@crowi/api 2.0.0-alpha.0

package/dist/models/index.js

@@ -0,0 +1,55 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const activity_1 = __importDefault(require("./activity"));
+const attachment_1 = __importDefault(require("./attachment"));
+const backlink_1 = __importDefault(require("./backlink"));
+const bookmark_1 = __importDefault(require("./bookmark"));
+const comment_1 = __importDefault(require("./comment"));
+// import with allow-js flag
+const config_1 = __importDefault(require("./config"));
+const migration_application_1 = __importDefault(require("./migration-application"));
+const notification_1 = __importDefault(require("./notification"));
+const oauth_authorization_code_1 = __importDefault(require("./oauth-authorization-code"));
+const oauth_client_1 = __importDefault(require("./oauth-client"));
+const oauth_device_code_1 = __importDefault(require("./oauth-device-code"));
+const oauth_refresh_token_1 = __importDefault(require("./oauth-refresh-token"));
+const page_1 = __importDefault(require("./page"));
+const page_yjs_update_1 = __importDefault(require("./page-yjs-update"));
+const personal_access_token_1 = __importDefault(require("./personal-access-token"));
+const plugin_render_cache_1 = __importDefault(require("./plugin-render-cache"));
+const revision_1 = __importDefault(require("./revision"));
+const share_1 = __importDefault(require("./share"));
+const shareAccess_1 = __importDefault(require("./shareAccess"));
+const tracking_1 = __importDefault(require("./tracking"));
+const updatePost_1 = __importDefault(require("./updatePost"));
+const user_1 = __importDefault(require("./user"));
+const watcher_1 = __importDefault(require("./watcher"));
+exports.default = {
+    Page: page_1.default,
+    User: user_1.default,
+    Revision: revision_1.default,
+    Backlink: backlink_1.default,
+    Bookmark: bookmark_1.default,
+    Comment: comment_1.default,
+    Attachment: attachment_1.default,
+    UpdatePost: updatePost_1.default,
+    Share: share_1.default,
+    Tracking: tracking_1.default,
+    ShareAccess: shareAccess_1.default,
+    Activity: activity_1.default,
+    Notification: notification_1.default,
+    Watcher: watcher_1.default,
+    Config: config_1.default,
+    MigrationApplication: migration_application_1.default,
+    PluginRenderCache: plugin_render_cache_1.default,
+    PageYjsUpdate: page_yjs_update_1.default,
+    PersonalAccessToken: personal_access_token_1.default,
+    OAuthClient: oauth_client_1.default,
+    OAuthAuthorizationCode: oauth_authorization_code_1.default,
+    OAuthDeviceCode: oauth_device_code_1.default,
+    OAuthRefreshToken: oauth_refresh_token_1.default,
+};
+//# sourceMappingURL=index.js.map

package/dist/models/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/models/index.ts"],"names":[],"mappings":";;;;;AAAA,0DAAkC;AAClC,8DAAsC;AACtC,0DAAkC;AAClC,0DAAkC;AAClC,wDAAgC;AAChC,4BAA4B;AAC5B,sDAA8B;AAC9B,oFAA2D;AAC3D,kEAA0C;AAC1C,0FAAgE;AAChE,kEAAyC;AACzC,4EAAkD;AAClD,gFAAsD;AACtD,kDAA0B;AAC1B,wEAA8C;AAC9C,oFAA0D;AAC1D,gFAAsD;AACtD,0DAAkC;AAClC,oDAA4B;AAC5B,gEAAwC;AACxC,0DAAkC;AAClC,8DAAsC;AACtC,kDAA0B;AAC1B,wDAAgC;AAEhC,kBAAe;IACb,IAAI,EAAJ,cAAI;IACJ,IAAI,EAAJ,cAAI;IACJ,QAAQ,EAAR,kBAAQ;IACR,QAAQ,EAAR,kBAAQ;IACR,QAAQ,EAAR,kBAAQ;IACR,OAAO,EAAP,iBAAO;IACP,UAAU,EAAV,oBAAU;IACV,UAAU,EAAV,oBAAU;IACV,KAAK,EAAL,eAAK;IACL,QAAQ,EAAR,kBAAQ;IACR,WAAW,EAAX,qBAAW;IACX,QAAQ,EAAR,kBAAQ;IACR,YAAY,EAAZ,sBAAY;IACZ,OAAO,EAAP,iBAAO;IACP,MAAM,EAAN,gBAAM;IACN,oBAAoB,EAApB,+BAAoB;IACpB,iBAAiB,EAAjB,6BAAiB;IACjB,aAAa,EAAb,yBAAa;IACb,mBAAmB,EAAnB,+BAAmB;IACnB,WAAW,EAAX,sBAAW;IACX,sBAAsB,EAAtB,kCAAsB;IACtB,eAAe,EAAf,2BAAe;IACf,iBAAiB,EAAjB,6BAAiB;CAClB,CAAC"}

