@intlayer/backend 5.6.0 → 5.7.0

package/dist/esm/controllers/projectAccessKey.controller.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/controllers/projectAccessKey.controller.ts"],"sourcesContent":["import type { ResponseWithInformation } from '@middlewares/sessionAuth.middleware';\nimport * as projectAccessKeyService from '@services/projectAccessKey.service';\nimport { type AppError, ErrorHandler } from '@utils/errors';\nimport { type ResponseData, formatResponse } from '@utils/responseData';\nimport type { NextFunction, Request } from 'express';\nimport { t } from 'express-intlayer';\nimport type { AccessKeyData, OAuth2Access } from '@/types/project.types';\n\nexport type AddNewAccessKeyBody = AccessKeyData;\nexport type AddNewAccessKeyResponse = ResponseData<OAuth2Access>;\n\n/**\n * Adds a new access key to a project.\n */\nexport const addNewAccessKey = async (\n  req: Request<AddNewAccessKeyBody>,\n  res: ResponseWithInformation<AddNewAccessKeyResponse>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, project, organizationRights, projectRights, dictionaryRights } =\n    res.locals;\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n    return;\n  }\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organizationRights) {\n    ErrorHandler.handleGenericErrorResponse(\n      res,\n      'ORGANIZATION_RIGHTS_NOT_READ'\n    );\n    return;\n  }\n\n  if (!projectRights) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_RIGHTS_NOT_READ');\n    return;\n  }\n\n  if (!dictionaryRights) {\n    ErrorHandler.handleGenericErrorResponse(res, 'DICTIONARY_RIGHTS_NOT_READ');\n    return;\n  }\n\n  try {\n    const newAccessKey = await projectAccessKeyService.addNewAccessKey(\n      req.body,\n      project._id,\n      user,\n      organizationRights,\n      projectRights,\n      dictionaryRights\n    );\n\n    const responseData = formatResponse<OAuth2Access>({\n      message: t({\n        en: 'Access key created successfully',\n        es: 'Clave de acceso creada con éxito',\n        fr: \"Clé d'accès créée avec succès\",\n      }),\n      description: t({\n        en: 'The access key has been created successfully',\n        es: 'La clave de acceso ha sido creada con éxito',\n        fr: \"La clé d'accès a été créée avec succès\",\n      }),\n      data: newAccessKey,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type DeleteAccessKeyBody = { clientId: string };\nexport type DeleteAccessKeyResponse = ResponseData<null>;\n\n/**\n * Deletes an access key from a project.\n */\nexport const deleteAccessKey = async (\n  req: Request,\n  res: ResponseWithInformation<AddNewAccessKeyResponse>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, project } = res.locals;\n  const { clientId } = req.body;\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n    return;\n  }\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!clientId) {\n    ErrorHandler.handleGenericErrorResponse(res, 'CLIENT_ID_NOT_FOUND');\n    return;\n  }\n\n  try {\n    const deletedAccessKey = await projectAccessKeyService.deleteAccessKey(\n      clientId,\n      project,\n      user._id\n    );\n\n    if (!deletedAccessKey) {\n      ErrorHandler.handleGenericErrorResponse(res, 'ACCESS_KEY_NOT_FOUND', {\n        clientId,\n      });\n      return;\n    }\n\n    const responseData = formatResponse<null>({\n      message: t({\n        en: 'Access key deleted successfully',\n        es: 'Clave de acceso eliminada con éxito',\n        fr: \"Clé d'accès supprimée avec succès\",\n      }),\n      description: t({\n        en: 'The access key has been deleted successfully',\n        es: 'La clave de acceso ha sido eliminada con éxito',\n        fr: \"La clé d'accès a été supprimée avec succès\",\n      }),\n      data: null,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type RefreshAccessKeyBody = { clientId: string };\nexport type RefreshAccessKeyResponse = ResponseData<OAuth2Access>;\n\n/**\n * Refreshes an access key from a project.\n */\nexport const refreshAccessKey = async (\n  req: Request<RefreshAccessKeyBody>,\n  res: ResponseWithInformation<RefreshAccessKeyResponse>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, project } = res.locals;\n  const { clientId } = req.body;\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n  }\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n  }\n\n  if (!clientId) {\n    ErrorHandler.handleGenericErrorResponse(res, 'CLIENT_ID_NOT_FOUND');\n  }\n\n  try {\n    const newAccessKey = await projectAccessKeyService.refreshAccessKey(\n      clientId,\n      project!._id,\n      user!._id\n    );\n\n    const responseData = formatResponse<OAuth2Access>({\n      message: t({\n        en: 'Access key refreshed successfully',\n        es: 'Clave de acceso actualizada con éxito',\n        fr: \"Clé d'accès actualisée avec succès\",\n      }),\n      description: t({\n        en: 'The access key has been refreshed successfully',\n        es: 'La clave de acceso ha sido actualizada con éxito',\n        fr: \"La clé d'accès a été actualisée avec succès\",\n      }),\n      data: newAccessKey,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n"],"mappings":"AACA,YAAY,6BAA6B;AACzC,SAAwB,oBAAoB;AAC5C,SAA4B,sBAAsB;AAElD,SAAS,SAAS;AASX,MAAM,kBAAkB,OAC7B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,SAAS,oBAAoB,eAAe,iBAAiB,IACzE,IAAI;AAEN,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,oBAAoB;AACvB,iBAAa;AAAA,MACX;AAAA,MACA;AAAA,IACF;AACA;AAAA,EACF;AAEA,MAAI,CAAC,eAAe;AAClB,iBAAa,2BAA2B,KAAK,yBAAyB;AACtE;AAAA,EACF;AAEA,MAAI,CAAC,kBAAkB;AACrB,iBAAa,2BAA2B,KAAK,4BAA4B;AACzE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,eAAe,MAAM,wBAAwB;AAAA,MACjD,IAAI;AAAA,MACJ,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,UAAM,eAAe,eAA6B;AAAA,MAChD,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,kBAAkB,OAC7B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,QAAQ,IAAI,IAAI;AAC9B,QAAM,EAAE,SAAS,IAAI,IAAI;AAEzB,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,UAAU;AACb,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,mBAAmB,MAAM,wBAAwB;AAAA,MACrD;AAAA,MACA;AAAA,MACA,KAAK;AAAA,IACP;AAEA,QAAI,CAAC,kBAAkB;AACrB,mBAAa,2BAA2B,KAAK,wBAAwB;AAAA,QACnE;AAAA,MACF,CAAC;AACD;AAAA,IACF;AAEA,UAAM,eAAe,eAAqB;AAAA,MACxC,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,mBAAmB,OAC9B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,QAAQ,IAAI,IAAI;AAC9B,QAAM,EAAE,SAAS,IAAI,IAAI;AAEzB,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAAA,EACpE;AAEA,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAAA,EACjE;AAEA,MAAI,CAAC,UAAU;AACb,iBAAa,2BAA2B,KAAK,qBAAqB;AAAA,EACpE;AAEA,MAAI;AACF,UAAM,eAAe,MAAM,wBAAwB;AAAA,MACjD;AAAA,MACA,QAAS;AAAA,MACT,KAAM;AAAA,IACR;AAEA,UAAM,eAAe,eAA6B;AAAA,MAChD,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../../src/controllers/projectAccessKey.controller.ts"],"sourcesContent":["import type { AccessKeyData, OAuth2Access } from '@/types/project.types';\nimport { sendEmail } from '@services/email.service';\nimport * as projectAccessKeyService from '@services/projectAccessKey.service';\nimport { type AppError, ErrorHandler } from '@utils/errors';\nimport { hasPermission } from '@utils/permissions';\nimport { type ResponseData, formatResponse } from '@utils/responseData';\nimport type { NextFunction, Request, Response } from 'express';\nimport { t } from 'express-intlayer';\n\nexport type AddNewAccessKeyBody = AccessKeyData;\nexport type AddNewAccessKeyResponse = ResponseData<OAuth2Access>;\n\n/**\n * Adds a new access key to a project.\n */\nexport const addNewAccessKey = async (\n  req: Request<AddNewAccessKeyBody>,\n  res: Response<AddNewAccessKeyResponse>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, project, roles } = res.locals;\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n    return;\n  }\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!hasPermission(roles, 'project:write')()) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const newAccessKey = await projectAccessKeyService.addNewAccessKey(\n      req.body,\n      project.id,\n      user\n    );\n\n    const responseData = formatResponse<OAuth2Access>({\n      message: t({\n        en: 'Access key created successfully',\n        es: 'Clave de acceso creada con éxito',\n        fr: \"Clé d'accès créée avec succès\",\n      }),\n      description: t({\n        en: 'The access key has been created successfully',\n        es: 'La clave de acceso ha sido creada con éxito',\n        fr: \"La clé d'accès a été créée avec succès\",\n      }),\n      data: newAccessKey,\n    });\n\n    res.json(responseData);\n\n    sendEmail({\n      type: 'oAuthTokenCreated',\n      to: user.email,\n      username: user.name,\n      applicationName: newAccessKey.clientId,\n      scopes: newAccessKey.grants,\n      tokenDetailsUrl: `${process.env.CLIENT_URL}/oauth2/token`,\n      securityLogUrl: `${process.env.CLIENT_URL}/security-log`,\n      supportUrl: `${process.env.CLIENT_URL}/support`,\n    });\n\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type DeleteAccessKeyBody = { clientId: string };\nexport type DeleteAccessKeyResponse = ResponseData<null>;\n\n/**\n * Deletes an access key from a project.\n */\nexport const deleteAccessKey = async (\n  req: Request,\n  res: Response<AddNewAccessKeyResponse>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, project, roles } = res.locals;\n  const { clientId } = req.body;\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n    return;\n  }\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!clientId) {\n    ErrorHandler.handleGenericErrorResponse(res, 'CLIENT_ID_NOT_FOUND');\n    return;\n  }\n\n  if (!hasPermission(roles, 'project:write')()) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const deletedAccessKey = await projectAccessKeyService.deleteAccessKey(\n      clientId,\n      project,\n      user.id\n    );\n\n    if (!deletedAccessKey) {\n      ErrorHandler.handleGenericErrorResponse(res, 'ACCESS_KEY_NOT_FOUND', {\n        clientId,\n      });\n      return;\n    }\n\n    const responseData = formatResponse<null>({\n      message: t({\n        en: 'Access key deleted successfully',\n        es: 'Clave de acceso eliminada con éxito',\n        fr: \"Clé d'accès supprimée avec succès\",\n      }),\n      description: t({\n        en: 'The access key has been deleted successfully',\n        es: 'La clave de acceso ha sido eliminada con éxito',\n        fr: \"La clé d'accès a été supprimée avec succès\",\n      }),\n      data: null,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type RefreshAccessKeyBody = { clientId: string };\nexport type RefreshAccessKeyResponse = ResponseData<OAuth2Access>;\n\n/**\n * Refreshes an access key from a project.