@ibgib/node-gib 0.0.14 → 0.0.17

package/dist/serve-gib/handlers/api/email/email-outbound.handler.mjs

@@ -23,7 +23,8 @@ export class EmailOutboundHandler extends ServeGibHandlerBase {
             this.sender = options.sender;
         }
         else {
-            const mode = process.env.EMAIL_MODE || 'mock';
+            const isProd = process.env.NODE_ENV === 'production';
+            const mode = (process.env.EMAIL_MODE || (isProd ? 'aws' : 'mock')).toLowerCase();
             if (mode === 'aws') {
                 this.sender = new EmailSenderAws({
                     accessKeyId: process.env.AWS_ACCESS_KEY_ID || '',
@@ -31,9 +32,15 @@ export class EmailOutboundHandler extends ServeGibHandlerBase {
                     region: process.env.AWS_REGION || 'us-east-1',
                 });
             }
-            else {
+            else if (mode === 'mock') {
+                if (isProd) {
+                    throw new Error('EMAIL_MODE=mock is prohibited when NODE_ENV=production. (E: 897a6b5c4d3e2f10987654321fedcba0)');
+                }
                 this.sender = new EmailSenderMock();
             }
+            else {
+                throw new Error(`Unsupported EMAIL_MODE '${mode}'. Must be 'aws' or 'mock'. (E: 987a6b5c4d3e2f10987654321fedcba1)`);
+            }
         }
     }
     async handleRouteImpl(reqCtx) {

package/dist/serve-gib/handlers/api/email/email-outbound.handler.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"email-outbound.handler.mjs","sourceRoot":"","sources":["../../../../../src/serve-gib/handlers/api/email/email-outbound.handler.mts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,iDAAiD,CAAC;AAClF,OAAO,EAAE,cAAc,EAAE,MAAM,4CAA4C,CAAC;AAE5E,OAAO,EAAE,eAAe,EAAE,MAAM,8CAA8C,CAAC;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAM7D;;;GAGG;AACH,MAAM,OAAO,oBAAqB,SAAQ,mBAAmB;IACtC,EAAE,GAAG,IAAI,oBAAoB,CAAC,IAAI,GAAG,CAAC;IACtC,MAAM,GAAuB,MAAM,CAAC;IACpC,KAAK,GAAG,gBAAgB,CAAC,UAAU,CAAC;IAE/C,MAAM,CAAc;IAE5B,YAAY,OAAO,GAAgC,EAAE;QACjD,KAAK,EAAE,CAAC;QAER,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QACjC,CAAC;aAAM,CAAC;YACJ,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,MAAM,CAAC;YAC9C,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACjB,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC;oBAC7B,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE;oBAChD,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE;oBACxD,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW;iBAChD,CAAC,CAAC;YACP,CAAC;iBAAM,CAAC;gBACJ,IAAI,CAAC,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;YACxC,CAAC;QACL,CAAC;IACL,CAAC;IAES,KAAK,CAAC,eAAe,CAAC,MAAsB;QAClD,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC;QACtD,IAAI,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;YACjD,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;YACpD,CAAC;YAED,IAAI,SAAwB,CAAC;YAC7B,IAAI,CAAC;gBACD,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACL,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC;YAC9D,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAE1D,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;gBACrB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,kDAAkD,UAAU,CAAC,SAAS,wCAAwC,CAAC,CAAC;gBACjI,OAAO,IAAI,CAAC,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC;YAC7D,CAAC;iBAAM,CAAC;gBACJ,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,0BAA0B,UAAU,CAAC,KAAK,wCAAwC,CAAC,CAAC;gBACvG,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,IAAI,GAAG,EAAE,UAAU,CAAC,KAAK,IAAI,sBAAsB,CAAC,CAAC;YAChG,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;YACpC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,0BAA0B,IAAI,wCAAwC,CAAC,CAAC;YAC3F,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,yBAAyB,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;IACL,CAAC;CACJ"}
+{"version":3,"file":"email-outbound.handler.mjs","sourceRoot":"","sources":["../../../../../src/serve-gib/handlers/api/email/email-outbound.handler.mts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,iDAAiD,CAAC;AAClF,OAAO,EAAE,cAAc,EAAE,MAAM,4CAA4C,CAAC;AAE5E,OAAO,EAAE,eAAe,EAAE,MAAM,8CAA8C,CAAC;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAM7D;;;GAGG;AACH,MAAM,OAAO,oBAAqB,SAAQ,mBAAmB;IACtC,EAAE,GAAG,IAAI,oBAAoB,CAAC,IAAI,GAAG,CAAC;IACtC,MAAM,GAAuB,MAAM,CAAC;IACpC,KAAK,GAAG,gBAAgB,CAAC,UAAU,CAAC;IAE/C,MAAM,CAAc;IAE5B,YAAY,OAAO,GAAgC,EAAE;QACjD,KAAK,EAAE,CAAC;QAER,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QACjC,CAAC;aAAM,CAAC;YACJ,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;YACrD,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACjF,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACjB,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC;oBAC7B,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE;oBAChD,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE;oBACxD,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW;iBAChD,CAAC,CAAC;YACP,CAAC;iBAAM,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACzB,IAAI,MAAM,EAAE,CAAC;oBACT,MAAM,IAAI,KAAK,CAAC,+FAA+F,CAAC,CAAC;gBACrH,CAAC;gBACD,IAAI,CAAC,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;YACxC,CAAC;iBAAM,CAAC;gBACJ,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,mEAAmE,CAAC,CAAC;YACxH,CAAC;QACL,CAAC;IACL,CAAC;IAES,KAAK,CAAC,eAAe,CAAC,MAAsB;QAClD,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC;QACtD,IAAI,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;YACjD,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;YACpD,CAAC;YAED,IAAI,SAAwB,CAAC;YAC7B,IAAI,CAAC;gBACD,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACL,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC;YAC9D,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAE1D,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;gBACrB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,kDAAkD,UAAU,CAAC,SAAS,wCAAwC,CAAC,CAAC;gBACjI,OAAO,IAAI,CAAC,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC;YAC7D,CAAC;iBAAM,CAAC;gBACJ,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,0BAA0B,UAAU,CAAC,KAAK,wCAAwC,CAAC,CAAC;gBACvG,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,IAAI,GAAG,EAAE,UAAU,CAAC,KAAK,IAAI,sBAAsB,CAAC,CAAC;YAChG,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;YACpC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,0BAA0B,IAAI,wCAAwC,CAAC,CAAC;YAC3F,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,yBAAyB,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;IACL,CAAC;CACJ"}