package/dist/models/migration-application.d.ts

@@ -0,0 +1,54 @@
+import { Document, Model, Types } from 'mongoose';
+import Crowi from '../crowi';
+/**
+ * RFC-0008 §7 — the `migrationApplications` collection.
+ *
+ * An **append-only audit log** of every migration run: one document per
+ * apply / re-apply / detected-clean / failure. It is NOT the source of
+ * truth for "is this migration pending" — that is decided by inspecting
+ * the data via each migration's `isPending` probe (§6.1). This log exists
+ * to preserve missed-and-rerun history and duration trends, and to power
+ * `migrate status`.
+ *
+ * Self-bootstrapping (§7.3): created from this schema declaration alone
+ * (autoIndex builds its indexes at boot), and no migration may modify its
+ * schema — this avoids a chicken-and-egg dependency where the framework's
+ * own bookkeeping needs a migration to exist.
+ */
+export type MigrationResult = 'applied' | 'detected-clean' | 're-applied' | 'failed';
+export interface MigrationApplicationDocument extends Document {
+    _id: Types.ObjectId;
+    migrationId: string;
+    fromVersion?: string;
+    toVersion?: string;
+    layer?: 'boot' | 'preflight';
+    result: MigrationResult;
+    appliedAt: Date;
+    durationMs?: number;
+    stats?: Record<string, unknown>;
+    appliedBy?: string;
+    error?: string;
+    createdAt: Date;
+    updatedAt: Date;
+}
+export interface RecordApplicationInput {
+    migrationId: string;
+    fromVersion?: string;
+    toVersion?: string;
+    layer?: 'boot' | 'preflight';
+    result: MigrationResult;
+    durationMs?: number;
+    stats?: Record<string, unknown>;
+    appliedBy?: string;
+    error?: string;
+}
+export interface MigrationApplicationModel extends Model<MigrationApplicationDocument> {
+    /** Append one application record (the only write path — append-only). */
+    record(input: RecordApplicationInput): Promise<MigrationApplicationDocument>;
+    /** The most recent record for a migration id, or null if never run. */
+    latestFor(migrationId: string): Promise<MigrationApplicationDocument | null>;
+    /** The N most recent records across all migrations (for `migrate status`). */
+    recent(limit?: number): Promise<MigrationApplicationDocument[]>;
+}
+declare const _default: (crowi: Crowi) => MigrationApplicationModel;
+export default _default;

package/dist/models/migration-application.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const mongoose_1 = require("mongoose");
+exports.default = (crowi) => {
+    const migrationApplicationSchema = new mongoose_1.Schema({
+        migrationId: { type: String, required: true, index: true },
+        fromVersion: { type: String },
+        toVersion: { type: String },
+        layer: { type: String, enum: ['boot', 'preflight'] },
+        result: {
+            type: String,
+            enum: ['applied', 'detected-clean', 're-applied', 'failed'],
+            required: true,
+        },
+        appliedAt: { type: Date, default: Date.now, index: true },
+        durationMs: { type: Number },
+        // Free-form per-run stats (detected / transformed counts, etc.).
+        stats: { type: mongoose_1.Schema.Types.Mixed },
+        // 'boot-auto' | `admin-cli@${hostname}`.
+        appliedBy: { type: String },
+        // Only populated when `result === 'failed'`.
+        error: { type: String },
+    }, { timestamps: true });
+    migrationApplicationSchema.statics.record = function (input) {
+        return MigrationApplication.create({ ...input, appliedAt: new Date() });
+    };
+    migrationApplicationSchema.statics.latestFor = function (migrationId) {
+        return MigrationApplication.findOne({ migrationId }).sort({ appliedAt: -1 }).exec();
+    };
+    migrationApplicationSchema.statics.recent = function (limit = 10) {
+        return MigrationApplication.find({}).sort({ appliedAt: -1 }).limit(limit).exec();
+    };
+    const MigrationApplication = (0, mongoose_1.model)('MigrationApplication', migrationApplicationSchema);
+    return MigrationApplication;
+};
+//# sourceMappingURL=migration-application.js.map

package/dist/models/migration-application.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-application.js","sourceRoot":"","sources":["../../src/models/migration-application.ts"],"names":[],"mappings":";;AAAA,uCAAiE;AA2DjE,kBAAe,CAAC,KAAY,EAAE,EAAE;IAC9B,MAAM,0BAA0B,GAAG,IAAI,iBAAM,CAC3C;QACE,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;QAC1D,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAC7B,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAC3B,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE;QACpD,MAAM,EAAE;YACN,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,CAAC,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,QAAQ,CAAC;YAC3D,QAAQ,EAAE,IAAI;SACf;QACD,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE;QACzD,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAC5B,iEAAiE;QACjE,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAM,CAAC,KAAK,CAAC,KAAK,EAAE;QACnC,yCAAyC;QACzC,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QAC3B,6CAA6C;QAC7C,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;KACxB,EACD,EAAE,UAAU,EAAE,IAAI,EAAE,CACrB,CAAC;IAEF,0BAA0B,CAAC,OAAO,CAAC,MAAM,GAAG,UAAU,KAA6B;QACjF,OAAO,oBAAoB,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1E,CAAC,CAAC;IAEF,0BAA0B,CAAC,OAAO,CAAC,SAAS,GAAG,UAAU,WAAmB;QAC1E,OAAO,oBAAoB,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtF,CAAC,CAAC;IAEF,0BAA0B,CAAC,OAAO,CAAC,MAAM,GAAG,UAAU,KAAK,GAAG,EAAE;QAC9D,OAAO,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACnF,CAAC,CAAC;IAEF,MAAM,oBAAoB,GAAG,IAAA,gBAAK,EAA0D,sBAAsB,EAAE,0BAA0B,CAAC,CAAC;IAEhJ,OAAO,oBAAoB,CAAC;AAC9B,CAAC,CAAC"}