\n */\nexport const refreshAccessKey = async (\n  req: Request<RefreshAccessKeyBody>,\n  res: Response<RefreshAccessKeyResponse>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, project, roles } = res.locals;\n  const { clientId } = req.body;\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n  }\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n  }\n\n  if (!clientId) {\n    ErrorHandler.handleGenericErrorResponse(res, 'CLIENT_ID_NOT_FOUND');\n  }\n\n  if (!hasPermission(roles, 'project:write')()) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const newAccessKey = await projectAccessKeyService.refreshAccessKey(\n      clientId,\n      project!.id,\n      user!.id\n    );\n\n    const responseData = formatResponse<OAuth2Access>({\n      message: t({\n        en: 'Access key refreshed successfully',\n        es: 'Clave de acceso actualizada con éxito',\n        fr: \"Clé d'accès actualisée avec succès\",\n      }),\n      description: t({\n        en: 'The access key has been refreshed successfully',\n        es: 'La clave de acceso ha sido actualizada con éxito',\n        fr: \"La clé d'accès a été actualisée avec succès\",\n      }),\n      data: newAccessKey,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n"],"mappings":"AACA,SAAS,iBAAiB;AAC1B,YAAY,6BAA6B;AACzC,SAAwB,oBAAoB;AAC5C,SAAS,qBAAqB;AAC9B,SAA4B,sBAAsB;AAElD,SAAS,SAAS;AAQX,MAAM,kBAAkB,OAC7B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,SAAS,MAAM,IAAI,IAAI;AAErC,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc,OAAO,eAAe,EAAE,GAAG;AAC5C,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,eAAe,MAAM,wBAAwB;AAAA,MACjD,IAAI;AAAA,MACJ,QAAQ;AAAA,MACR;AAAA,IACF;AAEA,UAAM,eAAe,eAA6B;AAAA,MAChD,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AAErB,cAAU;AAAA,MACR,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,MACT,UAAU,KAAK;AAAA,MACf,iBAAiB,aAAa;AAAA,MAC9B,QAAQ,aAAa;AAAA,MACrB,iBAAiB,GAAG,QAAQ,IAAI,UAAU;AAAA,MAC1C,gBAAgB,GAAG,QAAQ,IAAI,UAAU;AAAA,MACzC,YAAY,GAAG,QAAQ,IAAI,UAAU;AAAA,IACvC,CAAC;AAED;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,kBAAkB,OAC7B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,SAAS,MAAM,IAAI,IAAI;AACrC,QAAM,EAAE,SAAS,IAAI,IAAI;AAEzB,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,UAAU;AACb,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,CAAC,cAAc,OAAO,eAAe,EAAE,GAAG;AAC5C,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,mBAAmB,MAAM,wBAAwB;AAAA,MACrD;AAAA,MACA;AAAA,MACA,KAAK;AAAA,IACP;AAEA,QAAI,CAAC,kBAAkB;AACrB,mBAAa,2BAA2B,KAAK,wBAAwB;AAAA,QACnE;AAAA,MACF,CAAC;AACD;AAAA,IACF;AAEA,UAAM,eAAe,eAAqB;AAAA,MACxC,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,mBAAmB,OAC9B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,SAAS,MAAM,IAAI,IAAI;AACrC,QAAM,EAAE,SAAS,IAAI,IAAI;AAEzB,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAAA,EACpE;AAEA,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAAA,EACjE;AAEA,MAAI,CAAC,UAAU;AACb,iBAAa,2BAA2B,KAAK,qBAAqB;AAAA,EACpE;AAEA,MAAI,CAAC,cAAc,OAAO,eAAe,EAAE,GAAG;AAC5C,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,eAAe,MAAM,wBAAwB;AAAA,MACjD;AAAA,MACA,QAAS;AAAA,MACT,KAAM;AAAA,IACR;AAEA,UAAM,eAAe,eAA6B;AAAA,MAChD,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;","names":[]}

package/dist/esm/controllers/search.controller.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/controllers/search.controller.ts"],"sourcesContent":["import type { ResponseWithInformation } from '@middlewares/sessionAuth.middleware';\nimport * as askDocQuestionUtil from '@utils/AI/askDocQuestion/askDocQuestion';\nimport { formatResponse, type ResponseData } from '@utils/responseData';\nimport type { Request } from 'express';\n\nexport type SearchDocUtilParams = {\n  input: string;\n};\nexport type SearchDocUtilResult = ResponseData<string[]>;\n\nexport const searchDocUtil = async (\n  req: Request<unknown, unknown, unknown, SearchDocUtilParams>,\n  res: ResponseWithInformation<SearchDocUtilResult>\n) => {\n  const { input } = req.query;\n\n  const response = await askDocQuestionUtil.searchChunkReference(\n    input,\n    30,\n    0.2\n  );\n  const docFileList = response.map((doc) => doc.fileKey);\n\n  const uniqueDocFileList = Array.from(new Set(docFileList));\n\n  const responseData = formatResponse<string[]>({\n    data: uniqueDocFileList,\n  });\n\n  res.json(responseData);\n};\n"],"mappings":"AACA,YAAY,wBAAwB;AACpC,SAAS,sBAAyC;AAQ3C,MAAM,gBAAgB,OAC3B,KACA,QACG;AACH,QAAM,EAAE,MAAM,IAAI,IAAI;AAEtB,QAAM,WAAW,MAAM,mBAAmB;AAAA,IACxC;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,QAAM,cAAc,SAAS,IAAI,CAAC,QAAQ,IAAI,OAAO;AAErD,QAAM,oBAAoB,MAAM,KAAK,IAAI,IAAI,WAAW,CAAC;AAEzD,QAAM,eAAe,eAAyB;AAAA,IAC5C,MAAM;AAAA,EACR,CAAC;AAED,MAAI,KAAK,YAAY;AACvB;","names":[]}
+{"version":3,"sources":["../../../src/controllers/search.controller.ts"],"sourcesContent":["import * as askDocQuestionUtil from '@utils/AI/askDocQuestion/askDocQuestion';\n\nimport { formatResponse, type ResponseData } from '@utils/responseData';\nimport type { Request, Response } from 'express';\n\nexport type SearchDocUtilParams = {\n  input: string;\n};\nexport type SearchDocUtilResult = ResponseData<string[]>;\n\nexport const searchDocUtil = async (\n  req: Request<unknown, unknown, unknown, SearchDocUtilParams>,\n  res: Response<SearchDocUtilResult>\n) => {\n  const { input } = req.query;\n\n  const response = await askDocQuestionUtil.searchChunkReference(\n    input,\n    30,\n    0.2\n  );\n  const docFileList = response.map((doc) => doc.fileKey);\n\n  const uniqueDocFileList = Array.from(new Set(docFileList));\n\n  const responseData = formatResponse<string[]>({\n    data: uniqueDocFileList,\n  });\n\n  res.json(responseData);\n};\n"],"mappings":"AAAA,YAAY,wBAAwB;AAEpC,SAAS,sBAAyC;AAQ3C,MAAM,gBAAgB,OAC3B,KACA,QACG;AACH,QAAM,EAAE,MAAM,IAAI,IAAI;AAEtB,QAAM,WAAW,MAAM,mBAAmB;AAAA,IACxC;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,QAAM,cAAc,SAAS,IAAI,CAAC,QAAQ,IAAI,OAAO;AAErD,QAAM,oBAAoB,MAAM,KAAK,IAAI,IAAI,WAAW,CAAC;AAEzD,QAAM,eAAe,eAAyB;AAAA,IAC5C,MAAM;AAAA,EACR,CAAC;AAED,MAAI,KAAK,YAAY;AACvB;","names":[]}

package/dist/esm/controllers/stripe.controller.mjs

@@ -29,24 +29,10 @@ const getSubscription = async (req, res) => {
       ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_FOUND");
       return;
     }
-    if (!organization.membersIds.map(String).includes(String(user._id))) {
-      ErrorHandler.handleGenericErrorResponse(
-        res,
-        "USER_NOT_ORGANIZATION_MEMBER"
-      );
-      return;
-    }
-    if (!organization.adminsIds.map(String).includes(String(user._id))) {
-      ErrorHandler.handleGenericErrorResponse(
-        res,
-        "USER_NOT_ORGANIZATION_ADMIN"
-      );
-      return;
-    }
     const { period, type } = retrievePlanInformation(priceId);
     if (organization.plan?.subscriptionId && organization.plan?.type === type && organization.plan?.period === period && organization.plan?.status === "active") {
       ErrorHandler.handleGenericErrorResponse(res, "ALREADY_SUBSCRIBED", {
-        organizationId: organization._id
+        organizationId: organization.id
       });
       return;
     }
@@ -54,8 +40,8 @@ const getSubscription = async (req, res) => {
     if (!customerId) {
       const customer = await stripe.customers.create({
         metadata: {
-          organizationId: String(organization._id),
-          userId: String(user._id),
+          organizationId: String(organization.id),
+          userId: String(user.id),
           // Include the locale for potential localization
           locale: res.locals.locale
         }
@@ -113,13 +99,6 @@ const cancelSubscription = async (_req, res) => {
       ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_FOUND");
       return;
     }
-    if (!organization.adminsIds.map(String).includes(String(user._id))) {
-      ErrorHandler.handleGenericErrorResponse(
-        res,
-        "USER_NOT_ORGANIZATION_ADMIN"
-      );
-      return;
-    }
     if (!organization.plan?.subscriptionId) {
       ErrorHandler.handleGenericErrorResponse(
         res,
@@ -130,7 +109,7 @@ const cancelSubscription = async (_req, res) => {
     await stripe.subscriptions.cancel(organization.plan.subscriptionId);
     const plan = await subscriptionService.cancelSubscription(
       organization.plan.subscriptionId,
-      String(organization._id)
+      String(organization.id)
     );
     if (!plan) {
       ErrorHandler.handleGenericErrorResponse(

package/dist/esm/controllers/stripe.controller.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/controllers/stripe.controller.ts"],"sourcesContent":["import type { ResponseWithInformation } from '@middlewares/sessionAuth.middleware';\nimport * as emailService from '@services/email.service';\nimport * as subscriptionService from '@services/subscription.service';\nimport { type AppError, ErrorHandler } from '@utils/errors';\nimport { retrievePlanInformation } from '@utils/plan';\nimport { type ResponseData, formatResponse } from '@utils/responseData';\nimport type { Request } from 'express';\nimport { t } from 'express-intlayer';\nimport type { Locales } from 'intlayer';\nimport { Stripe } from 'stripe';\nimport type { Organization } from '@/types/organization.types';\n\nexport type GetPricingBody = {\n  priceIds: string[];\n  promoCode?: string;\n};\n\nexport type GetPricingResult = ResponseData<subscriptionService.PricingResult>;\n\n/**\n * Simulate pricing for a given set of prices and a promotion code.\n *\n * @param req - The request object containing the price IDs and promotion code.\n * @param res - The response object to send the simulated pricing result.\n */\nexport const getPricing = async (\n  req: Request<undefined, undefined, GetPricingBody>,\n  res: ResponseWithInformation<GetPricingResult>\n) => {\n  const { priceIds, promoCode } = req.body;\n\n  const pricingResult = await subscriptionService.getPricing(\n    priceIds,\n    promoCode\n  );\n\n  const formattedPricingResult =\n    formatResponse<subscriptionService.PricingResult>({\n      data: pricingResult,\n    });\n\n  res.status(200).json(formattedPricingResult);\n};\n\nexport type GetCheckoutSessionBody = {\n  priceId: string;\n  promoCode?: string;\n};\n\nexport type GetCheckoutSessionResult = ResponseData<\n  Stripe.Response<Stripe.Subscription>\n>;\n\n/**\n * Handles subscription creation or update with Stripe and returns a ClientSecret.\n * @param req - Express request object.\n * @param res - Express response object.\n */\nexport const getSubscription = async (\n  req: Request<undefined, undefined, GetCheckoutSessionBody>,\n  res: ResponseWithInformation<GetCheckoutSessionResult>\n): Promise<void> => {\n  try {\n    const stripe = new Stripe(process.env.STRIPE_SECRET_KEY!);\n\n    // Extract organization and user from response locals (set by authentication middleware)\n    const { organization, user } = res.locals;\n    // Get the price ID (Stripe Price ID) from the request body\n    const { priceId, promoCode } = req.body;\n\n    // Validate that the organization exists\n    if (!organization) {\n      ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_FOUND');\n      return;\n    }\n\n    // Validate that the user exists\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_FOUND');\n      return;\n    }\n\n    // Ensure the user is a member of the organization\n    if (!organization.membersIds.map(String).includes(String(user._id))) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'USER_NOT_ORGANIZATION_MEMBER'\n      );\n      return;\n    }\n\n    // Ensure the user is an admin of the organization\n    if (!organization.adminsIds.map(String).includes(String(user._id))) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'USER_NOT_ORGANIZATION_ADMIN'\n      );\n      return;\n    }\n\n    const { period, type } = retrievePlanInformation(priceId);\n\n    if (\n      organization.plan?.subscriptionId &&\n      organization.plan?.type === type &&\n      organization.plan?.period === period &&\n      organization.plan?.status === 'active'\n    ) {\n      ErrorHandler.handleGenericErrorResponse(res, 'ALREADY_SUBSCRIBED', {\n        organizationId: organization._id,\n      });\n      return;\n    }\n\n    // Attempt to retrieve the Stripe customer ID from the organization's plan\n    let customerId = organization.plan?.customerId;\n\n    if (!customerId) {\n      // If no customer ID exists, create a new Stripe customer for the organization\n      const customer = await stripe.customers.create({\n        metadata: {\n          organizationId: String(organization._id),\n          userId: String(user._id),\n          // Include the locale for potential localization\n          locale: (res.locals as unknown as { locale: Locales }).locale,\n        },\n      });\n      customerId = customer.id;\n    }\n\n    const promoCodeId = promoCode\n      ? await subscriptionService.getCouponId(promoCode)\n      : null;\n\n    const discounts: Stripe.SubscriptionCreateParams.Discount[] = promoCodeId\n      ? [{ coupon: promoCodeId }]\n      : [];\n\n    // If no subscription exists, create a new one\n    const subscription = await stripe.subscriptions.create({\n      customer: customerId, // Associate the subscription with the customer\n      items: [{ price: priceId }], // Set the price ID for the subscription\n      expand: ['latest_invoice.payment_intent'], // Expand to get payment intent details\n      payment_settings: {\n        payment_method_types: ['card'], // Specify payment method types\n      },\n      payment_behavior: 'default_incomplete', // Create the subscription in an incomplete state until payment is confirmed\n      discounts: discounts,\n    });\n\n    // Handle subscription creation failure\n    if (!subscription) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'SUBSCRIPTION_CREATION_FAILED',\n        {\n          user,\n          organization,\n          priceId,\n        }\n      );\n      return;\n    }\n\n    // Prepare the response data with subscription details\n    const responseData = formatResponse<Stripe.Response<Stripe.Subscription>>({\n      data: subscription,\n    });\n\n    // Send the response back to the client\n    res.json(responseData);\n\n    return;\n  } catch (error) {\n    // Handle any errors that occur during the process\n\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\ntype CancelSubscriptionData = Organization['plan'];\n\ntype CancelSubscriptionResult = ResponseData<CancelSubscriptionData>;\n\n/**\n * Cancels a subscription for an organization.