package/dist/serve-gib/handlers/api/email/email-verification-code.handler.d.mts

@@ -0,0 +1,29 @@
+/**
+ * @module serve-gib/handlers/api/email/email-verification-code
+ *
+ * Handler for POST /api/email/verification-code
+ */
+import { EmailSender } from '../../../../email/email-types.mjs';
+import { RequestContext, ResponseResult, ServeGibHttpMethod } from '../../../types.mjs';
+import { ServeGibHandlerBase } from '../../handler-base.mjs';
+export interface EmailMagicLinkHandlerOptions {
+    sender?: EmailSender;
+}
+export interface EmailMagicLinkRequestBody {
+    email: string;
+    primaryTjpAddr?: string;
+    keystone?: any;
+}
+/**
+ * POST /api/email/verification-code
+ * Generates a 6-digit verification code, saves it to pending staging, and dispatches email.
+ */
+export declare class EmailVerificationCodeHandler extends ServeGibHandlerBase {
+    protected lc: string;
+    protected method: ServeGibHttpMethod;
+    protected regex: RegExp;
+    private sender;
+    constructor(options?: EmailMagicLinkHandlerOptions);
+    protected handleRouteImpl(reqCtx: RequestContext): Promise<ResponseResult | undefined>;
+}
+//# sourceMappingURL=email-verification-code.handler.d.mts.map

package/dist/serve-gib/handlers/api/email/email-verification-code.handler.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-verification-code.handler.d.mts","sourceRoot":"","sources":["../../../../../src/serve-gib/handlers/api/email/email-verification-code.handler.mts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAAE,WAAW,EAAiB,MAAM,mCAAmC,CAAC;AAG/E,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAQ7D,MAAM,WAAW,4BAA4B;IACzC,MAAM,CAAC,EAAE,WAAW,CAAC;CACxB;AAED,MAAM,WAAW,yBAAyB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,GAAG,CAAC;CAClB;AAED;;;GAGG;AACH,qBAAa,4BAA6B,SAAQ,mBAAmB;IACjE,UAAmB,EAAE,SAA4C;IACjE,UAAmB,MAAM,EAAE,kBAAkB,CAAU;IACvD,UAAmB,KAAK,SAA4C;IAEpE,OAAO,CAAC,MAAM,CAAc;IAE5B,YAAY,OAAO,GAAE,4BAAiC,EAuBrD;IAED,UAAgB,eAAe,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CA8F3F;CACJ"}

