@proteinjs/user-server 1.6.0 → 1.8.0

package/dist/src/emails/AccountDeletionEmails.js

@@ -0,0 +1,98 @@
+"use strict";
+var __assign = (this && this.__assign) || function () {
+    __assign = Object.assign || function(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+                t[p] = s[p];
+        }
+        return t;
+    };
+    return __assign.apply(this, arguments);
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AccountDeletionEmails = void 0;
+var email_server_1 = require("@proteinjs/email-server");
+var AccountDeletionEmailConfigs_1 = require("./AccountDeletionEmailConfigs");
+/**
+ * Thin sender for the two account-deletion emails: deletion-requested (at deactivation — the
+ * only cancel channel an account-takeover victim has) and the store-required completion
+ * confirmation (sent by the purge walker after the user row is gone). Content comes from the
+ * config factories beside this class; transport is the app's DefaultEmailConfigFactory SMTP
+ * config via EmailSender.
+ */
+var AccountDeletionEmails = /** @class */ (function () {
+    function AccountDeletionEmails() {
+    }
+    AccountDeletionEmails.prototype.sendDeletionRequested = function (to, purgeAfter) {
+        return __awaiter(this, void 0, void 0, function () {
+            var config, _a, text, html;
+            return __generator(this, function (_b) {
+                switch (_b.label) {
+                    case 0:
+                        config = (0, AccountDeletionEmailConfigs_1.getDefaultAccountDeletionRequestedEmailConfigFactory)().getConfig();
+                        _a = config.getEmailContent(purgeAfter), text = _a.text, html = _a.html;
+                        return [4 /*yield*/, new email_server_1.EmailSender().sendEmail(__assign({ to: to, subject: 'Your account is scheduled for deletion', text: text, html: html }, config.options))];
+                    case 1:
+                        _b.sent();
+                        return [2 /*return*/];
+                }
+            });
+        });
+    };
+    AccountDeletionEmails.prototype.sendAccountDeleted = function (to) {
+        return __awaiter(this, void 0, void 0, function () {
+            var config, _a, text, html;
+            return __generator(this, function (_b) {
+                switch (_b.label) {
+                    case 0:
+                        config = (0, AccountDeletionEmailConfigs_1.getDefaultAccountDeletedEmailConfigFactory)().getConfig();
+                        _a = config.getEmailContent(), text = _a.text, html = _a.html;
+                        return [4 /*yield*/, new email_server_1.EmailSender().sendEmail(__assign({ to: to, subject: 'Your account has been deleted', text: text, html: html }, config.options))];
+                    case 1:
+                        _b.sent();
+                        return [2 /*return*/];
+                }
+            });
+        });
+    };
+    return AccountDeletionEmails;
+}());
+exports.AccountDeletionEmails = AccountDeletionEmails;
+//# sourceMappingURL=AccountDeletionEmails.js.map

package/dist/src/emails/AccountDeletionEmails.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccountDeletionEmails.js","sourceRoot":"","sources":["../../../src/emails/AccountDeletionEmails.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,wDAAsD;AACtD,6EAGuC;AAEvC;;;;;;GAMG;AACH;IAAA;IAwBA,CAAC;IAvBO,qDAAqB,GAA3B,UAA4B,EAAU,EAAE,UAAkB;;;;;;wBAClD,MAAM,GAAG,IAAA,kFAAoD,GAAE,CAAC,SAAS,EAAE,CAAC;wBAC5E,KAAiB,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,EAAjD,IAAI,UAAA,EAAE,IAAI,UAAA,CAAwC;wBAC1D,qBAAM,IAAI,0BAAW,EAAE,CAAC,SAAS,YAC/B,EAAE,IAAA,EACF,OAAO,EAAE,wCAAwC,EACjD,IAAI,MAAA,EACJ,IAAI,MAAA,IACD,MAAM,CAAC,OAAO,EACjB,EAAA;;wBANF,SAME,CAAC;;;;;KACJ;IAEK,kDAAkB,GAAxB,UAAyB,EAAU;;;;;;wBAC3B,MAAM,GAAG,IAAA,wEAA0C,GAAE,CAAC,SAAS,EAAE,CAAC;wBAClE,KAAiB,MAAM,CAAC,eAAe,EAAE,EAAvC,IAAI,UAAA,EAAE,IAAI,UAAA,CAA8B;wBAChD,qBAAM,IAAI,0BAAW,EAAE,CAAC,SAAS,YAC/B,EAAE,IAAA,EACF,OAAO,EAAE,+BAA+B,EACxC,IAAI,MAAA,EACJ,IAAI,MAAA,IACD,MAAM,CAAC,OAAO,EACjB,EAAA;;wBANF,SAME,CAAC;;;;;KACJ;IACH,4BAAC;AAAD,CAAC,AAxBD,IAwBC;AAxBY,sDAAqB"}

