG;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAC7G,KAAG,aAwBF,CAAA"}
+{"version":3,"file":"getPersonByEmailSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getPersonByEmailSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAI1D,eAAO,MAAM,mBAAmB,SAAU;IACzC,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EACL,IAAI,GACJ;QACD,QAAQ,EAAE,MAAM,CAAA;QAChB,QAAQ,EAAE,MAAM,CAAA;QAChB,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,EAAE,MAAM,EAAE,CAAA;QACf,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,eAAe,CAAC,EAAE,OAAO,CAAA;QACzB,aAAa,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;QAC3B,eAAe,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;QAC7B,yBAAyB,CAAC,EAAE,OAAO,CAAA;QACnC,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;KACxB,CAAA;CACF,KAAG,aAkCF,CAAA"}

package/dist/tests/cases/integration/mocked/sql/getPersonByIdSql.d.ts

@@ -8,6 +8,12 @@ export declare const getPersonByIdSql: (args: {
         roles: string[];
         email: string;
         name?: string;
+        otpUri?: string;
+        disabledAt?: Date | null;
+        passwordlessEnabled?: boolean | null;
+        emailVerifiedAt?: Date | null;
+        emailVerificationRequired?: boolean;
+        emailOtpEnabled?: boolean;
     };
 }) => ExpectedQuery;
 //# sourceMappingURL=getPersonByIdSql.d.ts.map

package/dist/tests/cases/integration/mocked/sql/getPersonByIdSql.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getPersonByIdSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getPersonByIdSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,eAAO,MAAM,gBAAgB,GAAI,MAAM;IACtC,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACnH,KAAG,aAmBF,CAAA"}
+{"version":3,"file":"getPersonByIdSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getPersonByIdSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,eAAO,MAAM,gBAAgB,SAAU;IACtC,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE;QACT,QAAQ,EAAE,MAAM,CAAA;QAChB,QAAQ,EAAE,MAAM,CAAA;QAChB,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,EAAE,MAAM,EAAE,CAAA;QACf,KAAK,EAAE,MAAM,CAAA;QACb,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;QACxB,mBAAmB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;QACpC,eAAe,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;QAC7B,yBAAyB,CAAC,EAAE,OAAO,CAAA;QACnC,eAAe,CAAC,EAAE,OAAO,CAAA;KACzB,CAAA;CACD,KAAG,aA2BF,CAAA"}

package/dist/tests/cases/integration/mocked/sql/getPersonByIdentity.d.ts

@@ -8,6 +8,10 @@ export declare const getPersonByIdentity: (args: {
         email: string;
         name?: string;
         otpUri?: string;
+        otpPendingUri?: string;
+        emailOtpEnabled?: boolean;
+        emailVerifiedAt?: Date | null;
+        emailVerificationRequired?: boolean;
     };
 }) => ExpectedQuery;
 //# sourceMappingURL=getPersonByIdentity.d.ts.map

package/dist/tests/cases/integration/mocked/sql/getPersonByIdentity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getPersonByIdentity.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getPersonByIdentity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,eAAO,MAAM,mBAAmB,GAAI,MAAM;IACzC,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,IAAI,GAAG;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACvH,KAAG,aAsBF,CAAA"}
+{"version":3,"file":"getPersonByIdentity.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getPersonByIdentity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAI1D,eAAO,MAAM,mBAAmB,SAAU;IACzC,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EACL,IAAI,GACJ;QACD,QAAQ,EAAE,MAAM,CAAA;QAChB,QAAQ,EAAE,MAAM,CAAA;QAChB,KAAK,EAAE,MAAM,EAAE,CAAA;QACf,KAAK,EAAE,MAAM,CAAA;QACb,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,eAAe,CAAC,EAAE,OAAO,CAAA;QACzB,eAAe,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;QAC7B,yBAAyB,CAAC,EAAE,OAAO,CAAA;KACnC,CAAA;CACF,KAAG,aA8BF,CAAA"}

