@orthacms/users-admin 0.0.0-reserve.0

package/dist/lib/domain/value-objects/email/index.js

@@ -0,0 +1,45 @@
+/**
+ * A pragmatic email shape: a non-empty local part, an `@`, and a dotted domain
+ * with no spaces. Mirrors the server's invite-email rule closely enough for
+ * instant client feedback — the server remains the authority, so this is a
+ * format gate, not the final word.
+ */
+const EMAIL_PATTERN = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+/** Longest email the server accepts (mirrors the server's column limit). */
+const MAX_LENGTH = 320;
+/**
+ * A member's email address — a client-side value object mirroring the server's
+ * invite-email rule. It exists so the invite form's email field and its submit
+ * guard validate one rule rather than each re-testing an inline `z.email()` /
+ * regex literal. Format only — whether the address is already taken is a server
+ * concern surfaced as a `409` on submit.
+ */
+export class Email {
+    email;
+    constructor(email) {
+        this.email = email;
+    }
+    /**
+     * Whether `value` is a well-shaped email, without throwing — the check the
+     * invite form's field uses for instant, per-keystroke feedback.
+     */
+    static isValid(value) {
+        return (value.length > 0 &&
+            value.length <= MAX_LENGTH &&
+            EMAIL_PATTERN.test(value));
+    }
+    /**
+     * Builds an {@link Email}, throwing on an empty, over-long, or wrongly-shaped
+     * value. Used by the invite use-case as a last guard before the request.
+     */
+    static create(value) {
+        if (!Email.isValid(value)) {
+            throw new Error(`Invalid member email: "${value}"`);
+        }
+        return new Email(value);
+    }
+    /** The underlying email string. */
+    get value() {
+        return this.email;
+    }
+}

package/dist/lib/infrastructure/httpMemberGateway/index.d.ts

@@ -0,0 +1,12 @@
+import type { MemberGateway } from '../memberGateway';
+/**
+ * HTTP implementation of {@link MemberGateway} over the shared `apiClient`
+ * (axios, same-origin, cookie-authed; paths omit the `/api` dev-proxy prefix).
+ * Every member response is run through the `toMember` anti-corruption mapper,
+ * sessions and workspace options through their inline mappers, and every failure
+ * is normalized with `toApiError`, so callers see the admin's models and
+ * `ApiError`, never axios internals. The single place `apiClient` is used in
+ * this plugin.
+ */
+export declare const httpMemberGateway: MemberGateway;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/infrastructure/httpMemberGateway/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/infrastructure/httpMemberGateway/index.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAGR,aAAa,EAKhB,MAAM,kBAAkB,CAAC;AAqD1B;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,EAAE,aAuJ/B,CAAC"}

