@prenta/core 7.7.1 → 7.8.0

package/dist/api/routes/users/handlers/users-admin.js

@@ -0,0 +1,310 @@
+import { createInvite } from '../../../../auth/invites.js';
+import { listTeamMembersPaginated, getUserStats } from '../../../../auth/team.js';
+import { normalizeAssignableRole, roleRank, isOwnerRole } from '../../../../auth/roles.js';
+import { logEvent } from '../../../../security/audit.js';
+import { getPrentaConfig } from '../../../../config/runtime.js';
+import { guardedDb } from '../../../guarded-db.js';
+import { json, errorResponse, internalError, hasModel, modelNotAvailable, requireAuth, ADMIN_ROLES, requireRole, revokeUserApiKeys, teamOptionsFor, isEmailConfiguredAsync, inviteLimiter, checkRateLimitAsync, } from '../../../route-helpers.js';
+import { inviteBodySchema, rolePatchBodySchema, validateBody } from '../../../validate-body.js';
+const db = guardedDb;
+// ---------------------------------------------------------------------------
+// Users route
+// ---------------------------------------------------------------------------
+export async function getUsers(request) {
+    try {
+        const auth = await requireAuth(request);
+        if (auth.error)
+            return auth.error;
+        const roleErr = requireRole(auth.session.role, ADMIN_ROLES);
+        if (roleErr)
+            return roleErr;
+        const d = db();
+        if (!hasModel(d, 'user'))
+            return modelNotAvailable('user');
+        const url = new URL(request.url);
+        const page = Math.max(1, Number(url.searchParams.get('page') ?? 1) || 1);
+        const pageSize = Math.max(1, Number(url.searchParams.get('pageSize') ?? 50) || 50);
+        const result = await listTeamMembersPaginated(d, {
+            search: url.searchParams.get('search') ?? undefined,
+            role: url.searchParams.get('role') ?? undefined,
+            status: url.searchParams.get('status') ?? undefined,
+        }, teamOptionsFor(auth.session), { page, pageSize });
+        return json({
+            data: result.members,
+            total: result.total,
+            page: result.page,
+            pageSize: result.pageSize,
+            totalPages: result.totalPages,
+        });
+    }
+    catch (err) {
+        return internalError(err);
+    }
+}
+export async function getUsersStats(request) {
+    try {
+        const auth = await requireAuth(request);
+        if (auth.error)
+            return auth.error;
+        const roleErr = requireRole(auth.session.role, ADMIN_ROLES);
+        if (roleErr)
+            return roleErr;
+        const d = db();
+        if (!hasModel(d, 'user'))
+            return modelNotAvailable('user');
+        const stats = await getUserStats(d, teamOptionsFor(auth.session));
+        return json({ data: { ...stats, emailConfigured: await isEmailConfiguredAsync(d) } });
+    }
+    catch (err) {
+        return internalError(err, 'user stats');
+    }
+}
+// Lightweight directory lookup used by the comment mention picker.
+// Any authenticated user can query this — mentions are a
+// collaboration primitive, not an admin tool. Returns ONLY the
+// minimal subset needed to render a picker row (id, name, email);
+// never expose role, hashed-password, or audit metadata here.
+//
+// The matcher is intentionally simple: case-insensitive `contains`
+// against name + email, capped at 10 results. The picker UI is a
+// dropdown — anything beyond 10 rows is unusable and would only
+// serve as a directory-enumeration attack vector. Inactive /
+// unapproved users are filtered out so the picker can't show
+// someone the actor can't actually collaborate with (the mention
+// would create a comment_mention notification that no one ever
+// reads).
+export async function searchUsers(request) {
+    try {
+        const auth = await requireAuth(request);
+        if (auth.error)
+            return auth.error;
+        const url = new URL(request.url);
+        const qRaw = (url.searchParams.get('q') ?? '').trim();
+        // Hard floor on query length: avoids dumping the entire user
+        // table when a UI sends an empty `q` by mistake, and avoids
+        // making the endpoint a generic directory browser.
+        if (qRaw.length === 0) {
+            return json({ data: [] });
+        }
+        // Hard ceiling on query length: 64 chars is more than any name
+        // or email prefix needs and prevents pathological regex / LIKE
+        // workloads from a hostile client.
