@shipfox/api-auth 18.0.0 → 20.0.0

package/dist/db/admin-user-moderation.js

@@ -89,6 +89,35 @@ async function revokeActiveSessions(tx, userId) {
     });
     return new Set(revoked.map(({ sessionId })=>sessionId)).size;
 }
+async function suspendUser(tx, user) {
+    if (user.status !== 'active') return;
+    const activeOwners = await tx.select({
+        id: adminGrants.id
+    }).from(adminGrants).innerJoin(users, eq(adminGrants.userId, users.id)).where(and(eq(adminGrants.role, 'admin-owner'), isNull(adminGrants.revokedAt), eq(users.status, 'active'))).limit(2);
+    const targetIsActiveOwner = await tx.select({
+        id: adminGrants.id
+    }).from(adminGrants).where(and(eq(adminGrants.userId, user.id), eq(adminGrants.role, 'admin-owner'), isNull(adminGrants.revokedAt))).limit(1);
+    if (targetIsActiveOwner.length > 0 && activeOwners.length <= 1) throw new LastAdminOwnerError();
+    await tx.update(users).set({
+        status: 'suspended',
+        updatedAt: sql`now()`
+    }).where(eq(users.id, user.id));
+}
+async function applyModerationOperation(tx, user, operation) {
+    if (operation === 'suspend') {
+        await suspendUser(tx, user);
+        return await revokeActiveSessions(tx, user.id);
+    }
+    if (operation === 'reactivate' && user.status === 'suspended') {
+        await tx.update(users).set({
+            status: 'active',
+            updatedAt: sql`now()`
+        }).where(eq(users.id, user.id));
+        return 0;
+    }
+    if (operation === 'revoke-sessions') return await revokeActiveSessions(tx, user.id);
+    return 0;
+}
 async function executeUserModerationCommand(params) {
     return await db().transaction(async (tx)=>{
         await lockAdminCommand(tx, params);
@@ -101,32 +130,7 @@ async function executeUserModerationCommand(params) {
         await lockUserSessionMutations(tx, params.userId);
         const user = await readTargetUserForUpdate(tx, params.userId);
         await requireActiveAdminOperator(tx, params.actorId);
-        let sessionsRevoked = 0;
-        if (params.operation === 'suspend') {
-            if (user.status === 'active') {
-                const activeOwners = await tx.select({
-                    id: adminGrants.id
-                }).from(adminGrants).innerJoin(users, eq(adminGrants.userId, users.id)).where(and(eq(adminGrants.role, 'admin-owner'), isNull(adminGrants.revokedAt), eq(users.status, 'active'))).limit(2);
-                const targetIsActiveOwner = await tx.select({
-                    id: adminGrants.id
-                }).from(adminGrants).where(and(eq(adminGrants.userId, user.id), eq(adminGrants.role, 'admin-owner'), isNull(adminGrants.revokedAt))).limit(1);
-                if (targetIsActiveOwner.length > 0 && activeOwners.length <= 1) {
-                    throw new LastAdminOwnerError();
-                }
-                await tx.update(users).set({
-                    status: 'suspended',
-                    updatedAt: sql`now()`
-                }).where(eq(users.id, user.id));
-            }
-            sessionsRevoked = await revokeActiveSessions(tx, user.id);
-        } else if (params.operation === 'reactivate' && user.status === 'suspended') {
-            await tx.update(users).set({
-                status: 'active',
-                updatedAt: sql`now()`
-            }).where(eq(users.id, user.id));
-        } else if (params.operation === 'revoke-sessions') {
-            sessionsRevoked = await revokeActiveSessions(tx, user.id);
-        }
+        const sessionsRevoked = await applyModerationOperation(tx, user, params.operation);
         const summary = await findUserSummary(tx, user.id);
         const result = {
             user: summary,

