@antelopejs/dms 0.5.5 → 0.6.0

package/dist/pages/settings/users/account-credentials.js

@@ -0,0 +1,99 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.listSessions = listSessions;
+exports.revokeSession = revokeSession;
+exports.revokeAllSessions = revokeAllSessions;
+exports.revokeOtherSessions = revokeOtherSessions;
+exports.changePassword = changePassword;
+exports.getSecurityOverview = getSecurityOverview;
+const interface_api_util_1 = require("@antelopejs/interface-api-util");
+const account_notifications_1 = require("../../../utils/account-notifications");
+const session_handoff_1 = require("../../../implementations/dms-auth/session-handoff");
+const session_handoff_2 = require("../../../routes/auth/session-handoff");
+const auth_key_1 = require("../../../utils/auth-key");
+const security_schema_1 = require("../../../validation/security.schema");
+const current_password_1 = require("./current-password");
+const email_change_1 = require("./email-change");
+const profile_helpers_1 = require("./profile-helpers");
+const two_factor_operations_1 = require("./two-factor-operations");
+const fire_and_forget_1 = require("@antelopejs/interface-dms/utils/fire-and-forget");
+const security_attention_1 = require("./security-attention");
+const HTTP_FORBIDDEN = 403;
+const HTTP_NOT_FOUND = 404;
+async function listSessions(user, { sessionModel, authorization }) {
+    const currentSessionId = (0, profile_helpers_1.extractSessionId)(authorization);
+    const sessions = await sessionModel.getByUserId(user._id);
+    return sessions
+        .map((session) => (0, profile_helpers_1.formatSession)(session, currentSessionId))
+        .sort((a, b) => Number(b.isCurrent) - Number(a.isCurrent) ||
+        new Date(b.lastActiveAt).getTime() - new Date(a.lastActiveAt).getTime());
+}
+async function revokeSession(user, id, sessionModel) {
+    const session = await sessionModel.get(id);
+    (0, interface_api_util_1.assert)(session, HTTP_NOT_FOUND, "error.session_not_found");
+    (0, interface_api_util_1.assert)(session.userId === String(user._id), HTTP_FORBIDDEN, "error.unauthorized");
+    await sessionModel.delete(id);
+    return { success: true, count: 1 };
+}
+async function revokeAllSessions(user, sessionModel, userModel) {
+    const sessions = await sessionModel.getByUserId(user._id);
+    await sessionModel.deleteByUserId(user._id);
+    user.authKey = (0, auth_key_1.generateAuthKey)();
+    await userModel.update(user);
+    return { success: true, count: sessions.length };
+}
+async function deleteOtherSessions(user, sessionModel, currentSessionId) {
+    const others = (await sessionModel.getByUserId(user._id)).filter((session) => session._id !== currentSessionId);
+    for (const session of others)
+        await sessionModel.delete(session._id);
+    return others.length;
+}
+async function handOffCurrentSession(user, { sessionModel, authorization }) {
+    const { sessionId, tenantId } = (0, profile_helpers_1.extractSessionClaims)(authorization);
+    if (!sessionId || !tenantId)
+        return undefined;
+    const token = (0, session_handoff_1.generateSessionHandoffToken)(user, tenantId, sessionId);
+    await sessionModel.replaceRefreshToken(sessionId, token);
+    return { endpoint: session_handoff_2.SESSION_HANDOFF_ENDPOINT, payload: { token } };
+}
+async function revokeOtherSessions(user, context) {
+    user.authKey = (0, auth_key_1.generateAuthKey)();
+    await context.userModel.update(user);
+    const count = await deleteOtherSessions(user, context.sessionModel, (0, profile_helpers_1.extractSessionId)(context.authorization));
+    const sessionHandoff = await handOffCurrentSession(user, context);
+    return { success: true, count, sessionHandoff };
+}
+async function changePassword(user, body, context) {
+    const { currentPassword, password } = (0, interface_api_util_1.assertValidation)(body, (value) => security_schema_1.securitySchema.changePassword.parse(value));
+    await (0, current_password_1.assertCurrentPasswordIfSet)(context.userModel, user, currentPassword);
+    const passwordChangedAt = new Date();
+    user.password = password;
+    user.passwordChangedAt = passwordChangedAt;
+    const revoked = await revokeOtherSessions(user, context);
+    (0, fire_and_forget_1.fireAndForget)((0, account_notifications_1.notifyPasswordChanged)(user._id), "password change notification");
+    return {
+        success: true,
+        passwordChangedAt,
+        signedOutSessions: revoked.count,
+        sessionHandoff: revoked.sessionHandoff,
+    };
+}
+async function getSecurityOverview(user, sessionModel) {
+    const [sessions, pendingEmail] = await Promise.all([
+        sessionModel.getByUserId(user._id),
+        (0, email_change_1.findPendingEmail)(user._id),
+    ]);
+    const twoFactor = (0, two_factor_operations_1.getTwoFactorStatus)(user);
+    return {
+        email: user.email,
+        pendingEmail,
+        isValidated: !!user.isValidated,
+        hasPassword: !!user.password,
+        passwordChangedAt: user.passwordChangedAt ?? null,
+        accountCreatedAt: user.createdAt,
+        twoFactor,
+        activeSessions: sessions.length,
+        attention: (0, security_attention_1.securityAttention)(twoFactor),
+    };
+}
+//# sourceMappingURL=account-credentials.js.map