package/dist/models/notification.d.ts

@@ -0,0 +1,28 @@
+import Crowi from '../crowi';
+import { Types, Document, Model } from 'mongoose';
+import { ActivityDocument } from './activity';
+import { UserDocument } from './user';
+export interface NotificationDocument extends Document {
+    _id: Types.ObjectId;
+    user: Types.ObjectId;
+    targetModel: string;
+    target: Types.ObjectId;
+    action: string;
+    activities: Types.ObjectId[];
+    status: string;
+    createdAt: Date;
+}
+export interface NotificationModel extends Model<NotificationDocument> {
+    findLatestNotificationsByUser(user: Types.ObjectId, skip: number, offset: number): Promise<NotificationDocument[]>;
+    upsertByActivity(user: Types.ObjectId, activity: ActivityDocument, createdAt?: Date | null): Promise<NotificationDocument | null>;
+    removeActivity(activity: any): any;
+    removeEmpty(): ReturnType<typeof Model.deleteMany>;
+    read(user: UserDocument): ReturnType<typeof Model.updateMany>;
+    open(user: UserDocument, id: Types.ObjectId): Promise<NotificationDocument | null>;
+    getUnreadCountByUser(user: Types.ObjectId): Promise<number | undefined>;
+    STATUS_UNREAD: string;
+    STATUS_UNOPENED: string;
+    STATUS_OPENED: string;
+}
+declare const _default: (crowi: Crowi) => NotificationModel;
+export default _default;