package/dist/tests/cases/integration/mocked/sql/getPersonByIdpSql.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getPersonByIdpSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getPersonByIdpSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,eAAO,MAAM,iBAAiB,GAAI,MAAM;IACvC,kBAAkB,EAAE,MAAM,CAAA;IAC1B,kBAAkB,EAAE,MAAM,CAAA;IAC1B,QAAQ,EAAE,IAAI,GAAG;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAC7H,KAAG,aAyBF,CAAA"}
+{"version":3,"file":"getPersonByIdpSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getPersonByIdpSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAI1D,eAAO,MAAM,iBAAiB,SAAU;IACvC,kBAAkB,EAAE,MAAM,CAAA;IAC1B,kBAAkB,EAAE,MAAM,CAAA;IAC1B,QAAQ,EAAE,IAAI,GAAG;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAC7H,KAAG,aA4BF,CAAA"}

package/dist/tests/cases/integration/mocked/sql/getPersonsByIdentitySql.d.ts

@@ -0,0 +1,12 @@
+import { ExpectedQuery } from '@contember/database-tester';
+export declare const getPersonsByIdentitySql: (args: {
+    identityIds: readonly string[];
+    response: readonly {
+        personId: string;
+        identityId: string;
+        email: string;
+        password?: string;
+        roles?: readonly string[];
+    }[];
+}) => ExpectedQuery;
+//# sourceMappingURL=getPersonsByIdentitySql.d.ts.map

package/dist/tests/cases/integration/mocked/sql/getPersonsByIdentitySql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getPersonsByIdentitySql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getPersonsByIdentitySql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,eAAO,MAAM,uBAAuB,SAAU;IAC7C,WAAW,EAAE,SAAS,MAAM,EAAE,CAAA;IAC9B,QAAQ,EAAE,SAAS;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,EAAE,CAAA;CAC1H,KAAG,aAiBF,CAAA"}

package/dist/tests/cases/integration/mocked/sql/getProjectBySlugSql.d.ts

@@ -1,7 +1,7 @@
 import { ExpectedQuery } from '@contember/database-tester';
-import { Project } from '../../../../../src';
+import { Project } from '../../../../../src/index.js';
 export declare const getProjectBySlugSql: (args: {
     projectSlug: string;
-    response: Project;
+    response: Project | null;
 }) => ExpectedQuery;
 //# sourceMappingURL=getProjectBySlugSql.d.ts.map

package/dist/tests/cases/integration/mocked/sql/getProjectBySlugSql.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getProjectBySlugSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getProjectBySlugSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAE1D,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAE5C,eAAO,MAAM,mBAAmB,GAAI,MAAM;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,KAAG,aAQrF,CAAA"}
+{"version":3,"file":"getProjectBySlugSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getProjectBySlugSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAE1D,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAA;AAErD,eAAO,MAAM,mBAAmB,SAAU;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAA;CAAE,KAAG,aAQ5F,CAAA"}

package/dist/tests/cases/integration/mocked/sql/getProjectMembershipSql.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getProjectMembershipSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getProjectMembershipSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAI1D,eAAO,MAAM,uBAAuB,GACnC,MAAM;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EAC/C,WAAW,OAAO,KAChB,aAQD,CAAA"}
+{"version":3,"file":"getProjectMembershipSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getProjectMembershipSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAI1D,eAAO,MAAM,uBAAuB,SAC7B;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,aACpC,OAAO,KAChB,aAQD,CAAA"}

