@krantho/api 0.0.0-stage → 1.0.0

package/dist/handlers/snapshot-list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-list.d.ts","sourceRoot":"","sources":["../../src/handlers/snapshot-list.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAE7C,kDAAkD;AAClD,eAAO,MAAM,YAAY,EAAE,UAO1B,CAAA"}

package/dist/handlers/snapshot-list.js

@@ -0,0 +1,9 @@
+/** GET /api/checkpoints — list all checkpoints */
+export const snapshotList = async (_req, ctx) => {
+    if (!ctx.checkpointAdapter) {
+        return { status: 501, body: { error: 'Checkpoint system not configured' } };
+    }
+    const checkpoints = await ctx.checkpointAdapter.listCheckpoints();
+    return { status: 200, body: { checkpoints } };
+};
+//# sourceMappingURL=snapshot-list.js.map

package/dist/handlers/snapshot-list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-list.js","sourceRoot":"","sources":["../../src/handlers/snapshot-list.ts"],"names":[],"mappings":"AAEA,kDAAkD;AAClD,MAAM,CAAC,MAAM,YAAY,GAAe,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;IAC1D,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAC3B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,kCAAkC,EAAE,EAAE,CAAA;IAC7E,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,iBAAiB,CAAC,eAAe,EAAE,CAAA;IACjE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,CAAA;AAC/C,CAAC,CAAA"}

package/dist/handlers/snapshot-restore.d.ts

@@ -0,0 +1,4 @@
+import type { ApiHandler } from '../types.js';
+/** POST /api/checkpoints/:version/restore — restore from a checkpoint */
+export declare const snapshotRestore: ApiHandler;
+//# sourceMappingURL=snapshot-restore.d.ts.map

package/dist/handlers/snapshot-restore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-restore.d.ts","sourceRoot":"","sources":["../../src/handlers/snapshot-restore.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAG7C,yEAAyE;AACzE,eAAO,MAAM,eAAe,EAAE,UAqB7B,CAAA"}

package/dist/handlers/snapshot-restore.js

@@ -0,0 +1,27 @@
+import { announceChange } from '../content-change.js';
+import { requireRole } from '../permissions.js';
+import { parseCheckpointVersion } from '../validators.js';
+/** POST /api/checkpoints/:version/restore — restore from a checkpoint */
+export const snapshotRestore = async (req, ctx) => {
+    const denied = requireRole(ctx.auth, 'admin');
+    if (denied)
+        return denied;
+    if (!ctx.checkpointAdapter) {
+        return { status: 501, body: { error: 'Checkpoint system not configured' } };
+    }
+    const parsed = parseCheckpointVersion(req.params);
+    if (!parsed.isValid)
+        return parsed.response;
+    const { version } = parsed;
+    try {
+        const restored = await ctx.checkpointAdapter.restoreCheckpoint(version);
+        await announceChange(ctx, { kind: 'site' });
+        return { status: 200, body: { restored, message: `Restored from checkpoint v${version}` } };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : 'Restore failed';
+        const isNotFound = message.includes('not found');
+        return { status: isNotFound ? 404 : 500, body: { error: message } };
+    }
+};
+//# sourceMappingURL=snapshot-restore.js.map

package/dist/handlers/snapshot-restore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-restore.js","sourceRoot":"","sources":["../../src/handlers/snapshot-restore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AAEzD,yEAAyE;AACzE,MAAM,CAAC,MAAM,eAAe,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC5D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC7C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAC3B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,kCAAkC,EAAE,EAAE,CAAA;IAC7E,CAAC;IAED,MAAM,MAAM,GAAG,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACjD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAA;IAC3C,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAA;IAE1B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;QACvE,MAAM,cAAc,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;QAC3C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,6BAA6B,OAAO,EAAE,EAAE,EAAE,CAAA;IAC7F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAA;QACrE,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QAChD,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAA;IACrE,CAAC;AACH,CAAC,CAAA"}

package/dist/handlers/translation-status.d.ts

@@ -0,0 +1,9 @@
+import type { ApiHandler } from '../types.js';
+/**
+ * GET /api/translations/status — translation coverage per collection.
+ *
+ * Returns which items exist in which locales and which are missing. One adapter `query`
+ * reads every collection and locale.
+ */
+export declare const translationStatus: ApiHandler;
+//# sourceMappingURL=translation-status.d.ts.map

