@better-update/cli 0.24.1 → 0.24.2

package/dist/index.mjs

@@ -33,7 +33,7 @@ var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 //#endregion
 //#region package.json
-var version = "0.24.1";
+var version = "0.24.2";
 
 //#endregion
 //#region src/lib/interactive-mode.ts
@@ -67,7 +67,7 @@ const cookieSecurity = HttpApiSecurity.apiKey({
 	in: "cookie"
 });
 var Authentication = class extends HttpApiMiddleware.Tag()("api/Authentication", {
-	failure: Unauthorized,
+	failure: Schema.Union(Unauthorized, Forbidden),
 	provides: AuthContext,
 	security: {
 		bearer: bearerSecurity,
@@ -130,6 +130,52 @@ const UploadHeaders = Schema.Record({
 	value: Schema.String
 });
 
+//#endregion
+//#region ../../packages/api/src/domain/admin.ts
+/**
+* A platform user as seen by a superadmin on the dashboard `/admin` page.
+* `role` is the GLOBAL Better Auth admin-plugin role (e.g. "admin"), distinct
+* from per-organization membership roles. `approved` is the dev-phase gate.
+*/
+const AdminUser = Schema.Struct({
+	id: Schema.String,
+	name: Schema.String,
+	email: Schema.String,
+	role: Schema.NullOr(Schema.String),
+	approved: Schema.Boolean,
+	banned: Schema.Boolean,
+	createdAt: DateTimeString
+});
+const AdminUserStatus = Schema.Literal("all", "pending", "approved");
+const ListAdminUsersParams = Schema.Struct({
+	search: Schema.optional(Schema.String),
+	status: Schema.optional(AdminUserStatus),
+	...PaginationParams.fields
+});
+
+//#endregion
+//#region ../../packages/api/src/groups/admin.ts
+const userIdParam = HttpApiSchema.param("userId", Schema.String);
+/**
+* Platform administration, restricted to superadmins (Better Auth admin-plugin
+* `role = "admin"`). The dev-phase approval gate lives here: superadmins list
+* users and approve/revoke their access. All endpoints fail `Forbidden` for
+* non-superadmins.
+*/
+var AdminGroup = class extends HttpApiGroup.make("admin").add(HttpApiEndpoint.get("listUsers", "/api/admin/users").setUrlParams(ListAdminUsersParams).addSuccess(pageResult(AdminUser)).annotateContext(OpenApi.annotations({
+	title: "List users",
+	description: "List platform users with approval status (superadmin only)"
+}))).add(HttpApiEndpoint.post("approveUser")`/api/admin/users/${userIdParam}/approve`.addSuccess(AdminUser).annotateContext(OpenApi.annotations({
+	title: "Approve user",
+	description: "Grant a user access to the app (superadmin only)"
+}))).add(HttpApiEndpoint.post("revokeUser")`/api/admin/users/${userIdParam}/revoke`.addSuccess(AdminUser).annotateContext(OpenApi.annotations({
+	title: "Revoke user approval",
+	description: "Revoke a user's access to the app (superadmin only)"
+}))).addError(Forbidden).addError(NotFound).annotateContext(OpenApi.annotations({
+	title: "Admin",
+	description: "Superadmin platform administration"
+})) {};
+
 //#endregion
 //#region ../../packages/api/src/domain/analytics.ts
 const PeriodLiteral = Schema.Literal("1d", "7d", "30d", "90d");
@@ -2108,7 +2154,7 @@ var WebhooksGroup = class extends HttpApiGroup.make("webhooks").add(HttpApiEndpo
 
 //#endregion
 //#region ../../packages/api/src/api.ts
-var ManagementApi = class extends HttpApi.make("management-api").add(ProjectsGroup).add(BranchesGroup).add(ChannelsGroup).add(UpdatesGroup).add(AssetsGroup).add(AnalyticsGroup).add(BuildsGroup).add(EnvVarsGroup).add(FingerprintsGroup).add(AuditLogsGroup).add(DevicesGroup).add(AppleTeamsGroup).add(AppleDistributionCertificatesGroup).add(ApplePushKeysGroup).add(AscApiKeysGroup).add(AppleProvisioningProfilesGroup).add(GoogleServiceAccountKeysGroup).add(IosBundleConfigurationsGroup).add(IosAppMetadataGroup).add(SubmissionsGroup).add(AndroidApplicationIdentifiersGroup).add(AndroidUploadKeystoresGroup).add(AndroidBuildCredentialsGroup).add(BuildCredentialsGroup).add(UserEncryptionKeysGroup).add(OrgVaultGroup).add(MeGroup).add(WebhooksGroup).middleware(Authentication).annotateContext(OpenApi.annotations({
+var ManagementApi = class extends HttpApi.make("management-api").add(ProjectsGroup).add(BranchesGroup).add(ChannelsGroup).add(UpdatesGroup).add(AssetsGroup).add(AnalyticsGroup).add(BuildsGroup).add(EnvVarsGroup).add(FingerprintsGroup).add(AuditLogsGroup).add(DevicesGroup).add(AppleTeamsGroup).add(AppleDistributionCertificatesGroup).add(ApplePushKeysGroup).add(AscApiKeysGroup).add(AppleProvisioningProfilesGroup).add(GoogleServiceAccountKeysGroup).add(IosBundleConfigurationsGroup).add(IosAppMetadataGroup).add(SubmissionsGroup).add(AndroidApplicationIdentifiersGroup).add(AndroidUploadKeystoresGroup).add(AndroidBuildCredentialsGroup).add(BuildCredentialsGroup).add(UserEncryptionKeysGroup).add(OrgVaultGroup).add(MeGroup).add(WebhooksGroup).add(AdminGroup).middleware(Authentication).annotateContext(OpenApi.annotations({
 	title: "Better Update Management API",
 	version: "1.0.0",
 	description: "Management API for OTA update publishing, deployment, and analytics"