@crowi/api-contract 2.0.0-alpha.14 → 2.0.0-alpha.15

package/dist/index.mjs

@@ -1047,7 +1047,7 @@ var adminStorageRoutes = {
 };
 
 // src/contracts/admin/users.ts
-import { createRoute as createRoute8 } from "@hono/zod-openapi";
+import { createRoute as createRoute8, z as z14 } from "@hono/zod-openapi";
 
 // src/schemas/admin/users.ts
 import { z as z13 } from "@hono/zod-openapi";
@@ -1101,8 +1101,11 @@ var ListAdminUsersRequestSchema = z13.object({
   page: z13.coerce.number().int().min(1).optional().default(1),
   limit: z13.coerce.number().int().min(1).max(100).optional().default(50)
 });
+var AdminUserListItemSchema = UserPublicSchema.extend({
+  linkedProviders: z13.array(z13.string())
+});
 var ListAdminUsersResponseSchema = z13.object({
-  users: z13.array(UserPublicSchema),
+  users: z13.array(AdminUserListItemSchema),
   pager: AdminPagerSchema
 });
 var SearchAdminUsersByEmailRequestSchema = z13.object({
@@ -1137,8 +1140,7 @@ var InviteUsersResponseSchema = z13.object({
   results: z13.array(InvitedUserResultSchema)
 });
 var EditAdminUserRequestSchema = z13.object({
-  name: z13.string().min(1),
-  email: z13.string().email()
+  name: z13.string().min(1)
 });
 var AdminUserMutationResponseSchema = z13.object({
   user: UserPublicSchema
@@ -1150,6 +1152,32 @@ var ResetPasswordResponseSchema = z13.object({
 var UpdateAdminUserEmailRequestSchema = z13.object({
   email: z13.string().email()
 });
+var EmailLockedByFederatedIdentityErrorSchema = z13.object({
+  error: z13.object({
+    code: z13.literal("EMAIL_LOCKED_BY_FEDERATED_IDENTITY"),
+    message: z13.string()
+  })
+});
+var AdminUserIdentityParamSchema = AdminUserIdParamSchema.extend({
+  provider: z13.string()
+});
+var UnlinkUserIdentityResponseSchema = z13.object({
+  user: UserPublicSchema,
+  passwordIssued: z13.boolean(),
+  newPassword: z13.string().optional()
+});
+var UnlinkUserIdentityNotFoundErrorSchema = z13.object({
+  error: z13.object({
+    code: z13.enum(["NOT_FOUND", "NOT_LINKED"]),
+    message: z13.string()
+  })
+});
+var UnlinkUserIdentityConflictErrorSchema = z13.object({
+  error: z13.object({
+    code: z13.enum(["CANNOT_UNLINK_SELF", "PASSWORD_AUTH_DISABLED"]),
+    message: z13.string()
+  })
+});
 var DeleteAdminUserResponseSchema = z13.object({
   deletedId: z13.string()
 });
@@ -1253,7 +1281,7 @@ var editUserRoute = createRoute8({
   path: "/admin/users/{id}",
   tags: ["admin.users"],
   security: [{ bearerAuth: [] }],
-  summary: "Update a user's name and email",
+  summary: "Update a user's name (email changes go through PUT /admin/users/{id}/email)",
   request: {
     params: AdminUserIdParamSchema,
     body: {
@@ -1281,10 +1309,6 @@ var editUserRoute = createRoute8({
       description: "User not found",
       content: { "application/json": { schema: NotFoundErrorSchema } }
     },
-    409: {
-      description: "Email already in use by another user",
-      content: { "application/json": { schema: ConflictErrorSchema } }
-    },
     500: {
       description: "Internal server error",
       content: { "application/json": { schema: InternalServerErrorSchema } }
@@ -1545,8 +1569,48 @@ var updateUserEmailRoute = createRoute8({
       content: { "application/json": { schema: NotFoundErrorSchema } }
     },
     409: {
