@proteinjs/user-server 1.7.0 → 1.8.0

package/dist/src/authentication/PasswordHasher.js

@@ -0,0 +1,152 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PasswordHasher = void 0;
+var crypto_1 = require("crypto");
+var argon2 = __importStar(require("argon2"));
+/**
+ * The one owner of credential hashing. Every path that writes or checks the user table's
+ * `password` column goes through this class: authenticate (login), Signup.createAccount,
+ * executePasswordReset, UpdateUserInfo.updatePassword, AccountDeletion re-auth, and
+ * MachineCredentials minting.
+ *
+ * Exactly two self-describing at-rest formats:
+ * - argon2id encoded (`$argon2id$v=19$m=...,t=...,p=...$<salt>$<hash>`) — human passwords.
+ *   The per-user random salt and the cost parameters live inside the encoded string.
+ * - sha256 hex (64 chars, never starts with `$`) — the legacy human format (pre-KDF rows,
+ *   upgraded in place on next login via verify-then-rehash) AND the permanent machine format
+ *   (see `PasswordHashMode`).
+ */
+var PasswordHasher = /** @class */ (function () {
+    function PasswordHasher() {
+    }
+    PasswordHasher.prototype.hash = function (password, mode) {
+        if (mode === void 0) { mode = 'human'; }
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        if (mode === 'machine') {
+                            return [2 /*return*/, this.sha256Hex(password)];
+                        }
+                        return [4 /*yield*/, argon2.hash(password, PasswordHasher.ARGON2_OPTIONS)];
+                    case 1: return [2 /*return*/, _a.sent()];
+                }
+            });
+        });
+    };
+    /**
+     * Format-discriminating verify. `storedHash` absent means the row has no credential yet
+     * (a machine row before its first mint) — no password matches it.
+     */
+    PasswordHasher.prototype.verify = function (storedHash, password) {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        if (!storedHash) {
+                            return [2 /*return*/, false];
+                        }
+                        if (!storedHash.startsWith(PasswordHasher.ARGON2ID_PREFIX)) return [3 /*break*/, 2];
+                        return [4 /*yield*/, argon2.verify(storedHash, password)];
+                    case 1: return [2 /*return*/, _a.sent()];
+                    case 2: return [2 /*return*/, this.constantTimeEqual(storedHash, this.sha256Hex(password))];
+                }
+            });
+        });
+    };
+    /**
+     * True when a verified credential should be re-written in the current format: legacy sha256
+     * under `human` mode. Machine rows never rehash — sha256 IS their current format.
+     */
+    PasswordHasher.prototype.needsRehash = function (storedHash, mode) {
+        if (mode === void 0) { mode = 'human'; }
+        if (mode === 'machine') {
+            return false;
+        }
+        return !storedHash.startsWith(PasswordHasher.ARGON2ID_PREFIX);
+    };
+    /** Byte-identical to the legacy crypto-js `sha256(value).toString()` (UTF-8 in, lowercase hex out). */
+    PasswordHasher.prototype.sha256Hex = function (value) {
+        return (0, crypto_1.createHash)('sha256').update(value, 'utf8').digest('hex');
+    };
+    PasswordHasher.prototype.constantTimeEqual = function (stored, candidate) {
+        var storedBytes = Buffer.from(stored, 'utf8');
+        var candidateBytes = Buffer.from(candidate, 'utf8');
+        return storedBytes.length === candidateBytes.length && (0, crypto_1.timingSafeEqual)(storedBytes, candidateBytes);
+    };
+    /**
+     * argon2id cost, pinned so a package upgrade can't silently change what we write: 64 MiB
+     * memory, 3 passes, parallelism 4 — RFC 9106's second recommended parameter set (its
+     * memory-constrained option). Measured ~23ms/hash on an M-series dev machine — the ~100ms
+     * class on typical server vCPUs.
+     */
+    PasswordHasher.ARGON2_OPTIONS = {
+        type: argon2.argon2id,
+        memoryCost: 65536,
+        timeCost: 3,
+        parallelism: 4,
+    };
+    PasswordHasher.ARGON2ID_PREFIX = '$argon2id$';
+    return PasswordHasher;
+}());
+exports.PasswordHasher = PasswordHasher;
+//# sourceMappingURL=PasswordHasher.js.map

