@crowi/api 2.0.0-alpha.0

package/dist/types/express.d.ts

@@ -0,0 +1,34 @@
+import { ParsedQs } from 'qs';
+import { Types } from 'mongoose';
+import { Session, SessionData } from 'express-session';
+import type { UserDocument } from '../models/user';
+declare module 'express-session' {
+    interface SessionData {
+        shareIds?: string[];
+        secretKeywords?: Record<string, string>;
+        user?: any;
+        auth?: any;
+        google?: any;
+        github?: any;
+        callback?: string | null;
+        redirectTo?: string;
+        trackingId?: string;
+    }
+}
+declare global {
+    namespace Express {
+        interface Request {
+            search?: string;
+            form?: any;
+            config?: any;
+            user?: UserDocument;
+            skipCsrfVerify?: boolean;
+            csrfToken?: string | null;
+            session: Session & Partial<SessionData>;
+        }
+    }
+}
+export declare function getQueryAsString(query: string | ParsedQs | (string | ParsedQs)[] | undefined): string;
+export declare function getQueryAsBoolean(query: string | ParsedQs | (string | ParsedQs)[] | undefined): boolean;
+export declare function getQueryAsObjectId(query: string | ParsedQs | (string | ParsedQs)[] | undefined): Types.ObjectId | null;
+export declare function getQueryAsNumber(query: string | ParsedQs | (string | ParsedQs)[] | undefined, defaultValue?: number): number;

package/dist/types/express.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getQueryAsString = getQueryAsString;
+exports.getQueryAsBoolean = getQueryAsBoolean;
+exports.getQueryAsObjectId = getQueryAsObjectId;
+exports.getQueryAsNumber = getQueryAsNumber;
+const mongoose_1 = require("mongoose");
+// Query パラメータを string として安全に取得するためのヘルパー関数
+function getQueryAsString(query) {
+    if (query === undefined)
+        return '';
+    if (typeof query === 'string')
+        return query;
+    if (Array.isArray(query)) {
+        return query.length > 0 && typeof query[0] === 'string' ? query[0] : '';
+    }
+    return String(query);
+}
+// Query パラメータを boolean として安全に取得するためのヘルパー関数
+function getQueryAsBoolean(query) {
+    if (query === undefined)
+        return false;
+    if (typeof query === 'string')
+        return query === 'true';
+    if (Array.isArray(query)) {
+        return query.length > 0 && (query[0] === 'true' || query[0] === true);
+    }
+    return Boolean(query);
+}
+// Query パラメータを ObjectId として安全に取得するためのヘルパー関数
+function getQueryAsObjectId(query) {
+    const strValue = getQueryAsString(query);
+    if (!strValue)
+        return null;
+    try {
+        // Types.ObjectIdのコンストラクタは文字列を受け取れる
+        return new mongoose_1.Types.ObjectId(strValue);
+    }
+    catch (e) {
+        return null;
+    }
+}
+// Query パラメータを number として安全に取得するためのヘルパー関数
+function getQueryAsNumber(query, defaultValue = 0) {
+    if (query === undefined)
+        return defaultValue;
+    const value = parseInt(getQueryAsString(query), 10);
+    return isNaN(value) ? defaultValue : value;
+}
+//# sourceMappingURL=express.js.map

package/dist/types/express.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"express.js","sourceRoot":"","sources":["../../src/types/express.ts"],"names":[],"mappings":";;AAuCA,4CAOC;AAGD,8CAOC;AAGD,gDAUC;AAGD,4CAKC;AA3ED,uCAAyC;AAoCzC,0CAA0C;AAC1C,SAAgB,gBAAgB,CAAC,KAA4D;IAC3F,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,2CAA2C;AAC3C,SAAgB,iBAAiB,CAAC,KAA4D;IAC5F,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,KAAK,MAAM,CAAC;IACvD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAM,IAAY,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,4CAA4C;AAC5C,SAAgB,kBAAkB,CAAC,KAA4D;IAC7F,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3B,IAAI,CAAC;QACH,mCAAmC;QACnC,OAAO,IAAI,gBAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,0CAA0C;AAC1C,SAAgB,gBAAgB,CAAC,KAA4D,EAAE,YAAY,GAAG,CAAC;IAC7G,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC;IAE7C,MAAM,KAAK,GAAG,QAAQ,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACpD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC;AAC7C,CAAC"}

