@rpcbase/auth 0.199.0 → 0.200.0

package/dist/api/resend-otp/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/api/resend-otp/handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,GAAG,EAAE,UAAU,EAAO,MAAM,cAAc,CAAA;AAKnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAElD,OAAO,KAAK,SAAS,MAAM,SAAS,CAAA;AAGpC,eAAO,MAAM,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,cAAc,EAAE,SAAS,CAAC,eAAe,EAAE,eAAe,CAkEtG,CAAA;yBAEe,KAAK,GAAG,CAAC,eAAe,CAAC;AAAzC,wBAEC"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/api/resend-otp/handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,KAAK,UAAU,EAAY,MAAM,cAAc,CAAA;AAQ7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAElD,OAAO,KAAK,SAAS,MAAM,SAAS,CAAA;AAGpC,eAAO,MAAM,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,cAAc,EAAE,SAAS,CAAC,eAAe,EAAE,eAAe,CA0DtG,CAAA;yBAEe,KAAK,GAAG,CAAC,eAAe,CAAC;AAAzC,wBAEC"}

package/dist/api/resend-otp/index.d.ts

@@ -2,11 +2,16 @@ import { z } from 'zod';
 export declare const ROUTE = "/api/rb/auth/resend-otp";
 export declare const requestSchema: z.ZodObject<{
     email: z.ZodString;
+    locale: z.ZodDefault<z.ZodEnum<{
+        fr: "fr";
+        en: "en";
+    }>>;
 }, z.core.$strip>;
 export type RequestPayload = z.infer<typeof requestSchema>;
 export declare const responseSchema: z.ZodObject<{
     success: z.ZodBoolean;
     error: z.ZodOptional<z.ZodString>;
+    retryAfterSeconds: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;
 export type ResponsePayload = z.infer<typeof responseSchema>;
 //# sourceMappingURL=index.d.ts.map

package/dist/api/resend-otp/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/resend-otp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,eAAO,MAAM,KAAK,4BAA4B,CAAA;AAE9C,eAAO,MAAM,aAAa;;iBAExB,CAAA;AAEF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAA;AAE1D,eAAO,MAAM,cAAc;;;iBAGzB,CAAA;AAEF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/resend-otp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,eAAO,MAAM,KAAK,4BAA4B,CAAA;AAE9C,eAAO,MAAM,aAAa;;;;;;iBAGxB,CAAA;AAEF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAA;AAE1D,eAAO,MAAM,cAAc;;;;iBAIzB,CAAA;AAEF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA"}

package/dist/api/resend-otp/index.js

@@ -0,0 +1,16 @@
+import { a as object, i as number, o as string, r as boolean, t as _enum } from "../../schemas-DABNKHVA.js";
+//#region src/api/resend-otp/index.ts
+var ROUTE = "/api/rb/auth/resend-otp";
+var requestSchema = object({
+	email: string().trim().toLowerCase().email(),
+	locale: _enum(["fr", "en"]).default("en")
+});
+var responseSchema = object({
+	success: boolean(),
+	error: string().optional(),
+	retryAfterSeconds: number().int().positive().optional()
+});
+//#endregion
+export { ROUTE, requestSchema, responseSchema };
+
+//# sourceMappingURL=index.js.map

package/dist/api/resend-otp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/api/resend-otp/index.ts"],"sourcesContent":["import { z } from \"zod\"\n\n\nexport const ROUTE = \"/api/rb/auth/resend-otp\"\n\nexport const requestSchema = z.object({\n  email: z.string().trim().toLowerCase().email(),\n  locale: z.enum([\"fr\", \"en\"]).default(\"en\"),\n})\n\nexport type RequestPayload = z.infer<typeof requestSchema>\n\nexport const responseSchema = z.object({\n  success: z.boolean(),\n  error: z.string().optional(),\n  retryAfterSeconds: z.number().int().positive().optional(),\n})\n\nexport type ResponsePayload = z.infer<typeof responseSchema>\n"],"mappings":";;AAGA,IAAa,QAAQ;AAErB,IAAa,gBAAgB,OAAS;CACpC,OAAO,OAAS,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,MAAM;CAC7C,QAAQ,MAAO,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI;AAC3C,CAAC;AAID,IAAa,iBAAiB,OAAS;CACrC,SAAS,QAAU;CACnB,OAAO,OAAS,CAAC,CAAC,SAAS;CAC3B,mBAAmB,OAAS,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;AAC1D,CAAC"}

package/dist/api/sign-in/handler.d.ts

@@ -1,5 +1,7 @@
-import { Api } from '@rpcbase/api';
+import { Api, ApiHandler } from '@rpcbase/api';
 import { AuthSessionUser } from '../../types';
+import * as SignIn from "./index";
+export declare const signIn: ApiHandler<SignIn.RequestPayload, SignIn.ResponsePayload, AuthSessionUser>;
 declare const _default: (api: Api<AuthSessionUser>) => void;
 export default _default;
 //# sourceMappingURL=handler.d.ts.map

package/dist/api/sign-in/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/api/sign-in/handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAmB,MAAM,cAAc,CAAA;AAKnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;yBA6DlC,KAAK,GAAG,CAAC,eAAe,CAAC;AAAzC,wBAEC"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/api/sign-in/handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,KAAK,UAAU,EAAY,MAAM,cAAc,CAAA;AAM7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAElD,OAAO,KAAK,MAAM,MAAM,SAAS,CAAA;AAGjC,eAAO,MAAM,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,eAAe,EAAE,eAAe,CAqE7F,CAAA;yBAEe,KAAK,GAAG,CAAC,eAAe,CAAC;AAAzC,wBAEC"}

package/dist/api/sign-in/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/sign-in/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,eAAO,MAAM,KAAK,yBAAyB,CAAA;AAE3C,eAAO,MAAM,aAAa;;;;iBAOxB,CAAA;AAEF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAA;AAE1D,eAAO,MAAM,cAAc;;;;;iBAKzB,CAAA;AAEF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/sign-in/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,eAAO,MAAM,KAAK,yBAAyB,CAAA;AAE3C,eAAO,MAAM,aAAa;;;;iBASxB,CAAA;AAEF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAA;AAE1D,eAAO,MAAM,cAAc;;;;;iBAKzB,CAAA;AAEF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA"}

package/dist/{sign-in-DYq3bJeH.js → api/sign-in/index.js}

@@ -1,18 +1,18 @@
-import { a as string, i as object, n as boolean } from "./schemas-CMgO_xn9.js";
+import { a as object, o as string, r as boolean } from "../../schemas-DABNKHVA.js";
 //#region src/api/sign-in/index.ts
 var ROUTE = "/api/rb/auth/sign-in";
 var requestSchema = object({
-	email: string().nonempty("Email is required").email("Please enter a valid email address"),
+	email: string().trim().toLowerCase().nonempty("Email is required").email("Please enter a valid email address"),
 	password: string().min(1, { message: "Password is required" }),
 	rememberMe: boolean().default(true)
 });
-object({
+var responseSchema = object({
 	success: boolean(),
 	error: string().optional(),
 	userId: string().optional(),
 	tenantId: string().optional()
 });
 //#endregion
-export { requestSchema as n, ROUTE as t };
+export { ROUTE, requestSchema, responseSchema };
 
-//# sourceMappingURL=sign-in-DYq3bJeH.js.map
+//# sourceMappingURL=index.js.map

package/dist/api/sign-in/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/api/sign-in/index.ts"],"sourcesContent":["import { z } from \"zod\"\n\n\nexport const ROUTE = \"/api/rb/auth/sign-in\"\n\nexport const requestSchema = z.object({\n  email: z\n    .string()\n    .trim()\n    .toLowerCase()\n    .nonempty(\"Email is required\")\n    .email(\"Please enter a valid email address\"),\n  password: z.string().min(1, { message: \"Password is required\" }),\n  rememberMe: z.boolean().default(true),\n})\n\nexport type RequestPayload = z.infer<typeof requestSchema>\n\nexport const responseSchema = z.object({\n  success: z.boolean(),\n  error: z.string().optional(),\n  userId: z.string().optional(),\n  tenantId: z.string().optional(),\n})\n\nexport type ResponsePayload = z.infer<typeof responseSchema>\n"],"mappings":";;AAGA,IAAa,QAAQ;AAErB,IAAa,gBAAgB,OAAS;CACpC,OAAO,OACG,CAAC,CACR,KAAK,CAAC,CACN,YAAY,CAAC,CACb,SAAS,mBAAmB,CAAC,CAC7B,MAAM,oCAAoC;CAC7C,UAAU,OAAS,CAAC,CAAC,IAAI,GAAG,EAAE,SAAS,uBAAuB,CAAC;CAC/D,YAAY,QAAU,CAAC,CAAC,QAAQ,IAAI;AACtC,CAAC;AAID,IAAa,iBAAiB,OAAS;CACrC,SAAS,QAAU;CACnB,OAAO,OAAS,CAAC,CAAC,SAAS;CAC3B,QAAQ,OAAS,CAAC,CAAC,SAAS;CAC5B,UAAU,OAAS,CAAC,CAAC,SAAS;AAChC,CAAC"}