package/dist/db/admin-user-moderation.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/db/admin-user-moderation.ts"],"sourcesContent":["import type {AdminRole} from '@shipfox/api-auth-dto';\nimport type {AdministrationActionEvent} from '@shipfox/api-common-dto';\nimport {and, eq, gt, isNull, sql} from 'drizzle-orm';\nimport {hasMinimumAdminRole, highestAdminRole} from '#core/admin-role-model.js';\nimport type {AdministratorUserSummary} from '#core/entities/administrator-read-model.js';\nimport {AdminRoleRequiredError, LastAdminOwnerError, UserNotFoundError} from '#core/errors.js';\nimport {\n  findAdminCommandResult,\n  lockAdminCommand,\n  lockAdminOwnerGrants,\n  storeAdminCommandResult,\n  type Tx,\n  writeAdminAction,\n} from './admin-command.js';\nimport {findAdministratorUserSummary} from './admin-user-summary.js';\nimport {db} from './db.js';\nimport {lockUserSessionMutations} from './refresh-tokens.js';\nimport type {\n  StoredAdministratorUserSummary,\n  StoredAdminUserModerationResult,\n} from './schema/admin-command-results.js';\nimport {adminGrants} from './schema/admin-grants.js';\nimport {refreshTokens} from './schema/refresh-tokens.js';\nimport {users} from './schema/users.js';\n\ninterface UserModerationCommandParams {\n  actorId: string;\n  userId: string;\n  idempotencyKeyFingerprint: string;\n  requestFingerprint: string;\n  event: AdministrationActionEvent;\n}\n\nfunction toStoredUserSummary(user: AdministratorUserSummary): StoredAdministratorUserSummary {\n  return {\n    id: user.id,\n    email: user.email,\n    name: user.name,\n    emailVerifiedAt: user.emailVerifiedAt?.toISOString() ?? null,\n    status: user.status,\n    createdAt: user.createdAt.toISOString(),\n    adminRole: user.adminRole,\n  };\n}\n\nasync function findUserSummary(tx: Tx, userId: string): Promise<StoredAdministratorUserSummary> {\n  const user = await findAdministratorUserSummary(tx, {id: userId});\n  if (!user) throw new Error('User summary query returned no rows');\n  return toStoredUserSummary(user);\n}\n\nfunction fromStoredResult(result: StoredAdminUserModerationResult) {\n  return {\n    user: {\n      id: result.user.id,\n      email: result.user.email,\n      name: result.user.name,\n      emailVerifiedAt: result.user.emailVerifiedAt ? new Date(result.user.emailVerifiedAt) : null,\n      status: result.user.status,\n      createdAt: new Date(result.user.createdAt),\n      adminRole: result.user.adminRole,\n    },\n    correlationId: result.correlationId,\n    sessionsRevoked: result.sessionsRevoked,\n  };\n}\n\nasync function findCommandResult(\n  tx: Tx,\n  params: Pick<\n    UserModerationCommandParams,\n    'actorId' | 'idempotencyKeyFingerprint' | 'requestFingerprint'\n  > & {command: string},\n) {\n  const result = await findAdminCommandResult(tx, params);\n  if (!result) return undefined;\n  if (!('userModeration' in result.result)) {\n    throw new Error('Administrator command result has an unexpected shape');\n  }\n  return fromStoredResult(result.result.userModeration);\n}\n\nasync function storeCommandResult(\n  tx: Tx,\n  params: UserModerationCommandParams,\n  result: StoredAdminUserModerationResult,\n): Promise<void> {\n  await storeAdminCommandResult(\n    tx,\n    {...params, command: params.event.command},\n    {userModeration: result},\n  );\n}\n\nasync function readTargetUserForUpdate(tx: Tx, userId: string) {\n  const rows = await tx\n    .select({id: users.id, status: users.status})\n    .from(users)\n    .where(eq(users.id, userId))\n    .limit(1)\n    .for('update');\n  const user = rows[0];\n  if (!user || user.status === 'deleted') throw new UserNotFoundError(userId);\n  return user;\n}\n\nexport async function requireActiveAdminOperator(tx: Tx, actorId: string): Promise<AdminRole> {\n  const actorRows = await tx\n    .select({status: users.status})\n    .from(users)\n    .where(eq(users.id, actorId))\n    .limit(1);\n  const actor = actorRows[0];\n  const grants = await tx\n    .select({role: adminGrants.role})\n    .from(adminGrants)\n    .where(and(eq(adminGrants.userId, actorId), isNull(adminGrants.revokedAt)));\n  const role = highestAdminRole(grants.map(({role}) => role));\n\n  if (actor?.status !== 'active' || !role || !hasMinimumAdminRole(role, 'admin-operator')) {\n    throw new AdminRoleRequiredError('admin-operator');\n  }\n  return role;\n}\n\nasync function revokeActiveSessions(tx: Tx, userId: string): Promise<number> {\n  const revoked = await tx\n    .update(refreshTokens)\n    .set({revokedAt: sql`now()`, updatedAt: sql`now()`})\n    .where(\n      and(\n        eq(refreshTokens.userId, userId),\n        isNull(refreshTokens.revokedAt),\n        gt(refreshTokens.expiresAt, sql`now()`),\n      ),\n    )\n    .returning({sessionId: refreshTokens.sessionId});\n\n  return new Set(revoked.map(({sessionId}) => sessionId)).size;\n}\n\nasync function executeUserModerationCommand(\n  params: UserModerationCommandParams & {\n    operation: 'suspend' | 'reactivate' | 'revoke-sessions';\n  },\n) {\n  return await db().transaction(async (tx) => {\n    await lockAdminCommand(tx, params);\n    if (params.operation === 'suspend') await lockAdminOwnerGrants(tx);\n\n    const existing = await findCommandResult(tx, {\n      ...params,\n      command: params.event.command,\n    });\n    if (existing) return existing;\n\n    await lockUserSessionMutations(tx, params.userId);\n    const user = await readTargetUserForUpdate(tx, params.userId);\n    await requireActiveAdminOperator(tx, params.actorId);\n    let sessionsRevoked = 0;\n\n    if (params.operation === 'suspend') {\n      if (user.status === 'active') {\n        const activeOwners = await tx\n          .select({id: adminGrants.id})\n          .from(adminGrants)\n          .innerJoin(users, eq(adminGrants.userId, users.id))\n          .where(\n            and(\n              eq(adminGrants.role, 'admin-owner'),\n              isNull(adminGrants.revokedAt),\n              eq(users.status, 'active'),\n            ),\n          )\n          .limit(2);\n        const targetIsActiveOwner = await tx\n          .select({id: adminGrants.id})\n          .from(adminGrants)\n          .where(\n            and(\n              eq(adminGrants.userId, user.id),\n              eq(adminGrants.role, 'admin-owner'),\n              isNull(adminGrants.revokedAt),\n            ),\n          )\n          .limit(1);\n        if (targetIsActiveOwner.length > 0 && activeOwners.length <= 1) {\n          throw new LastAdminOwnerError();\n        }\n\n        await tx\n          .update(users)\n          .set({status: 'suspended', updatedAt: sql`now()`})\n          .where(eq(users.id, user.id));\n      }\n      sessionsRevoked = await revokeActiveSessions(tx, user.id);\n    } else if (params.operation === 'reactivate' && user.status === 'suspended') {\n      await tx\n        .update(users)\n        .set({status: 'active', updatedAt: sql`now()`})\n        .where(eq(users.id, user.id));\n    } else if (params.operation === 'revoke-sessions') {\n      sessionsRevoked = await revokeActiveSessions(tx, user.id);\n    }\n\n    const summary = await findUserSummary(tx, user.id);\n    const result: StoredAdminUserModerationResult = {\n      user: summary,\n      correlationId: params.event.correlationId,\n      sessionsRevoked,\n    };\n    await writeAdminAction(tx, params.event);\n    await storeCommandResult(tx, params, result);\n    return fromStoredResult(result);\n  });\n}\n\nexport type UserModerationResult = Awaited<ReturnType<typeof executeUserModerationCommand>>;\n\nexport async function suspendUserWithAudit(\n  params: UserModerationCommandParams,\n): Promise<UserModerationResult> {\n  return await executeUserModerationCommand({...params, operation: 'suspend'});\n}\n\nexport async function reactivateUserWithAudit(\n  params: UserModerationCommandParams,\n): Promise<UserModerationResult> {\n  return await executeUserModerationCommand({...params, operation: 'reactivate'});\n}\n\nexport async function revokeUserSessionsWithAudit(\n  params: UserModerationCommandParams,\n): Promise<UserModerationResult> {\n  return await executeUserModerationCommand({...params, operation: 'revoke-sessions'});\n}\n"],"names":["and","eq","gt","isNull","sql","hasMinimumAdminRole","highestAdminRole","AdminRoleRequiredError","LastAdminOwnerError","UserNotFoundError","findAdminCommandResult","lockAdminCommand","lockAdminOwnerGrants","storeAdminCommandResult","writeAdminAction","findAdministratorUserSummary","db","lockUserSessionMutations","adminGrants","refreshTokens","users","toStoredUserSummary","user","id","email","name","emailVerifiedAt","toISOString","status","createdAt","adminRole","findUserSummary","tx","userId","Error","fromStoredResult","result","Date","correlationId","sessionsRevoked","findCommandResult","params","undefined","userModeration","storeCommandResult","command","event","readTargetUserForUpdate","rows","select","from","where","limit","for","requireActiveAdminOperator","actorId","actorRows","actor","grants","role","revokedAt","map","revokeActiveSessions","revoked","update","set","updatedAt","expiresAt","returning","sessionId","Set","size","executeUserModerationCommand","transaction","operation","existing","activeOwners","innerJoin","targetIsActiveOwner","length","summary","suspendUserWithAudit","reactivateUserWithAudit","revokeUserSessionsWithAudit"],"mappings":"AAEA,SAAQA,GAAG,EAAEC,EAAE,EAAEC,EAAE,EAAEC,MAAM,EAAEC,GAAG,QAAO,cAAc;AACrD,SAAQC,mBAAmB,EAAEC,gBAAgB,QAAO,4BAA4B;AAEhF,SAAQC,sBAAsB,EAAEC,mBAAmB,EAAEC,iBAAiB,QAAO,kBAAkB;AAC/F,SACEC,sBAAsB,EACtBC,gBAAgB,EAChBC,oBAAoB,EACpBC,uBAAuB,EAEvBC,gBAAgB,QACX,qBAAqB;AAC5B,SAAQC,4BAA4B,QAAO,0BAA0B;AACrE,SAAQC,EAAE,QAAO,UAAU;AAC3B,SAAQC,wBAAwB,QAAO,sBAAsB;