@prenta/core 0.118.0

package/dist/auth/totp.js

@@ -0,0 +1,134 @@
+import { createHmac } from 'crypto';
+const TOTP_PERIOD = 30;
+const TOTP_DIGITS = 6;
+export function generateTOTPSecret() {
+    const bytes = new Uint8Array(20);
+    crypto.getRandomValues(bytes);
+    return base32Encode(bytes);
+}
+export function generateTOTPUri(secret, email, issuer = 'Prenta CMS') {
+    return `otpauth://totp/${encodeURIComponent(issuer)}:${encodeURIComponent(email)}?secret=${secret}&issuer=${encodeURIComponent(issuer)}&algorithm=SHA1&digits=${TOTP_DIGITS}&period=${TOTP_PERIOD}`;
+}
+/**
+ * Verify a TOTP code and return the matched time-step counter, or null if no
+ * code in the ±`window` span matches. The counter enables single-use
+ * enforcement: the caller persists it and rejects any code whose step was
+ * already consumed, so a captured-but-still-valid code can't be replayed within
+ * its window (#565).
+ */
+export function verifyTOTPStep(token, secret, window = 1) {
+    const now = Math.floor(Date.now() / 1000);
+    for (let i = -window; i <= window; i++) {
+        const counter = Math.floor((now + i * TOTP_PERIOD) / TOTP_PERIOD);
+        const expected = generateHOTP(secret, counter);
+        if (timingSafeEqual(token, expected))
+            return counter;
+    }
+    return null;
+}
+export function verifyTOTP(token, secret, window = 1) {
+    return verifyTOTPStep(token, secret, window) !== null;
+}
+/**
+ * Generate the current TOTP code for a secret — the counterpart to
+ * {@link verifyTOTP}, for tooling and tests (an authenticator app is the normal
+ * source of codes).
+ */
+export function generateTOTP(secret) {
+    return generateHOTP(secret, Math.floor(Date.now() / 1000 / TOTP_PERIOD));
+}
+function generateHOTP(secret, counter) {
+    const decodedSecret = base32Decode(secret);
+    const buffer = Buffer.alloc(8);
+    for (let i = 7; i >= 0; i--) {
+        buffer[i] = counter & 0xff;
+        counter = counter >> 8;
+    }
+    const hmac = createHmac('sha1', decodedSecret);
+    hmac.update(buffer);
+    const digest = hmac.digest();
+    const offset = digest[digest.length - 1] & 0x0f;
+    const code = ((digest[offset] & 0x7f) << 24) |
+        ((digest[offset + 1] & 0xff) << 16) |
+        ((digest[offset + 2] & 0xff) << 8) |
+        (digest[offset + 3] & 0xff);
+    return String(code % 10 ** TOTP_DIGITS).padStart(TOTP_DIGITS, '0');
+}
+function timingSafeEqual(a, b) {
+    if (a.length !== b.length)
+        return false;
+    let result = 0;
+    for (let i = 0; i < a.length; i++) {
+        result |= a.charCodeAt(i) ^ b.charCodeAt(i);
+    }
+    return result === 0;
+}
+const BASE32_CHARS = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ234567';
+function base32Encode(data) {
+    let bits = 0, value = 0, output = '';
+    for (const byte of data) {
+        value = (value << 8) | byte;
+        bits += 8;
+        while (bits >= 5) {
+            output += BASE32_CHARS[(value >>> (bits - 5)) & 31];
+            bits -= 5;
+        }
+    }
+    if (bits > 0)
+        output += BASE32_CHARS[(value << (5 - bits)) & 31];
+    return output;
+}
+function base32Decode(encoded) {
+    const cleaned = encoded.replace(/=+$/, '').toUpperCase();
+    let bits = 0, value = 0;
+    const output = [];
+    for (const char of cleaned) {
+        const idx = BASE32_CHARS.indexOf(char);
+        if (idx === -1)
+            continue;
+        value = (value << 5) | idx;
+        bits += 5;
+        if (bits >= 8) {
+            output.push((value >>> (bits - 8)) & 0xff);
+            bits -= 8;
+        }
+    }
+    return Buffer.from(output);
+}
+/**
+ * Normalize a user-entered backup code: strip whitespace/dashes and lowercase
+ * so "ABCD-1234" and "abcd 1234" both match the stored "abcd1234".
+ */
+export function normalizeBackupCode(input) {
+    return input.replace(/[\s-]/g, '').toLowerCase();
+}
+/**
+ * Find the index of the stored backup code matching the submitted value, or -1.
+ * Compares against every stored code in constant time so timing can't reveal
+ * which/whether a code matched. Callers must treat a match as single-use and
+ * remove the code from storage.
+ */
+export function findBackupCodeMatch(codes, submitted) {
+    const normalized = normalizeBackupCode(submitted);
+    if (!normalized)
+        return -1;
+    let matchIdx = -1;
+    for (let i = 0; i < codes.length; i++) {
+        if (timingSafeEqual(codes[i].toLowerCase(), normalized))
+            matchIdx = i;
+    }
+    return matchIdx;
+}
+export function generateBackupCodes(count = 8) {
+    const codes = [];
+    for (let i = 0; i < count; i++) {
+        const bytes = new Uint8Array(5);
+        crypto.getRandomValues(bytes);
+        codes.push(Array.from(bytes)
+            .map((b) => b.toString(16).padStart(2, '0'))
+            .join('')
+            .slice(0, 8));
+    }
+    return codes;
+}
+//# sourceMappingURL=totp.js.map