package/dist/lib/infrastructure/httpMemberGateway/index.js

@@ -0,0 +1,158 @@
+import { apiClient, asAvatarColor, initialsOf, toApiError } from '@orthacms/utils-admin';
+import { toInvitedMember, toMember, toMemberWithResetToken } from '../memberMapper';
+/** Maps a session from the wire to the admin's model (timestamps → `Date`). */
+function toUserSession(dto) {
+    return {
+        id: dto.id,
+        userAgent: dto.userAgent,
+        ipAddress: dto.ipAddress,
+        createdAt: new Date(dto.createdAt),
+        lastSeenAt: new Date(dto.lastUsedAt),
+        expiresAt: new Date(dto.expiresAt),
+        current: dto.current
+    };
+}
+/** Maps a workspace row to the admin's option shape (initials + avatar color). */
+function toWorkspaceOption(dto) {
+    return {
+        id: dto.id,
+        name: dto.name,
+        description: dto.description,
+        initials: initialsOf(dto.name),
+        color: asAvatarColor(dto.color)
+    };
+}
+/**
+ * HTTP implementation of {@link MemberGateway} over the shared `apiClient`
+ * (axios, same-origin, cookie-authed; paths omit the `/api` dev-proxy prefix).
+ * Every member response is run through the `toMember` anti-corruption mapper,
+ * sessions and workspace options through their inline mappers, and every failure
+ * is normalized with `toApiError`, so callers see the admin's models and
+ * `ApiError`, never axios internals. The single place `apiClient` is used in
+ * this plugin.
+ */
+export const httpMemberGateway = {
+    async list(params) {
+        try {
+            const { data } = await apiClient.get('/users', {
+                params
+            });
+            return {
+                items: data.items.map(toMember),
+                total: data.total,
+                page: data.page,
+                pageSize: data.pageSize
+            };
+        }
+        catch (error) {
+            throw toApiError(error);
+        }
+    },
+    async get(id) {
+        try {
+            const { data } = await apiClient.get(`/users/${id}`);
+            return toMember(data);
+        }
+        catch (error) {
+            throw toApiError(error);
+        }
+    },
+    async invite(input) {
+        try {
+            const { data } = await apiClient.post('/users/invites', input);
+            return toInvitedMember(data);
+        }
+        catch (error) {
+            throw toApiError(error);
+        }
+    },
+    async resendInvite(id) {
+        try {
+            const { data } = await apiClient.post(`/users/${id}/invites/resend`);
+            return toInvitedMember(data);
+        }
+        catch (error) {
+            throw toApiError(error);
+        }
+    },
+    async issuePasswordReset(id) {
+        try {
+            const { data } = await apiClient.post(`/users/${id}/password-reset`);
+            return toMemberWithResetToken(data);
+        }
+        catch (error) {
+            throw toApiError(error);
+        }
+    },
+    async revokeInvite(id) {
+        try {
+            await apiClient.delete(`/users/${id}/invites`);
+        }
+        catch (error) {
+            throw toApiError(error);
+        }
+    },
+    async update({ id, ...body }) {
+        try {
+            const { data } = await apiClient.patch(`/users/${id}`, body);
+            return toMember(data);
+        }
+        catch (error) {
+            throw toApiError(error);
+        }
+    },
+    async setStatus({ id, disabled }) {
+        const action = disabled ? 'disable' : 'enable';
+        try {
+            const { data } = await apiClient.post(`/users/${id}/${action}`);
+            return toMember(data);
+        }
+        catch (error) {
+            throw toApiError(error);
+        }
+    },
+    async addWorkspace({ userId, workspaceId }) {
+        try {
+            await apiClient.post(`/workspaces/${workspaceId}/members`, {
+                userId
+            });
+        }
+        catch (error) {
+            throw toApiError(error);
+        }
+    },
+    async removeWorkspace({ userId, workspaceId }) {
+        try {
+            await apiClient.delete(`/workspaces/${workspaceId}/members/${userId}`);
+        }
+        catch (error) {
+            throw toApiError(error);
+        }
+    },
+    async listSessions(id) {
+        try {
+            const { data } = await apiClient.get(`/users/${id}/sessions`);
+            return data.map(toUserSession);
+        }
+        catch (error) {
+            throw toApiError(error);
+        }
+    },
+    async revokeSession({ userId, sessionId }) {
+        try {
+            await apiClient.delete(`/users/${userId}/sessions/${sessionId}`);
+        }
+        catch (error) {
+            throw toApiError(error);
+        }
+    },
+    async listWorkspaceOptions() {
+        try {
+            const { data } = await apiClient.get('/workspaces');
+            return data.map(toWorkspaceOption);
+        }
+        catch (error) {
+            throw toApiError(error);
+        }
+    }
+};

package/dist/lib/infrastructure/inviteLink/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Builds the invite link an admin hands to an invitee, from the raw token the
+ * API returned once.
+ *
+ * The origin comes from the browser rather than server config on purpose: the
+ * admin is *already* looking at the app on the URL the invitee should use, so
+ * `window.location.origin` is right by construction — no `publicBaseUrl` to
+ * misconfigure, and no host header to poison. When the mailer lands (identity
+ * epic #11) the server will need its own configured base URL; this stays the
+ * copy-it-yourself path.
+ */
+export declare function inviteLinkFor(token: string): string;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/infrastructure/inviteLink/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/infrastructure/inviteLink/index.ts"],"names":[],"mappings":"AAQA;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAInD"}