\n * @param _req - Express request object.\n * @param res - Express response object.\n */\nexport const cancelSubscription = async (\n  _req: Request,\n  res: ResponseWithInformation<CancelSubscriptionResult>\n): Promise<void> => {\n  const stripe = new Stripe(process.env.STRIPE_SECRET_KEY!);\n\n  try {\n    // Extract the organization and user from the response locals\n    // These are typically set by authentication middleware earlier in the request pipeline\n    const { organization, user } = res.locals;\n\n    // Validate that the organization exists\n    if (!organization) {\n      ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_FOUND');\n      return;\n    }\n\n    // Validate that the user exists\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_FOUND');\n      return;\n    }\n\n    // Check if the user is an admin of the organization\n    if (!organization.adminsIds.map(String).includes(String(user._id))) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'USER_NOT_ORGANIZATION_ADMIN'\n      );\n      return;\n    }\n\n    // Check if the organization has an active subscription to cancel\n    if (!organization.plan?.subscriptionId) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'ORGANIZATION_PLAN_NOT_FOUND'\n      );\n      return;\n    }\n\n    // Cancel the subscription on Stripe immediately using the subscription ID\n    await stripe.subscriptions.cancel(organization.plan.subscriptionId);\n\n    // Update the organization's plan in the database to reflect the cancellation\n    const plan = await subscriptionService.cancelSubscription(\n      organization.plan.subscriptionId,\n      String(organization._id)\n    );\n\n    // If the plan could not be updated in the database, handle the error\n    if (!plan) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'ORGANIZATION_PLAN_NOT_FOUND'\n      );\n      return;\n    }\n\n    // Prepare a formatted response with a success message and the updated plan data\n    const formattedPlan = formatResponse<CancelSubscriptionData>({\n      message: t({\n        en: 'Subscription cancelled successfully',\n        fr: 'Souscription annulée avec succès',\n        es: 'Suscripción cancelada con éxito',\n      }),\n      description: t({\n        en: 'Your subscription has been cancelled successfully',\n        fr: 'Votre souscription a été annulée avec succès',\n        es: 'Su suscripción ha sido cancelada con éxito',\n      }),\n      data: plan!,\n    });\n\n    // Send the response back to the client\n    res.json(formattedPlan);\n\n    await emailService.sendEmail({\n      type: 'subscriptionPaymentCancellation',\n      to: user.email,\n      email: user.email,\n      cancellationDate: new Date().toLocaleDateString(),\n      reactivateLink: `${process.env.CLIENT_URL}/pricing`,\n      username: user.name,\n      organizationName: organization.name,\n      planName: plan.type,\n    });\n  } catch (error) {\n    // Handle any errors that occur during the cancellation process\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n  }\n};\n"],"mappings":"AACA,YAAY,kBAAkB;AAC9B,YAAY,yBAAyB;AACrC,SAAwB,oBAAoB;AAC5C,SAAS,+BAA+B;AACxC,SAA4B,sBAAsB;AAElD,SAAS,SAAS;AAElB,SAAS,cAAc;AAgBhB,MAAM,aAAa,OACxB,KACA,QACG;AACH,QAAM,EAAE,UAAU,UAAU,IAAI,IAAI;AAEpC,QAAM,gBAAgB,MAAM,oBAAoB;AAAA,IAC9C;AAAA,IACA;AAAA,EACF;AAEA,QAAM,yBACJ,eAAkD;AAAA,IAChD,MAAM;AAAA,EACR,CAAC;AAEH,MAAI,OAAO,GAAG,EAAE,KAAK,sBAAsB;AAC7C;AAgBO,MAAM,kBAAkB,OAC7B,KACA,QACkB;AAClB,MAAI;AACF,UAAM,SAAS,IAAI,OAAO,QAAQ,IAAI,iBAAkB;AAGxD,UAAM,EAAE,cAAc,KAAK,IAAI,IAAI;AAEnC,UAAM,EAAE,SAAS,UAAU,IAAI,IAAI;AAGnC,QAAI,CAAC,cAAc;AACjB,mBAAa,2BAA2B,KAAK,wBAAwB;AACrE;AAAA,IACF;AAGA,QAAI,CAAC,MAAM;AACT,mBAAa,2BAA2B,KAAK,gBAAgB;AAC7D;AAAA,IACF;AAGA,QAAI,CAAC,aAAa,WAAW,IAAI,MAAM,EAAE,SAAS,OAAO,KAAK,GAAG,CAAC,GAAG;AACnE,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,MACF;AACA;AAAA,IACF;AAGA,QAAI,CAAC,aAAa,UAAU,IAAI,MAAM,EAAE,SAAS,OAAO,KAAK,GAAG,CAAC,GAAG;AAClE,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,MACF;AACA;AAAA,IACF;AAEA,UAAM,EAAE,QAAQ,KAAK,IAAI,wBAAwB,OAAO;AAExD,QACE,aAAa,MAAM,kBACnB,aAAa,MAAM,SAAS,QAC5B,aAAa,MAAM,WAAW,UAC9B,aAAa,MAAM,WAAW,UAC9B;AACA,mBAAa,2BAA2B,KAAK,sBAAsB;AAAA,QACjE,gBAAgB,aAAa;AAAA,MAC/B,CAAC;AACD;AAAA,IACF;AAGA,QAAI,aAAa,aAAa,MAAM;AAEpC,QAAI,CAAC,YAAY;AAEf,YAAM,WAAW,MAAM,OAAO,UAAU,OAAO;AAAA,QAC7C,UAAU;AAAA,UACR,gBAAgB,OAAO,aAAa,GAAG;AAAA,UACvC,QAAQ,OAAO,KAAK,GAAG;AAAA;AAAA,UAEvB,QAAS,IAAI,OAA0C;AAAA,QACzD;AAAA,MACF,CAAC;AACD,mBAAa,SAAS;AAAA,IACxB;AAEA,UAAM,cAAc,YAChB,MAAM,oBAAoB,YAAY,SAAS,IAC/C;AAEJ,UAAM,YAAwD,cAC1D,CAAC,EAAE,QAAQ,YAAY,CAAC,IACxB,CAAC;AAGL,UAAM,eAAe,MAAM,OAAO,cAAc,OAAO;AAAA,MACrD,UAAU;AAAA;AAAA,MACV,OAAO,CAAC,EAAE,OAAO,QAAQ,CAAC;AAAA;AAAA,MAC1B,QAAQ,CAAC,+BAA+B;AAAA;AAAA,MACxC,kBAAkB;AAAA,QAChB,sBAAsB,CAAC,MAAM;AAAA;AAAA,MAC/B;AAAA,MACA,kBAAkB;AAAA;AAAA,MAClB;AAAA,IACF,CAAC;AAGD,QAAI,CAAC,cAAc;AACjB,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA;AAAA,IACF;AAGA,UAAM,eAAe,eAAqD;AAAA,MACxE,MAAM;AAAA,IACR,CAAC;AAGD,QAAI,KAAK,YAAY;AAErB;AAAA,EACF,SAAS,OAAO;AAGd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAWO,MAAM,qBAAqB,OAChC,MACA,QACkB;AAClB,QAAM,SAAS,IAAI,OAAO,QAAQ,IAAI,iBAAkB;AAExD,MAAI;AAGF,UAAM,EAAE,cAAc,KAAK,IAAI,IAAI;AAGnC,QAAI,CAAC,cAAc;AACjB,mBAAa,2BAA2B,KAAK,wBAAwB;AACrE;AAAA,IACF;AAGA,QAAI,CAAC,MAAM;AACT,mBAAa,2BAA2B,KAAK,gBAAgB;AAC7D;AAAA,IACF;AAGA,QAAI,CAAC,aAAa,UAAU,IAAI,MAAM,EAAE,SAAS,OAAO,KAAK,GAAG,CAAC,GAAG;AAClE,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,MACF;AACA;AAAA,IACF;AAGA,QAAI,CAAC,aAAa,MAAM,gBAAgB;AACtC,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,MACF;AACA;AAAA,IACF;AAGA,UAAM,OAAO,cAAc,OAAO,aAAa,KAAK,cAAc;AAGlE,UAAM,OAAO,MAAM,oBAAoB;AAAA,MACrC,aAAa,KAAK;AAAA,MAClB,OAAO,aAAa,GAAG;AAAA,IACzB;AAGA,QAAI,CAAC,MAAM;AACT,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,MACF;AACA;AAAA,IACF;AAGA,UAAM,gBAAgB,eAAuC;AAAA,MAC3D,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAGD,QAAI,KAAK,aAAa;AAEtB,UAAM,aAAa,UAAU;AAAA,MAC3B,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,MACT,OAAO,KAAK;AAAA,MACZ,mBAAkB,oBAAI,KAAK,GAAE,mBAAmB;AAAA,MAChD,gBAAgB,GAAG,QAAQ,IAAI,UAAU;AAAA,MACzC,UAAU,KAAK;AAAA,MACf,kBAAkB,aAAa;AAAA,MAC/B,UAAU,KAAK;AAAA,IACjB,CAAC;AAAA,EACH,SAAS,OAAO;AAEd,iBAAa,uBAAuB,KAAK,KAAiB;AAAA,EAC5D;AACF;","names":[]}
+{"version":3,"sources":["../../../src/controllers/stripe.controller.ts"],"sourcesContent":["import type { Organization } from '@/types/organization.types';\nimport * as emailService from '@services/email.service';\nimport * as subscriptionService from '@services/subscription.service';\nimport { type AppError, ErrorHandler } from '@utils/errors';\nimport { retrievePlanInformation } from '@utils/plan';\nimport { type ResponseData, formatResponse } from '@utils/responseData';\nimport type { Request, Response } from 'express';\nimport { t } from 'express-intlayer';\nimport type { Locales } from 'intlayer';\nimport { Stripe } from 'stripe';\n\nexport type GetPricingBody = {\n  priceIds: string[];\n  promoCode?: string;\n};\n\nexport type GetPricingResult = ResponseData<subscriptionService.PricingResult>;\n\n/**\n * Simulate pricing for a given set of prices and a promotion code.\n *\n * @param req - The request object containing the price IDs and promotion code.\n * @param res - The response object to send the simulated pricing result.\n */\nexport const getPricing = async (\n  req: Request<undefined, undefined, GetPricingBody>,\n  res: Response<GetPricingResult>\n) => {\n  const { priceIds, promoCode } = req.body;\n\n  const pricingResult = await subscriptionService.getPricing(\n    priceIds,\n    promoCode\n  );\n\n  const formattedPricingResult =\n    formatResponse<subscriptionService.PricingResult>({\n      data: pricingResult,\n    });\n\n  res.status(200).json(formattedPricingResult);\n};\n\nexport type GetCheckoutSessionBody = {\n  priceId: string;\n  promoCode?: string;\n};\n\nexport type GetCheckoutSessionResult = ResponseData<\n  Stripe.Response<Stripe.Subscription>\n>;\n\n/**\n * Handles subscription creation or update with Stripe and returns a ClientSecret.\n * @param req - Express request object.\n * @param res - Express response object.\n */\nexport const getSubscription = async (\n  req: Request<undefined, undefined, GetCheckoutSessionBody>,\n  res: Response<GetCheckoutSessionResult>\n): Promise<void> => {\n  try {\n    const stripe = new Stripe(process.env.STRIPE_SECRET_KEY!);\n\n    // Extract organization and user from response locals (set by authentication middleware)\n    const { organization, user } = res.locals;\n    // Get the price ID (Stripe Price ID) from the request body\n    const { priceId, promoCode } = req.body;\n\n    // Validate that the organization exists\n    if (!organization) {\n      ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_FOUND');\n      return;\n    }\n\n    // Validate that the user exists\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_FOUND');\n      return;\n    }\n\n    const { period, type } = retrievePlanInformation(priceId);\n\n    if (\n      organization.plan?.subscriptionId &&\n      organization.plan?.type === type &&\n      organization.plan?.period === period &&\n      organization.plan?.status === 'active'\n    ) {\n      ErrorHandler.handleGenericErrorResponse(res, 'ALREADY_SUBSCRIBED', {\n        organizationId: organization.id,\n      });\n      return;\n    }\n\n    // Attempt to retrieve the Stripe customer ID from the organization's plan\n    let customerId = organization.plan?.customerId;\n\n    if (!customerId) {\n      // If no customer ID exists, create a new Stripe customer for the organization\n      const customer = await stripe.customers.create({\n        metadata: {\n          organizationId: String(organization.id),\n          userId: String(user.id),\n          // Include the locale for potential localization\n          locale: (res.locals as unknown as { locale: Locales }).locale,\n        },\n      });\n      customerId = customer.id;\n    }\n\n    const promoCodeId = promoCode\n      ? await subscriptionService.getCouponId(promoCode)\n      : null;\n\n    const discounts: Stripe.SubscriptionCreateParams.Discount[] = promoCodeId\n      ? [{ coupon: promoCodeId }]\n      : [];\n\n    // If no subscription exists, create a new one\n    const subscription = await stripe.subscriptions.create({\n      customer: customerId, // Associate the subscription with the customer\n      items: [{ price: priceId }], // Set the price ID for the subscription\n      expand: ['latest_invoice.payment_intent'], // Expand to get payment intent details\n      payment_settings: {\n        payment_method_types: ['card'], // Specify payment method types\n      },\n      payment_behavior: 'default_incomplete', // Create the subscription in an incomplete state until payment is confirmed\n      discounts: discounts,\n    });\n\n    // Handle subscription creation failure\n    if (!subscription) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'SUBSCRIPTION_CREATION_FAILED',\n        {\n          user,\n          organization,\n          priceId,\n        }\n      );\n      return;\n    }\n\n    // Prepare the response data with subscription details\n    const responseData = formatResponse<Stripe.Response<Stripe.Subscription>>({\n      data: subscription,\n    });\n\n    // Send the response back to the client\n    res.json(responseData);\n\n    return;\n  } catch (error) {\n    // Handle any errors that occur during the process\n\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\ntype CancelSubscriptionData = Organization['plan'];\n\ntype CancelSubscriptionResult = ResponseData<CancelSubscriptionData>;\n\n/**\n * Cancels a subscription for an organization.