package/dist/api/sign-up/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/api/sign-up/handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,GAAG,EAAO,UAAU,EAAE,MAAM,cAAc,CAAA;AAKnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAElD,OAAO,KAAK,MAAM,MAAM,SAAS,CAAA;AAGjC,eAAO,MAAM,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,eAAe,EAAE,eAAe,CA6F7F,CAAA;yBAEe,KAAK,GAAG,CAAC,eAAe,CAAC;AAAzC,wBAEC"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/api/sign-up/handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,GAAG,EAAE,KAAK,UAAU,EAAY,MAAM,cAAc,CAAA;AAa7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAElD,OAAO,KAAK,MAAM,MAAM,SAAS,CAAA;AAiGjC,eAAO,MAAM,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,eAAe,EAAE,eAAe,CAkJ7F,CAAA;yBAEe,KAAK,GAAG,CAAC,eAAe,CAAC;AAAzC,wBAEC"}

package/dist/api/sign-up/index.d.ts

@@ -1,16 +1,42 @@
 import { z } from 'zod';
 export declare const ROUTE = "/api/rb/auth/sign-up";
 export declare const requestSchema: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
     email: z.ZodString;
     password: z.ZodString;
     rememberMe: z.ZodDefault<z.ZodBoolean>;
+    locale: z.ZodDefault<z.ZodEnum<{
+        fr: "fr";
+        en: "en";
+    }>>;
 }, z.core.$strip>;
 export type RequestPayload = z.infer<typeof requestSchema>;
+export declare const signUpErrorSchema: z.ZodEnum<{
+    invalid_payload: "invalid_payload";
+    user_exists: "user_exists";
+    rate_limited: "rate_limited";
+    tenant_initialization_in_progress: "tenant_initialization_in_progress";
+    tenant_initialization_failed: "tenant_initialization_failed";
+    email_delivery_failed: "email_delivery_failed";
+    sign_up_failed: "sign_up_failed";
+}>;
+export type SignUpError = z.infer<typeof signUpErrorSchema>;
 export declare const responseSchema: z.ZodObject<{
     success: z.ZodBoolean;
-    error: z.ZodOptional<z.ZodString>;
+    error: z.ZodOptional<z.ZodEnum<{
+        invalid_payload: "invalid_payload";
+        user_exists: "user_exists";
+        rate_limited: "rate_limited";
+        tenant_initialization_in_progress: "tenant_initialization_in_progress";
+        tenant_initialization_failed: "tenant_initialization_failed";
+        email_delivery_failed: "email_delivery_failed";
+        sign_up_failed: "sign_up_failed";
+    }>>;
     userId: z.ZodOptional<z.ZodString>;
     tenantId: z.ZodOptional<z.ZodString>;
+    verificationRequired: z.ZodOptional<z.ZodBoolean>;
+    email: z.ZodOptional<z.ZodString>;
+    retryAfterSeconds: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;
 export type ResponsePayload = z.infer<typeof responseSchema>;
 //# sourceMappingURL=index.d.ts.map

package/dist/api/sign-up/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/sign-up/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,eAAO,MAAM,KAAK,yBAAyB,CAAA;AAE3C,eAAO,MAAM,aAAa;;;;iBAQtB,CAAA;AAEJ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAA;AAE1D,eAAO,MAAM,cAAc;;;;;iBAKzB,CAAA;AAEF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/sign-up/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,eAAO,MAAM,KAAK,yBAAyB,CAAA;AAE3C,eAAO,MAAM,aAAa;;;;;;;;;iBAYtB,CAAA;AAEJ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAA;AAE1D,eAAO,MAAM,iBAAiB;;;;;;;;EAQ5B,CAAA;AAEF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAE3D,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;iBAQzB,CAAA;AAEF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA"}

package/dist/api/sign-up/index.js

@@ -0,0 +1,32 @@
+import { a as object, i as number, o as string, r as boolean, t as _enum } from "../../schemas-DABNKHVA.js";
+//#region src/api/sign-up/index.ts
+var ROUTE = "/api/rb/auth/sign-up";
+var requestSchema = object({
+	name: string().trim().min(1).optional(),
+	email: string().trim().toLowerCase().nonempty("Email is required").email("Please enter a valid email address"),
+	password: string().min(8, { message: "Password must be at least 8 characters long." }),
+	rememberMe: boolean().default(true),
+	locale: _enum(["fr", "en"]).default("en")
+});
+var signUpErrorSchema = _enum([
+	"invalid_payload",
+	"user_exists",
+	"rate_limited",
+	"tenant_initialization_in_progress",
+	"tenant_initialization_failed",
+	"email_delivery_failed",
+	"sign_up_failed"
+]);
+var responseSchema = object({
+	success: boolean(),
+	error: signUpErrorSchema.optional(),
+	userId: string().optional(),
+	tenantId: string().optional(),
+	verificationRequired: boolean().optional(),
+	email: string().email().optional(),
+	retryAfterSeconds: number().int().positive().optional()
+});
+//#endregion
+export { ROUTE, requestSchema, responseSchema, signUpErrorSchema };
+
+//# sourceMappingURL=index.js.map

package/dist/api/sign-up/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/api/sign-up/index.ts"],"sourcesContent":["import { z } from \"zod\"\n\n\nexport const ROUTE = \"/api/rb/auth/sign-up\"\n\nexport const requestSchema = z\n  .object({\n    name: z.string().trim().min(1).optional(),\n    email: z\n      .string()\n      .trim()\n      .toLowerCase()\n      .nonempty(\"Email is required\")\n      .email(\"Please enter a valid email address\"),\n    password: z.string().min(8, { message: \"Password must be at least 8 characters long.\" }),\n    rememberMe: z.boolean().default(true),\n    locale: z.enum([\"fr\", \"en\"]).default(\"en\"),\n  })\n\nexport type RequestPayload = z.infer<typeof requestSchema>\n\nexport const signUpErrorSchema = z.enum([\n  \"invalid_payload\",\n  \"user_exists\",\n  \"rate_limited\",\n  \"tenant_initialization_in_progress\",\n  \"tenant_initialization_failed\",\n  \"email_delivery_failed\",\n  \"sign_up_failed\",\n])\n\nexport type SignUpError = z.infer<typeof signUpErrorSchema>\n\nexport const responseSchema = z.object({\n  success: z.boolean(),\n  error: signUpErrorSchema.optional(),\n  userId: z.string().optional(),\n  tenantId: z.string().optional(),\n  verificationRequired: z.boolean().optional(),\n  email: z.string().email().optional(),\n  retryAfterSeconds: z.number().int().positive().optional(),\n})\n\nexport type ResponsePayload = z.infer<typeof responseSchema>\n"],"mappings":";;AAGA,IAAa,QAAQ;AAErB,IAAa,gBAAgB,OACnB;CACN,MAAM,OAAS,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CACxC,OAAO,OACG,CAAC,CACR,KAAK,CAAC,CACN,YAAY,CAAC,CACb,SAAS,mBAAmB,CAAC,CAC7B,MAAM,oCAAoC;CAC7C,UAAU,OAAS,CAAC,CAAC,IAAI,GAAG,EAAE,SAAS,+CAA+C,CAAC;CACvF,YAAY,QAAU,CAAC,CAAC,QAAQ,IAAI;CACpC,QAAQ,MAAO,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI;AAC3C,CAAC;AAIH,IAAa,oBAAoB,MAAO;CACtC;CACA;CACA;CACA;CACA;CACA;CACA;AAAgB,CACjB;AAID,IAAa,iBAAiB,OAAS;CACrC,SAAS,QAAU;CACnB,OAAO,kBAAkB,SAAS;CAClC,QAAQ,OAAS,CAAC,CAAC,SAAS;CAC5B,UAAU,OAAS,CAAC,CAAC,SAAS;CAC9B,sBAAsB,QAAU,CAAC,CAAC,SAAS;CAC3C,OAAO,OAAS,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS;CACnC,mBAAmB,OAAS,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;AAC1D,CAAC"}

package/dist/api/verify-otp/handler.d.ts

@@ -1,5 +1,7 @@
-import { Api } from '@rpcbase/api';
+import { Api, ApiHandler } from '@rpcbase/api';
 import { AuthSessionUser } from '../../types';
+import * as VerifyOtp from "./index";
+export declare const verifyOtp: ApiHandler<VerifyOtp.RequestPayload, VerifyOtp.ResponsePayload, AuthSessionUser>;
 declare const _default: (api: Api<AuthSessionUser>) => void;
 export default _default;
 //# sourceMappingURL=handler.d.ts.map