package/dist/serve-gib/handlers/api/email/email-verification-code.handler.mjs

@@ -0,0 +1,149 @@
+/**
+ * @module serve-gib/handlers/api/email/email-verification-code
+ *
+ * Handler for POST /api/email/verification-code
+ */
+import { extractErrorMsg, getUUID } from '@ibgib/helper-gib/dist/helpers/utils-helper.mjs';
+import { EmailSenderAws } from '../../../../email/aws/email-sender-aws.mjs';
+import { EmailSenderMock } from '../../../../email/mock/email-sender-mock.mjs';
+import { API_PATH_REGEXES } from '../../../path-constants.mjs';
+import { ServeGibHandlerBase } from '../../handler-base.mjs';
+import { GLOBAL_LOG_A_LOT } from '../../../constants.mjs';
+import { generateVerificationCode, getPendingStagingDir, getPendingTjpHash, savePendingCodeRecord, savePendingStagingKeystone } from '../../../../email/verify/email-verify-helpers.mjs';
+import { validateEmail } from '../../../../email/email-helpers.mjs';
+import { normalizeEmail } from '../../../identity-index/identity-index-helpers.mjs';
+const logalot = GLOBAL_LOG_A_LOT || true;
+/**
+ * POST /api/email/verification-code
+ * Generates a 6-digit verification code, saves it to pending staging, and dispatches email.
+ */
+export class EmailVerificationCodeHandler extends ServeGibHandlerBase {
+    lc = `[${EmailVerificationCodeHandler.name}]`;
+    method = 'POST';
+    regex = API_PATH_REGEXES.EMAIL_VERIFICATION_CODE;
+    sender;
+    constructor(options = {}) {
+        super();
+        if (options.sender) {
+            this.sender = options.sender;
+        }
+        else {
+            const isProd = process.env.NODE_ENV === 'production';
+            const mode = (process.env.EMAIL_MODE || (isProd ? 'aws' : 'mock')).toLowerCase();
+            if (mode === 'aws') {
+                this.sender = new EmailSenderAws({
+                    accessKeyId: process.env.AWS_ACCESS_KEY_ID || '',
+                    secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY || '',
+                    region: process.env.AWS_REGION || 'us-east-1',
+                });
+            }
+            else if (mode === 'mock') {
+                if (isProd) {
+                    throw new Error('EMAIL_MODE=mock is prohibited when NODE_ENV=production. (E: 897a6b5c4d3e2f10987654321fedcba0)');
+                }
+                this.sender = new EmailSenderMock();
+            }
+            else {
+                throw new Error(`Unsupported EMAIL_MODE '${mode}'. Must be 'aws' or 'mock'. (E: 987a6b5c4d3e2f10987654321fedcba1)`);
+            }
+        }
+    }
+    async handleRouteImpl(reqCtx) {
+        const lc = `${this.lc}[${this.handleRouteImpl.name}]`;
+        const timestampUUID = `${lc}[${(await getUUID()).substring(0, 8)}]`;
+        try {
+            if (logalot) {
+                console.log(`${lc} starting... (I: f123456789abcdef0123456789a0001)`);
+            }
+            if (logalot) {
+                console.time(timestampUUID);
+            }
+            if (reqCtx.method !== 'POST') {
+                return this.error(405, 'Method Not Allowed');
+            }
+            if (!reqCtx.body) {
+                return this.error(400, 'Request body is empty (E: c1d2e3f4a5b67890123456789abcdef0)');
+            }
+            let body;
+            try {
+                body = JSON.parse(reqCtx.body);
+            }
+            catch {
+                return this.error(400, 'Request body must be valid JSON (E: d2e3f4a5b67890123456789abcdef01)');
+            }
+            if (logalot) {
+                console.timeLog(timestampUUID, 'parse complete');
+            }
+            const { email, primaryTjpAddr } = body;
+            if (!email || !validateEmail(email)) {
+                return this.error(400, 'Invalid email address format (E: e3f4a5b67890123456789abcdef012)');
+            }
+            const normEmail = normalizeEmail(email);
+            const effectivePrimaryTjpAddr = primaryTjpAddr || `pending:${normEmail}`;
+            const tjpHash = await getPendingTjpHash(effectivePrimaryTjpAddr);
+            const code = generateVerificationCode();
+            if (reqCtx.dataDir && tjpHash) {
+                let info = await getPendingStagingDir({ dataDir: reqCtx.dataDir, tjpHash });
+                if (!info) {
+                    // Create pending staging directory for this email if not yet present
+                    await savePendingStagingKeystone({
+                        dataDir: reqCtx.dataDir,
+                        primaryTjpAddr: effectivePrimaryTjpAddr,
+                        emails: [normEmail],
+                    });
+                    info = await getPendingStagingDir({ dataDir: reqCtx.dataDir, tjpHash });
+                }
+                if (info) {
+                    await savePendingCodeRecord({ pendingDir: info.pendingDir, code });
+                    if (logalot) {
+                        console.timeLog(timestampUUID, 'code record saved to pending staging');
+                    }
+                }
+                else {
+                    console.warn(`${lc} Failed to create or access pending staging directory for tjpHash ${tjpHash}`);
+                }
+            }
+            const outboundEmail = {
+                from: process.env.AWS_SES_FROM_EMAIL || 'noreply@ibgib.com',
+                to: [email],
+                subject: 'Verify your Ibgib Identity Email',
+                textBody: `Hello,\n\nYour 6-digit verification code for your Ibgib identity is:\n\n${code}\n\nThis code will expire in 15 minutes.\n\nIf you did not request this, please ignore this email.`,
+                htmlBody: `<div style="font-family: sans-serif; max-width: 600px; margin: 0 auto; padding: 20px; border: 1px solid #e0e0e0; border-radius: 8px;">
+<h2>Verify your Ibgib Identity Email</h2>
+<p>Your 6-digit verification code is:</p>
+<h1 style="font-family: monospace; font-size: 36px; letter-spacing: 6px; color: #4f46e5; margin: 24px 0;">${code}</h1>
+<p style="font-size: 12px; color: #999;">This code will expire in 15 minutes.</p>
+</div>`,
+            };
+            const sendResult = await this.sender.sendEmail(outboundEmail);
+            if (logalot) {
+                console.timeLog(timestampUUID, 'email send complete');
+            }
+            if (sendResult.success) {
+                console.log(`${lc} Verification code dispatched for ${email} -> ${primaryTjpAddr} msgId: ${sendResult.messageId} (I: a5b67890123456789abcdef012345678)`);
+                const isProd = process.env.NODE_ENV === 'production';
+                const mode = (process.env.EMAIL_MODE || (isProd ? 'aws' : 'mock')).toLowerCase();
+                if (mode === 'mock' || !isProd) {
+                    console.log(`${lc} ✉️ [EmailSenderMock] Verification Code for ${email}: ${code} (I: c123456789abcdef0123456789abcdef)`);
+                }
+                return this.ok({ success: true, message: 'Verification code dispatched successfully.' });
+            }
+            else {
+                console.error(`${lc} Failed to send magic link email: ${sendResult.error} (E: 5b67890123456789abcdef0123456789)`);
+                return this.error(sendResult.statusCode || 500, sendResult.error || 'Failed to send magic link email');
+            }
+        }
+        catch (error) {
+            const emsg = extractErrorMsg(error);
+            console.error(`${lc} Magic link dispatch error: ${emsg} (E: 67890123456789abcdef0123456789a)`);
+            return this.error(500, `Magic link dispatch error: ${emsg}`);
+        }
+        finally {
+            if (logalot) {
+                console.log(`${lc} complete.`);
+                console.timeEnd(timestampUUID);
+            }
+        }
+    }
+}
+//# sourceMappingURL=email-verification-code.handler.mjs.map

