@crowi/api 2.0.0-alpha.0

package/dist/hono/handlers/installer.js

@@ -0,0 +1,93 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerInstallerRoutes = exports.isAppInstalled = void 0;
+/**
+ * RFC-0006 Phase 4 Batch 1 — `installer` resource Hono port.
+ *
+ * Replaces `packages/api/src/routes/ts-rest/installer.ts`. Behaviour is
+ * preserved byte-for-byte:
+ *
+ *  - `GET /installer` reports `'installer_required'` / `'already_installed'`
+ *    based on a live DB count of `{ ns: 'crowi' }` Config docs (the boot
+ *    snapshot from `ConfigService` is stale right after the first install,
+ *    so we always count).
+ *  - `POST /installer/createAdmin` refuses with HTTP 400 + `status: 'error'`
+ *    once the app is installed; otherwise creates a user, makes them admin,
+ *    flips the install flag, refreshes the config cache and returns HTTP
+ *    200 + `status: 'ok'`. User-creation failures still come back as HTTP
+ *    200 + `status: 'error'` with an `errors[]` array — the legacy
+ *    controller did the same so the installer UI's message rendering keeps
+ *    working unchanged.
+ *
+ * No authentication: the route is invoked before any user exists, so it
+ * stays on Hono's public surface (no `createJwtAuth` wrap).
+ */
+const api_contract_1 = require("@crowi/api-contract");
+const debug_1 = __importDefault(require("debug"));
+const debug = (0, debug_1.default)('crowi:hono:handlers:installer');
+/**
+ * The ConfigService keeps a boot-time snapshot of all Config docs in
+ * memory, but `Config.applicationInstall()` writes new docs without
+ * refreshing it — so `crowi.getConfig().crowi` is unreliable as an
+ * installed-state oracle. Always count from the DB instead, and
+ * refresh the cache after a successful install so other request paths
+ * see the new values without a server restart.
+ */
+const isAppInstalled = async (Config) => {
+    const count = await Config.countDocuments({ ns: 'crowi' }).exec();
+    return count > 0;
+};
+exports.isAppInstalled = isAppInstalled;
+const registerInstallerRoutes = (app, crowi) => {
+    const Config = crowi.model('Config');
+    const User = crowi.model('User');
+    return app
+        .openapi(api_contract_1.getInstallerStatusRoute, async (c) => {
+        const installed = await (0, exports.isAppInstalled)(Config);
+        return c.json({ status: installed ? 'already_installed' : 'installer_required' }, 200);
+    })
+        .openapi(api_contract_1.createAdminRoute, async (c) => {
+        if (await (0, exports.isAppInstalled)(Config)) {
+            return c.json({ status: 'error', message: 'Application is already installed' }, 400);
+        }
+        const { name, username, email, password } = c.req.valid('json').registerForm;
+        try {
+            const userData = await new Promise((resolve, reject) => {
+                // Seed admin language defaults to English; the legacy flow
+                // sniffed i18next from the request, but we don't have that on
+                // this pipeline.
+                User.createUserByEmailAndPassword(name, username, email, password, 'en', (err, user) => {
+                    if (err)
+                        return reject(err);
+                    resolve(user);
+                });
+            });
+            await new Promise((resolve, reject) => {
+                userData.makeAdmin((err) => {
+                    if (err)
+                        return reject(err);
+                    resolve();
+                });
+            });
+            // The installer admin sets the instance up; no email confirmation.
+            userData.emailConfirmedAt = new Date();
+            await userData.save();
+            await Config.applicationInstall();
+            await crowi.getConfigService().load();
+            return c.json({ status: 'ok', message: 'Admin created successfully' }, 200);
+        }
+        catch (err) {
+            const message = err.message;
+            debug('Error creating admin:', message);
+            // Legacy parity: user-creation failures surface as HTTP 200 +
+            // `status: 'error'` so the installer UI can render `errors[]`
+            // without branching on the wire status.