package/dist/api/verify-otp/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/api/verify-otp/handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAmB,MAAM,cAAc,CAAA;AAInD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;yBA+DlC,KAAK,GAAG,CAAC,eAAe,CAAC;AAAzC,wBAEC"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/api/verify-otp/handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,KAAK,UAAU,EAAY,MAAM,cAAc,CAAA;AAK7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAElD,OAAO,KAAK,SAAS,MAAM,SAAS,CAAA;AAGpC,eAAO,MAAM,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,cAAc,EAAE,SAAS,CAAC,eAAe,EAAE,eAAe,CAyFtG,CAAA;yBAEe,KAAK,GAAG,CAAC,eAAe,CAAC;AAAzC,wBAEC"}

package/dist/api/verify-otp/index.js

@@ -0,0 +1,18 @@
+import { a as object, o as string, r as boolean } from "../../schemas-DABNKHVA.js";
+//#region src/api/verify-otp/index.ts
+var ROUTE = "/api/rb/auth/verify-otp";
+var requestSchema = object({
+	email: string().trim().toLowerCase().email(),
+	code: string().regex(/^\d{6}$/, "Code must be 6 digits"),
+	rememberMe: boolean().default(true)
+});
+var responseSchema = object({
+	success: boolean(),
+	error: string().optional(),
+	userId: string().optional(),
+	tenantId: string().optional()
+});
+//#endregion
+export { ROUTE, requestSchema, responseSchema };
+
+//# sourceMappingURL=index.js.map

package/dist/api/verify-otp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/api/verify-otp/index.ts"],"sourcesContent":["import { z } from \"zod\"\n\n\nexport const ROUTE = \"/api/rb/auth/verify-otp\"\n\nexport const requestSchema = z.object({\n  email: z.string().trim().toLowerCase().email(),\n  code: z.string().regex(/^\\d{6}$/, \"Code must be 6 digits\"),\n  rememberMe: z.boolean().default(true),\n})\n\nexport type RequestPayload = z.infer<typeof requestSchema>\n\nexport const responseSchema = z.object({\n  success: z.boolean(),\n  error: z.string().optional(),\n  userId: z.string().optional(),\n  tenantId: z.string().optional(),\n})\n\nexport type ResponsePayload = z.infer<typeof responseSchema>\n"],"mappings":";;AAGA,IAAa,QAAQ;AAErB,IAAa,gBAAgB,OAAS;CACpC,OAAO,OAAS,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,MAAM;CAC7C,MAAM,OAAS,CAAC,CAAC,MAAM,WAAW,uBAAuB;CACzD,YAAY,QAAU,CAAC,CAAC,QAAQ,IAAI;AACtC,CAAC;AAID,IAAa,iBAAiB,OAAS;CACrC,SAAS,QAAU;CACnB,OAAO,OAAS,CAAC,CAAC,SAAS;CAC3B,QAAQ,OAAS,CAAC,CAAC,SAAS;CAC5B,UAAU,OAAS,CAAC,CAAC,SAAS;AAChC,CAAC"}

package/dist/components/PasswordInput/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/components/PasswordInput/index.tsx"],"names":[],"mappings":"AAMA,KAAK,kBAAkB,GAAG;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,eAAO,MAAM,aAAa,GAAI,qDAM3B,kBAAkB,gCA2CpB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/components/PasswordInput/index.tsx"],"names":[],"mappings":"AAMA,KAAK,kBAAkB,GAAG;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,eAAO,MAAM,aAAa,GAAI,qDAM3B,kBAAkB,gCA4CpB,CAAA"}

package/dist/components/SignInForm/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/components/SignInForm/index.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AAYjC,eAAO,MAAM,UAAU,GAAI,yBAGxB;IACD,QAAQ,EAAE,SAAS,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,gCAwDA,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/components/SignInForm/index.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AAYjC,eAAO,MAAM,UAAU,GAAI,yBAGxB;IACD,QAAQ,EAAE,SAAS,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,gCAgEA,CAAA"}

package/dist/emailVerification-DA9pZ0N_.js

@@ -0,0 +1,65 @@
+import { n as pendingRegistrationCondition } from "./registrationStatus-BP6yReMw.js";
+import { sendEmail } from "@rpcbase/server";
+import crypto from "node:crypto";
+var OTP_RESEND_COOLDOWN_MS = 6e4;
+var createVerificationCode = () => crypto.randomInt(0, 1e6).toString().padStart(6, "0");
+var sendVerificationEmail = async ({ email, code, locale }) => {
+	const french = locale === "fr";
+	const subject = french ? `Votre code de vérification : ${code}` : `Verify your email: ${code}`;
+	const intro = french ? "Bienvenue ! Utilisez ce code pour vérifier votre adresse email." : "Welcome! Use this code to verify your email address.";
+	const expiration = french ? "Il expire dans 10 minutes." : "It expires in 10 minutes.";
+	const ignore = french ? "Si vous n’êtes pas à l’origine de cette demande, vous pouvez ignorer cet email." : "If you did not request this, you can ignore this email.";
+	await sendEmail({
+		to: email,
+		subject,
+		html: `<p>${intro}</p><p><strong>${code}</strong></p><p>${expiration}</p><p>${ignore}</p>`,
+		text: `${intro} ${code}. ${expiration} ${ignore}`
+	});
+};
+var issueVerificationCode = async ({ User, userId, email, locale, passwordHash, enforceCooldown = false }) => {
+	const code = createVerificationCode();
+	const now = /* @__PURE__ */ new Date();
+	const conditions = [pendingRegistrationCondition()];
+	const userFilter = {
+		_id: userId,
+		$and: conditions
+	};
+	if (enforceCooldown) conditions.push({ $or: [{ emailVerificationSentAt: { $exists: false } }, { emailVerificationSentAt: { $lte: /* @__PURE__ */ new Date(now.getTime() - OTP_RESEND_COOLDOWN_MS) } }] });
+	if ((await User.updateOne(userFilter, { $set: {
+		registrationStatus: "pending_verification",
+		emailVerificationCode: code,
+		emailVerificationExpiresAt: new Date(now.getTime() + 6e5),
+		emailVerificationSentAt: now,
+		...passwordHash ? { password: passwordHash } : {}
+	} })).matchedCount !== 1) return false;
+	try {
+		await sendVerificationEmail({
+			email,
+			code,
+			locale
+		});
+	} catch (error) {
+		try {
+			await User.updateOne({
+				_id: userId,
+				...pendingRegistrationCondition(),
+				emailVerificationCode: code
+			}, { $unset: {
+				emailVerificationCode: "",
+				emailVerificationExpiresAt: "",
+				emailVerificationSentAt: ""
+			} });
+		} catch (cleanupError) {
+			console.error("auth::failed_to_release_unsent_verification_code", {
+				userId: String(userId),
+				cleanupError
+			});
+		}
+		throw error;
+	}
+	return true;
+};
+//#endregion
+export { issueVerificationCode as n, OTP_RESEND_COOLDOWN_MS as t };
+
+//# sourceMappingURL=emailVerification-DA9pZ0N_.js.map