package/dist/serve-gib/handlers/api/email/email-verification-code.handler.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-verification-code.handler.mjs","sourceRoot":"","sources":["../../../../../src/serve-gib/handlers/api/email/email-verification-code.handler.mts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,MAAM,4CAA4C,CAAC;AAG5E,OAAO,EAAE,eAAe,EAAE,MAAM,8CAA8C,CAAC;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,MAAM,mDAAmD,CAAC;AACzL,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,oDAAoD,CAAC;AAEpF,MAAM,OAAO,GAAG,gBAAgB,IAAI,IAAI,CAAC;AAYzC;;;GAGG;AACH,MAAM,OAAO,4BAA6B,SAAQ,mBAAmB;IAC9C,EAAE,GAAG,IAAI,4BAA4B,CAAC,IAAI,GAAG,CAAC;IAC9C,MAAM,GAAuB,MAAM,CAAC;IACpC,KAAK,GAAG,gBAAgB,CAAC,uBAAuB,CAAC;IAE5D,MAAM,CAAc;IAE5B,YAAY,OAAO,GAAiC,EAAE;QAClD,KAAK,EAAE,CAAC;QAER,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QACjC,CAAC;aAAM,CAAC;YACJ,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;YACrD,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACjF,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACjB,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC;oBAC7B,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE;oBAChD,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE;oBACxD,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW;iBAChD,CAAC,CAAC;YACP,CAAC;iBAAM,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACzB,IAAI,MAAM,EAAE,CAAC;oBACT,MAAM,IAAI,KAAK,CAAC,+FAA+F,CAAC,CAAC;gBACrH,CAAC;gBACD,IAAI,CAAC,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;YACxC,CAAC;iBAAM,CAAC;gBACJ,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,mEAAmE,CAAC,CAAC;YACxH,CAAC;QACL,CAAC;IACL,CAAC;IAES,KAAK,CAAC,eAAe,CAAC,MAAsB;QAClD,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC;QACtD,MAAM,aAAa,GAAG,GAAG,EAAE,IAAI,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC;QACpE,IAAI,CAAC;YACD,IAAI,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,mDAAmD,CAAC,CAAC;YAAC,CAAC;YACvF,IAAI,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAAC,CAAC;YAE7C,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;YACjD,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,6DAA6D,CAAC,CAAC;YAC1F,CAAC;YAED,IAAI,IAA+B,CAAC;YACpC,IAAI,CAAC;gBACD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACL,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,sEAAsE,CAAC,CAAC;YACnG,CAAC;YAED,IAAI,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;YAAC,CAAC;YAElE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;YAEvC,IAAI,CAAC,KAAK,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,kEAAkE,CAAC,CAAC;YAC/F,CAAC;YAED,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;YACxC,MAAM,uBAAuB,GAAG,cAAc,IAAI,WAAW,SAAS,EAAE,CAAC;YACzE,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,uBAAuB,CAAC,CAAC;YAEjE,MAAM,IAAI,GAAG,wBAAwB,EAAE,CAAC;YACxC,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,IAAI,GAAG,MAAM,oBAAoB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC5E,IAAI,CAAC,IAAI,EAAE,CAAC;oBACR,qEAAqE;oBACrE,MAAM,0BAA0B,CAAC;wBAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,cAAc,EAAE,uBAAuB;wBACvC,MAAM,EAAE,CAAC,SAAS,CAAC;qBACtB,CAAC,CAAC;oBACH,IAAI,GAAG,MAAM,oBAAoB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC5E,CAAC;gBAED,IAAI,IAAI,EAAE,CAAC;oBACP,MAAM,qBAAqB,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;oBACnE,IAAI,OAAO,EAAE,CAAC;wBAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,sCAAsC,CAAC,CAAC;oBAAC,CAAC;gBAC5F,CAAC;qBAAM,CAAC;oBACJ,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,qEAAqE,OAAO,EAAE,CAAC,CAAC;gBACtG,CAAC;YACL,CAAC;YAED,MAAM,aAAa,GAAkB;gBACjC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,mBAAmB;gBAC3D,EAAE,EAAE,CAAC,KAAK,CAAC;gBACX,OAAO,EAAE,kCAAkC;gBAC3C,QAAQ,EAAE,2EAA2E,IAAI,oGAAoG;gBAC7L,QAAQ,EAAE;;;4GAGkF,IAAI;;OAEzG;aACM,CAAC;YAEF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;YAC9D,IAAI,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;YAAC,CAAC;YAEvE,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;gBACrB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,qCAAqC,KAAK,OAAO,cAAc,WAAW,UAAU,CAAC,SAAS,wCAAwC,CAAC,CAAC;gBACzJ,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;gBACrD,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;gBACjF,IAAI,IAAI,KAAK,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;oBAC7B,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,+CAA+C,KAAK,KAAK,IAAI,wCAAwC,CAAC,CAAC;gBAC5H,CAAC;gBACD,OAAO,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC,CAAC;YAC7F,CAAC;iBAAM,CAAC;gBACJ,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,qCAAqC,UAAU,CAAC,KAAK,wCAAwC,CAAC,CAAC;gBAClH,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,IAAI,GAAG,EAAE,UAAU,CAAC,KAAK,IAAI,iCAAiC,CAAC,CAAC;YAC3G,CAAC;QAEL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;YACpC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,+BAA+B,IAAI,uCAAuC,CAAC,CAAC;YAC/F,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,8BAA8B,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;gBAAS,CAAC;YACP,IAAI,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;gBAC/B,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YACnC,CAAC;QACL,CAAC;IACL,CAAC;CACJ"}

package/dist/serve-gib/handlers/api/email/email-verify-code-onetime.handler.d.mts