package/dist/tests/cases/integration/mocked/sql/listApiKeysSql.d.ts

@@ -0,0 +1,18 @@
+import { ExpectedQuery } from '@contember/database-tester';
+export interface ApiKeyListResponseRow {
+    id: string;
+    identityId: string;
+    description?: string | null;
+    disabledAt?: Date | null;
+    createdAt: Date;
+    lastUsedAt?: Date | null;
+    expiresAt?: Date | null;
+}
+export declare const projectApiKeysSql: (args: {
+    projectId: string;
+    rows: ApiKeyListResponseRow[];
+}) => ExpectedQuery;
+export declare const globalApiKeysSql: (args: {
+    rows: ApiKeyListResponseRow[];
+}) => ExpectedQuery;
+//# sourceMappingURL=listApiKeysSql.d.ts.map

package/dist/tests/cases/integration/mocked/sql/listApiKeysSql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"listApiKeysSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/listApiKeysSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,MAAM,WAAW,qBAAqB;IACrC,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,IAAI,CAAA;IACf,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;IACxB,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;CACvB;AAmBD,eAAO,MAAM,iBAAiB,SAAU;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,qBAAqB,EAAE,CAAA;CAAE,KAAG,aAM7F,CAAA;AAEF,eAAO,MAAM,gBAAgB,SAAU;IAAE,IAAI,EAAE,qBAAqB,EAAE,CAAA;CAAE,KAAG,aAMzE,CAAA"}

package/dist/tests/cases/integration/mocked/sql/listPersonsSql.d.ts

@@ -0,0 +1,21 @@
+import { ExpectedQuery } from '@contember/database-tester';
+export interface ListPersonsResponseRow {
+    personId: string;
+    identityId: string;
+    email: string;
+    name?: string;
+    emailOtpEnabled?: boolean;
+    passwordlessEnabled?: boolean | null;
+    disabledAt?: Date | null;
+}
+/**
+ * Slim person listing emitted by `PersonsQuery` — no `password_hash` / TOTP
+ * secrets, capped to `limit 100 offset 0` by default. Supports the `email` and
+ * `identityIds` (scoped) filter variants.
+ */
+export declare const listPersonsSql: (args: {
+    emailFilter?: string;
+    identityIds?: string[];
+    rows: ListPersonsResponseRow[];
+}) => ExpectedQuery;
+//# sourceMappingURL=listPersonsSql.d.ts.map

package/dist/tests/cases/integration/mocked/sql/listPersonsSql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"listPersonsSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/listPersonsSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,MAAM,WAAW,sBAAsB;IACtC,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,mBAAmB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IACpC,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;CACxB;AAQD;;;;GAIG;AACH,eAAO,MAAM,cAAc,SAAU;IACpC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,IAAI,EAAE,sBAAsB,EAAE,CAAA;CAC9B,KAAG,aA6BH,CAAA"}

package/dist/tests/cases/integration/mocked/sql/listProjectSecretsSql.d.ts

@@ -0,0 +1,11 @@
+import { ExpectedQuery } from '@contember/database-tester';
+export interface ProjectSecretResponseRow {
+    key: string;
+    createdAt: Date;
+    updatedAt: Date;
+}
+export declare const listProjectSecretsSql: (args: {
+    projectId: string;
+    rows: ProjectSecretResponseRow[];
+}) => ExpectedQuery;
+//# sourceMappingURL=listProjectSecretsSql.d.ts.map

package/dist/tests/cases/integration/mocked/sql/listProjectSecretsSql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"listProjectSecretsSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/listProjectSecretsSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,MAAM,WAAW,wBAAwB;IACxC,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,IAAI,CAAA;IACf,SAAS,EAAE,IAAI,CAAA;CACf;AAED,eAAO,MAAM,qBAAqB,SAAU;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,wBAAwB,EAAE,CAAA;CAAE,KAAG,aAapG,CAAA"}

package/dist/tests/cases/integration/mocked/sql/listSessionsSql.d.ts

@@ -0,0 +1,18 @@
+import { ExpectedQuery } from '@contember/database-tester';
+export interface SessionRow {
+    id: string;
+    created_at: Date;
+    expires_at: Date | null;
+    last_used_at: Date | null;
+    last_ip: string | null;
+    last_user_agent: string | null;
+    created_ip: string | null;
+    created_user_agent: string | null;
+    trust_forwarded_info: boolean;
+}
+export declare const listSessionsSql: (args: {
+    identityId: string;
+    now?: Date;
+    rows: SessionRow[];
+}) => ExpectedQuery;
+//# sourceMappingURL=listSessionsSql.d.ts.map

