@contember/engine-tenant-api 2.1.0-rc.3 → 2.2.0-alpha.10

package/dist/development/src/model/queries/membership/ProjectMembersQuery.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ProjectMembersQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/membership/ProjectMembersQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\nimport { MemberType, ProjectMembersInput } from '../../../schema'\nimport { ImplementationException } from '../../../exceptions'\n\nexport class ProjectMembersQuery extends DatabaseQuery<ProjectMembersQueryResult> {\n\tconstructor(\n\t\tprivate readonly projectId: string,\n\t\tprivate readonly projectMemberInput: ProjectMembersInput,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectMembersQueryResult> {\n\t\treturn await SelectBuilder.create<{ id: string; description: string }>()\n\t\t\t.select('id')\n\t\t\t.select('description')\n\t\t\t.from('identity')\n\t\t\t.where(it =>\n\t\t\t\tit.exists(\n\t\t\t\t\tbuilder =>\n\t\t\t\t\t\tbuilder\n\t\t\t\t\t\t\t.from('project_membership')\n\t\t\t\t\t\t\t.where(expr => expr.columnsEq(['project_membership', 'identity_id'], ['identity', 'id']))\n\t\t\t\t\t\t\t.where({ project_id: this.projectId }),\n\t\t\t\t)\n\t\t\t)\n\t\t\t.match(qb => {\n\t\t\t\tconst identityId = this.projectMemberInput.filter?.identityId\n\t\t\t\treturn identityId ? qb.where(it => it.in(['identity', 'id'], identityId)) : qb\n\t\t\t})\n\t\t\t.match(qb => {\n\t\t\t\tconst { email, memberType, personId } = this.projectMemberInput.filter ?? {}\n\t\t\t\tif ((email || personId) && memberType === 'API_KEY') {\n\t\t\t\t\tthrow new ImplementationException()\n\t\t\t\t}\n\n\t\t\t\tconst personQuery = SelectBuilder.create()\n\t\t\t\t\t.from('person')\n\t\t\t\t\t.where(expr => expr.columnsEq(['person', 'identity_id'], ['identity', 'id']))\n\t\t\t\t\t.match(qb => email ? qb.where(it => it.in('email', email)) : qb)\n\t\t\t\t\t.match(qb => personId ? qb.where(it => it.in(['person', 'id'], personId)) : qb)\n\n\t\t\t\tif (email || personId || memberType === 'PERSON') {\n\t\t\t\t\treturn qb.where(it => it.exists(personQuery))\n\t\t\t\t}\n\n\t\t\t\tif (memberType === 'API_KEY') {\n\t\t\t\t\treturn qb.where(it => it.not(it => it.exists(personQuery)))\n\t\t\t\t}\n\n\t\t\t\treturn qb\n\t\t\t})\n\t\t\t.orderBy(['identity', 'id'])\n\t\t\t.limit(this.projectMemberInput.limit ?? undefined, this.projectMemberInput.offset ?? undefined)\n\t\t\t.getResult(db)\n\t}\n}\n\nexport interface ProjectMembersQueryRow {\n\tid: string\n\tdescription: string\n}\n\nexport type ProjectMembersQueryResult = ProjectMembersQueryRow[]\n"],"names":["DatabaseQuery","SelectBuilder","ImplementationException","qb","it"],"mappings":";;;;AAIO,MAAM,4BAA4BA,SAAAA,cAAyC;AAAA,EACjF,YACkB,WACA,oBAChB;AACD,UAAA;AAHiB,SAAA,YAAA;AACA,SAAA,qBAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAA6D;AAC1E,WAAO,MAAMC,SAAAA,cAAc,OAAA,EACzB,OAAO,IAAI,EACX,OAAO,aAAa,EACpB,KAAK,UAAU,EACf;AAAA,MAAM,QACN,GAAG;AAAA,QACF,CAAA,YACC,QACE,KAAK,oBAAoB,EACzB,MAAM,CAAA,SAAQ,KAAK,UAAU,CAAC,sBAAsB,aAAa,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,EACvF,MAAM,EAAE,YAAY,KAAK,UAAA,CAAW;AAAA,MAAA;AAAA,IACxC,EAEA,MAAM,CAAA,OAAM;AACZ,YAAM,aAAa,KAAK,mBAAmB,QAAQ;AACnD,aAAO,aAAa,GAAG,MAAM,CAAA,OAAM,GAAG,GAAG,CAAC,YAAY,IAAI,GAAG,UAAU,CAAC,IAAI;AAAA,IAC7E,CAAC,EACA,MAAM,CAAA,OAAM;AACZ,YAAM,EAAE,OAAO,YAAY,SAAA,IAAa,KAAK,mBAAmB,UAAU,CAAA;AAC1E,WAAK,SAAS,aAAa,eAAe,WAAW;AACpD,cAAM,IAAIC,WAAAA,wBAAA;AAAA,MACX;AAEA,YAAM,cAAcD,SAAAA,cAAc,OAAA,EAChC,KAAK,QAAQ,EACb,MAAM,CAAA,SAAQ,KAAK,UAAU,CAAC,UAAU,aAAa,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,EAC3E,MAAM,CAAAE,QAAM,QAAQA,IAAG,MAAM,CAAA,OAAM,GAAG,GAAG,SAAS,KAAK,CAAC,IAAIA,GAAE,EAC9D,MAAM,CAAAA,QAAM,WAAWA,IAAG,MAAM,CAAA,OAAM,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,QAAQ,CAAC,IAAIA,GAAE;AAE/E,UAAI,SAAS,YAAY,eAAe,UAAU;AACjD,eAAO,GAAG,MAAM,CAAA,OAAM,GAAG,OAAO,WAAW,CAAC;AAAA,MAC7C;AAEA,UAAI,eAAe,WAAW;AAC7B,eAAO,GAAG,MAAM,CAAA,OAAM,GAAG,IAAI,CAAAC,QAAMA,IAAG,OAAO,WAAW,CAAC,CAAC;AAAA,MAC3D;AAEA,aAAO;AAAA,IACR,CAAC,EACA,QAAQ,CAAC,YAAY,IAAI,CAAC,EAC1B,MAAM,KAAK,mBAAmB,SAAS,QAAW,KAAK,mBAAmB,UAAU,MAAS,EAC7F,UAAU,EAAE;AAAA,EACf;AACD;;"}
+{"version":3,"file":"ProjectMembersQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/membership/ProjectMembersQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\nimport { MemberType, ProjectMembersInput } from '../../../schema/index.js'\nimport { ImplementationException } from '../../../exceptions.js'\n\nexport class ProjectMembersQuery extends DatabaseQuery<ProjectMembersQueryResult> {\n\tconstructor(\n\t\tprivate readonly projectId: string,\n\t\tprivate readonly projectMemberInput: ProjectMembersInput,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectMembersQueryResult> {\n\t\treturn await SelectBuilder.create<{ id: string; description: string }>()\n\t\t\t.select('id')\n\t\t\t.select('description')\n\t\t\t.from('identity')\n\t\t\t.where(it =>\n\t\t\t\tit.exists(\n\t\t\t\t\tbuilder =>\n\t\t\t\t\t\tbuilder\n\t\t\t\t\t\t\t.from('project_membership')\n\t\t\t\t\t\t\t.where(expr => expr.columnsEq(['project_membership', 'identity_id'], ['identity', 'id']))\n\t\t\t\t\t\t\t.where({ project_id: this.projectId }),\n\t\t\t\t)\n\t\t\t)\n\t\t\t.match(qb => {\n\t\t\t\tconst identityId = this.projectMemberInput.filter?.identityId\n\t\t\t\treturn identityId ? qb.where(it => it.in(['identity', 'id'], identityId)) : qb\n\t\t\t})\n\t\t\t.match(qb => {\n\t\t\t\tconst { email, memberType, personId } = this.projectMemberInput.filter ?? {}\n\t\t\t\tif ((email || personId) && memberType === 'API_KEY') {\n\t\t\t\t\tthrow new ImplementationException()\n\t\t\t\t}\n\n\t\t\t\tconst personQuery = SelectBuilder.create()\n\t\t\t\t\t.from('person')\n\t\t\t\t\t.where(expr => expr.columnsEq(['person', 'identity_id'], ['identity', 'id']))\n\t\t\t\t\t.match(qb => email ? qb.where(it => it.in('email', email)) : qb)\n\t\t\t\t\t.match(qb => personId ? qb.where(it => it.in(['person', 'id'], personId)) : qb)\n\n\t\t\t\tif (email || personId || memberType === 'PERSON') {\n\t\t\t\t\treturn qb.where(it => it.exists(personQuery))\n\t\t\t\t}\n\n\t\t\t\tif (memberType === 'API_KEY') {\n\t\t\t\t\treturn qb.where(it => it.not(it => it.exists(personQuery)))\n\t\t\t\t}\n\n\t\t\t\treturn qb\n\t\t\t})\n\t\t\t.orderBy(['identity', 'id'])\n\t\t\t.limit(this.projectMemberInput.limit ?? undefined, this.projectMemberInput.offset ?? undefined)\n\t\t\t.getResult(db)\n\t}\n}\n\nexport interface ProjectMembersQueryRow {\n\tid: string\n\tdescription: string\n}\n\nexport type ProjectMembersQueryResult = ProjectMembersQueryRow[]\n"],"names":["DatabaseQuery","SelectBuilder","ImplementationException","qb","it"],"mappings":";;;;AAIO,MAAM,4BAA4BA,SAAAA,cAAyC;AAAA,EACjF,YACkB,WACA,oBAChB;AACD,UAAA;AAHiB,SAAA,YAAA;AACA,SAAA,qBAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAA6D;AAC1E,WAAO,MAAMC,SAAAA,cAAc,OAAA,EACzB,OAAO,IAAI,EACX,OAAO,aAAa,EACpB,KAAK,UAAU,EACf;AAAA,MAAM,QACN,GAAG;AAAA,QACF,CAAA,YACC,QACE,KAAK,oBAAoB,EACzB,MAAM,CAAA,SAAQ,KAAK,UAAU,CAAC,sBAAsB,aAAa,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,EACvF,MAAM,EAAE,YAAY,KAAK,UAAA,CAAW;AAAA,MAAA;AAAA,IACxC,EAEA,MAAM,CAAA,OAAM;AACZ,YAAM,aAAa,KAAK,mBAAmB,QAAQ;AACnD,aAAO,aAAa,GAAG,MAAM,CAAA,OAAM,GAAG,GAAG,CAAC,YAAY,IAAI,GAAG,UAAU,CAAC,IAAI;AAAA,IAC7E,CAAC,EACA,MAAM,CAAA,OAAM;AACZ,YAAM,EAAE,OAAO,YAAY,SAAA,IAAa,KAAK,mBAAmB,UAAU,CAAA;AAC1E,WAAK,SAAS,aAAa,eAAe,WAAW;AACpD,cAAM,IAAIC,WAAAA,wBAAA;AAAA,MACX;AAEA,YAAM,cAAcD,SAAAA,cAAc,OAAA,EAChC,KAAK,QAAQ,EACb,MAAM,CAAA,SAAQ,KAAK,UAAU,CAAC,UAAU,aAAa,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,EAC3E,MAAM,CAAAE,QAAM,QAAQA,IAAG,MAAM,CAAA,OAAM,GAAG,GAAG,SAAS,KAAK,CAAC,IAAIA,GAAE,EAC9D,MAAM,CAAAA,QAAM,WAAWA,IAAG,MAAM,CAAA,OAAM,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,QAAQ,CAAC,IAAIA,GAAE;AAE/E,UAAI,SAAS,YAAY,eAAe,UAAU;AACjD,eAAO,GAAG,MAAM,CAAA,OAAM,GAAG,OAAO,WAAW,CAAC;AAAA,MAC7C;AAEA,UAAI,eAAe,WAAW;AAC7B,eAAO,GAAG,MAAM,CAAA,OAAM,GAAG,IAAI,CAAAC,QAAMA,IAAG,OAAO,WAAW,CAAC,CAAC;AAAA,MAC3D;AAEA,aAAO;AAAA,IACR,CAAC,EACA,QAAQ,CAAC,YAAY,IAAI,CAAC,EAC1B,MAAM,KAAK,mBAAmB,SAAS,QAAW,KAAK,mBAAmB,UAAU,MAAS,EAC7F,UAAU,EAAE;AAAA,EACf;AACD;;"}

package/dist/development/src/model/queries/membership/ProjectMembersQuery.js.map

@@ -1 +1 @@
-{"version":3,"file":"ProjectMembersQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/membership/ProjectMembersQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\nimport { MemberType, ProjectMembersInput } from '../../../schema'\nimport { ImplementationException } from '../../../exceptions'\n\nexport class ProjectMembersQuery extends DatabaseQuery<ProjectMembersQueryResult> {\n\tconstructor(\n\t\tprivate readonly projectId: string,\n\t\tprivate readonly projectMemberInput: ProjectMembersInput,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectMembersQueryResult> {\n\t\treturn await SelectBuilder.create<{ id: string; description: string }>()\n\t\t\t.select('id')\n\t\t\t.select('description')\n\t\t\t.from('identity')\n\t\t\t.where(it =>\n\t\t\t\tit.exists(\n\t\t\t\t\tbuilder =>\n\t\t\t\t\t\tbuilder\n\t\t\t\t\t\t\t.from('project_membership')\n\t\t\t\t\t\t\t.where(expr => expr.columnsEq(['project_membership', 'identity_id'], ['identity', 'id']))\n\t\t\t\t\t\t\t.where({ project_id: this.projectId }),\n\t\t\t\t)\n\t\t\t)\n\t\t\t.match(qb => {\n\t\t\t\tconst identityId = this.projectMemberInput.filter?.identityId\n\t\t\t\treturn identityId ? qb.where(it => it.in(['identity', 'id'], identityId)) : qb\n\t\t\t})\n\t\t\t.match(qb => {\n\t\t\t\tconst { email, memberType, personId } = this.projectMemberInput.filter ?? {}\n\t\t\t\tif ((email || personId) && memberType === 'API_KEY') {\n\t\t\t\t\tthrow new ImplementationException()\n\t\t\t\t}\n\n\t\t\t\tconst personQuery = SelectBuilder.create()\n\t\t\t\t\t.from('person')\n\t\t\t\t\t.where(expr => expr.columnsEq(['person', 'identity_id'], ['identity', 'id']))\n\t\t\t\t\t.match(qb => email ? qb.where(it => it.in('email', email)) : qb)\n\t\t\t\t\t.match(qb => personId ? qb.where(it => it.in(['person', 'id'], personId)) : qb)\n\n\t\t\t\tif (email || personId || memberType === 'PERSON') {\n\t\t\t\t\treturn qb.where(it => it.exists(personQuery))\n\t\t\t\t}\n\n\t\t\t\tif (memberType === 'API_KEY') {\n\t\t\t\t\treturn qb.where(it => it.not(it => it.exists(personQuery)))\n\t\t\t\t}\n\n\t\t\t\treturn qb\n\t\t\t})\n\t\t\t.orderBy(['identity', 'id'])\n\t\t\t.limit(this.projectMemberInput.limit ?? undefined, this.projectMemberInput.offset ?? undefined)\n\t\t\t.getResult(db)\n\t}\n}\n\nexport interface ProjectMembersQueryRow {\n\tid: string\n\tdescription: string\n}\n\nexport type ProjectMembersQueryResult = ProjectMembersQueryRow[]\n"],"names":["qb","it"],"mappings":";;AAIO,MAAM,4BAA4B,cAAyC;AAAA,EACjF,YACkB,WACA,oBAChB;AACD,UAAA;AAHiB,SAAA,YAAA;AACA,SAAA,qBAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAA6D;AAC1E,WAAO,MAAM,cAAc,OAAA,EACzB,OAAO,IAAI,EACX,OAAO,aAAa,EACpB,KAAK,UAAU,EACf;AAAA,MAAM,QACN,GAAG;AAAA,QACF,CAAA,YACC,QACE,KAAK,oBAAoB,EACzB,MAAM,CAAA,SAAQ,KAAK,UAAU,CAAC,sBAAsB,aAAa,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,EACvF,MAAM,EAAE,YAAY,KAAK,UAAA,CAAW;AAAA,MAAA;AAAA,IACxC,EAEA,MAAM,CAAA,OAAM;AACZ,YAAM,aAAa,KAAK,mBAAmB,QAAQ;AACnD,aAAO,aAAa,GAAG,MAAM,CAAA,OAAM,GAAG,GAAG,CAAC,YAAY,IAAI,GAAG,UAAU,CAAC,IAAI;AAAA,IAC7E,CAAC,EACA,MAAM,CAAA,OAAM;AACZ,YAAM,EAAE,OAAO,YAAY,SAAA,IAAa,KAAK,mBAAmB,UAAU,CAAA;AAC1E,WAAK,SAAS,aAAa,eAAe,WAAW;AACpD,cAAM,IAAI,wBAAA;AAAA,MACX;AAEA,YAAM,cAAc,cAAc,OAAA,EAChC,KAAK,QAAQ,EACb,MAAM,CAAA,SAAQ,KAAK,UAAU,CAAC,UAAU,aAAa,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,EAC3E,MAAM,CAAAA,QAAM,QAAQA,IAAG,MAAM,CAAA,OAAM,GAAG,GAAG,SAAS,KAAK,CAAC,IAAIA,GAAE,EAC9D,MAAM,CAAAA,QAAM,WAAWA,IAAG,MAAM,CAAA,OAAM,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,QAAQ,CAAC,IAAIA,GAAE;AAE/E,UAAI,SAAS,YAAY,eAAe,UAAU;AACjD,eAAO,GAAG,MAAM,CAAA,OAAM,GAAG,OAAO,WAAW,CAAC;AAAA,MAC7C;AAEA,UAAI,eAAe,WAAW;AAC7B,eAAO,GAAG,MAAM,CAAA,OAAM,GAAG,IAAI,CAAAC,QAAMA,IAAG,OAAO,WAAW,CAAC,CAAC;AAAA,MAC3D;AAEA,aAAO;AAAA,IACR,CAAC,EACA,QAAQ,CAAC,YAAY,IAAI,CAAC,EAC1B,MAAM,KAAK,mBAAmB,SAAS,QAAW,KAAK,mBAAmB,UAAU,MAAS,EAC7F,UAAU,EAAE;AAAA,EACf;AACD;"}
+{"version":3,"file":"ProjectMembersQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/membership/ProjectMembersQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\nimport { MemberType, ProjectMembersInput } from '../../../schema/index.js'\nimport { ImplementationException } from '../../../exceptions.js'\n\nexport class ProjectMembersQuery extends DatabaseQuery<ProjectMembersQueryResult> {\n\tconstructor(\n\t\tprivate readonly projectId: string,\n\t\tprivate readonly projectMemberInput: ProjectMembersInput,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectMembersQueryResult> {\n\t\treturn await SelectBuilder.create<{ id: string; description: string }>()\n\t\t\t.select('id')\n\t\t\t.select('description')\n\t\t\t.from('identity')\n\t\t\t.where(it =>\n\t\t\t\tit.exists(\n\t\t\t\t\tbuilder =>\n\t\t\t\t\t\tbuilder\n\t\t\t\t\t\t\t.from('project_membership')\n\t\t\t\t\t\t\t.where(expr => expr.columnsEq(['project_membership', 'identity_id'], ['identity', 'id']))\n\t\t\t\t\t\t\t.where({ project_id: this.projectId }),\n\t\t\t\t)\n\t\t\t)\n\t\t\t.match(qb => {\n\t\t\t\tconst identityId = this.projectMemberInput.filter?.identityId\n\t\t\t\treturn identityId ? qb.where(it => it.in(['identity', 'id'], identityId)) : qb\n\t\t\t})\n\t\t\t.match(qb => {\n\t\t\t\tconst { email, memberType, personId } = this.projectMemberInput.filter ?? {}\n\t\t\t\tif ((email || personId) && memberType === 'API_KEY') {\n\t\t\t\t\tthrow new ImplementationException()\n\t\t\t\t}\n\n\t\t\t\tconst personQuery = SelectBuilder.create()\n\t\t\t\t\t.from('person')\n\t\t\t\t\t.where(expr => expr.columnsEq(['person', 'identity_id'], ['identity', 'id']))\n\t\t\t\t\t.match(qb => email ? qb.where(it => it.in('email', email)) : qb)\n\t\t\t\t\t.match(qb => personId ? qb.where(it => it.in(['person', 'id'], personId)) : qb)\n\n\t\t\t\tif (email || personId || memberType === 'PERSON') {\n\t\t\t\t\treturn qb.where(it => it.exists(personQuery))\n\t\t\t\t}\n\n\t\t\t\tif (memberType === 'API_KEY') {\n\t\t\t\t\treturn qb.where(it => it.not(it => it.exists(personQuery)))\n\t\t\t\t}\n\n\t\t\t\treturn qb\n\t\t\t})\n\t\t\t.orderBy(['identity', 'id'])\n\t\t\t.limit(this.projectMemberInput.limit ?? undefined, this.projectMemberInput.offset ?? undefined)\n\t\t\t.getResult(db)\n\t}\n}\n\nexport interface ProjectMembersQueryRow {\n\tid: string\n\tdescription: string\n}\n\nexport type ProjectMembersQueryResult = ProjectMembersQueryRow[]\n"],"names":["qb","it"],"mappings":";;AAIO,MAAM,4BAA4B,cAAyC;AAAA,EACjF,YACkB,WACA,oBAChB;AACD,UAAA;AAHiB,SAAA,YAAA;AACA,SAAA,qBAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAA6D;AAC1E,WAAO,MAAM,cAAc,OAAA,EACzB,OAAO,IAAI,EACX,OAAO,aAAa,EACpB,KAAK,UAAU,EACf;AAAA,MAAM,QACN,GAAG;AAAA,QACF,CAAA,YACC,QACE,KAAK,oBAAoB,EACzB,MAAM,CAAA,SAAQ,KAAK,UAAU,CAAC,sBAAsB,aAAa,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,EACvF,MAAM,EAAE,YAAY,KAAK,UAAA,CAAW;AAAA,MAAA;AAAA,IACxC,EAEA,MAAM,CAAA,OAAM;AACZ,YAAM,aAAa,KAAK,mBAAmB,QAAQ;AACnD,aAAO,aAAa,GAAG,MAAM,CAAA,OAAM,GAAG,GAAG,CAAC,YAAY,IAAI,GAAG,UAAU,CAAC,IAAI;AAAA,IAC7E,CAAC,EACA,MAAM,CAAA,OAAM;AACZ,YAAM,EAAE,OAAO,YAAY,SAAA,IAAa,KAAK,mBAAmB,UAAU,CAAA;AAC1E,WAAK,SAAS,aAAa,eAAe,WAAW;AACpD,cAAM,IAAI,wBAAA;AAAA,MACX;AAEA,YAAM,cAAc,cAAc,OAAA,EAChC,KAAK,QAAQ,EACb,MAAM,CAAA,SAAQ,KAAK,UAAU,CAAC,UAAU,aAAa,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,EAC3E,MAAM,CAAAA,QAAM,QAAQA,IAAG,MAAM,CAAA,OAAM,GAAG,GAAG,SAAS,KAAK,CAAC,IAAIA,GAAE,EAC9D,MAAM,CAAAA,QAAM,WAAWA,IAAG,MAAM,CAAA,OAAM,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,QAAQ,CAAC,IAAIA,GAAE;AAE/E,UAAI,SAAS,YAAY,eAAe,UAAU;AACjD,eAAO,GAAG,MAAM,CAAA,OAAM,GAAG,OAAO,WAAW,CAAC;AAAA,MAC7C;AAEA,UAAI,eAAe,WAAW;AAC7B,eAAO,GAAG,MAAM,CAAA,OAAM,GAAG,IAAI,CAAAC,QAAMA,IAAG,OAAO,WAAW,CAAC,CAAC;AAAA,MAC3D;AAEA,aAAO;AAAA,IACR,CAAC,EACA,QAAQ,CAAC,YAAY,IAAI,CAAC,EAC1B,MAAM,KAAK,mBAAmB,SAAS,QAAW,KAAK,mBAAmB,UAAU,MAAS,EAC7F,UAAU,EAAE;AAAA,EACf;AACD;"}

