@sanity/cli 8.17.1 → 8.19.0

package/dist/prompts/promptForGrants.js

@@ -0,0 +1,64 @@
+import { roleChecklist } from '@sanity/cli-core/ux';
+import { DEFAULT_ROLE, ORG_PERMISSIONS, projectGrantKey } from '../actions/tokens/grants.js';
+import { getTokenRoles } from '../services/tokens.js';
+const defaultRole = {
+    title: DEFAULT_ROLE.title,
+    value: DEFAULT_ROLE.name
+};
+function toOrgItem(permission) {
+    const item = {
+        name: permission.title,
+        value: permission.key
+    };
+    if ('roleName' in permission) return item;
+    return {
+        ...item,
+        role: defaultRole.value,
+        roles: permission.roles.map(({ key, title })=>({
+                title,
+                value: key
+            }))
+    };
+}
+function toProjectItem(project, preselectedProjectId) {
+    return {
+        checked: project.id === preselectedProjectId,
+        loadRoles: async ()=>{
+            const roles = await getTokenRoles(project.id);
+            return roles.filter((role)=>role.appliesToRobots).map(({ name, title })=>({
+                    title,
+                    value: name
+                }));
+        },
+        name: project.displayName,
+        role: defaultRole.value,
+        roles: [
+            defaultRole
+        ],
+        suffix: `(${project.id})`,
+        value: projectGrantKey(project.id)
+    };
+}
+export async function promptForGrants({ preselectedProjectId, projects }) {
+    const answers = await roleChecklist({
+        message: 'What should this token access?',
+        sections: [
+            {
+                items: ORG_PERMISSIONS.map((permission)=>toOrgItem(permission)),
+                title: 'Organization'
+            },
+            {
+                items: projects.map((project)=>toProjectItem(project, preselectedProjectId)),
+                title: 'Projects'
+            }
+        ]
+    });
+    return answers.map(({ role, value })=>({
+            key: value,
+            roles: role ? [
+                role
+            ] : []
+        }));
+}
+
+//# sourceMappingURL=promptForGrants.js.map

package/dist/prompts/promptForGrants.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/prompts/promptForGrants.ts"],"sourcesContent":["import {type ChecklistItem, roleChecklist} from '@sanity/cli-core/ux'\n\nimport {\n  DEFAULT_ROLE,\n  type Grant,\n  ORG_PERMISSIONS,\n  type OrgPermission,\n  projectGrantKey,\n} from '../actions/tokens/grants.js'\nimport {getTokenRoles} from '../services/tokens.js'\n\ntype Project = {displayName: string; id: string}\n\nconst defaultRole = {title: DEFAULT_ROLE.title, value: DEFAULT_ROLE.name}\n\nfunction toOrgItem(permission: OrgPermission): ChecklistItem {\n  const item = {name: permission.title, value: permission.key}\n  if ('roleName' in permission) return item\n\n  return {\n    ...item,\n    role: defaultRole.value,\n    roles: permission.roles.map(({key, title}) => ({title, value: key})),\n  }\n}\n\nfunction toProjectItem(project: Project, preselectedProjectId: string | undefined): ChecklistItem {\n  return {\n    checked: project.id === preselectedProjectId,\n    loadRoles: async () => {\n      const roles = await getTokenRoles(project.id)\n      return roles\n        .filter((role) => role.appliesToRobots)\n        .map(({name, title}) => ({title, value: name}))\n    },\n    name: project.displayName,\n    role: defaultRole.value,\n    roles: [defaultRole],\n    suffix: `(${project.id})`,\n    value: projectGrantKey(project.id),\n  }\n}\n\nexport async function promptForGrants({\n  preselectedProjectId,\n  projects,\n}: {\n  preselectedProjectId: string | undefined\n  projects: Project[]\n}): Promise<Grant[]> {\n  const answers = await roleChecklist({\n    message: 'What should this token access?',\n    sections: [\n      {\n        items: ORG_PERMISSIONS.map((permission) => toOrgItem(permission)),\n        title: 'Organization',\n      },\n      {\n        items: projects.map((project) => toProjectItem(project, preselectedProjectId)),\n        title: 'Projects',\n      },\n    ],\n  })\n\n  return answers.map(({role, value}) => ({\n    key: value,\n    roles: role ? [role] : [],\n  }))\n}\n"],"names":["roleChecklist","DEFAULT_ROLE","ORG_PERMISSIONS","projectGrantKey","getTokenRoles","defaultRole","title","value","name","toOrgItem","permission","item","key","role","roles","map","toProjectItem","project","preselectedProjectId","checked","id","loadRoles","filter","appliesToRobots","displayName","suffix","promptForGrants","projects","answers","message","sections","items"],"mappings":"AAAA,SAA4BA,aAAa,QAAO,sBAAqB;AAErE,SACEC,YAAY,EAEZC,eAAe,EAEfC,eAAe,QACV,8BAA6B;AACpC,SAAQC,aAAa,QAAO,wBAAuB;AAInD,MAAMC,cAAc;IAACC,OAAOL,aAAaK,KAAK;IAAEC,OAAON,aAAaO,IAAI;AAAA;AAExE,SAASC,UAAUC,UAAyB;IAC1C,MAAMC,OAAO;QAACH,MAAME,WAAWJ,KAAK;QAAEC,OAAOG,WAAWE,GAAG;IAAA;IAC3D,IAAI,cAAcF,YAAY,OAAOC;IAErC,OAAO;QACL,GAAGA,IAAI;QACPE,MAAMR,YAAYE,KAAK;QACvBO,OAAOJ,WAAWI,KAAK,CAACC,GAAG,CAAC,CAAC,EAACH,GAAG,EAAEN,KAAK,EAAC,GAAM,CAAA;gBAACA;gBAAOC,OAAOK;YAAG,CAAA;IACnE;AACF;AAEA,SAASI,cAAcC,OAAgB,EAAEC,oBAAwC;IAC/E,OAAO;QACLC,SAASF,QAAQG,EAAE,KAAKF;QACxBG,WAAW;YACT,MAAMP,QAAQ,MAAMV,cAAca,QAAQG,EAAE;YAC5C,OAAON,MACJQ,MAAM,CAAC,CAACT,OAASA,KAAKU,eAAe,EACrCR,GAAG,CAAC,CAAC,EAACP,IAAI,EAAEF,KAAK,EAAC,GAAM,CAAA;oBAACA;oBAAOC,OAAOC;gBAAI,CAAA;QAChD;QACAA,MAAMS,QAAQO,WAAW;QACzBX,MAAMR,YAAYE,KAAK;QACvBO,OAAO;YAACT;SAAY;QACpBoB,QAAQ,CAAC,CAAC,EAAER,QAAQG,EAAE,CAAC,CAAC,CAAC;QACzBb,OAAOJ,gBAAgBc,QAAQG,EAAE;IACnC;AACF;AAEA,OAAO,eAAeM,gBAAgB,EACpCR,oBAAoB,EACpBS,QAAQ,EAIT;IACC,MAAMC,UAAU,MAAM5B,cAAc;QAClC6B,SAAS;QACTC,UAAU;YACR;gBACEC,OAAO7B,gBAAgBa,GAAG,CAAC,CAACL,aAAeD,UAAUC;gBACrDJ,OAAO;YACT;YACA;gBACEyB,OAAOJ,SAASZ,GAAG,CAAC,CAACE,UAAYD,cAAcC,SAASC;gBACxDZ,OAAO;YACT;SACD;IACH;IAEA,OAAOsB,QAAQb,GAAG,CAAC,CAAC,EAACF,IAAI,EAAEN,KAAK,EAAC,GAAM,CAAA;YACrCK,KAAKL;YACLO,OAAOD,OAAO;gBAACA;aAAK,GAAG,EAAE;QAC3B,CAAA;AACF"}

package/dist/services/tokens.js

@@ -34,38 +34,52 @@ async function fetchAllPages(client, url) {
  */ export function getProjectMembership(robot, projectId) {
     return robot.memberships.find((membership)=>membership.resourceType === 'project' && membership.resourceId === projectId);
 }
-/**
- * Add a token to a project
- * @param options - The options for adding a token to a project
- * @returns A promise that resolves to the created robot, including its secret token
- *
- * @internal
- */ export async function createToken(options) {
-    const { expiresAt, label, projectId, roleName, sendNotification } = options;
+async function postRobot(url, { expiresAt, ...body }, query = {}) {
     const client = await getClient();
     return client.request({
         body: {
-            label,
-            memberships: [
-                {
-                    resourceId: projectId,