package/dist/emailVerification-DA9pZ0N_.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"emailVerification-DA9pZ0N_.js","names":[],"sources":["../src/emailVerification.ts"],"sourcesContent":["import crypto from \"node:crypto\"\n\nimport { models } from \"@rpcbase/db\"\nimport { sendEmail } from \"@rpcbase/server\"\n\nimport { pendingRegistrationCondition } from \"./registrationStatus\"\n\n\nexport const OTP_LIFETIME_MS = 10 * 60 * 1000\nexport const OTP_RESEND_COOLDOWN_MS = 60 * 1000\n\ntype GlobalModel = Awaited<ReturnType<typeof models.getGlobal>>\n\nexport const createVerificationCode = (): string =>\n  crypto.randomInt(0, 1_000_000).toString().padStart(6, \"0\")\n\nexport const sendVerificationEmail = async ({\n  email,\n  code,\n  locale,\n}: {\n  email: string\n  code: string\n  locale: \"fr\" | \"en\"\n}): Promise<void> => {\n  const french = locale === \"fr\"\n  const subject = french\n    ? `Votre code de vérification : ${code}`\n    : `Verify your email: ${code}`\n  const intro = french\n    ? \"Bienvenue ! Utilisez ce code pour vérifier votre adresse email.\"\n    : \"Welcome! Use this code to verify your email address.\"\n  const expiration = french\n    ? \"Il expire dans 10 minutes.\"\n    : \"It expires in 10 minutes.\"\n  const ignore = french\n    ? \"Si vous n’êtes pas à l’origine de cette demande, vous pouvez ignorer cet email.\"\n    : \"If you did not request this, you can ignore this email.\"\n\n  await sendEmail({\n    to: email,\n    subject,\n    html: `<p>${intro}</p><p><strong>${code}</strong></p><p>${expiration}</p><p>${ignore}</p>`,\n    text: `${intro} ${code}. ${expiration} ${ignore}`,\n  })\n}\n\nexport const issueVerificationCode = async ({\n  User,\n  userId,\n  email,\n  locale,\n  passwordHash,\n  enforceCooldown = false,\n}: {\n  User: GlobalModel\n  userId: unknown\n  email: string\n  locale: \"fr\" | \"en\"\n  passwordHash?: string\n  enforceCooldown?: boolean\n}): Promise<boolean> => {\n  const code = createVerificationCode()\n  const now = new Date()\n  const conditions: Record<string, unknown>[] = [pendingRegistrationCondition()]\n  const userFilter: Record<string, unknown> = {\n    _id: userId,\n    $and: conditions,\n  }\n\n  if (enforceCooldown) {\n    conditions.push({\n      $or: [\n        { emailVerificationSentAt: { $exists: false } },\n        { emailVerificationSentAt: { $lte: new Date(now.getTime() - OTP_RESEND_COOLDOWN_MS) } },\n      ],\n    })\n  }\n\n  const update = await User.updateOne(\n    userFilter,\n    {\n      $set: {\n        registrationStatus: \"pending_verification\",\n        emailVerificationCode: code,\n        emailVerificationExpiresAt: new Date(now.getTime() + OTP_LIFETIME_MS),\n        emailVerificationSentAt: now,\n        ...(passwordHash ? { password: passwordHash } : {}),\n      },\n    },\n  )\n\n  if (update.matchedCount !== 1) return false\n\n  try {\n    await sendVerificationEmail({ email, code, locale })\n  } catch (error) {\n    try {\n      await User.updateOne(\n        {\n          _id: userId,\n          ...pendingRegistrationCondition(),\n          emailVerificationCode: code,\n        },\n        {\n          $unset: {\n            emailVerificationCode: \"\",\n            emailVerificationExpiresAt: \"\",\n            emailVerificationSentAt: \"\",\n          },\n        },\n      )\n    } catch (cleanupError) {\n      console.error(\"auth::failed_to_release_unsent_verification_code\", {\n        userId: String(userId),\n        cleanupError,\n      })\n    }\n\n    throw error\n  }\n\n  return true\n}\n"],"mappings":";;;AASA,IAAa,yBAAyB;AAItC,IAAa,+BACX,OAAO,UAAU,GAAG,GAAS,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,GAAG,GAAG;AAE3D,IAAa,wBAAwB,OAAO,EAC1C,OACA,MACA,aAKmB;CACnB,MAAM,SAAS,WAAW;CAC1B,MAAM,UAAU,SACZ,gCAAgC,SAChC,sBAAsB;CAC1B,MAAM,QAAQ,SACV,oEACA;CACJ,MAAM,aAAa,SACf,+BACA;CACJ,MAAM,SAAS,SACX,oFACA;CAEJ,MAAM,UAAU;EACd,IAAI;EACJ;EACA,MAAM,MAAM,MAAK,iBAAkB,KAAI,kBAAmB,WAAU,SAAU,OAAM;EACpF,MAAM,GAAG,MAAK,GAAI,KAAI,IAAK,WAAU,GAAI;CAC3C,CAAC;AACH;AAEA,IAAa,wBAAwB,OAAO,EAC1C,MACA,QACA,OACA,QACA,cACA,kBAAkB,YAQI;CACtB,MAAM,OAAO,uBAAuB;CACpC,MAAM,sBAAM,IAAI,KAAK;CACrB,MAAM,aAAwC,CAAC,6BAA6B,CAAC;CAC7E,MAAM,aAAsC;EAC1C,KAAK;EACL,MAAM;CACR;CAEA,IAAI,iBACF,WAAW,KAAK,EACd,KAAK,CACH,EAAE,yBAAyB,EAAE,SAAS,MAAM,EAAE,GAC9C,EAAE,yBAAyB,EAAE,sBAAM,IAAI,KAAK,IAAI,QAAQ,IAAI,sBAAsB,EAAE,EAAE,CAAC,EAE3F,CAAC;CAgBH,KAAI,MAbiB,KAAK,UACxB,YACA,EACE,MAAM;EACJ,oBAAoB;EACpB,uBAAuB;EACvB,4BAA4B,IAAI,KAAK,IAAI,QAAQ,IAAA,GAAmB;EACpE,yBAAyB;EACzB,GAAI,eAAe,EAAE,UAAU,aAAa,IAAI,CAAC;CACnD,EACF,CACF,EAAA,CAEW,iBAAiB,GAAG,OAAO;CAEtC,IAAI;EACF,MAAM,sBAAsB;GAAE;GAAO;GAAM;EAAO,CAAC;CACrD,SAAS,OAAO;EACd,IAAI;GACF,MAAM,KAAK,UACT;IACE,KAAK;IACL,GAAG,6BAA6B;IAChC,uBAAuB;GACzB,GACA,EACE,QAAQ;IACN,uBAAuB;IACvB,4BAA4B;IAC5B,yBAAyB;GAC3B,EACF,CACF;EACF,SAAS,cAAc;GACrB,QAAQ,MAAM,oDAAoD;IAChE,QAAQ,OAAO,MAAM;IACrB;GACF,CAAC;EACH;EAEA,MAAM;CACR;CAEA,OAAO;AACT"}

package/dist/emailVerification.d.ts

@@ -0,0 +1,20 @@
+import { models } from '@rpcbase/db';
+export declare const OTP_LIFETIME_MS: number;
+export declare const OTP_RESEND_COOLDOWN_MS: number;
+type GlobalModel = Awaited<ReturnType<typeof models.getGlobal>>;
+export declare const createVerificationCode: () => string;
+export declare const sendVerificationEmail: ({ email, code, locale, }: {
+    email: string;
+    code: string;
+    locale: "fr" | "en";
+}) => Promise<void>;
+export declare const issueVerificationCode: ({ User, userId, email, locale, passwordHash, enforceCooldown, }: {
+    User: GlobalModel;
+    userId: unknown;
+    email: string;
+    locale: "fr" | "en";
+    passwordHash?: string;
+    enforceCooldown?: boolean;
+}) => Promise<boolean>;
+export {};
+//# sourceMappingURL=emailVerification.d.ts.map

package/dist/emailVerification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"emailVerification.d.ts","sourceRoot":"","sources":["../src/emailVerification.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAMpC,eAAO,MAAM,eAAe,QAAiB,CAAA;AAC7C,eAAO,MAAM,sBAAsB,QAAY,CAAA;AAE/C,KAAK,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAA;AAE/D,eAAO,MAAM,sBAAsB,QAAO,MACkB,CAAA;AAE5D,eAAO,MAAM,qBAAqB,GAAU,0BAIzC;IACD,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,IAAI,GAAG,IAAI,CAAA;CACpB,KAAG,OAAO,CAAC,IAAI,CAqBf,CAAA;AAED,eAAO,MAAM,qBAAqB,GAAU,iEAOzC;IACD,IAAI,EAAE,WAAW,CAAA;IACjB,MAAM,EAAE,OAAO,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,IAAI,GAAG,IAAI,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B,KAAG,OAAO,CAAC,OAAO,CA8DlB,CAAA"}