package/dist/development/src/model/queries/membership/ProjectMembershipByIdentityQuery.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ProjectMembershipByIdentityQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/membership/ProjectMembershipByIdentityQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\nimport { byProjectSlug } from './ProjectSlugSpecification'\nimport { Acl } from '@contember/schema'\n\nclass ProjectMembershipByIdentityQuery extends DatabaseQuery<ProjectMembershipByIdentityQuery.Result> {\n\tconstructor(private readonly project: { id: string } | { slug: string }, private readonly identityId: string[]) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectMembershipByIdentityQuery.Result> {\n\t\tlet qb = SelectBuilder.create<ProjectMembershipByIdentityQuery.Row>()\n\t\tqb = qb\n\t\t\t.with('memberships', qb =>\n\t\t\t\tqb\n\t\t\t\t\t.select(['project_membership', 'id'])\n\t\t\t\t\t.select(['project_membership', 'role'])\n\t\t\t\t\t.select(['project_membership', 'identity_id'])\n\t\t\t\t\t.where(expr => expr.in('identity_id', this.identityId))\n\t\t\t\t\t.from('project_membership')\n\t\t\t\t\t.match(qb =>\n\t\t\t\t\t\t'id' in this.project\n\t\t\t\t\t\t\t? qb.where({\n\t\t\t\t\t\t\t\tproject_id: this.project.id,\n\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\t: qb.match(byProjectSlug(this.project.slug))\n\t\t\t\t\t))\n\t\t\t.with('variables', qb =>\n\t\t\t\tqb\n\t\t\t\t\t.select('membership_id')\n\t\t\t\t\t.select(cb => cb.raw(\"json_agg(json_build_object('name', variable, 'values', value))\"), 'variables')\n\t\t\t\t\t.from('project_membership_variable')\n\t\t\t\t\t.join('memberships', undefined, expr => expr.columnsEq(['project_membership_variable', 'membership_id'], ['memberships', 'id']))\n\t\t\t\t\t.groupBy('membership_id'))\n\t\t\t.select('role')\n\t\t\t.select(expr => expr.raw(\"coalesce(variables, '[]'::json)\"), 'variables')\n\t\t\t.select('identity_id', 'identityId')\n\t\t\t.from('memberships')\n\t\t\t.leftJoin('variables', undefined, expr => expr.columnsEq(['memberships', 'id'], ['variables', 'membership_id']))\n\n\t\treturn await qb.getResult(db)\n\t}\n}\n\nnamespace ProjectMembershipByIdentityQuery {\n\texport type Row = Acl.Membership & { identityId: string }\n\texport type Result = readonly Row[]\n}\n\nexport { ProjectMembershipByIdentityQuery }\n"],"names":["DatabaseQuery","SelectBuilder","qb","byProjectSlug"],"mappings":";;;;AAIA,MAAM,yCAAyCA,SAAAA,cAAuD;AAAA,EACrG,YAA6B,SAA6D,YAAsB;AAC/G,UAAA;AAD4B,SAAA,UAAA;AAA6D,SAAA,aAAA;AAAA,EAE1F;AAAA,EAEA,MAAM,MAAM,EAAE,MAA2E;AACxF,QAAI,KAAKC,SAAAA,cAAc,OAAA;AACvB,SAAK,GACH,KAAK,eAAe,CAAAC,QACpBA,IACE,OAAO,CAAC,sBAAsB,IAAI,CAAC,EACnC,OAAO,CAAC,sBAAsB,MAAM,CAAC,EACrC,OAAO,CAAC,sBAAsB,aAAa,CAAC,EAC5C,MAAM,CAAA,SAAQ,KAAK,GAAG,eAAe,KAAK,UAAU,CAAC,EACrD,KAAK,oBAAoB,EACzB;AAAA,MAAM,CAAAA,QACN,QAAQ,KAAK,UACVA,IAAG,MAAM;AAAA,QACV,YAAY,KAAK,QAAQ;AAAA,MAAA,CACzB,IACCA,IAAG,MAAMC,yBAAAA,cAAc,KAAK,QAAQ,IAAI,CAAC;AAAA,IAAA,CAC5C,EACF,KAAK,aAAa,CAAAD,QAClBA,IACE,OAAO,eAAe,EACtB,OAAO,CAAA,OAAM,GAAG,IAAI,gEAAgE,GAAG,WAAW,EAClG,KAAK,6BAA6B,EAClC,KAAK,eAAe,QAAW,CAAA,SAAQ,KAAK,UAAU,CAAC,+BAA+B,eAAe,GAAG,CAAC,eAAe,IAAI,CAAC,CAAC,EAC9H,QAAQ,eAAe,CAAC,EAC1B,OAAO,MAAM,EACb,OAAO,CAAA,SAAQ,KAAK,IAAI,iCAAiC,GAAG,WAAW,EACvE,OAAO,eAAe,YAAY,EAClC,KAAK,aAAa,EAClB,SAAS,aAAa,QAAW,UAAQ,KAAK,UAAU,CAAC,eAAe,IAAI,GAAG,CAAC,aAAa,eAAe,CAAC,CAAC;AAEhH,WAAO,MAAM,GAAG,UAAU,EAAE;AAAA,EAC7B;AACD;;"}
+{"version":3,"file":"ProjectMembershipByIdentityQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/membership/ProjectMembershipByIdentityQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\nimport { byProjectSlug } from './ProjectSlugSpecification.js'\nimport { Acl } from '@contember/schema'\n\nclass ProjectMembershipByIdentityQuery extends DatabaseQuery<ProjectMembershipByIdentityQuery.Result> {\n\tconstructor(private readonly project: { id: string } | { slug: string }, private readonly identityId: string[]) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectMembershipByIdentityQuery.Result> {\n\t\tlet qb = SelectBuilder.create<ProjectMembershipByIdentityQuery.Row>()\n\t\tqb = qb\n\t\t\t.with('memberships', qb =>\n\t\t\t\tqb\n\t\t\t\t\t.select(['project_membership', 'id'])\n\t\t\t\t\t.select(['project_membership', 'role'])\n\t\t\t\t\t.select(['project_membership', 'identity_id'])\n\t\t\t\t\t.where(expr => expr.in('identity_id', this.identityId))\n\t\t\t\t\t.from('project_membership')\n\t\t\t\t\t.match(qb =>\n\t\t\t\t\t\t'id' in this.project\n\t\t\t\t\t\t\t? qb.where({\n\t\t\t\t\t\t\t\tproject_id: this.project.id,\n\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\t: qb.match(byProjectSlug(this.project.slug))\n\t\t\t\t\t))\n\t\t\t.with('variables', qb =>\n\t\t\t\tqb\n\t\t\t\t\t.select('membership_id')\n\t\t\t\t\t.select(cb => cb.raw(\"json_agg(json_build_object('name', variable, 'values', value))\"), 'variables')\n\t\t\t\t\t.from('project_membership_variable')\n\t\t\t\t\t.join('memberships', undefined, expr => expr.columnsEq(['project_membership_variable', 'membership_id'], ['memberships', 'id']))\n\t\t\t\t\t.groupBy('membership_id'))\n\t\t\t.select('role')\n\t\t\t.select(expr => expr.raw(\"coalesce(variables, '[]'::json)\"), 'variables')\n\t\t\t.select('identity_id', 'identityId')\n\t\t\t.from('memberships')\n\t\t\t.leftJoin('variables', undefined, expr => expr.columnsEq(['memberships', 'id'], ['variables', 'membership_id']))\n\n\t\treturn await qb.getResult(db)\n\t}\n}\n\nnamespace ProjectMembershipByIdentityQuery {\n\texport type Row = Acl.Membership & { identityId: string }\n\texport type Result = readonly Row[]\n}\n\nexport { ProjectMembershipByIdentityQuery }\n"],"names":["DatabaseQuery","SelectBuilder","qb","byProjectSlug"],"mappings":";;;;AAIA,MAAM,yCAAyCA,SAAAA,cAAuD;AAAA,EACrG,YAA6B,SAA6D,YAAsB;AAC/G,UAAA;AAD4B,SAAA,UAAA;AAA6D,SAAA,aAAA;AAAA,EAE1F;AAAA,EAEA,MAAM,MAAM,EAAE,MAA2E;AACxF,QAAI,KAAKC,SAAAA,cAAc,OAAA;AACvB,SAAK,GACH,KAAK,eAAe,CAAAC,QACpBA,IACE,OAAO,CAAC,sBAAsB,IAAI,CAAC,EACnC,OAAO,CAAC,sBAAsB,MAAM,CAAC,EACrC,OAAO,CAAC,sBAAsB,aAAa,CAAC,EAC5C,MAAM,CAAA,SAAQ,KAAK,GAAG,eAAe,KAAK,UAAU,CAAC,EACrD,KAAK,oBAAoB,EACzB;AAAA,MAAM,CAAAA,QACN,QAAQ,KAAK,UACVA,IAAG,MAAM;AAAA,QACV,YAAY,KAAK,QAAQ;AAAA,MAAA,CACzB,IACCA,IAAG,MAAMC,yBAAAA,cAAc,KAAK,QAAQ,IAAI,CAAC;AAAA,IAAA,CAC5C,EACF,KAAK,aAAa,CAAAD,QAClBA,IACE,OAAO,eAAe,EACtB,OAAO,CAAA,OAAM,GAAG,IAAI,gEAAgE,GAAG,WAAW,EAClG,KAAK,6BAA6B,EAClC,KAAK,eAAe,QAAW,CAAA,SAAQ,KAAK,UAAU,CAAC,+BAA+B,eAAe,GAAG,CAAC,eAAe,IAAI,CAAC,CAAC,EAC9H,QAAQ,eAAe,CAAC,EAC1B,OAAO,MAAM,EACb,OAAO,CAAA,SAAQ,KAAK,IAAI,iCAAiC,GAAG,WAAW,EACvE,OAAO,eAAe,YAAY,EAClC,KAAK,aAAa,EAClB,SAAS,aAAa,QAAW,UAAQ,KAAK,UAAU,CAAC,eAAe,IAAI,GAAG,CAAC,aAAa,eAAe,CAAC,CAAC;AAEhH,WAAO,MAAM,GAAG,UAAU,EAAE;AAAA,EAC7B;AACD;;"}

package/dist/development/src/model/queries/membership/ProjectMembershipByIdentityQuery.js.map

@@ -1 +1 @@
-{"version":3,"file":"ProjectMembershipByIdentityQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/membership/ProjectMembershipByIdentityQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\nimport { byProjectSlug } from './ProjectSlugSpecification'\nimport { Acl } from '@contember/schema'\n\nclass ProjectMembershipByIdentityQuery extends DatabaseQuery<ProjectMembershipByIdentityQuery.Result> {\n\tconstructor(private readonly project: { id: string } | { slug: string }, private readonly identityId: string[]) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectMembershipByIdentityQuery.Result> {\n\t\tlet qb = SelectBuilder.create<ProjectMembershipByIdentityQuery.Row>()\n\t\tqb = qb\n\t\t\t.with('memberships', qb =>\n\t\t\t\tqb\n\t\t\t\t\t.select(['project_membership', 'id'])\n\t\t\t\t\t.select(['project_membership', 'role'])\n\t\t\t\t\t.select(['project_membership', 'identity_id'])\n\t\t\t\t\t.where(expr => expr.in('identity_id', this.identityId))\n\t\t\t\t\t.from('project_membership')\n\t\t\t\t\t.match(qb =>\n\t\t\t\t\t\t'id' in this.project\n\t\t\t\t\t\t\t? qb.where({\n\t\t\t\t\t\t\t\tproject_id: this.project.id,\n\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\t: qb.match(byProjectSlug(this.project.slug))\n\t\t\t\t\t))\n\t\t\t.with('variables', qb =>\n\t\t\t\tqb\n\t\t\t\t\t.select('membership_id')\n\t\t\t\t\t.select(cb => cb.raw(\"json_agg(json_build_object('name', variable, 'values', value))\"), 'variables')\n\t\t\t\t\t.from('project_membership_variable')\n\t\t\t\t\t.join('memberships', undefined, expr => expr.columnsEq(['project_membership_variable', 'membership_id'], ['memberships', 'id']))\n\t\t\t\t\t.groupBy('membership_id'))\n\t\t\t.select('role')\n\t\t\t.select(expr => expr.raw(\"coalesce(variables, '[]'::json)\"), 'variables')\n\t\t\t.select('identity_id', 'identityId')\n\t\t\t.from('memberships')\n\t\t\t.leftJoin('variables', undefined, expr => expr.columnsEq(['memberships', 'id'], ['variables', 'membership_id']))\n\n\t\treturn await qb.getResult(db)\n\t}\n}\n\nnamespace ProjectMembershipByIdentityQuery {\n\texport type Row = Acl.Membership & { identityId: string }\n\texport type Result = readonly Row[]\n}\n\nexport { ProjectMembershipByIdentityQuery }\n"],"names":["qb"],"mappings":";;AAIA,MAAM,yCAAyC,cAAuD;AAAA,EACrG,YAA6B,SAA6D,YAAsB;AAC/G,UAAA;AAD4B,SAAA,UAAA;AAA6D,SAAA,aAAA;AAAA,EAE1F;AAAA,EAEA,MAAM,MAAM,EAAE,MAA2E;AACxF,QAAI,KAAK,cAAc,OAAA;AACvB,SAAK,GACH,KAAK,eAAe,CAAAA,QACpBA,IACE,OAAO,CAAC,sBAAsB,IAAI,CAAC,EACnC,OAAO,CAAC,sBAAsB,MAAM,CAAC,EACrC,OAAO,CAAC,sBAAsB,aAAa,CAAC,EAC5C,MAAM,CAAA,SAAQ,KAAK,GAAG,eAAe,KAAK,UAAU,CAAC,EACrD,KAAK,oBAAoB,EACzB;AAAA,MAAM,CAAAA,QACN,QAAQ,KAAK,UACVA,IAAG,MAAM;AAAA,QACV,YAAY,KAAK,QAAQ;AAAA,MAAA,CACzB,IACCA,IAAG,MAAM,cAAc,KAAK,QAAQ,IAAI,CAAC;AAAA,IAAA,CAC5C,EACF,KAAK,aAAa,CAAAA,QAClBA,IACE,OAAO,eAAe,EACtB,OAAO,CAAA,OAAM,GAAG,IAAI,gEAAgE,GAAG,WAAW,EAClG,KAAK,6BAA6B,EAClC,KAAK,eAAe,QAAW,CAAA,SAAQ,KAAK,UAAU,CAAC,+BAA+B,eAAe,GAAG,CAAC,eAAe,IAAI,CAAC,CAAC,EAC9H,QAAQ,eAAe,CAAC,EAC1B,OAAO,MAAM,EACb,OAAO,CAAA,SAAQ,KAAK,IAAI,iCAAiC,GAAG,WAAW,EACvE,OAAO,eAAe,YAAY,EAClC,KAAK,aAAa,EAClB,SAAS,aAAa,QAAW,UAAQ,KAAK,UAAU,CAAC,eAAe,IAAI,GAAG,CAAC,aAAa,eAAe,CAAC,CAAC;AAEhH,WAAO,MAAM,GAAG,UAAU,EAAE;AAAA,EAC7B;AACD;"}
+{"version":3,"file":"ProjectMembershipByIdentityQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/membership/ProjectMembershipByIdentityQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\nimport { byProjectSlug } from './ProjectSlugSpecification.js'\nimport { Acl } from '@contember/schema'\n\nclass ProjectMembershipByIdentityQuery extends DatabaseQuery<ProjectMembershipByIdentityQuery.Result> {\n\tconstructor(private readonly project: { id: string } | { slug: string }, private readonly identityId: string[]) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectMembershipByIdentityQuery.Result> {\n\t\tlet qb = SelectBuilder.create<ProjectMembershipByIdentityQuery.Row>()\n\t\tqb = qb\n\t\t\t.with('memberships', qb =>\n\t\t\t\tqb\n\t\t\t\t\t.select(['project_membership', 'id'])\n\t\t\t\t\t.select(['project_membership', 'role'])\n\t\t\t\t\t.select(['project_membership', 'identity_id'])\n\t\t\t\t\t.where(expr => expr.in('identity_id', this.identityId))\n\t\t\t\t\t.from('project_membership')\n\t\t\t\t\t.match(qb =>\n\t\t\t\t\t\t'id' in this.project\n\t\t\t\t\t\t\t? qb.where({\n\t\t\t\t\t\t\t\tproject_id: this.project.id,\n\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\t: qb.match(byProjectSlug(this.project.slug))\n\t\t\t\t\t))\n\t\t\t.with('variables', qb =>\n\t\t\t\tqb\n\t\t\t\t\t.select('membership_id')\n\t\t\t\t\t.select(cb => cb.raw(\"json_agg(json_build_object('name', variable, 'values', value))\"), 'variables')\n\t\t\t\t\t.from('project_membership_variable')\n\t\t\t\t\t.join('memberships', undefined, expr => expr.columnsEq(['project_membership_variable', 'membership_id'], ['memberships', 'id']))\n\t\t\t\t\t.groupBy('membership_id'))\n\t\t\t.select('role')\n\t\t\t.select(expr => expr.raw(\"coalesce(variables, '[]'::json)\"), 'variables')\n\t\t\t.select('identity_id', 'identityId')\n\t\t\t.from('memberships')\n\t\t\t.leftJoin('variables', undefined, expr => expr.columnsEq(['memberships', 'id'], ['variables', 'membership_id']))\n\n\t\treturn await qb.getResult(db)\n\t}\n}\n\nnamespace ProjectMembershipByIdentityQuery {\n\texport type Row = Acl.Membership & { identityId: string }\n\texport type Result = readonly Row[]\n}\n\nexport { ProjectMembershipByIdentityQuery }\n"],"names":["qb"],"mappings":";;AAIA,MAAM,yCAAyC,cAAuD;AAAA,EACrG,YAA6B,SAA6D,YAAsB;AAC/G,UAAA;AAD4B,SAAA,UAAA;AAA6D,SAAA,aAAA;AAAA,EAE1F;AAAA,EAEA,MAAM,MAAM,EAAE,MAA2E;AACxF,QAAI,KAAK,cAAc,OAAA;AACvB,SAAK,GACH,KAAK,eAAe,CAAAA,QACpBA,IACE,OAAO,CAAC,sBAAsB,IAAI,CAAC,EACnC,OAAO,CAAC,sBAAsB,MAAM,CAAC,EACrC,OAAO,CAAC,sBAAsB,aAAa,CAAC,EAC5C,MAAM,CAAA,SAAQ,KAAK,GAAG,eAAe,KAAK,UAAU,CAAC,EACrD,KAAK,oBAAoB,EACzB;AAAA,MAAM,CAAAA,QACN,QAAQ,KAAK,UACVA,IAAG,MAAM;AAAA,QACV,YAAY,KAAK,QAAQ;AAAA,MAAA,CACzB,IACCA,IAAG,MAAM,cAAc,KAAK,QAAQ,IAAI,CAAC;AAAA,IAAA,CAC5C,EACF,KAAK,aAAa,CAAAA,QAClBA,IACE,OAAO,eAAe,EACtB,OAAO,CAAA,OAAM,GAAG,IAAI,gEAAgE,GAAG,WAAW,EAClG,KAAK,6BAA6B,EAClC,KAAK,eAAe,QAAW,CAAA,SAAQ,KAAK,UAAU,CAAC,+BAA+B,eAAe,GAAG,CAAC,eAAe,IAAI,CAAC,CAAC,EAC9H,QAAQ,eAAe,CAAC,EAC1B,OAAO,MAAM,EACb,OAAO,CAAA,SAAQ,KAAK,IAAI,iCAAiC,GAAG,WAAW,EACvE,OAAO,eAAe,YAAY,EAClC,KAAK,aAAa,EAClB,SAAS,aAAa,QAAW,UAAQ,KAAK,UAAU,CAAC,eAAe,IAAI,GAAG,CAAC,aAAa,eAAe,CAAC,CAAC;AAEhH,WAAO,MAAM,GAAG,UAAU,EAAE;AAAA,EAC7B;AACD;"}

