@eluvio/elv-client-js 4.2.33 → 4.2.36

package/dist/src/client/ContentAccess.js

@@ -15,13 +15,15 @@ var UrlJoin = require("url-join");
 var objectPath = require("object-path");
 var HttpClient = require("../HttpClient");
 var ContentObjectAudit = require("../ContentObjectAudit");
+var bs58 = require("bs58");
 var _require = require("../Validation"),
   ValidateLibrary = _require.ValidateLibrary,
   ValidateObject = _require.ValidateObject,
   ValidateVersion = _require.ValidateVersion,
   ValidatePartHash = _require.ValidatePartHash,
   ValidateWriteToken = _require.ValidateWriteToken,
-  ValidateParameters = _require.ValidateParameters;
+  ValidateParameters = _require.ValidateParameters,
+  ValidatePresence = _require.ValidatePresence;
 var MergeWith = require("lodash/mergeWith");
 var LodashSet = require("lodash/set");
 var LodashGet = require("lodash/get");
@@ -2963,16 +2965,18 @@ exports.MakeFileServiceRequest = /*#__PURE__*/function () {
  * @param {boolean=} constant=true - If specified, a GET request authenticated with an AccessRequest will be made.
  * Otherwise, a POST with an UpdateRequest will be performed
  * @param {string=} format=json - The format of the response
+ * @param {string=} nodeUrl - If specified, the call is made directly to this fabric node instead of
+ * the client's currently configured node(s)
  *
  * @returns {Promise<format>} - The response from the call in the specified format
  */
 exports.CallBitcodeMethod = /*#__PURE__*/function () {
   var _ref63 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee35(_ref62) {
-    var libraryId, objectId, versionHash, writeToken, method, verb, _ref62$queryParams, queryParams, _ref62$body, body, _ref62$headers, headers, _ref62$constant, constant, _ref62$format, format, path, authHeader;
+    var libraryId, objectId, versionHash, writeToken, method, verb, _ref62$queryParams, queryParams, _ref62$body, body, _ref62$headers, headers, _ref62$constant, constant, _ref62$format, format, nodeUrl, path, authHeader;
     return _regeneratorRuntime.wrap(function _callee35$(_context35) {
       while (1) switch (_context35.prev = _context35.next) {
         case 0:
-          libraryId = _ref62.libraryId, objectId = _ref62.objectId, versionHash = _ref62.versionHash, writeToken = _ref62.writeToken, method = _ref62.method, verb = _ref62.verb, _ref62$queryParams = _ref62.queryParams, queryParams = _ref62$queryParams === void 0 ? {} : _ref62$queryParams, _ref62$body = _ref62.body, body = _ref62$body === void 0 ? {} : _ref62$body, _ref62$headers = _ref62.headers, headers = _ref62$headers === void 0 ? {} : _ref62$headers, _ref62$constant = _ref62.constant, constant = _ref62$constant === void 0 ? true : _ref62$constant, _ref62$format = _ref62.format, format = _ref62$format === void 0 ? "json" : _ref62$format;
+          libraryId = _ref62.libraryId, objectId = _ref62.objectId, versionHash = _ref62.versionHash, writeToken = _ref62.writeToken, method = _ref62.method, verb = _ref62.verb, _ref62$queryParams = _ref62.queryParams, queryParams = _ref62$queryParams === void 0 ? {} : _ref62$queryParams, _ref62$body = _ref62.body, body = _ref62$body === void 0 ? {} : _ref62$body, _ref62$headers = _ref62.headers, headers = _ref62$headers === void 0 ? {} : _ref62$headers, _ref62$constant = _ref62.constant, constant = _ref62$constant === void 0 ? true : _ref62$constant, _ref62$format = _ref62.format, format = _ref62$format === void 0 ? "json" : _ref62$format, nodeUrl = _ref62.nodeUrl;
           ValidateParameters({
             libraryId: libraryId,
             objectId: objectId,
@@ -3016,7 +3020,8 @@ exports.CallBitcodeMethod = /*#__PURE__*/function () {
             method: verb,
             path: path,
             queryParams: queryParams,
-            allowFailover: false
+            allowFailover: false,
+            nodeUrl: nodeUrl
           });
         case 18:
           _context35.t2 = _context35.sent;
@@ -4307,6 +4312,98 @@ exports.CreateEncryptionConk = /*#__PURE__*/function () {
   };
 }();
 