+        const q = qRaw.slice(0, 64);
+        // Mention only people the actor can actually collaborate
+        // with — inactive accounts can't be reached, and unapproved
+        // accounts haven't passed admin gating yet. Either user would
+        // produce a `comment_mention` notification that goes nowhere
+        // (PR #159 Copilot finding — the previous query only filtered
+        // `isActive` even though the route comment promised both).
+        const users = await db().user.findMany({
+            where: {
+                isActive: true,
+                isApproved: true,
+                OR: [
+                    { name: { contains: q, mode: 'insensitive' } },
+                    { email: { contains: q, mode: 'insensitive' } },
+                ],
+            },
+            select: { id: true, name: true, email: true },
+            orderBy: { name: 'asc' },
+            take: 10,
+        });
+        return json({ data: users });
+    }
+    catch (err) {
+        return internalError(err, 'users search');
+    }
+}
+export async function inviteUser(request) {
+    try {
+        const auth = await requireAuth(request);
+        if (auth.error)
+            return auth.error;
+        const roleErr = requireRole(auth.session.role, ADMIN_ROLES);
+        if (roleErr)
+            return roleErr;
+        if (!(await checkRateLimitAsync(inviteLimiter, `invite:${auth.session.userId}`))) {
+            return errorResponse('Too many invitations. Please try again later.', 429);
+        }
+        const d = db();
+        if (!hasModel(d, 'user'))
+            return modelNotAvailable('user');
+        if (!hasModel(d, 'invite'))
+            return modelNotAvailable('invite');
+        const parsed = await validateBody(request, inviteBodySchema);
+        if (!parsed.ok)
+            return parsed.error;
+        const body = parsed.data;
+        // Only Owners may invite Owners.
+        if ((body.role ?? '').toUpperCase() === 'OWNER' && auth.session.role !== 'OWNER') {
+            return errorResponse('Only an Owner can assign the Owner role.', 403);
+        }
+        const opts = teamOptionsFor(auth.session);
+        // Seat enforcement: active members + pending invites reserve seats.
+        const stats = await getUserStats(d, opts);
+        if (stats.seatsAvailable != null && stats.seatsAvailable <= 0) {
+            return errorResponse(`All ${stats.seatLimit} seats are in use. Remove a member or raise the seat limit before inviting.`, 409);
+        }
+        const cmsConfig = getPrentaConfig();
+        const siteUrl = process.env.NEXT_PUBLIC_SITE_URL ?? new URL(request.url).origin;
+        const inviter = await d.user.findUnique({
+            where: { id: auth.session.userId },
+            select: { name: true },
+        });
+        const result = await createInvite(d, {
+            email: body.email,
+            role: body.role ?? 'VIEWER',
+            message: body.message,
+            expiresInDays: body.expiresInDays,
+        }, {
+            siteUrl,
+            // Invite accept links land on the reset screen, which lives on the
+            // login mount when split login is configured.
+            adminPath: cmsConfig?.admin?.loginPath ?? cmsConfig?.admin?.path ?? '/admin',
+            invitedByName: inviter?.name ?? undefined,
+            invitedByUserId: auth.session.userId,
+            siteName: cmsConfig?.admin?.branding?.name ??
+                undefined,
+        });
+        if (!result.success) {
+            return errorResponse(result.error ?? 'Could not create invitation', 400);
+        }
+        await logEvent({
+            event: 'user_invited',
+            userId: auth.session.userId,
+            details: {
+                targetEmail: result.invite?.email,
+                role: result.invite?.role,
+                inviteId: result.invite?.id,
+                emailed: result.emailed,
+            },
+        });
+        return json({
+            data: {
+                success: true,
+                invite: result.invite,
+                emailed: result.emailed,
+                inviteUrl: result.inviteUrl,
+            },
+        });
+    }
+    catch (err) {
+        return internalError(err, 'user invite');
+    }
+}
+export async function deleteUser(request, params) {
+    try {
+        const auth = await requireAuth(request);
+        if (auth.error)
+            return auth.error;
+        const roleErr = requireRole(auth.session.role, ADMIN_ROLES);
+        if (roleErr)
+            return roleErr;
+        if (auth.session.userId === params.id) {
+            return errorResponse('Cannot revoke your own access', 400);
+        }
+        const user = await db().user.findUnique({ where: { id: params.id } });
+        if (!user)
+            return errorResponse('User not found', 404);
+        // Last-Owner protection: never deactivate the only remaining active Owner.