package/dist/development/src/model/queries/membership/ProjectRolesByIdentityQuery.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ProjectRolesByIdentityQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/membership/ProjectRolesByIdentityQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\nimport { byProjectSlug } from './ProjectSlugSpecification'\n\nclass ProjectRolesByIdentityQuery extends DatabaseQuery<ProjectRolesByIdentityQuery.Result> {\n\tconstructor(private readonly project: { id: string } | { slug: string }, private readonly identityId: string) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectRolesByIdentityQuery.Result> {\n\t\tlet qb = SelectBuilder.create<{ role: string }>() //\n\t\t\t.select('role')\n\t\t\t.from('project_membership')\n\t\t\t.where({\n\t\t\t\tidentity_id: this.identityId,\n\t\t\t})\n\t\tconst qbWithProjectWhere = 'id' in this.project\n\t\t\t? qb.where({\n\t\t\t\tproject_id: this.project.id,\n\t\t\t})\n\t\t\t: qb.match(byProjectSlug(this.project.slug))\n\t\tconst result = await qbWithProjectWhere.getResult(db)\n\n\t\treturn { roles: result.map(it => it.role) }\n\t}\n}\n\nnamespace ProjectRolesByIdentityQuery {\n\texport type Result = {\n\t\troles: string[]\n\t}\n}\n\nexport { ProjectRolesByIdentityQuery }\n"],"names":["DatabaseQuery","SelectBuilder","byProjectSlug"],"mappings":";;;;AAGA,MAAM,oCAAoCA,SAAAA,cAAkD;AAAA,EAC3F,YAA6B,SAA6D,YAAoB;AAC7G,UAAA;AAD4B,SAAA,UAAA;AAA6D,SAAA,aAAA;AAAA,EAE1F;AAAA,EAEA,MAAM,MAAM,EAAE,MAAsE;AACnF,QAAI,KAAKC,uBAAc,SACrB,OAAO,MAAM,EACb,KAAK,oBAAoB,EACzB,MAAM;AAAA,MACN,aAAa,KAAK;AAAA,IAAA,CAClB;AACF,UAAM,qBAAqB,QAAQ,KAAK,UACrC,GAAG,MAAM;AAAA,MACV,YAAY,KAAK,QAAQ;AAAA,IAAA,CACzB,IACC,GAAG,MAAMC,yBAAAA,cAAc,KAAK,QAAQ,IAAI,CAAC;AAC5C,UAAM,SAAS,MAAM,mBAAmB,UAAU,EAAE;AAEpD,WAAO,EAAE,OAAO,OAAO,IAAI,CAAA,OAAM,GAAG,IAAI,EAAA;AAAA,EACzC;AACD;;"}
+{"version":3,"file":"ProjectRolesByIdentityQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/membership/ProjectRolesByIdentityQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\nimport { byProjectSlug } from './ProjectSlugSpecification.js'\n\nclass ProjectRolesByIdentityQuery extends DatabaseQuery<ProjectRolesByIdentityQuery.Result> {\n\tconstructor(private readonly project: { id: string } | { slug: string }, private readonly identityId: string) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectRolesByIdentityQuery.Result> {\n\t\tlet qb = SelectBuilder.create<{ role: string }>() //\n\t\t\t.select('role')\n\t\t\t.from('project_membership')\n\t\t\t.where({\n\t\t\t\tidentity_id: this.identityId,\n\t\t\t})\n\t\tconst qbWithProjectWhere = 'id' in this.project\n\t\t\t? qb.where({\n\t\t\t\tproject_id: this.project.id,\n\t\t\t})\n\t\t\t: qb.match(byProjectSlug(this.project.slug))\n\t\tconst result = await qbWithProjectWhere.getResult(db)\n\n\t\treturn { roles: result.map(it => it.role) }\n\t}\n}\n\nnamespace ProjectRolesByIdentityQuery {\n\texport type Result = {\n\t\troles: string[]\n\t}\n}\n\nexport { ProjectRolesByIdentityQuery }\n"],"names":["DatabaseQuery","SelectBuilder","byProjectSlug"],"mappings":";;;;AAGA,MAAM,oCAAoCA,SAAAA,cAAkD;AAAA,EAC3F,YAA6B,SAA6D,YAAoB;AAC7G,UAAA;AAD4B,SAAA,UAAA;AAA6D,SAAA,aAAA;AAAA,EAE1F;AAAA,EAEA,MAAM,MAAM,EAAE,MAAsE;AACnF,QAAI,KAAKC,uBAAc,SACrB,OAAO,MAAM,EACb,KAAK,oBAAoB,EACzB,MAAM;AAAA,MACN,aAAa,KAAK;AAAA,IAAA,CAClB;AACF,UAAM,qBAAqB,QAAQ,KAAK,UACrC,GAAG,MAAM;AAAA,MACV,YAAY,KAAK,QAAQ;AAAA,IAAA,CACzB,IACC,GAAG,MAAMC,yBAAAA,cAAc,KAAK,QAAQ,IAAI,CAAC;AAC5C,UAAM,SAAS,MAAM,mBAAmB,UAAU,EAAE;AAEpD,WAAO,EAAE,OAAO,OAAO,IAAI,CAAA,OAAM,GAAG,IAAI,EAAA;AAAA,EACzC;AACD;;"}

package/dist/development/src/model/queries/membership/ProjectRolesByIdentityQuery.js.map

@@ -1 +1 @@
-{"version":3,"file":"ProjectRolesByIdentityQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/membership/ProjectRolesByIdentityQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\nimport { byProjectSlug } from './ProjectSlugSpecification'\n\nclass ProjectRolesByIdentityQuery extends DatabaseQuery<ProjectRolesByIdentityQuery.Result> {\n\tconstructor(private readonly project: { id: string } | { slug: string }, private readonly identityId: string) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectRolesByIdentityQuery.Result> {\n\t\tlet qb = SelectBuilder.create<{ role: string }>() //\n\t\t\t.select('role')\n\t\t\t.from('project_membership')\n\t\t\t.where({\n\t\t\t\tidentity_id: this.identityId,\n\t\t\t})\n\t\tconst qbWithProjectWhere = 'id' in this.project\n\t\t\t? qb.where({\n\t\t\t\tproject_id: this.project.id,\n\t\t\t})\n\t\t\t: qb.match(byProjectSlug(this.project.slug))\n\t\tconst result = await qbWithProjectWhere.getResult(db)\n\n\t\treturn { roles: result.map(it => it.role) }\n\t}\n}\n\nnamespace ProjectRolesByIdentityQuery {\n\texport type Result = {\n\t\troles: string[]\n\t}\n}\n\nexport { ProjectRolesByIdentityQuery }\n"],"names":[],"mappings":";;AAGA,MAAM,oCAAoC,cAAkD;AAAA,EAC3F,YAA6B,SAA6D,YAAoB;AAC7G,UAAA;AAD4B,SAAA,UAAA;AAA6D,SAAA,aAAA;AAAA,EAE1F;AAAA,EAEA,MAAM,MAAM,EAAE,MAAsE;AACnF,QAAI,KAAK,cAAc,SACrB,OAAO,MAAM,EACb,KAAK,oBAAoB,EACzB,MAAM;AAAA,MACN,aAAa,KAAK;AAAA,IAAA,CAClB;AACF,UAAM,qBAAqB,QAAQ,KAAK,UACrC,GAAG,MAAM;AAAA,MACV,YAAY,KAAK,QAAQ;AAAA,IAAA,CACzB,IACC,GAAG,MAAM,cAAc,KAAK,QAAQ,IAAI,CAAC;AAC5C,UAAM,SAAS,MAAM,mBAAmB,UAAU,EAAE;AAEpD,WAAO,EAAE,OAAO,OAAO,IAAI,CAAA,OAAM,GAAG,IAAI,EAAA;AAAA,EACzC;AACD;"}
+{"version":3,"file":"ProjectRolesByIdentityQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/membership/ProjectRolesByIdentityQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\nimport { byProjectSlug } from './ProjectSlugSpecification.js'\n\nclass ProjectRolesByIdentityQuery extends DatabaseQuery<ProjectRolesByIdentityQuery.Result> {\n\tconstructor(private readonly project: { id: string } | { slug: string }, private readonly identityId: string) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectRolesByIdentityQuery.Result> {\n\t\tlet qb = SelectBuilder.create<{ role: string }>() //\n\t\t\t.select('role')\n\t\t\t.from('project_membership')\n\t\t\t.where({\n\t\t\t\tidentity_id: this.identityId,\n\t\t\t})\n\t\tconst qbWithProjectWhere = 'id' in this.project\n\t\t\t? qb.where({\n\t\t\t\tproject_id: this.project.id,\n\t\t\t})\n\t\t\t: qb.match(byProjectSlug(this.project.slug))\n\t\tconst result = await qbWithProjectWhere.getResult(db)\n\n\t\treturn { roles: result.map(it => it.role) }\n\t}\n}\n\nnamespace ProjectRolesByIdentityQuery {\n\texport type Result = {\n\t\troles: string[]\n\t}\n}\n\nexport { ProjectRolesByIdentityQuery }\n"],"names":[],"mappings":";;AAGA,MAAM,oCAAoC,cAAkD;AAAA,EAC3F,YAA6B,SAA6D,YAAoB;AAC7G,UAAA;AAD4B,SAAA,UAAA;AAA6D,SAAA,aAAA;AAAA,EAE1F;AAAA,EAEA,MAAM,MAAM,EAAE,MAAsE;AACnF,QAAI,KAAK,cAAc,SACrB,OAAO,MAAM,EACb,KAAK,oBAAoB,EACzB,MAAM;AAAA,MACN,aAAa,KAAK;AAAA,IAAA,CAClB;AACF,UAAM,qBAAqB,QAAQ,KAAK,UACrC,GAAG,MAAM;AAAA,MACV,YAAY,KAAK,QAAQ;AAAA,IAAA,CACzB,IACC,GAAG,MAAM,cAAc,KAAK,QAAQ,IAAI,CAAC;AAC5C,UAAM,SAAS,MAAM,mBAAmB,UAAU,EAAE;AAEpD,WAAO,EAAE,OAAO,OAAO,IAAI,CAAA,OAAM,GAAG,IAAI,EAAA;AAAA,EACzC;AACD;"}

package/dist/development/src/model/queries/person/PersonByIdPQuery.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"PersonByIdPQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/person/PersonByIdPQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable } from '@contember/database'\nimport { MaybePersonRow } from './types'\nimport { PersonQueryBuilderFactory } from './PersonQueryBuilderFactory'\n\nclass PersonByIdPQuery extends DatabaseQuery<MaybePersonRow> {\n\tconstructor(\n\t\tprivate readonly identityProviderId: string,\n\t\tprivate readonly externalIdentifier: string,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<MaybePersonRow> {\n\t\tconst rows = await PersonQueryBuilderFactory.createPersonQueryBuilder()\n\t\t\t.join('person_identity_provider', 'idp', it => it.columnsEq(['idp', 'person_id'], ['person', 'id']))\n\t\t\t.where({\n\t\t\t\tidentity_provider_id: this.identityProviderId,\n\t\t\t\texternal_identifier: this.externalIdentifier,\n\t\t\t})\n\t\t\t.getResult(db)\n\n\t\treturn this.fetchOneOrNull(rows)\n\t}\n}\n\nexport { PersonByIdPQuery }\n"],"names":["DatabaseQuery","PersonQueryBuilderFactory"],"mappings":";;;;AAIA,MAAM,yBAAyBA,SAAAA,cAA8B;AAAA,EAC5D,YACkB,oBACA,oBAChB;AACD,UAAA;AAHiB,SAAA,qBAAA;AACA,SAAA,qBAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAAkD;AAC/D,UAAM,OAAO,MAAMC,0BAAAA,0BAA0B,yBAAA,EAC3C,KAAK,4BAA4B,OAAO,CAAA,OAAM,GAAG,UAAU,CAAC,OAAO,WAAW,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,EAClG,MAAM;AAAA,MACN,sBAAsB,KAAK;AAAA,MAC3B,qBAAqB,KAAK;AAAA,IAAA,CAC1B,EACA,UAAU,EAAE;AAEd,WAAO,KAAK,eAAe,IAAI;AAAA,EAChC;AACD;;"}
+{"version":3,"file":"PersonByIdPQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/person/PersonByIdPQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable } from '@contember/database'\nimport { MaybePersonRow } from './types.js'\nimport { PersonQueryBuilderFactory } from './PersonQueryBuilderFactory.js'\n\nclass PersonByIdPQuery extends DatabaseQuery<MaybePersonRow> {\n\tconstructor(\n\t\tprivate readonly identityProviderId: string,\n\t\tprivate readonly externalIdentifier: string,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<MaybePersonRow> {\n\t\tconst rows = await PersonQueryBuilderFactory.createPersonQueryBuilder()\n\t\t\t.join('person_identity_provider', 'idp', it => it.columnsEq(['idp', 'person_id'], ['person', 'id']))\n\t\t\t.where({\n\t\t\t\tidentity_provider_id: this.identityProviderId,\n\t\t\t\texternal_identifier: this.externalIdentifier,\n\t\t\t})\n\t\t\t.getResult(db)\n\n\t\treturn this.fetchOneOrNull(rows)\n\t}\n}\n\nexport { PersonByIdPQuery }\n"],"names":["DatabaseQuery","PersonQueryBuilderFactory"],"mappings":";;;;AAIA,MAAM,yBAAyBA,SAAAA,cAA8B;AAAA,EAC5D,YACkB,oBACA,oBAChB;AACD,UAAA;AAHiB,SAAA,qBAAA;AACA,SAAA,qBAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAAkD;AAC/D,UAAM,OAAO,MAAMC,0BAAAA,0BAA0B,yBAAA,EAC3C,KAAK,4BAA4B,OAAO,CAAA,OAAM,GAAG,UAAU,CAAC,OAAO,WAAW,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,EAClG,MAAM;AAAA,MACN,sBAAsB,KAAK;AAAA,MAC3B,qBAAqB,KAAK;AAAA,IAAA,CAC1B,EACA,UAAU,EAAE;AAEd,WAAO,KAAK,eAAe,IAAI;AAAA,EAChC;AACD;;"}

package/dist/development/src/model/queries/person/PersonByIdPQuery.js.map

@@ -1 +1 @@
-{"version":3,"file":"PersonByIdPQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/person/PersonByIdPQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable } from '@contember/database'\nimport { MaybePersonRow } from './types'\nimport { PersonQueryBuilderFactory } from './PersonQueryBuilderFactory'\n\nclass PersonByIdPQuery extends DatabaseQuery<MaybePersonRow> {\n\tconstructor(\n\t\tprivate readonly identityProviderId: string,\n\t\tprivate readonly externalIdentifier: string,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<MaybePersonRow> {\n\t\tconst rows = await PersonQueryBuilderFactory.createPersonQueryBuilder()\n\t\t\t.join('person_identity_provider', 'idp', it => it.columnsEq(['idp', 'person_id'], ['person', 'id']))\n\t\t\t.where({\n\t\t\t\tidentity_provider_id: this.identityProviderId,\n\t\t\t\texternal_identifier: this.externalIdentifier,\n\t\t\t})\n\t\t\t.getResult(db)\n\n\t\treturn this.fetchOneOrNull(rows)\n\t}\n}\n\nexport { PersonByIdPQuery }\n"],"names":[],"mappings":";;AAIA,MAAM,yBAAyB,cAA8B;AAAA,EAC5D,YACkB,oBACA,oBAChB;AACD,UAAA;AAHiB,SAAA,qBAAA;AACA,SAAA,qBAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAAkD;AAC/D,UAAM,OAAO,MAAM,0BAA0B,yBAAA,EAC3C,KAAK,4BAA4B,OAAO,CAAA,OAAM,GAAG,UAAU,CAAC,OAAO,WAAW,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,EAClG,MAAM;AAAA,MACN,sBAAsB,KAAK;AAAA,MAC3B,qBAAqB,KAAK;AAAA,IAAA,CAC1B,EACA,UAAU,EAAE;AAEd,WAAO,KAAK,eAAe,IAAI;AAAA,EAChC;AACD;"}
+{"version":3,"file":"PersonByIdPQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/person/PersonByIdPQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable } from '@contember/database'\nimport { MaybePersonRow } from './types.js'\nimport { PersonQueryBuilderFactory } from './PersonQueryBuilderFactory.js'\n\nclass PersonByIdPQuery extends DatabaseQuery<MaybePersonRow> {\n\tconstructor(\n\t\tprivate readonly identityProviderId: string,\n\t\tprivate readonly externalIdentifier: string,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<MaybePersonRow> {\n\t\tconst rows = await PersonQueryBuilderFactory.createPersonQueryBuilder()\n\t\t\t.join('person_identity_provider', 'idp', it => it.columnsEq(['idp', 'person_id'], ['person', 'id']))\n\t\t\t.where({\n\t\t\t\tidentity_provider_id: this.identityProviderId,\n\t\t\t\texternal_identifier: this.externalIdentifier,\n\t\t\t})\n\t\t\t.getResult(db)\n\n\t\treturn this.fetchOneOrNull(rows)\n\t}\n}\n\nexport { PersonByIdPQuery }\n"],"names":[],"mappings":";;AAIA,MAAM,yBAAyB,cAA8B;AAAA,EAC5D,YACkB,oBACA,oBAChB;AACD,UAAA;AAHiB,SAAA,qBAAA;AACA,SAAA,qBAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAAkD;AAC/D,UAAM,OAAO,MAAM,0BAA0B,yBAAA,EAC3C,KAAK,4BAA4B,OAAO,CAAA,OAAM,GAAG,UAAU,CAAC,OAAO,WAAW,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,EAClG,MAAM;AAAA,MACN,sBAAsB,KAAK;AAAA,MAC3B,qBAAqB,KAAK;AAAA,IAAA,CAC1B,EACA,UAAU,EAAE;AAEd,WAAO,KAAK,eAAe,IAAI;AAAA,EAChC;AACD;"}

package/dist/development/src/model/queries/person/PersonByIdentityBatchQuery.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"PersonByIdentityBatchQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/person/PersonByIdentityBatchQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable } from '@contember/database'\nimport { PersonRow } from './types'\nimport { PersonQueryBuilderFactory } from './PersonQueryBuilderFactory'\n\nexport class PersonByIdentityBatchQuery extends DatabaseQuery<PersonRow[]> {\n\tconstructor(private identityIds: string[]) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<PersonRow[]> {\n\t\tconst rows = await PersonQueryBuilderFactory.createPersonQueryBuilder()\n\t\t\t.where(expr => expr.in(['person', 'identity_id'], this.identityIds))\n\t\t\t.getResult(db)\n\n\t\treturn rows\n\t}\n}\n"],"names":["DatabaseQuery","PersonQueryBuilderFactory"],"mappings":";;;;AAIO,MAAM,mCAAmCA,SAAAA,cAA2B;AAAA,EAC1E,YAAoB,aAAuB;AAC1C,UAAA;AADmB,SAAA,cAAA;AAAA,EAEpB;AAAA,EAEA,MAAM,MAAM,EAAE,MAA+C;AAC5D,UAAM,OAAO,MAAMC,oDAA0B,2BAC3C,MAAM,UAAQ,KAAK,GAAG,CAAC,UAAU,aAAa,GAAG,KAAK,WAAW,CAAC,EAClE,UAAU,EAAE;AAEd,WAAO;AAAA,EACR;AACD;;"}
+{"version":3,"file":"PersonByIdentityBatchQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/person/PersonByIdentityBatchQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable } from '@contember/database'\nimport { PersonRow } from './types.js'\nimport { PersonQueryBuilderFactory } from './PersonQueryBuilderFactory.js'\n\nexport class PersonByIdentityBatchQuery extends DatabaseQuery<PersonRow[]> {\n\tconstructor(private identityIds: string[]) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<PersonRow[]> {\n\t\tconst rows = await PersonQueryBuilderFactory.createPersonQueryBuilder()\n\t\t\t.where(expr => expr.in(['person', 'identity_id'], this.identityIds))\n\t\t\t.getResult(db)\n\n\t\treturn rows\n\t}\n}\n"],"names":["DatabaseQuery","PersonQueryBuilderFactory"],"mappings":";;;;AAIO,MAAM,mCAAmCA,SAAAA,cAA2B;AAAA,EAC1E,YAAoB,aAAuB;AAC1C,UAAA;AADmB,SAAA,cAAA;AAAA,EAEpB;AAAA,EAEA,MAAM,MAAM,EAAE,MAA+C;AAC5D,UAAM,OAAO,MAAMC,oDAA0B,2BAC3C,MAAM,UAAQ,KAAK,GAAG,CAAC,UAAU,aAAa,GAAG,KAAK,WAAW,CAAC,EAClE,UAAU,EAAE;AAEd,WAAO;AAAA,EACR;AACD;;"}

package/dist/development/src/model/queries/person/PersonByIdentityBatchQuery.js.map