package/dist/pages/settings/users/account-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-credentials.js","sourceRoot":"","sources":["../../../../src/pages/settings/users/account-credentials.ts"],"names":[],"mappings":";;AA6FA,oCAaC;AAOD,sCAcC;AAMD,8CAUC;AAqCD,kDAaC;AAUD,wCAuBC;AAOD,kDAoBC;AA1PD,uEAA0E;AAM1E,gFAA6E;AAC7E,uFAAgG;AAChG,0EAAgF;AAChF,sDAA0D;AAC1D,yEAAqE;AACrE,yDAAgE;AAChE,iDAAkD;AAClD,uDAK2B;AAC3B,mEAGiC;AACjC,qFAAgF;AAChF,6DAG8B;AAE9B,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,cAAc,GAAG,GAAG,CAAC;AA4DpB,KAAK,UAAU,YAAY,CAChC,IAAU,EACV,EAAE,YAAY,EAAE,aAAa,EAAkB;IAE/C,MAAM,gBAAgB,GAAG,IAAA,kCAAgB,EAAC,aAAa,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1D,OAAO,QAAQ;SACZ,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAA,+BAAa,EAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;SAC1D,IAAI,CACH,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACzC,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAC1E,CAAC;AACN,CAAC;AAOM,KAAK,UAAU,aAAa,CACjC,IAAU,EACV,EAAU,EACV,YAA0B;IAE1B,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3C,IAAA,2BAAM,EAAC,OAAO,EAAE,cAAc,EAAE,yBAAyB,CAAC,CAAC;IAC3D,IAAA,2BAAM,EACJ,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EACnC,cAAc,EACd,oBAAoB,CACrB,CAAC;IACF,MAAM,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AACrC,CAAC;AAMM,KAAK,UAAU,iBAAiB,CACrC,IAAU,EACV,YAA0B,EAC1B,SAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1D,MAAM,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,OAAO,GAAG,IAAA,0BAAe,GAAE,CAAC;IACjC,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,IAAU,EACV,YAA0B,EAC1B,gBAAoC;IAEpC,MAAM,MAAM,GAAG,CAAC,MAAM,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAC9D,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,KAAK,gBAAgB,CAC9C,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,MAAM;QAAE,MAAM,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrE,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AAKD,KAAK,UAAU,qBAAqB,CAClC,IAAU,EACV,EAAE,YAAY,EAAE,aAAa,EAAkB;IAE/C,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,IAAA,sCAAoB,EAAC,aAAa,CAAC,CAAC;IACpE,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAA,6CAA2B,EAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACrE,MAAM,YAAY,CAAC,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACzD,OAAO,EAAE,QAAQ,EAAE,0CAAwB,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC;AACpE,CAAC;AAWM,KAAK,UAAU,mBAAmB,CACvC,IAAU,EACV,OAA8B;IAE9B,IAAI,CAAC,OAAO,GAAG,IAAA,0BAAe,GAAE,CAAC;IACjC,MAAM,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,mBAAmB,CACrC,IAAI,EACJ,OAAO,CAAC,YAAY,EACpB,IAAA,kCAAgB,EAAC,OAAO,CAAC,aAAa,CAAC,CACxC,CAAC;IACF,MAAM,cAAc,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAClE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;AAClD,CAAC;AAUM,KAAK,UAAU,cAAc,CAClC,IAAU,EACV,IAAa,EACb,OAA8B;IAE9B,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG,IAAA,qCAAgB,EAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CACrE,gCAAc,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAC3C,CAAC;IACF,MAAM,IAAA,6CAA0B,EAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;IAC3E,MAAM,iBAAiB,GAAG,IAAI,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACzB,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzD,IAAA,+BAAa,EACX,IAAA,6CAAqB,EAAC,IAAI,CAAC,GAAG,CAAC,EAC/B,8BAA8B,CAC/B,CAAC;IACF,OAAO;QACL,OAAO,EAAE,IAAI;QACb,iBAAiB;QACjB,iBAAiB,EAAE,OAAO,CAAC,KAAK;QAChC,cAAc,EAAE,OAAO,CAAC,cAAc;KACvC,CAAC;AACJ,CAAC;AAOM,KAAK,UAAU,mBAAmB,CACvC,IAAU,EACV,YAA0B;IAE1B,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjD,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;QAClC,IAAA,+BAAgB,EAAC,IAAI,CAAC,GAAG,CAAC;KAC3B,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,IAAA,0CAAkB,EAAC,IAAI,CAAC,CAAC;IAC3C,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,YAAY;QACZ,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW;QAC/B,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ;QAC5B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,IAAI;QACjD,gBAAgB,EAAE,IAAI,CAAC,SAAS;QAChC,SAAS;QACT,cAAc,EAAE,QAAQ,CAAC,MAAM;QAC/B,SAAS,EAAE,IAAA,sCAAiB,EAAC,SAAS,CAAC;KACxC,CAAC;AACJ,CAAC"}

package/dist/pages/settings/users/account-data-store.d.ts

@@ -0,0 +1,25 @@
+import { type User } from "@antelopejs/interface-dms/auth/db";
+import { type UserDeletedHookPayload } from "@antelopejs/interface-dms/hooks";
+import { type AccountExport, type AccountMembershipSource, type DeletionBlocker } from "./account-data";
+export interface AccountDeletionResult {
+    success: true;
+}
+export interface AccountDeletionImpact {
+    email: string;
+    hasPassword: boolean;
+    memberships: number;
+    sessions: number;
+    notifications: number;
+    externalIdentities: number;
+    invitesSent: number;
+    blockers: DeletionBlocker[];
+}
+export declare function roleNamesOf(tenantId: string, roleIds: string[]): Promise<string[]>;
+export declare function loadMemberships(userId: string): Promise<AccountMembershipSource[]>;
+export declare function loadAccountExport(user: User): Promise<AccountExport>;
+export declare function loadDeletionBlockers(user: User, memberships: AccountMembershipSource[]): Promise<DeletionBlocker[]>;
+export declare function loadDeletionImpact(user: User): Promise<AccountDeletionImpact>;
+export declare function selfDeletionPayload(user: User, memberships: AccountMembershipSource[]): UserDeletedHookPayload;
+export declare function deleteAccount(user: User): Promise<void>;
+export declare function requireStoredUser(user: User): Promise<User>;
+export declare function requestAccountDeletion(user: User, body: unknown): Promise<AccountDeletionResult>;