+/**
+ * Encrypt the owner encryption key using the new user details provided
+ *
+ * @methodGroup Encryption
+ * @namedParams
+ * @param {string=} libraryId - ID of a library
+ * @param {string=} objectId - ID of an object
+ * @param {string=} versionHash - Hash of an object version
+ * @param {string=} writeToken - The write token for the object
+ * @param {Object=} newEncodedUserPublicKey - raw public key or base-58 encoded publicKey of the new user prefixed 'kupk'
+ */
+exports.MigrateEncryptionConkForUserProvided = /*#__PURE__*/function () {
+  var _ref88 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee48(_ref87) {
+    var libraryId, objectId, versionHash, writeToken, newEncodedUserPublicKey, publicKey, publicKeyBytes, existingCapKey, existingUserCap, encryptedConk, newUserCap;
+    return _regeneratorRuntime.wrap(function _callee48$(_context48) {
+      while (1) switch (_context48.prev = _context48.next) {
+        case 0:
+          libraryId = _ref87.libraryId, objectId = _ref87.objectId, versionHash = _ref87.versionHash, writeToken = _ref87.writeToken, newEncodedUserPublicKey = _ref87.newEncodedUserPublicKey;
+          if (!this.signer.remoteSigner) {
+            _context48.next = 3;
+            break;
+          }
+          return _context48.abrupt("return");
+        case 3:
+          ValidateParameters({
+            libraryId: libraryId,
+            objectId: objectId,
+            versionHash: versionHash
+          });
+          ValidateWriteToken(writeToken);
+          if (!objectId) {
+            objectId = this.utils.DecodeVersionHash(versionHash).objectId;
+          }
+          ValidatePresence("newEncodedUserPublicKey", newEncodedUserPublicKey);
+          if (!newEncodedUserPublicKey.startsWith("kupk")) {
+            publicKey = newEncodedUserPublicKey;
+          } else {
+            publicKeyBytes = bs58.decode(newEncodedUserPublicKey.slice(4));
+            if (publicKeyBytes.length !== 65) {
+              publicKey = "0x" + Buffer.concat([Buffer.from([0x04]), publicKeyBytes]).toString("hex");
+            } else {
+              publicKey = "0x" + publicKeyBytes.toString("hex");
+            }
+          }
+
+          // Decrypt using existing user key
+          existingCapKey = "eluv.caps.iusr".concat(this.utils.AddressToHash(this.signer.address));
+          _context48.next = 11;
+          return this.ContentObjectMetadata({
+            libraryId: libraryId,
+            objectId: objectId,
+            writeToken: writeToken,
+            metadataSubtree: existingCapKey
+          });
+        case 11:
+          existingUserCap = _context48.sent;
+          if (existingUserCap) {
+            _context48.next = 14;
+            break;
+          }
+          throw "No encryption conk present for ".concat(objectId, " for user ").concat(this.signer.address);
+        case 14:
+          _context48.next = 16;
+          return this.Crypto.DecryptCap(existingUserCap, this.signer._signingKey().privateKey);
+        case 16:
+          this.encryptionConks[objectId] = _context48.sent;
+          _context48.next = 19;
+          return this.Crypto.EncryptConk(this.encryptionConks[objectId], publicKey);
+        case 19:
+          encryptedConk = _context48.sent;
+          newUserCap = "eluv.caps.iusr".concat(this.utils.AddressToHash(this.utils.PublicKeyToAddress(publicKey)));
+          _context48.next = 23;
+          return this.ReplaceMetadata({
+            libraryId: libraryId,
+            objectId: objectId,
+            writeToken: writeToken,
+            metadataSubtree: newUserCap,
+            metadata: encryptedConk
+          });
+        case 23:
+          return _context48.abrupt("return", this.encryptionConks[objectId]);
+        case 24:
+        case "end":
+          return _context48.stop();
+      }
+    }, _callee48, this);
+  }));
+  return function (_x44) {
+    return _ref88.apply(this, arguments);
+  };
+}();
+
 /**
  * Retrieve the encryption conk for the specified object. If one has not yet been created
  * and a writeToken has been specified, this method will create a new conk and
@@ -4325,12 +4422,12 @@ exports.CreateEncryptionConk = /*#__PURE__*/function () {
  * @return Promise<Object> - The encryption conk for the object
  */
 exports.EncryptionConk = /*#__PURE__*/function () {
-  var _ref88 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee48(_ref87) {
-    var libraryId, objectId, versionHash, writeToken, _ref87$download, download, owner, ownerCapKey, ownerCap, capKey, existingUserCap;
-    return _regeneratorRuntime.wrap(function _callee48$(_context48) {
-      while (1) switch (_context48.prev = _context48.next) {
+  var _ref90 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee49(_ref89) {
+    var libraryId, objectId, versionHash, writeToken, _ref89$download, download, owner, ownerCapKey, ownerCap, capKey, existingUserCap;
+    return _regeneratorRuntime.wrap(function _callee49$(_context49) {
+      while (1) switch (_context49.prev = _context49.next) {
         case 0:
-          libraryId = _ref87.libraryId, objectId = _ref87.objectId, versionHash = _ref87.versionHash, writeToken = _ref87.writeToken, _ref87$download = _ref87.download, download = _ref87$download === void 0 ? false : _ref87$download;
+          libraryId = _ref89.libraryId, objectId = _ref89.objectId, versionHash = _ref89.versionHash, writeToken = _ref89.writeToken, _ref89$download = _ref89.download, download = _ref89$download === void 0 ? false : _ref89$download;
           ValidateParameters({
             libraryId: libraryId,
             objectId: objectId,
@@ -4342,14 +4439,14 @@ exports.EncryptionConk = /*#__PURE__*/function () {
           if (!objectId) {
             objectId = client.DecodeVersionHash(versionHash).objectId;
           }
-          _context48.next = 6;
+          _context49.next = 6;
           return this.authClient.Owner({
             id: objectId
           });
         case 6:
-          owner = _context48.sent;
+          owner = _context49.sent;
           ownerCapKey = "eluv.caps.iusr".concat(this.utils.AddressToHash(this.signer.address));
-          _context48.next = 10;
+          _context49.next = 10;
           return this.ContentObjectMetadata({
             libraryId: libraryId,
             objectId: objectId,
@@ -4358,39 +4455,39 @@ exports.EncryptionConk = /*#__PURE__*/function () {
             metadataSubtree: ownerCapKey
           });
         case 10:
-          ownerCap = _context48.sent;
+          ownerCap = _context49.sent;
           if (!(!this.utils.EqualAddress(owner, this.signer.address) && !ownerCap)) {
-            _context48.next = 21;
+            _context49.next = 21;
             break;
           }
           if (!download) {
-            _context48.next = 18;
+            _context49.next = 18;
             break;
           }
-          _context48.next = 15;
+          _context49.next = 15;
           return this.authClient.ReEncryptionConk({
             libraryId: libraryId,
             objectId: objectId,
             versionHash: versionHash
           });
         case 15:
-          return _context48.abrupt("return", _context48.sent);
+          return _context49.abrupt("return", _context49.sent);
         case 18:
-          _context48.next = 20;
+          _context49.next = 20;
           return this.authClient.EncryptionConk({
             libraryId: libraryId,
             objectId: objectId,
             versionHash: versionHash
           });
         case 20:
-          return _context48.abrupt("return", _context48.sent);
+          return _context49.abrupt("return", _context49.sent);
         case 21:
           if (this.encryptionConks[objectId]) {
-            _context48.next = 38;
+            _context49.next = 38;
             break;
           }
           capKey = "eluv.caps.iusr".concat(this.utils.AddressToHash(this.signer.address));
-          _context48.next = 25;
+          _context49.next = 25;
           return this.ContentObjectMetadata({
             libraryId: libraryId,
             objectId: objectId,
@@ -4400,23 +4497,23 @@ exports.EncryptionConk = /*#__PURE__*/function () {
             metadataSubtree: capKey
           });
         case 25:
-          existingUserCap = _context48.sent;
+          existingUserCap = _context49.sent;
           if (!existingUserCap) {
-            _context48.next = 32;
+            _context49.next = 32;
             break;
           }
-          _context48.next = 29;
+          _context49.next = 29;
           return this.Crypto.DecryptCap(existingUserCap, this.signer);
         case 29:
-          this.encryptionConks[objectId] = _context48.sent;
-          _context48.next = 38;
+          this.encryptionConks[objectId] = _context49.sent;
+          _context49.next = 38;
           break;
         case 32:
           if (!writeToken) {
-            _context48.next = 37;
+            _context49.next = 37;
             break;
           }
-          _context48.next = 35;
+          _context49.next = 35;
           return this.CreateEncryptionConk({
             libraryId: libraryId,
             objectId: objectId,
@@ -4425,20 +4522,20 @@ exports.EncryptionConk = /*#__PURE__*/function () {
             createKMSConk: false
           });
         case 35:
-          _context48.next = 38;
+          _context49.next = 38;
           break;
         case 37:
           throw "No encryption conk present for " + objectId;
         case 38:
-          return _context48.abrupt("return", this.encryptionConks[objectId]);
+          return _context49.abrupt("return", this.encryptionConks[objectId]);
         case 39:
         case "end":
-          return _context48.stop();
+          return _context49.stop();
       }
-    }, _callee48, this);
+    }, _callee49, this);
   }));
-  return function (_x44) {
-    return _ref88.apply(this, arguments);
+  return function (_x45) {
+    return _ref90.apply(this, arguments);
   };
 }();
 