package/dist/types/mongoose-extensions.d.ts

@@ -0,0 +1,8 @@
+import { Types } from 'mongoose';
+export declare function objectIdToString(id: Types.ObjectId | string | null | undefined): string;
+export declare function stringToObjectId(id: string | null | undefined): Types.ObjectId | null;
+export type MongooseDocument<T> = T & {
+    _id: Types.ObjectId;
+    createdAt?: Date;
+    updatedAt?: Date;
+};

package/dist/types/mongoose-extensions.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.objectIdToString = objectIdToString;
+exports.stringToObjectId = stringToObjectId;
+const mongoose_1 = require("mongoose");
+// オブジェクトIDを文字列として扱うためのヘルパー関数
+function objectIdToString(id) {
+    if (!id)
+        return '';
+    return id.toString();
+}
+// 文字列をObjectIdとして安全に変換するヘルパー関数
+function stringToObjectId(id) {
+    if (!id)
+        return null;
+    try {
+        // @ts-ignore - TypeScriptの型定義が正しくないため無視
+        return new mongoose_1.Types.ObjectId(id);
+    }
+    catch (e) {
+        return null;
+    }
+}
+//# sourceMappingURL=mongoose-extensions.js.map

package/dist/types/mongoose-extensions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongoose-extensions.js","sourceRoot":"","sources":["../../src/types/mongoose-extensions.ts"],"names":[],"mappings":";;AAGA,4CAGC;AAGD,4CAQC;AAjBD,uCAAiC;AAEjC,6BAA6B;AAC7B,SAAgB,gBAAgB,CAAC,EAA8C;IAC7E,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC;IACnB,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC;AACvB,CAAC;AAED,+BAA+B;AAC/B,SAAgB,gBAAgB,CAAC,EAA6B;IAC5D,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACrB,IAAI,CAAC;QACH,wCAAwC;QACxC,OAAO,IAAI,gBAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/util/accessTokenParser.d.ts

@@ -0,0 +1 @@
+export declare const parseAccessToken: (req: any) => any;

package/dist/util/accessTokenParser.js

@@ -0,0 +1,34 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseAccessToken = void 0;
+const debug_1 = __importDefault(require("debug"));
+const debug = (0, debug_1.default)('crowi:util:accessTokenParser');
+/**
+ * Extract Bearer token from Authorization header.
+ *
+ * @param {Object} headers HTTP request headers
+ * @param {string} headers.authorization Authorization header value.
+ * @return {?string} found access_token or null.
+ */
+const extractBearerToken = (headers) => {
+    const v = headers.authorization;
+    if (!v) {
+        return null;
+    }
+    const parts = v.trim().replace(/( )+/g, ' ').split(' ');
+    if (parts.length !== 2 || parts[0] !== 'Bearer') {
+        return null;
+    }
+    return parts[1];
+};
+const parseAccessToken = (req) => {
+    if (!req) {
+        throw new Error('req required.');
+    }
+    return extractBearerToken(req.headers) || req.query.access_token || req.body.access_token || null;
+};
+exports.parseAccessToken = parseAccessToken;
+//# sourceMappingURL=accessTokenParser.js.map

package/dist/util/accessTokenParser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accessTokenParser.js","sourceRoot":"","sources":["../../src/util/accessTokenParser.ts"],"names":[],"mappings":";;;;;;AAAA,kDAA0B;AAE1B,MAAM,KAAK,GAAG,IAAA,eAAK,EAAC,8BAA8B,CAAC,CAAC;AAEpD;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,EAAE;IACrC,MAAM,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC;IAChC,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC;AAEK,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,EAAE;IACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC;AACpG,CAAC,CAAC;AANW,QAAA,gBAAgB,oBAM3B"}