package/dist/auth/totp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"totp.js","sourceRoot":"","sources":["../../src/auth/totp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAEnC,MAAM,WAAW,GAAG,EAAE,CAAA;AACtB,MAAM,WAAW,GAAG,CAAC,CAAA;AAErB,MAAM,UAAU,kBAAkB;IAChC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;IAChC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;IAC7B,OAAO,YAAY,CAAC,KAAK,CAAC,CAAA;AAC5B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,KAAa,EAAE,MAAM,GAAG,YAAY;IAClF,OAAO,kBAAkB,kBAAkB,CAAC,MAAM,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,WAAW,MAAM,WAAW,kBAAkB,CAAC,MAAM,CAAC,0BAA0B,WAAW,WAAW,WAAW,EAAE,CAAA;AACrM,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,MAAc,EAAE,MAAM,GAAG,CAAC;IACtE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,WAAW,CAAC,GAAG,WAAW,CAAC,CAAA;QACjE,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC9C,IAAI,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,OAAO,OAAO,CAAA;IACtD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa,EAAE,MAAc,EAAE,MAAM,GAAG,CAAC;IAClE,OAAO,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,IAAI,CAAA;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAO,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,WAAW,CAAC,CAAC,CAAA;AAC1E,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,OAAe;IACnD,MAAM,aAAa,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,IAAI,CAAA;QAC1B,OAAO,GAAG,OAAO,IAAI,CAAC,CAAA;IACxB,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;IAC9C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACnB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAA;IAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,GAAG,IAAI,CAAA;IAChD,MAAM,IAAI,GACR,CAAC,CAAC,MAAM,CAAC,MAAM,CAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACpC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,GAAG,IAAI,CAAC,CAAA;IAC9B,OAAO,MAAM,CAAC,IAAI,GAAG,EAAE,IAAI,WAAW,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;AACpE,CAAC;AAED,SAAS,eAAe,CAAC,CAAS,EAAE,CAAS;IAC3C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACvC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;IAC7C,CAAC;IACD,OAAO,MAAM,KAAK,CAAC,CAAA;AACrB,CAAC;AAED,MAAM,YAAY,GAAG,kCAAkC,CAAA;AAEvD,SAAS,YAAY,CAAC,IAAgB;IACpC,IAAI,IAAI,GAAG,CAAC,EACV,KAAK,GAAG,CAAC,EACT,MAAM,GAAG,EAAE,CAAA;IACb,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAA;QAC3B,IAAI,IAAI,CAAC,CAAA;QACT,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,YAAY,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAA;YACnD,IAAI,IAAI,CAAC,CAAA;QACX,CAAC;IACH,CAAC;IACD,IAAI,IAAI,GAAG,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAA;IAChE,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;IACxD,IAAI,IAAI,GAAG,CAAC,EACV,KAAK,GAAG,CAAC,CAAA;IACX,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QACtC,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,SAAQ;QACxB,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,GAAG,CAAA;QAC1B,IAAI,IAAI,CAAC,CAAA;QACT,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;YAC1C,IAAI,IAAI,CAAC,CAAA;QACX,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;AAClD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAe,EAAE,SAAiB;IACpE,MAAM,UAAU,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAA;IACjD,IAAI,CAAC,UAAU;QAAE,OAAO,CAAC,CAAC,CAAA;IAC1B,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAA;IACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,EAAE,UAAU,CAAC;YAAE,QAAQ,GAAG,CAAC,CAAA;IACxE,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAK,GAAG,CAAC;IAC3C,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;QAC7B,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;aACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;aAC3C,IAAI,CAAC,EAAE,CAAC;aACR,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CACf,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/auth/user-admin.d.ts