package/dist/models/notification.js

@@ -0,0 +1,285 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const mongoose_1 = require("mongoose");
+const debug_1 = __importDefault(require("debug"));
+const date_fns_1 = require("date-fns");
+const api_contract_1 = require("@crowi/api-contract");
+const activityDefine_1 = __importDefault(require("../util/activityDefine"));
+const channel_1 = require("../notifications/channel");
+// Module-level logger for the module-scope helpers below
+// (`publishNotificationsChange` / `forwardToNotifierPlugins`). The model
+// factory has its own `debug` in closure scope; these helpers run outside
+// it. Redis publish / notifier driver failures during teardown are
+// expected noise, so they log at debug rather than warn.
+const moduleDebug = (0, debug_1.default)('crowi:models:notification');
+const STATUS_UNREAD = 'UNREAD';
+const STATUS_UNOPENED = 'UNOPENED';
+const STATUS_OPENED = 'OPENED';
+const STATUSES = [STATUS_UNREAD, STATUS_UNOPENED, STATUS_OPENED];
+exports.default = (crowi) => {
+    const debug = (0, debug_1.default)('crowi:models:notification');
+    const notificationEvent = crowi.event('Notification');
+    const notificationSchema = new mongoose_1.Schema({
+        user: {
+            type: mongoose_1.Schema.Types.ObjectId,
+            ref: 'User',
+            index: true,
+            required: true,
+        },
+        targetModel: {
+            type: String,
+            required: true,
+            enum: activityDefine_1.default.getSupportTargetModelNames(),
+        },
+        target: {
+            type: mongoose_1.Schema.Types.Mixed,
+            refPath: 'targetModel',
+            required: true,
+        },
+        action: {
+            type: String,
+            required: true,
+            enum: activityDefine_1.default.getSupportActionNames(),
+        },
+        activities: [
+            {
+                type: mongoose_1.Schema.Types.ObjectId,
+                ref: 'Activity',
+            },
+        ],
+        status: {
+            type: String,
+            default: STATUS_UNREAD,
+            enum: STATUSES,
+            index: true,
+            required: true,
+        },
+        createdAt: {
+            type: Date,
+            default: Date.now,
+        },
+    });
+    notificationSchema.virtual('actionUsers').get(function () {
+        const Activity = crowi.model('Activity');
+        return Activity.getActionUsersFromActivities(this.activities);
+    });
+    const transform = (doc, ret) => {
+        // delete ret.activities
+    };
+    notificationSchema.set('toObject', { virtuals: true, transform });
+    notificationSchema.set('toJSON', { virtuals: true, transform });
+    notificationSchema.index({ user: 1, target: 1, action: 1, createdAt: 1 });
+    notificationSchema.statics.findLatestNotificationsByUser = function (user, limit, offset) {
+        limit = limit || 10;
+        return Notification.find({ user })
+            .sort({ createdAt: -1 })
+            .skip(offset)
+            .limit(limit)
+            .populate(['user', 'target'])
+            .populate({ path: 'activities', populate: { path: 'user' } })
+            .exec();
+    };
+    notificationSchema.statics.upsertByActivity = async function (user, activity, createdAt = null) {
+        const { _id: activityId, targetModel, target, action } = activity;
+        const now = createdAt || Date.now();
+        const lastWeek = (0, date_fns_1.subDays)(now, 7);
+        const query = { user, target, action, createdAt: { $gt: lastWeek } };
+        const parameters = {
+            user,
+            targetModel,
+            target,
+            action,
+            status: STATUS_UNREAD,
+            createdAt: now,
+            $addToSet: { activities: activityId },
+        };
+        const options = {
+            upsert: true,
+            new: true,
+            setDefaultsOnInsert: true,
+            runValidators: true,
+        };
+        const notification = await Notification.findOneAndUpdate(query, parameters, options);
+        if (notification) {
+            notificationEvent.emit('update', notification.user);
+            // RFC-0002 Phase 8: forward to registered notifier plugins (Slack /
+            // Webhook / ...). Fire-and-forget per-driver: a single misbehaving
+            // driver must not block the upsert or other drivers. The plugin
+            // manager may not be initialised in some test paths, so we guard.
+            forwardToNotifierPlugins(crowi, notification, activity);
+        }
+        return notification;
+    };
+    notificationSchema.statics.removeActivity = async function (activity) {
+        const { _id, target, action } = activity;
+        const query = { target, action };
+        const parameters = { $pull: { activities: _id } };
+        // Capture the set of recipient users BEFORE the update so we can
+        // emit a per-user `update` tick afterwards — once the $pull has
+        // emptied the `activities` array, `removeEmpty()` will delete the
+        // row and we'd lose the userId. The notifications affected by a
+        // single un-comment / un-like can span multiple recipients (one
+        // per watcher), so we dedup with a Set and emit once per user.
+        const affected = await Notification.find(query, { user: 1 }).lean();
+        const result = await Notification.updateMany(query, parameters);
+        await Notification.removeEmpty();
+        const recipientIds = new Set();
+        for (const row of affected) {
+            if (row?.user != null)
+                recipientIds.add(row.user.toString());
+        }
+        for (const userId of recipientIds) {
+            notificationEvent.emit('update', userId);
+        }
+        return result;
+    };
+    notificationSchema.statics.removeEmpty = function () {
+        return Notification.deleteMany({ activities: { $size: 0 } });
+    };
+    notificationSchema.statics.read = async function (user) {
+        const query = { user, status: STATUS_UNREAD };
+        const parameters = { status: STATUS_UNOPENED };
+        const result = await Notification.updateMany(query, parameters);
+        // Emit even when `modifiedCount === 0` — the realtime invalidation
