@webiny/api-core 6.4.5-beta.0 → 6.6.0-alpha.0

package/graphql/users/UsersSchemaFactory.js

@@ -0,0 +1,191 @@
+import { CoreGraphQLSchemaFactory } from "@webiny/api-graphql/graphql/abstractions.js";
+import { ErrorResponse, ListErrorResponse, ListResponse, NotFoundResponse, Response } from "@webiny/api-graphql/responses.js";
+import { GetUserUseCase } from "../../features/users/GetUser/index.js";
+import NotAuthorizedResponse from "../security/NotAuthorizedResponse.js";
+import { ListUsersUseCase } from "../../features/users/ListUsers/index.js";
+import { IdentityContext } from "../../features/security/IdentityContext/abstractions.js";
+import { ListRolesUseCase } from "../../features/security/roles/ListRoles/index.js";
+import { ListTeamsUseCase } from "../../features/security/teams/ListTeams/index.js";
+class UsersSchemaFactoryImpl {
+    async execute(builder) {
+        builder.addTypeDefs(`
+            type AdminUsersQuery {
+                _empty: String
+            }
+
+            type AdminUsersMutation {
+                _empty: String
+            }
+
+            extend type Query {
+                adminUsers: AdminUsersQuery
+            }
+
+            extend type Mutation {
+                adminUsers: AdminUsersMutation
+            }
+
+            type AdminUsersCreatedBy {
+                id: ID
+                displayName: String
+            }
+
+            type AdminUsersError {
+                code: String
+                message: String
+                data: JSON
+                stack: String
+            }
+
+            type AdminUsersBooleanResponse {
+                data: Boolean
+                error: AdminUsersError
+            }
+
+            type AdminUser {
+                id: ID!
+                displayName: String!
+                email: String!
+
+                roles: [SecurityRole]
+                firstName: String
+                lastName: String
+                avatar: JSON
+                external: Boolean
+                createdOn: DateTime
+            }
+
+            type AdminUsersResponse {
+                data: AdminUser
+                error: AdminUsersError
+            }
+
+            type AdminUsersListResponse {
+                data: [AdminUser]
+                error: AdminUsersError
+            }
+
+            input AdminUsersGetUserWhereInput {
+                id: ID
+                email: String
+            }
+
+            extend type AdminUsersQuery {
+                getUser(where: AdminUsersGetUserWhereInput): AdminUsersResponse
+                getCurrentUser: AdminUsersResponse
+                listUsers: AdminUsersListResponse
+            }
+
+            extend type AdminUser {
+                teams: [SecurityTeam]
+            }
+        `);
+        builder.addResolver({
+            path: "Query.adminUsers",
+            resolver: ()=>async ()=>({})
+        });
+        builder.addResolver({
+            path: "Mutation.adminUsers",
+            resolver: ()=>async ()=>({})
+        });
+        builder.addResolver({
+            path: "AdminUser.roles",
+            dependencies: [
+                ListRolesUseCase
+            ],
+            resolver: (listRoles)=>async ({ parent })=>{
+                    if (!parent.roles) return null;
+                    const result = await listRoles.execute({
+                        where: {
+                            id_in: parent.roles
+                        }
+                    });
+                    if (result.isFail()) throw result.error;
+                    return result.value;
+                }
+        });
+        builder.addResolver({
+            path: "AdminUser.teams",
+            dependencies: [
+                ListTeamsUseCase
+            ],
+            resolver: (listTeams)=>async ({ parent })=>{
+                    const hasTeams = Array.isArray(parent.teams) && parent.teams.length > 0;
+                    if (!hasTeams) return [];
+                    const result = await listTeams.execute({
+                        where: {
+                            id_in: parent.teams
+                        }
+                    });
+                    if (result.isFail()) throw result.error;
+                    return result.value;
+                }
+        });
+        builder.addResolver({
+            path: "AdminUsersQuery.getUser",
+            dependencies: [
+                GetUserUseCase
+            ],
+            resolver: (getUser)=>async ({ args })=>{
+                    const { where } = args;
+                    const userResult = await getUser.execute({
+                        id: where.id,
+                        email: where.email
+                    });
+                    if (userResult.isFail()) {
+                        const error = userResult.error;
+                        if ("AdminUser/NotFound" === error.code) return new NotFoundResponse(`User "${JSON.stringify(where)}" was not found!`);
+                        return new ErrorResponse({
+                            message: error.message,
+                            code: error.code,
+                            data: error.data
+                        });
+                    }
+                    return new Response(userResult.value);
+                }
+        });
+        builder.addResolver({
+            path: "AdminUsersQuery.getCurrentUser",
+            dependencies: [
+                IdentityContext,
+                GetUserUseCase
+            ],
+            resolver: (identityContext, getUser)=>async ()=>{
+                    const identity = identityContext.getIdentity();
+                    if (!identity.isAdmin()) throw new NotAuthorizedResponse();
+                    const userResponse = await identityContext.withoutAuthorization(async ()=>await getUser.execute({
+                            id: identity.id
+                        }));
+                    if (userResponse.isFail()) {
+                        const error = userResponse.error;
+                        if ("AdminUser/NotFound" === error.code) return new NotFoundResponse(`User with ID ${identity.id} was not found!`);
+                        return new ErrorResponse({
+                            message: error.message,
+                            code: error.code,
+                            data: error.data
+                        });
+                    }
+                    return new Response(userResponse.value);
+                }
+        });
+        builder.addResolver({
+            path: "AdminUsersQuery.listUsers",
+            dependencies: [
+                ListUsersUseCase
+            ],
+            resolver: (listUsers)=>async ()=>{
+                    const users = await listUsers.execute();
+                    if (users.isFail()) return new ListErrorResponse(users.error);
+                    return new ListResponse(users.value);
+                }
+        });
+        return builder;
+    }
+}
+const UsersSchemaFactory = CoreGraphQLSchemaFactory.createImplementation({
+    implementation: UsersSchemaFactoryImpl,
+    dependencies: []
+});
+export { UsersSchemaFactory };
+
+//# sourceMappingURL=UsersSchemaFactory.js.map

