@fonderie/auth 7.11.1 → 7.12.0

package/brain/outcomes.md

@@ -138,8 +138,8 @@ Raw SQL ships in `node_modules/@fonderie/auth/dist/migrations/sql/` — read it
 
 | Method | Path | Middleware chain (auth / validation / handler) |
 |---|---|---|
-| GET | `/_admin/users` | `async (ctx) => { const params = new URL(ctx.request.url).searchParams; const email = params.get('email')?.trim().toLowerCase(); if (email) { const user = await users.findByEmail(email); return user ? setApiResponse(HTTP.OK, 'USER', 'User', toAdminUserDTO(user)) : NOT_FOUND(); } const rawLimit = Number(params.get('limit') ?? 50); const limit = Number.isFinite(rawLimit) ? Math.min(Math.max(Math.trunc(rawLimit), 1), 200) : 50; const cursorParam = params.get('cursor'); const cursor = cursorParam ? decodeLoginCursor(cursorParam) : null; if (cursorParam && !cursor) return setApiResponse(HTTP.UNPROCESSABLE, 'INVALID_PARAMETER', 'Invalid cursor'); const page = await users.list({ limit, ...(cursor ? { cursor } : {}) }); return setApiResponse(HTTP.OK, 'USERS', 'Users', toAdminUserPageDTO(page)); }` |
-| GET | `/_admin/users/:id` | `async (ctx) => { const user = await users.findById(idOf(ctx)); return user ? setApiResponse(HTTP.OK, 'USER', 'User', toAdminUserDTO(user)) : NOT_FOUND(); }` |
+| GET | `/_admin/users` | `async (ctx) => { const params = new URL(ctx.request.url).searchParams; const email = params.get('email')?.trim().toLowerCase(); if (email) { const user = await users.findByEmail(email); return user ? setApiResponse(HTTP.OK, 'USER', 'User', toAdminUserDTO(user)) : NOT_FOUND(); } const rawLimit = Number(params.get('limit') ?? 50); const limit = Number.isFinite(rawLimit) ? Math.min(Math.max(Math.trunc(rawLimit), 1), 200) : 50; const cursorParam = params.get('cursor'); const cursor = cursorParam ? decodeLoginCursor(cursorParam) : null; if (cursorParam && !cursor) return setApiResponse(HTTP.UNPROCESSABLE, 'INVALID_PARAMETER', 'Invalid cursor'); const deleted = params.get('deleted') === '1' || params.get('deleted') === 'true'; const page = await users.list({ limit, ...(cursor ? { cursor } : {}), ...(deleted ? { deleted } : {}), }); return setApiResponse(HTTP.OK, 'USERS', 'Users', toAdminUserPageDTO(page)); }` |
+| GET | `/_admin/users/:id` | `async (ctx) => { // Read-only view: a soft-deleted account resolves (deletedAt set), so // an operator arriving from billing sees what happened to it. const user = await users.findByIdIncludingDeleted(idOf(ctx)); return user ? setApiResponse(HTTP.OK, 'USER', 'User', toAdminUserDTO(user)) : NOT_FOUND(); }` |
 | GET | `/_admin/users/:id/login-history` | `async (ctx) => { if (!(await users.findById(idOf(ctx)))) return NOT_FOUND(); const params = new URL(ctx.request.url).searchParams; const rawLimit = Number(params.get('limit') ?? 50); const limit = Number.isFinite(rawLimit) ? Math.min(Math.max(Math.trunc(rawLimit), 1), 200) : 50; const cursorParam = params.get('cursor'); const cursor = cursorParam ? decodeLoginCursor(cursorParam) : null; if (cursorParam && !cursor) return setApiResponse(HTTP.UNPROCESSABLE, 'INVALID_PARAMETER', 'Invalid cursor'); const page = await events.listByUser({ userId: idOf(ctx), limit, ...(cursor ? { cursor } : {}), }); return setApiResponse( HTTP.OK, 'LOGIN_HISTORY', 'Login history', toLoginHistoryPageDTO(page), ); }` |
 | DELETE | `/_admin/users/:id/sessions` | `async (ctx) => { if (!(await users.findById(idOf(ctx)))) return NOT_FOUND(); await sessions.deleteByUser(idOf(ctx)); return setApiResponse(HTTP.OK, 'SESSIONS_REVOKED', 'All sessions revoked'); }` |
 | GET | `/_admin/users/:id/sessions` | `async (ctx) => { if (!(await users.findById(idOf(ctx)))) return NOT_FOUND(); const rows = await sessions.listLiveByUser(idOf(ctx)); return setApiResponse( HTTP.OK, 'SESSIONS', 'Live sessions', rows.map((r) => toSessionDTO(r, null)), ); }` |

package/brain/signatures.md

@@ -213,12 +213,15 @@ function normalizeEmailSafe(email: string): string | null
 
 function importUser(store: IStoreAdapter, user: IImportUser): Promise<{ id: string; }>
 
