@fuzdev/fuz_app 0.30.0 → 0.31.0

package/dist/auth/app_settings_routes.js

@@ -1,66 +0,0 @@
-/**
- * Admin app settings route specs.
- *
- * GET and PATCH routes for managing global app settings (e.g. open signup toggle).
- * All routes require the `admin` role.
- *
- * @module
- */
-import { z } from 'zod';
-import { get_route_input } from '../http/route_spec.js';
-import { require_request_context } from './request_context.js';
-import { get_client_ip } from '../http/proxy.js';
-import { audit_log_fire_and_forget } from './audit_log_queries.js';
-import { query_app_settings_load_with_username, query_app_settings_update, } from './app_settings_queries.js';
-import { AppSettingsWithUsernameJson, UpdateAppSettingsInput, } from './app_settings_schema.js';
-/**
- * Create admin app settings route specs.
- *
- * @param deps - stateless capabilities (log, on_audit_event)
- * @param options - per-factory configuration
- * @returns route specs for app settings management
- */
-export const create_app_settings_route_specs = (deps, options) => {
-    const { app_settings } = options;
-    return [
-        {
-            method: 'GET',
-            path: '/settings',
-            auth: { type: 'role', role: 'admin' },
-            description: 'Get app settings',
-            input: z.null(),
-            output: z.strictObject({ settings: AppSettingsWithUsernameJson }),
-            handler: async (c, route) => {
-                const settings = await query_app_settings_load_with_username(route);
-                return c.json({ settings });
-            },
-        },
-        {
-            method: 'PATCH',
-            path: '/settings',
-            auth: { type: 'role', role: 'admin' },
-            description: 'Update app settings',
-            input: UpdateAppSettingsInput,
-            output: z.strictObject({ ok: z.literal(true), settings: AppSettingsWithUsernameJson }),
-            handler: async (c, route) => {
-                const ctx = require_request_context(c);
-                const { open_signup } = get_route_input(c);
-                const old_value = app_settings.open_signup;
-                const updated = await query_app_settings_update(route, open_signup, ctx.actor.id);
-                // Mutate the in-memory ref so GET reads are consistent
-                app_settings.open_signup = updated.open_signup;
-                app_settings.updated_at = updated.updated_at;
-                app_settings.updated_by = updated.updated_by;
-                void audit_log_fire_and_forget(route, {
-                    event_type: 'app_settings_update',
-                    actor_id: ctx.actor.id,
-                    account_id: ctx.account.id,
-                    ip: get_client_ip(c),
-                    metadata: { setting: 'open_signup', old_value, new_value: open_signup },
-                }, deps.log, deps.on_audit_event);
-                const settings_with_username = await query_app_settings_load_with_username(route);
-                return c.json({ ok: true, settings: settings_with_username });
-            },
-        },
-    ];
-};

package/dist/auth/invite_routes.d.ts

@@ -1,18 +0,0 @@
-/**
- * Admin invite route specs for invite-based signup.
- *
- * All routes require the `admin` role. Provides CRUD for invites
- * that gate who can sign up.
- *
- * @module
- */
-import { type RouteSpec } from '../http/route_spec.js';
-import type { RouteFactoryDeps } from './deps.js';
-/**
- * Create admin invite route specs.
- *
- * @param deps - stateless capabilities (log)
- * @returns route specs for invite management
- */
-export declare const create_invite_route_specs: (deps: Pick<RouteFactoryDeps, "log" | "on_audit_event">) => Array<RouteSpec>;
-//# sourceMappingURL=invite_routes.d.ts.map

package/dist/auth/invite_routes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"invite_routes.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/invite_routes.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAoC,KAAK,SAAS,EAAC,MAAM,uBAAuB,CAAC;AAYxF,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,WAAW,CAAC;AAUhD;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,GACrC,MAAM,IAAI,CAAC,gBAAgB,EAAE,KAAK,GAAG,gBAAgB,CAAC,KACpD,KAAK,CAAC,SAAS,CAwHjB,CAAC"}