\n * @param _req - Express request object.\n * @param res - Express response object.\n */\nexport const cancelSubscription = async (\n  _req: Request,\n  res: Response<CancelSubscriptionResult>\n): Promise<void> => {\n  const stripe = new Stripe(process.env.STRIPE_SECRET_KEY!);\n\n  try {\n    // Extract the organization and user from the response locals\n    // These are typically set by authentication middleware earlier in the request pipeline\n    const { organization, user } = res.locals;\n\n    // Validate that the organization exists\n    if (!organization) {\n      ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_FOUND');\n      return;\n    }\n\n    // Validate that the user exists\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_FOUND');\n      return;\n    }\n\n    // Check if the organization has an active subscription to cancel\n    if (!organization.plan?.subscriptionId) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'ORGANIZATION_PLAN_NOT_FOUND'\n      );\n      return;\n    }\n\n    // Cancel the subscription on Stripe immediately using the subscription ID\n    await stripe.subscriptions.cancel(organization.plan.subscriptionId);\n\n    // Update the organization's plan in the database to reflect the cancellation\n    const plan = await subscriptionService.cancelSubscription(\n      organization.plan.subscriptionId,\n      String(organization.id)\n    );\n\n    // If the plan could not be updated in the database, handle the error\n    if (!plan) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'ORGANIZATION_PLAN_NOT_FOUND'\n      );\n      return;\n    }\n\n    // Prepare a formatted response with a success message and the updated plan data\n    const formattedPlan = formatResponse<CancelSubscriptionData>({\n      message: t({\n        en: 'Subscription cancelled successfully',\n        fr: 'Souscription annulée avec succès',\n        es: 'Suscripción cancelada con éxito',\n      }),\n      description: t({\n        en: 'Your subscription has been cancelled successfully',\n        fr: 'Votre souscription a été annulée avec succès',\n        es: 'Su suscripción ha sido cancelada con éxito',\n      }),\n      data: plan!,\n    });\n\n    // Send the response back to the client\n    res.json(formattedPlan);\n\n    await emailService.sendEmail({\n      type: 'subscriptionPaymentCancellation',\n      to: user.email,\n      email: user.email,\n      cancellationDate: new Date().toLocaleDateString(),\n      reactivateLink: `${process.env.CLIENT_URL}/pricing`,\n      username: user.name,\n      organizationName: organization.name,\n      planName: plan.type,\n    });\n  } catch (error) {\n    // Handle any errors that occur during the cancellation process\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n  }\n};\n"],"mappings":"AACA,YAAY,kBAAkB;AAC9B,YAAY,yBAAyB;AACrC,SAAwB,oBAAoB;AAC5C,SAAS,+BAA+B;AACxC,SAA4B,sBAAsB;AAElD,SAAS,SAAS;AAElB,SAAS,cAAc;AAehB,MAAM,aAAa,OACxB,KACA,QACG;AACH,QAAM,EAAE,UAAU,UAAU,IAAI,IAAI;AAEpC,QAAM,gBAAgB,MAAM,oBAAoB;AAAA,IAC9C;AAAA,IACA;AAAA,EACF;AAEA,QAAM,yBACJ,eAAkD;AAAA,IAChD,MAAM;AAAA,EACR,CAAC;AAEH,MAAI,OAAO,GAAG,EAAE,KAAK,sBAAsB;AAC7C;AAgBO,MAAM,kBAAkB,OAC7B,KACA,QACkB;AAClB,MAAI;AACF,UAAM,SAAS,IAAI,OAAO,QAAQ,IAAI,iBAAkB;AAGxD,UAAM,EAAE,cAAc,KAAK,IAAI,IAAI;AAEnC,UAAM,EAAE,SAAS,UAAU,IAAI,IAAI;AAGnC,QAAI,CAAC,cAAc;AACjB,mBAAa,2BAA2B,KAAK,wBAAwB;AACrE;AAAA,IACF;AAGA,QAAI,CAAC,MAAM;AACT,mBAAa,2BAA2B,KAAK,gBAAgB;AAC7D;AAAA,IACF;AAEA,UAAM,EAAE,QAAQ,KAAK,IAAI,wBAAwB,OAAO;AAExD,QACE,aAAa,MAAM,kBACnB,aAAa,MAAM,SAAS,QAC5B,aAAa,MAAM,WAAW,UAC9B,aAAa,MAAM,WAAW,UAC9B;AACA,mBAAa,2BAA2B,KAAK,sBAAsB;AAAA,QACjE,gBAAgB,aAAa;AAAA,MAC/B,CAAC;AACD;AAAA,IACF;AAGA,QAAI,aAAa,aAAa,MAAM;AAEpC,QAAI,CAAC,YAAY;AAEf,YAAM,WAAW,MAAM,OAAO,UAAU,OAAO;AAAA,QAC7C,UAAU;AAAA,UACR,gBAAgB,OAAO,aAAa,EAAE;AAAA,UACtC,QAAQ,OAAO,KAAK,EAAE;AAAA;AAAA,UAEtB,QAAS,IAAI,OAA0C;AAAA,QACzD;AAAA,MACF,CAAC;AACD,mBAAa,SAAS;AAAA,IACxB;AAEA,UAAM,cAAc,YAChB,MAAM,oBAAoB,YAAY,SAAS,IAC/C;AAEJ,UAAM,YAAwD,cAC1D,CAAC,EAAE,QAAQ,YAAY,CAAC,IACxB,CAAC;AAGL,UAAM,eAAe,MAAM,OAAO,cAAc,OAAO;AAAA,MACrD,UAAU;AAAA;AAAA,MACV,OAAO,CAAC,EAAE,OAAO,QAAQ,CAAC;AAAA;AAAA,MAC1B,QAAQ,CAAC,+BAA+B;AAAA;AAAA,MACxC,kBAAkB;AAAA,QAChB,sBAAsB,CAAC,MAAM;AAAA;AAAA,MAC/B;AAAA,MACA,kBAAkB;AAAA;AAAA,MAClB;AAAA,IACF,CAAC;AAGD,QAAI,CAAC,cAAc;AACjB,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA;AAAA,IACF;AAGA,UAAM,eAAe,eAAqD;AAAA,MACxE,MAAM;AAAA,IACR,CAAC;AAGD,QAAI,KAAK,YAAY;AAErB;AAAA,EACF,SAAS,OAAO;AAGd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAWO,MAAM,qBAAqB,OAChC,MACA,QACkB;AAClB,QAAM,SAAS,IAAI,OAAO,QAAQ,IAAI,iBAAkB;AAExD,MAAI;AAGF,UAAM,EAAE,cAAc,KAAK,IAAI,IAAI;AAGnC,QAAI,CAAC,cAAc;AACjB,mBAAa,2BAA2B,KAAK,wBAAwB;AACrE;AAAA,IACF;AAGA,QAAI,CAAC,MAAM;AACT,mBAAa,2BAA2B,KAAK,gBAAgB;AAC7D;AAAA,IACF;AAGA,QAAI,CAAC,aAAa,MAAM,gBAAgB;AACtC,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,MACF;AACA;AAAA,IACF;AAGA,UAAM,OAAO,cAAc,OAAO,aAAa,KAAK,cAAc;AAGlE,UAAM,OAAO,MAAM,oBAAoB;AAAA,MACrC,aAAa,KAAK;AAAA,MAClB,OAAO,aAAa,EAAE;AAAA,IACxB;AAGA,QAAI,CAAC,MAAM;AACT,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,MACF;AACA;AAAA,IACF;AAGA,UAAM,gBAAgB,eAAuC;AAAA,MAC3D,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAGD,QAAI,KAAK,aAAa;AAEtB,UAAM,aAAa,UAAU;AAAA,MAC3B,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,MACT,OAAO,KAAK;AAAA,MACZ,mBAAkB,oBAAI,KAAK,GAAE,mBAAmB;AAAA,MAChD,gBAAgB,GAAG,QAAQ,IAAI,UAAU;AAAA,MACzC,UAAU,KAAK;AAAA,MACf,kBAAkB,aAAa;AAAA,MAC/B,UAAU,KAAK;AAAA,IACjB,CAAC;AAAA,EACH,SAAS,OAAO;AAEd,iBAAa,uBAAuB,KAAK,KAAiB;AAAA,EAC5D;AACF;","names":[]}

package/dist/esm/controllers/tag.controller.mjs

@@ -5,13 +5,14 @@ import {
   getTagFiltersAndPagination
 } from "./../utils/filtersAndPagination/getTagFiltersAndPagination.mjs";
 import { mapTagsToAPI, mapTagToAPI } from "./../utils/mapper/tag.mjs";
+import { hasPermission } from "./../utils/permissions.mjs";
 import {
   formatPaginatedResponse,
   formatResponse
 } from "./../utils/responseData.mjs";
 import { t } from "express-intlayer";
 const getTags = async (req, res, _next) => {
-  const { user, organization } = res.locals;
+  const { user, organization, roles } = res.locals;
   const { filters, pageSize, skip, page, getNumberOfPages } = getTagFiltersAndPagination(req);
   if (!user) {
     ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_DEFINED");
@@ -21,9 +22,13 @@ const getTags = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "ORGANIZATION_NOT_DEFINED");
     return;
   }
+  if (!hasPermission(roles, "tag:read")()) {
+    ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
+    return;
+  }
   const restrictedFilter = {
     ...filters,
-    organizationId: String(organization._id)
+    organizationId: String(organization.id)
   };
   try {
     const tags = await tagService.findTags(restrictedFilter, skip, pageSize);
@@ -44,7 +49,7 @@ const getTags = async (req, res, _next) => {
   }
 };
 const addTag = async (req, res, _next) => {
-  const { organization, user, isOrganizationAdmin } = res.locals;
+  const { organization, user, roles } = res.locals;
   const tagData = req.body;
   if (!user) {
     ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_DEFINED");
@@ -54,18 +59,16 @@ const addTag = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "ORGANIZATION_NOT_DEFINED");
     return;
   }
-  if (!isOrganizationAdmin) {
-    ErrorHandler.handleGenericErrorResponse(
-      res,
-      "USER_IS_NOT_ADMIN_OF_ORGANIZATION"
-    );
-  }
   if (!tagData) {
     ErrorHandler.handleGenericErrorResponse(res, "PROJECT_DATA_NOT_FOUND");
   }
+  if (!hasPermission(roles, "tag:admin")(res.locals)) {
+    ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
+    return;
+  }
   const tag = {
-    creatorId: user._id,
-    organizationId: organization._id,
+    creatorId: user.id,
+    organizationId: organization.id,
     ...tagData
   };
   try {
@@ -93,7 +96,7 @@ const addTag = async (req, res, _next) => {
 };
 const updateTag = async (req, res, _next) => {
   const { tagId } = req.params;
-  const { organization, user } = res.locals;
+  const { organization, user, roles } = res.locals;
   if (!user) {
     ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_DEFINED");
     return;
@@ -102,6 +105,10 @@ const updateTag = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "ORGANIZATION_NOT_DEFINED");
     return;
   }
+  if (!hasPermission(roles, "tag:write")()) {
+    ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
+    return;
+  }
   try {
     const tag = {
       _id: tagId,
@@ -111,7 +118,7 @@ const updateTag = async (req, res, _next) => {
       instructions: req.body.instructions
     };
     const tagToDelete = await tagService.getTagById(tagId);
-    if (String(tagToDelete.organizationId) !== String(organization._id)) {
+    if (String(tagToDelete.organizationId) !== String(organization.id)) {
       ErrorHandler.handleGenericErrorResponse(res, "TAG_NOT_IN_ORGANIZATION");
       return;
     }
@@ -138,7 +145,7 @@ const updateTag = async (req, res, _next) => {
   }
 };
 const deleteTag = async (req, res, _next) => {
-  const { user, organization } = res.locals;
+  const { user, organization, roles } = res.locals;
   const { tagId } = req.params;
   if (!user) {
     ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_DEFINED");
@@ -152,9 +159,13 @@ const deleteTag = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "TAG_ID_NOT_FOUND");
     return;
   }
+  if (!hasPermission(roles, "tag:admin")(res.locals)) {
+    ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
+    return;
+  }
   try {
     const tagToDelete = await tagService.getTagById(tagId);
-    if (String(tagToDelete.organizationId) !== String(organization._id)) {
+    if (String(tagToDelete.organizationId) !== String(organization.id)) {
       ErrorHandler.handleGenericErrorResponse(res, "TAG_NOT_IN_ORGANIZATION");
       return;
     }
@@ -165,7 +176,7 @@ const deleteTag = async (req, res, _next) => {
       });
       return;
     }
-    logger.info(`Tag deleted: ${String(deletedTag._id)}`);
+    logger.info(`Tag deleted: ${String(deletedTag.id)}`);
     const formattedTag = mapTagToAPI(deletedTag);
     const responseData = formatResponse({
       message: t({