@@ -0,0 +1,24 @@
+/**
+ * @module serve-gib/handlers/api/email/email-verify-code-onetime
+ *
+ * Handler for POST /api/email/verify-code-onetime (and alias /api/email/verify-code)
+ */
+import { RequestContext, ResponseResult, ServeGibHttpMethod } from '../../../types.mjs';
+import { ServeGibHandlerBase } from '../../handler-base.mjs';
+export interface EmailVerifyCodeRequestBody {
+    email: string;
+    primaryTjpAddr: string;
+    code: string;
+}
+/**
+ * POST /api/email/verify-code-onetime
+ * Validates a 6-digit verification code, updates staging email verification state,
+ * promotes verified keystones to official space once 100% verified, and returns JSON.
+ */
+export declare class EmailVerifyCodeOnetimeHandler extends ServeGibHandlerBase {
+    protected lc: string;
+    protected method: ServeGibHttpMethod;
+    protected regex: RegExp;
+    protected handleRouteImpl(reqCtx: RequestContext): Promise<ResponseResult | undefined>;
+}
+//# sourceMappingURL=email-verify-code-onetime.handler.d.mts.map

package/dist/serve-gib/handlers/api/email/email-verify-code-onetime.handler.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-verify-code-onetime.handler.d.mts","sourceRoot":"","sources":["../../../../../src/serve-gib/handlers/api/email/email-verify-code-onetime.handler.mts"],"names":[],"mappings":"AAAA;;;;GAIG;AAkBH,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAK7D,MAAM,WAAW,0BAA0B;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,qBAAa,6BAA8B,SAAQ,mBAAmB;IAClE,UAAmB,EAAE,SAA6C;IAClE,UAAmB,MAAM,EAAE,kBAAkB,CAAU;IACvD,UAAmB,KAAK,SAAmG;IAE3H,UAAgB,eAAe,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAyL3F;CACJ"}