+        // tick is cheap and a mark-all-as-read with nothing to flip should
+        // still tell any other tab "your notifications view is fresh now".
+        notificationEvent.emit('update', user._id);
+        return result;
+    };
+    notificationSchema.statics.open = async function (user, id) {
+        const query = { _id: id, user: user._id };
+        const parameters = { status: STATUS_OPENED };
+        const options = { new: true };
+        const notification = await Notification.findOneAndUpdate(query, parameters, options);
+        if (notification) {
+            notificationEvent.emit('update', notification.user);
+        }
+        return notification;
+    };
+    notificationSchema.statics.getUnreadCountByUser = async function (user) {
+        const query = { user, status: STATUS_UNREAD };
+        try {
+            const count = await Notification.countDocuments(query);
+            return count;
+        }
+        catch (err) {
+            debug('Error on getUnreadCountByUser', err);
+            throw err;
+        }
+    };
+    notificationEvent.on('update', (user) => {
+        // Realtime invalidation fan-out: publish a per-user "changed" tick
+        // on the user's notifications Redis channel so the browser's
+        // `/notifications/<userId>` WebSocket can drop its 30-second
+        // `useUnreadCount` polling loop. Subscribers (this process and
+        // every other api replica) wake any locally-connected sockets;
+        // the browser invalidates `notificationKeys.all` in react-query
+        // and refetches via the existing REST endpoints.
+        //
+        // The `user` argument is whatever the caller emitted —
+        // `Notification.upsertByActivity` and `Notification.read` pass an
+        // ObjectId / UserDocument, depending on the call site — so we
+        // normalise to a string id here before building the channel name.
+        if (!user)
+            return;
+        const userId = userIdOf(user);
+        if (!userId)
+            return;
+        publishNotificationsChange(crowi, userId);
+    });
+    const Notification = (0, mongoose_1.model)('Notification', notificationSchema);
+    // 静的プロパティをスキーマではなくモデルに直接割り当て
+    Notification.STATUS_UNOPENED = STATUS_UNOPENED;
+    Notification.STATUS_UNREAD = STATUS_UNREAD;
+    Notification.STATUS_OPENED = STATUS_OPENED;
+    return Notification;
+};
+/**
+ * Normalise the `user` argument that `notificationEvent.emit('update', ...)`
+ * receives into a string id. Different call sites historically passed
+ * different shapes — an ObjectId, a UserDocument, or a populated user
+ * subdocument — so we accept whichever and pick the canonical id.
+ * Returns `null` if no usable id can be derived (defensive: never crash
+ * the model on a malformed emit).
+ */
+function userIdOf(user) {
+    if (!user)
+        return null;
+    if (typeof user === 'string')
+        return user;
+    if (user instanceof mongoose_1.Types.ObjectId)
+        return user.toString();
+    if (typeof user === 'object' && '_id' in user) {
+        const id = user._id;
+        if (typeof id === 'string')
+            return id;
+        if (id instanceof mongoose_1.Types.ObjectId)
+            return id.toString();
+    }
+    return null;
+}
+/**
+ * Publish a `{type:'changed'}` invalidation tick on the user's
+ * notifications channel. No-op when `crowi.redis` is null (degrade
+ * mode: single-instance dev with `REDIS_URL` unset). Failures are
+ * warn-only — the polling-removed UI degrades gracefully (the next
+ * user action triggers a react-query refetch).
+ *
+ * The publish is fire-and-forget on purpose: the model statics that
+ * invoke `notificationEvent.emit('update', ...)` are awaited by their
+ * REST handlers, and we do not want a transient Redis publish failure
+ * to surface as a 500 on the user's write request — the notification
+ * itself succeeded.
+ */
+function publishNotificationsChange(crowi, userId) {
+    const redis = crowi.redis;
+    if (!redis || typeof redis.publish !== 'function')
+        return;
+    const channel = `${channel_1.NOTIFICATIONS_CHANNEL_PREFIX}${userId}`;
+    // Build the payload through the shared schema rather than as a hand-
+    // rolled literal so a future evolution of the message contract is
+    // caught at compile / parse time on both the publisher and the
+    // subscriber. The attach handler validates the inbound side with the
+    // same schema (`NotificationsServerMessageSchema`).
+    const message = JSON.stringify(api_contract_1.NotificationsChangedMessageSchema.parse({ type: 'changed' }));
+    crowi.trackSideEffect(Promise.resolve()
+        .then(() => redis.publish(channel, message))
+        .catch((err) => {
+        const m = err instanceof Error ? err.message : String(err);
+        moduleDebug('publish failed for user %s: %s', userId, m);
+    }));
+}
+/**
+ * RFC-0002 Phase 8: forward an upserted notification to every active
+ * notifier plugin (Slack / Webhook / ...). Driver `send()` is called
+ * with a normalised `NotificationPayload`; each call is wrapped so a
+ * single failing driver does not break the others.
+ *
+ * The plugin manager is bootstrapped during `Crowi.init()` and may be
+ * absent on early-test code paths — we silently no-op then. Reading
+ * `crowi.getPlugins()` would throw in that state; the optional access
+ * pattern below keeps both the test and production paths simple.
+ */
+function forwardToNotifierPlugins(crowi, notification, activity) {
+    const registries = crowi.pluginRegistries;
+    const notifiers = registries?.active?.notifiers ?? [];
+    if (notifiers.length === 0)
+        return;
+    const payload = {
+        title: `[${activity.action}] page=${String(notification.target)}`,
+        body: `user=${String(notification.user)} activity=${String(activity._id)}`,
+        event: `notification:${activity.action}`,
+    };
+    for (const driver of notifiers) {
+        crowi.trackSideEffect(Promise.resolve()
+            .then(() => driver.send(payload))
+            .catch((err) => {
+            const message = err instanceof Error ? err.message : String(err);
+            moduleDebug('notifier driver send failed: %s', message);
+        }));
+    }
+}
+//# sourceMappingURL=notification.js.map