package/dist/handlers/translation-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"translation-status.d.ts","sourceRoot":"","sources":["../../src/handlers/translation-status.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAsC7C;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,EAAE,UA0C/B,CAAA"}

package/dist/handlers/translation-status.js

@@ -0,0 +1,68 @@
+import { canQuery } from '@krantho/persistence';
+import { activeLocales } from '../active-locales.js';
+import { groupByCollection } from '../group-by-collection.js';
+/**
+ * The locales each slug exists in. Slugs keep the order of the documents, which `query`
+ * reads by slug; each slug's locales are the supported locales first, in their order, then
+ * any other locale it has, in the order they were read.
+ */
+function localesOfSlugs(documents, supportedLocales) {
+    const read = new Map();
+    for (const meta of documents) {
+        const locales = read.get(meta.slug) ?? new Set();
+        locales.add(meta.locale);
+        read.set(meta.slug, locales);
+    }
+    const localesBySlug = new Map();
+    for (const [slug, locales] of read) {
+        const supported = supportedLocales.filter((locale) => locales.has(locale));
+        const others = [...locales].filter((locale) => !supportedLocales.includes(locale));
+        localesBySlug.set(slug, new Set([...supported, ...others]));
+    }
+    return localesBySlug;
+}
+/**
+ * GET /api/translations/status — translation coverage per collection.
+ *
+ * Returns which items exist in which locales and which are missing. One adapter `query`
+ * reads every collection and locale.
+ */
+export const translationStatus = async (_req, ctx) => {
+    const { defaultLocale } = ctx.config.site;
+    const supportedLocales = (await activeLocales(ctx)).locales;
+    if (supportedLocales.length <= 1) {
+        return {
+            status: 200,
+            body: {
+                supportedLocales,
+                defaultLocale,
+                collections: [],
+                message: 'Single-locale site — no translation tracking needed',
+            },
+        };
+    }
+    if (!canQuery(ctx.adapter)) {
+        return { status: 501, body: { error: 'Adapter does not support query' } };
+    }
+    const names = [...ctx.contentConfig.collections.values()].map((collection) => collection.name);
+    const { items: metas } = await ctx.adapter.query({
+        state: 'current',
+        projection: 'meta',
+        collections: names,
+    });
+    const documents = groupByCollection(metas, names, (meta) => meta.collection);
+    const collections = names.map((name) => {
+        const localesBySlug = localesOfSlugs(documents.get(name) ?? [], supportedLocales);
+        const items = [...localesBySlug].map(([slug, locales]) => ({
+            slug,
+            locales: [...locales],
+            missing: supportedLocales.filter((l) => !locales.has(l)),
+        }));
+        return { collection: name, total: items.length, items };
+    });
+    return {
+        status: 200,
+        body: { supportedLocales, defaultLocale, collections },
+    };
+};
+//# sourceMappingURL=translation-status.js.map

package/dist/handlers/translation-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"translation-status.js","sourceRoot":"","sources":["../../src/handlers/translation-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAqB,MAAM,sBAAsB,CAAA;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAe7D;;;;GAIG;AACH,SAAS,cAAc,CACrB,SAAkC,EAClC,gBAAmC;IAEnC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAuB,CAAA;IAC3C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,EAAU,CAAA;QACxD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACxB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC9B,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuB,CAAA;IACpD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;QAC1E,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAClF,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;IAC7D,CAAC;IACD,OAAO,aAAa,CAAA;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAe,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;IAC/D,MAAM,EAAE,aAAa,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAA;IACzC,MAAM,gBAAgB,GAAG,CAAC,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAA;IAE3D,IAAI,gBAAgB,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACjC,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,gBAAgB;gBAChB,aAAa;gBACb,WAAW,EAAE,EAAE;gBACf,OAAO,EAAE,qDAAqD;aAC/D;SACF,CAAA;IACH,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,EAAE,CAAA;IAC3E,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,GAAG,GAAG,CAAC,aAAa,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;IAC9F,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;QAC/C,KAAK,EAAE,SAAS;QAChB,UAAU,EAAE,MAAM;QAClB,WAAW,EAAE,KAAK;KACnB,CAAC,CAAA;IACF,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAE5E,MAAM,WAAW,GAAuB,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACzD,MAAM,aAAa,GAAG,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,gBAAgB,CAAC,CAAA;QACjF,MAAM,KAAK,GAAsB,CAAC,GAAG,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5E,IAAI;YACJ,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC;YACrB,OAAO,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SACzD,CAAC,CAAC,CAAA;QACH,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,CAAA;IACzD,CAAC,CAAC,CAAA;IAEF,OAAO;QACL,MAAM,EAAE,GAAG;QACX,IAAI,EAAE,EAAE,gBAAgB,EAAE,aAAa,EAAE,WAAW,EAAE;KACvD,CAAA;AACH,CAAC,CAAA"}

