@antelopejs/dms 0.0.1

package/dist/routes/auth.d.ts

@@ -0,0 +1,30 @@
+import { SessionModel, type User, UserModel } from "@antelopejs/interface-dms/auth/db";
+import type { OAuthAuthorizeUrl } from "./auth/oauth";
+import type { LoginOutcome } from "./auth/session-response";
+import type { AuthResponse, TenantAssignmentRequiredResponse, TwoFactorRequiredResponse } from "./auth/types";
+declare const AuthController_base: import("@antelopejs/interface-api").ControllerClass<object>;
+export declare class AuthController extends AuthController_base {
+    userModel: UserModel;
+    sessionModel: SessionModel;
+    userAgent: string;
+    forwardedFor: string;
+    oauthRelayHeader: string;
+    signup(body: unknown): Promise<AuthResponse>;
+    login(body: unknown): Promise<AuthResponse | TwoFactorRequiredResponse | TenantAssignmentRequiredResponse>;
+    oauthAuthorizeUrl(provider: string): OAuthAuthorizeUrl;
+    oauthCallback(provider: string, body: unknown): Promise<LoginOutcome>;
+    verify2FA(body: unknown): Promise<AuthResponse>;
+    request2FAEmail(body: unknown): Promise<{
+        success: boolean;
+    }>;
+    refresh(body: unknown): Promise<AuthResponse>;
+    switchTenant(body: unknown): Promise<AuthResponse>;
+    me(user: User): Promise<Partial<User>>;
+    logout(user: User, body: unknown): Promise<import("@antelopejs/interface-api").HTTPResult>;
+    verifyEmail(user: User, body: unknown): Promise<void>;
+    requestEmailVerification(user: User): Promise<void>;
+    forgotPassword(body: unknown): Promise<void>;
+    validateForgotPasswordToken(body: unknown): Promise<void>;
+    resetPassword(body: unknown): Promise<void>;
+}
+export {};