package/dist/src/routes/devLogin.d.ts

@@ -1,13 +1,23 @@
 import { Route } from '@proteinjs/server-api';
 /**
- * DEV-ONLY session bootstrap: `GET /dev/login` establishes a session for the account named by
- * `DEV_AUTO_LOGIN_EMAIL` — no credentials involved — so automated dev-loop testing (agent-driven
- * browsers) can self-serve a session instead of stalling on the login form every time a cookie
- * is lost.
+ * DEV-ONLY session bootstrap: `GET /dev/login` establishes a session — no credentials involved —
+ * so automated dev-loop testing (agent-driven browsers) can self-serve a session instead of
+ * stalling on the login form. `?email=<addr>` selects the session's account so parallel
+ * verification can fan out over distinct users; absent, the `DEV_AUTO_LOGIN_EMAIL` account is
+ * used as before.
  *
  * Double-gated, acts only when BOTH hold; otherwise the path answers 404 as if unregistered:
  * 1. `process.env.DEVELOPMENT` — the dev-server switch, never set in prod images.
- * 2. `DEV_AUTO_LOGIN_EMAIL` — explicit per-launch opt-in naming exactly one account.
+ * 2. `DEV_AUTO_LOGIN_EMAIL` — explicit per-launch opt-in naming the default account.
+ *
+ * Domain rail: `?email` must share `DEV_AUTO_LOGIN_EMAIL`'s domain — even a dev server must not
+ * mint sessions (much less accounts) for arbitrary domains; anything else answers 400.
+ *
+ * A missing account is created through the normal signup creation path (`Signup.createAccount`)
+ * as a normal test user — password `test`, matching the seeded test-account convention, so
+ * interactive login works for the same identity. Composes with userCache's missing-account→guest
+ * seam: that covers sessions whose account was deleted AFTER minting; this ensures dev-minted
+ * sessions reference a real account from the start.
  */
 export declare const devLogin: Route;
 //# sourceMappingURL=devLogin.d.ts.map

package/dist/src/routes/devLogin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"devLogin.d.ts","sourceRoot":"","sources":["../../../src/routes/devLogin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAK9C;;;;;;;;;GASG;AACH,eAAO,MAAM,QAAQ,EAAE,KAmBtB,CAAC"}
+{"version":3,"file":"devLogin.d.ts","sourceRoot":"","sources":["../../../src/routes/devLogin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAU9C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,QAAQ,EAAE,KA0CtB,CAAC"}

