@intlayer/backend 5.7.2 → 5.7.3

package/dist/esm/controllers/project.controller.mjs

@@ -25,10 +25,6 @@ const getProjects = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "ORGANIZATION_NOT_DEFINED");
     return;
   }
-  if (!hasPermission(roles, "project:read")(res.locals)) {
-    ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
-    return;
-  }
   const restrictedFilter = {
     ...filters,
     membersIds: { $in: [...filters.membersIds ?? [], String(user.id)] },
@@ -40,6 +36,16 @@ const getProjects = async (req, res, _next) => {
       skip,
       pageSize
     );
+    if (!hasPermission(
+      roles,
+      "project:read"
+    )({
+      ...res.locals,
+      targetProjects: projects
+    })) {
+      ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
+      return;
+    }
     const totalItems = await projectService.countProjects(filters);
     const formattedProjects = mapProjectsToAPI(projects);
     const responseData = formatPaginatedResponse({
@@ -70,7 +76,7 @@ const addProject = async (req, res, _next) => {
   if (!projectData) {
     ErrorHandler.handleGenericErrorResponse(res, "PROJECT_DATA_NOT_FOUND");
   }
-  if (!hasPermission(roles, "project:admin")()) {
+  if (!hasPermission(roles, "project:admin")(res.locals)) {
     ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
     return;
   }
@@ -140,7 +146,13 @@ const updateProject = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "PROJECT_NOT_IN_ORGANIZATION");
     return;
   }
-  if (!hasPermission(roles, "project:write")()) {
+  if (!hasPermission(
+    roles,
+    "project:write"
+  )({
+    ...res.locals,
+    targetProjectIds: [String(project.id)]
+  })) {
     ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
     return;
   }
@@ -193,7 +205,13 @@ const updateProjectMembers = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "PROJECT_MUST_HAVE_ADMIN");
     return;
   }
-  if (!hasPermission(roles, "project:write")()) {
+  if (!hasPermission(
+    roles,
+    "project:write"
+  )({
+    ...res.locals,
+    targetProjectIds: [String(project.id)]
+  })) {
     ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
     return;
   }
@@ -261,7 +279,13 @@ const pushProjectConfiguration = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "PROJECT_NOT_DEFINED");
     return;
   }
-  if (!hasPermission(roles, "project:write")()) {
+  if (!hasPermission(
+    roles,
+    "project:write"
+  )({
+    ...res.locals,
+    targetProjectIds: [String(project.id)]
+  })) {
     ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
     return;
   }
@@ -309,11 +333,17 @@ const deleteProject = async (_req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "PROJECT_NOT_DEFINED");
     return;
   }
-  if (!session) {
+  if (typeof session === "undefined") {
     ErrorHandler.handleGenericErrorResponse(res, "SESSION_NOT_DEFINED");
     return;
   }
-  if (!hasPermission(roles, "project:admin")()) {
+  if (!hasPermission(
+    roles,
+    "project:admin"
+  )({
+    ...res.locals,
+    targetProjectIds: [String(project.id)]
+  })) {
     ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
     return;
   }
@@ -365,7 +395,7 @@ const selectProject = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "PROJECT_ID_NOT_FOUND");
     return;
   }
-  if (!session) {
+  if (typeof session === "undefined") {
     ErrorHandler.handleGenericErrorResponse(res, "SESSION_NOT_DEFINED");
     return;
   }
@@ -397,7 +427,7 @@ const selectProject = async (req, res, _next) => {
 };
 const unselectProject = async (_req, res, _next) => {
   const { session } = res.locals;
-  if (!session) {
+  if (typeof session === "undefined") {
     ErrorHandler.handleGenericErrorResponse(res, "SESSION_NOT_DEFINED");
     return;
   }

package/dist/esm/controllers/project.controller.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/controllers/project.controller.ts"],"sourcesContent":["import type {\n  Project,\n  ProjectAPI,\n  ProjectConfiguration,\n  ProjectCreationData,\n  ProjectData,\n} from '@/types/project.types';\nimport type { User } from '@/types/user.types';\nimport { logger } from '@logger';\nimport { SessionModel } from '@models/session.model';\nimport * as projectService from '@services/project.service';\nimport * as userService from '@services/user.service';\nimport { type AppError, ErrorHandler } from '@utils/errors';\nimport type { FiltersAndPagination } from '@utils/filtersAndPagination/getFiltersAndPaginationFromBody';\nimport {\n  getProjectFiltersAndPagination,\n  type ProjectFilters,\n  type ProjectFiltersParams,\n} from '@utils/filtersAndPagination/getProjectFiltersAndPagination';\nimport { mapProjectsToAPI, mapProjectToAPI } from '@utils/mapper/project';\nimport { hasPermission } from '@utils/permissions';\nimport { getPLanDetails } from '@utils/plan';\nimport {\n  formatPaginatedResponse,\n  formatResponse,\n  type PaginatedResponse,\n  type ResponseData,\n} from '@utils/responseData';\nimport type { NextFunction, Request, Response } from 'express';\nimport { t } from 'express-intlayer';\nimport { Types } from 'mongoose';\n\nexport type GetProjectsParams = FiltersAndPagination<ProjectFiltersParams>;\nexport type GetProjectsResult = PaginatedResponse<ProjectAPI>;\n\n/**\n * Retrieves a list of projects based on filters and pagination.\n */\nexport const getProjects = async (\n  req: Request<GetProjectsParams>,\n  res: Response<GetProjectsResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, organization, roles } = res.locals;\n  const { filters, pageSize, skip, page, getNumberOfPages } =\n    getProjectFiltersAndPagination(req);\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!hasPermission(roles, 'project:read')(res.locals)) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  const restrictedFilter: ProjectFilters = {\n    ...filters,\n    membersIds: { $in: [...(filters.membersIds ?? []), String(user.id)] },\n    organizationId: String(organization.id),\n  };\n\n  try {\n    const projects = await projectService.findProjects(\n      restrictedFilter,\n      skip,\n      pageSize\n    );\n    const totalItems = await projectService.countProjects(filters);\n\n    const formattedProjects = mapProjectsToAPI(projects);\n\n    const responseData = formatPaginatedResponse<ProjectAPI>({\n      data: formattedProjects,\n      page,\n      pageSize,\n      totalPages: getNumberOfPages(totalItems),\n      totalItems,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type AddProjectBody = ProjectCreationData;\nexport type AddProjectResult = ResponseData<ProjectAPI>;\n\n/**\n * Adds a new project to the database.\n */\nexport const addProject = async (\n  req: Request<any, any, AddProjectBody>,\n  res: Response<AddProjectResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { organization, user, roles } = res.locals;\n  const projectData = req.body;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!projectData) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_DATA_NOT_FOUND');\n  }\n\n  if (!hasPermission(roles, 'project:admin')()) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  const { plan } = organization;\n\n  const planType = getPLanDetails(plan);\n\n  if (planType.numberOfProjects) {\n    const projectCount = await projectService.countProjects({\n      organizationId: organization.id,\n    });\n\n    if (projectCount >= planType.numberOfProjects) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'PLAN_PROJECT_LIMIT_REACHED',\n        {\n          organizationId: organization.id,\n        }\n      );\n      return;\n    }\n  }\n\n  const project: ProjectData = {\n    membersIds: [user.id],\n    adminsIds: [user.id],\n    creatorId: user.id,\n    organizationId: organization.id,\n    ...projectData,\n  };\n\n  try {\n    const newProject = await projectService.createProject(project);\n\n    const formattedProject = mapProjectToAPI(newProject);\n\n    const responseData = formatResponse<ProjectAPI>({\n      message: t({\n        en: 'Project created successfully',\n        fr: 'Projet créé avec succès',\n        es: 'Proyecto creado con éxito',\n      }),\n      description: t({\n        en: 'Your project has been created successfully',\n        fr: 'Votre projet a été créé avec succès',\n        es: 'Su proyecto ha sido creado con éxito',\n      }),\n      data: formattedProject,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type UpdateProjectBody = Partial<Project>;\nexport type UpdateProjectResult = ResponseData<ProjectAPI>;\n\n/**\n * Updates an existing project in the database.\n */\nexport const updateProject = async (\n  req: Request<any, any, UpdateProjectBody>,\n  res: Response<UpdateProjectResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { organization, project, user, roles } = res.locals;\n  const projectData = req.body;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_DATA_NOT_FOUND');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (String(project.organizationId) !== String(organization.id)) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_IN_ORGANIZATION');\n    return;\n  }\n\n  if (!hasPermission(roles, 'project:write')()) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const updatedProject = await projectService.updateProjectById(\n      project.id,\n      projectData\n    );\n\n    const formattedProject = mapProjectToAPI(updatedProject);\n\n    const responseData = formatResponse<ProjectAPI>({\n      message: t({\n        en: 'Project updated successfully',\n        fr: 'Projet mis à jour avec succès',\n        es: 'Proyecto actualizado con éxito',\n      }),\n      description: t({\n        en: 'Your project has been updated successfully',\n        fr: 'Votre projet a été mis à jour avec succès',\n        es: 'Su proyecto ha sido actualizado con éxito',\n      }),\n      data: formattedProject,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\ntype UserAndAdmin = { user: User; isAdmin: boolean };\nexport type ProjectMemberByIdOption = {\n  userId: string | Types.ObjectId;\n  isAdmin?: boolean;\n};\n\nexport type UpdateProjectMembersBody = Partial<{\n  membersIds: ProjectMemberByIdOption[];\n}>;\nexport type UpdateProjectMembersResult = ResponseData<ProjectAPI>;\n\n/**\n * Update members to the dictionary in the database.\n */\nexport const updateProjectMembers = async (\n  req: Request<any, any, UpdateProjectMembersBody>,\n  res: Response<UpdateProjectMembersResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, project, organization, roles } = res.locals;\n  const { membersIds } = req.body;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (membersIds?.length === 0) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_MUST_HAVE_MEMBER');\n    return;\n  }\n\n  if (membersIds?.map((el) => el.isAdmin)?.length === 0) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_MUST_HAVE_ADMIN');\n    return;\n  }\n\n  if (!hasPermission(roles, 'project:write')()) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const existingUsers: UserAndAdmin[] = [];\n\n    if (membersIds) {\n      const userIdList = membersIds\n        ?.filter(\n          (member) =>\n            // Remove members that are not in the organization\n            !organization?.membersIds.includes(member.userId as Types.ObjectId)\n        )\n        .map((member) => member.userId);\n\n      const users = await userService.getUsersByIds(userIdList);\n\n      if (users) {\n        const userMap: UserAndAdmin[] = users.map((user) => ({\n          user,\n          isAdmin:\n            membersIds.find(\n              (member) => String(member.userId) === String(user.id)\n            )?.isAdmin ?? false,\n        }));\n\n        existingUsers.push(...userMap);\n      }\n    }\n\n    const formattedMembers: Types.ObjectId[] = existingUsers.map(\n      (user) => user.user.id\n    );\n    const formattedAdmin: Types.ObjectId[] = existingUsers\n      .filter((el) => el.isAdmin)\n      .map((user) => user.user.id);\n\n    const updatedOrganization = await projectService.updateProjectById(\n      project.id,\n      {\n        ...project,\n        membersIds: formattedMembers,\n        adminsIds: formattedAdmin,\n      }\n    );\n\n    const formattedProject = mapProjectToAPI(updatedOrganization);\n\n    const responseData = formatResponse<ProjectAPI>({\n      message: t({\n        en: 'Project members updated successfully',\n        fr: 'Membres du projet mis à jour avec succès',\n        es: 'Miembros del proyecto actualizados con éxito',\n      }),\n      description: t({\n        en: 'Your project members have been updated successfully',\n        fr: 'Les membres de votre projet ont été mis à jour avec succès',\n        es: 'Los miembros de su proyecto han sido actualizados con éxito',\n      }),\n      data: formattedProject,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type PushProjectConfigurationBody = ProjectConfiguration;\nexport type PushProjectConfigurationResult = ResponseData<ProjectConfiguration>;\n\n/**\n * Pushes a project configuration to the database.\n * @param req - Express request object.\n * @param  res - Express response object.\n * @returns Response confirming the deletion.\n */\nexport const pushProjectConfiguration = async (\n  req: Request<any, any, PushProjectConfigurationBody>,\n  res: Response<PushProjectConfigurationResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, project, roles } = res.locals;\n  const projectConfiguration = req.body;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n    return;\n  }\n\n  if (!hasPermission(roles, 'project:write')()) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const projectObject = await projectService.getProjectById(project.id);\n    projectObject.configuration = projectConfiguration;\n\n    projectObject.save();\n\n    if (!projectObject.configuration) {\n      ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_UPDATE_FAILED', {\n        projectId: project.id,\n      });\n      return;\n    }\n\n    const responseData = formatResponse<ProjectConfiguration>({\n      message: t({\n        en: 'Project configuration updated successfully',\n        fr: 'Configuration du projet mise à jour avec succès',\n        es: 'Configuración del proyecto actualizada con éxito',\n      }),\n      description: t({\n        en: 'Your project configuration has been updated successfully',\n        fr: 'La configuration du projet a été mise à jour avec succès',\n        es: 'Su configuración del proyecto ha sido actualizada con éxito',\n      }),\n      data: projectObject.configuration,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type DeleteProjectResult = ResponseData<ProjectAPI>;\n\n/**\n * Deletes a project from the database by its ID.