package/dist/src/authentication/PasswordHasher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PasswordHasher.js","sourceRoot":"","sources":["../../../src/authentication/PasswordHasher.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iCAAqD;AACrD,6CAAiC;AAUjC;;;;;;;;;;;;GAYG;AACH;IAAA;IA8DA,CAAC;IA9CO,6BAAI,GAAV,UAAW,QAAgB,EAAE,IAAgC;QAAhC,qBAAA,EAAA,cAAgC;;;;;wBAC3D,IAAI,IAAI,KAAK,SAAS,EAAE;4BACtB,sBAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAC;yBACjC;wBAEM,qBAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,cAAc,CAAC,EAAA;4BAAjE,sBAAO,SAA0D,EAAC;;;;KACnE;IAED;;;OAGG;IACG,+BAAM,GAAZ,UAAa,UAAqC,EAAE,QAAgB;;;;;wBAClE,IAAI,CAAC,UAAU,EAAE;4BACf,sBAAO,KAAK,EAAC;yBACd;6BAEG,UAAU,CAAC,UAAU,CAAC,cAAc,CAAC,eAAe,CAAC,EAArD,wBAAqD;wBAChD,qBAAM,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAA;4BAAhD,sBAAO,SAAyC,EAAC;4BAGnD,sBAAO,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAC;;;;KACrE;IAED;;;OAGG;IACH,oCAAW,GAAX,UAAY,UAAkB,EAAE,IAAgC;QAAhC,qBAAA,EAAA,cAAgC;QAC9D,IAAI,IAAI,KAAK,SAAS,EAAE;YACtB,OAAO,KAAK,CAAC;SACd;QAED,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;IAChE,CAAC;IAED,uGAAuG;IAC/F,kCAAS,GAAjB,UAAkB,KAAa;QAC7B,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClE,CAAC;IAEO,0CAAiB,GAAzB,UAA0B,MAAc,EAAE,SAAiB;QACzD,IAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChD,IAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACtD,OAAO,WAAW,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM,IAAI,IAAA,wBAAe,EAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IACtG,CAAC;IA5DD;;;;;OAKG;IACqB,6BAAc,GAAuB;QAC3D,IAAI,EAAE,MAAM,CAAC,QAAQ;QACrB,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,CAAC;QACX,WAAW,EAAE,CAAC;KACf,CAAC;IAEsB,8BAAe,GAAG,YAAY,CAAC;IAgDzD,qBAAC;CAAA,AA9DD,IA8DC;AA9DY,wCAAc"}

package/dist/src/authentication/UserStatusTableWatcher.d.ts

@@ -0,0 +1,19 @@
+import { QueryBuilder, Table, TableWatcher } from '@proteinjs/db';
+import { User } from '@proteinjs/user';
+/**
+ * The one owner of "deactivated ⇒ sessions die": any user-table update writing
+ * `status: 'deactivated'` deletes the account's session rows (SocketIOSessionWatcher kicks the
+ * live sockets on that delete). Because the writers all go through `Db.update` — the staff
+ * toggle (SetUserStatus), account deletion, and the boot sync deactivating machine accounts
+ * removed from source — this fires for every present and future deactivation path.
+ *
+ * The delete runs post-commit (`runAfterCommit`): a transactional status flip that rolls back
+ * must not have killed sessions, and socket kicks must observe committed truth.
+ */
+export declare class UserStatusTableWatcher implements TableWatcher<User> {
+    private logger;
+    name(): string;
+    table(): Table<User>;
+    afterUpdate<T extends User>(recordUpdateCount: number, record: Partial<T>, qb: QueryBuilder<T>): Promise<void>;
+}
+//# sourceMappingURL=UserStatusTableWatcher.d.ts.map

package/dist/src/authentication/UserStatusTableWatcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserStatusTableWatcher.d.ts","sourceRoot":"","sources":["../../../src/authentication/UserStatusTableWatcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAiB,MAAM,eAAe,CAAC;AACjF,OAAO,EAAE,IAAI,EAAU,MAAM,iBAAiB,CAAC;AAG/C;;;;;;;;;GASG;AACH,qBAAa,sBAAuB,YAAW,YAAY,CAAC,IAAI,CAAC;IAC/D,OAAO,CAAC,MAAM,CAA+C;IAE7D,IAAI,IAAI,MAAM;IAId,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC;IAId,WAAW,CAAC,CAAC,SAAS,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;CA8BrH"}