package/dist/routes/auth.js

@@ -0,0 +1,239 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthController = void 0;
+const interface_api_1 = require("@antelopejs/interface-api");
+const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
+const auth_1 = require("@antelopejs/interface-dms/auth");
+const db_1 = require("@antelopejs/interface-dms/auth/db");
+const authRoutes = __importStar(require("./auth/index"));
+class AuthController extends (0, interface_api_1.Controller)("/api/auth") {
+    signup(body) {
+        return authRoutes.signup(this.userModel, this.sessionModel, body, this.userAgent || "", this.forwardedFor || "");
+    }
+    login(body) {
+        return authRoutes.login(this.userModel, this.sessionModel, body, this.userAgent || "", this.forwardedFor || "");
+    }
+    oauthAuthorizeUrl(provider) {
+        authRoutes.assertOAuthRelay(this.oauthRelayHeader);
+        return authRoutes.buildOAuthAuthorizeUrl(provider);
+    }
+    oauthCallback(provider, body) {
+        authRoutes.assertOAuthRelay(this.oauthRelayHeader);
+        return authRoutes.oauthCallback({
+            userModel: this.userModel,
+            sessionModel: this.sessionModel,
+            providerId: provider,
+            body,
+            userAgent: this.userAgent || "",
+            ip: this.forwardedFor || "",
+        });
+    }
+    verify2FA(body) {
+        return authRoutes.verify2FA(this.userModel, this.sessionModel, body, this.userAgent || "", this.forwardedFor || "");
+    }
+    request2FAEmail(body) {
+        return authRoutes.request2FAEmail(this.userModel, body);
+    }
+    refresh(body) {
+        return authRoutes.refresh(this.userModel, this.sessionModel, body);
+    }
+    switchTenant(body) {
+        return authRoutes.switchTenant(this.userModel, this.sessionModel, body);
+    }
+    me(user) {
+        return authRoutes.me(user);
+    }
+    logout(user, body) {
+        return authRoutes.logout(this.userModel, this.sessionModel, user, body);
+    }
+    verifyEmail(user, body) {
+        return authRoutes.verifyEmail(this.userModel, user, body);
+    }
+    requestEmailVerification(user) {
+        return authRoutes.requestEmailVerification(this.userModel, user);
+    }
+    forgotPassword(body) {
+        return authRoutes.forgotPassword(this.userModel, body);
+    }
+    validateForgotPasswordToken(body) {
+        return authRoutes.validateForgotPasswordToken(this.userModel, body);
+    }
+    resetPassword(body) {
+        return authRoutes.resetPassword(this.userModel, body);
+    }
+}
+exports.AuthController = AuthController;
+__decorate([
+    (0, interface_database_decorators_1.Model)(db_1.UserModel),
+    __metadata("design:type", db_1.UserModel)
+], AuthController.prototype, "userModel", void 0);
+__decorate([
+    (0, interface_database_decorators_1.Model)(db_1.SessionModel),
+    __metadata("design:type", db_1.SessionModel)
+], AuthController.prototype, "sessionModel", void 0);
+__decorate([
+    (0, interface_api_1.Parameter)("user-agent", "header"),
+    __metadata("design:type", String)
+], AuthController.prototype, "userAgent", void 0);
+__decorate([
+    (0, interface_api_1.Parameter)("x-forwarded-for", "header"),
+    __metadata("design:type", String)
+], AuthController.prototype, "forwardedFor", void 0);
+__decorate([
+    (0, interface_api_1.Parameter)("x-dms-oauth-relay", "header"),
+    __metadata("design:type", String)
+], AuthController.prototype, "oauthRelayHeader", void 0);
+__decorate([
+    (0, interface_api_1.Post)("/signup"),
+    __param(0, (0, interface_api_1.JSONBody)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "signup", null);
+__decorate([
+    (0, interface_api_1.Post)("/login"),
+    __param(0, (0, interface_api_1.JSONBody)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "login", null);
+__decorate([
+    (0, interface_api_1.Get)("/oauth/:provider/authorize-url"),
+    __param(0, (0, interface_api_1.Parameter)("provider")),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Object)
+], AuthController.prototype, "oauthAuthorizeUrl", null);
+__decorate([
+    (0, interface_api_1.Post)("/oauth/:provider/callback"),
+    __param(0, (0, interface_api_1.Parameter)("provider")),
+    __param(1, (0, interface_api_1.JSONBody)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "oauthCallback", null);
+__decorate([
+    (0, interface_api_1.Post)("/verify-2fa"),
+    __param(0, (0, interface_api_1.JSONBody)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "verify2FA", null);
+__decorate([
+    (0, interface_api_1.Post)("/request-2fa-email"),
+    __param(0, (0, interface_api_1.JSONBody)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", void 0)
+], AuthController.prototype, "request2FAEmail", null);
+__decorate([
+    (0, interface_api_1.Post)("/refresh"),
+    __param(0, (0, interface_api_1.JSONBody)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "refresh", null);
+__decorate([
+    (0, interface_api_1.Post)("/switch-tenant"),
+    __param(0, (0, interface_api_1.JSONBody)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "switchTenant", null);
+__decorate([
+    (0, interface_api_1.Get)("/me"),
+    __param(0, (0, auth_1.AuthRawUser)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Function]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "me", null);
+__decorate([
+    (0, interface_api_1.Post)("/logout"),
+    __param(0, (0, auth_1.AuthRawUser)()),
+    __param(1, (0, interface_api_1.JSONBody)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Function, Object]),
+    __metadata("design:returntype", void 0)
+], AuthController.prototype, "logout", null);
+__decorate([
+    (0, interface_api_1.Post)("/verify-email"),
+    __param(0, (0, auth_1.AuthRawUser)()),
+    __param(1, (0, interface_api_1.JSONBody)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Function, Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "verifyEmail", null);
+__decorate([
+    (0, interface_api_1.Get)("/request-email-verification"),
+    __param(0, (0, auth_1.AuthRawUser)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Function]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "requestEmailVerification", null);
+__decorate([
+    (0, interface_api_1.Post)("/forgot-password"),
+    __param(0, (0, interface_api_1.JSONBody)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "forgotPassword", null);
+__decorate([
+    (0, interface_api_1.Post)("/validate-forgot-password-token"),
+    __param(0, (0, interface_api_1.JSONBody)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "validateForgotPasswordToken", null);
+__decorate([
+    (0, interface_api_1.Post)("/reset-password"),
+    __param(0, (0, interface_api_1.JSONBody)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "resetPassword", null);
+//# sourceMappingURL=auth.js.map