package/dist/tests/cases/integration/mocked/sql/listSessionsSql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"listSessionsSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/listSessionsSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,MAAM,WAAW,UAAU;IAC1B,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,IAAI,CAAA;IAChB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAA;IACvB,YAAY,EAAE,IAAI,GAAG,IAAI,CAAA;IACzB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,oBAAoB,EAAE,OAAO,CAAA;CAC7B;AAED,eAAO,MAAM,eAAe,SAAU;IACrC,UAAU,EAAE,MAAM,CAAA;IAClB,GAAG,CAAC,EAAE,IAAI,CAAA;IACV,IAAI,EAAE,UAAU,EAAE,CAAA;CAClB,KAAG,aAkBF,CAAA"}

package/dist/tests/cases/integration/mocked/sql/localAuthDisablingIdpsSql.d.ts

@@ -0,0 +1,10 @@
+import { ExpectedQuery } from '@contember/database-tester';
+/**
+ * The `LocalAuthDisablingIdpsQuery` lookup every local authentication path runs.
+ * `slugs` defaults to none, i.e. local authentication stays available.
+ */
+export declare const localAuthDisablingIdpsSql: (args: {
+    personId: string;
+    slugs?: string[];
+}) => ExpectedQuery;
+//# sourceMappingURL=localAuthDisablingIdpsSql.d.ts.map

package/dist/tests/cases/integration/mocked/sql/localAuthDisablingIdpsSql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"localAuthDisablingIdpsSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/localAuthDisablingIdpsSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D;;;GAGG;AACH,eAAO,MAAM,yBAAyB,SAAU;IAC/C,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;CAChB,KAAG,aAUF,CAAA"}

package/dist/tests/cases/integration/mocked/sql/loginHistorySql.d.ts

@@ -0,0 +1,17 @@
+import { ExpectedQuery } from '@contember/database-tester';
+export type PriorLoginRow = {
+    geoCountry?: string | null;
+    deviceFingerprint?: string | null;
+    ip?: string | null;
+};
+/**
+ * Mocks `LoginRiskAnalyzer.analyze`'s history lookup: the person's last N
+ * successful interactive sign-ins (password / IdP / passwordless), newest first.
+ * Only runs when anomaly detection is enabled in config.
+ */
+export declare const getLoginHistorySql: (args: {
+    personId: string;
+    limit?: number;
+    rows?: PriorLoginRow[];
+}) => ExpectedQuery;
+//# sourceMappingURL=loginHistorySql.d.ts.map

package/dist/tests/cases/integration/mocked/sql/loginHistorySql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loginHistorySql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/loginHistorySql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,MAAM,MAAM,aAAa,GAAG;IAC3B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAClB,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,SAAU;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,aAAa,EAAE,CAAA;CAAE,KAAG,aActG,CAAA"}

package/dist/tests/cases/integration/mocked/sql/patchVariablesSql.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"patchVariablesSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/patchVariablesSql.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAE1D,eAAO,MAAM,iBAAiB,GAAI,MAAM;IACvC,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,EAAE,EAAE,MAAM,CAAA;CACV,KAAG,aAkCF,CAAA"}
+{"version":3,"file":"patchVariablesSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/patchVariablesSql.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAE1D,eAAO,MAAM,iBAAiB,SAAU;IACvC,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,EAAE,EAAE,MAAM,CAAA;CACV,KAAG,aAkCF,CAAA"}