package/dist/lib/infrastructure/inviteLink/index.js

@@ -0,0 +1,23 @@
+/**
+ * The admin route that redeems an invite. Owned by `@orthacms/identity-admin`
+ * (its router mounts `accept-invite` under `/identity`); repeated here because
+ * a path string is not worth a package dependency, and the e2e suites assert
+ * the built link so a drift would fail loudly.
+ */
+const ACCEPT_INVITE_PATH = '/identity/accept-invite';
+/**
+ * Builds the invite link an admin hands to an invitee, from the raw token the
+ * API returned once.
+ *
+ * The origin comes from the browser rather than server config on purpose: the
+ * admin is *already* looking at the app on the URL the invitee should use, so
+ * `window.location.origin` is right by construction — no `publicBaseUrl` to
+ * misconfigure, and no host header to poison. When the mailer lands (identity
+ * epic #11) the server will need its own configured base URL; this stays the
+ * copy-it-yourself path.
+ */
+export function inviteLinkFor(token) {
+    const url = new URL(ACCEPT_INVITE_PATH, window.location.origin);
+    url.searchParams.set('token', token);
+    return url.toString();
+}

package/dist/lib/infrastructure/memberGateway/index.d.ts

@@ -0,0 +1,103 @@
+import type { InvitedMember, Member, MemberList, MemberRole, MemberWithResetToken } from '../../domain/types/member';
+import type { UserSession } from '../../domain/types/session';
+import type { WorkspaceOption } from '../../domain/types/workspaceOption';
+import type { MembersListParams } from '../membersKeys';
+/** The shape the invite form submits. */
+export type InviteMemberInput = {
+    /** The invitee's email; the join link is sent here. */
+    email: string;
+    /** The global role granted on acceptance. */
+    role: MemberRole;
+    /** Optional display name (the invitee can set their own on accept). */
+    name?: string;
+    /** Workspaces to grant the new member access to (optional). */
+    workspaceIds?: string[];
+};
+/** A partial member edit; omitted fields are left unchanged. */
+export type UpdateMemberInput = {
+    /** The member to edit. */
+    id: string;
+    /** New display name. */
+    name?: string;
+    /** New global role. */
+    role?: MemberRole;
+};
+/** Which member to flip, and which way. */
+export type SetMemberStatusInput = {
+    /** The member to update. */
+    id: string;
+    /** `true` disables the account, `false` re-enables it. */
+    disabled: boolean;
+};
+/** Identifies the membership to create: which member, which workspace. */
+export type AddWorkspaceMemberInput = {
+    /** The member being added. */
+    userId: string;
+    /** The workspace to add them to. */
+    workspaceId: string;
+};
+/** Identifies the membership to remove: which member, which workspace. */
+export type RemoveWorkspaceMemberInput = {
+    /** The member being removed. */
+    userId: string;
+    /** The workspace to remove them from. */
+    workspaceId: string;
+};
+/** Identifies the session to revoke: whose, and which. */
+export type RevokeSessionInput = {
+    /** The member who owns the session. */
+    userId: string;
+    /** The session row id to revoke. */
+    sessionId: string;
+};
+/**
+ * The port over the remote users/members API — the single seam the admin plugin
+ * talks to instead of `apiClient` directly. Every method returns the admin's
+ * mapped models (via the `memberMapper` anti-corruption layer, or an inline
+ * timestamp/avatar mapping for sessions and workspace options), never the wire
+ * shape, and normalizes every failure to `ApiError`, so the application hooks
+ * and presentation stay off the transport. {@link httpMemberGateway} is the HTTP
+ * implementation.
+ */
+export type MemberGateway = {
+    /** Lists one page of members via `GET /api/users`. */
+    list(params: MembersListParams): Promise<MemberList>;
+    /** Fetches one member's full record via `GET /api/users/:id`. */
+    get(id: string): Promise<Member>;
+    /**
+     * Invites a person via `POST /api/users/invites` (`409` = email taken).
+     * Resolves with the new member **and** their one-time invite token — the
+     * only moment it is readable, since no mailer sends the link yet.
