@contember/engine-tenant-api 2.1.0-rc.3 → 2.2.0-alpha.10

package/dist/types/model/commands/configuration/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/configuration/index.ts"],"names":[],"mappings":"AAAA,cAAc,8BAA8B,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/configuration/index.ts"],"names":[],"mappings":"AAAA,cAAc,iCAAiC,CAAA"}

package/dist/types/model/commands/customRole/CreateCustomRoleCommand.d.ts

@@ -0,0 +1,12 @@
+import { Command } from '../Command.js';
+/** Inserts a new `custom_role` row. Returns the generated id. */
+export declare class CreateCustomRoleCommand implements Command<string> {
+    private readonly values;
+    constructor(values: {
+        slug: string;
+        description: string | null;
+        grants: unknown;
+    });
+    execute({ db, providers }: Command.Args): Promise<string>;
+}
+//# sourceMappingURL=CreateCustomRoleCommand.d.ts.map

package/dist/types/model/commands/customRole/CreateCustomRoleCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateCustomRoleCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/customRole/CreateCustomRoleCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAGvC,iEAAiE;AACjE,qBAAa,uBAAwB,YAAW,OAAO,CAAC,MAAM,CAAC;IAE7D,OAAO,CAAC,QAAQ,CAAC,MAAM;IADxB,YACkB,MAAM,EAAE;QACxB,IAAI,EAAE,MAAM,CAAA;QACZ,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;QAC1B,MAAM,EAAE,OAAO,CAAA;KACf,EACE;IAEE,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAe9D;CACD"}

package/dist/types/model/commands/customRole/DeleteCustomRoleCommand.d.ts

@@ -0,0 +1,13 @@
+import { Command } from '../Command.js';
+/**
+ * Removes a role definition outright. The slug becomes reusable; the audit log
+ * (`custom_role_change`) is what preserves the trace of what it used to grant.
+ * Callers must strip the slug from every identity in the same transaction —
+ * see `RemoveCustomRoleAssignmentsCommand`.
+ */
+export declare class DeleteCustomRoleCommand implements Command<boolean> {
+    private readonly slug;
+    constructor(slug: string);
+    execute({ db }: Command.Args): Promise<boolean>;
+}
+//# sourceMappingURL=DeleteCustomRoleCommand.d.ts.map

package/dist/types/model/commands/customRole/DeleteCustomRoleCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeleteCustomRoleCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/customRole/DeleteCustomRoleCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAGvC;;;;;GAKG;AACH,qBAAa,uBAAwB,YAAW,OAAO,CAAC,OAAO,CAAC;IACnD,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAjC,YAA6B,IAAI,EAAE,MAAM,EAAI;IAEvC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAMpD;CACD"}

package/dist/types/model/commands/customRole/RemoveCustomRoleAssignmentsCommand.d.ts

@@ -0,0 +1,8 @@
+import { Command } from '../Command.js';
+/** Returns the identities the slug was stripped from, so the delete can audit who actually lost it. */
+export declare class RemoveCustomRoleAssignmentsCommand implements Command<string[]> {
+    private readonly slug;
+    constructor(slug: string);
+    execute({ db }: Command.Args): Promise<string[]>;
+}
+//# sourceMappingURL=RemoveCustomRoleAssignmentsCommand.d.ts.map

package/dist/types/model/commands/customRole/RemoveCustomRoleAssignmentsCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RemoveCustomRoleAssignmentsCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/customRole/RemoveCustomRoleAssignmentsCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAGvC,uGAAuG;AACvG,qBAAa,kCAAmC,YAAW,OAAO,CAAC,MAAM,EAAE,CAAC;IAC/D,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAjC,YAA6B,IAAI,EAAE,MAAM,EACxC;IAEK,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAUrD;CACD"}

package/dist/types/model/commands/customRole/UpdateCustomRoleCommand.d.ts

@@ -0,0 +1,16 @@
+import { Command } from '../Command.js';
+/**
+ * Updates an existing `custom_role` row. Only the supplied fields are written
+ * (an `undefined` field is left untouched; an explicit `null` description clears it).
+ * `updated_at` is always bumped. Returns whether a row was affected.
+ */
+export declare class UpdateCustomRoleCommand implements Command<boolean> {
+    private readonly slug;
+    private readonly values;
+    constructor(slug: string, values: {
+        description?: string | null;
+        grants?: unknown;
+    });
+    execute({ db, providers }: Command.Args): Promise<boolean>;
+}
+//# sourceMappingURL=UpdateCustomRoleCommand.d.ts.map

package/dist/types/model/commands/customRole/UpdateCustomRoleCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UpdateCustomRoleCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/customRole/UpdateCustomRoleCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAGvC;;;;GAIG;AACH,qBAAa,uBAAwB,YAAW,OAAO,CAAC,OAAO,CAAC;IAE9D,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFxB,YACkB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE;QACxB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QAC3B,MAAM,CAAC,EAAE,OAAO,CAAA;KAChB,EACE;IAEE,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAW/D;CACD"}