package/graphql/users/UsersSchemaFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphql/users/UsersSchemaFactory.js","sources":["../../../src/graphql/users/UsersSchemaFactory.ts"],"sourcesContent":["import { CoreGraphQLSchemaFactory } from \"@webiny/api-graphql/graphql/abstractions.js\";\nimport {\n    ErrorResponse,\n    ListErrorResponse,\n    ListResponse,\n    NotFoundResponse,\n    Response\n} from \"@webiny/api-graphql/responses.js\";\nimport type { IGraphQLSchemaBuilder } from \"@webiny/api-graphql/features/GraphQLSchemaBuilder/abstractions.js\";\nimport type { AdminUser } from \"~/types/users.js\";\nimport { GetUserUseCase } from \"~/features/users/GetUser/index.js\";\nimport NotAuthorizedResponse from \"~/graphql/security/NotAuthorizedResponse.js\";\nimport { ListUsersUseCase } from \"~/features/users/ListUsers/index.js\";\nimport { IdentityContext } from \"~/features/security/IdentityContext/abstractions.js\";\nimport { ListRolesUseCase } from \"~/features/security/roles/ListRoles/index.js\";\nimport { ListTeamsUseCase } from \"~/features/security/teams/ListTeams/index.js\";\n\nclass UsersSchemaFactoryImpl implements CoreGraphQLSchemaFactory.Interface {\n    async execute(builder: IGraphQLSchemaBuilder): Promise<IGraphQLSchemaBuilder> {\n        builder.addTypeDefs(/* GraphQL */ `\n            type AdminUsersQuery {\n                _empty: String\n            }\n\n            type AdminUsersMutation {\n                _empty: String\n            }\n\n            extend type Query {\n                adminUsers: AdminUsersQuery\n            }\n\n            extend type Mutation {\n                adminUsers: AdminUsersMutation\n            }\n\n            type AdminUsersCreatedBy {\n                id: ID\n                displayName: String\n            }\n\n            type AdminUsersError {\n                code: String\n                message: String\n                data: JSON\n                stack: String\n            }\n\n            type AdminUsersBooleanResponse {\n                data: Boolean\n                error: AdminUsersError\n            }\n\n            type AdminUser {\n                id: ID!\n                displayName: String!\n                email: String!\n\n                roles: [SecurityRole]\n                firstName: String\n                lastName: String\n                avatar: JSON\n                external: Boolean\n                createdOn: DateTime\n            }\n\n            type AdminUsersResponse {\n                data: AdminUser\n                error: AdminUsersError\n            }\n\n            type AdminUsersListResponse {\n                data: [AdminUser]\n                error: AdminUsersError\n            }\n\n            input AdminUsersGetUserWhereInput {\n                id: ID\n                email: String\n            }\n\n            extend type AdminUsersQuery {\n                getUser(where: AdminUsersGetUserWhereInput): AdminUsersResponse\n                getCurrentUser: AdminUsersResponse\n                listUsers: AdminUsersListResponse\n            }\n\n            extend type AdminUser {\n                teams: [SecurityTeam]\n            }\n        `);\n\n        builder.addResolver({\n            path: \"Query.adminUsers\",\n            resolver: () => async () => ({})\n        });\n\n        builder.addResolver({\n            path: \"Mutation.adminUsers\",\n            resolver: () => async () => ({})\n        });\n\n        builder.addResolver({\n            path: \"AdminUser.roles\",\n            dependencies: [ListRolesUseCase],\n            resolver:\n                (listRoles: ListRolesUseCase.Interface) =>\n                async ({ parent }: { parent: AdminUser }) => {\n                    if (!parent.roles) {\n                        return null;\n                    }\n\n                    const result = await listRoles.execute({ where: { id_in: parent.roles } });\n                    if (result.isFail()) {\n                        throw result.error;\n                    }\n                    return result.value;\n                }\n        });\n\n        builder.addResolver({\n            path: \"AdminUser.teams\",\n            dependencies: [ListTeamsUseCase],\n            resolver:\n                (listTeams: ListTeamsUseCase.Interface) =>\n                async ({ parent }: { parent: AdminUser }) => {\n                    const hasTeams = Array.isArray(parent.teams) && parent.teams.length > 0;\n                    if (!hasTeams) {\n                        return [];\n                    }\n\n                    const result = await listTeams.execute({ where: { id_in: parent.teams } });\n                    if (result.isFail()) {\n                        throw result.error;\n                    }\n                    return result.value;\n                }\n        });\n\n        builder.addResolver<{ where: any }>({\n            path: \"AdminUsersQuery.getUser\",\n            dependencies: [GetUserUseCase],\n            resolver:\n                (getUser: GetUserUseCase.Interface) =>\n                async ({ args }) => {\n                    const { where } = args;\n                    const userResult = await getUser.execute({\n                        id: where.id,\n                        email: where.email\n                    });\n\n                    if (userResult.isFail()) {\n                        const error = userResult.error;\n                        if (error.code === \"AdminUser/NotFound\") {\n                            return new NotFoundResponse(\n                                `User \"${JSON.stringify(where)}\" was not found!`\n                            );\n                        }\n\n                        return new ErrorResponse({\n                            message: error.message,\n                            code: error.code,\n                            data: error.data\n                        });\n                    }\n\n                    return new Response(userResult.value);\n                }\n        });\n\n        builder.addResolver({\n            path: \"AdminUsersQuery.getCurrentUser\",\n            dependencies: [IdentityContext, GetUserUseCase],\n            resolver:\n                (identityContext: IdentityContext.Interface, getUser: GetUserUseCase.Interface) =>\n                async () => {\n                    const identity = identityContext.getIdentity();\n\n                    if (!identity.isAdmin()) {\n                        throw new NotAuthorizedResponse();\n                    }\n\n                    // Current user might not have permissions to execute `getUser` (this method can load any user in the system),\n                    // but loading your own user record should be allowed. For that reason, let's temporarily disable authorization.\n                    const userResponse = await identityContext.withoutAuthorization(async () => {\n                        // Get user record using the identity ID.\n                        return await getUser.execute({ id: identity.id });\n                    });\n\n                    if (userResponse.isFail()) {\n                        const error = userResponse.error;\n                        if (error.code === \"AdminUser/NotFound\") {\n                            return new NotFoundResponse(\n                                `User with ID ${identity.id} was not found!`\n                            );\n                        }\n\n                        return new ErrorResponse({\n                            message: error.message,\n                            code: error.code,\n                            data: error.data\n                        });\n                    }\n\n                    return new Response(userResponse.value);\n                }\n        });\n\n        builder.addResolver({\n            path: \"AdminUsersQuery.listUsers\",\n            dependencies: [ListUsersUseCase],\n            resolver: (listUsers: ListUsersUseCase.Interface) => async () => {\n                const users = await listUsers.execute();\n\n                if (users.isFail()) {\n                    return new ListErrorResponse(users.error);\n                }\n\n                return new ListResponse(users.value);\n            }\n        });\n\n        return builder;\n    }\n}\n\nexport const UsersSchemaFactory = CoreGraphQLSchemaFactory.createImplementation({\n    implementation: UsersSchemaFactoryImpl,\n    dependencies: []\n});\n"],"names":["UsersSchemaFactoryImpl","builder","ListRolesUseCase","listRoles","parent","result","ListTeamsUseCase","listTeams","hasTeams","Array","GetUserUseCase","getUser","args","where","userResult","error","NotFoundResponse","JSON","ErrorResponse","Response","IdentityContext","identityContext","identity","NotAuthorizedResponse","userResponse","ListUsersUseCase","listUsers","users","ListErrorResponse","ListResponse","UsersSchemaFactory","CoreGraphQLSchemaFactory"],"mappings":";;;;;;;;AAiBA,MAAMA;IACF,MAAM,QAAQC,OAA8B,EAAkC;QAC1EA,QAAQ,WAAW,CAAe,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAuEnC,CAAC;QAEDA,QAAQ,WAAW,CAAC;YAChB,MAAM;YACN,UAAU,IAAM,UAAa,EAAC;QAClC;QAEAA,QAAQ,WAAW,CAAC;YAChB,MAAM;YACN,UAAU,IAAM,UAAa,EAAC;QAClC;QAEAA,QAAQ,WAAW,CAAC;YAChB,MAAM;YACN,cAAc;gBAACC;aAAiB;YAChC,UACI,CAACC,YACD,OAAO,EAAEC,MAAM,EAAyB;oBACpC,IAAI,CAACA,OAAO,KAAK,EACb,OAAO;oBAGX,MAAMC,SAAS,MAAMF,UAAU,OAAO,CAAC;wBAAE,OAAO;4BAAE,OAAOC,OAAO,KAAK;wBAAC;oBAAE;oBACxE,IAAIC,OAAO,MAAM,IACb,MAAMA,OAAO,KAAK;oBAEtB,OAAOA,OAAO,KAAK;gBACvB;QACR;QAEAJ,QAAQ,WAAW,CAAC;YAChB,MAAM;YACN,cAAc;gBAACK;aAAiB;YAChC,UACI,CAACC,YACD,OAAO,EAAEH,MAAM,EAAyB;oBACpC,MAAMI,WAAWC,MAAM,OAAO,CAACL,OAAO,KAAK,KAAKA,OAAO,KAAK,CAAC,MAAM,GAAG;oBACtE,IAAI,CAACI,UACD,OAAO,EAAE;oBAGb,MAAMH,SAAS,MAAME,UAAU,OAAO,CAAC;wBAAE,OAAO;4BAAE,OAAOH,OAAO,KAAK;wBAAC;oBAAE;oBACxE,IAAIC,OAAO,MAAM,IACb,MAAMA,OAAO,KAAK;oBAEtB,OAAOA,OAAO,KAAK;gBACvB;QACR;QAEAJ,QAAQ,WAAW,CAAiB;YAChC,MAAM;YACN,cAAc;gBAACS;aAAe;YAC9B,UACI,CAACC,UACD,OAAO,EAAEC,IAAI,EAAE;oBACX,MAAM,EAAEC,KAAK,EAAE,GAAGD;oBAClB,MAAME,aAAa,MAAMH,QAAQ,OAAO,CAAC;wBACrC,IAAIE,MAAM,EAAE;wBACZ,OAAOA,MAAM,KAAK;oBACtB;oBAEA,IAAIC,WAAW,MAAM,IAAI;wBACrB,MAAMC,QAAQD,WAAW,KAAK;wBAC9B,IAAIC,AAAe,yBAAfA,MAAM,IAAI,EACV,OAAO,IAAIC,iBACP,CAAC,MAAM,EAAEC,KAAK,SAAS,CAACJ,OAAO,gBAAgB,CAAC;wBAIxD,OAAO,IAAIK,cAAc;4BACrB,SAASH,MAAM,OAAO;4BACtB,MAAMA,MAAM,IAAI;4BAChB,MAAMA,MAAM,IAAI;wBACpB;oBACJ;oBAEA,OAAO,IAAII,SAASL,WAAW,KAAK;gBACxC;QACR;QAEAb,QAAQ,WAAW,CAAC;YAChB,MAAM;YACN,cAAc;gBAACmB;gBAAiBV;aAAe;YAC/C,UACI,CAACW,iBAA4CV,UAC7C;oBACI,MAAMW,WAAWD,gBAAgB,WAAW;oBAE5C,IAAI,CAACC,SAAS,OAAO,IACjB,MAAM,IAAIC;oBAKd,MAAMC,eAAe,MAAMH,gBAAgB,oBAAoB,CAAC,UAErD,MAAMV,QAAQ,OAAO,CAAC;4BAAE,IAAIW,SAAS,EAAE;wBAAC;oBAGnD,IAAIE,aAAa,MAAM,IAAI;wBACvB,MAAMT,QAAQS,aAAa,KAAK;wBAChC,IAAIT,AAAe,yBAAfA,MAAM,IAAI,EACV,OAAO,IAAIC,iBACP,CAAC,aAAa,EAAEM,SAAS,EAAE,CAAC,eAAe,CAAC;wBAIpD,OAAO,IAAIJ,cAAc;4BACrB,SAASH,MAAM,OAAO;4BACtB,MAAMA,MAAM,IAAI;4BAChB,MAAMA,MAAM,IAAI;wBACpB;oBACJ;oBAEA,OAAO,IAAII,SAASK,aAAa,KAAK;gBAC1C;QACR;QAEAvB,QAAQ,WAAW,CAAC;YAChB,MAAM;YACN,cAAc;gBAACwB;aAAiB;YAChC,UAAU,CAACC,YAA0C;oBACjD,MAAMC,QAAQ,MAAMD,UAAU,OAAO;oBAErC,IAAIC,MAAM,MAAM,IACZ,OAAO,IAAIC,kBAAkBD,MAAM,KAAK;oBAG5C,OAAO,IAAIE,aAAaF,MAAM,KAAK;gBACvC;QACJ;QAEA,OAAO1B;IACX;AACJ;AAEO,MAAM6B,qBAAqBC,yBAAyB,oBAAoB,CAAC;IAC5E,gBAAgB/B;IAChB,cAAc,EAAE;AACpB"}