\n * @param req - Express request object.\n * @param  res - Express response object.\n * @returns Response confirming the deletion.\n */\nexport const deleteProject = async (\n  _req: Request,\n  res: Response<DeleteProjectResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, organization, project, session, roles } = res.locals;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n    return;\n  }\n\n  if (!session) {\n    ErrorHandler.handleGenericErrorResponse(res, 'SESSION_NOT_DEFINED');\n    return;\n  }\n\n  if (!hasPermission(roles, 'project:admin')()) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const projectToDelete = await projectService.getProjectById(project.id);\n\n    if (String(projectToDelete.organizationId) !== String(organization.id)) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'PROJECT_NOT_IN_ORGANIZATION'\n      );\n      return;\n    }\n\n    const deletedProject = await projectService.deleteProjectById(project.id);\n\n    if (!deletedProject) {\n      ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED', {\n        projectId: project.id,\n      });\n\n      return;\n    }\n\n    logger.info(`Project deleted: ${String(deletedProject.id)}`);\n\n    const responseData = formatResponse<ProjectAPI>({\n      message: t({\n        en: 'Project deleted successfully',\n        fr: 'Projet supprimé avec succès',\n        es: 'Proyecto eliminado con éxito',\n      }),\n      description: t({\n        en: 'Your project has been deleted successfully',\n        fr: 'Votre projet a été supprimé avec succès',\n        es: 'Su proyecto ha sido eliminado con éxito',\n      }),\n      data: mapProjectToAPI(deletedProject),\n    });\n\n    await SessionModel.updateOne(\n      { _id: session.id },\n      { $set: { activeProjectId: null } }\n    );\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type SelectProjectParam = { projectId: string | Types.ObjectId };\nexport type SelectProjectResult = ResponseData<ProjectAPI>;\n\n/**\n * Select a project.\n */\nexport const selectProject = async (\n  req: Request<SelectProjectParam>,\n  res: Response<SelectProjectResult>,\n  _next: NextFunction\n) => {\n  const { projectId } = req.params;\n  const { session, roles } = res.locals;\n\n  if (!projectId) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_ID_NOT_FOUND');\n    return;\n  }\n\n  if (!session) {\n    ErrorHandler.handleGenericErrorResponse(res, 'SESSION_NOT_DEFINED');\n    return;\n  }\n\n  try {\n    const project = await projectService.getProjectById(projectId);\n\n    await SessionModel.updateOne(\n      { _id: session.id },\n      { $set: { activeProjectId: String(projectId) } }\n    );\n\n    const responseData = formatResponse<ProjectAPI>({\n      message: t({\n        en: 'Project selected successfully',\n        fr: 'Projet sélectionné avec succès',\n        es: 'Proyecto seleccionado con éxito',\n      }),\n      description: t({\n        en: 'Your project has been selected successfully',\n        fr: 'Votre projet a été sélectionné avec succès',\n        es: 'Su proyecto ha sido seleccionado con éxito',\n      }),\n      data: mapProjectToAPI(project),\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type UnselectProjectResult = ResponseData<null>;\n\n/**\n * Unselect a project.\n */\nexport const unselectProject = async (\n  _req: Request,\n  res: Response<UnselectProjectResult>,\n  _next: NextFunction\n) => {\n  const { session } = res.locals;\n\n  if (!session) {\n    ErrorHandler.handleGenericErrorResponse(res, 'SESSION_NOT_DEFINED');\n    return;\n  }\n\n  try {\n    await SessionModel.updateOne(\n      { _id: session.id },\n      { $set: { activeProjectId: null } }\n    );\n\n    const responseData = formatResponse<null>({\n      message: t({\n        en: 'Project unselected successfully',\n        fr: 'Projet désélectionné avec succès',\n        es: 'Proyecto deseleccionado con éxito',\n      }),\n      description: t({\n        en: 'Your project has been unselected successfully',\n        fr: 'Votre projet a été désélectionné avec succès',\n        es: 'Su proyecto ha sido deseleccionado con éxito',\n      }),\n      data: null,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n"],"mappings":"AAQA,SAAS,cAAc;AACvB,SAAS,oBAAoB;AAC7B,YAAY,oBAAoB;AAChC,YAAY,iBAAiB;AAC7B,SAAwB,oBAAoB;AAE5C;AAAA,EACE;AAAA,OAGK;AACP,SAAS,kBAAkB,uBAAuB;AAClD,SAAS,qBAAqB;AAC9B,SAAS,sBAAsB;AAC/B;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAEP,SAAS,SAAS;AASX,MAAM,cAAc,OACzB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,cAAc,MAAM,IAAI,IAAI;AAC1C,QAAM,EAAE,SAAS,UAAU,MAAM,MAAM,iBAAiB,IACtD,+BAA+B,GAAG;AAEpC,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,cAAc,OAAO,cAAc,EAAE,IAAI,MAAM,GAAG;AACrD,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,QAAM,mBAAmC;AAAA,IACvC,GAAG;AAAA,IACH,YAAY,EAAE,KAAK,CAAC,GAAI,QAAQ,cAAc,CAAC,GAAI,OAAO,KAAK,EAAE,CAAC,EAAE;AAAA,IACpE,gBAAgB,OAAO,aAAa,EAAE;AAAA,EACxC;AAEA,MAAI;AACF,UAAM,WAAW,MAAM,eAAe;AAAA,MACpC;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,UAAM,aAAa,MAAM,eAAe,cAAc,OAAO;AAE7D,UAAM,oBAAoB,iBAAiB,QAAQ;AAEnD,UAAM,eAAe,wBAAoC;AAAA,MACvD,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,YAAY,iBAAiB,UAAU;AAAA,MACvC;AAAA,IACF,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,aAAa,OACxB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,cAAc,MAAM,MAAM,IAAI,IAAI;AAC1C,QAAM,cAAc,IAAI;AAExB,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,aAAa;AAChB,iBAAa,2BAA2B,KAAK,wBAAwB;AAAA,EACvE;AAEA,MAAI,CAAC,cAAc,OAAO,eAAe,EAAE,GAAG;AAC5C,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,QAAM,EAAE,KAAK,IAAI;AAEjB,QAAM,WAAW,eAAe,IAAI;AAEpC,MAAI,SAAS,kBAAkB;AAC7B,UAAM,eAAe,MAAM,eAAe,cAAc;AAAA,MACtD,gBAAgB,aAAa;AAAA,IAC/B,CAAC;AAED,QAAI,gBAAgB,SAAS,kBAAkB;AAC7C,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,QACA;AAAA,UACE,gBAAgB,aAAa;AAAA,QAC/B;AAAA,MACF;AACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAuB;AAAA,IAC3B,YAAY,CAAC,KAAK,EAAE;AAAA,IACpB,WAAW,CAAC,KAAK,EAAE;AAAA,IACnB,WAAW,KAAK;AAAA,IAChB,gBAAgB,aAAa;AAAA,IAC7B,GAAG;AAAA,EACL;AAEA,MAAI;AACF,UAAM,aAAa,MAAM,eAAe,cAAc,OAAO;AAE7D,UAAM,mBAAmB,gBAAgB,UAAU;AAEnD,UAAM,eAAe,eAA2B;AAAA,MAC9C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,gBAAgB,OAC3B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,cAAc,SAAS,MAAM,MAAM,IAAI,IAAI;AACnD,QAAM,cAAc,IAAI;AAExB,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,wBAAwB;AACrE;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,OAAO,QAAQ,cAAc,MAAM,OAAO,aAAa,EAAE,GAAG;AAC9D,iBAAa,2BAA2B,KAAK,6BAA6B;AAC1E;AAAA,EACF;AAEA,MAAI,CAAC,cAAc,OAAO,eAAe,EAAE,GAAG;AAC5C,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,iBAAiB,MAAM,eAAe;AAAA,MAC1C,QAAQ;AAAA,MACR;AAAA,IACF;AAEA,UAAM,mBAAmB,gBAAgB,cAAc;AAEvD,UAAM,eAAe,eAA2B;AAAA,MAC9C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAgBO,MAAM,uBAAuB,OAClC,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,SAAS,cAAc,MAAM,IAAI,IAAI;AACnD,QAAM,EAAE,WAAW,IAAI,IAAI;AAE3B,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,YAAY,WAAW,GAAG;AAC5B,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,YAAY,IAAI,CAAC,OAAO,GAAG,OAAO,GAAG,WAAW,GAAG;AACrD,iBAAa,2BAA2B,KAAK,yBAAyB;AACtE;AAAA,EACF;AAEA,MAAI,CAAC,cAAc,OAAO,eAAe,EAAE,GAAG;AAC5C,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,gBAAgC,CAAC;AAEvC,QAAI,YAAY;AACd,YAAM,aAAa,YACf;AAAA,QACA,CAAC;AAAA;AAAA,UAEC,CAAC,cAAc,WAAW,SAAS,OAAO,MAAwB;AAAA;AAAA,MACtE,EACC,IAAI,CAAC,WAAW,OAAO,MAAM;AAEhC,YAAM,QAAQ,MAAM,YAAY,cAAc,UAAU;AAExD,UAAI,OAAO;AACT,cAAM,UAA0B,MAAM,IAAI,CAACA,WAAU;AAAA,UACnD,MAAAA;AAAA,UACA,SACE,WAAW;AAAA,YACT,CAAC,WAAW,OAAO,OAAO,MAAM,MAAM,OAAOA,MAAK,EAAE;AAAA,UACtD,GAAG,WAAW;AAAA,QAClB,EAAE;AAEF,sBAAc,KAAK,GAAG,OAAO;AAAA,MAC/B;AAAA,IACF;AAEA,UAAM,mBAAqC,cAAc;AAAA,MACvD,CAACA,UAASA,MAAK,KAAK;AAAA,IACtB;AACA,UAAM,iBAAmC,cACtC,OAAO,CAAC,OAAO,GAAG,OAAO,EACzB,IAAI,CAACA,UAASA,MAAK,KAAK,EAAE;AAE7B,UAAM,sBAAsB,MAAM,eAAe;AAAA,MAC/C,QAAQ;AAAA,MACR;AAAA,QACE,GAAG;AAAA,QACH,YAAY;AAAA,QACZ,WAAW;AAAA,MACb;AAAA,IACF;AAEA,UAAM,mBAAmB,gBAAgB,mBAAmB;AAE5D,UAAM,eAAe,eAA2B;AAAA,MAC9C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAWO,MAAM,2BAA2B,OACtC,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,SAAS,MAAM,IAAI,IAAI;AACrC,QAAM,uBAAuB,IAAI;AAEjC,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,CAAC,cAAc,OAAO,eAAe,EAAE,GAAG;AAC5C,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,gBAAgB,MAAM,eAAe,eAAe,QAAQ,EAAE;AACpE,kBAAc,gBAAgB;AAE9B,kBAAc,KAAK;AAEnB,QAAI,CAAC,cAAc,eAAe;AAChC,mBAAa,2BAA2B,KAAK,yBAAyB;AAAA,QACpE,WAAW,QAAQ;AAAA,MACrB,CAAC;AACD;AAAA,IACF;AAEA,UAAM,eAAe,eAAqC;AAAA,MACxD,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM,cAAc;AAAA,IACtB,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAUO,MAAM,gBAAgB,OAC3B,MACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,cAAc,SAAS,SAAS,MAAM,IAAI,IAAI;AAE5D,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,CAAC,cAAc,OAAO,eAAe,EAAE,GAAG;AAC5C,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,kBAAkB,MAAM,eAAe,eAAe,QAAQ,EAAE;AAEtE,QAAI,OAAO,gBAAgB,cAAc,MAAM,OAAO,aAAa,EAAE,GAAG;AACtE,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,MACF;AACA;AAAA,IACF;AAEA,UAAM,iBAAiB,MAAM,eAAe,kBAAkB,QAAQ,EAAE;AAExE,QAAI,CAAC,gBAAgB;AACnB,mBAAa,2BAA2B,KAAK,uBAAuB;AAAA,QAClE,WAAW,QAAQ;AAAA,MACrB,CAAC;AAED;AAAA,IACF;AAEA,WAAO,KAAK,oBAAoB,OAAO,eAAe,EAAE,CAAC,EAAE;AAE3D,UAAM,eAAe,eAA2B;AAAA,MAC9C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM,gBAAgB,cAAc;AAAA,IACtC,CAAC;AAED,UAAM,aAAa;AAAA,MACjB,EAAE,KAAK,QAAQ,GAAG;AAAA,MAClB,EAAE,MAAM,EAAE,iBAAiB,KAAK,EAAE;AAAA,IACpC;AAEA,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,gBAAgB,OAC3B,KACA,KACA,UACG;AACH,QAAM,EAAE,UAAU,IAAI,IAAI;AAC1B,QAAM,EAAE,SAAS,MAAM,IAAI,IAAI;AAE/B,MAAI,CAAC,WAAW;AACd,iBAAa,2BAA2B,KAAK,sBAAsB;AACnE;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,UAAU,MAAM,eAAe,eAAe,SAAS;AAE7D,UAAM,aAAa;AAAA,MACjB,EAAE,KAAK,QAAQ,GAAG;AAAA,MAClB,EAAE,MAAM,EAAE,iBAAiB,OAAO,SAAS,EAAE,EAAE;AAAA,IACjD;AAEA,UAAM,eAAe,eAA2B;AAAA,MAC9C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM,gBAAgB,OAAO;AAAA,IAC/B,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAOO,MAAM,kBAAkB,OAC7B,MACA,KACA,UACG;AACH,QAAM,EAAE,QAAQ,IAAI,IAAI;AAExB,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,aAAa;AAAA,MACjB,EAAE,KAAK,QAAQ,GAAG;AAAA,MAClB,EAAE,MAAM,EAAE,iBAAiB,KAAK,EAAE;AAAA,IACpC;AAEA,UAAM,eAAe,eAAqB;AAAA,MACxC,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;","names":["user"]}
+{"version":3,"sources":["../../../src/controllers/project.controller.ts"],"sourcesContent":["import type {\n  Project,\n  ProjectAPI,\n  ProjectConfiguration,\n  ProjectCreationData,\n  ProjectData,\n} from '@/types/project.types';\nimport type { User } from '@/types/user.types';\nimport { logger } from '@logger';\nimport type { ResponseWithSession } from '@middlewares/sessionAuth.middleware';\nimport { SessionModel } from '@models/session.model';\nimport * as projectService from '@services/project.service';\nimport * as userService from '@services/user.service';\nimport { type AppError, ErrorHandler } from '@utils/errors';\nimport type { FiltersAndPagination } from '@utils/filtersAndPagination/getFiltersAndPaginationFromBody';\nimport {\n  getProjectFiltersAndPagination,\n  type ProjectFilters,\n  type ProjectFiltersParams,\n} from '@utils/filtersAndPagination/getProjectFiltersAndPagination';\nimport { mapProjectsToAPI, mapProjectToAPI } from '@utils/mapper/project';\nimport { hasPermission } from '@utils/permissions';\nimport { getPLanDetails } from '@utils/plan';\nimport {\n  formatPaginatedResponse,\n  formatResponse,\n  type PaginatedResponse,\n  type ResponseData,\n} from '@utils/responseData';\nimport type { NextFunction, Request } from 'express';\nimport { t } from 'express-intlayer';\nimport { Types } from 'mongoose';\n\nexport type GetProjectsParams = FiltersAndPagination<ProjectFiltersParams>;\nexport type GetProjectsResult = PaginatedResponse<ProjectAPI>;\n\n/**\n * Retrieves a list of projects based on filters and pagination.\n */\nexport const getProjects = async (\n  req: Request<GetProjectsParams>,\n  res: ResponseWithSession<GetProjectsResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, organization, roles } = res.locals;\n  const { filters, pageSize, skip, page, getNumberOfPages } =\n    getProjectFiltersAndPagination(req);\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  const restrictedFilter: ProjectFilters = {\n    ...filters,\n    membersIds: { $in: [...(filters.membersIds ?? []), String(user.id)] },\n    organizationId: String(organization.id),\n  };\n\n  try {\n    const projects = await projectService.findProjects(\n      restrictedFilter,\n      skip,\n      pageSize\n    );\n\n    if (\n      !hasPermission(\n        roles,\n        'project:read'\n      )({\n        ...res.locals,\n        targetProjects: projects,\n      })\n    ) {\n      ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n      return;\n    }\n\n    const totalItems = await projectService.countProjects(filters);\n\n    const formattedProjects = mapProjectsToAPI(projects);\n\n    const responseData = formatPaginatedResponse<ProjectAPI>({\n      data: formattedProjects,\n      page,\n      pageSize,\n      totalPages: getNumberOfPages(totalItems),\n      totalItems,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type AddProjectBody = ProjectCreationData;\nexport type AddProjectResult = ResponseData<ProjectAPI>;\n\n/**\n * Adds a new project to the database.