+            return c.json({ status: 'error', errors: [`管理ユーザーの作成に失敗しました。${message}`] }, 200);
+        }
+    });
+};
+exports.registerInstallerRoutes = registerInstallerRoutes;
+//# sourceMappingURL=installer.js.map

package/dist/hono/handlers/installer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.js","sourceRoot":"","sources":["../../../src/hono/handlers/installer.ts"],"names":[],"mappings":";;;;;;AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,sDAAgF;AAEhF,kDAA0B;AAQ1B,MAAM,KAAK,GAAG,IAAA,eAAK,EAAC,+BAA+B,CAAC,CAAC;AAErD;;;;;;;GAOG;AACI,MAAM,cAAc,GAAG,KAAK,EAAE,MAAmB,EAAoB,EAAE;IAC5E,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClE,OAAO,KAAK,GAAG,CAAC,CAAC;AACnB,CAAC,CAAC;AAHW,QAAA,cAAc,kBAGzB;AAEK,MAAM,uBAAuB,GAAG,CAA2C,GAAM,EAAE,KAAY,EAAE,EAAE;IACxG,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAEjC,OAAO,GAAG;SACP,OAAO,CAAC,sCAAuB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5C,MAAM,SAAS,GAAG,MAAM,IAAA,sBAAc,EAAC,MAAM,CAAC,CAAC;QAC/C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAE,mBAA6B,CAAC,CAAC,CAAE,oBAA8B,EAAE,EAAE,GAAG,CAAC,CAAC;IAC/G,CAAC,CAAC;SACD,OAAO,CAAC,+BAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrC,IAAI,MAAM,IAAA,sBAAc,EAAC,MAAM,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAgB,EAAE,OAAO,EAAE,kCAAkC,EAAE,EAAE,GAAG,CAAC,CAAC;QAChG,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC;QAE7E,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAe,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACnE,2DAA2D;gBAC3D,8DAA8D;gBAC9D,iBAAiB;gBACjB,IAAI,CAAC,4BAA4B,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAiB,EAAE,IAAkB,EAAE,EAAE;oBACjH,IAAI,GAAG;wBAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;gBAChB,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,QAAQ,CAAC,SAAS,CAAC,CAAC,GAAiB,EAAE,EAAE;oBACvC,IAAI,GAAG;wBAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC5B,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,mEAAmE;YACnE,QAAQ,CAAC,gBAAgB,GAAG,IAAI,IAAI,EAAE,CAAC;YACvC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAEtB,MAAM,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAClC,MAAM,KAAK,CAAC,gBAAgB,EAAE,CAAC,IAAI,EAAE,CAAC;YAEtC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAa,EAAE,OAAO,EAAE,4BAA4B,EAAE,EAAE,GAAG,CAAC,CAAC;QACvF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAI,GAAa,CAAC,OAAO,CAAC;YACvC,KAAK,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;YACxC,8DAA8D;YAC9D,8DAA8D;YAC9D,wCAAwC;YACxC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAgB,EAAE,MAAM,EAAE,CAAC,oBAAoB,OAAO,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC,CAAC;AAnDW,QAAA,uBAAuB,2BAmDlC"}

package/dist/hono/handlers/inviteAccept.d.ts

@@ -0,0 +1,180 @@
+import type { OpenAPIHono } from '@hono/zod-openapi';
+import type Crowi from '../../crowi';
+import type { CrowiHonoBindings } from '../app';
+export declare const registerInviteAcceptRoutes: <E extends OpenAPIHono<CrowiHonoBindings>>(app: E, crowi: Crowi) => OpenAPIHono<CrowiHonoBindings, {
+    "/invite/accept": {
+        $get: {
+            input: {
+                query: {
+                    token: string;
+                };
+            };
+            output: {
+                email: string;
+            };
+            outputFormat: "json";
+            status: 200;