package/dist/handlers/update-content.d.ts

@@ -0,0 +1,4 @@
+import type { ApiHandler } from '../types.js';
+/** PUT /api/content/:collection/:slug — update + validate (editor+) */
+export declare const updateContent: ApiHandler;
+//# sourceMappingURL=update-content.d.ts.map

package/dist/handlers/update-content.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-content.d.ts","sourceRoot":"","sources":["../../src/handlers/update-content.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAG7C,uEAAuE;AACvE,eAAO,MAAM,aAAa,EAAE,UAgE3B,CAAA"}

package/dist/handlers/update-content.js

@@ -0,0 +1,66 @@
+import { z } from 'zod';
+import { changedByFromAuth, requireRole } from '../permissions.js';
+import { saveDocument } from '../save-document.js';
+import { validateCollectionParam, validateRequestBody, validateSlugParam } from '../validators.js';
+/** PUT /api/content/:collection/:slug — update + validate (editor+) */
+export const updateContent = async (req, ctx) => {
+    const denied = requireRole(ctx.auth, 'editor');
+    if (denied)
+        return denied;
+    const validated = validateCollectionParam(req.params['collection'], ctx);
+    if (!validated.isValid)
+        return validated.response;
+    const slugCheck = validateSlugParam(req.params['slug']);
+    if (!slugCheck.isValid)
+        return slugCheck.response;
+    const slug = slugCheck.slug;
+    const bodyCheck = validateRequestBody(req.body);
+    if (!bodyCheck.isValid)
+        return bodyCheck.response;
+    // A body key that is present — even as "" — means "replace the body"
+    // (empty erases it); an absent key means fields-only update. Truthiness
+    // would misread an empty body as absent.
+    const bodyValue = bodyCheck.body['body'];
+    const locale = typeof bodyCheck.body['locale'] === 'string' ? bodyCheck.body['locale'] : undefined;
+    const submittedVersion = typeof bodyCheck.body['_version'] === 'number' ? bodyCheck.body['_version'] : undefined;
+    const defaults = z
+        .array(z
+        .object({
+        collection: z.string().min(1),
+        slug: z.string().min(1),
+        locale: z.string().min(2),
+        version: z.number().int().positive(),
+        paths: z.array(z.string()),
+        values: z.record(z.string(), z.json()),
+    })
+        .strict())
+        .optional()
+        .safeParse(bodyCheck.body['defaults']);
+    if (!defaults.success)
+        return { status: 422, body: { error: 'Invalid shared default provenance' } };
+    const saved = await saveDocument(ctx, {
+        collection: validated.collection,
+        slug,
+        fields: (bodyCheck.body['fields'] ?? {}),
+        body: typeof bodyValue === 'string' ? bodyValue : undefined,
+        locale,
+        isNew: false,
+        expectedVersion: submittedVersion,
+        changedBy: changedByFromAuth(ctx.auth),
+        metadata: bodyCheck.body['metadata'],
+        defaults: defaults.data,
+    });
+    if (!saved.ok)
+        return saved.response;
+    return {
+        status: 200,
+        body: {
+            slug,
+            collection: validated.collection,
+            version: saved.version,
+            liveVersion: saved.liveVersion,
+            message: 'Updated',
+        },
+    };
+};
+//# sourceMappingURL=update-content.js.map