+        if (isOwnerRole(user.role)) {
+            if (auth.session.role !== 'OWNER') {
+                return errorResponse('Only an Owner can revoke another Owner.', 403);
+            }
+            const otherOwners = await db().user.count({
+                where: { role: 'OWNER', isActive: true, id: { not: params.id } },
+            });
+            if (otherOwners === 0) {
+                return errorResponse('Cannot revoke access for the last Owner.', 409);
+            }
+        }
+        await db().user.update({
+            where: { id: params.id },
+            data: { isActive: false, suspendedAt: new Date() },
+        });
+        await db().session.updateMany({
+            where: { userId: params.id },
+            data: { revokedAt: new Date() },
+        });
+        await revokeUserApiKeys(db(), params.id);
+        await logEvent({
+            event: 'user_deactivated',
+            userId: auth.session.userId,
+            details: { targetUserId: params.id, targetEmail: user.email },
+        });
+        return json({ data: { success: true } });
+    }
+    catch (err) {
+        return internalError(err);
+    }
+}
+// Change a user's role, with Owner / last-Owner / self-escalation protections.
+export async function patchUserRole(request, params) {
+    try {
+        const auth = await requireAuth(request);
+        if (auth.error)
+            return auth.error;
+        const roleErr = requireRole(auth.session.role, ADMIN_ROLES);
+        if (roleErr)
+            return roleErr;
+        const d = db();
+        if (!hasModel(d, 'user'))
+            return modelNotAvailable('user');
+        const parsed = await validateBody(request, rolePatchBodySchema);
+        if (!parsed.ok)
+            return parsed.error;
+        const newRole = normalizeAssignableRole(parsed.data.role);
+        if (!newRole)
+            return errorResponse('Select a valid role.', 400);
+        const target = await d.user.findUnique({ where: { id: params.id } });
+        if (!target)
+            return errorResponse('User not found', 404);
+        const targetIsOwner = isOwnerRole(target.role);
+        const promotingToOwner = newRole === 'OWNER';
+        // Only an Owner may grant or remove the Owner role.
+        if ((promotingToOwner || targetIsOwner) && auth.session.role !== 'OWNER') {
+            return errorResponse('Only an Owner can assign or change the Owner role.', 403);
+        }
+        // No self-escalation.
+        if (auth.session.userId === target.id && roleRank(newRole) > roleRank(auth.session.role)) {
+            return errorResponse('You cannot raise your own role.', 403);
+        }
+        // Last-Owner protection: don't demote the only remaining active Owner.
+        if (targetIsOwner && !promotingToOwner) {
+            const otherOwners = await d.user.count({
+                where: { role: 'OWNER', isActive: true, id: { not: target.id } },
+            });
+            if (otherOwners === 0) {
+                return errorResponse('Cannot change the role of the last Owner.', 409);
+            }
+        }
+        if (target.role === newRole) {
+            return json({ data: { success: true, role: newRole } });
+        }
+        const downgrade = roleRank(newRole) < roleRank(target.role);
+        await d.user.update({ where: { id: target.id }, data: { role: newRole } });
+        // Revoke sessions on downgrade so reduced permissions take effect at once.