-                    resourceType: 'project',
-                    roleNames: [
-                        roleName
-                    ]
-                }
-            ],
+            ...body,
             ...expiresAt === undefined ? {} : {
                 expiresAt
             }
         },
         method: 'POST',
-        query: sendNotification === false ? {
-            sendNotification: 'false'
-        } : {},
-        url: `/access/project/${projectId}/robots`
+        query,
+        url
     });
 }
+/**
+ * Add a token to a project
+ * @param options - The options for adding a token to a project
+ * @returns A promise that resolves to the created robot, including its secret token
+ *
+ * @internal
+ */ export async function createToken(options) {
+    const { expiresAt, label, projectId, roleNames, sendNotification } = options;
+    return postRobot(`/access/project/${projectId}/robots`, {
+        expiresAt,
+        label,
+        memberships: [
+            {
+                resourceId: projectId,
+                resourceType: 'project',
+                roleNames
+            }
+        ]
+    }, sendNotification === false ? {
+        sendNotification: 'false'
+    } : {});
+}
+/**
+ * Create an organization token, which can hold organization permissions and roles on several projects
+ * @param options - The options for the organization token
+ * @returns A promise that resolves to the created robot, including its secret token
+ *
+ * @internal
+ */ export async function createOrganizationToken(options) {
+    const { organizationId, ...body } = options;
+    return postRobot(`/access/organization/${organizationId}/robots`, body);
+}
 /**
  * Delete a token from a project
  * @param options - The options for deleting a token from a project; `tokenId`

package/dist/services/tokens.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/services/tokens.ts"],"sourcesContent":["import {getGlobalCliClient} from '@sanity/cli-core'\nimport {type SanityClient} from '@sanity/client'\n\nimport {TOKENS_API_VERSION} from '../actions/tokens/constants.js'\nimport {\n  type Membership,\n  type Robot,\n  type RobotWithToken,\n  type Role,\n} from '../actions/tokens/types.js'\n\ninterface PaginatedResponse<T> {\n  data: T[]\n  nextCursor: string | null\n}\n\nfunction getClient(token?: string): Promise<SanityClient> {\n  return getGlobalCliClient({\n    apiVersion: TOKENS_API_VERSION,\n    requireUser: true,\n    ...(token === undefined ? {} : {token}),\n  })\n}\n\nasync function fetchAllPages<T>(client: SanityClient, url: string): Promise<T[]> {\n  const items: T[] = []\n  let cursor: string | null = null\n\n  do {\n    const response: PaginatedResponse<T> = await client.request<PaginatedResponse<T>>({\n      query: cursor === null ? {} : {nextCursor: cursor},\n      url,\n    })\n    items.push(...response.data)\n    cursor = response.nextCursor\n  } while (cursor !