package/dist/src/routes/devLogin.js

@@ -38,45 +38,82 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.devLogin = void 0;
 var logger_1 = require("@proteinjs/logger");
+var Signup_1 = require("../services/Signup");
 var logger = new logger_1.Logger({ name: 'devLogin' });
+/** Lowercased domain of an email address (the whole string when there is no `@`, which can never
+ *  equal a real env domain — so malformed params fall out at the domain rail). */
+var emailDomain = function (address) { return address.slice(address.lastIndexOf('@') + 1).toLowerCase(); };
 /**
- * DEV-ONLY session bootstrap: `GET /dev/login` establishes a session for the account named by
- * `DEV_AUTO_LOGIN_EMAIL` — no credentials involved — so automated dev-loop testing (agent-driven
- * browsers) can self-serve a session instead of stalling on the login form every time a cookie
- * is lost.
+ * DEV-ONLY session bootstrap: `GET /dev/login` establishes a session — no credentials involved —
+ * so automated dev-loop testing (agent-driven browsers) can self-serve a session instead of
+ * stalling on the login form. `?email=<addr>` selects the session's account so parallel
+ * verification can fan out over distinct users; absent, the `DEV_AUTO_LOGIN_EMAIL` account is
+ * used as before.
  *
  * Double-gated, acts only when BOTH hold; otherwise the path answers 404 as if unregistered:
  * 1. `process.env.DEVELOPMENT` — the dev-server switch, never set in prod images.
- * 2. `DEV_AUTO_LOGIN_EMAIL` — explicit per-launch opt-in naming exactly one account.
+ * 2. `DEV_AUTO_LOGIN_EMAIL` — explicit per-launch opt-in naming the default account.
+ *
+ * Domain rail: `?email` must share `DEV_AUTO_LOGIN_EMAIL`'s domain — even a dev server must not
+ * mint sessions (much less accounts) for arbitrary domains; anything else answers 400.
+ *
+ * A missing account is created through the normal signup creation path (`Signup.createAccount`)
+ * as a normal test user — password `test`, matching the seeded test-account convention, so
+ * interactive login works for the same identity. Composes with userCache's missing-account→guest
+ * seam: that covers sessions whose account was deleted AFTER minting; this ensures dev-minted
+ * sessions reference a real account from the start.
  */
 exports.devLogin = {
     path: '/dev/login',
     method: 'get',
     onRequest: function (request, response) { return __awaiter(void 0, void 0, void 0, function () {
-        var email;
-        var _a;
-        return __generator(this, function (_b) {
-            switch (_b.label) {
+        var envEmail, email, emailParam, requested, creation;
+        var _a, _b;
+        return __generator(this, function (_c) {
+            switch (_c.label) {
                 case 0:
-                    email = ((_a = process.env.DEV_AUTO_LOGIN_EMAIL) !== null && _a !== void 0 ? _a : '').trim();
-                    if (!process.env.DEVELOPMENT || !email) {
+                    envEmail = ((_a = process.env.DEV_AUTO_LOGIN_EMAIL) !== null && _a !== void 0 ? _a : '').trim();
+                    if (!process.env.DEVELOPMENT || !envEmail) {
                         response.status(404).send();
                         return [2 /*return*/];
                     }
-                    return [4 /*yield*/, new Promise(function (resolve) { return request.login(email, resolve); })];
+                    email = envEmail;
+                    emailParam = (_b = request.query) === null || _b === void 0 ? void 0 : _b.email;
+                    if (emailParam !== undefined) {
+                        requested = typeof emailParam === 'string' ? emailParam.trim() : '';
+                        if (emailDomain(requested) !== emailDomain(envEmail)) {
+                            response.status(400).send("/dev/login only accepts accounts on the @".concat(emailDomain(envEmail), " domain"));
+                            return [2 /*return*/];
+                        }
+                        email = requested;
+                    }
+                    email = email.toLowerCase();
+                    return [4 /*yield*/, new Signup_1.Signup().createAccount({
+                            name: email.slice(0, email.indexOf('@')),
+                            email: email,
+                            password: 'test',
+                            emailVerified: false,
+                            invitedBy: null,
+                        })];
                 case 1:
-                    _b.sent();
+                    creation = _c.sent();
+                    if (creation === 'created') {
+                        logger.info({ message: 'Dev auto-login created missing test account', obj: { email: email } });
+                    }
+                    return [4 /*yield*/, new Promise(function (resolve) { return request.login(email, resolve); })];
+                case 2:
+                    _c.sent();
                     // Explicit save before redirecting: with a DB-backed session store, save-on-response-end
                     // races the redirected GET / — the follow-up request can read the session row before the
                     // write commits and render the login page (observed: first /dev/login load lands on /login,
                     // second succeeds). Awaiting the store write closes the race.
                     return [4 /*yield*/, new Promise(function (resolve) { return request.session.save(resolve); })];
-                case 2:
+                case 3:
                     // Explicit save before redirecting: with a DB-backed session store, save-on-response-end
                     // races the redirected GET / — the follow-up request can read the session row before the
                     // write commits and render the login page (observed: first /dev/login load lands on /login,
                     // second succeeds). Awaiting the store write closes the race.
-                    _b.sent();
+                    _c.sent();
                     logger.info({ message: 'Dev auto-login session established', obj: { email: email } });
                     response.redirect('/');
                     return [2 /*return*/];