package/dist/serve-gib/handlers/api/email/email-verify-code-onetime.handler.mjs

@@ -0,0 +1,212 @@
+/**
+ * @module serve-gib/handlers/api/email/email-verify-code-onetime
+ *
+ * Handler for POST /api/email/verify-code-onetime (and alias /api/email/verify-code)
+ */
+import * as fs from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import * as path from 'node:path';
+import { extractErrorMsg, getUUID, hash } from '@ibgib/helper-gib/dist/helpers/utils-helper.mjs';
+import { getIbGibAddr } from '@ibgib/ts-gib/dist/helper.mjs';
+import { getPendingStagingDir, getPendingTjpHash, verifyPendingCode, validateEmail } from '../../../../email/index.mjs';
+import { getIdentityIndexService } from '../../../identity-index/identity-index-service.mjs';
+import { normalizeEmail } from '../../../identity-index/identity-index-helpers.mjs';
+import { bootstrapDomainMetaspace } from '../../../bootstrap-helper.mjs';
+import { API_PATH_REGEXES } from '../../../path-constants.mjs';
+import { ServeGibHandlerBase } from '../../handler-base.mjs';
+import { GLOBAL_LOG_A_LOT } from '../../../constants.mjs';
+const logalot = GLOBAL_LOG_A_LOT || true;
+/**
+ * POST /api/email/verify-code-onetime
+ * Validates a 6-digit verification code, updates staging email verification state,
+ * promotes verified keystones to official space once 100% verified, and returns JSON.
+ */
+export class EmailVerifyCodeOnetimeHandler extends ServeGibHandlerBase {
+    lc = `[${EmailVerifyCodeOnetimeHandler.name}]`;
+    method = 'POST';
+    regex = API_PATH_REGEXES.EMAIL_VERIFY_CODE || /^\/api\/email\/(?:verify-code-onetime|verify-code)\/?$/i;
+    async handleRouteImpl(reqCtx) {
+        const lc = `${this.lc}[${this.handleRouteImpl.name}]`;
+        const timestampUUID = `${lc}[${(await getUUID()).substring(0, 8)}]`;
+        try {
+            if (logalot) {
+                console.log(`${lc} starting... (I: e123456789abcdef0123456789a0001)`);
+            }
+            if (logalot) {
+                console.time(timestampUUID);
+            }
+            if (reqCtx.method !== 'POST') {
+                return this.error(405, 'Method Not Allowed');
+            }
+            if (!reqCtx.body) {
+                return this.error(400, 'Request body is empty (E: 123456789abcdef0123456789a0001)');
+            }
+            let body;
+            try {
+                body = JSON.parse(reqCtx.body);
+            }
+            catch {
+                return this.error(400, 'Request body must be valid JSON (E: 123456789abcdef0123456789a0002)');
+            }
+            if (logalot) {
+                console.timeLog(timestampUUID, 'parse complete');
+            }
+            const { email, primaryTjpAddr, code } = body;
+            if (!email || !validateEmail(email)) {
+                return this.error(400, 'Invalid email address format (E: 123456789abcdef0123456789a0003)');
+            }
+            if (!primaryTjpAddr || typeof primaryTjpAddr !== 'string') {
+                return this.error(400, 'primaryTjpAddr is required (E: 123456789abcdef0123456789a0004)');
+            }
+            if (!code || typeof code !== 'string' || code.trim().length !== 6) {
+                return this.error(400, 'Invalid 6-digit verification code format (E: 123456789abcdef0123456789a0005)');
+            }
+            const normEmail = normalizeEmail(email);
+            const tjpHash = await getPendingTjpHash(primaryTjpAddr);
+            if (!tjpHash || !reqCtx.dataDir) {
+                return this.error(400, 'Could not determine identity tjpHash (E: 123456789abcdef0123456789a0006)');
+            }
+            const pendingInfo = await getPendingStagingDir({
+                dataDir: reqCtx.dataDir,
+                tjpHash,
+            });
+            if (logalot) {
+                console.timeLog(timestampUUID, 'pending staging lookup complete');
+            }
+            if (!pendingInfo || pendingInfo.isExpired) {
+                // Check if email is already indexed in official space
+                const existing = await getIdentityIndexService().lookupIdentityByEmail({
+                    email: normEmail,
+                });
+                if (existing && existing.primaryTjpAddr === primaryTjpAddr) {
+                    return this.ok({
+                        success: true,
+                        message: 'Email address is already verified and linked.',
+                        alreadyVerified: true,
+                        primaryTjpAddr,
+                    });
+                }
+                return this.error(400, 'Verification record missing or expired. Please request a new verification code. (E: 123456789abcdef0123456789a0007)');
+            }
+            const pendingDir = pendingInfo.pendingDir;
+            const codeVerifyResult = await verifyPendingCode({
+                pendingDir,
+                code,
+            });
+            if (logalot) {
+                console.timeLog(timestampUUID, 'code verification check complete');
+            }
+            if (!codeVerifyResult.valid) {
+                const isRateLimited = codeVerifyResult.reason === 'too_many_attempts';
+                const statusCode = isRateLimited ? 429 : 400;
+                console.error(`${lc} Code verification failed for ${normEmail}: ${codeVerifyResult.error} (E: 123456789abcdef0123456789a0008)`);
+                return this.error(statusCode, codeVerifyResult.error || 'Incorrect verification code.');
+            }
+            // Mark email as verified in pending staging
+            const emailsDir = path.join(pendingDir, 'emails');
+            const emailHash = await hash({ s: `emailindex${normEmail}` });
+            const emailMetaPath = path.join(emailsDir, `${emailHash}.json`);
+            await fs.writeFile(emailMetaPath, JSON.stringify({ email: normEmail, verified: true, verifiedAt: Date.now() }, null, 2), 'utf-8');
+            if (logalot) {
+                console.timeLog(timestampUUID, 'email metadata marked verified');
+            }
+            // Read all email metadata files to check 100% verification completion
+            const emailFiles = await fs.readdir(emailsDir);
+            const verifiedEmails = [];
+            let allVerified = true;
+            for (const file of emailFiles) {
+                if (file.endsWith('.json')) {
+                    try {
+                        const content = await fs.readFile(path.join(emailsDir, file), 'utf-8');
+                        const meta = JSON.parse(content);
+                        if (meta.verified === true && meta.email) {
+                            verifiedEmails.push(meta.email);
+                        }
+                        else {
+                            allVerified = false;
+                        }
+                    }
+                    catch {
+                        allVerified = false;
+                    }
+                }
+            }
+            if (allVerified) {
+                // 1. Promote keystone.json if present
+                const keystonePath = path.join(pendingDir, 'keystone.json');
+                if (existsSync(keystonePath)) {
+                    try {
+                        const keystoneContent = await fs.readFile(keystonePath, 'utf-8');
+                        const keystone = JSON.parse(keystoneContent);
+                        const addr = getIbGibAddr({ ibGib: keystone });
+                        const metaspace = await bootstrapDomainMetaspace(addr, reqCtx.dataDir);
+                        if (logalot) {
+                            console.timeLog(timestampUUID, 'domain metaspace bootstrap complete');
+                        }
+                        const space = await metaspace.getLocalUserSpace({ lock: false });
+                        if (space) {
+                            await metaspace.put({ ibGibs: [keystone], space });
+                            await metaspace.registerNewIbGib({ ibGib: keystone, space });
+                        }
+                        if (logalot) {
+                            console.timeLog(timestampUUID, 'keystone promoted to domain space');
+                        }
+                    }
+                    catch (promoErr) {
+                        console.error(`${lc} Failed to promote keystone.json to official space: ${extractErrorMsg(promoErr)} (E: 123456789abcdef0123456789a0009)`);
+                    }
+                }
+                // 2. Register official reverse indices for verified emails
+                for (const ve of verifiedEmails) {
+                    try {
+                        await getIdentityIndexService().registerEmailIndex({
+                            email: ve,
+                            primaryTjpAddr,
+                        });
+                    }
+                    catch (indexErr) {
+                        if (!indexErr?.message?.includes('duplicate_identity_409') && indexErr?.code !== 'EEXIST') {
+                            console.error(`${lc} Failed to register official email index for ${ve}: ${extractErrorMsg(indexErr)} (E: 123456789abcdef0123456789a0010)`);
+                        }
+                    }
+                }
+                if (logalot) {
+                    console.timeLog(timestampUUID, 'official email indices registered');
+                }
+                // 3. Remove pending staging directory
+                try {
+                    await fs.rm(pendingDir, { recursive: true, force: true });
+                }
+                catch { /* ignore */ }
+                if (logalot) {
+                    console.timeLog(timestampUUID, 'pending staging directory cleaned');
+                }
+                console.log(`${lc} 100% verification achieved via 6-digit code. Promoted identity & registered indices for ${primaryTjpAddr} (I: 123456789abcdef0123456789a0011)`);
+                return this.ok({
+                    success: true,
+                    message: 'Email verified & account activated successfully!',
+                    primaryTjpAddr,
+                });
+            }
+            else {
+                return this.ok({
+                    success: true,
+                    message: 'Code verified for email. Remaining inboxes pending.',
+                    primaryTjpAddr,
+                });
+            }
+        }
+        catch (error) {
+            const emsg = extractErrorMsg(error);
+            console.error(`${lc} Error verifying code: ${emsg} (E: 123456789abcdef0123456789a0012)`);
+            return this.error(500, `Code verification error: ${emsg}`);
+        }
+        finally {
+            if (logalot) {
+                console.log(`${lc} complete.`);
+                console.timeEnd(timestampUUID);
+            }
+        }
+    }
+}
+//# sourceMappingURL=email-verify-code-onetime.handler.mjs.map

