@nocobase/app-plugin-projects 0.0.0-stage → 0.1.0-beta.2

package/dist/server/domains/invitations/invitation.routes.d.ts

@@ -0,0 +1,6 @@
+import type { Hono } from 'hono';
+import { type ViewerEnv } from '../../access/request.js';
+import type { InvitationService } from './invitation.service.js';
+/** `/api/projects/invitations`: list, invite several addresses, send again, revoke. */
+export declare function createInvitationRoutes(invitations: InvitationService): Hono<ViewerEnv>;
+//# sourceMappingURL=invitation.routes.d.ts.map

package/dist/server/domains/invitations/invitation.routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitation.routes.d.ts","sourceRoot":"","sources":["../../../../server/domains/invitations/invitation.routes.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAEjC,OAAO,EAAY,KAAK,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAUnE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAKjE,uFAAuF;AACvF,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,iBAAiB,GAC7B,IAAI,CAAC,SAAS,CAAC,CAkHjB"}

package/dist/server/domains/invitations/invitation.routes.js

@@ -0,0 +1,86 @@
+import { apiErrorResponse, apiErrorResponses, apiValidator, cliRoute, dataResponse, describeRoute, emptyResponse, listResponse, } from '@nocobase/app-server/router';
+import { viewerOf } from '../../access/request.js';
+import { boundedList, domainRouter, tags } from '../../kernel/http.js';
+import { BoundedListMeta, CreateInvitationsBody, InvitationParams, InvitationResultSchema, InvitationResultsSchema, InvitationSchema, } from '../../routes/schemas.js';
+const access = 'Needs `invite` on the `pm.members` settings item, or leading a project: a lead invites only into projects they lead and manages only their own invitations.';
+/** `/api/projects/invitations`: list, invite several addresses, send again, revoke. */
+export function createInvitationRoutes(invitations) {
+    const routes = domainRouter();
+    const origin = (url) => new URL(url).origin;
+    routes.get('/', describeRoute({
+        tags,
+        summary: 'List pending and expired invitations',
+        operationId: 'projectsListInvitations',
+        ...cliRoute({
+            command: 'project invitation list',
+            columns: ['id', 'email', 'status', 'expiresAt', 'sentAt'],
+        }),
+        description: access,
+        responses: {
+            200: listResponse(InvitationSchema, BoundedListMeta),
+            ...apiErrorResponses,
+        },
+    }), async (context) => context.json(boundedList(await invitations.list(viewerOf(context)))));
+    routes.post('/', describeRoute({
+        tags,
+        summary: 'Invite people',
+        operationId: 'projectsCreateInvitations',
+        ...cliRoute({
+            command: 'project invitation create',
+            flags: {
+                emails: { name: 'email' },
+                projectIds: { name: 'project' },
+            },
+            examples: [
+                'project invitation create --email ada@example.com --project <project>',
+            ],
+        }),
+        description: `${access} An address that already has an account is added to the projects at once; every other address is sent a link. One result per address.`,
+        responses: {
+            201: dataResponse(InvitationResultsSchema),
+            ...apiErrorResponses,
+        },
+    }), apiValidator('json', CreateInvitationsBody), async (context) => context.json({
+        data: {
+            results: await invitations.create(viewerOf(context), context.req.valid('json'), origin(context.req.url)),
+        },
+    }, 201));
+    routes.post('/:invitationId/resend', describeRoute({
+        tags,
+        summary: 'Send an invitation again',
+        operationId: 'projectsResendInvitation',
+        ...cliRoute({
+            command: 'project invitation resend',
+            flags: { invitationId: { name: 'invitation' } },
+        }),
+        description: access,
+        responses: {
+            200: dataResponse(InvitationResultSchema),
+            ...apiErrorResponses,
+            404: apiErrorResponse(404),
+        },
+    }), apiValidator('param', InvitationParams), async (context) => context.json({
+        data: await invitations.resend(viewerOf(context), context.req.valid('param').invitationId, origin(context.req.url)),
+    }));
+    routes.delete('/:invitationId', describeRoute({
+        tags,
+        summary: 'Revoke an invitation',
+        operationId: 'projectsRevokeInvitation',
+        ...cliRoute({
+            command: 'project invitation revoke',
+            flags: { invitationId: { name: 'invitation' } },
+            confirm: 'Revoke this invitation? Its link stops working.',
+        }),
+        description: access,
+        responses: {
+            204: emptyResponse(),
+            ...apiErrorResponses,
+            404: apiErrorResponse(404),
+        },
+    }), apiValidator('param', InvitationParams), async (context) => {
+        await invitations.revoke(viewerOf(context), context.req.valid('param').invitationId);
+        return context.body(null, 204);
+    });
+    return routes;
+}
+//# sourceMappingURL=invitation.routes.js.map

