@fonderie/auth 7.11.1 → 7.12.0

package/dist/index.d.cts

@@ -230,8 +230,11 @@ declare function importUser(store: IStoreAdapter, user: IImportUser): Promise<{
 
 interface IPurgeOptions {
     olderThanDays: number;
+    bus?: {
+        emit(type: string, payload: unknown): Promise<void>;
+    } | undefined;
 }
-declare function purgeSoftDeletedUsers(store: IStoreAdapter, { olderThanDays }: IPurgeOptions): Promise<number>;
+declare function purgeSoftDeletedUsers(store: IStoreAdapter, { olderThanDays, bus }: IPurgeOptions): Promise<number>;
 interface IUserRetentionScheduleOptions extends IPurgeOptions {
     intervalMs?: number;
     onPurge?: (deleted: number) => void;

package/dist/index.d.ts

@@ -230,8 +230,11 @@ declare function importUser(store: IStoreAdapter, user: IImportUser): Promise<{
 
 interface IPurgeOptions {
     olderThanDays: number;
+    bus?: {
+        emit(type: string, payload: unknown): Promise<void>;
+    } | undefined;
 }
-declare function purgeSoftDeletedUsers(store: IStoreAdapter, { olderThanDays }: IPurgeOptions): Promise<number>;
+declare function purgeSoftDeletedUsers(store: IStoreAdapter, { olderThanDays, bus }: IPurgeOptions): Promise<number>;
 interface IUserRetentionScheduleOptions extends IPurgeOptions {
     intervalMs?: number;
     onPurge?: (deleted: number) => void;

package/dist/index.js

@@ -275,6 +275,8 @@ var MESSAGE_KEYS = {
 var EVENT_KEYS = {
   userRegistered: "fonderie.user.registered",
   userDeleted: "fonderie.user.deleted",
+  // Emitted by purgeSoftDeletedUsers (given a bus) once the row is hard-deleted.
+  userPurged: "fonderie.user.purged",
   emailVerified: "fonderie.user.email_verified",
   passwordChanged: "fonderie.user.password_changed"
 };
@@ -548,7 +550,7 @@ var UserModel = class {
   async list(query = {}) {
     const limit = Math.min(query.limit ?? 50, MAX_LIST_LIMIT);
     const params = [];
-    const where = ["deleted_at IS NULL"];
+    const where = [query.deleted ? "deleted_at IS NOT NULL" : "deleted_at IS NULL"];
     if (query.cursor) {
       params.push(query.cursor.createdAt, query.cursor.id);
       where.push(`(created_at, id) < ($${params.length - 1}::timestamptz, $${params.length}::uuid)`);
@@ -564,6 +566,16 @@ var UserModel = class {
     );
     return { users: rows.slice(0, limit), hasMore: rows.length > limit };
   }
+  // For operator views only: a soft-deleted account still resolves, with
+  // deletedAt set, so the console can say "deleted on …" instead of "no such
+  // user". Nothing that authenticates or acts on an account may use this.
+  async findByIdIncludingDeleted(id) {
+    const [row] = await this.store.query(
+      `SELECT ${USER_COLUMNS} FROM fonderie_users WHERE id = $1`,
+      [id]
+    );
+    return row ?? null;
+  }
   async findById(id) {
     const [row] = await this.store.query(
       `SELECT ${USER_COLUMNS} FROM fonderie_users WHERE id = $1 AND deleted_at IS NULL`,
@@ -3381,7 +3393,12 @@ function adminRouteTable(store) {
         const cursor = cursorParam ? decodeLoginCursor(cursorParam) : null;
         if (cursorParam && !cursor)
           return setApiResponse7(HTTP7.UNPROCESSABLE, "INVALID_PARAMETER", "Invalid cursor");
-        const page = await users.list({ limit, ...cursor ? { cursor } : {} });
+        const deleted = params.get("deleted") === "1" || params.get("deleted") === "true";
+        const page = await users.list({
+          limit,
+          ...cursor ? { cursor } : {},
+          ...deleted ? { deleted } : {}
+        });
         return setApiResponse7(HTTP7.OK, "USERS", "Users", toAdminUserPageDTO(page));
       }
     ],
@@ -3389,7 +3406,7 @@ function adminRouteTable(store) {
       "GET",
       "/_admin/users/:id",
       async (ctx) => {
-        const user = await users.findById(idOf(ctx));
+        const user = await users.findByIdIncludingDeleted(idOf(ctx));
         return user ? setApiResponse7(HTTP7.OK, "USER", "User", toAdminUserDTO(user)) : NOT_FOUND();
       }
     ],
@@ -3468,7 +3485,7 @@ var AuthModule = class {
   name = "@fonderie/auth";
   // Baked in at build time by tsup.base, so the operator's Modules page can
   // say what is actually deployed rather than 'not reported'.
-  version = "7.11.1";
+  version = "7.12.0";
   // Users, sessions, login history, suspend — only through @fonderie/admin.
   describeAdmin() {
     return { routes: describeAuthAdminRoutes(this.store) };
@@ -3699,7 +3716,7 @@ async function importUser(store, user) {
 }
 
 // src/services/retention.ts
-async function purgeSoftDeletedUsers(store, { olderThanDays }) {
+async function purgeSoftDeletedUsers(store, { olderThanDays, bus }) {
   if (!Number.isFinite(olderThanDays) || olderThanDays < 0) {
     throw new Error("[auth] purgeSoftDeletedUsers: olderThanDays must be a non-negative number");
   }
@@ -3710,6 +3727,9 @@ async function purgeSoftDeletedUsers(store, { olderThanDays }) {
 		 RETURNING id`,
     [olderThanDays]
   );
+  if (bus) {
+    for (const { id } of rows) await bus.emit("fonderie.user.purged", { userId: id });
+  }
   return rows.length;
 }
 function startUserRetention(store, options) {
@@ -3718,7 +3738,10 @@ function startUserRetention(store, options) {
   const run = async () => {
     if (stopped) return;
     try {
-      const deleted = await purgeSoftDeletedUsers(store, { olderThanDays: options.olderThanDays });
+      const deleted = await purgeSoftDeletedUsers(store, {
+        olderThanDays: options.olderThanDays,
+        ...options.bus ? { bus: options.bus } : {}
+      });
       options.onPurge?.(deleted);
     } catch (err) {
       console.error("[auth] scheduled user retention purge failed:", err);