+        } | {
+            input: {
+                query: {
+                    token: string;
+                };
+            };
+            output: {
+                error: {
+                    code: "AUTHENTICATION_REQUIRED" | "ADMIN_REQUIRED" | "USER_REGISTERED" | "USER_SUSPENDED" | "USER_INVITED" | "INTERNAL_ERROR" | "THIRD_PARTY_AUTH_REQUIRED" | "USER_NOT_ACTIVE" | "EMAIL_NOT_CONFIRMED" | "VALIDATION_ERROR" | "INVALID_REQUEST" | "NOT_FOUND" | "CONFLICT" | "SERVICE_UNAVAILABLE" | "APPLICATION_NOT_INSTALLED" | "INVALID_PAGE_ID" | "PAGE_NOT_FOUND" | "PAGE_NOT_GRANTED" | "PAGE_REVISION_ERROR" | "INVALID_GRANT" | "COMMENT_NOT_FOUND" | "NOTIFICATION_NOT_FOUND" | "USER_NOT_FOUND" | "USER_EXISTS" | "USERNAME_TAKEN" | "EMAIL_TAKEN" | "EMAIL_NOT_ALLOWED" | "INVALID_ACTIVATION_TOKEN" | "INVALID_INVITE_TOKEN" | "INVITE_ALREADY_ACCEPTED" | "INVALID_RESET_TOKEN" | "INVALID_EMAIL_CHANGE_TOKEN" | "INVALID_CREDENTIALS" | "REFRESH_TOKEN_REQUIRED" | "REGISTRATION_CLOSED" | "ENCRYPTION_NOT_CONFIGURED" | "MAIL_TEST_FAILED" | "PLUGIN_NOT_FOUND" | "PLUGIN_CONFIG_VALIDATION_FAILED";
+                    message: string;
+                    details?: any;
+                };
+            };
+            outputFormat: "json";
+            status: 401;
+        } | {
+            input: {
+                query: {
+                    token: string;
+                };
+            };
+            output: {
+                error: {
+                    code: "AUTHENTICATION_REQUIRED" | "ADMIN_REQUIRED" | "USER_REGISTERED" | "USER_SUSPENDED" | "USER_INVITED" | "INTERNAL_ERROR" | "THIRD_PARTY_AUTH_REQUIRED" | "USER_NOT_ACTIVE" | "EMAIL_NOT_CONFIRMED" | "VALIDATION_ERROR" | "INVALID_REQUEST" | "NOT_FOUND" | "CONFLICT" | "SERVICE_UNAVAILABLE" | "APPLICATION_NOT_INSTALLED" | "INVALID_PAGE_ID" | "PAGE_NOT_FOUND" | "PAGE_NOT_GRANTED" | "PAGE_REVISION_ERROR" | "INVALID_GRANT" | "COMMENT_NOT_FOUND" | "NOTIFICATION_NOT_FOUND" | "USER_NOT_FOUND" | "USER_EXISTS" | "USERNAME_TAKEN" | "EMAIL_TAKEN" | "EMAIL_NOT_ALLOWED" | "INVALID_ACTIVATION_TOKEN" | "INVALID_INVITE_TOKEN" | "INVITE_ALREADY_ACCEPTED" | "INVALID_RESET_TOKEN" | "INVALID_EMAIL_CHANGE_TOKEN" | "INVALID_CREDENTIALS" | "REFRESH_TOKEN_REQUIRED" | "REGISTRATION_CLOSED" | "ENCRYPTION_NOT_CONFIGURED" | "MAIL_TEST_FAILED" | "PLUGIN_NOT_FOUND" | "PLUGIN_CONFIG_VALIDATION_FAILED";
+                    message: string;
+                    details?: any;
+                };
+            };
+            outputFormat: "json";
+            status: 409;
+        } | {
+            input: {
+                query: {
+                    token: string;
+                };
+            };
+            output: {
+                error: {
+                    code: "INTERNAL_ERROR";
+                    message: "Internal server error";
+                };
+            };
+            outputFormat: "json";
+            status: 500;
+        };
+    };
+} & {
+    "/invite/accept": {
+        $post: {
+            input: {
+                json: {
+                    token: string;
+                    username: string;
+                    name: string;
+                    password: string;
+                };
+            };
+            output: {
+                accessToken: string;
+                refreshToken: string;
