@portaidentity/server 1.7.0

package/dist/users/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/users/service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EACL,uBAAuB,EACvB,YAAY,EACZ,gBAAgB,EAChB,cAAc,GACf,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,WAAW,EACX,eAAe,EACf,yBAAyB,EACzB,UAAU,EACV,eAAe,IAAI,eAAe,EAClC,YAAY,IAAI,YAAY,EAC5B,SAAS,IAAI,QAAQ,EACrB,eAAe,IAAI,cAAc,EACjC,UAAU,IAAI,UAAU,EACxB,qBAAqB,EACrB,6BAA6B,EAC7B,6BAA6B,EAC7B,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AASzB,8DAA8D;AAC9D,MAAM,mBAAmB,GAAG,sCAAsC,CAAC;AAoBnE,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAsB,EAAE,OAAgB;IACvE,gDAAgD;IAChD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACpE,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,IAAI,mBAAmB,CAAC,2CAA2C,CAAC,CAAC;IAC7E,CAAC;IAED,4BAA4B;IAC5B,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnB,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,mBAAmB,CAAC,UAAU,CAAC,KAAM,CAAC,CAAC;QACnD,CAAC;QACD,YAAY,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED,uBAAuB;IACvB,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC;QAC5B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,YAAY;QACZ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,aAAa,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM;QACpC,eAAe,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ;QACxC,aAAa,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM;QACpC,iBAAiB,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU;QAC5C,cAAc,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO;KACvC,CAAC,CAAC;IAEH,qBAAqB;IACrB,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IAEtB,8BAA8B;IAC9B,MAAM,aAAa,CAAC;QAClB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,OAAO;QACP,SAAS,EAAE,cAAc;QACzB,aAAa,EAAE,OAAO;QACtB,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;KACjD,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,EAAU;IAC1C,kBAAkB;IAClB,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,EAAE,CAAC,CAAC;IAC3C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,wBAAwB;IACxB,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,EAAE,CAAC,CAAC;IACpC,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAa,EAAE,KAAa;IAC/D,OAAO,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,EAAU,EACV,KAAsB,EACtB,OAAgB;IAEhB,+CAA+C;IAC/C,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,8CAA8C;QAC9C,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAE9C,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,IAAI,mBAAmB,CAAC,2CAA2C,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,MAAM,UAAU,GAAmB,EAAE,CAAC;IACtC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,UAAU,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC9D,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS;QAAE,UAAU,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;IACtF,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QAAE,UAAU,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAC1E,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;QAAE,UAAU,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IAC7E,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;QAAE,UAAU,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IAC7E,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;QAAE,UAAU,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IACvE,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS;QAAE,UAAU,CAAC,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAC;IAClG,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;QAAE,UAAU,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IAC7E,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;QAAE,UAAU,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IAC7E,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;QAAE,UAAU,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IAC7E,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,UAAU,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACjE,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QAAE,UAAU,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAC1E,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;QAAE,UAAU,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IACvE,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,UAAU,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACjE,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;QAAE,UAAU,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IAChF,IAAI,KAAK,CAAC,mBAAmB,KAAK,SAAS;QACzC,UAAU,CAAC,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,CAAC;IAE7D,2CAA2C;IAC3C,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,UAAU,CAAC,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACxF,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS;YAAE,UAAU,CAAC,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC9F,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,UAAU,CAAC,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACxF,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS;YACxC,UAAU,CAAC,iBAAiB,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAC1D,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS;YAAE,UAAU,CAAC,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;IAC7F,CAAC;IAED,IAAI,IAAU,CAAC;IACf,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,KAAK,gBAAgB,EAAE,CAAC;YAC7D,MAAM,IAAI,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,wDAAwD;IACxD,MAAM,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnC,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IAEtB,8BAA8B;IAC9B,MAAM,aAAa,CAAC;QAClB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,OAAO;QACP,SAAS,EAAE,cAAc;QACzB,aAAa,EAAE,OAAO;QACtB,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE;KAC/D,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAwB;IAExB,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAA+B;IAE/B,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;GAGG;AACH,KAAK,UAAU,uBAAuB,CAAC,EAAU;IAC/C,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,EAAE,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,iBAAiB,CAAC,EAAE,CAAC,CAAC;IAC3C,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAU,EAAE,OAAgB;IAC/D,MAAM,IAAI,GAAG,MAAM,uBAAuB,CAAC,EAAE,CAAC,CAAC;IAE/C,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,mBAAmB,CAAC,uCAAuC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,UAAU,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IAC7C,MAAM,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAE9B,MAAM,aAAa,CAAC;QAClB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,OAAO;QACP,SAAS,EAAE,kBAAkB;QAC7B,aAAa,EAAE,OAAO;QACtB,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;KACzB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAU,EAAE,OAAgB;IAC/D,MAAM,IAAI,GAAG,MAAM,uBAAuB,CAAC,EAAE,CAAC,CAAC;IAE/C,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC/B,MAAM,IAAI,mBAAmB,CAAC,uCAAuC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,UAAU,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3C,MAAM,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAE9B,MAAM,aAAa,CAAC;QAClB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,OAAO;QACP,SAAS,EAAE,kBAAkB;QAC7B,aAAa,EAAE,OAAO;QACtB,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;KACzB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,EAAU,EAAE,MAAe,EAAE,OAAgB;IAC7E,MAAM,IAAI,GAAG,MAAM,uBAAuB,CAAC,EAAE,CAAC,CAAC;IAE/C,