package/dist/server/domains/invitations/invitation.routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitation.routes.js","sourceRoot":"","sources":["../../../../server/domains/invitations/invitation.routes.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,QAAQ,EACR,YAAY,EACZ,aAAa,EACb,aAAa,EACb,YAAY,GACb,MAAM,6BAA6B,CAAC;AAGrC,OAAO,EAAE,QAAQ,EAAkB,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,gBAAgB,EAChB,sBAAsB,EACtB,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AAGjC,MAAM,MAAM,GACV,6JAA6J,CAAC;AAEhK,uFAAuF;AACvF,MAAM,UAAU,sBAAsB,CACpC,WAA8B;IAE9B,MAAM,MAAM,GAAG,YAAY,EAAa,CAAC;IACzC,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,MAAM,CAAC,GAAG,CACR,GAAG,EACH,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,sCAAsC;QAC/C,WAAW,EAAE,yBAAyB;QACtC,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,yBAAyB;YAClC,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC;SAC1D,CAAC;QACF,WAAW,EAAE,MAAM;QACnB,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,gBAAgB,EAAE,eAAe,CAAC;YACpD,GAAG,iBAAiB;SACrB;KACF,CAAC,EACF,KAAK,EAAE,OAAO,EAAE,EAAE,CAChB,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CACvE,CAAC;IACF,MAAM,CAAC,IAAI,CACT,GAAG,EACH,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,eAAe;QACxB,WAAW,EAAE,2BAA2B;QACxC,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,2BAA2B;YACpC,KAAK,EAAE;gBACL,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;gBACzB,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;aAChC;YACD,QAAQ,EAAE;gBACR,uEAAuE;aACxE;SACF,CAAC;QACF,WAAW,EAAE,GAAG,MAAM,uIAAuI;QAC7J,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,uBAAuB,CAAC;YAC1C,GAAG,iBAAiB;SACrB;KACF,CAAC,EACF,YAAY,CAAC,MAAM,EAAE,qBAAqB,CAAC,EAC3C,KAAK,EAAE,OAAO,EAAE,EAAE,CAChB,OAAO,CAAC,IAAI,CACV;QACE,IAAI,EAAE;YACJ,OAAO,EAAE,MAAM,WAAW,CAAC,MAAM,CAC/B,QAAQ,CAAC,OAAO,CAAC,EACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EACzB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CACxB;SACF;KACF,EACD,GAAG,CACJ,CACJ,CAAC;IACF,MAAM,CAAC,IAAI,CACT,uBAAuB,EACvB,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,0BAA0B;QACnC,WAAW,EAAE,0BAA0B;QACvC,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,2BAA2B;YACpC,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE;SAChD,CAAC;QACF,WAAW,EAAE,MAAM;QACnB,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,sBAAsB,CAAC;YACzC,GAAG,iBAAiB;YACpB,GAAG,EAAE,gBAAgB,CAAC,GAAG,CAAC;SAC3B;KACF,CAAC,EACF,YAAY,CAAC,OAAO,EAAE,gBAAgB,CAAC,EACvC,KAAK,EAAE,OAAO,EAAE,EAAE,CAChB,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,MAAM,WAAW,CAAC,MAAM,CAC5B,QAAQ,CAAC,OAAO,CAAC,EACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,YAAY,EACvC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CACxB;KACF,CAAC,CACL,CAAC;IACF,MAAM,CAAC,MAAM,CACX,gBAAgB,EAChB,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,sBAAsB;QAC/B,WAAW,EAAE,0BAA0B;QACvC,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,2BAA2B;YACpC,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE;YAC/C,OAAO,EAAE,iDAAiD;SAC3D,CAAC;QACF,WAAW,EAAE,MAAM;QACnB,SAAS,EAAE;YACT,GAAG,EAAE,aAAa,EAAE;YACpB,GAAG,iBAAiB;YACpB,GAAG,EAAE,gBAAgB,CAAC,GAAG,CAAC;SAC3B;KACF,CAAC,EACF,YAAY,CAAC,OAAO,EAAE,gBAAgB,CAAC,EACvC,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,WAAW,CAAC,MAAM,CACtB,QAAQ,CAAC,OAAO,CAAC,EACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,YAAY,CACxC,CAAC;QACF,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC,CACF,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/server/domains/invitations/invitation.service.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Invitations from the member settings, on the user management plugin's invitations: it sends the links and creates
+ * the accounts; this domain decides who may invite into which projects and adds invitees to them.
+ *
+ * - Whoever holds `invite` on `pm.members` invites into any projects (or none), and sees and manages every pending
+ *   invitation; a project lead only into projects they lead, and at least one, and only their own invitations.
+ * - An address that already has an account is added to the projects at once (`added`, or `alreadyMember` when there
+ *   was nothing to join); nothing is sent.
+ * - Every other address gets a link. The projects travel with the invitation as its data, so revoking or expiring it
+ *   drops them too; accepting it (`accepted`) makes the new account a member and adds it to the projects that still
+ *   exist, in the acceptance's transaction.
+ */
+import { type UserInvitationAcceptedContext, type UserManagementService } from '@nocobase/app-plugin-users/server/tokens';
+import type { CreateInvitationsRequest, Invitation, InvitationResult } from '../../../shared/invitations.js';
+import { type Viewer } from '../../access/viewer.js';
+import type { IdSource } from '../../kernel/ids.js';
+import type { TxRunner } from '../../kernel/tx.js';
+import type { MemberService } from '../members/index.js';
+/** The part of the user management plugin this domain uses. */
+export type UserInvitations = Pick<UserManagementService, 'invite' | 'listInvitations' | 'getInvitation' | 'resendInvitation' | 'revokeInvitation'>;
+/** Where this plugin's part of an invitation's data lives. */
+export declare const INVITATION_DATA_KEY = "@nocobase/app-plugin-projects";
+export interface InvitationService {
+    list(viewer: Viewer): Promise<Invitation[]>;
+    create(viewer: Viewer, input: CreateInvitationsRequest, origin: string): Promise<InvitationResult[]>;
+    resend(viewer: Viewer, id: string, origin: string): Promise<InvitationResult>;
+    revoke(viewer: Viewer, id: string): Promise<void>;
+    /** An invitation was accepted: registered with the user management plugin's `onInvitationAccepted`. */
+    accepted(context: UserInvitationAcceptedContext): Promise<void>;
+}
+export interface InvitationDeps {
+    readonly tx: TxRunner;
+    readonly ids: IdSource;
+    readonly members: MemberService;
+    readonly invitations: UserInvitations;
+}
+export declare function createInvitationService(deps: InvitationDeps): InvitationService;
+//# sourceMappingURL=invitation.service.d.ts.map