package/dist/routes/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/routes/auth.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,6DAMmC;AACnC,6FAAkE;AAClE,yDAA6D;AAC7D,0DAI2C;AAC3C,yDAA2C;AAS3C,MAAa,cAAe,SAAQ,IAAA,0BAAU,EAAC,WAAW,CAAC;IAiBzD,MAAM,CAAa,IAAa;QAC9B,OAAO,UAAU,CAAC,MAAM,CACtB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,IAAI,EACJ,IAAI,CAAC,SAAS,IAAI,EAAE,EACpB,IAAI,CAAC,YAAY,IAAI,EAAE,CACxB,CAAC;IACJ,CAAC;IAGD,KAAK,CACS,IAAa;QAIzB,OAAO,UAAU,CAAC,KAAK,CACrB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,IAAI,EACJ,IAAI,CAAC,SAAS,IAAI,EAAE,EACpB,IAAI,CAAC,YAAY,IAAI,EAAE,CACxB,CAAC;IACJ,CAAC;IAGD,iBAAiB,CACQ,QAAgB;QAEvC,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACnD,OAAO,UAAU,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC;IAGD,aAAa,CACY,QAAgB,EAC3B,IAAa;QAEzB,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACnD,OAAO,UAAU,CAAC,aAAa,CAAC;YAC9B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,QAAQ;YACpB,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;YAC/B,EAAE,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE;SAC5B,CAAC,CAAC;IACL,CAAC;IAGD,SAAS,CAAa,IAAa;QACjC,OAAO,UAAU,CAAC,SAAS,CACzB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,IAAI,EACJ,IAAI,CAAC,SAAS,IAAI,EAAE,EACpB,IAAI,CAAC,YAAY,IAAI,EAAE,CACxB,CAAC;IACJ,CAAC;IAGD,eAAe,CAAa,IAAa;QACvC,OAAO,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC1D,CAAC;IAGD,OAAO,CAAa,IAAa;QAC/B,OAAO,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC;IAGD,YAAY,CAAa,IAAa;QACpC,OAAO,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAC1E,CAAC;IAGD,EAAE,CAAgB,IAAU;QAC1B,OAAO,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAGD,MAAM,CAAgB,IAAU,EAAc,IAAa;QACzD,OAAO,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1E,CAAC;IAGD,WAAW,CACM,IAAU,EACb,IAAa;QAEzB,OAAO,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IAGD,wBAAwB,CAAgB,IAAU;QAChD,OAAO,UAAU,CAAC,wBAAwB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACnE,CAAC;IAGD,cAAc,CAAa,IAAa;QACtC,OAAO,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;IAGD,2BAA2B,CAAa,IAAa;QACnD,OAAO,UAAU,CAAC,2BAA2B,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACtE,CAAC;IAGD,aAAa,CAAa,IAAa;QACrC,OAAO,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;CACF;AAjID,wCAiIC;AA/HS;IADP,IAAA,qCAAK,EAAC,cAAS,CAAC;8BACE,cAAS;iDAAC;AAGrB;IADP,IAAA,qCAAK,EAAC,iBAAY,CAAC;8BACE,iBAAY;oDAAC;AAG3B;IADP,IAAA,yBAAS,EAAC,YAAY,EAAE,QAAQ,CAAC;;iDACR;AAGlB;IADP,IAAA,yBAAS,EAAC,iBAAiB,EAAE,QAAQ,CAAC;;oDACV;AAGrB;IADP,IAAA,yBAAS,EAAC,mBAAmB,EAAE,QAAQ,CAAC;;wDACR;AAGjC;IADC,IAAA,oBAAI,EAAC,SAAS,CAAC;IACR,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;4CAQjB;AAGD;IADC,IAAA,oBAAI,EAAC,QAAQ,CAAC;IAEZ,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;2CAWZ;AAGD;IADC,IAAA,mBAAG,EAAC,gCAAgC,CAAC;IAEnC,WAAA,IAAA,yBAAS,EAAC,UAAU,CAAC,CAAA;;;;uDAIvB;AAGD;IADC,IAAA,oBAAI,EAAC,2BAA2B,CAAC;IAE/B,WAAA,IAAA,yBAAS,EAAC,UAAU,CAAC,CAAA;IACrB,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;mDAWZ;AAGD;IADC,IAAA,oBAAI,EAAC,aAAa,CAAC;IACT,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;+CAQpB;AAGD;IADC,IAAA,oBAAI,EAAC,oBAAoB,CAAC;IACV,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;qDAE1B;AAGD;IADC,IAAA,oBAAI,EAAC,UAAU,CAAC;IACR,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;6CAElB;AAGD;IADC,IAAA,oBAAI,EAAC,gBAAgB,CAAC;IACT,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;kDAEvB;AAGD;IADC,IAAA,mBAAG,EAAC,KAAK,CAAC;IACP,WAAA,IAAA,kBAAW,GAAE,CAAA;;;;wCAEhB;AAGD;IADC,IAAA,oBAAI,EAAC,SAAS,CAAC;IACR,WAAA,IAAA,kBAAW,GAAE,CAAA;IAAc,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;4CAE5C;AAGD;IADC,IAAA,oBAAI,EAAC,eAAe,CAAC;IAEnB,WAAA,IAAA,kBAAW,GAAE,CAAA;IACb,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;iDAGZ;AAGD;IADC,IAAA,mBAAG,EAAC,6BAA6B,CAAC;IACT,WAAA,IAAA,kBAAW,GAAE,CAAA;;;;8DAEtC;AAGD;IADC,IAAA,oBAAI,EAAC,kBAAkB,CAAC;IACT,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;oDAEzB;AAGD;IADC,IAAA,oBAAI,EAAC,iCAAiC,CAAC;IACX,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;iEAEtC;AAGD;IADC,IAAA,oBAAI,EAAC,iBAAiB,CAAC;IACT,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;mDAExB"}