package/dist/util/activityDefine.d.ts

@@ -0,0 +1,15 @@
+declare const activityDefine: {
+    MODEL_PAGE: string;
+    MODEL_COMMENT: string;
+    ACTION_CREATE: string;
+    ACTION_MODIFY: string;
+    ACTION_DELETE: string;
+    ACTION_COMMENT: string;
+    ACTION_LIKE: string;
+    ACTION_MENTION: string;
+    ACTION_UPDATE: string;
+    getSupportTargetModelNames: () => string[];
+    getSupportEventModelNames: () => string[];
+    getSupportActionNames: () => string[];
+};
+export default activityDefine;

package/dist/util/activityDefine.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const MODEL_PAGE = 'Page';
+const MODEL_COMMENT = 'Comment';
+const ACTION_CREATE = 'CREATE'; // Not support yet
+const ACTION_MODIFY = 'MODIFY'; // Not support yet
+const ACTION_DELETE = 'DELETE'; // Not support yet
+const ACTION_COMMENT = 'COMMENT';
+const ACTION_LIKE = 'LIKE';
+// feature-page-update-notification: fan-out to watchers when a page body
+// gets a new revision. Named to match the page event ('update'), the
+// contract NotificationAction enum ('UPDATE') and the i18n key
+// (`notifications.action_update`) end-to-end. The reserved ACTION_MODIFY
+// placeholder above is left untouched.
+const ACTION_UPDATE = 'UPDATE';
+// RFC-0002 Phase 8: page-level mention of a user via `@username` in
+// the body. Dispatched per mentioned-user (not fanned out to watchers)
+// by `events/mention-dispatch.ts`.
+const ACTION_MENTION = 'MENTION';
+const getSupportTargetModelNames = () => {
+    return [MODEL_PAGE];
+};
+const getSupportEventModelNames = () => {
+    return [MODEL_COMMENT];
+};
+const getSupportActionNames = () => {
+    return [
+        // ACTION_CREATE,
+        // ACTION_MODIFY,
+        // ACTION_DELETE,
+        ACTION_COMMENT,
+        ACTION_LIKE,
+        ACTION_MENTION,
+        ACTION_UPDATE,
+    ];
+};
+const activityDefine = {
+    MODEL_PAGE,
+    MODEL_COMMENT,
+    ACTION_CREATE, // Not support yet
+    ACTION_MODIFY, // Not support yet
+    ACTION_DELETE, // Not support yet
+    ACTION_COMMENT,
+    ACTION_LIKE,
+    ACTION_MENTION,
+    ACTION_UPDATE,
+    getSupportTargetModelNames,
+    getSupportEventModelNames,
+    getSupportActionNames,
+};
+exports.default = activityDefine;
+//# sourceMappingURL=activityDefine.js.map