package/dist/pages/settings/users/account-data-store.js

@@ -0,0 +1,188 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.roleNamesOf = roleNamesOf;
+exports.loadMemberships = loadMemberships;
+exports.loadAccountExport = loadAccountExport;
+exports.loadDeletionBlockers = loadDeletionBlockers;
+exports.loadDeletionImpact = loadDeletionImpact;
+exports.selfDeletionPayload = selfDeletionPayload;
+exports.deleteAccount = deleteAccount;
+exports.requireStoredUser = requireStoredUser;
+exports.requestAccountDeletion = requestAccountDeletion;
+const interface_api_util_1 = require("@antelopejs/interface-api-util");
+const logging_1 = require("@antelopejs/interface-core/logging");
+const interface_database_1 = require("@antelopejs/interface-database");
+const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
+const db_1 = require("@antelopejs/interface-dms/auth/db");
+const db_2 = require("@antelopejs/interface-dms/db");
+const hooks_1 = require("@antelopejs/interface-dms/hooks");
+const interface_file_storage_1 = require("@antelopejs/interface-file-storage");
+const db_3 = require("../../../db");
+const export_jobs_1 = require("../../../utils/export-jobs");
+const account_deletion_schema_1 = require("../../../validation/account-deletion.schema");
+const current_password_1 = require("./current-password");
+const account_data_1 = require("./account-data");
+const HTTP_CONFLICT = 409;
+const DATA_I18N = "$page.settings.profile.data";
+const LAST_OWNER_ERROR = `${DATA_I18N}.delete_error_last_owner`;
+async function roleNamesOf(tenantId, roleIds) {
+    if (roleIds.length === 0)
+        return [];
+    const roles = await (0, interface_database_decorators_1.GetModel)(db_2.RoleModel, tenantId).getBy("_id", ...roleIds);
+    return roles.map((role) => role.name);
+}
+async function tenantNames(tenantIds) {
+    const tenants = await (0, interface_database_decorators_1.GetModel)(db_2.TenantModel).getMany(tenantIds);
+    return new Map(tenants.map((tenant) => [tenant._id, tenant.name]));
+}
+async function loadMemberships(userId) {
+    const rows = await (0, interface_database_decorators_1.GetModel)(db_2.TenantMemberModel, interface_database_1.CROSS_INSTANCE).listByUserWithTenantIds(userId);
+    const names = await tenantNames(rows.map((row) => row.tenantId));
+    return Promise.all(rows.map(async ({ tenantId, member }) => ({
+        tenantId,
+        tenantName: names.get(tenantId) ?? tenantId,
+        member,
+        roleNames: await roleNamesOf(tenantId, member.roleIds ?? []),
+        otherOwners: await (0, interface_database_decorators_1.GetModel)(db_2.TenantMemberModel, tenantId).countOwnersExcluding([userId]),
+    })));
+}
+async function invitesSentIn(tenantId, userId) {
+    const model = (0, interface_database_decorators_1.GetModel)(db_2.UserInviteModel, tenantId);
+    const rows = await model.table
+        .filter((row) => row.key("invitedBy").eq(userId))
+        .run();
+    const invites = rows
+        .map((row) => db_2.UserInviteModel.fromDatabase(row))
+        .filter((invite) => invite !== undefined);
+    return Promise.all(invites.map(async (invite) => ({
+        tenantId,
+        invite,
+        roleNames: await roleNamesOf(tenantId, invite.roles_ids ?? []),
+    })));
+}
+async function loadInvitesSent(userId, memberships) {
+    const perTenant = await Promise.all(memberships.map(({ tenantId }) => invitesSentIn(tenantId, userId)));
+    return perTenant.flat();
+}
+async function loadAccountExport(user) {
+    const memberships = await loadMemberships(user._id);
+    const [preferences, notifications, sessions, identities, invitesSent] = await Promise.all([
+        (0, interface_database_decorators_1.GetModel)(db_3.UserNotificationPreferencesModel).getByUserId(user._id),
+        (0, interface_database_decorators_1.GetModel)(db_3.UserNotificationsModel).getByUserId(user._id),
+        (0, interface_database_decorators_1.GetModel)(db_1.SessionModel).getByUserId(user._id),
+        (0, interface_database_decorators_1.GetModel)(db_1.UserExternalIdentityModel).getByUserId(user._id),
+        loadInvitesSent(user._id, memberships),
+    ]);
+    return (0, account_data_1.buildAccountExport)({
+        user,
+        notificationPreferences: preferences?.preferences ?? {},
+        memberships,
+        notifications,
+        sessions,
+        identities,
+        invitesSent,
+        exportedAt: new Date(),
+    });
+}
+async function loadDeletionBlockers(user, memberships) {
+    const isPlatformOwner = user.owner === true;
+    const otherPlatformOwners = isPlatformOwner
+        ? await (0, interface_database_decorators_1.GetModel)(db_1.UserModel).countOwnersExcluding([user._id])
+        : 0;
+    return (0, account_data_1.findDeletionBlockers)(memberships, {
+        isPlatformOwner,
+        otherPlatformOwners,
+    });
+}
+async function loadDeletionImpact(user) {
+    const memberships = await loadMemberships(user._id);
+    const [sessions, notifications, identities, invitesSent, blockers] = await Promise.all([
+        (0, interface_database_decorators_1.GetModel)(db_1.SessionModel).getByUserId(user._id),
+        (0, interface_database_decorators_1.GetModel)(db_3.UserNotificationsModel).countFeed(user._id),
+        (0, interface_database_decorators_1.GetModel)(db_1.UserExternalIdentityModel).getByUserId(user._id),
+        loadInvitesSent(user._id, memberships),
+        loadDeletionBlockers(user, memberships),
+    ]);
+    return {
+        email: user.email,
+        hasPassword: !!user.password,
+        memberships: memberships.length,
+        sessions: sessions.length,
+        notifications: notifications.all,
+        externalIdentities: identities.length,
+        invitesSent: invitesSent.length,
+        blockers,
+    };
+}
+async function assertTenantKeepsAnOwner(userId, { tenantId, member }) {
+    if (!member.isTenantOwner)
+        return;
+    const otherOwners = await (0, interface_database_decorators_1.GetModel)(db_2.TenantMemberModel, tenantId).countOwnersExcluding([userId]);
+    (0, interface_api_util_1.assert)(otherOwners > 0, HTTP_CONFLICT, LAST_OWNER_ERROR);
+}
+async function leaveTenants(userId, memberships) {
+    for (const membership of memberships) {
+        const { tenantId, member } = membership;
+        await assertTenantKeepsAnOwner(userId, membership);
+        await (0, export_jobs_1.deleteUserExportsInTenant)(tenantId, userId);
+        await (0, interface_database_decorators_1.GetModel)(db_2.TenantMemberModel, tenantId).delete(member._id);
+        await (0, hooks_1.ExecuteHooks)(hooks_1.Hook.MEMBER_REMOVED, { tenantId, userIds: [userId] });
+    }
+}
+async function loadDeletableMemberships(user) {
+    const memberships = await loadMemberships(user._id);
+    const blockers = await loadDeletionBlockers(user, memberships);
+    (0, interface_api_util_1.assert)(blockers.length === 0, HTTP_CONFLICT, LAST_OWNER_ERROR);
+    return memberships;
+}
+function selfDeletionPayload(user, memberships) {
+    return {
+        userId: user._id,
+        email: user.email,
+        tenantIds: memberships.map(({ tenantId }) => tenantId),
+        reason: "self",
+    };
+}
+async function announceDeletion(user, memberships) {
+    try {
+        await (0, hooks_1.ExecuteHooks)(hooks_1.Hook.USER_DELETED, selfDeletionPayload(user, memberships));
+    }
+    catch (error) {
+        logging_1.Logging.Error("[DMS] USER_DELETED hook failed:", error);
+    }
+}
+async function deleteAccount(user) {
+    const memberships = await loadDeletableMemberships(user);
+    await leaveTenants(user._id, memberships);
+    await (0, interface_database_decorators_1.GetModel)(db_3.UserNotificationsModel).purgeUser(user._id);
+    await (0, interface_database_decorators_1.GetModel)(db_3.UserNotificationPreferencesModel).purgeUser(user._id);
+    await (0, interface_database_decorators_1.GetModel)(db_3.UserKnownDevicesModel).purgeUser(user._id);
+    await (0, interface_database_decorators_1.GetModel)(db_3.SignInAttemptsModel).purgeUser(user._id);
+    await (0, interface_database_decorators_1.GetModel)(db_3.UserEmailChangesModel).purgeUser(user._id);
+    await (0, interface_database_decorators_1.GetModel)(db_1.UserExternalIdentityModel).deleteByUserId(user._id);
+    await (0, interface_database_decorators_1.GetModel)(db_1.SessionModel).deleteByUserId(user._id);
+    await (0, interface_database_decorators_1.GetModel)(db_1.UserModel).delete(user._id);
+    if (user.avatar?.key) {
+        void (0, interface_file_storage_1.DeleteFile)(user.avatar.key).catch(() => undefined);
+    }
+    await announceDeletion(user, memberships);
+}
+const HTTP_BAD_REQUEST = 400;
+const HTTP_NOT_FOUND = 404;
+async function requireStoredUser(user) {
+    const stored = await (0, interface_database_decorators_1.GetModel)(db_1.UserModel).get(user._id);
+    (0, interface_api_util_1.assert)(stored, HTTP_NOT_FOUND, "error.user_not_found");
+    return stored;
+}
+async function requestAccountDeletion(user, body) {
+    const input = (0, interface_api_util_1.assertValidation)(body, (value) => account_deletion_schema_1.accountDeletionSchema.parse(value));
+    const userModel = (0, interface_database_decorators_1.GetModel)(db_1.UserModel);
+    const stored = await requireStoredUser(user);
+    if (stored.password) {
+        await (0, current_password_1.assertCurrentPassword)(userModel, stored, input.password);
+    }
+    (0, interface_api_util_1.assert)((0, account_data_1.isDeletionConfirmed)(stored, input.confirmation), HTTP_BAD_REQUEST, `${DATA_I18N}.delete_error_confirmation`);
+    await deleteAccount(stored);
+    return { success: true };
+}
+//# sourceMappingURL=account-data-store.js.map