package/dist/esm/controllers/tag.controller.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/controllers/tag.controller.ts"],"sourcesContent":["import { logger } from '@logger';\nimport type { ResponseWithInformation } from '@middlewares/sessionAuth.middleware';\nimport * as tagService from '@services/tag.service';\nimport { type AppError, ErrorHandler } from '@utils/errors';\nimport type { FiltersAndPagination } from '@utils/filtersAndPagination/getFiltersAndPaginationFromBody';\nimport {\n  getTagFiltersAndPagination,\n  type TagFilters,\n  type TagFiltersParams,\n} from '@utils/filtersAndPagination/getTagFiltersAndPagination';\nimport { mapTagsToAPI, mapTagToAPI } from '@utils/mapper/tag';\nimport {\n  formatPaginatedResponse,\n  type ResponseData,\n  type PaginatedResponse,\n  formatResponse,\n} from '@utils/responseData';\nimport type { NextFunction, Request } from 'express';\nimport { t } from 'express-intlayer';\nimport type { Tag, TagAPI, TagCreationData, TagData } from '@/types/tag.types';\n\nexport type GetTagsParams = FiltersAndPagination<TagFiltersParams>;\nexport type GetTagsResult = PaginatedResponse<TagAPI>;\n\n/**\n * Retrieves a list of tags based on filters and pagination.\n */\nexport const getTags = async (\n  req: Request<GetTagsParams>,\n  res: ResponseWithInformation<GetTagsResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, organization } = res.locals;\n  const { filters, pageSize, skip, page, getNumberOfPages } =\n    getTagFiltersAndPagination(req);\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  const restrictedFilter: TagFilters = {\n    ...filters,\n    organizationId: String(organization._id),\n  };\n\n  try {\n    const tags = await tagService.findTags(restrictedFilter, skip, pageSize);\n    const totalItems = await tagService.countTags(filters);\n\n    const formattedTags = mapTagsToAPI(tags);\n\n    const responseData = formatPaginatedResponse<TagAPI>({\n      data: formattedTags,\n      page,\n      pageSize,\n      totalPages: getNumberOfPages(totalItems),\n      totalItems,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type AddTagBody = TagCreationData;\nexport type AddTagResult = ResponseData<TagAPI>;\n\n/**\n * Adds a new tag to the database.\n */\nexport const addTag = async (\n  req: Request<any, any, AddTagBody>,\n  res: ResponseWithInformation<AddTagResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { organization, user, isOrganizationAdmin } = res.locals;\n  const tagData = req.body;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!isOrganizationAdmin) {\n    ErrorHandler.handleGenericErrorResponse(\n      res,\n      'USER_IS_NOT_ADMIN_OF_ORGANIZATION'\n    );\n  }\n\n  if (!tagData) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_DATA_NOT_FOUND');\n  }\n\n  const tag: TagData = {\n    creatorId: user._id,\n    organizationId: organization._id,\n    ...tagData,\n  };\n\n  try {\n    const newTag = await tagService.createTag(tag);\n\n    const formattedTag = mapTagToAPI(newTag);\n\n    const responseData = formatResponse<TagAPI>({\n      message: t({\n        en: 'Tag created successfully',\n        fr: 'Tag créé avec succès',\n        es: 'Tag creado con éxito',\n      }),\n      description: t({\n        en: 'Your tag has been created successfully',\n        fr: 'Votre tag a été créé avec succès',\n        es: 'Su tag ha sido creado con éxito',\n      }),\n      data: formattedTag,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type UpdateTagParams = { tagId: string | Tag['_id'] };\nexport type UpdateTagBody = Partial<TagData>;\nexport type UpdateTagResult = ResponseData<TagAPI>;\n\n/**\n * Updates an existing tag in the database.\n */\nexport const updateTag = async (\n  req: Request<UpdateTagParams, any, UpdateTagBody>,\n  res: ResponseWithInformation<UpdateTagResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { tagId } = req.params;\n  const { organization, user } = res.locals;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  try {\n    const tag = {\n      _id: tagId as TagAPI['_id'],\n      name: req.body.name,\n      key: req.body.key,\n      description: req.body.description,\n      instructions: req.body.instructions,\n    };\n\n    const tagToDelete = await tagService.getTagById(tagId);\n\n    if (String(tagToDelete.organizationId) !== String(organization._id)) {\n      ErrorHandler.handleGenericErrorResponse(res, 'TAG_NOT_IN_ORGANIZATION');\n      return;\n    }\n\n    const updatedTag = await tagService.updateTagById(tag._id, tag);\n\n    const formattedTag = mapTagToAPI(updatedTag);\n\n    const responseData = formatResponse<TagAPI>({\n      message: t({\n        en: 'Tag updated successfully',\n        fr: 'Tag mis à jour avec succès',\n        es: 'Tag actualizado con éxito',\n      }),\n      description: t({\n        en: 'Your tag has been updated successfully',\n        fr: 'Votre tag a été mis à jour avec succès',\n        es: 'Su tag ha sido actualizado con éxito',\n      }),\n      data: formattedTag,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type DeleteTagParams = { tagId: string | Tag['_id'] };\nexport type DeleteTagResult = ResponseData<TagAPI>;\n\n/**\n * Deletes a tag from the database by its ID.\n * @param req - Express request object.\n * @param  res - Express response object.\n * @returns Response confirming the deletion.\n */\nexport const deleteTag = async (\n  req: Request<DeleteTagParams>,\n  res: ResponseWithInformation<DeleteTagResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, organization } = res.locals;\n  const { tagId } = req.params;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!tagId) {\n    ErrorHandler.handleGenericErrorResponse(res, 'TAG_ID_NOT_FOUND');\n    return;\n  }\n\n  try {\n    const tagToDelete = await tagService.getTagById(tagId);\n\n    if (String(tagToDelete.organizationId) !== String(organization._id)) {\n      ErrorHandler.handleGenericErrorResponse(res, 'TAG_NOT_IN_ORGANIZATION');\n      return;\n    }\n\n    const deletedTag = await tagService.deleteTagById(tagId);\n\n    if (!deletedTag) {\n      ErrorHandler.handleGenericErrorResponse(res, 'TAG_NOT_FOUND', {\n        tagId,\n      });\n\n      return;\n    }\n\n    logger.info(`Tag deleted: ${String(deletedTag._id)}`);\n\n    const formattedTag = mapTagToAPI(deletedTag);\n\n    const responseData = formatResponse<TagAPI>({\n      message: t({\n        en: 'Tag deleted successfully',\n        fr: 'Tag supprimé avec succès',\n        es: 'Tag eliminado con éxito',\n      }),\n      description: t({\n        en: 'Your tag has been deleted successfully',\n        fr: 'Votre tag a été supprimé avec succès',\n        es: 'Su tag ha sido eliminado con éxito',\n      }),\n      data: formattedTag,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n"],"mappings":"AAAA,SAAS,cAAc;AAEvB,YAAY,gBAAgB;AAC5B,SAAwB,oBAAoB;AAE5C;AAAA,EACE;AAAA,OAGK;AACP,SAAS,cAAc,mBAAmB;AAC1C;AAAA,EACE;AAAA,EAGA;AAAA,OACK;AAEP,SAAS,SAAS;AASX,MAAM,UAAU,OACrB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,aAAa,IAAI,IAAI;AACnC,QAAM,EAAE,SAAS,UAAU,MAAM,MAAM,iBAAiB,IACtD,2BAA2B,GAAG;AAEhC,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,QAAM,mBAA+B;AAAA,IACnC,GAAG;AAAA,IACH,gBAAgB,OAAO,aAAa,GAAG;AAAA,EACzC;AAEA,MAAI;AACF,UAAM,OAAO,MAAM,WAAW,SAAS,kBAAkB,MAAM,QAAQ;AACvE,UAAM,aAAa,MAAM,WAAW,UAAU,OAAO;AAErD,UAAM,gBAAgB,aAAa,IAAI;AAEvC,UAAM,eAAe,wBAAgC;AAAA,MACnD,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,YAAY,iBAAiB,UAAU;AAAA,MACvC;AAAA,IACF,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,SAAS,OACpB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,cAAc,MAAM,oBAAoB,IAAI,IAAI;AACxD,QAAM,UAAU,IAAI;AAEpB,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,qBAAqB;AACxB,iBAAa;AAAA,MACX;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,wBAAwB;AAAA,EACvE;AAEA,QAAM,MAAe;AAAA,IACnB,WAAW,KAAK;AAAA,IAChB,gBAAgB,aAAa;AAAA,IAC7B,GAAG;AAAA,EACL;AAEA,MAAI;AACF,UAAM,SAAS,MAAM,WAAW,UAAU,GAAG;AAE7C,UAAM,eAAe,YAAY,MAAM;AAEvC,UAAM,eAAe,eAAuB;AAAA,MAC1C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AASO,MAAM,YAAY,OACvB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,IAAI,IAAI;AACtB,QAAM,EAAE,cAAc,KAAK,IAAI,IAAI;AAEnC,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,MAAM;AAAA,MACV,KAAK;AAAA,MACL,MAAM,IAAI,KAAK;AAAA,MACf,KAAK,IAAI,KAAK;AAAA,MACd,aAAa,IAAI,KAAK;AAAA,MACtB,cAAc,IAAI,KAAK;AAAA,IACzB;AAEA,UAAM,cAAc,MAAM,WAAW,WAAW,KAAK;AAErD,QAAI,OAAO,YAAY,cAAc,MAAM,OAAO,aAAa,GAAG,GAAG;AACnE,mBAAa,2BAA2B,KAAK,yBAAyB;AACtE;AAAA,IACF;AAEA,UAAM,aAAa,MAAM,WAAW,cAAc,IAAI,KAAK,GAAG;AAE9D,UAAM,eAAe,YAAY,UAAU;AAE3C,UAAM,eAAe,eAAuB;AAAA,MAC1C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAWO,MAAM,YAAY,OACvB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,aAAa,IAAI,IAAI;AACnC,QAAM,EAAE,MAAM,IAAI,IAAI;AAEtB,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,OAAO;AACV,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI;AACF,UAAM,cAAc,MAAM,WAAW,WAAW,KAAK;AAErD,QAAI,OAAO,YAAY,cAAc,MAAM,OAAO,aAAa,GAAG,GAAG;AACnE,mBAAa,2BAA2B,KAAK,yBAAyB;AACtE;AAAA,IACF;AAEA,UAAM,aAAa,MAAM,WAAW,cAAc,KAAK;AAEvD,QAAI,CAAC,YAAY;AACf,mBAAa,2BAA2B,KAAK,iBAAiB;AAAA,QAC5D;AAAA,MACF,CAAC;AAED;AAAA,IACF;AAEA,WAAO,KAAK,gBAAgB,OAAO,WAAW,GAAG,CAAC,EAAE;AAEpD,UAAM,eAAe,YAAY,UAAU;AAE3C,UAAM,eAAe,eAAuB;AAAA,MAC1C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../../src/controllers/tag.controller.ts"],"sourcesContent":["import type {\n  Tag,\n  TagAPI,\n  TagCreationData,\n  TagData,\n  TagSchema,\n} from '@/types/tag.types';\nimport { logger } from '@logger';\nimport * as tagService from '@services/tag.service';\nimport { type AppError, ErrorHandler } from '@utils/errors';\nimport type { FiltersAndPagination } from '@utils/filtersAndPagination/getFiltersAndPaginationFromBody';\nimport {\n  getTagFiltersAndPagination,\n  type TagFilters,\n  type TagFiltersParams,\n} from '@utils/filtersAndPagination/getTagFiltersAndPagination';\nimport { mapTagsToAPI, mapTagToAPI } from '@utils/mapper/tag';\nimport { hasPermission } from '@utils/permissions';\nimport {\n  formatPaginatedResponse,\n  formatResponse,\n  type PaginatedResponse,\n  type ResponseData,\n} from '@utils/responseData';\nimport type { NextFunction, Request, Response } from 'express';\nimport { t } from 'express-intlayer';\n\nexport type GetTagsParams = FiltersAndPagination<TagFiltersParams>;\nexport type GetTagsResult = PaginatedResponse<TagAPI>;\n\n/**\n * Retrieves a list of tags based on filters and pagination.\n */\nexport const getTags = async (\n  req: Request<GetTagsParams>,\n  res: Response<GetTagsResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, organization, roles } = res.locals;\n  const { filters, pageSize, skip, page, getNumberOfPages } =\n    getTagFiltersAndPagination(req);\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!hasPermission(roles, 'tag:read')()) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  const restrictedFilter: TagFilters = {\n    ...filters,\n    organizationId: String(organization.id),\n  };\n\n  try {\n    const tags = await tagService.findTags(restrictedFilter, skip, pageSize);\n    const totalItems = await tagService.countTags(filters);\n\n    const formattedTags = mapTagsToAPI(tags);\n\n    const responseData = formatPaginatedResponse<TagAPI>({\n      data: formattedTags,\n      page,\n      pageSize,\n      totalPages: getNumberOfPages(totalItems),\n      totalItems,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type AddTagBody = TagCreationData;\nexport type AddTagResult = ResponseData<TagAPI>;\n\n/**\n * Adds a new tag to the database.\n */\nexport const addTag = async (\n  req: Request<any, any, AddTagBody>,\n  res: Response<AddTagResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { organization, user, roles } = res.locals;\n  const tagData = req.body;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!tagData) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_DATA_NOT_FOUND');\n  }\n\n  if (!hasPermission(roles, 'tag:admin')(res.locals)) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  const tag: TagData = {\n    creatorId: user.id,\n    organizationId: organization.id,\n    ...tagData,\n  };\n\n  try {\n    const newTag = await tagService.createTag(tag);\n\n    const formattedTag = mapTagToAPI(newTag);\n\n    const responseData = formatResponse<TagAPI>({\n      message: t({\n        en: 'Tag created successfully',\n        fr: 'Tag créé avec succès',\n        es: 'Tag creado con éxito',\n      }),\n      description: t({\n        en: 'Your tag has been created successfully',\n        fr: 'Votre tag a été créé avec succès',\n        es: 'Su tag ha sido creado con éxito',\n      }),\n      data: formattedTag,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type UpdateTagParams = { tagId: string | Tag['id'] };\nexport type UpdateTagBody = Partial<TagData>;\nexport type UpdateTagResult = ResponseData<TagAPI>;\n\n/**\n * Updates an existing tag in the database.