@@ -4456,37 +4553,37 @@ exports.EncryptionConk = /*#__PURE__*/function () {
  * @return {Promise<ArrayBuffer>}
  */
 exports.Encrypt = /*#__PURE__*/function () {
-  var _ref90 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee49(_ref89) {
+  var _ref92 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee50(_ref91) {
     var libraryId, objectId, writeToken, chunk, conk, data;
-    return _regeneratorRuntime.wrap(function _callee49$(_context49) {
-      while (1) switch (_context49.prev = _context49.next) {
+    return _regeneratorRuntime.wrap(function _callee50$(_context50) {
+      while (1) switch (_context50.prev = _context50.next) {
         case 0:
-          libraryId = _ref89.libraryId, objectId = _ref89.objectId, writeToken = _ref89.writeToken, chunk = _ref89.chunk;
+          libraryId = _ref91.libraryId, objectId = _ref91.objectId, writeToken = _ref91.writeToken, chunk = _ref91.chunk;
           ValidateParameters({
             libraryId: libraryId,
             objectId: objectId
           });
-          _context49.next = 4;
+          _context50.next = 4;
           return this.EncryptionConk({
             libraryId: libraryId,
             objectId: objectId,
             writeToken: writeToken
           });
         case 4:
-          conk = _context49.sent;
-          _context49.next = 7;
+          conk = _context50.sent;
+          _context50.next = 7;
           return this.Crypto.Encrypt(conk, chunk);
         case 7:
-          data = _context49.sent;
-          return _context49.abrupt("return", data.buffer.slice(data.byteOffset, data.byteOffset + data.byteLength));
+          data = _context50.sent;
+          return _context50.abrupt("return", data.buffer.slice(data.byteOffset, data.byteOffset + data.byteLength));
         case 9:
         case "end":
-          return _context49.stop();
+          return _context50.stop();
       }
-    }, _callee49, this);
+    }, _callee50, this);
   }));
-  return function (_x45) {
-    return _ref90.apply(this, arguments);
+  return function (_x46) {
+    return _ref92.apply(this, arguments);
   };
 }();
 
@@ -4504,17 +4601,17 @@ exports.Encrypt = /*#__PURE__*/function () {
  * @return {Promise<ArrayBuffer>}
  */
 exports.Decrypt = /*#__PURE__*/function () {
-  var _ref92 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee50(_ref91) {
+  var _ref94 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee51(_ref93) {
     var libraryId, objectId, writeToken, chunk, conk, data;
-    return _regeneratorRuntime.wrap(function _callee50$(_context50) {
-      while (1) switch (_context50.prev = _context50.next) {
+    return _regeneratorRuntime.wrap(function _callee51$(_context51) {
+      while (1) switch (_context51.prev = _context51.next) {
         case 0:
-          libraryId = _ref91.libraryId, objectId = _ref91.objectId, writeToken = _ref91.writeToken, chunk = _ref91.chunk;
+          libraryId = _ref93.libraryId, objectId = _ref93.objectId, writeToken = _ref93.writeToken, chunk = _ref93.chunk;
           ValidateParameters({
             libraryId: libraryId,
             objectId: objectId
           });
-          _context50.next = 4;
+          _context51.next = 4;
           return this.EncryptionConk({
             libraryId: libraryId,
             objectId: objectId,
@@ -4522,20 +4619,20 @@ exports.Decrypt = /*#__PURE__*/function () {
             download: true
           });
         case 4:
-          conk = _context50.sent;
-          _context50.next = 7;
+          conk = _context51.sent;
+          _context51.next = 7;
           return this.Crypto.Decrypt(conk, chunk);
         case 7:
-          data = _context50.sent;
-          return _context50.abrupt("return", data.buffer.slice(data.byteOffset, data.byteOffset + data.byteLength));
+          data = _context51.sent;
+          return _context51.abrupt("return", data.buffer.slice(data.byteOffset, data.byteOffset + data.byteLength));
         case 9:
         case "end":
-          return _context50.stop();
+          return _context51.stop();
       }
-    }, _callee50, this);
+    }, _callee51, this);
   }));
-  return function (_x46) {
-    return _ref92.apply(this, arguments);
+  return function (_x47) {
+    return _ref94.apply(this, arguments);
   };
 }();
 
@@ -4551,24 +4648,24 @@ exports.Decrypt = /*#__PURE__*/function () {
  * @return {Promise<string>} - Contract type of the item - "space", "library", "type", "object", "wallet", "group", or "other"
  */
 exports.AccessType = /*#__PURE__*/function () {
-  var _ref94 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee51(_ref93) {
+  var _ref96 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee52(_ref95) {
     var id;
-    return _regeneratorRuntime.wrap(function _callee51$(_context51) {
-      while (1) switch (_context51.prev = _context51.next) {
+    return _regeneratorRuntime.wrap(function _callee52$(_context52) {
+      while (1) switch (_context52.prev = _context52.next) {
         case 0:
-          id = _ref93.id;
-          _context51.next = 3;
+          id = _ref95.id;
+          _context52.next = 3;
           return this.authClient.AccessType(id);
         case 3:
-          return _context51.abrupt("return", _context51.sent);
+          return _context52.abrupt("return", _context52.sent);
         case 4:
         case "end":
-          return _context51.stop();
+          return _context52.stop();
       }
-    }, _callee51, this);
+    }, _callee52, this);
   }));
-  return function (_x47) {
-    return _ref94.apply(this, arguments);
+  return function (_x48) {
+    return _ref96.apply(this, arguments);
   };
 }();
 