@@ -0,0 +1,119 @@
+/**
+ * Per-user admin read models for the User detail drawer (Overview / Security /
+ * Sessions / Activity / Permissions tabs).
+ *
+ * Pure data shaping over the Prisma client — no config or request coupling — so
+ * it unit-tests cleanly. The API layer supplies `workspaceDomain` (for the
+ * external-domain flag) and the viewer's `currentSessionId` (to mark the
+ * "this device" session). Mirrors the conventions in `team.ts`.
+ */
+import { type DisplayRole, type UserRoleEnum, type Permission } from './roles.js';
+import type { PrentaDB } from '../db/client-types.js';
+export type MemberStatus = 'active' | 'suspended' | 'locked' | 'deactivated';
+export interface UserDetailOptions {
+    workspaceDomain?: string | null;
+    currentUserId?: string;
+}
+export interface UserDetail {
+    id: string;
+    name: string;
+    email: string;
+    avatarUrl: string | null;
+    initials: string;
+    role: UserRoleEnum;
+    roleName: DisplayRole;
+    status: MemberStatus;
+    mfaEnabled: boolean;
+    mfaRequired: boolean;
+    passwordSet: boolean;
+    forcePasswordReset: boolean;
+    failedLoginCount: number;
+    lockedAt: string | null;
+    suspendedAt: string | null;
+    authProvider: string | null;
+    oauthProviders: string[];
+    /** True when the account can only sign in via an external identity provider. */
+    ssoOnly: boolean;
+    emailVerified: boolean;
+    lastLoginAt: string | null;
+    lastActiveAt: string | null;
+    acceptedInviteAt: string | null;
+    createdAt: string;
+    invitedBy: {
+        id: string;
+        name: string;
+        email: string;
+    } | null;
+    externalDomain: boolean;
+    contentOwnedCount: number;
+    isCurrentUser: boolean;
+}
+export interface SessionInfo {
+    id: string;
+    deviceLabel: string;
+    browser: string;
+    os: string;
+    ipCountry: string | null;
+    createdAt: string;
+    lastSeenAt: string;
+    expiresAt: string;
+    revokedAt: string | null;
+    current: boolean;
+    active: boolean;
+}
+export interface ActivityEvent {
+    id: string;
+    event: string;
+    /** Whether the user was the actor or the target of the event. */
+    role: 'actor' | 'target';
+    ipAddress: string | null;
+    timestamp: string;
+    details: Record<string, unknown> | null;
+}
+export interface PermissionView {
+    role: UserRoleEnum;
+    roleName: DisplayRole;
+    permissions: Permission[];
+}
+/**
+ * Best-effort User-Agent parsing into a friendly device label. Intentionally
+ * dependency-free and conservative: an unknown UA degrades to "Unknown device"
+ * rather than guessing. This is presentational only — never used for auth.
+ */
+export declare function parseUserAgent(ua: string | null | undefined): {
+    browser: string;
+    os: string;
+    deviceLabel: string;
+};
+export declare function getUserDetail(db: PrentaDB, userId: string, opts?: UserDetailOptions): Promise<UserDetail | null>;
+export declare function listUserSessions(db: PrentaDB, userId: string, currentSessionId?: string): Promise<SessionInfo[]>;
+export declare function listUserActivity(db: PrentaDB, userId: string, limit?: number): Promise<ActivityEvent[]>;
+export declare function getUserPermissionView(role: string): PermissionView;
+export interface TransferResult {
+    documents: number;
+    media: number;
+    templates: number;
+    total: number;
+}
+/**
+ * Count the content a user *owns* (authored documents, uploaded media,
+ * created templates). Soft-deleted documents are included so the count
+ * reflects everything a transfer would reassign — nothing is silently
+ * orphaned. Immutable history (versions, audit logs) is never counted.
+ */
+export declare function countOwnedContent(db: PrentaDB, userId: string): Promise<number>;
+/**
+ * Reassign every piece of content owned by `fromUserId` to `toUserId`:
+ * authored documents (`Document.createdById`), uploaded media
+ * (`Media.uploadedById`), and created templates (`ContentTemplate.createdById`).
+ *
+ * Deliberately does NOT touch `updatedById`, version history, or audit logs —
+ * those record *who did what* and rewriting them would falsify the trail. This
+ * only moves the "owner of record" so content survives a user's removal.
+ *
+ * Returns the per-type counts actually reassigned. Each model is guarded so a
+ * trimmed Prisma schema (or test double) that lacks one of them is a no-op for
+ * that type rather than a hard failure.
+ */
+export declare function transferContentOwnership(db: PrentaDB, fromUserId: string, toUserId: string): Promise<TransferResult>;
+//# sourceMappingURL=user-admin.d.ts.map