+                expiresIn: number;
+                user: {
+                    id: string;
+                    username: string;
+                    email: string;
+                    name: string;
+                    image?: string | undefined;
+                    admin?: boolean | undefined;
+                };
+            };
+            outputFormat: "json";
+            status: 200;
+        } | {
+            input: {
+                json: {
+                    token: string;
+                    username: string;
+                    name: string;
+                    password: string;
+                };
+            };
+            output: {
+                error: {
+                    code: "AUTHENTICATION_REQUIRED" | "ADMIN_REQUIRED" | "USER_REGISTERED" | "USER_SUSPENDED" | "USER_INVITED" | "INTERNAL_ERROR" | "THIRD_PARTY_AUTH_REQUIRED" | "USER_NOT_ACTIVE" | "EMAIL_NOT_CONFIRMED" | "VALIDATION_ERROR" | "INVALID_REQUEST" | "NOT_FOUND" | "CONFLICT" | "SERVICE_UNAVAILABLE" | "APPLICATION_NOT_INSTALLED" | "INVALID_PAGE_ID" | "PAGE_NOT_FOUND" | "PAGE_NOT_GRANTED" | "PAGE_REVISION_ERROR" | "INVALID_GRANT" | "COMMENT_NOT_FOUND" | "NOTIFICATION_NOT_FOUND" | "USER_NOT_FOUND" | "USER_EXISTS" | "USERNAME_TAKEN" | "EMAIL_TAKEN" | "EMAIL_NOT_ALLOWED" | "INVALID_ACTIVATION_TOKEN" | "INVALID_INVITE_TOKEN" | "INVITE_ALREADY_ACCEPTED" | "INVALID_RESET_TOKEN" | "INVALID_EMAIL_CHANGE_TOKEN" | "INVALID_CREDENTIALS" | "REFRESH_TOKEN_REQUIRED" | "REGISTRATION_CLOSED" | "ENCRYPTION_NOT_CONFIGURED" | "MAIL_TEST_FAILED" | "PLUGIN_NOT_FOUND" | "PLUGIN_CONFIG_VALIDATION_FAILED";
+                    message: string;
+                    details?: any;
+                };
+            };
+            outputFormat: "json";
+            status: 400;
+        } | {
+            input: {
+                json: {
+                    token: string;
+                    username: string;
+                    name: string;
+                    password: string;
+                };
+            };
+            output: {
+                error: {
+                    code: "AUTHENTICATION_REQUIRED" | "ADMIN_REQUIRED" | "USER_REGISTERED" | "USER_SUSPENDED" | "USER_INVITED" | "INTERNAL_ERROR" | "THIRD_PARTY_AUTH_REQUIRED" | "USER_NOT_ACTIVE" | "EMAIL_NOT_CONFIRMED" | "VALIDATION_ERROR" | "INVALID_REQUEST" | "NOT_FOUND" | "CONFLICT" | "SERVICE_UNAVAILABLE" | "APPLICATION_NOT_INSTALLED" | "INVALID_PAGE_ID" | "PAGE_NOT_FOUND" | "PAGE_NOT_GRANTED" | "PAGE_REVISION_ERROR" | "INVALID_GRANT" | "COMMENT_NOT_FOUND" | "NOTIFICATION_NOT_FOUND" | "USER_NOT_FOUND" | "USER_EXISTS" | "USERNAME_TAKEN" | "EMAIL_TAKEN" | "EMAIL_NOT_ALLOWED" | "INVALID_ACTIVATION_TOKEN" | "INVALID_INVITE_TOKEN" | "INVITE_ALREADY_ACCEPTED" | "INVALID_RESET_TOKEN" | "INVALID_EMAIL_CHANGE_TOKEN" | "INVALID_CREDENTIALS" | "REFRESH_TOKEN_REQUIRED" | "REGISTRATION_CLOSED" | "ENCRYPTION_NOT_CONFIGURED" | "MAIL_TEST_FAILED" | "PLUGIN_NOT_FOUND" | "PLUGIN_CONFIG_VALIDATION_FAILED";
+                    message: string;
+                    details?: any;
+                };
+            };
+            outputFormat: "json";
+            status: 401;
+        } | {
+            input: {
+                json: {
+                    token: string;
+                    username: string;