package/graphql/wcp/WcpSchemaFactory.d.ts

@@ -0,0 +1,9 @@
+import { CoreGraphQLSchemaFactory } from "@webiny/api-graphql/graphql/abstractions.js";
+import type { IGraphQLSchemaBuilder } from "@webiny/api-graphql/features/GraphQLSchemaBuilder/abstractions.js";
+declare class WcpSchemaFactoryImpl implements CoreGraphQLSchemaFactory.Interface {
+    execute(builder: IGraphQLSchemaBuilder): Promise<IGraphQLSchemaBuilder>;
+}
+export declare const WcpSchemaFactory: typeof WcpSchemaFactoryImpl & {
+    __abstraction: import("@webiny/di").Abstraction<import("@webiny/api-graphql/graphql/abstractions.core").ICoreGraphQLSchemaFactory>;
+};
+export {};

package/graphql/wcp/{graphql.js → WcpSchemaFactory.js}

@@ -1,9 +1,9 @@
-import { GraphQLSchemaPlugin } from "@webiny/handler-graphql/plugins/index.js";
-import { ErrorResponse, Response } from "@webiny/handler-graphql/responses.js";
+import { CoreGraphQLSchemaFactory } from "@webiny/api-graphql/graphql/abstractions.js";
+import { ErrorResponse, Response } from "@webiny/api-graphql/responses.js";
 import { WcpContext } from "../../features/wcp/WcpContext/index.js";
-const emptyResolver = ()=>({});
-const createWcpGraphQL = ()=>new GraphQLSchemaPlugin({
-        typeDefs: `
+class WcpSchemaFactoryImpl {
+    async execute(builder) {
+        builder.addTypeDefs(`
             type WcpProjectPackageFeaturesFeature {
                 enabled: Boolean
                 options: JSON
@@ -57,15 +57,18 @@ const createWcpGraphQL = ()=>new GraphQLSchemaPlugin({
             extend type Mutation {
                 wcp: WcpMutation
             }
-        `,
-        resolvers: {
-            Query: {
-                wcp: emptyResolver
-            },
-            WcpQuery: {
-                getProject: async (_, __, context)=>{
+        `);
+        builder.addResolver({
+            path: "Query.wcp",
+            resolver: ()=>async ()=>({})
+        });
+        builder.addResolver({
+            path: "WcpQuery.getProject",
+            dependencies: [
+                WcpContext
+            ],
+            resolver: (wcpContext)=>async ()=>{
                     try {
-                        const wcpContext = context.container.resolve(WcpContext);
                         const project = wcpContext.getProjectWithFeatureFlags();
                         if (!project) throw Error("Could not get project!");
                         return new Response(project);
@@ -78,9 +81,14 @@ const createWcpGraphQL = ()=>new GraphQLSchemaPlugin({
                         });
                     }
                 }
-            }
-        }
-    });
-export { createWcpGraphQL };
+        });
+        return builder;
+    }
+}
+const WcpSchemaFactory = CoreGraphQLSchemaFactory.createImplementation({
+    implementation: WcpSchemaFactoryImpl,
+    dependencies: []
+});
+export { WcpSchemaFactory };
 
-//# sourceMappingURL=graphql.js.map
+//# sourceMappingURL=WcpSchemaFactory.js.map