package/dist/handlers/update-content.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-content.js","sourceRoot":"","sources":["../../src/handlers/update-content.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAElD,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAElG,uEAAuE;AACvE,MAAM,CAAC,MAAM,aAAa,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC1D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IAC9C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,MAAM,SAAS,GAAG,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAA;IACxE,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC,QAAQ,CAAA;IAEjD,MAAM,SAAS,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;IACvD,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC,QAAQ,CAAA;IACjD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAA;IAE3B,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC/C,IAAI,CAAC,SAAS,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC,QAAQ,CAAA;IAEjD,qEAAqE;IACrE,wEAAwE;IACxE,yCAAyC;IACzC,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,OAAO,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAClG,MAAM,gBAAgB,GACpB,OAAO,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAEzF,MAAM,QAAQ,GAAG,CAAC;SACf,KAAK,CACJ,CAAC;SACE,MAAM,CAAC;QACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACpC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;KACvC,CAAC;SACD,MAAM,EAAE,CACZ;SACA,QAAQ,EAAE;SACV,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAA;IACxC,IAAI,CAAC,QAAQ,CAAC,OAAO;QACnB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mCAAmC,EAAE,EAAE,CAAA;IAE9E,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE;QACpC,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,IAAI;QACJ,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAA4B;QACnE,IAAI,EAAE,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAC3D,MAAM;QACN,KAAK,EAAE,KAAK;QACZ,eAAe,EAAE,gBAAgB;QACjC,SAAS,EAAE,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;QACtC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC;QACpC,QAAQ,EAAE,QAAQ,CAAC,IAAI;KACxB,CAAC,CAAA;IACF,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC,QAAQ,CAAA;IAEpC,OAAO;QACL,MAAM,EAAE,GAAG;QACX,IAAI,EAAE;YACJ,IAAI;YACJ,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,OAAO,EAAE,SAAS;SACnB;KACF,CAAA;AACH,CAAC,CAAA"}

package/dist/handlers/user-create.d.ts

@@ -0,0 +1,4 @@
+import type { ApiHandler } from '../types.js';
+/** POST /api/users — create a user (admin only, pre-approval mode) */
+export declare const userCreate: ApiHandler;
+//# sourceMappingURL=user-create.d.ts.map

package/dist/handlers/user-create.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-create.d.ts","sourceRoot":"","sources":["../../src/handlers/user-create.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAE7C,sEAAsE;AACtE,eAAO,MAAM,UAAU,EAAE,UAyCxB,CAAA"}

package/dist/handlers/user-create.js

@@ -0,0 +1,38 @@
+import { requireRole, VALID_ROLES } from '../permissions.js';
+/** POST /api/users — create a user (admin only, pre-approval mode) */
+export const userCreate = async (req, ctx) => {
+    const denied = requireRole(ctx.auth, 'admin');
+    if (denied)
+        return denied;
+    if (!ctx.authAdapter) {
+        return { status: 501, body: { error: 'User management not configured' } };
+    }
+    const body = req.body;
+    if (!body || typeof body !== 'object') {
+        return { status: 400, body: { error: 'Request body is required' } };
+    }
+    const email = typeof body['email'] === 'string' ? body['email'] : undefined;
+    const name = typeof body['name'] === 'string' ? body['name'] : undefined;
+    const role = typeof body['role'] === 'string' ? body['role'] : 'viewer';
+    if (!email) {
+        return { status: 400, body: { error: 'Email is required' } };
+    }
+    if (!VALID_ROLES.includes(role)) {
+        return {
+            status: 400,
+            body: { error: `Invalid role: ${role}. Must be: ${VALID_ROLES.join(', ')}` },
+        };
+    }
+    // Check for duplicate email
+    const existing = await ctx.authAdapter.getUserByEmail(email);
+    if (existing) {
+        return { status: 409, body: { error: `User with email ${email} already exists` } };
+    }
+    const user = await ctx.authAdapter.createUser({
+        email,
+        name: name ?? null,
+        roles: [role],
+    });
+    return { status: 201, body: user };
+};
+//# sourceMappingURL=user-create.js.map

package/dist/handlers/user-create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-create.js","sourceRoot":"","sources":["../../src/handlers/user-create.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAG5D,sEAAsE;AACtE,MAAM,CAAC,MAAM,UAAU,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACvD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC7C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,EAAE,CAAA;IAC3E,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,IAA2C,CAAA;IAC5D,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,CAAA;IACrE,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC3E,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACxE,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAA;IAEvE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,CAAA;IAC9D,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAY,CAAC,EAAE,CAAC;QACxC,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,KAAK,EAAE,iBAAiB,IAAI,cAAc,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;SAC7E,CAAA;IACH,CAAC;IAED,4BAA4B;IAC5B,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;IAC5D,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,mBAAmB,KAAK,iBAAiB,EAAE,EAAE,CAAA;IACpF,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC;QAC5C,KAAK;QACL,IAAI,EAAE,IAAI,IAAI,IAAI;QAClB,KAAK,EAAE,CAAC,IAAY,CAAC;KACtB,CAAC,CAAA;IAEF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AACpC,CAAC,CAAA"}