AAK7D,SAAQC,WAAW,QAAO,2BAA2B;AACrD,SAAQC,aAAa,QAAO,6BAA6B;AACzD,SAAQC,KAAK,QAAO,oBAAoB;AAUxC,SAASC,oBAAoBC,IAA8B;IACzD,OAAO;QACLC,IAAID,KAAKC,EAAE;QACXC,OAAOF,KAAKE,KAAK;QACjBC,MAAMH,KAAKG,IAAI;QACfC,iBAAiBJ,KAAKI,eAAe,EAAEC,iBAAiB;QACxDC,QAAQN,KAAKM,MAAM;QACnBC,WAAWP,KAAKO,SAAS,CAACF,WAAW;QACrCG,WAAWR,KAAKQ,SAAS;IAC3B;AACF;AAEA,eAAeC,gBAAgBC,EAAM,EAAEC,MAAc;IACnD,MAAMX,OAAO,MAAMP,6BAA6BiB,IAAI;QAACT,IAAIU;IAAM;IAC/D,IAAI,CAACX,MAAM,MAAM,IAAIY,MAAM;IAC3B,OAAOb,oBAAoBC;AAC7B;AAEA,SAASa,iBAAiBC,MAAuC;IAC/D,OAAO;QACLd,MAAM;YACJC,IAAIa,OAAOd,IAAI,CAACC,EAAE;YAClBC,OAAOY,OAAOd,IAAI,CAACE,KAAK;YACxBC,MAAMW,OAAOd,IAAI,CAACG,IAAI;YACtBC,iBAAiBU,OAAOd,IAAI,CAACI,eAAe,GAAG,IAAIW,KAAKD,OAAOd,IAAI,CAACI,eAAe,IAAI;YACvFE,QAAQQ,OAAOd,IAAI,CAACM,MAAM;YAC1BC,WAAW,IAAIQ,KAAKD,OAAOd,IAAI,CAACO,SAAS;YACzCC,WAAWM,OAAOd,IAAI,CAACQ,SAAS;QAClC;QACAQ,eAAeF,OAAOE,aAAa;QACnCC,iBAAiBH,OAAOG,eAAe;IACzC;AACF;AAEA,eAAeC,kBACbR,EAAM,EACNS,MAGqB;IAErB,MAAML,SAAS,MAAM1B,uBAAuBsB,IAAIS;IAChD,IAAI,CAACL,QAAQ,OAAOM;IACpB,IAAI,CAAE,CAAA,oBAAoBN,OAAOA,MAAM,AAAD,GAAI;QACxC,MAAM,IAAIF,MAAM;IAClB;IACA,OAAOC,iBAAiBC,OAAOA,MAAM,CAACO,cAAc;AACtD;AAEA,eAAeC,mBACbZ,EAAM,EACNS,MAAmC,EACnCL,MAAuC;IAEvC,MAAMvB,wBACJmB,IACA;QAAC,GAAGS,MAAM;QAAEI,SAASJ,OAAOK,KAAK,CAACD,OAAO;IAAA,GACzC;QAACF,gBAAgBP;IAAM;AAE3B;AAEA,eAAeW,wBAAwBf,EAAM,EAAEC,MAAc;IAC3D,MAAMe,OAAO,MAAMhB,GAChBiB,MAAM,CAAC;QAAC1B,IAAIH,MAAMG,EAAE;QAAEK,QAAQR,MAAMQ,MAAM;IAAA,GAC1CsB,IAAI,CAAC9B,OACL+B,KAAK,CAAClD,GAAGmB,MAAMG,EAAE,EAAEU,SACnBmB,KAAK,CAAC,GACNC,GAAG,CAAC;IACP,MAAM/B,OAAO0B,IAAI,CAAC,EAAE;IACpB,IAAI,CAAC1B,QAAQA,KAAKM,MAAM,KAAK,WAAW,MAAM,IAAInB,kBAAkBwB;IACpE,OAAOX;AACT;AAEA,OAAO,eAAegC,2BAA2BtB,EAAM,EAAEuB,OAAe;IACtE,MAAMC,YAAY,MAAMxB,GACrBiB,MAAM,CAAC;QAACrB,QAAQR,MAAMQ,MAAM;IAAA,GAC5BsB,IAAI,CAAC9B,OACL+B,KAAK,CAAClD,GAAGmB,MAAMG,EAAE,EAAEgC,UACnBH,KAAK,CAAC;IACT,MAAMK,QAAQD,SAAS,CAAC,EAAE;IAC1B,MAAME,SAAS,MAAM1B,GAClBiB,MAAM,CAAC;QAACU,MAAMzC,YAAYyC,IAAI;IAAA,GAC9BT,IAAI,CAAChC,aACLiC,KAAK,CAACnD,IAAIC,GAAGiB,YAAYe,MAAM,EAAEsB,UAAUpD,OAAOe,YAAY0C,SAAS;IAC1E,MAAMD,OAAOrD,iBAAiBoD,OAAOG,GAAG,CAAC,CAAC,EAACF,IAAI,EAAC,GAAKA;IAErD,IAAIF,OAAO7B,WAAW,YAAY,CAAC+B,QAAQ,CAACtD,oBAAoBsD,MAAM,mBAAmB;QACvF,MAAM,IAAIpD,uBAAuB;IACnC;IACA,OAAOoD;AACT;AAEA,eAAeG,qBAAqB9B,EAAM,EAAEC,MAAc;IACxD,MAAM8B,UAAU,MAAM/B,GACnBgC,MAAM,CAAC7C,eACP8C,GAAG,CAAC;QAACL,WAAWxD,GAAG,CAAC,KAAK,CAAC;QAAE8D,WAAW9D,GAAG,CAAC,KAAK,CAAC;IAAA,GACjD+C,KAAK,CACJnD,IACEC,GAAGkB,cAAcc,MAAM,EAAEA,SACzB9B,OAAOgB,cAAcyC,SAAS,GAC9B1D,GAAGiB,cAAcgD,SAAS,EAAE/D,GAAG,CAAC,KAAK,CAAC,IAGzCgE,SAAS,CAAC;QAACC,WAAWlD,cAAckD,SAAS;IAAA;IAEhD,OAAO,IAAIC,IAAIP,QAAQF,GAAG,CAAC,CAAC,EAACQ,SAAS,EAAC,GAAKA,YAAYE,IAAI;AAC9D;AAEA,eAAeC,6BACb/B,MAEC;IAED,OAAO,MAAMzB,KAAKyD,WAAW,CAAC,OAAOzC;QACnC,MAAMrB,iBAAiBqB,IAAIS;QAC3B,IAAIA,OAAOiC,SAAS,KAAK,WAAW,MAAM9D,qBAAqBoB;QAE/D,MAAM2C,WAAW,MAAMnC,kBAAkBR,IAAI;YAC3C,GAAGS,MAAM;YACTI,SAASJ,OAAOK,KAAK,CAACD,OAAO;QAC/B;QACA,IAAI8B,UAAU,OAAOA;QAErB,MAAM1D,yBAAyBe,IAAIS,OAAOR,MAAM;QAChD,MAAMX,OAAO,MAAMyB,wBAAwBf,IAAIS,OAAOR,MAAM;QAC5D,MAAMqB,2BAA2BtB,IAAIS,OAAOc,OAAO;QACnD,IAAIhB,kBAAkB;QAEtB,IAAIE,OAAOiC,SAAS,KAAK,WAAW;YAClC,IAAIpD,KAAKM,MAAM,KAAK,UAAU;gBAC5B,MAAMgD,eAAe,MAAM5C,GACxBiB,MAAM,CAAC;oBAAC1B,IAAIL,YAAYK,EAAE;gBAAA,GAC1B2B,IAAI,CAAChC,aACL2D,SAAS,CAACzD,OAAOnB,GAAGiB,YAAYe,MAAM,EAAEb,MAAMG,EAAE,GAChD4B,KAAK,CACJnD,IACEC,GAAGiB,YAAYyC,IAAI,EAAE,gBACrBxD,OAAOe,YAAY0C,SAAS,GAC5B3D,GAAGmB,MAAMQ,MAAM,EAAE,YAGpBwB,KAAK,CAAC;gBACT,MAAM0B,sBAAsB,MAAM9C,GAC/BiB,MAAM,CAAC;oBAAC1B,IAAIL,YAAYK,EAAE;gBAAA,GAC1B2B,IAAI,CAAChC,aACLiC,KAAK,CACJnD,IACEC,GAAGiB,YAAYe,MAAM,EAAEX,KAAKC,EAAE,GAC9BtB,GAAGiB,YAAYyC,IAAI,EAAE,gBACrBxD,OAAOe,YAAY0C,SAAS,IAG/BR,KAAK,CAAC;gBACT,IAAI0B,oBAAoBC,MAAM,GAAG,KAAKH,aAAaG,MAAM,IAAI,GAAG;oBAC9D,MAAM,IAAIvE;gBACZ;gBAEA,MAAMwB,GACHgC,MAAM,CAAC5C,OACP6C,GAAG,CAAC;oBAACrC,QAAQ;oBAAasC,WAAW9D,GAAG,CAAC,KAAK,CAAC;gBAAA,GAC/C+C,KAAK,CAAClD,GAAGmB,MAAMG,EAAE,EAAED,KAAKC,EAAE;YAC/B;YACAgB,kBAAkB,MAAMuB,qBAAqB9B,IAAIV,KAAKC,EAAE;QAC1D,OAAO,IAAIkB,OAAOiC,SAAS,KAAK,gBAAgBpD,KAAKM,MAAM,KAAK,aAAa;YAC3E,MAAMI,GACHgC,MAAM,CAAC5C,OACP6C,GAAG,CAAC;gBAACrC,QAAQ;gBAAUsC,WAAW9D,GAAG,CAAC,KAAK,CAAC;YAAA,GAC5C+C,KAAK,CAAClD,GAAGmB,MAAMG,EAAE,EAAED,KAAKC,EAAE;QAC/B,OAAO,IAAIkB,OAAOiC,SAAS,KAAK,mBAAmB;YACjDnC,kBAAkB,MAAMuB,qBAAqB9B,IAAIV,KAAKC,EAAE;QAC1D;QAEA,MAAMyD,UAAU,MAAMjD,gBAAgBC,IAAIV,KAAKC,EAAE;QACjD,MAAMa,SAA0C;YAC9Cd,MAAM0D;YACN1C,eAAeG,OAAOK,KAAK,CAACR,aAAa;YACzCC;QACF;QACA,MAAMzB,iBAAiBkB,IAAIS,OAAOK,KAAK;QACvC,MAAMF,mBAAmBZ,IAAIS,QAAQL;QACrC,OAAOD,iBAAiBC;IAC1B;AACF;AAIA,OAAO,eAAe6C,qBACpBxC,MAAmC;IAEnC,OAAO,MAAM+B,6BAA6B;QAAC,GAAG/B,MAAM;QAAEiC,WAAW;IAAS;AAC5E;AAEA,OAAO,eAAeQ,wBACpBzC,MAAmC;IAEnC,OAAO,MAAM+B,6BAA6B;QAAC,GAAG/B,MAAM;QAAEiC,WAAW;IAAY;AAC/E;AAEA,OAAO,eAAeS,4BACpB1C,MAAmC;IAEnC,OAAO,MAAM+B,6BAA6B;QAAC,GAAG/B,MAAM;QAAEiC,WAAW;IAAiB;AACpF"}
+{"version":3,"sources":["../../src/db/admin-user-moderation.ts"],"sourcesContent":["import type {AdminRole} from '@shipfox/api-auth-dto';\nimport type {AdministrationActionEvent} from '@shipfox/api-common-dto';\nimport {and, eq, gt, isNull, sql} from 'drizzle-orm';\nimport {hasMinimumAdminRole, highestAdminRole} from '#core/admin-role-model.js';\nimport type {AdministratorUserSummary} from '#core/entities/administrator-read-model.js';\nimport {AdminRoleRequiredError, LastAdminOwnerError, UserNotFoundError} from '#core/errors.js';\nimport {\n  findAdminCommandResult,\n  lockAdminCommand,\n  lockAdminOwnerGrants,\n  storeAdminCommandResult,\n  type Tx,\n  writeAdminAction,\n} from './admin-command.js';\nimport {findAdministratorUserSummary} from './admin-user-summary.js';\nimport {db} from './db.js';\nimport {lockUserSessionMutations} from './refresh-tokens.js';\nimport type {\n  StoredAdministratorUserSummary,\n  StoredAdminUserModerationResult,\n} from './schema/admin-command-results.js';\nimport {adminGrants} from './schema/admin-grants.js';\nimport {refreshTokens} from './schema/refresh-tokens.js';\nimport {users} from './schema/users.js';\n\ninterface UserModerationCommandParams {\n  actorId: string;\n  userId: string;\n  idempotencyKeyFingerprint: string;\n  requestFingerprint: string;\n  event: AdministrationActionEvent;\n}\n\nfunction toStoredUserSummary(user: AdministratorUserSummary): StoredAdministratorUserSummary {\n  return {\n    id: user.id,\n    email: user.email,\n    name: user.name,\n    emailVerifiedAt: user.emailVerifiedAt?.toISOString() ?? null,\n    status: user.status,\n    createdAt: user.createdAt.toISOString(),\n    adminRole: user.adminRole,\n  };\n}\n\nasync function findUserSummary(tx: Tx, userId: string): Promise<StoredAdministratorUserSummary> {\n  const user = await findAdministratorUserSummary(tx, {id: userId});\n  if (!user) throw new Error('User summary query returned no rows');\n  return toStoredUserSummary(user);\n}\n\nfunction fromStoredResult(result: StoredAdminUserModerationResult) {\n  return {\n    user: {\n      id: result.user.id,\n      email: result.user.email,\n      name: result.user.name,\n      emailVerifiedAt: result.user.emailVerifiedAt ? new Date(result.user.emailVerifiedAt) : null,\n      status: result.user.status,\n      createdAt: new Date(result.user.createdAt),\n      adminRole: result.user.adminRole,\n    },\n    correlationId: result.correlationId,\n    sessionsRevoked: result.sessionsRevoked,\n  };\n}\n\nasync function findCommandResult(\n  tx: Tx,\n  params: Pick<\n    UserModerationCommandParams,\n    'actorId' | 'idempotencyKeyFingerprint' | 'requestFingerprint'\n  > & {command: string},\n) {\n  const result = await findAdminCommandResult(tx, params);\n  if (!result) return undefined;\n  if (!('userModeration' in result.result)) {\n    throw new Error('Administrator command result has an unexpected shape');\n  }\n  return fromStoredResult(result.result.userModeration);\n}\n\nasync function storeCommandResult(\n  tx: Tx,\n  params: UserModerationCommandParams,\n  result: StoredAdminUserModerationResult,\n): Promise<void> {\n  await storeAdminCommandResult(\n    tx,\n    {...params, command: params.event.command},\n    {userModeration: result},\n  );\n}\n\nasync function readTargetUserForUpdate(tx: Tx, userId: string) {\n  const rows = await tx\n    .select({id: users.id, status: users.status})\n    .from(users)\n    .where(eq(users.id, userId))\n    .limit(1)\n    .for('update');\n  const user = rows[0];\n  if (!user || user.status === 'deleted') throw new UserNotFoundError(userId);\n  return user;\n}\n\nexport async function requireActiveAdminOperator(tx: Tx, actorId: string): Promise<AdminRole> {\n  const actorRows = await tx\n    .select({status: users.status})\n    .from(users)\n    .where(eq(users.id, actorId))\n    .limit(1);\n  const actor = actorRows[0];\n  const grants = await tx\n    .select({role: adminGrants.role})\n    .from(adminGrants)\n    .where(and(eq(adminGrants.userId, actorId), isNull(adminGrants.revokedAt)));\n  const role = highestAdminRole(grants.map(({role}) => role));\n\n  if (actor?.status !== 'active' || !role || !hasMinimumAdminRole(role, 'admin-operator')) {\n    throw new AdminRoleRequiredError('admin-operator');\n  }\n  return role;\n}\n\nasync function revokeActiveSessions(tx: Tx, userId: string): Promise<number> {\n  const revoked = await tx\n    .update(refreshTokens)\n    .set({revokedAt: sql`now()`, updatedAt: sql`now()`})\n    .where(\n      and(\n        eq(refreshTokens.userId, userId),\n        isNull(refreshTokens.revokedAt),\n        gt(refreshTokens.expiresAt, sql`now()`),\n      ),\n    )\n    .returning({sessionId: refreshTokens.sessionId});\n\n  return new Set(revoked.map(({sessionId}) => sessionId)).size;\n}\n\nasync function suspendUser(tx: Tx, user: Awaited<ReturnType<typeof readTargetUserForUpdate>>) {\n  if (user.status !