package/dist/types/model/commands/customRole/index.d.ts

@@ -0,0 +1,5 @@
+export * from './CreateCustomRoleCommand.js';
+export * from './DeleteCustomRoleCommand.js';
+export * from './RemoveCustomRoleAssignmentsCommand.js';
+export * from './UpdateCustomRoleCommand.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/types/model/commands/customRole/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/customRole/index.ts"],"names":[],"mappings":"AAAA,cAAc,8BAA8B,CAAA;AAC5C,cAAc,8BAA8B,CAAA;AAC5C,cAAc,yCAAyC,CAAA;AACvD,cAAc,8BAA8B,CAAA"}

package/dist/types/model/commands/identity/CreateIdentityCommand.d.ts

@@ -1,4 +1,4 @@
-import { Command } from '../Command';
+import { Command } from '../Command.js';
 export declare class CreateIdentityCommand implements Command<string> {
     private readonly roles;
     private readonly description?;

package/dist/types/model/commands/identity/CreateIdentityCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CreateIdentityCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/identity/CreateIdentityCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAGpC,qBAAa,qBAAsB,YAAW,OAAO,CAAC,MAAM,CAAC;IAChD,OAAO,CAAC,QAAQ,CAAC,KAAK;IAAqB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAAvD,KAAK,EAAE,SAAS,MAAM,EAAE,EAAmB,WAAW,CAAC,EAAE,MAAM,YAAA;IAE/E,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;CAetE"}
+{"version":3,"file":"CreateIdentityCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/identity/CreateIdentityCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAGvC,qBAAa,qBAAsB,YAAW,OAAO,CAAC,MAAM,CAAC;IAChD,OAAO,CAAC,QAAQ,CAAC,KAAK;IAAqB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;IAApF,YAA6B,KAAK,EAAE,SAAS,MAAM,EAAE,EAAmB,WAAW,CAAC,EAAE,MAAM,YAAA,EAAI;IAEnF,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAcrE;CACD"}

package/dist/types/model/commands/identity/PatchIdentityGlobalRoles.d.ts

@@ -1,4 +1,4 @@
-import { Command } from '../Command';
+import { Command } from '../Command.js';
 export declare class PatchIdentityGlobalRoles implements Command<boolean> {
     private readonly id;
     private readonly add;

package/dist/types/model/commands/identity/PatchIdentityGlobalRoles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PatchIdentityGlobalRoles.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/identity/PatchIdentityGlobalRoles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAGpC,qBAAa,wBAAyB,YAAW,OAAO,CAAC,OAAO,CAAC;IAE/D,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAFN,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,SAAS,MAAM,EAAE,EACtB,MAAM,EAAE,SAAS,MAAM,EAAE;IAI9B,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;CAqBvE"}
+{"version":3,"file":"PatchIdentityGlobalRoles.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/identity/PatchIdentityGlobalRoles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAGvC,qBAAa,wBAAyB,YAAW,OAAO,CAAC,OAAO,CAAC;IAE/D,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAHxB,YACkB,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,SAAS,MAAM,EAAE,EACtB,MAAM,EAAE,SAAS,MAAM,EAAE,EAE1C;IAEY,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAoBtE;CACD"}

package/dist/types/model/commands/identity/index.d.ts

@@ -1,3 +1,3 @@
-export * from './CreateIdentityCommand';
-export * from './PatchIdentityGlobalRoles';
+export * from './CreateIdentityCommand.js';
+export * from './PatchIdentityGlobalRoles.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/types/model/commands/identity/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/identity/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAA;AACvC,cAAc,4BAA4B,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/identity/index.ts"],"names":[],"mappings":"AAAA,cAAc,4BAA4B,CAAA;AAC1C,cAAc,+BAA+B,CAAA"}

package/dist/types/model/commands/idp/ClaimIdpRevalidationCommand.d.ts

@@ -0,0 +1,17 @@
+import { Command } from '../Command.js';
+/**
+ * Atomically claim the right to re-validate a federated session: bump `last_validated_at`
+ * to now() iff the throttle window has elapsed. Returns true only to the single request
+ * that wins the claim, false to everyone else (still inside the window, or lost the race).
+ *
+ * This is both the throttle and the single-flight guard — critical for `method: 'refresh'`,
+ * where two concurrent revalidations would rotate the refresh token and invalidate each
+ * other. The interval is bound as a parameter and cast to `interval`, so it is injection-safe.
+ */
+export declare class ClaimIdpRevalidationCommand implements Command<boolean> {
+    private readonly id;
+    private readonly interval;
+    constructor(id: string, interval: string);
+    execute({ db }: Command.Args): Promise<boolean>;
+}
+//# sourceMappingURL=ClaimIdpRevalidationCommand.d.ts.map

package/dist/types/model/commands/idp/ClaimIdpRevalidationCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClaimIdpRevalidationCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/idp/ClaimIdpRevalidationCommand.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAEvC;;;;;;;;GAQG;AACH,qBAAa,2BAA4B,YAAW,OAAO,CAAC,OAAO,CAAC;IAElE,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAF1B,YACkB,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,MAAM,EAEjC;IAEK,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAQpD;CACD"}

package/dist/types/model/commands/idp/CreateIdpCommand.d.ts

@@ -1,5 +1,5 @@
-import { Command } from '../Command';
-import { IdentityProviderData } from '../../type';
+import { Command } from '../Command.js';
+import { IdentityProviderData } from '../../type/index.js';
 export declare class CreateIdpCommand implements Command<void> {
     private data;
     constructor(data: IdentityProviderData);