@@ -4584,12 +4681,12 @@ exports.AccessType = /*#__PURE__*/function () {
  *
  * @return {Promise<Object>} - Info about the access charge and whether or not the object is accessible to the current user   */
 exports.AccessInfo = /*#__PURE__*/function () {
-  var _ref96 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee52(_ref95) {
+  var _ref98 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee53(_ref97) {
     var objectId, args, info;
-    return _regeneratorRuntime.wrap(function _callee52$(_context52) {
-      while (1) switch (_context52.prev = _context52.next) {
+    return _regeneratorRuntime.wrap(function _callee53$(_context53) {
+      while (1) switch (_context53.prev = _context53.next) {
         case 0:
-          objectId = _ref95.objectId, args = _ref95.args;
+          objectId = _ref97.objectId, args = _ref97.args;
           ValidateObject(objectId);
           if (!args) {
             args = [0,
@@ -4601,16 +4698,16 @@ exports.AccessInfo = /*#__PURE__*/function () {
           }
 
           this.Log("Retrieving access info: ".concat(objectId));
-          _context52.next = 6;
+          _context53.next = 6;
           return this.ethClient.CallContractMethod({
             contractAddress: this.utils.HashToAddress(objectId),
             methodName: "getAccessInfo",
             methodArgs: args
           });
         case 6:
-          info = _context52.sent;
+          info = _context53.sent;
           this.Log(info);
-          return _context52.abrupt("return", {
+          return _context53.abrupt("return", {
             visibilityCode: info[0],
             visible: info[0] >= 1,
             accessible: info[0] >= 10,
@@ -4621,12 +4718,12 @@ exports.AccessInfo = /*#__PURE__*/function () {
           });
         case 9:
         case "end":
-          return _context52.stop();
+          return _context53.stop();
       }
-    }, _callee52, this);
+    }, _callee53, this);
   }));
-  return function (_x48) {
-    return _ref96.apply(this, arguments);
+  return function (_x49) {
+    return _ref98.apply(this, arguments);
   };
 }();
 
@@ -4654,12 +4751,12 @@ exports.AccessInfo = /*#__PURE__*/function () {
  * @return {Promise<Object>} - Resultant AccessRequest or UpdateRequest event
  */
 exports.AccessRequest = /*#__PURE__*/function () {
-  var _ref98 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee53(_ref97) {
-    var libraryId, objectId, versionHash, _ref97$args, args, _ref97$update, update, _ref97$noCache, noCache;
-    return _regeneratorRuntime.wrap(function _callee53$(_context53) {
-      while (1) switch (_context53.prev = _context53.next) {
+  var _ref100 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee54(_ref99) {
+    var libraryId, objectId, versionHash, _ref99$args, args, _ref99$update, update, _ref99$noCache, noCache;
+    return _regeneratorRuntime.wrap(function _callee54$(_context54) {
+      while (1) switch (_context54.prev = _context54.next) {
         case 0:
-          libraryId = _ref97.libraryId, objectId = _ref97.objectId, versionHash = _ref97.versionHash, _ref97$args = _ref97.args, args = _ref97$args === void 0 ? [] : _ref97$args, _ref97$update = _ref97.update, update = _ref97$update === void 0 ? false : _ref97$update, _ref97$noCache = _ref97.noCache, noCache = _ref97$noCache === void 0 ? false : _ref97$noCache;
+          libraryId = _ref99.libraryId, objectId = _ref99.objectId, versionHash = _ref99.versionHash, _ref99$args = _ref99.args, args = _ref99$args === void 0 ? [] : _ref99$args, _ref99$update = _ref99.update, update = _ref99$update === void 0 ? false : _ref99$update, _ref99$noCache = _ref99.noCache, noCache = _ref99$noCache === void 0 ? false : _ref99$noCache;
           ValidateParameters({
             libraryId: libraryId,
             objectId: objectId,
@@ -4668,7 +4765,7 @@ exports.AccessRequest = /*#__PURE__*/function () {
           if (versionHash) {
             objectId = this.utils.DecodeVersionHash(versionHash).objectId;
           }
-          _context53.next = 5;
+          _context54.next = 5;
           return this.authClient.MakeAccessRequest({
             libraryId: libraryId,
             objectId: objectId,
@@ -4679,15 +4776,15 @@ exports.AccessRequest = /*#__PURE__*/function () {
             noCache: noCache
           });
         case 5:
-          return _context53.abrupt("return", _context53.sent);
+          return _context54.abrupt("return", _context54.sent);
         case 6:
         case "end":
-          return _context53.stop();
+          return _context54.stop();
       }
-    }, _callee53, this);
+    }, _callee54, this);
   }));
-  return function (_x49) {
-    return _ref98.apply(this, arguments);
+  return function (_x50) {
+    return _ref100.apply(this, arguments);
   };
 }();
 
@@ -4699,8 +4796,8 @@ exports.AccessRequest = /*#__PURE__*/function () {
  * @param {Object=} context - Additional context to include in state channel requests
  * - Note: Context must be a map of string->string
  */
-exports.SetAuthContext = function (_ref99) {
-  var context = _ref99.context;
+exports.SetAuthContext = function (_ref101) {
+  var context = _ref101.context;
   if (context && Object.values(context).find(function (value) {
     return typeof value !== "string";
   })) {
@@ -4724,34 +4821,34 @@ exports.SetAuthContext = function (_ref99) {
  * @return {Promise<string>} - The state channel token
  */
 exports.GenerateStateChannelToken = /*#__PURE__*/function () {
-  var _ref101 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee54(_ref100) {
-    var objectId, versionHash, context, _ref100$noCache, noCache;
-    return _regeneratorRuntime.wrap(function _callee54$(_context54) {
-      while (1) switch (_context54.prev = _context54.next) {
+  var _ref103 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee55(_ref102) {
+    var objectId, versionHash, context, _ref102$noCache, noCache;
+    return _regeneratorRuntime.wrap(function _callee55$(_context55) {
+      while (1) switch (_context55.prev = _context55.next) {
         case 0:
-          objectId = _ref100.objectId, versionHash = _ref100.versionHash, context = _ref100.context, _ref100$noCache = _ref100.noCache, noCache = _ref100$noCache === void 0 ? false : _ref100$noCache;
+          objectId = _ref102.objectId, versionHash = _ref102.versionHash, context = _ref102.context, _ref102$noCache = _ref102.noCache, noCache = _ref102$noCache === void 0 ? false : _ref102$noCache;
           versionHash ? ValidateVersion(versionHash) : ValidateObject(objectId);
           if (!versionHash) {
-            _context54.next = 6;
+            _context55.next = 6;
             break;
           }
           objectId = this.utils.DecodeVersionHash(versionHash).objectId;
-          _context54.next = 10;
+          _context55.next = 10;
           break;
         case 6:
           if (this.stateChannelAccess[objectId]) {
-            _context54.next = 10;
+            _context55.next = 10;
             break;
           }
-          _context54.next = 9;
+          _context55.next = 9;
           return this.LatestVersionHash({
             objectId: objectId
           });
         case 9:
-          versionHash = _context54.sent;
+          versionHash = _context55.sent;
         case 10:
           this.stateChannelAccess[objectId] = versionHash;
-          _context54.next = 13;
+          _context55.next = 13;
           return this.authClient.AuthorizationToken({
             objectId: objectId,
             channelAuth: true,
@@ -4760,15 +4857,15 @@ exports.GenerateStateChannelToken = /*#__PURE__*/function () {
             noCache: noCache
           });
         case 13:
-          return _context54.abrupt("return", _context54.sent);
+          return _context55.abrupt("return", _context55.sent);
         case 14:
         case "end":
-          return _context54.stop();
+          return _context55.stop();
       }
-    }, _callee54, this);
+    }, _callee55, this);
   }));
-  return function (_x50) {
-    return _ref101.apply(this, arguments);
+  return function (_x51) {
+    return _ref103.apply(this, arguments);
   };
 }();
 