package/dist/pages/settings/users/account-data-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-data-store.js","sourceRoot":"","sources":["../../../../src/pages/settings/users/account-data-store.ts"],"names":[],"mappings":";;AAsEA,kCAOC;AAQD,0CAoBC;AAkCD,8CAoBC;AAGD,oDAYC;AAGD,gDAsBC;AA+CD,kDAUC;AA6BD,sCAeC;AAMD,8CAIC;AASD,wDAmBC;AA9UD,uEAA0E;AAC1E,gEAA6D;AAC7D,uEAAgE;AAChE,6FAAqE;AACrE,0DAK2C;AAC3C,qDAMsC;AACtC,2DAIyC;AACzC,+EAAgE;AAChE,oCAMqB;AACrB,4DAAuE;AACvE,yFAAoF;AACpF,yDAA2D;AAC3D,iDAQwB;AAExB,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,SAAS,GAAG,6BAA6B,CAAC;AAChD,MAAM,gBAAgB,GAAG,GAAG,SAAS,0BAA0B,CAAC;AAqBzD,KAAK,UAAU,WAAW,CAC/B,QAAgB,EAChB,OAAiB;IAEjB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,IAAA,wCAAQ,EAAC,cAAS,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,SAAmB;IAC5C,MAAM,OAAO,GAAG,MAAM,IAAA,wCAAQ,EAAC,gBAAW,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/D,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC;AAGM,KAAK,UAAU,eAAe,CACnC,MAAc;IAEd,MAAM,IAAI,GAAG,MAAM,IAAA,wCAAQ,EACzB,sBAAiB,EACjB,mCAAc,CACf,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjE,OAAO,OAAO,CAAC,GAAG,CAChB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACxC,QAAQ;QACR,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,QAAQ;QAC3C,MAAM;QACN,SAAS,EAAE,MAAM,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;QAC5D,WAAW,EAAE,MAAM,IAAA,wCAAQ,EACzB,sBAAiB,EACjB,QAAQ,CACT,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;KACjC,CAAC,CAAC,CACJ,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,QAAgB,EAChB,MAAc;IAEd,MAAM,KAAK,GAAG,IAAA,wCAAQ,EAAC,oBAAe,EAAE,QAAQ,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,KAAK;SAC3B,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;SAChD,GAAG,EAAE,CAAC;IACT,MAAM,OAAO,GAAG,IAAI;SACjB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,oBAAe,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;SAC/C,MAAM,CAAC,CAAC,MAAM,EAAwB,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IAClE,OAAO,OAAO,CAAC,GAAG,CAChB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7B,QAAQ;QACR,MAAM;QACN,SAAS,EAAE,MAAM,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;KAC/D,CAAC,CAAC,CACJ,CAAC;AACJ,CAAC;AAGD,KAAK,UAAU,eAAe,CAC5B,MAAc,EACd,WAAsC;IAEtC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CACjC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CACnE,CAAC;IACF,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC;AAC1B,CAAC;AAGM,KAAK,UAAU,iBAAiB,CAAC,IAAU;IAChD,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpD,MAAM,CAAC,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,CAAC,GACnE,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,IAAA,wCAAQ,EAAC,qCAAgC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;QAChE,IAAA,wCAAQ,EAAC,2BAAsB,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;QACtD,IAAA,wCAAQ,EAAC,iBAAY,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;QAC5C,IAAA,wCAAQ,EAAC,8BAAyB,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;QACzD,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC;KACvC,CAAC,CAAC;IACL,OAAO,IAAA,iCAAkB,EAAC;QACxB,IAAI;QACJ,uBAAuB,EAAE,WAAW,EAAE,WAAW,IAAI,EAAE;QACvD,WAAW;QACX,aAAa;QACb,QAAQ;QACR,UAAU;QACV,WAAW;QACX,UAAU,EAAE,IAAI,IAAI,EAAE;KACvB,CAAC,CAAC;AACL,CAAC;AAGM,KAAK,UAAU,oBAAoB,CACxC,IAAU,EACV,WAAsC;IAEtC,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC;IAC5C,MAAM,mBAAmB,GAAG,eAAe;QACzC,CAAC,CAAC,MAAM,IAAA,wCAAQ,EAAC,cAAS,CAAC,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC,CAAC;IACN,OAAO,IAAA,mCAAoB,EAAC,WAAW,EAAE;QACvC,eAAe;QACf,mBAAmB;KACpB,CAAC,CAAC;AACL,CAAC;AAGM,KAAK,UAAU,kBAAkB,CACtC,IAAU;IAEV,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpD,MAAM,CAAC,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAC,GAChE,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,IAAA,wCAAQ,EAAC,iBAAY,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;QAC5C,IAAA,wCAAQ,EAAC,2BAAsB,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;QACpD,IAAA,wCAAQ,EAAC,8BAAyB,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;QACzD,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC;QACtC,oBAAoB,CAAC,IAAI,EAAE,WAAW,CAAC;KACxC,CAAC,CAAC;IACL,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ;QAC5B,WAAW,EAAE,WAAW,CAAC,MAAM;QAC/B,QAAQ,EAAE,QAAQ,CAAC,MAAM;QACzB,aAAa,EAAE,aAAa,CAAC,GAAG;QAChC,kBAAkB,EAAE,UAAU,CAAC,MAAM;QACrC,WAAW,EAAE,WAAW,CAAC,MAAM;QAC/B,QAAQ;KACT,CAAC;AACJ,CAAC;AAID,KAAK,UAAU,wBAAwB,CACrC,MAAc,EACd,EAAE,QAAQ,EAAE,MAAM,EAA2B;IAE7C,IAAI,CAAC,MAAM,CAAC,aAAa;QAAE,OAAO;IAClC,MAAM,WAAW,GAAG,MAAM,IAAA,wCAAQ,EAChC,sBAAiB,EACjB,QAAQ,CACT,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACjC,IAAA,2BAAM,EAAC,WAAW,GAAG,CAAC,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC;AAC3D,CAAC;AAMD,KAAK,UAAU,YAAY,CACzB,MAAc,EACd,WAAsC;IAEtC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;QACxC,MAAM,wBAAwB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACnD,MAAM,IAAA,uCAAyB,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,IAAA,wCAAQ,EAAC,sBAAiB,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/D,MAAM,IAAA,oBAAY,EAAC,YAAI,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAMD,KAAK,UAAU,wBAAwB,CACrC,IAAU;IAEV,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC/D,IAAA,2BAAM,EAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAC/D,OAAO,WAAW,CAAC;AACrB,CAAC;AAGD,SAAgB,mBAAmB,CACjC,IAAU,EACV,WAAsC;IAEtC,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,GAAG;QAChB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC;QACtD,MAAM,EAAE,MAAM;KACf,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,IAAU,EACV,WAAsC;IAEtC,IAAI,CAAC;QACH,MAAM,IAAA,oBAAY,EAChB,YAAI,CAAC,YAAY,EACjB,mBAAmB,CAAC,IAAI,EAAE,WAAW,CAAC,CACvC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,iBAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAeM,KAAK,UAAU,aAAa,CAAC,IAAU;IAC5C,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC1C,MAAM,IAAA,wCAAQ,EAAC,2BAAsB,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3D,MAAM,IAAA,wCAAQ,EAAC,qCAAgC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrE,MAAM,IAAA,wCAAQ,EAAC,0BAAqB,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1D,MAAM,IAAA,wCAAQ,EAAC,wBAAmB,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxD,MAAM,IAAA,wCAAQ,EAAC,0BAAqB,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1D,MAAM,IAAA,wCAAQ,EAAC,8BAAyB,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnE,MAAM,IAAA,wCAAQ,EAAC,iBAAY,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,IAAA,wCAAQ,EAAC,cAAS,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC;QACrB,KAAK,IAAA,mCAAU,EAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,gBAAgB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,cAAc,GAAG,GAAG,CAAC;AAGpB,KAAK,UAAU,iBAAiB,CAAC,IAAU;IAChD,MAAM,MAAM,GAAG,MAAM,IAAA,wCAAQ,EAAC,cAAS,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvD,IAAA,2BAAM,EAAC,MAAM,EAAE,cAAc,EAAE,sBAAsB,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC;AAChB,CAAC;AASM,KAAK,UAAU,sBAAsB,CAC1C,IAAU,EACV,IAAa;IAEb,MAAM,KAAK,GAAG,IAAA,qCAAgB,EAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAC7C,+CAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,CACnC,CAAC;IACF,MAAM,SAAS,GAAG,IAAA,wCAAQ,EAAC,cAAS,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,MAAM,IAAA,wCAAqB,EAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjE,CAAC;IACD,IAAA,2BAAM,EACJ,IAAA,kCAAmB,EAAC,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC,EAC/C,gBAAgB,EAChB,GAAG,SAAS,4BAA4B,CACzC,CAAC;IACF,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;IAC5B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/dist/pages/settings/users/account-data.d.ts