package/graphql/wcp/WcpSchemaFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphql/wcp/WcpSchemaFactory.js","sources":["../../../src/graphql/wcp/WcpSchemaFactory.ts"],"sourcesContent":["import { CoreGraphQLSchemaFactory } from \"@webiny/api-graphql/graphql/abstractions.js\";\nimport type { IGraphQLSchemaBuilder } from \"@webiny/api-graphql/features/GraphQLSchemaBuilder/abstractions.js\";\nimport { ErrorResponse, Response } from \"@webiny/api-graphql/responses.js\";\nimport { WcpContext } from \"~/features/wcp/WcpContext/index.js\";\n\nclass WcpSchemaFactoryImpl implements CoreGraphQLSchemaFactory.Interface {\n    async execute(builder: IGraphQLSchemaBuilder): Promise<IGraphQLSchemaBuilder> {\n        builder.addTypeDefs(/* GraphQL */ `\n            type WcpProjectPackageFeaturesFeature {\n                enabled: Boolean\n                options: JSON\n            }\n\n            type WcpProjectPackageFeatures {\n                seats: WcpProjectPackageFeaturesFeature\n                multiTenancy: WcpProjectPackageFeaturesFeature\n                advancedPublishingWorkflow: WcpProjectPackageFeaturesFeature\n                advancedAccessControlLayer: WcpProjectPackageFeaturesFeature\n                auditLogs: WcpProjectPackageFeaturesFeature\n                recordLocking: WcpProjectPackageFeaturesFeature\n                fileManager: WcpProjectPackageFeaturesFeature\n                aiPowerups: WcpProjectPackageFeaturesFeature\n            }\n\n            type WcpProjectPackage {\n                features: WcpProjectPackageFeatures\n            }\n\n            type WcpProject {\n                orgId: ID\n                projectId: ID\n                package: WcpProjectPackage\n            }\n\n            type WcpError {\n                code: String\n                message: String\n                data: JSON\n                stack: String\n            }\n\n            type WcpProjectResponse {\n                data: WcpProject\n                error: WcpError\n            }\n\n            type WcpQuery {\n                getProject: WcpProjectResponse\n            }\n\n            type WcpMutation {\n                updateProject: WcpProjectResponse\n            }\n\n            extend type Query {\n                wcp: WcpQuery\n            }\n\n            extend type Mutation {\n                wcp: WcpMutation\n            }\n        `);\n\n        builder.addResolver({\n            path: \"Query.wcp\",\n            resolver: () => async () => ({})\n        });\n\n        builder.addResolver({\n            path: \"WcpQuery.getProject\",\n            dependencies: [WcpContext],\n            resolver: (wcpContext: WcpContext.Interface) => async () => {\n                try {\n                    const project = wcpContext.getProjectWithFeatureFlags();\n\n                    if (!project) {\n                        throw Error(`Could not get project!`);\n                    }\n\n                    return new Response(project);\n                } catch (e) {\n                    return new ErrorResponse({\n                        code: \"COULD_NOT_GET_PROJECT\",\n                        message: e.message,\n                        data: null,\n                        stack: e.stack\n                    });\n                }\n            }\n        });\n\n        return builder;\n    }\n}\n\nexport const WcpSchemaFactory = CoreGraphQLSchemaFactory.createImplementation({\n    implementation: WcpSchemaFactoryImpl,\n    dependencies: []\n});\n"],"names":["WcpSchemaFactoryImpl","builder","WcpContext","wcpContext","project","Error","Response","e","ErrorResponse","WcpSchemaFactory","CoreGraphQLSchemaFactory"],"mappings":";;;AAKA,MAAMA;IACF,MAAM,QAAQC,OAA8B,EAAkC;QAC1EA,QAAQ,WAAW,CAAe,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAsDnC,CAAC;QAEDA,QAAQ,WAAW,CAAC;YAChB,MAAM;YACN,UAAU,IAAM,UAAa,EAAC;QAClC;QAEAA,QAAQ,WAAW,CAAC;YAChB,MAAM;YACN,cAAc;gBAACC;aAAW;YAC1B,UAAU,CAACC,aAAqC;oBAC5C,IAAI;wBACA,MAAMC,UAAUD,WAAW,0BAA0B;wBAErD,IAAI,CAACC,SACD,MAAMC,MAAM;wBAGhB,OAAO,IAAIC,SAASF;oBACxB,EAAE,OAAOG,GAAG;wBACR,OAAO,IAAIC,cAAc;4BACrB,MAAM;4BACN,SAASD,EAAE,OAAO;4BAClB,MAAM;4BACN,OAAOA,EAAE,KAAK;wBAClB;oBACJ;gBACJ;QACJ;QAEA,OAAON;IACX;AACJ;AAEO,MAAMQ,mBAAmBC,yBAAyB,oBAAoB,CAAC;IAC1E,gBAAgBV;IAChB,cAAc,EAAE;AACpB"}

package/index.d.ts

@@ -1 +1,3 @@
-export { createApiCore } from "./createApiCore.js";
+export { ApiCoreFeature } from "./ApiCoreFeature.js";
+export { ApiCoreStorageOperationsFactory, registerApiCoreStorageOperations } from "./features/storageOperations/abstractions.js";
+export { WcpLicenseProvider } from "./features/wcp/WcpLicenseProvider.js";

package/index.js

@@ -1 +1,3 @@
-export { createApiCore } from "./createApiCore.js";
+export { ApiCoreFeature } from "./ApiCoreFeature.js";
+export { ApiCoreStorageOperationsFactory, registerApiCoreStorageOperations } from "./features/storageOperations/abstractions.js";
+export { WcpLicenseProvider } from "./features/wcp/WcpLicenseProvider.js";

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@webiny/api-core",
-	"version": "6.4.5-beta.0",
+	"version": "6.6.0-alpha.0",
 	"type": "module",
 	"repository": {
 		"type": "git",
@@ -14,38 +14,35 @@
 		"./*": "./*"
 	},
 	"dependencies": {
-		"@ai-sdk/anthropic": "4.0.10",
-		"@ai-sdk/openai": "4.0.9",
-		"@webiny/api": "6.4.5-beta.0",
+		"@ai-sdk/anthropic": "4.0.23",
+		"@ai-sdk/openai": "4.0.22",
+		"@webiny/api": "6.6.0-alpha.0",
+		"@webiny/api-graphql": "6.6.0-alpha.0",
 		"@webiny/di": "1.0.2",
-		"@webiny/error": "6.4.5-beta.0",
-		"@webiny/feature": "6.4.5-beta.0",
-		"@webiny/feature-flags": "6.4.5-beta.0",
-		"@webiny/handler": "6.4.5-beta.0",
-		"@webiny/handler-db": "6.4.5-beta.0",
-		"@webiny/handler-graphql": "6.4.5-beta.0",
-		"@webiny/plugins": "6.4.5-beta.0",
-		"@webiny/utils": "6.4.5-beta.0",
-		"@webiny/wcp": "6.4.5-beta.0",
-		"ai": "7.0.18",
+		"@webiny/error": "6.6.0-alpha.0",
+		"@webiny/feature": "6.6.0-alpha.0",
+		"@webiny/feature-flags": "6.6.0-alpha.0",
+		"@webiny/handler": "6.6.0-alpha.0",
+		"@webiny/utils": "6.6.0-alpha.0",
+		"@webiny/wcp": "6.6.0-alpha.0",
+		"ai": "7.0.40",
 		"dataloader": "2.2.3",
-		"jose": "6.2.3",
+		"graphql": "16.14.2",
+		"jose": "6.2.4",
 		"jsonwebtoken": "9.0.3",
 		"lodash": "4.18.1",
-		"minimatch": "10.2.5",
+		"minimatch": "10.2.6",
 		"pino": "10.3.1",
 		"pino-lambda": "4.4.1",
 		"zod": "4.4.3"
 	},
 	"devDependencies": {
 		"@types/jsonwebtoken": "9.0.10",
-		"@webiny/build-tools": "6.4.5-beta.0",
-		"@webiny/db-dynamodb": "6.4.5-beta.0",
-		"@webiny/handler-aws": "6.4.5-beta.0",
-		"@webiny/project-utils": "6.4.5-beta.0",
-		"jest-dynalite": "3.6.1",
+		"@webiny/build-tools": "6.6.0-alpha.0",
+		"@webiny/event-handler-core": "6.6.0-alpha.0",
+		"@webiny/project-utils": "6.6.0-alpha.0",
 		"rimraf": "6.1.3",
-		"typescript": "6.0.3",
+		"typescript": "7.0.2",
 		"vitest": "4.1.10"
 	},
 	"publishConfig": {

package/types/core.d.ts

@@ -1,13 +1,25 @@
 import { Context as BaseContext } from "@webiny/api/types.js";
-import type { SecurityContext, SecurityStorageOperations } from "../types/security.js";
-import type { TenancyContext, TenancyStorageOperations } from "../types/tenancy.js";
-import type { WcpContext } from "../features/wcp/WcpContext/types.js";
-import type { AdminUsersContext, AdminUsersStorageOperations } from "../types/users.js";
+import type { SecurityStorageOperations } from "../types/security.js";
+import type { TenancyStorageOperations } from "../types/tenancy.js";
+import type { AdminUsersStorageOperations } from "../types/users.js";
 import { KeyValueStorageOperations } from "../features/keyValueStore/index.js";
-export type ApiCoreContext = BaseContext & SecurityContext & TenancyContext & WcpContext & AdminUsersContext;
+import type { ILicense } from "@webiny/wcp/types.js";
+/**
+ * The base handler context available to all api-core GraphQL resolvers and event handlers.
+ * Services are accessed via `context.container.resolve(...)`, not via context properties.
+ */
+export type ApiCoreContext = BaseContext;
 export type ApiCoreStorageOperations = {
     usersStorageOperations: AdminUsersStorageOperations;
     tenancyStorageOperations: TenancyStorageOperations;
     securityStorageOperations: SecurityStorageOperations;
     keyValueStorageOperations: KeyValueStorageOperations.Interface;
 };
+/**
+ * Config for `ApiCoreFeature.register` — runtime options only (e.g. the WCP license). Storage
+ * operations are no longer passed here; they are resolved from `ApiCoreStorageOperationsFactory`
+ * inside the feature (registered by a storage adapter or `registerApiCoreStorageOperations`).
+ */
+export type ApiCoreConfig = {
+    wcpLicense?: ILicense;
+};

