@actuate-media/cms-core 0.39.0 → 0.40.0

package/dist/__tests__/auth/invite.test.js

@@ -1,151 +0,0 @@
-import { describe, it, expect, vi, afterEach } from 'vitest';
-import { createUserInvite, normalizeInviteRole } from '../../auth/invite.js';
-import { hashToken } from '../../auth/reset.js';
-import { setEmailSender } from '../../email/sender.js';
-function createFakeDb(initial = {}) {
-    const users = initial.users ?? [];
-    const tokens = [];
-    return {
-        users,
-        tokens,
-        user: {
-            findFirst: vi.fn(async ({ where }) => {
-                const target = where.email.equals.toLowerCase();
-                return users.find((u) => u.email.toLowerCase() === target) ?? null;
-            }),
-            create: vi.fn(async ({ data }) => {
-                const u = { id: `u_${users.length + 1}`, ...data };
-                users.push(u);
-                return u;
-            }),
-        },
-        passwordResetToken: {
-            create: vi.fn(async ({ data }) => {
-                const t = { id: `rt_${tokens.length + 1}`, ...data };
-                tokens.push(t);
-                return t;
-            }),
-        },
-    };
-}
-const BASE_CONFIG = { siteUrl: 'https://example.com', adminPath: '/admin' };
-afterEach(() => {
-    setEmailSender(null);
-});
-describe('normalizeInviteRole', () => {
-    it('upper-cases and validates known roles', () => {
-        expect(normalizeInviteRole('editor')).toBe('EDITOR');
-        expect(normalizeInviteRole('  Admin ')).toBe('ADMIN');
-        expect(normalizeInviteRole('AUTHOR')).toBe('AUTHOR');
-        expect(normalizeInviteRole('client')).toBe('CLIENT');
-    });
-    it('rejects unknown / empty roles', () => {
-        expect(normalizeInviteRole('viewer')).toBeNull();
-        expect(normalizeInviteRole('')).toBeNull();
-        expect(normalizeInviteRole(undefined)).toBeNull();
-    });
-});
-describe('createUserInvite', () => {
-    it('creates an active user with a valid role and an unusable random password', async () => {
-        const db = createFakeDb();
-        const result = await createUserInvite(db, { email: 'New@Example.com ', name: '  Jane  ', role: 'editor' }, BASE_CONFIG);
-        expect(result.success).toBe(true);
-        expect(db.user.create).toHaveBeenCalledOnce();
-        const created = db.users[0];
-        expect(created.email).toBe('new@example.com');
-        expect(created.name).toBe('Jane');
-        expect(created.role).toBe('EDITOR');
-        expect(created.isActive).toBe(true);
-        expect(created.isApproved).toBe(true);
-        expect(created.emailVerified).toBe(false);
-        // Password is a real hash (not blank/plaintext) so the account can't be
-        // logged into until the invitee sets their own password.
-        expect(created.passwordHash).toMatch(/^pbkdf2:/);
-    });
-    it('defaults the name to the email local-part when omitted', async () => {
-        const db = createFakeDb();
-        await createUserInvite(db, { email: 'sam@example.com', role: 'author' }, BASE_CONFIG);
-        expect(db.users[0].name).toBe('sam');
-    });
-    it('creates a single-use reset token and returns a shareable link when no email sender is set', async () => {
-        const db = createFakeDb();
-        const result = await createUserInvite(db, { email: 'a@example.com', role: 'author' }, BASE_CONFIG);
-        expect(result.emailed).toBe(false);
-        expect(result.inviteUrl).toContain('https://example.com/admin/reset-password?token=');
-        expect(db.passwordResetToken.create).toHaveBeenCalledOnce();
-        // The token in the link is the raw token; the DB stores only its hash.