@@ -4782,38 +4879,38 @@ exports.GenerateStateChannelToken = /*#__PURE__*/function () {
  * @param {number} percentComplete - Completion percentage of the content
  */
 exports.FinalizeStateChannelAccess = /*#__PURE__*/function () {
-  var _ref103 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee55(_ref102) {
+  var _ref105 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee56(_ref104) {
     var objectId, versionHash, percentComplete;
-    return _regeneratorRuntime.wrap(function _callee55$(_context55) {
-      while (1) switch (_context55.prev = _context55.next) {
+    return _regeneratorRuntime.wrap(function _callee56$(_context56) {
+      while (1) switch (_context56.prev = _context56.next) {
         case 0:
-          objectId = _ref102.objectId, versionHash = _ref102.versionHash, percentComplete = _ref102.percentComplete;
+          objectId = _ref104.objectId, versionHash = _ref104.versionHash, percentComplete = _ref104.percentComplete;
           versionHash ? ValidateVersion(versionHash) : ValidateObject(objectId);
           if (!versionHash) {
-            _context55.next = 6;
+            _context56.next = 6;
             break;
           }
           objectId = this.utils.DecodeVersionHash(versionHash).objectId;
-          _context55.next = 13;
+          _context56.next = 13;
           break;
         case 6:
           if (!this.stateChannelAccess[objectId]) {
-            _context55.next = 10;
+            _context56.next = 10;
             break;
           }
           versionHash = this.stateChannelAccess[objectId];
-          _context55.next = 13;
+          _context56.next = 13;
           break;
         case 10:
-          _context55.next = 12;
+          _context56.next = 12;
           return this.LatestVersionHash({
             objectId: objectId
           });
         case 12:
-          versionHash = _context55.sent;
+          versionHash = _context56.sent;
         case 13:
           this.stateChannelAccess[objectId] = undefined;
-          _context55.next = 16;
+          _context56.next = 16;
           return this.authClient.ChannelContentFinalize({
             objectId: objectId,
             versionHash: versionHash,
@@ -4821,12 +4918,12 @@ exports.FinalizeStateChannelAccess = /*#__PURE__*/function () {
           });
         case 16:
         case "end":
-          return _context55.stop();
+          return _context56.stop();
       }
-    }, _callee55, this);
+    }, _callee56, this);
   }));
-  return function (_x51) {
-    return _ref103.apply(this, arguments);
+  return function (_x52) {
+    return _ref105.apply(this, arguments);
   };
 }();
 
@@ -4843,34 +4940,34 @@ exports.FinalizeStateChannelAccess = /*#__PURE__*/function () {
  * @returns {Promise<Object>} - Transaction log of the AccessComplete event
  */
 exports.ContentObjectAccessComplete = /*#__PURE__*/function () {
-  var _ref105 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee56(_ref104) {
-    var objectId, _ref104$score, score;
-    return _regeneratorRuntime.wrap(function _callee56$(_context56) {
-      while (1) switch (_context56.prev = _context56.next) {
+  var _ref107 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee57(_ref106) {
+    var objectId, _ref106$score, score;
+    return _regeneratorRuntime.wrap(function _callee57$(_context57) {
+      while (1) switch (_context57.prev = _context57.next) {
         case 0:
-          objectId = _ref104.objectId, _ref104$score = _ref104.score, score = _ref104$score === void 0 ? 100 : _ref104$score;
+          objectId = _ref106.objectId, _ref106$score = _ref106.score, score = _ref106$score === void 0 ? 100 : _ref106$score;
           ValidateObject(objectId);
           if (!(score < 0 || score > 100)) {
-            _context56.next = 4;
+            _context57.next = 4;
             break;
           }
           throw Error("Invalid AccessComplete score: " + score);
         case 4:
-          _context56.next = 6;
+          _context57.next = 6;
           return this.authClient.AccessComplete({
             id: objectId,
             score: score
           });
         case 6:
-          return _context56.abrupt("return", _context56.sent);
+          return _context57.abrupt("return", _context57.sent);
         case 7:
         case "end":
-          return _context56.stop();
+          return _context57.stop();
       }
-    }, _callee56, this);
+    }, _callee57, this);
   }));
-  return function (_x52) {
-    return _ref105.apply(this, arguments);
+  return function (_x53) {
+    return _ref107.apply(this, arguments);
   };
 }();
 
@@ -4892,62 +4989,62 @@ exports.ContentObjectAccessComplete = /*#__PURE__*/function () {
  * @return {Promise<Array<string>>} - List of addresses of available items
  */
 exports.Collection = /*#__PURE__*/function () {
-  var _ref107 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee57(_ref106) {
+  var _ref109 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee58(_ref108) {
     var collectionType, validCollectionTypes, walletAddress;
-    return _regeneratorRuntime.wrap(function _callee57$(_context57) {
-      while (1) switch (_context57.prev = _context57.next) {
+    return _regeneratorRuntime.wrap(function _callee58$(_context58) {
+      while (1) switch (_context58.prev = _context58.next) {
         case 0:
-          collectionType = _ref106.collectionType;
+          collectionType = _ref108.collectionType;
           validCollectionTypes = ["accessGroups", "contentObjects", "contentTypes", "contracts", "libraries"];
           if (validCollectionTypes.includes(collectionType)) {
-            _context57.next = 4;
+            _context58.next = 4;
             break;
           }
           throw new Error("Invalid collection type: " + collectionType);
         case 4:
           if (!this.signer) {
-            _context57.next = 10;
+            _context58.next = 10;
             break;
           }
-          _context57.next = 7;
+          _context58.next = 7;
           return this.userProfileClient.WalletAddress();
         case 7:
-          _context57.t0 = _context57.sent;
-          _context57.next = 11;
+          _context58.t0 = _context58.sent;
+          _context58.next = 11;
           break;
         case 10:
-          _context57.t0 = undefined;
+          _context58.t0 = undefined;
         case 11:
-          walletAddress = _context57.t0;
+          walletAddress = _context58.t0;
           if (walletAddress) {
-            _context57.next = 14;
+            _context58.next = 14;
             break;
           }
           throw new Error("Unable to get collection: User wallet doesn't exist");
         case 14:
           this.Log("Retrieving ".concat(collectionType, " contract collection for user ").concat(this.signer.address));
-          _context57.next = 17;
+          _context58.next = 17;
           return this.ethClient.MakeProviderCall({
             methodName: "send",
             args: ["elv_getWalletCollection", [this.contentSpaceId, "iusr".concat(this.utils.AddressToHash(this.signer.address)), collectionType]]
           });
         case 17:
-          _context57.t1 = _context57.sent;
-          if (_context57.t1) {
-            _context57.next = 20;
+          _context58.t1 = _context58.sent;
+          if (_context58.t1) {
+            _context58.next = 20;
             break;
           }
-          _context57.t1 = [];
+          _context58.t1 = [];
         case 20:
-          return _context57.abrupt("return", _context57.t1);
+          return _context58.abrupt("return", _context58.t1);
         case 21:
         case "end":
-          return _context57.stop();
+          return _context58.stop();
       }
-    }, _callee57, this);
+    }, _callee58, this);
   }));
-  return function (_x53) {
-    return _ref107.apply(this, arguments);
+  return function (_x54) {
+    return _ref109.apply(this, arguments);
   };
 }();
 