package/dist/server/domains/invitations/invitation.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitation.service.d.ts","sourceRoot":"","sources":["../../../../server/domains/invitations/invitation.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAGL,KAAK,6BAA6B,EAElC,KAAK,qBAAqB,EAC3B,MAAM,0CAA0C,CAAC;AAGlD,OAAO,KAAK,EACV,wBAAwB,EACxB,UAAU,EACV,gBAAgB,EACjB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAiB,KAAK,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAQpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAQzD,+DAA+D;AAC/D,MAAM,MAAM,eAAe,GAAG,IAAI,CAChC,qBAAqB,EACnB,QAAQ,GACR,iBAAiB,GACjB,eAAe,GACf,kBAAkB,GAClB,kBAAkB,CACrB,CAAC;AAEF,8DAA8D;AAC9D,eAAO,MAAM,mBAAmB,kCAAkC,CAAC;AAMnE,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC5C,MAAM,CACJ,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,wBAAwB,EAC/B,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC/B,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC9E,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,uGAAuG;IACvG,QAAQ,CAAC,OAAO,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjE;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC;CACvC;AAgFD,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,cAAc,GACnB,iBAAiB,CA6GnB"}

package/dist/server/domains/invitations/invitation.service.js

@@ -0,0 +1,162 @@
+/**
+ * Invitations from the member settings, on the user management plugin's invitations: it sends the links and creates
+ * the accounts; this domain decides who may invite into which projects and adds invitees to them.
+ *
+ * - Whoever holds `invite` on `pm.members` invites into any projects (or none), and sees and manages every pending
+ *   invitation; a project lead only into projects they lead, and at least one, and only their own invitations.
+ * - An address that already has an account is added to the projects at once (`added`, or `alreadyMember` when there
+ *   was nothing to join); nothing is sent.
+ * - Every other address gets a link. The projects travel with the invitation as its data, so revoking or expiring it
+ *   drops them too; accepting it (`accepted`) makes the new account a member and adds it to the projects that still
+ *   exist, in the acceptance's transaction.
+ */
+import { UserManagementError, } from '@nocobase/app-plugin-users/server/tokens';
+import { canUseSetting } from '../../access/viewer.js';
+import { unique } from '../../kernel/db.js';
+import { DomainError, forbidden, invalid, notFound, } from '../../kernel/errors.js';
+import { canManageProject, joinProject, projectNames, projectRelation, } from '../projects/index.js';
+/** Where this plugin's part of an invitation's data lives. */
+export const INVITATION_DATA_KEY = '@nocobase/app-plugin-projects';
+const managesInvitations = (viewer) => canUseSetting(viewer, 'pm.members', 'invite');
+function dataOf(data) {
+    const value = data[INVITATION_DATA_KEY];
+    if (!value || !Array.isArray(value.projectIds))
+        return undefined;
+    return {
+        projectIds: value.projectIds.filter((id) => typeof id === 'string'),
+    };
+}
+function validateProjectIds(value) {
+    if (value === undefined || value === null)
+        return [];
+    if (!Array.isArray(value) ||
+        value.some((id) => typeof id !== 'string' || !id))
+        throw invalid('INVALID_PROJECTS', 'projectIds must be an array of ids.');
+    return unique(value);
+}
+/** A manager invites into any existing projects; anyone else into at least one, and must lead every one. */
+async function checkInviter(conn, viewer, projectIds) {
+    const manager = managesInvitations(viewer);
+    if (!manager && projectIds.length === 0)
+        throw forbidden('Only someone who may invite members may invite without choosing a project.');
+    for (const projectId of projectIds) {
+        const relation = await projectRelation(conn, viewer, projectId);
+        if (!relation || (!manager && !relation.visible))
+            throw invalid('INVALID_PROJECT', `Project ${projectId} does not exist.`);
+        if (!manager && !canManageProject(viewer, relation))
+            throw forbidden('Only the project lead or someone who may invite members may invite into this project.');
+    }
+}
+/** The user management plugin's refusals, with their codes, as this plugin's errors. */
+async function fromUsers(call) {
+    try {
+        return await call();
+    }
+    catch (error) {
+        if (!(error instanceof UserManagementError))
+            throw error;
+        const kind = error.status === 404
+            ? 'notFound'
+            : error.status === 409