package/dist/auth/user-admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-admin.d.ts","sourceRoot":"","sources":["../../src/auth/user-admin.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,UAAU,EAChB,MAAM,YAAY,CAAA;AACnB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AAErD,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,GAAG,aAAa,CAAA;AAE5E,MAAM,WAAW,iBAAiB;IAChC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,YAAY,CAAA;IAClB,QAAQ,EAAE,WAAW,CAAA;IACrB,MAAM,EAAE,YAAY,CAAA;IAEpB,UAAU,EAAE,OAAO,CAAA;IACnB,WAAW,EAAE,OAAO,CAAA;IACpB,WAAW,EAAE,OAAO,CAAA;IACpB,kBAAkB,EAAE,OAAO,CAAA;IAC3B,gBAAgB,EAAE,MAAM,CAAA;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,gFAAgF;IAChF,OAAO,EAAE,OAAO,CAAA;IAEhB,aAAa,EAAE,OAAO,CAAA;IACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IAC7D,cAAc,EAAE,OAAO,CAAA;IAEvB,iBAAiB,EAAE,MAAM,CAAA;IAEzB,aAAa,EAAE,OAAO,CAAA;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAA;IACV,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,iEAAiE;IACjE,IAAI,EAAE,OAAO,GAAG,QAAQ,CAAA;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CACxC;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,YAAY,CAAA;IAClB,QAAQ,EAAE,WAAW,CAAA;IACrB,WAAW,EAAE,UAAU,EAAE,CAAA;CAC1B;AAkCD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG;IAC7D,OAAO,EAAE,MAAM,CAAA;IACf,EAAE,EAAE,MAAM,CAAA;IACV,WAAW,EAAE,MAAM,CAAA;CACpB,CAwBA;AAMD,wBAAsB,aAAa,CACjC,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAkE5B;AAMD,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE,MAAM,EACd,gBAAgB,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,WAAW,EAAE,CAAC,CA0BxB;AAMD,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE,MAAM,EACd,KAAK,SAAK,GACT,OAAO,CAAC,aAAa,EAAE,CAAC,CAmC1B;AAiBD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAMlE;AAMD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAerF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,wBAAwB,CAC5C,EAAE,EAAE,QAAQ,EACZ,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,cAAc,CAAC,CAezB"}