@@ -1 +1 @@
-{"version":3,"file":"PersonByIdentityBatchQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/person/PersonByIdentityBatchQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable } from '@contember/database'\nimport { PersonRow } from './types'\nimport { PersonQueryBuilderFactory } from './PersonQueryBuilderFactory'\n\nexport class PersonByIdentityBatchQuery extends DatabaseQuery<PersonRow[]> {\n\tconstructor(private identityIds: string[]) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<PersonRow[]> {\n\t\tconst rows = await PersonQueryBuilderFactory.createPersonQueryBuilder()\n\t\t\t.where(expr => expr.in(['person', 'identity_id'], this.identityIds))\n\t\t\t.getResult(db)\n\n\t\treturn rows\n\t}\n}\n"],"names":[],"mappings":";;AAIO,MAAM,mCAAmC,cAA2B;AAAA,EAC1E,YAAoB,aAAuB;AAC1C,UAAA;AADmB,SAAA,cAAA;AAAA,EAEpB;AAAA,EAEA,MAAM,MAAM,EAAE,MAA+C;AAC5D,UAAM,OAAO,MAAM,0BAA0B,2BAC3C,MAAM,UAAQ,KAAK,GAAG,CAAC,UAAU,aAAa,GAAG,KAAK,WAAW,CAAC,EAClE,UAAU,EAAE;AAEd,WAAO;AAAA,EACR;AACD;"}
+{"version":3,"file":"PersonByIdentityBatchQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/person/PersonByIdentityBatchQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable } from '@contember/database'\nimport { PersonRow } from './types.js'\nimport { PersonQueryBuilderFactory } from './PersonQueryBuilderFactory.js'\n\nexport class PersonByIdentityBatchQuery extends DatabaseQuery<PersonRow[]> {\n\tconstructor(private identityIds: string[]) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<PersonRow[]> {\n\t\tconst rows = await PersonQueryBuilderFactory.createPersonQueryBuilder()\n\t\t\t.where(expr => expr.in(['person', 'identity_id'], this.identityIds))\n\t\t\t.getResult(db)\n\n\t\treturn rows\n\t}\n}\n"],"names":[],"mappings":";;AAIO,MAAM,mCAAmC,cAA2B;AAAA,EAC1E,YAAoB,aAAuB;AAC1C,UAAA;AADmB,SAAA,cAAA;AAAA,EAEpB;AAAA,EAEA,MAAM,MAAM,EAAE,MAA+C;AAC5D,UAAM,OAAO,MAAM,0BAA0B,2BAC3C,MAAM,UAAQ,KAAK,GAAG,CAAC,UAAU,aAAa,GAAG,KAAK,WAAW,CAAC,EAClE,UAAU,EAAE;AAEd,WAAO;AAAA,EACR;AACD;"}

package/dist/development/src/model/queries/person/PersonQuery.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"PersonQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/person/PersonQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Literal, Operator, SelectBuilderSpecification } from '@contember/database'\nimport { MaybePersonRow } from './types'\nimport { PersonQueryBuilderFactory } from './PersonQueryBuilderFactory'\nimport { normalizeEmail } from '../../utils/email'\n\nexport type PersonUniqueIdentifier =\n\t| { type: 'id'; id: string }\n\t| { type: 'identity'; id: string }\n\t| { type: 'email'; email: string }\n\nclass PersonQuery extends DatabaseQuery<MaybePersonRow> {\n\tprivate constructor(private readonly spec: SelectBuilderSpecification) {\n\t\tsuper()\n\t}\n\n\tstatic byUniqueIdentifier(identifier: PersonUniqueIdentifier): DatabaseQuery<MaybePersonRow> {\n\t\tswitch (identifier.type) {\n\t\t\tcase 'email':\n\t\t\t\treturn PersonQuery.byEmail(identifier.email)\n\t\t\tcase 'id':\n\t\t\t\treturn PersonQuery.byId(identifier.id)\n\t\t\tcase 'identity':\n\t\t\t\treturn PersonQuery.byIdentity(identifier.id)\n\t\t}\n\t}\n\n\tstatic byId(id: string): PersonQuery {\n\t\treturn new PersonQuery(qb => qb.where(it => it.compare(['person', 'id'], Operator.eq, id)))\n\t}\n\n\tstatic byEmail(email: string): DatabaseQuery<MaybePersonRow> {\n\t\treturn new PersonByEmailFallbackQuery(email)\n\t}\n\n\tstatic byExactEmail(email: string): PersonQuery {\n\t\treturn new PersonQuery(qb => qb.where(it => it.compare(['person', 'email'], Operator.eq, email)))\n\t}\n\n\tstatic byIdentity(identity_id: string): PersonQuery {\n\t\treturn new PersonQuery(qb => qb.where(it => it.compare(['person', 'identity_id'], Operator.eq, identity_id)))\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<MaybePersonRow> {\n\t\tconst rows = await PersonQueryBuilderFactory.createPersonQueryBuilder()\n\t\t\t.match(this.spec)\n\t\t\t.getResult(db)\n\n\t\treturn this.fetchOneOrNull(rows)\n\t}\n}\n\nclass PersonByEmailFallbackQuery extends DatabaseQuery<MaybePersonRow> {\n\tconstructor(\n\t\tprivate readonly email: string,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch(ctx: DatabaseQueryable): Promise<MaybePersonRow> {\n\t\tconst handler = ctx.getHandler()\n\t\tconst exact = await handler.fetch(PersonQuery.byExactEmail(this.email))\n\t\tif (exact) {\n\t\t\treturn exact\n\t\t}\n\t\tconst normalizedEmail = normalizeEmail(this.email)\n\t\tif (normalizedEmail === this.email) {\n\t\t\treturn null\n\t\t}\n\t\treturn await handler.fetch(PersonQuery.byExactEmail(normalizedEmail))\n\t}\n}\n\nexport { PersonQuery }\n"],"names":["DatabaseQuery","Operator","email","PersonQueryBuilderFactory","normalizeEmail"],"mappings":";;;;;AAUA,MAAM,oBAAoBA,SAAAA,cAA8B;AAAA,EAC/C,YAA6B,MAAkC;AACtE,UAAA;AADoC,SAAA,OAAA;AAAA,EAErC;AAAA,EAEA,OAAO,mBAAmB,YAAmE;AAC5F,YAAQ,WAAW,MAAA;AAAA,MAClB,KAAK;AACJ,eAAO,YAAY,QAAQ,WAAW,KAAK;AAAA,MAC5C,KAAK;AACJ,eAAO,YAAY,KAAK,WAAW,EAAE;AAAA,MACtC,KAAK;AACJ,eAAO,YAAY,WAAW,WAAW,EAAE;AAAA,IAAA;AAAA,EAE9C;AAAA,EAEA,OAAO,KAAK,IAAyB;AACpC,WAAO,IAAI,YAAY,CAAA,OAAM,GAAG,MAAM,QAAM,GAAG,QAAQ,CAAC,UAAU,IAAI,GAAGC,SAAAA,SAAS,IAAI,EAAE,CAAC,CAAC;AAAA,EAC3F;AAAA,EAEA,OAAO,QAAQC,QAA8C;AAC5D,WAAO,IAAI,2BAA2BA,MAAK;AAAA,EAC5C;AAAA,EAEA,OAAO,aAAaA,QAA4B;AAC/C,WAAO,IAAI,YAAY,CAAA,OAAM,GAAG,MAAM,QAAM,GAAG,QAAQ,CAAC,UAAU,OAAO,GAAGD,SAAAA,SAAS,IAAIC,MAAK,CAAC,CAAC;AAAA,EACjG;AAAA,EAEA,OAAO,WAAW,aAAkC;AACnD,WAAO,IAAI,YAAY,CAAA,OAAM,GAAG,MAAM,QAAM,GAAG,QAAQ,CAAC,UAAU,aAAa,GAAGD,SAAAA,SAAS,IAAI,WAAW,CAAC,CAAC;AAAA,EAC7G;AAAA,EAEA,MAAM,MAAM,EAAE,MAAkD;AAC/D,UAAM,OAAO,MAAME,0BAAAA,0BAA0B,yBAAA,EAC3C,MAAM,KAAK,IAAI,EACf,UAAU,EAAE;AAEd,WAAO,KAAK,eAAe,IAAI;AAAA,EAChC;AACD;AAEA,MAAM,mCAAmCH,SAAAA,cAA8B;AAAA,EACtE,YACkBE,QAChB;AACD,UAAA;AAFiB,SAAA,QAAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,KAAiD;AAC5D,UAAM,UAAU,IAAI,WAAA;AACpB,UAAM,QAAQ,MAAM,QAAQ,MAAM,YAAY,aAAa,KAAK,KAAK,CAAC;AACtE,QAAI,OAAO;AACV,aAAO;AAAA,IACR;AACA,UAAM,kBAAkBE,MAAAA,eAAe,KAAK,KAAK;AACjD,QAAI,oBAAoB,KAAK,OAAO;AACnC,aAAO;AAAA,IACR;AACA,WAAO,MAAM,QAAQ,MAAM,YAAY,aAAa,eAAe,CAAC;AAAA,EACrE;AACD;;"}
+{"version":3,"file":"PersonQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/person/PersonQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Literal, Operator, SelectBuilderSpecification } from '@contember/database'\nimport { MaybePersonRow } from './types.js'\nimport { PersonQueryBuilderFactory } from './PersonQueryBuilderFactory.js'\nimport { normalizeEmail } from '../../utils/email.js'\n\nexport type PersonUniqueIdentifier =\n\t| { type: 'id'; id: string }\n\t| { type: 'identity'; id: string }\n\t| { type: 'email'; email: string }\n\nclass PersonQuery extends DatabaseQuery<MaybePersonRow> {\n\tprivate constructor(private readonly spec: SelectBuilderSpecification) {\n\t\tsuper()\n\t}\n\n\tstatic byUniqueIdentifier(identifier: PersonUniqueIdentifier): DatabaseQuery<MaybePersonRow> {\n\t\tswitch (identifier.type) {\n\t\t\tcase 'email':\n\t\t\t\treturn PersonQuery.byEmail(identifier.email)\n\t\t\tcase 'id':\n\t\t\t\treturn PersonQuery.byId(identifier.id)\n\t\t\tcase 'identity':\n\t\t\t\treturn PersonQuery.byIdentity(identifier.id)\n\t\t}\n\t}\n\n\tstatic byId(id: string): PersonQuery {\n\t\treturn new PersonQuery(qb => qb.where(it => it.compare(['person', 'id'], Operator.eq, id)))\n\t}\n\n\tstatic byEmail(email: string): DatabaseQuery<MaybePersonRow> {\n\t\treturn new PersonByEmailFallbackQuery(email)\n\t}\n\n\tstatic byExactEmail(email: string): PersonQuery {\n\t\treturn new PersonQuery(qb => qb.where(it => it.compare(['person', 'email'], Operator.eq, email)))\n\t}\n\n\tstatic byIdentity(identity_id: string): PersonQuery {\n\t\treturn new PersonQuery(qb => qb.where(it => it.compare(['person', 'identity_id'], Operator.eq, identity_id)))\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<MaybePersonRow> {\n\t\tconst rows = await PersonQueryBuilderFactory.createPersonQueryBuilder()\n\t\t\t.match(this.spec)\n\t\t\t.getResult(db)\n\n\t\treturn this.fetchOneOrNull(rows)\n\t}\n}\n\nclass PersonByEmailFallbackQuery extends DatabaseQuery<MaybePersonRow> {\n\tconstructor(\n\t\tprivate readonly email: string,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch(ctx: DatabaseQueryable): Promise<MaybePersonRow> {\n\t\tconst handler = ctx.getHandler()\n\t\tconst exact = await handler.fetch(PersonQuery.byExactEmail(this.email))\n\t\tif (exact) {\n\t\t\treturn exact\n\t\t}\n\t\tconst normalizedEmail = normalizeEmail(this.email)\n\t\tif (normalizedEmail === this.email) {\n\t\t\treturn null\n\t\t}\n\t\treturn await handler.fetch(PersonQuery.byExactEmail(normalizedEmail))\n\t}\n}\n\nexport { PersonQuery }\n"],"names":["DatabaseQuery","Operator","email","PersonQueryBuilderFactory","normalizeEmail"],"mappings":";;;;;AAUA,MAAM,oBAAoBA,SAAAA,cAA8B;AAAA,EAC/C,YAA6B,MAAkC;AACtE,UAAA;AADoC,SAAA,OAAA;AAAA,EAErC;AAAA,EAEA,OAAO,mBAAmB,YAAmE;AAC5F,YAAQ,WAAW,MAAA;AAAA,MAClB,KAAK;AACJ,eAAO,YAAY,QAAQ,WAAW,KAAK;AAAA,MAC5C,KAAK;AACJ,eAAO,YAAY,KAAK,WAAW,EAAE;AAAA,MACtC,KAAK;AACJ,eAAO,YAAY,WAAW,WAAW,EAAE;AAAA,IAAA;AAAA,EAE9C;AAAA,EAEA,OAAO,KAAK,IAAyB;AACpC,WAAO,IAAI,YAAY,CAAA,OAAM,GAAG,MAAM,QAAM,GAAG,QAAQ,CAAC,UAAU,IAAI,GAAGC,SAAAA,SAAS,IAAI,EAAE,CAAC,CAAC;AAAA,EAC3F;AAAA,EAEA,OAAO,QAAQC,QAA8C;AAC5D,WAAO,IAAI,2BAA2BA,MAAK;AAAA,EAC5C;AAAA,EAEA,OAAO,aAAaA,QAA4B;AAC/C,WAAO,IAAI,YAAY,CAAA,OAAM,GAAG,MAAM,QAAM,GAAG,QAAQ,CAAC,UAAU,OAAO,GAAGD,SAAAA,SAAS,IAAIC,MAAK,CAAC,CAAC;AAAA,EACjG;AAAA,EAEA,OAAO,WAAW,aAAkC;AACnD,WAAO,IAAI,YAAY,CAAA,OAAM,GAAG,MAAM,QAAM,GAAG,QAAQ,CAAC,UAAU,aAAa,GAAGD,SAAAA,SAAS,IAAI,WAAW,CAAC,CAAC;AAAA,EAC7G;AAAA,EAEA,MAAM,MAAM,EAAE,MAAkD;AAC/D,UAAM,OAAO,MAAME,0BAAAA,0BAA0B,yBAAA,EAC3C,MAAM,KAAK,IAAI,EACf,UAAU,EAAE;AAEd,WAAO,KAAK,eAAe,IAAI;AAAA,EAChC;AACD;AAEA,MAAM,mCAAmCH,SAAAA,cAA8B;AAAA,EACtE,YACkBE,QAChB;AACD,UAAA;AAFiB,SAAA,QAAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,KAAiD;AAC5D,UAAM,UAAU,IAAI,WAAA;AACpB,UAAM,QAAQ,MAAM,QAAQ,MAAM,YAAY,aAAa,KAAK,KAAK,CAAC;AACtE,QAAI,OAAO;AACV,aAAO;AAAA,IACR;AACA,UAAM,kBAAkBE,MAAAA,eAAe,KAAK,KAAK;AACjD,QAAI,oBAAoB,KAAK,OAAO;AACnC,aAAO;AAAA,IACR;AACA,WAAO,MAAM,QAAQ,MAAM,YAAY,aAAa,eAAe,CAAC;AAAA,EACrE;AACD;;"}

package/dist/development/src/model/queries/person/PersonQuery.js.map

@@ -1 +1 @@
-{"version":3,"file":"PersonQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/person/PersonQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Literal, Operator, SelectBuilderSpecification } from '@contember/database'\nimport { MaybePersonRow } from './types'\nimport { PersonQueryBuilderFactory } from './PersonQueryBuilderFactory'\nimport { normalizeEmail } from '../../utils/email'\n\nexport type PersonUniqueIdentifier =\n\t| { type: 'id'; id: string }\n\t| { type: 'identity'; id: string }\n\t| { type: 'email'; email: string }\n\nclass PersonQuery extends DatabaseQuery<MaybePersonRow> {\n\tprivate constructor(private readonly spec: SelectBuilderSpecification) {\n\t\tsuper()\n\t}\n\n\tstatic byUniqueIdentifier(identifier: PersonUniqueIdentifier): DatabaseQuery<MaybePersonRow> {\n\t\tswitch (identifier.type) {\n\t\t\tcase 'email':\n\t\t\t\treturn PersonQuery.byEmail(identifier.email)\n\t\t\tcase 'id':\n\t\t\t\treturn PersonQuery.byId(identifier.id)\n\t\t\tcase 'identity':\n\t\t\t\treturn PersonQuery.byIdentity(identifier.id)\n\t\t}\n\t}\n\n\tstatic byId(id: string): PersonQuery {\n\t\treturn new PersonQuery(qb => qb.where(it => it.compare(['person', 'id'], Operator.eq, id)))\n\t}\n\n\tstatic byEmail(email: string): DatabaseQuery<MaybePersonRow> {\n\t\treturn new PersonByEmailFallbackQuery(email)\n\t}\n\n\tstatic byExactEmail(email: string): PersonQuery {\n\t\treturn new PersonQuery(qb => qb.where(it => it.compare(['person', 'email'], Operator.eq, email)))\n\t}\n\n\tstatic byIdentity(identity_id: string): PersonQuery {\n\t\treturn new PersonQuery(qb => qb.where(it => it.compare(['person', 'identity_id'], Operator.eq, identity_id)))\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<MaybePersonRow> {\n\t\tconst rows = await PersonQueryBuilderFactory.createPersonQueryBuilder()\n\t\t\t.match(this.spec)\n\t\t\t.getResult(db)\n\n\t\treturn this.fetchOneOrNull(rows)\n\t}\n}\n\nclass PersonByEmailFallbackQuery extends DatabaseQuery<MaybePersonRow> {\n\tconstructor(\n\t\tprivate readonly email: string,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch(ctx: DatabaseQueryable): Promise<MaybePersonRow> {\n\t\tconst handler = ctx.getHandler()\n\t\tconst exact = await handler.fetch(PersonQuery.byExactEmail(this.email))\n\t\tif (exact) {\n\t\t\treturn exact\n\t\t}\n\t\tconst normalizedEmail = normalizeEmail(this.email)\n\t\tif (normalizedEmail === this.email) {\n\t\t\treturn null\n\t\t}\n\t\treturn await handler.fetch(PersonQuery.byExactEmail(normalizedEmail))\n\t}\n}\n\nexport { PersonQuery }\n"],"names":[],"mappings":";;;AAUA,MAAM,oBAAoB,cAA8B;AAAA,EAC/C,YAA6B,MAAkC;AACtE,UAAA;AADoC,SAAA,OAAA;AAAA,EAErC;AAAA,EAEA,OAAO,mBAAmB,YAAmE;AAC5F,YAAQ,WAAW,MAAA;AAAA,MAClB,KAAK;AACJ,eAAO,YAAY,QAAQ,WAAW,KAAK;AAAA,MAC5C,KAAK;AACJ,eAAO,YAAY,KAAK,WAAW,EAAE;AAAA,MACtC,KAAK;AACJ,eAAO,YAAY,WAAW,WAAW,EAAE;AAAA,IAAA;AAAA,EAE9C;AAAA,EAEA,OAAO,KAAK,IAAyB;AACpC,WAAO,IAAI,YAAY,CAAA,OAAM,GAAG,MAAM,QAAM,GAAG,QAAQ,CAAC,UAAU,IAAI,GAAG,SAAS,IAAI,EAAE,CAAC,CAAC;AAAA,EAC3F;AAAA,EAEA,OAAO,QAAQ,OAA8C;AAC5D,WAAO,IAAI,2BAA2B,KAAK;AAAA,EAC5C;AAAA,EAEA,OAAO,aAAa,OAA4B;AAC/C,WAAO,IAAI,YAAY,CAAA,OAAM,GAAG,MAAM,QAAM,GAAG,QAAQ,CAAC,UAAU,OAAO,GAAG,SAAS,IAAI,KAAK,CAAC,CAAC;AAAA,EACjG;AAAA,EAEA,OAAO,WAAW,aAAkC;AACnD,WAAO,IAAI,YAAY,CAAA,OAAM,GAAG,MAAM,QAAM,GAAG,QAAQ,CAAC,UAAU,aAAa,GAAG,SAAS,IAAI,WAAW,CAAC,CAAC;AAAA,EAC7G;AAAA,EAEA,MAAM,MAAM,EAAE,MAAkD;AAC/D,UAAM,OAAO,MAAM,0BAA0B,yBAAA,EAC3C,MAAM,KAAK,IAAI,EACf,UAAU,EAAE;AAEd,WAAO,KAAK,eAAe,IAAI;AAAA,EAChC;AACD;AAEA,MAAM,mCAAmC,cAA8B;AAAA,EACtE,YACkB,OAChB;AACD,UAAA;AAFiB,SAAA,QAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,KAAiD;AAC5D,UAAM,UAAU,IAAI,WAAA;AACpB,UAAM,QAAQ,MAAM,QAAQ,MAAM,YAAY,aAAa,KAAK,KAAK,CAAC;AACtE,QAAI,OAAO;AACV,aAAO;AAAA,IACR;AACA,UAAM,kBAAkB,eAAe,KAAK,KAAK;AACjD,QAAI,oBAAoB,KAAK,OAAO;AACnC,aAAO;AAAA,IACR;AACA,WAAO,MAAM,QAAQ,MAAM,YAAY,aAAa,eAAe,CAAC;AAAA,EACrE;AACD;"}
+{"version":3,"file":"PersonQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/person/PersonQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Literal, Operator, SelectBuilderSpecification } from '@contember/database'\nimport { MaybePersonRow } from './types.js'\nimport { PersonQueryBuilderFactory } from './PersonQueryBuilderFactory.js'\nimport { normalizeEmail } from '../../utils/email.js'\n\nexport type PersonUniqueIdentifier =\n\t| { type: 'id'; id: string }\n\t| { type: 'identity'; id: string }\n\t| { type: 'email'; email: string }\n\nclass PersonQuery extends DatabaseQuery<MaybePersonRow> {\n\tprivate constructor(private readonly spec: SelectBuilderSpecification) {\n\t\tsuper()\n\t}\n\n\tstatic byUniqueIdentifier(identifier: PersonUniqueIdentifier): DatabaseQuery<MaybePersonRow> {\n\t\tswitch (identifier.type) {\n\t\t\tcase 'email':\n\t\t\t\treturn PersonQuery.byEmail(identifier.email)\n\t\t\tcase 'id':\n\t\t\t\treturn PersonQuery.byId(identifier.id)\n\t\t\tcase 'identity':\n\t\t\t\treturn PersonQuery.byIdentity(identifier.id)\n\t\t}\n\t}\n\n\tstatic byId(id: string): PersonQuery {\n\t\treturn new PersonQuery(qb => qb.where(it => it.compare(['person', 'id'], Operator.eq, id)))\n\t}\n\n\tstatic byEmail(email: string): DatabaseQuery<MaybePersonRow> {\n\t\treturn new PersonByEmailFallbackQuery(email)\n\t}\n\n\tstatic byExactEmail(email: string): PersonQuery {\n\t\treturn new PersonQuery(qb => qb.where(it => it.compare(['person', 'email'], Operator.eq, email)))\n\t}\n\n\tstatic byIdentity(identity_id: string): PersonQuery {\n\t\treturn new PersonQuery(qb => qb.where(it => it.compare(['person', 'identity_id'], Operator.eq, identity_id)))\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<MaybePersonRow> {\n\t\tconst rows = await PersonQueryBuilderFactory.createPersonQueryBuilder()\n\t\t\t.match(this.spec)\n\t\t\t.getResult(db)\n\n\t\treturn this.fetchOneOrNull(rows)\n\t}\n}\n\nclass PersonByEmailFallbackQuery extends DatabaseQuery<MaybePersonRow> {\n\tconstructor(\n\t\tprivate readonly email: string,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch(ctx: DatabaseQueryable): Promise<MaybePersonRow> {\n\t\tconst handler = ctx.getHandler()\n\t\tconst exact = await handler.fetch(PersonQuery.byExactEmail(this.email))\n\t\tif (exact) {\n\t\t\treturn exact\n\t\t}\n\t\tconst normalizedEmail = normalizeEmail(this.email)\n\t\tif (normalizedEmail === this.email) {\n\t\t\treturn null\n\t\t}\n\t\treturn await handler.fetch(PersonQuery.byExactEmail(normalizedEmail))\n\t}\n}\n\nexport { PersonQuery }\n"],"names":[],"mappings":";;;AAUA,MAAM,oBAAoB,cAA8B;AAAA,EAC/C,YAA6B,MAAkC;AACtE,UAAA;AADoC,SAAA,OAAA;AAAA,EAErC;AAAA,EAEA,OAAO,mBAAmB,YAAmE;AAC5F,YAAQ,WAAW,MAAA;AAAA,MAClB,KAAK;AACJ,eAAO,YAAY,QAAQ,WAAW,KAAK;AAAA,MAC5C,KAAK;AACJ,eAAO,YAAY,KAAK,WAAW,EAAE;AAAA,MACtC,KAAK;AACJ,eAAO,YAAY,WAAW,WAAW,EAAE;AAAA,IAAA;AAAA,EAE9C;AAAA,EAEA,OAAO,KAAK,IAAyB;AACpC,WAAO,IAAI,YAAY,CAAA,OAAM,GAAG,MAAM,QAAM,GAAG,QAAQ,CAAC,UAAU,IAAI,GAAG,SAAS,IAAI,EAAE,CAAC,CAAC;AAAA,EAC3F;AAAA,EAEA,OAAO,QAAQ,OAA8C;AAC5D,WAAO,IAAI,2BAA2B,KAAK;AAAA,EAC5C;AAAA,EAEA,OAAO,aAAa,OAA4B;AAC/C,WAAO,IAAI,YAAY,CAAA,OAAM,GAAG,MAAM,QAAM,GAAG,QAAQ,CAAC,UAAU,OAAO,GAAG,SAAS,IAAI,KAAK,CAAC,CAAC;AAAA,EACjG;AAAA,EAEA,OAAO,WAAW,aAAkC;AACnD,WAAO,IAAI,YAAY,CAAA,OAAM,GAAG,MAAM,QAAM,GAAG,QAAQ,CAAC,UAAU,aAAa,GAAG,SAAS,IAAI,WAAW,CAAC,CAAC;AAAA,EAC7G;AAAA,EAEA,MAAM,MAAM,EAAE,MAAkD;AAC/D,UAAM,OAAO,MAAM,0BAA0B,yBAAA,EAC3C,MAAM,KAAK,IAAI,EACf,UAAU,EAAE;AAEd,WAAO,KAAK,eAAe,IAAI;AAAA,EAChC;AACD;AAEA,MAAM,mCAAmC,cAA8B;AAAA,EACtE,YACkB,OAChB;AACD,UAAA;AAFiB,SAAA,QAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,KAAiD;AAC5D,UAAM,UAAU,IAAI,WAAA;AACpB,UAAM,QAAQ,MAAM,QAAQ,MAAM,YAAY,aAAa,KAAK,KAAK,CAAC;AACtE,QAAI,OAAO;AACV,aAAO;AAAA,IACR;AACA,UAAM,kBAAkB,eAAe,KAAK,KAAK;AACjD,QAAI,oBAAoB,KAAK,OAAO;AACnC,aAAO;AAAA,IACR;AACA,WAAO,MAAM,QAAQ,MAAM,YAAY,aAAa,eAAe,CAAC;AAAA,EACrE;AACD;"}