+     */
+    invite(input: InviteMemberInput): Promise<InvitedMember>;
+    /**
+     * Rotates a pending invite via `POST /api/users/:id/invites/resend`,
+     * resolving with the member and the fresh token. Rotating kills the
+     * previous link, so the new one has to reach the invitee.
+     */
+    resendInvite(id: string): Promise<InvitedMember>;
+    /** Revokes a pending invite via `DELETE /api/users/:id/invites`. */
+    revokeInvite(id: string): Promise<void>;
+    /**
+     * Mints a one-time password-reset link for an active member via
+     * `POST /api/users/:id/password-reset`, resolving with the member and the
+     * raw token (`409` = the member is not active, or one was just issued).
+     * Issuing kills any previous link, so the new one has to reach the member.
+     */
+    issuePasswordReset(id: string): Promise<MemberWithResetToken>;
+    /** Edits name/role via `PATCH /api/users/:id` (`409` = last admin). */
+    update(input: UpdateMemberInput): Promise<Member>;
+    /** Disables or re-enables a member via `POST /api/users/:id/(disable|enable)`. */
+    setStatus(input: SetMemberStatusInput): Promise<Member>;
+    /** Links a member to a workspace via `POST /api/workspaces/:id/members`. */
+    addWorkspace(input: AddWorkspaceMemberInput): Promise<void>;
+    /** Unlinks a member via `DELETE /api/workspaces/:id/members/:userId`. */
+    removeWorkspace(input: RemoveWorkspaceMemberInput): Promise<void>;
+    /** Lists a member's live sessions via `GET /api/users/:id/sessions`. */
+    listSessions(id: string): Promise<UserSession[]>;
+    /** Revokes one session via `DELETE /api/users/:id/sessions/:sessionId`. */
+    revokeSession(input: RevokeSessionInput): Promise<void>;
+    /** Lists every workspace (via `GET /api/workspaces`) for the assignment steps. */
+    listWorkspaceOptions(): Promise<WorkspaceOption[]>;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/infrastructure/memberGateway/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/infrastructure/memberGateway/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACR,aAAa,EACb,MAAM,EACN,UAAU,EACV,UAAU,EACV,oBAAoB,EACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAExD,yCAAyC;AACzC,MAAM,MAAM,iBAAiB,GAAG;IAC5B,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,IAAI,EAAE,UAAU,CAAC;IACjB,uEAAuE;IACvE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B,CAAC;AAEF,gEAAgE;AAChE,MAAM,MAAM,iBAAiB,GAAG;IAC5B,0BAA0B;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,wBAAwB;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uBAAuB;IACvB,IAAI,CAAC,EAAE,UAAU,CAAC;CACrB,CAAC;AAEF,2CAA2C;AAC3C,MAAM,MAAM,oBAAoB,GAAG;IAC/B,4BAA4B;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,0DAA0D;IAC1D,QAAQ,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,0EAA0E;AAC1E,MAAM,MAAM,uBAAuB,GAAG;IAClC,8BAA8B;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,WAAW,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,0EAA0E;AAC1E,MAAM,MAAM,0BAA0B,GAAG;IACrC,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,WAAW,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,0DAA0D;AAC1D,MAAM,MAAM,kBAAkB,GAAG;IAC7B,uCAAuC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,MAAM,aAAa,GAAG;IACxB,sDAAsD;IACtD,IAAI,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACrD,iEAAiE;IACjE,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC;;;;OAIG;IACH,MAAM,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACzD;;;;OAIG;IACH,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACjD,oEAAoE;IACpE,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC9D,uEAAuE;IACvE,MAAM,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClD,kFAAkF;IAClF,SAAS,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxD,4EAA4E;IAC5E,YAAY,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,yEAAyE;IACzE,eAAe,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,wEAAwE;IACxE,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACjD,2EAA2E;IAC3E,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,kFAAkF;IAClF,oBAAoB,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;CACtD,CAAC"}

package/dist/lib/infrastructure/memberGateway/index.js

@@ -0,0 +1 @@
+export {};