\n */\nexport const addProject = async (\n  req: Request<any, any, AddProjectBody>,\n  res: ResponseWithSession<AddProjectResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { organization, user, roles } = res.locals;\n  const projectData = req.body;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!projectData) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_DATA_NOT_FOUND');\n  }\n\n  if (!hasPermission(roles, 'project:admin')(res.locals)) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  const { plan } = organization;\n\n  const planType = getPLanDetails(plan);\n\n  if (planType.numberOfProjects) {\n    const projectCount = await projectService.countProjects({\n      organizationId: organization.id,\n    });\n\n    if (projectCount >= planType.numberOfProjects) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'PLAN_PROJECT_LIMIT_REACHED',\n        {\n          organizationId: organization.id,\n        }\n      );\n      return;\n    }\n  }\n\n  const project: ProjectData = {\n    membersIds: [user.id],\n    adminsIds: [user.id],\n    creatorId: user.id,\n    organizationId: organization.id,\n    ...projectData,\n  };\n\n  try {\n    const newProject = await projectService.createProject(project);\n\n    const formattedProject = mapProjectToAPI(newProject);\n\n    const responseData = formatResponse<ProjectAPI>({\n      message: t({\n        en: 'Project created successfully',\n        fr: 'Projet créé avec succès',\n        es: 'Proyecto creado con éxito',\n      }),\n      description: t({\n        en: 'Your project has been created successfully',\n        fr: 'Votre projet a été créé avec succès',\n        es: 'Su proyecto ha sido creado con éxito',\n      }),\n      data: formattedProject,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type UpdateProjectBody = Partial<Project>;\nexport type UpdateProjectResult = ResponseData<ProjectAPI>;\n\n/**\n * Updates an existing project in the database.\n */\nexport const updateProject = async (\n  req: Request<any, any, UpdateProjectBody>,\n  res: ResponseWithSession<UpdateProjectResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { organization, project, user, roles } = res.locals;\n  const projectData = req.body;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_DATA_NOT_FOUND');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (String(project.organizationId) !== String(organization.id)) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_IN_ORGANIZATION');\n    return;\n  }\n\n  if (\n    !hasPermission(\n      roles,\n      'project:write'\n    )({\n      ...res.locals,\n      targetProjectIds: [String(project.id)],\n    })\n  ) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const updatedProject = await projectService.updateProjectById(\n      project.id,\n      projectData\n    );\n\n    const formattedProject = mapProjectToAPI(updatedProject);\n\n    const responseData = formatResponse<ProjectAPI>({\n      message: t({\n        en: 'Project updated successfully',\n        fr: 'Projet mis à jour avec succès',\n        es: 'Proyecto actualizado con éxito',\n      }),\n      description: t({\n        en: 'Your project has been updated successfully',\n        fr: 'Votre projet a été mis à jour avec succès',\n        es: 'Su proyecto ha sido actualizado con éxito',\n      }),\n      data: formattedProject,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\ntype UserAndAdmin = { user: User; isAdmin: boolean };\nexport type ProjectMemberByIdOption = {\n  userId: string | Types.ObjectId;\n  isAdmin?: boolean;\n};\n\nexport type UpdateProjectMembersBody = Partial<{\n  membersIds: ProjectMemberByIdOption[];\n}>;\nexport type UpdateProjectMembersResult = ResponseData<ProjectAPI>;\n\n/**\n * Update members to the dictionary in the database.\n */\nexport const updateProjectMembers = async (\n  req: Request<any, any, UpdateProjectMembersBody>,\n  res: ResponseWithSession<UpdateProjectMembersResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, project, organization, roles } = res.locals;\n  const { membersIds } = req.body;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (membersIds?.length === 0) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_MUST_HAVE_MEMBER');\n    return;\n  }\n\n  if (membersIds?.map((el) => el.isAdmin)?.length === 0) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_MUST_HAVE_ADMIN');\n    return;\n  }\n\n  if (\n    !hasPermission(\n      roles,\n      'project:write'\n    )({\n      ...res.locals,\n      targetProjectIds: [String(project.id)],\n    })\n  ) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const existingUsers: UserAndAdmin[] = [];\n\n    if (membersIds) {\n      const userIdList = membersIds\n        ?.filter(\n          (member) =>\n            // Remove members that are not in the organization\n            !organization?.membersIds.includes(member.userId as Types.ObjectId)\n        )\n        .map((member) => member.userId);\n\n      const users = await userService.getUsersByIds(userIdList);\n\n      if (users) {\n        const userMap: UserAndAdmin[] = users.map((user) => ({\n          user,\n          isAdmin:\n            membersIds.find(\n              (member) => String(member.userId) === String(user.id)\n            )?.isAdmin ?? false,\n        }));\n\n        existingUsers.push(...userMap);\n      }\n    }\n\n    const formattedMembers: Types.ObjectId[] = existingUsers.map(\n      (user) => user.user.id\n    );\n    const formattedAdmin: Types.ObjectId[] = existingUsers\n      .filter((el) => el.isAdmin)\n      .map((user) => user.user.id);\n\n    const updatedOrganization = await projectService.updateProjectById(\n      project.id,\n      {\n        ...project,\n        membersIds: formattedMembers,\n        adminsIds: formattedAdmin,\n      }\n    );\n\n    const formattedProject = mapProjectToAPI(updatedOrganization);\n\n    const responseData = formatResponse<ProjectAPI>({\n      message: t({\n        en: 'Project members updated successfully',\n        fr: 'Membres du projet mis à jour avec succès',\n        es: 'Miembros del proyecto actualizados con éxito',\n      }),\n      description: t({\n        en: 'Your project members have been updated successfully',\n        fr: 'Les membres de votre projet ont été mis à jour avec succès',\n        es: 'Los miembros de su proyecto han sido actualizados con éxito',\n      }),\n      data: formattedProject,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type PushProjectConfigurationBody = ProjectConfiguration;\nexport type PushProjectConfigurationResult = ResponseData<ProjectConfiguration>;\n\n/**\n * Pushes a project configuration to the database.\n * @param req - Express request object.\n * @param  res - Express response object.\n * @returns Response confirming the deletion.\n */\nexport const pushProjectConfiguration = async (\n  req: Request<any, any, PushProjectConfigurationBody>,\n  res: ResponseWithSession<PushProjectConfigurationResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, project, roles } = res.locals;\n  const projectConfiguration = req.body;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n    return;\n  }\n\n  if (\n    !hasPermission(\n      roles,\n      'project:write'\n    )({\n      ...res.locals,\n      targetProjectIds: [String(project.id)],\n    })\n  ) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const projectObject = await projectService.getProjectById(project.id);\n    projectObject.configuration = projectConfiguration;\n\n    projectObject.save();\n\n    if (!projectObject.configuration) {\n      ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_UPDATE_FAILED', {\n        projectId: project.id,\n      });\n      return;\n    }\n\n    const responseData = formatResponse<ProjectConfiguration>({\n      message: t({\n        en: 'Project configuration updated successfully',\n        fr: 'Configuration du projet mise à jour avec succès',\n        es: 'Configuración del proyecto actualizada con éxito',\n      }),\n      description: t({\n        en: 'Your project configuration has been updated successfully',\n        fr: 'La configuration du projet a été mise à jour avec succès',\n        es: 'Su configuración del proyecto ha sido actualizada con éxito',\n      }),\n      data: projectObject.configuration,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type DeleteProjectResult = ResponseData<ProjectAPI>;\n\n/**\n * Deletes a project from the database by its ID.\n * @param req - Express request object.\n * @param  res - Express response object.\n * @returns Response confirming the deletion.\n */\nexport const deleteProject = async (\n  _req: Request,\n  res: ResponseWithSession<DeleteProjectResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, organization, project, session, roles } = res.locals;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n    return;\n  }\n\n  if (typeof session === 'undefined') {\n    ErrorHandler.handleGenericErrorResponse(res, 'SESSION_NOT_DEFINED');\n    return;\n  }\n\n  if (\n    !hasPermission(\n      roles,\n      'project:admin'\n    )({\n      ...res.locals,\n      targetProjectIds: [String(project.id)],\n    })\n  ) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const projectToDelete = await projectService.getProjectById(project.id);\n\n    if (String(projectToDelete.organizationId) !== String(organization.id)) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'PROJECT_NOT_IN_ORGANIZATION'\n      );\n      return;\n    }\n\n    const deletedProject = await projectService.deleteProjectById(project.id);\n\n    if (!deletedProject) {\n      ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED', {\n        projectId: project.id,\n      });\n\n      return;\n    }\n\n    logger.info(`Project deleted: ${String(deletedProject.id)}`);\n\n    const responseData = formatResponse<ProjectAPI>({\n      message: t({\n        en: 'Project deleted successfully',\n        fr: 'Projet supprimé avec succès',\n        es: 'Proyecto eliminado con éxito',\n      }),\n      description: t({\n        en: 'Your project has been deleted successfully',\n        fr: 'Votre projet a été supprimé avec succès',\n        es: 'Su proyecto ha sido eliminado con éxito',\n      }),\n      data: mapProjectToAPI(deletedProject),\n    });\n\n    await SessionModel.updateOne(\n      { _id: session.id },\n      { $set: { activeProjectId: null } }\n    );\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type SelectProjectParam = { projectId: string | Types.ObjectId };\nexport type SelectProjectResult = ResponseData<ProjectAPI>;\n\n/**\n * Select a project.\n */\nexport const selectProject = async (\n  req: Request<SelectProjectParam>,\n  res: ResponseWithSession<SelectProjectResult>,\n  _next: NextFunction\n) => {\n  const { projectId } = req.params;\n  const { session, roles } = res.locals;\n\n  if (!projectId) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_ID_NOT_FOUND');\n    return;\n  }\n\n  if (typeof session === 'undefined') {\n    ErrorHandler.handleGenericErrorResponse(res, 'SESSION_NOT_DEFINED');\n    return;\n  }\n\n  try {\n    const project = await projectService.getProjectById(projectId);\n\n    await SessionModel.updateOne(\n      { _id: session.id },\n      { $set: { activeProjectId: String(projectId) } }\n    );\n\n    const responseData = formatResponse<ProjectAPI>({\n      message: t({\n        en: 'Project selected successfully',\n        fr: 'Projet sélectionné avec succès',\n        es: 'Proyecto seleccionado con éxito',\n      }),\n      description: t({\n        en: 'Your project has been selected successfully',\n        fr: 'Votre projet a été sélectionné avec succès',\n        es: 'Su proyecto ha sido seleccionado con éxito',\n      }),\n      data: mapProjectToAPI(project),\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type UnselectProjectResult = ResponseData<null>;\n\n/**\n * Unselect a project.\n */\nexport const unselectProject = async (\n  _req: Request,\n  res: ResponseWithSession<UnselectProjectResult>,\n  _next: NextFunction\n) => {\n  const { session } = res.locals;\n\n  if (typeof session === 'undefined') {\n    ErrorHandler.handleGenericErrorResponse(res, 'SESSION_NOT_DEFINED');\n    return;\n  }\n\n  try {\n    await SessionModel.updateOne(\n      { _id: session.id },\n      { $set: { activeProjectId: null } }\n    );\n\n    const responseData = formatResponse<null>({\n      message: t({\n        en: 'Project unselected successfully',\n        fr: 'Projet désélectionné avec succès',\n        es: 'Proyecto deseleccionado con éxito',\n      }),\n      description: t({\n        en: 'Your project has been unselected successfully',\n        fr: 'Votre projet a été désélectionné avec succès',\n        es: 'Su proyecto ha sido deseleccionado con éxito',\n      }),\n      data: null,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n"],"mappings":"AAQA,SAAS,cAAc;AAEvB,SAAS,oBAAoB;AAC7B,YAAY,oBAAoB;AAChC,YAAY,iBAAiB;AAC7B,SAAwB,oBAAoB;AAE5C;AAAA,EACE;AAAA,OAGK;AACP,SAAS,kBAAkB,uBAAuB;AAClD,SAAS,qBAAqB;AAC9B,SAAS,sBAAsB;AAC/B;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAEP,SAAS,SAAS;AASX,MAAM,cAAc,OACzB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,cAAc,MAAM,IAAI,IAAI;AAC1C,QAAM,EAAE,SAAS,UAAU,MAAM,MAAM,iBAAiB,IACtD,+BAA+B,GAAG;AAEpC,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,QAAM,mBAAmC;AAAA,IACvC,GAAG;AAAA,IACH,YAAY,EAAE,KAAK,CAAC,GAAI,QAAQ,cAAc,CAAC,GAAI,OAAO,KAAK,EAAE,CAAC,EAAE;AAAA,IACpE,gBAAgB,OAAO,aAAa,EAAE;AAAA,EACxC;AAEA,MAAI;AACF,UAAM,WAAW,MAAM,eAAe;AAAA,MACpC;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAEA,QACE,CAAC;AAAA,MACC;AAAA,MACA;AAAA,IACF,EAAE;AAAA,MACA,GAAG,IAAI;AAAA,MACP,gBAAgB;AAAA,IAClB,CAAC,GACD;AACA,mBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,IACF;AAEA,UAAM,aAAa,MAAM,eAAe,cAAc,OAAO;AAE7D,UAAM,oBAAoB,iBAAiB,QAAQ;AAEnD,UAAM,eAAe,wBAAoC;AAAA,MACvD,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,YAAY,iBAAiB,UAAU;AAAA,MACvC;AAAA,IACF,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,aAAa,OACxB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,cAAc,MAAM,MAAM,IAAI,IAAI;AAC1C,QAAM,cAAc,IAAI;AAExB,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,aAAa;AAChB,iBAAa,2BAA2B,KAAK,wBAAwB;AAAA,EACvE;AAEA,MAAI,CAAC,cAAc,OAAO,eAAe,EAAE,IAAI,MAAM,GAAG;AACtD,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,QAAM,EAAE,KAAK,IAAI;AAEjB,QAAM,WAAW,eAAe,IAAI;AAEpC,MAAI,SAAS,kBAAkB;AAC7B,UAAM,eAAe,MAAM,eAAe,cAAc;AAAA,MACtD,gBAAgB,aAAa;AAAA,IAC/B,CAAC;AAED,QAAI,gBAAgB,SAAS,kBAAkB;AAC7C,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,QACA;AAAA,UACE,gBAAgB,aAAa;AAAA,QAC/B;AAAA,MACF;AACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAuB;AAAA,IAC3B,YAAY,CAAC,KAAK,EAAE;AAAA,IACpB,WAAW,CAAC,KAAK,EAAE;AAAA,IACnB,WAAW,KAAK;AAAA,IAChB,gBAAgB,aAAa;AAAA,IAC7B,GAAG;AAAA,EACL;AAEA,MAAI;AACF,UAAM,aAAa,MAAM,eAAe,cAAc,OAAO;AAE7D,UAAM,mBAAmB,gBAAgB,UAAU;AAEnD,UAAM,eAAe,eAA2B;AAAA,MAC9C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,gBAAgB,OAC3B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,cAAc,SAAS,MAAM,MAAM,IAAI,IAAI;AACnD,QAAM,cAAc,IAAI;AAExB,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,wBAAwB;AACrE;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,OAAO,QAAQ,cAAc,MAAM,OAAO,aAAa,EAAE,GAAG;AAC9D,iBAAa,2BAA2B,KAAK,6BAA6B;AAC1E;AAAA,EACF;AAEA,MACE,CAAC;AAAA,IACC;AAAA,IACA;AAAA,EACF,EAAE;AAAA,IACA,GAAG,IAAI;AAAA,IACP,kBAAkB,CAAC,OAAO,QAAQ,EAAE,CAAC;AAAA,EACvC,CAAC,GACD;AACA,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,iBAAiB,MAAM,eAAe;AAAA,MAC1C,QAAQ;AAAA,MACR;AAAA,IACF;AAEA,UAAM,mBAAmB,gBAAgB,cAAc;AAEvD,UAAM,eAAe,eAA2B;AAAA,MAC9C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAgBO,MAAM,uBAAuB,OAClC,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,SAAS,cAAc,MAAM,IAAI,IAAI;AACnD,QAAM,EAAE,WAAW,IAAI,IAAI;AAE3B,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,YAAY,WAAW,GAAG;AAC5B,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,YAAY,IAAI,CAAC,OAAO,GAAG,OAAO,GAAG,WAAW,GAAG;AACrD,iBAAa,2BAA2B,KAAK,yBAAyB;AACtE;AAAA,EACF;AAEA,MACE,CAAC;AAAA,IACC;AAAA,IACA;AAAA,EACF,EAAE;AAAA,IACA,GAAG,IAAI;AAAA,IACP,kBAAkB,CAAC,OAAO,QAAQ,EAAE,CAAC;AAAA,EACvC,CAAC,GACD;AACA,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,gBAAgC,CAAC;AAEvC,QAAI,YAAY;AACd,YAAM,aAAa,YACf;AAAA,QACA,CAAC;AAAA;AAAA,UAEC,CAAC,cAAc,WAAW,SAAS,OAAO,MAAwB;AAAA;AAAA,MACtE,EACC,IAAI,CAAC,WAAW,OAAO,MAAM;AAEhC,YAAM,QAAQ,MAAM,YAAY,cAAc,UAAU;AAExD,UAAI,OAAO;AACT,cAAM,UAA0B,MAAM,IAAI,CAACA,WAAU;AAAA,UACnD,MAAAA;AAAA,UACA,SACE,WAAW;AAAA,YACT,CAAC,WAAW,OAAO,OAAO,MAAM,MAAM,OAAOA,MAAK,EAAE;AAAA,UACtD,GAAG,WAAW;AAAA,QAClB,EAAE;AAEF,sBAAc,KAAK,GAAG,OAAO;AAAA,MAC/B;AAAA,IACF;AAEA,UAAM,mBAAqC,cAAc;AAAA,MACvD,CAACA,UAASA,MAAK,KAAK;AAAA,IACtB;AACA,UAAM,iBAAmC,cACtC,OAAO,CAAC,OAAO,GAAG,OAAO,EACzB,IAAI,CAACA,UAASA,MAAK,KAAK,EAAE;AAE7B,UAAM,sBAAsB,MAAM,eAAe;AAAA,MAC/C,QAAQ;AAAA,MACR;AAAA,QACE,GAAG;AAAA,QACH,YAAY;AAAA,QACZ,WAAW;AAAA,MACb;AAAA,IACF;AAEA,UAAM,mBAAmB,gBAAgB,mBAAmB;AAE5D,UAAM,eAAe,eAA2B;AAAA,MAC9C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAWO,MAAM,2BAA2B,OACtC,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,SAAS,MAAM,IAAI,IAAI;AACrC,QAAM,uBAAuB,IAAI;AAEjC,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MACE,CAAC;AAAA,IACC;AAAA,IACA;AAAA,EACF,EAAE;AAAA,IACA,GAAG,IAAI;AAAA,IACP,kBAAkB,CAAC,OAAO,QAAQ,EAAE,CAAC;AAAA,EACvC,CAAC,GACD;AACA,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,gBAAgB,MAAM,eAAe,eAAe,QAAQ,EAAE;AACpE,kBAAc,gBAAgB;AAE9B,kBAAc,KAAK;AAEnB,QAAI,CAAC,cAAc,eAAe;AAChC,mBAAa,2BAA2B,KAAK,yBAAyB;AAAA,QACpE,WAAW,QAAQ;AAAA,MACrB,CAAC;AACD;AAAA,IACF;AAEA,UAAM,eAAe,eAAqC;AAAA,MACxD,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM,cAAc;AAAA,IACtB,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAUO,MAAM,gBAAgB,OAC3B,MACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,cAAc,SAAS,SAAS,MAAM,IAAI,IAAI;AAE5D,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,OAAO,YAAY,aAAa;AAClC,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MACE,CAAC;AAAA,IACC;AAAA,IACA;AAAA,EACF,EAAE;AAAA,IACA,GAAG,IAAI;AAAA,IACP,kBAAkB,CAAC,OAAO,QAAQ,EAAE,CAAC;AAAA,EACvC,CAAC,GACD;AACA,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,kBAAkB,MAAM,eAAe,eAAe,QAAQ,EAAE;AAEtE,QAAI,OAAO,gBAAgB,cAAc,MAAM,OAAO,aAAa,EAAE,GAAG;AACtE,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,MACF;AACA;AAAA,IACF;AAEA,UAAM,iBAAiB,MAAM,eAAe,kBAAkB,QAAQ,EAAE;AAExE,QAAI,CAAC,gBAAgB;AACnB,mBAAa,2BAA2B,KAAK,uBAAuB;AAAA,QAClE,WAAW,QAAQ;AAAA,MACrB,CAAC;AAED;AAAA,IACF;AAEA,WAAO,KAAK,oBAAoB,OAAO,eAAe,EAAE,CAAC,EAAE;AAE3D,UAAM,eAAe,eAA2B;AAAA,MAC9C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM,gBAAgB,cAAc;AAAA,IACtC,CAAC;AAED,UAAM,aAAa;AAAA,MACjB,EAAE,KAAK,QAAQ,GAAG;AAAA,MAClB,EAAE,MAAM,EAAE,iBAAiB,KAAK,EAAE;AAAA,IACpC;AAEA,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,gBAAgB,OAC3B,KACA,KACA,UACG;AACH,QAAM,EAAE,UAAU,IAAI,IAAI;AAC1B,QAAM,EAAE,SAAS,MAAM,IAAI,IAAI;AAE/B,MAAI,CAAC,WAAW;AACd,iBAAa,2BAA2B,KAAK,sBAAsB;AACnE;AAAA,EACF;AAEA,MAAI,OAAO,YAAY,aAAa;AAClC,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,UAAU,MAAM,eAAe,eAAe,SAAS;AAE7D,UAAM,aAAa;AAAA,MACjB,EAAE,KAAK,QAAQ,GAAG;AAAA,MAClB,EAAE,MAAM,EAAE,iBAAiB,OAAO,SAAS,EAAE,EAAE;AAAA,IACjD;AAEA,UAAM,eAAe,eAA2B;AAAA,MAC9C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM,gBAAgB,OAAO;AAAA,IAC/B,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAOO,MAAM,kBAAkB,OAC7B,MACA,KACA,UACG;AACH,QAAM,EAAE,QAAQ,IAAI,IAAI;AAExB,MAAI,OAAO,YAAY,aAAa;AAClC,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,aAAa;AAAA,MACjB,EAAE,KAAK,QAAQ,GAAG;AAAA,MAClB,EAAE,MAAM,EAAE,iBAAiB,KAAK,EAAE;AAAA,IACpC;AAEA,UAAM,eAAe,eAAqB;AAAA,MACxC,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;","names":["user"]}

package/dist/esm/controllers/projectAccessKey.controller.mjs

@@ -14,7 +14,13 @@ const addNewAccessKey = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_DEFINED");
     return;
   }
-  if (!hasPermission(roles, "project:write")()) {
+  if (!hasPermission(
+    roles,
+    "project:write"
+  )({
+    ...res.locals,
+    targetProjectIds: [project.id]
+  })) {
     ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
     return;
   }
@@ -69,7 +75,13 @@ const deleteAccessKey = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "CLIENT_ID_NOT_FOUND");
     return;
   }
-  if (!hasPermission(roles, "project:write")()) {
+  if (!hasPermission(
+    roles,
+    "project:write"
+  )({
+    ...res.locals,
+    targetProjectIds: [project.id]
+  })) {
     ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
     return;
   }
@@ -117,7 +129,13 @@ const refreshAccessKey = async (req, res, _next) => {
   if (!clientId) {
     ErrorHandler.handleGenericErrorResponse(res, "CLIENT_ID_NOT_FOUND");
   }
-  if (!hasPermission(roles, "project:write")()) {
+  if (!hasPermission(
+    roles,
+    "project:write"
+  )({
+    ...res.locals,
+    targetProjectIds: [project.id]
+  })) {
     ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
     return;
   }

package/dist/esm/controllers/projectAccessKey.controller.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/controllers/projectAccessKey.controller.ts"],"sourcesContent":["import type { AccessKeyData, OAuth2Access } from '@/types/project.types';\nimport { sendEmail } from '@services/email.service';\nimport * as projectAccessKeyService from '@services/projectAccessKey.service';\nimport { type AppError, ErrorHandler } from '@utils/errors';\nimport { hasPermission } from '@utils/permissions';\nimport { type ResponseData, formatResponse } from '@utils/responseData';\nimport type { NextFunction, Request, Response } from 'express';\nimport { t } from 'express-intlayer';\n\nexport type AddNewAccessKeyBody = AccessKeyData;\nexport type AddNewAccessKeyResponse = ResponseData<OAuth2Access>;\n\n/**\n * Adds a new access key to a project.\n */\nexport const addNewAccessKey = async (\n  req: Request<AddNewAccessKeyBody>,\n  res: Response<AddNewAccessKeyResponse>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, project, roles } = res.locals;\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n    return;\n  }\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!hasPermission(roles, 'project:write')()) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const newAccessKey = await projectAccessKeyService.addNewAccessKey(\n      req.body,\n      project.id,\n      user\n    );\n\n    const responseData = formatResponse<OAuth2Access>({\n      message: t({\n        en: 'Access key created successfully',\n        es: 'Clave de acceso creada con éxito',\n        fr: \"Clé d'accès créée avec succès\",\n      }),\n      description: t({\n        en: 'The access key has been created successfully',\n        es: 'La clave de acceso ha sido creada con éxito',\n        fr: \"La clé d'accès a été créée avec succès\",\n      }),\n      data: newAccessKey,\n    });\n\n    res.json(responseData);\n\n    sendEmail({\n      type: 'oAuthTokenCreated',\n      to: user.email,\n      username: user.name,\n      applicationName: newAccessKey.clientId,\n      scopes: newAccessKey.grants,\n      tokenDetailsUrl: `${process.env.CLIENT_URL}/oauth2/token`,\n      securityLogUrl: `${process.env.CLIENT_URL}/security-log`,\n      supportUrl: `${process.env.CLIENT_URL}/support`,\n    });\n\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type DeleteAccessKeyBody = { clientId: string };\nexport type DeleteAccessKeyResponse = ResponseData<null>;\n\n/**\n * Deletes an access key from a project.\n */\nexport const deleteAccessKey = async (\n  req: Request,\n  res: Response<AddNewAccessKeyResponse>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, project, roles } = res.locals;\n  const { clientId } = req.body;\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n    return;\n  }\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!clientId) {\n    ErrorHandler.handleGenericErrorResponse(res, 'CLIENT_ID_NOT_FOUND');\n    return;\n  }\n\n  if (!hasPermission(roles, 'project:write')()) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const deletedAccessKey = await projectAccessKeyService.deleteAccessKey(\n      clientId,\n      project,\n      user.id\n    );\n\n    if (!deletedAccessKey) {\n      ErrorHandler.handleGenericErrorResponse(res, 'ACCESS_KEY_NOT_FOUND', {\n        clientId,\n      });\n      return;\n    }\n\n    const responseData = formatResponse<null>({\n      message: t({\n        en: 'Access key deleted successfully',\n        es: 'Clave de acceso eliminada con éxito',\n        fr: \"Clé d'accès supprimée avec succès\",\n      }),\n      description: t({\n        en: 'The access key has been deleted successfully',\n        es: 'La clave de acceso ha sido eliminada con éxito',\n        fr: \"La clé d'accès a été supprimée avec succès\",\n      }),\n      data: null,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type RefreshAccessKeyBody = { clientId: string };\nexport type RefreshAccessKeyResponse = ResponseData<OAuth2Access>;\n\n/**\n * Refreshes an access key from a project.\n */\nexport const refreshAccessKey = async (\n  req: Request<RefreshAccessKeyBody>,\n  res: Response<RefreshAccessKeyResponse>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, project, roles } = res.locals;\n  const { clientId } = req.body;\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n  }\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n  }\n\n  if (!clientId) {\n    ErrorHandler.handleGenericErrorResponse(res, 'CLIENT_ID_NOT_FOUND');\n  }\n\n  if (!hasPermission(roles, 'project:write')()) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const newAccessKey = await projectAccessKeyService.refreshAccessKey(\n      clientId,\n      project!.id,\n      user!.id\n    );\n\n    const responseData = formatResponse<OAuth2Access>({\n      message: t({\n        en: 'Access key refreshed successfully',\n        es: 'Clave de acceso actualizada con éxito',\n        fr: \"Clé d'accès actualisée avec succès\",\n      }),\n      description: t({\n        en: 'The access key has been refreshed successfully',\n        es: 'La clave de acceso ha sido actualizada con éxito',\n        fr: \"La clé d'accès a été actualisée avec succès\",\n      }),\n      data: newAccessKey,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n"],"mappings":"AACA,SAAS,iBAAiB;AAC1B,YAAY,6BAA6B;AACzC,SAAwB,oBAAoB;AAC5C,SAAS,qBAAqB;AAC9B,SAA4B,sBAAsB;AAElD,SAAS,SAAS;AAQX,MAAM,kBAAkB,OAC7B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,SAAS,MAAM,IAAI,IAAI;AAErC,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc,OAAO,eAAe,EAAE,GAAG;AAC5C,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,eAAe,MAAM,wBAAwB;AAAA,MACjD,IAAI;AAAA,MACJ,QAAQ;AAAA,MACR;AAAA,IACF;AAEA,UAAM,eAAe,eAA6B;AAAA,MAChD,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AAErB,cAAU;AAAA,MACR,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,MACT,UAAU,KAAK;AAAA,MACf,iBAAiB,aAAa;AAAA,MAC9B,QAAQ,aAAa;AAAA,MACrB,iBAAiB,GAAG,QAAQ,IAAI,UAAU;AAAA,MAC1C,gBAAgB,GAAG,QAAQ,IAAI,UAAU;AAAA,MACzC,YAAY,GAAG,QAAQ,IAAI,UAAU;AAAA,IACvC,CAAC;AAED;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,kBAAkB,OAC7B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,SAAS,MAAM,IAAI,IAAI;AACrC,QAAM,EAAE,SAAS,IAAI,IAAI;AAEzB,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,UAAU;AACb,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,CAAC,cAAc,OAAO,eAAe,EAAE,GAAG;AAC5C,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,mBAAmB,MAAM,wBAAwB;AAAA,MACrD;AAAA,MACA;AAAA,MACA,KAAK;AAAA,IACP;AAEA,QAAI,CAAC,kBAAkB;AACrB,mBAAa,2BAA2B,KAAK,wBAAwB;AAAA,QACnE;AAAA,MACF,CAAC;AACD;AAAA,IACF;AAEA,UAAM,eAAe,eAAqB;AAAA,MACxC,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,mBAAmB,OAC9B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,SAAS,MAAM,IAAI,IAAI;AACrC,QAAM,EAAE,SAAS,IAAI,IAAI;AAEzB,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAAA,EACpE;AAEA,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAAA,EACjE;AAEA,MAAI,CAAC,UAAU;AACb,iBAAa,2BAA2B,KAAK,qBAAqB;AAAA,EACpE;AAEA,MAAI,CAAC,cAAc,OAAO,eAAe,EAAE,GAAG;AAC5C,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,eAAe,MAAM,wBAAwB;AAAA,MACjD;AAAA,MACA,QAAS;AAAA,MACT,KAAM;AAAA,IACR;AAEA,UAAM,eAAe,eAA6B;AAAA,MAChD,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../../src/controllers/projectAccessKey.controller.ts"],"sourcesContent":["import type { AccessKeyData, OAuth2Access } from '@/types/project.types';\nimport type { ResponseWithSession } from '@middlewares/sessionAuth.middleware';\nimport { sendEmail } from '@services/email.service';\nimport * as projectAccessKeyService from '@services/projectAccessKey.service';\nimport { type AppError, ErrorHandler } from '@utils/errors';\nimport { hasPermission } from '@utils/permissions';\nimport { type ResponseData, formatResponse } from '@utils/responseData';\nimport type { NextFunction, Request } from 'express';\nimport { t } from 'express-intlayer';\n\nexport type AddNewAccessKeyBody = AccessKeyData;\nexport type AddNewAccessKeyResponse = ResponseData<OAuth2Access>;\n\n/**\n * Adds a new access key to a project.