package/dist/auth/user-admin.js

@@ -0,0 +1,292 @@
+/**
+ * Per-user admin read models for the User detail drawer (Overview / Security /
+ * Sessions / Activity / Permissions tabs).
+ *
+ * Pure data shaping over the Prisma client — no config or request coupling — so
+ * it unit-tests cleanly. The API layer supplies `workspaceDomain` (for the
+ * external-domain flag) and the viewer's `currentSessionId` (to mark the
+ * "this device" session). Mirrors the conventions in `team.ts`.
+ */
+import { toDisplayRole, permissionsForRole, } from './roles.js';
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+function initialsFor(name, email) {
+    const source = name?.trim() || email;
+    const parts = source.split(/\s+/).filter(Boolean);
+    if (parts.length >= 2)
+        return (parts[0][0] + parts[1][0]).toUpperCase();
+    const single = parts[0] ?? email;
+    return single.slice(0, 2).toUpperCase();
+}
+function emailDomain(email) {
+    return email.split('@')[1]?.toLowerCase() ?? '';
+}
+function iso(d) {
+    if (!d)
+        return null;
+    return d instanceof Date ? d.toISOString() : d;
+}
+function memberStatus(user) {
+    if (!user.isActive)
+        return 'deactivated';
+    if (user.lockedAt)
+        return 'locked';
+    if (user.suspendedAt)
+        return 'suspended';
+    return 'active';
+}
+/**
+ * Best-effort User-Agent parsing into a friendly device label. Intentionally
+ * dependency-free and conservative: an unknown UA degrades to "Unknown device"
+ * rather than guessing. This is presentational only — never used for auth.
+ */
+export function parseUserAgent(ua) {
+    if (!ua)
+        return { browser: 'Unknown', os: 'Unknown', deviceLabel: 'Unknown device' };
+    let browser = 'Unknown';
+    // Order matters: Edge/Chrome both contain "Chrome"; check the more specific first.
+    if (/\bEdg(e|A|iOS)?\//.test(ua))
+        browser = 'Edge';
+    else if (/\bOPR\/|\bOpera\b/.test(ua))
+        browser = 'Opera';
+    else if (/\bChrome\//.test(ua) && !/\bChromium\b/.test(ua))
+        browser = 'Chrome';
+    else if (/\bChromium\//.test(ua))
+        browser = 'Chromium';
+    else if (/\bFirefox\//.test(ua))
+        browser = 'Firefox';
+    else if (/\bVersion\/.*Safari\//.test(ua) || /\bSafari\//.test(ua))
+        browser = 'Safari';
+    let os = 'Unknown';
+    if (/\bWindows NT 10/.test(ua))
+        os = 'Windows';
+    else if (/\bWindows\b/.test(ua))
+        os = 'Windows';
+    else if (/\biPhone\b/.test(ua))
+        os = 'iPhone';
+    else if (/\biPad\b/.test(ua))
+        os = 'iPad';
+    else if (/\bMac OS X\b|\bMacintosh\b/.test(ua))
+        os = 'macOS';
+    else if (/\bAndroid\b/.test(ua))
+        os = 'Android';
+    else if (/\bLinux\b/.test(ua))
+        os = 'Linux';
+    const deviceLabel = browser === 'Unknown' && os === 'Unknown' ? 'Unknown device' : `${browser} on ${os}`;
+    return { browser, os, deviceLabel };
+}
+// ---------------------------------------------------------------------------
+// Detail
+// ---------------------------------------------------------------------------
+export async function getUserDetail(db, userId, opts = {}) {
+    const user = await db.user.findUnique({ where: { id: userId } });
+    if (!user)
+        return null;
+    // OAuth providers connected to this account (best-effort; model may be absent
+    // in trimmed test doubles).
+    let oauthProviders = [];
+    if (db.oAuthAccount?.findMany) {
+        try {
+            const rows = await db.oAuthAccount.findMany({
+                where: { userId },
+                select: { provider: true },
+            });
+            oauthProviders = Array.from(new Set(rows.map((r) => String(r.provider)).filter(Boolean)));
+        }
+        catch {
+            oauthProviders = [];
+        }
+    }
+    const contentOwnedCount = await countOwnedContent(db, userId);
+    let invitedBy = null;
+    if (user.invitedById && db.user?.findUnique) {
+        try {
+            const inviter = await db.user.findUnique({
+                where: { id: user.invitedById },
+                select: { id: true, name: true, email: true },
+            });
+            if (inviter)
+                invitedBy = { id: inviter.id, name: inviter.name, email: inviter.email };
+        }
+        catch {
+            invitedBy = null;
+        }
+    }
+    const passwordSet = !!user.passwordHash;
+    const domain = emailDomain(user.email);
+    return {
+        id: user.id,
+        name: user.name,
+        email: user.email,
+        avatarUrl: user.avatarUrl ?? null,
+        initials: initialsFor(user.name, user.email),
+        role: user.role,
+        roleName: toDisplayRole(user.role),
+        status: memberStatus(user),
+        mfaEnabled: !!user.totpEnabled,
+        mfaRequired: !!user.mfaRequired,
+        passwordSet,
+        forcePasswordReset: !!user.forcePasswordReset,
+        failedLoginCount: user.failedLoginCount ?? 0,
+        lockedAt: iso(user.lockedAt),
+        suspendedAt: iso(user.suspendedAt),
+        authProvider: user.authProvider ?? null,
+        oauthProviders,
+        ssoOnly: !passwordSet && oauthProviders.length > 0,
+        emailVerified: !!user.emailVerified,
+        lastLoginAt: iso(user.lastLoginAt),
+        lastActiveAt: iso(user.lastActiveAt ?? user.lastLoginAt),
+        acceptedInviteAt: iso(user.acceptedInviteAt),
+        createdAt: iso(user.createdAt) ?? new Date().toISOString(),
+        invitedBy,
+        externalDomain: !!opts.workspaceDomain && !!domain && domain !== opts.workspaceDomain,
+        contentOwnedCount,
+        isCurrentUser: !!opts.currentUserId && user.id === opts.currentUserId,