\n */\nexport const updateTag = async (\n  req: Request<UpdateTagParams, any, UpdateTagBody>,\n  res: Response<UpdateTagResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { tagId } = req.params;\n  const { organization, user, roles } = res.locals;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!hasPermission(roles, 'tag:write')()) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const tag = {\n      _id: tagId,\n      name: req.body.name,\n      key: req.body.key,\n      description: req.body.description,\n      instructions: req.body.instructions,\n    } as Partial<TagSchema> & { _id: Tag['id'] };\n\n    const tagToDelete = await tagService.getTagById(tagId);\n\n    if (String(tagToDelete.organizationId) !== String(organization.id)) {\n      ErrorHandler.handleGenericErrorResponse(res, 'TAG_NOT_IN_ORGANIZATION');\n      return;\n    }\n\n    const updatedTag = await tagService.updateTagById(tag._id, tag);\n\n    const formattedTag = mapTagToAPI(updatedTag);\n\n    const responseData = formatResponse<TagAPI>({\n      message: t({\n        en: 'Tag updated successfully',\n        fr: 'Tag mis à jour avec succès',\n        es: 'Tag actualizado con éxito',\n      }),\n      description: t({\n        en: 'Your tag has been updated successfully',\n        fr: 'Votre tag a été mis à jour avec succès',\n        es: 'Su tag ha sido actualizado con éxito',\n      }),\n      data: formattedTag,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type DeleteTagParams = { tagId: string | Tag['id'] };\nexport type DeleteTagResult = ResponseData<TagAPI>;\n\n/**\n * Deletes a tag from the database by its ID.\n * @param req - Express request object.\n * @param  res - Express response object.\n * @returns Response confirming the deletion.\n */\nexport const deleteTag = async (\n  req: Request<DeleteTagParams>,\n  res: Response<DeleteTagResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, organization, roles } = res.locals;\n  const { tagId } = req.params;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!tagId) {\n    ErrorHandler.handleGenericErrorResponse(res, 'TAG_ID_NOT_FOUND');\n    return;\n  }\n\n  if (!hasPermission(roles, 'tag:admin')(res.locals)) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const tagToDelete = await tagService.getTagById(tagId);\n\n    if (String(tagToDelete.organizationId) !== String(organization.id)) {\n      ErrorHandler.handleGenericErrorResponse(res, 'TAG_NOT_IN_ORGANIZATION');\n      return;\n    }\n\n    const deletedTag = await tagService.deleteTagById(tagId);\n\n    if (!deletedTag) {\n      ErrorHandler.handleGenericErrorResponse(res, 'TAG_NOT_FOUND', {\n        tagId,\n      });\n\n      return;\n    }\n\n    logger.info(`Tag deleted: ${String(deletedTag.id)}`);\n\n    const formattedTag = mapTagToAPI(deletedTag);\n\n    const responseData = formatResponse<TagAPI>({\n      message: t({\n        en: 'Tag deleted successfully',\n        fr: 'Tag supprimé avec succès',\n        es: 'Tag eliminado con éxito',\n      }),\n      description: t({\n        en: 'Your tag has been deleted successfully',\n        fr: 'Votre tag a été supprimé avec succès',\n        es: 'Su tag ha sido eliminado con éxito',\n      }),\n      data: formattedTag,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n"],"mappings":"AAOA,SAAS,cAAc;AACvB,YAAY,gBAAgB;AAC5B,SAAwB,oBAAoB;AAE5C;AAAA,EACE;AAAA,OAGK;AACP,SAAS,cAAc,mBAAmB;AAC1C,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAEP,SAAS,SAAS;AAQX,MAAM,UAAU,OACrB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,cAAc,MAAM,IAAI,IAAI;AAC1C,QAAM,EAAE,SAAS,UAAU,MAAM,MAAM,iBAAiB,IACtD,2BAA2B,GAAG;AAEhC,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,cAAc,OAAO,UAAU,EAAE,GAAG;AACvC,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,QAAM,mBAA+B;AAAA,IACnC,GAAG;AAAA,IACH,gBAAgB,OAAO,aAAa,EAAE;AAAA,EACxC;AAEA,MAAI;AACF,UAAM,OAAO,MAAM,WAAW,SAAS,kBAAkB,MAAM,QAAQ;AACvE,UAAM,aAAa,MAAM,WAAW,UAAU,OAAO;AAErD,UAAM,gBAAgB,aAAa,IAAI;AAEvC,UAAM,eAAe,wBAAgC;AAAA,MACnD,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,YAAY,iBAAiB,UAAU;AAAA,MACvC;AAAA,IACF,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,SAAS,OACpB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,cAAc,MAAM,MAAM,IAAI,IAAI;AAC1C,QAAM,UAAU,IAAI;AAEpB,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,wBAAwB;AAAA,EACvE;AAEA,MAAI,CAAC,cAAc,OAAO,WAAW,EAAE,IAAI,MAAM,GAAG;AAClD,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,QAAM,MAAe;AAAA,IACnB,WAAW,KAAK;AAAA,IAChB,gBAAgB,aAAa;AAAA,IAC7B,GAAG;AAAA,EACL;AAEA,MAAI;AACF,UAAM,SAAS,MAAM,WAAW,UAAU,GAAG;AAE7C,UAAM,eAAe,YAAY,MAAM;AAEvC,UAAM,eAAe,eAAuB;AAAA,MAC1C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AASO,MAAM,YAAY,OACvB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,IAAI,IAAI;AACtB,QAAM,EAAE,cAAc,MAAM,MAAM,IAAI,IAAI;AAE1C,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,cAAc,OAAO,WAAW,EAAE,GAAG;AACxC,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,MAAM;AAAA,MACV,KAAK;AAAA,MACL,MAAM,IAAI,KAAK;AAAA,MACf,KAAK,IAAI,KAAK;AAAA,MACd,aAAa,IAAI,KAAK;AAAA,MACtB,cAAc,IAAI,KAAK;AAAA,IACzB;AAEA,UAAM,cAAc,MAAM,WAAW,WAAW,KAAK;AAErD,QAAI,OAAO,YAAY,cAAc,MAAM,OAAO,aAAa,EAAE,GAAG;AAClE,mBAAa,2BAA2B,KAAK,yBAAyB;AACtE;AAAA,IACF;AAEA,UAAM,aAAa,MAAM,WAAW,cAAc,IAAI,KAAK,GAAG;AAE9D,UAAM,eAAe,YAAY,UAAU;AAE3C,UAAM,eAAe,eAAuB;AAAA,MAC1C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAWO,MAAM,YAAY,OACvB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,cAAc,MAAM,IAAI,IAAI;AAC1C,QAAM,EAAE,MAAM,IAAI,IAAI;AAEtB,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,OAAO;AACV,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc,OAAO,WAAW,EAAE,IAAI,MAAM,GAAG;AAClD,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,cAAc,MAAM,WAAW,WAAW,KAAK;AAErD,QAAI,OAAO,YAAY,cAAc,MAAM,OAAO,aAAa,EAAE,GAAG;AAClE,mBAAa,2BAA2B,KAAK,yBAAyB;AACtE;AAAA,IACF;AAEA,UAAM,aAAa,MAAM,WAAW,cAAc,KAAK;AAEvD,QAAI,CAAC,YAAY;AACf,mBAAa,2BAA2B,KAAK,iBAAiB;AAAA,QAC5D;AAAA,MACF,CAAC;AAED;AAAA,IACF;AAEA,WAAO,KAAK,gBAAgB,OAAO,WAAW,EAAE,CAAC,EAAE;AAEnD,UAAM,eAAe,YAAY,UAAU;AAE3C,UAAM,eAAe,eAAuB;AAAA,MAC1C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;","names":[]}

package/dist/esm/controllers/user.controller.mjs

@@ -1,10 +1,10 @@
 import { logger } from "./../logger/index.mjs";
-import { getSessionAuthRoutes } from "./../routes/sessionAuth.routes.mjs";
 import { sendEmail } from "./../services/email.service.mjs";
 import * as userService from "./../services/user.service.mjs";
 import { ErrorHandler } from "./../utils/errors/index.mjs";
 import { getOrganizationFiltersAndPagination } from "./../utils/filtersAndPagination/getOrganizationFiltersAndPagination.mjs";
 import { mapUsersToAPI, mapUserToAPI } from "./../utils/mapper/user.mjs";
+import { hasPermission } from "./../utils/permissions.mjs";
 import {
   formatPaginatedResponse,
   formatResponse
@@ -22,7 +22,7 @@ const createUser = async (req, res, _next) => {
       type: "welcome",
       to: newUser.email,
       username: newUser.name,
-      loginLink: getSessionAuthRoutes().loginEmailPassword.url
+      loginLink: `${process.env.CLIENT_URL}/auth/login`
     });
     const formattedUser = mapUserToAPI(newUser);
     const responseData = formatResponse({
@@ -46,7 +46,7 @@ const createUser = async (req, res, _next) => {
   }
 };
 const getUsers = async (req, res, _next) => {
-  const { user } = res.locals;
+  const { user, roles } = res.locals;
   if (!user) {
     ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_DEFINED");
     return;
@@ -54,6 +54,16 @@ const getUsers = async (req, res, _next) => {
   const { filters, pageSize, skip, page, getNumberOfPages } = getOrganizationFiltersAndPagination(req);
   try {
     const users = await userService.findUsers(filters, skip, pageSize);
+    if (!hasPermission(
+      roles,
+      "user:read"
+    )({
+      ...res.locals,
+      targetUserIds: users.map((user2) => user2.id)
+    })) {
+      ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
+      return;
+    }
     const totalItems = await userService.countUsers(filters);
     const formattedUsers = mapUsersToAPI(users);
     const responseData = formatPaginatedResponse({
@@ -89,12 +99,23 @@ const getUserById = async (req, res, _next) => {
 };
 const getUserByEmail = async (req, res, _next) => {
   const { email } = req.params;
+  const { roles } = res.locals;
   try {
     const user = await userService.getUserByEmail(email);
     if (!user) {
       ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_DEFINED");
       return;
     }
+    if (!hasPermission(
+      roles,
+      "user:read"
+    )({
+      ...res.locals,
+      targetUserIds: [user.id]
+    })) {
+      ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
+      return;
+    }
     const formattedUser = mapUserToAPI(user);
     const responseData = formatResponse({ data: formattedUser });
     res.json(responseData);
@@ -103,23 +124,9 @@ const getUserByEmail = async (req, res, _next) => {
     return;
   }
 };
-const getUserByAccount = async (req, res, _next) => {
-  const { providerAccountId, provider } = req.params;
-  try {
-    const user = await userService.getUserByAccount(
-      provider,
-      providerAccountId
-    );
-    const formattedUser = mapUserToAPI(user);
-    const responseData = formatResponse({ data: formattedUser });
-    res.json(responseData);
-  } catch (error) {
-    ErrorHandler.handleAppErrorResponse(res, error);
-  }
-};
 const updateUser = async (req, res, _next) => {
   const userData = req.body;
-  const { user } = res.locals;
+  const { user, roles } = res.locals;
   if (!user) {
     ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_DEFINED");
     return;
@@ -128,10 +135,20 @@ const updateUser = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "USER_DATA_NOT_FOUND");
     return;
   }
+  if (!hasPermission(
+    roles,
+    "user:write"
+  )({
+    ...res.locals,
+    targetUserIds: [user.id]
+  })) {
+    ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
+    return;
+  }
   try {
-    const updatedUser = await userService.updateUserById(user._id, userData);
+    const updatedUser = await userService.updateUserById(user.id, userData);
     logger.info(
-      `User updated: Name: ${updatedUser.name}, id: ${String(updatedUser._id)}`
+      `User updated: Name: ${updatedUser.name}, id: ${String(updatedUser.id)}`
     );
     const formattedUser = mapUserToAPI(updatedUser);
     const responseData = formatResponse({
@@ -156,6 +173,11 @@ const updateUser = async (req, res, _next) => {
 };
 const deleteUser = async (req, res, _next) => {
   const { userId } = req.params;
+  const { roles } = res.locals;
+  if (!hasPermission(roles, "user:admin")()) {
+    ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
+    return;
+  }
   try {
     const user = await userService.deleteUser(userId);
     const formattedUser = mapUserToAPI(user);
@@ -178,13 +200,54 @@ const deleteUser = async (req, res, _next) => {
     return;
   }
 };
+let clients = [];
+const sendVerificationUpdate = (user) => {
+  const filteredClients = clients.filter(
+    (client) => String(client.userId) === String(user.id)
+  );
+  for (const client of filteredClients) {
+    if (user.emailVerified) {
+      client.res.write(
+        `data: ${JSON.stringify({ userId: user.id, status: "verified" })}
+
+`
+      );
+    }
+  }
+};
+const verifyEmailStatusSSE = async (req, res) => {
+  res.setHeader("Content-Type", "text/event-stream;charset=utf-8");
+  res.setHeader("Cache-Control", "no-cache, no-transform");
+  res.setHeader("Connection", "keep-alive");
+  res.setHeader("X-Accel-Buffering", "no");
+  res.write(":\n\n");
+  res.flushHeaders();
+  const { userId } = req.params;
+  const clientId = Date.now();
+  const user = await userService.getUserById(userId);
+  if (!user) {
+    logger.error(`User not found - User ID: ${userId}`);
+    res.write(`data: ${JSON.stringify({ userId, status: "error" })}
+
+`);
+    res.end();
+    return;
+  }
+  const newClient = { id: clientId, userId, res };
+  clients.push(newClient);
+  sendVerificationUpdate(user);
+  req.on("close", () => {