package/dist/types/model/commands/idp/CreateIdpCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CreateIdpCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/idp/CreateIdpCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAEpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AAEjD,qBAAa,gBAAiB,YAAW,OAAO,CAAC,IAAI,CAAC;IAEpD,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE,oBAAoB;IAI7B,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;CAe7D"}
+{"version":3,"file":"CreateIdpCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/idp/CreateIdpCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAEvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAE1D,qBAAa,gBAAiB,YAAW,OAAO,CAAC,IAAI,CAAC;IAEpD,OAAO,CAAC,IAAI;IADb,YACS,IAAI,EAAE,oBAAoB,EAElC;IAEK,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAsB5D;CACD"}

package/dist/types/model/commands/idp/CreateIdpSessionCommand.d.ts

@@ -0,0 +1,15 @@
+import { Command } from '../Command.js';
+import type { IDPSessionState } from '../../service/idp/index.js';
+/**
+ * Persist the federated-session state for a freshly created session API key, so it can be
+ * re-validated against the IdP later. The `tokens` blob is encrypted at rest via
+ * `providers.encrypt` (same pattern as project secrets).
+ */
+export declare class CreateIdpSessionCommand implements Command<void> {
+    private readonly apiKeyId;
+    private readonly identityProviderId;
+    private readonly session;
+    constructor(apiKeyId: string, identityProviderId: string, session: IDPSessionState);
+    execute({ db, providers }: Command.Args): Promise<void>;
+}
+//# sourceMappingURL=CreateIdpSessionCommand.d.ts.map

package/dist/types/model/commands/idp/CreateIdpSessionCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateIdpSessionCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/idp/CreateIdpSessionCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAEvC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAEjE;;;;GAIG;AACH,qBAAa,uBAAwB,YAAW,OAAO,CAAC,IAAI,CAAC;IAE3D,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO;IAHzB,YACkB,QAAQ,EAAE,MAAM,EAChB,kBAAkB,EAAE,MAAM,EAC1B,OAAO,EAAE,eAAe,EAEzC;IAEK,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAuB5D;CACD"}

package/dist/types/model/commands/idp/DisableIdpCommand.d.ts

@@ -1,4 +1,4 @@
-import { Command } from '../Command';
+import { Command } from '../Command.js';
 export declare class DisableIdpCommand implements Command<void> {
     private id;
     constructor(id: string);

package/dist/types/model/commands/idp/DisableIdpCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DisableIdpCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/idp/DisableIdpCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAGpC,qBAAa,iBAAkB,YAAW,OAAO,CAAC,IAAI,CAAC;IAErD,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,MAAM;IAIb,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;CAW7D"}
+{"version":3,"file":"DisableIdpCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/idp/DisableIdpCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAGvC,qBAAa,iBAAkB,YAAW,OAAO,CAAC,IAAI,CAAC;IAErD,OAAO,CAAC,EAAE;IADX,YACS,EAAE,EAAE,MAAM,EAElB;IAEK,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAU5D;CACD"}

package/dist/types/model/commands/idp/DisconnectPersonIdentityProviderCommand.d.ts

@@ -0,0 +1,13 @@
+import { Command } from '../Command.js';
+/**
+ * Removes a single external IdP connection of a person. The delete is scoped by
+ * both the connection id and the person id, so it can never remove a connection
+ * that does not belong to the given person.
+ */
+export declare class DisconnectPersonIdentityProviderCommand implements Command<number> {
+    private readonly personId;
+    private readonly personIdentityProviderId;
+    constructor(personId: string, personIdentityProviderId: string);
+    execute({ db }: Command.Args): Promise<number>;
+}
+//# sourceMappingURL=DisconnectPersonIdentityProviderCommand.d.ts.map

package/dist/types/model/commands/idp/DisconnectPersonIdentityProviderCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DisconnectPersonIdentityProviderCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/idp/DisconnectPersonIdentityProviderCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAGvC;;;;GAIG;AACH,qBAAa,uCAAwC,YAAW,OAAO,CAAC,MAAM,CAAC;IAE7E,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,wBAAwB;IAF1C,YACkB,QAAQ,EAAE,MAAM,EAChB,wBAAwB,EAAE,MAAM,EAEjD;IAEK,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAQnD;CACD"}

package/dist/types/model/commands/idp/EnableIdpCommand.d.ts

@@ -1,4 +1,4 @@
-import { Command } from '../Command';
+import { Command } from '../Command.js';
 export declare class EnableIdpCommand implements Command<void> {
     private id;
     constructor(id: string);

package/dist/types/model/commands/idp/EnableIdpCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"EnableIdpCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/idp/EnableIdpCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAGpC,qBAAa,gBAAiB,YAAW,OAAO,CAAC,IAAI,CAAC;IAEpD,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,MAAM;IAIb,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;CAW7D"}
+{"version":3,"file":"EnableIdpCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/idp/EnableIdpCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAGvC,qBAAa,gBAAiB,YAAW,OAAO,CAAC,IAAI,CAAC;IAEpD,OAAO,CAAC,EAAE;IADX,YACS,EAAE,EAAE,MAAM,EAElB;IAEK,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAU5D;CACD"}