package/dist/serve-gib/handlers/api/email/email-verify-code-onetime.handler.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-verify-code-onetime.handler.mjs","sourceRoot":"","sources":["../../../../../src/serve-gib/handlers/api/email/email-verify-code-onetime.handler.mts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,iDAAiD,CAAC;AACjG,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EACH,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,aAAa,EAChB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAE,MAAM,oDAAoD,CAAC;AACpF,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,MAAM,OAAO,GAAG,gBAAgB,IAAI,IAAI,CAAC;AAQzC;;;;GAIG;AACH,MAAM,OAAO,6BAA8B,SAAQ,mBAAmB;IAC/C,EAAE,GAAG,IAAI,6BAA6B,CAAC,IAAI,GAAG,CAAC;IAC/C,MAAM,GAAuB,MAAM,CAAC;IACpC,KAAK,GAAG,gBAAgB,CAAC,iBAAiB,IAAI,yDAAyD,CAAC;IAEjH,KAAK,CAAC,eAAe,CAAC,MAAsB;QAClD,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC;QACtD,MAAM,aAAa,GAAG,GAAG,EAAE,IAAI,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC;QACpE,IAAI,CAAC;YACD,IAAI,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,mDAAmD,CAAC,CAAC;YAAC,CAAC;YACvF,IAAI,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAAC,CAAC;YAE7C,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;YACjD,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,2DAA2D,CAAC,CAAC;YACxF,CAAC;YAED,IAAI,IAAgC,CAAC;YACrC,IAAI,CAAC;gBACD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACL,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,qEAAqE,CAAC,CAAC;YAClG,CAAC;YAED,IAAI,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;YAAC,CAAC;YAElE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;YAE7C,IAAI,CAAC,KAAK,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,kEAAkE,CAAC,CAAC;YAC/F,CAAC;YACD,IAAI,CAAC,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;gBACxD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,gEAAgE,CAAC,CAAC;YAC7F,CAAC;YACD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAChE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,8EAA8E,CAAC,CAAC;YAC3G,CAAC;YAED,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,cAAc,CAAC,CAAC;YAExD,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,0EAA0E,CAAC,CAAC;YACvG,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,oBAAoB,CAAC;gBAC3C,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,OAAO;aACV,CAAC,CAAC;YAEH,IAAI,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,iCAAiC,CAAC,CAAC;YAAC,CAAC;YAEnF,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;gBACxC,sDAAsD;gBACtD,MAAM,QAAQ,GAAG,MAAM,uBAAuB,EAAE,CAAC,qBAAqB,CAAC;oBACnE,KAAK,EAAE,SAAS;iBACnB,CAAC,CAAC;gBAEH,IAAI,QAAQ,IAAI,QAAQ,CAAC,cAAc,KAAK,cAAc,EAAE,CAAC;oBACzD,OAAO,IAAI,CAAC,EAAE,CAAC;wBACX,OAAO,EAAE,IAAI;wBACb,OAAO,EAAE,+CAA+C;wBACxD,eAAe,EAAE,IAAI;wBACrB,cAAc;qBACjB,CAAC,CAAC;gBACP,CAAC;gBAED,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,qHAAqH,CAAC,CAAC;YAClJ,CAAC;YAED,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC;YAC1C,MAAM,gBAAgB,GAAG,MAAM,iBAAiB,CAAC;gBAC7C,UAAU;gBACV,IAAI;aACP,CAAC,CAAC;YAEH,IAAI,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,kCAAkC,CAAC,CAAC;YAAC,CAAC;YAEpF,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;gBAC1B,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,KAAK,mBAAmB,CAAC;gBACtE,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBAC7C,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,iCAAiC,SAAS,KAAK,gBAAgB,CAAC,KAAK,sCAAsC,CAAC,CAAC;gBAChI,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,gBAAgB,CAAC,KAAK,IAAI,8BAA8B,CAAC,CAAC;YAC5F,CAAC;YAED,4CAA4C;YAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAClD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,EAAE,aAAa,SAAS,EAAE,EAAE,CAAC,CAAC;YAC9D,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC;YAEhE,MAAM,EAAE,CAAC,SAAS,CACd,aAAa,EACb,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EACrF,OAAO,CACV,CAAC;YAEF,IAAI,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,gCAAgC,CAAC,CAAC;YAAC,CAAC;YAElF,sEAAsE;YACtE,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,cAAc,GAAa,EAAE,CAAC;YACpC,IAAI,WAAW,GAAG,IAAI,CAAC;YAEvB,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;gBAC5B,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBACzB,IAAI,CAAC;wBACD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;wBACvE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;wBACjC,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;4BACvC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;wBACpC,CAAC;6BAAM,CAAC;4BACJ,WAAW,GAAG,KAAK,CAAC;wBACxB,CAAC;oBACL,CAAC;oBAAC,MAAM,CAAC;wBACL,WAAW,GAAG,KAAK,CAAC;oBACxB,CAAC;gBACL,CAAC;YACL,CAAC;YAED,IAAI,WAAW,EAAE,CAAC;gBACd,sCAAsC;gBACtC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;gBAC5D,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;oBAC3B,IAAI,CAAC;wBACD,MAAM,eAAe,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;wBACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;wBAC7C,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;wBAC/C,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;wBACvE,IAAI,OAAO,EAAE,CAAC;4BAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,qCAAqC,CAAC,CAAC;wBAAC,CAAC;wBAEvF,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;wBACjE,IAAI,KAAK,EAAE,CAAC;4BACR,MAAM,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;4BACnD,MAAM,SAAS,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;wBACjE,CAAC;wBACD,IAAI,OAAO,EAAE,CAAC;4BAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,mCAAmC,CAAC,CAAC;wBAAC,CAAC;oBACzF,CAAC;oBAAC,OAAO,QAAa,EAAE,CAAC;wBACrB,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,uDAAuD,eAAe,CAAC,QAAQ,CAAC,sCAAsC,CAAC,CAAC;oBAC/I,CAAC;gBACL,CAAC;gBAED,2DAA2D;gBAC3D,KAAK,MAAM,EAAE,IAAI,cAAc,EAAE,CAAC;oBAC9B,IAAI,CAAC;wBACD,MAAM,uBAAuB,EAAE,CAAC,kBAAkB,CAAC;4BAC/C,KAAK,EAAE,EAAE;4BACT,cAAc;yBACjB,CAAC,CAAC;oBACP,CAAC;oBAAC,OAAO,QAAa,EAAE,CAAC;wBACrB,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,wBAAwB,CAAC,IAAI,QAAQ,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;4BACxF,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,gDAAgD,EAAE,KAAK,eAAe,CAAC,QAAQ,CAAC,sCAAsC,CAAC,CAAC;wBAC/I,CAAC;oBACL,CAAC;gBACL,CAAC;gBACD,IAAI,OAAO,EAAE,CAAC;oBAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,mCAAmC,CAAC,CAAC;gBAAC,CAAC;gBAErF,sCAAsC;gBACtC,IAAI,CAAC;oBACD,MAAM,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9D,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;gBACxB,IAAI,OAAO,EAAE,CAAC;oBAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,mCAAmC,CAAC,CAAC;gBAAC,CAAC;gBAErF,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,4FAA4F,cAAc,sCAAsC,CAAC,CAAC;gBAEnK,OAAO,IAAI,CAAC,EAAE,CAAC;oBACX,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,kDAAkD;oBAC3D,cAAc;iBACjB,CAAC,CAAC;YACP,CAAC;iBAAM,CAAC;gBACJ,OAAO,IAAI,CAAC,EAAE,CAAC;oBACX,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,qDAAqD;oBAC9D,cAAc;iBACjB,CAAC,CAAC;YACP,CAAC;QAEL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;YACpC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,0BAA0B,IAAI,sCAAsC,CAAC,CAAC;YACzF,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,4BAA4B,IAAI,EAAE,CAAC,CAAC;QAC/D,CAAC;gBAAS,CAAC;YACP,IAAI,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;gBAC/B,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YACnC,CAAC;QACL,CAAC;IACL,CAAC;CACJ"}