== null)\n\n  return items\n}\n\n/**\n * Get the membership granting a robot access to the given project\n * @param robot - The robot to inspect\n * @param projectId - The project ID\n * @returns The project membership, if any\n *\n * @internal\n */\nexport function getProjectMembership(robot: Robot, projectId: string): Membership | undefined {\n  return robot.memberships.find(\n    (membership) => membership.resourceType === 'project' && membership.resourceId === projectId,\n  )\n}\n\ninterface CreateTokenOptions {\n  label: string\n  projectId: string\n  roleName: string\n\n  expiresAt?: string\n  sendNotification?: boolean\n}\n\n/**\n * Add a token to a project\n * @param options - The options for adding a token to a project\n * @returns A promise that resolves to the created robot, including its secret token\n *\n * @internal\n */\nexport async function createToken(options: CreateTokenOptions): Promise<RobotWithToken> {\n  const {expiresAt, label, projectId, roleName, sendNotification} = options\n\n  const client = await getClient()\n\n  return client.request<RobotWithToken>({\n    body: {\n      label,\n      memberships: [{resourceId: projectId, resourceType: 'project', roleNames: [roleName]}],\n      ...(expiresAt === undefined ? {} : {expiresAt}),\n    },\n    method: 'POST',\n    query: sendNotification === false ? {sendNotification: 'false'} : {},\n    url: `/access/project/${projectId}/robots`,\n  })\n}\n\ninterface DeleteTokenOptions {\n  projectId: string\n  tokenId: string\n}\n\n/**\n * Delete a token from a project\n * @param options - The options for deleting a token from a project; `tokenId`\n * is the id reported by `getTokens`/`createToken`\n * @returns A promise that resolves when the token is deleted\n *\n * @internal\n */\nexport async function deleteToken(options: DeleteTokenOptions): Promise<void> {\n  const {projectId, tokenId} = options\n\n  const client = await getClient()\n\n  return client.request({\n    method: 'DELETE',\n    url: `/access/project/${projectId}/robots/${tokenId}`,\n  })\n}\n\n/**\n * Rotate a robot token, replacing its secret while preserving the robot,\n * its roles, and the token's expiry. The request authenticates as the robot\n * itself; the previous secret is revoked immediately.\n * @param token - The current robot token secret\n * @returns A promise that resolves to the robot with its new secret token\n *\n * @internal\n */\nexport async function rotateToken(token: string): Promise<RobotWithToken> {\n  const client = await getClient(token)\n\n  return client.request<RobotWithToken>({\n    method: 'POST',\n    url: '/access/robots/me/rotate',\n  })\n}\n\n/**\n * Get all tokens for a project. Tokens managed by an organization are\n * excluded: they cannot be managed at the project scope.\n * @param projectId - The project ID\n * @returns A promise that resolves to an array of robots\n *\n * @internal\n */\nexport async function getTokens(projectId: string): Promise<Robot[]> {\n  const client = await getClient()\n\n  const robots = await fetchAllPages<Robot>(client, `/access/project/${projectId}/robots`)\n\n  return robots.filter((robot) => robot.managedBy?.resourceType !== 'organization')\n}\n\n/**\n * Get all roles for a project\n * @param projectId - The project ID\n * @returns A promise that resolves to an array of project roles\n *\n * @internal\n */\nexport async function getTokenRoles(projectId: string): Promise<Role[]> {\n  const client = await getClient()\n\n  return