-function purgeSoftDeletedUsers(store: IStoreAdapter, { olderThanDays }: IPurgeOptions): Promise<number>
+function purgeSoftDeletedUsers(store: IStoreAdapter, { olderThanDays, bus }: IPurgeOptions): Promise<number>
 
 function startUserRetention(store: IStoreAdapter, options: IUserRetentionScheduleOptions): { stop: () => void; }
 
 interface IPurgeOptions {
     olderThanDays: number;
+    bus?: {
+        emit(type: string, payload: unknown): Promise<void>;
+    } | undefined;
 }
 
 interface IUserRetentionScheduleOptions extends IPurgeOptions {

package/dist/index.cjs

@@ -320,6 +320,8 @@ var MESSAGE_KEYS = {
 var EVENT_KEYS = {
   userRegistered: "fonderie.user.registered",
   userDeleted: "fonderie.user.deleted",
+  // Emitted by purgeSoftDeletedUsers (given a bus) once the row is hard-deleted.
+  userPurged: "fonderie.user.purged",
   emailVerified: "fonderie.user.email_verified",
   passwordChanged: "fonderie.user.password_changed"
 };
@@ -593,7 +595,7 @@ var UserModel = class {
   async list(query = {}) {
     const limit = Math.min(query.limit ?? 50, MAX_LIST_LIMIT);
     const params = [];
-    const where = ["deleted_at IS NULL"];
+    const where = [query.deleted ? "deleted_at IS NOT NULL" : "deleted_at IS NULL"];
     if (query.cursor) {
       params.push(query.cursor.createdAt, query.cursor.id);
       where.push(`(created_at, id) < ($${params.length - 1}::timestamptz, $${params.length}::uuid)`);
@@ -609,6 +611,16 @@ var UserModel = class {
     );
     return { users: rows.slice(0, limit), hasMore: rows.length > limit };
   }
+  // For operator views only: a soft-deleted account still resolves, with
+  // deletedAt set, so the console can say "deleted on …" instead of "no such
+  // user". Nothing that authenticates or acts on an account may use this.
+  async findByIdIncludingDeleted(id) {
+    const [row] = await this.store.query(
+      `SELECT ${USER_COLUMNS} FROM fonderie_users WHERE id = $1`,
+      [id]
+    );
+    return row ?? null;
+  }
   async findById(id) {
     const [row] = await this.store.query(
       `SELECT ${USER_COLUMNS} FROM fonderie_users WHERE id = $1 AND deleted_at IS NULL`,
@@ -3426,7 +3438,12 @@ function adminRouteTable(store) {
         const cursor = cursorParam ? decodeLoginCursor(cursorParam) : null;
         if (cursorParam && !cursor)
           return (0, import_core12.setApiResponse)(import_core12.HTTP.UNPROCESSABLE, "INVALID_PARAMETER", "Invalid cursor");
-        const page = await users.list({ limit, ...cursor ? { cursor } : {} });
+        const deleted = params.get("deleted") === "1" || params.get("deleted") === "true";
+        const page = await users.list({
+          limit,
+          ...cursor ? { cursor } : {},
+          ...deleted ? { deleted } : {}
+        });
         return (0, import_core12.setApiResponse)(import_core12.HTTP.OK, "USERS", "Users", toAdminUserPageDTO(page));
       }
     ],
@@ -3434,7 +3451,7 @@ function adminRouteTable(store) {
       "GET",
       "/_admin/users/:id",
       async (ctx) => {
-        const user = await users.findById(idOf(ctx));
+        const user = await users.findByIdIncludingDeleted(idOf(ctx));
         return user ? (0, import_core12.setApiResponse)(import_core12.HTTP.OK, "USER", "User", toAdminUserDTO(user)) : NOT_FOUND();
       }
     ],
@@ -3513,7 +3530,7 @@ var AuthModule = class {
   name = "@fonderie/auth";
   // Baked in at build time by tsup.base, so the operator's Modules page can
   // say what is actually deployed rather than 'not reported'.
-  version = "7.11.1";
+  version = "7.12.0";
   // Users, sessions, login history, suspend — only through @fonderie/admin.
   describeAdmin() {
     return { routes: describeAuthAdminRoutes(this.store) };
@@ -3744,7 +3761,7 @@ async function importUser(store, user) {
 }
 
 // src/services/retention.ts
-async function purgeSoftDeletedUsers(store, { olderThanDays }) {
+async function purgeSoftDeletedUsers(store, { olderThanDays, bus }) {
   if (!Number.isFinite(olderThanDays) || olderThanDays < 0) {
     throw new Error("[auth] purgeSoftDeletedUsers: olderThanDays must be a non-negative number");
   }
@@ -3755,6 +3772,9 @@ async function purgeSoftDeletedUsers(store, { olderThanDays }) {
 		 RETURNING id`,
     [olderThanDays]
   );
+  if (bus) {
+    for (const { id } of rows) await bus.emit("fonderie.user.purged", { userId: id });
+  }
   return rows.length;
 }
 function startUserRetention(store, options) {
@@ -3763,7 +3783,10 @@ function startUserRetention(store, options) {
   const run = async () => {
     if (stopped) return;
     try {
-      const deleted = await purgeSoftDeletedUsers(store, { olderThanDays: options.olderThanDays });
+      const deleted = await purgeSoftDeletedUsers(store, {
+        olderThanDays: options.olderThanDays,
+        ...options.bus ? { bus: options.bus } : {}
+      });
       options.onPurge?.(deleted);
     } catch (err) {
       console.error("[auth] scheduled user retention purge failed:", err);