package/dist/util/activityDefine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activityDefine.js","sourceRoot":"","sources":["../../src/util/activityDefine.ts"],"names":[],"mappings":";;AAAA,MAAM,UAAU,GAAG,MAAM,CAAC;AAC1B,MAAM,aAAa,GAAG,SAAS,CAAC;AAEhC,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC,kBAAkB;AAClD,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC,kBAAkB;AAClD,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC,kBAAkB;AAClD,MAAM,cAAc,GAAG,SAAS,CAAC;AACjC,MAAM,WAAW,GAAG,MAAM,CAAC;AAC3B,yEAAyE;AACzE,qEAAqE;AACrE,+DAA+D;AAC/D,yEAAyE;AACzE,uCAAuC;AACvC,MAAM,aAAa,GAAG,QAAQ,CAAC;AAC/B,oEAAoE;AACpE,uEAAuE;AACvE,mCAAmC;AACnC,MAAM,cAAc,GAAG,SAAS,CAAC;AAEjC,MAAM,0BAA0B,GAAG,GAAG,EAAE;IACtC,OAAO,CAAC,UAAU,CAAC,CAAC;AACtB,CAAC,CAAC;AAEF,MAAM,yBAAyB,GAAG,GAAG,EAAE;IACrC,OAAO,CAAC,aAAa,CAAC,CAAC;AACzB,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,GAAG,EAAE;IACjC,OAAO;QACL,iBAAiB;QACjB,iBAAiB;QACjB,iBAAiB;QACjB,cAAc;QACd,WAAW;QACX,cAAc;QACd,aAAa;KACd,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG;IACrB,UAAU;IACV,aAAa;IAEb,aAAa,EAAE,kBAAkB;IACjC,aAAa,EAAE,kBAAkB;IACjC,aAAa,EAAE,kBAAkB;IACjC,cAAc;IACd,WAAW;IACX,cAAc;IACd,aAAa;IAEb,0BAA0B;IAC1B,yBAAyB;IACzB,qBAAqB;CACtB,CAAC;AAEF,kBAAe,cAAc,CAAC"}

package/dist/util/admin-config.d.ts

@@ -0,0 +1,57 @@
+import type Crowi from '../crowi';
+/**
+ * Helpers for reading values out of the in-memory Crowi config cache and
+ * coercing them into the typed shape expected by ts-rest admin handlers.
+ *
+ * The cache is populated by `ConfigModel.loadAllConfig`, which JSON-parses
+ * stored values, so for well-behaved keys we get the right runtime type
+ * directly. These helpers exist to defend against:
+ *   - missing keys on a fresh / older install
+ *   - hand-edited rows in Mongo that don't match the expected type
+ *   - the legacy form-encoded path that wrote string values for non-string
+ *     keys (e.g. checkbox 'on' for booleans)
+ *
+ * Without them, every admin GET handler would either 500 on bad data or
+ * inline its own coercion logic. Lifting them here keeps the handlers small
+ * and the fallback semantics consistent.
+ */
+/**
+ * Read the canonical `crowi` namespace from the in-memory config cache.
+ * Returns an empty object when the cache hasn't been populated yet (e.g.
+ * during the very first GET on a fresh install).
+ */
+export declare const getCrowiConfigNamespace: (crowi: Crowi) => Record<string, unknown>;
+/**
+ * Coerce an unknown config value to a boolean. Only an actual boolean
+ * counts; anything else (undefined, null, the string 'true', 1, etc.)
+ * collapses to `fallback` (default `false`). Strict by design — we don't
+ * want a hand-edited string 'true' to silently flip a security toggle.
+ */
+export declare const coerceBoolean: (value: unknown, fallback?: boolean) => boolean;
+/**
+ * Coerce an unknown config value to a string. Missing → fallback,
+ * already-a-string → kept, anything else → stringified via `String(value)`.
+ *
+ * The stringify branch is defensive — it preserves the original value's
+ * information for non-string-but-non-null entries instead of dropping to
+ * the fallback. Most production callers never hit it.
+ */
+export declare const coerceString: (value: unknown, fallback?: string) => string;
+/**
+ * Coerce an unknown config value to a number. Numeric → kept,
+ * numeric string → parsed, anything else → fallback (default 0).
+ *
+ * Used for fields like `mail:smtpPort` where the legacy form encoded the
+ * value as a string but the contract surfaces a number.
+ */
+export declare const coerceNumber: (value: unknown, fallback?: number) => number;
+/**
+ * Coerce an unknown config value to a string[]. Array → filter to strings,
+ * single newline-separated string (legacy textarea storage) → split on '\n',
+ * anything else → [].
+ *
+ * Used for `security:registrationWhiteList` where the legacy form filter
+ * `stringToArrayFilter` always produced an array, but data migrated from
+ * pre-filter installs may still hold a raw textarea string.
+ */
+export declare const coerceStringArray: (value: unknown) => string[];