package/dist/models/notification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification.js","sourceRoot":"","sources":["../../src/models/notification.ts"],"names":[],"mappings":";;;;;AACA,uCAAwE;AACxE,kDAA0B;AAC1B,uCAAmC;AAEnC,sDAAwE;AACxE,6EAAqD;AACrD,uDAAyE;AAIzE,yDAAyD;AACzD,yEAAyE;AACzE,0EAA0E;AAC1E,mEAAmE;AACnE,yDAAyD;AACzD,MAAM,WAAW,GAAG,IAAA,eAAK,EAAC,2BAA2B,CAAC,CAAC;AAEvD,MAAM,aAAa,GAAG,QAAQ,CAAC;AAC/B,MAAM,eAAe,GAAG,UAAU,CAAC;AACnC,MAAM,aAAa,GAAG,QAAQ,CAAC;AAC/B,MAAM,QAAQ,GAAG,CAAC,aAAa,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;AA2BjE,kBAAe,CAAC,KAAY,EAAE,EAAE;IAC9B,MAAM,KAAK,GAAG,IAAA,eAAK,EAAC,2BAA2B,CAAC,CAAC;IACjD,MAAM,iBAAiB,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAEtD,MAAM,kBAAkB,GAAG,IAAI,iBAAM,CAA0C;QAC7E,IAAI,EAAE;YACJ,IAAI,EAAE,iBAAM,CAAC,KAAK,CAAC,QAAQ;YAC3B,GAAG,EAAE,MAAM;YACX,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,IAAI;SACf;QACD,WAAW,EAAE;YACX,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,wBAAc,CAAC,0BAA0B,EAAE;SAClD;QACD,MAAM,EAAE;YACN,IAAI,EAAE,iBAAM,CAAC,KAAK,CAAC,KAAK;YACxB,OAAO,EAAE,aAAa;YACtB,QAAQ,EAAE,IAAI;SACf;QACD,MAAM,EAAE;YACN,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,wBAAc,CAAC,qBAAqB,EAAE;SAC7C;QACD,UAAU,EAAE;YACV;gBACE,IAAI,EAAE,iBAAM,CAAC,KAAK,CAAC,QAAQ;gBAC3B,GAAG,EAAE,UAAU;aAChB;SACF;QACD,MAAM,EAAE;YACN,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,aAAa;YACtB,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,IAAI;SACf;QACD,SAAS,EAAE;YACT,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,IAAI,CAAC,GAAG;SAClB;KACF,CAAC,CAAC;IACH,kBAAkB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC;QAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACzC,OAAO,QAAQ,CAAC,4BAA4B,CAAC,IAAI,CAAC,UAAuC,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7B,wBAAwB;IAC1B,CAAC,CAAC;IACF,kBAAkB,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAClE,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAChE,kBAAkB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAE1E,kBAAkB,CAAC,OAAO,CAAC,6BAA6B,GAAG,UAAU,IAAI,EAAE,KAAK,EAAE,MAAM;QACtF,KAAK,GAAG,KAAK,IAAI,EAAE,CAAC;QAEpB,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;aAC/B,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC;aACvB,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,KAAK,CAAC;aACZ,QAAQ,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;aAC5B,QAAQ,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC;aAC5D,IAAI,EAAE,CAAC;IACZ,CAAC,CAAC;IAEF,kBAAkB,CAAC,OAAO,CAAC,gBAAgB,GAAG,KAAK,WAAW,IAAI,EAAE,QAAQ,EAAE,SAAS,GAAG,IAAI;QAC5F,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;QAElE,MAAM,GAAG,GAAG,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAA,kBAAO,EAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC;QACrE,MAAM,UAAU,GAAG;YACjB,IAAI;YACJ,WAAW;YACX,MAAM;YACN,MAAM;YACN,MAAM,EAAE,aAAa;YACrB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE;SACtC,CAAC;QAEF,MAAM,OAAO,GAAG;YACd,MAAM,EAAE,IAAI;YACZ,GAAG,EAAE,IAAI;YACT,mBAAmB,EAAE,IAAI;YACzB,aAAa,EAAE,IAAI;SACpB,CAAC;QAEF,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAErF,IAAI,YAAY,EAAE,CAAC;YACjB,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC;YACpD,oEAAoE;YACpE,mEAAmE;YACnE,gEAAgE;YAChE,kEAAkE;YAClE,wBAAwB,CAAC,KAAK,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC,CAAC;IAEF,kBAAkB,CAAC,OAAO,CAAC,cAAc,GAAG,KAAK,WAAW,QAAQ;QAClE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;QACzC,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,CAAC;QAElD,iEAAiE;QACjE,gEAAgE;QAChE,kEAAkE;QAClE,gEAAgE;QAChE,gEAAgE;QAChE,+DAA+D;QAC/D,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,EAA8B,CAAC;QAEhG,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAEhE,MAAM,YAAY,CAAC,WAAW,EAAE,CAAC;QAEjC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;QACvC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,IAAI,GAAG,EAAE,IAAI,IAAI,IAAI;gBAAE,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;YAClC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,kBAAkB,CAAC,OAAO,CAAC,WAAW,GAAG;QACvC,OAAO,YAAY,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC;IAEF,kBAAkB,CAAC,OAAO,CAAC,IAAI,GAAG,KAAK,WAAW,IAAI;QACpD,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QAC9C,MAAM,UAAU,GAAG,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QAE/C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAChE,mEAAmE;QACnE,mEAAmE;QACnE,mEAAmE;QACnE,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3C,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,kBAAkB,CAAC,OAAO,CAAC,IAAI,GAAG,KAAK,WAAW,IAAI,EAAE,EAAE;QACxD,MAAM,KAAK,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;QAE9B,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QACrF,IAAI,YAAY,EAAE,CAAC;YACjB,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC,CAAC;IAEF,kBAAkB,CAAC,OAAO,CAAC,oBAAoB,GAAG,KAAK,WAAW,IAAI;QACpE,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QAE9C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAEvD,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,+BAA+B,EAAE,GAAG,CAAC,CAAC;YAC5C,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;IAEF,iBAAiB,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;QACtC,mEAAmE;QACnE,6DAA6D;QAC7D,6DAA6D;QAC7D,+DAA+D;QAC/D,+DAA+D;QAC/D,gEAAgE;QAChE,iDAAiD;QACjD,EAAE;QACF,uDAAuD;QACvD,kEAAkE;QAClE,8DAA8D;QAC9D,kEAAkE;QAClE,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,0BAA0B,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,IAAA,gBAAK,EAA0C,cAAc,EAAE,kBAAkB,CAAC,CAAC;IAExG,6BAA6B;IAC7B,YAAY,CAAC,eAAe,GAAG,eAAe,CAAC;IAC/C,YAAY,CAAC,aAAa,GAAG,aAAa,CAAC;IAC3C,YAAY,CAAC,aAAa,GAAG,aAAa,CAAC;IAE3C,OAAO,YAAY,CAAC;AACtB,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,SAAS,QAAQ,CAAC,IAAa;IAC7B,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,IAAI,YAAY,gBAAK,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC3D,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;QAC9C,MAAM,EAAE,GAAI,IAAyB,CAAC,GAAG,CAAC;QAC1C,IAAI,OAAO,EAAE,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QACtC,IAAI,EAAE,YAAY,gBAAK,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,0BAA0B,CAAC,KAAY,EAAE,MAAc;IAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,KAA+F,CAAC;IACpH,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,UAAU;QAAE,OAAO;IAC1D,MAAM,OAAO,GAAG,GAAG,sCAA4B,GAAG,MAAM,EAAE,CAAC;IAC3D,qEAAqE;IACrE,kEAAkE;IAClE,+DAA+D;IAC/D,qEAAqE;IACrE,oDAAoD;IACpD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,gDAAiC,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAC7F,KAAK,CAAC,eAAe,CACnB,OAAO,CAAC,OAAO,EAAE;SACd,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,OAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;SAC5C,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QACtB,MAAM,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3D,WAAW,CAAC,gCAAgC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC3D,CAAC,CAAC,CACL,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,wBAAwB,CAAC,KAAY,EAAE,YAAkC,EAAE,QAA0B;IAC5G,MAAM,UAAU,GAAI,KAAqH,CAAC,gBAAgB,CAAC;IAC3J,MAAM,SAAS,GAAG,UAAU,EAAE,MAAM,EAAE,SAAS,IAAI,EAAE,CAAC;IACtD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEnC,MAAM,OAAO,GAAwB;QACnC,KAAK,EAAE,IAAI,QAAQ,CAAC,MAAM,UAAU,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE;QACjE,IAAI,EAAE,QAAQ,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;QAC1E,KAAK,EAAE,gBAAgB,QAAQ,CAAC,MAAM,EAAE;KACzC,CAAC;IAEF,KAAK,MAAM,MAAM,IAAI,SAAS,EAAE,CAAC;QAC/B,KAAK,CAAC,eAAe,CACnB,OAAO,CAAC,OAAO,EAAE;aACd,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;aAChC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,WAAW,CAAC,iCAAiC,EAAE,OAAO,CAAC,CAAC;QAC1D,CAAC,CAAC,CACL,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/models/oauth-authorization-code.d.ts