+                ? 'conflict'
+                : 'invalid';
+        throw new DomainError(kind, error.code, error.message, undefined, {
+            domain: 'users',
+        });
+    }
+}
+/** A sent link as the member settings show it. */
+function sentResult(result) {
+    return result.outcome === 'invited'
+        ? {
+            email: result.email,
+            outcome: 'invited',
+            emailSent: result.emailSent,
+            ...(result.inviteUrl ? { inviteUrl: result.inviteUrl } : {}),
+        }
+        : { email: result.email, outcome: 'alreadyMember' };
+}
+export function createInvitationService(deps) {
+    /** An invitation of this plugin that the viewer may manage: a manager any, others only their own. */
+    async function managed(viewer, id) {
+        const invitation = await deps.invitations.getInvitation(id);
+        if (!invitation ||
+            !dataOf(invitation.data) ||
+            (invitation.invitedBy.id !== viewer.userId && !managesInvitations(viewer)))
+            throw notFound('Invitation');
+        return invitation;
+    }
+    return {
+        async list(viewer) {
+            const rows = (await deps.invitations.listInvitations(managesInvitations(viewer) ? {} : { invitedBy: viewer.userId })).flatMap((row) => {
+                const data = dataOf(row.data);
+                return data ? [{ row, data }] : [];
+            });
+            const names = await projectNames(deps.tx.read(), unique(rows.flatMap(({ data }) => data.projectIds)));
+            return rows.map(({ row, data }) => ({
+                id: row.id,
+                email: row.email,
+                status: row.status,
+                projects: data.projectIds.flatMap((id) => {
+                    const name = names.get(id);
+                    return name === undefined ? [] : [{ id, name }];
+                }),
+                invitedBy: { userId: row.invitedBy.id, name: row.invitedBy.name },
+                expiresAt: row.expiresAt,
+                sentAt: row.sentAt,
+                createdAt: row.createdAt,
+            }));
+        },
+        async create(viewer, input, origin) {
+            if (!Array.isArray(input.emails))
+                throw invalid('INVALID_EMAILS', 'emails must be a list of addresses.');
+            const projectIds = validateProjectIds(input.projectIds);
+            const conn = deps.tx.read();
+            await checkInviter(conn, viewer, projectIds);
+            const names = await projectNames(conn, projectIds);
+            const data = { projectIds };
+            const results = await fromUsers(() => deps.invitations.invite({
+                emails: input.emails,
+                invitedBy: viewer.userId,
+                data: { [INVITATION_DATA_KEY]: data },
+                summary: projectIds.flatMap((id) => names.get(id) ?? []),
+                origin,
+            }));
+            const joined = new Set();
+            await deps.tx.run(async (tx) => {
+                for (const result of results) {
+                    if (result.outcome !== 'existingUser')
+                        continue;
+                    for (const projectId of projectIds)
+                        if (await joinProject(tx.conn, deps.ids.next(), projectId, result.userId))
+                            joined.add(result.email);
+                }
+            });
+            return results.map((result) => result.outcome === 'existingUser'
+                ? {
+                    email: result.email,
+                    outcome: joined.has(result.email) ? 'added' : 'alreadyMember',
+                }
+                : sentResult(result));
+        },
+        async resend(viewer, id, origin) {
+            await managed(viewer, id);
+            return sentResult(await fromUsers(() => deps.invitations.resendInvitation(id, { origin })));
+        },
+        async revoke(viewer, id) {
+            await managed(viewer, id);
+            await fromUsers(() => deps.invitations.revokeInvitation(id));
+        },
+        async accepted({ connection, userId, data }) {
+            const invitation = dataOf(data);
+            if (!invitation)
+                return;
+            await deps.members.admit(connection, userId);
+            const names = await projectNames(connection, invitation.projectIds);
+            for (const projectId of invitation.projectIds)
+                if (names.has(projectId))
+                    await joinProject(connection, deps.ids.next(), projectId, userId);
+        },
+    };
+}
+//# sourceMappingURL=invitation.service.js.map