package/dist/util/admin-config.js

@@ -0,0 +1,99 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.coerceStringArray = exports.coerceNumber = exports.coerceString = exports.coerceBoolean = exports.getCrowiConfigNamespace = void 0;
+/**
+ * Helpers for reading values out of the in-memory Crowi config cache and
+ * coercing them into the typed shape expected by ts-rest admin handlers.
+ *
+ * The cache is populated by `ConfigModel.loadAllConfig`, which JSON-parses
+ * stored values, so for well-behaved keys we get the right runtime type
+ * directly. These helpers exist to defend against:
+ *   - missing keys on a fresh / older install
+ *   - hand-edited rows in Mongo that don't match the expected type
+ *   - the legacy form-encoded path that wrote string values for non-string
+ *     keys (e.g. checkbox 'on' for booleans)
+ *
+ * Without them, every admin GET handler would either 500 on bad data or
+ * inline its own coercion logic. Lifting them here keeps the handlers small
+ * and the fallback semantics consistent.
+ */
+/**
+ * Read the canonical `crowi` namespace from the in-memory config cache.
+ * Returns an empty object when the cache hasn't been populated yet (e.g.
+ * during the very first GET on a fresh install).
+ */
+const getCrowiConfigNamespace = (crowi) => {
+    const cfg = crowi.getConfig();
+    if (cfg && typeof cfg === 'object') {
+        const ns = cfg.crowi;
+        if (ns)
+            return ns;
+    }
+    return {};
+};
+exports.getCrowiConfigNamespace = getCrowiConfigNamespace;
+/**
+ * Coerce an unknown config value to a boolean. Only an actual boolean
+ * counts; anything else (undefined, null, the string 'true', 1, etc.)
+ * collapses to `fallback` (default `false`). Strict by design — we don't
+ * want a hand-edited string 'true' to silently flip a security toggle.
+ */
+const coerceBoolean = (value, fallback = false) => {
+    if (typeof value === 'boolean')
+        return value;
+    return fallback;
+};
+exports.coerceBoolean = coerceBoolean;
+/**
+ * Coerce an unknown config value to a string. Missing → fallback,
+ * already-a-string → kept, anything else → stringified via `String(value)`.
+ *
+ * The stringify branch is defensive — it preserves the original value's
+ * information for non-string-but-non-null entries instead of dropping to
+ * the fallback. Most production callers never hit it.
+ */
+const coerceString = (value, fallback = '') => {
+    if (value === null || value === undefined)
+        return fallback;
+    if (typeof value === 'string')
+        return value;
+    return String(value);
+};
+exports.coerceString = coerceString;
+/**
+ * Coerce an unknown config value to a number. Numeric → kept,
+ * numeric string → parsed, anything else → fallback (default 0).
+ *
+ * Used for fields like `mail:smtpPort` where the legacy form encoded the
+ * value as a string but the contract surfaces a number.
+ */
+const coerceNumber = (value, fallback = 0) => {
+    if (typeof value === 'number' && Number.isFinite(value))
+        return value;
+    if (typeof value === 'string' && value !== '') {
+        const n = Number(value);
+        return Number.isFinite(n) ? n : fallback;
+    }
+    return fallback;
+};
+exports.coerceNumber = coerceNumber;
+/**
+ * Coerce an unknown config value to a string[]. Array → filter to strings,
+ * single newline-separated string (legacy textarea storage) → split on '\n',
+ * anything else → [].
+ *
+ * Used for `security:registrationWhiteList` where the legacy form filter
+ * `stringToArrayFilter` always produced an array, but data migrated from
+ * pre-filter installs may still hold a raw textarea string.
+ */
+const coerceStringArray = (value) => {
+    if (Array.isArray(value)) {
+        return value.filter((entry) => typeof entry === 'string');
+    }
+    if (typeof value === 'string' && value.length > 0) {
+        return value.split('\n');
+    }
+    return [];
+};
+exports.coerceStringArray = coerceStringArray;
+//# sourceMappingURL=admin-config.js.map