package/dist/development/src/model/queries/person/PersonQueryBuilderFactory.cjs

@@ -2,8 +2,16 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const Database = require("@contember/database");
 class PersonQueryBuilderFactory {
+  /**
+   * Slim builder for listings — selects only the columns surfaced by
+   * {@link PersonResponseFactory}, omitting `password_hash` / `totp_secret*`
+   * and the `identity` join that the full builder needs only for `roles`.
+   */
+  static createPersonListQueryBuilder() {
+    return Database.SelectBuilder.create().select(["person", "id"]).select(["person", "identity_id"]).select(["person", "email"]).select(["person", "name"]).select(["person_mfa", "totp_activated_at"], "otp_activated_at").select((expr) => expr.raw('coalesce("person_mfa"."email_otp_enabled", false)'), "email_otp_enabled").select(["person", "passwordless_enabled"]).select(["person", "email_verified_at"]).select(["person", "disabled_at"]).from("person").leftJoin("person_mfa", "person_mfa", (expr) => expr.columnsEq(["person_mfa", "person_id"], ["person", "id"]));
+  }
   static createPersonQueryBuilder() {
-    return Database.SelectBuilder.create().select(["person", "id"]).select(["person", "password_hash"]).select(["person", "otp_uri"]).select(["person", "otp_activated_at"]).select(["person", "identity_id"]).select(["person", "email"]).select(["person", "name"]).select(["person", "disabled_at"]).select(["person", "passwordless_enabled"]).select(["identity", "roles"]).from("person").join("identity", "identity", (expr) => expr.columnsEq(["identity", "id"], ["person", "identity_id"]));
+    return Database.SelectBuilder.create().select(["person", "id"]).select(["person", "password_hash"]).select(["person_mfa", "totp_secret"], "otp_secret").select(["person_mfa", "totp_secret_version"], "otp_secret_version").select(["person_mfa", "totp_activated_at"], "otp_activated_at").select(["person_mfa", "totp_pending_secret"], "otp_pending_secret").select(["person_mfa", "totp_pending_version"], "otp_pending_version").select(["person_mfa", "totp_pending_created_at"], "otp_pending_created_at").select((expr) => expr.raw('coalesce("person_mfa"."email_otp_enabled", false)'), "email_otp_enabled").select(["person", "identity_id"]).select(["person", "email"]).select(["person", "name"]).select(["person", "disabled_at"]).select(["person", "passwordless_enabled"]).select(["person", "mfa_grace_until"]).select((expr) => expr.raw('"person"."mfa_grace_until" is not null and "person"."mfa_grace_until" > now()'), "is_in_grace").select(["person", "email_verified_at"]).select(["person", "email_verification_required"]).select(["identity", "roles"]).from("person").join("identity", "identity", (expr) => expr.columnsEq(["identity", "id"], ["person", "identity_id"])).leftJoin("person_mfa", "person_mfa", (expr) => expr.columnsEq(["person_mfa", "person_id"], ["person", "id"]));
   }
 }
 exports.PersonQueryBuilderFactory = PersonQueryBuilderFactory;

package/dist/development/src/model/queries/person/PersonQueryBuilderFactory.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"PersonQueryBuilderFactory.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/person/PersonQueryBuilderFactory.ts"],"sourcesContent":["import { PersonRow } from './types'\nimport { SelectBuilder } from '@contember/database'\n\nexport class PersonQueryBuilderFactory {\n\tpublic static createPersonQueryBuilder() {\n\t\treturn SelectBuilder.create<PersonRow>()\n\t\t\t.select(['person', 'id'])\n\t\t\t.select(['person', 'password_hash'])\n\t\t\t.select(['person', 'otp_uri'])\n\t\t\t.select(['person', 'otp_activated_at'])\n\t\t\t.select(['person', 'identity_id'])\n\t\t\t.select(['person', 'email'])\n\t\t\t.select(['person', 'name'])\n\t\t\t.select(['person', 'disabled_at'])\n\t\t\t.select(['person', 'passwordless_enabled'])\n\t\t\t.select(['identity', 'roles'])\n\t\t\t.from('person')\n\t\t\t.join('identity', 'identity', expr => expr.columnsEq(['identity', 'id'], ['person', 'identity_id']))\n\t}\n}\n"],"names":["SelectBuilder"],"mappings":";;;AAGO,MAAM,0BAA0B;AAAA,EACtC,OAAc,2BAA2B;AACxC,WAAOA,SAAAA,cAAc,OAAA,EACnB,OAAO,CAAC,UAAU,IAAI,CAAC,EACvB,OAAO,CAAC,UAAU,eAAe,CAAC,EAClC,OAAO,CAAC,UAAU,SAAS,CAAC,EAC5B,OAAO,CAAC,UAAU,kBAAkB,CAAC,EACrC,OAAO,CAAC,UAAU,aAAa,CAAC,EAChC,OAAO,CAAC,UAAU,OAAO,CAAC,EAC1B,OAAO,CAAC,UAAU,MAAM,CAAC,EACzB,OAAO,CAAC,UAAU,aAAa,CAAC,EAChC,OAAO,CAAC,UAAU,sBAAsB,CAAC,EACzC,OAAO,CAAC,YAAY,OAAO,CAAC,EAC5B,KAAK,QAAQ,EACb,KAAK,YAAY,YAAY,CAAA,SAAQ,KAAK,UAAU,CAAC,YAAY,IAAI,GAAG,CAAC,UAAU,aAAa,CAAC,CAAC;AAAA,EACrG;AACD;;"}
+{"version":3,"file":"PersonQueryBuilderFactory.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/person/PersonQueryBuilderFactory.ts"],"sourcesContent":["import { PersonListRow, PersonRow } from './types.js'\nimport { SelectBuilder } from '@contember/database'\n\nexport class PersonQueryBuilderFactory {\n\t/**\n\t * Slim builder for listings — selects only the columns surfaced by\n\t * {@link PersonResponseFactory}, omitting `password_hash` / `totp_secret*`\n\t * and the `identity` join that the full builder needs only for `roles`.\n\t */\n\tpublic static createPersonListQueryBuilder() {\n\t\treturn SelectBuilder.create<PersonListRow>()\n\t\t\t.select(['person', 'id'])\n\t\t\t.select(['person', 'identity_id'])\n\t\t\t.select(['person', 'email'])\n\t\t\t.select(['person', 'name'])\n\t\t\t.select(['person_mfa', 'totp_activated_at'], 'otp_activated_at')\n\t\t\t.select(expr => expr.raw('coalesce(\"person_mfa\".\"email_otp_enabled\", false)'), 'email_otp_enabled')\n\t\t\t.select(['person', 'passwordless_enabled'])\n\t\t\t.select(['person', 'email_verified_at'])\n\t\t\t.select(['person', 'disabled_at'])\n\t\t\t.from('person')\n\t\t\t.leftJoin('person_mfa', 'person_mfa', expr => expr.columnsEq(['person_mfa', 'person_id'], ['person', 'id']))\n\t}\n\n\tpublic static createPersonQueryBuilder() {\n\t\treturn SelectBuilder.create<PersonRow>()\n\t\t\t.select(['person', 'id'])\n\t\t\t.select(['person', 'password_hash'])\n\t\t\t.select(['person_mfa', 'totp_secret'], 'otp_secret')\n\t\t\t.select(['person_mfa', 'totp_secret_version'], 'otp_secret_version')\n\t\t\t.select(['person_mfa', 'totp_activated_at'], 'otp_activated_at')\n\t\t\t.select(['person_mfa', 'totp_pending_secret'], 'otp_pending_secret')\n\t\t\t.select(['person_mfa', 'totp_pending_version'], 'otp_pending_version')\n\t\t\t.select(['person_mfa', 'totp_pending_created_at'], 'otp_pending_created_at')\n\t\t\t.select(expr => expr.raw('coalesce(\"person_mfa\".\"email_otp_enabled\", false)'), 'email_otp_enabled')\n\t\t\t.select(['person', 'identity_id'])\n\t\t\t.select(['person', 'email'])\n\t\t\t.select(['person', 'name'])\n\t\t\t.select(['person', 'disabled_at'])\n\t\t\t.select(['person', 'passwordless_enabled'])\n\t\t\t.select(['person', 'mfa_grace_until'])\n\t\t\t// MFA grace gate on the DB clock (against now()), so app/DB skew can't\n\t\t\t// extend the window. See SignInManager.enforceMfaEnrollment / CLAUDE.md.\n\t\t\t.select(expr => expr.raw('\"person\".\"mfa_grace_until\" is not null and \"person\".\"mfa_grace_until\" > now()'), 'is_in_grace')\n\t\t\t.select(['person', 'email_verified_at'])\n\t\t\t.select(['person', 'email_verification_required'])\n\t\t\t.select(['identity', 'roles'])\n\t\t\t.from('person')\n\t\t\t.join('identity', 'identity', expr => expr.columnsEq(['identity', 'id'], ['person', 'identity_id']))\n\t\t\t.leftJoin('person_mfa', 'person_mfa', expr => expr.columnsEq(['person_mfa', 'person_id'], ['person', 'id']))\n\t}\n}\n"],"names":["SelectBuilder"],"mappings":";;;AAGO,MAAM,0BAA0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMtC,OAAc,+BAA+B;AAC5C,WAAOA,SAAAA,cAAc,OAAA,EACnB,OAAO,CAAC,UAAU,IAAI,CAAC,EACvB,OAAO,CAAC,UAAU,aAAa,CAAC,EAChC,OAAO,CAAC,UAAU,OAAO,CAAC,EAC1B,OAAO,CAAC,UAAU,MAAM,CAAC,EACzB,OAAO,CAAC,cAAc,mBAAmB,GAAG,kBAAkB,EAC9D,OAAO,UAAQ,KAAK,IAAI,mDAAmD,GAAG,mBAAmB,EACjG,OAAO,CAAC,UAAU,sBAAsB,CAAC,EACzC,OAAO,CAAC,UAAU,mBAAmB,CAAC,EACtC,OAAO,CAAC,UAAU,aAAa,CAAC,EAChC,KAAK,QAAQ,EACb,SAAS,cAAc,cAAc,CAAA,SAAQ,KAAK,UAAU,CAAC,cAAc,WAAW,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;AAAA,EAC7G;AAAA,EAEA,OAAc,2BAA2B;AACxC,WAAOA,SAAAA,cAAc,OAAA,EACnB,OAAO,CAAC,UAAU,IAAI,CAAC,EACvB,OAAO,CAAC,UAAU,eAAe,CAAC,EAClC,OAAO,CAAC,cAAc,aAAa,GAAG,YAAY,EAClD,OAAO,CAAC,cAAc,qBAAqB,GAAG,oBAAoB,EAClE,OAAO,CAAC,cAAc,mBAAmB,GAAG,kBAAkB,EAC9D,OAAO,CAAC,cAAc,qBAAqB,GAAG,oBAAoB,EAClE,OAAO,CAAC,cAAc,sBAAsB,GAAG,qBAAqB,EACpE,OAAO,CAAC,cAAc,yBAAyB,GAAG,wBAAwB,EAC1E,OAAO,CAAA,SAAQ,KAAK,IAAI,mDAAmD,GAAG,mBAAmB,EACjG,OAAO,CAAC,UAAU,aAAa,CAAC,EAChC,OAAO,CAAC,UAAU,OAAO,CAAC,EAC1B,OAAO,CAAC,UAAU,MAAM,CAAC,EACzB,OAAO,CAAC,UAAU,aAAa,CAAC,EAChC,OAAO,CAAC,UAAU,sBAAsB,CAAC,EACzC,OAAO,CAAC,UAAU,iBAAiB,CAAC,EAGpC,OAAO,UAAQ,KAAK,IAAI,+EAA+E,GAAG,aAAa,EACvH,OAAO,CAAC,UAAU,mBAAmB,CAAC,EACtC,OAAO,CAAC,UAAU,6BAA6B,CAAC,EAChD,OAAO,CAAC,YAAY,OAAO,CAAC,EAC5B,KAAK,QAAQ,EACb,KAAK,YAAY,YAAY,UAAQ,KAAK,UAAU,CAAC,YAAY,IAAI,GAAG,CAAC,UAAU,aAAa,CAAC,CAAC,EAClG,SAAS,cAAc,cAAc,CAAA,SAAQ,KAAK,UAAU,CAAC,cAAc,WAAW,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;AAAA,EAC7G;AACD;;"}

package/dist/development/src/model/queries/person/PersonQueryBuilderFactory.js

@@ -1,7 +1,15 @@
 import { SelectBuilder } from "@contember/database";
 class PersonQueryBuilderFactory {
+  /**
+   * Slim builder for listings — selects only the columns surfaced by
+   * {@link PersonResponseFactory}, omitting `password_hash` / `totp_secret*`
+   * and the `identity` join that the full builder needs only for `roles`.
+   */
+  static createPersonListQueryBuilder() {
+    return SelectBuilder.create().select(["person", "id"]).select(["person", "identity_id"]).select(["person", "email"]).select(["person", "name"]).select(["person_mfa", "totp_activated_at"], "otp_activated_at").select((expr) => expr.raw('coalesce("person_mfa"."email_otp_enabled", false)'), "email_otp_enabled").select(["person", "passwordless_enabled"]).select(["person", "email_verified_at"]).select(["person", "disabled_at"]).from("person").leftJoin("person_mfa", "person_mfa", (expr) => expr.columnsEq(["person_mfa", "person_id"], ["person", "id"]));
+  }
   static createPersonQueryBuilder() {
-    return SelectBuilder.create().select(["person", "id"]).select(["person", "password_hash"]).select(["person", "otp_uri"]).select(["person", "otp_activated_at"]).select(["person", "identity_id"]).select(["person", "email"]).select(["person", "name"]).select(["person", "disabled_at"]).select(["person", "passwordless_enabled"]).select(["identity", "roles"]).from("person").join("identity", "identity", (expr) => expr.columnsEq(["identity", "id"], ["person", "identity_id"]));
+    return SelectBuilder.create().select(["person", "id"]).select(["person", "password_hash"]).select(["person_mfa", "totp_secret"], "otp_secret").select(["person_mfa", "totp_secret_version"], "otp_secret_version").select(["person_mfa", "totp_activated_at"], "otp_activated_at").select(["person_mfa", "totp_pending_secret"], "otp_pending_secret").select(["person_mfa", "totp_pending_version"], "otp_pending_version").select(["person_mfa", "totp_pending_created_at"], "otp_pending_created_at").select((expr) => expr.raw('coalesce("person_mfa"."email_otp_enabled", false)'), "email_otp_enabled").select(["person", "identity_id"]).select(["person", "email"]).select(["person", "name"]).select(["person", "disabled_at"]).select(["person", "passwordless_enabled"]).select(["person", "mfa_grace_until"]).select((expr) => expr.raw('"person"."mfa_grace_until" is not null and "person"."mfa_grace_until" > now()'), "is_in_grace").select(["person", "email_verified_at"]).select(["person", "email_verification_required"]).select(["identity", "roles"]).from("person").join("identity", "identity", (expr) => expr.columnsEq(["identity", "id"], ["person", "identity_id"])).leftJoin("person_mfa", "person_mfa", (expr) => expr.columnsEq(["person_mfa", "person_id"], ["person", "id"]));
   }
 }
 export {

package/dist/development/src/model/queries/person/PersonQueryBuilderFactory.js.map