fetchAllPages<Role>(client, `/access/project/${projectId}/roles`)\n}\n"],"names":["getGlobalCliClient","TOKENS_API_VERSION","getClient","token","apiVersion","requireUser","undefined","fetchAllPages","client","url","items","cursor","response","request","query","nextCursor","push","data","getProjectMembership","robot","projectId","memberships","find","membership","resourceType","resourceId","createToken","options","expiresAt","label","roleName","sendNotification","body","roleNames","method","deleteToken","tokenId","rotateToken","getTokens","robots","filter","managedBy","getTokenRoles"],"mappings":"AAAA,SAAQA,kBAAkB,QAAO,mBAAkB;AAGnD,SAAQC,kBAAkB,QAAO,iCAAgC;AAajE,SAASC,UAAUC,KAAc;IAC/B,OAAOH,mBAAmB;QACxBI,YAAYH;QACZI,aAAa;QACb,GAAIF,UAAUG,YAAY,CAAC,IAAI;YAACH;QAAK,CAAC;IACxC;AACF;AAEA,eAAeI,cAAiBC,MAAoB,EAAEC,GAAW;IAC/D,MAAMC,QAAa,EAAE;IACrB,IAAIC,SAAwB;IAE5B,GAAG;QACD,MAAMC,WAAiC,MAAMJ,OAAOK,OAAO,CAAuB;YAChFC,OAAOH,WAAW,OAAO,CAAC,IAAI;gBAACI,YAAYJ;YAAM;YACjDF;QACF;QACAC,MAAMM,IAAI,IAAIJ,SAASK,IAAI;QAC3BN,SAASC,SAASG,UAAU;IAC9B,QAASJ,WAAW,KAAK;IAEzB,OAAOD;AACT;AAEA;;;;;;;CAOC,GACD,OAAO,SAASQ,qBAAqBC,KAAY,EAAEC,SAAiB;IAClE,OAAOD,MAAME,WAAW,CAACC,IAAI,CAC3B,CAACC,aAAeA,WAAWC,YAAY,KAAK,aAAaD,WAAWE,UAAU,KAAKL;AAEvF;AAWA;;;;;;CAMC,GACD,OAAO,eAAeM,YAAYC,OAA2B;IAC3D,MAAM,EAACC,SAAS,EAAEC,KAAK,EAAET,SAAS,EAAEU,QAAQ,EAAEC,gBAAgB,EAAC,GAAGJ;IAElE,MAAMnB,SAAS,MAAMN;IAErB,OAAOM,OAAOK,OAAO,CAAiB;QACpCmB,MAAM;YACJH;YACAR,aAAa;gBAAC;oBAACI,YAAYL;oBAAWI,cAAc;oBAAWS,WAAW;wBAACH;qBAAS;gBAAA;aAAE;YACtF,GAAIF,cAActB,YAAY,CAAC,IAAI;gBAACsB;YAAS,CAAC;QAChD;QACAM,QAAQ;QACRpB,OAAOiB,qBAAqB,QAAQ;YAACA,kBAAkB;QAAO,IAAI,CAAC;QACnEtB,KAAK,CAAC,gBAAgB,EAAEW,UAAU,OAAO,CAAC;IAC5C;AACF;AAOA;;;;;;;CAOC,GACD,OAAO,eAAee,YAAYR,OAA2B;IAC3D,MAAM,EAACP,SAAS,EAAEgB,OAAO,EAAC,GAAGT;IAE7B,MAAMnB,SAAS,MAAMN;IAErB,OAAOM,OAAOK,OAAO,CAAC;QACpBqB,QAAQ;QACRzB,KAAK,CAAC,gBAAgB,EAAEW,UAAU,QAAQ,EAAEgB,SAAS;IACvD;AACF;AAEA;;;;;;;;CAQC,GACD,OAAO,eAAeC,YAAYlC,KAAa;IAC7C,MAAMK,SAAS,MAAMN,UAAUC;IAE/B,OAAOK,OAAOK,OAAO,CAAiB;QACpCqB,QAAQ;QACRzB,KAAK;IACP;AACF;AAEA;;;;;;;CAOC,GACD,OAAO,eAAe6B,UAAUlB,SAAiB;IAC/C,MAAMZ,SAAS,MAAMN;IAErB,MAAMqC,SAAS,MAAMhC,cAAqBC,QAAQ,CAAC,gBAAgB,EAAEY,UAAU,OAAO,CAAC;IAEvF,OAAOmB,OAAOC,MAAM,CAAC,CAACrB,QAAUA,MAAMsB,SAAS,EAAEjB,iBAAiB;AACpE;AAEA;;;;;;CAMC,GACD,OAAO,eAAekB,cAActB,SAAiB;IACnD,MAAMZ,SAAS,MAAMN;IAErB,OAAOK,cAAoBC,QAAQ,CAAC,gBAAgB,EAAEY,UAAU,MAAM,CAAC;AACzE"}
+{"version":3,"sources":["../../src/services/tokens.ts"],"sourcesContent":["import {getGlobalCliClient} from '@sanity/cli-core'\nimport {type SanityClient} from '@sanity/client'\n\nimport {TOKENS_API_VERSION} from '../actions/tokens/constants.js'\nimport {\n  type Membership,\n  type Robot,\n  type RobotWithToken,\n  type Role,\n} from '../actions/tokens/types.js'\n\ninterface PaginatedResponse<T> {\n  data: T[]\n  nextCursor: string | null\n}\n\nfunction getClient(token?: string): Promise<SanityClient> {\n  return getGlobalCliClient({\n    apiVersion: TOKENS_API_VERSION,\n    requireUser: true,\n    ...(token === undefined ? {} : {token}),\n  })\n}\n\nasync function fetchAllPages<T>(client: SanityClient, url: string): Promise<T[]> {\n  const items: T[] = []\n  let cursor: string | null = null\n\n  do {\n    const response: PaginatedResponse<T> = await client.request<PaginatedResponse<T>>({\n      query: cursor === null ? {} : {nextCursor: cursor},\n      url,\n    })\n    items.push(...response.data)\n    cursor = response.nextCursor\n  } while (cursor !