package/dist/routes/files.d.ts

@@ -0,0 +1,18 @@
+import { type RequestContext } from "@antelopejs/interface-api";
+import type { User } from "@antelopejs/interface-dms/auth/db";
+declare const FilesController_base: import("@antelopejs/interface-api").ControllerClass<object>;
+export declare class FilesController extends FilesController_base {
+    user: User;
+    presign(context: RequestContext, body: unknown): Promise<import("@antelopejs/interface-file-storage").PresignedUploadResponse>;
+    getMetadata(context: RequestContext, resourceKey: string, storage?: string): Promise<{
+        url: string;
+        expiresAt?: number;
+        resourceKey: string;
+        filename: string;
+        size: number;
+        mimetype: string;
+        lastModified: number;
+        metadata?: Record<string, string>;
+    }>;
+}
+export {};

package/dist/routes/files.js

@@ -0,0 +1,76 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FilesController = void 0;
+const interface_api_1 = require("@antelopejs/interface-api");
+const interface_api_util_1 = require("@antelopejs/interface-api-util");
+const guards_1 = require("@antelopejs/interface-dms/guards");
+const read_1 = require("../attachments/read");
+const uploads_1 = require("../attachments/uploads");
+const upload_constraints_1 = require("../utils/upload-constraints");
+const upload_token_1 = require("../utils/upload-token");
+const file_schema_1 = require("../validation/file.schema");
+const UPLOAD_REJECTED_STATUS = 400;
+const UPLOAD_TOKEN_REJECTED_STATUS = 403;
+class FilesController extends (0, interface_api_1.Controller)("/api/files") {
+    async presign(context, body) {
+        const { filename, size, mimetype, uploadToken } = (0, interface_api_util_1.assertValidation)(body, (v) => file_schema_1.presignBodySchema.parse(v));
+        const claims = (0, upload_token_1.verifyUploadToken)(uploadToken);
+        if (!claims?.field) {
+            throw new interface_api_1.HTTPResult(UPLOAD_TOKEN_REJECTED_STATUS, "Upload rejected: missing or invalid attachment field token.");
+        }
+        try {
+            return await (0, uploads_1.createAttachmentUpload)(context, {
+                filename,
+                size,
+                mimetype,
+                path: claims.path,
+                metadata: { filename },
+            }, claims);
+        }
+        catch (error) {
+            if ((0, upload_constraints_1.isUploadValidationError)(error)) {
+                throw new interface_api_1.HTTPResult(UPLOAD_REJECTED_STATUS, "Upload rejected: the file exceeds the allowed size or type.");
+            }
+            throw error;
+        }
+    }
+    async getMetadata(context, resourceKey, storage) {
+        const query = (0, interface_api_util_1.assertValidation)({ resourceKey, storage }, (value) => file_schema_1.metadataQuerySchema.parse(value));
+        return (0, read_1.readAttachment)(context, query.resourceKey, query.storage);
+    }
+}
+exports.FilesController = FilesController;
+__decorate([
+    (0, guards_1.AuthTenantMember)(),
+    __metadata("design:type", Function)
+], FilesController.prototype, "user", void 0);
+__decorate([
+    (0, interface_api_1.Post)("/presign"),
+    __param(0, (0, interface_api_1.Context)()),
+    __param(1, (0, interface_api_1.JSONBody)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], FilesController.prototype, "presign", null);
+__decorate([
+    (0, interface_api_1.Get)("/metadata"),
+    __param(0, (0, interface_api_1.Context)()),
+    __param(1, (0, interface_api_1.Parameter)("resourceKey", "query")),
+    __param(2, (0, interface_api_1.Parameter)("storage", "query")),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, String, String]),
+    __metadata("design:returntype", Promise)
+], FilesController.prototype, "getMetadata", null);
+//# sourceMappingURL=files.js.map