@@ -1 +1 @@
-{"version":3,"file":"PersonQueryBuilderFactory.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/person/PersonQueryBuilderFactory.ts"],"sourcesContent":["import { PersonRow } from './types'\nimport { SelectBuilder } from '@contember/database'\n\nexport class PersonQueryBuilderFactory {\n\tpublic static createPersonQueryBuilder() {\n\t\treturn SelectBuilder.create<PersonRow>()\n\t\t\t.select(['person', 'id'])\n\t\t\t.select(['person', 'password_hash'])\n\t\t\t.select(['person', 'otp_uri'])\n\t\t\t.select(['person', 'otp_activated_at'])\n\t\t\t.select(['person', 'identity_id'])\n\t\t\t.select(['person', 'email'])\n\t\t\t.select(['person', 'name'])\n\t\t\t.select(['person', 'disabled_at'])\n\t\t\t.select(['person', 'passwordless_enabled'])\n\t\t\t.select(['identity', 'roles'])\n\t\t\t.from('person')\n\t\t\t.join('identity', 'identity', expr => expr.columnsEq(['identity', 'id'], ['person', 'identity_id']))\n\t}\n}\n"],"names":[],"mappings":";AAGO,MAAM,0BAA0B;AAAA,EACtC,OAAc,2BAA2B;AACxC,WAAO,cAAc,OAAA,EACnB,OAAO,CAAC,UAAU,IAAI,CAAC,EACvB,OAAO,CAAC,UAAU,eAAe,CAAC,EAClC,OAAO,CAAC,UAAU,SAAS,CAAC,EAC5B,OAAO,CAAC,UAAU,kBAAkB,CAAC,EACrC,OAAO,CAAC,UAAU,aAAa,CAAC,EAChC,OAAO,CAAC,UAAU,OAAO,CAAC,EAC1B,OAAO,CAAC,UAAU,MAAM,CAAC,EACzB,OAAO,CAAC,UAAU,aAAa,CAAC,EAChC,OAAO,CAAC,UAAU,sBAAsB,CAAC,EACzC,OAAO,CAAC,YAAY,OAAO,CAAC,EAC5B,KAAK,QAAQ,EACb,KAAK,YAAY,YAAY,CAAA,SAAQ,KAAK,UAAU,CAAC,YAAY,IAAI,GAAG,CAAC,UAAU,aAAa,CAAC,CAAC;AAAA,EACrG;AACD;"}
+{"version":3,"file":"PersonQueryBuilderFactory.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/person/PersonQueryBuilderFactory.ts"],"sourcesContent":["import { PersonListRow, PersonRow } from './types.js'\nimport { SelectBuilder } from '@contember/database'\n\nexport class PersonQueryBuilderFactory {\n\t/**\n\t * Slim builder for listings — selects only the columns surfaced by\n\t * {@link PersonResponseFactory}, omitting `password_hash` / `totp_secret*`\n\t * and the `identity` join that the full builder needs only for `roles`.\n\t */\n\tpublic static createPersonListQueryBuilder() {\n\t\treturn SelectBuilder.create<PersonListRow>()\n\t\t\t.select(['person', 'id'])\n\t\t\t.select(['person', 'identity_id'])\n\t\t\t.select(['person', 'email'])\n\t\t\t.select(['person', 'name'])\n\t\t\t.select(['person_mfa', 'totp_activated_at'], 'otp_activated_at')\n\t\t\t.select(expr => expr.raw('coalesce(\"person_mfa\".\"email_otp_enabled\", false)'), 'email_otp_enabled')\n\t\t\t.select(['person', 'passwordless_enabled'])\n\t\t\t.select(['person', 'email_verified_at'])\n\t\t\t.select(['person', 'disabled_at'])\n\t\t\t.from('person')\n\t\t\t.leftJoin('person_mfa', 'person_mfa', expr => expr.columnsEq(['person_mfa', 'person_id'], ['person', 'id']))\n\t}\n\n\tpublic static createPersonQueryBuilder() {\n\t\treturn SelectBuilder.create<PersonRow>()\n\t\t\t.select(['person', 'id'])\n\t\t\t.select(['person', 'password_hash'])\n\t\t\t.select(['person_mfa', 'totp_secret'], 'otp_secret')\n\t\t\t.select(['person_mfa', 'totp_secret_version'], 'otp_secret_version')\n\t\t\t.select(['person_mfa', 'totp_activated_at'], 'otp_activated_at')\n\t\t\t.select(['person_mfa', 'totp_pending_secret'], 'otp_pending_secret')\n\t\t\t.select(['person_mfa', 'totp_pending_version'], 'otp_pending_version')\n\t\t\t.select(['person_mfa', 'totp_pending_created_at'], 'otp_pending_created_at')\n\t\t\t.select(expr => expr.raw('coalesce(\"person_mfa\".\"email_otp_enabled\", false)'), 'email_otp_enabled')\n\t\t\t.select(['person', 'identity_id'])\n\t\t\t.select(['person', 'email'])\n\t\t\t.select(['person', 'name'])\n\t\t\t.select(['person', 'disabled_at'])\n\t\t\t.select(['person', 'passwordless_enabled'])\n\t\t\t.select(['person', 'mfa_grace_until'])\n\t\t\t// MFA grace gate on the DB clock (against now()), so app/DB skew can't\n\t\t\t// extend the window. See SignInManager.enforceMfaEnrollment / CLAUDE.md.\n\t\t\t.select(expr => expr.raw('\"person\".\"mfa_grace_until\" is not null and \"person\".\"mfa_grace_until\" > now()'), 'is_in_grace')\n\t\t\t.select(['person', 'email_verified_at'])\n\t\t\t.select(['person', 'email_verification_required'])\n\t\t\t.select(['identity', 'roles'])\n\t\t\t.from('person')\n\t\t\t.join('identity', 'identity', expr => expr.columnsEq(['identity', 'id'], ['person', 'identity_id']))\n\t\t\t.leftJoin('person_mfa', 'person_mfa', expr => expr.columnsEq(['person_mfa', 'person_id'], ['person', 'id']))\n\t}\n}\n"],"names":[],"mappings":";AAGO,MAAM,0BAA0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMtC,OAAc,+BAA+B;AAC5C,WAAO,cAAc,OAAA,EACnB,OAAO,CAAC,UAAU,IAAI,CAAC,EACvB,OAAO,CAAC,UAAU,aAAa,CAAC,EAChC,OAAO,CAAC,UAAU,OAAO,CAAC,EAC1B,OAAO,CAAC,UAAU,MAAM,CAAC,EACzB,OAAO,CAAC,cAAc,mBAAmB,GAAG,kBAAkB,EAC9D,OAAO,UAAQ,KAAK,IAAI,mDAAmD,GAAG,mBAAmB,EACjG,OAAO,CAAC,UAAU,sBAAsB,CAAC,EACzC,OAAO,CAAC,UAAU,mBAAmB,CAAC,EACtC,OAAO,CAAC,UAAU,aAAa,CAAC,EAChC,KAAK,QAAQ,EACb,SAAS,cAAc,cAAc,CAAA,SAAQ,KAAK,UAAU,CAAC,cAAc,WAAW,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;AAAA,EAC7G;AAAA,EAEA,OAAc,2BAA2B;AACxC,WAAO,cAAc,OAAA,EACnB,OAAO,CAAC,UAAU,IAAI,CAAC,EACvB,OAAO,CAAC,UAAU,eAAe,CAAC,EAClC,OAAO,CAAC,cAAc,aAAa,GAAG,YAAY,EAClD,OAAO,CAAC,cAAc,qBAAqB,GAAG,oBAAoB,EAClE,OAAO,CAAC,cAAc,mBAAmB,GAAG,kBAAkB,EAC9D,OAAO,CAAC,cAAc,qBAAqB,GAAG,oBAAoB,EAClE,OAAO,CAAC,cAAc,sBAAsB,GAAG,qBAAqB,EACpE,OAAO,CAAC,cAAc,yBAAyB,GAAG,wBAAwB,EAC1E,OAAO,CAAA,SAAQ,KAAK,IAAI,mDAAmD,GAAG,mBAAmB,EACjG,OAAO,CAAC,UAAU,aAAa,CAAC,EAChC,OAAO,CAAC,UAAU,OAAO,CAAC,EAC1B,OAAO,CAAC,UAAU,MAAM,CAAC,EACzB,OAAO,CAAC,UAAU,aAAa,CAAC,EAChC,OAAO,CAAC,UAAU,sBAAsB,CAAC,EACzC,OAAO,CAAC,UAAU,iBAAiB,CAAC,EAGpC,OAAO,UAAQ,KAAK,IAAI,+EAA+E,GAAG,aAAa,EACvH,OAAO,CAAC,UAAU,mBAAmB,CAAC,EACtC,OAAO,CAAC,UAAU,6BAA6B,CAAC,EAChD,OAAO,CAAC,YAAY,OAAO,CAAC,EAC5B,KAAK,QAAQ,EACb,KAAK,YAAY,YAAY,UAAQ,KAAK,UAAU,CAAC,YAAY,IAAI,GAAG,CAAC,UAAU,aAAa,CAAC,CAAC,EAClG,SAAS,cAAc,cAAc,CAAA,SAAQ,KAAK,UAAU,CAAC,cAAc,WAAW,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;AAAA,EAC7G;AACD;"}

package/dist/development/src/model/queries/person/PersonsQuery.cjs

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+const PersonQueryBuilderFactory = require("./PersonQueryBuilderFactory.cjs");
+const DEFAULT_LIMIT = 100;
+const MAX_LIMIT = 1e3;
+class PersonsQuery extends Database.DatabaseQuery {
+  constructor(filter = {}, limit, offset) {
+    super();
+    this.filter = filter;
+    this.limit = limit;
+    this.offset = offset;
+  }
+  async fetch({ db }) {
+    const { email, personId, identityId, identityIds } = this.filter;
+    const limit = Math.min(Math.max(this.limit ?? DEFAULT_LIMIT, 0), MAX_LIMIT);
+    const offset = Math.max(this.offset ?? 0, 0);
+    return await PersonQueryBuilderFactory.PersonQueryBuilderFactory.createPersonListQueryBuilder().match((qb) => email ? qb.where((it) => it.compare(["person", "email"], Database.Operator.containsCI, email)) : qb).match((qb) => personId ? qb.where((it) => it.compare(["person", "id"], Database.Operator.eq, personId)) : qb).match((qb) => identityId ? qb.where((it) => it.compare(["person", "identity_id"], Database.Operator.eq, identityId)) : qb).match((qb) => identityIds ? qb.where((it) => it.in(["person", "identity_id"], [...identityIds])) : qb).orderBy(["person", "email"]).limit(limit, offset).getResult(db);
+  }
+  static get defaultLimit() {
+    return DEFAULT_LIMIT;
+  }
+  static get maxLimit() {
+    return MAX_LIMIT;
+  }
+}
+exports.PersonsQuery = PersonsQuery;
+//# sourceMappingURL=PersonsQuery.cjs.map

package/dist/development/src/model/queries/person/PersonsQuery.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"PersonsQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/person/PersonsQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Operator } from '@contember/database'\nimport { PersonListRow } from './types.js'\nimport { PersonQueryBuilderFactory } from './PersonQueryBuilderFactory.js'\n\nexport interface PersonsQueryFilter {\n\treadonly email?: string | null\n\treadonly personId?: string | null\n\treadonly identityId?: string | null\n\t/**\n\t * When set, restricts the result to persons with one of these identity ids.\n\t * Used to scope the listing for non-SUPER_ADMIN callers to exactly the members\n\t * they may see (resolved via the same per-role filtering as `project.members`).\n\t * An empty array therefore matches nobody — callers should short-circuit\n\t * instead of issuing the query.\n\t */\n\treadonly identityIds?: readonly string[]\n}\n\nconst DEFAULT_LIMIT = 100\nconst MAX_LIMIT = 1000\n\nexport class PersonsQuery extends DatabaseQuery<PersonListRow[]> {\n\tconstructor(\n\t\tprivate readonly filter: PersonsQueryFilter = {},\n\t\tprivate readonly limit?: number | null,\n\t\tprivate readonly offset?: number | null,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<PersonListRow[]> {\n\t\tconst { email, personId, identityId, identityIds } = this.filter\n\t\t// Cap server-side so an unbounded/negative `limit` can't dump the whole\n\t\t// person table; mirrors the AuthLogQuery convention.\n\t\tconst limit = Math.min(Math.max(this.limit ?? DEFAULT_LIMIT, 0), MAX_LIMIT)\n\t\tconst offset = Math.max(this.offset ?? 0, 0)\n\t\treturn await PersonQueryBuilderFactory.createPersonListQueryBuilder()\n\t\t\t.match(qb => (email ? qb.where(it => it.compare(['person', 'email'], Operator.containsCI, email)) : qb))\n\t\t\t.match(qb => (personId ? qb.where(it => it.compare(['person', 'id'], Operator.eq, personId)) : qb))\n\t\t\t.match(qb => (identityId ? qb.where(it => it.compare(['person', 'identity_id'], Operator.eq, identityId)) : qb))\n\t\t\t.match(qb => (identityIds ? qb.where(it => it.in(['person', 'identity_id'], [...identityIds])) : qb))\n\t\t\t.orderBy(['person', 'email'])\n\t\t\t.limit(limit, offset)\n\t\t\t.getResult(db)\n\t}\n\n\tstatic get defaultLimit(): number {\n\t\treturn DEFAULT_LIMIT\n\t}\n\n\tstatic get maxLimit(): number {\n\t\treturn MAX_LIMIT\n\t}\n}\n"],"names":["DatabaseQuery","PersonQueryBuilderFactory","Operator"],"mappings":";;;;AAkBA,MAAM,gBAAgB;AACtB,MAAM,YAAY;AAEX,MAAM,qBAAqBA,SAAAA,cAA+B;AAAA,EAChE,YACkB,SAA6B,IAC7B,OACA,QAChB;AACD,UAAA;AAJiB,SAAA,SAAA;AACA,SAAA,QAAA;AACA,SAAA,SAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAAmD;AAChE,UAAM,EAAE,OAAO,UAAU,YAAY,YAAA,IAAgB,KAAK;AAG1D,UAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,KAAK,SAAS,eAAe,CAAC,GAAG,SAAS;AAC1E,UAAM,SAAS,KAAK,IAAI,KAAK,UAAU,GAAG,CAAC;AAC3C,WAAO,MAAMC,0BAAAA,0BAA0B,+BACrC,MAAM,CAAA,OAAO,QAAQ,GAAG,MAAM,CAAA,OAAM,GAAG,QAAQ,CAAC,UAAU,OAAO,GAAGC,kBAAS,YAAY,KAAK,CAAC,IAAI,EAAG,EACtG,MAAM,CAAA,OAAO,WAAW,GAAG,MAAM,QAAM,GAAG,QAAQ,CAAC,UAAU,IAAI,GAAGA,SAAAA,SAAS,IAAI,QAAQ,CAAC,IAAI,EAAG,EACjG,MAAM,QAAO,aAAa,GAAG,MAAM,CAAA,OAAM,GAAG,QAAQ,CAAC,UAAU,aAAa,GAAGA,SAAAA,SAAS,IAAI,UAAU,CAAC,IAAI,EAAG,EAC9G,MAAM,CAAA,OAAO,cAAc,GAAG,MAAM,CAAA,OAAM,GAAG,GAAG,CAAC,UAAU,aAAa,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,EAAG,EACnG,QAAQ,CAAC,UAAU,OAAO,CAAC,EAC3B,MAAM,OAAO,MAAM,EACnB,UAAU,EAAE;AAAA,EACf;AAAA,EAEA,WAAW,eAAuB;AACjC,WAAO;AAAA,EACR;AAAA,EAEA,WAAW,WAAmB;AAC7B,WAAO;AAAA,EACR;AACD;;"}

package/dist/development/src/model/queries/person/PersonsQuery.js

@@ -0,0 +1,28 @@
+import { DatabaseQuery, Operator } from "@contember/database";
+import { PersonQueryBuilderFactory } from "./PersonQueryBuilderFactory.js";
+const DEFAULT_LIMIT = 100;
+const MAX_LIMIT = 1e3;
+class PersonsQuery extends DatabaseQuery {
+  constructor(filter = {}, limit, offset) {
+    super();
+    this.filter = filter;
+    this.limit = limit;
+    this.offset = offset;
+  }
+  async fetch({ db }) {
+    const { email, personId, identityId, identityIds } = this.filter;
+    const limit = Math.min(Math.max(this.limit ?? DEFAULT_LIMIT, 0), MAX_LIMIT);
+    const offset = Math.max(this.offset ?? 0, 0);
+    return await PersonQueryBuilderFactory.createPersonListQueryBuilder().match((qb) => email ? qb.where((it) => it.compare(["person", "email"], Operator.containsCI, email)) : qb).match((qb) => personId ? qb.where((it) => it.compare(["person", "id"], Operator.eq, personId)) : qb).match((qb) => identityId ? qb.where((it) => it.compare(["person", "identity_id"], Operator.eq, identityId)) : qb).match((qb) => identityIds ? qb.where((it) => it.in(["person", "identity_id"], [...identityIds])) : qb).orderBy(["person", "email"]).limit(limit, offset).getResult(db);
+  }
+  static get defaultLimit() {
+    return DEFAULT_LIMIT;
+  }
+  static get maxLimit() {
+    return MAX_LIMIT;
+  }
+}
+export {
+  PersonsQuery
+};
+//# sourceMappingURL=PersonsQuery.js.map

package/dist/development/src/model/queries/person/PersonsQuery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PersonsQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/person/PersonsQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Operator } from '@contember/database'\nimport { PersonListRow } from './types.js'\nimport { PersonQueryBuilderFactory } from './PersonQueryBuilderFactory.js'\n\nexport interface PersonsQueryFilter {\n\treadonly email?: string | null\n\treadonly personId?: string | null\n\treadonly identityId?: string | null\n\t/**\n\t * When set, restricts the result to persons with one of these identity ids.\n\t * Used to scope the listing for non-SUPER_ADMIN callers to exactly the members\n\t * they may see (resolved via the same per-role filtering as `project.members`).\n\t * An empty array therefore matches nobody — callers should short-circuit\n\t * instead of issuing the query.\n\t */\n\treadonly identityIds?: readonly string[]\n}\n\nconst DEFAULT_LIMIT = 100\nconst MAX_LIMIT = 1000\n\nexport class PersonsQuery extends DatabaseQuery<PersonListRow[]> {\n\tconstructor(\n\t\tprivate readonly filter: PersonsQueryFilter = {},\n\t\tprivate readonly limit?: number | null,\n\t\tprivate readonly offset?: number | null,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<PersonListRow[]> {\n\t\tconst { email, personId, identityId, identityIds } = this.filter\n\t\t// Cap server-side so an unbounded/negative `limit` can't dump the whole\n\t\t// person table; mirrors the AuthLogQuery convention.\n\t\tconst limit = Math.min(Math.max(this.limit ?? DEFAULT_LIMIT, 0), MAX_LIMIT)\n\t\tconst offset = Math.max(this.offset ?? 0, 0)\n\t\treturn await PersonQueryBuilderFactory.createPersonListQueryBuilder()\n\t\t\t.match(qb => (email ? qb.where(it => it.compare(['person', 'email'], Operator.containsCI, email)) : qb))\n\t\t\t.match(qb => (personId ? qb.where(it => it.compare(['person', 'id'], Operator.eq, personId)) : qb))\n\t\t\t.match(qb => (identityId ? qb.where(it => it.compare(['person', 'identity_id'], Operator.eq, identityId)) : qb))\n\t\t\t.match(qb => (identityIds ? qb.where(it => it.in(['person', 'identity_id'], [...identityIds])) : qb))\n\t\t\t.orderBy(['person', 'email'])\n\t\t\t.limit(limit, offset)\n\t\t\t.getResult(db)\n\t}\n\n\tstatic get defaultLimit(): number {\n\t\treturn DEFAULT_LIMIT\n\t}\n\n\tstatic get maxLimit(): number {\n\t\treturn MAX_LIMIT\n\t}\n}\n"],"names":[],"mappings":";;AAkBA,MAAM,gBAAgB;AACtB,MAAM,YAAY;AAEX,MAAM,qBAAqB,cAA+B;AAAA,EAChE,YACkB,SAA6B,IAC7B,OACA,QAChB;AACD,UAAA;AAJiB,SAAA,SAAA;AACA,SAAA,QAAA;AACA,SAAA,SAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAAmD;AAChE,UAAM,EAAE,OAAO,UAAU,YAAY,YAAA,IAAgB,KAAK;AAG1D,UAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,KAAK,SAAS,eAAe,CAAC,GAAG,SAAS;AAC1E,UAAM,SAAS,KAAK,IAAI,KAAK,UAAU,GAAG,CAAC;AAC3C,WAAO,MAAM,0BAA0B,+BACrC,MAAM,CAAA,OAAO,QAAQ,GAAG,MAAM,CAAA,OAAM,GAAG,QAAQ,CAAC,UAAU,OAAO,GAAG,SAAS,YAAY,KAAK,CAAC,IAAI,EAAG,EACtG,MAAM,CAAA,OAAO,WAAW,GAAG,MAAM,QAAM,GAAG,QAAQ,CAAC,UAAU,IAAI,GAAG,SAAS,IAAI,QAAQ,CAAC,IAAI,EAAG,EACjG,MAAM,QAAO,aAAa,GAAG,MAAM,CAAA,OAAM,GAAG,QAAQ,CAAC,UAAU,aAAa,GAAG,SAAS,IAAI,UAAU,CAAC,IAAI,EAAG,EAC9G,MAAM,CAAA,OAAO,cAAc,GAAG,MAAM,CAAA,OAAM,GAAG,GAAG,CAAC,UAAU,aAAa,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,EAAG,EACnG,QAAQ,CAAC,UAAU,OAAO,CAAC,EAC3B,MAAM,OAAO,MAAM,EACnB,UAAU,EAAE;AAAA,EACf;AAAA,EAEA,WAAW,eAAuB;AACjC,WAAO;AAAA,EACR;AAAA,EAEA,WAAW,WAAmB;AAC7B,WAAO;AAAA,EACR;AACD;"}

package/dist/development/src/model/queries/personToken/PersonTokenQuery.cjs

@@ -4,11 +4,12 @@ const Database = require("@contember/database");
 require("../../type/ApiKey.cjs");
 const token = require("../../utils/token.cjs");
 class PersonTokenQuery extends Database.DatabaseQuery {
-  constructor(identifierType, identifier, type) {
+  constructor(identifierType, identifier, type, latestUnusedOnly = false) {
     super();
     this.identifierType = identifierType;
     this.identifier = identifier;
     this.type = type;
+    this.latestUnusedOnly = latestUnusedOnly;
   }
   static byId(id, type) {
     return new PersonTokenQuery("id", id, type);
@@ -17,11 +18,19 @@ class PersonTokenQuery extends Database.DatabaseQuery {
     const tokenHash = token.computeTokenHash(token$1);
     return new PersonTokenQuery("token_hash", tokenHash, type);
   }
+  /** Latest still-unused token of the given type for a person (e.g. the most recent email OTP code). */
+  static latestUnusedByPerson(personId, type) {
+    return new PersonTokenQuery("person_id", personId, type, true);
+  }
   async fetch({ db }) {
-    const result = await Database.SelectBuilder.create().from("person_token").select(new Database.Literal("*")).where({
+    let qb = Database.SelectBuilder.create().from("person_token").select(new Database.Literal("*")).select(new Database.Literal('"expires_at" <= now()'), "is_expired").where({
       [this.identifierType]: this.identifier,
       type: this.type
-    }).getResult(db);
+    });
+    if (this.latestUnusedOnly) {
+      qb = qb.where((expr) => expr.isNull("used_at")).orderBy("created_at", "desc").limit(1);
+    }
+    const result = await qb.getResult(db);
     return this.fetchOneOrNull(result);
   }
 }