package/dist/util/admin-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-config.js","sourceRoot":"","sources":["../../src/util/admin-config.ts"],"names":[],"mappings":";;;AAEA;;;;;;;;;;;;;;;GAeG;AAEH;;;;GAIG;AACI,MAAM,uBAAuB,GAAG,CAAC,KAAY,EAA2B,EAAE;IAC/E,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;IAC9B,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,EAAE,GAAI,GAA2C,CAAC,KAAK,CAAC;QAC9D,IAAI,EAAE;YAAE,OAAO,EAAE,CAAC;IACpB,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC;AAPW,QAAA,uBAAuB,2BAOlC;AAEF;;;;;GAKG;AACI,MAAM,aAAa,GAAG,CAAC,KAAc,EAAE,QAAQ,GAAG,KAAK,EAAW,EAAE;IACzE,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAHW,QAAA,aAAa,iBAGxB;AAEF;;;;;;;GAOG;AACI,MAAM,YAAY,GAAG,CAAC,KAAc,EAAE,QAAQ,GAAG,EAAE,EAAU,EAAE;IACpE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC,CAAC;AAJW,QAAA,YAAY,gBAIvB;AAEF;;;;;;GAMG;AACI,MAAM,YAAY,GAAG,CAAC,KAAc,EAAE,QAAQ,GAAG,CAAC,EAAU,EAAE;IACnE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAC9C,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC3C,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAPW,QAAA,YAAY,gBAOvB;AAEF;;;;;;;;GAQG;AACI,MAAM,iBAAiB,GAAG,CAAC,KAAc,EAAY,EAAE;IAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC;AARW,QAAA,iBAAiB,qBAQ5B"}

package/dist/util/admin-pager.d.ts

@@ -0,0 +1,24 @@
+import type { AdminPager } from '@crowi/api-contract';
+/**
+ * Maximum number of numbered page buttons rendered around the current page.
+ * Mirrors the legacy `MAX_PAGE_LIST = 5` in the admin controller (legacy
+ * `packages/api/src/controllers/admin.ts:16`).
+ */
+export declare const MAX_PAGE_LIST = 5;
+/**
+ * Build a pager bundle compatible with the legacy `createPager` helper
+ * (packages/api/src/controllers/admin.ts:22-93). The wire format is kept
+ * identical so the new admin UI can consume the same numbered pager + dots
+ * without translation, and the helper is shared across every admin list
+ * view that needs paging (users, groups, attachments, ...).
+ *
+ * Notes:
+ * - `pagesCount` may be 0 when there are no matching documents; the
+ *   windowing loop correctly emits an empty `pages` array in that case
+ *   (pagerMin collapses to 1 and pagerMax stays at 0, so the for-loop
+ *   body never runs).
+ * - The windowing has a 1-off carryover from the legacy implementation
+ *   (`pagerMin = pagerMax - MAX_PAGE_LIST` at the right edge can produce
+ *   6 buttons instead of 5). Preserved verbatim for parity.
+ */
+export declare function createPager(total: number, page: number, pagesCount: number, maxPageList?: number): AdminPager;