package/dist/handlers/user-delete.d.ts

@@ -0,0 +1,4 @@
+import type { ApiHandler } from '../types.js';
+/** DELETE /api/users/:id — delete user (admin only) */
+export declare const userDelete: ApiHandler;
+//# sourceMappingURL=user-delete.d.ts.map

package/dist/handlers/user-delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-delete.d.ts","sourceRoot":"","sources":["../../src/handlers/user-delete.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAG7C,uDAAuD;AACvD,eAAO,MAAM,UAAU,EAAE,UAuBxB,CAAA"}

package/dist/handlers/user-delete.js

@@ -0,0 +1,25 @@
+import { requireRole } from '../permissions.js';
+import { requireParam } from '../validators.js';
+/** DELETE /api/users/:id — delete user (admin only) */
+export const userDelete = async (req, ctx) => {
+    const denied = requireRole(ctx.auth, 'admin');
+    if (denied)
+        return denied;
+    if (!ctx.authAdapter) {
+        return { status: 501, body: { error: 'User management not configured' } };
+    }
+    const idResult = requireParam(req.params, 'id');
+    if (!idResult.isValid)
+        return idResult.response;
+    const id = idResult.value;
+    // Prevent self-deletion
+    if (ctx.auth && ctx.auth.id === id) {
+        return { status: 400, body: { error: 'Cannot delete your own account' } };
+    }
+    const deleted = await ctx.authAdapter.deleteUser(id);
+    if (!deleted) {
+        return { status: 404, body: { error: 'User not found' } };
+    }
+    return { status: 200, body: { deleted: true, id } };
+};
+//# sourceMappingURL=user-delete.js.map

package/dist/handlers/user-delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-delete.js","sourceRoot":"","sources":["../../src/handlers/user-delete.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE/C,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAE/C,uDAAuD;AACvD,MAAM,CAAC,MAAM,UAAU,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACvD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC7C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,EAAE,CAAA;IAC3E,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC/C,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,QAAQ,CAAC,QAAQ,CAAA;IAC/C,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAA;IAEzB,wBAAwB;IACxB,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACnC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,EAAE,CAAA;IAC3E,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;IACpD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,CAAA;IAC3D,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAA;AACrD,CAAC,CAAA"}

package/dist/handlers/user-get.d.ts

@@ -0,0 +1,4 @@
+import type { ApiHandler } from '../types.js';
+/** GET /api/users/:id — get user details (admin only) */
+export declare const userGet: ApiHandler;
+//# sourceMappingURL=user-get.d.ts.map

package/dist/handlers/user-get.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-get.d.ts","sourceRoot":"","sources":["../../src/handlers/user-get.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAG7C,yDAAyD;AACzD,eAAO,MAAM,OAAO,EAAE,UAoBrB,CAAA"}

package/dist/handlers/user-get.js

@@ -0,0 +1,22 @@
+import { requireRole } from '../permissions.js';
+import { requireParam } from '../validators.js';
+/** GET /api/users/:id — get user details (admin only) */
+export const userGet = async (req, ctx) => {
+    const denied = requireRole(ctx.auth, 'admin');
+    if (denied)
+        return denied;
+    if (!ctx.authAdapter) {
+        return { status: 501, body: { error: 'User management not configured' } };
+    }
+    const idResult = requireParam(req.params, 'id');
+    if (!idResult.isValid)
+        return idResult.response;
+    const id = idResult.value;
+    const user = await ctx.authAdapter.getUser(id);
+    if (!user) {
+        return { status: 404, body: { error: 'User not found' } };
+    }
+    const permissions = await ctx.authAdapter.getUserPermissions(id);
+    return { status: 200, body: { ...user, permissions } };
+};
+//# sourceMappingURL=user-get.js.map

package/dist/handlers/user-get.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-get.js","sourceRoot":"","sources":["../../src/handlers/user-get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE/C,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAE/C,yDAAyD;AACzD,MAAM,CAAC,MAAM,OAAO,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACpD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC7C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,EAAE,CAAA;IAC3E,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC/C,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,QAAQ,CAAC,QAAQ,CAAA;IAC/C,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAA;IAEzB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,CAAA;IAC3D,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAA;IAEhE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,EAAE,CAAA;AACxD,CAAC,CAAA"}