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,mBAAmB,CAAC,oCAAoC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,UAAU,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAC9C,MAAM,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAE9B,MAAM,aAAa,CAAC;QAClB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,OAAO;QACP,SAAS,EAAE,gBAAgB;QAC3B,aAAa,EAAE,OAAO;QACtB,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI,EAAE;KACjD,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAAU,EAAE,OAAgB;IAC9D,MAAM,IAAI,GAAG,MAAM,uBAAuB,CAAC,EAAE,CAAC,CAAC;IAE/C,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAChC,MAAM,IAAI,mBAAmB,CAAC,sCAAsC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,UAAU,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3C,MAAM,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAE9B,MAAM,aAAa,CAAC;QAClB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,OAAO;QACP,SAAS,EAAE,gBAAgB;QAC3B,aAAa,EAAE,OAAO;QACtB,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;KACzB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,EAAU,EAAE,MAAc,EAAE,OAAgB;IACzE,MAAM,IAAI,GAAG,MAAM,uBAAuB,CAAC,EAAE,CAAC,CAAC;IAE/C,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,mBAAmB,CAAC,iCAAiC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,UAAU,CAAC,EAAE,EAAE;QACnB,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,IAAI,IAAI,EAAE;QACpB,YAAY,EAAE,MAAM;KACrB,CAAC,CAAC;IACH,MAAM,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAE9B,MAAM,aAAa,CAAC;QAClB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,OAAO;QACP,SAAS,EAAE,aAAa;QACxB,aAAa,EAAE,OAAO;QACtB,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE;KACjC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,EAAU,EAAE,OAAgB;IAC3D,MAAM,IAAI,GAAG,MAAM,uBAAuB,CAAC,EAAE,CAAC,CAAC;IAE/C,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,mBAAmB,CAAC,mCAAmC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,UAAU,CAAC,EAAE,EAAE;QACnB,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IACH,MAAM,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAE9B,MAAM,aAAa,CAAC;QAClB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,OAAO;QACP,SAAS,EAAE,eAAe;QAC1B,aAAa,EAAE,OAAO;QACtB,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;KACzB,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAU,EACV,QAAgB,EAChB,OAAgB;IAEhB,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,mBAAmB,CAAC,UAAU,CAAC,KAAM,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;IAE1C,MAAM,UAAU,CAAC,EAAE,EAAE;QACnB,YAAY,EAAE,IAAI;QAClB,iBAAiB,EAAE,IAAI,IAAI,EAAE;KAC9B,CAAC,CAAC;IACH,MAAM,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAE9B,MAAM,aAAa,CAAC;QAClB,OAAO;QACP,SAAS,EAAE,mBAAmB;QAC9B,aAAa,EAAE,OAAO;QACtB,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;KACzB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EAAU,EAAE,QAAgB;IACnE,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,EAAE,CAAC,CAAC;IACvC,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,OAAO,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,EAAiB,EACjB,QAAgB,EAChB,YAAoD;IAEpD,MAAM,UAAU,GAAG,YAAY,IAAI;QACjC,eAAe,EAAE,eAAe;QAChC,aAAa,EAAE,uBAAuB;QACtC,UAAU,EAAE,cAAc;KAC3B,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,eAAe,CAAC,EAAE,IAAI,mBAAmB,CAAC,CAAC;IACzE,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,MAAM,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACpE,OAAO,EAAE,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC;AACjD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,cAAsB,EACtB,KAAa;IAEb,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IAC9D,MAAM,eAAe,GAAG,MAAM,qBAAqB,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC;IACrF,MAAM,WAAW,GAAG,SAAS,EAAE,EAAE,IAAI,mBAAmB,CAAC;IACzD,MAAM,QAAQ,GAAG,MAAM,6BAA6B,CAClD,WAAW,EACX,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,GAAG,KAAK,CAAC,CAC/C,CAAC;IACF,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAEvC,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;QAC1B,KAAK,aAAa,CAAC;YACjB,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,MAAM,EAAE,SAAS,CAAC,EAAE;YACpB,SAAS,EAAE,oBAAoB;YAC/B,aAAa,EAAE,UAAU;YACzB,WAAW,EAAE,iDAAiD;SAC/D,CAAC,CAAC;IACL,CAAC;IAED,OAAO,cAAc,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EAAU,EAAE,OAAgB;IAClE,MAAM,UAAU,CAAC,EAAE,EAAE;QACnB,YAAY,EAAE,IAAI;QAClB,iBAAiB,EAAE,IAAI;KACxB,CAAC,CAAC;IACH,MAAM,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAE9B,MAAM,aAAa,CAAC;QAClB,OAAO;QACP,SAAS,EAAE,uBAAuB;QAClC,aAAa,EAAE,OAAO;QACtB,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;KACzB,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EAAU,EAAE,OAAgB;IAClE,MAAM,UAAU,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAE9B,MAAM,aAAa,CAAC;QAClB,OAAO;QACP,SAAS,EAAE,qBAAqB;QAChC,aAAa,EAAE,OAAO;QACtB,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;KACzB,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EAAU;IAClD,MAAM,UAAU,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/C,MAAM,mBAAmB,CAAC,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,EAAU;IAC1C,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,mBAAmB,CAAC,EAAE,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAU;IAEV,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;IAExE,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IACrE,MAAM,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEnC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC;IAE1E,IAAI,UAAU,EAAE,CAAC;QACf,KAAK,aAAa,CAAC;YACjB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,SAAS,EAAE,kBAAkB;YAC7B,aAAa,EAAE,UAAU;YACzB,WAAW,EAAE,6BAA6B,MAAM,CAAC,gBAAgB,wBAAwB;YACzF,QAAQ,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,gBAAgB,EAAE,SAAS,EAAE,WAAW,EAAE;SAC3E,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC;AACtE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAiB,EACjB,YAA0C;IAE1C,MAAM,UAAU,GAAG,YAAY,IAAI;QACjC,qBAAqB,EAAE,6BAA6B;QACpD,eAAe,EAAE,mBAAmB;KACrC,CAAC;IACF,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,IAAI,EAAE,EAAE,IAAI,mBAAmB,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,qBAAqB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC3E,MAAM,UAAU,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC;IAE3D,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;QACnB,KAAK,aAAa,CAAC;YACjB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,SAAS,EAAE,kBAAkB;YAC7B,aAAa,EAAE,UAAU;YACzB,WAAW,EAAE,kDAAkD;YAC/D,QAAQ,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,gBAAgB,EAAE,SAAS,EAAE,WAAW,EAAE;SAC3E,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAU;IAC9C,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,YAAY,KAAK,cAAc,EAAE,CAAC;QACrE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAEjC,MAAM,eAAe,GAAG,MAAM,qBAAqB,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC;IAE9D,IAAI,OAAO,GAAG,eAAe,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,8CAA8C;IAC9C,MAAM,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrC,MAAM,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEnC,aAAa,CAAC;QACZ,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,SAAS,EAAE,oBAAoB;QAC/B,aAAa,EAAE,UAAU;QACzB,WAAW,EAAE,+BAA+B,eAAe,YAAY;KACxE,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAW;IAC/C,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,qDAAqD;IACrD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE1C,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/users/types.d.ts