@@ -4968,13 +5065,13 @@ exports.Collection = /*#__PURE__*/function () {
  * @returns {Promise<Object>} - Response describing audit results
  */
 exports.AuditContentObject = /*#__PURE__*/function () {
-  var _ref109 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee58(_ref108) {
+  var _ref111 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee59(_ref110) {
     var libraryId, objectId, versionHash, salt, samples, authorizationToken;
-    return _regeneratorRuntime.wrap(function _callee58$(_context58) {
-      while (1) switch (_context58.prev = _context58.next) {
+    return _regeneratorRuntime.wrap(function _callee59$(_context59) {
+      while (1) switch (_context59.prev = _context59.next) {
         case 0:
-          libraryId = _ref108.libraryId, objectId = _ref108.objectId, versionHash = _ref108.versionHash, salt = _ref108.salt, samples = _ref108.samples, authorizationToken = _ref108.authorizationToken;
-          _context58.next = 3;
+          libraryId = _ref110.libraryId, objectId = _ref110.objectId, versionHash = _ref110.versionHash, salt = _ref110.salt, samples = _ref110.samples, authorizationToken = _ref110.authorizationToken;
+          _context59.next = 3;
           return ContentObjectAudit.AuditContentObject({
             client: this,
             libraryId: libraryId,
@@ -4985,15 +5082,15 @@ exports.AuditContentObject = /*#__PURE__*/function () {
             authorizationToken: authorizationToken
           });
         case 3:
-          return _context58.abrupt("return", _context58.sent);
+          return _context59.abrupt("return", _context59.sent);
         case 4:
         case "end":
-          return _context58.stop();
+          return _context59.stop();
       }
-    }, _callee58, this);
+    }, _callee59, this);
   }));
-  return function (_x54) {
-    return _ref109.apply(this, arguments);
+  return function (_x55) {
+    return _ref111.apply(this, arguments);
   };
 }();
 
@@ -5010,12 +5107,12 @@ exports.AuditContentObject = /*#__PURE__*/function () {
  * @returns {Promise<Object>} - Response containing proof information
  */
 exports.Proofs = /*#__PURE__*/function () {
-  var _ref111 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee59(_ref110) {
+  var _ref113 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee60(_ref112) {
     var libraryId, objectId, versionHash, partHash, path;
-    return _regeneratorRuntime.wrap(function _callee59$(_context59) {
-      while (1) switch (_context59.prev = _context59.next) {
+    return _regeneratorRuntime.wrap(function _callee60$(_context60) {
+      while (1) switch (_context60.prev = _context60.next) {
         case 0:
-          libraryId = _ref110.libraryId, objectId = _ref110.objectId, versionHash = _ref110.versionHash, partHash = _ref110.partHash;
+          libraryId = _ref112.libraryId, objectId = _ref112.objectId, versionHash = _ref112.versionHash, partHash = _ref112.partHash;
           ValidateParameters({
             libraryId: libraryId,
             objectId: objectId,
@@ -5026,32 +5123,32 @@ exports.Proofs = /*#__PURE__*/function () {
             objectId = this.utils.DecodeVersionHash(versionHash).objectId;
           }
           path = UrlJoin("q", versionHash || objectId, "data", partHash, "proofs");
-          _context59.t0 = this.utils;
-          _context59.t1 = this.HttpClient;
-          _context59.next = 9;
+          _context60.t0 = this.utils;
+          _context60.t1 = this.HttpClient;
+          _context60.next = 9;
           return this.authClient.AuthorizationHeader({
             libraryId: libraryId,
             objectId: objectId,
             versionHash: versionHash
           });
         case 9:
-          _context59.t2 = _context59.sent;
-          _context59.t3 = path;
-          _context59.t4 = {
-            headers: _context59.t2,
+          _context60.t2 = _context60.sent;
+          _context60.t3 = path;
+          _context60.t4 = {
+            headers: _context60.t2,
             method: "GET",
-            path: _context59.t3
+            path: _context60.t3
           };
-          _context59.t5 = _context59.t1.Request.call(_context59.t1, _context59.t4);
-          return _context59.abrupt("return", _context59.t0.ResponseToJson.call(_context59.t0, _context59.t5));
+          _context60.t5 = _context60.t1.Request.call(_context60.t1, _context60.t4);
+          return _context60.abrupt("return", _context60.t0.ResponseToJson.call(_context60.t0, _context60.t5));
         case 14:
         case "end":
-          return _context59.stop();
+          return _context60.stop();
       }
-    }, _callee59, this);
+    }, _callee60, this);
   }));
-  return function (_x55) {
-    return _ref111.apply(this, arguments);
+  return function (_x56) {
+    return _ref113.apply(this, arguments);
   };
 }();
 