package/dist/tests/cases/integration/mocked/sql/personIdentityProvidersSql.d.ts

@@ -0,0 +1,32 @@
+import { ExpectedQuery } from '@contember/database-tester';
+export interface PersonIdpConnectionRow {
+    id: string;
+    createdAt: Date;
+    externalIdentifier: string;
+    slug: string;
+    type: string;
+    disabledAt?: Date | null;
+    disableLocalAuthentication?: boolean;
+}
+export declare const getPersonIdentityProvidersSql: (args: {
+    personId: string;
+    response: PersonIdpConnectionRow[];
+}) => ExpectedQuery;
+/**
+ * Person-by-identity lookup with explicit control over the auth-method columns
+ * (`password_hash`, `passwordless_enabled`) that the disconnect lock-out check
+ * reads. The generic `getPersonByIdentity` helper always returns a non-null
+ * password hash, which would mask the lock-out path.
+ */
+export declare const getPersonByIdentityForIdp: (args: {
+    identityId: string;
+    personId: string;
+    passwordHash: string | null;
+    passwordlessEnabled?: boolean | null;
+}) => ExpectedQuery;
+export declare const disconnectPersonIdentityProviderSql: (args: {
+    personId: string;
+    personIdentityProviderId: string;
+    affectedRows?: number;
+}) => ExpectedQuery;
+//# sourceMappingURL=personIdentityProvidersSql.d.ts.map

package/dist/tests/cases/integration/mocked/sql/personIdentityProvidersSql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"personIdentityProvidersSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/personIdentityProvidersSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,MAAM,WAAW,sBAAsB;IACtC,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,IAAI,CAAA;IACf,kBAAkB,EAAE,MAAM,CAAA;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;IACxB,0BAA0B,CAAC,EAAE,OAAO,CAAA;CACpC;AAED,eAAO,MAAM,6BAA6B,SAAU;IACnD,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,sBAAsB,EAAE,CAAA;CAClC,KAAG,aAmBF,CAAA;AAEF;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,SAAU;IAC/C,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,mBAAmB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;CACpC,KAAG,aA8BF,CAAA;AAEF,eAAO,MAAM,mCAAmC,SAAU;IACzD,QAAQ,EAAE,MAAM,CAAA;IAChB,wBAAwB,EAAE,MAAM,CAAA;IAChC,YAAY,CAAC,EAAE,MAAM,CAAA;CACrB,KAAG,aAIF,CAAA"}

package/dist/tests/cases/integration/mocked/sql/removeMembershipSql.d.ts

@@ -0,0 +1,8 @@
+import { ExpectedQuery } from '@contember/database-tester';
+/** RemoveProjectMembershipCommand — delete a single (project, identity, role) membership. */
+export declare const removeMembershipSql: (args: {
+    projectId: string;
+    identityId: string;
+    role: string;
+}) => ExpectedQuery;
+//# sourceMappingURL=removeMembershipSql.d.ts.map

package/dist/tests/cases/integration/mocked/sql/removeMembershipSql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"removeMembershipSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/removeMembershipSql.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAE1D,6FAA6F;AAC7F,eAAO,MAAM,mBAAmB,SAAU;IACzC,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;CACZ,KAAG,aAKF,CAAA"}

package/dist/tests/cases/integration/mocked/sql/selectMembershipsSql.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"selectMembershipsSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/selectMembershipsSql.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAC1D,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AAEvC,eAAO,MAAM,oBAAoB,GAAI,MAAM;IAC1C,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,mBAAmB,EAAE,GAAG,CAAC,UAAU,EAAE,CAAA;CACrC,KAAG,aAcF,CAAA"}
+{"version":3,"file":"selectMembershipsSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/selectMembershipsSql.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAC1D,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AAEvC,eAAO,MAAM,oBAAoB,SAAU;IAC1C,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,mBAAmB,EAAE,GAAG,CAAC,UAAU,EAAE,CAAA;CACrC,KAAG,aAcF,CAAA"}