package/dist/routes/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../src/routes/files.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,6DASmC;AACnC,uEAAkE;AAClE,6DAAoE;AAEpE,8CAAqD;AACrD,oDAAgE;AAChE,oEAAsE;AACtE,wDAA0D;AAC1D,2DAGmC;AAEnC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAEzC,MAAa,eAAgB,SAAQ,IAAA,0BAAU,EAAC,YAAY,CAAC;IAKrD,AAAN,KAAK,CAAC,OAAO,CAAY,OAAuB,EAAc,IAAa;QACzE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,IAAA,qCAAgB,EAChE,IAAI,EACJ,CAAC,CAAC,EAAE,EAAE,CAAC,+BAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAClC,CAAC;QACF,MAAM,MAAM,GAAG,IAAA,gCAAiB,EAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;YACnB,MAAM,IAAI,0BAAU,CAClB,4BAA4B,EAC5B,6DAA6D,CAC9D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,IAAA,gCAAsB,EACjC,OAAO,EACP;gBACE,QAAQ;gBACR,IAAI;gBACJ,QAAQ;gBACR,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,QAAQ,EAAE,EAAE,QAAQ,EAAE;aACvB,EACD,MAAM,CACP,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAA,4CAAuB,EAAC,KAAK,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,0BAAU,CAClB,sBAAsB,EACtB,6DAA6D,CAC9D,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAGK,AAAN,KAAK,CAAC,WAAW,CACJ,OAAuB,EACC,WAAmB,EACvB,OAAgB;QAE/C,MAAM,KAAK,GAAG,IAAA,qCAAgB,EAAC,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CACjE,iCAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CACjC,CAAC;QACF,OAAO,IAAA,qBAAc,EAAC,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACnE,CAAC;CACF;AAnDD,0CAmDC;AAjDS;IADP,IAAA,yBAAgB,GAAE;;6CACA;AAGb;IADL,IAAA,oBAAI,EAAC,UAAU,CAAC;IACF,WAAA,IAAA,uBAAO,GAAE,CAAA;IAA2B,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;8CAiC5D;AAGK;IADL,IAAA,mBAAG,EAAC,WAAW,CAAC;IAEd,WAAA,IAAA,uBAAO,GAAE,CAAA;IACT,WAAA,IAAA,yBAAS,EAAC,aAAa,EAAE,OAAO,CAAC,CAAA;IACjC,WAAA,IAAA,yBAAS,EAAC,SAAS,EAAE,OAAO,CAAC,CAAA;;;;kDAM/B"}

package/dist/routes/index.d.ts

@@ -0,0 +1,5 @@
+export * from "./auth";
+export * from "./files";
+export * from "./onboarding";
+export * from "./realtime";
+export * from "./system-state";

package/dist/routes/index.js

@@ -0,0 +1,22 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./auth"), exports);
+__exportStar(require("./files"), exports);
+__exportStar(require("./onboarding"), exports);
+__exportStar(require("./realtime"), exports);
+__exportStar(require("./system-state"), exports);
+//# sourceMappingURL=index.js.map

package/dist/routes/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/routes/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yCAAuB;AACvB,0CAAwB;AACxB,+CAA6B;AAC7B,6CAA2B;AAC3B,iDAA+B"}