@@ -0,0 +1,76 @@
+import { type Session, type User, type UserExternalIdentity } from "@antelopejs/interface-dms/auth/db";
+import type { TenantMember, UserInvite } from "@antelopejs/interface-dms/db";
+import type { UserNotification } from "../../../db";
+import { type RegionalPreferences } from "./regional-preferences";
+export declare const ACCOUNT_EXPORT_FORMAT = "dms-account-export";
+export declare const ACCOUNT_EXPORT_VERSION = 1;
+export interface AccountMembershipSource {
+    tenantId: string;
+    tenantName: string;
+    member: TenantMember;
+    roleNames: string[];
+    otherOwners: number;
+}
+export interface AccountInviteSource {
+    tenantId: string;
+    invite: UserInvite;
+    roleNames: string[];
+}
+export interface AccountExportSources {
+    user: User;
+    notificationPreferences: Record<string, boolean>;
+    memberships: AccountMembershipSource[];
+    notifications: UserNotification[];
+    sessions: Session[];
+    identities: UserExternalIdentity[];
+    invitesSent: AccountInviteSource[];
+    exportedAt: Date;
+}
+export interface AccountExportProfile {
+    id: string;
+    name: string;
+    email: string;
+    emailValidated: boolean;
+    avatar: string | null;
+    isPlatformOwner: boolean;
+    hasPassword: boolean;
+    passwordChangedAt: Date | null;
+    twoFactorMethods: string[];
+    createdAt: Date;
+    updatedAt: Date;
+    lastActiveAt: Date | null;
+}
+export interface AccountExportPreferences extends RegionalPreferences {
+    notifications: Record<string, boolean>;
+}
+export interface AccountExport {
+    format: typeof ACCOUNT_EXPORT_FORMAT;
+    version: typeof ACCOUNT_EXPORT_VERSION;
+    exportedAt: Date;
+    profile: AccountExportProfile;
+    preferences: AccountExportPreferences;
+    memberships: Record<string, unknown>[];
+    notifications: Record<string, unknown>[];
+    sessions: Record<string, unknown>[];
+    externalIdentities: Record<string, unknown>[];
+    invitesSent: Record<string, unknown>[];
+}
+export declare function buildAccountExport(sources: AccountExportSources): AccountExport;
+export interface DeletionBlocker {
+    kind: "tenant" | "platform";
+    tenantId?: string;
+    tenantName?: string;
+}
+export interface PlatformOwnership {
+    isPlatformOwner: boolean;
+    otherPlatformOwners: number;
+}
+export declare function findDeletionBlockers(memberships: AccountMembershipSource[], platform: PlatformOwnership): DeletionBlocker[];
+export declare function isDeletionConfirmed(user: User, confirmation: string): boolean;
+export declare class AccountExportThrottle {
+    private readonly windowMs;
+    private readonly lastExportAt;
+    constructor(windowMs: number);
+    tryAcquire(userId: string, now: number): boolean;
+    private prune;
+}