== null)\n\n  return items\n}\n\n/**\n * Get the membership granting a robot access to the given project\n * @param robot - The robot to inspect\n * @param projectId - The project ID\n * @returns The project membership, if any\n *\n * @internal\n */\nexport function getProjectMembership(robot: Robot, projectId: string): Membership | undefined {\n  return robot.memberships.find(\n    (membership) => membership.resourceType === 'project' && membership.resourceId === projectId,\n  )\n}\n\ninterface RobotBody {\n  label: string\n  memberships: Membership[]\n\n  expiresAt?: string\n}\n\nasync function postRobot(\n  url: string,\n  {expiresAt, ...body}: RobotBody,\n  query: Record<string, string> = {},\n): Promise<RobotWithToken> {\n  const client = await getClient()\n\n  return client.request<RobotWithToken>({\n    body: {...body, ...(expiresAt === undefined ? {} : {expiresAt})},\n    method: 'POST',\n    query,\n    url,\n  })\n}\n\ninterface CreateTokenOptions {\n  label: string\n  projectId: string\n  roleNames: string[]\n\n  expiresAt?: string\n  sendNotification?: boolean\n}\n\n/**\n * Add a token to a project\n * @param options - The options for adding a token to a project\n * @returns A promise that resolves to the created robot, including its secret token\n *\n * @internal\n */\nexport async function createToken(options: CreateTokenOptions): Promise<RobotWithToken> {\n  const {expiresAt, label, projectId, roleNames, sendNotification} = options\n\n  return postRobot(\n    `/access/project/${projectId}/robots`,\n    {\n      expiresAt,\n      label,\n      memberships: [{resourceId: projectId, resourceType: 'project', roleNames}],\n    },\n    sendNotification === false ? {sendNotification: 'false'} : {},\n  )\n}\n\ninterface CreateOrganizationTokenOptions extends RobotBody {\n  organizationId: string\n}\n\n/**\n * Create an organization token, which can hold organization permissions and roles on several projects\n * @param options - The options for the organization token\n * @returns A promise that resolves to the created robot, including its secret token\n *\n * @internal\n */\nexport async function createOrganizationToken(\n  options: CreateOrganizationTokenOptions,\n): Promise<RobotWithToken> {\n  const {organizationId, ...body} = options\n\n  return postRobot(`/access/organization/${organizationId}/robots`, body)\n}\n\ninterface DeleteTokenOptions {\n  projectId: string\n  tokenId: string\n}\n\n/**\n * Delete a token from a project\n * @param options - The options for deleting a token from a project; `tokenId`\n * is the id reported by `getTokens`/`createToken`\n * @returns A promise that resolves when the token is deleted\n *\n * @internal\n */\nexport async function deleteToken(options: DeleteTokenOptions): Promise<void> {\n  const {projectId, tokenId} = options\n\n  const client = await getClient()\n\n  return client.request({\n    method: 'DELETE',\n    url: `/access/project/${projectId}/robots/${tokenId}`,\n  })\n}\n\n/**\n * Rotate a robot token, replacing its secret while preserving the robot,\n * its roles, and the token's expiry. The request authenticates as the robot\n * itself; the previous secret is revoked immediately.\n * @param token - The current robot token secret\n * @returns A promise that resolves to the robot with its new secret token\n *\n * @internal\n */\nexport async function rotateToken(token: string): Promise<RobotWithToken> {\n  const client = await getClient(token)\n\n  return client.request<RobotWithToken>({\n    method: 'POST',\n    url: '/access/robots/me/rotate',\n  })\n}\n\n/**\n * Get all tokens for a project. Tokens managed by an organization are\n * excluded: they cannot be managed at the project scope.