+    clients = clients.filter((client) => client.id !== clientId);
+  });
+};
 export {
   createUser,
   deleteUser,
-  getUserByAccount,
   getUserByEmail,
   getUserById,
   getUsers,
-  updateUser
+  sendVerificationUpdate,
+  updateUser,
+  verifyEmailStatusSSE
 };
 //# sourceMappingURL=user.controller.mjs.map

package/dist/esm/controllers/user.controller.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/controllers/user.controller.ts"],"sourcesContent":["import { logger } from '@logger';\nimport type { ResponseWithInformation } from '@middlewares/sessionAuth.middleware';\nimport { getSessionAuthRoutes } from '@routes/sessionAuth.routes';\nimport { sendEmail } from '@services/email.service';\nimport * as userService from '@services/user.service';\nimport { type AppError, ErrorHandler } from '@utils/errors';\nimport type { FiltersAndPagination } from '@utils/filtersAndPagination/getFiltersAndPaginationFromBody';\nimport { getOrganizationFiltersAndPagination } from '@utils/filtersAndPagination/getOrganizationFiltersAndPagination';\nimport type { UserFiltersParam } from '@utils/filtersAndPagination/getUserFiltersAndPagination';\nimport { mapUsersToAPI, mapUserToAPI } from '@utils/mapper/user';\nimport {\n  formatPaginatedResponse,\n  formatResponse,\n  type PaginatedResponse,\n  type ResponseData,\n} from '@utils/responseData';\nimport type { NextFunction, Request } from 'express';\nimport { t } from 'express-intlayer';\nimport type { SessionProviders } from '@/types/session.types';\nimport type {\n  User,\n  UserAPI,\n  UserWithPasswordNotHashed,\n} from '@/types/user.types';\n\nexport type CreateUserBody = { email: string; password?: string };\nexport type CreateUserResult = ResponseData<UserAPI>;\n\n/**\n * Creates a new user.\n */\nexport const createUser = async (\n  req: Request<any, any, UserWithPasswordNotHashed>,\n  res: ResponseWithInformation<CreateUserResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const user: UserWithPasswordNotHashed | undefined = req.body;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  try {\n    const newUser = await userService.createUser(user);\n\n    await sendEmail({\n      type: 'welcome',\n      to: newUser.email,\n      username: newUser.name,\n      loginLink: getSessionAuthRoutes().loginEmailPassword.url,\n    });\n\n    const formattedUser = mapUserToAPI(newUser);\n\n    const responseData = formatResponse<UserAPI>({\n      message: t({\n        en: 'User created',\n        fr: 'Utilisateur créé',\n        es: 'Usuario creado',\n      }),\n      description: t({\n        en: 'User created successfully',\n        fr: 'Utilisateur créé avec succès',\n        es: 'Usuario creado con éxito',\n      }),\n      data: formattedUser,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type GetUsersParams = FiltersAndPagination<UserFiltersParam>;\nexport type GetUsersResult = PaginatedResponse<UserAPI>;\n\n/**\n * Retrieves a list of users based on filters and pagination.\n */\nexport const getUsers = async (\n  req: Request<GetUsersParams>,\n  res: ResponseWithInformation<GetUsersResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user } = res.locals;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  const { filters, pageSize, skip, page, getNumberOfPages } =\n    getOrganizationFiltersAndPagination(req);\n\n  try {\n    const users = await userService.findUsers(filters, skip, pageSize);\n    const totalItems = await userService.countUsers(filters);\n\n    const formattedUsers = mapUsersToAPI(users);\n\n    const responseData = formatPaginatedResponse<UserAPI>({\n      data: formattedUsers,\n      page,\n      pageSize,\n      totalPages: getNumberOfPages(totalItems),\n      totalItems,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type GetUserByIdParams = { userId: string };\nexport type GetUserByIdResult = ResponseData<UserAPI>;\n\nexport const getUserById = async (\n  req: Request<GetUserByIdParams>,\n  res: ResponseWithInformation<GetUserByIdResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { userId } = req.params;\n\n  try {\n    const user = await userService.getUserById(userId);\n\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n      return;\n    }\n\n    const formattedUser = mapUserToAPI(user);\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type GetUserByEmailParams = { email: string };\nexport type GetUserByEmailResult = ResponseData<UserAPI>;\n\nexport const getUserByEmail = async (\n  req: Request<GetUserByEmailParams>,\n  res: ResponseWithInformation<GetUserByEmailResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { email } = req.params;\n\n  try {\n    const user = await userService.getUserByEmail(email);\n\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n      return;\n    }\n\n    const formattedUser = mapUserToAPI(user);\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    res.json(responseData);\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type GetUserByAccountParams = {\n  providerAccountId: string;\n  provider: SessionProviders['provider'];\n};\nexport type GetUserByAccountResult = ResponseData<UserAPI>;\n\n/**\n * Retrieves a user by account.\n */\nexport const getUserByAccount = async (\n  req: Request<GetUserByAccountParams>,\n  res: ResponseWithInformation<GetUserByAccountResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { providerAccountId, provider } = req.params;\n\n  try {\n    const user = await userService.getUserByAccount(\n      provider,\n      providerAccountId\n    );\n\n    const formattedUser = mapUserToAPI(user);\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    res.json(responseData);\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n  }\n};\n\nexport type UpdateUserBody = Partial<User>;\nexport type UpdateUserResult = ResponseData<UserAPI>;\n\n/**\n * Updates user information (phone number, date of birth).\n */\nexport const updateUser = async (\n  req: Request<any, any, UpdateUserBody | undefined>,\n  res: ResponseWithInformation<UpdateUserResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const userData = req.body;\n  const { user } = res.locals;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (typeof userData !== 'object') {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_DATA_NOT_FOUND');\n    return;\n  }\n\n  try {\n    const updatedUser = await userService.updateUserById(user._id, userData);\n\n    logger.info(\n      `User updated: Name: ${updatedUser.name}, id: ${String(updatedUser._id)}`\n    );\n\n    const formattedUser = mapUserToAPI(updatedUser);\n    const responseData = formatResponse<UserAPI>({\n      message: t({\n        en: 'User updated',\n        fr: 'Utilisateur mis à jour',\n        es: 'Usuario actualizado',\n      }),\n      description: t({\n        en: 'User updated successfully',\n        fr: 'Utilisateur mis à jour avec succès',\n        es: 'Usuario actualizado con éxito',\n      }),\n      data: formattedUser,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type DeleteUserParams = { userId: string };\nexport type DeleteUserResult = ResponseData<UserAPI>;\n\n/**\n * Deletes a user based on the provided ID.\n */\nexport const deleteUser = async (\n  req: Request<any, any, DeleteUserParams>,\n  res: ResponseWithInformation<DeleteUserResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { userId } = req.params;\n\n  try {\n    const user = await userService.deleteUser(userId);\n\n    const formattedUser = mapUserToAPI(user);\n    const responseData = formatResponse<UserAPI>({\n      message: t({\n        en: 'User deleted',\n        fr: 'Utilisateur supprimé',\n        es: 'Usuario eliminado',\n      }),\n      description: t({\n        en: 'User deleted successfully',\n        fr: 'Utilisateur supprimé avec succès',\n        es: 'Usuario eliminado con éxito',\n      }),\n      data: formattedUser,\n    });\n\n    res.json(responseData);\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n"],"mappings":"AAAA,SAAS,cAAc;AAEvB,SAAS,4BAA4B;AACrC,SAAS,iBAAiB;AAC1B,YAAY,iBAAiB;AAC7B,SAAwB,oBAAoB;AAE5C,SAAS,2CAA2C;AAEpD,SAAS,eAAe,oBAAoB;AAC5C;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAEP,SAAS,SAAS;AAcX,MAAM,aAAa,OACxB,KACA,KACA,UACkB;AAClB,QAAM,OAA8C,IAAI;AAExD,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI;AACF,UAAM,UAAU,MAAM,YAAY,WAAW,IAAI;AAEjD,UAAM,UAAU;AAAA,MACd,MAAM;AAAA,MACN,IAAI,QAAQ;AAAA,MACZ,UAAU,QAAQ;AAAA,MAClB,WAAW,qBAAqB,EAAE,mBAAmB;AAAA,IACvD,CAAC;AAED,UAAM,gBAAgB,aAAa,OAAO;AAE1C,UAAM,eAAe,eAAwB;AAAA,MAC3C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,WAAW,OACtB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,KAAK,IAAI,IAAI;AAErB,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,QAAM,EAAE,SAAS,UAAU,MAAM,MAAM,iBAAiB,IACtD,oCAAoC,GAAG;AAEzC,MAAI;AACF,UAAM,QAAQ,MAAM,YAAY,UAAU,SAAS,MAAM,QAAQ;AACjE,UAAM,aAAa,MAAM,YAAY,WAAW,OAAO;AAEvD,UAAM,iBAAiB,cAAc,KAAK;AAE1C,UAAM,eAAe,wBAAiC;AAAA,MACpD,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,YAAY,iBAAiB,UAAU;AAAA,MACvC;AAAA,IACF,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAKO,MAAM,cAAc,OACzB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,OAAO,IAAI,IAAI;AAEvB,MAAI;AACF,UAAM,OAAO,MAAM,YAAY,YAAY,MAAM;AAEjD,QAAI,CAAC,MAAM;AACT,mBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,IACF;AAEA,UAAM,gBAAgB,aAAa,IAAI;AACvC,UAAM,eAAe,eAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAKO,MAAM,iBAAiB,OAC5B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,IAAI,IAAI;AAEtB,MAAI;AACF,UAAM,OAAO,MAAM,YAAY,eAAe,KAAK;AAEnD,QAAI,CAAC,MAAM;AACT,mBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,IACF;AAEA,UAAM,gBAAgB,aAAa,IAAI;AACvC,UAAM,eAAe,eAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,QAAI,KAAK,YAAY;AAAA,EACvB,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAWO,MAAM,mBAAmB,OAC9B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,mBAAmB,SAAS,IAAI,IAAI;AAE5C,MAAI;AACF,UAAM,OAAO,MAAM,YAAY;AAAA,MAC7B;AAAA,MACA;AAAA,IACF;AAEA,UAAM,gBAAgB,aAAa,IAAI;AACvC,UAAM,eAAe,eAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,QAAI,KAAK,YAAY;AAAA,EACvB,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAAA,EAC5D;AACF;AAQO,MAAM,aAAa,OACxB,KACA,KACA,UACkB;AAClB,QAAM,WAAW,IAAI;AACrB,QAAM,EAAE,KAAK,IAAI,IAAI;AAErB,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,OAAO,aAAa,UAAU;AAChC,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,cAAc,MAAM,YAAY,eAAe,KAAK,KAAK,QAAQ;AAEvE,WAAO;AAAA,MACL,uBAAuB,YAAY,IAAI,SAAS,OAAO,YAAY,GAAG,CAAC;AAAA,IACzE;AAEA,UAAM,gBAAgB,aAAa,WAAW;AAC9C,UAAM,eAAe,eAAwB;AAAA,MAC3C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,aAAa,OACxB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,OAAO,IAAI,IAAI;AAEvB,MAAI;AACF,UAAM,OAAO,MAAM,YAAY,WAAW,MAAM;AAEhD,UAAM,gBAAgB,aAAa,IAAI;AACvC,UAAM,eAAe,eAAwB;AAAA,MAC3C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AAAA,EACvB,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../../src/controllers/user.controller.ts"],"sourcesContent":["import type { User, UserAPI } from '@/types/user.types';\nimport { logger } from '@logger';\nimport { sendEmail } from '@services/email.service';\nimport * as userService from '@services/user.service';\nimport { type AppError, ErrorHandler } from '@utils/errors';\nimport type { FiltersAndPagination } from '@utils/filtersAndPagination/getFiltersAndPaginationFromBody';\nimport { getOrganizationFiltersAndPagination } from '@utils/filtersAndPagination/getOrganizationFiltersAndPagination';\nimport type { UserFiltersParam } from '@utils/filtersAndPagination/getUserFiltersAndPagination';\nimport { mapUsersToAPI, mapUserToAPI } from '@utils/mapper/user';\nimport { hasPermission } from '@utils/permissions';\nimport {\n  formatPaginatedResponse,\n  formatResponse,\n  type PaginatedResponse,\n  type ResponseData,\n} from '@utils/responseData';\nimport type { NextFunction, Request, Response } from 'express';\nimport { t } from 'express-intlayer';\n\nexport type CreateUserBody = { email: string; password?: string };\nexport type CreateUserResult = ResponseData<UserAPI>;\n\n/**\n * Creates a new user.