package/dist/handler-0uaKeuYp.js

@@ -0,0 +1,213 @@
+import { ROUTE, requestSchema } from "./api/sign-up/index.js";
+import { t as email_validation_exports } from "./email-validation/index.js";
+import { n as pendingRegistrationCondition, t as isPendingRegistration } from "./registrationStatus-BP6yReMw.js";
+import { n as issueVerificationCode, t as OTP_RESEND_COOLDOWN_MS } from "./emailVerification-DA9pZ0N_.js";
+import { createProvisionedTenant, models } from "@rpcbase/db";
+import { hashPasswordForStorage } from "@rpcbase/server";
+import crypto from "node:crypto";
+//#region src/api/sign-up/handler.ts
+var firstTenantId = (user) => {
+	if (!Array.isArray(user.tenants)) return "";
+	const first = user.tenants[0];
+	return typeof first === "string" ? first.trim() : String(first ?? "").trim();
+};
+var handlePendingUser = async ({ user, User, Tenant, email, locale, password }) => {
+	const tenantId = firstTenantId(user);
+	const tenant = tenantId ? await Tenant.findOne({ tenantId }, { provisioningStatus: 1 }).lean() : null;
+	if (tenant?.provisioningStatus === "initializing") return {
+		success: false,
+		error: "tenant_initialization_in_progress",
+		retryAfterSeconds: 3
+	};
+	if (tenant?.provisioningStatus === "active") {
+		const sentAt = user.emailVerificationSentAt;
+		if (sentAt instanceof Date) {
+			const remainingMs = OTP_RESEND_COOLDOWN_MS - (Date.now() - sentAt.getTime());
+			if (remainingMs > 0) return {
+				success: false,
+				error: "rate_limited",
+				retryAfterSeconds: Math.max(1, Math.ceil(remainingMs / 1e3))
+			};
+		}
+		try {
+			const passwordHash = await hashPasswordForStorage(password);
+			if (!await issueVerificationCode({
+				User,
+				userId: user._id,
+				email,
+				locale,
+				passwordHash,
+				enforceCooldown: true
+			})) return {
+				success: false,
+				error: "rate_limited",
+				retryAfterSeconds: OTP_RESEND_COOLDOWN_MS / 1e3
+			};
+			return {
+				success: true,
+				verificationRequired: true,
+				email
+			};
+		} catch (error) {
+			console.error("auth::failed_to_resend_signup_verification_email", error);
+			return {
+				success: false,
+				error: "email_delivery_failed"
+			};
+		}
+	}
+	await User.deleteOne({
+		_id: user._id,
+		...pendingRegistrationCondition()
+	});
+	return null;
+};
+var signUp = async (payload, ctx) => {
+	const parsed = requestSchema.safeParse(payload);
+	if (!parsed.success) {
+		ctx.res.status(400);
+		return {
+			success: false,
+			error: "invalid_payload"
+		};
+	}
+	const { name, email, password, locale } = parsed.data;
+	if (!await (0, email_validation_exports.isEmailAddressValid)(email)) return { success: true };
+	const [User, Tenant] = await Promise.all([models.getGlobal("RBUser", ctx), models.getGlobal("RBTenant", ctx)]);
+	const existingUser = await User.findOne({ email }, {
+		tenants: 1,
+		registrationStatus: 1,
+		emailVerificationCode: 1,
+		emailVerificationSentAt: 1
+	}).lean();
+	if (existingUser) {
+		if (isPendingRegistration(existingUser)) {
+			const pendingResponse = await handlePendingUser({
+				user: existingUser,
+				User,
+				Tenant,
+				email,
+				locale,
+				password
+			});
+			if (pendingResponse) {
+				if (!pendingResponse.success) {
+					if (pendingResponse.error === "rate_limited") {
+						if (pendingResponse.retryAfterSeconds) ctx.res.setHeader("Retry-After", String(pendingResponse.retryAfterSeconds));
+						ctx.res.status(429);
+					} else if (pendingResponse.error === "email_delivery_failed") ctx.res.status(500);
+					else ctx.res.status(503);
+				}
+				return pendingResponse;
+			}
+		} else {
+			ctx.res.status(409);
+			return {
+				success: false,
+				error: "user_exists"
+			};
+		}
+	}
+	const tenantId = crypto.randomUUID();
+	const hashedPassword = await hashPasswordForStorage(password);
+	const user = new User({
+		name,
+		email,
+		password: hashedPassword,
+		tenants: [tenantId],
+		tenantRoles: { [tenantId]: ["owner"] },
+		registrationStatus: "pending_verification"
+	});
+	try {
+		await user.save();
+	} catch (error) {
+		const duplicate = Boolean(error && typeof error === "object" && "code" in error && error.code === 11e3);
+		ctx.res.status(duplicate ? 409 : 500);
+		return {
+			success: false,
+			error: duplicate ? "user_exists" : "sign_up_failed"
+		};
+	}
+	try {
+		await createProvisionedTenant(Tenant, {
+			tenantId,
+			name: name ?? email
+		});
+	} catch (error) {
+		console.error("auth::failed_to_initialize_signup_tenant", {
+			tenantId,
+			error
+		});
+		try {
+			await User.deleteOne({
+				_id: user._id,
+				...pendingRegistrationCondition()
+			});
+		} catch (rollbackError) {
+			console.error("auth::failed_to_rollback_signup_user", {
+				tenantId,
+				userId: user._id.toString(),
+				rollbackError
+			});
+		}
+		ctx.res.status(500);
+		return {
+			success: false,
+			error: "tenant_initialization_failed"
+		};
+	}
+	try {
+		if (!await issueVerificationCode({
+			User,
+			userId: user._id,
+			email,
+			locale,
+			passwordHash: hashedPassword
+		})) {
+			ctx.res.status(409);
+			return {
+				success: false,
+				error: "user_exists"
+			};
+		}
+	} catch (error) {
+		console.error("auth::failed_to_send_signup_verification_email", {
+			tenantId,
+			userId: user._id.toString(),
+			error
+		});
+		try {
+			if ((await User.deleteOne({
+				_id: user._id,
+				...pendingRegistrationCondition(),
+				emailVerificationCode: { $exists: false }
+			})).deletedCount === 1) await Tenant.deleteOne({
+				tenantId,
+				provisioningStatus: "active"
+			});
+		} catch (rollbackError) {
+			console.error("auth::failed_to_rollback_undeliverable_signup", {
+				tenantId,
+				userId: user._id.toString(),
+				rollbackError
+			});
+		}
+		ctx.res.status(500);
+		return {
+			success: false,
+			error: "email_delivery_failed"
+		};
+	}
+	return {
+		success: true,
+		verificationRequired: true,
+		email
+	};
+};
+var handler_default = (api) => {
+	api.post(ROUTE, signUp);
+};
+//#endregion
+export { handler_default as default, signUp };
+
+//# sourceMappingURL=handler-0uaKeuYp.js.map