package/dist/auth/invite_routes.js

@@ -1,129 +0,0 @@
-/**
- * Admin invite route specs for invite-based signup.
- *
- * All routes require the `admin` role. Provides CRUD for invites
- * that gate who can sign up.
- *
- * @module
- */
-import { z } from 'zod';
-import { get_route_input, get_route_params } from '../http/route_spec.js';
-import { require_request_context } from './request_context.js';
-import { get_client_ip } from '../http/proxy.js';
-import { audit_log_fire_and_forget } from './audit_log_queries.js';
-import { query_account_by_username, query_account_by_email } from './account_queries.js';
-import { query_create_invite, query_invite_list_all_with_usernames, query_invite_delete_unclaimed, } from './invite_queries.js';
-import { InviteJson, InviteWithUsernamesJson } from './invite_schema.js';
-import { Username, Email } from './account_schema.js';
-import { is_pg_unique_violation } from '../db/pg_error.js';
-import { ERROR_INVITE_NOT_FOUND, ERROR_INVITE_MISSING_IDENTIFIER, ERROR_INVITE_DUPLICATE, ERROR_INVITE_ACCOUNT_EXISTS_USERNAME, ERROR_INVITE_ACCOUNT_EXISTS_EMAIL, } from '../http/error_schemas.js';
-/**
- * Create admin invite route specs.
- *
- * @param deps - stateless capabilities (log)
- * @returns route specs for invite management
- */
-export const create_invite_route_specs = (deps) => {
-    return [
-        {
-            method: 'POST',
-            path: '/invites',
-            auth: { type: 'role', role: 'admin' },
-            description: 'Create an invite',
-            input: z.strictObject({
-                email: Email.nullish(),
-                username: Username.nullish(),
-            }),
-            output: z.strictObject({ ok: z.literal(true), invite: InviteJson }),
-            errors: {
-                400: z.looseObject({ error: z.literal(ERROR_INVITE_MISSING_IDENTIFIER) }),
-                409: z.looseObject({
-                    error: z.enum([
-                        ERROR_INVITE_DUPLICATE,
-                        ERROR_INVITE_ACCOUNT_EXISTS_USERNAME,
-                        ERROR_INVITE_ACCOUNT_EXISTS_EMAIL,
-                    ]),
-                }),
-            },
-            handler: async (c, route) => {
-                const ctx = require_request_context(c);
-                const { email, username } = get_route_input(c);
-                if (!email && !username) {
-                    return c.json({ error: ERROR_INVITE_MISSING_IDENTIFIER }, 400);
-                }
-                if (username) {
-                    const existing = await query_account_by_username(route, username);
-                    if (existing) {
-                        return c.json({ error: ERROR_INVITE_ACCOUNT_EXISTS_USERNAME }, 409);
-                    }
-                }
-                if (email) {
-                    const existing = await query_account_by_email(route, email);
-                    if (existing) {
-                        return c.json({ error: ERROR_INVITE_ACCOUNT_EXISTS_EMAIL }, 409);
-                    }
-                }
-                let invite;
-                try {
-                    invite = await query_create_invite(route, {
-                        email: email ?? null,
-                        username: username ?? null,
-                        created_by: ctx.actor.id,
-                    });
-                }
-                catch (e) {
-                    if (is_pg_unique_violation(e)) {
-                        return c.json({ error: ERROR_INVITE_DUPLICATE }, 409);
-                    }
-                    throw e;
-                }
-                void audit_log_fire_and_forget(route, {
-                    event_type: 'invite_create',
-                    actor_id: ctx.actor.id,
-                    account_id: ctx.account.id,
-                    ip: get_client_ip(c),
-                    metadata: { invite_id: invite.id, email: email ?? null, username: username ?? null },
-                }, deps.log, deps.on_audit_event);
-                return c.json({ ok: true, invite });
-            },
-        },
-        {
-            method: 'GET',
-            path: '/invites',
-            auth: { type: 'role', role: 'admin' },
-            description: 'List all invites',
-            input: z.null(),
-            output: z.strictObject({ invites: z.array(InviteWithUsernamesJson) }),
-            handler: async (c, route) => {
-                const invites = await query_invite_list_all_with_usernames(route);
-                return c.json({ invites });
-            },
-        },
-        {
-            method: 'DELETE',
-            path: '/invites/:id',
-            auth: { type: 'role', role: 'admin' },
-            description: 'Delete an unclaimed invite',
-            params: z.strictObject({ id: z.uuid() }),
-            input: z.null(),
-            output: z.strictObject({ ok: z.literal(true) }),
-            errors: { 404: z.looseObject({ error: z.literal(ERROR_INVITE_NOT_FOUND) }) },
-            handler: async (c, route) => {
-                const { id } = get_route_params(c);
-                const deleted = await query_invite_delete_unclaimed(route, id);
-                if (!deleted) {
-                    return c.json({ error: ERROR_INVITE_NOT_FOUND }, 404);
-                }
-                const ctx = require_request_context(c);
-                void audit_log_fire_and_forget(route, {
-                    event_type: 'invite_delete',
-                    actor_id: ctx.actor.id,
-                    account_id: ctx.account.id,
-                    ip: get_client_ip(c),
-                    metadata: { invite_id: id },
-                }, deps.log, deps.on_audit_event);
-                return c.json({ ok: true });
-            },
-        },
-    ];
-};