== 'active') return;\n  const activeOwners = await tx\n    .select({id: adminGrants.id})\n    .from(adminGrants)\n    .innerJoin(users, eq(adminGrants.userId, users.id))\n    .where(\n      and(\n        eq(adminGrants.role, 'admin-owner'),\n        isNull(adminGrants.revokedAt),\n        eq(users.status, 'active'),\n      ),\n    )\n    .limit(2);\n  const targetIsActiveOwner = await tx\n    .select({id: adminGrants.id})\n    .from(adminGrants)\n    .where(\n      and(\n        eq(adminGrants.userId, user.id),\n        eq(adminGrants.role, 'admin-owner'),\n        isNull(adminGrants.revokedAt),\n      ),\n    )\n    .limit(1);\n  if (targetIsActiveOwner.length > 0 && activeOwners.length <= 1) throw new LastAdminOwnerError();\n  await tx\n    .update(users)\n    .set({status: 'suspended', updatedAt: sql`now()`})\n    .where(eq(users.id, user.id));\n}\n\nasync function applyModerationOperation(\n  tx: Tx,\n  user: Awaited<ReturnType<typeof readTargetUserForUpdate>>,\n  operation: 'suspend' | 'reactivate' | 'revoke-sessions',\n): Promise<number> {\n  if (operation === 'suspend') {\n    await suspendUser(tx, user);\n    return await revokeActiveSessions(tx, user.id);\n  }\n  if (operation === 'reactivate' && user.status === 'suspended') {\n    await tx\n      .update(users)\n      .set({status: 'active', updatedAt: sql`now()`})\n      .where(eq(users.id, user.id));\n    return 0;\n  }\n  if (operation === 'revoke-sessions') return await revokeActiveSessions(tx, user.id);\n  return 0;\n}\n\nasync function executeUserModerationCommand(\n  params: UserModerationCommandParams & {\n    operation: 'suspend' | 'reactivate' | 'revoke-sessions';\n  },\n) {\n  return await db().transaction(async (tx) => {\n    await lockAdminCommand(tx, params);\n    if (params.operation === 'suspend') await lockAdminOwnerGrants(tx);\n\n    const existing = await findCommandResult(tx, {\n      ...params,\n      command: params.event.command,\n    });\n    if (existing) return existing;\n\n    await lockUserSessionMutations(tx, params.userId);\n    const user = await readTargetUserForUpdate(tx, params.userId);\n    await requireActiveAdminOperator(tx, params.actorId);\n    const sessionsRevoked = await applyModerationOperation(tx, user, params.operation);\n\n    const summary = await findUserSummary(tx, user.id);\n    const result: StoredAdminUserModerationResult = {\n      user: summary,\n      correlationId: params.event.correlationId,\n      sessionsRevoked,\n    };\n    await writeAdminAction(tx, params.event);\n    await storeCommandResult(tx, params, result);\n    return fromStoredResult(result);\n  });\n}\n\nexport type UserModerationResult = Awaited<ReturnType<typeof executeUserModerationCommand>>;\n\nexport async function suspendUserWithAudit(\n  params: UserModerationCommandParams,\n): Promise<UserModerationResult> {\n  return await executeUserModerationCommand({...params, operation: 'suspend'});\n}\n\nexport async function reactivateUserWithAudit(\n  params: UserModerationCommandParams,\n): Promise<UserModerationResult> {\n  return await executeUserModerationCommand({...params, operation: 'reactivate'});\n}\n\nexport async function revokeUserSessionsWithAudit(\n  params: UserModerationCommandParams,\n): Promise<UserModerationResult> {\n  return await executeUserModerationCommand({...params, operation: 'revoke-sessions'});\n}\n"],"names":["and","eq","gt","isNull","sql","hasMinimumAdminRole","highestAdminRole","AdminRoleRequiredError","LastAdminOwnerError","UserNotFoundError","findAdminCommandResult","lockAdminCommand","lockAdminOwnerGrants","storeAdminCommandResult","writeAdminAction","findAdministratorUserSummary","db","lockUserSessionMutations","adminGrants","refreshTokens","users","toStoredUserSummary","user","id","email","name","emailVerifiedAt","toISOString","status","createdAt","adminRole","findUserSummary","tx","userId","Error","fromStoredResult","result","Date","correlationId","sessionsRevoked","findCommandResult","params","undefined","userModeration","storeCommandResult","command","event","readTargetUserForUpdate","rows","select","from","where","limit","for","requireActiveAdminOperator","actorId","actorRows","actor","grants","role","revokedAt","map","revokeActiveSessions","revoked","update","set","updatedAt","expiresAt","returning","sessionId","Set","size","suspendUser","activeOwners","innerJoin","targetIsActiveOwner","length","applyModerationOperation","operation","executeUserModerationCommand","transaction","existing","summary","suspendUserWithAudit","reactivateUserWithAudit","revokeUserSessionsWithAudit"],"mappings":"AAEA,SAAQA,GAAG,EAAEC,EAAE,EAAEC,EAAE,EAAEC,MAAM,EAAEC,GAAG,QAAO,cAAc;AACrD,SAAQC,mBAAmB,EAAEC,gBAAgB,QAAO,4BAA4B;AAEhF,SAAQC,sBAAsB,EAAEC,mBAAmB,EAAEC,iBAAiB,QAAO,kBAAkB;AAC/F,SACEC,sBAAsB,EACtBC,gBAAgB,EAChBC,oBAAoB,EACpBC,uBAAuB,EAEvBC,gBAAgB,QACX,qBAAqB;AAC5B,SAAQC,4BAA4B,QAAO,0BAA0B;AACrE,SAAQC,EAAE,QAAO,UAAU;AAC3B,SAAQC,wBAAwB,QAAO,sBAAsB;AAK7D,SAAQC,WAAW,QAAO,2BAA2B;AACrD,SAAQC,aAAa,QAAO,6BAA6B;AACzD,SAAQC,KAAK,QAAO,oBAAoB;AAUxC,SAASC,oBAAoBC,IAA8B;IACzD,OAAO;QACLC,IAAID,KAAKC,EAAE;QACXC,OAAOF,KAAKE,KAAK;QACjBC,MAAMH,KAAKG,IAAI;QACfC,iBAAiBJ,KAAKI,eAAe,EAAEC,iBAAiB;QACxDC,QAAQN,KAAKM,MAAM;QACnBC,WAAWP,KAAKO,SAAS,CAACF,WAAW;QACrCG,WAAWR,KAAKQ,SAAS;IAC3B;AACF;AAEA,eAAeC,gBAAgBC,EAAM,EAAEC,MAAc;IACnD,MAAMX,OAAO,MAAMP,6BAA6BiB,IAAI;QAACT,IAAIU;IAAM;IAC/D,IAAI,CAACX,MAAM,MAAM,IAAIY,MAAM;IAC3B,OAAOb,oBAAoBC;AAC7B;AAEA,SAASa,iBAAiBC,MAAuC;IAC/D,OAAO;QACLd,MAAM;YACJC,IAAIa,OAAOd,IAAI,CAACC,EAAE;YAClBC,OAAOY,OAAOd,IAAI,CAACE,KAAK;YACxBC,MAAMW,OAAOd,IAAI,CAACG,IAAI;YACtBC,iBAAiBU,OAAOd,IAAI,CAACI,eAAe,GAAG,IAAIW,KAAKD,OAAOd,IAAI,CAACI,eAAe,IAAI;YACvFE,QAAQQ,OAAOd,IAAI,CAACM,MAAM;YAC1BC,WAAW,IAAIQ,KAAKD,OAAOd,IAAI,CAACO,SAAS;YACzCC,WAAWM,OAAOd,IAAI,CAACQ,SAAS;QAClC;QACAQ,eAAeF,OAAOE,aAAa;QACnCC,iBAAiBH,OAAOG,eAAe;IACzC;AACF;AAEA,eAAeC,kBACbR,EAAM,EACNS,MAGqB;IAErB,MAAML,SAAS,MAAM1B,uBAAuBsB,IAAIS;IAChD,IAAI,CAACL,QAAQ,OAAOM;IACpB,IAAI,CAAE,CAAA,oBAAoBN,OAAOA,MAAM,AAAD,GAAI;QACxC,MAAM,IAAIF,MAAM;IAClB;IACA,OAAOC,iBAAiBC,OAAOA,MAAM,CAACO,cAAc;AACtD;AAEA,eAAeC,mBACbZ,EAAM,EACNS,MAAmC,EACnCL,MAAuC;IAEvC,MAAMvB,wBACJmB,IACA;QAAC,GAAGS,MAAM;QAAEI,SAASJ,OAAOK,KAAK,CAACD,OAAO;IAAA,GACzC;QAACF,gBAAgBP;IAAM;AAE3B;AAEA,eAAeW,wBAAwBf,EAAM,EAAEC,MAAc;IAC3D,MAAMe,OAAO,MAAMhB,GAChBiB,MAAM,CAAC;QAAC1B,IAAIH,MAAMG,EAAE;QAAEK,QAAQR,MAAMQ,MAAM;IAAA,GAC1CsB,IAAI,CAAC9B,OACL+B,KAAK,CAAClD,GAAGmB,MAAMG,EAAE,EAAEU,SACnBmB,KAAK,CAAC,GACNC,GAAG,CAAC;IACP,MAAM/B,OAAO0B,IAAI,CAAC,EAAE;IACpB,IAAI,CAAC1B,QAAQA,KAAKM,MAAM,KAAK,WAAW,MAAM,IAAInB,kBAAkBwB;IACpE,OAAOX;AACT;AAEA,OAAO,eAAegC,2BAA2BtB,EAAM,EAAEuB,OAAe;IACtE,MAAMC,YAAY,MAAMxB,GACrBiB,MAAM,CAAC;QAACrB,QAAQR,MAAMQ,MAAM;IAAA,GAC5BsB,IAAI,CAAC9B,OACL+B,KAAK,CAAClD,GAAGmB,MAAMG,EAAE,EAAEgC,UACnBH,KAAK,CAAC;IACT,MAAMK,QAAQD,SAAS,CAAC,EAAE;IAC1B,MAAME,SAAS,MAAM1B,GAClBiB,MAAM,CAAC;QAACU,MAAMzC,YAAYyC,IAAI;IAAA,GAC9BT,IAAI,CAAChC,aACLiC,KAAK,CAACnD,IAAIC,GAAGiB,YAAYe,MAAM,EAAEsB,UAAUpD,OAAOe,YAAY0C,SAAS;IAC1E,MAAMD,OAAOrD,iBAAiBoD,OAAOG,GAAG,CAAC,CAAC,EAACF,IAAI,EAAC,GAAKA;IAErD,IAAIF,OAAO7B,WAAW,YAAY,CAAC+B,QAAQ,CAACtD,oBAAoBsD,MAAM,mBAAmB;QACvF,MAAM,IAAIpD,uBAAuB;IACnC;IACA,OAAOoD;AACT;AAEA,eAAeG,qBAAqB9B,EAAM,EAAEC,MAAc;IACxD,MAAM8B,UAAU,MAAM/B,GACnBgC,MAAM,CAAC7C,eACP8C,GAAG,CAAC;QAACL,WAAWxD,GAAG,CAAC,KAAK,CAAC;QAAE8D,WAAW9D,GAAG,CAAC,KAAK,CAAC;IAAA,GACjD+C,KAAK,CACJnD,IACEC,GAAGkB,cAAcc,MAAM,EAAEA,SACzB9B,OAAOgB,cAAcyC,SAAS,GAC9B1D,GAAGiB,cAAcgD,SAAS,EAAE/D,GAAG,CAAC,KAAK,CAAC,IAGzCgE,SAAS,CAAC;QAACC,WAAWlD,cAAckD,SAAS;IAAA;IAEhD,OAAO,IAAIC,IAAIP,QAAQF,GAAG,CAAC,CAAC,EAACQ,SAAS,EAAC,GAAKA,YAAYE,IAAI;AAC9D;AAEA,eAAeC,YAAYxC,EAAM,EAAEV,IAAyD;IAC1F,IAAIA,KAAKM,MAAM,KAAK,UAAU;IAC9B,MAAM6C,eAAe,MAAMzC,GACxBiB,MAAM,CAAC;QAAC1B,IAAIL,YAAYK,EAAE;IAAA,GAC1B2B,IAAI,CAAChC,aACLwD,SAAS,CAACtD,OAAOnB,GAAGiB,YAAYe,MAAM,EAAEb,MAAMG,EAAE,GAChD4B,KAAK,CACJnD,IACEC,GAAGiB,YAAYyC,IAAI,EAAE,gBACrBxD,OAAOe,YAAY0C,SAAS,GAC5B3D,GAAGmB,MAAMQ,MAAM,EAAE,YAGpBwB,KAAK,CAAC;IACT,MAAMuB,sBAAsB,MAAM3C,GAC/BiB,MAAM,CAAC;QAAC1B,IAAIL,YAAYK,EAAE;IAAA,GAC1B2B,IAAI,CAAChC,aACLiC,KAAK,CACJnD,IACEC,GAAGiB,YAAYe,MAAM,EAAEX,KAAKC,EAAE,GAC9BtB,GAAGiB,YAAYyC,IAAI,EAAE,gBACrBxD,OAAOe,YAAY0C,SAAS,IAG/BR,KAAK,CAAC;IACT,IAAIuB,oBAAoBC,MAAM,GAAG,KAAKH,aAAaG,MAAM,IAAI,GAAG,MAAM,IAAIpE;IAC1E,MAAMwB,GACHgC,MAAM,CAAC5C,OACP6C,GAAG,CAAC;QAACrC,QAAQ;QAAasC,WAAW9D,GAAG,CAAC,KAAK,CAAC;IAAA,GAC/C+C,KAAK,CAAClD,GAAGmB,MAAMG,EAAE,EAAED,KAAKC,EAAE;AAC/B;AAEA,eAAesD,yBACb7C,EAAM,EACNV,IAAyD,EACzDwD,SAAuD;IAEvD,IAAIA,cAAc,WAAW;QAC3B,MAAMN,YAAYxC,IAAIV;QACtB,OAAO,MAAMwC,qBAAqB9B,IAAIV,KAAKC,EAAE;IAC/C;IACA,IAAIuD,cAAc,gBAAgBxD,KAAKM,MAAM,KAAK,aAAa;QAC7D,MAAMI,GACHgC,MAAM,CAAC5C,OACP6C,GAAG,CAAC;YAACrC,QAAQ;YAAUsC,WAAW9D,GAAG,CAAC,KAAK,CAAC;QAAA,GAC5C+C,KAAK,CAAClD,GAAGmB,MAAMG,EAAE,EAAED,KAAKC,EAAE;QAC7B,OAAO;IACT;IACA,IAAIuD,cAAc,mBAAmB,OAAO,MAAMhB,qBAAqB9B,IAAIV,KAAKC,EAAE;IAClF,OAAO;AACT;AAEA,eAAewD,6BACbtC,MAEC;IAED,OAAO,MAAMzB,KAAKgE,WAAW,CAAC,OAAOhD;QACnC,MAAMrB,iBAAiBqB,IAAIS;QAC3B,IAAIA,OAAOqC,SAAS,KAAK,WAAW,MAAMlE,qBAAqBoB;QAE/D,MAAMiD,WAAW,MAAMzC,kBAAkBR,IAAI;YAC3C,GAAGS,MAAM;YACTI,SAASJ,OAAOK,KAAK,CAACD,OAAO;QAC/B;QACA,IAAIoC,UAAU,OAAOA;QAErB,MAAMhE,yBAAyBe,IAAIS,OAAOR,MAAM;QAChD,MAAMX,OAAO,MAAMyB,wBAAwBf,IAAIS,OAAOR,MAAM;QAC5D,MAAMqB,2BAA2BtB,IAAIS,OAAOc,OAAO;QACnD,MAAMhB,kBAAkB,MAAMsC,yBAAyB7C,IAAIV,MAAMmB,OAAOqC,SAAS;QAEjF,MAAMI,UAAU,MAAMnD,gBAAgBC,IAAIV,KAAKC,EAAE;QACjD,MAAMa,SAA0C;YAC9Cd,MAAM4D;YACN5C,eAAeG,OAAOK,KAAK,CAACR,aAAa;YACzCC;QACF;QACA,MAAMzB,iBAAiBkB,IAAIS,OAAOK,KAAK;QACvC,MAAMF,mBAAmBZ,IAAIS,QAAQL;QACrC,OAAOD,iBAAiBC;IAC1B;AACF;AAIA,OAAO,eAAe+C,qBACpB1C,MAAmC;IAEnC,OAAO,MAAMsC,6BAA6B;QAAC,GAAGtC,MAAM;QAAEqC,WAAW;IAAS;AAC5E;AAEA,OAAO,eAAeM,wBACpB3C,MAAmC;IAEnC,OAAO,MAAMsC,6BAA6B;QAAC,GAAGtC,MAAM;QAAEqC,WAAW;IAAY;AAC/E;AAEA,OAAO,eAAeO,4BACpB5C,MAAmC;IAEnC,OAAO,MAAMsC,6BAA6B;QAAC,GAAGtC,MAAM;QAAEqC,WAAW;IAAiB;AACpF"}