package/dist/src/routes/devLogin.js.map

@@ -1 +1 @@
-{"version":3,"file":"devLogin.js","sourceRoot":"","sources":["../../../src/routes/devLogin.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,4CAA2C;AAE3C,IAAM,MAAM,GAAG,IAAI,eAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;AAEhD;;;;;;;;;GASG;AACU,QAAA,QAAQ,GAAU;IAC7B,IAAI,EAAE,YAAY;IAClB,MAAM,EAAE,KAAK;IACb,SAAS,EAAE,UAAO,OAAY,EAAE,QAAQ;;;;;;oBAChC,KAAK,GAAG,CAAC,MAAA,OAAO,CAAC,GAAG,CAAC,oBAAoB,mCAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC9D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,KAAK,EAAE;wBACtC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;wBAC5B,sBAAO;qBACR;oBAED,qBAAM,IAAI,OAAO,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,EAA7B,CAA6B,CAAC,EAAA;;oBAA7D,SAA6D,CAAC;oBAC9D,yFAAyF;oBACzF,yFAAyF;oBACzF,4FAA4F;oBAC5F,8DAA8D;oBAC9D,qBAAM,IAAI,OAAO,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAA7B,CAA6B,CAAC,EAAA;;oBAJ7D,yFAAyF;oBACzF,yFAAyF;oBACzF,4FAA4F;oBAC5F,8DAA8D;oBAC9D,SAA6D,CAAC;oBAC9D,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,GAAG,EAAE,EAAE,KAAK,OAAA,EAAE,EAAE,CAAC,CAAC;oBAC/E,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;;;;SACxB;CACF,CAAC"}
+{"version":3,"file":"devLogin.js","sourceRoot":"","sources":["../../../src/routes/devLogin.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,4CAA2C;AAC3C,6CAA4C;AAE5C,IAAM,MAAM,GAAG,IAAI,eAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;AAEhD;kFACkF;AAClF,IAAM,WAAW,GAAG,UAAC,OAAe,IAAK,OAAA,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,EAAzD,CAAyD,CAAC;AAEnG;;;;;;;;;;;;;;;;;;;GAmBG;AACU,QAAA,QAAQ,GAAU;IAC7B,IAAI,EAAE,YAAY;IAClB,MAAM,EAAE,KAAK;IACb,SAAS,EAAE,UAAO,OAAY,EAAE,QAAQ;;;;;;oBAChC,QAAQ,GAAG,CAAC,MAAA,OAAO,CAAC,GAAG,CAAC,oBAAoB,mCAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;oBACjE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,QAAQ,EAAE;wBACzC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;wBAC5B,sBAAO;qBACR;oBAEG,KAAK,GAAG,QAAQ,CAAC;oBACf,UAAU,GAAG,MAAA,OAAO,CAAC,KAAK,0CAAE,KAAK,CAAC;oBACxC,IAAI,UAAU,KAAK,SAAS,EAAE;wBACtB,SAAS,GAAG,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC1E,IAAI,WAAW,CAAC,SAAS,CAAC,KAAK,WAAW,CAAC,QAAQ,CAAC,EAAE;4BACpD,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,mDAA4C,WAAW,CAAC,QAAQ,CAAC,YAAS,CAAC,CAAC;4BACtG,sBAAO;yBACR;wBACD,KAAK,GAAG,SAAS,CAAC;qBACnB;oBACD,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;oBAEX,qBAAM,IAAI,eAAM,EAAE,CAAC,aAAa,CAAC;4BAChD,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;4BACxC,KAAK,OAAA;4BACL,QAAQ,EAAE,MAAM;4BAChB,aAAa,EAAE,KAAK;4BACpB,SAAS,EAAE,IAAI;yBAChB,CAAC,EAAA;;oBANI,QAAQ,GAAG,SAMf;oBACF,IAAI,QAAQ,KAAK,SAAS,EAAE;wBAC1B,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,6CAA6C,EAAE,GAAG,EAAE,EAAE,KAAK,OAAA,EAAE,EAAE,CAAC,CAAC;qBACzF;oBAED,qBAAM,IAAI,OAAO,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,EAA7B,CAA6B,CAAC,EAAA;;oBAA7D,SAA6D,CAAC;oBAC9D,yFAAyF;oBACzF,yFAAyF;oBACzF,4FAA4F;oBAC5F,8DAA8D;oBAC9D,qBAAM,IAAI,OAAO,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAA7B,CAA6B,CAAC,EAAA;;oBAJ7D,yFAAyF;oBACzF,yFAAyF;oBACzF,4FAA4F;oBAC5F,8DAA8D;oBAC9D,SAA6D,CAAC;oBAC9D,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,GAAG,EAAE,EAAE,KAAK,OAAA,EAAE,EAAE,CAAC,CAAC;oBAC/E,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;;;;SACxB;CACF,CAAC"}