+        if (downgrade) {
+            await d.session.updateMany({
+                where: { userId: target.id, revokedAt: null },
+                data: { revokedAt: new Date() },
+            });
+        }
+        await logEvent({
+            event: 'user_role_changed',
+            userId: auth.session.userId,
+            details: {
+                targetUserId: target.id,
+                targetEmail: target.email,
+                previousRole: target.role,
+                newRole,
+                sessionsRevoked: downgrade,
+            },
+        });
+        return json({ data: { success: true, role: newRole, sessionsRevoked: downgrade } });
+    }
+    catch (err) {
+        return internalError(err, 'user role change');
+    }
+}
+//# sourceMappingURL=users-admin.js.map

package/dist/api/routes/users/handlers/users-admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"users-admin.js","sourceRoot":"","sources":["../../../../../src/api/routes/users/handlers/users-admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAC1D,OAAO,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACjF,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AAC1F,OAAO,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAA;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAClD,OAAO,EACL,IAAI,EACJ,aAAa,EACb,aAAa,EACb,QAAQ,EACR,iBAAiB,EACjB,WAAW,EACX,WAAW,EACX,WAAW,EACX,iBAAiB,EACjB,cAAc,EACd,sBAAsB,EACtB,aAAa,EACb,mBAAmB,GACpB,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AAE/F,MAAM,EAAE,GAAG,SAAS,CAAA;AAEpB,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAgB;IAC7C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;QACvC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAA;QACjC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QAC3D,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAE3B,MAAM,CAAC,GAAG,EAAE,EAAE,CAAA;QACd,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;YAAE,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAA;QAE1D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;QACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAA;QAClF,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAC3C,CAAC,EACD;YACE,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS;YACnD,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS;YAC/C,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS;SACpD,EACD,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAC5B,EAAE,IAAI,EAAE,QAAQ,EAAE,CACnB,CAAA;QACD,OAAO,IAAI,CAAC;YACV,IAAI,EAAE,MAAM,CAAC,OAAO;YACpB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,GAAG,CAAC,CAAA;IAC3B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAgB;IAClD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;QACvC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAA;QACjC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QAC3D,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAE3B,MAAM,CAAC,GAAG,EAAE,EAAE,CAAA;QACd,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;YAAE,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAA;QAE1D,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,CAAC,EAAE,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;QACjE,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACvF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;IACzC,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,yDAAyD;AACzD,+DAA+D;AAC/D,kEAAkE;AAClE,8DAA8D;AAC9D,EAAE;AACF,mEAAmE;AACnE,iEAAiE;AACjE,gEAAgE;AAChE,6DAA6D;AAC7D,6DAA6D;AAC7D,iEAAiE;AACjE,+DAA+D;AAC/D,UAAU;AACV,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAgB;IAChD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;QACvC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAA;QAEjC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAChC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QACrD,6DAA6D;QAC7D,4DAA4D;QAC5D,mDAAmD;QACnD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;QAC3B,CAAC;QACD,+DAA+D;QAC/D,+DAA+D;QAC/D,mCAAmC;QACnC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAE3B,yDAAyD;QACzD,4DAA4D;QAC5D,8DAA8D;QAC9D,6DAA6D;QAC7D,8DAA8D;QAC9D,2DAA2D;QAC3D,MAAM,KAAK,GAAG,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;YACrC,KAAK,EAAE;gBACL,QAAQ,EAAE,IAAI;gBACd,UAAU,EAAE,IAAI;gBAChB,EAAE,EAAE;oBACF,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE;oBAC9C,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE;iBAChD;aACF;YACD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;YAC7C,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;YACxB,IAAI,EAAE,EAAE;SACT,CAAC,CAAA;QAEF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;IAC3C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAgB;IAC/C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;QACvC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAA;QACjC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QAC3D,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAE3B,IAAI,CAAC,CAAC,MAAM,mBAAmB,CAAC,aAAa,EAAE,UAAU,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