package/dist/util/admin-pager.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_PAGE_LIST = void 0;
+exports.createPager = createPager;
+/**
+ * Maximum number of numbered page buttons rendered around the current page.
+ * Mirrors the legacy `MAX_PAGE_LIST = 5` in the admin controller (legacy
+ * `packages/api/src/controllers/admin.ts:16`).
+ */
+exports.MAX_PAGE_LIST = 5;
+/**
+ * Build a pager bundle compatible with the legacy `createPager` helper
+ * (packages/api/src/controllers/admin.ts:22-93). The wire format is kept
+ * identical so the new admin UI can consume the same numbered pager + dots
+ * without translation, and the helper is shared across every admin list
+ * view that needs paging (users, groups, attachments, ...).
+ *
+ * Notes:
+ * - `pagesCount` may be 0 when there are no matching documents; the
+ *   windowing loop correctly emits an empty `pages` array in that case
+ *   (pagerMin collapses to 1 and pagerMax stays at 0, so the for-loop
+ *   body never runs).
+ * - The windowing has a 1-off carryover from the legacy implementation
+ *   (`pagerMin = pagerMax - MAX_PAGE_LIST` at the right edge can produce
+ *   6 buttons instead of 5). Preserved verbatim for parity.
+ */
+function createPager(total, page, pagesCount, maxPageList = exports.MAX_PAGE_LIST) {
+    const pager = {
+        page,
+        pagesCount,
+        pages: [],
+        total,
+        previous: null,
+        previousDots: false,
+        next: null,
+        nextDots: false,
+    };
+    if (page > 1) {
+        pager.previous = page - 1;
+    }
+    if (page < pagesCount) {
+        pager.next = page + 1;
+    }
+    let pagerMin = Math.max(1, Math.ceil(page - maxPageList / 2));
+    let pagerMax = Math.min(pagesCount, Math.floor(page + maxPageList / 2));
+    if (pagerMin === 1) {
+        if (maxPageList < pagesCount) {
+            pagerMax = maxPageList;
+        }
+        else {
+            pagerMax = pagesCount;
+        }
+    }
+    if (pagerMax === pagesCount) {
+        if (pagerMax - maxPageList < 1) {
+            pagerMin = 1;
+        }
+        else {
+            pagerMin = pagerMax - maxPageList;
+        }
+    }
+    if (pagerMin > 1) {
+        pager.previousDots = true;
+    }
+    if (pagerMax < pagesCount) {
+        pager.nextDots = true;
+    }
+    for (let i = pagerMin; i <= pagerMax; i++) {
+        pager.pages.push(i);
+    }
+    return pager;
+}
+//# sourceMappingURL=admin-pager.js.map

package/dist/util/admin-pager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-pager.js","sourceRoot":"","sources":["../../src/util/admin-pager.ts"],"names":[],"mappings":";;;AAyBA,kCAkDC;AAzED;;;;GAIG;AACU,QAAA,aAAa,GAAG,CAAC,CAAC;AAE/B;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,WAAW,CAAC,KAAa,EAAE,IAAY,EAAE,UAAkB,EAAE,cAAsB,qBAAa;IAC9G,MAAM,KAAK,GAAe;QACxB,IAAI;QACJ,UAAU;QACV,KAAK,EAAE,EAAE;QACT,KAAK;QACL,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,KAAK;QACnB,IAAI,EAAE,IAAI;QACV,QAAQ,EAAE,KAAK;KAChB,CAAC;IAEF,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACb,KAAK,CAAC,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,IAAI,IAAI,GAAG,UAAU,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC;IACxB,CAAC;IAED,IAAI,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9D,IAAI,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC;IACxE,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,IAAI,WAAW,GAAG,UAAU,EAAE,CAAC;YAC7B,QAAQ,GAAG,WAAW,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,UAAU,CAAC;QACxB,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC5B,IAAI,QAAQ,GAAG,WAAW,GAAG,CAAC,EAAE,CAAC;YAC/B,QAAQ,GAAG,CAAC,CAAC;QACf,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,QAAQ,GAAG,WAAW,CAAC;QACpC,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjB,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC;IAC5B,CAAC;IAED,IAAI,QAAQ,GAAG,UAAU,EAAE,CAAC;QAC1B,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;IACxB,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,QAAQ,EAAE,CAAC,IAAI,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/util/apiPaginate.d.ts