package/dist/development/src/model/queries/personToken/PersonTokenQuery.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"PersonTokenQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/personToken/PersonTokenQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Literal, SelectBuilder } from '@contember/database'\nimport { PersonToken } from '../../type'\nimport { computeTokenHash } from '../../utils'\n\nexport class PersonTokenQuery extends DatabaseQuery<PersonToken.Row | null> {\n\tprivate constructor(\n\t\tprivate readonly identifierType: 'id' | 'token_hash',\n\t\tprivate readonly identifier: string,\n\t\tprivate readonly type: PersonToken.Type,\n\t) {\n\t\tsuper()\n\t}\n\n\tpublic static byId(id: string, type: PersonToken.Type): PersonTokenQuery {\n\t\treturn new PersonTokenQuery('id', id, type)\n\t}\n\n\tpublic static byToken(token: string, type: PersonToken.Type): PersonTokenQuery {\n\t\tconst tokenHash = computeTokenHash(token)\n\t\treturn new PersonTokenQuery('token_hash', tokenHash, type)\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<PersonToken.Row | null> {\n\t\tconst result = await SelectBuilder.create<PersonToken.Row>()\n\t\t\t.from('person_token')\n\t\t\t.select(new Literal('*'))\n\t\t\t.where({\n\t\t\t\t[this.identifierType]: this.identifier,\n\t\t\t\ttype: this.type,\n\t\t\t})\n\t\t\t.getResult(db)\n\t\treturn this.fetchOneOrNull(result)\n\t}\n}\n"],"names":["DatabaseQuery","token","computeTokenHash","SelectBuilder","Literal"],"mappings":";;;;;AAIO,MAAM,yBAAyBA,SAAAA,cAAsC;AAAA,EACnE,YACU,gBACA,YACA,MAChB;AACD,UAAA;AAJiB,SAAA,iBAAA;AACA,SAAA,aAAA;AACA,SAAA,OAAA;AAAA,EAGlB;AAAA,EAEA,OAAc,KAAK,IAAY,MAA0C;AACxE,WAAO,IAAI,iBAAiB,MAAM,IAAI,IAAI;AAAA,EAC3C;AAAA,EAEA,OAAc,QAAQC,SAAe,MAA0C;AAC9E,UAAM,YAAYC,MAAAA,iBAAiBD,OAAK;AACxC,WAAO,IAAI,iBAAiB,cAAc,WAAW,IAAI;AAAA,EAC1D;AAAA,EAEA,MAAM,MAAM,EAAE,MAA0D;AACvE,UAAM,SAAS,MAAME,SAAAA,cAAc,OAAA,EACjC,KAAK,cAAc,EACnB,OAAO,IAAIC,SAAAA,QAAQ,GAAG,CAAC,EACvB,MAAM;AAAA,MACN,CAAC,KAAK,cAAc,GAAG,KAAK;AAAA,MAC5B,MAAM,KAAK;AAAA,IAAA,CACX,EACA,UAAU,EAAE;AACd,WAAO,KAAK,eAAe,MAAM;AAAA,EAClC;AACD;;"}
+{"version":3,"file":"PersonTokenQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/personToken/PersonTokenQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Literal, SelectBuilder } from '@contember/database'\nimport { PersonToken } from '../../type/index.js'\nimport { computeTokenHash } from '../../utils/index.js'\n\nexport class PersonTokenQuery extends DatabaseQuery<PersonToken.Row | null> {\n\tprivate constructor(\n\t\tprivate readonly identifierType: 'id' | 'token_hash' | 'person_id',\n\t\tprivate readonly identifier: string,\n\t\tprivate readonly type: PersonToken.Type,\n\t\tprivate readonly latestUnusedOnly: boolean = false,\n\t) {\n\t\tsuper()\n\t}\n\n\tpublic static byId(id: string, type: PersonToken.Type): PersonTokenQuery {\n\t\treturn new PersonTokenQuery('id', id, type)\n\t}\n\n\tpublic static byToken(token: string, type: PersonToken.Type): PersonTokenQuery {\n\t\tconst tokenHash = computeTokenHash(token)\n\t\treturn new PersonTokenQuery('token_hash', tokenHash, type)\n\t}\n\n\t/** Latest still-unused token of the given type for a person (e.g. the most recent email OTP code). */\n\tpublic static latestUnusedByPerson(personId: string, type: PersonToken.Type): PersonTokenQuery {\n\t\treturn new PersonTokenQuery('person_id', personId, type, true)\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<PersonToken.Row | null> {\n\t\tlet qb = SelectBuilder.create<PersonToken.Row>()\n\t\t\t.from('person_token')\n\t\t\t.select(new Literal('*'))\n\t\t\t// Evaluate expiry on the DATABASE clock so the gate (validateToken's\n\t\t\t// `is_expired` check) cannot be weakened by app/DB clock skew. The\n\t\t\t// `expires_at` column itself is written on the DB clock too. See CLAUDE.md.\n\t\t\t.select(new Literal('\"expires_at\" <= now()'), 'is_expired')\n\t\t\t.where({\n\t\t\t\t[this.identifierType]: this.identifier,\n\t\t\t\ttype: this.type,\n\t\t\t})\n\t\tif (this.latestUnusedOnly) {\n\t\t\tqb = qb\n\t\t\t\t.where(expr => expr.isNull('used_at'))\n\t\t\t\t.orderBy('created_at', 'desc')\n\t\t\t\t.limit(1)\n\t\t}\n\t\tconst result = await qb.getResult(db)\n\t\treturn this.fetchOneOrNull(result)\n\t}\n}\n"],"names":["DatabaseQuery","token","computeTokenHash","SelectBuilder","Literal"],"mappings":";;;;;AAIO,MAAM,yBAAyBA,SAAAA,cAAsC;AAAA,EACnE,YACU,gBACA,YACA,MACA,mBAA4B,OAC5C;AACD,UAAA;AALiB,SAAA,iBAAA;AACA,SAAA,aAAA;AACA,SAAA,OAAA;AACA,SAAA,mBAAA;AAAA,EAGlB;AAAA,EAEA,OAAc,KAAK,IAAY,MAA0C;AACxE,WAAO,IAAI,iBAAiB,MAAM,IAAI,IAAI;AAAA,EAC3C;AAAA,EAEA,OAAc,QAAQC,SAAe,MAA0C;AAC9E,UAAM,YAAYC,MAAAA,iBAAiBD,OAAK;AACxC,WAAO,IAAI,iBAAiB,cAAc,WAAW,IAAI;AAAA,EAC1D;AAAA;AAAA,EAGA,OAAc,qBAAqB,UAAkB,MAA0C;AAC9F,WAAO,IAAI,iBAAiB,aAAa,UAAU,MAAM,IAAI;AAAA,EAC9D;AAAA,EAEA,MAAM,MAAM,EAAE,MAA0D;AACvE,QAAI,KAAKE,SAAAA,cAAc,OAAA,EACrB,KAAK,cAAc,EACnB,OAAO,IAAIC,SAAAA,QAAQ,GAAG,CAAC,EAIvB,OAAO,IAAIA,SAAAA,QAAQ,uBAAuB,GAAG,YAAY,EACzD,MAAM;AAAA,MACN,CAAC,KAAK,cAAc,GAAG,KAAK;AAAA,MAC5B,MAAM,KAAK;AAAA,IAAA,CACX;AACF,QAAI,KAAK,kBAAkB;AAC1B,WAAK,GACH,MAAM,CAAA,SAAQ,KAAK,OAAO,SAAS,CAAC,EACpC,QAAQ,cAAc,MAAM,EAC5B,MAAM,CAAC;AAAA,IACV;AACA,UAAM,SAAS,MAAM,GAAG,UAAU,EAAE;AACpC,WAAO,KAAK,eAAe,MAAM;AAAA,EAClC;AACD;;"}

package/dist/development/src/model/queries/personToken/PersonTokenQuery.js

@@ -2,11 +2,12 @@ import { DatabaseQuery, SelectBuilder, Literal } from "@contember/database";
 import "../../type/ApiKey.js";
 import { computeTokenHash } from "../../utils/token.js";
 class PersonTokenQuery extends DatabaseQuery {
-  constructor(identifierType, identifier, type) {
+  constructor(identifierType, identifier, type, latestUnusedOnly = false) {
     super();
     this.identifierType = identifierType;
     this.identifier = identifier;
     this.type = type;
+    this.latestUnusedOnly = latestUnusedOnly;
   }
   static byId(id, type) {
     return new PersonTokenQuery("id", id, type);
@@ -15,11 +16,19 @@ class PersonTokenQuery extends DatabaseQuery {
     const tokenHash = computeTokenHash(token);
     return new PersonTokenQuery("token_hash", tokenHash, type);
   }
+  /** Latest still-unused token of the given type for a person (e.g. the most recent email OTP code). */
+  static latestUnusedByPerson(personId, type) {
+    return new PersonTokenQuery("person_id", personId, type, true);
+  }
   async fetch({ db }) {
-    const result = await SelectBuilder.create().from("person_token").select(new Literal("*")).where({
+    let qb = SelectBuilder.create().from("person_token").select(new Literal("*")).select(new Literal('"expires_at" <= now()'), "is_expired").where({
       [this.identifierType]: this.identifier,
       type: this.type
-    }).getResult(db);
+    });
+    if (this.latestUnusedOnly) {
+      qb = qb.where((expr) => expr.isNull("used_at")).orderBy("created_at", "desc").limit(1);
+    }
+    const result = await qb.getResult(db);
     return this.fetchOneOrNull(result);
   }
 }

package/dist/development/src/model/queries/personToken/PersonTokenQuery.js.map

@@ -1 +1 @@
-{"version":3,"file":"PersonTokenQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/personToken/PersonTokenQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Literal, SelectBuilder } from '@contember/database'\nimport { PersonToken } from '../../type'\nimport { computeTokenHash } from '../../utils'\n\nexport class PersonTokenQuery extends DatabaseQuery<PersonToken.Row | null> {\n\tprivate constructor(\n\t\tprivate readonly identifierType: 'id' | 'token_hash',\n\t\tprivate readonly identifier: string,\n\t\tprivate readonly type: PersonToken.Type,\n\t) {\n\t\tsuper()\n\t}\n\n\tpublic static byId(id: string, type: PersonToken.Type): PersonTokenQuery {\n\t\treturn new PersonTokenQuery('id', id, type)\n\t}\n\n\tpublic static byToken(token: string, type: PersonToken.Type): PersonTokenQuery {\n\t\tconst tokenHash = computeTokenHash(token)\n\t\treturn new PersonTokenQuery('token_hash', tokenHash, type)\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<PersonToken.Row | null> {\n\t\tconst result = await SelectBuilder.create<PersonToken.Row>()\n\t\t\t.from('person_token')\n\t\t\t.select(new Literal('*'))\n\t\t\t.where({\n\t\t\t\t[this.identifierType]: this.identifier,\n\t\t\t\ttype: this.type,\n\t\t\t})\n\t\t\t.getResult(db)\n\t\treturn this.fetchOneOrNull(result)\n\t}\n}\n"],"names":[],"mappings":";;;AAIO,MAAM,yBAAyB,cAAsC;AAAA,EACnE,YACU,gBACA,YACA,MAChB;AACD,UAAA;AAJiB,SAAA,iBAAA;AACA,SAAA,aAAA;AACA,SAAA,OAAA;AAAA,EAGlB;AAAA,EAEA,OAAc,KAAK,IAAY,MAA0C;AACxE,WAAO,IAAI,iBAAiB,MAAM,IAAI,IAAI;AAAA,EAC3C;AAAA,EAEA,OAAc,QAAQ,OAAe,MAA0C;AAC9E,UAAM,YAAY,iBAAiB,KAAK;AACxC,WAAO,IAAI,iBAAiB,cAAc,WAAW,IAAI;AAAA,EAC1D;AAAA,EAEA,MAAM,MAAM,EAAE,MAA0D;AACvE,UAAM,SAAS,MAAM,cAAc,OAAA,EACjC,KAAK,cAAc,EACnB,OAAO,IAAI,QAAQ,GAAG,CAAC,EACvB,MAAM;AAAA,MACN,CAAC,KAAK,cAAc,GAAG,KAAK;AAAA,MAC5B,MAAM,KAAK;AAAA,IAAA,CACX,EACA,UAAU,EAAE;AACd,WAAO,KAAK,eAAe,MAAM;AAAA,EAClC;AACD;"}
+{"version":3,"file":"PersonTokenQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/personToken/PersonTokenQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Literal, SelectBuilder } from '@contember/database'\nimport { PersonToken } from '../../type/index.js'\nimport { computeTokenHash } from '../../utils/index.js'\n\nexport class PersonTokenQuery extends DatabaseQuery<PersonToken.Row | null> {\n\tprivate constructor(\n\t\tprivate readonly identifierType: 'id' | 'token_hash' | 'person_id',\n\t\tprivate readonly identifier: string,\n\t\tprivate readonly type: PersonToken.Type,\n\t\tprivate readonly latestUnusedOnly: boolean = false,\n\t) {\n\t\tsuper()\n\t}\n\n\tpublic static byId(id: string, type: PersonToken.Type): PersonTokenQuery {\n\t\treturn new PersonTokenQuery('id', id, type)\n\t}\n\n\tpublic static byToken(token: string, type: PersonToken.Type): PersonTokenQuery {\n\t\tconst tokenHash = computeTokenHash(token)\n\t\treturn new PersonTokenQuery('token_hash', tokenHash, type)\n\t}\n\n\t/** Latest still-unused token of the given type for a person (e.g. the most recent email OTP code). */\n\tpublic static latestUnusedByPerson(personId: string, type: PersonToken.Type): PersonTokenQuery {\n\t\treturn new PersonTokenQuery('person_id', personId, type, true)\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<PersonToken.Row | null> {\n\t\tlet qb = SelectBuilder.create<PersonToken.Row>()\n\t\t\t.from('person_token')\n\t\t\t.select(new Literal('*'))\n\t\t\t// Evaluate expiry on the DATABASE clock so the gate (validateToken's\n\t\t\t// `is_expired` check) cannot be weakened by app/DB clock skew. The\n\t\t\t// `expires_at` column itself is written on the DB clock too. See CLAUDE.md.\n\t\t\t.select(new Literal('\"expires_at\" <= now()'), 'is_expired')\n\t\t\t.where({\n\t\t\t\t[this.identifierType]: this.identifier,\n\t\t\t\ttype: this.type,\n\t\t\t})\n\t\tif (this.latestUnusedOnly) {\n\t\t\tqb = qb\n\t\t\t\t.where(expr => expr.isNull('used_at'))\n\t\t\t\t.orderBy('created_at', 'desc')\n\t\t\t\t.limit(1)\n\t\t}\n\t\tconst result = await qb.getResult(db)\n\t\treturn this.fetchOneOrNull(result)\n\t}\n}\n"],"names":[],"mappings":";;;AAIO,MAAM,yBAAyB,cAAsC;AAAA,EACnE,YACU,gBACA,YACA,MACA,mBAA4B,OAC5C;AACD,UAAA;AALiB,SAAA,iBAAA;AACA,SAAA,aAAA;AACA,SAAA,OAAA;AACA,SAAA,mBAAA;AAAA,EAGlB;AAAA,EAEA,OAAc,KAAK,IAAY,MAA0C;AACxE,WAAO,IAAI,iBAAiB,MAAM,IAAI,IAAI;AAAA,EAC3C;AAAA,EAEA,OAAc,QAAQ,OAAe,MAA0C;AAC9E,UAAM,YAAY,iBAAiB,KAAK;AACxC,WAAO,IAAI,iBAAiB,cAAc,WAAW,IAAI;AAAA,EAC1D;AAAA;AAAA,EAGA,OAAc,qBAAqB,UAAkB,MAA0C;AAC9F,WAAO,IAAI,iBAAiB,aAAa,UAAU,MAAM,IAAI;AAAA,EAC9D;AAAA,EAEA,MAAM,MAAM,EAAE,MAA0D;AACvE,QAAI,KAAK,cAAc,OAAA,EACrB,KAAK,cAAc,EACnB,OAAO,IAAI,QAAQ,GAAG,CAAC,EAIvB,OAAO,IAAI,QAAQ,uBAAuB,GAAG,YAAY,EACzD,MAAM;AAAA,MACN,CAAC,KAAK,cAAc,GAAG,KAAK;AAAA,MAC5B,MAAM,KAAK;AAAA,IAAA,CACX;AACF,QAAI,KAAK,kBAAkB;AAC1B,WAAK,GACH,MAAM,CAAA,SAAQ,KAAK,OAAO,SAAS,CAAC,EACpC,QAAQ,cAAc,MAAM,EAC5B,MAAM,CAAC;AAAA,IACV;AACA,UAAM,SAAS,MAAM,GAAG,UAAU,EAAE;AACpC,WAAO,KAAK,eAAe,MAAM;AAAA,EAClC;AACD;"}

package/dist/development/src/model/queries/project/ProjectBySlugQuery.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ProjectBySlugQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/project/ProjectBySlugQuery.ts"],"sourcesContent":["import { DatabaseQuery, SelectBuilder } from '@contember/database'\nimport { DatabaseQueryable } from '@contember/database'\nimport { Project } from '../../type'\n\nexport class ProjectBySlugQuery extends DatabaseQuery<(Project & { updatedAt: Date }) | null> {\n\tconstructor(private readonly projectSlug: string, private readonly alias = false) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<(Project & { updatedAt: Date }) | null> {\n\t\tconst baseQb = SelectBuilder.create<Project & { updatedAt: Date }>()\n\t\t\t.select('id')\n\t\t\t.select('name')\n\t\t\t.select('slug')\n\t\t\t.select('config')\n\t\t\t.select('updated_at', 'updatedAt')\n\t\t\t.from('project')\n\t\tconst rows = await baseQb\n\t\t\t.where({\n\t\t\t\tslug: this.projectSlug,\n\t\t\t})\n\t\t\t.getResult(db)\n\t\tconst row = this.fetchOneOrNull(rows)\n\t\tif (!this.alias || row) {\n\t\t\treturn row\n\t\t}\n\t\tconst rows2 = await baseQb //\n\t\t\t.where(expr => expr.raw('config->? \\\\? ?', 'alias', this.projectSlug))\n\t\t\t.getResult(db)\n\t\treturn this.fetchOneOrNull(rows2)\n\t}\n}\n"],"names":["DatabaseQuery","SelectBuilder"],"mappings":";;;AAIO,MAAM,2BAA2BA,SAAAA,cAAsD;AAAA,EAC7F,YAA6B,aAAsC,QAAQ,OAAO;AACjF,UAAA;AAD4B,SAAA,cAAA;AAAsC,SAAA,QAAA;AAAA,EAEnE;AAAA,EAEA,MAAM,MAAM,EAAE,MAA0E;AACvF,UAAM,SAASC,SAAAA,cAAc,OAAA,EAC3B,OAAO,IAAI,EACX,OAAO,MAAM,EACb,OAAO,MAAM,EACb,OAAO,QAAQ,EACf,OAAO,cAAc,WAAW,EAChC,KAAK,SAAS;AAChB,UAAM,OAAO,MAAM,OACjB,MAAM;AAAA,MACN,MAAM,KAAK;AAAA,IAAA,CACX,EACA,UAAU,EAAE;AACd,UAAM,MAAM,KAAK,eAAe,IAAI;AACpC,QAAI,CAAC,KAAK,SAAS,KAAK;AACvB,aAAO;AAAA,IACR;AACA,UAAM,QAAQ,MAAM,OAClB,MAAM,UAAQ,KAAK,IAAI,mBAAmB,SAAS,KAAK,WAAW,CAAC,EACpE,UAAU,EAAE;AACd,WAAO,KAAK,eAAe,KAAK;AAAA,EACjC;AACD;;"}
+{"version":3,"file":"ProjectBySlugQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/project/ProjectBySlugQuery.ts"],"sourcesContent":["import { DatabaseQuery, SelectBuilder } from '@contember/database'\nimport { DatabaseQueryable } from '@contember/database'\nimport { Project } from '../../type/index.js'\n\nexport class ProjectBySlugQuery extends DatabaseQuery<(Project & { updatedAt: Date }) | null> {\n\tconstructor(private readonly projectSlug: string, private readonly alias = false) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<(Project & { updatedAt: Date }) | null> {\n\t\tconst baseQb = SelectBuilder.create<Project & { updatedAt: Date }>()\n\t\t\t.select('id')\n\t\t\t.select('name')\n\t\t\t.select('slug')\n\t\t\t.select('config')\n\t\t\t.select('updated_at', 'updatedAt')\n\t\t\t.from('project')\n\t\tconst rows = await baseQb\n\t\t\t.where({\n\t\t\t\tslug: this.projectSlug,\n\t\t\t})\n\t\t\t.getResult(db)\n\t\tconst row = this.fetchOneOrNull(rows)\n\t\tif (!this.alias || row) {\n\t\t\treturn row\n\t\t}\n\t\tconst rows2 = await baseQb //\n\t\t\t.where(expr => expr.raw('config->? \\\\? ?', 'alias', this.projectSlug))\n\t\t\t.getResult(db)\n\t\treturn this.fetchOneOrNull(rows2)\n\t}\n}\n"],"names":["DatabaseQuery","SelectBuilder"],"mappings":";;;AAIO,MAAM,2BAA2BA,SAAAA,cAAsD;AAAA,EAC7F,YAA6B,aAAsC,QAAQ,OAAO;AACjF,UAAA;AAD4B,SAAA,cAAA;AAAsC,SAAA,QAAA;AAAA,EAEnE;AAAA,EAEA,MAAM,MAAM,EAAE,MAA0E;AACvF,UAAM,SAASC,SAAAA,cAAc,OAAA,EAC3B,OAAO,IAAI,EACX,OAAO,MAAM,EACb,OAAO,MAAM,EACb,OAAO,QAAQ,EACf,OAAO,cAAc,WAAW,EAChC,KAAK,SAAS;AAChB,UAAM,OAAO,MAAM,OACjB,MAAM;AAAA,MACN,MAAM,KAAK;AAAA,IAAA,CACX,EACA,UAAU,EAAE;AACd,UAAM,MAAM,KAAK,eAAe,IAAI;AACpC,QAAI,CAAC,KAAK,SAAS,KAAK;AACvB,aAAO;AAAA,IACR;AACA,UAAM,QAAQ,MAAM,OAClB,MAAM,UAAQ,KAAK,IAAI,mBAAmB,SAAS,KAAK,WAAW,CAAC,EACpE,UAAU,EAAE;AACd,WAAO,KAAK,eAAe,KAAK;AAAA,EACjC;AACD;;"}