+                    name: string;
+                    password: string;
+                };
+            };
+            output: {
+                error: {
+                    code: "AUTHENTICATION_REQUIRED" | "ADMIN_REQUIRED" | "USER_REGISTERED" | "USER_SUSPENDED" | "USER_INVITED" | "INTERNAL_ERROR" | "THIRD_PARTY_AUTH_REQUIRED" | "USER_NOT_ACTIVE" | "EMAIL_NOT_CONFIRMED" | "VALIDATION_ERROR" | "INVALID_REQUEST" | "NOT_FOUND" | "CONFLICT" | "SERVICE_UNAVAILABLE" | "APPLICATION_NOT_INSTALLED" | "INVALID_PAGE_ID" | "PAGE_NOT_FOUND" | "PAGE_NOT_GRANTED" | "PAGE_REVISION_ERROR" | "INVALID_GRANT" | "COMMENT_NOT_FOUND" | "NOTIFICATION_NOT_FOUND" | "USER_NOT_FOUND" | "USER_EXISTS" | "USERNAME_TAKEN" | "EMAIL_TAKEN" | "EMAIL_NOT_ALLOWED" | "INVALID_ACTIVATION_TOKEN" | "INVALID_INVITE_TOKEN" | "INVITE_ALREADY_ACCEPTED" | "INVALID_RESET_TOKEN" | "INVALID_EMAIL_CHANGE_TOKEN" | "INVALID_CREDENTIALS" | "REFRESH_TOKEN_REQUIRED" | "REGISTRATION_CLOSED" | "ENCRYPTION_NOT_CONFIGURED" | "MAIL_TEST_FAILED" | "PLUGIN_NOT_FOUND" | "PLUGIN_CONFIG_VALIDATION_FAILED";
+                    message: string;
+                    details?: any;
+                };
+            };
+            outputFormat: "json";
+            status: 404;
+        } | {
+            input: {
+                json: {
+                    token: string;
+                    username: string;
+                    name: string;
+                    password: string;
+                };
+            };
+            output: {
+                error: {
+                    code: "AUTHENTICATION_REQUIRED" | "ADMIN_REQUIRED" | "USER_REGISTERED" | "USER_SUSPENDED" | "USER_INVITED" | "INTERNAL_ERROR" | "THIRD_PARTY_AUTH_REQUIRED" | "USER_NOT_ACTIVE" | "EMAIL_NOT_CONFIRMED" | "VALIDATION_ERROR" | "INVALID_REQUEST" | "NOT_FOUND" | "CONFLICT" | "SERVICE_UNAVAILABLE" | "APPLICATION_NOT_INSTALLED" | "INVALID_PAGE_ID" | "PAGE_NOT_FOUND" | "PAGE_NOT_GRANTED" | "PAGE_REVISION_ERROR" | "INVALID_GRANT" | "COMMENT_NOT_FOUND" | "NOTIFICATION_NOT_FOUND" | "USER_NOT_FOUND" | "USER_EXISTS" | "USERNAME_TAKEN" | "EMAIL_TAKEN" | "EMAIL_NOT_ALLOWED" | "INVALID_ACTIVATION_TOKEN" | "INVALID_INVITE_TOKEN" | "INVITE_ALREADY_ACCEPTED" | "INVALID_RESET_TOKEN" | "INVALID_EMAIL_CHANGE_TOKEN" | "INVALID_CREDENTIALS" | "REFRESH_TOKEN_REQUIRED" | "REGISTRATION_CLOSED" | "ENCRYPTION_NOT_CONFIGURED" | "MAIL_TEST_FAILED" | "PLUGIN_NOT_FOUND" | "PLUGIN_CONFIG_VALIDATION_FAILED";
+                    message: string;
+                    details?: any;
+                };
+            };
+            outputFormat: "json";
+            status: 409;
+        } | {
+            input: {
+                json: {
+                    token: string;
+                    username: string;
+                    name: string;
+                    password: string;
+                };
+            };
+            output: {
+                error: {
+                    code: "INTERNAL_ERROR";
+                    message: "Internal server error";
+                };
+            };
+            outputFormat: "json";
+            status: 500;
+        };
+    };
+}, "/">;

package/dist/hono/handlers/inviteAccept.js

@@ -0,0 +1,94 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerInviteAcceptRoutes = void 0;
+/**
+ * Public invite-acceptance handler.