package/dist/server/domains/invitations/invitation.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitation.service.js","sourceRoot":"","sources":["../../../../server/domains/invitations/invitation.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EACL,mBAAmB,GAKpB,MAAM,0CAA0C,CAAC;AAQlD,OAAO,EAAE,aAAa,EAAe,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EACL,WAAW,EACX,SAAS,EACT,OAAO,EACP,QAAQ,GACT,MAAM,wBAAwB,CAAC;AAIhC,OAAO,EACL,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAY9B,8DAA8D;AAC9D,MAAM,CAAC,MAAM,mBAAmB,GAAG,+BAA+B,CAAC;AA0BnE,MAAM,kBAAkB,GAAG,CAAC,MAAc,EAAE,EAAE,CAC5C,aAAa,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;AAEhD,SAAS,MAAM,CACb,IAAuC;IAEvC,MAAM,KAAK,GAAG,IAAI,CAAC,mBAAmB,CACS,CAAC;IAChD,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IACjE,OAAO;QACL,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM,CACjC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAC7C;KACF,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACrD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC;QAEjD,MAAM,OAAO,CAAC,kBAAkB,EAAE,qCAAqC,CAAC,CAAC;IAC3E,OAAO,MAAM,CAAC,KAAiB,CAAC,CAAC;AACnC,CAAC;AAED,4GAA4G;AAC5G,KAAK,UAAU,YAAY,CACzB,IAAwB,EACxB,MAAc,EACd,UAA6B;IAE7B,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QACrC,MAAM,SAAS,CACb,4EAA4E,CAC7E,CAAC;IACJ,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAChE,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC9C,MAAM,OAAO,CAAC,iBAAiB,EAAE,WAAW,SAAS,kBAAkB,CAAC,CAAC;QAC3E,IAAI,CAAC,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC;YACjD,MAAM,SAAS,CACb,uFAAuF,CACxF,CAAC;IACN,CAAC;AACH,CAAC;AAED,wFAAwF;AACxF,KAAK,UAAU,SAAS,CAAI,IAAsB;IAChD,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,mBAAmB,CAAC;YAAE,MAAM,KAAK,CAAC;QACzD,MAAM,IAAI,GACR,KAAK,CAAC,MAAM,KAAK,GAAG;YAClB,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG;gBACpB,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,SAAS,CAAC;QAClB,MAAM,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE;YAChE,MAAM,EAAE,OAAO;SAChB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,kDAAkD;AAClD,SAAS,UAAU,CAAC,MAA4B;IAC9C,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS;QACjC,CAAC,CAAC;YACE,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,SAAS;YAClB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D;QACH,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,IAAoB;IAEpB,qGAAqG;IACrG,KAAK,UAAU,OAAO,CAAC,MAAc,EAAE,EAAU;QAC/C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QAC5D,IACE,CAAC,UAAU;YACX,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;YACxB,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAE1E,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC/B,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,MAAM;YACf,MAAM,IAAI,GAAG,CACX,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CACpC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,CAC/D,CACF,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBAChB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC9B,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,CAAC,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAC9B,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,EACd,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CACpD,CAAC;YACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;gBAClC,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;oBACvC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC3B,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClD,CAAC,CAAC;gBACF,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE;gBACjE,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,SAAS,EAAE,GAAG,CAAC,SAAS;aACzB,CAAC,CAAC,CAAC;QACN,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM;YAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;gBAC9B,MAAM,OAAO,CAAC,gBAAgB,EAAE,qCAAqC,CAAC,CAAC;YACzE,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACxD,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;YAC7C,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACnD,MAAM,IAAI,GAAmB,EAAE,UAAU,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,CACnC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;gBACtB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,SAAS,EAAE,MAAM,CAAC,MAAM;gBACxB,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE;gBACrC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;gBACxD,MAAM;aACP,CAAC,CACH,CAAC;YACF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;YACjC,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;gBAC7B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;oBAC7B,IAAI,MAAM,CAAC,OAAO,KAAK,cAAc;wBAAE,SAAS;oBAChD,KAAK,MAAM,SAAS,IAAI,UAAU;wBAChC,IACE,MAAM,WAAW,CACf,EAAE,CAAC,IAAI,EACP,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EACf,SAAS,EACT,MAAM,CAAC,MAAM,CACd;4BAED,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC,CAAC,CAAC;YACH,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAC5B,MAAM,CAAC,OAAO,KAAK,cAAc;gBAC/B,CAAC,CAAC;oBACE,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;iBAC9D;gBACH,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CACvB,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM;YAC7B,MAAM,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC1B,OAAO,UAAU,CACf,MAAM,SAAS,CAAC,GAAG,EAAE,CACnB,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAClD,CACF,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE;YACrB,MAAM,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC1B,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/D,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE;YACzC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,CAAC,UAAU;gBAAE,OAAO;YACxB,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAC7C,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;YACpE,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,UAAU;gBAC3C,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;oBACtB,MAAM,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACxE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/domains/issues/index.d.ts