package/dist/lib/infrastructure/memberMapper/index.d.ts

@@ -0,0 +1,59 @@
+import type { InvitedMember, Member, MemberStatus, MemberWithResetToken } from '../../domain/types/member';
+/** A member's role as returned by the API. */
+export type MemberRoleResponse = {
+    id: string;
+    key: string;
+    name: string;
+};
+/** A member's workspace as returned by the API. */
+export type MemberWorkspaceResponse = {
+    id: string;
+    name: string;
+    description: string | null;
+    color: string;
+};
+/**
+ * A member as returned by the users API. `name` is `null` until the invite is
+ * accepted; `createdAt` is an ISO timestamp (the invite date while
+ * `pending`); `isLastAdmin` is the server-computed "sole active admin" flag
+ * the guardrail UI reads.
+ */
+export type MemberResponse = {
+    id: string;
+    email: string;
+    name: string | null;
+    role: MemberRoleResponse;
+    status: MemberStatus;
+    createdAt: string;
+    isLastAdmin: boolean;
+    workspaces: MemberWorkspaceResponse[];
+};
+/**
+ * A member as returned by the two endpoints that mint an invite token
+ * (`POST /users/invites` and `POST /users/:id/invites/resend`). Identical to
+ * {@link MemberResponse} plus the raw token — the only responses that carry one.
+ */
+export type InvitedMemberResponse = MemberResponse & {
+    inviteToken: string;
+};
+/** Maps a member from the wire to the admin's `Member` model. */
+export declare function toMember(dto: MemberResponse): Member;
+/**
+ * Maps an invite/resend response to the admin's {@link InvitedMember} — the
+ * mapped member plus the one-time token, carried through verbatim.
+ */
+export declare function toInvitedMember(dto: InvitedMemberResponse): InvitedMember;
+/**
+ * A member as returned by the one endpoint that mints a password-reset token
+ * (`POST /users/:id/password-reset`). Identical to {@link MemberResponse} plus
+ * the raw token — the only response that carries one.
+ */
+export type PasswordResetMemberResponse = MemberResponse & {
+    resetToken: string;
+};
+/**
+ * Maps a password-reset response to the admin's {@link MemberWithResetToken} —
+ * the mapped member plus the one-time token, carried through verbatim.
+ */
+export declare function toMemberWithResetToken(dto: PasswordResetMemberResponse): MemberWithResetToken;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/infrastructure/memberMapper/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/infrastructure/memberMapper/index.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACR,aAAa,EACb,MAAM,EAEN,YAAY,EACZ,oBAAoB,EAEvB,MAAM,2BAA2B,CAAC;AAQnC,8CAA8C;AAC9C,MAAM,MAAM,kBAAkB,GAAG;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,mDAAmD;AACnD,MAAM,MAAM,uBAAuB,GAAG;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,kBAAkB,CAAC;IACzB,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,uBAAuB,EAAE,CAAC;CACzC,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG,cAAc,GAAG;IACjD,WAAW,EAAE,MAAM,CAAC;CACvB,CAAC;AAaF,iEAAiE;AACjE,wBAAgB,QAAQ,CAAC,GAAG,EAAE,cAAc,GAAG,MAAM,CAqBpD;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,qBAAqB,GAAG,aAAa,CAEzE;AAED;;;;GAIG;AACH,MAAM,MAAM,2BAA2B,GAAG,cAAc,GAAG;IACvD,UAAU,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF;;;GAGG;AACH,wBAAgB,sBAAsB,CAClC,GAAG,EAAE,2BAA2B,GACjC,oBAAoB,CAEtB"}

package/dist/lib/infrastructure/memberMapper/index.js

@@ -0,0 +1,52 @@
+import { asAvatarColor, avatarColorForId, initialsOf } from '@orthacms/utils-admin';
+/** Maps a workspace from the wire to the admin's presentational shape. */
+function toMemberWorkspace(dto) {
+    return {
+        id: dto.id,
+        name: dto.name,
+        description: dto.description,
+        initials: initialsOf(dto.name),
+        color: asAvatarColor(dto.color)
+    };
+}
+/** Maps a member from the wire to the admin's `Member` model. */
+export function toMember(dto) {
+    const name = dto.name ?? dto.email;
+    return {
+        id: dto.id,
+        name,
+        email: dto.email,
+        initials: initialsOf(name),
+        color: avatarColorForId(dto.id),
+        // An unknown role key (a custom, non-system role — the server's
+        // `Role.create` accepts any non-empty key) maps to `null`, NOT to a
+        // guessed `viewer`. Coercing it would make the roster and the Role tab
+        // positively assert a privilege level the member does not hold; `null`
+        // means "not one of the three assignable roles", and the UI falls back
+        // to the server's own `roleName` and refuses to offer a change.
+        role: isMemberRole(dto.role.key) ? dto.role.key : null,
+        roleName: dto.role.name,
+        status: dto.status,
+        joinedAt: new Date(dto.createdAt),
+        isLastAdmin: dto.isLastAdmin,
+        workspaces: dto.workspaces.map(toMemberWorkspace)
+    };
+}
+/**
+ * Maps an invite/resend response to the admin's {@link InvitedMember} — the
+ * mapped member plus the one-time token, carried through verbatim.
+ */
+export function toInvitedMember(dto) {
+    return { ...toMember(dto), inviteToken: dto.inviteToken };
+}
+/**
+ * Maps a password-reset response to the admin's {@link MemberWithResetToken} —
+ * the mapped member plus the one-time token, carried through verbatim.
+ */
+export function toMemberWithResetToken(dto) {
+    return { ...toMember(dto), resetToken: dto.resetToken };
+}
+/** Whether a wire role key is one of the admin's assignable roles. */
+function isMemberRole(key) {
+    return key === 'admin' || key === 'contributor' || key === 'viewer';
+}