package/dist/development/src/model/queries/project/ProjectBySlugQuery.js.map

@@ -1 +1 @@
-{"version":3,"file":"ProjectBySlugQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/project/ProjectBySlugQuery.ts"],"sourcesContent":["import { DatabaseQuery, SelectBuilder } from '@contember/database'\nimport { DatabaseQueryable } from '@contember/database'\nimport { Project } from '../../type'\n\nexport class ProjectBySlugQuery extends DatabaseQuery<(Project & { updatedAt: Date }) | null> {\n\tconstructor(private readonly projectSlug: string, private readonly alias = false) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<(Project & { updatedAt: Date }) | null> {\n\t\tconst baseQb = SelectBuilder.create<Project & { updatedAt: Date }>()\n\t\t\t.select('id')\n\t\t\t.select('name')\n\t\t\t.select('slug')\n\t\t\t.select('config')\n\t\t\t.select('updated_at', 'updatedAt')\n\t\t\t.from('project')\n\t\tconst rows = await baseQb\n\t\t\t.where({\n\t\t\t\tslug: this.projectSlug,\n\t\t\t})\n\t\t\t.getResult(db)\n\t\tconst row = this.fetchOneOrNull(rows)\n\t\tif (!this.alias || row) {\n\t\t\treturn row\n\t\t}\n\t\tconst rows2 = await baseQb //\n\t\t\t.where(expr => expr.raw('config->? \\\\? ?', 'alias', this.projectSlug))\n\t\t\t.getResult(db)\n\t\treturn this.fetchOneOrNull(rows2)\n\t}\n}\n"],"names":[],"mappings":";AAIO,MAAM,2BAA2B,cAAsD;AAAA,EAC7F,YAA6B,aAAsC,QAAQ,OAAO;AACjF,UAAA;AAD4B,SAAA,cAAA;AAAsC,SAAA,QAAA;AAAA,EAEnE;AAAA,EAEA,MAAM,MAAM,EAAE,MAA0E;AACvF,UAAM,SAAS,cAAc,OAAA,EAC3B,OAAO,IAAI,EACX,OAAO,MAAM,EACb,OAAO,MAAM,EACb,OAAO,QAAQ,EACf,OAAO,cAAc,WAAW,EAChC,KAAK,SAAS;AAChB,UAAM,OAAO,MAAM,OACjB,MAAM;AAAA,MACN,MAAM,KAAK;AAAA,IAAA,CACX,EACA,UAAU,EAAE;AACd,UAAM,MAAM,KAAK,eAAe,IAAI;AACpC,QAAI,CAAC,KAAK,SAAS,KAAK;AACvB,aAAO;AAAA,IACR;AACA,UAAM,QAAQ,MAAM,OAClB,MAAM,UAAQ,KAAK,IAAI,mBAAmB,SAAS,KAAK,WAAW,CAAC,EACpE,UAAU,EAAE;AACd,WAAO,KAAK,eAAe,KAAK;AAAA,EACjC;AACD;"}
+{"version":3,"file":"ProjectBySlugQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/project/ProjectBySlugQuery.ts"],"sourcesContent":["import { DatabaseQuery, SelectBuilder } from '@contember/database'\nimport { DatabaseQueryable } from '@contember/database'\nimport { Project } from '../../type/index.js'\n\nexport class ProjectBySlugQuery extends DatabaseQuery<(Project & { updatedAt: Date }) | null> {\n\tconstructor(private readonly projectSlug: string, private readonly alias = false) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<(Project & { updatedAt: Date }) | null> {\n\t\tconst baseQb = SelectBuilder.create<Project & { updatedAt: Date }>()\n\t\t\t.select('id')\n\t\t\t.select('name')\n\t\t\t.select('slug')\n\t\t\t.select('config')\n\t\t\t.select('updated_at', 'updatedAt')\n\t\t\t.from('project')\n\t\tconst rows = await baseQb\n\t\t\t.where({\n\t\t\t\tslug: this.projectSlug,\n\t\t\t})\n\t\t\t.getResult(db)\n\t\tconst row = this.fetchOneOrNull(rows)\n\t\tif (!this.alias || row) {\n\t\t\treturn row\n\t\t}\n\t\tconst rows2 = await baseQb //\n\t\t\t.where(expr => expr.raw('config->? \\\\? ?', 'alias', this.projectSlug))\n\t\t\t.getResult(db)\n\t\treturn this.fetchOneOrNull(rows2)\n\t}\n}\n"],"names":[],"mappings":";AAIO,MAAM,2BAA2B,cAAsD;AAAA,EAC7F,YAA6B,aAAsC,QAAQ,OAAO;AACjF,UAAA;AAD4B,SAAA,cAAA;AAAsC,SAAA,QAAA;AAAA,EAEnE;AAAA,EAEA,MAAM,MAAM,EAAE,MAA0E;AACvF,UAAM,SAAS,cAAc,OAAA,EAC3B,OAAO,IAAI,EACX,OAAO,MAAM,EACb,OAAO,MAAM,EACb,OAAO,QAAQ,EACf,OAAO,cAAc,WAAW,EAChC,KAAK,SAAS;AAChB,UAAM,OAAO,MAAM,OACjB,MAAM;AAAA,MACN,MAAM,KAAK;AAAA,IAAA,CACX,EACA,UAAU,EAAE;AACd,UAAM,MAAM,KAAK,eAAe,IAAI;AACpC,QAAI,CAAC,KAAK,SAAS,KAAK;AACvB,aAAO;AAAA,IACR;AACA,UAAM,QAAQ,MAAM,OAClB,MAAM,UAAQ,KAAK,IAAI,mBAAmB,SAAS,KAAK,WAAW,CAAC,EACpE,UAAU,EAAE;AACd,WAAO,KAAK,eAAe,KAAK;AAAA,EACjC;AACD;"}

package/dist/development/src/model/queries/project/ProjectSecretKeysQuery.cjs

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+class ProjectSecretKeysQuery extends Database.DatabaseQuery {
+  constructor(projectId) {
+    super();
+    this.projectId = projectId;
+  }
+  async fetch({ db }) {
+    return await Database.SelectBuilder.create().from("project_secret").where({ project_id: this.projectId }).select("key").select("created_at").select("updated_at").orderBy("key").getResult(db);
+  }
+}
+exports.ProjectSecretKeysQuery = ProjectSecretKeysQuery;
+//# sourceMappingURL=ProjectSecretKeysQuery.cjs.map

package/dist/development/src/model/queries/project/ProjectSecretKeysQuery.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProjectSecretKeysQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/project/ProjectSecretKeysQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\n\nexport interface ProjectSecretInfoRow {\n\treadonly key: string\n\treadonly created_at: Date\n\treadonly updated_at: Date\n}\n\n/**\n * Lists a project's secret KEYS (and timestamps) without ever reading the\n * encrypted values — used to show which secrets exist. For reading values use\n * {@link ProjectSecretsQuery} via SecretsManager.readSecrets.\n */\nexport class ProjectSecretKeysQuery extends DatabaseQuery<ProjectSecretInfoRow[]> {\n\tconstructor(private readonly projectId: string) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectSecretInfoRow[]> {\n\t\treturn await SelectBuilder.create<ProjectSecretInfoRow>()\n\t\t\t.from('project_secret')\n\t\t\t.where({ project_id: this.projectId })\n\t\t\t.select('key')\n\t\t\t.select('created_at')\n\t\t\t.select('updated_at')\n\t\t\t.orderBy('key')\n\t\t\t.getResult(db)\n\t}\n}\n"],"names":["DatabaseQuery","SelectBuilder"],"mappings":";;;AAaO,MAAM,+BAA+BA,SAAAA,cAAsC;AAAA,EACjF,YAA6B,WAAmB;AAC/C,UAAA;AAD4B,SAAA,YAAA;AAAA,EAE7B;AAAA,EAEA,MAAM,MAAM,EAAE,MAA0D;AACvE,WAAO,MAAMC,SAAAA,cAAc,OAAA,EACzB,KAAK,gBAAgB,EACrB,MAAM,EAAE,YAAY,KAAK,UAAA,CAAW,EACpC,OAAO,KAAK,EACZ,OAAO,YAAY,EACnB,OAAO,YAAY,EACnB,QAAQ,KAAK,EACb,UAAU,EAAE;AAAA,EACf;AACD;;"}

package/dist/development/src/model/queries/project/ProjectSecretKeysQuery.js

@@ -0,0 +1,14 @@
+import { DatabaseQuery, SelectBuilder } from "@contember/database";
+class ProjectSecretKeysQuery extends DatabaseQuery {
+  constructor(projectId) {
+    super();
+    this.projectId = projectId;
+  }
+  async fetch({ db }) {
+    return await SelectBuilder.create().from("project_secret").where({ project_id: this.projectId }).select("key").select("created_at").select("updated_at").orderBy("key").getResult(db);
+  }
+}
+export {
+  ProjectSecretKeysQuery
+};
+//# sourceMappingURL=ProjectSecretKeysQuery.js.map

package/dist/development/src/model/queries/project/ProjectSecretKeysQuery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProjectSecretKeysQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/project/ProjectSecretKeysQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\n\nexport interface ProjectSecretInfoRow {\n\treadonly key: string\n\treadonly created_at: Date\n\treadonly updated_at: Date\n}\n\n/**\n * Lists a project's secret KEYS (and timestamps) without ever reading the\n * encrypted values — used to show which secrets exist. For reading values use\n * {@link ProjectSecretsQuery} via SecretsManager.readSecrets.\n */\nexport class ProjectSecretKeysQuery extends DatabaseQuery<ProjectSecretInfoRow[]> {\n\tconstructor(private readonly projectId: string) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectSecretInfoRow[]> {\n\t\treturn await SelectBuilder.create<ProjectSecretInfoRow>()\n\t\t\t.from('project_secret')\n\t\t\t.where({ project_id: this.projectId })\n\t\t\t.select('key')\n\t\t\t.select('created_at')\n\t\t\t.select('updated_at')\n\t\t\t.orderBy('key')\n\t\t\t.getResult(db)\n\t}\n}\n"],"names":[],"mappings":";AAaO,MAAM,+BAA+B,cAAsC;AAAA,EACjF,YAA6B,WAAmB;AAC/C,UAAA;AAD4B,SAAA,YAAA;AAAA,EAE7B;AAAA,EAEA,MAAM,MAAM,EAAE,MAA0D;AACvE,WAAO,MAAM,cAAc,OAAA,EACzB,KAAK,gBAAgB,EACrB,MAAM,EAAE,YAAY,KAAK,UAAA,CAAW,EACpC,OAAO,KAAK,EACZ,OAAO,YAAY,EACnB,OAAO,YAAY,EACnB,QAAQ,KAAK,EACb,UAAU,EAAE;AAAA,EACf;AACD;"}

package/dist/development/src/model/queries/project/ProjectSecretsQuery.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ProjectSecretsQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/project/ProjectSecretsQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\nimport { Providers } from '../../providers'\n\ntype ProjectSecretsQueryResult = { key: string; value: Buffer; needsReEncrypt: boolean }[]\n\nexport class ProjectSecretsQuery extends DatabaseQuery<ProjectSecretsQueryResult> {\n\tconstructor(private readonly projectId: string, private readonly providers: Providers) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectSecretsQueryResult> {\n\t\tconst qb = SelectBuilder.create<{ value: Buffer; version: number; key: string }>()\n\t\t\t.from('project_secret')\n\t\t\t.where({\n\t\t\t\tproject_id: this.projectId,\n\t\t\t})\n\t\t\t.select('value')\n\t\t\t.select('version')\n\t\t\t.select('key')\n\t\tconst rows = await qb.getResult(db)\n\t\treturn await Promise.all(\n\t\t\trows.map(async it => {\n\t\t\t\treturn ({\n\t\t\t\t\tkey: it.key,\n\t\t\t\t\t...await this.providers.decrypt(it.value, it.version),\n\t\t\t\t})\n\t\t\t}),\n\t\t)\n\t}\n}\n"],"names":["DatabaseQuery","SelectBuilder"],"mappings":";;;AAKO,MAAM,4BAA4BA,SAAAA,cAAyC;AAAA,EACjF,YAA6B,WAAoC,WAAsB;AACtF,UAAA;AAD4B,SAAA,YAAA;AAAoC,SAAA,YAAA;AAAA,EAEjE;AAAA,EAEA,MAAM,MAAM,EAAE,MAA6D;AAC1E,UAAM,KAAKC,SAAAA,cAAc,OAAA,EACvB,KAAK,gBAAgB,EACrB,MAAM;AAAA,MACN,YAAY,KAAK;AAAA,IAAA,CACjB,EACA,OAAO,OAAO,EACd,OAAO,SAAS,EAChB,OAAO,KAAK;AACd,UAAM,OAAO,MAAM,GAAG,UAAU,EAAE;AAClC,WAAO,MAAM,QAAQ;AAAA,MACpB,KAAK,IAAI,OAAM,OAAM;AACpB,eAAQ;AAAA,UACP,KAAK,GAAG;AAAA,UACR,GAAG,MAAM,KAAK,UAAU,QAAQ,GAAG,OAAO,GAAG,OAAO;AAAA,QAAA;AAAA,MAEtD,CAAC;AAAA,IAAA;AAAA,EAEH;AACD;;"}
+{"version":3,"file":"ProjectSecretsQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/project/ProjectSecretsQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\nimport { Providers } from '../../providers.js'\n\ntype ProjectSecretsQueryResult = { key: string; value: Buffer; needsReEncrypt: boolean }[]\n\nexport class ProjectSecretsQuery extends DatabaseQuery<ProjectSecretsQueryResult> {\n\tconstructor(private readonly projectId: string, private readonly providers: Providers) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectSecretsQueryResult> {\n\t\tconst qb = SelectBuilder.create<{ value: Buffer; version: number; key: string }>()\n\t\t\t.from('project_secret')\n\t\t\t.where({\n\t\t\t\tproject_id: this.projectId,\n\t\t\t})\n\t\t\t.select('value')\n\t\t\t.select('version')\n\t\t\t.select('key')\n\t\tconst rows = await qb.getResult(db)\n\t\treturn await Promise.all(\n\t\t\trows.map(async it => {\n\t\t\t\treturn ({\n\t\t\t\t\tkey: it.key,\n\t\t\t\t\t...await this.providers.decrypt(it.value, it.version),\n\t\t\t\t})\n\t\t\t}),\n\t\t)\n\t}\n}\n"],"names":["DatabaseQuery","SelectBuilder"],"mappings":";;;AAKO,MAAM,4BAA4BA,SAAAA,cAAyC;AAAA,EACjF,YAA6B,WAAoC,WAAsB;AACtF,UAAA;AAD4B,SAAA,YAAA;AAAoC,SAAA,YAAA;AAAA,EAEjE;AAAA,EAEA,MAAM,MAAM,EAAE,MAA6D;AAC1E,UAAM,KAAKC,SAAAA,cAAc,OAAA,EACvB,KAAK,gBAAgB,EACrB,MAAM;AAAA,MACN,YAAY,KAAK;AAAA,IAAA,CACjB,EACA,OAAO,OAAO,EACd,OAAO,SAAS,EAChB,OAAO,KAAK;AACd,UAAM,OAAO,MAAM,GAAG,UAAU,EAAE;AAClC,WAAO,MAAM,QAAQ;AAAA,MACpB,KAAK,IAAI,OAAM,OAAM;AACpB,eAAQ;AAAA,UACP,KAAK,GAAG;AAAA,UACR,GAAG,MAAM,KAAK,UAAU,QAAQ,GAAG,OAAO,GAAG,OAAO;AAAA,QAAA;AAAA,MAEtD,CAAC;AAAA,IAAA;AAAA,EAEH;AACD;;"}

package/dist/development/src/model/queries/project/ProjectSecretsQuery.js.map

@@ -1 +1 @@
-{"version":3,"file":"ProjectSecretsQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/project/ProjectSecretsQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\nimport { Providers } from '../../providers'\n\ntype ProjectSecretsQueryResult = { key: string; value: Buffer; needsReEncrypt: boolean }[]\n\nexport class ProjectSecretsQuery extends DatabaseQuery<ProjectSecretsQueryResult> {\n\tconstructor(private readonly projectId: string, private readonly providers: Providers) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectSecretsQueryResult> {\n\t\tconst qb = SelectBuilder.create<{ value: Buffer; version: number; key: string }>()\n\t\t\t.from('project_secret')\n\t\t\t.where({\n\t\t\t\tproject_id: this.projectId,\n\t\t\t})\n\t\t\t.select('value')\n\t\t\t.select('version')\n\t\t\t.select('key')\n\t\tconst rows = await qb.getResult(db)\n\t\treturn await Promise.all(\n\t\t\trows.map(async it => {\n\t\t\t\treturn ({\n\t\t\t\t\tkey: it.key,\n\t\t\t\t\t...await this.providers.decrypt(it.value, it.version),\n\t\t\t\t})\n\t\t\t}),\n\t\t)\n\t}\n}\n"],"names":[],"mappings":";AAKO,MAAM,4BAA4B,cAAyC;AAAA,EACjF,YAA6B,WAAoC,WAAsB;AACtF,UAAA;AAD4B,SAAA,YAAA;AAAoC,SAAA,YAAA;AAAA,EAEjE;AAAA,EAEA,MAAM,MAAM,EAAE,MAA6D;AAC1E,UAAM,KAAK,cAAc,OAAA,EACvB,KAAK,gBAAgB,EACrB,MAAM;AAAA,MACN,YAAY,KAAK;AAAA,IAAA,CACjB,EACA,OAAO,OAAO,EACd,OAAO,SAAS,EAChB,OAAO,KAAK;AACd,UAAM,OAAO,MAAM,GAAG,UAAU,EAAE;AAClC,WAAO,MAAM,QAAQ;AAAA,MACpB,KAAK,IAAI,OAAM,OAAM;AACpB,eAAQ;AAAA,UACP,KAAK,GAAG;AAAA,UACR,GAAG,MAAM,KAAK,UAAU,QAAQ,GAAG,OAAO,GAAG,OAAO;AAAA,QAAA;AAAA,MAEtD,CAAC;AAAA,IAAA;AAAA,EAEH;AACD;"}
+{"version":3,"file":"ProjectSecretsQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/project/ProjectSecretsQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, SelectBuilder } from '@contember/database'\nimport { Providers } from '../../providers.js'\n\ntype ProjectSecretsQueryResult = { key: string; value: Buffer; needsReEncrypt: boolean }[]\n\nexport class ProjectSecretsQuery extends DatabaseQuery<ProjectSecretsQueryResult> {\n\tconstructor(private readonly projectId: string, private readonly providers: Providers) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<ProjectSecretsQueryResult> {\n\t\tconst qb = SelectBuilder.create<{ value: Buffer; version: number; key: string }>()\n\t\t\t.from('project_secret')\n\t\t\t.where({\n\t\t\t\tproject_id: this.projectId,\n\t\t\t})\n\t\t\t.select('value')\n\t\t\t.select('version')\n\t\t\t.select('key')\n\t\tconst rows = await qb.getResult(db)\n\t\treturn await Promise.all(\n\t\t\trows.map(async it => {\n\t\t\t\treturn ({\n\t\t\t\t\tkey: it.key,\n\t\t\t\t\t...await this.providers.decrypt(it.value, it.version),\n\t\t\t\t})\n\t\t\t}),\n\t\t)\n\t}\n}\n"],"names":[],"mappings":";AAKO,MAAM,4BAA4B,cAAyC;AAAA,EACjF,YAA6B,WAAoC,WAAsB;AACtF,UAAA;AAD4B,SAAA,YAAA;AAAoC,SAAA,YAAA;AAAA,EAEjE;AAAA,EAEA,MAAM,MAAM,EAAE,MAA6D;AAC1E,UAAM,KAAK,cAAc,OAAA,EACvB,KAAK,gBAAgB,EACrB,MAAM;AAAA,MACN,YAAY,KAAK;AAAA,IAAA,CACjB,EACA,OAAO,OAAO,EACd,OAAO,SAAS,EAChB,OAAO,KAAK;AACd,UAAM,OAAO,MAAM,GAAG,UAAU,EAAE;AAClC,WAAO,MAAM,QAAQ;AAAA,MACpB,KAAK,IAAI,OAAM,OAAM;AACpB,eAAQ;AAAA,UACP,KAAK,GAAG;AAAA,UACR,GAAG,MAAM,KAAK,UAAU,QAAQ,GAAG,OAAO,GAAG,OAAO;AAAA,QAAA;AAAA,MAEtD,CAAC;AAAA,IAAA;AAAA,EAEH;AACD;"}