package/dist/serve-gib/handlers/api/identity/keystone-custodian-genesis.handler.d.mts

@@ -0,0 +1,37 @@
+/**
+ * @module serve-gib/handlers/api/identity/keystone-custodian-genesis.handler
+ *
+ * POST /api/identity/custodian/genesis
+ *
+ * Single-turn passwordless onboarding & custodian genesis endpoint.
+ * Returns the primary identity keystone (or primaryTjpAddr) along with a fresh,
+ * single-turn `CustodianRequirements` payload containing `authCode` and single-use `nonce`.
+ */
+import { FlatIbGibGraph } from '@ibgib/core-gib/dist/common/other/graph-types.mjs';
+import { ServeGibHandlerBase } from '../../handler-base.mjs';
+import { RequestContext, ResponseResult, ServeGibHttpMethod } from '../../../types.mjs';
+import { CustodianRequirements } from '../../../../identity/sso/sso-types.mjs';
+export interface CustodianGenesisRequestBody {
+    email: string;
+    code?: string;
+    username?: string;
+}
+export interface CustodianGenesisResponseBody {
+    success: boolean;
+    isNewIdentity: boolean;
+    primaryTjpAddr: string;
+    primaryKeystone?: any;
+    primaryGraph?: FlatIbGibGraph;
+    custodianReqs: CustodianRequirements;
+    message?: string;
+}
+/**
+ * POST /api/identity/custodian/genesis
+ */
+export declare class KeystoneCustodianGenesisHandler extends ServeGibHandlerBase<undefined, undefined> {
+    protected lc: string;
+    protected method: ServeGibHttpMethod;
+    protected regex: RegExp;
+    protected handleRouteImpl(reqCtx: RequestContext<undefined, undefined>): Promise<ResponseResult | undefined>;
+}
+//# sourceMappingURL=keystone-custodian-genesis.handler.d.mts.map

package/dist/serve-gib/handlers/api/identity/keystone-custodian-genesis.handler.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keystone-custodian-genesis.handler.d.mts","sourceRoot":"","sources":["../../../../../src/serve-gib/handlers/api/identity/keystone-custodian-genesis.handler.mts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,OAAO,EAAE,cAAc,EAAE,MAAM,mDAAmD,CAAC;AAMnF,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAOxF,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAK/E,MAAM,WAAW,2BAA2B;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,4BAA4B;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,OAAO,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,GAAG,CAAC;IACtB,YAAY,CAAC,EAAE,cAAc,CAAC;IAC9B,aAAa,EAAE,qBAAqB,CAAC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,qBAAa,+BAAgC,SAAQ,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC;IAC1F,UAAmB,EAAE,EAAE,MAAM,CAA+C;IAC5E,UAAmB,MAAM,EAAE,kBAAkB,CAAU;IACvD,UAAmB,KAAK,SAA+C;IAEvE,UAAgB,eAAe,CAC3B,MAAM,EAAE,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC,GAC7C,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CA4KrC;CACJ"}