\n */\nexport const addNewAccessKey = async (\n  req: Request<AddNewAccessKeyBody>,\n  res: ResponseWithSession<AddNewAccessKeyResponse>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, project, roles } = res.locals;\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n    return;\n  }\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (\n    !hasPermission(\n      roles,\n      'project:write'\n    )({\n      ...res.locals,\n      targetProjectIds: [project.id],\n    })\n  ) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const newAccessKey = await projectAccessKeyService.addNewAccessKey(\n      req.body,\n      project.id,\n      user\n    );\n\n    const responseData = formatResponse<OAuth2Access>({\n      message: t({\n        en: 'Access key created successfully',\n        es: 'Clave de acceso creada con éxito',\n        fr: \"Clé d'accès créée avec succès\",\n      }),\n      description: t({\n        en: 'The access key has been created successfully',\n        es: 'La clave de acceso ha sido creada con éxito',\n        fr: \"La clé d'accès a été créée avec succès\",\n      }),\n      data: newAccessKey,\n    });\n\n    res.json(responseData);\n\n    sendEmail({\n      type: 'oAuthTokenCreated',\n      to: user.email,\n      username: user.name,\n      applicationName: newAccessKey.clientId,\n      scopes: newAccessKey.grants,\n      tokenDetailsUrl: `${process.env.CLIENT_URL}/oauth2/token`,\n      securityLogUrl: `${process.env.CLIENT_URL}/security-log`,\n      supportUrl: `${process.env.CLIENT_URL}/support`,\n    });\n\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type DeleteAccessKeyBody = { clientId: string };\nexport type DeleteAccessKeyResponse = ResponseData<null>;\n\n/**\n * Deletes an access key from a project.\n */\nexport const deleteAccessKey = async (\n  req: Request,\n  res: ResponseWithSession<AddNewAccessKeyResponse>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, project, roles } = res.locals;\n  const { clientId } = req.body;\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n    return;\n  }\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!clientId) {\n    ErrorHandler.handleGenericErrorResponse(res, 'CLIENT_ID_NOT_FOUND');\n    return;\n  }\n\n  if (\n    !hasPermission(\n      roles,\n      'project:write'\n    )({\n      ...res.locals,\n      targetProjectIds: [project.id],\n    })\n  ) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const deletedAccessKey = await projectAccessKeyService.deleteAccessKey(\n      clientId,\n      project,\n      user.id\n    );\n\n    if (!deletedAccessKey) {\n      ErrorHandler.handleGenericErrorResponse(res, 'ACCESS_KEY_NOT_FOUND', {\n        clientId,\n      });\n      return;\n    }\n\n    const responseData = formatResponse<null>({\n      message: t({\n        en: 'Access key deleted successfully',\n        es: 'Clave de acceso eliminada con éxito',\n        fr: \"Clé d'accès supprimée avec succès\",\n      }),\n      description: t({\n        en: 'The access key has been deleted successfully',\n        es: 'La clave de acceso ha sido eliminada con éxito',\n        fr: \"La clé d'accès a été supprimée avec succès\",\n      }),\n      data: null,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type RefreshAccessKeyBody = { clientId: string };\nexport type RefreshAccessKeyResponse = ResponseData<OAuth2Access>;\n\n/**\n * Refreshes an access key from a project.\n */\nexport const refreshAccessKey = async (\n  req: Request<RefreshAccessKeyBody>,\n  res: ResponseWithSession<RefreshAccessKeyResponse>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, project, roles } = res.locals;\n  const { clientId } = req.body;\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n  }\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n  }\n\n  if (!clientId) {\n    ErrorHandler.handleGenericErrorResponse(res, 'CLIENT_ID_NOT_FOUND');\n  }\n\n  if (\n    !hasPermission(\n      roles,\n      'project:write'\n    )({\n      ...res.locals,\n      targetProjectIds: [project!.id],\n    })\n  ) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const newAccessKey = await projectAccessKeyService.refreshAccessKey(\n      clientId,\n      project!.id,\n      user!.id\n    );\n\n    const responseData = formatResponse<OAuth2Access>({\n      message: t({\n        en: 'Access key refreshed successfully',\n        es: 'Clave de acceso actualizada con éxito',\n        fr: \"Clé d'accès actualisée avec succès\",\n      }),\n      description: t({\n        en: 'The access key has been refreshed successfully',\n        es: 'La clave de acceso ha sido actualizada con éxito',\n        fr: \"La clé d'accès a été actualisée avec succès\",\n      }),\n      data: newAccessKey,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n"],"mappings":"AAEA,SAAS,iBAAiB;AAC1B,YAAY,6BAA6B;AACzC,SAAwB,oBAAoB;AAC5C,SAAS,qBAAqB;AAC9B,SAA4B,sBAAsB;AAElD,SAAS,SAAS;AAQX,MAAM,kBAAkB,OAC7B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,SAAS,MAAM,IAAI,IAAI;AAErC,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MACE,CAAC;AAAA,IACC;AAAA,IACA;AAAA,EACF,EAAE;AAAA,IACA,GAAG,IAAI;AAAA,IACP,kBAAkB,CAAC,QAAQ,EAAE;AAAA,EAC/B,CAAC,GACD;AACA,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,eAAe,MAAM,wBAAwB;AAAA,MACjD,IAAI;AAAA,MACJ,QAAQ;AAAA,MACR;AAAA,IACF;AAEA,UAAM,eAAe,eAA6B;AAAA,MAChD,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AAErB,cAAU;AAAA,MACR,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,MACT,UAAU,KAAK;AAAA,MACf,iBAAiB,aAAa;AAAA,MAC9B,QAAQ,aAAa;AAAA,MACrB,iBAAiB,GAAG,QAAQ,IAAI,UAAU;AAAA,MAC1C,gBAAgB,GAAG,QAAQ,IAAI,UAAU;AAAA,MACzC,YAAY,GAAG,QAAQ,IAAI,UAAU;AAAA,IACvC,CAAC;AAED;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,kBAAkB,OAC7B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,SAAS,MAAM,IAAI,IAAI;AACrC,QAAM,EAAE,SAAS,IAAI,IAAI;AAEzB,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,UAAU;AACb,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MACE,CAAC;AAAA,IACC;AAAA,IACA;AAAA,EACF,EAAE;AAAA,IACA,GAAG,IAAI;AAAA,IACP,kBAAkB,CAAC,QAAQ,EAAE;AAAA,EAC/B,CAAC,GACD;AACA,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,mBAAmB,MAAM,wBAAwB;AAAA,MACrD;AAAA,MACA;AAAA,MACA,KAAK;AAAA,IACP;AAEA,QAAI,CAAC,kBAAkB;AACrB,mBAAa,2BAA2B,KAAK,wBAAwB;AAAA,QACnE;AAAA,MACF,CAAC;AACD;AAAA,IACF;AAEA,UAAM,eAAe,eAAqB;AAAA,MACxC,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,mBAAmB,OAC9B,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,SAAS,MAAM,IAAI,IAAI;AACrC,QAAM,EAAE,SAAS,IAAI,IAAI;AAEzB,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAAA,EACpE;AAEA,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAAA,EACjE;AAEA,MAAI,CAAC,UAAU;AACb,iBAAa,2BAA2B,KAAK,qBAAqB;AAAA,EACpE;AAEA,MACE,CAAC;AAAA,IACC;AAAA,IACA;AAAA,EACF,EAAE;AAAA,IACA,GAAG,IAAI;AAAA,IACP,kBAAkB,CAAC,QAAS,EAAE;AAAA,EAChC,CAAC,GACD;AACA,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,eAAe,MAAM,wBAAwB;AAAA,MACjD;AAAA,MACA,QAAS;AAAA,MACT,KAAM;AAAA,IACR;AAEA,UAAM,eAAe,eAA6B;AAAA,MAChD,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;","names":[]}

package/dist/esm/controllers/search.controller.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/controllers/search.controller.ts"],"sourcesContent":["import * as askDocQuestionUtil from '@utils/AI/askDocQuestion/askDocQuestion';\n\nimport { formatResponse, type ResponseData } from '@utils/responseData';\nimport type { Request, Response } from 'express';\n\nexport type SearchDocUtilParams = {\n  input: string;\n};\nexport type SearchDocUtilResult = ResponseData<string[]>;\n\nexport const searchDocUtil = async (\n  req: Request<unknown, unknown, unknown, SearchDocUtilParams>,\n  res: Response<SearchDocUtilResult>\n) => {\n  const { input } = req.query;\n\n  const response = await askDocQuestionUtil.searchChunkReference(\n    input,\n    30,\n    0.2\n  );\n  const docFileList = response.map((doc) => doc.fileKey);\n\n  const uniqueDocFileList = Array.from(new Set(docFileList));\n\n  const responseData = formatResponse<string[]>({\n    data: uniqueDocFileList,\n  });\n\n  res.json(responseData);\n};\n"],"mappings":"AAAA,YAAY,wBAAwB;AAEpC,SAAS,sBAAyC;AAQ3C,MAAM,gBAAgB,OAC3B,KACA,QACG;AACH,QAAM,EAAE,MAAM,IAAI,IAAI;AAEtB,QAAM,WAAW,MAAM,mBAAmB;AAAA,IACxC;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,QAAM,cAAc,SAAS,IAAI,CAAC,QAAQ,IAAI,OAAO;AAErD,QAAM,oBAAoB,MAAM,KAAK,IAAI,IAAI,WAAW,CAAC;AAEzD,QAAM,eAAe,eAAyB;AAAA,IAC5C,MAAM;AAAA,EACR,CAAC;AAED,MAAI,KAAK,YAAY;AACvB;","names":[]}
+{"version":3,"sources":["../../../src/controllers/search.controller.ts"],"sourcesContent":["import * as askDocQuestionUtil from '@utils/AI/askDocQuestion/askDocQuestion';\nimport { formatResponse, type ResponseData } from '@utils/responseData';\nimport type { Request, Response } from 'express';\n\nexport type SearchDocUtilParams = {\n  input: string;\n};\nexport type SearchDocUtilResult = ResponseData<string[]>;\n\nexport const searchDocUtil = async (\n  req: Request<unknown, unknown, unknown, SearchDocUtilParams>,\n  res: Response<SearchDocUtilResult>\n) => {\n  const { input } = req.query;\n\n  const response = await askDocQuestionUtil.searchChunkReference(\n    input,\n    30,\n    0.2\n  );\n  const docFileList = response.map((doc) => doc.fileKey);\n\n  const uniqueDocFileList = Array.from(new Set(docFileList));\n\n  const responseData = formatResponse<string[]>({\n    data: uniqueDocFileList,\n  });\n\n  res.json(responseData);\n};\n"],"mappings":"AAAA,YAAY,wBAAwB;AACpC,SAAS,sBAAyC;AAQ3C,MAAM,gBAAgB,OAC3B,KACA,QACG;AACH,QAAM,EAAE,MAAM,IAAI,IAAI;AAEtB,QAAM,WAAW,MAAM,mBAAmB;AAAA,IACxC;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,QAAM,cAAc,SAAS,IAAI,CAAC,QAAQ,IAAI,OAAO;AAErD,QAAM,oBAAoB,MAAM,KAAK,IAAI,IAAI,WAAW,CAAC;AAEzD,QAAM,eAAe,eAAyB;AAAA,IAC5C,MAAM;AAAA,EACR,CAAC;AAED,MAAI,KAAK,YAAY;AACvB;","names":[]}

package/dist/esm/controllers/stripe.controller.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/controllers/stripe.controller.ts"],"sourcesContent":["import type { Organization } from '@/types/organization.types';\nimport * as emailService from '@services/email.service';\nimport * as subscriptionService from '@services/subscription.service';\nimport { type AppError, ErrorHandler } from '@utils/errors';\nimport { retrievePlanInformation } from '@utils/plan';\nimport { type ResponseData, formatResponse } from '@utils/responseData';\nimport type { Request, Response } from 'express';\nimport { t } from 'express-intlayer';\nimport type { Locales } from 'intlayer';\nimport { Stripe } from 'stripe';\n\nexport type GetPricingBody = {\n  priceIds: string[];\n  promoCode?: string;\n};\n\nexport type GetPricingResult = ResponseData<subscriptionService.PricingResult>;\n\n/**\n * Simulate pricing for a given set of prices and a promotion code.\n *\n * @param req - The request object containing the price IDs and promotion code.\n * @param res - The response object to send the simulated pricing result.\n */\nexport const getPricing = async (\n  req: Request<undefined, undefined, GetPricingBody>,\n  res: Response<GetPricingResult>\n) => {\n  const { priceIds, promoCode } = req.body;\n\n  const pricingResult = await subscriptionService.getPricing(\n    priceIds,\n    promoCode\n  );\n\n  const formattedPricingResult =\n    formatResponse<subscriptionService.PricingResult>({\n      data: pricingResult,\n    });\n\n  res.status(200).json(formattedPricingResult);\n};\n\nexport type GetCheckoutSessionBody = {\n  priceId: string;\n  promoCode?: string;\n};\n\nexport type GetCheckoutSessionResult = ResponseData<\n  Stripe.Response<Stripe.Subscription>\n>;\n\n/**\n * Handles subscription creation or update with Stripe and returns a ClientSecret.\n * @param req - Express request object.\n * @param res - Express response object.\n */\nexport const getSubscription = async (\n  req: Request<undefined, undefined, GetCheckoutSessionBody>,\n  res: Response<GetCheckoutSessionResult>\n): Promise<void> => {\n  try {\n    const stripe = new Stripe(process.env.STRIPE_SECRET_KEY!);\n\n    // Extract organization and user from response locals (set by authentication middleware)\n    const { organization, user } = res.locals;\n    // Get the price ID (Stripe Price ID) from the request body\n    const { priceId, promoCode } = req.body;\n\n    // Validate that the organization exists\n    if (!organization) {\n      ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_FOUND');\n      return;\n    }\n\n    // Validate that the user exists\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_FOUND');\n      return;\n    }\n\n    const { period, type } = retrievePlanInformation(priceId);\n\n    if (\n      organization.plan?.subscriptionId &&\n      organization.plan?.type === type &&\n      organization.plan?.period === period &&\n      organization.plan?.status === 'active'\n    ) {\n      ErrorHandler.handleGenericErrorResponse(res, 'ALREADY_SUBSCRIBED', {\n        organizationId: organization.id,\n      });\n      return;\n    }\n\n    // Attempt to retrieve the Stripe customer ID from the organization's plan\n    let customerId = organization.plan?.customerId;\n\n    if (!customerId) {\n      // If no customer ID exists, create a new Stripe customer for the organization\n      const customer = await stripe.customers.create({\n        metadata: {\n          organizationId: String(organization.id),\n          userId: String(user.id),\n          // Include the locale for potential localization\n          locale: (res.locals as unknown as { locale: Locales }).locale,\n        },\n      });\n      customerId = customer.id;\n    }\n\n    const promoCodeId = promoCode\n      ? await subscriptionService.getCouponId(promoCode)\n      : null;\n\n    const discounts: Stripe.SubscriptionCreateParams.Discount[] = promoCodeId\n      ? [{ coupon: promoCodeId }]\n      : [];\n\n    // If no subscription exists, create a new one\n    const subscription = await stripe.subscriptions.create({\n      customer: customerId, // Associate the subscription with the customer\n      items: [{ price: priceId }], // Set the price ID for the subscription\n      expand: ['latest_invoice.payment_intent'], // Expand to get payment intent details\n      payment_settings: {\n        payment_method_types: ['card'], // Specify payment method types\n      },\n      payment_behavior: 'default_incomplete', // Create the subscription in an incomplete state until payment is confirmed\n      discounts: discounts,\n    });\n\n    // Handle subscription creation failure\n    if (!subscription) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'SUBSCRIPTION_CREATION_FAILED',\n        {\n          user,\n          organization,\n          priceId,\n        }\n      );\n      return;\n    }\n\n    // Prepare the response data with subscription details\n    const responseData = formatResponse<Stripe.Response<Stripe.Subscription>>({\n      data: subscription,\n    });\n\n    // Send the response back to the client\n    res.json(responseData);\n\n    return;\n  } catch (error) {\n    // Handle any errors that occur during the process\n\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\ntype CancelSubscriptionData = Organization['plan'];\n\ntype CancelSubscriptionResult = ResponseData<CancelSubscriptionData>;\n\n/**\n * Cancels a subscription for an organization.