package/dist/src/authentication/UserStatusTableWatcher.js

@@ -0,0 +1,115 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserStatusTableWatcher = void 0;
+var db_1 = require("@proteinjs/db");
+var user_1 = require("@proteinjs/user");
+var logger_1 = require("@proteinjs/logger");
+/**
+ * The one owner of "deactivated ⇒ sessions die": any user-table update writing
+ * `status: 'deactivated'` deletes the account's session rows (SocketIOSessionWatcher kicks the
+ * live sockets on that delete). Because the writers all go through `Db.update` — the staff
+ * toggle (SetUserStatus), account deletion, and the boot sync deactivating machine accounts
+ * removed from source — this fires for every present and future deactivation path.
+ *
+ * The delete runs post-commit (`runAfterCommit`): a transactional status flip that rolls back
+ * must not have killed sessions, and socket kicks must observe committed truth.
+ */
+var UserStatusTableWatcher = /** @class */ (function () {
+    function UserStatusTableWatcher() {
+        this.logger = new logger_1.Logger({ name: this.constructor.name });
+    }
+    UserStatusTableWatcher.prototype.name = function () {
+        return this.constructor.name;
+    };
+    UserStatusTableWatcher.prototype.table = function () {
+        return user_1.tables.User;
+    };
+    UserStatusTableWatcher.prototype.afterUpdate = function (recordUpdateCount, record, qb) {
+        return __awaiter(this, void 0, void 0, function () {
+            var db;
+            var _this = this;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        if (record.status !== 'deactivated' || recordUpdateCount === 0) {
+                            return [2 /*return*/];
+                        }
+                        if (!record.id) {
+                            // Every deactivation writer today updates by record id. A future query-based writer must
+                            // extend this watcher — surface it loudly instead of silently leaving sessions alive.
+                            this.logger.error({
+                                message: "Deactivation write without a record id \u2014 sessions NOT killed. Extend UserStatusTableWatcher for query-based status writers.",
+                            });
+                            return [2 /*return*/];
+                        }
+                        db = (0, db_1.getDbAsSystem)();
+                        return [4 /*yield*/, db.runAfterCommit(function () { return __awaiter(_this, void 0, void 0, function () {
+                                var user, deletedSessions;
+                                return __generator(this, function (_a) {
+                                    switch (_a.label) {
+                                        case 0: return [4 /*yield*/, db.get(user_1.tables.User, { id: record.id })];
+                                        case 1:
+                                            user = _a.sent();
+                                            if (!user) {
+                                                return [2 /*return*/]; // row deleted since the flip — nothing to resolve sessions against
+                                            }
+                                            return [4 /*yield*/, db.delete(user_1.tables.Session, { userEmail: user.email })];
+                                        case 2:
+                                            deletedSessions = _a.sent();
+                                            if (deletedSessions > 0) {
+                                                this.logger.info({
+                                                    message: "Deactivation killed sessions",
+                                                    obj: { email: user.email, sessions: deletedSessions },
+                                                });
+                                            }
+                                            return [2 /*return*/];
+                                    }
+                                });
+                            }); })];
+                    case 1:
+                        _a.sent();
+                        return [2 /*return*/];
+                }
+            });
+        });
+    };
+    return UserStatusTableWatcher;
+}());
+exports.UserStatusTableWatcher = UserStatusTableWatcher;
+//# sourceMappingURL=UserStatusTableWatcher.js.map

package/dist/src/authentication/UserStatusTableWatcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserStatusTableWatcher.js","sourceRoot":"","sources":["../../../src/authentication/UserStatusTableWatcher.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,oCAAiF;AACjF,wCAA+C;AAC/C,4CAA2C;AAE3C;;;;;;;;;GASG;AACH;IAAA;QACU,WAAM,GAAG,IAAI,eAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;IAwC/D,CAAC;IAtCC,qCAAI,GAAJ;QACE,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IAC/B,CAAC;IAED,sCAAK,GAAL;QACE,OAAO,aAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAEK,4CAAW,GAAjB,UAAkC,iBAAyB,EAAE,MAAkB,EAAE,EAAmB;;;;;;;wBAClG,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa,IAAI,iBAAiB,KAAK,CAAC,EAAE;4BAC9D,sBAAO;yBACR;wBAED,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE;4BACd,yFAAyF;4BACzF,sFAAsF;4BACtF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;gCAChB,OAAO,EAAE,kIAA6H;6BACvI,CAAC,CAAC;4BACH,sBAAO;yBACR;wBAEK,EAAE,GAAG,IAAA,kBAAa,GAAE,CAAC;wBAC3B,qBAAM,EAAE,CAAC,cAAc,CAAC;;;;gDACT,qBAAM,EAAE,CAAC,GAAG,CAAC,aAAM,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,EAAA;;4CAAnD,IAAI,GAAG,SAA4C;4CACzD,IAAI,CAAC,IAAI,EAAE;gDACT,sBAAO,CAAC,mEAAmE;6CAC5E;4CAEuB,qBAAM,EAAE,CAAC,MAAM,CAAC,aAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAA;;4CAA5E,eAAe,GAAG,SAA0D;4CAClF,IAAI,eAAe,GAAG,CAAC,EAAE;gDACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;oDACf,OAAO,EAAE,8BAA8B;oDACvC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE;iDACtD,CAAC,CAAC;6CACJ;;;;iCACF,CAAC,EAAA;;wBAbF,SAaE,CAAC;;;;;KACJ;IACH,6BAAC;AAAD,CAAC,AAzCD,IAyCC;AAzCY,wDAAsB"}

package/dist/src/authentication/authenticate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authenticate.d.ts","sourceRoot":"","sources":["../../../src/authentication/authenticate.ts"],"names":[],"mappings":"AAMA,wBAAgB,oBAAoB,CAAC,uBAAuB,CAAC,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,uBAMpG;AAED,wBAAsB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,CAqB1F"}
+{"version":3,"file":"authenticate.d.ts","sourceRoot":"","sources":["../../../src/authentication/authenticate.ts"],"names":[],"mappings":"AAMA,wBAAgB,oBAAoB,CAAC,uBAAuB,CAAC,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,uBAMpG;AAED,wBAAsB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,CA8C1F"}