@@ -0,0 +1,220 @@
+/**
+ * User types and interfaces.
+ *
+ * Defines the data structures for the user model, including the full
+ * database record, input types for create/update, and pagination helpers.
+ * Also provides a mapping function to convert snake_case database rows
+ * to camelCase TypeScript objects.
+ *
+ * Users belong to exactly one organization and their profile fields
+ * follow the OIDC Standard Claims specification (OpenID Connect Core
+ * 1.0, §5.1). The `password_hash` column is never exposed outside the
+ * repository layer — the `User` interface only has a derived `hasPassword`
+ * boolean.
+ *
+ * These types are the foundation that all other user modules depend on
+ * (repository, cache, service, routes, claims).
+ */
+import type { PaginatedResult } from '../organizations/index.js';
+import type { TwoFactorMethod } from '../two-factor/types.js';
+export type { PaginatedResult };
+/**
+ * User status values — matches the DB CHECK constraint.
+ *
+ * Lifecycle transitions:
+ *   - active → inactive (deactivate), suspended (suspend), locked (lock)
+ *   - inactive → active (reactivate)
+ *   - suspended → active (unsuspend)
+ *   - locked → active (unlock)
+ */
+export type UserStatus = 'active' | 'inactive' | 'suspended' | 'locked';
+/**
+ * Full user record as used throughout the application.
+ *
+ * Maps to the `users` table columns (see migration 005), but converts
+ * snake_case to camelCase and replaces `password_hash` with a derived
+ * `hasPassword` boolean for security — the hash never leaves the
+ * repository layer.
+ */
+export interface User {
+    id: string;
+    organizationId: string;
+    email: string;
+    emailVerified: boolean;
+    /** Derived from password_hash IS NOT NULL — the hash is never exposed */
+    hasPassword: boolean;
+    passwordChangedAt: Date | null;
+    givenName: string | null;
+    familyName: string | null;
+    middleName: string | null;
+    nickname: string | null;
+    preferredUsername: string | null;
+    profileUrl: string | null;
+    pictureUrl: string | null;
+    websiteUrl: string | null;
+    gender: string | null;
+    /** ISO 8601 date string (YYYY-MM-DD) — stored as string per OIDC §5.1 */
+    birthdate: string | null;
+    zoneinfo: string | null;
+    locale: string | null;
+    phoneNumber: string | null;
+    phoneNumberVerified: boolean;
+    addressStreet: string | null;
+    addressLocality: string | null;
+    addressRegion: string | null;
+    addressPostalCode: string | null;
+    addressCountry: string | null;
+    /** Whether 2FA is enabled for this user */
+    twoFactorEnabled: boolean;
+    /** The 2FA method configured ('email' or 'totp'), null if not enabled */
+    twoFactorMethod: TwoFactorMethod | null;
+    status: UserStatus;
+    lockedAt: Date | null;
+    lockedReason: string | null;
+    lastLoginAt: Date | null;
+    loginCount: number;
+    /** Consecutive failed password attempts since last successful login */
+    failedLoginCount: number;
+    /** Timestamp of the most recent failed login attempt */
+    lastFailedLoginAt: Date | null;
+    createdAt: Date;
+    updatedAt: Date;
+}
+/**
+ * Input for creating a new user.
+ *
+ * Only `organizationId` and `email` are required. All profile fields
+ * are optional — they can be set later via update. A `password` field
+ * (plaintext) is accepted and will be hashed before storage; omit it
+ * for passwordless-only users.
+ */
+export interface CreateUserInput {
+    organizationId: string;
+    email: string;
+    password?: string;
+    givenName?: string;
+    familyName?: string;
+    middleName?: string;
+    nickname?: string;
+    preferredUsername?: string;
+    profileUrl?: string;
+    pictureUrl?: string;
+    websiteUrl?: string;
+    gender?: string;
+    birthdate?: string;
+    zoneinfo?: string;
+    locale?: string;
+    phoneNumber?: string;
+    phoneNumberVerified?: boolean;
+    address?: AddressInput;
+}
+/**
+ * Input for updating an existing user (partial).
+ *
+ * All fields are optional. Setting a field to `null` clears it in the
+ * database. Omitting a field leaves it unchanged.
+ */
+export interface UpdateUserInput {
+    email?: string;
+    emailVerified?: boolean;
+    givenName?: string | null;
+    familyName?: string | null;
+    middleName?: string | null;
+    nickname?: string | null;
+    preferredUsername?: string | null;
+    profileUrl?: string | null;
+    pictureUrl?: string | null;
+    websiteUrl?: string | null;
+    gender?: string | null;
+    birthdate?: string | null;
+    zoneinfo?: string | null;
+    locale?: string | null;
+    phoneNumber?: string | null;
+    phoneNumberVerified?: boolean;
+    address?: AddressInput;
+}
+/**
+ * Address input — all fields optional/nullable.
+ * Maps to the address_* columns in the users table.
+ */
+export interface AddressInput {
+    street?: string | null;
+    locality?: string | null;
+    region?: string | null;
+    postalCode?: string | null;
+    country?: string | null;
+}
+/**
+ * Options for listing users within an organization (paginated).
+ * Supports filtering by status, text search across name/email,
+ * and configurable sort order.
+ */
+export interface UserListOptions {
+    organizationId: string;
+    page: number;
+    pageSize: number;
+    status?: UserStatus;
+    /** Searches across email, given_name, family_name (ILIKE) */
+    search?: string;
+    sortBy?: 'email' | 'given_name' | 'family_name' | 'created_at' | 'last_login_at';
+    sortOrder?: 'asc' | 'desc';
+}
+/**
+ * Raw database row from the users table (snake_case columns).
+ *
+ * Includes `password_hash` which is needed by the repository layer
+ * but must NEVER be exposed via the `User` interface.
+ */
+export interface UserRow {
+    id: string;
+    organization_id: string;
+    email: string;
+    email_verified: boolean;
+    password_hash: string | null;
+    password_changed_at: Date | null;
+    given_name: string | null;
+    family_name: string | null;
+    middle_name: string | null;
+    nickname: string | null;
+    preferred_username: string | null;
+    profile_url: string | null;
+    picture_url: string | null;
+    website_url: string | null;
+    gender: string | null;
+    /** DATE column — pg returns as string or Date depending on config */
+    birthdate: string | null;
+    zoneinfo: string | null;
+    locale: string | null;
+    phone_number: string | null;
+    phone_number_verified: boolean;
+    address_street: string | null;
+    address_locality: string | null;
+    address_region: string | null;
+    address_postal_code: string | null;
+    address_country: string | null;
+    two_factor_enabled: boolean;
+    two_factor_method: string | null;
+    status: string;
+    locked_at: Date | null;
+    locked_reason: string | null;
+    last_login_at: Date | null;
+    login_count: number;
+    failed_login_count: number;
+    last_failed_login_at: Date | null;
+    created_at: Date;
+    updated_at: Date;
+}
+/**
+ * Map a database row to a User object.
+ *
+ * Converts snake_case column names from PostgreSQL to camelCase
+ * TypeScript properties. The `password_hash` field is converted to
+ * a `hasPassword` boolean — the hash itself is never included in the
+ * User object. The `status` string is cast to `UserStatus` because
+ * the DB CHECK constraint guarantees it is a valid value.
+ *
+ * @param row - Raw database row from the users table
+ * @returns Mapped User object with camelCase properties
+ */
+export declare function mapRowToUser(row: UserRow): User;
+//# sourceMappingURL=types.d.ts.map