@@ -5068,12 +5165,12 @@ exports.Proofs = /*#__PURE__*/function () {
  * @returns {Promise<Format>} - Response containing the CBOR response in the specified format
  */
 exports.QParts = /*#__PURE__*/function () {
-  var _ref113 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee60(_ref112) {
-    var libraryId, objectId, partHash, _ref112$format, format, path;
-    return _regeneratorRuntime.wrap(function _callee60$(_context60) {
-      while (1) switch (_context60.prev = _context60.next) {
+  var _ref115 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee61(_ref114) {
+    var libraryId, objectId, partHash, _ref114$format, format, path;
+    return _regeneratorRuntime.wrap(function _callee61$(_context61) {
+      while (1) switch (_context61.prev = _context61.next) {
         case 0:
-          libraryId = _ref112.libraryId, objectId = _ref112.objectId, partHash = _ref112.partHash, _ref112$format = _ref112.format, format = _ref112$format === void 0 ? "blob" : _ref112$format;
+          libraryId = _ref114.libraryId, objectId = _ref114.objectId, partHash = _ref114.partHash, _ref114$format = _ref114.format, format = _ref114$format === void 0 ? "blob" : _ref114$format;
           ValidateParameters({
             libraryId: libraryId,
             objectId: objectId,
@@ -5081,32 +5178,313 @@ exports.QParts = /*#__PURE__*/function () {
           });
           ValidatePartHash(partHash);
           path = UrlJoin("qparts", partHash);
-          _context60.t0 = this.utils;
-          _context60.t1 = format;
-          _context60.t2 = this.HttpClient;
-          _context60.next = 9;
+          _context61.t0 = this.utils;
+          _context61.t1 = format;
+          _context61.t2 = this.HttpClient;
+          _context61.next = 9;
           return this.authClient.AuthorizationHeader({
             libraryId: libraryId,
             objectId: objectId,
             partHash: partHash
           });
         case 9:
-          _context60.t3 = _context60.sent;
-          _context60.t4 = path;
-          _context60.t5 = {
-            headers: _context60.t3,
+          _context61.t3 = _context61.sent;
+          _context61.t4 = path;
+          _context61.t5 = {
+            headers: _context61.t3,
             method: "GET",
-            path: _context60.t4
+            path: _context61.t4
           };
-          _context60.t6 = _context60.t2.Request.call(_context60.t2, _context60.t5);
-          return _context60.abrupt("return", _context60.t0.ResponseToFormat.call(_context60.t0, _context60.t1, _context60.t6));
+          _context61.t6 = _context61.t2.Request.call(_context61.t2, _context61.t5);
+          return _context61.abrupt("return", _context61.t0.ResponseToFormat.call(_context61.t0, _context61.t1, _context61.t6));
         case 14:
         case "end":
-          return _context60.stop();
+          return _context61.stop();
       }
-    }, _callee60, this);
+    }, _callee61, this);
   }));
-  return function (_x56) {
-    return _ref113.apply(this, arguments);
+  return function (_x57) {
+    return _ref115.apply(this, arguments);
+  };
+}();
+
+/* Content groups */
+
+/**
+ * Retrieve a content object property ("tags", "groups" or "query_fields").
+ *
+ * @private
+ */
+var ContentObjectProperty = /*#__PURE__*/function () {
+  var _ref117 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee62(_ref116) {
+    var objectId, versionHash, writeToken, property, token;
+    return _regeneratorRuntime.wrap(function _callee62$(_context62) {
+      while (1) switch (_context62.prev = _context62.next) {
+        case 0:
+          objectId = _ref116.objectId, versionHash = _ref116.versionHash, writeToken = _ref116.writeToken, property = _ref116.property;
+          if (!(writeToken && versionHash)) {
+            _context62.next = 3;
+            break;
+          }
+          throw Error("Cannot specify writeToken and versionHash at same time (token:".concat(writeToken, ", hash:").concat(versionHash, ")"));
+        case 3:
+          if (writeToken) {
+            ValidateWriteToken(writeToken);
+          } else if (versionHash) {
+            ValidateVersion(versionHash);
+          } else {
+            ValidateObject(objectId);
+          }
+          if (writeToken) {
+            objectId = this.utils.DecodeWriteToken(writeToken).objectId;
+          } else if (versionHash) {
+            objectId = this.utils.DecodeVersionHash(versionHash).objectId;
+          }
+          _context62.next = 7;
+          return this.GenerateStateChannelToken({
+            objectId: objectId,
+            versionHash: versionHash
+          });
+        case 7:
+          token = _context62.sent;
+          return _context62.abrupt("return", this.HttpClient.RequestJsonBody({
+            headers: {
+              Authorization: "Bearer ".concat(token)
+            },
+            method: "GET",
+            path: UrlJoin("q", writeToken || versionHash || objectId, property)
+          }));
+        case 9:
+        case "end":
+          return _context62.stop();
+      }
+    }, _callee62, this);
+  }));
+  return function ContentObjectProperty(_x58) {
+    return _ref117.apply(this, arguments);
+  };
+}();
+
+/**
+ * Get content tags
+ *
+ * @methodGroup Content Groups
+ * @namedParams
+ * @param {string=} objectId - ID of the object
+ * @param {string=} versionHash - Hash of the object version
+ * @param {string=} writeToken - Write token of the draft
+ *
+ * @returns {Promise<Array<string>>} - The content object tags
+ */
+exports.ContentObjectTags = /*#__PURE__*/function () {
+  var _ref119 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee63(_ref118) {
+    var objectId, versionHash, writeToken;
+    return _regeneratorRuntime.wrap(function _callee63$(_context63) {
+      while (1) switch (_context63.prev = _context63.next) {
+        case 0:
+          objectId = _ref118.objectId, versionHash = _ref118.versionHash, writeToken = _ref118.writeToken;
+          this.Log("Retrieving content tags: ".concat(writeToken || versionHash || objectId));
+          return _context63.abrupt("return", ContentObjectProperty.call(this, {
+            objectId: objectId,
+            versionHash: versionHash,
+            writeToken: writeToken,
+            property: "tags"
+          }));
+        case 3:
+        case "end":
+          return _context63.stop();
+      }
+    }, _callee63, this);
+  }));
+  return function (_x59) {
+    return _ref119.apply(this, arguments);
+  };
+}();
+
+/**
+ * Get content query fields
+ *
+ * @methodGroup Content Groups
+ * @namedParams
+ * @param {string=} objectId - ID of the object
+ * @param {string=} versionHash - Hash of the object version
+ * @param {string=} writeToken - Write token of the draft
+ *
+ * @returns {Promise<Object<string, string>>} - The content object query fields
+ */
+exports.ContentObjectQueryFields = /*#__PURE__*/function () {
+  var _ref121 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee64(_ref120) {
+    var objectId, versionHash, writeToken;
+    return _regeneratorRuntime.wrap(function _callee64$(_context64) {
+      while (1) switch (_context64.prev = _context64.next) {
+        case 0:
+          objectId = _ref120.objectId, versionHash = _ref120.versionHash, writeToken = _ref120.writeToken;
+          this.Log("Retrieving content query fields: ".concat(writeToken || versionHash || objectId));
+          return _context64.abrupt("return", ContentObjectProperty.call(this, {
+            objectId: objectId,
+            versionHash: versionHash,
+            writeToken: writeToken,
+            property: "query_fields"
+          }));
+        case 3:
+        case "end":
+          return _context64.stop();
+      }
+    }, _callee64, this);
+  }));
+  return function (_x60) {