package/dist/types/model/commands/idp/UpdateIdpCommand.d.ts

@@ -1,5 +1,5 @@
-import { Command } from '../Command';
-import { IdentityProviderData } from '../../type';
+import { Command } from '../Command.js';
+import { IdentityProviderData } from '../../type/index.js';
 export declare class UpdateIdpCommand implements Command<void> {
     private id;
     private data;

package/dist/types/model/commands/idp/UpdateIdpCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"UpdateIdpCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/idp/UpdateIdpCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAEpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AAEjD,qBAAa,gBAAiB,YAAW,OAAO,CAAC,IAAI,CAAC;IAEpD,OAAO,CAAC,EAAE;IACV,OAAO,CAAC,IAAI;gBADJ,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,aAAa;IAItB,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;CAelD;AAED,MAAM,MAAM,aAAa,GAAG;IAC3B,OAAO,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAA;IAClD,aAAa,CAAC,EAAE,oBAAoB,CAAC,eAAe,CAAC,CAAA;IACrD,IAAI,CAAC,EAAE,MAAM,CAAA;CACb,CAAA"}
+{"version":3,"file":"UpdateIdpCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/idp/UpdateIdpCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAEvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAE1D,qBAAa,gBAAiB,YAAW,OAAO,CAAC,IAAI,CAAC;IAEpD,OAAO,CAAC,EAAE;IACV,OAAO,CAAC,IAAI;IAFb,YACS,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,aAAa,EAE3B;IAEK,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBjD;CACD;AAED,MAAM,MAAM,aAAa,GAAG;IAC3B,OAAO,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAA;IAClD,aAAa,CAAC,EAAE,oBAAoB,CAAC,eAAe,CAAC,CAAA;IACrD,IAAI,CAAC,EAAE,MAAM,CAAA;CACb,CAAA"}

package/dist/types/model/commands/idp/UpdateIdpSessionCommand.d.ts

@@ -0,0 +1,14 @@
+import { Command } from '../Command.js';
+import type { IDPSessionState } from '../../service/idp/index.js';
+/**
+ * Update a federated session after a successful re-validation: bump `last_validated_at`
+ * and persist rotated tokens / refreshed IdP expiry. Pass `session` undefined to only
+ * touch `last_validated_at` (e.g. userinfo/introspection methods that don't rotate tokens).
+ */
+export declare class UpdateIdpSessionCommand implements Command<void> {
+    private readonly id;
+    private readonly session?;
+    constructor(id: string, session?: IDPSessionState | undefined);
+    execute({ db, providers }: Command.Args): Promise<void>;
+}
+//# sourceMappingURL=UpdateIdpSessionCommand.d.ts.map

package/dist/types/model/commands/idp/UpdateIdpSessionCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UpdateIdpSessionCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/idp/UpdateIdpSessionCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAEvC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAEjE;;;;GAIG;AACH,qBAAa,uBAAwB,YAAW,OAAO,CAAC,IAAI,CAAC;IAE3D,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;IAF1B,YACkB,EAAE,EAAE,MAAM,EACV,OAAO,CAAC,EAAE,eAAe,YAAA,EAE1C;IAEK,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CA2B5D;CACD"}

package/dist/types/model/commands/index.d.ts

@@ -1,12 +1,16 @@
-export * from './apiKey';
-export * from './configuration';
-export * from './person';
-export * from './Command';
-export * from './CommandBus';
-export * from './identity';
-export * from './project';
-export * from './mailTemplate';
-export * from './membership';
-export * from './otp';
-export * from './personToken';
+export * from './apiKey/index.js';
+export * from './authPolicy/index.js';
+export * from './customRole/index.js';
+export * from './backupCode/index.js';
+export * from './configuration/index.js';
+export * from './person/index.js';
+export * from './rateLimit/index.js';
+export * from './Command.js';
+export * from './CommandBus.js';
+export * from './identity/index.js';
+export * from './project/index.js';
+export * from './mailTemplate/index.js';
+export * from './membership/index.js';
+export * from './otp/index.js';
+export * from './personToken/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/types/model/commands/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/model/commands/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAA;AACxB,cAAc,iBAAiB,CAAA;AAC/B,cAAc,UAAU,CAAA;AACxB,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAC5B,cAAc,YAAY,CAAA;AAC1B,cAAc,WAAW,CAAA;AACzB,cAAc,gBAAgB,CAAA;AAC9B,cAAc,cAAc,CAAA;AAC5B,cAAc,OAAO,CAAA;AACrB,cAAc,eAAe,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/model/commands/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAA;AACjC,cAAc,uBAAuB,CAAA;AACrC,cAAc,uBAAuB,CAAA;AACrC,cAAc,uBAAuB,CAAA;AACrC,cAAc,0BAA0B,CAAA;AACxC,cAAc,mBAAmB,CAAA;AACjC,cAAc,sBAAsB,CAAA;AACpC,cAAc,cAAc,CAAA;AAC5B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,qBAAqB,CAAA;AACnC,cAAc,oBAAoB,CAAA;AAClC,cAAc,yBAAyB,CAAA;AACvC,cAAc,uBAAuB,CAAA;AACrC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,wBAAwB,CAAA"}

package/dist/types/model/commands/mailTemplate/AddMailTemplateCommand.d.ts

@@ -1,5 +1,5 @@
-import { Command } from '../Command';
-import { MailTemplate } from '../../mailing';
+import { Command } from '../Command.js';
+import { MailTemplate } from '../../mailing/index.js';
 export declare class AddMailTemplateCommand implements Command<void> {
     private mailTemplate;
     constructor(mailTemplate: MailTemplate);