-      description: "Email already in use by another user",
-      content: { "application/json": { schema: ConflictErrorSchema } }
+      description: "Email already in use by another user, or locked by a linked federated identity",
+      content: { "application/json": { schema: z14.union([ConflictErrorSchema, EmailLockedByFederatedIdentityErrorSchema]) } }
+    },
+    500: {
+      description: "Internal server error",
+      content: { "application/json": { schema: InternalServerErrorSchema } }
+    }
+  }
+});
+var unlinkUserIdentityRoute = createRoute8({
+  method: "delete",
+  path: "/admin/users/{id}/identities/{provider}",
+  tags: ["admin.users"],
+  security: [{ bearerAuth: [] }],
+  summary: "Unlink a user's federated identity for a provider (admin-initiated)",
+  request: {
+    params: AdminUserIdentityParamSchema
+  },
+  responses: {
+    200: {
+      description: "Identity removed; passwordIssued/newPassword report whether a password was generated",
+      content: { "application/json": { schema: UnlinkUserIdentityResponseSchema } }
+    },
+    400: {
+      description: "Invalid id",
+      content: { "application/json": { schema: ValidationErrorSchema } }
+    },
+    401: {
+      description: "Authentication required",
+      content: { "application/json": { schema: AuthenticationRequiredErrorSchema } }
+    },
+    403: {
+      description: "Admin permission required",
+      content: { "application/json": { schema: AdminRequiredErrorSchema } }
+    },
+    404: {
+      description: "User not found, or the user has no identity for this provider",
+      content: { "application/json": { schema: UnlinkUserIdentityNotFoundErrorSchema } }
+    },
+    409: {
+      description: "Refused: the target is the operating admin themself, or password auth is disabled instance-wide",
+      content: { "application/json": { schema: UnlinkUserIdentityConflictErrorSchema } }
     },
     500: {
       description: "Internal server error",
@@ -1631,6 +1695,7 @@ var adminUsersRoutes = {
   resetPasswordRoute,
   resendInviteRoute,
   updateUserEmailRoute,
+  unlinkUserIdentityRoute,
   pendingUsersCountRoute,
   deleteUserRoute
 };
@@ -7101,6 +7166,7 @@ var stubSearchAdminUsersByEmail = { users: [] };
 var stubInviteUsers = { results: [] };
 var stubAdminUserMutation = { user: stubUserPublic };
 var stubResetPassword = { user: stubUserPublic, newPassword: "" };
+var stubUnlinkUserIdentity = { user: stubUserPublic, passwordIssued: false };
 var stubDeleteAdminUser = { deletedId: "" };
 var stubPendingUsersCount = { count: 0 };
 var stubListPlugins = { plugins: [] };
@@ -7146,7 +7212,7 @@ var bookmarkBacklinkCommentRevisionChain = new OpenAPIHono().openapi(bookmarkRou
 var pageChain = new OpenAPIHono().openapi(pageRoutes.getPageRoute, (c) => c.json(stubPageWithRevision, 200)).openapi(pageRoutes.listPagesRoute, (c) => c.json(stubListPages, 200)).openapi(pageRoutes.listPageChildrenRoute, (c) => c.json(stubListPageChildren, 200)).openapi(pageRoutes.createPageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.updatePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.setPageGrantRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.seenPageRoute, (c) => c.json(stubSeenUsers, 200)).openapi(pageRoutes.getSeenUsersRoute, (c) => c.json(stubSeenUsers, 