;YACjF,OAAO,aAAa,CAAC,+CAA+C,EAAE,GAAG,CAAC,CAAA;QAC5E,CAAC;QAED,MAAM,CAAC,GAAG,EAAE,EAAE,CAAA;QACd,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;YAAE,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAA;QAC1D,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC;YAAE,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAA;QAE9D,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAA;QAC5D,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC,KAAK,CAAA;QACnC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAA;QAExB,iCAAiC;QACjC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACjF,OAAO,aAAa,CAAC,0CAA0C,EAAE,GAAG,CAAC,CAAA;QACvE,CAAC;QAED,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAEzC,oEAAoE;QACpE,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;QACzC,IAAI,KAAK,CAAC,cAAc,IAAI,IAAI,IAAI,KAAK,CAAC,cAAc,IAAI,CAAC,EAAE,CAAC;YAC9D,OAAO,aAAa,CAClB,OAAO,KAAK,CAAC,SAAS,6EAA6E,EACnG,GAAG,CACJ,CAAA;QACH,CAAC;QAED,MAAM,SAAS,GAAG,eAAe,EAAE,CAAA;QACnC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAA;QAE/E,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;YACtC,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YAClC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;SACvB,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,MAAM,YAAY,CAC/B,CAAC,EACD;YACE,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,QAAQ;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,EACD;YACE,OAAO;YACP,mEAAmE;YACnE,8CAA8C;YAC9C,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,SAAS,EAAE,KAAK,EAAE,IAAI,IAAI,QAAQ;YAC5E,aAAa,EAAE,OAAO,EAAE,IAAI,IAAI,SAAS;YACzC,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YACpC,QAAQ,EACL,SAAS,EAAE,KAAsD,EAAE,QAAQ,EAAE,IAAI;gBAClF,SAAS;SACZ,CACF,CAAA;QAED,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,MAAM,CAAC,KAAK,IAAI,6BAA6B,EAAE,GAAG,CAAC,CAAA;QAC1E,CAAC;QAED,MAAM,QAAQ,CAAC;YACb,KAAK,EAAE,cAAc;YACrB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,OAAO,EAAE;gBACP,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK;gBACjC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI;gBACzB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE;gBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB;SACF,CAAC,CAAA;QAEF,OAAO,IAAI,CAAC;YACV,IAAI,EAAE;gBACJ,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B;SACF,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;IAC1C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAgB,EAChB,MAA8B;IAE9B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;QACvC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAA;QACjC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QAC3D,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAE3B,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC;YACtC,OAAO,aAAa,CAAC,+BAA+B,EAAE,GAAG,CAAC,CAAA;QAC5D,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,EAAE,CAAC,CAAA;QACtE,IAAI,CAAC,IAAI;YAAE,OAAO,aAAa,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAA;QAEtD,2EAA2E;QAC3E,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAClC,OAAO,aAAa,CAAC,yCAAyC,EAAE,GAAG,CAAC,CAAA;YACtE,CAAC;YACD,MAAM,WAAW,GAAG,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;gBACxC,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,EAAG,EAAE,EAAE;aAClE,CAAC,CAAA;YACF,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO,aAAa,CAAC,0CAA0C,EAAE,GAAG,CAAC,CAAA;YACvE,CAAC;QACH,CAAC;QAED,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;YACrB,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE;YACzB,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,EAAE;SACnD,CAAC,CAAA;QAEF,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC;YAC5B,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAG,EAAE;YAC7B,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE;SAChC,CAAC,CAAA;QACF,MAAM,iBAAiB,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAG,CAAC,CAAA;QAEzC,MAAM,QAAQ,CAAC;YACb,KAAK,EAAE,kBAAkB;YACzB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE;SAC9D,CAAC,CAAA;QAEF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,GAAG,CAAC,CAAA;IAC3B,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAgB,EAChB,MAA8B;IAE9B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;QACvC,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAA;QACjC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QAC3D,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAE3B,MAAM,CAAC,GAAG,EAAE,EAAE,CAAA;QACd,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;YAAE,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAA;QAE1D,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAA;QAC/D,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC,KAAK,CAAA;QACnC,MAAM,OAAO,GAAG,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzD,IAAI,CAAC,OAAO;YAAE,OAAO,aAAa,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAA;QAE/D,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAG,EAAE,EAAE,CAAC,CAAA;QACrE,IAAI,CAAC,MAAM;YAAE,OAAO,aAAa,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAA;QAExD,MAAM,aAAa,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC9C,MAAM,gBAAgB,GAAG,OAAO,KAAK,OAAO,CAAA;QAE5C,oDAAoD;QACpD,IAAI,CAAC,gBAAgB,IAAI,aAAa,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACzE,OAAO,aAAa,CAAC,oDAAoD,EAAE,GAAG,CAAC,CAAA;QACjF,CAAC;QAED,sBAAsB;QACtB,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACzF,OAAO,aAAa,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAA;QAC9D,CAAC;QAED,uEAAuE;QACvE,IAAI,aAAa,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACvC,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;gBACrC,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE;aACjE,CAAC,CAAA;YACF,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO,aAAa,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAA;YACxE,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAA;QACzD,CAAC;QAED,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC3D,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAA;QAE1E,2EAA2E;QAC3E,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;gBACzB,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;gBAC7C,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE;aAChC,CAAC,CAAA;QACJ,CAAC;QAED,MAAM,QAAQ,CAAC;YACb,KAAK,EAAE,mBAAmB;YAC1B,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,OAAO,EAAE;gBACP,YAAY,EAAE,MAAM,CAAC,EAAE;gBACvB,WAAW,EAAE,MAAM,CAAC,KAAK;gBACzB,YAAY,EAAE,MAAM,CAAC,IAAI;gBACzB,OAAO;gBACP,eAAe,EAAE,SAAS;aAC3B;SACF,CAAC,CAAA;QAEF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,EAAE,CAAC,CAAA;IACrF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAA;IAC/C,CAAC;AACH,CAAC"}

package/dist/api/routes/users/handlers/users-detail.d.ts

@@ -0,0 +1,16 @@
+export declare function getUser(request: Request, params: Record<string, string>): Promise<Response>;
+export declare function getUserSessions(request: Request, params: Record<string, string>): Promise<Response>;
+export declare function deleteUserSession(request: Request, params: Record<string, string>): Promise<Response>;
+export declare function revokeUserSessions(request: Request, params: Record<string, string>): Promise<Response>;
+export declare function getUserActivity(request: Request, params: Record<string, string>): Promise<Response>;
+export declare function getUserPermissions(request: Request, params: Record<string, string>): Promise<Response>;
+export declare function postUserPasswordReset(request: Request, params: Record<string, string>): Promise<Response>;
+export declare function postUserForcePasswordReset(request: Request, params: Record<string, string>): Promise<Response>;
+export declare function postUserMfaReset(request: Request, params: Record<string, string>): Promise<Response>;
+export declare function postUserRequireMfa(request: Request, params: Record<string, string>): Promise<Response>;
+export declare function suspendUser(request: Request, params: Record<string, string>): Promise<Response>;
+export declare function reactivateUser(request: Request, params: Record<string, string>): Promise<Response>;
+export declare function lockUser(request: Request, params: Record<string, string>): Promise<Response>;
+export declare function unlockUser(request: Request, params: Record<string, string>): Promise<Response>;
+export declare function transferUserContent(request: Request, params: Record<string, string>): Promise<Response>;
+//# sourceMappingURL=users-detail.d.ts.map

package/dist/api/routes/users/handlers/users-detail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"users-detail.d.ts","sourceRoot":"","sources":["../../../../../src/api/routes/users/handlers/users-detail.ts"],"names":[],"mappings":"AAsEA,wBAAsB,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAoBjG;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,OAAO,CAAC,QAAQ,CAAC,CAiBnB;AAED,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,OAAO,CAAC,QAAQ,CAAC,CAgCnB;AAED,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,OAAO,CAAC,QAAQ,CAAC,CAoCnB;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,OAAO,CAAC,QAAQ,CAAC,CAiBnB;AAED,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,OAAO,CAAC,QAAQ,CAAC,CAkBnB;AAID,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,OAAO,CAAC,QAAQ,CAAC,CAmDnB;AAGD,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,OAAO,CAAC,QAAQ,CAAC,CAyBnB;AAID,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,OAAO,CAAC,QAAQ,CAAC,CA0CnB;AAGD,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,OAAO,CAAC,QAAQ,CAAC,CAyBnB;AAED,wBAAsB,WAAW,CAC/B,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,OAAO,CAAC,QAAQ,CAAC,CA+BnB;AAED,wBAAsB,cAAc,CAClC,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,OAAO,CAAC,QAAQ,CAAC,CAwBnB;AAED,wBAAsB,QAAQ,CAC5B,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,OAAO,CAAC,QAAQ,CAAC,CA+BnB;AAED,wBAAsB,UAAU,CAC9B,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,OAAO,CAAC,QAAQ,CAAC,CAuBnB;AAKD,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,OAAO,CAAC,QAAQ,CAAC,CAwCnB"}