package/dist/users/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/users/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAG9D,YAAY,EAAE,eAAe,EAAE,CAAC;AAMhC;;;;;;;;GAQG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,UAAU,GAAG,WAAW,GAAG,QAAQ,CAAC;AAMxE;;;;;;;GAOG;AACH,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IAGvB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,OAAO,CAAC;IACvB,yEAAyE;IACzE,WAAW,EAAE,OAAO,CAAC;IACrB,iBAAiB,EAAE,IAAI,GAAG,IAAI,CAAC;IAG/B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,yEAAyE;IACzE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,mBAAmB,EAAE,OAAO,CAAC;IAG7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAG9B,2CAA2C;IAC3C,gBAAgB,EAAE,OAAO,CAAC;IAC1B,yEAAyE;IACzE,eAAe,EAAE,eAAe,GAAG,IAAI,CAAC;IAGxC,MAAM,EAAE,UAAU,CAAC;IACnB,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IAGnB,uEAAuE;IACvE,gBAAgB,EAAE,MAAM,CAAC;IACzB,wDAAwD;IACxD,iBAAiB,EAAE,IAAI,GAAG,IAAI,CAAC;IAG/B,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB;AAMD;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAGlB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAG9B,OAAO,CAAC,EAAE,YAAY,CAAC;CACxB;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,OAAO,CAAC;IAGxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAG9B,OAAO,CAAC,EAAE,YAAY,CAAC;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAMD;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,GAAG,YAAY,GAAG,aAAa,GAAG,YAAY,GAAG,eAAe,CAAC;IACjF,SAAS,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;CAC5B;AAMD;;;;;GAKG;AACH,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,OAAO,CAAC;IACxB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,mBAAmB,EAAE,IAAI,GAAG,IAAI,CAAC;IACjC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,qEAAqE;IACrE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,qBAAqB,EAAE,OAAO,CAAC;IAC/B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,IAAI,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,IAAI,GAAG,IAAI,CAAC;IAClC,UAAU,EAAE,IAAI,CAAC;IACjB,UAAU,EAAE,IAAI,CAAC;CAClB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAqD/C"}