200)).openapi(pageRoutes.likePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.unlikePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.claimPageLinkAccessRoute, (c) => c.json({ ...stubPageWithRevision, granted: false }, 200)).openapi(pageRoutes.getWatchStatusRoute, (c) => c.json(stubWatchStatus, 200)).openapi(pageRoutes.setWatchStatusRoute, (c) => c.json(stubWatchStatus, 200)).openapi(pageRoutes.deletePageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.revertDeletedPageRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.revertToRevisionRoute, (c) => c.json(stubPageResponse, 200)).openapi(pageRoutes.renamePageRoute, (c) => c.json({ ...stubPageResponse, renamed_count: 1 }, 200)).openapi(pageRoutes.renameSubtreeRoute, (c) => c.json({ renamed_count: 0 }, 200)).openapi(pagePreviewRoutes.previewPageRoute, (c) => c.json(stubPreview, 200)).openapi(pageCollabRoutes.getYjsTokenRoute, (c) => c.json(stubWsToken, 200)).openapi(presenceRoutes.getPresenceTokenRoute, (c) => c.json(stubPresenceToken, 200)).openapi(presenceRoutes.getLikersRoute, (c) => c.json(stubLikers, 200));
 var lateContractApp = new OpenAPIHono().openapi(draftRoutes.createDraftRoute, (c) => c.json(stubCreateDraft, 201)).openapi(draftRoutes.listDraftsRoute, (c) => c.json(stubListDrafts, 200)).openapi(draftRoutes.cancelDraftRoute, (c) => c.json(stubCreateDraft, 200)).openapi(autocompleteRoutes.autocompleteUsersRoute, (c) => c.json(stubAutocomplete, 200)).openapi(autocompleteRoutes.autocompletePagesRoute, (c) => c.json(stubAutocomplete, 200)).openapi(attachmentRoutes.getAttachmentUsageRoute, (c) => c.json(stubAttachmentUsage, 200)).openapi(attachmentRoutes.listAttachmentsRoute, (c) => c.json(stubListAttachments, 200)).openapi(attachmentRoutes.addAttachmentRoute, (c) => c.json(stubAddAttachment, 200)).openapi(attachmentRoutes.uploadAttachmentRoute, (c) => c.json(stubUploadAttachment, 200)).openapi(attachmentRoutes.getAttachmentMetaRoute, (c) => c.json(stubAttachmentMeta, 200)).openapi(attachmentRoutes.removeAttachmentRoute, (c) => c.json(stubRemoveAttachment, 200)).openapi(attachmentRoutes.getUploadPolicyRoute, (c) => c.json(stubUploadPolicy, 200)).openapi(searchRoutes.searchPagesRoute, (c) => c.json(stubSearchPages, 200)).openapi(adminCryptoRoutes.getCryptoStatusRoute, (c) => c.json(stubCryptoStatus, 200)).openapi(adminCryptoRoutes.reencryptAllRoute, (c) => c.json(stubReencrypt, 200)).openapi(notificationRoutes.listNotificationsRoute, (c) => c.json(stubListNotifications, 200)).openapi(notificationRoutes.markAllAsReadRoute, (c) => c.json(stubMarkAllAsRead, 200)).openapi(notificationRoutes.getNotificationsTokenRoute, (c) => c.json(stubNotificationsToken, 200)).openapi(notificationRoutes.getUnreadCountRoute, (c) => c.json(stubNotificationStatus, 200)).openapi(notificationRoutes.openNotificationRoute, (c) => c.json(stubOpenNotification, 200));