\n */\nexport const createUser = async (\n  req: Request<any, any, User>,\n  res: Response<CreateUserResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const user: User | undefined = req.body;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  try {\n    const newUser = await userService.createUser(user);\n\n    await sendEmail({\n      type: 'welcome',\n      to: newUser.email,\n      username: newUser.name,\n      loginLink: `${process.env.CLIENT_URL}/auth/login`,\n    });\n\n    const formattedUser = mapUserToAPI(newUser);\n\n    const responseData = formatResponse<UserAPI>({\n      message: t({\n        en: 'User created',\n        fr: 'Utilisateur créé',\n        es: 'Usuario creado',\n      }),\n      description: t({\n        en: 'User created successfully',\n        fr: 'Utilisateur créé avec succès',\n        es: 'Usuario creado con éxito',\n      }),\n      data: formattedUser,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type GetUsersParams = FiltersAndPagination<UserFiltersParam>;\nexport type GetUsersResult = PaginatedResponse<UserAPI>;\n\n/**\n * Retrieves a list of users based on filters and pagination.\n */\nexport const getUsers = async (\n  req: Request<GetUsersParams>,\n  res: Response<GetUsersResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, roles } = res.locals;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  const { filters, pageSize, skip, page, getNumberOfPages } =\n    getOrganizationFiltersAndPagination(req);\n\n  try {\n    const users = await userService.findUsers(filters, skip, pageSize);\n\n    if (\n      !hasPermission(\n        roles,\n        'user:read'\n      )({\n        ...res.locals,\n        targetUserIds: users.map((user) => user.id),\n      })\n    ) {\n      ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n      return;\n    }\n\n    const totalItems = await userService.countUsers(filters);\n\n    const formattedUsers = mapUsersToAPI(users);\n\n    const responseData = formatPaginatedResponse<UserAPI>({\n      data: formattedUsers,\n      page,\n      pageSize,\n      totalPages: getNumberOfPages(totalItems),\n      totalItems,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type GetUserByIdParams = { userId: string };\nexport type GetUserByIdResult = ResponseData<UserAPI>;\n\nexport const getUserById = async (\n  req: Request<GetUserByIdParams>,\n  res: Response<GetUserByIdResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { userId } = req.params;\n\n  try {\n    const user = await userService.getUserById(userId);\n\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n      return;\n    }\n\n    const formattedUser = mapUserToAPI(user);\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type GetUserByEmailParams = { email: string };\nexport type GetUserByEmailResult = ResponseData<UserAPI>;\n\nexport const getUserByEmail = async (\n  req: Request<GetUserByEmailParams>,\n  res: Response<GetUserByEmailResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { email } = req.params;\n  const { roles } = res.locals;\n\n  try {\n    const user = await userService.getUserByEmail(email);\n\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n      return;\n    }\n\n    if (\n      !hasPermission(\n        roles,\n        'user:read'\n      )({\n        ...res.locals,\n        targetUserIds: [user.id],\n      })\n    ) {\n      ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n      return;\n    }\n\n    const formattedUser = mapUserToAPI(user);\n    const responseData = formatResponse<UserAPI>({ data: formattedUser });\n\n    res.json(responseData);\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type UpdateUserBody = Partial<User>;\nexport type UpdateUserResult = ResponseData<UserAPI>;\n\n/**\n * Updates user information (phone number, date of birth).\n */\nexport const updateUser = async (\n  req: Request<any, any, UpdateUserBody | undefined>,\n  res: Response<UpdateUserResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const userData = req.body;\n  const { user, roles } = res.locals;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (typeof userData !== 'object') {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_DATA_NOT_FOUND');\n    return;\n  }\n\n  if (\n    !hasPermission(\n      roles,\n      'user:write'\n    )({\n      ...res.locals,\n      targetUserIds: [user.id],\n    })\n  ) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const updatedUser = await userService.updateUserById(user.id, userData);\n\n    logger.info(\n      `User updated: Name: ${updatedUser.name}, id: ${String(updatedUser.id)}`\n    );\n\n    const formattedUser = mapUserToAPI(updatedUser);\n    const responseData = formatResponse<UserAPI>({\n      message: t({\n        en: 'User updated',\n        fr: 'Utilisateur mis à jour',\n        es: 'Usuario actualizado',\n      }),\n      description: t({\n        en: 'User updated successfully',\n        fr: 'Utilisateur mis à jour avec succès',\n        es: 'Usuario actualizado con éxito',\n      }),\n      data: formattedUser,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type DeleteUserParams = { userId: string };\nexport type DeleteUserResult = ResponseData<UserAPI>;\n\n/**\n * Deletes a user based on the provided ID.\n */\nexport const deleteUser = async (\n  req: Request<any, any, DeleteUserParams>,\n  res: Response<DeleteUserResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { userId } = req.params;\n  const { roles } = res.locals;\n\n  if (!hasPermission(roles, 'user:admin')()) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const user = await userService.deleteUser(userId);\n\n    const formattedUser = mapUserToAPI(user);\n    const responseData = formatResponse<UserAPI>({\n      message: t({\n        en: 'User deleted',\n        fr: 'Utilisateur supprimé',\n        es: 'Usuario eliminado',\n      }),\n      description: t({\n        en: 'User deleted successfully',\n        fr: 'Utilisateur supprimé avec succès',\n        es: 'Usuario eliminado con éxito',\n      }),\n      data: formattedUser,\n    });\n\n    res.json(responseData);\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nlet clients: Array<{ id: number; userId: string; res: Response }> = [];\n\nexport const sendVerificationUpdate = (user: User) => {\n  const filteredClients = clients.filter(\n    (client) => String(client.userId) === String(user.id)\n  );\n\n  for (const client of filteredClients) {\n    if (user.emailVerified) {\n      client.res.write(\n        `data: ${JSON.stringify({ userId: user.id, status: 'verified' })}\\n\\n`\n      );\n    }\n  }\n};\n\nexport type VerifyEmailStatusSSEParams = { userId: string };\n\n/**\n * SSE to check the email verification status\n */\nexport const verifyEmailStatusSSE = async (\n  req: Request<VerifyEmailStatusSSEParams, any, any>,\n  res: Response\n) => {\n  // Set headers for SSE\n  res.setHeader('Content-Type', 'text/event-stream;charset=utf-8');\n  res.setHeader('Cache-Control', 'no-cache, no-transform');\n  res.setHeader('Connection', 'keep-alive');\n  res.setHeader('X-Accel-Buffering', 'no'); // For Nginx buffering\n\n  // Send initial data to ensure the connection is open\n  res.write(':\\n\\n'); // Comment to keep connection alive\n  res.flushHeaders();\n\n  const { userId } = req.params; // Get user ID from query parameters\n  const clientId = Date.now();\n\n  const user = await userService.getUserById(userId);\n\n  if (!user) {\n    logger.error(`User not found - User ID: ${userId}`);\n    res.write(`data: ${JSON.stringify({ userId, status: 'error' })}\\n\\n`);\n    res.end();\n    return;\n  }\n\n  // Add client to the list\n  const newClient = { id: clientId, userId, res };\n  clients.push(newClient);\n\n  sendVerificationUpdate(user);\n\n  // Remove client on connection close\n  req.on('close', () => {\n    clients = clients.filter((client) => client.id !== clientId);\n  });\n};\n"],"mappings":"AACA,SAAS,cAAc;AACvB,SAAS,iBAAiB;AAC1B,YAAY,iBAAiB;AAC7B,SAAwB,oBAAoB;AAE5C,SAAS,2CAA2C;AAEpD,SAAS,eAAe,oBAAoB;AAC5C,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAEP,SAAS,SAAS;AAQX,MAAM,aAAa,OACxB,KACA,KACA,UACkB;AAClB,QAAM,OAAyB,IAAI;AAEnC,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI;AACF,UAAM,UAAU,MAAM,YAAY,WAAW,IAAI;AAEjD,UAAM,UAAU;AAAA,MACd,MAAM;AAAA,MACN,IAAI,QAAQ;AAAA,MACZ,UAAU,QAAQ;AAAA,MAClB,WAAW,GAAG,QAAQ,IAAI,UAAU;AAAA,IACtC,CAAC;AAED,UAAM,gBAAgB,aAAa,OAAO;AAE1C,UAAM,eAAe,eAAwB;AAAA,MAC3C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,WAAW,OACtB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,MAAM,IAAI,IAAI;AAE5B,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,QAAM,EAAE,SAAS,UAAU,MAAM,MAAM,iBAAiB,IACtD,oCAAoC,GAAG;AAEzC,MAAI;AACF,UAAM,QAAQ,MAAM,YAAY,UAAU,SAAS,MAAM,QAAQ;AAEjE,QACE,CAAC;AAAA,MACC;AAAA,MACA;AAAA,IACF,EAAE;AAAA,MACA,GAAG,IAAI;AAAA,MACP,eAAe,MAAM,IAAI,CAACA,UAASA,MAAK,EAAE;AAAA,IAC5C,CAAC,GACD;AACA,mBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,IACF;AAEA,UAAM,aAAa,MAAM,YAAY,WAAW,OAAO;AAEvD,UAAM,iBAAiB,cAAc,KAAK;AAE1C,UAAM,eAAe,wBAAiC;AAAA,MACpD,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,YAAY,iBAAiB,UAAU;AAAA,MACvC;AAAA,IACF,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAKO,MAAM,cAAc,OACzB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,OAAO,IAAI,IAAI;AAEvB,MAAI;AACF,UAAM,OAAO,MAAM,YAAY,YAAY,MAAM;AAEjD,QAAI,CAAC,MAAM;AACT,mBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,IACF;AAEA,UAAM,gBAAgB,aAAa,IAAI;AACvC,UAAM,eAAe,eAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAKO,MAAM,iBAAiB,OAC5B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,IAAI,IAAI;AACtB,QAAM,EAAE,MAAM,IAAI,IAAI;AAEtB,MAAI;AACF,UAAM,OAAO,MAAM,YAAY,eAAe,KAAK;AAEnD,QAAI,CAAC,MAAM;AACT,mBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,IACF;AAEA,QACE,CAAC;AAAA,MACC;AAAA,MACA;AAAA,IACF,EAAE;AAAA,MACA,GAAG,IAAI;AAAA,MACP,eAAe,CAAC,KAAK,EAAE;AAAA,IACzB,CAAC,GACD;AACA,mBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,IACF;AAEA,UAAM,gBAAgB,aAAa,IAAI;AACvC,UAAM,eAAe,eAAwB,EAAE,MAAM,cAAc,CAAC;AAEpE,QAAI,KAAK,YAAY;AAAA,EACvB,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,aAAa,OACxB,KACA,KACA,UACkB;AAClB,QAAM,WAAW,IAAI;AACrB,QAAM,EAAE,MAAM,MAAM,IAAI,IAAI;AAE5B,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,OAAO,aAAa,UAAU;AAChC,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MACE,CAAC;AAAA,IACC;AAAA,IACA;AAAA,EACF,EAAE;AAAA,IACA,GAAG,IAAI;AAAA,IACP,eAAe,CAAC,KAAK,EAAE;AAAA,EACzB,CAAC,GACD;AACA,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,cAAc,MAAM,YAAY,eAAe,KAAK,IAAI,QAAQ;AAEtE,WAAO;AAAA,MACL,uBAAuB,YAAY,IAAI,SAAS,OAAO,YAAY,EAAE,CAAC;AAAA,IACxE;AAEA,UAAM,gBAAgB,aAAa,WAAW;AAC9C,UAAM,eAAe,eAAwB;AAAA,MAC3C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,aAAa,OACxB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,OAAO,IAAI,IAAI;AACvB,QAAM,EAAE,MAAM,IAAI,IAAI;AAEtB,MAAI,CAAC,cAAc,OAAO,YAAY,EAAE,GAAG;AACzC,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,OAAO,MAAM,YAAY,WAAW,MAAM;AAEhD,UAAM,gBAAgB,aAAa,IAAI;AACvC,UAAM,eAAe,eAAwB;AAAA,MAC3C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AAAA,EACvB,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAEA,IAAI,UAAgE,CAAC;AAE9D,MAAM,yBAAyB,CAAC,SAAe;AACpD,QAAM,kBAAkB,QAAQ;AAAA,IAC9B,CAAC,WAAW,OAAO,OAAO,MAAM,MAAM,OAAO,KAAK,EAAE;AAAA,EACtD;AAEA,aAAW,UAAU,iBAAiB;AACpC,QAAI,KAAK,eAAe;AACtB,aAAO,IAAI;AAAA,QACT,SAAS,KAAK,UAAU,EAAE,QAAQ,KAAK,IAAI,QAAQ,WAAW,CAAC,CAAC;AAAA;AAAA;AAAA,MAClE;AAAA,IACF;AAAA,EACF;AACF;AAOO,MAAM,uBAAuB,OAClC,KACA,QACG;AAEH,MAAI,UAAU,gBAAgB,iCAAiC;AAC/D,MAAI,UAAU,iBAAiB,wBAAwB;AACvD,MAAI,UAAU,cAAc,YAAY;AACxC,MAAI,UAAU,qBAAqB,IAAI;AAGvC,MAAI,MAAM,OAAO;AACjB,MAAI,aAAa;AAEjB,QAAM,EAAE,OAAO,IAAI,IAAI;AACvB,QAAM,WAAW,KAAK,IAAI;AAE1B,QAAM,OAAO,MAAM,YAAY,YAAY,MAAM;AAEjD,MAAI,CAAC,MAAM;AACT,WAAO,MAAM,6BAA6B,MAAM,EAAE;AAClD,QAAI,MAAM,SAAS,KAAK,UAAU,EAAE,QAAQ,QAAQ,QAAQ,CAAC,CAAC;AAAA;AAAA,CAAM;AACpE,QAAI,IAAI;AACR;AAAA,EACF;AAGA,QAAM,YAAY,EAAE,IAAI,UAAU,QAAQ,IAAI;AAC9C,UAAQ,KAAK,SAAS;AAEtB,yBAAuB,IAAI;AAG3B,MAAI,GAAG,SAAS,MAAM;AACpB,cAAU,QAAQ,OAAO,CAAC,WAAW,OAAO,OAAO,QAAQ;AAAA,EAC7D,CAAC;AACH;","names":["user"]}