package/dist/db/admin-user-summary.d.ts

@@ -1,4 +1,6 @@
+import { type TimestampIdCursor } from '@shipfox/node-drizzle';
 import type { AdministratorUserSummary } from '#core/entities/administrator-read-model.js';
+import type { UserStatus } from '#core/entities/user.js';
 import type { db } from './db.js';
 type Tx = Parameters<Parameters<ReturnType<typeof db>['transaction']>[0]>[0];
 export type AdministratorUserSummaryExecutor = ReturnType<typeof db> | Tx;
@@ -9,6 +11,26 @@ type AdministratorUserLookup = {
     email: string;
     id?: never;
 };
+export interface ListAdministratorUserSummariesParams {
+    actorId: string;
+    limit: number;
+    cursor?: TimestampIdCursor | undefined;
+    search?: string | undefined;
+    status?: UserStatus | undefined;
+    eligible?: boolean | undefined;
+}
+export interface ListAdministratorUserSummariesResult {
+    rows: AdministratorUserSummary[];
+    nextCursor: TimestampIdCursor | null;
+}
 export declare function findAdministratorUserSummary(executor: AdministratorUserSummaryExecutor, params: AdministratorUserLookup): Promise<AdministratorUserSummary | undefined>;
+/**
+ * Lists a live directory view using keyset pagination.
+ *
+ * Pages are not a consistent snapshot. Each page reads current account and grant state, so
+ * inserts and account or grant changes can make consecutive pages differ. Re-run the listing
+ * before acting on a row.
+ */
+export declare function listAdministratorUserSummaries(executor: AdministratorUserSummaryExecutor, params: ListAdministratorUserSummariesParams): Promise<ListAdministratorUserSummariesResult>;
 export {};
 //# sourceMappingURL=admin-user-summary.d.ts.map