 var adminSettingsContractApp = new OpenAPIHono().openapi(adminAppRoutes.getAppSettingsRoute, (c) => c.json(stubGetAppSettings, 200)).openapi(adminAppRoutes.updateAppSettingsRoute, (c) => c.json(stubUpdateAppSettings, 200)).openapi(adminAuthRoutes.getAuthSettingsRoute, (c) => c.json(stubAuthSettings, 200)).openapi(adminAuthRoutes.updateAuthSettingsRoute, (c) => c.json(stubAuthSettings, 200)).openapi(adminSecurityRoutes.getSecuritySettingsRoute, (c) => c.json(stubSecuritySettings, 200)).openapi(adminSecurityRoutes.updateSecuritySettingsRoute, (c) => c.json(stubSecuritySettings, 200)).openapi(adminMailRoutes.getMailSettingsRoute, (c) => c.json(stubMailSettings, 200)).openapi(adminMailRoutes.updateMailSettingsRoute, (c) => c.json(stubUpdateMailSettings, 200)).openapi(adminMailRoutes.sendTestMailRoute, (c) => c.json(stubSendTestMail, 200)).openapi(adminStorageRoutes.getStorageStatusRoute, (c) => c.json(stubStorageStatus, 200)).openapi(adminSearchRoutes.getSearchStatusRoute, (c) => c.json(stubSearchStatus, 200));
-var adminUsersPluginsContractApp = new OpenAPIHono().openapi(adminUsersRoutes.listUsersRoute, (c) => c.json(stubListAdminUsers, 200)).openapi(adminUsersRoutes.searchUsersByEmailRoute, (c) => c.json(stubSearchAdminUsersByEmail, 200)).openapi(adminUsersRoutes.pendingUsersCountRoute, (c) => c.json(stubPendingUsersCount, 200)).openapi(adminUsersRoutes.inviteUsersRoute, (c) => c.json(stubInviteUsers, 200)).openapi(adminUsersRoutes.editUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.makeAdminRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.removeFromAdminRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.activateUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.suspendUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.resetPasswordRoute, (c) => c.json(stubResetPassword, 200)).openapi(adminUsersRoutes.resendInviteRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.updateUserEmailRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.deleteUserRoute, (c) => c.json(stubDeleteAdminUser, 200)).openapi(adminPluginsRoutes.listPluginsRoute, (c) => c.json(stubListPlugins, 200)).openapi(adminPluginsRoutes.getPluginConfigRoute, (c) => c.json(stubPluginConfig, 200)).openapi(adminPluginsRoutes.updatePluginConfigRoute, (c) => c.json(stubUpdatePluginConfig, 200)).openapi(adminPluginsRoutes.getPluginReadinessRoute, (c) => c.json(stubPluginReadiness, 200)).openapi(adminPluginsRoutes.clearRenderCacheAllRoute, (c) => c.json(stubClearRenderCache, 200)).openapi(adminPluginsRoutes.clearRenderCachePluginRoute, (c) => c.json(stubClearRenderCache, 200));
+var adminUsersPluginsContractApp = new OpenAPIHono().openapi(adminUsersRoutes.listUsersRoute, (c) => c.json(stubListAdminUsers, 200)).openapi(adminUsersRoutes.searchUsersByEmailRoute, (c) => c.json(stubSearchAdminUsersByEmail, 200)).openapi(adminUsersRoutes.pendingUsersCountRoute, (c) => c.json(stubPendingUsersCount, 200)).openapi(adminUsersRoutes.inviteUsersRoute, (c) => c.json(stubInviteUsers, 200)).openapi(adminUsersRoutes.editUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.makeAdminRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.removeFromAdminRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.activateUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.suspendUserRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.resetPasswordRoute, (c) => c.json(stubResetPassword, 200)).openapi(adminUsersRoutes.resendInviteRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.updateUserEmailRoute, (c) => c.json(stubAdminUserMutation, 200)).openapi(adminUsersRoutes.unlinkUserIdentityRoute, (c) => c.json(stubUnlinkUserIdentity, 200)).openapi(adminUsersRoutes.deleteUserRoute, (c) => c.json(stubDeleteAdminUser, 