+    };
+}
+// ---------------------------------------------------------------------------
+// Sessions
+// ---------------------------------------------------------------------------
+export async function listUserSessions(db, userId, currentSessionId) {
+    if (!db.session?.findMany)
+        return [];
+    const rows = await db.session.findMany({
+        where: { userId },
+        orderBy: { createdAt: 'desc' },
+    });
+    const now = Date.now();
+    return rows.map((s) => {
+        const { browser, os, deviceLabel } = parseUserAgent(s.userAgent);
+        const expiresAt = iso(s.expiresAt) ?? new Date().toISOString();
+        const revokedAt = iso(s.revokedAt);
+        const active = !revokedAt && new Date(expiresAt).getTime() > now;
+        return {
+            id: s.id,
+            deviceLabel,
+            browser,
+            os,
+            ipCountry: null,
+            createdAt: iso(s.createdAt) ?? new Date().toISOString(),
+            lastSeenAt: iso(s.createdAt) ?? new Date().toISOString(),
+            expiresAt,
+            revokedAt,
+            current: !!currentSessionId && s.id === currentSessionId,
+            active,
+        };
+    });
+}
+// ---------------------------------------------------------------------------
+// Activity
+// ---------------------------------------------------------------------------
+export async function listUserActivity(db, userId, limit = 50) {
+    if (!db.auditLog?.findMany)
+        return [];
+    // Events where the user is the actor, plus events targeting the user (these
+    // store the subject in `details.targetUserId`). Two queries merged rather than
+    // a JSON-path OR so it works against simple test doubles and any DB.
+    const take = Math.min(Math.max(limit, 1), 200);
+    const [asActor, asTarget] = await Promise.all([
+        db.auditLog.findMany({
+            where: { userId },
+            orderBy: { timestamp: 'desc' },
+            take,
+        }),
+        db.auditLog
+            .findMany({
+            where: { details: { path: ['targetUserId'], equals: userId } },
+            orderBy: { timestamp: 'desc' },
+            take,
+        })
+            .catch(() => []),
+    ]);
+    const seen = new Set();
+    const merged = [];
+    for (const r of asActor) {
+        if (seen.has(r.id))
+            continue;
+        seen.add(r.id);
+        merged.push(toActivity(r, 'actor'));
+    }
+    for (const r of asTarget) {
+        if (seen.has(r.id))
+            continue;
+        seen.add(r.id);
+        merged.push(toActivity(r, 'target'));
+    }
+    merged.sort((a, b) => new Date(b.timestamp).getTime() - new Date(a.timestamp).getTime());
+    return merged.slice(0, take);
+}
+function toActivity(r, role) {
+    return {
+        id: r.id,
+        event: r.event,
+        role,
+        ipAddress: r.ipAddress ?? null,
+        timestamp: iso(r.timestamp) ?? new Date().toISOString(),
+        details: r.details ?? null,
+    };
+}
+// ---------------------------------------------------------------------------
+// Permissions
+// ---------------------------------------------------------------------------
+export function getUserPermissionView(role) {
+    return {
+        role: role?.toUpperCase() ?? 'VIEWER',
+        roleName: toDisplayRole(role),
+        permissions: permissionsForRole(role),
+    };
+}
+/**
+ * Count the content a user *owns* (authored documents, uploaded media,
+ * created templates). Soft-deleted documents are included so the count
+ * reflects everything a transfer would reassign — nothing is silently
+ * orphaned. Immutable history (versions, audit logs) is never counted.
+ */
+export async function countOwnedContent(db, userId) {
+    const safeCount = async (model, where) => {
+        if (!model?.count)
+            return 0;
+        try {
+            return await model.count({ where });
+        }
+        catch {
+            return 0;
+        }
+    };
+    const [documents, media, templates] = await Promise.all([
+        safeCount(db.document, { createdById: userId }),
+        safeCount(db.media, { uploadedById: userId }),
+        safeCount(db.contentTemplate, { createdById: userId }),
+    ]);
+    return documents + media + templates;
+}
+/**
+ * Reassign every piece of content owned by `fromUserId` to `toUserId`:
+ * authored documents (`Document.createdById`), uploaded media
+ * (`Media.uploadedById`), and created templates (`ContentTemplate.createdById`).
+ *
+ * Deliberately does NOT touch `updatedById`, version history, or audit logs —
+ * those record *who did what* and rewriting them would falsify the trail. This
+ * only moves the "owner of record" so content survives a user's removal.
+ *
+ * Returns the per-type counts actually reassigned. Each model is guarded so a
+ * trimmed Prisma schema (or test double) that lacks one of them is a no-op for
+ * that type rather than a hard failure.
+ */
+export async function transferContentOwnership(db, fromUserId, toUserId) {
+    const reassign = async (model, field) => {
+        if (!model?.updateMany)
+            return 0;
+        const res = await model.updateMany({
+            where: { [field]: fromUserId },
+            data: { [field]: toUserId },
+        });
+        return typeof res?.count === 'number' ? res.count : 0;
+    };
+    const documents = await reassign(db.document, 'createdById');
+    const media = await reassign(db.media, 'uploadedById');
+    const templates = await reassign(db.contentTemplate, 'createdById');
+    return { documents, media, templates, total: documents + media + templates };
+}
+//# sourceMappingURL=user-admin.js.map