package/dist/pages/settings/users/account-data.js

@@ -0,0 +1,131 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AccountExportThrottle = exports.ACCOUNT_EXPORT_VERSION = exports.ACCOUNT_EXPORT_FORMAT = void 0;
+exports.buildAccountExport = buildAccountExport;
+exports.findDeletionBlockers = findDeletionBlockers;
+exports.isDeletionConfirmed = isDeletionConfirmed;
+const db_1 = require("@antelopejs/interface-dms/auth/db");
+const regional_preferences_1 = require("./regional-preferences");
+exports.ACCOUNT_EXPORT_FORMAT = "dms-account-export";
+exports.ACCOUNT_EXPORT_VERSION = 1;
+function exportProfile(user) {
+    return {
+        id: user._id,
+        name: user.name,
+        email: user.email,
+        emailValidated: user.isValidated === true,
+        avatar: user.avatar?.key ?? null,
+        isPlatformOwner: user.owner === true,
+        hasPassword: !!user.password,
+        passwordChangedAt: user.passwordChangedAt ?? null,
+        twoFactorMethods: user.twoFactorMethods ?? [],
+        createdAt: user.createdAt,
+        updatedAt: user.updatedAt,
+        lastActiveAt: user.lastActiveAt ?? null,
+    };
+}
+const exportMembership = (source) => ({
+    tenantId: source.tenantId,
+    tenantName: source.tenantName,
+    isTenantOwner: source.member.isTenantOwner === true,
+    roles: source.roleNames,
+    joinedAt: source.member.joinedAt,
+    invitedBy: source.member.invitedBy ?? null,
+});
+const exportNotification = (notification) => ({
+    id: notification._id,
+    title: notification.title,
+    description: notification.description,
+    linkTo: notification.linkTo,
+    params: notification.params,
+    tone: notification.tone,
+    categoryId: notification.categoryId,
+    subjectId: notification.subjectId,
+    isRead: notification.isRead,
+    createdAt: notification.createdAt,
+});
+const exportSession = (session) => ({
+    id: session._id,
+    browser: session.browser,
+    os: session.os,
+    deviceType: session.deviceType,
+    ip: session.ip,
+    location: session.location,
+    userAgent: session.userAgent,
+    createdAt: session.createdAt,
+    lastActiveAt: session.lastActiveAt,
+});
+const exportIdentity = (identity) => ({
+    provider: identity.provider,
+    email: identity.email,
+    linkedAt: identity.createdAt,
+    lastLoginAt: identity.lastLoginAt,
+});
+const exportInvite = (source, now) => ({
+    tenantId: source.tenantId,
+    email: source.invite.email,
+    firstname: source.invite.firstname,
+    lastname: source.invite.lastname,
+    roles: source.roleNames,
+    asTenantOwner: source.invite.asTenantOwner === true,
+    createdAt: source.invite.createdAt,
+    expiresAt: source.invite.expiresAt,
+    status: new Date(source.invite.expiresAt) > now ? "pending" : "expired",
+});
+function buildAccountExport(sources) {
+    const { user, exportedAt } = sources;
+    return {
+        format: exports.ACCOUNT_EXPORT_FORMAT,
+        version: exports.ACCOUNT_EXPORT_VERSION,
+        exportedAt,
+        profile: exportProfile(user),
+        preferences: {
+            ...(0, regional_preferences_1.readRegionalPreferences)(user),
+            notifications: { ...sources.notificationPreferences },
+        },
+        memberships: sources.memberships.map(exportMembership),
+        notifications: sources.notifications.map(exportNotification),
+        sessions: sources.sessions.map(exportSession),
+        externalIdentities: sources.identities.map(exportIdentity),
+        invitesSent: sources.invitesSent.map((invite) => exportInvite(invite, exportedAt)),
+    };
+}
+function findDeletionBlockers(memberships, platform) {
+    const blockers = memberships
+        .filter((source) => source.member.isTenantOwner === true && source.otherOwners === 0)
+        .map((source) => ({
+        kind: "tenant",
+        tenantId: source.tenantId,
+        tenantName: source.tenantName,
+    }));
+    if (platform.isPlatformOwner && platform.otherPlatformOwners === 0) {
+        blockers.push({ kind: "platform" });
+    }
+    return blockers;
+}
+function isDeletionConfirmed(user, confirmation) {
+    return (0, db_1.normalizeEmail)(confirmation) === (0, db_1.normalizeEmail)(user.email);
+}
+class AccountExportThrottle {
+    windowMs;
+    lastExportAt = new Map();
+    constructor(windowMs) {
+        this.windowMs = windowMs;
+    }
+    tryAcquire(userId, now) {
+        const last = this.lastExportAt.get(userId);
+        if (last !== undefined && now - last < this.windowMs)
+            return false;
+        this.lastExportAt.set(userId, now);
+        this.prune(now);
+        return true;
+    }
+    prune(now) {
+        for (const [userId, at] of this.lastExportAt) {
+            if (now - at >= this.windowMs)
+                this.lastExportAt.delete(userId);
+        }
+    }
+}
+exports.AccountExportThrottle = AccountExportThrottle;
+//# sourceMappingURL=account-data.js.map