+ *
+ *   GET  /invite/accept?token= — preview (returns the invited email)
+ *   POST /invite/accept        — set username/name/password, activate,
+ *                                and return login tokens
+ *
+ * The signed invite token (purpose `'invite'`, minted in
+ * `User.createUsersByInvitation`) is the credential, so both routes are
+ * public. Single-use is enforced by status: a token whose user is no
+ * longer STATUS_INVITED (already accepted) is rejected.
+ */
+const api_contract_1 = require("@crowi/api-contract");
+const debug_1 = __importDefault(require("debug"));
+const jwt_1 = require("../../util/jwt");
+const mail_token_1 = require("../../util/mail-token");
+const map_duplicate_key_error_1 = require("../../util/map-duplicate-key-error");
+const errors_1 = require("./_helpers/errors");
+const user_shape_1 = require("./_helpers/user-shape");
+const debug = (0, debug_1.default)('crowi:hono:handlers:inviteAccept');
+const INVALID_TOKEN_BODY = {
+    error: { code: 'INVALID_INVITE_TOKEN', message: 'Invite token is invalid or expired' },
+};
+const ALREADY_ACCEPTED_BODY = {
+    error: { code: 'INVITE_ALREADY_ACCEPTED', message: 'This invite has already been accepted' },
+};
+const registerInviteAcceptRoutes = (app, crowi) => {
+    const User = crowi.model('User');
+    const jwtUtil = (0, jwt_1.createJwtUtil)(crowi);
+    const mailTokenUtil = (0, mail_token_1.createMailTokenUtil)();
+    return app
+        .openapi(api_contract_1.inviteAcceptRoutes.invitePreviewRoute, async (c) => {
+        const { token } = c.req.valid('query');
+        const payload = mailTokenUtil.verifyMailToken(token, 'invite');
+        if (!payload) {
+            return c.json(INVALID_TOKEN_BODY, 401);
+        }
+        const user = await User.findById(payload.userId);
+        if (!user || user.status !== User.STATUS_INVITED) {
+            return c.json(ALREADY_ACCEPTED_BODY, 409);
+        }
+        return c.json({ email: payload.email }, 200);
+    })
+        .openapi(api_contract_1.inviteAcceptRoutes.acceptInviteRoute, async (c) => {
+        const { token, username, name, password } = c.req.valid('json');
+        try {
+            const payload = mailTokenUtil.verifyMailToken(token, 'invite');
+            if (!payload) {
+                return c.json(INVALID_TOKEN_BODY, 401);
+            }
+            const user = await User.findById(payload.userId);
+            if (!user) {
+                return c.json({ error: { code: 'USER_NOT_FOUND', message: 'Invited user no longer exists' } }, 404);
+            }
+            if (user.status !== User.STATUS_INVITED) {
+                return c.json(ALREADY_ACCEPTED_BODY, 409);
+            }
+            // Username uniqueness (excluding this invited user).
+            const clash = await User.findOne({ username });
+            if (clash && clash._id.toString() !== user._id.toString()) {
+                return c.json({ error: { code: 'USERNAME_TAKEN', message: 'Username already taken' } }, 409);
+            }
+            const activated = await new Promise((resolve, reject) => {
+                user.activateInvitedUser(username, name, password, (err, userData) => {
+                    if (err)
+                        reject(err);
+                    else
+                        resolve(userData);
+                });
+            });
+            const tokens = jwtUtil.generateTokens(activated);
+            return c.json({ ...tokens, user: (0, user_shape_1.toAuthUser)(activated) }, 200);
+        }
+        catch (error) {
+            // The username findOne pre-check can be raced; the unique index is the
+            // final defence. Map its E11000 to the same 409 the pre-check returns.