package/dist/types/model/commands/mailTemplate/AddMailTemplateCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AddMailTemplateCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/mailTemplate/AddMailTemplateCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAEpC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAE5C,qBAAa,sBAAuB,YAAW,OAAO,CAAC,IAAI,CAAC;IAC/C,OAAO,CAAC,YAAY;gBAAZ,YAAY,EAAE,YAAY;IAExC,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;CAiC7D"}
+{"version":3,"file":"AddMailTemplateCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/mailTemplate/AddMailTemplateCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAEvC,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAErD,qBAAa,sBAAuB,YAAW,OAAO,CAAC,IAAI,CAAC;IAC/C,OAAO,CAAC,YAAY;IAAhC,YAAoB,YAAY,EAAE,YAAY,EAAI;IAE5C,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAgC5D;CACD"}

package/dist/types/model/commands/mailTemplate/RemoveMailTemplateCommand.d.ts

@@ -1,5 +1,5 @@
-import { Command } from '../Command';
-import { MailTemplateIdentifier } from '../../mailing';
+import { Command } from '../Command.js';
+import { MailTemplateIdentifier } from '../../mailing/index.js';
 export declare class RemoveMailTemplateCommand implements Command<boolean> {
     private mailTemplateIdentifier;
     constructor(mailTemplateIdentifier: MailTemplateIdentifier);

package/dist/types/model/commands/mailTemplate/RemoveMailTemplateCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RemoveMailTemplateCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/mailTemplate/RemoveMailTemplateCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAEpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AAEtD,qBAAa,yBAA0B,YAAW,OAAO,CAAC,OAAO,CAAC;IACrD,OAAO,CAAC,sBAAsB;gBAAtB,sBAAsB,EAAE,sBAAsB;IAE5D,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;CAYhE"}
+{"version":3,"file":"RemoveMailTemplateCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/mailTemplate/RemoveMailTemplateCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAEvC,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AAE/D,qBAAa,yBAA0B,YAAW,OAAO,CAAC,OAAO,CAAC;IACrD,OAAO,CAAC,sBAAsB;IAA1C,YAAoB,sBAAsB,EAAE,sBAAsB,EAAI;IAEhE,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAW/D;CACD"}

package/dist/types/model/commands/mailTemplate/index.d.ts

@@ -1,3 +1,3 @@
-export * from './AddMailTemplateCommand';
-export * from './RemoveMailTemplateCommand';
+export * from './AddMailTemplateCommand.js';
+export * from './RemoveMailTemplateCommand.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/types/model/commands/mailTemplate/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/mailTemplate/index.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAA;AACxC,cAAc,6BAA6B,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/mailTemplate/index.ts"],"names":[],"mappings":"AAAA,cAAc,6BAA6B,CAAA;AAC3C,cAAc,gCAAgC,CAAA"}

package/dist/types/model/commands/membership/AddProjectMemberCommand.d.ts

@@ -1,6 +1,6 @@
-import { Command } from '../Command';
-import { Response } from '../../utils/Response';
-import { MembershipInput } from './types';
+import { Command } from '../Command.js';
+import { Response } from '../../utils/Response.js';
+import { MembershipInput } from './types.js';
 type CommandResponse = Response<null, AddProjectMemberCommandError>;
 export declare class AddProjectMemberCommand implements Command<CommandResponse> {
     private readonly projectId;

package/dist/types/model/commands/membership/AddProjectMemberCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AddProjectMemberCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/membership/AddProjectMemberCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAEpC,OAAO,EAAE,QAAQ,EAA6B,MAAM,sBAAsB,CAAA;AAE1E,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAEzC,KAAK,eAAe,GAAG,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAA;AAEnE,qBAAa,uBAAwB,YAAW,OAAO,CAAC,eAAe,CAAC;IAEtE,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,WAAW;gBAFX,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,SAAS,eAAe,EAAE;IAGnD,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,eAAe,CAAC;CAmC7E;AAED,MAAM,MAAM,4BAA4B,GACrC,gBAAgB,GAChB,mBAAmB,GACnB,oBAAoB,CAAA"}
+{"version":3,"file":"AddProjectMemberCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/membership/AddProjectMemberCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAEvC,OAAO,EAAE,QAAQ,EAA6B,MAAM,yBAAyB,CAAA;AAE7E,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAE5C,KAAK,eAAe,GAAG,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAA;AAEnE,qBAAa,uBAAwB,YAAW,OAAO,CAAC,eAAe,CAAC;IAEtE,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAH7B,YACkB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,SAAS,eAAe,EAAE,EACrD;IAEE,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,eAAe,CAAC,CAkC5E;CACD;AAED,MAAM,MAAM,4BAA4B,GACrC,gBAAgB,GAChB,mBAAmB,GACnB,oBAAoB,CAAA"}

package/dist/types/model/commands/membership/CreateOrUpdateProjectMembershipCommand.d.ts