package/dist/src/routes/executePasswordReset.js

@@ -44,7 +44,7 @@ var db_1 = require("@proteinjs/db");
 var user_1 = require("@proteinjs/user");
 var logger_1 = require("@proteinjs/logger");
 var moment_1 = __importDefault(require("moment"));
-var sha256_1 = __importDefault(require("crypto-js/sha256"));
+var PasswordHasher_1 = require("../authentication/PasswordHasher");
 /**
  * Route handler for executing a password reset.
  *
@@ -82,14 +82,16 @@ exports.executePasswordReset = {
                         response.status(400).send({ error: 'Reset token has expired' });
                         return [2 /*return*/];
                     }
-                    hashedPassword = (0, sha256_1.default)(newPassword).toString();
+                    return [4 /*yield*/, new PasswordHasher_1.PasswordHasher().hash(newPassword)];
+                case 2:
+                    hashedPassword = _b.sent();
                     return [4 /*yield*/, db.update(user_1.tables.User, {
                             id: user.id,
                             password: hashedPassword,
                             passwordResetToken: null,
                             passwordResetTokenExpiration: null,
                         })];
-                case 2:
+                case 3:
                     _b.sent();
                     logger.info({ message: "Password successfully reset", obj: { email: user.email } });
                     response.send({ message: 'Password has been successfully reset' });