package/dist/tests/cases/integration/mocked/sql/setEmailOtpEnabledSql.d.ts

@@ -0,0 +1,7 @@
+import { ExpectedQuery } from '@contember/database-tester';
+/** Mocks SetEmailOtpEnabledCommand: upsert person_mfa.email_otp_enabled. */
+export declare const setEmailOtpEnabledSql: (args: {
+    personId: string;
+    enabled: boolean;
+}) => ExpectedQuery;
+//# sourceMappingURL=setEmailOtpEnabledSql.d.ts.map

package/dist/tests/cases/integration/mocked/sql/setEmailOtpEnabledSql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setEmailOtpEnabledSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/setEmailOtpEnabledSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,4EAA4E;AAC5E,eAAO,MAAM,qBAAqB,SAAU;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,KAAG,aAKnF,CAAA"}

package/dist/tests/cases/integration/mocked/sql/sqlTransaction.d.ts

@@ -1,3 +1,9 @@
 import { ExpectedQuery } from '@contember/database-tester';
 export declare const sqlTransaction: (...queries: ExpectedQuery[]) => ExpectedQuery[];
+/**
+ * A nested `client.transaction()` inside an open transaction. Postgres runs it as a savepoint; the
+ * connection mock renders every transaction as BEGIN/COMMIT and sets no isolation level for it.
+ */
+export declare const sqlNestedTransaction: (...queries: ExpectedQuery[]) => ExpectedQuery[];
+export declare const sqlReadCommittedTransaction: (...queries: ExpectedQuery[]) => ExpectedQuery[];
 //# sourceMappingURL=sqlTransaction.d.ts.map

package/dist/tests/cases/integration/mocked/sql/sqlTransaction.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sqlTransaction.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/sqlTransaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAE1D,eAAO,MAAM,cAAc,GAAI,GAAG,SAAS,aAAa,EAAE,KAAG,aAAa,EAczE,CAAA"}
+{"version":3,"file":"sqlTransaction.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/sqlTransaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAE1D,eAAO,MAAM,cAAc,eAAgB,aAAa,EAAE,KAAG,aAAa,EAczE,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,oBAAoB,eAAgB,aAAa,EAAE,KAAG,aAAa,EAU/E,CAAA;AAED,eAAO,MAAM,2BAA2B,eAAgB,aAAa,EAAE,KAAG,aAAa,EAUtF,CAAA"}

package/dist/tests/cases/integration/mocked/sql/updatePesonNameSql.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"updatePesonNameSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/updatePesonNameSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,eAAO,MAAM,0BAA0B,GAAI,MAAM;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,KAAG,aAM3F,CAAA;AAEF,eAAO,MAAM,2BAA2B,GAAI,MAAM;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,KAAG,aAM7F,CAAA;AAEF,eAAO,MAAM,kCAAkC,GAAI,MAAM;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,KAAG,aAMzH,CAAA"}
+{"version":3,"file":"updatePesonNameSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/updatePesonNameSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,eAAO,MAAM,0BAA0B,SAAU;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,KAAG,aAM3F,CAAA;AAIF,eAAO,MAAM,2BAA2B,SAAU;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,KAAG,aAM7F,CAAA;AAEF,eAAO,MAAM,kCAAkC,SAAU;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,KAAG,aAMzH,CAAA"}

package/dist/tests/cases/integration/mocked/sql/updatePesonPasswordSql.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"updatePesonPasswordSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/updatePesonPasswordSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,eAAO,MAAM,uBAAuB,GAAI,MAAM;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,KAAG,aAMrF,CAAA"}
+{"version":3,"file":"updatePesonPasswordSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/updatePesonPasswordSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,eAAO,MAAM,uBAAuB,SAAU;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,KAAG,aAMrF,CAAA"}

package/dist/tests/cases/integration/mocked/trustForwardedClientInfo.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=trustForwardedClientInfo.test.d.ts.map