package/dist/lib/infrastructure/membersKeys/index.d.ts

@@ -0,0 +1,37 @@
+/** Parameters accepted by `GET /api/users` — the list query's filter/paging. */
+export type MembersListParams = {
+    /** Case-insensitive name/email substring; omit for no filter. */
+    search?: string;
+    /** Query-builder filter tree as a JSON string; omit for no structured filter. */
+    filter?: string;
+    /** 1-based page number; the server defaults to 1. */
+    page?: number;
+    /** Rows per page; the server defaults to its own page size. */
+    pageSize?: number;
+};
+/**
+ * Query keys for the members cache. The list endpoint lives under
+ * `membersKeys.list(params)`; mutations invalidate `membersKeys.all` to
+ * refresh every cached page (an added/changed/removed row may land anywhere).
+ *
+ * **Sessions deliberately sit under their own root**, not under
+ * `['members','detail',id,…]`. TanStack matches by prefix, so nesting them
+ * would make every member mutation — a rename, a role change — invalidate
+ * every cached session list too, which no member mutation can affect. Keeping
+ * the root separate is what makes the broad `all` invalidation safe.
+ */
+export declare const membersKeys: {
+    /** Root key covering the member list and detail queries. */
+    all: readonly ["members"];
+    /** One list page for the given params. */
+    list: (params: MembersListParams) => readonly ["members", "list", MembersListParams];
+    /** One member's full detail record (the user detail page). */
+    detail: (id: string) => readonly ["members", "detail", string];
+    /**
+     * One member's live sessions (the detail page's Sessions tab). Rooted at
+     * `member-sessions` so `membersKeys.all` cannot reach it — see the note
+     * above.
+     */
+    sessions: (id: string) => readonly ["member-sessions", string];
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/infrastructure/membersKeys/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/infrastructure/membersKeys/index.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,MAAM,MAAM,iBAAiB,GAAG;IAC5B,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,WAAW;IACpB,4DAA4D;;IAE5D,0CAA0C;mBAC3B,iBAAiB;IAChC,8DAA8D;iBACjD,MAAM;IACnB;;;;OAIG;mBACY,MAAM;CACxB,CAAC"}

package/dist/lib/infrastructure/membersKeys/index.js

@@ -0,0 +1,25 @@
+/**
+ * Query keys for the members cache. The list endpoint lives under
+ * `membersKeys.list(params)`; mutations invalidate `membersKeys.all` to
+ * refresh every cached page (an added/changed/removed row may land anywhere).
+ *
+ * **Sessions deliberately sit under their own root**, not under
+ * `['members','detail',id,…]`. TanStack matches by prefix, so nesting them
+ * would make every member mutation — a rename, a role change — invalidate
+ * every cached session list too, which no member mutation can affect. Keeping
+ * the root separate is what makes the broad `all` invalidation safe.
+ */
+export const membersKeys = {
+    /** Root key covering the member list and detail queries. */
+    all: ['members'],
+    /** One list page for the given params. */
+    list: (params) => ['members', 'list', params],
+    /** One member's full detail record (the user detail page). */
+    detail: (id) => ['members', 'detail', id],
+    /**
+     * One member's live sessions (the detail page's Sessions tab). Rooted at
+     * `member-sessions` so `membersKeys.all` cannot reach it — see the note
+     * above.
+     */
+    sessions: (id) => ['member-sessions', id]
+};