package/dist/src/routes/executePasswordReset.js.map

@@ -1 +1 @@
-{"version":3,"file":"executePasswordReset.js","sourceRoot":"","sources":["../../../src/routes/executePasswordReset.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,oCAA8C;AAC9C,wCAAiD;AACjD,4CAA2C;AAC3C,kDAA4B;AAC5B,4DAAsC;AAEtC;;;;;;;;;;GAUG;AACU,QAAA,oBAAoB,GAAU;IACzC,IAAI,EAAE,aAAM,CAAC,oBAAoB,CAAC,IAAI;IACtC,MAAM,EAAE,aAAM,CAAC,oBAAoB,CAAC,MAAM;IAC1C,SAAS,EAAE,UAAO,OAAO,EAAE,QAAQ;;;;;oBAC3B,MAAM,GAAG,IAAI,eAAM,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC;oBACtD,KAAyB,OAAO,CAAC,IAAI,EAAnC,KAAK,WAAA,EAAE,WAAW,iBAAA,CAAkB;oBACtC,EAAE,GAAG,IAAA,kBAAa,GAAE,CAAC;oBAGd,qBAAM,EAAE,CAAC,GAAG,CAAC,aAAM,CAAC,IAAI,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAA;;oBAA/D,IAAI,GAAG,SAAwD;oBACrE,IAAI,CAAC,IAAI,EAAE;wBACT,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,GAAG,EAAE,EAAE,KAAK,OAAA,EAAE,EAAE,CAAC,CAAC;wBACrE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;wBACvE,sBAAO;qBACR;oBAGK,WAAW,GAAG,IAAA,gBAAM,GAAE,CAAC;oBACvB,eAAe,GAAG,IAAA,gBAAM,EAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;oBAClE,IAAI,WAAW,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE;wBACxC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;wBACjF,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;wBAChE,sBAAO;qBACR;oBAGK,cAAc,GAAG,IAAA,gBAAM,EAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC;oBACtD,qBAAM,EAAE,CAAC,MAAM,CAAC,aAAM,CAAC,IAAI,EAAE;4BAC3B,EAAE,EAAE,IAAI,CAAC,EAAE;4BACX,QAAQ,EAAE,cAAc;4BACxB,kBAAkB,EAAE,IAAI;4BACxB,4BAA4B,EAAE,IAAI;yBACnC,CAAC,EAAA;;oBALF,SAKE,CAAC;oBAEH,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBACpF,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC,CAAC;;;;SACpE;CACF,CAAC"}
+{"version":3,"file":"executePasswordReset.js","sourceRoot":"","sources":["../../../src/routes/executePasswordReset.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,oCAA8C;AAC9C,wCAAiD;AACjD,4CAA2C;AAC3C,kDAA4B;AAC5B,mEAAkE;AAElE;;;;;;;;;;GAUG;AACU,QAAA,oBAAoB,GAAU;IACzC,IAAI,EAAE,aAAM,CAAC,oBAAoB,CAAC,IAAI;IACtC,MAAM,EAAE,aAAM,CAAC,oBAAoB,CAAC,MAAM;IAC1C,SAAS,EAAE,UAAO,OAAO,EAAE,QAAQ;;;;;oBAC3B,MAAM,GAAG,IAAI,eAAM,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC;oBACtD,KAAyB,OAAO,CAAC,IAAI,EAAnC,KAAK,WAAA,EAAE,WAAW,iBAAA,CAAkB;oBACtC,EAAE,GAAG,IAAA,kBAAa,GAAE,CAAC;oBAGd,qBAAM,EAAE,CAAC,GAAG,CAAC,aAAM,CAAC,IAAI,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAA;;oBAA/D,IAAI,GAAG,SAAwD;oBACrE,IAAI,CAAC,IAAI,EAAE;wBACT,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,GAAG,EAAE,EAAE,KAAK,OAAA,EAAE,EAAE,CAAC,CAAC;wBACrE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;wBACvE,sBAAO;qBACR;oBAGK,WAAW,GAAG,IAAA,gBAAM,GAAE,CAAC;oBACvB,eAAe,GAAG,IAAA,gBAAM,EAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;oBAClE,IAAI,WAAW,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE;wBACxC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;wBACjF,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;wBAChE,sBAAO;qBACR;oBAGsB,qBAAM,IAAI,+BAAc,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAA;;oBAA7D,cAAc,GAAG,SAA4C;oBACnE,qBAAM,EAAE,CAAC,MAAM,CAAC,aAAM,CAAC,IAAI,EAAE;4BAC3B,EAAE,EAAE,IAAI,CAAC,EAAE;4BACX,QAAQ,EAAE,cAAc;4BACxB,kBAAkB,EAAE,IAAI;4BACxB,4BAA4B,EAAE,IAAI;yBACnC,CAAC,EAAA;;oBALF,SAKE,CAAC;oBAEH,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBACpF,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC,CAAC;;;;SACpE;CACF,CAAC"}

package/dist/src/routes/login.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../src/routes/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAI9C,eAAO,MAAM,KAAK,EAAE,KAwBnB,CAAC"}
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../src/routes/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAK9C,eAAO,MAAM,KAAK,EAAE,KA8CnB,CAAC"}

package/dist/src/routes/login.js

@@ -39,11 +39,12 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.login = void 0;
 var user_1 = require("@proteinjs/user");
 var authenticate_1 = require("../authentication/authenticate");
+var AccountDeletion_1 = require("../services/AccountDeletion");
 exports.login = {
     path: user_1.routes.login.path,
     method: user_1.routes.login.method,
     onRequest: function (request, response) { return __awaiter(void 0, void 0, void 0, function () {
-        var credentials, error, result;
+        var credentials, error, result, outcome, error_1, error;
         return __generator(this, function (_a) {
             switch (_a.label) {
                 case 0:
@@ -62,10 +63,33 @@ exports.login = {
                         response.send({ error: result });
                         return [2 /*return*/];
                     }
+                    _a.label = 2;
+                case 2:
+                    _a.trys.push([2, 4, , 5]);
+                    return [4 /*yield*/, new AccountDeletion_1.AccountDeletion().cancelPendingDeletion(credentials.email)];
+                case 3:
+                    outcome = _a.sent();
+                    return [3 /*break*/, 5];
+                case 4:
+                    error_1 = _a.sent();
+                    // Security boundary: the login response never carries internal error detail — an
+                    // attacker probing emails must learn nothing from failure shapes (founder ruling
+                    // 2026-08-18 after a watcher error surfaced verbatim in the login form). The real
+                    // error stays loud in the server log.
+                    console.error('cancelPendingDeletion failed during login', error_1);
+                    response.send({ error: 'Unable to log in right now. Please try again.' });
+                    return [2 /*return*/];
+                case 5:
+                    if (outcome === 'purging') {
+                        error = 'This account is being deleted and can no longer be restored.';
+                        console.error(error);
+                        response.send({ error: error });
+                        return [2 /*return*/];
+                    }
                     return [4 /*yield*/, new Promise(function (resolve, reject) {
                             request.login(credentials.email, resolve);
                         })];
-                case 2:
+                case 6:
                     _a.sent();
                     response.send({});
                     return [2 /*return*/];