package/dist/users/types.js

@@ -0,0 +1,77 @@
+/**
+ * User types and interfaces.
+ *
+ * Defines the data structures for the user model, including the full
+ * database record, input types for create/update, and pagination helpers.
+ * Also provides a mapping function to convert snake_case database rows
+ * to camelCase TypeScript objects.
+ *
+ * Users belong to exactly one organization and their profile fields
+ * follow the OIDC Standard Claims specification (OpenID Connect Core
+ * 1.0, §5.1). The `password_hash` column is never exposed outside the
+ * repository layer — the `User` interface only has a derived `hasPassword`
+ * boolean.
+ *
+ * These types are the foundation that all other user modules depend on
+ * (repository, cache, service, routes, claims).
+ */
+/**
+ * Map a database row to a User object.
+ *
+ * Converts snake_case column names from PostgreSQL to camelCase
+ * TypeScript properties. The `password_hash` field is converted to
+ * a `hasPassword` boolean — the hash itself is never included in the
+ * User object. The `status` string is cast to `UserStatus` because
+ * the DB CHECK constraint guarantees it is a valid value.
+ *
+ * @param row - Raw database row from the users table
+ * @returns Mapped User object with camelCase properties
+ */
+export function mapRowToUser(row) {
+    return {
+        id: row.id,
+        organizationId: row.organization_id,
+        // Authentication — derive hasPassword from password_hash
+        email: row.email,
+        emailVerified: row.email_verified,
+        hasPassword: row.password_hash !== null,
+        passwordChangedAt: row.password_changed_at,
+        // OIDC Standard Claims
+        givenName: row.given_name,
+        familyName: row.family_name,
+        middleName: row.middle_name,
+        nickname: row.nickname,
+        preferredUsername: row.preferred_username,
+        profileUrl: row.profile_url,
+        pictureUrl: row.picture_url,
+        websiteUrl: row.website_url,
+        gender: row.gender,
+        birthdate: row.birthdate,
+        zoneinfo: row.zoneinfo,
+        locale: row.locale,
+        phoneNumber: row.phone_number,
+        phoneNumberVerified: row.phone_number_verified,
+        // Address
+        addressStreet: row.address_street,
+        addressLocality: row.address_locality,
+        addressRegion: row.address_region,
+        addressPostalCode: row.address_postal_code,
+        addressCountry: row.address_country,
+        // Two-factor authentication
+        twoFactorEnabled: row.two_factor_enabled,
+        twoFactorMethod: row.two_factor_method ?? null,
+        // Status & lifecycle
+        status: row.status,
+        lockedAt: row.locked_at,
+        lockedReason: row.locked_reason,
+        lastLoginAt: row.last_login_at,
+        loginCount: row.login_count,
+        // Failed login tracking (account lockout)
+        failedLoginCount: row.failed_login_count ?? 0,
+        lastFailedLoginAt: row.last_failed_login_at ?? null,
+        // Timestamps
+        createdAt: row.created_at,
+        updatedAt: row.updated_at,
+    };
+}
+//# sourceMappingURL=types.js.map