@@ -0,0 +1,34 @@
+import { Document, Model, Types } from 'mongoose';
+import Crowi from '../crowi';
+export interface OAuthAuthorizationCodeDocument extends Document {
+    _id: Types.ObjectId;
+    codeHash: string;
+    clientId: string;
+    userId: Types.ObjectId;
+    scopes: string[];
+    codeChallenge: string;
+    codeChallengeMethod: 'S256';
+    redirectUri: string;
+    expiresAt: Date;
+    consumedAt: Date | null;
+    createdAt: Date;
+}
+export interface OAuthAuthorizationCodeModel extends Model<OAuthAuthorizationCodeDocument> {
+    /** Generate a fresh opaque code plaintext + its SHA-256 hash. */
+    generateCode(): {
+        code: string;
+        codeHash: string;
+    };
+    /** SHA-256-hex of an opaque code (the form stored in `codeHash`). */
+    hashCode(code: string): string;
+    /** A usable (= unconsumed, unexpired) code matching `codeHash`, or null. */
+    findUsable(codeHash: string): Promise<OAuthAuthorizationCodeDocument | null>;
+    /**
+     * Atomically mark a usable code consumed and return it, or null if it was
+     * already consumed / expired / unknown. Prevents a code from being
+     * exchanged twice even under concurrent requests.
+     */
+    consume(codeHash: string): Promise<OAuthAuthorizationCodeDocument | null>;
+}
+declare const _default: (_crowi: Crowi) => OAuthAuthorizationCodeModel;
+export default _default;