package/dist/handler-0uaKeuYp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler-0uaKeuYp.js","names":[],"sources":["../src/api/sign-up/handler.ts"],"sourcesContent":["import crypto from \"node:crypto\"\n\nimport { Api, type ApiHandler, type Ctx } from \"@rpcbase/api\"\nimport { createProvisionedTenant, models } from \"@rpcbase/db\"\nimport { hashPasswordForStorage } from \"@rpcbase/server\"\n\nimport {\n  issueVerificationCode,\n  OTP_RESEND_COOLDOWN_MS,\n} from \"../../emailVerification\"\nimport { isEmailAddressValid } from \"../../email-validation\"\nimport {\n  isPendingRegistration,\n  pendingRegistrationCondition,\n} from \"../../registrationStatus\"\nimport type { AuthSessionUser } from \"../../types\"\n\nimport * as SignUp from \"./index\"\n\n\ntype PendingUser = {\n  _id: { toString(): string }\n  tenants?: unknown\n  registrationStatus?: unknown\n  emailVerificationCode?: unknown\n  emailVerificationSentAt?: unknown\n}\n\ntype TenantState = {\n  provisioningStatus?: unknown\n}\n\ntype GlobalModel = Awaited<ReturnType<typeof models.getGlobal>>\n\nconst firstTenantId = (user: PendingUser): string => {\n  if (!Array.isArray(user.tenants)) return \"\"\n  const first = user.tenants[0]\n  return typeof first === \"string\" ? first.trim() : String(first ?? \"\").trim()\n}\n\nconst handlePendingUser = async ({\n  user,\n  User,\n  Tenant,\n  email,\n  locale,\n  password,\n}: {\n  user: PendingUser\n  User: GlobalModel\n  Tenant: GlobalModel\n  email: string\n  locale: \"fr\" | \"en\"\n  password: string\n}): Promise<SignUp.ResponsePayload | null> => {\n  const tenantId = firstTenantId(user)\n  const tenant = tenantId\n    ? await Tenant.findOne({ tenantId }, { provisioningStatus: 1 }).lean() as TenantState | null\n    : null\n\n  if (tenant?.provisioningStatus === \"initializing\") {\n    return {\n      success: false,\n      error: \"tenant_initialization_in_progress\",\n      retryAfterSeconds: 3,\n    }\n  }\n\n  if (tenant?.provisioningStatus === \"active\") {\n    const sentAt = user.emailVerificationSentAt\n    if (sentAt instanceof Date) {\n      const remainingMs = OTP_RESEND_COOLDOWN_MS - (Date.now() - sentAt.getTime())\n      if (remainingMs > 0) {\n        return {\n          success: false,\n          error: \"rate_limited\",\n          retryAfterSeconds: Math.max(1, Math.ceil(remainingMs / 1000)),\n        }\n      }\n    }\n\n    try {\n      const passwordHash = await hashPasswordForStorage(password)\n      const issued = await issueVerificationCode({\n        User,\n        userId: user._id,\n        email,\n        locale,\n        passwordHash,\n        enforceCooldown: true,\n      })\n\n      if (!issued) {\n        return {\n          success: false,\n          error: \"rate_limited\",\n          retryAfterSeconds: OTP_RESEND_COOLDOWN_MS / 1000,\n        }\n      }\n\n      return { success: true, verificationRequired: true, email }\n    } catch (error) {\n      console.error(\"auth::failed_to_resend_signup_verification_email\", error)\n      return { success: false, error: \"email_delivery_failed\" }\n    }\n  }\n\n  await User.deleteOne({\n    _id: user._id,\n    ...pendingRegistrationCondition(),\n  })\n  return null\n}\n\nexport const signUp: ApiHandler<SignUp.RequestPayload, SignUp.ResponsePayload, AuthSessionUser> = async (\n  payload,\n  ctx: Ctx<AuthSessionUser>,\n): Promise<SignUp.ResponsePayload> => {\n  const parsed = SignUp.requestSchema.safeParse(payload)\n\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { success: false, error: \"invalid_payload\" }\n  }\n\n  const { name, email, password, locale } = parsed.data\n  if (!await isEmailAddressValid(email)) {\n    return { success: true }\n  }\n\n  const [User, Tenant] = await Promise.all([\n    models.getGlobal(\"RBUser\", ctx),\n    models.getGlobal(\"RBTenant\", ctx),\n  ])\n\n  const existingUser = await User.findOne(\n    { email },\n    {\n      tenants: 1,\n      registrationStatus: 1,\n      emailVerificationCode: 1,\n      emailVerificationSentAt: 1,\n    },\n  ).lean() as PendingUser | null\n\n  if (existingUser) {\n    if (isPendingRegistration(existingUser)) {\n      const pendingResponse = await handlePendingUser({\n        user: existingUser,\n        User,\n        Tenant,\n        email,\n        locale,\n        password,\n      })\n\n      if (pendingResponse) {\n        if (!pendingResponse.success) {\n          if (pendingResponse.error === \"rate_limited\") {\n            if (pendingResponse.retryAfterSeconds) {\n              ctx.res.setHeader(\"Retry-After\", String(pendingResponse.retryAfterSeconds))\n            }\n            ctx.res.status(429)\n          } else if (pendingResponse.error === \"email_delivery_failed\") {\n            ctx.res.status(500)\n          } else {\n            ctx.res.status(503)\n          }\n        }\n        return pendingResponse\n      }\n    } else {\n      ctx.res.status(409)\n      return { success: false, error: \"user_exists\" }\n    }\n  }\n\n  const tenantId = crypto.randomUUID()\n  const hashedPassword = await hashPasswordForStorage(password)\n  const user = new User({\n    name,\n    email,\n    password: hashedPassword,\n    tenants: [tenantId],\n    tenantRoles: { [tenantId]: [\"owner\"] },\n    registrationStatus: \"pending_verification\",\n  })\n\n  try {\n    await user.save()\n  } catch (error) {\n    const duplicate = Boolean(\n      error\n      && typeof error === \"object\"\n      && \"code\" in error\n      && (error as { code?: unknown }).code === 11000,\n    )\n    ctx.res.status(duplicate ? 