@@ -0,0 +1,10 @@
+export { createIssueService, type IssueDeps, type IssueService, type EventCause, type EventMove, type EventTarget, type IssueUpdateOutcome, } from './issue.service.js';
+export { childCounts, findIssue, findIssueRow, findIssues, issuesOfProject, liveChildren, touchIssueActivity, updateIssue, } from './issue.store.js';
+export { canSee, issueVisibleTo, managesIssue, requireEditor, requireVisible, requireVisible as requireVisibleIssue, } from './issue.access.js';
+export type { EventActor } from './issue.events.js';
+export { createIssueQueries, MATCHING_LIMIT, type IssueMatches, type IssueMatchScope, type IssueQueries, } from './issue.queries.js';
+export { CONTEXT_COMMENT_LIMIT, createIssueContextProvider, type IssueContext, type IssueContextDirectory, type IssueContextFile, type IssueContextProvider, } from './issue.context.js';
+export { createIssueRoutes } from './issue.routes.js';
+export { createProjectIssues } from './issue.projects.js';
+export { isTerminal, noApprovals, noRelations, noTriggers, type CommentChange, type IssueApprovals, type IssueChange, type IssueExtras, type IssueRelations, type IssueRules, type IssueTriggers, type StatusCatalog, type StatusCatalogs, } from './ports.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/domains/issues/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/domains/issues/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,kBAAkB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,WAAW,EACX,SAAS,EACT,YAAY,EACZ,UAAU,EACV,eAAe,EACf,YAAY,EACZ,kBAAkB,EAClB,WAAW,GACZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,MAAM,EACN,cAAc,EACd,YAAY,EACZ,aAAa,EACb,cAAc,EACd,cAAc,IAAI,mBAAmB,GACtC,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,YAAY,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,qBAAqB,EACrB,0BAA0B,EAC1B,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EACL,UAAU,EACV,WAAW,EACX,WAAW,EACX,UAAU,EACV,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,cAAc,GACpB,MAAM,YAAY,CAAC"}

package/dist/server/domains/issues/index.js

@@ -0,0 +1,9 @@
+export { createIssueService, } from './issue.service.js';
+export { childCounts, findIssue, findIssueRow, findIssues, issuesOfProject, liveChildren, touchIssueActivity, updateIssue, } from './issue.store.js';
+export { canSee, issueVisibleTo, managesIssue, requireEditor, requireVisible, requireVisible as requireVisibleIssue, } from './issue.access.js';
+export { createIssueQueries, MATCHING_LIMIT, } from './issue.queries.js';
+export { CONTEXT_COMMENT_LIMIT, createIssueContextProvider, } from './issue.context.js';
+export { createIssueRoutes } from './issue.routes.js';
+export { createProjectIssues } from './issue.projects.js';
+export { isTerminal, noApprovals, noRelations, noTriggers, } from './ports.js';
+//# sourceMappingURL=index.js.map

package/dist/server/domains/issues/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../server/domains/issues/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,GAOnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,WAAW,EACX,SAAS,EACT,YAAY,EACZ,UAAU,EACV,eAAe,EACf,YAAY,EACZ,kBAAkB,EAClB,WAAW,GACZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,MAAM,EACN,cAAc,EACd,YAAY,EACZ,aAAa,EACb,cAAc,EACd,cAAc,IAAI,mBAAmB,GACtC,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,kBAAkB,EAClB,cAAc,GAIf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,qBAAqB,EACrB,0BAA0B,GAK3B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EACL,UAAU,EACV,WAAW,EACX,WAAW,EACX,UAAU,GAUX,MAAM,YAAY,CAAC"}

package/dist/server/domains/issues/issue.access.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Who may see and change an issue (the `pm.issues` business actions of `shared/access.ts`).
+ *
+ * Each action reaches every issue, none, or the issues related to a user of the viewer's set (`Scope`):
+ *
+ * | Action          | an issue related to a user                                       |
+ * | --------------- | ---------------------------------------------------------------- |
+ * | view            | without a project, or in a project the set may see               |
+ * | create          | the same: without a project, or into a project the set sees      |
+ * | edit            | the same issues; every change to an issue needs it               |
+ * | comment         | the same issues: comment, reply, resolve threads                 |
+ * | moderate-comments | delete others' comments on issues a user of the set owns or whose project they lead |
+ * | close           | issues a user of the set owns, or in a project they lead         |
+ * | change-owner    | the same                                                         |
+ * | delete, restore | never: only `all`                                                |
+ *
+ * An issue the viewer may not see is 404. Deleted issues are invisible except to those who may delete issues.
+ */
+import type { DatabaseConnection, FilterBuilder, FilterNode } from '@nocobase/db';
+import type { Issue } from '../../../shared/issues.js';
+import { type Viewer } from '../../access/viewer.js';
+/** The live issues the viewer may see, as a filter on `pmIssues`. */
+export declare function visibleIssues(f: FilterBuilder, viewer: Viewer): FilterNode;
+/** Deleted issues, for those who may delete issues. */
+export declare function deletedIssues(f: FilterBuilder, viewer: Viewer): FilterNode;
+/** Whether someone with these permissions may see the issue: the viewer, or a person a notice would go to. */
+export declare function issueVisibleTo(conn: DatabaseConnection, viewer: Pick<Viewer, 'userId' | 'permissions'>, issue: Issue): Promise<boolean>;
+/** Whether the viewer may see the issue: it is live, and in no project or one they may see. */
+export declare function canSee(conn: DatabaseConnection, viewer: Viewer, issue: Issue): Promise<boolean>;
+/** The issue, 404 unless it exists and the viewer may see it. */
+export declare function requireVisible(conn: DatabaseConnection, viewer: Viewer, idOrKey: string): Promise<Issue>;
+/** Creating an issue: `related` is checked on its project (`issue.fields.ts`). */
+export declare function requireCreator(viewer: Viewer): void;
+export declare function requireEditor(viewer: Viewer): void;
+export declare function requireDeleter(viewer: Viewer): void;
+/** The actions whose issues are related to the users who own them or lead their project. */
+export type ManagedAction = 'close' | 'change-owner' | 'moderate-comments';
+/** `all`, or a user of the viewer's set owns the issue or leads its project. */
+export declare function managesIssue(conn: DatabaseConnection, viewer: Viewer, issue: Issue, action: ManagedAction): Promise<boolean>;
+export declare function requireCloser(conn: DatabaseConnection, viewer: Viewer, issue: Issue): Promise<void>;
+export declare function requireOwnerChanger(conn: DatabaseConnection, viewer: Viewer, issue: Issue): Promise<void>;
+//# sourceMappingURL=issue.access.d.ts.map