@@ -1,5 +1,5 @@
-import { Command } from '../Command';
-import { MembershipInput } from './types';
+import { Command } from '../Command.js';
+import { MembershipInput } from './types.js';
 export declare class CreateOrUpdateProjectMembershipCommand implements Command<void> {
     private readonly projectId;
     private readonly identityId;

package/dist/types/model/commands/membership/CreateOrUpdateProjectMembershipCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CreateOrUpdateProjectMembershipCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/membership/CreateOrUpdateProjectMembershipCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAGpC,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAGzC,qBAAa,sCAAuC,YAAW,OAAO,CAAC,IAAI,CAAC;IAE1E,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAFV,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,eAAe;IAGvC,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;CAgClE"}
+{"version":3,"file":"CreateOrUpdateProjectMembershipCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/membership/CreateOrUpdateProjectMembershipCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAGvC,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAG5C,qBAAa,sCAAuC,YAAW,OAAO,CAAC,IAAI,CAAC;IAE1E,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAH5B,YACkB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,eAAe,EACzC;IAEE,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CA+BjE;CACD"}

package/dist/types/model/commands/membership/RemoveProjectMemberCommand.d.ts

@@ -1,6 +1,6 @@
-import { Command } from '../Command';
-import { RemoveProjectMemberErrorCode } from '../../../schema';
-import { Response } from '../../utils/Response';
+import { Command } from '../Command.js';
+import { RemoveProjectMemberErrorCode } from '../../../schema/index.js';
+import { Response } from '../../utils/Response.js';
 export declare class RemoveProjectMemberCommand implements Command<RemoveProjectMemberResponse> {
     private readonly projectId;
     private readonly identityId;

package/dist/types/model/commands/membership/RemoveProjectMemberCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RemoveProjectMemberCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/membership/RemoveProjectMemberCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AACpC,OAAO,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAA;AAE9D,OAAO,EAAE,QAAQ,EAA6B,MAAM,sBAAsB,CAAA;AAE1E,qBAAa,0BAA2B,YAAW,OAAO,CAAC,2BAA2B,CAAC;IAC1E,OAAO,CAAC,QAAQ,CAAC,SAAS;IAAU,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAA9C,SAAS,EAAE,MAAM,EAAmB,UAAU,EAAE,MAAM;IAE7E,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,2BAA2B,CAAC;CAe9E;AAED,MAAM,MAAM,2BAA2B,GAAG,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAA"}
+{"version":3,"file":"RemoveProjectMemberCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/membership/RemoveProjectMemberCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AACvC,OAAO,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAA;AAEvE,OAAO,EAAE,QAAQ,EAA6B,MAAM,yBAAyB,CAAA;AAE7E,qBAAa,0BAA2B,YAAW,OAAO,CAAC,2BAA2B,CAAC;IAC1E,OAAO,CAAC,QAAQ,CAAC,SAAS;IAAU,OAAO,CAAC,QAAQ,CAAC,UAAU;IAA3E,YAA6B,SAAS,EAAE,MAAM,EAAmB,UAAU,EAAE,MAAM,EAAI;IAEjF,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAc7E;CACD;AAED,MAAM,MAAM,2BAA2B,GAAG,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAA"}

package/dist/types/model/commands/membership/{RemoveProjectMembershipsCommand.d.ts → RemoveProjectMembershipCommand.d.ts}

@@ -1,4 +1,4 @@
-import { Command } from '../Command';
+import { Command } from '../Command.js';
 export declare class RemoveProjectMembershipCommand implements Command<void> {
     private readonly projectId;
     private readonly identityId;
@@ -6,4 +6,4 @@ export declare class RemoveProjectMembershipCommand implements Command<void> {
     constructor(projectId: string, identityId: string, role: string);
     execute({ db, bus, providers }: Command.Args): Promise<void>;
 }
-//# sourceMappingURL=RemoveProjectMembershipsCommand.d.ts.map
+//# sourceMappingURL=RemoveProjectMembershipCommand.d.ts.map

package/dist/types/model/commands/membership/RemoveProjectMembershipCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RemoveProjectMembershipCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/membership/RemoveProjectMembershipCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAGvC,qBAAa,8BAA+B,YAAW,OAAO,CAAC,IAAI,CAAC;IACvD,OAAO,CAAC,QAAQ,CAAC,SAAS;IAAU,OAAO,CAAC,QAAQ,CAAC,UAAU;IAAU,OAAO,CAAC,QAAQ,CAAC,IAAI;IAA1G,YAA6B,SAAS,EAAE,MAAM,EAAmB,UAAU,EAAE,MAAM,EAAmB,IAAI,EAAE,MAAM,EAAI;IAEhH,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CASjE;CACD"}

package/dist/types/model/commands/membership/UpdateProjectMemberCommand.d.ts

@@ -1,7 +1,7 @@
-import { Command } from '../Command';
-import { UpdateProjectMemberErrorCode } from '../../../schema';
-import { MembershipUpdateInput } from './types';
-import { Response } from '../../utils/Response';
+import { Command } from '../Command.js';
+import { UpdateProjectMemberErrorCode } from '../../../schema/index.js';
+import { MembershipUpdateInput } from './types.js';
+import { Response } from '../../utils/Response.js';
 export declare class UpdateProjectMemberCommand implements Command<UpdateProjectMemberResponse> {
     private readonly projectId;
     private readonly identityId;