package/dist/lib/infrastructure/passwordResetLink/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Builds the reset link an admin hands to a member, from the raw token the API
+ * returned once.
+ *
+ * The origin comes from the browser rather than server config on purpose: the
+ * admin is *already* looking at the app on the URL the member should use, so
+ * `window.location.origin` is right by construction — no `publicBaseUrl` to
+ * misconfigure, and no host header to poison. When the mailer lands (identity
+ * epic #11) the server will need its own configured base URL; this stays the
+ * copy-it-yourself path.
+ */
+export declare function passwordResetLinkFor(token: string): string;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/infrastructure/passwordResetLink/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/infrastructure/passwordResetLink/index.ts"],"names":[],"mappings":"AASA;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAI1D"}

package/dist/lib/infrastructure/passwordResetLink/index.js

@@ -0,0 +1,24 @@
+/**
+ * The admin route that redeems a password reset. Owned by
+ * `@orthacms/identity-admin` (its router mounts `reset-password` under
+ * `/identity`); repeated here for the same reason the invite path is — a path
+ * string is not worth a package dependency, and the e2e suites assert the built
+ * link so a drift would fail loudly.
+ */
+const RESET_PASSWORD_PATH = '/identity/reset-password';
+/**
+ * Builds the reset link an admin hands to a member, from the raw token the API
+ * returned once.
+ *
+ * The origin comes from the browser rather than server config on purpose: the
+ * admin is *already* looking at the app on the URL the member should use, so
+ * `window.location.origin` is right by construction — no `publicBaseUrl` to
+ * misconfigure, and no host header to poison. When the mailer lands (identity
+ * epic #11) the server will need its own configured base URL; this stays the
+ * copy-it-yourself path.
+ */
+export function passwordResetLinkFor(token) {
+    const url = new URL(RESET_PASSWORD_PATH, window.location.origin);
+    url.searchParams.set('token', token);
+    return url.toString();
+}

package/dist/lib/infrastructure/preferencesGateway/index.d.ts

@@ -0,0 +1,37 @@
+import type { ThemePreference } from '@orthacms/design-system';
+/**
+ * The current user's own preferences, as carried over `/api/preferences`.
+ * Today that is just the colour theme; the object shape leaves room for more
+ * self-service preferences without changing the endpoint contract.
+ */
+export type UserPreferences = {
+    /** The user's chosen colour theme. */
+    theme: ThemePreference;
+};
+/**
+ * React Query keys for a user's own preferences. Distinct from `membersKeys` —
+ * these are the caller's *own* app preferences, not a member record, so they
+ * never invalidate alongside the members list.
+ *
+ * The key is scoped **by user id**, not a flat `'me'`. Sign-out only invalidates
+ * the current-user query; every other cache entry survives it. With a shared
+ * `'me'` key, signing in as someone else on the same machine would read the
+ * previous user's cached theme (and, because this query never goes stale, never
+ * refetch to correct it). Scoping by id makes that structurally impossible.
+ */
+export declare const preferencesKeys: {
+    /** One user's preferences. */
+    forUser: (userId: string) => readonly ["preferences", string];
+};
+/**
+ * The one place `/api/preferences` is spoken to. Keeps `apiClient` out of the
+ * application hooks (per this plugin's layering) and normalizes transport
+ * errors to `ApiError` so callers branch on status, not axios internals.
+ */
+export declare const httpPreferencesGateway: {
+    /** Reads the signed-in user's preferences (defaults if never saved). */
+    get(): Promise<UserPreferences>;
+    /** Persists the signed-in user's theme choice, returning the stored row. */
+    updateTheme(theme: ThemePreference): Promise<UserPreferences>;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/infrastructure/preferencesGateway/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/infrastructure/preferencesGateway/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE/D;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG;IAC1B,sCAAsC;IACtC,KAAK,EAAE,eAAe,CAAC;CAC1B,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,eAAe;IACxB,8BAA8B;sBACZ,MAAM;CAC3B,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;IAC/B,wEAAwE;WAC3D,OAAO,CAAC,eAAe,CAAC;IAUrC,4EAA4E;uBACnD,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;CAWtE,CAAC"}