package/dist/server/domains/issues/issue.access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"issue.access.d.ts","sourceRoot":"","sources":["../../../../server/domains/issues/issue.access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EACV,kBAAkB,EAClB,aAAa,EACb,UAAU,EACX,MAAM,cAAc,CAAC;AAGtB,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAIL,KAAK,MAAM,EACZ,MAAM,wBAAwB,CAAC;AAKhC,qEAAqE;AACrE,wBAAgB,aAAa,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,CAW1E;AAqBD,uDAAuD;AACvD,wBAAgB,aAAa,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,CAU1E;AAED,8GAA8G;AAC9G,wBAAsB,cAAc,CAClC,IAAI,EAAE,kBAAkB,EACxB,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,GAAG,aAAa,CAAC,EAC9C,KAAK,EAAE,KAAK,GACX,OAAO,CAAC,OAAO,CAAC,CAMlB;AAED,+FAA+F;AAC/F,wBAAsB,MAAM,CAC1B,IAAI,EAAE,kBAAkB,EACxB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,KAAK,GACX,OAAO,CAAC,OAAO,CAAC,CAUlB;AAED,iEAAiE;AACjE,wBAAsB,cAAc,CAClC,IAAI,EAAE,kBAAkB,EACxB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,KAAK,CAAC,CAIhB;AAED,kFAAkF;AAClF,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAEnD;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAElD;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAGnD;AAED,4FAA4F;AAC5F,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,cAAc,GAAG,mBAAmB,CAAC;AAE3E,gFAAgF;AAChF,wBAAsB,YAAY,CAChC,IAAI,EAAE,kBAAkB,EACxB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,OAAO,CAAC,CAQlB;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,kBAAkB,EACxB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,KAAK,GACX,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,kBAAkB,EACxB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,KAAK,GACX,OAAO,CAAC,IAAI,CAAC,CAKf"}

package/dist/server/domains/issues/issue.access.js

@@ -0,0 +1,109 @@
+import { reaches } from '../../../shared/access.js';
+import { inProjectScope, requireAction, scopeOf, } from '../../access/viewer.js';
+import { forbidden, notFound } from '../../kernel/errors.js';
+import { projectRelation, visibleProjects } from '../projects/index.js';
+import { findIssue } from './issue.store.js';
+/** The live issues the viewer may see, as a filter on `pmIssues`. */
+export function visibleIssues(f, viewer) {
+    const visible = byScope(f, viewer);
+    if (!viewer.projectIds)
+        return visible;
+    // A scoped key limited to some projects sees only their issues, and none without a project.
+    // `id` is never null, so `eq(null)` matches nothing without a placeholder value, which PostgreSQL may refuse.
+    return f.and([
+        visible,
+        viewer.projectIds.length === 0
+            ? f.string('id').eq(null)
+            : f.or(viewer.projectIds.map((id) => f.string('projectId').eq(id))),
+    ]);
+}
+function byScope(f, viewer) {
+    const live = f.date('deletedAt').empty();
+    const scope = scopeOf(viewer, 'pm.issues', 'view');
+    if (scope === 'all')
+        return live;
+    if (scope === 'none')
+        return f.string('id').eq(null);
+    const projects = visibleProjects(f, viewer, scope);
+    return f.and([
+        live,
+        f.or([
+            f.string('projectId').eq(null),
+            f
+                .relation('project')
+                .some((project) => projects === null ? project.string('id').ne(null) : projects),
+        ]),
+    ]);
+}
+/** Deleted issues, for those who may delete issues. */
+export function deletedIssues(f, viewer) {
+    requireDeleter(viewer);
+    const deleted = f.date('deletedAt').notEmpty();
+    if (!viewer.projectIds)
+        return deleted;
+    return f.and([
+        deleted,
+        viewer.projectIds.length === 0
+            ? f.string('id').eq(null)
+            : f.or(viewer.projectIds.map((id) => f.string('projectId').eq(id))),
+    ]);
+}
+/** Whether someone with these permissions may see the issue: the viewer, or a person a notice would go to. */
+export async function issueVisibleTo(conn, viewer, issue) {
+    return canSee(conn, { ...viewer, actor: { type: 'user', id: viewer.userId } }, issue);
+}
+/** Whether the viewer may see the issue: it is live, and in no project or one they may see. */
+export async function canSee(conn, viewer, issue) {
+    if (issue.deletedAt)
+        return false;
+    if (!inProjectScope(viewer, issue.projectId))
+        return false;
+    const scope = scopeOf(viewer, 'pm.issues', 'view');
+    if (scope === 'all' || scope === 'none')
+        return scope === 'all';
+    if (!issue.projectId)
+        return true;
+    return ((await projectRelation(conn, viewer, issue.projectId, scope))?.visible ??
+        false);
+}
+/** The issue, 404 unless it exists and the viewer may see it. */
+export async function requireVisible(conn, viewer, idOrKey) {
+    const issue = await findIssue(conn, idOrKey);
+    if (!issue || !(await canSee(conn, viewer, issue)))
+        throw notFound('Issue');
+    return issue;
+}
+/** Creating an issue: `related` is checked on its project (`issue.fields.ts`). */
+export function requireCreator(viewer) {
+    requireAction(viewer, 'pm.issues', 'create', 'You may not create issues.');
+}
+export function requireEditor(viewer) {
+    requireAction(viewer, 'pm.issues', 'edit', 'You may not change issues.');
+}
+export function requireDeleter(viewer) {
+    if (scopeOf(viewer, 'pm.issues', 'delete') !== 'all')
+        throw forbidden('Only an administrator may delete issues.');
+}
+/** `all`, or a user of the viewer's set owns the issue or leads its project. */
+export async function managesIssue(conn, viewer, issue, action) {
+    if (!inProjectScope(viewer, issue.projectId))
+        return false;
+    const scope = scopeOf(viewer, 'pm.issues', action);
+    if (scope === 'all' || scope === 'none')
+        return scope === 'all';
+    if (reaches(scope, issue.ownerUserId))
+        return true;
+    if (!issue.projectId)
+        return false;
+    const relation = await projectRelation(conn, viewer, issue.projectId);
+    return reaches(scope, relation?.project.leadUserId);
+}
+export async function requireCloser(conn, viewer, issue) {
+    if (!(await managesIssue(conn, viewer, issue, 'close')))
+        throw forbidden('Only the owner, the project lead or an administrator may close an issue.');
+}
+export async function requireOwnerChanger(conn, viewer, issue) {
+    if (!(await managesIssue(conn, viewer, issue, 'change-owner')))
+        throw forbidden('Only the owner, the project lead or an administrator may change the owner.');
+}
+//# sourceMappingURL=issue.access.js.map