package/dist/routes/onboarding.d.ts

@@ -0,0 +1,12 @@
+import { UserModel } from "@antelopejs/interface-dms/auth/db";
+import { SystemStateModel } from "../db";
+declare const PublicOnboardingController_base: import("@antelopejs/interface-api").ControllerClass<object>;
+export declare class PublicOnboardingController extends PublicOnboardingController_base {
+    model: SystemStateModel;
+    getInformations(userModel: UserModel): Promise<{
+        has_onboarded: boolean;
+    }>;
+    postRegister(userModel: UserModel, body: unknown): Promise<string[]>;
+    private completeOnboarding;
+}
+export {};

package/dist/routes/onboarding.js

@@ -0,0 +1,90 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PublicOnboardingController = void 0;
+const interface_api_1 = require("@antelopejs/interface-api");
+const interface_api_util_1 = require("@antelopejs/interface-api-util");
+const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
+const constants_1 = require("@antelopejs/interface-dms/constants");
+const tenant_ownership_1 = require("@antelopejs/interface-dms/tenant-ownership");
+const db_1 = require("@antelopejs/interface-dms/auth/db");
+const db_2 = require("../db");
+const auth_key_1 = require("../utils/auth-key");
+const onboarding_1 = require("../validation/onboarding");
+class PublicOnboardingController extends (0, interface_api_1.Controller)("/api/onboarding") {
+    async getInformations(userModel) {
+        const settings = await this.model.getConfig();
+        (0, interface_api_util_1.assert)(settings, 428, "error.settings_not_found");
+        if (settings.has_onboarded) {
+            return { has_onboarded: true };
+        }
+        const users = await userModel.table.slice(0, 1).run();
+        const hasUsers = users.length > 0;
+        if (hasUsers) {
+            await this.model.updateConfig({ ...settings, has_onboarded: true });
+        }
+        return { has_onboarded: hasUsers };
+    }
+    async postRegister(userModel, body) {
+        const data = (0, interface_api_util_1.assertValidation)(body, (v) => onboarding_1.onboardingRegisterAdminSchema.parse(v));
+        const users = await userModel.table.slice(0, 1).run();
+        (0, interface_api_util_1.assert)(users.length === 0, 400, "error.admin_already_set");
+        const insertedIds = await userModel.insert({
+            name: data.name,
+            email: data.email,
+            password: data.password,
+            createdAt: new Date(),
+            updatedAt: new Date(),
+            isValidated: true,
+            authKey: (0, auth_key_1.generateAuthKey)(),
+            owner: true,
+            language: "en",
+        });
+        const newUserId = insertedIds[0];
+        (0, interface_api_util_1.assert)(newUserId, 500, "error.user_creation_failed");
+        await (0, tenant_ownership_1.applyTenantOwnership)(userModel, newUserId, constants_1.DEFAULT_TENANT_ID, {
+            roleIds: [],
+            isTenantOwner: true,
+        });
+        await this.completeOnboarding();
+        return insertedIds;
+    }
+    async completeOnboarding() {
+        const settings = await this.model.getConfig();
+        (0, interface_api_util_1.assert)(settings, 428, "error.settings_not_found");
+        (0, interface_api_util_1.assert)(!settings.has_onboarded, 412, "error.onboarding_already_completed");
+        await this.model.updateConfig({ ...settings, has_onboarded: true });
+    }
+}
+exports.PublicOnboardingController = PublicOnboardingController;
+__decorate([
+    (0, interface_database_decorators_1.Model)(db_2.SystemStateModel),
+    __metadata("design:type", db_2.SystemStateModel)
+], PublicOnboardingController.prototype, "model", void 0);
+__decorate([
+    (0, interface_api_1.Get)("/informations"),
+    __param(0, (0, interface_database_decorators_1.Model)(db_1.UserModel)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [db_1.UserModel]),
+    __metadata("design:returntype", Promise)
+], PublicOnboardingController.prototype, "getInformations", null);
+__decorate([
+    (0, interface_api_1.Post)("/register"),
+    __param(0, (0, interface_database_decorators_1.Model)(db_1.UserModel)),
+    __param(1, (0, interface_api_1.JSONBody)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [db_1.UserModel, Object]),
+    __metadata("design:returntype", Promise)
+], PublicOnboardingController.prototype, "postRegister", null);
+//# sourceMappingURL=onboarding.js.map