+            const duplicateCode = (0, map_duplicate_key_error_1.mapDuplicateKeyError)(error);
+            if (duplicateCode) {
+                const message = duplicateCode === 'USERNAME_TAKEN' ? 'Username already taken' : 'That email address is already in use';
+                return c.json({ error: { code: duplicateCode, message } }, 409);
+            }
+            debug('Invite acceptance error:', error);
+            return c.json(errors_1.INTERNAL_ERROR_BODY, 500);
+        }
+    });
+};
+exports.registerInviteAcceptRoutes = registerInviteAcceptRoutes;
+//# sourceMappingURL=inviteAccept.js.map

package/dist/hono/handlers/inviteAccept.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inviteAccept.js","sourceRoot":"","sources":["../../../src/hono/handlers/inviteAccept.ts"],"names":[],"mappings":";;;;;;AAAA;;;;;;;;;;;GAWG;AACH,sDAAyD;AAEzD,kDAA0B;AAI1B,sCAA6C;AAC7C,oDAA0D;AAC1D,8EAAwE;AAIxE,8CAAwD;AACxD,sDAAmD;AAEnD,MAAM,KAAK,GAAG,IAAA,eAAK,EAAC,kCAAkC,CAAC,CAAC;AAExD,MAAM,kBAAkB,GAAG;IACzB,KAAK,EAAE,EAAE,IAAI,EAAE,sBAA+B,EAAE,OAAO,EAAE,oCAA6C,EAAE;CACzG,CAAC;AACF,MAAM,qBAAqB,GAAG;IAC5B,KAAK,EAAE,EAAE,IAAI,EAAE,yBAAkC,EAAE,OAAO,EAAE,uCAAgD,EAAE;CAC/G,CAAC;AAEK,MAAM,0BAA0B,GAAG,CAA2C,GAAM,EAAE,KAAY,EAAE,EAAE;IAC3G,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,IAAA,mBAAa,EAAC,KAAK,CAAC,CAAC;IACrC,MAAM,aAAa,GAAG,IAAA,gCAAmB,GAAE,CAAC;IAE5C,OAAO,GAAG;SACP,OAAO,CAAC,iCAAkB,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1D,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,aAAa,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC/D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;YACjD,OAAO,CAAC,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;IAC/C,CAAC,CAAC;SACD,OAAO,CAAC,iCAAkB,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzD,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEhE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,aAAa,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC/D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,CAAC,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;YACzC,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAyB,EAAE,OAAO,EAAE,+BAA+B,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;YAC/G,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;gBACxC,OAAO,CAAC,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;YAC5C,CAAC;YAED,qDAAqD;YACrD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC/C,IAAI,KAAK,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;gBAC1D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAyB,EAAE,OAAO,EAAE,wBAAwB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;YACxG,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,IAAI,OAAO,CAAe,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACpE,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,GAAiB,EAAE,QAAsB,EAAE,EAAE;oBAC/F,IAAI,GAAG;wBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;wBAChB,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACzB,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;YACjD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,IAAA,uBAAU,EAAC,SAAS,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,uEAAuE;YACvE,uEAAuE;YACvE,MAAM,aAAa,GAAG,IAAA,8CAAoB,EAAC,KAAK,CAAC,CAAC;YAClD,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,OAAO,GAAG,aAAa,KAAK,gBAAgB,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,sCAAsC,CAAC;gBACvH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;YAClE,CAAC;YACD,KAAK,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;YACzC,OAAO,CAAC,CAAC,IAAI,CAAC,4BAAmB,EAAE,GAAG,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC,CAAC;AA9DW,QAAA,0BAA0B,8BA8DrC"}