package/dist/db/admin-user-summary.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin-user-summary.d.ts","sourceRoot":"","sources":["../../src/db/admin-user-summary.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAC,wBAAwB,EAAC,MAAM,4CAA4C,CAAC;AACzF,OAAO,KAAK,EAAC,EAAE,EAAC,MAAM,SAAS,CAAC;AAIhC,KAAK,EAAE,GAAG,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7E,MAAM,MAAM,gCAAgC,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,CAAC;AAE1E,KAAK,uBAAuB,GAAG;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAA;CAAC,GAAG;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,KAAK,CAAA;CAAC,CAAC;AAEzF,wBAAsB,4BAA4B,CAChD,QAAQ,EAAE,gCAAgC,EAC1C,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAmC/C"}
+{"version":3,"file":"admin-user-summary.d.ts","sourceRoot":"","sources":["../../src/db/admin-user-summary.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,iBAAiB,EAEvB,MAAM,uBAAuB,CAAC;AAe/B,OAAO,KAAK,EAAC,wBAAwB,EAAC,MAAM,4CAA4C,CAAC;AACzF,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAC,EAAE,EAAC,MAAM,SAAS,CAAC;AAIhC,KAAK,EAAE,GAAG,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7E,MAAM,MAAM,gCAAgC,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,CAAC;AAE1E,KAAK,uBAAuB,GAAG;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAA;CAAC,GAAG;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,KAAK,CAAA;CAAC,CAAC;AAKzF,MAAM,WAAW,oCAAoC;IACnD,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACvC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,MAAM,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAChC,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAChC;AAED,MAAM,WAAW,oCAAoC;IACnD,IAAI,EAAE,wBAAwB,EAAE,CAAC;IACjC,UAAU,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACtC;AA2CD,wBAAsB,4BAA4B,CAChD,QAAQ,EAAE,gCAAgC,EAC1C,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAmC/C;AAED;;;;;;GAMG;AACH,wBAAsB,8BAA8B,CAClD,QAAQ,EAAE,gCAAgC,EAC1C,MAAM,EAAE,oCAAoC,GAC3C,OAAO,CAAC,oCAAoC,CAAC,CAqD/C"}

package/dist/db/admin-user-summary.js

@@ -1,7 +1,36 @@
-import { and, eq, isNull } from 'drizzle-orm';
+import { paginateTimestampIdRows, timestampIdCursorWhere } from '@shipfox/node-drizzle';
+import { and, desc, eq, isNotNull, isNull, ne, not, or, sql } from 'drizzle-orm';
 import { highestAdminRole } from '#core/admin-role-model.js';
 import { adminGrants } from './schema/admin-grants.js';
 import { users } from './schema/users.js';
+const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const SEARCH_TERM_SEPARATOR = /\s+/;
+function escapeLikeTerm(term) {
+    return term.replace(/[\\%_]/g, (character)=>`\\${character}`);
+}
+function isUuid(value) {
+    return UUID_PATTERN.test(value);
+}
+function containsTerm(column, term) {
+    return sql`${column} ILIKE ${`%${escapeLikeTerm(term)}%`}`;
+}
+function addEligibilityCondition(conditions, params, activeAdminRoleUserId) {
+    const eligibleCondition = and(eq(users.status, 'active'), isNotNull(users.emailVerifiedAt), isNull(activeAdminRoleUserId), ne(users.id, params.actorId));
+    if (eligibleCondition && params.eligible === true) conditions.push(eligibleCondition);
+    if (eligibleCondition && params.eligible === false) conditions.push(not(eligibleCondition));
+}
+function addSearchConditions(conditions, search) {
+    const normalizedSearch = search?.trim() ?? '';
+    if (!normalizedSearch) return;
+    if (isUuid(normalizedSearch)) {
+        conditions.push(eq(users.id, normalizedSearch));
+        return;
+    }
+    for (const term of normalizedSearch.split(SEARCH_TERM_SEPARATOR)){
+        const termCondition = or(containsTerm(users.name, term), containsTerm(users.email, term));
+        if (termCondition) conditions.push(termCondition);
+    }
+}
 export async function findAdministratorUserSummary(executor, params) {
     const identifier = 'id' in params ? eq(users.id, params.id) : eq(users.email, params.email);
     const rows = await executor.select({
@@ -27,5 +56,50 @@ export async function findAdministratorUserSummary(executor, params) {
             ] : []))
     };
 }
+/**
+ * Lists a live directory view using keyset pagination.
+ *
+ * Pages are not a consistent snapshot. Each page reads current account and grant state, so
+ * inserts and account or grant changes can make consecutive pages differ. Re-run the listing
+ * before acting on a row.
+ */ export async function listAdministratorUserSummaries(executor, params) {
+    // Aggregate grants in a subquery so pagination is over users, not grants.
+    const activeAdminRoles = executor.select({
+        userId: adminGrants.userId,
+        roles: sql`json_agg(${adminGrants.role})`.as('roles')
+    }).from(adminGrants).where(isNull(adminGrants.revokedAt)).groupBy(adminGrants.userId).as('active_admin_roles');
+    const conditions = [];
+    const cursorCondition = timestampIdCursorWhere({
+        timestampColumn: users.createdAt,
+        idColumn: users.id,
+        cursor: params.cursor
+    });
+    if (cursorCondition) conditions.push(cursorCondition);
+    if (params.status) conditions.push(eq(users.status, params.status));
+    addEligibilityCondition(conditions, params, activeAdminRoles.userId);
+    addSearchConditions(conditions, params.search);
+    const rows = await executor.select({
+        id: users.id,
+        email: users.email,
+        name: users.name,
+        emailVerifiedAt: users.emailVerifiedAt,
+        status: users.status,
+        createdAt: users.createdAt,
+        adminRoles: activeAdminRoles.roles
+    }).from(users).leftJoin(activeAdminRoles, eq(activeAdminRoles.userId, users.id)).where(and(...conditions)).orderBy(desc(users.createdAt), desc(users.id)).limit(params.limit + 1);
+    const mappedRows = rows.map(({ adminRoles, ...row })=>({
+            ...row,
+            adminRole: row.status === 'active' ? highestAdminRole(adminRoles ?? []) : null
+        }));
+    const page = paginateTimestampIdRows({
+        rows: mappedRows,
+        limit: params.limit,
+        timestampKey: 'createdAt'
+    });
+    return {
+        rows: page.pageRows,
+        nextCursor: page.nextCursor
+    };
+}
 