package/dist/src/routes/login.js.map

@@ -1 +1 @@
-{"version":3,"file":"login.js","sourceRoot":"","sources":["../../../src/routes/login.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,wCAAyC;AACzC,+DAA8D;AAEjD,QAAA,KAAK,GAAU;IAC1B,IAAI,EAAE,aAAM,CAAC,KAAK,CAAC,IAAI;IACvB,MAAM,EAAE,aAAM,CAAC,KAAK,CAAC,MAAM;IAC3B,SAAS,EAAE,UAAO,OAAY,EAAE,QAAQ;;;;;oBAChC,WAAW,GAAwC,OAAO,CAAC,IAAI,CAAC;oBACtE,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE;wBACzC,KAAK,GAAG,oCAAoC,CAAC;wBACnD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;wBACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,OAAA,EAAE,CAAC,CAAC;wBACzB,sBAAO;qBACR;oBAEc,qBAAM,IAAA,2BAAY,EAAC,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAA;;oBAApE,MAAM,GAAG,SAA2D;oBAC1E,IAAI,MAAM,KAAK,IAAI,EAAE;wBACnB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;wBACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;wBACjC,sBAAO;qBACR;oBAED,qBAAM,IAAI,OAAO,CAAC,UAAC,OAAO,EAAE,MAAM;4BAChC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;wBAC5C,CAAC,CAAC,EAAA;;oBAFF,SAEE,CAAC;oBACH,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;;;;SACnB;CACF,CAAC"}
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../../src/routes/login.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,wCAAyC;AACzC,+DAA8D;AAC9D,+DAA8D;AAEjD,QAAA,KAAK,GAAU;IAC1B,IAAI,EAAE,aAAM,CAAC,KAAK,CAAC,IAAI;IACvB,MAAM,EAAE,aAAM,CAAC,KAAK,CAAC,MAAM;IAC3B,SAAS,EAAE,UAAO,OAAY,EAAE,QAAQ;;;;;oBAChC,WAAW,GAAwC,OAAO,CAAC,IAAI,CAAC;oBACtE,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE;wBACzC,KAAK,GAAG,oCAAoC,CAAC;wBACnD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;wBACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,OAAA,EAAE,CAAC,CAAC;wBACzB,sBAAO;qBACR;oBAEc,qBAAM,IAAA,2BAAY,EAAC,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAA;;oBAApE,MAAM,GAAG,SAA2D;oBAC1E,IAAI,MAAM,KAAK,IAAI,EAAE;wBACnB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;wBACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;wBACjC,sBAAO;qBACR;;;;oBAOW,qBAAM,IAAI,iCAAe,EAAE,CAAC,qBAAqB,CAAC,WAAW,CAAC,KAAK,CAAC,EAAA;;oBAA9E,OAAO,GAAG,SAAoE,CAAC;;;;oBAE/E,iFAAiF;oBACjF,iFAAiF;oBACjF,kFAAkF;oBAClF,sCAAsC;oBACtC,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,OAAK,CAAC,CAAC;oBAClE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+CAA+C,EAAE,CAAC,CAAC;oBAC1E,sBAAO;;oBAET,IAAI,OAAO,KAAK,SAAS,EAAE;wBACnB,KAAK,GAAG,8DAA8D,CAAC;wBAC7E,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;wBACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,OAAA,EAAE,CAAC,CAAC;wBACzB,sBAAO;qBACR;oBAED,qBAAM,IAAI,OAAO,CAAC,UAAC,OAAO,EAAE,MAAM;4BAChC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;wBAC5C,CAAC,CAAC,EAAA;;oBAFF,SAEE,CAAC;oBACH,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;;;;SACnB;CACF,CAAC"}