package/dist/handlers/user-list.d.ts

@@ -0,0 +1,4 @@
+import type { ApiHandler } from '../types.js';
+/** GET /api/users — list all users (admin only) */
+export declare const userList: ApiHandler;
+//# sourceMappingURL=user-list.d.ts.map

package/dist/handlers/user-list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-list.d.ts","sourceRoot":"","sources":["../../src/handlers/user-list.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAE7C,mDAAmD;AACnD,eAAO,MAAM,QAAQ,EAAE,UAyBtB,CAAA"}

package/dist/handlers/user-list.js

@@ -0,0 +1,28 @@
+import { requireRole } from '../permissions.js';
+/** GET /api/users — list all users (admin only) */
+export const userList = async (_req, ctx) => {
+    const denied = requireRole(ctx.auth, 'admin');
+    if (denied)
+        return denied;
+    if (!ctx.authAdapter) {
+        return { status: 501, body: { error: 'User management not configured' } };
+    }
+    const users = await ctx.authAdapter.listUsers();
+    return {
+        status: 200,
+        body: {
+            users: users.map((u) => ({
+                id: u.id,
+                email: u.email,
+                name: u.name,
+                roles: u.roles,
+                isActive: u.isActive,
+                oidcIssuer: u.oidcIssuer,
+                createdAt: u.createdAt,
+                updatedAt: u.updatedAt,
+            })),
+            total: users.length,
+        },
+    };
+};
+//# sourceMappingURL=user-list.js.map

package/dist/handlers/user-list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-list.js","sourceRoot":"","sources":["../../src/handlers/user-list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAG/C,mDAAmD;AACnD,MAAM,CAAC,MAAM,QAAQ,GAAe,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;IACtD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC7C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,EAAE,CAAA;IAC3E,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,SAAS,EAAE,CAAA;IAC/C,OAAO;QACL,MAAM,EAAE,GAAG;QACX,IAAI,EAAE;YACJ,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvB,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,SAAS,EAAE,CAAC,CAAC,SAAS;aACvB,CAAC,CAAC;YACH,KAAK,EAAE,KAAK,CAAC,MAAM;SACpB;KACF,CAAA;AACH,CAAC,CAAA"}

package/dist/handlers/user-permissions.d.ts

@@ -0,0 +1,6 @@
+import type { ApiHandler } from '../types.js';
+/** GET /api/users/:id/permissions — get per-collection overrides (admin only) */
+export declare const userPermissionsGet: ApiHandler;
+/** PUT /api/users/:id/permissions — set per-collection overrides (admin only) */
+export declare const userPermissionsSet: ApiHandler;
+//# sourceMappingURL=user-permissions.d.ts.map

package/dist/handlers/user-permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-permissions.d.ts","sourceRoot":"","sources":["../../src/handlers/user-permissions.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAG7C,iFAAiF;AACjF,eAAO,MAAM,kBAAkB,EAAE,UAchC,CAAA;AAED,iFAAiF;AACjF,eAAO,MAAM,kBAAkB,EAAE,UA0BhC,CAAA"}

package/dist/handlers/user-permissions.js

@@ -0,0 +1,42 @@
+import { requireRole, VALID_ROLES } from '../permissions.js';
+import { requireParam } from '../validators.js';
+/** GET /api/users/:id/permissions — get per-collection overrides (admin only) */
+export const userPermissionsGet = async (req, ctx) => {
+    const denied = requireRole(ctx.auth, 'admin');
+    if (denied)
+        return denied;
+    if (!ctx.authAdapter) {
+        return { status: 501, body: { error: 'User management not configured' } };
+    }
+    const idResult = requireParam(req.params, 'id');
+    if (!idResult.isValid)
+        return idResult.response;
+    const id = idResult.value;
+    const permissions = await ctx.authAdapter.getUserPermissions(id);
+    return { status: 200, body: { permissions } };
+};
+/** PUT /api/users/:id/permissions — set per-collection overrides (admin only) */
+export const userPermissionsSet = async (req, ctx) => {
+    const denied = requireRole(ctx.auth, 'admin');
+    if (denied)
+        return denied;
+    if (!ctx.authAdapter) {
+        return { status: 501, body: { error: 'User management not configured' } };
+    }
+    const idResult = requireParam(req.params, 'id');
+    if (!idResult.isValid)
+        return idResult.response;
+    const id = idResult.value;
+    const body = req.body;
+    const collection = typeof body?.['collection'] === 'string' ? body['collection'] : undefined;
+    const role = typeof body?.['role'] === 'string' ? body['role'] : undefined;
+    if (!collection || !role) {
+        return { status: 400, body: { error: 'collection and role are required' } };
+    }
+    if (!VALID_ROLES.includes(role)) {
+        return { status: 400, body: { error: `Invalid role: ${role}` } };
+    }
+    await ctx.authAdapter.setUserPermission(id, collection, role);
+    return { status: 200, body: { userId: id, collection, role } };
+};
+//# sourceMappingURL=user-permissions.js.map