package/dist/src/authentication/authenticate.js

@@ -35,16 +35,13 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
         if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
     }
 };
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.authenticate = exports.createAuthentication = void 0;
-var sha256_1 = __importDefault(require("crypto-js/sha256"));
 var db_1 = require("@proteinjs/db");
 var user_1 = require("@proteinjs/user");
 var logger_1 = require("@proteinjs/logger");
 var DefaultAdminCredentials_1 = require("./DefaultAdminCredentials");
+var PasswordHasher_1 = require("./PasswordHasher");
 function createAuthentication(defaultAdminCredentials) {
     if (defaultAdminCredentials) {
         DefaultAdminCredentials_1.DefaultAdminCredentials.setCredentials(defaultAdminCredentials);
@@ -54,9 +51,10 @@ function createAuthentication(defaultAdminCredentials) {
 exports.createAuthentication = createAuthentication;
 function authenticate(email, password) {
     return __awaiter(this, void 0, void 0, function () {
-        var logger, defaultAdminCredentials, users;
-        return __generator(this, function (_a) {
-            switch (_a.label) {
+        var logger, defaultAdminCredentials, db, user, hasher, _a, mode, _b, _c, _d;
+        var _e;
+        return __generator(this, function (_f) {
+            switch (_f.label) {
                 case 0:
                     logger = new logger_1.Logger({ name: 'authenticate' });
                     defaultAdminCredentials = DefaultAdminCredentials_1.DefaultAdminCredentials.getCredentials();
@@ -66,15 +64,45 @@ function authenticate(email, password) {
                         logger.info({ message: 'Authenitcated default admin user' });
                         return [2 /*return*/, true];
                     }
-                    return [4 /*yield*/, (0, db_1.getDbAsSystem)().query(user_1.tables.User, {
-                            email: email.toLowerCase(),
-                            password: (0, sha256_1.default)(password).toString(),
-                        })];
+                    db = (0, db_1.getDbAsSystem)();
+                    return [4 /*yield*/, db.get(user_1.tables.User, { email: email.toLowerCase() })];
                 case 1:
-                    users = _a.sent();
-                    if (users.length < 1) {
+                    user = _f.sent();
+                    hasher = new PasswordHasher_1.PasswordHasher();
+                    _a = !user;
+                    if (_a) return [3 /*break*/, 3];
+                    return [4 /*yield*/, hasher.verify(user.password, password)];
+                case 2:
+                    _a = !(_f.sent());
+                    _f.label = 3;
+                case 3:
+                    if (_a) {
                         return [2 /*return*/, 'User name or password incorrect'];
                     }
+                    mode = user.isLoadedFromSource === true ? 'machine' : 'human';
+                    if (!hasher.needsRehash(user.password, mode)) return [3 /*break*/, 6];
+                    _c = (_b = db).update;
+                    _d = [user_1.tables.User];
+                    _e = { id: user.id };
+                    return [4 /*yield*/, hasher.hash(password)];
+                case 4: return [4 /*yield*/, _c.apply(_b, _d.concat([(_e.password = _f.sent(), _e)]))];
+                case 5:
+                    _f.sent();
+                    _f.label = 6;
+                case 6:
+                    // Deactivated accounts are refused a new session even with correct credentials; the session
+                    // side of the same gate lives in userCache (deactivated sessions resolve as guest).
+                    if (user.status === 'deactivated') {
+                        // Pending-deletion accounts (deactivated by the account-deletion flow, not the staff toggle)
+                        // may authenticate: logging back in IS the cancel signal — the login route runs the cancel
+                        // hook before request.login and decides. No purgeAfter check here: the cancel's CAS claim is
+                        // the arbiter, so a user beating the purge walker to a just-expired window wins honestly.
+                        if (user.deleteRequestedAt != null) {
+                            return [2 /*return*/, true];
+                        }
+                        logger.warn({ message: 'Refused login for deactivated account', obj: { email: email.toLowerCase() } });
+                        return [2 /*return*/, 'This account has been deactivated'];
+                    }
                     return [2 /*return*/, true];
             }
         });