package/dist/pages/settings/users/account-data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-data.js","sourceRoot":"","sources":["../../../../src/pages/settings/users/account-data.ts"],"names":[],"mappings":";;;AA+JA,gDAqBC;AAqBD,oDAkBC;AAGD,kDAEC;AA7ND,0DAK2C;AAG3C,iEAGgC;AAEnB,QAAA,qBAAqB,GAAG,oBAAoB,CAAC;AAC7C,QAAA,sBAAsB,GAAG,CAAC,CAAC;AAkExC,SAAS,aAAa,CAAC,IAAU;IAC/B,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,GAAG;QACZ,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,cAAc,EAAE,IAAI,CAAC,WAAW,KAAK,IAAI;QACzC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,IAAI;QAChC,eAAe,EAAE,IAAI,CAAC,KAAK,KAAK,IAAI;QACpC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ;QAC5B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,IAAI;QACjD,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,EAAE;QAC7C,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI;KACxC,CAAC;AACJ,CAAC;AAED,MAAM,gBAAgB,GAAG,CAAC,MAA+B,EAAE,EAAE,CAAC,CAAC;IAC7D,QAAQ,EAAE,MAAM,CAAC,QAAQ;IACzB,UAAU,EAAE,MAAM,CAAC,UAAU;IAC7B,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,KAAK,IAAI;IACnD,KAAK,EAAE,MAAM,CAAC,SAAS;IACvB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;IAChC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI;CAC3C,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,YAA8B,EAAE,EAAE,CAAC,CAAC;IAC9D,EAAE,EAAE,YAAY,CAAC,GAAG;IACpB,KAAK,EAAE,YAAY,CAAC,KAAK;IACzB,WAAW,EAAE,YAAY,CAAC,WAAW;IACrC,MAAM,EAAE,YAAY,CAAC,MAAM;IAC3B,MAAM,EAAE,YAAY,CAAC,MAAM;IAC3B,IAAI,EAAE,YAAY,CAAC,IAAI;IACvB,UAAU,EAAE,YAAY,CAAC,UAAU;IACnC,SAAS,EAAE,YAAY,CAAC,SAAS;IACjC,MAAM,EAAE,YAAY,CAAC,MAAM;IAC3B,SAAS,EAAE,YAAY,CAAC,SAAS;CAClC,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,CAAC,OAAgB,EAAE,EAAE,CAAC,CAAC;IAC3C,EAAE,EAAE,OAAO,CAAC,GAAG;IACf,OAAO,EAAE,OAAO,CAAC,OAAO;IACxB,EAAE,EAAE,OAAO,CAAC,EAAE;IACd,UAAU,EAAE,OAAO,CAAC,UAAU;IAC9B,EAAE,EAAE,OAAO,CAAC,EAAE;IACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;IAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;IAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;IAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;CACnC,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,CAAC,QAA8B,EAAE,EAAE,CAAC,CAAC;IAC1D,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;IACrB,QAAQ,EAAE,QAAQ,CAAC,SAAS;IAC5B,WAAW,EAAE,QAAQ,CAAC,WAAW;CAClC,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,CAAC,MAA2B,EAAE,GAAS,EAAE,EAAE,CAAC,CAAC;IAChE,QAAQ,EAAE,MAAM,CAAC,QAAQ;IACzB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK;IAC1B,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS;IAClC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;IAChC,KAAK,EAAE,MAAM,CAAC,SAAS;IACvB,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,KAAK,IAAI;IACnD,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS;IAClC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS;IAClC,MAAM,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;CACxE,CAAC,CAAC;AAQH,SAAgB,kBAAkB,CAChC,OAA6B;IAE7B,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IACrC,OAAO;QACL,MAAM,EAAE,6BAAqB;QAC7B,OAAO,EAAE,8BAAsB;QAC/B,UAAU;QACV,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC;QAC5B,WAAW,EAAE;YACX,GAAG,IAAA,8CAAuB,EAAC,IAAI,CAAC;YAChC,aAAa,EAAE,EAAE,GAAG,OAAO,CAAC,uBAAuB,EAAE;SACtD;QACD,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,gBAAgB,CAAC;QACtD,aAAa,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAC5D,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC;QAC7C,kBAAkB,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC;QAC1D,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAC9C,YAAY,CAAC,MAAM,EAAE,UAAU,CAAC,CACjC;KACF,CAAC;AACJ,CAAC;AAqBD,SAAgB,oBAAoB,CAClC,WAAsC,EACtC,QAA2B;IAE3B,MAAM,QAAQ,GAAsB,WAAW;SAC5C,MAAM,CACL,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,MAAM,CAAC,aAAa,KAAK,IAAI,IAAI,MAAM,CAAC,WAAW,KAAK,CAAC,CACnE;SACA,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAChB,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC,CAAC,CAAC;IACN,IAAI,QAAQ,CAAC,eAAe,IAAI,QAAQ,CAAC,mBAAmB,KAAK,CAAC,EAAE,CAAC;QACnE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAGD,SAAgB,mBAAmB,CAAC,IAAU,EAAE,YAAoB;IAClE,OAAO,IAAA,mBAAc,EAAC,YAAY,CAAC,KAAK,IAAA,mBAAc,EAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AAMD,MAAa,qBAAqB;IAGH;IAFZ,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE1D,YAA6B,QAAgB;QAAhB,aAAQ,GAAR,QAAQ,CAAQ;IAAG,CAAC;IAGjD,UAAU,CAAC,MAAc,EAAE,GAAW;QACpC,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QACnE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,GAAW;QACvB,KAAK,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7C,IAAI,GAAG,GAAG,EAAE,IAAI,IAAI,CAAC,QAAQ;gBAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;CACF;AAnBD,sDAmBC"}

package/dist/pages/settings/users/appearance.d.ts

@@ -4,6 +4,10 @@ declare const AppearanceSettingsController_base: {
     location: string;
 };
 export declare class AppearanceSettingsController extends AppearanceSettingsController_base {
-    static appearanceComponent: import("@antelopejs/interface-dms").ComponentBuilder<unknown>;
+    static themeComponent: import("@antelopejs/interface-dms").ComponentBuilder<import("@antelopejs/interface-dms/base").SectionProps>;
+    static scaleComponent: import("@antelopejs/interface-dms").ComponentBuilder<import("@antelopejs/interface-dms/base").SectionProps>;
+    static accessibilityComponent: import("@antelopejs/interface-dms").ComponentBuilder<import("@antelopejs/interface-dms/base").SectionProps>;
+    static sidebarComponent: import("@antelopejs/interface-dms").ComponentBuilder<import("@antelopejs/interface-dms/base").SectionProps>;
+    static developerComponent: import("@antelopejs/interface-dms").ComponentBuilder<import("@antelopejs/interface-dms/base").SectionProps>;
 }
 export {};