package/dist/users/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/users/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAmPH;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,cAAc,EAAE,GAAG,CAAC,eAAe;QAEnC,yDAAyD;QACzD,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,WAAW,EAAE,GAAG,CAAC,aAAa,KAAK,IAAI;QACvC,iBAAiB,EAAE,GAAG,CAAC,mBAAmB;QAE1C,uBAAuB;QACvB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,iBAAiB,EAAE,GAAG,CAAC,kBAAkB;QACzC,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,mBAAmB,EAAE,GAAG,CAAC,qBAAqB;QAE9C,UAAU;QACV,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,eAAe,EAAE,GAAG,CAAC,gBAAgB;QACrC,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,iBAAiB,EAAE,GAAG,CAAC,mBAAmB;QAC1C,cAAc,EAAE,GAAG,CAAC,eAAe;QAEnC,4BAA4B;QAC5B,gBAAgB,EAAE,GAAG,CAAC,kBAAkB;QACxC,eAAe,EAAG,GAAG,CAAC,iBAAqC,IAAI,IAAI;QAEnE,qBAAqB;QACrB,MAAM,EAAE,GAAG,CAAC,MAAoB;QAChC,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,WAAW,EAAE,GAAG,CAAC,aAAa;QAC9B,UAAU,EAAE,GAAG,CAAC,WAAW;QAE3B,0CAA0C;QAC1C,gBAAgB,EAAE,GAAG,CAAC,kBAAkB,IAAI,CAAC;QAC7C,iBAAiB,EAAE,GAAG,CAAC,oBAAoB,IAAI,IAAI;QAEnD,aAAa;QACb,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAC;AACJ,CAAC"}

package/locales/default/en/common.json

@@ -0,0 +1,10 @@
+{
+  "submit": "Submit",
+  "cancel": "Cancel",
+  "back": "Back",
+  "back_to_login": "← Back to login",
+  "try_again": "Try again",
+  "loading": "Loading...",
+  "or": "or",
+  "powered_by": "Powered by Porta"
+}

package/locales/default/en/consent.json

@@ -0,0 +1,13 @@
+{
+  "title": "Authorize access",
+  "description": "{{clientName}} is requesting access to your account",
+  "scopes_heading": "This application would like to:",
+  "approve": "Allow access",
+  "deny": "Deny",
+  "scope_openid": "Verify your identity",
+  "scope_profile": "Access your profile information",
+  "scope_email": "Access your email address",
+  "scope_phone": "Access your phone number",
+  "scope_address": "Access your address",
+  "scope_offline_access": "Stay signed in (offline access)"
+}

package/locales/default/en/emails.json

@@ -0,0 +1,17 @@
+{
+  "magic_link": {
+    "subject": "Sign in to your account"
+  },
+  "password_reset": {
+    "subject": "Reset your password"
+  },
+  "invitation": {
+    "subject": "You've been invited to {{orgName}}"
+  },
+  "welcome": {
+    "subject": "Welcome to {{orgName}}"
+  },
+  "password_changed": {
+    "subject": "Your password has been changed"
+  }
+}

package/locales/default/en/errors.json

@@ -0,0 +1,21 @@
+{
+  "page_title": "Something went wrong",
+  "generic": "An unexpected error occurred. Please try again.",
+  "not_found": "The page you are looking for does not exist.",
+  "rate_limited": "Too many requests. Please wait a moment and try again.",
+  "rate_limit_exceeded": "Too many attempts. Please wait a moment and try again.",
+  "token_expired": "This link has expired. Please request a new one.",
+  "token_invalid": "This link is invalid or has already been used.",
+  "session_expired": "Your session has expired. Please sign in again.",
+  "interaction_expired": "Your session has expired. Please start the sign-in process again.",
+  "csrf_invalid": "Security verification failed. Please refresh the page and try again.",
+  "magic_link_expired": "This sign-in link has expired. Please request a new one.",
+  "reset_link_expired": "This password reset link has expired. Please request a new one.",
+  "access_denied": "Access denied. You do not have permission to access this resource.",
+  "code_label": "Error code",
+  "org_not_found": "Organization not found.",
+  "org_suspended": "This organization has been suspended.",
+  "org_archived": "This organization is no longer active.",
+  "login_method_disabled": "This authentication method is not available for this application.",
+  "no_login_methods_configured": "No authentication methods are configured for this application. Please contact your administrator."
+}