package/types/security.d.ts

@@ -1,5 +1,3 @@
-import type { TenancyContext } from "../types/tenancy.js";
-import type { LegacyContext } from "../legacy/security/LegacyContext.js";
 import { Identity } from "../features/security/IdentityContext/index.js";
 export type { Jwk, Jwt } from "../features/security/utils/verifyJwtUsingJwk.js";
 export type SecurityIdentity = Identity;
@@ -13,7 +11,6 @@ export interface GetTeamWhere {
     slug?: string;
     tenant?: string;
 }
-export type Security = LegacyContext;
 export interface SecurityStorageOperations {
     getRole(params: StorageOperationsGetRoleParams): Promise<Role | null>;
     listRoles(params: StorageOperationsListRolesParams): Promise<Role[]>;
@@ -36,9 +33,6 @@ export interface SecurityStorageOperations {
 export type SecurityPermission<T = Record<string, any>> = T & {
     name: string;
 };
-export interface SecurityContext extends TenancyContext {
-    security: Security;
-}
 export interface FullAccessPermission {
     name: "*";
 }

package/types/tenancy.d.ts

@@ -1,6 +1,3 @@
-import { DbContext } from "@webiny/handler-db/types.js";
-import { Context as BaseContext } from "@webiny/handler/types.js";
-import { WcpContext } from "../features/wcp/WcpContext/index.js";
 export type TenantSettings = Record<string, any>;
 export type TenantStatus = "enabled" | "disabled";
 export interface Tenant {
@@ -33,17 +30,3 @@ export interface TenancyStorageOperations {
     updateTenant(data: Tenant): Promise<Tenant>;
     deleteTenant(id: string): Promise<void>;
 }
-export interface TenancyContext extends BaseContext, DbContext, WcpContext.Interface {
-    tenancy: Tenancy;
-}
-export interface Tenancy {
-    getCurrentTenant(): Tenant;
-    setCurrentTenant(tenant: Tenant): void;
-    getRootTenant(): Promise<Tenant>;
-    getTenantById(id: string): Promise<Tenant>;
-    listTenants(params?: ListTenantsParams): Promise<Tenant[]>;
-    createTenant(data: CreateTenantInput): Promise<Tenant>;
-    withRootTenant<T>(cb: () => T): Promise<T>;
-    withEachTenant<TReturn>(tenants: Tenant[], cb: (tenant: Tenant) => Promise<TReturn>): Promise<TReturn[]>;
-    withTenant<TReturn>(tenant: Tenant, cb: (tenant: Tenant) => Promise<TReturn>): Promise<TReturn>;
-}

package/types/users.d.ts

@@ -1,8 +1,3 @@
-import type { SecurityContext, Team } from "../types/security.js";
-import type { TenancyContext } from "../types/tenancy.js";
-export interface AdminUsersContext extends SecurityContext, TenancyContext {
-    adminUsers: AdminUsers;
-}
 export interface CreatedBy {
     id: string;
     displayName: string | null;
@@ -45,14 +40,6 @@ export interface ListUsersParams {
     };
     sort?: string[];
 }
-export interface AdminUsers {
-    getUser<TUser extends AdminUser = AdminUser>(params: GetUserParams): Promise<TUser>;
-    listUsers<TUser extends AdminUser = AdminUser>(params?: ListUsersParams): Promise<TUser[]>;
-    listUserTeams(id: string): Promise<Team[]>;
-    createUser<TUser extends AdminUser = AdminUser>(data: CreateUserInput): Promise<TUser>;
-    updateUser<TUser extends AdminUser = AdminUser>(id: string, data: UpdateUserInput): Promise<TUser>;
-    deleteUser(id: string): Promise<void>;
-}
 export interface StorageOperationsListUsersParams extends ListUsersParams {
     where: ListUsersParams["where"] & {
         tenant: string;

package/createApiCore.d.ts

@@ -1,7 +0,0 @@
-import type { DecryptedWcpProjectLicense } from "@webiny/wcp/types.js";
-import type { ApiCoreStorageOperations } from "./types/core.js";
-export interface ApiCoreConfig {
-    storageOperations: ApiCoreStorageOperations;
-    testProjectLicense?: DecryptedWcpProjectLicense;
-}
-export declare const createApiCore: (config: ApiCoreConfig) => (import("@webiny/handler-graphql/index.js").GraphQLSchemaPlugin<import("@webiny/api/types.js").Context> | import("@webiny/handler/index.js").RegisterExtensionPlugin<import("@webiny/handler/types.js").Context> | import("@webiny/api/index.js").ContextPlugin<import("~/types/core.js").ApiCoreContext> | import("@webiny/api/index.js").ContextPlugin<import("~/types/core.js").ApiCoreContext>[])[];

package/createApiCore.js

@@ -1,22 +0,0 @@
-import { createRegisterExtensionPlugin } from "@webiny/handler/plugins/RegisterExtensionPlugin.js";
-import { ApiCoreFeature } from "./ApiCoreFeature.js";
-import { createWcpContext } from "./legacy/wcp/context.js";
-import { createSecurityContext } from "./legacy/security/createSecurityContext.js";
-import { createAdminUsersContext } from "./legacy/users/createAdminUsersContext.js";
-import { createTenancyContext } from "./legacy/tenancy/createTenancyContext.js";
-import { createSystemGraphQL } from "./graphql/system/createSystemGraphQL.js";
-const createApiCore = (config)=>[
-        createRegisterExtensionPlugin((context)=>{
-            ApiCoreFeature.register(context.container, config.storageOperations);
-        }),
-        createWcpContext({
-            testProjectLicense: config.testProjectLicense
-        }),
-        createTenancyContext(),
-        createSecurityContext(),
-        createAdminUsersContext(),
-        createSystemGraphQL()
-    ];
-export { createApiCore };
-
-//# sourceMappingURL=createApiCore.js.map

package/createApiCore.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"createApiCore.js","sources":["../src/createApiCore.ts"],"sourcesContent":["import { createRegisterExtensionPlugin } from \"@webiny/handler/plugins/RegisterExtensionPlugin.js\";\nimport { ApiCoreFeature } from \"./ApiCoreFeature.js\";\nimport type { DecryptedWcpProjectLicense } from \"@webiny/wcp/types.js\";\nimport { createWcpContext } from \"~/legacy/wcp/context.js\";\nimport { createSecurityContext } from \"~/legacy/security/createSecurityContext.js\";\nimport { createAdminUsersContext } from \"~/legacy/users/createAdminUsersContext.js\";\nimport { createTenancyContext } from \"~/legacy/tenancy/createTenancyContext.js\";\nimport { createSystemGraphQL } from \"~/graphql/system/createSystemGraphQL.js\";\nimport type { ApiCoreStorageOperations } from \"~/types/core.js\";\n\nexport interface ApiCoreConfig {\n    storageOperations: ApiCoreStorageOperations;\n    testProjectLicense?: DecryptedWcpProjectLicense;\n}\n\nexport const createApiCore = (config: ApiCoreConfig) => {\n    return [\n        createRegisterExtensionPlugin(context => {\n            ApiCoreFeature.register(context.container, config.storageOperations);\n        }),\n        createWcpContext({ testProjectLicense: config.testProjectLicense }),\n        createTenancyContext(),\n        createSecurityContext(),\n        createAdminUsersContext(),\n        createSystemGraphQL()\n    ];\n};\n"],"names":["createApiCore","config","createRegisterExtensionPlugin","context","ApiCoreFeature","createWcpContext","createTenancyContext","createSecurityContext","createAdminUsersContext","createSystemGraphQL"],"mappings":";;;;;;;AAeO,MAAMA,gBAAgB,CAACC,SACnB;QACHC,8BAA8BC,CAAAA;YAC1BC,eAAe,QAAQ,CAACD,QAAQ,SAAS,EAAEF,OAAO,iBAAiB;QACvE;QACAI,iBAAiB;YAAE,oBAAoBJ,OAAO,kBAAkB;QAAC;QACjEK;QACAC;QACAC;QACAC;KACH"}