package/dist/src/services/AccountDeletion.d.ts

@@ -0,0 +1,52 @@
+import { Moment } from 'moment';
+import { Service } from '@proteinjs/service';
+import { AccountDeletionService } from '@proteinjs/user';
+/**
+ * Deactivation ("gone right away") + cancel-by-login — the synchronous half of archive-then-purge.
+ * The purge walker (flow-server) owns erasure after the grace window; this service owns entering
+ * and leaving the deactivated state, driven by the `account_deletion` manifest row.
+ *
+ * Deliberately NOT deactivation's job: the user's own content_reference/content_seen/pins/
+ * notifications — all scoped to the locked-out user, invisible behind the auth gate, purged by
+ * the walker. Leaving them preserves watermarks and pins exactly for cancel-restore.
+ */
+export declare class AccountDeletion implements AccountDeletionService {
+    /** Any authenticated user — the call acts only on the session user (re-auth inside). */
+    serviceMetadata: Service['serviceMetadata'];
+    private logger;
+    /**
+     * §3.3 — seven steps, each idempotent; a re-call after a partial failure resumes from the
+     * stored manifest. The caller's sessions die last, so the response is the last authenticated
+     * exchange.
+     */
+    requestDeletion(password: string): Promise<{
+        purgeAfter: Moment;
+    }>;
+    /**
+     * §3.4 — logging back in IS the cancel (called by the login route after `authenticate`
+     * passes, BEFORE `request.login`). Not RPC-reachable: it is deliberately absent from the
+     * AccountDeletionService interface, so the service router never exposes it.
+     */
+    cancelPendingDeletion(email: string): Promise<'not-pending' | 'restored' | 'purging'>;
+    /** Verify the caller's password against their own account row; throws with nothing written. */
+    private reauthenticateSessionUser;
+    /**
+     * §3.3 step 3: enumerate grants in both directions and persist the manifest row — phase
+     * 'grace', full grant set, owned-resource snapshot — before any mutation.
+     */
+    private createDeletionManifest;
+    /** Revoke grants by manifest id, in chunks of 100. Already-deleted ids no-op. */
+    private deleteGrantsById;
+    /** §3.4 step 3: per entry, get by (principal, resource, accessLevel) → insert if missing. */
+    private restoreManifestGrants;
+    private toManifestGrant;
+    /** A grant reference's id, loudly — the manifest must never be built from corrupt grants. */
+    private referenceId;
+    /**
+     * Grace window in days (ACCOUNT_DELETION_GRACE_DAYS, default 30). Fractional values are
+     * honored so dev verification can shorten the window to minutes.
+     */
+    private gracePeriodDays;
+    private chunk;
+}
+//# sourceMappingURL=AccountDeletion.d.ts.map

package/dist/src/services/AccountDeletion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccountDeletion.d.ts","sourceRoot":"","sources":["../../../src/services/AccountDeletion.ts"],"names":[],"mappings":"AAAA,OAAe,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAGxC,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAGL,sBAAsB,EAKvB,MAAM,iBAAiB,CAAC;AASzB;;;;;;;;GAQG;AACH,qBAAa,eAAgB,YAAW,sBAAsB;IAC5D,wFAAwF;IACjF,eAAe,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAIhD;IACF,OAAO,CAAC,MAAM,CAA+C;IAE7D;;;;OAIG;IACG,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAsDxE;;;;OAIG;IACG,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,UAAU,GAAG,SAAS,CAAC;IA0C3F,+FAA+F;YACjF,yBAAyB;IAoBvC;;;OAGG;YACW,sBAAsB;IA6CpC,iFAAiF;YACnE,gBAAgB;IAS9B,6FAA6F;YAC/E,qBAAqB;IAsBnC,OAAO,CAAC,eAAe;IAUvB,6FAA6F;IAC7F,OAAO,CAAC,WAAW;IAOnB;;;OAGG;IACH,OAAO,CAAC,eAAe;IAavB,OAAO,CAAC,KAAK;CAOd"}