package/dist/auth/user-admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-admin.js","sourceRoot":"","sources":["../../src/auth/user-admin.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EACL,aAAa,EACb,kBAAkB,GAInB,MAAM,YAAY,CAAA;AA2EnB,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa;IAC9C,MAAM,MAAM,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,KAAK,CAAA;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACjD,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAE,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAE,CAAC,CAAC,WAAW,EAAE,CAAA;IAC3E,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAA;IAChC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;AACzC,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAA;AACjD,CAAC;AAED,SAAS,GAAG,CAAC,CAAmC;IAC9C,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACnB,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;AAChD,CAAC;AAED,SAAS,YAAY,CAAC,IAIrB;IACC,IAAI,CAAC,IAAI,CAAC,QAAQ;QAAE,OAAO,aAAa,CAAA;IACxC,IAAI,IAAI,CAAC,QAAQ;QAAE,OAAO,QAAQ,CAAA;IAClC,IAAI,IAAI,CAAC,WAAW;QAAE,OAAO,WAAW,CAAA;IACxC,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,EAA6B;IAK1D,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAA;IAEpF,IAAI,OAAO,GAAG,SAAS,CAAA;IACvB,mFAAmF;IACnF,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,GAAG,MAAM,CAAA;SAC7C,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,GAAG,OAAO,CAAA;SACnD,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,GAAG,QAAQ,CAAA;SACzE,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,GAAG,UAAU,CAAA;SACjD,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,GAAG,SAAS,CAAA;SAC/C,IAAI,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,GAAG,QAAQ,CAAA;IAEtF,IAAI,EAAE,GAAG,SAAS,CAAA;IAClB,IAAI,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,EAAE,GAAG,SAAS,CAAA;SACzC,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,EAAE,GAAG,SAAS,CAAA;SAC1C,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,EAAE,GAAG,QAAQ,CAAA;SACxC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,EAAE,GAAG,MAAM,CAAA;SACpC,IAAI,4BAA4B,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,EAAE,GAAG,OAAO,CAAA;SACvD,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,EAAE,GAAG,SAAS,CAAA;SAC1C,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,EAAE,GAAG,OAAO,CAAA;IAE3C,MAAM,WAAW,GACf,OAAO,KAAK,SAAS,IAAI,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,OAAO,OAAO,EAAE,EAAE,CAAA;IACtF,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,CAAA;AACrC,CAAC;AAED,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,EAAY,EACZ,MAAc,EACd,OAA0B,EAAE;IAE5B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;IAChE,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IAEtB,8EAA8E;IAC9E,4BAA4B;IAC5B,IAAI,cAAc,GAAa,EAAE,CAAA;IACjC,IAAI,EAAE,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC;gBAC1C,KAAK,EAAE,EAAE,MAAM,EAAE;gBACjB,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;aAC3B,CAAC,CAAA;YACF,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QAChG,CAAC;QAAC,MAAM,CAAC;YACP,cAAc,GAAG,EAAE,CAAA;QACrB,CAAC;IACH,CAAC;IAED,MAAM,iBAAiB,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;IAE7D,IAAI,SAAS,GAA4B,IAAI,CAAA;IAC7C,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;gBACvC,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,WAAW,EAAE;gBAC/B,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;aAC9C,CAAC,CAAA;YACF,IAAI,OAAO;gBAAE,SAAS,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAA;QACvF,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,IAAI,CAAA;QAClB,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAA;IACvC,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAEtC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;QACjC,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC;QAC5C,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAClC,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC;QAC1B,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW;QAC9B,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW;QAC/B,WAAW;QACX,kBAAkB,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB;QAC7C,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,CAAC;QAC5C,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC5B,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;QAClC,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI;QACvC,cAAc;QACd,OAAO,EAAE,CAAC,WAAW,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC;QAClD,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa;QACnC,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;QAClC,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,WAAW,CAAC;QACxD,gBAAgB,EAAE,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC;QAC5C,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC1D,SAAS;QACT,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,KAAK,IAAI,CAAC,eAAe;QACrF,iBAAiB;QACjB,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,aAAa;KACtE,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAY,EACZ,MAAc,EACd,gBAAyB;IAEzB,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ;QAAE,OAAO,EAAE,CAAA;IACpC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;QACrC,KAAK,EAAE,EAAE,MAAM,EAAE;QACjB,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;KAC/B,CAAC,CAAA;IACF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACtB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAM,EAAe,EAAE;QACtC,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QAChE,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QAC9D,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QAClC,MAAM,MAAM,GAAG,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,GAAG,CAAA;QAChE,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,WAAW;YACX,OAAO;YACP,EAAE;YACF,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACvD,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACxD,SAAS;YACT,SAAS;YACT,OAAO,EAAE,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC,EAAE,KAAK,gBAAgB;YACxD,MAAM;SACP,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAY,EACZ,MAAc,EACd,KAAK,GAAG,EAAE;IAEV,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ;QAAE,OAAO,EAAE,CAAA;IACrC,4EAA4E;IAC5E,+EAA+E;IAC/E,qEAAqE;IACrE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IAC9C,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC5C,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACnB,KAAK,EAAE,EAAE,MAAM,EAAE;YACjB,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;YAC9B,IAAI;SACL,CAAC;QACF,EAAE,CAAC,QAAQ;aACR,QAAQ,CAAC;YACR,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YAC9D,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;YAC9B,IAAI;SACL,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,CAAC,EAAW,CAAC;KAC5B,CAAC,CAAA;IAEF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,MAAM,GAAoB,EAAE,CAAA;IAClC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,SAAQ;QAC5B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACd,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;IACrC,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,SAAQ;QAC5B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACd,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAA;IACtC,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;IACxF,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;AAC9B,CAAC;AAED,SAAS,UAAU,CAAC,CAAM,EAAE,IAAwB;IAClD,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,IAAI;QACJ,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;QAC9B,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACvD,OAAO,EAAG,CAAC,CAAC,OAA0C,IAAI,IAAI;KAC/D,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,OAAO;QACL,IAAI,EAAG,IAAI,EAAE,WAAW,EAAmB,IAAI,QAAQ;QACvD,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC;QAC7B,WAAW,EAAE,kBAAkB,CAAC,IAAI,CAAC;KACtC,CAAA;AACH,CAAC;AAaD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EAAY,EAAE,MAAc;IAClE,MAAM,SAAS,GAAG,KAAK,EAAE,KAAU,EAAE,KAA8B,EAAmB,EAAE;QACtF,IAAI,CAAC,KAAK,EAAE,KAAK;YAAE,OAAO,CAAC,CAAA;QAC3B,IAAI,CAAC;YACH,OAAO,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAA;QACV,CAAC;IACH,CAAC,CAAA;IACD,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACtD,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;QAC/C,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;QAC7C,SAAS,CAAC,EAAE,CAAC,eAAe,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;KACvD,CAAC,CAAA;IACF,OAAO,SAAS,GAAG,KAAK,GAAG,SAAS,CAAA;AACtC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,EAAY,EACZ,UAAkB,EAClB,QAAgB;IAEhB,MAAM,QAAQ,GAAG,KAAK,EAAE,KAAU,EAAE,KAAqC,EAAmB,EAAE;QAC5F,IAAI,CAAC,KAAK,EAAE,UAAU;YAAE,OAAO,CAAC,CAAA;QAChC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC;YACjC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE;YAC9B,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE;SAC5B,CAAC,CAAA;QACF,OAAO,OAAO,GAAG,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IACvD,CAAC,CAAA;IAED,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;IAC5D,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,CAAC,CAAA;IACtD,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,EAAE,CAAC,eAAe,EAAE,aAAa,CAAC,CAAA;IAEnE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,GAAG,KAAK,GAAG,SAAS,EAAE,CAAA;AAC9E,CAAC"}