200)).openapi(adminPluginsRoutes.listPluginsRoute, (c) => c.json(stubListPlugins, 200)).openapi(adminPluginsRoutes.getPluginConfigRoute, (c) => c.json(stubPluginConfig, 200)).openapi(adminPluginsRoutes.updatePluginConfigRoute, (c) => c.json(stubUpdatePluginConfig, 200)).openapi(adminPluginsRoutes.getPluginReadinessRoute, (c) => c.json(stubPluginReadiness, 200)).openapi(adminPluginsRoutes.clearRenderCacheAllRoute, (c) => c.json(stubClearRenderCache, 200)).openapi(adminPluginsRoutes.clearRenderCachePluginRoute, (c) => c.json(stubClearRenderCache, 200));
 var oauthContractApp = new OpenAPIHono().openapi(oauthRoutes.authorizeRoute, (c) => c.json(stubAuthorize, 200)).openapi(oauthRoutes.tokenRoute, (c) => c.json(stubToken, 200)).openapi(oauthRoutes.revokeRoute, (c) => c.json(stubRevoke, 200)).openapi(oauthRoutes.discoveryRoute, (c) => c.json(stubDiscovery, 200)).openapi(oauthRoutes.deviceAuthorizeRoute, (c) => c.json(stubDeviceAuthorize, 200)).openapi(oauthRoutes.deviceInfoRoute, (c) => c.json(stubDeviceInfo, 200)).openapi(oauthRoutes.deviceVerifyRoute, (c) => c.json(stubDeviceVerify, 200)).openapi(oauthRoutes.clientInfoRoute, (c) => c.json(stubClientInfo, 200));
 var federatedAuthContractApp = new OpenAPIHono().openapi(federatedAuthRoutes.listFederatedProvidersRoute, (c) => c.json(stubProviderList, 200)).openapi(federatedAuthRoutes.startFederatedProviderRoute, (c) => c.redirect("", 302)).openapi(federatedAuthRoutes.callbackFederatedProviderRoute, (c) => c.redirect("", 302)).openapi(federatedAuthRoutes.federatedHandoffRoute, (c) => c.json(stubTokens, 200)).openapi(federatedAuthRoutes.listLinkedAuthProvidersRoute, (c) => c.json({ identities: [] }, 200)).openapi(federatedAuthRoutes.createAuthProviderLinkGrantRoute, (c) => c.json({ linkGrant: "" }, 200)).openapi(federatedAuthRoutes.unlinkAuthProviderRoute, (c) => c.body(null, 204));
 var federatedRegistrationContractApp = new OpenAPIHono().openapi(federatedRegistrationRoutes.getFederatedRegistrationRoute, (c) => c.json(stubFederatedRegistrationSnapshot, 200)).openapi(federatedRegistrationRoutes.submitFederatedRegistrationRoute, (c) => c.json({ status: "approval_required" }, 200)).openapi(federatedRegistrationRoutes.logoutFederatedRegistrationRoute, (c) => c.body(null, 204));
@@ -7384,6 +7450,8 @@ export {
   AdminRequiredErrorSchema,
   AdminSidebarSection,
   AdminUserIdParamSchema,
+  AdminUserIdentityParamSchema,
+  AdminUserListItemSchema,
   AdminUserMutationResponseSchema,
   ApiErrorSchema,
   AppInfoResponseSchema,
@@ -7467,6 +7535,7 @@ export {
   DraftSummarySchema,
   ERROR_CODES,
   EditAdminUserRequestSchema,
+  EmailLockedByFederatedIdentityErrorSchema,
   EncryptionNotConfiguredErrorSchema,
   ErrorCodeSchema,
   FRONTMATTER_MAX_ENTRIES,
@@ -7679,6 +7748,9 @@ export {
   TokenResponseSchema,
   UPLOAD_ALLOWED_MIME,
   UnlinkAuthProviderErrorSchema,
+  UnlinkUserIdentityConflictErrorSchema,
+  UnlinkUserIdentityNotFoundErrorSchema,
+  UnlinkUserIdentityResponseSchema,
   UpdateAdminUserEmailRequestSchema,
   UpdateAppSettingsRequestSchema,
   UpdateAppSettingsResponseSchema,
@@ -7876,6 +7948,7 @@ export {
   tokenRoute,
   unlikePageRoute,
   unlinkAuthProviderRoute,
+  unlinkUserIdentityRoute,
   unwrapRenderedAst,
   updateAppSettingsRoute,
   updateAuthSettingsRoute,