\n * @param projectId - The project ID\n * @returns A promise that resolves to an array of robots\n *\n * @internal\n */\nexport async function getTokens(projectId: string): Promise<Robot[]> {\n  const client = await getClient()\n\n  const robots = await fetchAllPages<Robot>(client, `/access/project/${projectId}/robots`)\n\n  return robots.filter((robot) => robot.managedBy?.resourceType !== 'organization')\n}\n\n/**\n * Get all roles for a project\n * @param projectId - The project ID\n * @returns A promise that resolves to an array of project roles\n *\n * @internal\n */\nexport async function getTokenRoles(projectId: string): Promise<Role[]> {\n  const client = await getClient()\n\n  return fetchAllPages<Role>(client, `/access/project/${projectId}/roles`)\n}\n"],"names":["getGlobalCliClient","TOKENS_API_VERSION","getClient","token","apiVersion","requireUser","undefined","fetchAllPages","client","url","items","cursor","response","request","query","nextCursor","push","data","getProjectMembership","robot","projectId","memberships","find","membership","resourceType","resourceId","postRobot","expiresAt","body","method","createToken","options","label","roleNames","sendNotification","createOrganizationToken","organizationId","deleteToken","tokenId","rotateToken","getTokens","robots","filter","managedBy","getTokenRoles"],"mappings":"AAAA,SAAQA,kBAAkB,QAAO,mBAAkB;AAGnD,SAAQC,kBAAkB,QAAO,iCAAgC;AAajE,SAASC,UAAUC,KAAc;IAC/B,OAAOH,mBAAmB;QACxBI,YAAYH;QACZI,aAAa;QACb,GAAIF,UAAUG,YAAY,CAAC,IAAI;YAACH;QAAK,CAAC;IACxC;AACF;AAEA,eAAeI,cAAiBC,MAAoB,EAAEC,GAAW;IAC/D,MAAMC,QAAa,EAAE;IACrB,IAAIC,SAAwB;IAE5B,GAAG;QACD,MAAMC,WAAiC,MAAMJ,OAAOK,OAAO,CAAuB;YAChFC,OAAOH,WAAW,OAAO,CAAC,IAAI;gBAACI,YAAYJ;YAAM;YACjDF;QACF;QACAC,MAAMM,IAAI,IAAIJ,SAASK,IAAI;QAC3BN,SAASC,SAASG,UAAU;IAC9B,QAASJ,WAAW,KAAK;IAEzB,OAAOD;AACT;AAEA;;;;;;;CAOC,GACD,OAAO,SAASQ,qBAAqBC,KAAY,EAAEC,SAAiB;IAClE,OAAOD,MAAME,WAAW,CAACC,IAAI,CAC3B,CAACC,aAAeA,WAAWC,YAAY,KAAK,aAAaD,WAAWE,UAAU,KAAKL;AAEvF;AASA,eAAeM,UACbjB,GAAW,EACX,EAACkB,SAAS,EAAE,GAAGC,MAAgB,EAC/Bd,QAAgC,CAAC,CAAC;IAElC,MAAMN,SAAS,MAAMN;IAErB,OAAOM,OAAOK,OAAO,CAAiB;QACpCe,MAAM;YAAC,GAAGA,IAAI;YAAE,GAAID,cAAcrB,YAAY,CAAC,IAAI;gBAACqB;YAAS,CAAC;QAAC;QAC/DE,QAAQ;QACRf;QACAL;IACF;AACF;AAWA;;;;;;CAMC,GACD,OAAO,eAAeqB,YAAYC,OAA2B;IAC3D,MAAM,EAACJ,SAAS,EAAEK,KAAK,EAAEZ,SAAS,EAAEa,SAAS,EAAEC,gBAAgB,EAAC,GAAGH;IAEnE,OAAOL,UACL,CAAC,gBAAgB,EAAEN,UAAU,OAAO,CAAC,EACrC;QACEO;QACAK;QACAX,aAAa;YAAC;gBAACI,YAAYL;gBAAWI,cAAc;gBAAWS;YAAS;SAAE;IAC5E,GACAC,qBAAqB,QAAQ;QAACA,kBAAkB;IAAO,IAAI,CAAC;AAEhE;AAMA;;;;;;CAMC,GACD,OAAO,eAAeC,wBACpBJ,OAAuC;IAEvC,MAAM,EAACK,cAAc,EAAE,GAAGR,MAAK,GAAGG;IAElC,OAAOL,UAAU,CAAC,qBAAqB,EAAEU,eAAe,OAAO,CAAC,EAAER;AACpE;AAOA;;;;;;;CAOC,GACD,OAAO,eAAeS,YAAYN,OAA2B;IAC3D,MAAM,EAACX,SAAS,EAAEkB,OAAO,EAAC,GAAGP;IAE7B,MAAMvB,SAAS,MAAMN;IAErB,OAAOM,OAAOK,OAAO,CAAC;QACpBgB,QAAQ;QACRpB,KAAK,CAAC,gBAAgB,EAAEW,UAAU,QAAQ,EAAEkB,SAAS;IACvD;AACF;AAEA;;;;;;;;CAQC,GACD,OAAO,eAAeC,YAAYpC,KAAa;IAC7C,MAAMK,SAAS,MAAMN,UAAUC;IAE/B,OAAOK,OAAOK,OAAO,CAAiB;QACpCgB,QAAQ;QACRpB,KAAK;IACP;AACF;AAEA;;;;;;;CAOC,GACD,OAAO,eAAe+B,UAAUpB,SAAiB;IAC/C,MAAMZ,SAAS,MAAMN;IAErB,MAAMuC,SAAS,MAAMlC,cAAqBC,QAAQ,CAAC,gBAAgB,EAAEY,UAAU,OAAO,CAAC;IAEvF,OAAOqB,OAAOC,MAAM,CAAC,CAACvB,QAAUA,MAAMwB,SAAS,EAAEnB,iBAAiB;AACpE;AAEA;;;;;;CAMC,GACD,OAAO,eAAeoB,cAAcxB,SAAiB;IACnD,MAAMZ,SAAS,MAAMN;IAErB,OAAOK,cAAoBC,QAAQ,CAAC,gBAAgB,EAAEY,UAAU,MAAM,CAAC;AACzE"}