package/graphql/security/apiKey.gql.d.ts

@@ -1,4 +0,0 @@
-import { GraphQLSchemaPlugin } from "@webiny/handler-graphql/plugins/GraphQLSchemaPlugin.js";
-import type { ApiCoreContext } from "../../types/core.js";
-declare const _default: GraphQLSchemaPlugin<ApiCoreContext>;
-export default _default;

package/graphql/security/apiKey.gql.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"graphql/security/apiKey.gql.js","sources":["../../../src/graphql/security/apiKey.gql.ts"],"sourcesContent":["import { Response, ErrorResponse } from \"@webiny/handler-graphql/responses.js\";\nimport { GraphQLSchemaPlugin } from \"@webiny/handler-graphql/plugins/GraphQLSchemaPlugin.js\";\nimport type { ApiCoreContext } from \"~/types/core.js\";\nimport { CreateApiKeyUseCase } from \"~/features/security/apiKeys/CreateApiKey/index.js\";\nimport { UpdateApiKeyUseCase } from \"~/features/security/apiKeys/UpdateApiKey/index.js\";\nimport { DeleteApiKeyUseCase } from \"~/features/security/apiKeys/DeleteApiKey/index.js\";\nimport { ListApiKeysUseCase } from \"~/features/security/apiKeys/ListApiKeys/index.js\";\nimport { GetApiKeyUseCase } from \"~/features/security/apiKeys/GetApiKey/index.js\";\n\nexport default new GraphQLSchemaPlugin<ApiCoreContext>({\n    typeDefs: /* GraphQL */ `\n        type SecurityApiKey {\n            id: ID\n            name: String\n            slug: String\n            description: String\n            token: String\n            permissions: [JSON]\n            createdOn: DateTime\n            createdBy: SecurityCreatedBy\n        }\n\n        input SecurityApiKeyInput {\n            id: ID\n            name: String!\n            slug: String\n            description: String\n            token: String\n            permissions: [JSON]!\n        }\n\n        type SecurityApiKeyResponse {\n            data: SecurityApiKey\n            error: SecurityError\n        }\n\n        type SecurityApiKeyListResponse {\n            data: [SecurityApiKey!]\n            error: SecurityError\n        }\n\n        extend type SecurityQuery {\n            listApiKeys: SecurityApiKeyListResponse\n            getApiKey(id: ID!): SecurityApiKeyResponse\n        }\n\n        extend type SecurityMutation {\n            createApiKey(data: SecurityApiKeyInput!): SecurityApiKeyResponse\n            updateApiKey(id: ID!, data: SecurityApiKeyInput!): SecurityApiKeyResponse\n            deleteApiKey(id: ID!): SecurityBooleanResponse\n        }\n    `,\n    resolvers: {\n        SecurityQuery: {\n            async listApiKeys(_, __, context) {\n                const list = context.container.resolve(ListApiKeysUseCase);\n                const result = await list.execute();\n\n                if (result.isOk()) {\n                    return new Response(result.value);\n                }\n                return new ErrorResponse(result.error);\n            },\n            async getApiKey(_, args: any, context) {\n                const getById = context.container.resolve(GetApiKeyUseCase);\n                const result = await getById.execute(args.id);\n\n                if (result.isOk()) {\n                    return new Response(result.value);\n                }\n                return new ErrorResponse(result.error);\n            }\n        },\n        SecurityMutation: {\n            async createApiKey(_, args: any, context) {\n                const createApiKey = context.container.resolve(CreateApiKeyUseCase);\n                const result = await createApiKey.execute(args.data);\n\n                if (result.isOk()) {\n                    return new Response(result.value);\n                }\n                return new ErrorResponse(result.error);\n            },\n            async updateApiKey(_, args: any, context) {\n                const updateApiKey = context.container.resolve(UpdateApiKeyUseCase);\n                const result = await updateApiKey.execute(args.id, args.data);\n\n                if (result.isOk()) {\n                    return new Response(result.value);\n                }\n                return new ErrorResponse(result.error);\n            },\n            async deleteApiKey(_, args: any, context) {\n                const deleteApiKey = context.container.resolve(DeleteApiKeyUseCase);\n                const result = await deleteApiKey.execute(args.id);\n\n                if (result.isOk()) {\n                    return new Response(true);\n                }\n                return new ErrorResponse(result.error);\n            }\n        }\n    }\n});\n"],"names":["GraphQLSchemaPlugin","_","__","context","list","ListApiKeysUseCase","result","Response","ErrorResponse","args","getById","GetApiKeyUseCase","createApiKey","CreateApiKeyUseCase","updateApiKey","UpdateApiKeyUseCase","deleteApiKey","DeleteApiKeyUseCase"],"mappings":";;;;;;;AASA,mBAAe,IAAIA,oBAAoC;IACnD,UAAwB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAyCzB,CAAC;IACD,WAAW;QACP,eAAe;YACX,MAAM,aAAYC,CAAC,EAAEC,EAAE,EAAEC,OAAO;gBAC5B,MAAMC,OAAOD,QAAQ,SAAS,CAAC,OAAO,CAACE;gBACvC,MAAMC,SAAS,MAAMF,KAAK,OAAO;gBAEjC,IAAIE,OAAO,IAAI,IACX,OAAO,IAAIC,SAASD,OAAO,KAAK;gBAEpC,OAAO,IAAIE,cAAcF,OAAO,KAAK;YACzC;YACA,MAAM,WAAUL,CAAC,EAAEQ,IAAS,EAAEN,OAAO;gBACjC,MAAMO,UAAUP,QAAQ,SAAS,CAAC,OAAO,CAACQ;gBAC1C,MAAML,SAAS,MAAMI,QAAQ,OAAO,CAACD,KAAK,EAAE;gBAE5C,IAAIH,OAAO,IAAI,IACX,OAAO,IAAIC,SAASD,OAAO,KAAK;gBAEpC,OAAO,IAAIE,cAAcF,OAAO,KAAK;YACzC;QACJ;QACA,kBAAkB;YACd,MAAM,cAAaL,CAAC,EAAEQ,IAAS,EAAEN,OAAO;gBACpC,MAAMS,eAAeT,QAAQ,SAAS,CAAC,OAAO,CAACU;gBAC/C,MAAMP,SAAS,MAAMM,aAAa,OAAO,CAACH,KAAK,IAAI;gBAEnD,IAAIH,OAAO,IAAI,IACX,OAAO,IAAIC,SAASD,OAAO,KAAK;gBAEpC,OAAO,IAAIE,cAAcF,OAAO,KAAK;YACzC;YACA,MAAM,cAAaL,CAAC,EAAEQ,IAAS,EAAEN,OAAO;gBACpC,MAAMW,eAAeX,QAAQ,SAAS,CAAC,OAAO,CAACY;gBAC/C,MAAMT,SAAS,MAAMQ,aAAa,OAAO,CAACL,KAAK,EAAE,EAAEA,KAAK,IAAI;gBAE5D,IAAIH,OAAO,IAAI,IACX,OAAO,IAAIC,SAASD,OAAO,KAAK;gBAEpC,OAAO,IAAIE,cAAcF,OAAO,KAAK;YACzC;YACA,MAAM,cAAaL,CAAC,EAAEQ,IAAS,EAAEN,OAAO;gBACpC,MAAMa,eAAeb,QAAQ,SAAS,CAAC,OAAO,CAACc;gBAC/C,MAAMX,SAAS,MAAMU,aAAa,OAAO,CAACP,KAAK,EAAE;gBAEjD,IAAIH,OAAO,IAAI,IACX,OAAO,IAAIC,SAAS;gBAExB,OAAO,IAAIC,cAAcF,OAAO,KAAK;YACzC;QACJ;IACJ;AACJ"}