package/dist/src/authentication/authenticate.js.map

@@ -1 +1 @@
-{"version":3,"file":"authenticate.js","sourceRoot":"","sources":["../../../src/authentication/authenticate.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4DAAsC;AACtC,oCAA8C;AAC9C,wCAAyC;AACzC,4CAA2C;AAC3C,qEAAoE;AAEpE,SAAgB,oBAAoB,CAAC,uBAAgE;IACnG,IAAI,uBAAuB,EAAE;QAC3B,iDAAuB,CAAC,cAAc,CAAC,uBAAuB,CAAC,CAAC;KACjE;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAND,oDAMC;AAED,SAAsB,YAAY,CAAC,KAAa,EAAE,QAAgB;;;;;;oBAC1D,MAAM,GAAG,IAAI,eAAM,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;oBAC9C,uBAAuB,GAAG,iDAAuB,CAAC,cAAc,EAAE,CAAC;oBACzE,IACE,uBAAuB;wBACvB,uBAAuB,CAAC,QAAQ,IAAI,KAAK;wBACzC,uBAAuB,CAAC,QAAQ,IAAI,QAAQ,EAC5C;wBACA,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAC;wBAC7D,sBAAO,IAAI,EAAC;qBACb;oBAEa,qBAAM,IAAA,kBAAa,GAAE,CAAC,KAAK,CAAC,aAAM,CAAC,IAAI,EAAE;4BACrD,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE;4BAC1B,QAAQ,EAAE,IAAA,gBAAM,EAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE;yBACtC,CAAC,EAAA;;oBAHI,KAAK,GAAG,SAGZ;oBACF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE;wBACpB,sBAAO,iCAAiC,EAAC;qBAC1C;oBAED,sBAAO,IAAI,EAAC;;;;CACb;AArBD,oCAqBC"}
+{"version":3,"file":"authenticate.js","sourceRoot":"","sources":["../../../src/authentication/authenticate.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,oCAA8C;AAC9C,wCAAyC;AACzC,4CAA2C;AAC3C,qEAAoE;AACpE,mDAAkD;AAElD,SAAgB,oBAAoB,CAAC,uBAAgE;IACnG,IAAI,uBAAuB,EAAE;QAC3B,iDAAuB,CAAC,cAAc,CAAC,uBAAuB,CAAC,CAAC;KACjE;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAND,oDAMC;AAED,SAAsB,YAAY,CAAC,KAAa,EAAE,QAAgB;;;;;;;oBAC1D,MAAM,GAAG,IAAI,eAAM,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;oBAC9C,uBAAuB,GAAG,iDAAuB,CAAC,cAAc,EAAE,CAAC;oBACzE,IACE,uBAAuB;wBACvB,uBAAuB,CAAC,QAAQ,IAAI,KAAK;wBACzC,uBAAuB,CAAC,QAAQ,IAAI,QAAQ,EAC5C;wBACA,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAC;wBAC7D,sBAAO,IAAI,EAAC;qBACb;oBAKK,EAAE,GAAG,IAAA,kBAAa,GAAE,CAAC;oBACd,qBAAM,EAAE,CAAC,GAAG,CAAC,aAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,EAAA;;oBAAhE,IAAI,GAAG,SAAyD;oBAChE,MAAM,GAAG,IAAI,+BAAc,EAAE,CAAC;oBAChC,KAAA,CAAC,IAAI,CAAA;4BAAL,wBAAK;oBAAM,qBAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAA;;oBAA9C,KAAA,CAAC,CAAC,SAA4C,CAAC,CAAA;;;oBAA5D,QAA8D;wBAC5D,sBAAO,iCAAiC,EAAC;qBAC1C;oBAKK,IAAI,GAAG,IAAI,CAAC,kBAAkB,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;yBAChE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAvC,wBAAuC;oBACnC,KAAA,CAAA,KAAA,EAAE,CAAA,CAAC,MAAM,CAAA;0BAAC,aAAM,CAAC,IAAI;2BAAI,EAAE,EAAE,IAAI,CAAC,EAAE;oBAAY,qBAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAA;wBAAjF,qBAAM,yBAAsC,WAAQ,GAAE,SAA2B,QAAG,EAAA;;oBAApF,SAAoF,CAAC;;;oBAGvF,4FAA4F;oBAC5F,oFAAoF;oBACpF,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE;wBACjC,6FAA6F;wBAC7F,2FAA2F;wBAC3F,6FAA6F;wBAC7F,0FAA0F;wBAC1F,IAAI,IAAI,CAAC,iBAAiB,IAAI,IAAI,EAAE;4BAClC,sBAAO,IAAI,EAAC;yBACb;wBAED,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,uCAAuC,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;wBACvG,sBAAO,mCAAmC,EAAC;qBAC5C;oBAED,sBAAO,IAAI,EAAC;;;;CACb;AA9CD,oCA8CC"}

package/dist/src/authorization/userCache.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"userCache.d.ts","sourceRoot":"","sources":["../../../src/authorization/userCache.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAGzD,OAAO,EAAE,IAAI,EAA6C,MAAM,iBAAiB,CAAC;AAKlF,eAAO,MAAM,SAAS,EAAE,gBAAgB,CAAC,IAAI,CAsC5C,CAAC"}
+{"version":3,"file":"userCache.d.ts","sourceRoot":"","sources":["../../../src/authorization/userCache.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAGzD,OAAO,EAAE,IAAI,EAA6C,MAAM,iBAAiB,CAAC;AAKlF,eAAO,MAAM,SAAS,EAAE,gBAAgB,CAAC,IAAI,CA8C5C,CAAC"}