\n * @param _req - Express request object.\n * @param res - Express response object.\n */\nexport const cancelSubscription = async (\n  _req: Request,\n  res: Response<CancelSubscriptionResult>\n): Promise<void> => {\n  const stripe = new Stripe(process.env.STRIPE_SECRET_KEY!);\n\n  try {\n    // Extract the organization and user from the response locals\n    // These are typically set by authentication middleware earlier in the request pipeline\n    const { organization, user } = res.locals;\n\n    // Validate that the organization exists\n    if (!organization) {\n      ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_FOUND');\n      return;\n    }\n\n    // Validate that the user exists\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_FOUND');\n      return;\n    }\n\n    // Check if the organization has an active subscription to cancel\n    if (!organization.plan?.subscriptionId) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'ORGANIZATION_PLAN_NOT_FOUND'\n      );\n      return;\n    }\n\n    // Cancel the subscription on Stripe immediately using the subscription ID\n    await stripe.subscriptions.cancel(organization.plan.subscriptionId);\n\n    // Update the organization's plan in the database to reflect the cancellation\n    const plan = await subscriptionService.cancelSubscription(\n      organization.plan.subscriptionId,\n      String(organization.id)\n    );\n\n    // If the plan could not be updated in the database, handle the error\n    if (!plan) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'ORGANIZATION_PLAN_NOT_FOUND'\n      );\n      return;\n    }\n\n    // Prepare a formatted response with a success message and the updated plan data\n    const formattedPlan = formatResponse<CancelSubscriptionData>({\n      message: t({\n        en: 'Subscription cancelled successfully',\n        fr: 'Souscription annulée avec succès',\n        es: 'Suscripción cancelada con éxito',\n      }),\n      description: t({\n        en: 'Your subscription has been cancelled successfully',\n        fr: 'Votre souscription a été annulée avec succès',\n        es: 'Su suscripción ha sido cancelada con éxito',\n      }),\n      data: plan!,\n    });\n\n    // Send the response back to the client\n    res.json(formattedPlan);\n\n    await emailService.sendEmail({\n      type: 'subscriptionPaymentCancellation',\n      to: user.email,\n      email: user.email,\n      cancellationDate: new Date().toLocaleDateString(),\n      reactivateLink: `${process.env.CLIENT_URL}/pricing`,\n      username: user.name,\n      organizationName: organization.name,\n      planName: plan.type,\n    });\n  } catch (error) {\n    // Handle any errors that occur during the cancellation process\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n  }\n};\n"],"mappings":"AACA,YAAY,kBAAkB;AAC9B,YAAY,yBAAyB;AACrC,SAAwB,oBAAoB;AAC5C,SAAS,+BAA+B;AACxC,SAA4B,sBAAsB;AAElD,SAAS,SAAS;AAElB,SAAS,cAAc;AAehB,MAAM,aAAa,OACxB,KACA,QACG;AACH,QAAM,EAAE,UAAU,UAAU,IAAI,IAAI;AAEpC,QAAM,gBAAgB,MAAM,oBAAoB;AAAA,IAC9C;AAAA,IACA;AAAA,EACF;AAEA,QAAM,yBACJ,eAAkD;AAAA,IAChD,MAAM;AAAA,EACR,CAAC;AAEH,MAAI,OAAO,GAAG,EAAE,KAAK,sBAAsB;AAC7C;AAgBO,MAAM,kBAAkB,OAC7B,KACA,QACkB;AAClB,MAAI;AACF,UAAM,SAAS,IAAI,OAAO,QAAQ,IAAI,iBAAkB;AAGxD,UAAM,EAAE,cAAc,KAAK,IAAI,IAAI;AAEnC,UAAM,EAAE,SAAS,UAAU,IAAI,IAAI;AAGnC,QAAI,CAAC,cAAc;AACjB,mBAAa,2BAA2B,KAAK,wBAAwB;AACrE;AAAA,IACF;AAGA,QAAI,CAAC,MAAM;AACT,mBAAa,2BAA2B,KAAK,gBAAgB;AAC7D;AAAA,IACF;AAEA,UAAM,EAAE,QAAQ,KAAK,IAAI,wBAAwB,OAAO;AAExD,QACE,aAAa,MAAM,kBACnB,aAAa,MAAM,SAAS,QAC5B,aAAa,MAAM,WAAW,UAC9B,aAAa,MAAM,WAAW,UAC9B;AACA,mBAAa,2BAA2B,KAAK,sBAAsB;AAAA,QACjE,gBAAgB,aAAa;AAAA,MAC/B,CAAC;AACD;AAAA,IACF;AAGA,QAAI,aAAa,aAAa,MAAM;AAEpC,QAAI,CAAC,YAAY;AAEf,YAAM,WAAW,MAAM,OAAO,UAAU,OAAO;AAAA,QAC7C,UAAU;AAAA,UACR,gBAAgB,OAAO,aAAa,EAAE;AAAA,UACtC,QAAQ,OAAO,KAAK,EAAE;AAAA;AAAA,UAEtB,QAAS,IAAI,OAA0C;AAAA,QACzD;AAAA,MACF,CAAC;AACD,mBAAa,SAAS;AAAA,IACxB;AAEA,UAAM,cAAc,YAChB,MAAM,oBAAoB,YAAY,SAAS,IAC/C;AAEJ,UAAM,YAAwD,cAC1D,CAAC,EAAE,QAAQ,YAAY,CAAC,IACxB,CAAC;AAGL,UAAM,eAAe,MAAM,OAAO,cAAc,OAAO;AAAA,MACrD,UAAU;AAAA;AAAA,MACV,OAAO,CAAC,EAAE,OAAO,QAAQ,CAAC;AAAA;AAAA,MAC1B,QAAQ,CAAC,+BAA+B;AAAA;AAAA,MACxC,kBAAkB;AAAA,QAChB,sBAAsB,CAAC,MAAM;AAAA;AAAA,MAC/B;AAAA,MACA,kBAAkB;AAAA;AAAA,MAClB;AAAA,IACF,CAAC;AAGD,QAAI,CAAC,cAAc;AACjB,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA;AAAA,IACF;AAGA,UAAM,eAAe,eAAqD;AAAA,MACxE,MAAM;AAAA,IACR,CAAC;AAGD,QAAI,KAAK,YAAY;AAErB;AAAA,EACF,SAAS,OAAO;AAGd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAWO,MAAM,qBAAqB,OAChC,MACA,QACkB;AAClB,QAAM,SAAS,IAAI,OAAO,QAAQ,IAAI,iBAAkB;AAExD,MAAI;AAGF,UAAM,EAAE,cAAc,KAAK,IAAI,IAAI;AAGnC,QAAI,CAAC,cAAc;AACjB,mBAAa,2BAA2B,KAAK,wBAAwB;AACrE;AAAA,IACF;AAGA,QAAI,CAAC,MAAM;AACT,mBAAa,2BAA2B,KAAK,gBAAgB;AAC7D;AAAA,IACF;AAGA,QAAI,CAAC,aAAa,MAAM,gBAAgB;AACtC,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,MACF;AACA;AAAA,IACF;AAGA,UAAM,OAAO,cAAc,OAAO,aAAa,KAAK,cAAc;AAGlE,UAAM,OAAO,MAAM,oBAAoB;AAAA,MACrC,aAAa,KAAK;AAAA,MAClB,OAAO,aAAa,EAAE;AAAA,IACxB;AAGA,QAAI,CAAC,MAAM;AACT,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,MACF;AACA;AAAA,IACF;AAGA,UAAM,gBAAgB,eAAuC;AAAA,MAC3D,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAGD,QAAI,KAAK,aAAa;AAEtB,UAAM,aAAa,UAAU;AAAA,MAC3B,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,MACT,OAAO,KAAK;AAAA,MACZ,mBAAkB,oBAAI,KAAK,GAAE,mBAAmB;AAAA,MAChD,gBAAgB,GAAG,QAAQ,IAAI,UAAU;AAAA,MACzC,UAAU,KAAK;AAAA,MACf,kBAAkB,aAAa;AAAA,MAC/B,UAAU,KAAK;AAAA,IACjB,CAAC;AAAA,EACH,SAAS,OAAO;AAEd,iBAAa,uBAAuB,KAAK,KAAiB;AAAA,EAC5D;AACF;","names":[]}
+{"version":3,"sources":["../../../src/controllers/stripe.controller.ts"],"sourcesContent":["import type { Organization } from '@/types/organization.types';\nimport type { ResponseWithSession } from '@middlewares/sessionAuth.middleware';\nimport * as emailService from '@services/email.service';\nimport * as subscriptionService from '@services/subscription.service';\nimport { type AppError, ErrorHandler } from '@utils/errors';\nimport { retrievePlanInformation } from '@utils/plan';\nimport { type ResponseData, formatResponse } from '@utils/responseData';\nimport type { Request } from 'express';\nimport { t } from 'express-intlayer';\nimport type { Locales } from 'intlayer';\nimport { Stripe } from 'stripe';\n\nexport type GetPricingBody = {\n  priceIds: string[];\n  promoCode?: string;\n};\n\nexport type GetPricingResult = ResponseData<subscriptionService.PricingResult>;\n\n/**\n * Simulate pricing for a given set of prices and a promotion code.\n *\n * @param req - The request object containing the price IDs and promotion code.\n * @param res - The response object to send the simulated pricing result.\n */\nexport const getPricing = async (\n  req: Request<undefined, undefined, GetPricingBody>,\n  res: ResponseWithSession<GetPricingResult>\n) => {\n  const { priceIds, promoCode } = req.body;\n\n  const pricingResult = await subscriptionService.getPricing(\n    priceIds,\n    promoCode\n  );\n\n  const formattedPricingResult =\n    formatResponse<subscriptionService.PricingResult>({\n      data: pricingResult,\n    });\n\n  res.status(200).json(formattedPricingResult);\n};\n\nexport type GetCheckoutSessionBody = {\n  priceId: string;\n  promoCode?: string;\n};\n\nexport type GetCheckoutSessionResult = ResponseData<\n  Stripe.Response<Stripe.Subscription>\n>;\n\n/**\n * Handles subscription creation or update with Stripe and returns a ClientSecret.\n * @param req - Express request object.\n * @param res - Express response object.\n */\nexport const getSubscription = async (\n  req: Request<undefined, undefined, GetCheckoutSessionBody>,\n  res: ResponseWithSession<GetCheckoutSessionResult>\n): Promise<void> => {\n  try {\n    const stripe = new Stripe(process.env.STRIPE_SECRET_KEY!);\n\n    // Extract organization and user from response locals (set by authentication middleware)\n    const { organization, user } = res.locals;\n    // Get the price ID (Stripe Price ID) from the request body\n    const { priceId, promoCode } = req.body;\n\n    // Validate that the organization exists\n    if (!organization) {\n      ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_FOUND');\n      return;\n    }\n\n    // Validate that the user exists\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_FOUND');\n      return;\n    }\n\n    const { period, type } = retrievePlanInformation(priceId);\n\n    if (\n      organization.plan?.subscriptionId &&\n      organization.plan?.type === type &&\n      organization.plan?.period === period &&\n      organization.plan?.status === 'active'\n    ) {\n      ErrorHandler.handleGenericErrorResponse(res, 'ALREADY_SUBSCRIBED', {\n        organizationId: organization.id,\n      });\n      return;\n    }\n\n    // Attempt to retrieve the Stripe customer ID from the organization's plan\n    let customerId = organization.plan?.customerId;\n\n    if (!customerId) {\n      // If no customer ID exists, create a new Stripe customer for the organization\n      const customer = await stripe.customers.create({\n        metadata: {\n          organizationId: String(organization.id),\n          userId: String(user.id),\n          // Include the locale for potential localization\n          locale: (res.locals as unknown as { locale: Locales }).locale,\n        },\n      });\n      customerId = customer.id;\n    }\n\n    const promoCodeId = promoCode\n      ? await subscriptionService.getCouponId(promoCode)\n      : null;\n\n    const discounts: Stripe.SubscriptionCreateParams.Discount[] = promoCodeId\n      ? [{ coupon: promoCodeId }]\n      : [];\n\n    // If no subscription exists, create a new one\n    const subscription = await stripe.subscriptions.create({\n      customer: customerId, // Associate the subscription with the customer\n      items: [{ price: priceId }], // Set the price ID for the subscription\n      expand: ['latest_invoice.payment_intent'], // Expand to get payment intent details\n      payment_settings: {\n        payment_method_types: ['card'], // Specify payment method types\n      },\n      payment_behavior: 'default_incomplete', // Create the subscription in an incomplete state until payment is confirmed\n      discounts: discounts,\n    });\n\n    // Handle subscription creation failure\n    if (!subscription) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'SUBSCRIPTION_CREATION_FAILED',\n        {\n          user,\n          organization,\n          priceId,\n        }\n      );\n      return;\n    }\n\n    // Prepare the response data with subscription details\n    const responseData = formatResponse<Stripe.Response<Stripe.Subscription>>({\n      data: subscription,\n    });\n\n    // Send the response back to the client\n    res.json(responseData);\n\n    return;\n  } catch (error) {\n    // Handle any errors that occur during the process\n\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\ntype CancelSubscriptionData = Organization['plan'];\n\ntype CancelSubscriptionResult = ResponseData<CancelSubscriptionData>;\n\n/**\n * Cancels a subscription for an organization.\n * @param _req - Express request object.\n * @param res - Express response object.\n */\nexport const cancelSubscription = async (\n  _req: Request,\n  res: ResponseWithSession<CancelSubscriptionResult>\n): Promise<void> => {\n  const stripe = new Stripe(process.env.STRIPE_SECRET_KEY!);\n\n  try {\n    // Extract the organization and user from the response locals\n    // These are typically set by authentication middleware earlier in the request pipeline\n    const { organization, user } = res.locals;\n\n    // Validate that the organization exists\n    if (!organization) {\n      ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_FOUND');\n      return;\n    }\n\n    // Validate that the user exists\n    if (!user) {\n      ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_FOUND');\n      return;\n    }\n\n    // Check if the organization has an active subscription to cancel\n    if (!organization.plan?.subscriptionId) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'ORGANIZATION_PLAN_NOT_FOUND'\n      );\n      return;\n    }\n\n    // Cancel the subscription on Stripe immediately using the subscription ID\n    await stripe.subscriptions.cancel(organization.plan.subscriptionId);\n\n    // Update the organization's plan in the database to reflect the cancellation\n    const plan = await subscriptionService.cancelSubscription(\n      organization.plan.subscriptionId,\n      String(organization.id)\n    );\n\n    // If the plan could not be updated in the database, handle the error\n    if (!plan) {\n      ErrorHandler.handleGenericErrorResponse(\n        res,\n        'ORGANIZATION_PLAN_NOT_FOUND'\n      );\n      return;\n    }\n\n    // Prepare a formatted response with a success message and the updated plan data\n    const formattedPlan = formatResponse<CancelSubscriptionData>({\n      message: t({\n        en: 'Subscription cancelled successfully',\n        fr: 'Souscription annulée avec succès',\n        es: 'Suscripción cancelada con éxito',\n      }),\n      description: t({\n        en: 'Your subscription has been cancelled successfully',\n        fr: 'Votre souscription a été annulée avec succès',\n        es: 'Su suscripción ha sido cancelada con éxito',\n      }),\n      data: plan!,\n    });\n\n    // Send the response back to the client\n    res.json(formattedPlan);\n\n    await emailService.sendEmail({\n      type: 'subscriptionPaymentCancellation',\n      to: user.email,\n      email: user.email,\n      cancellationDate: new Date().toLocaleDateString(),\n      reactivateLink: `${process.env.CLIENT_URL}/pricing`,\n      username: user.name,\n      organizationName: organization.name,\n      planName: plan.type,\n    });\n  } catch (error) {\n    // Handle any errors that occur during the cancellation process\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n  }\n};\n"],"mappings":"AAEA,YAAY,kBAAkB;AAC9B,YAAY,yBAAyB;AACrC,SAAwB,oBAAoB;AAC5C,SAAS,+BAA+B;AACxC,SAA4B,sBAAsB;AAElD,SAAS,SAAS;AAElB,SAAS,cAAc;AAehB,MAAM,aAAa,OACxB,KACA,QACG;AACH,QAAM,EAAE,UAAU,UAAU,IAAI,IAAI;AAEpC,QAAM,gBAAgB,MAAM,oBAAoB;AAAA,IAC9C;AAAA,IACA;AAAA,EACF;AAEA,QAAM,yBACJ,eAAkD;AAAA,IAChD,MAAM;AAAA,EACR,CAAC;AAEH,MAAI,OAAO,GAAG,EAAE,KAAK,sBAAsB;AAC7C;AAgBO,MAAM,kBAAkB,OAC7B,KACA,QACkB;AAClB,MAAI;AACF,UAAM,SAAS,IAAI,OAAO,QAAQ,IAAI,iBAAkB;AAGxD,UAAM,EAAE,cAAc,KAAK,IAAI,IAAI;AAEnC,UAAM,EAAE,SAAS,UAAU,IAAI,IAAI;AAGnC,QAAI,CAAC,cAAc;AACjB,mBAAa,2BAA2B,KAAK,wBAAwB;AACrE;AAAA,IACF;AAGA,QAAI,CAAC,MAAM;AACT,mBAAa,2BAA2B,KAAK,gBAAgB;AAC7D;AAAA,IACF;AAEA,UAAM,EAAE,QAAQ,KAAK,IAAI,wBAAwB,OAAO;AAExD,QACE,aAAa,MAAM,kBACnB,aAAa,MAAM,SAAS,QAC5B,aAAa,MAAM,WAAW,UAC9B,aAAa,MAAM,WAAW,UAC9B;AACA,mBAAa,2BAA2B,KAAK,sBAAsB;AAAA,QACjE,gBAAgB,aAAa;AAAA,MAC/B,CAAC;AACD;AAAA,IACF;AAGA,QAAI,aAAa,aAAa,MAAM;AAEpC,QAAI,CAAC,YAAY;AAEf,YAAM,WAAW,MAAM,OAAO,UAAU,OAAO;AAAA,QAC7C,UAAU;AAAA,UACR,gBAAgB,OAAO,aAAa,EAAE;AAAA,UACtC,QAAQ,OAAO,KAAK,EAAE;AAAA;AAAA,UAEtB,QAAS,IAAI,OAA0C;AAAA,QACzD;AAAA,MACF,CAAC;AACD,mBAAa,SAAS;AAAA,IACxB;AAEA,UAAM,cAAc,YAChB,MAAM,oBAAoB,YAAY,SAAS,IAC/C;AAEJ,UAAM,YAAwD,cAC1D,CAAC,EAAE,QAAQ,YAAY,CAAC,IACxB,CAAC;AAGL,UAAM,eAAe,MAAM,OAAO,cAAc,OAAO;AAAA,MACrD,UAAU;AAAA;AAAA,MACV,OAAO,CAAC,EAAE,OAAO,QAAQ,CAAC;AAAA;AAAA,MAC1B,QAAQ,CAAC,+BAA+B;AAAA;AAAA,MACxC,kBAAkB;AAAA,QAChB,sBAAsB,CAAC,MAAM;AAAA;AAAA,MAC/B;AAAA,MACA,kBAAkB;AAAA;AAAA,MAClB;AAAA,IACF,CAAC;AAGD,QAAI,CAAC,cAAc;AACjB,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA;AAAA,IACF;AAGA,UAAM,eAAe,eAAqD;AAAA,MACxE,MAAM;AAAA,IACR,CAAC;AAGD,QAAI,KAAK,YAAY;AAErB;AAAA,EACF,SAAS,OAAO;AAGd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAWO,MAAM,qBAAqB,OAChC,MACA,QACkB;AAClB,QAAM,SAAS,IAAI,OAAO,QAAQ,IAAI,iBAAkB;AAExD,MAAI;AAGF,UAAM,EAAE,cAAc,KAAK,IAAI,IAAI;AAGnC,QAAI,CAAC,cAAc;AACjB,mBAAa,2BAA2B,KAAK,wBAAwB;AACrE;AAAA,IACF;AAGA,QAAI,CAAC,MAAM;AACT,mBAAa,2BAA2B,KAAK,gBAAgB;AAC7D;AAAA,IACF;AAGA,QAAI,CAAC,aAAa,MAAM,gBAAgB;AACtC,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,MACF;AACA;AAAA,IACF;AAGA,UAAM,OAAO,cAAc,OAAO,aAAa,KAAK,cAAc;AAGlE,UAAM,OAAO,MAAM,oBAAoB;AAAA,MACrC,aAAa,KAAK;AAAA,MAClB,OAAO,aAAa,EAAE;AAAA,IACxB;AAGA,QAAI,CAAC,MAAM;AACT,mBAAa;AAAA,QACX;AAAA,QACA;AAAA,MACF;AACA;AAAA,IACF;AAGA,UAAM,gBAAgB,eAAuC;AAAA,MAC3D,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAGD,QAAI,KAAK,aAAa;AAEtB,UAAM,aAAa,UAAU;AAAA,MAC3B,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,MACT,OAAO,KAAK;AAAA,MACZ,mBAAkB,oBAAI,KAAK,GAAE,mBAAmB;AAAA,MAChD,gBAAgB,GAAG,QAAQ,IAAI,UAAU;AAAA,MACzC,UAAU,KAAK;AAAA,MACf,kBAAkB,aAAa;AAAA,MAC/B,UAAU,KAAK;AAAA,IACjB,CAAC;AAAA,EACH,SAAS,OAAO;AAEd,iBAAa,uBAAuB,KAAK,KAAiB;AAAA,EAC5D;AACF;","names":[]}

package/dist/esm/controllers/tag.controller.mjs

@@ -22,16 +22,24 @@ const getTags = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "ORGANIZATION_NOT_DEFINED");
     return;
   }
-  if (!hasPermission(roles, "tag:read")()) {
-    ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
-    return;
-  }
   const restrictedFilter = {
     ...filters,
     organizationId: String(organization.id)
   };
   try {
     const tags = await tagService.findTags(restrictedFilter, skip, pageSize);
+    if (!hasPermission(
+      roles,
+      "tag:read"
+    )({
+      ...res.locals,
+      targetTagProjectIds: [
+        ...new Set(tags.map((tag) => String(tag.projectId)))
+      ]
+    })) {
+      ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
+      return;
+    }
     const totalItems = await tagService.countTags(filters);
     const formattedTags = mapTagsToAPI(tags);
     const responseData = formatPaginatedResponse({
@@ -49,7 +57,7 @@ const getTags = async (req, res, _next) => {
   }
 };
 const addTag = async (req, res, _next) => {
-  const { organization, user, roles } = res.locals;
+  const { organization, project, user, roles } = res.locals;
   const tagData = req.body;
   if (!user) {
     ErrorHandler.handleGenericErrorResponse(res, "USER_NOT_DEFINED");
@@ -59,18 +67,29 @@ const addTag = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "ORGANIZATION_NOT_DEFINED");
     return;
   }
+  if (!project) {
+    ErrorHandler.handleGenericErrorResponse(res, "PROJECT_NOT_DEFINED");
+    return;
+  }
   if (!tagData) {
     ErrorHandler.handleGenericErrorResponse(res, "PROJECT_DATA_NOT_FOUND");
   }
-  if (!hasPermission(roles, "tag:admin")(res.locals)) {
-    ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
-    return;
-  }
   const tag = {
     creatorId: user.id,
     organizationId: organization.id,
+    projectId: project.id,
     ...tagData
   };
+  if (!hasPermission(
+    roles,
+    "tag:admin"
+  )({
+    ...res.locals,
+    targetTagProjectIds: [String(tag.projectId)]
+  })) {
+    ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
+    return;
+  }
   try {
     const newTag = await tagService.createTag(tag);
     const formattedTag = mapTagToAPI(newTag);
@@ -105,10 +124,6 @@ const updateTag = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "ORGANIZATION_NOT_DEFINED");
     return;
   }
-  if (!hasPermission(roles, "tag:write")()) {
-    ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
-    return;
-  }
   try {
     const tag = {
       _id: tagId,
@@ -118,6 +133,16 @@ const updateTag = async (req, res, _next) => {
       instructions: req.body.instructions
     };
     const tagToDelete = await tagService.getTagById(tagId);
+    if (!hasPermission(
+      roles,
+      "tag:write"
+    )({
+      ...res.locals,
+      targetTagProjectIds: [String(tagToDelete.projectId)]
+    })) {
+      ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
+      return;
+    }
     if (String(tagToDelete.organizationId) !== String(organization.id)) {
       ErrorHandler.handleGenericErrorResponse(res, "TAG_NOT_IN_ORGANIZATION");
       return;
@@ -159,12 +184,18 @@ const deleteTag = async (req, res, _next) => {
     ErrorHandler.handleGenericErrorResponse(res, "TAG_ID_NOT_FOUND");
     return;
   }
-  if (!hasPermission(roles, "tag:admin")(res.locals)) {
-    ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
-    return;
-  }
   try {
     const tagToDelete = await tagService.getTagById(tagId);
+    if (!hasPermission(
+      roles,
+      "tag:admin"
+    )({
+      ...res.locals,
+      targetTagProjectIds: [String(tagToDelete.projectId)]
+    })) {
+      ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
+      return;
+    }
     if (String(tagToDelete.organizationId) !== String(organization.id)) {
       ErrorHandler.handleGenericErrorResponse(res, "TAG_NOT_IN_ORGANIZATION");
       return;

package/dist/esm/controllers/tag.controller.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/controllers/tag.controller.ts"],"sourcesContent":["import type {\n  Tag,\n  TagAPI,\n  TagCreationData,\n  TagData,\n  TagSchema,\n} from '@/types/tag.types';\nimport { logger } from '@logger';\nimport * as tagService from '@services/tag.service';\nimport { type AppError, ErrorHandler } from '@utils/errors';\nimport type { FiltersAndPagination } from '@utils/filtersAndPagination/getFiltersAndPaginationFromBody';\nimport {\n  getTagFiltersAndPagination,\n  type TagFilters,\n  type TagFiltersParams,\n} from '@utils/filtersAndPagination/getTagFiltersAndPagination';\nimport { mapTagsToAPI, mapTagToAPI } from '@utils/mapper/tag';\nimport { hasPermission } from '@utils/permissions';\nimport {\n  formatPaginatedResponse,\n  formatResponse,\n  type PaginatedResponse,\n  type ResponseData,\n} from '@utils/responseData';\nimport type { NextFunction, Request, Response } from 'express';\nimport { t } from 'express-intlayer';\n\nexport type GetTagsParams = FiltersAndPagination<TagFiltersParams>;\nexport type GetTagsResult = PaginatedResponse<TagAPI>;\n\n/**\n * Retrieves a list of tags based on filters and pagination.\n */\nexport const getTags = async (\n  req: Request<GetTagsParams>,\n  res: Response<GetTagsResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, organization, roles } = res.locals;\n  const { filters, pageSize, skip, page, getNumberOfPages } =\n    getTagFiltersAndPagination(req);\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!hasPermission(roles, 'tag:read')()) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  const restrictedFilter: TagFilters = {\n    ...filters,\n    organizationId: String(organization.id),\n  };\n\n  try {\n    const tags = await tagService.findTags(restrictedFilter, skip, pageSize);\n    const totalItems = await tagService.countTags(filters);\n\n    const formattedTags = mapTagsToAPI(tags);\n\n    const responseData = formatPaginatedResponse<TagAPI>({\n      data: formattedTags,\n      page,\n      pageSize,\n      totalPages: getNumberOfPages(totalItems),\n      totalItems,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type AddTagBody = TagCreationData;\nexport type AddTagResult = ResponseData<TagAPI>;\n\n/**\n * Adds a new tag to the database.\n */\nexport const addTag = async (\n  req: Request<any, any, AddTagBody>,\n  res: Response<AddTagResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { organization, user, roles } = res.locals;\n  const tagData = req.body;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!tagData) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_DATA_NOT_FOUND');\n  }\n\n  if (!hasPermission(roles, 'tag:admin')(res.locals)) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  const tag: TagData = {\n    creatorId: user.id,\n    organizationId: organization.id,\n    ...tagData,\n  };\n\n  try {\n    const newTag = await tagService.createTag(tag);\n\n    const formattedTag = mapTagToAPI(newTag);\n\n    const responseData = formatResponse<TagAPI>({\n      message: t({\n        en: 'Tag created successfully',\n        fr: 'Tag créé avec succès',\n        es: 'Tag creado con éxito',\n      }),\n      description: t({\n        en: 'Your tag has been created successfully',\n        fr: 'Votre tag a été créé avec succès',\n        es: 'Su tag ha sido creado con éxito',\n      }),\n      data: formattedTag,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type UpdateTagParams = { tagId: string | Tag['id'] };\nexport type UpdateTagBody = Partial<TagData>;\nexport type UpdateTagResult = ResponseData<TagAPI>;\n\n/**\n * Updates an existing tag in the database.\n */\nexport const updateTag = async (\n  req: Request<UpdateTagParams, any, UpdateTagBody>,\n  res: Response<UpdateTagResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { tagId } = req.params;\n  const { organization, user, roles } = res.locals;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!hasPermission(roles, 'tag:write')()) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const tag = {\n      _id: tagId,\n      name: req.body.name,\n      key: req.body.key,\n      description: req.body.description,\n      instructions: req.body.instructions,\n    } as Partial<TagSchema> & { _id: Tag['id'] };\n\n    const tagToDelete = await tagService.getTagById(tagId);\n\n    if (String(tagToDelete.organizationId) !== String(organization.id)) {\n      ErrorHandler.handleGenericErrorResponse(res, 'TAG_NOT_IN_ORGANIZATION');\n      return;\n    }\n\n    const updatedTag = await tagService.updateTagById(tag._id, tag);\n\n    const formattedTag = mapTagToAPI(updatedTag);\n\n    const responseData = formatResponse<TagAPI>({\n      message: t({\n        en: 'Tag updated successfully',\n        fr: 'Tag mis à jour avec succès',\n        es: 'Tag actualizado con éxito',\n      }),\n      description: t({\n        en: 'Your tag has been updated successfully',\n        fr: 'Votre tag a été mis à jour avec succès',\n        es: 'Su tag ha sido actualizado con éxito',\n      }),\n      data: formattedTag,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type DeleteTagParams = { tagId: string | Tag['id'] };\nexport type DeleteTagResult = ResponseData<TagAPI>;\n\n/**\n * Deletes a tag from the database by its ID.\n * @param req - Express request object.\n * @param  res - Express response object.\n * @returns Response confirming the deletion.\n */\nexport const deleteTag = async (\n  req: Request<DeleteTagParams>,\n  res: Response<DeleteTagResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, organization, roles } = res.locals;\n  const { tagId } = req.params;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!tagId) {\n    ErrorHandler.handleGenericErrorResponse(res, 'TAG_ID_NOT_FOUND');\n    return;\n  }\n\n  if (!hasPermission(roles, 'tag:admin')(res.locals)) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const tagToDelete = await tagService.getTagById(tagId);\n\n    if (String(tagToDelete.organizationId) !