@@ -0,0 +1,11 @@
+declare const _default: {
+    parseOptionsForElasticSearch(params: any): {
+        limit: any;
+        offset: any;
+    };
+    parseOptions(params: any): {
+        limit: any;
+        offset: any;
+    };
+};
+export default _default;

package/dist/util/apiPaginate.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const LIMIT_DEFAULT = 50;
+const LIMIT_MAX = 1000;
+const OFFSET_DEFAULT = 0;
+const DEFAULT_MAX_RESULT_WINDOW = 10000;
+const parseIntValue = (value, defaultValue, maxLimit) => {
+    if (!value) {
+        return defaultValue;
+    }
+    const v = parseInt(value);
+    if (!maxLimit) {
+        return v;
+    }
+    return v <= maxLimit ? v : maxLimit;
+};
+exports.default = {
+    parseOptionsForElasticSearch(params) {
+        const limit = parseIntValue(params.limit, LIMIT_DEFAULT, LIMIT_MAX);
+        const offset = parseIntValue(params.offset, OFFSET_DEFAULT);
+        // See https://github.com/crowi/crowi/pull/293
+        if (limit + offset > DEFAULT_MAX_RESULT_WINDOW) {
+            throw new Error(`(limit + offset) must be less than or equal to ${DEFAULT_MAX_RESULT_WINDOW}`);
+        }
+        return { limit, offset };
+    },
+    parseOptions(params) {
+        const limit = parseIntValue(params.limit, LIMIT_DEFAULT, LIMIT_MAX);
+        const offset = parseIntValue(params.offset, OFFSET_DEFAULT);
+        return { limit, offset };
+    },
+};
+//# sourceMappingURL=apiPaginate.js.map

package/dist/util/apiPaginate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiPaginate.js","sourceRoot":"","sources":["../../src/util/apiPaginate.ts"],"names":[],"mappings":";;AAAA,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,SAAS,GAAG,IAAI,CAAC;AAEvB,MAAM,cAAc,GAAG,CAAC,CAAC;AAEzB,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAExC,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,QAAS,EAAE,EAAE;IACvD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACtC,CAAC,CAAC;AAEF,kBAAe;IACb,4BAA4B,CAAC,MAAM;QACjC,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAE5D,8CAA8C;QAC9C,IAAI,KAAK,GAAG,MAAM,GAAG,yBAAyB,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,kDAAkD,yBAAyB,EAAE,CAAC,CAAC;QACjG,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC3B,CAAC;IACD,YAAY,CAAC,MAAM;QACjB,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAE5D,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC3B,CAAC;CACF,CAAC"}

package/dist/util/apiResponse.d.ts

@@ -0,0 +1,9 @@
+declare const _default: {
+    error(err?: any, info?: {}): {
+        ok: boolean;
+        info: any;
+        error?: any;
+    };
+    success(data?: any): any;
+};
+export default _default;

package/dist/util/apiResponse.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = {
+    error(err, info = {}) {
+        const result = {
+            ok: false,
+            info,
+        };
+        if (err instanceof Error) {
+            result.error = err.toString();
+        }
+        else {
+            result.error = err;
+        }
+        return result;
+    },
+    success(data) {
+        const result = data || {};
+        result.ok = true;
+        return result;
+    },
+};
+//# sourceMappingURL=apiResponse.js.map

package/dist/util/apiResponse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiResponse.js","sourceRoot":"","sources":["../../src/util/apiResponse.ts"],"names":[],"mappings":";;AAAA,kBAAe;IACb,KAAK,CAAC,GAAI,EAAE,IAAI,GAAG,EAAE;QACnB,MAAM,MAAM,GAIR;YACF,EAAE,EAAE,KAAK;YACT,IAAI;SACL,CAAC;QAEF,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC;QACrB,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,CAAC,IAAK;QACX,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QAE1B,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC;QACjB,OAAO,MAAM,CAAC;IAChB,CAAC;CACF,CAAC"}

package/dist/util/auth.d.ts

@@ -0,0 +1,11 @@
+declare const _default: {
+    isLoggedIn(crowi: any, req: any): any;
+    isAccessTokenExpired(req: any): boolean;
+    reauth(req: any, config: any): Promise<any>;
+    saveTokenToSession(req: any, provider: string | undefined, { accessToken, refreshToken, expiryDate }: {
+        accessToken: string | null;
+        refreshToken: string | null;
+        expiryDate: number | null;
+    }): void;
+};
+export default _default;