package/dist/pages/settings/users/appearance.js

@@ -9,18 +9,51 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.AppearanceSettingsController = void 0;
 const page_1 = require("@antelopejs/interface-dms/page");
 const custom_1 = require("@antelopejs/interface-dms/base/custom");
-const layouts_1 = require("@antelopejs/interface-dms/base/layouts");
+const section_1 = require("@antelopejs/interface-dms/base/section");
 const category_1 = require("./category");
+const TEXTS = "$page.settings.appearance";
+function appearanceGroup(group) {
+    const meta = { name: group.title, icon: group.icon };
+    return (0, section_1.Section)({ title: group.title, description: group.description })
+        .child("controls", (0, custom_1.CustomComponent)(group.component).meta(meta))
+        .meta(meta);
+}
 let AppearanceSettingsController = class AppearanceSettingsController extends (0, page_1.PageController)("appearance", {
     displayName: "$menu.appearance",
     category: category_1.userCategory,
     icon: "i-ph-swatches",
-    order: 7,
+    order: 5,
     description: "$page.settings.description.appearance",
-}, (0, layouts_1.FormPageLayout)()) {
-    static appearanceComponent = (0, custom_1.CustomComponent)("DmsSettingsAppearance").meta({
-        name: "$menu.appearance",
-        icon: "i-ph-swatches",
+}) {
+    static themeComponent = appearanceGroup({
+        title: `${TEXTS}.theme_title`,
+        description: `${TEXTS}.theme_description`,
+        icon: "i-ph-circle-half",
+        component: "DmsAppearanceTheme",
+    });
+    static scaleComponent = appearanceGroup({
+        title: `${TEXTS}.scale_title`,
+        description: `${TEXTS}.scale_description`,
+        icon: "i-ph-text-aa",
+        component: "DmsAppearanceScale",
+    });
+    static accessibilityComponent = appearanceGroup({
+        title: `${TEXTS}.accessibility.title`,
+        description: `${TEXTS}.accessibility.description`,
+        icon: "i-ph-person-arms-spread",
+        component: "DmsAppearanceAccessibility",
+    });
+    static sidebarComponent = appearanceGroup({
+        title: `${TEXTS}.sidebar_title`,
+        description: `${TEXTS}.sidebar_description`,
+        icon: "i-ph-sidebar-simple",
+        component: "DmsAppearanceSidebar",
+    });
+    static developerComponent = appearanceGroup({
+        title: `${TEXTS}.developer_title`,
+        description: `${TEXTS}.developer_description`,
+        icon: "i-ph-brackets-curly",
+        component: "DmsAppearanceDeveloper",
     });
 };
 exports.AppearanceSettingsController = AppearanceSettingsController;

package/dist/pages/settings/users/appearance.js.map

@@ -1 +1 @@
-{"version":3,"file":"appearance.js","sourceRoot":"","sources":["../../../../src/pages/settings/users/appearance.ts"],"names":[],"mappings":";;;;;;;;;AAAA,yDAA8E;AAC9E,kEAAwE;AACxE,oEAAwE;AACxE,yCAA0C;AAGnC,IAAM,4BAA4B,GAAlC,MAAM,4BAA6B,SAAQ,IAAA,qBAAc,EAC9D,YAAY,EACZ;IACE,WAAW,EAAE,kBAAkB;IAC/B,QAAQ,EAAE,uBAAY;IACtB,IAAI,EAAE,eAAe;IACrB,KAAK,EAAE,CAAC;IACR,WAAW,EAAE,uCAAuC;CACrD,EACD,IAAA,wBAAc,GAAE,CACjB;IACC,MAAM,CAAC,mBAAmB,GAAG,IAAA,wBAAe,EAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC;QACzE,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,eAAe;KACtB,CAAC,CAAC;;AAdQ,oEAA4B;uCAA5B,4BAA4B;IADxC,IAAA,mBAAY,GAAE;GACF,4BAA4B,CAexC"}
+{"version":3,"file":"appearance.js","sourceRoot":"","sources":["../../../../src/pages/settings/users/appearance.ts"],"names":[],"mappings":";;;;;;;;;AAAA,yDAA8E;AAC9E,kEAAwE;AACxE,oEAAiE;AACjE,yCAA0C;AAE1C,MAAM,KAAK,GAAG,2BAA2B,CAAC;AAe1C,SAAS,eAAe,CAAC,KAAsB;IAC7C,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IACrD,OAAO,IAAA,iBAAO,EAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;SACnE,KAAK,CAAC,UAAU,EAAE,IAAA,wBAAe,EAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAC9D,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAGM,IAAM,4BAA4B,GAAlC,MAAM,4BAA6B,SAAQ,IAAA,qBAAc,EAAC,YAAY,EAAE;IAC7E,WAAW,EAAE,kBAAkB;IAC/B,QAAQ,EAAE,uBAAY;IACtB,IAAI,EAAE,eAAe;IACrB,KAAK,EAAE,CAAC;IACR,WAAW,EAAE,uCAAuC;CACrD,CAAC;IACA,MAAM,CAAC,cAAc,GAAG,eAAe,CAAC;QACtC,KAAK,EAAE,GAAG,KAAK,cAAc;QAC7B,WAAW,EAAE,GAAG,KAAK,oBAAoB;QACzC,IAAI,EAAE,kBAAkB;QACxB,SAAS,EAAE,oBAAoB;KAChC,CAAC,CAAC;IAEH,MAAM,CAAC,cAAc,GAAG,eAAe,CAAC;QACtC,KAAK,EAAE,GAAG,KAAK,cAAc;QAC7B,WAAW,EAAE,GAAG,KAAK,oBAAoB;QACzC,IAAI,EAAE,cAAc;QACpB,SAAS,EAAE,oBAAoB;KAChC,CAAC,CAAC;IAEH,MAAM,CAAC,sBAAsB,GAAG,eAAe,CAAC;QAC9C,KAAK,EAAE,GAAG,KAAK,sBAAsB;QACrC,WAAW,EAAE,GAAG,KAAK,4BAA4B;QACjD,IAAI,EAAE,yBAAyB;QAC/B,SAAS,EAAE,4BAA4B;KACxC,CAAC,CAAC;IAEH,MAAM,CAAC,gBAAgB,GAAG,eAAe,CAAC;QACxC,KAAK,EAAE,GAAG,KAAK,gBAAgB;QAC/B,WAAW,EAAE,GAAG,KAAK,sBAAsB;QAC3C,IAAI,EAAE,qBAAqB;QAC3B,SAAS,EAAE,sBAAsB;KAClC,CAAC,CAAC;IAEH,MAAM,CAAC,kBAAkB,GAAG,eAAe,CAAC;QAC1C,KAAK,EAAE,GAAG,KAAK,kBAAkB;QACjC,WAAW,EAAE,GAAG,KAAK,wBAAwB;QAC7C,IAAI,EAAE,qBAAqB;QAC3B,SAAS,EAAE,wBAAwB;KACpC,CAAC,CAAC;;AAxCQ,oEAA4B;uCAA5B,4BAA4B;IADxC,IAAA,mBAAY,GAAE;GACF,4BAA4B,CAyCxC"}

package/dist/pages/settings/users/category.js

@@ -4,9 +4,11 @@ exports.userCategory = void 0;
 const page_1 = require("@antelopejs/interface-dms/page");
 exports.userCategory = (0, page_1.Category)("user", {
     category: page_1.settingsCategory,
-    displayName: "$menu.user_settings",
+    displayName: "$page.settings.shell.account",
+    description: "$page.settings.overview.account_description",
     urlSlug: "user",
     icon: "i-ph-users",
     order: 1,
+    memberAccess: true,
 });
 //# sourceMappingURL=category.js.map