-        const tokenInUrl = result.inviteUrl.match(/token=([0-9a-f]{64})/)?.[1];
-        expect(tokenInUrl).toBeDefined();
-        expect(hashToken(tokenInUrl)).toBe(db.tokens[0].tokenHash);
-        // ~7 day expiry
-        const ttl = db.tokens[0].expiresAt.getTime() - Date.now();
-        expect(ttl).toBeGreaterThan(6.9 * 24 * 60 * 60 * 1000);
-    });
-    it('emails the invite via the registered sender and hides the link from the result', async () => {
-        const send = vi.fn(async (_o) => { });
-        setEmailSender({ send });
-        const db = createFakeDb();
-        const result = await createUserInvite(db, { email: 'a@example.com', name: 'A', role: 'admin' }, { ...BASE_CONFIG, invitedByName: 'Boss', siteName: 'Acme' });
-        expect(result.success).toBe(true);
-        expect(result.emailed).toBe(true);
-        expect(result.inviteUrl).toBeUndefined();
-        expect(send).toHaveBeenCalledOnce();
-        const sent = send.mock.calls[0][0];
-        expect(sent.to).toBe('a@example.com');
-        expect(sent.html).toContain('/admin/reset-password?token=');
-    });
-    it('builds the link from the configured admin path', async () => {
-        const db = createFakeDb();
-        const result = await createUserInvite(db, { email: 'a@example.com', role: 'author' }, {
-            siteUrl: 'https://example.com/',
-            adminPath: '/securelogin',
-        });
-        expect(result.inviteUrl).toContain('https://example.com/securelogin/reset-password?token=');
-        expect(result.inviteUrl).not.toContain('//securelogin');
-    });
-    it('rejects a duplicate email (case-insensitive) without creating a user', async () => {
-        const db = createFakeDb({
-            users: [
-                {
-                    id: 'u_1',
-                    email: 'taken@example.com',
-                    name: 'Taken',
-                    role: 'EDITOR',
-                    passwordHash: 'pbkdf2:x',
-                    isActive: true,
-                    isApproved: true,
-                    emailVerified: true,
-                },
-            ],
-        });
-        const result = await createUserInvite(db, { email: 'Taken@Example.com', role: 'author' }, BASE_CONFIG);
-        expect(result.success).toBe(false);
-        expect(result.error).toMatch(/already exists/i);
-        expect(db.user.create).not.toHaveBeenCalled();
-    });
-    it('rejects an invalid email', async () => {
-        const db = createFakeDb();
-        const result = await createUserInvite(db, { email: 'not-an-email', role: 'author' }, BASE_CONFIG);
-        expect(result.success).toBe(false);
-        expect(db.user.create).not.toHaveBeenCalled();
-    });
-    it('rejects an invalid role', async () => {
-        const db = createFakeDb();
-        const result = await createUserInvite(db, { email: 'a@example.com', role: 'viewer' }, BASE_CONFIG);
-        expect(result.success).toBe(false);
-        expect(result.error).toMatch(/role/i);
-        expect(db.user.create).not.toHaveBeenCalled();
-    });
-    it('still succeeds when the email send throws (link returned for manual sharing)', async () => {
-        const send = vi.fn(async () => {
-            throw new Error('smtp down');
-        });
-        setEmailSender({ send });
-        const db = createFakeDb();
-        const result = await createUserInvite(db, { email: 'a@example.com', role: 'author' }, BASE_CONFIG);
-        expect(result.success).toBe(true);
-        expect(result.emailed).toBe(false);
-        expect(result.inviteUrl).toContain('/admin/reset-password?token=');
-    });
-});
-//# sourceMappingURL=invite.test.js.map

package/dist/__tests__/auth/invite.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"invite.test.js","sourceRoot":"","sources":["../../../src/__tests__/auth/invite.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAC5D,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAC5E,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAatD,SAAS,YAAY,CAAC,UAAkC,EAAE;IACxD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAA;IACjC,MAAM,MAAM,GAA8E,EAAE,CAAA;IAE5F,OAAO;QACL,KAAK;QACL,MAAM;QACN,IAAI,EAAE;YACJ,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,KAAK,EAAO,EAAE,EAAE;gBACxC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAA;gBAC/C,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAA;YACpE,CAAC,CAAC;YACF,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,EAAO,EAAE,EAAE;gBACpC,MAAM,CAAC,GAAa,EAAE,EAAE,EAAE,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,CAAA;gBAC5D,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBACb,OAAO,CAAC,CAAA;YACV,CAAC,CAAC;SACH;QACD,kBAAkB,EAAE;YAClB,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,EAAO,EAAE,EAAE;gBACpC,MAAM,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,CAAA;gBACpD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBACd,OAAO,CAAC,CAAA;YACV,CAAC,CAAC;SACH;KACF,CAAA;AACH,CAAC;AAED,MAAM,WAAW,GAAG,EAAE,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAA;AAE3E,SAAS,CAAC,GAAG,EAAE;IACb,cAAc,CAAC,IAAI,CAAC,CAAA;AACtB,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACpD,MAAM,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACrD,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACpD,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QAChD,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC1C,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IACnD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,EAAE,GAAG,YAAY,EAAE,CAAA;QACzB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,EAAE,EACF,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,EAC/D,WAAW,CACZ,CAAA;QAED,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,oBAAoB,EAAE,CAAA;QAC7C,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAE,CAAA;QAC5B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;QAC7C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACjC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACnC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACnC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACrC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACzC,wEAAwE;QACxE,yDAAyD;QACzD,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,EAAE,GAAG,YAAY,EAAE,CAAA;QACzB,MAAM,gBAAgB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,CAAC,CAAA;QACrF,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2FAA2F,EAAE,KAAK,IAAI,EAAE;QACzG,MAAM,EAAE,GAAG,YAAY,EAAE,CAAA;QACzB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,EAAE,EACF,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,EAC1C,WAAW,CACZ,CAAA;QAED,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,iDAAiD,CAAC,CAAA;QACrF,MAAM,CAAC,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,oBAAoB,EAAE,CAAA;QAE3D,uEAAuE;QACvE,MAAM,UAAU,GAAG,MAAM,CAAC,SAAU,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QACvE,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAA;QAChC,MAAM,CAAC,SAAS,CAAC,UAAW,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,SAAS,CAAC,CAAA;QAC5D,gBAAgB;QAChB,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC1D,MAAM,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;QAC9F,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,CAChB,KAAK,EAAE,EAAgE,EAAE,EAAE,GAAE,CAAC,CAC/E,CAAA;QACD,cAAc,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QACxB,MAAM,EAAE,GAAG,YAAY,EAAE,CAAA;QAEzB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,EAAE,EACF,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EACpD,EAAE,GAAG,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAC5D,CAAA;QAED,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE,CAAA;QACxC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,EAAE,CAAA;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QACrC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,EAAE,GAAG,YAAY,EAAE,CAAA;QACzB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,EAAE,EACF,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,EAC1C;YACE,OAAO,EAAE,sBAAsB;YAC/B,SAAS,EAAE,cAAc;SAC1B,CACF,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,uDAAuD,CAAC,CAAA;QAC3F,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAA;IACzD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,EAAE,GAAG,YAAY,CAAC;YACtB,KAAK,EAAE;gBACL;oBACE,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,mBAAmB;oBAC1B,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,QAAQ;oBACd,YAAY,EAAE,UAAU;oBACxB,QAAQ,EAAE,IAAI;oBACd,UAAU,EAAE,IAAI;oBAChB,aAAa,EAAE,IAAI;iBACpB;aACF;SACF,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,EAAE,EACF,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,QAAQ,EAAE,EAC9C,WAAW,CACZ,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;QAC/C,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,EAAE,GAAG,YAAY,EAAE,CAAA;QACzB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,EAAE,EACF,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,EACzC,WAAW,CACZ,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,EAAE,GAAG,YAAY,EAAE,CAAA;QACzB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,EAAE,EACF,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,EAC1C,WAAW,CACZ,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QACrC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;QACF,cAAc,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QACxB,MAAM,EAAE,GAAG,YAAY,EAAE,CAAA;QACzB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,EAAE,EACF,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,EAC1C,WAAW,CACZ,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/auth/invite.d.ts

@@ -1,37 +0,0 @@
-/** Invitations are valid longer than a password reset — a person has to act. */
-export declare const INVITE_TOKEN_EXPIRY_MS: number;
-export declare const VALID_INVITE_ROLES: readonly ["ADMIN", "EDITOR", "AUTHOR", "CLIENT"];
-export type InviteRole = (typeof VALID_INVITE_ROLES)[number];
-/** Normalise a UI-supplied role to a valid {@link InviteRole}, or null. */
-export declare function normalizeInviteRole(role: string | undefined): InviteRole | null;
-export interface CreateInviteInput {
-    email: string;
-    name?: string;
-    role: string;
-}
-export interface CreateInviteResult {
-    success: boolean;
-    error?: string;
-    /**
-     * The accept/set-password URL. Returned only when the invitation email was
-     * NOT sent (no sender configured or send failed) so an admin can share it
-     * manually. Omitted when the email was delivered.