package/dist/src/authorization/userCache.js

@@ -72,7 +72,16 @@ exports.userCache = {
                 case 1: return [4 /*yield*/, (0, db_1.getDbAsSystem)().get(user_1.tables.User, { email: userEmail.toLowerCase() })];
                 case 2:
                     accountUser = _a.sent();
-                    if (accountUser) {
+                    if (accountUser && accountUser.status === 'deactivated') {
+                        // The session half of the deactivation gate (login half in authenticate): the session
+                        // cache is rebuilt per request, so a live session stops resolving the moment the
+                        // account is deactivated — every request runs as the unauthenticated guest.
+                        logger.warn({
+                            message: "Session references a deactivated account; resolving as unauthenticated",
+                            obj: { sessionId: sessionId, userEmail: userEmail },
+                        });
+                    }
+                    else if (accountUser) {
                         delete accountUser['password'];
                         user = accountUser;
                     }

package/dist/src/authorization/userCache.js.map

@@ -1 +1 @@
-{"version":3,"file":"userCache.js","sourceRoot":"","sources":["../../../src/authorization/userCache.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,kDAA4B;AAE5B,oCAA8C;AAC9C,4CAA2C;AAC3C,wCAAkF;AAClF,qFAAoF;AAEpF,IAAM,MAAM,GAAG,IAAI,eAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;AAEpC,QAAA,SAAS,GAA2B;IAC/C,GAAG,EAAE,6BAAsB;IAC3B,MAAM,EAAE,UAAO,SAAiB,EAAE,SAAiB;;;;;oBAC7C,IAAI,GAAG,gBAAS,CAAC;yBACjB,SAAS,EAAT,wBAAS;oBACL,gBAAgB,GAAG,iDAAuB,CAAC,cAAc,EAAE,CAAC;yBAC9D,CAAA,gBAAgB,IAAI,SAAS,IAAI,gBAAgB,CAAC,QAAQ,CAAA,EAA1D,wBAA0D;oBACtD,SAAS,GAAS;wBACtB,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,gBAAgB,CAAC,QAAQ;wBAChC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ;wBACnC,aAAa,EAAE,IAAI;wBACnB,KAAK,EAAE,CAAC,OAAO,CAAC;wBAChB,OAAO,EAAE,IAAA,gBAAM,GAAE;wBACjB,OAAO,EAAE,IAAA,gBAAM,GAAE;wBACjB,EAAE,EAAE,OAAO;qBACZ,CAAC;oBACF,IAAI,GAAG,SAAS,CAAC;;wBAEG,qBAAM,IAAA,kBAAa,GAAE,CAAC,GAAG,CAAC,aAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,EAAA;;oBAAxF,WAAW,GAAG,SAA0E;oBAC9F,IAAI,WAAW,EAAE;wBACf,OAAQ,WAAmB,CAAC,UAAU,CAAC,CAAC;wBACxC,IAAI,GAAG,WAAW,CAAC;qBACpB;yBAAM;wBACL,0FAA0F;wBAC1F,+EAA+E;wBAC/E,sFAAsF;wBACtF,yDAAyD;wBACzD,MAAM,CAAC,IAAI,CAAC;4BACV,OAAO,EAAE,iFAAiF;4BAC1F,GAAG,EAAE,EAAE,SAAS,WAAA,EAAE,SAAS,WAAA,EAAE;yBAC9B,CAAC,CAAC;qBACJ;;wBAIL,sBAAO,IAAI,EAAC;;;SACb;CACF,CAAC"}
+{"version":3,"file":"userCache.js","sourceRoot":"","sources":["../../../src/authorization/userCache.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,kDAA4B;AAE5B,oCAA8C;AAC9C,4CAA2C;AAC3C,wCAAkF;AAClF,qFAAoF;AAEpF,IAAM,MAAM,GAAG,IAAI,eAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;AAEpC,QAAA,SAAS,GAA2B;IAC/C,GAAG,EAAE,6BAAsB;IAC3B,MAAM,EAAE,UAAO,SAAiB,EAAE,SAAiB;;;;;oBAC7C,IAAI,GAAG,gBAAS,CAAC;yBACjB,SAAS,EAAT,wBAAS;oBACL,gBAAgB,GAAG,iDAAuB,CAAC,cAAc,EAAE,CAAC;yBAC9D,CAAA,gBAAgB,IAAI,SAAS,IAAI,gBAAgB,CAAC,QAAQ,CAAA,EAA1D,wBAA0D;oBACtD,SAAS,GAAS;wBACtB,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,gBAAgB,CAAC,QAAQ;wBAChC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ;wBACnC,aAAa,EAAE,IAAI;wBACnB,KAAK,EAAE,CAAC,OAAO,CAAC;wBAChB,OAAO,EAAE,IAAA,gBAAM,GAAE;wBACjB,OAAO,EAAE,IAAA,gBAAM,GAAE;wBACjB,EAAE,EAAE,OAAO;qBACZ,CAAC;oBACF,IAAI,GAAG,SAAS,CAAC;;wBAEG,qBAAM,IAAA,kBAAa,GAAE,CAAC,GAAG,CAAC,aAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,EAAA;;oBAAxF,WAAW,GAAG,SAA0E;oBAC9F,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,aAAa,EAAE;wBACvD,sFAAsF;wBACtF,iFAAiF;wBACjF,4EAA4E;wBAC5E,MAAM,CAAC,IAAI,CAAC;4BACV,OAAO,EAAE,wEAAwE;4BACjF,GAAG,EAAE,EAAE,SAAS,WAAA,EAAE,SAAS,WAAA,EAAE;yBAC9B,CAAC,CAAC;qBACJ;yBAAM,IAAI,WAAW,EAAE;wBACtB,OAAQ,WAAmB,CAAC,UAAU,CAAC,CAAC;wBACxC,IAAI,GAAG,WAAW,CAAC;qBACpB;yBAAM;wBACL,0FAA0F;wBAC1F,+EAA+E;wBAC/E,sFAAsF;wBACtF,yDAAyD;wBACzD,MAAM,CAAC,IAAI,CAAC;4BACV,OAAO,EAAE,iFAAiF;4BAC1F,GAAG,EAAE,EAAE,SAAS,WAAA,EAAE,SAAS,WAAA,EAAE;yBAC9B,CAAC,CAAC;qBACJ;;wBAIL,sBAAO,IAAI,EAAC;;;SACb;CACF,CAAC"}