 //# sourceMappingURL=admin-user-summary.js.map

package/dist/db/admin-user-summary.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/db/admin-user-summary.ts"],"sourcesContent":["import {and, eq, isNull} from 'drizzle-orm';\nimport {highestAdminRole} from '#core/admin-role-model.js';\nimport type {AdministratorUserSummary} from '#core/entities/administrator-read-model.js';\nimport type {db} from './db.js';\nimport {adminGrants} from './schema/admin-grants.js';\nimport {users} from './schema/users.js';\n\ntype Tx = Parameters<Parameters<ReturnType<typeof db>['transaction']>[0]>[0];\nexport type AdministratorUserSummaryExecutor = ReturnType<typeof db> | Tx;\n\ntype AdministratorUserLookup = {id: string; email?: never} | {email: string; id?: never};\n\nexport async function findAdministratorUserSummary(\n  executor: AdministratorUserSummaryExecutor,\n  params: AdministratorUserLookup,\n): Promise<AdministratorUserSummary | undefined> {\n  const identifier = 'id' in params ? eq(users.id, params.id) : eq(users.email, params.email);\n  const rows = await executor\n    .select({\n      id: users.id,\n      email: users.email,\n      name: users.name,\n      emailVerifiedAt: users.emailVerifiedAt,\n      status: users.status,\n      createdAt: users.createdAt,\n      adminRole: adminGrants.role,\n    })\n    .from(users)\n    .leftJoin(\n      adminGrants,\n      and(\n        eq(adminGrants.userId, users.id),\n        isNull(adminGrants.revokedAt),\n        eq(users.status, 'active'),\n      ),\n    )\n    .where(identifier);\n\n  const first = rows[0];\n  if (!first) return undefined;\n\n  return {\n    id: first.id,\n    email: first.email,\n    name: first.name,\n    emailVerifiedAt: first.emailVerifiedAt,\n    status: first.status,\n    createdAt: first.createdAt,\n    adminRole: highestAdminRole(rows.flatMap(({adminRole}) => (adminRole ? [adminRole] : []))),\n  } satisfies AdministratorUserSummary;\n}\n"],"names":["and","eq","isNull","highestAdminRole","adminGrants","users","findAdministratorUserSummary","executor","params","identifier","id","email","rows","select","name","emailVerifiedAt","status","createdAt","adminRole","role","from","leftJoin","userId","revokedAt","where","first","undefined","flatMap"],"mappings":"AAAA,SAAQA,GAAG,EAAEC,EAAE,EAAEC,MAAM,QAAO,cAAc;AAC5C,SAAQC,gBAAgB,QAAO,4BAA4B;AAG3D,SAAQC,WAAW,QAAO,2BAA2B;AACrD,SAAQC,KAAK,QAAO,oBAAoB;AAOxC,OAAO,eAAeC,6BACpBC,QAA0C,EAC1CC,MAA+B;IAE/B,MAAMC,aAAa,QAAQD,SAASP,GAAGI,MAAMK,EAAE,EAAEF,OAAOE,EAAE,IAAIT,GAAGI,MAAMM,KAAK,EAAEH,OAAOG,KAAK;IAC1F,MAAMC,OAAO,MAAML,SAChBM,MAAM,CAAC;QACNH,IAAIL,MAAMK,EAAE;QACZC,OAAON,MAAMM,KAAK;QAClBG,MAAMT,MAAMS,IAAI;QAChBC,iBAAiBV,MAAMU,eAAe;QACtCC,QAAQX,MAAMW,MAAM;QACpBC,WAAWZ,MAAMY,SAAS;QAC1BC,WAAWd,YAAYe,IAAI;IAC7B,GACCC,IAAI,CAACf,OACLgB,QAAQ,CACPjB,aACAJ,IACEC,GAAGG,YAAYkB,MAAM,EAAEjB,MAAMK,EAAE,GAC/BR,OAAOE,YAAYmB,SAAS,GAC5BtB,GAAGI,MAAMW,MAAM,EAAE,YAGpBQ,KAAK,CAACf;IAET,MAAMgB,QAAQb,IAAI,CAAC,EAAE;IACrB,IAAI,CAACa,OAAO,OAAOC;IAEnB,OAAO;QACLhB,IAAIe,MAAMf,EAAE;QACZC,OAAOc,MAAMd,KAAK;QAClBG,MAAMW,MAAMX,IAAI;QAChBC,iBAAiBU,MAAMV,eAAe;QACtCC,QAAQS,MAAMT,MAAM;QACpBC,WAAWQ,MAAMR,SAAS;QAC1BC,WAAWf,iBAAiBS,KAAKe,OAAO,CAAC,CAAC,EAACT,SAAS,EAAC,GAAMA,YAAY;gBAACA;aAAU,GAAG,EAAE;IACzF;AACF"}
+{"version":3,"sources":["../../src/db/admin-user-summary.ts"],"sourcesContent":["import type {AdminRole} from '@shipfox/api-auth-dto';\nimport {\n  paginateTimestampIdRows,\n  type TimestampIdCursor,\n  timestampIdCursorWhere,\n} from '@shipfox/node-drizzle';\nimport {\n  and,\n  desc,\n  eq,\n  isNotNull,\n  isNull,\n  ne,\n  not,\n  or,\n  type SQL,\n  type SQLWrapper,\n  sql,\n} from 'drizzle-orm';\nimport {highestAdminRole} from '#core/admin-role-model.js';\nimport type {AdministratorUserSummary} from '#core/entities/administrator-read-model.js';\nimport type {UserStatus} from '#core/entities/user.js';\nimport type {db} from './db.js';\nimport {adminGrants} from './schema/admin-grants.js';\nimport {users} from './schema/users.js';\n\ntype Tx = Parameters<Parameters<ReturnType<typeof db>['transaction']>[0]>[0];\nexport type AdministratorUserSummaryExecutor = ReturnType<typeof db> | Tx;\n\ntype AdministratorUserLookup = {id: string; email?: never} | {email: string; id?: never};\n\nconst UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\nconst SEARCH_TERM_SEPARATOR = /\\s+/;\n\nexport interface ListAdministratorUserSummariesParams {\n  actorId: string;\n  limit: number;\n  cursor?: TimestampIdCursor | undefined;\n  search?: string | undefined;\n  status?: UserStatus | undefined;\n  eligible?: boolean | undefined;\n}\n\nexport interface ListAdministratorUserSummariesResult {\n  rows: AdministratorUserSummary[];\n  nextCursor: TimestampIdCursor | null;\n}\n\nfunction escapeLikeTerm(term: string): string {\n  return term.replace(/[\\\\%_]/g, (character) => `\\\\${character}`);\n}\n\nfunction isUuid(value: string): boolean {\n  return UUID_PATTERN.test(value);\n}\n\nfunction containsTerm(column: SQLWrapper, term: string): SQLWrapper {\n  return sql`${column} ILIKE ${`%${escapeLikeTerm(term)}%`}`;\n}\n\nfunction addEligibilityCondition(\n  conditions: SQL[],\n  params: Pick<ListAdministratorUserSummariesParams, 'actorId' | 'eligible'>,\n  activeAdminRoleUserId: SQLWrapper,\n): void {\n  const eligibleCondition = and(\n    eq(users.status, 'active'),\n    isNotNull(users.emailVerifiedAt),\n    isNull(activeAdminRoleUserId),\n    ne(users.id, params.actorId),\n  );\n  if (eligibleCondition && params.eligible === true) conditions.push(eligibleCondition);\n  if (eligibleCondition && params.eligible === false) conditions.push(not(eligibleCondition));\n}\n\nfunction addSearchConditions(conditions: SQL[], search: string | undefined): void {\n  const normalizedSearch = search?.trim() ?? '';\n  if (!normalizedSearch) return;\n  if (isUuid(normalizedSearch)) {\n    conditions.push(eq(users.id, normalizedSearch));\n    return;\n  }\n\n  for (const term of normalizedSearch.split(SEARCH_TERM_SEPARATOR)) {\n    const termCondition = or(containsTerm(users.name, term), containsTerm(users.email, term));\n    if (termCondition) conditions.push(termCondition);\n  }\n}\n\nexport async function findAdministratorUserSummary(\n  executor: AdministratorUserSummaryExecutor,\n  params: AdministratorUserLookup,\n): Promise<AdministratorUserSummary | undefined> {\n  const identifier = 'id' in params ? eq(users.id, params.id) : eq(users.email, params.email);\n  const rows = await executor\n    .select({\n      id: users.id,\n      email: users.email,\n      name: users.name,\n      emailVerifiedAt: users.emailVerifiedAt,\n      status: users.status,\n      createdAt: users.createdAt,\n      adminRole: adminGrants.role,\n    })\n    .from(users)\n    .leftJoin(\n      adminGrants,\n      and(\n        eq(adminGrants.userId, users.id),\n        isNull(adminGrants.revokedAt),\n        eq(users.status, 'active'),\n      ),\n    )\n    .where(identifier);\n\n  const first = rows[0];\n  if (!first) return undefined;\n\n  return {\n    id: first.id,\n    email: first.email,\n    name: first.name,\n    emailVerifiedAt: first.emailVerifiedAt,\n    status: first.status,\n    createdAt: first.createdAt,\n    adminRole: highestAdminRole(rows.flatMap(({adminRole}) => (adminRole ? [adminRole] : []))),\n  } satisfies AdministratorUserSummary;\n}\n\n/**\n * Lists a live directory view using keyset pagination.\n *\n * Pages are not a consistent snapshot. Each page reads current account and grant state, so\n * inserts and account or grant changes can make consecutive pages differ. Re-run the listing\n * before acting on a row.\n */\nexport async function listAdministratorUserSummaries(\n  executor: AdministratorUserSummaryExecutor,\n  params: ListAdministratorUserSummariesParams,\n): Promise<ListAdministratorUserSummariesResult> {\n  // Aggregate grants in a subquery so pagination is over users, not grants.\n  const activeAdminRoles = executor\n    .select({\n      userId: adminGrants.userId,\n      roles: sql<AdminRole[]>`json_agg(${adminGrants.role})`.as('roles'),\n    })\n    .from(adminGrants)\n    .where(isNull(adminGrants.revokedAt))\n    .groupBy(adminGrants.userId)\n    .as('active_admin_roles');\n\n  const conditions: SQL[] = [];\n  const cursorCondition = timestampIdCursorWhere({\n    timestampColumn: users.createdAt,\n    idColumn: users.id,\n    cursor: params.cursor,\n  });\n  if (cursorCondition) conditions.push(cursorCondition);\n  if (params.status) conditions.push(eq(users.status, params.status));\n\n  addEligibilityCondition(conditions, params, activeAdminRoles.userId);\n  addSearchConditions(conditions, params.search);\n\n  const rows = await executor\n    .select({\n      id: users.id,\n      email: users.email,\n      name: users.name,\n      emailVerifiedAt: users.emailVerifiedAt,\n      status: users.status,\n      createdAt: users.createdAt,\n      adminRoles: activeAdminRoles.roles,\n    })\n    .from(users)\n    .leftJoin(activeAdminRoles, eq(activeAdminRoles.userId, users.id))\n    .where(and(...conditions))\n    .orderBy(desc(users.createdAt), desc(users.id))\n    .limit(params.limit + 1);\n\n  const mappedRows = rows.map(\n    ({adminRoles, ...row}): AdministratorUserSummary => ({\n      ...row,\n      adminRole: row.status === 'active' ? highestAdminRole(adminRoles ?? []) : null,\n    }),\n  );\n  const page = paginateTimestampIdRows({\n    rows: mappedRows,\n    limit: params.limit,\n    timestampKey: 'createdAt',\n  });\n\n  return {rows: page.pageRows, nextCursor: page.nextCursor};\n}\n"],"names":["paginateTimestampIdRows","timestampIdCursorWhere","and","desc","eq","isNotNull","isNull","ne","not","or","sql","highestAdminRole","adminGrants","users","UUID_PATTERN","SEARCH_TERM_SEPARATOR","escapeLikeTerm","term","replace","character","isUuid","value","test","containsTerm","column","addEligibilityCondition","conditions","params","activeAdminRoleUserId","eligibleCondition","status","emailVerifiedAt","id","actorId","eligible","push","addSearchConditions","search","normalizedSearch","trim","split","termCondition","name","email","findAdministratorUserSummary","executor","identifier","rows","select","createdAt","adminRole","role","from","leftJoin","userId","revokedAt","where","first","undefined","flatMap","listAdministratorUserSummaries","activeAdminRoles","roles","as","groupBy","cursorCondition","timestampColumn","idColumn","cursor","adminRoles","orderBy","limit","mappedRows","map","row","page","timestampKey","pageRows","nextCursor"],"mappings":"AACA,SACEA,uBAAuB,EAEvBC,sBAAsB,QACjB,wBAAwB;AAC/B,SACEC,GAAG,EACHC,IAAI,EACJC,EAAE,EACFC,SAAS,EACTC,MAAM,EACNC,EAAE,EACFC,GAAG,EACHC,EAAE,EAGFC,GAAG,QACE,cAAc;AACrB,SAAQC,gBAAgB,QAAO,4BAA4B;AAI3D,SAAQC,WAAW,QAAO,2BAA2B;AACrD,SAAQC,KAAK,QAAO,oBAAoB;AAOxC,MAAMC,eAAe;AACrB,MAAMC,wBAAwB;AAgB9B,SAASC,eAAeC,IAAY;IAClC,OAAOA,KAAKC,OAAO,CAAC,WAAW,CAACC,YAAc,CAAC,EAAE,EAAEA,WAAW;AAChE;AAEA,SAASC,OAAOC,KAAa;IAC3B,OAAOP,aAAaQ,IAAI,CAACD;AAC3B;AAEA,SAASE,aAAaC,MAAkB,EAAEP,IAAY;IACpD,OAAOP,GAAG,CAAC,EAAEc,OAAO,OAAO,EAAE,CAAC,CAAC,EAAER,eAAeC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC5D;AAEA,SAASQ,wBACPC,UAAiB,EACjBC,MAA0E,EAC1EC,qBAAiC;IAEjC,MAAMC,oBAAoB3B,IACxBE,GAAGS,MAAMiB,MAAM,EAAE,WACjBzB,UAAUQ,MAAMkB,eAAe,GAC/BzB,OAAOsB,wBACPrB,GAAGM,MAAMmB,EAAE,EAAEL,OAAOM,OAAO;IAE7B,IAAIJ,qBAAqBF,OAAOO,QAAQ,KAAK,MAAMR,WAAWS,IAAI,CAACN;IACnE,IAAIA,qBAAqBF,OAAOO,QAAQ,KAAK,OAAOR,WAAWS,IAAI,CAAC3B,IAAIqB;AAC1E;AAEA,SAASO,oBAAoBV,UAAiB,EAAEW,MAA0B;IACxE,MAAMC,mBAAmBD,QAAQE,UAAU;IAC3C,IAAI,CAACD,kBAAkB;IACvB,IAAIlB,OAAOkB,mBAAmB;QAC5BZ,WAAWS,IAAI,CAAC/B,GAAGS,MAAMmB,EAAE,EAAEM;QAC7B;IACF;IAEA,KAAK,MAAMrB,QAAQqB,iBAAiBE,KAAK,CAACzB,uBAAwB;QAChE,MAAM0B,gBAAgBhC,GAAGc,aAAaV,MAAM6B,IAAI,EAAEzB,OAAOM,aAAaV,MAAM8B,KAAK,EAAE1B;QACnF,IAAIwB,eAAef,WAAWS,IAAI,CAACM;IACrC;AACF;AAEA,OAAO,eAAeG,6BACpBC,QAA0C,EAC1ClB,MAA+B;IAE/B,MAAMmB,aAAa,QAAQnB,SAASvB,GAAGS,MAAMmB,EAAE,EAAEL,OAAOK,EAAE,IAAI5B,GAAGS,MAAM8B,KAAK,EAAEhB,OAAOgB,KAAK;IAC1F,MAAMI,OAAO,MAAMF,SAChBG,MAAM,CAAC;QACNhB,IAAInB,MAAMmB,EAAE;QACZW,OAAO9B,MAAM8B,KAAK;QAClBD,MAAM7B,MAAM6B,IAAI;QAChBX,iBAAiBlB,MAAMkB,eAAe;QACtCD,QAAQjB,MAAMiB,MAAM;QACpBmB,WAAWpC,MAAMoC,SAAS;QAC1BC,WAAWtC,YAAYuC,IAAI;IAC7B,GACCC,IAAI,CAACvC,OACLwC,QAAQ,CACPzC,aACAV,IACEE,GAAGQ,YAAY0C,MAAM,EAAEzC,MAAMmB,EAAE,GAC/B1B,OAAOM,YAAY2C,SAAS,GAC5BnD,GAAGS,MAAMiB,MAAM,EAAE,YAGpB0B,KAAK,CAACV;IAET,MAAMW,QAAQV,IAAI,CAAC,EAAE;IACrB,IAAI,CAACU,OAAO,OAAOC;IAEnB,OAAO;QACL1B,IAAIyB,MAAMzB,EAAE;QACZW,OAAOc,MAAMd,KAAK;QAClBD,MAAMe,MAAMf,IAAI;QAChBX,iBAAiB0B,MAAM1B,eAAe;QACtCD,QAAQ2B,MAAM3B,MAAM;QACpBmB,WAAWQ,MAAMR,SAAS;QAC1BC,WAAWvC,iBAAiBoC,KAAKY,OAAO,CAAC,CAAC,EAACT,SAAS,EAAC,GAAMA,YAAY;gBAACA;aAAU,GAAG,EAAE;IACzF;AACF;AAEA;;;;;;CAMC,GACD,OAAO,eAAeU,+BACpBf,QAA0C,EAC1ClB,MAA4C;IAE5C,0EAA0E;IAC1E,MAAMkC,mBAAmBhB,SACtBG,MAAM,CAAC;QACNM,QAAQ1C,YAAY0C,MAAM;QAC1BQ,OAAOpD,GAAgB,CAAC,SAAS,EAAEE,YAAYuC,IAAI,CAAC,CAAC,CAAC,CAACY,EAAE,CAAC;IAC5D,GACCX,IAAI,CAACxC,aACL4C,KAAK,CAAClD,OAAOM,YAAY2C,SAAS,GAClCS,OAAO,CAACpD,YAAY0C,MAAM,EAC1BS,EAAE,CAAC;IAEN,MAAMrC,aAAoB,EAAE;IAC5B,MAAMuC,kBAAkBhE,uBAAuB;QAC7CiE,iBAAiBrD,MAAMoC,SAAS;QAChCkB,UAAUtD,MAAMmB,EAAE;QAClBoC,QAAQzC,OAAOyC,MAAM;IACvB;IACA,IAAIH,iBAAiBvC,WAAWS,IAAI,CAAC8B;IACrC,IAAItC,OAAOG,MAAM,EAAEJ,WAAWS,IAAI,CAAC/B,GAAGS,MAAMiB,MAAM,EAAEH,OAAOG,MAAM;IAEjEL,wBAAwBC,YAAYC,QAAQkC,iBAAiBP,MAAM;IACnElB,oBAAoBV,YAAYC,OAAOU,MAAM;IAE7C,MAAMU,OAAO,MAAMF,SAChBG,MAAM,CAAC;QACNhB,IAAInB,MAAMmB,EAAE;QACZW,OAAO9B,MAAM8B,KAAK;QAClBD,MAAM7B,MAAM6B,IAAI;QAChBX,iBAAiBlB,MAAMkB,eAAe;QACtCD,QAAQjB,MAAMiB,MAAM;QACpBmB,WAAWpC,MAAMoC,SAAS;QAC1BoB,YAAYR,iBAAiBC,KAAK;IACpC,GACCV,IAAI,CAACvC,OACLwC,QAAQ,CAACQ,kBAAkBzD,GAAGyD,iBAAiBP,MAAM,EAAEzC,MAAMmB,EAAE,GAC/DwB,KAAK,CAACtD,OAAOwB,aACb4C,OAAO,CAACnE,KAAKU,MAAMoC,SAAS,GAAG9C,KAAKU,MAAMmB,EAAE,GAC5CuC,KAAK,CAAC5C,OAAO4C,KAAK,GAAG;IAExB,MAAMC,aAAazB,KAAK0B,GAAG,CACzB,CAAC,EAACJ,UAAU,EAAE,GAAGK,KAAI,GAAgC,CAAA;YACnD,GAAGA,GAAG;YACNxB,WAAWwB,IAAI5C,MAAM,KAAK,WAAWnB,iBAAiB0D,cAAc,EAAE,IAAI;QAC5E,CAAA;IAEF,MAAMM,OAAO3E,wBAAwB;QACnC+C,MAAMyB;QACND,OAAO5C,OAAO4C,KAAK;QACnBK,cAAc;IAChB;IAEA,OAAO;QAAC7B,MAAM4B,KAAKE,QAAQ;QAAEC,YAAYH,KAAKG,UAAU;IAAA;AAC1D"}