package/dist/models/oauth-authorization-code.js

@@ -0,0 +1,100 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_crypto_1 = __importDefault(require("node:crypto"));
+const mongoose_1 = require("mongoose");
+/**
+ * RFC-0010 §Mongoose models — OAuth 2.0 authorization code (Auth Code +
+ * PKCE flow).
+ *
+ * Issued by `POST /oauth/authorize` after the user consents, exchanged
+ * once at `POST /oauth/token` for an access + refresh token. Short-lived
+ * (~60s) and single-use:
+ *
+ *  - Only the SHA-256 **hash** of the opaque code is stored; the plaintext
+ *    travels via the redirect URI and is never persisted (same one-way
+ *    storage as PATs / refresh tokens).
+ *  - A TTL index on `expiresAt` lets MongoDB sweep stale rows; the query
+ *    side (`findUsable`) *also* filters `expiresAt > now` because the TTL
+ *    monitor runs at most once a minute and could lag the ~60s lifetime.
+ *  - `consume` flips `consumedAt` atomically (`findOneAndUpdate`) so two
+ *    concurrent token exchanges of the same code cannot both succeed.
+ */
+const CODE_RANDOM_BYTES = 32;
+exports.default = (_crowi) => {
+    const schema = new mongoose_1.Schema({
+        codeHash: {
+            type: String,
+            required: true,
+            unique: true,
+            index: true,
+        },
+        clientId: {
+            type: String,
+            required: true,
+            index: true,
+        },
+        userId: {
+            type: mongoose_1.Schema.Types.ObjectId,
+            ref: 'User',
+            required: true,
+            index: true,
+        },
+        scopes: {
+            type: [String],
+            required: true,
+            default: [],
+        },
+        codeChallenge: {
+            type: String,
+            required: true,
+        },
+        codeChallengeMethod: {
+            type: String,
+            enum: ['S256'],
+            required: true,
+        },
+        redirectUri: {
+            type: String,
+            required: true,
+        },
+        expiresAt: {
+            type: Date,
+            required: true,
+        },
+        consumedAt: {
+            type: Date,
+            default: null,
+        },
+        createdAt: {
+            type: Date,
+            default: Date.now,
+        },
+    });
+    // TTL — MongoDB removes rows once `expiresAt` is in the past
+    // (`expireAfterSeconds: 0`). The sweep can lag the ~60s lifetime by up
+    // to a minute, so `findUsable` / `consume` re-check `expiresAt` too.
+    schema.index({ expiresAt: 1 }, { expireAfterSeconds: 0, name: 'oauthAuthCode_ttl' });
+    schema.statics.hashCode = function (code) {
+        return node_crypto_1.default.createHash('sha256').update(code).digest('hex');
+    };
+    schema.statics.generateCode = function () {
+        const code = node_crypto_1.default.randomBytes(CODE_RANDOM_BYTES).toString('base64url');
+        return { code, codeHash: OAuthAuthorizationCode.hashCode(code) };
+    };
+    schema.statics.findUsable = function (codeHash) {
+        return OAuthAuthorizationCode.findOne({
+            codeHash,
+            consumedAt: null,
+            expiresAt: { $gt: new Date() },
+        }).exec();
+    };
+    schema.statics.consume = function (codeHash) {
+        return OAuthAuthorizationCode.findOneAndUpdate({ codeHash, consumedAt: null, expiresAt: { $gt: new Date() } }, { consumedAt: new Date() }, { new: true }).exec();
+    };
+    const OAuthAuthorizationCode = (0, mongoose_1.model)('OAuthAuthorizationCode', schema);
+    return OAuthAuthorizationCode;
+};
+//# sourceMappingURL=oauth-authorization-code.js.map

package/dist/models/oauth-authorization-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-authorization-code.js","sourceRoot":"","sources":["../../src/models/oauth-authorization-code.ts"],"names":[],"mappings":";;;;;AAAA,8DAAiC;AAEjC,uCAAiE;AAIjE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,iBAAiB,GAAG,EAAE,CAAC;AA+B7B,kBAAe,CAAC,MAAa,EAAE,EAAE;IAC/B,MAAM,MAAM,GAAG,IAAI,iBAAM,CAA8D;QACrF,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,IAAI;SACZ;QACD,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,IAAI;SACZ;QACD,MAAM,EAAE;YACN,IAAI,EAAE,iBAAM,CAAC,KAAK,CAAC,QAAQ;YAC3B,GAAG,EAAE,MAAM;YACX,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,IAAI;SACZ;QACD,MAAM,EAAE;YACN,IAAI,EAAE,CAAC,MAAM,CAAC;YACd,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,EAAE;SACZ;QACD,aAAa,EAAE;YACb,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,IAAI;SACf;QACD,mBAAmB,EAAE;YACnB,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,CAAC,MAAM,CAAC;YACd,QAAQ,EAAE,IAAI;SACf;QACD,WAAW,EAAE;YACX,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,IAAI;SACf;QACD,SAAS,EAAE;YACT,IAAI,EAAE,IAAI;YACV,QAAQ,EAAE,IAAI;SACf;QACD,UAAU,EAAE;YACV,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,IAAI;SACd;QACD,SAAS,EAAE;YACT,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,IAAI,CAAC,GAAG;SAClB;KACF,CAAC,CAAC;IAEH,6DAA6D;IAC7D,uEAAuE;IACvE,qEAAqE;IACrE,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAErF,MAAM,CAAC,OAAO,CAAC,QAAQ,GAAG,UAAU,IAAY;QAC9C,OAAO,qBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC,CAAC;IAEF,MAAM,CAAC,OAAO,CAAC,YAAY,GAAG;QAC5B,MAAM,IAAI,GAAG,qBAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACzE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,sBAAsB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IACnE,CAAC,CAAC;IAEF,MAAM,CAAC,OAAO,CAAC,UAAU,GAAG,UAAU,QAAgB;QACpD,OAAO,sBAAsB,CAAC,OAAO,CAAC;YACpC,QAAQ;YACR,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,EAAE;SAC/B,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,CAAC,CAAC;IAEF,MAAM,CAAC,OAAO,CAAC,OAAO,GAAG,UAAU,QAAgB;QACjD,OAAO,sBAAsB,CAAC,gBAAgB,CAC5C,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,EAAE,EAAE,EAC9D,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,EAC1B,EAAE,GAAG,EAAE,IAAI,EAAE,CACd,CAAC,IAAI,EAAE,CAAC;IACX,CAAC,CAAC;IAEF,MAAM,sBAAsB,GAAG,IAAA,gBAAK,EAA8D,wBAAwB,EAAE,MAAM,CAAC,CAAC;IAEpI,OAAO,sBAAsB,CAAC;AAChC,CAAC,CAAC"}