package/dist/src/emails/AccountDeletionEmailConfigs.d.ts

@@ -0,0 +1,35 @@
+import { Loadable } from '@proteinjs/reflection';
+import Mail from 'nodemailer/lib/mailer';
+import { Moment } from 'moment';
+/**
+ * Config-factory seams for the two account-deletion emails (the PasswordResetEmailConfig
+ * pattern; the interfaces live here because @proteinjs/email-server is a registry package).
+ * Both emails are self-contained notifications, so each getter carries default content (the
+ * PasswordUpdatedEmailConfig precedent) — an app implements the factory to override.
+ */
+export interface AccountDeletionRequestedEmailConfig {
+    /** @see https://nodemailer.com/message/ for all available options */
+    options?: Mail.Options;
+    /** @param purgeAfter when the grace window ends and the account is permanently erased */
+    getEmailContent: (purgeAfter: Moment) => {
+        text: string;
+        html?: string;
+    };
+}
+export interface DefaultAccountDeletionRequestedEmailConfigFactory extends Loadable {
+    getConfig(): AccountDeletionRequestedEmailConfig;
+}
+export declare const getDefaultAccountDeletionRequestedEmailConfigFactory: () => DefaultAccountDeletionRequestedEmailConfigFactory;
+export interface AccountDeletedEmailConfig {
+    /** @see https://nodemailer.com/message/ for all available options */
+    options?: Mail.Options;
+    getEmailContent: () => {
+        text: string;
+        html?: string;
+    };
+}
+export interface DefaultAccountDeletedEmailConfigFactory extends Loadable {
+    getConfig(): AccountDeletedEmailConfig;
+}
+export declare const getDefaultAccountDeletedEmailConfigFactory: () => DefaultAccountDeletedEmailConfigFactory;
+//# sourceMappingURL=AccountDeletionEmailConfigs.d.ts.map

package/dist/src/emails/AccountDeletionEmailConfigs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccountDeletionEmailConfigs.d.ts","sourceRoot":"","sources":["../../../src/emails/AccountDeletionEmailConfigs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAoB,MAAM,uBAAuB,CAAC;AACnE,OAAO,IAAI,MAAM,uBAAuB,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC;;;;;GAKG;AAEH,MAAM,WAAW,mCAAmC;IAClD,qEAAqE;IACrE,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC;IACvB,yFAAyF;IACzF,eAAe,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK;QACvC,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED,MAAM,WAAW,iDAAkD,SAAQ,QAAQ;IACjF,SAAS,IAAI,mCAAmC,CAAC;CAClD;AAED,eAAO,MAAM,oDAAoD,QAC3D,iDAoBH,CAAC;AAEJ,MAAM,WAAW,yBAAyB;IACxC,qEAAqE;IACrE,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC;IACvB,eAAe,EAAE,MAAM;QACrB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED,MAAM,WAAW,uCAAwC,SAAQ,QAAQ;IACvE,SAAS,IAAI,yBAAyB,CAAC;CACxC;AAED,eAAO,MAAM,0CAA0C,QAAO,uCAiB7D,CAAC"}