409 : 500)\n    return {\n      success: false,\n      error: duplicate ? \"user_exists\" : \"sign_up_failed\",\n    }\n  }\n\n  try {\n    await createProvisionedTenant(Tenant, { tenantId, name: name ?? email })\n  } catch (error) {\n    console.error(\"auth::failed_to_initialize_signup_tenant\", { tenantId, error })\n    try {\n      await User.deleteOne({ _id: user._id, ...pendingRegistrationCondition() })\n    } catch (rollbackError) {\n      console.error(\"auth::failed_to_rollback_signup_user\", {\n        tenantId,\n        userId: user._id.toString(),\n        rollbackError,\n      })\n    }\n    ctx.res.status(500)\n    return { success: false, error: \"tenant_initialization_failed\" }\n  }\n\n  try {\n    const issued = await issueVerificationCode({\n      User,\n      userId: user._id,\n      email,\n      locale,\n      passwordHash: hashedPassword,\n    })\n    if (!issued) {\n      ctx.res.status(409)\n      return { success: false, error: \"user_exists\" }\n    }\n  } catch (error) {\n    console.error(\"auth::failed_to_send_signup_verification_email\", {\n      tenantId,\n      userId: user._id.toString(),\n      error,\n    })\n    try {\n      const deletion = await User.deleteOne({\n        _id: user._id,\n        ...pendingRegistrationCondition(),\n        emailVerificationCode: { $exists: false },\n      })\n      if (deletion.deletedCount === 1) {\n        await Tenant.deleteOne({ tenantId, provisioningStatus: \"active\" })\n      }\n    } catch (rollbackError) {\n      console.error(\"auth::failed_to_rollback_undeliverable_signup\", {\n        tenantId,\n        userId: user._id.toString(),\n        rollbackError,\n      })\n    }\n    ctx.res.status(500)\n    return { success: false, error: \"email_delivery_failed\" }\n  }\n\n  return { success: true, verificationRequired: true, email }\n}\n\nexport default (api: Api<AuthSessionUser>) => {\n  api.post(SignUp.ROUTE, signUp)\n}\n"],"mappings":";;;;;;;;AAkCA,IAAM,iBAAiB,SAA8B;CACnD,IAAI,CAAC,MAAM,QAAQ,KAAK,OAAO,GAAG,OAAO;CACzC,MAAM,QAAQ,KAAK,QAAQ;CAC3B,OAAO,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI,OAAO,SAAS,EAAE,CAAC,CAAC,KAAK;AAC7E;AAEA,IAAM,oBAAoB,OAAO,EAC/B,MACA,MACA,QACA,OACA,QACA,eAQ4C;CAC5C,MAAM,WAAW,cAAc,IAAI;CACnC,MAAM,SAAS,WACX,MAAM,OAAO,QAAQ,EAAE,SAAS,GAAG,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,KAAK,IACnE;CAEJ,IAAI,QAAQ,uBAAuB,gBACjC,OAAO;EACL,SAAS;EACT,OAAO;EACP,mBAAmB;CACrB;CAGF,IAAI,QAAQ,uBAAuB,UAAU;EAC3C,MAAM,SAAS,KAAK;EACpB,IAAI,kBAAkB,MAAM;GAC1B,MAAM,cAAc,0BAA0B,KAAK,IAAI,IAAI,OAAO,QAAQ;GAC1E,IAAI,cAAc,GAChB,OAAO;IACL,SAAS;IACT,OAAO;IACP,mBAAmB,KAAK,IAAI,GAAG,KAAK,KAAK,cAAc,GAAI,CAAC;GAC9D;EAEJ;EAEA,IAAI;GACF,MAAM,eAAe,MAAM,uBAAuB,QAAQ;GAU1D,IAAI,CAAC,MATgB,sBAAsB;IACzC;IACA,QAAQ,KAAK;IACb;IACA;IACA;IACA,iBAAiB;GACnB,CAAC,GAGC,OAAO;IACL,SAAS;IACT,OAAO;IACP,mBAAmB,yBAAyB;GAC9C;GAGF,OAAO;IAAE,SAAS;IAAM,sBAAsB;IAAM;GAAM;EAC5D,SAAS,OAAO;GACd,QAAQ,MAAM,oDAAoD,KAAK;GACvE,OAAO;IAAE,SAAS;IAAO,OAAO;GAAwB;EAC1D;CACF;CAEA,MAAM,KAAK,UAAU;EACnB,KAAK,KAAK;EACV,GAAG,6BAA6B;CAClC,CAAC;CACD,OAAO;AACT;AAEA,IAAa,SAAqF,OAChG,SACA,QACoC;CACpC,MAAM,SAAA,cAA8B,UAAU,OAAO;CAErD,IAAI,CAAC,OAAO,SAAS;EACnB,IAAI,IAAI,OAAO,GAAG;EAClB,OAAO;GAAE,SAAS;GAAO,OAAO;EAAkB;CACpD;CAEA,MAAM,EAAE,MAAM,OAAO,UAAU,WAAW,OAAO;CACjD,IAAI,CAAC,OAAA,GAAM,yBAAA,oBAAA,CAAoB,KAAK,GAClC,OAAO,EAAE,SAAS,KAAK;CAGzB,MAAM,CAAC,MAAM,UAAU,MAAM,QAAQ,IAAI,CACvC,OAAO,UAAU,UAAU,GAAG,GAC9B,OAAO,UAAU,YAAY,GAAG,CAAC,CAClC;CAED,MAAM,eAAe,MAAM,KAAK,QAC9B,EAAE,MAAM,GACR;EACE,SAAS;EACT,oBAAoB;EACpB,uBAAuB;EACvB,yBAAyB;CAC3B,CACF,CAAC,CAAC,KAAK;CAEP,IAAI,cAAc;EAChB,IAAI,sBAAsB,YAAY,GAAG;GACvC,MAAM,kBAAkB,MAAM,kBAAkB;IAC9C,MAAM;IACN;IACA;IACA;IACA;IACA;GACF,CAAC;GAED,IAAI,iBAAiB;IACnB,IAAI,CAAC,gBAAgB,SAAS;KAC5B,IAAI,gBAAgB,UAAU,gBAAgB;MAC5C,IAAI,gBAAgB,mBAClB,IAAI,IAAI,UAAU,eAAe,OAAO,gBAAgB,iBAAiB,CAAC;MAE5E,IAAI,IAAI,OAAO,GAAG;KACpB,OAAO,IAAI,gBAAgB,UAAU,yBACnC,IAAI,IAAI,OAAO,GAAG;UAElB,IAAI,IAAI,OAAO,GAAG;IAEtB;IACA,OAAO;GACT;EACF,OAAO;GACL,IAAI,IAAI,OAAO,GAAG;GAClB,OAAO;IAAE,SAAS;IAAO,OAAO;GAAc;EAChD;CACF;CAEA,MAAM,WAAW,OAAO,WAAW;CACnC,MAAM,iBAAiB,MAAM,uBAAuB,QAAQ;CAC5D,MAAM,OAAO,IAAI,KAAK;EACpB;EACA;EACA,UAAU;EACV,SAAS,CAAC,QAAQ;EAClB,aAAa,GAAG,WAAW,CAAC,OAAO,EAAE;EACrC,oBAAoB;CACtB,CAAC;CAED,IAAI;EACF,MAAM,KAAK,KAAK;CAClB,SAAS,OAAO;EACd,MAAM,YAAY,QAChB,SACG,OAAO,UAAU,YACjB,UAAU,SACT,MAA6B,SAAS,IAC5C;EACA,IAAI,IAAI,OAAO,YAAY,MAAM,GAAG;EACpC,OAAO;GACL,SAAS;GACT,OAAO,YAAY,gBAAgB;EACrC;CACF;CAEA,IAAI;EACF,MAAM,wBAAwB,QAAQ;GAAE;GAAU,MAAM,QAAQ;EAAM,CAAC;CACzE,SAAS,OAAO;EACd,QAAQ,MAAM,4CAA4C;GAAE;GAAU;EAAM,CAAC;EAC7E,IAAI;GACF,MAAM,KAAK,UAAU;IAAE,KAAK,KAAK;IAAK,GAAG,6BAA6B;GAAE,CAAC;EAC3E,SAAS,eAAe;GACtB,QAAQ,MAAM,wCAAwC;IACpD;IACA,QAAQ,KAAK,IAAI,SAAS;IAC1B;GACF,CAAC;EACH;EACA,IAAI,IAAI,OAAO,GAAG;EAClB,OAAO;GAAE,SAAS;GAAO,OAAO;EAA+B;CACjE;CAEA,IAAI;EAQF,IAAI,CAAC,MAPgB,sBAAsB;GACzC;GACA,QAAQ,KAAK;GACb;GACA;GACA,cAAc;EAChB,CAAC,GACY;GACX,IAAI,IAAI,OAAO,GAAG;GAClB,OAAO;IAAE,SAAS;IAAO,OAAO;GAAc;EAChD;CACF,SAAS,OAAO;EACd,QAAQ,MAAM,kDAAkD;GAC9D;GACA,QAAQ,KAAK,IAAI,SAAS;GAC1B;EACF,CAAC;EACD,IAAI;GAMF,KAAI,MALmB,KAAK,UAAU;IACpC,KAAK,KAAK;IACV,GAAG,6BAA6B;IAChC,uBAAuB,EAAE,SAAS,MAAM;GAC1C,CAAC,EAAA,CACY,iBAAiB,GAC5B,MAAM,OAAO,UAAU;IAAE;IAAU,oBAAoB;GAAS,CAAC;EAErE,SAAS,eAAe;GACtB,QAAQ,MAAM,iDAAiD;IAC7D;IACA,QAAQ,KAAK,IAAI,SAAS;IAC1B;GACF,CAAC;EACH;EACA,IAAI,IAAI,OAAO,GAAG;EAClB,OAAO;GAAE,SAAS;GAAO,OAAO;EAAwB;CAC1D;CAEA,OAAO;EAAE,SAAS;EAAM,sBAAsB;EAAM;CAAM;AAC5D;AAEA,IAAA,mBAAgB,QAA8B;CAC5C,IAAI,KAAK,OAAc,MAAM;AAC/B"}