package/dist/routes/onboarding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding.js","sourceRoot":"","sources":["../../src/routes/onboarding.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,6DAA4E;AAC5E,uEAA0E;AAC1E,6FAAkE;AAClE,mEAAwE;AACxE,iFAAkF;AAClF,0DAA8D;AAC9D,8BAAyC;AACzC,gDAAoD;AACpD,yDAAyE;AAEzE,MAAa,0BAA2B,SAAQ,IAAA,0BAAU,EAAC,iBAAiB,CAAC;IAKrE,AAAN,KAAK,CAAC,eAAe,CAAmB,SAAoB;QAC1D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QAE9C,IAAA,2BAAM,EAAC,QAAQ,EAAE,GAAG,EAAE,0BAA0B,CAAC,CAAC;QAElD,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;YAC3B,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QACjC,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QACtD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QAElC,IAAI,QAAQ,EAAE,CAAC;YAKb,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,GAAG,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;IACrC,CAAC;IAGK,AAAN,KAAK,CAAC,YAAY,CACE,SAAoB,EAC1B,IAAa;QAEzB,MAAM,IAAI,GAAG,IAAA,qCAAgB,EAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CACxC,0CAA6B,CAAC,KAAK,CAAC,CAAC,CAAC,CACvC,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAEtD,IAAA,2BAAM,EAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,GAAG,EAAE,yBAAyB,CAAC,CAAC;QAE3D,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC;YACzC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,WAAW,EAAE,IAAI;YACjB,OAAO,EAAE,IAAA,0BAAe,GAAE;YAC1B,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QACjC,IAAA,2BAAM,EAAC,SAAS,EAAE,GAAG,EAAE,4BAA4B,CAAC,CAAC;QAErD,MAAM,IAAA,uCAAoB,EAAC,SAAS,EAAE,SAAS,EAAE,6BAAiB,EAAE;YAClE,OAAO,EAAE,EAAE;YACX,aAAa,EAAE,IAAI;SACpB,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAEhC,OAAO,WAAW,CAAC;IACrB,CAAC;IAEO,KAAK,CAAC,kBAAkB;QAC9B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QAE9C,IAAA,2BAAM,EAAC,QAAQ,EAAE,GAAG,EAAE,0BAA0B,CAAC,CAAC;QAClD,IAAA,2BAAM,EAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE,oCAAoC,CAAC,CAAC;QAM3E,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,GAAG,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,CAAC;CACF;AA7ED,gEA6EC;AA3ES;IADP,IAAA,qCAAK,EAAC,qBAAgB,CAAC;8BACT,qBAAgB;yDAAC;AAG1B;IADL,IAAA,mBAAG,EAAC,eAAe,CAAC;IACE,WAAA,IAAA,qCAAK,EAAC,cAAS,CAAC,CAAA;;qCAAY,cAAS;;iEAqB3D;AAGK;IADL,IAAA,oBAAI,EAAC,WAAW,CAAC;IAEf,WAAA,IAAA,qCAAK,EAAC,cAAS,CAAC,CAAA;IAChB,WAAA,IAAA,wBAAQ,GAAE,CAAA;;qCADkB,cAAS;;8DAiCvC"}

package/dist/routes/realtime.d.ts

@@ -0,0 +1,15 @@
+import { type RequestContext } from "@antelopejs/interface-api";
+import { RoleModel, TenantMemberModel } from "@antelopejs/interface-dms/db";
+import type { User } from "@antelopejs/interface-dms/auth/db";
+type RealtimeAck = {
+    ok: boolean;
+};
+declare const RealtimeController_base: import("@antelopejs/interface-api").ControllerClass<object>;
+export declare class RealtimeController extends RealtimeController_base {
+    userStream(ctx: RequestContext, user: User): Promise<void>;
+    subscribePage(ctx: RequestContext, pageId: string, sessionId: string, roleModel: RoleModel, memberModel: TenantMemberModel, user: User): Promise<RealtimeAck>;
+    unsubscribePage(sessionId: string): Promise<RealtimeAck>;
+    acquire(ctx: RequestContext, body: unknown, sessionId: string, roleModel: RoleModel, memberModel: TenantMemberModel, user: User): Promise<RealtimeAck>;
+    release(ctx: RequestContext, body: unknown, sessionId: string, roleModel: RoleModel, memberModel: TenantMemberModel, user: User): Promise<RealtimeAck>;
+}
+export {};