package/dist/src/emails/AccountDeletionEmailConfigs.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getDefaultAccountDeletedEmailConfigFactory = exports.getDefaultAccountDeletionRequestedEmailConfigFactory = void 0;
+var reflection_1 = require("@proteinjs/reflection");
+var getDefaultAccountDeletionRequestedEmailConfigFactory = function () {
+    var defaultFactory = {
+        getConfig: function () { return ({
+            options: { subject: 'Your account is scheduled for deletion' },
+            getEmailContent: function (purgeAfter) { return ({
+                text: "Your account is scheduled for deletion. Your content is no longer visible to you or to " +
+                    "anyone you shared it with. You can change your mind until ".concat(purgeAfter.format('MMMM D, YYYY'), " ") +
+                    "by simply logging back in \u2014 that restores everything, including shares. After that date, your " +
+                    "account and everything in it are permanently removed from our systems, and we'll email you to " +
+                    "confirm when it's done. If you didn't request this, log back in now to cancel.",
+            }); },
+        }); },
+    };
+    var retrievedFactory = reflection_1.SourceRepository.get().object('@proteinjs/user-server/DefaultAccountDeletionRequestedEmailConfigFactory');
+    return retrievedFactory || defaultFactory;
+};
+exports.getDefaultAccountDeletionRequestedEmailConfigFactory = getDefaultAccountDeletionRequestedEmailConfigFactory;
+var getDefaultAccountDeletedEmailConfigFactory = function () {
+    var defaultFactory = {
+        getConfig: function () { return ({
+            options: { subject: 'Your account has been deleted' },
+            getEmailContent: function () { return ({
+                text: "Your account and everything in it have been permanently removed from our systems. " +
+                    "This is the confirmation you were promised when you requested deletion. Goodbye, and thank you.",
+            }); },
+        }); },
+    };
+    var retrievedFactory = reflection_1.SourceRepository.get().object('@proteinjs/user-server/DefaultAccountDeletedEmailConfigFactory');
+    return retrievedFactory || defaultFactory;
+};
+exports.getDefaultAccountDeletedEmailConfigFactory = getDefaultAccountDeletedEmailConfigFactory;
+//# sourceMappingURL=AccountDeletionEmailConfigs.js.map

package/dist/src/emails/AccountDeletionEmailConfigs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccountDeletionEmailConfigs.js","sourceRoot":"","sources":["../../../src/emails/AccountDeletionEmailConfigs.ts"],"names":[],"mappings":";;;AAAA,oDAAmE;AAyB5D,IAAM,oDAAoD,GAC/D;IACE,IAAM,cAAc,GAAsD;QACxE,SAAS,EAAE,cAAM,OAAA,CAAC;YAChB,OAAO,EAAE,EAAE,OAAO,EAAE,wCAAwC,EAAE;YAC9D,eAAe,EAAE,UAAC,UAAkB,IAAK,OAAA,CAAC;gBACxC,IAAI,EACF,yFAAyF;oBACzF,oEAA6D,UAAU,CAAC,MAAM,CAAC,cAAc,CAAC,MAAG;oBACjG,qGAAgG;oBAChG,gGAAgG;oBAChG,gFAAgF;aACnF,CAAC,EAPuC,CAOvC;SACH,CAAC,EAVe,CAUf;KACH,CAAC;IAEF,IAAM,gBAAgB,GAAG,6BAAgB,CAAC,GAAG,EAAE,CAAC,MAAM,CACpD,0EAA0E,CAC3E,CAAC;IAEF,OAAO,gBAAgB,IAAI,cAAc,CAAC;AAC5C,CAAC,CAAC;AArBS,QAAA,oDAAoD,wDAqB7D;AAeG,IAAM,0CAA0C,GAAG;IACxD,IAAM,cAAc,GAA4C;QAC9D,SAAS,EAAE,cAAM,OAAA,CAAC;YAChB,OAAO,EAAE,EAAE,OAAO,EAAE,+BAA+B,EAAE;YACrD,eAAe,EAAE,cAAM,OAAA,CAAC;gBACtB,IAAI,EACF,oFAAoF;oBACpF,iGAAiG;aACpG,CAAC,EAJqB,CAIrB;SACH,CAAC,EAPe,CAOf;KACH,CAAC;IAEF,IAAM,gBAAgB,GAAG,6BAAgB,CAAC,GAAG,EAAE,CAAC,MAAM,CACpD,gEAAgE,CACjE,CAAC;IAEF,OAAO,gBAAgB,IAAI,cAAc,CAAC;AAC5C,CAAC,CAAC;AAjBW,QAAA,0CAA0C,8CAiBrD"}

package/dist/src/emails/AccountDeletionEmails.d.ts

@@ -0,0 +1,13 @@
+import { Moment } from 'moment';
+/**
+ * Thin sender for the two account-deletion emails: deletion-requested (at deactivation — the
+ * only cancel channel an account-takeover victim has) and the store-required completion
+ * confirmation (sent by the purge walker after the user row is gone). Content comes from the
+ * config factories beside this class; transport is the app's DefaultEmailConfigFactory SMTP
+ * config via EmailSender.
+ */
+export declare class AccountDeletionEmails {
+    sendDeletionRequested(to: string, purgeAfter: Moment): Promise<void>;
+    sendAccountDeleted(to: string): Promise<void>;
+}
+//# sourceMappingURL=AccountDeletionEmails.d.ts.map

package/dist/src/emails/AccountDeletionEmails.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccountDeletionEmails.d.ts","sourceRoot":"","sources":["../../../src/emails/AccountDeletionEmails.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAOhC;;;;;;GAMG;AACH,qBAAa,qBAAqB;IAC1B,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYpE,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAWpD"}