package/dist/{handler-BgjYCWF4.js → handler-B6roBozS.js}

@@ -1,4 +1,4 @@
-import { a as string, i as object, t as array } from "./schemas-CMgO_xn9.js";
+import { a as object, n as array, o as string } from "./schemas-DABNKHVA.js";
 import { r as restrictSessionMiddleware } from "./middleware-BT3Uput1.js";
 import { models } from "@rpcbase/db";
 //#region src/api/me/index.ts
@@ -67,4 +67,4 @@ var handler_default = (api) => {
 //#endregion
 export { handler_default as default };
 
-//# sourceMappingURL=handler-BgjYCWF4.js.map
+//# sourceMappingURL=handler-B6roBozS.js.map

package/dist/{handler-BgjYCWF4.js.map → handler-B6roBozS.js.map}

@@ -1 +1 @@
-{"version":3,"file":"handler-BgjYCWF4.js","names":[],"sources":["../src/api/me/index.ts","../src/api/me/handler.ts"],"sourcesContent":["import { z } from \"zod\"\n\n\nexport const ROUTE = \"/api/rb/auth/me\"\n\nexport const requestSchema = z.object({})\nexport type RequestPayload = z.infer<typeof requestSchema>\n\nexport const responseSchema = z.object({\n  id: z.string().optional(),\n  email: z.string().email().optional(),\n  phone: z.string().optional(),\n  name: z.string().optional(),\n  tenants: z.array(z.string()).default([]),\n  currentTenantId: z.string().optional(),\n  signedInTenants: z.array(z.string()).default([]).optional(),\n  error: z.string().optional(),\n})\n\nexport type ResponsePayload = z.infer<typeof responseSchema>\n","import { Api, ApiHandler, Ctx } from \"@rpcbase/api\"\nimport { models } from \"@rpcbase/db\"\n\nimport type { AuthSessionUser } from \"../../types\"\nimport { restrictSessionMiddleware } from \"../../middleware\"\n\nimport * as Me from \"./index\"\n\n\nconst me: ApiHandler<Me.RequestPayload, Me.ResponsePayload, AuthSessionUser> = async(\n  _payload: Me.RequestPayload,\n  ctx: Ctx<AuthSessionUser>\n): Promise<Me.ResponsePayload> => {\n  const sessionUser = ctx.req.session?.user\n\n  if (!sessionUser?.id) {\n    ctx.res.status(401)\n    return {\n      id: \"\",\n      currentTenantId: \"\",\n      signedInTenants: [],\n      tenants: [],\n      error: \"not_authenticated\",\n    } as unknown as Me.ResponsePayload\n  }\n\n  const User = await models.getGlobal(\"RBUser\", ctx)\n  const user = await User.findById(sessionUser.id)\n\n  if (!user) {\n    ctx.res.status(404)\n    return {\n      id: \"\",\n      currentTenantId: \"\",\n      signedInTenants: [],\n      tenants: [],\n      error: \"user_not_found\",\n    } as unknown as Me.ResponsePayload\n  }\n\n  const tenantId = typeof sessionUser.currentTenantId === \"string\" ? sessionUser.currentTenantId.trim() : \"\"\n  if (!tenantId) {\n    ctx.res.status(500)\n    return {\n      id: \"\",\n      currentTenantId: \"\",\n      signedInTenants: [],\n      tenants: [],\n      error: \"tenant_missing\",\n    } as unknown as Me.ResponsePayload\n  }\n\n  return {\n    id: user._id.toString(),\n    email: user.email,\n    phone: user.get(\"phone\") as string | undefined,\n    name: user.name,\n    tenants: (user.tenants || []).map(String),\n    currentTenantId: tenantId,\n    signedInTenants: sessionUser.signedInTenants || [],\n  }\n}\n\nexport default (api: Api<AuthSessionUser>) => {\n  api.use(Me.ROUTE, restrictSessionMiddleware)\n  api.get(Me.ROUTE, me)\n}\n"],"mappings":";;;;AAGA,IAAa,QAAQ;AAEQ,OAAS,CAAC,CAAC;AAGV,OAAS;CACrC,IAAI,OAAS,CAAC,CAAC,SAAS;CACxB,OAAO,OAAS,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS;CACnC,OAAO,OAAS,CAAC,CAAC,SAAS;CAC3B,MAAM,OAAS,CAAC,CAAC,SAAS;CAC1B,SAAS,MAAQ,OAAS,CAAC,CAAC,CAAC,QAAQ,CAAA,CAAE;CACvC,iBAAiB,OAAS,CAAC,CAAC,SAAS;CACrC,iBAAiB,MAAQ,OAAS,CAAC,CAAC,CAAC,QAAQ,CAAA,CAAE,CAAC,CAAC,SAAS;CAC1D,OAAO,OAAS,CAAC,CAAC,SAAS;AAC7B,CAAC;;;ACRD,IAAM,KAAyE,OAC7E,UACA,QACgC;CAChC,MAAM,cAAc,IAAI,IAAI,SAAS;CAErC,IAAI,CAAC,aAAa,IAAI;EACpB,IAAI,IAAI,OAAO,GAAG;EAClB,OAAO;GACL,IAAI;GACJ,iBAAiB;GACjB,iBAAiB,CAAA;GACjB,SAAS,CAAA;GACT,OAAO;EACT;CACF;CAGA,MAAM,OAAO,OAAM,MADA,OAAO,UAAU,UAAU,GAAG,EAAA,CACzB,SAAS,YAAY,EAAE;CAE/C,IAAI,CAAC,MAAM;EACT,IAAI,IAAI,OAAO,GAAG;EAClB,OAAO;GACL,IAAI;GACJ,iBAAiB;GACjB,iBAAiB,CAAA;GACjB,SAAS,CAAA;GACT,OAAO;EACT;CACF;CAEA,MAAM,WAAW,OAAO,YAAY,oBAAoB,WAAW,YAAY,gBAAgB,KAAK,IAAI;CACxG,IAAI,CAAC,UAAU;EACb,IAAI,IAAI,OAAO,GAAG;EAClB,OAAO;GACL,IAAI;GACJ,iBAAiB;GACjB,iBAAiB,CAAA;GACjB,SAAS,CAAA;GACT,OAAO;EACT;CACF;CAEA,OAAO;EACL,IAAI,KAAK,IAAI,SAAS;EACtB,OAAO,KAAK;EACZ,OAAO,KAAK,IAAI,OAAO;EACvB,MAAM,KAAK;EACX,UAAU,KAAK,WAAW,CAAA,EAAA,CAAI,IAAI,MAAM;EACxC,iBAAiB;EACjB,iBAAiB,YAAY,mBAAmB,CAAA;CAClD;AACF;AAEA,IAAA,mBAAgB,QAA8B;CAC5C,IAAI,IAAI,OAAU,yBAAyB;CAC3C,IAAI,IAAI,OAAU,EAAE;AACtB"}
+{"version":3,"file":"handler-B6roBozS.js","names":[],"sources":["../src/api/me/index.ts","../src/api/me/handler.ts"],"sourcesContent":["import { z } from \"zod\"\n\n\nexport const ROUTE = \"/api/rb/auth/me\"\n\nexport const requestSchema = z.object({})\nexport type RequestPayload = z.infer<typeof requestSchema>\n\nexport const responseSchema = z.object({\n  id: z.string().optional(),\n  email: z.string().email().optional(),\n  phone: z.string().optional(),\n  name: z.string().optional(),\n  tenants: z.array(z.string()).default([]),\n  currentTenantId: z.string().optional(),\n  signedInTenants: z.array(z.string()).default([]).optional(),\n  error: z.string().optional(),\n})\n\nexport type ResponsePayload = z.infer<typeof responseSchema>\n","import { Api, ApiHandler, Ctx } from \"@rpcbase/api\"\nimport { models } from \"@rpcbase/db\"\n\nimport type { AuthSessionUser } from \"../../types\"\nimport { restrictSessionMiddleware } from \"../../middleware\"\n\nimport * as Me from \"./index\"\n\n\nconst me: ApiHandler<Me.RequestPayload, Me.ResponsePayload, AuthSessionUser> = async(\n  _payload: Me.RequestPayload,\n  ctx: Ctx<AuthSessionUser>\n): Promise<Me.ResponsePayload> => {\n  const sessionUser = ctx.req.session?.user\n\n  if (!sessionUser?.id) {\n    ctx.res.status(401)\n    return {\n      id: \"\",\n      currentTenantId: \"\",\n      signedInTenants: [],\n      tenants: [],\n      error: \"not_authenticated\",\n    } as unknown as Me.ResponsePayload\n  }\n\n  const User = await models.getGlobal(\"RBUser\", ctx)\n  const user = await User.findById(sessionUser.id)\n\n  if (!user) {\n    ctx.res.status(404)\n    return {\n      id: \"\",\n      currentTenantId: \"\",\n      signedInTenants: [],\n      tenants: [],\n      error: \"user_not_found\",\n    } as unknown as Me.ResponsePayload\n  }\n\n  const tenantId = typeof sessionUser.currentTenantId === \"string\" ? sessionUser.currentTenantId.trim() : \"\"\n  if (!tenantId) {\n    ctx.res.status(500)\n    return {\n      id: \"\",\n      currentTenantId: \"\",\n      signedInTenants: [],\n      tenants: [],\n      error: \"tenant_missing\",\n    } as unknown as Me.ResponsePayload\n  }\n\n  return {\n    id: user._id.toString(),\n    email: user.email,\n    phone: user.get(\"phone\") as string | undefined,\n    name: user.name,\n    tenants: (user.tenants || []).map(String),\n    currentTenantId: tenantId,\n    signedInTenants: sessionUser.signedInTenants || [],\n  }\n}\n\nexport default (api: Api<AuthSessionUser>) => {\n  api.use(Me.ROUTE, restrictSessionMiddleware)\n  api.get(Me.ROUTE, me)\n}\n"],"mappings":";;;;AAGA,IAAa,QAAQ;AAEQ,OAAS,CAAC,CAAC;AAGV,OAAS;CACrC,IAAI,OAAS,CAAC,CAAC,SAAS;CACxB,OAAO,OAAS,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS;CACnC,OAAO,OAAS,CAAC,CAAC,SAAS;CAC3B,MAAM,OAAS,CAAC,CAAC,SAAS;CAC1B,SAAS,MAAQ,OAAS,CAAC,CAAC,CAAC,QAAQ,CAAA,CAAE;CACvC,iBAAiB,OAAS,CAAC,CAAC,SAAS;CACrC,iBAAiB,MAAQ,OAAS,CAAC,CAAC,CAAC,QAAQ,CAAA,CAAE,CAAC,CAAC,SAAS;CAC1D,OAAO,OAAS,CAAC,CAAC,SAAS;AAC7B,CAAC;;;ACRD,IAAM,KAAyE,OAC7E,UACA,QACgC;CAChC,MAAM,cAAc,IAAI,IAAI,SAAS;CAErC,IAAI,CAAC,aAAa,IAAI;EACpB,IAAI,IAAI,OAAO,GAAG;EAClB,OAAO;GACL,IAAI;GACJ,iBAAiB;GACjB,iBAAiB,CAAA;GACjB,SAAS,CAAA;GACT,OAAO;EACT;CACF;CAGA,MAAM,OAAO,OAAM,MADA,OAAO,UAAU,UAAU,GAAG,EAAA,CACzB,SAAS,YAAY,EAAE;CAE/C,IAAI,CAAC,MAAM;EACT,IAAI,IAAI,OAAO,GAAG;EAClB,OAAO;GACL,IAAI;GACJ,iBAAiB;GACjB,iBAAiB,CAAA;GACjB,SAAS,CAAA;GACT,OAAO;EACT;CACF;CAEA,MAAM,WAAW,OAAO,YAAY,oBAAoB,WAAW,YAAY,gBAAgB,KAAK,IAAI;CACxG,IAAI,CAAC,UAAU;EACb,IAAI,IAAI,OAAO,GAAG;EAClB,OAAO;GACL,IAAI;GACJ,iBAAiB;GACjB,iBAAiB,CAAA;GACjB,SAAS,CAAA;GACT,OAAO;EACT;CACF;CAEA,OAAO;EACL,IAAI,KAAK,IAAI,SAAS;EACtB,OAAO,KAAK;EACZ,OAAO,KAAK,IAAI,OAAO;EACvB,MAAM,KAAK;EACX,UAAU,KAAK,WAAW,CAAA,EAAA,CAAI,IAAI,MAAM;EACxC,iBAAiB;EACjB,iBAAiB,YAAY,mBAAmB,CAAA;CAClD;AACF;AAEA,IAAA,mBAAgB,QAA8B;CAC5C,IAAI,IAAI,OAAU,yBAAyB;CAC3C,IAAI,IAAI,OAAU,EAAE;AACtB"}