-     */
-    inviteUrl?: string;
-    /** Whether the invitation email was actually dispatched. */
-    emailed?: boolean;
-    user?: {
-        id: string;
-        email: string;
-        name: string;
-        role: string;
-    };
-}
-export declare function createUserInvite(db: any, input: CreateInviteInput, config: {
-    siteUrl: string;
-    /** Admin mount path; the accept link is `<siteUrl><adminPath>/reset-password`. */
-    adminPath?: string;
-    invitedByName?: string;
-    siteName?: string;
-}): Promise<CreateInviteResult>;
-//# sourceMappingURL=invite.d.ts.map

package/dist/auth/invite.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"invite.d.ts","sourceRoot":"","sources":["../../src/auth/invite.ts"],"names":[],"mappings":"AAqBA,gFAAgF;AAChF,eAAO,MAAM,sBAAsB,QAA0B,CAAA;AAE7D,eAAO,MAAM,kBAAkB,kDAAmD,CAAA;AAClF,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAA;AAI5D,2EAA2E;AAC3E,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,IAAI,CAI/E;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,4DAA4D;IAC5D,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,IAAI,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;CACjE;AAED,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,GAAG,EACP,KAAK,EAAE,iBAAiB,EACxB,MAAM,EAAE;IACN,OAAO,EAAE,MAAM,CAAA;IACf,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB,GACA,OAAO,CAAC,kBAAkB,CAAC,CA+E7B"}

package/dist/auth/invite.js

@@ -1,104 +0,0 @@
-/**
- * User invitations.
- *
- * Creating an invite provisions the user immediately (so they appear in the
- * users list and access control works) but with an unusable random password.
- * The invitee receives a link to the existing `/reset-password` page, where
- * they set a real password through {@link executePasswordReset}. This reuses
- * the password-reset token (single-use, expiring) and page rather than adding a
- * parallel "accept invite" surface.
- *
- * Email is dispatched through the shared transactional sender registry, so an
- * app that configures email via `emailPlugin()` (the common case) sends invites
- * without any extra wiring. When no sender is configured the invite still
- * succeeds and the caller receives the link to share manually.
- */
-import { randomBytes } from 'node:crypto';
-import { hashPassword } from './password.js';
-import { generateResetToken } from './reset.js';
-import { userInvitationEmailTemplate } from './invite-email.js';
-import { resolveEmailSender } from '../email/sender.js';
-/** Invitations are valid longer than a password reset — a person has to act. */
-export const INVITE_TOKEN_EXPIRY_MS = 7 * 24 * 60 * 60 * 1000;
-export const VALID_INVITE_ROLES = ['ADMIN', 'EDITOR', 'AUTHOR', 'CLIENT'];
-const EMAIL_RE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
-/** Normalise a UI-supplied role to a valid {@link InviteRole}, or null. */
-export function normalizeInviteRole(role) {
-    if (!role)
-        return null;
-    const upper = role.trim().toUpperCase();
-    return VALID_INVITE_ROLES.includes(upper) ? upper : null;
-}
-export async function createUserInvite(db, input, config) {
-    const email = input.email.toLowerCase().trim();
-    if (!EMAIL_RE.test(email)) {
-        return { success: false, error: 'Enter a valid email address.' };
-    }
-    const role = normalizeInviteRole(input.role);
-    if (!role) {
-        return { success: false, error: 'Select a valid role.' };
-    }
-    // Case-insensitive existence check so we don't create a duplicate that can
-    // never log in (the unique index is on the exact string).