package/dist/tests/cases/integration/mocked/trustForwardedClientInfo.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trustForwardedClientInfo.test.d.ts","sourceRoot":"","sources":["../../../../../tests/cases/integration/mocked/trustForwardedClientInfo.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/integration/mocked/verifyEmailMutation.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=verifyEmailMutation.test.d.ts.map

package/dist/tests/cases/integration/mocked/verifyEmailMutation.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyEmailMutation.test.d.ts","sourceRoot":"","sources":["../../../../../tests/cases/integration/mocked/verifyEmailMutation.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/apiKey/createSessionApiKeyPolicy.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=createSessionApiKeyPolicy.test.d.ts.map

package/dist/tests/cases/unit/apiKey/createSessionApiKeyPolicy.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createSessionApiKeyPolicy.test.d.ts","sourceRoot":"","sources":["../../../../../tests/cases/unit/apiKey/createSessionApiKeyPolicy.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/apiKey/prolongApiKeyCommand.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=prolongApiKeyCommand.test.d.ts.map

package/dist/tests/cases/unit/apiKey/prolongApiKeyCommand.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prolongApiKeyCommand.test.d.ts","sourceRoot":"","sources":["../../../../../tests/cases/unit/apiKey/prolongApiKeyCommand.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/apiKey/unpersistedApiKeyManager.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=unpersistedApiKeyManager.test.d.ts.map

package/dist/tests/cases/unit/apiKey/unpersistedApiKeyManager.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unpersistedApiKeyManager.test.d.ts","sourceRoot":"","sources":["../../../../../tests/cases/unit/apiKey/unpersistedApiKeyManager.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/apiKey/verifyAndProlongIdle.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=verifyAndProlongIdle.test.d.ts.map

package/dist/tests/cases/unit/apiKey/verifyAndProlongIdle.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyAndProlongIdle.test.d.ts","sourceRoot":"","sources":["../../../../../tests/cases/unit/apiKey/verifyAndProlongIdle.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/apiKey/verifyAndProlongReplica.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=verifyAndProlongReplica.test.d.ts.map

package/dist/tests/cases/unit/apiKey/verifyAndProlongReplica.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyAndProlongReplica.test.d.ts","sourceRoot":"","sources":["../../../../../tests/cases/unit/apiKey/verifyAndProlongReplica.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/authLogBaselineWrite.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=authLogBaselineWrite.test.d.ts.map

package/dist/tests/cases/unit/authLogBaselineWrite.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authLogBaselineWrite.test.d.ts","sourceRoot":"","sources":["../../../../tests/cases/unit/authLogBaselineWrite.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/authPolicyResolver.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=authPolicyResolver.test.d.ts.map

package/dist/tests/cases/unit/authPolicyResolver.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authPolicyResolver.test.d.ts","sourceRoot":"","sources":["../../../../tests/cases/unit/authPolicyResolver.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/backupCodeManager.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=backupCodeManager.test.d.ts.map

package/dist/tests/cases/unit/backupCodeManager.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupCodeManager.test.d.ts","sourceRoot":"","sources":["../../../../tests/cases/unit/backupCodeManager.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/captchaProviders.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=captchaProviders.test.d.ts.map

package/dist/tests/cases/unit/captchaProviders.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"captchaProviders.test.d.ts","sourceRoot":"","sources":["../../../../tests/cases/unit/captchaProviders.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/captchaValidator.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=captchaValidator.test.d.ts.map

package/dist/tests/cases/unit/captchaValidator.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"captchaValidator.test.d.ts","sourceRoot":"","sources":["../../../../tests/cases/unit/captchaValidator.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/customRoleAuthorizator.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=customRoleAuthorizator.test.d.ts.map

package/dist/tests/cases/unit/customRoleAuthorizator.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"customRoleAuthorizator.test.d.ts","sourceRoot":"","sources":["../../../../tests/cases/unit/customRoleAuthorizator.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/customRolePermissions.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=customRolePermissions.test.d.ts.map