+    return _ref121.apply(this, arguments);
+  };
+}();
+
+/**
+ * Get the groups a content object belongs to
+ *
+ * @methodGroup Content Groups
+ * @namedParams
+ * @param {string=} objectId - ID of the object
+ * @param {string=} versionHash - Hash of the object version
+ * @param {string=} writeToken - Write token of the draft
+ *
+ * @returns {Promise<Array<string>>} - The content groups the object belongs to
+ */
+exports.ContentObjectGroups = /*#__PURE__*/function () {
+  var _ref123 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee65(_ref122) {
+    var objectId, versionHash, writeToken;
+    return _regeneratorRuntime.wrap(function _callee65$(_context65) {
+      while (1) switch (_context65.prev = _context65.next) {
+        case 0:
+          objectId = _ref122.objectId, versionHash = _ref122.versionHash, writeToken = _ref122.writeToken;
+          this.Log("Retrieving content object groups: ".concat(writeToken || versionHash || objectId));
+          return _context65.abrupt("return", ContentObjectProperty.call(this, {
+            objectId: objectId,
+            versionHash: versionHash,
+            writeToken: writeToken,
+            property: "groups"
+          }));
+        case 3:
+        case "end":
+          return _context65.stop();
+      }
+    }, _callee65, this);
+  }));
+  return function (_x61) {
+    return _ref123.apply(this, arguments);
+  };
+}();
+
+/**
+ * Query tenant content.
+ *
+ * The response is based on the fabric index and can use groups, query_fields and tags for filtering and sorting.
+ * The response may include metadata fields as specified in select/remove.
+ *
+ * @methodGroup Tenants
+ * @namedParams
+ * @param {string=} tenantId - ID of the tenant to query. Defaults to the tenant of the current user
+ * @param {Array<string>=} filter - Filter expressions of the form `<field>:<comparator>:<value>`, e.g.
+ *  `tag:eq:elv:media:live_stream` or `qf.date:ge:2026-09-01`. Multiple expressions are combined with AND.
+ *
+ *  Comparators: `::` or `:co:` contains, `:nc:` not contains, `:eq:` equals, `:ne:` not equals,
+ *  `:lt:` less than, `:le:` less than or equal, `:gt:` greater than, `:ge:` greater than or equal.
+ *  Comparisons are lexicographic string comparisons. `:sw:` and `:ew:` are not supported here.
+ *
+ *  Reserved fields:
+ *  - `tag` - matches when *any one* of the object's tags satisfies the expression
+ *  - `group` - ID of a content group the object belongs to
+ *  - `unique_group.id`, `unique_group.type`
+ *  - `lib`, `library` - library ID. Supports `:eq:` only
+ *  - `created_block_time` - when the latest version was created. Comparison operators only
+ *
+ *  Any other field name is treated as a query field name. Prefix with `qf.` to filter on a query field
+ *  whose name collides with a reserved one, e.g. `qf.tag:eq:x`. `created_block_number` is no longer
+ *  supported and is rejected.
+ *
+ * @param {string=} sortBy - Name of a query field to sort by. This is a query field name, not a metadata path,
+ *  and only one may be given. When omitted, results are sorted by the time the latest version was created.
+ *
+ *  Note that sorting by a query field also restricts the results to objects that have that field
+ * @param {boolean=} sortDescending=false - Sort in descending order
+ * @param {(Array<string> | string)=} include - Index data to return alongside each result. Tokens:
+ *  `tags`, `groups`, `uniquegroups`, `fields` (query fields), `type`, `name`, `all`, `none`. May be given
+ *  as an array or as a comma-separated string. The Fabric defaults to query fields only; `none` suppresses
+ *  all index data, including those
+ * @param {Array<string>=} select - Metadata subtree paths to include in each result. If omitted, no metadata
+ *  is retrieved at all and each result contains only its IDs and index data
+ * @param {Array<string>=} remove - Metadata subtree paths to omit from each result. Only has an effect when
+ *  `select` is also specified
+ * @param {number=} start - Index of the first object to retrieve. Defaults to the first
+ * @param {number=} limit - Maximum number of objects to return. Defaults to 100, capped at 998
+ * @param {string=} authorizationToken - Additional authorization token for the request
+ *
+ * @returns {Promise<Object>} - The query result, including `versions` and `paging` information. One entry per
+ *  content object - the index holds only the latest version - carrying `id`, `hash`, `qlib_id`,
+ *  `last_modified_at` and whatever `include` selects - by default the object's query fields
+ */
+exports.TenantContent = /*#__PURE__*/function () {
+  var _ref125 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime.mark(function _callee66(_ref124) {
+    var tenantId, _ref124$filter, filter, sortBy, sortDescending, include, _ref124$select, select, _ref124$remove, remove, start, limit, authorizationToken, path, token, httpClient, queryParams;
+    return _regeneratorRuntime.wrap(function _callee66$(_context66) {
+      while (1) switch (_context66.prev = _context66.next) {
+        case 0:
+          tenantId = _ref124.tenantId, _ref124$filter = _ref124.filter, filter = _ref124$filter === void 0 ? [] : _ref124$filter, sortBy = _ref124.sortBy, sortDescending = _ref124.sortDescending, include = _ref124.include, _ref124$select = _ref124.select, select = _ref124$select === void 0 ? [] : _ref124$select, _ref124$remove = _ref124.remove, remove = _ref124$remove === void 0 ? [] : _ref124$remove, start = _ref124.start, limit = _ref124.limit, authorizationToken = _ref124.authorizationToken;
+          _context66.t0 = tenantId;
+          if (_context66.t0) {
+            _context66.next = 6;
+            break;
+          }
+          _context66.next = 5;
+          return this.userProfileClient.TenantContractId();
+        case 5:
+          _context66.t0 = _context66.sent;
+        case 6:
+          tenantId = _context66.t0;
+          ValidatePresence("tenantId", tenantId);
+          this.Log("Querying content for tenant ".concat(tenantId));
+          path = UrlJoin("tenants", tenantId, "q", "query"); // Tenant query works best with plain token - it allows it to return objecte metadata fields.
+          _context66.t1 = authorizationToken;
+          if (_context66.t1) {
+            _context66.next = 15;
+            break;
+          }
+          _context66.next = 14;
+          return this.CreatePlainToken();
+        case 14:
+          _context66.t1 = _context66.sent;
+        case 15:
+          token = _context66.t1;
+          httpClient = this.TenantQueryHttpClient && this.TenantQueryHttpClient.uris && this.TenantQueryHttpClient.uris.length > 0 ? this.TenantQueryHttpClient : this.HttpClient;
+          queryParams = {
+            filter: filter,
+            sort_by: sortBy,
+            sort_descending: sortDescending,
+            include: include,
+            select: select,
+            remove: remove,
+            start: start,
+            limit: limit
+          };
+          Object.keys(queryParams).forEach(function (key) {
+            var value = queryParams[key];
+            if (value === undefined || Array.isArray(value) && value.length === 0) {
+              delete queryParams[key];
+            }
+          });
+          return _context66.abrupt("return", this.utils.ResponseToJson(httpClient.Request({
+            headers: {
+              "Authorization": "Bearer ".concat(token)
+            },
+            method: "GET",
+            path: path,
+            queryParams: queryParams
+          })));
+        case 20:
+        case "end":
+          return _context66.stop();
+      }
+    }, _callee66, this);
+  }));
+  return function (_x62) {
+    return _ref125.apply(this, arguments);
   };
 }();