package/locales/default/en/forgot-password.json

@@ -0,0 +1,11 @@
+{
+  "title": "Forgot your password?",
+  "description": "Enter your email address and we'll send you a link to reset your password.",
+  "email_label": "Email address",
+  "email_placeholder": "you@example.com",
+  "submit": "Send reset link",
+  "check_email": "Check your email for a password reset link.",
+  "success_title": "Check your email",
+  "success_message": "If an account with that email exists, we've sent a password reset link.",
+  "error_rate_limited": "Too many reset requests. Please try again later."
+}

package/locales/default/en/invitation.json

@@ -0,0 +1,18 @@
+{
+  "title": "Accept your invitation",
+  "description": "You've been invited to join {{orgName}}. Set a password to activate your account.",
+  "email_label": "Email address",
+  "password_label": "Password",
+  "password_placeholder": "Choose a password",
+  "confirm_label": "Confirm password",
+  "confirm_placeholder": "Re-enter your password",
+  "submit": "Create account",
+  "success_title": "Account created!",
+  "success_message": "Your account has been set up successfully. You can now sign in.",
+  "go_to_login": "Go to sign in",
+  "expired_title": "Invitation expired",
+  "expired_message": "This invitation link has expired or is no longer valid.",
+  "contact_admin": "Please contact your organization administrator for a new invitation.",
+  "error_mismatch": "Passwords do not match",
+  "error_weak": "Password does not meet the minimum requirements"
+}

package/locales/default/en/login.json

@@ -0,0 +1,17 @@
+{
+  "title": "Sign in to your account",
+  "subtitle": "Sign in to continue to {{clientName}}",
+  "email_label": "Email address",
+  "email_placeholder": "you@example.com",
+  "password_label": "Password",
+  "password_placeholder": "Enter your password",
+  "submit": "Sign in",
+  "forgot_password": "Forgot your password?",
+  "or_divider": "or",
+  "magic_link_button": "Send me a sign-in link",
+  "error_invalid": "Invalid email or password",
+  "error_account_inactive": "Your account is not yet active. Please contact your administrator.",
+  "error_account_locked": "Your account has been locked. Please contact your administrator.",
+  "error_account_suspended": "Your account has been suspended. Please contact your administrator.",
+  "error_rate_limited": "Too many sign-in attempts. Please try again later."
+}

package/locales/default/en/logout.json

@@ -0,0 +1,9 @@
+{
+  "title": "Sign out",
+  "message": "Are you sure you want to sign out?",
+  "message_client": "You are about to sign out of this application.",
+  "confirm": "Sign out",
+  "cancel": "Return to application",
+  "success_title": "Signed out",
+  "success_message": "You have been signed out successfully."
+}

package/locales/default/en/magic-link.json

@@ -0,0 +1,12 @@
+{
+  "sent_title": "Check your email",
+  "check_email": "We've sent a sign-in link to {{email}}.",
+  "expires_note": "The link expires in 15 minutes.",
+  "error_rate_limited": "Too many magic link requests. Please try again later.",
+  "error_token_expired": "This sign-in link has expired. Please request a new one.",
+  "error_token_invalid": "This sign-in link is invalid. Please request a new one.",
+  "success_title": "Email verified",
+  "success_message": "Your sign-in link has been verified successfully.",
+  "success_hint": "Please return to the browser where you started the sign-in and the login will complete automatically.",
+  "success_close_tab": "You can safely close this tab."
+}

package/locales/default/en/reset-password.json

@@ -0,0 +1,16 @@
+{
+  "title": "Set a new password",
+  "description": "Choose a strong password for your account.",
+  "password_label": "New password",
+  "password_placeholder": "Enter new password",
+  "confirm_label": "Confirm password",
+  "confirm_placeholder": "Re-enter new password",
+  "submit": "Reset password",
+  "success_title": "Password reset successfully",
+  "success_message": "Your password has been updated. You can now sign in with your new password.",
+  "back_to_login": "Go to sign in",
+  "error_mismatch": "Passwords do not match",
+  "error_weak": "Password does not meet the minimum requirements",
+  "error_token_expired": "This reset link has expired. Please request a new one.",
+  "error_token_invalid": "This reset link is invalid. Please request a new one."
+}