package/dist/backup/index.d.ts

@@ -0,0 +1,19 @@
+export interface BackupMetadata {
+    id: string;
+    filename: string;
+    storageKey: string;
+    sizeBytes: number;
+    type: 'full' | 'incremental' | 'media';
+    metadata?: Record<string, unknown>;
+    createdAt: Date;
+}
+export interface BackupProvider {
+    createBackup(type: BackupMetadata['type']): Promise<BackupMetadata>;
+    restoreBackup(backupId: string): Promise<void>;
+    listBackups(): Promise<BackupMetadata[]>;
+    deleteBackup(backupId: string): Promise<void>;
+    getDownloadUrl(backupId: string): Promise<string>;
+}
+/** Create a database-backed backup provider. */
+export declare function createBackupProvider(_db: unknown, _storageAdapter: unknown): BackupProvider;
+//# sourceMappingURL=index.d.ts.map

package/dist/backup/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/backup/index.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,OAAO,CAAA;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClC,SAAS,EAAE,IAAI,CAAA;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,CAAC,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;IACnE,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9C,WAAW,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;IACxC,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7C,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CAClD;AAED,gDAAgD;AAChD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,GAAG,cAAc,CAqB3F"}

package/dist/backup/index.js

@@ -0,0 +1,24 @@
+/** Create a database-backed backup provider. */
+export function createBackupProvider(_db, _storageAdapter) {
+    // Logical exports (pg_dump → Blob) are not implemented yet. For DR, use
+    // provider-managed Prisma Postgres snapshots — see deployment.md § Database backups.
+    return {
+        async createBackup(_type) {
+            // TODO: pg_dump or logical export, upload to storage, record in prenta_backup_records
+            throw new Error('Not implemented');
+        },
+        async restoreBackup(_backupId) {
+            throw new Error('Not implemented');
+        },
+        async listBackups() {
+            throw new Error('Not implemented');
+        },
+        async deleteBackup(_backupId) {
+            throw new Error('Not implemented');
+        },
+        async getDownloadUrl(_backupId) {
+            throw new Error('Not implemented');
+        },
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/backup/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/backup/index.ts"],"names":[],"mappings":"AAkBA,gDAAgD;AAChD,MAAM,UAAU,oBAAoB,CAAC,GAAY,EAAE,eAAwB;IACzE,wEAAwE;IACxE,qFAAqF;IACrF,OAAO;QACL,KAAK,CAAC,YAAY,CAAC,KAAK;YACtB,sFAAsF;YACtF,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;QACpC,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,SAAS;YAC3B,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;QACpC,CAAC;QACD,KAAK,CAAC,WAAW;YACf,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;QACpC,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,SAAS;YAC1B,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;QACpC,CAAC;QACD,KAAK,CAAC,cAAc,CAAC,SAAS;YAC5B,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;QACpC,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/billing/stripe-meter.d.ts

@@ -0,0 +1,22 @@
+export type UsageMeterKind = 'ai_tokens' | 'seo_ai_calls';
+export interface UsageMeterEvent {
+    kind: UsageMeterKind;
+    quantity: number;
+    idempotencyKey: string;
+    userId?: string;
+    metadata?: Record<string, string>;
+}
+/** Fire-and-forget Stripe Billing Meter event. No-op when billing env is unset. Never throws. */
+export declare function emitUsageMeterEvent(event: UsageMeterEvent): Promise<void>;
+export declare function emitAiTokenMeterEvent(input: {
+    userId?: string;
+    featureKey: string;
+    modelId: string;
+    totalTokens: number;
+}): void;
+export declare function emitSeoAiCallMeterEvent(input: {
+    userId: string;
+    action: string;
+    issueId?: string;
+}): void;
+//# sourceMappingURL=stripe-meter.d.ts.map

package/dist/billing/stripe-meter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe-meter.d.ts","sourceRoot":"","sources":["../../src/billing/stripe-meter.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,cAAc,CAAA;AAEzD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,cAAc,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,cAAc,EAAE,MAAM,CAAA;IACtB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAClC;AA2BD,iGAAiG;AACjG,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAyC/E;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;CACpB,GAAG,IAAI,CAkBP;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,GAAG,IAAI,CAiBP"}