package/dist/handlers/user-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-permissions.js","sourceRoot":"","sources":["../../src/handlers/user-permissions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE5D,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAE/C,iFAAiF;AACjF,MAAM,CAAC,MAAM,kBAAkB,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC/D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC7C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,EAAE,CAAA;IAC3E,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC/C,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,QAAQ,CAAC,QAAQ,CAAA;IAC/C,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAA;IAEzB,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAA;IAChE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,CAAA;AAC/C,CAAC,CAAA;AAED,iFAAiF;AACjF,MAAM,CAAC,MAAM,kBAAkB,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC/D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC7C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,EAAE,CAAA;IAC3E,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC/C,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,QAAQ,CAAC,QAAQ,CAAA;IAC/C,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAA;IAEzB,MAAM,IAAI,GAAG,GAAG,CAAC,IAA2C,CAAA;IAC5D,MAAM,UAAU,GAAG,OAAO,IAAI,EAAE,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC5F,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAE1E,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,kCAAkC,EAAE,EAAE,CAAA;IAC7E,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAY,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,iBAAiB,IAAI,EAAE,EAAE,EAAE,CAAA;IAClE,CAAC;IAED,MAAM,GAAG,CAAC,WAAW,CAAC,iBAAiB,CAAC,EAAE,EAAE,UAAU,EAAE,IAAY,CAAC,CAAA;IACrE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,CAAA;AAChE,CAAC,CAAA"}

package/dist/handlers/user-update.d.ts

@@ -0,0 +1,4 @@
+import type { ApiHandler } from '../types.js';
+/** PUT /api/users/:id — update user (admin only) */
+export declare const userUpdate: ApiHandler;
+//# sourceMappingURL=user-update.d.ts.map

package/dist/handlers/user-update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-update.d.ts","sourceRoot":"","sources":["../../src/handlers/user-update.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAG7C,oDAAoD;AACpD,eAAO,MAAM,UAAU,EAAE,UA0DxB,CAAA"}

package/dist/handlers/user-update.js

@@ -0,0 +1,54 @@
+import { requireRole, VALID_ROLES } from '../permissions.js';
+import { requireParam } from '../validators.js';
+/** PUT /api/users/:id — update user (admin only) */
+export const userUpdate = async (req, ctx) => {
+    const denied = requireRole(ctx.auth, 'admin');
+    if (denied)
+        return denied;
+    if (!ctx.authAdapter) {
+        return { status: 501, body: { error: 'User management not configured' } };
+    }
+    const idResult = requireParam(req.params, 'id');
+    if (!idResult.isValid)
+        return idResult.response;
+    const id = idResult.value;
+    const body = req.body;
+    if (!body || typeof body !== 'object') {
+        return { status: 400, body: { error: 'Request body is required' } };
+    }
+    if (typeof body['isActive'] === 'boolean' && !body['isActive'] && ctx.auth?.id === id) {
+        return { status: 400, body: { error: 'Cannot deactivate your own account' } };
+    }
+    const updates = {};
+    if (typeof body['name'] === 'string') {
+        updates['name'] = body['name'];
+    }
+    if (typeof body['role'] === 'string') {
+        if (!VALID_ROLES.includes(body['role'])) {
+            return { status: 400, body: { error: `Invalid role: ${body['role']}` } };
+        }
+        updates['roles'] = [body['role']];
+    }
+    if (Array.isArray(body['roles'])) {
+        const roles = body['roles'];
+        for (const r of roles) {
+            if (!VALID_ROLES.includes(r)) {
+                return { status: 400, body: { error: `Invalid role: ${r}` } };
+            }
+        }
+        updates['roles'] = roles;
+    }
+    if (typeof body['isActive'] === 'boolean') {
+        updates['isActive'] = body['isActive'];
+        // Deactivating a user: clear their refresh tokens
+        if (!body['isActive']) {
+            await ctx.authAdapter.deleteUserRefreshTokens(id);
+        }
+    }
+    const user = await ctx.authAdapter.updateUser(id, updates);
+    if (!user) {
+        return { status: 404, body: { error: 'User not found' } };
+    }
+    return { status: 200, body: user };
+};
+//# sourceMappingURL=user-update.js.map