package/graphql/security/base.gql.d.ts

@@ -1,4 +0,0 @@
-import { GraphQLSchemaPlugin } from "@webiny/handler-graphql";
-import type { SecurityContext } from "../../types/security.js";
-declare const _default: GraphQLSchemaPlugin<SecurityContext>;
-export default _default;

package/graphql/security/base.gql.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"graphql/security/base.gql.js","sources":["../../../src/graphql/security/base.gql.ts"],"sourcesContent":["import { GraphQLSchemaPlugin } from \"@webiny/handler-graphql\";\nimport type { SecurityContext } from \"~/types/security.js\";\n\nconst emptyResolver = () => ({});\n\nexport default new GraphQLSchemaPlugin<SecurityContext>({\n    typeDefs: /* GraphQL */ `\n        type SecurityMutation {\n            _empty: String\n        }\n\n        type SecurityQuery {\n            _empty: String\n        }\n\n        extend type Query {\n            security: SecurityQuery\n        }\n\n        extend type Mutation {\n            security: SecurityMutation\n        }\n\n        type SecurityCreatedBy {\n            id: ID\n            displayName: String\n        }\n\n        type SecurityError {\n            code: String\n            message: String\n            data: JSON\n            stack: String\n        }\n\n        type SecurityBooleanResponse {\n            data: Boolean\n            error: SecurityError\n        }\n    `,\n    resolvers: {\n        Query: {\n            security: emptyResolver\n        },\n        Mutation: {\n            security: emptyResolver\n        }\n    }\n});\n"],"names":["emptyResolver","GraphQLSchemaPlugin"],"mappings":";AAGA,MAAMA,gBAAgB,IAAO,EAAC;AAE9B,iBAAe,IAAIC,oBAAqC;IACpD,UAAwB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAiCzB,CAAC;IACD,WAAW;QACP,OAAO;YACH,UAAUD;QACd;QACA,UAAU;YACN,UAAUA;QACd;IACJ;AACJ"}

package/graphql/security/identity.gql.d.ts

@@ -1,4 +0,0 @@
-import { GraphQLSchemaPlugin } from "@webiny/handler-graphql/plugins/GraphQLSchemaPlugin.js";
-import type { ApiCoreContext } from "../../types/core.js";
-declare const _default: GraphQLSchemaPlugin<ApiCoreContext>;
-export default _default;