package/dist/server/domains/issues/issue.access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"issue.access.js","sourceRoot":"","sources":["../../../../server/domains/issues/issue.access.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AAEpD,OAAO,EACL,cAAc,EACd,aAAa,EACb,OAAO,GAER,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,qEAAqE;AACrE,MAAM,UAAU,aAAa,CAAC,CAAgB,EAAE,MAAc;IAC5D,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,UAAU;QAAE,OAAO,OAAO,CAAC;IACvC,4FAA4F;IAC5F,8GAA8G;IAC9G,OAAO,CAAC,CAAC,GAAG,CAAC;QACX,OAAO;QACP,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;YAC5B,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC;YACzB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;KACtE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,CAAgB,EAAE,MAAc;IAC/C,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACnD,OAAO,CAAC,CAAC,GAAG,CAAC;QACX,IAAI;QACJ,CAAC,CAAC,EAAE,CAAC;YACH,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC;YAC9B,CAAC;iBACE,QAAQ,CAAC,SAAS,CAAC;iBACnB,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAChB,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAC7D;SACJ,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,aAAa,CAAC,CAAgB,EAAE,MAAc;IAC5D,cAAc,CAAC,MAAM,CAAC,CAAC;IACvB,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,UAAU;QAAE,OAAO,OAAO,CAAC;IACvC,OAAO,CAAC,CAAC,GAAG,CAAC;QACX,OAAO;QACP,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;YAC5B,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC;YACzB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;KACtE,CAAC,CAAC;AACL,CAAC;AAED,8GAA8G;AAC9G,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAwB,EACxB,MAA8C,EAC9C,KAAY;IAEZ,OAAO,MAAM,CACX,IAAI,EACJ,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,EACzD,KAAK,CACN,CAAC;AACJ,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,IAAwB,EACxB,MAAc,EACd,KAAY;IAEZ,IAAI,KAAK,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,KAAK,KAAK,KAAK,CAAC;IAChE,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAClC,OAAO,CACL,CAAC,MAAM,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,EAAE,OAAO;QACtE,KAAK,CACN,CAAC;AACJ,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAwB,EACxB,MAAc,EACd,OAAe;IAEf,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC5E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,4BAA4B,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,4BAA4B,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,IAAI,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,KAAK,KAAK;QAClD,MAAM,SAAS,CAAC,0CAA0C,CAAC,CAAC;AAChE,CAAC;AAKD,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAwB,EACxB,MAAc,EACd,KAAY,EACZ,MAAqB;IAErB,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,KAAK,KAAK,KAAK,CAAC;IAChE,IAAI,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACtE,OAAO,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAwB,EACxB,MAAc,EACd,KAAY;IAEZ,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,SAAS,CACb,0EAA0E,CAC3E,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAwB,EACxB,MAAc,EACd,KAAY;IAEZ,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;QAC5D,MAAM,SAAS,CACb,4EAA4E,CAC7E,CAAC;AACN,CAAC"}