package/dist/handlers/user-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-update.js","sourceRoot":"","sources":["../../src/handlers/user-update.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE5D,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAE/C,oDAAoD;AACpD,MAAM,CAAC,MAAM,UAAU,GAAe,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACvD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC7C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,EAAE,CAAA;IAC3E,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC/C,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,QAAQ,CAAC,QAAQ,CAAA;IAC/C,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAA;IAEzB,MAAM,IAAI,GAAG,GAAG,CAAC,IAA2C,CAAA;IAC5D,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,CAAA;IACrE,CAAC;IAED,IAAI,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC;QACtF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,oCAAoC,EAAE,EAAE,CAAA;IAC/E,CAAC;IAED,MAAM,OAAO,GAA4B,EAAE,CAAA;IAE3C,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;IAChC,CAAC;IAED,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;QACrC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAS,CAAC,EAAE,CAAC;YAChD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,iBAAiB,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAA;QAC1E,CAAC;QACD,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAS,CAAC,CAAA;IAC3C,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAa,CAAA;QACvC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAS,CAAC,EAAE,CAAC;gBACrC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAA;YAC/D,CAAC;QACH,CAAC;QACD,OAAO,CAAC,OAAO,CAAC,GAAG,KAAK,CAAA;IAC1B,CAAC;IAED,IAAI,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAA;QACtC,kDAAkD;QAClD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACtB,MAAM,GAAG,CAAC,WAAW,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAA;QACnD,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,CAAA;IAC3D,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AACpC,CAAC,CAAA"}

package/dist/handlers/validate-all.d.ts

@@ -0,0 +1,4 @@
+import type { ApiHandler } from '../types.js';
+/** POST /api/validate — validate all content against schemas */
+export declare const validateAll: ApiHandler;
+//# sourceMappingURL=validate-all.d.ts.map

package/dist/handlers/validate-all.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-all.d.ts","sourceRoot":"","sources":["../../src/handlers/validate-all.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAE7C,gEAAgE;AAChE,eAAO,MAAM,WAAW,EAAE,UAWzB,CAAA"}

package/dist/handlers/validate-all.js

@@ -0,0 +1,14 @@
+import { validateAllContent } from '@krantho/schema';
+/** POST /api/validate — validate all content against schemas */
+export const validateAll = async (_req, ctx) => {
+    const result = await validateAllContent(ctx.contentConfig, ctx.adapter, { mode: 'warn' });
+    return {
+        status: result.valid ? 200 : 422,
+        body: {
+            valid: result.valid,
+            summary: result.summary,
+            errors: result.errors,
+        },
+    };
+};
+//# sourceMappingURL=validate-all.js.map

package/dist/handlers/validate-all.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-all.js","sourceRoot":"","sources":["../../src/handlers/validate-all.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAGpD,gEAAgE;AAChE,MAAM,CAAC,MAAM,WAAW,GAAe,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;IACzD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;IAEzF,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;QAChC,IAAI,EAAE;YACJ,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB;KACF,CAAA;AACH,CAAC,CAAA"}

package/dist/handlers/version-retention.d.ts

@@ -0,0 +1,6 @@
+import type { ApiHandler } from '../types.js';
+/** GET /api/versions/stats — version count statistics */
+export declare const versionStats: ApiHandler;
+/** POST /api/versions/purge — purge old versions */
+export declare const versionPurge: ApiHandler;
+//# sourceMappingURL=version-retention.d.ts.map

package/dist/handlers/version-retention.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-retention.d.ts","sourceRoot":"","sources":["../../src/handlers/version-retention.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAG7C,yDAAyD;AACzD,eAAO,MAAM,YAAY,EAAE,UAO1B,CAAA;AAED,oDAAoD;AACpD,eAAO,MAAM,YAAY,EAAE,UAgC1B,CAAA"}