package/locales/default/en/two-factor.json

@@ -0,0 +1,29 @@
+{
+  "verify_title": "Two-factor authentication",
+  "verify_email_subtitle": "We sent a verification code to {{maskedEmail}}",
+  "verify_email_subtitle_prefix": "We sent a verification code to",
+  "verify_totp_subtitle": "Enter the code from your authenticator app",
+  "code_label": "Verification code",
+  "code_placeholder": "000000",
+  "verify_button": "Verify",
+  "resend_code": "Resend code",
+  "or_divider": "or",
+  "recovery_prompt": "Lost access to your authenticator?",
+  "use_recovery_code": "Use a recovery code",
+  "use_verification_code": "Use verification code instead",
+  "error_code_required": "Please enter a verification code",
+  "error_invalid_code": "Invalid verification code. Please try again.",
+  "setup_title": "Set up two-factor authentication",
+  "setup_subtitle": "Your organization requires two-factor authentication. Choose a method to secure your account.",
+  "setup_step1": "Step 1: Scan QR code",
+  "setup_scan_instructions": "Open your authenticator app (Google Authenticator, Authy, 1Password, etc.) and scan this QR code.",
+  "qr_code_alt": "TOTP QR code",
+  "manual_entry_label": "Can't scan? Enter this code manually:",
+  "setup_step2": "Step 2: Enter verification code",
+  "setup_enter_code_instructions": "Enter the 6-digit code from your authenticator app to confirm setup.",
+  "totp_code_label": "Authenticator code",
+  "confirm_setup_button": "Confirm & sign in",
+  "recovery_codes_title": "Save your recovery codes",
+  "recovery_codes_warning": "Save these recovery codes in a safe place. Each code can only be used once. If you lose access to your authenticator, you can use a recovery code to sign in.",
+  "use_email_instead": "Use email verification instead"
+}

package/migrations/001_extensions.sql

@@ -0,0 +1,22 @@
+-- Up Migration
+
+-- Enable required PostgreSQL extensions
+CREATE EXTENSION IF NOT EXISTS "pgcrypto";    -- gen_random_uuid() for UUID primary keys
+CREATE EXTENSION IF NOT EXISTS "citext";      -- Case-insensitive text type for emails
+
+-- Reusable trigger function to auto-update the updated_at column
+-- Attach to any table: CREATE TRIGGER set_updated_at BEFORE UPDATE ON <table>
+--   FOR EACH ROW EXECUTE FUNCTION trigger_set_updated_at();
+CREATE OR REPLACE FUNCTION trigger_set_updated_at()
+RETURNS TRIGGER AS $$
+BEGIN
+    NEW.updated_at = NOW();
+    RETURN NEW;
+END;
+$$ LANGUAGE plpgsql;
+
+-- Down Migration
+
+DROP FUNCTION IF EXISTS trigger_set_updated_at() CASCADE;
+DROP EXTENSION IF EXISTS "citext";
+DROP EXTENSION IF EXISTS "pgcrypto";

package/migrations/002_organizations.sql

@@ -0,0 +1,43 @@
+-- Up Migration
+
+-- The tenant table — each organization represents a customer with their own user pool
+CREATE TABLE organizations (
+    id              UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+    name            VARCHAR(255) NOT NULL,
+    slug            VARCHAR(100) NOT NULL UNIQUE,       -- URL-safe identifier, used in OIDC issuer path
+    status          VARCHAR(20) NOT NULL DEFAULT 'active'
+                    CHECK (status IN ('active', 'suspended', 'archived')),
+    is_super_admin  BOOLEAN NOT NULL DEFAULT FALSE,     -- Only one org can be super-admin
+
+    -- Branding (per-tenant login page customization)
+    branding_logo_url       TEXT,
+    branding_favicon_url    TEXT,
+    branding_primary_color  VARCHAR(7),                 -- Hex color, e.g., #3B82F6
+    branding_company_name   VARCHAR(255),
+    branding_custom_css     TEXT,                        -- Optional raw CSS override
+
+    -- Locale
+    default_locale  VARCHAR(10) DEFAULT 'en',           -- Fallback locale for this org
+
+    -- Metadata
+    created_at      TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    updated_at      TIMESTAMPTZ NOT NULL DEFAULT NOW()
+);
+
+-- Ensures only one super-admin org exists via partial unique index
+CREATE UNIQUE INDEX idx_organizations_super_admin
+    ON organizations (is_super_admin) WHERE is_super_admin = TRUE;
+
+-- Auto-update updated_at on row modification
+CREATE TRIGGER set_updated_at
+    BEFORE UPDATE ON organizations
+    FOR EACH ROW
+    EXECUTE FUNCTION trigger_set_updated_at();
+
+COMMENT ON TABLE organizations IS 'Tenant table — each organization represents a customer with their own user pool';
+COMMENT ON COLUMN organizations.slug IS 'URL-safe identifier used in OIDC issuer path (e.g., /{slug}/.well-known/openid-configuration)';
+COMMENT ON COLUMN organizations.is_super_admin IS 'Only one organization can be super-admin (enforced by partial unique index)';
+
+-- Down Migration
+
+DROP TABLE IF EXISTS organizations CASCADE;