package/dist/types/model/commands/membership/UpdateProjectMemberCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"UpdateProjectMemberCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/membership/UpdateProjectMemberCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AACpC,OAAO,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAA;AAG9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAA;AAE/C,OAAO,EAAE,QAAQ,EAA6B,MAAM,sBAAsB,CAAA;AAE1E,qBAAa,0BAA2B,YAAW,OAAO,CAAC,2BAA2B,CAAC;IAErF,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,WAAW;gBAFX,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,SAAS,qBAAqB,EAAE;IAGzD,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,2BAA2B,CAAC;CAqCzF;AACD,MAAM,MAAM,2BAA2B,GAAG,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAA"}
+{"version":3,"file":"UpdateProjectMemberCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/membership/UpdateProjectMemberCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AACvC,OAAO,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAA;AAGvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAElD,OAAO,EAAE,QAAQ,EAA6B,MAAM,yBAAyB,CAAA;AAE7E,qBAAa,0BAA2B,YAAW,OAAO,CAAC,2BAA2B,CAAC;IAErF,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAH7B,YACkB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,SAAS,qBAAqB,EAAE,EAC3D;IAEE,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAoCxF;CACD;AACD,MAAM,MAAM,2BAA2B,GAAG,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAA"}

package/dist/types/model/commands/membership/index.d.ts

@@ -1,7 +1,8 @@
-export * from './AddProjectMemberCommand';
-export * from './CreateOrUpdateProjectMembershipCommand';
-export * from './RemoveProjectMemberCommand';
-export * from './UpdateProjectMemberCommand';
-export * from './variables/PatchProjectMembershipVariablesCommand';
-export * from './types';
+export * from './AddProjectMemberCommand.js';
+export * from './CreateOrUpdateProjectMembershipCommand.js';
+export * from './RemoveProjectMemberCommand.js';
+export * from './RemoveProjectMembershipCommand.js';
+export * from './UpdateProjectMemberCommand.js';
+export * from './variables/index.js';
+export * from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/types/model/commands/membership/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/membership/index.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAA;AACzC,cAAc,0CAA0C,CAAA;AACxD,cAAc,8BAA8B,CAAA;AAC5C,cAAc,8BAA8B,CAAA;AAC5C,cAAc,oDAAoD,CAAA;AAClE,cAAc,SAAS,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/membership/index.ts"],"names":[],"mappings":"AAAA,cAAc,8BAA8B,CAAA;AAC5C,cAAc,6CAA6C,CAAA;AAC3D,cAAc,iCAAiC,CAAA;AAC/C,cAAc,qCAAqC,CAAA;AACnD,cAAc,iCAAiC,CAAA;AAC/C,cAAc,sBAAsB,CAAA;AACpC,cAAc,YAAY,CAAA"}

package/dist/types/model/commands/membership/variables/PatchProjectMembershipVariableValuesCommand.d.ts

@@ -1,4 +1,4 @@
-import { Command } from '../../Command';
+import { Command } from '../../Command.js';
 export declare class PatchProjectMembershipVariableValuesCommand implements Command<string[]> {
     private readonly membershipId;
     private readonly name;

package/dist/types/model/commands/membership/variables/PatchProjectMembershipVariableValuesCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PatchProjectMembershipVariableValuesCommand.d.ts","sourceRoot":"","sources":["../../../../../../src/model/commands/membership/variables/PatchProjectMembershipVariableValuesCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAGvC,qBAAa,2CAA4C,YAAW,OAAO,CAAC,MAAM,EAAE,CAAC;IAEnF,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAHN,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,EAC7B,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC;IAGzC,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;CAgCtE"}
+{"version":3,"file":"PatchProjectMembershipVariableValuesCommand.d.ts","sourceRoot":"","sources":["../../../../../../src/model/commands/membership/variables/PatchProjectMembershipVariableValuesCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAG1C,qBAAa,2CAA4C,YAAW,OAAO,CAAC,MAAM,EAAE,CAAC;IAEnF,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJxB,YACkB,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,EAC7B,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,EAC3C;IAEE,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CA+BrE;CACD"}

package/dist/types/model/commands/membership/variables/PatchProjectMembershipVariablesCommand.d.ts

@@ -1,5 +1,5 @@
-import { Command } from '../../Command';
-import { VariableUpdateInput } from '../types';
+import { Command } from '../../Command.js';
+import { VariableUpdateInput } from '../types.js';
 export declare class PatchProjectMembershipVariablesCommand implements Command<Record<string, string[]>> {
     private readonly membershipId;
     private readonly variables;

package/dist/types/model/commands/membership/variables/PatchProjectMembershipVariablesCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PatchProjectMembershipVariablesCommand.d.ts","sourceRoot":"","sources":["../../../../../../src/model/commands/membership/variables/PatchProjectMembershipVariablesCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAGvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAA;AAE9C,qBAAa,sCAAuC,YAAW,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACnF,OAAO,CAAC,QAAQ,CAAC,YAAY;IAAU,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAhD,YAAY,EAAE,MAAM,EAAmB,SAAS,EAAE,SAAS,mBAAmB,EAAE;IAEvG,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CAmBtF"}
+{"version":3,"file":"PatchProjectMembershipVariablesCommand.d.ts","sourceRoot":"","sources":["../../../../../../src/model/commands/membership/variables/PatchProjectMembershipVariablesCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAG1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAEjD,qBAAa,sCAAuC,YAAW,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACnF,OAAO,CAAC,QAAQ,CAAC,YAAY;IAAU,OAAO,CAAC,QAAQ,CAAC,SAAS;IAA7E,YAA6B,YAAY,EAAE,MAAM,EAAmB,SAAS,EAAE,SAAS,mBAAmB,EAAE,EAAI;IAE3G,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAkBrF;CACD"}

package/dist/types/model/commands/membership/variables/SetProjectMembershipVariableValuesCommand.d.ts