== String(organization.id)) {\n      ErrorHandler.handleGenericErrorResponse(res, 'TAG_NOT_IN_ORGANIZATION');\n      return;\n    }\n\n    const deletedTag = await tagService.deleteTagById(tagId);\n\n    if (!deletedTag) {\n      ErrorHandler.handleGenericErrorResponse(res, 'TAG_NOT_FOUND', {\n        tagId,\n      });\n\n      return;\n    }\n\n    logger.info(`Tag deleted: ${String(deletedTag.id)}`);\n\n    const formattedTag = mapTagToAPI(deletedTag);\n\n    const responseData = formatResponse<TagAPI>({\n      message: t({\n        en: 'Tag deleted successfully',\n        fr: 'Tag supprimé avec succès',\n        es: 'Tag eliminado con éxito',\n      }),\n      description: t({\n        en: 'Your tag has been deleted successfully',\n        fr: 'Votre tag a été supprimé avec succès',\n        es: 'Su tag ha sido eliminado con éxito',\n      }),\n      data: formattedTag,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n"],"mappings":"AAOA,SAAS,cAAc;AACvB,YAAY,gBAAgB;AAC5B,SAAwB,oBAAoB;AAE5C;AAAA,EACE;AAAA,OAGK;AACP,SAAS,cAAc,mBAAmB;AAC1C,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAEP,SAAS,SAAS;AAQX,MAAM,UAAU,OACrB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,cAAc,MAAM,IAAI,IAAI;AAC1C,QAAM,EAAE,SAAS,UAAU,MAAM,MAAM,iBAAiB,IACtD,2BAA2B,GAAG;AAEhC,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,cAAc,OAAO,UAAU,EAAE,GAAG;AACvC,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,QAAM,mBAA+B;AAAA,IACnC,GAAG;AAAA,IACH,gBAAgB,OAAO,aAAa,EAAE;AAAA,EACxC;AAEA,MAAI;AACF,UAAM,OAAO,MAAM,WAAW,SAAS,kBAAkB,MAAM,QAAQ;AACvE,UAAM,aAAa,MAAM,WAAW,UAAU,OAAO;AAErD,UAAM,gBAAgB,aAAa,IAAI;AAEvC,UAAM,eAAe,wBAAgC;AAAA,MACnD,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,YAAY,iBAAiB,UAAU;AAAA,MACvC;AAAA,IACF,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,SAAS,OACpB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,cAAc,MAAM,MAAM,IAAI,IAAI;AAC1C,QAAM,UAAU,IAAI;AAEpB,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,wBAAwB;AAAA,EACvE;AAEA,MAAI,CAAC,cAAc,OAAO,WAAW,EAAE,IAAI,MAAM,GAAG;AAClD,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,QAAM,MAAe;AAAA,IACnB,WAAW,KAAK;AAAA,IAChB,gBAAgB,aAAa;AAAA,IAC7B,GAAG;AAAA,EACL;AAEA,MAAI;AACF,UAAM,SAAS,MAAM,WAAW,UAAU,GAAG;AAE7C,UAAM,eAAe,YAAY,MAAM;AAEvC,UAAM,eAAe,eAAuB;AAAA,MAC1C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AASO,MAAM,YAAY,OACvB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,IAAI,IAAI;AACtB,QAAM,EAAE,cAAc,MAAM,MAAM,IAAI,IAAI;AAE1C,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,cAAc,OAAO,WAAW,EAAE,GAAG;AACxC,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,MAAM;AAAA,MACV,KAAK;AAAA,MACL,MAAM,IAAI,KAAK;AAAA,MACf,KAAK,IAAI,KAAK;AAAA,MACd,aAAa,IAAI,KAAK;AAAA,MACtB,cAAc,IAAI,KAAK;AAAA,IACzB;AAEA,UAAM,cAAc,MAAM,WAAW,WAAW,KAAK;AAErD,QAAI,OAAO,YAAY,cAAc,MAAM,OAAO,aAAa,EAAE,GAAG;AAClE,mBAAa,2BAA2B,KAAK,yBAAyB;AACtE;AAAA,IACF;AAEA,UAAM,aAAa,MAAM,WAAW,cAAc,IAAI,KAAK,GAAG;AAE9D,UAAM,eAAe,YAAY,UAAU;AAE3C,UAAM,eAAe,eAAuB;AAAA,MAC1C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAWO,MAAM,YAAY,OACvB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,cAAc,MAAM,IAAI,IAAI;AAC1C,QAAM,EAAE,MAAM,IAAI,IAAI;AAEtB,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,OAAO;AACV,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc,OAAO,WAAW,EAAE,IAAI,MAAM,GAAG;AAClD,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,cAAc,MAAM,WAAW,WAAW,KAAK;AAErD,QAAI,OAAO,YAAY,cAAc,MAAM,OAAO,aAAa,EAAE,GAAG;AAClE,mBAAa,2BAA2B,KAAK,yBAAyB;AACtE;AAAA,IACF;AAEA,UAAM,aAAa,MAAM,WAAW,cAAc,KAAK;AAEvD,QAAI,CAAC,YAAY;AACf,mBAAa,2BAA2B,KAAK,iBAAiB;AAAA,QAC5D;AAAA,MACF,CAAC;AAED;AAAA,IACF;AAEA,WAAO,KAAK,gBAAgB,OAAO,WAAW,EAAE,CAAC,EAAE;AAEnD,UAAM,eAAe,YAAY,UAAU;AAE3C,UAAM,eAAe,eAAuB;AAAA,MAC1C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../../src/controllers/tag.controller.ts"],"sourcesContent":["import type {\n  Tag,\n  TagAPI,\n  TagCreationData,\n  TagData,\n  TagSchema,\n} from '@/types/tag.types';\nimport { logger } from '@logger';\nimport type { ResponseWithSession } from '@middlewares/sessionAuth.middleware';\nimport * as tagService from '@services/tag.service';\nimport { type AppError, ErrorHandler } from '@utils/errors';\nimport type { FiltersAndPagination } from '@utils/filtersAndPagination/getFiltersAndPaginationFromBody';\nimport {\n  getTagFiltersAndPagination,\n  type TagFilters,\n  type TagFiltersParams,\n} from '@utils/filtersAndPagination/getTagFiltersAndPagination';\nimport { mapTagsToAPI, mapTagToAPI } from '@utils/mapper/tag';\nimport { hasPermission } from '@utils/permissions';\nimport {\n  formatPaginatedResponse,\n  formatResponse,\n  type PaginatedResponse,\n  type ResponseData,\n} from '@utils/responseData';\nimport type { NextFunction, Request } from 'express';\nimport { t } from 'express-intlayer';\n\nexport type GetTagsParams = FiltersAndPagination<TagFiltersParams>;\nexport type GetTagsResult = PaginatedResponse<TagAPI>;\n\n/**\n * Retrieves a list of tags based on filters and pagination.\n */\nexport const getTags = async (\n  req: Request<GetTagsParams>,\n  res: ResponseWithSession<GetTagsResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, organization, roles } = res.locals;\n  const { filters, pageSize, skip, page, getNumberOfPages } =\n    getTagFiltersAndPagination(req);\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  const restrictedFilter: TagFilters = {\n    ...filters,\n    organizationId: String(organization.id),\n  };\n\n  try {\n    const tags = await tagService.findTags(restrictedFilter, skip, pageSize);\n\n    if (\n      !hasPermission(\n        roles,\n        'tag:read'\n      )({\n        ...res.locals,\n        targetTagProjectIds: [\n          ...new Set(tags.map((tag) => String(tag.projectId))),\n        ],\n      })\n    ) {\n      ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n      return;\n    }\n\n    const totalItems = await tagService.countTags(filters);\n\n    const formattedTags = mapTagsToAPI(tags);\n\n    const responseData = formatPaginatedResponse<TagAPI>({\n      data: formattedTags,\n      page,\n      pageSize,\n      totalPages: getNumberOfPages(totalItems),\n      totalItems,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type AddTagBody = TagCreationData;\nexport type AddTagResult = ResponseData<TagAPI>;\n\n/**\n * Adds a new tag to the database.\n */\nexport const addTag = async (\n  req: Request<any, any, AddTagBody>,\n  res: ResponseWithSession<AddTagResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { organization, project, user, roles } = res.locals;\n  const tagData = req.body;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!project) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_NOT_DEFINED');\n    return;\n  }\n\n  if (!tagData) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PROJECT_DATA_NOT_FOUND');\n  }\n\n  const tag: TagData = {\n    creatorId: user.id,\n    organizationId: organization.id,\n    projectId: project.id,\n    ...tagData,\n  };\n\n  if (\n    !hasPermission(\n      roles,\n      'tag:admin'\n    )({\n      ...res.locals,\n      targetTagProjectIds: [String(tag.projectId)],\n    })\n  ) {\n    ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n    return;\n  }\n\n  try {\n    const newTag = await tagService.createTag(tag);\n\n    const formattedTag = mapTagToAPI(newTag);\n\n    const responseData = formatResponse<TagAPI>({\n      message: t({\n        en: 'Tag created successfully',\n        fr: 'Tag créé avec succès',\n        es: 'Tag creado con éxito',\n      }),\n      description: t({\n        en: 'Your tag has been created successfully',\n        fr: 'Votre tag a été créé avec succès',\n        es: 'Su tag ha sido creado con éxito',\n      }),\n      data: formattedTag,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type UpdateTagParams = { tagId: string | Tag['id'] };\nexport type UpdateTagBody = Partial<TagData>;\nexport type UpdateTagResult = ResponseData<TagAPI>;\n\n/**\n * Updates an existing tag in the database.\n */\nexport const updateTag = async (\n  req: Request<UpdateTagParams, any, UpdateTagBody>,\n  res: ResponseWithSession<UpdateTagResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { tagId } = req.params;\n  const { organization, user, roles } = res.locals;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  try {\n    const tag = {\n      _id: tagId,\n      name: req.body.name,\n      key: req.body.key,\n      description: req.body.description,\n      instructions: req.body.instructions,\n    } as Partial<TagSchema> & { _id: Tag['id'] };\n\n    const tagToDelete = await tagService.getTagById(tagId);\n\n    if (\n      !hasPermission(\n        roles,\n        'tag:write'\n      )({\n        ...res.locals,\n        targetTagProjectIds: [String(tagToDelete.projectId)],\n      })\n    ) {\n      ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n      return;\n    }\n\n    if (String(tagToDelete.organizationId) !== String(organization.id)) {\n      ErrorHandler.handleGenericErrorResponse(res, 'TAG_NOT_IN_ORGANIZATION');\n      return;\n    }\n\n    const updatedTag = await tagService.updateTagById(tag._id, tag);\n\n    const formattedTag = mapTagToAPI(updatedTag);\n\n    const responseData = formatResponse<TagAPI>({\n      message: t({\n        en: 'Tag updated successfully',\n        fr: 'Tag mis à jour avec succès',\n        es: 'Tag actualizado con éxito',\n      }),\n      description: t({\n        en: 'Your tag has been updated successfully',\n        fr: 'Votre tag a été mis à jour avec succès',\n        es: 'Su tag ha sido actualizado con éxito',\n      }),\n      data: formattedTag,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n\nexport type DeleteTagParams = { tagId: string | Tag['id'] };\nexport type DeleteTagResult = ResponseData<TagAPI>;\n\n/**\n * Deletes a tag from the database by its ID.\n * @param req - Express request object.\n * @param  res - Express response object.\n * @returns Response confirming the deletion.\n */\nexport const deleteTag = async (\n  req: Request<DeleteTagParams>,\n  res: ResponseWithSession<DeleteTagResult>,\n  _next: NextFunction\n): Promise<void> => {\n  const { user, organization, roles } = res.locals;\n  const { tagId } = req.params;\n\n  if (!user) {\n    ErrorHandler.handleGenericErrorResponse(res, 'USER_NOT_DEFINED');\n    return;\n  }\n\n  if (!organization) {\n    ErrorHandler.handleGenericErrorResponse(res, 'ORGANIZATION_NOT_DEFINED');\n    return;\n  }\n\n  if (!tagId) {\n    ErrorHandler.handleGenericErrorResponse(res, 'TAG_ID_NOT_FOUND');\n    return;\n  }\n\n  try {\n    const tagToDelete = await tagService.getTagById(tagId);\n\n    if (\n      !hasPermission(\n        roles,\n        'tag:admin'\n      )({\n        ...res.locals,\n        targetTagProjectIds: [String(tagToDelete.projectId)],\n      })\n    ) {\n      ErrorHandler.handleGenericErrorResponse(res, 'PERMISSION_DENIED');\n      return;\n    }\n\n    if (String(tagToDelete.organizationId) !== String(organization.id)) {\n      ErrorHandler.handleGenericErrorResponse(res, 'TAG_NOT_IN_ORGANIZATION');\n      return;\n    }\n\n    const deletedTag = await tagService.deleteTagById(tagId);\n\n    if (!deletedTag) {\n      ErrorHandler.handleGenericErrorResponse(res, 'TAG_NOT_FOUND', {\n        tagId,\n      });\n\n      return;\n    }\n\n    logger.info(`Tag deleted: ${String(deletedTag.id)}`);\n\n    const formattedTag = mapTagToAPI(deletedTag);\n\n    const responseData = formatResponse<TagAPI>({\n      message: t({\n        en: 'Tag deleted successfully',\n        fr: 'Tag supprimé avec succès',\n        es: 'Tag eliminado con éxito',\n      }),\n      description: t({\n        en: 'Your tag has been deleted successfully',\n        fr: 'Votre tag a été supprimé avec succès',\n        es: 'Su tag ha sido eliminado con éxito',\n      }),\n      data: formattedTag,\n    });\n\n    res.json(responseData);\n    return;\n  } catch (error) {\n    ErrorHandler.handleAppErrorResponse(res, error as AppError);\n    return;\n  }\n};\n"],"mappings":"AAOA,SAAS,cAAc;AAEvB,YAAY,gBAAgB;AAC5B,SAAwB,oBAAoB;AAE5C;AAAA,EACE;AAAA,OAGK;AACP,SAAS,cAAc,mBAAmB;AAC1C,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAEP,SAAS,SAAS;AAQX,MAAM,UAAU,OACrB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,cAAc,MAAM,IAAI,IAAI;AAC1C,QAAM,EAAE,SAAS,UAAU,MAAM,MAAM,iBAAiB,IACtD,2BAA2B,GAAG;AAEhC,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,QAAM,mBAA+B;AAAA,IACnC,GAAG;AAAA,IACH,gBAAgB,OAAO,aAAa,EAAE;AAAA,EACxC;AAEA,MAAI;AACF,UAAM,OAAO,MAAM,WAAW,SAAS,kBAAkB,MAAM,QAAQ;AAEvE,QACE,CAAC;AAAA,MACC;AAAA,MACA;AAAA,IACF,EAAE;AAAA,MACA,GAAG,IAAI;AAAA,MACP,qBAAqB;AAAA,QACnB,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,QAAQ,OAAO,IAAI,SAAS,CAAC,CAAC;AAAA,MACrD;AAAA,IACF,CAAC,GACD;AACA,mBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,IACF;AAEA,UAAM,aAAa,MAAM,WAAW,UAAU,OAAO;AAErD,UAAM,gBAAgB,aAAa,IAAI;AAEvC,UAAM,eAAe,wBAAgC;AAAA,MACnD,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,YAAY,iBAAiB,UAAU;AAAA,MACvC;AAAA,IACF,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAQO,MAAM,SAAS,OACpB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,cAAc,SAAS,MAAM,MAAM,IAAI,IAAI;AACnD,QAAM,UAAU,IAAI;AAEpB,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,qBAAqB;AAClE;AAAA,EACF;AAEA,MAAI,CAAC,SAAS;AACZ,iBAAa,2BAA2B,KAAK,wBAAwB;AAAA,EACvE;AAEA,QAAM,MAAe;AAAA,IACnB,WAAW,KAAK;AAAA,IAChB,gBAAgB,aAAa;AAAA,IAC7B,WAAW,QAAQ;AAAA,IACnB,GAAG;AAAA,EACL;AAEA,MACE,CAAC;AAAA,IACC;AAAA,IACA;AAAA,EACF,EAAE;AAAA,IACA,GAAG,IAAI;AAAA,IACP,qBAAqB,CAAC,OAAO,IAAI,SAAS,CAAC;AAAA,EAC7C,CAAC,GACD;AACA,iBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,SAAS,MAAM,WAAW,UAAU,GAAG;AAE7C,UAAM,eAAe,YAAY,MAAM;AAEvC,UAAM,eAAe,eAAuB;AAAA,MAC1C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AASO,MAAM,YAAY,OACvB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,IAAI,IAAI;AACtB,QAAM,EAAE,cAAc,MAAM,MAAM,IAAI,IAAI;AAE1C,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI;AACF,UAAM,MAAM;AAAA,MACV,KAAK;AAAA,MACL,MAAM,IAAI,KAAK;AAAA,MACf,KAAK,IAAI,KAAK;AAAA,MACd,aAAa,IAAI,KAAK;AAAA,MACtB,cAAc,IAAI,KAAK;AAAA,IACzB;AAEA,UAAM,cAAc,MAAM,WAAW,WAAW,KAAK;AAErD,QACE,CAAC;AAAA,MACC;AAAA,MACA;AAAA,IACF,EAAE;AAAA,MACA,GAAG,IAAI;AAAA,MACP,qBAAqB,CAAC,OAAO,YAAY,SAAS,CAAC;AAAA,IACrD,CAAC,GACD;AACA,mBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,IACF;AAEA,QAAI,OAAO,YAAY,cAAc,MAAM,OAAO,aAAa,EAAE,GAAG;AAClE,mBAAa,2BAA2B,KAAK,yBAAyB;AACtE;AAAA,IACF;AAEA,UAAM,aAAa,MAAM,WAAW,cAAc,IAAI,KAAK,GAAG;AAE9D,UAAM,eAAe,YAAY,UAAU;AAE3C,UAAM,eAAe,eAAuB;AAAA,MAC1C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;AAWO,MAAM,YAAY,OACvB,KACA,KACA,UACkB;AAClB,QAAM,EAAE,MAAM,cAAc,MAAM,IAAI,IAAI;AAC1C,QAAM,EAAE,MAAM,IAAI,IAAI;AAEtB,MAAI,CAAC,MAAM;AACT,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI,CAAC,cAAc;AACjB,iBAAa,2BAA2B,KAAK,0BAA0B;AACvE;AAAA,EACF;AAEA,MAAI,CAAC,OAAO;AACV,iBAAa,2BAA2B,KAAK,kBAAkB;AAC/D;AAAA,EACF;AAEA,MAAI;AACF,UAAM,cAAc,MAAM,WAAW,WAAW,KAAK;AAErD,QACE,CAAC;AAAA,MACC;AAAA,MACA;AAAA,IACF,EAAE;AAAA,MACA,GAAG,IAAI;AAAA,MACP,qBAAqB,CAAC,OAAO,YAAY,SAAS,CAAC;AAAA,IACrD,CAAC,GACD;AACA,mBAAa,2BAA2B,KAAK,mBAAmB;AAChE;AAAA,IACF;AAEA,QAAI,OAAO,YAAY,cAAc,MAAM,OAAO,aAAa,EAAE,GAAG;AAClE,mBAAa,2BAA2B,KAAK,yBAAyB;AACtE;AAAA,IACF;AAEA,UAAM,aAAa,MAAM,WAAW,cAAc,KAAK;AAEvD,QAAI,CAAC,YAAY;AACf,mBAAa,2BAA2B,KAAK,iBAAiB;AAAA,QAC5D;AAAA,MACF,CAAC;AAED;AAAA,IACF;AAEA,WAAO,KAAK,gBAAgB,OAAO,WAAW,EAAE,CAAC,EAAE;AAEnD,UAAM,eAAe,YAAY,UAAU;AAE3C,UAAM,eAAe,eAAuB;AAAA,MAC1C,SAAS,EAAE;AAAA,QACT,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,aAAa,EAAE;AAAA,QACb,IAAI;AAAA,QACJ,IAAI;AAAA,QACJ,IAAI;AAAA,MACN,CAAC;AAAA,MACD,MAAM;AAAA,IACR,CAAC;AAED,QAAI,KAAK,YAAY;AACrB;AAAA,EACF,SAAS,OAAO;AACd,iBAAa,uBAAuB,KAAK,KAAiB;AAC1D;AAAA,EACF;AACF;","names":[]}

package/dist/esm/controllers/user.controller.mjs

@@ -174,7 +174,13 @@ const updateUser = async (req, res, _next) => {
 const deleteUser = async (req, res, _next) => {
   const { userId } = req.params;
   const { roles } = res.locals;
-  if (!hasPermission(roles, "user:admin")()) {
+  if (!hasPermission(
+    roles,
+    "user:admin"
+  )({
+    ...res.locals,
+    targetUserIds: [userId]
+  })) {
     ErrorHandler.handleGenericErrorResponse(res, "PERMISSION_DENIED");
     return;
   }