-    const existing = await db.user.findFirst({
-        where: { email: { equals: email, mode: 'insensitive' } },
-    });
-    if (existing) {
-        return { success: false, error: 'A user with this email already exists.' };
-    }
-    const name = input.name?.trim() || email.split('@')[0] || email;
-    // Unusable random password — the invitee sets a real one via the link. A
-    // random hash (rather than null) guarantees the account can never be
-    // password-logged-into even if a future code path forgets the null check.
-    const passwordHash = await hashPassword(randomBytes(32).toString('hex'));
-    const user = await db.user.create({
-        data: {
-            email,
-            name,
-            role,
-            passwordHash,
-            isActive: true,
-            isApproved: true,
-            emailVerified: false,
-        },
-    });
-    const { raw, hash } = generateResetToken();
-    await db.passwordResetToken.create({
-        data: {
-            userId: user.id,
-            tokenHash: hash,
-            expiresAt: new Date(Date.now() + INVITE_TOKEN_EXPIRY_MS),
-        },
-    });
-    const base = config.siteUrl.replace(/\/$/, '');
-    const adminPath = (config.adminPath ?? '/admin').replace(/\/$/, '');
-    const inviteUrl = `${base}${adminPath}/reset-password?token=${raw}`;
-    let emailed = false;
-    const sender = resolveEmailSender();
-    if (sender) {
-        const tpl = userInvitationEmailTemplate({
-            inviteUrl,
-            userName: name,
-            role,
-            invitedByName: config.invitedByName,
-            siteName: config.siteName,
-        });
-        try {
-            await sender.send({ to: email, subject: tpl.subject, html: tpl.html, text: tpl.text });
-            emailed = true;
-        }
-        catch {
-            // Best-effort: the user + token are already persisted, so the admin can
-            // still share the returned link. Don't fail the whole invite on a send
-            // error.
-            emailed = false;
-        }
-    }
-    return {
-        success: true,
-        emailed,
-        inviteUrl: emailed ? undefined : inviteUrl,
-        user: { id: user.id, email: user.email, name: user.name, role: user.role },
-    };
-}
-//# sourceMappingURL=invite.js.map

package/dist/auth/invite.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"invite.js","sourceRoot":"","sources":["../../src/auth/invite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAC/C,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAA;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAEvD,gFAAgF;AAChF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAE7D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAA;AAGlF,MAAM,QAAQ,GAAG,4BAA4B,CAAA;AAE7C,2EAA2E;AAC3E,MAAM,UAAU,mBAAmB,CAAC,IAAwB;IAC1D,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACvC,OAAQ,kBAAwC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAoB,CAAC,CAAC,CAAC,IAAI,CAAA;AACjG,CAAC;AAsBD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAO,EACP,KAAwB,EACxB,MAMC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAA;IAC9C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAA;IAClE,CAAC;IAED,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAA;IAC1D,CAAC;IAED,2EAA2E;IAC3E,0DAA0D;IAC1D,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;QACvC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE;KACzD,CAAC,CAAA;IACF,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAA;IAC5E,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAA;IAE/D,yEAAyE;IACzE,qEAAqE;IACrE,0EAA0E;IAC1E,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;IAExE,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;QAChC,IAAI,EAAE;YACJ,KAAK;YACL,IAAI;YACJ,IAAI;YACJ,YAAY;YACZ,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,IAAI;YAChB,aAAa,EAAE,KAAK;SACrB;KACF,CAAC,CAAA;IAEF,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,kBAAkB,EAAE,CAAA;IAC1C,MAAM,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC;QACjC,IAAI,EAAE;YACJ,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,sBAAsB,CAAC;SACzD;KACF,CAAC,CAAA;IAEF,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC9C,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACnE,MAAM,SAAS,GAAG,GAAG,IAAI,GAAG,SAAS,yBAAyB,GAAG,EAAE,CAAA;IAEnE,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAA;IACnC,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,2BAA2B,CAAC;YACtC,SAAS;YACT,QAAQ,EAAE,IAAI;YACd,IAAI;YACJ,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAA;QACF,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;YACtF,OAAO,GAAG,IAAI,CAAA;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;YACxE,uEAAuE;YACvE,SAAS;YACT,OAAO,GAAG,KAAK,CAAA;QACjB,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,OAAO;QACP,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAC1C,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;KAC3E,CAAA;AACH,CAAC"}