package/graphql/security/identity.gql.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"graphql/security/identity.gql.js","sources":["../../../src/graphql/security/identity.gql.ts"],"sourcesContent":["import { GraphQLSchemaPlugin } from \"@webiny/handler-graphql/plugins/GraphQLSchemaPlugin.js\";\nimport { ErrorResponse, Response } from \"@webiny/handler-graphql\";\nimport { EventPublisher } from \"~/features/eventPublisher/index.js\";\nimport type { ApiCoreContext } from \"~/types/core.js\";\nimport { AfterLoginEvent } from \"~/features/security/login/index.js\";\nimport { GetIdentityProfileUseCase } from \"~/features/users/GetIdentityProfile/index.js\";\nimport type { SecurityContext } from \"~/types/security.js\";\nimport type { AdminUser } from \"~/types/users.js\";\nimport { TeamsRepository } from \"~/features/security/teams/shared/abstractions.js\";\nimport { RolesRepository } from \"~/features/security/roles/shared/abstractions.js\";\nimport { IdentityContext } from \"~/features/security/IdentityContext/index.js\";\nimport { ProfileMapper } from \"./ProfileMapper.js\";\n\nconst getDefaultTenant = async (context: SecurityContext) => {\n    const identity = context.security.getIdentity();\n    const defaultTenantId = identity.context.defaultTenantId ?? \"root\";\n\n    const defaultTenant = await context.tenancy.getTenantById(defaultTenantId);\n    if (defaultTenant) {\n        return defaultTenant;\n    }\n\n    return context.tenancy.getRootTenant();\n};\n\nexport default new GraphQLSchemaPlugin<ApiCoreContext>({\n    typeDefs: /* GraphQL */ `\n        type SecurityIdentityTenant {\n            id: ID!\n            name: String!\n        }\n        type SecurityIdentityProfileRole {\n            id: String!\n            slug: String!\n            name: String!\n        }\n\n        type SecurityIdentityProfileTeam {\n            id: String!\n            slug: String!\n            name: String!\n        }\n\n        type SecurityIdentityProfile {\n            firstName: String\n            lastName: String\n            email: String\n            avatar: JSON\n            external: Boolean!\n            createdOn: DateTime!\n        }\n\n        type SecurityIdentity {\n            id: ID!\n            type: String!\n            displayName: String!\n            roles: [SecurityIdentityProfileRole!]!\n            teams: [SecurityIdentityProfileTeam!]!\n            permissions: [JSON!]!\n            profile: SecurityIdentityProfile!\n            currentTenant: SecurityIdentityTenant!\n            defaultTenant: SecurityIdentityTenant!\n        }\n\n        type SecurityIdentityLoginResponse {\n            data: SecurityIdentity\n            error: SecurityError\n        }\n\n        extend type SecurityMutation {\n            \"Login using idToken obtained from a 3rd party identity provider\"\n            login: SecurityIdentityLoginResponse\n        }\n    `,\n    resolvers: {\n        SecurityMutation: {\n            login: async (_, __, context) => {\n                const identityContext = context.container.resolve(IdentityContext);\n                const identity = identityContext.getIdentity();\n                if (identity.isAnonymous()) {\n                    return new ErrorResponse({\n                        code: \"Security/Identity/NotAuthenticated\",\n                        message: \"Unauthenticated!\"\n                    });\n                }\n\n                try {\n                    const eventPublisher = context.container.resolve(EventPublisher);\n                    await eventPublisher.publish(new AfterLoginEvent({ identity }));\n                } catch (err) {\n                    return new ErrorResponse(err);\n                }\n\n                // Roles and teams are stored in the user record.\n                const rolesRepo = context.container.resolve(RolesRepository);\n                const teamsRepo = context.container.resolve(TeamsRepository);\n                const getProfile = context.container.resolve(GetIdentityProfileUseCase);\n\n                const result = await context.security.withoutAuthorization(async () => {\n                    return getProfile.execute(identity.id);\n                });\n\n                if (result.isFail()) {\n                    return new ErrorResponse({\n                        code: \"Security/Identity/NotAuthorized\",\n                        message: \"Missing user profile!\"\n                    });\n                }\n\n                const user = result.value;\n\n                const [roles, teams] = await Promise.all([\n                    getRoles(user, rolesRepo),\n                    getTeams(user, teamsRepo)\n                ]);\n\n                const profileMapper = new ProfileMapper();\n                const profile = await profileMapper.toDTO(user);\n\n                return new Response({\n                    ...identity.toJson(),\n                    profile,\n                    roles,\n                    teams\n                });\n            }\n        },\n        SecurityIdentity: {\n            defaultTenant(_, __, context) {\n                return getDefaultTenant(context);\n            },\n            currentTenant(_, __, context) {\n                return context.tenancy.getCurrentTenant();\n            },\n            permissions(_, __, context) {\n                return context.security.listPermissions();\n            }\n        }\n    }\n});\n\nconst getRoles = async (user: AdminUser, rolesRepo: RolesRepository.Interface) => {\n    const roleIds = user.roles ?? [];\n    if (roleIds.length > 0) {\n        const result = await rolesRepo.list({\n            where: { id_in: roleIds }\n        });\n\n        if (result.isOk()) {\n            return result.value.map(role => ({\n                id: role.id,\n                slug: role.slug,\n                name: role.name\n            }));\n        }\n    }\n\n    return [];\n};\n\nconst getTeams = async (user: AdminUser, teamsRepo: TeamsRepository.Interface) => {\n    const teamIds = user.teams ?? [];\n    if (teamIds.length > 0) {\n        const result = await teamsRepo.list({\n            where: { id_in: teamIds }\n        });\n        if (result.isOk()) {\n            return result.value.map(team => ({\n                id: team.id,\n                slug: team.slug,\n                name: team.name\n            }));\n        }\n    }\n    return [];\n};\n"],"names":["getDefaultTenant","context","identity","defaultTenantId","defaultTenant","GraphQLSchemaPlugin","_","__","identityContext","IdentityContext","ErrorResponse","eventPublisher","EventPublisher","AfterLoginEvent","err","rolesRepo","RolesRepository","teamsRepo","TeamsRepository","getProfile","GetIdentityProfileUseCase","result","user","roles","teams","Promise","getRoles","getTeams","profileMapper","ProfileMapper","profile","Response","roleIds","role","teamIds","team"],"mappings":";;;;;;;;;AAaA,MAAMA,mBAAmB,OAAOC;IAC5B,MAAMC,WAAWD,QAAQ,QAAQ,CAAC,WAAW;IAC7C,MAAME,kBAAkBD,SAAS,OAAO,CAAC,eAAe,IAAI;IAE5D,MAAME,gBAAgB,MAAMH,QAAQ,OAAO,CAAC,aAAa,CAACE;IAC1D,IAAIC,eACA,OAAOA;IAGX,OAAOH,QAAQ,OAAO,CAAC,aAAa;AACxC;AAEA,qBAAe,IAAII,oBAAoC;IACnD,UAAwB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA+CzB,CAAC;IACD,WAAW;QACP,kBAAkB;YACd,OAAO,OAAOC,GAAGC,IAAIN;gBACjB,MAAMO,kBAAkBP,QAAQ,SAAS,CAAC,OAAO,CAACQ;gBAClD,MAAMP,WAAWM,gBAAgB,WAAW;gBAC5C,IAAIN,SAAS,WAAW,IACpB,OAAO,IAAIQ,cAAc;oBACrB,MAAM;oBACN,SAAS;gBACb;gBAGJ,IAAI;oBACA,MAAMC,iBAAiBV,QAAQ,SAAS,CAAC,OAAO,CAACW;oBACjD,MAAMD,eAAe,OAAO,CAAC,IAAIE,gBAAgB;wBAAEX;oBAAS;gBAChE,EAAE,OAAOY,KAAK;oBACV,OAAO,IAAIJ,cAAcI;gBAC7B;gBAGA,MAAMC,YAAYd,QAAQ,SAAS,CAAC,OAAO,CAACe;gBAC5C,MAAMC,YAAYhB,QAAQ,SAAS,CAAC,OAAO,CAACiB;gBAC5C,MAAMC,aAAalB,QAAQ,SAAS,CAAC,OAAO,CAACmB;gBAE7C,MAAMC,SAAS,MAAMpB,QAAQ,QAAQ,CAAC,oBAAoB,CAAC,UAChDkB,WAAW,OAAO,CAACjB,SAAS,EAAE;gBAGzC,IAAImB,OAAO,MAAM,IACb,OAAO,IAAIX,cAAc;oBACrB,MAAM;oBACN,SAAS;gBACb;gBAGJ,MAAMY,OAAOD,OAAO,KAAK;gBAEzB,MAAM,CAACE,OAAOC,MAAM,GAAG,MAAMC,QAAQ,GAAG,CAAC;oBACrCC,SAASJ,MAAMP;oBACfY,SAASL,MAAML;iBAClB;gBAED,MAAMW,gBAAgB,IAAIC;gBAC1B,MAAMC,UAAU,MAAMF,cAAc,KAAK,CAACN;gBAE1C,OAAO,IAAIS,SAAS;oBAChB,GAAG7B,SAAS,MAAM,EAAE;oBACpB4B;oBACAP;oBACAC;gBACJ;YACJ;QACJ;QACA,kBAAkB;YACd,eAAclB,CAAC,EAAEC,EAAE,EAAEN,OAAO;gBACxB,OAAOD,iBAAiBC;YAC5B;YACA,eAAcK,CAAC,EAAEC,EAAE,EAAEN,OAAO;gBACxB,OAAOA,QAAQ,OAAO,CAAC,gBAAgB;YAC3C;YACA,aAAYK,CAAC,EAAEC,EAAE,EAAEN,OAAO;gBACtB,OAAOA,QAAQ,QAAQ,CAAC,eAAe;YAC3C;QACJ;IACJ;AACJ;AAEA,MAAMyB,WAAW,OAAOJ,MAAiBP;IACrC,MAAMiB,UAAUV,KAAK,KAAK,IAAI,EAAE;IAChC,IAAIU,QAAQ,MAAM,GAAG,GAAG;QACpB,MAAMX,SAAS,MAAMN,UAAU,IAAI,CAAC;YAChC,OAAO;gBAAE,OAAOiB;YAAQ;QAC5B;QAEA,IAAIX,OAAO,IAAI,IACX,OAAOA,OAAO,KAAK,CAAC,GAAG,CAACY,CAAAA,OAAS;gBAC7B,IAAIA,KAAK,EAAE;gBACX,MAAMA,KAAK,IAAI;gBACf,MAAMA,KAAK,IAAI;YACnB;IAER;IAEA,OAAO,EAAE;AACb;AAEA,MAAMN,WAAW,OAAOL,MAAiBL;IACrC,MAAMiB,UAAUZ,KAAK,KAAK,IAAI,EAAE;IAChC,IAAIY,QAAQ,MAAM,GAAG,GAAG;QACpB,MAAMb,SAAS,MAAMJ,UAAU,IAAI,CAAC;YAChC,OAAO;gBAAE,OAAOiB;YAAQ;QAC5B;QACA,IAAIb,OAAO,IAAI,IACX,OAAOA,OAAO,KAAK,CAAC,GAAG,CAACc,CAAAA,OAAS;gBAC7B,IAAIA,KAAK,EAAE;gBACX,MAAMA,KAAK,IAAI;gBACf,MAAMA,KAAK,IAAI;YACnB;IAER;IACA,OAAO,EAAE;AACb"}

package/graphql/security/index.d.ts

@@ -1 +0,0 @@
-export declare const createSecurityGraphQL: () => import("@webiny/handler-graphql/index.js").GraphQLSchemaPlugin<import("../../types/core.js").ApiCoreContext>[];

package/graphql/security/index.js

@@ -1,15 +0,0 @@
-import base_gql from "./base.gql.js";
-import apiKey_gql from "./apiKey.gql.js";
-import role_gql from "./role.gql.js";
-import team_gql from "./team.gql.js";
-import identity_gql from "./identity.gql.js";
-const createSecurityGraphQL = ()=>[
-        base_gql,
-        team_gql,
-        apiKey_gql,
-        role_gql,
-        identity_gql
-    ];
-export { createSecurityGraphQL };
-
-//# sourceMappingURL=index.js.map

package/graphql/security/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"graphql/security/index.js","sources":["../../../src/graphql/security/index.ts"],"sourcesContent":["import base from \"./base.gql.js\";\nimport apiKey from \"./apiKey.gql.js\";\nimport role from \"./role.gql.js\";\nimport team from \"./team.gql.js\";\nimport identity from \"./identity.gql.js\";\n\nexport const createSecurityGraphQL = () => {\n    return [base, team, apiKey, role, identity];\n};\n"],"names":["createSecurityGraphQL","base","team","apiKey","role","identity"],"mappings":";;;;;AAMO,MAAMA,wBAAwB,IAC1B;QAACC;QAAMC;QAAMC;QAAQC;QAAMC;KAAS"}

package/graphql/security/role.gql.d.ts

@@ -1,4 +0,0 @@
-import { GraphQLSchemaPlugin } from "@webiny/handler-graphql/plugins/GraphQLSchemaPlugin.js";
-import type { ApiCoreContext } from "../../types/core.js";
-declare const _default: GraphQLSchemaPlugin<ApiCoreContext>;
-export default _default;