@@ -1,4 +1,4 @@
-import { Command } from '../../Command';
+import { Command } from '../../Command.js';
 export declare class SetProjectMembershipVariableValuesCommand implements Command<void> {
     private readonly membershipId;
     private readonly name;

package/dist/types/model/commands/membership/variables/SetProjectMembershipVariableValuesCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SetProjectMembershipVariableValuesCommand.d.ts","sourceRoot":"","sources":["../../../../../../src/model/commands/membership/variables/SetProjectMembershipVariableValuesCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAGvC,qBAAa,yCAA0C,YAAW,OAAO,CAAC,IAAI,CAAC;IAE7E,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAFN,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC;IAGzC,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;CAclE"}
+{"version":3,"file":"SetProjectMembershipVariableValuesCommand.d.ts","sourceRoot":"","sources":["../../../../../../src/model/commands/membership/variables/SetProjectMembershipVariableValuesCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAG1C,qBAAa,yCAA0C,YAAW,OAAO,CAAC,IAAI,CAAC;IAE7E,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAHxB,YACkB,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,EAC3C;IAEE,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAajE;CACD"}

package/dist/types/model/commands/membership/variables/index.d.ts

@@ -1,2 +1,3 @@
-export * from './PatchProjectMembershipVariablesCommand';
+export * from './PatchProjectMembershipVariablesCommand.js';
+export * from './SetProjectMembershipVariableValuesCommand.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/types/model/commands/membership/variables/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/model/commands/membership/variables/index.ts"],"names":[],"mappings":"AAAA,cAAc,0CAA0C,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/model/commands/membership/variables/index.ts"],"names":[],"mappings":"AAAA,cAAc,6CAA6C,CAAA;AAC3D,cAAc,gDAAgD,CAAA"}

package/dist/types/model/commands/otp/ConfirmOtpCommand.d.ts

@@ -1,7 +1,16 @@
-import { Command } from '../Command';
-export declare class ConfirmOtpCommand implements Command<void> {
+import { Command } from '../Command.js';
+/**
+ * Promotes the pending TOTP secret to active and clears the pending slot.
+ * Returns whether a pending secret was actually promoted.
+ *
+ * The `totp_pending_secret IS NOT NULL` guard makes the SET read a live value, so a
+ * duplicate or lost-race confirm (pending slot already cleared) is a no-op returning
+ * `false` — rather than copying NULL into the active secret and silently disabling
+ * the user's TOTP.
+ */
+export declare class ConfirmOtpCommand implements Command<boolean> {
     private readonly personId;
     constructor(personId: string);
-    execute({ db, providers }: Command.Args): Promise<void>;
+    execute({ db, providers }: Command.Args): Promise<boolean>;
 }
 //# sourceMappingURL=ConfirmOtpCommand.d.ts.map

package/dist/types/model/commands/otp/ConfirmOtpCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ConfirmOtpCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/otp/ConfirmOtpCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAGpC,qBAAa,iBAAkB,YAAW,OAAO,CAAC,IAAI,CAAC;IAC1C,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,MAAM;IAEvC,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;CAW7D"}
+{"version":3,"file":"ConfirmOtpCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/otp/ConfirmOtpCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAGvC;;;;;;;;GAQG;AACH,qBAAa,iBAAkB,YAAW,OAAO,CAAC,OAAO,CAAC;IAC7C,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAArC,YAA6B,QAAQ,EAAE,MAAM,EAAI;IAE3C,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAkB/D;CACD"}

package/dist/types/model/commands/otp/DisableOtpCommand.d.ts

@@ -1,7 +1,11 @@
-import { Command } from '../Command';
+import { Command } from '../Command.js';
+/**
+ * Clears both the active and pending TOTP slots. The person_mfa row is kept
+ * (it may still carry other factors such as email_otp_enabled).
+ */
 export declare class DisableOtpCommand implements Command<void> {
     private readonly personId;
     constructor(personId: string);
-    execute({ db, providers }: Command.Args): Promise<void>;
+    execute({ db }: Command.Args): Promise<void>;
 }
 //# sourceMappingURL=DisableOtpCommand.d.ts.map

package/dist/types/model/commands/otp/DisableOtpCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DisableOtpCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/otp/DisableOtpCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAGpC,qBAAa,iBAAkB,YAAW,OAAO,CAAC,IAAI,CAAC;IAC1C,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,MAAM;IAEvC,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;CAY7D"}
+{"version":3,"file":"DisableOtpCommand.d.ts","sourceRoot":"","sources":["../../../../../src/model/commands/otp/DisableOtpCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAGvC;;;GAGG;AACH,qBAAa,iBAAkB,YAAW,OAAO,CAAC,IAAI,CAAC;IAC1C,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAArC,YAA6B,QAAQ,EAAE,MAAM,EAAI;IAE3C,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAejD;CACD"}