package/dist/db/admin-users.d.ts

@@ -1,4 +1,6 @@
+import type { TimestampIdCursor } from '@shipfox/node-drizzle';
 import type { AdministratorUserSummary } from '#core/entities/administrator-read-model.js';
+import { type ListAdministratorUserSummariesResult } from './admin-user-summary.js';
 export type AdministratorUserRecord = AdministratorUserSummary;
 type AdministratorUserLookup = {
     id: string;
@@ -8,5 +10,14 @@ type AdministratorUserLookup = {
     id?: never;
 };
 export declare function findAdministratorUser(params: AdministratorUserLookup): Promise<AdministratorUserRecord | undefined>;
+export interface ListAdministratorUsersParams {
+    actorId: string;
+    limit: number;
+    cursor?: TimestampIdCursor | undefined;
+    search?: string | undefined;
+    status?: AdministratorUserSummary['status'] | undefined;
+    eligible?: boolean | undefined;
+}
+export declare function listAdministratorUsers(params: ListAdministratorUsersParams): Promise<ListAdministratorUserSummariesResult>;
 export {};
 //# sourceMappingURL=admin-users.d.ts.map

package/dist/db/admin-users.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin-users.d.ts","sourceRoot":"","sources":["../../src/db/admin-users.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,wBAAwB,EAAC,MAAM,4CAA4C,CAAC;AAIzF,MAAM,MAAM,uBAAuB,GAAG,wBAAwB,CAAC;AAE/D,KAAK,uBAAuB,GAAG;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAA;CAAC,GAAG;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,KAAK,CAAA;CAAC,CAAC;AAEzF,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAE9C"}
+{"version":3,"file":"admin-users.d.ts","sourceRoot":"","sources":["../../src/db/admin-users.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,iBAAiB,EAAC,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAC,wBAAwB,EAAC,MAAM,4CAA4C,CAAC;AACzF,OAAO,EAEL,KAAK,oCAAoC,EAE1C,MAAM,yBAAyB,CAAC;AAGjC,MAAM,MAAM,uBAAuB,GAAG,wBAAwB,CAAC;AAE/D,KAAK,uBAAuB,GAAG;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAA;CAAC,GAAG;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,KAAK,CAAA;CAAC,CAAC;AAEzF,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAE9C;AAED,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACvC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,MAAM,CAAC,EAAE,wBAAwB,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC;IACxD,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAChC;AAED,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,4BAA4B,GACnC,OAAO,CAAC,oCAAoC,CAAC,CAE/C"}

package/dist/db/admin-users.js

@@ -1,7 +1,10 @@
-import { findAdministratorUserSummary } from './admin-user-summary.js';
+import { findAdministratorUserSummary, listAdministratorUserSummaries } from './admin-user-summary.js';
 import { db } from './db.js';
 export async function findAdministratorUser(params) {
     return await findAdministratorUserSummary(db(), params);
 }
+export async function listAdministratorUsers(params) {
+    return await listAdministratorUserSummaries(db(), params);
+}
 
 //# sourceMappingURL=admin-users.js.map

package/dist/db/admin-users.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/db/admin-users.ts"],"sourcesContent":["import type {AdministratorUserSummary} from '#core/entities/administrator-read-model.js';\nimport {findAdministratorUserSummary} from './admin-user-summary.js';\nimport {db} from './db.js';\n\nexport type AdministratorUserRecord = AdministratorUserSummary;\n\ntype AdministratorUserLookup = {id: string; email?: never} | {email: string; id?: never};\n\nexport async function findAdministratorUser(\n  params: AdministratorUserLookup,\n): Promise<AdministratorUserRecord | undefined> {\n  return await findAdministratorUserSummary(db(), params);\n}\n"],"names":["findAdministratorUserSummary","db","findAdministratorUser","params"],"mappings":"AACA,SAAQA,4BAA4B,QAAO,0BAA0B;AACrE,SAAQC,EAAE,QAAO,UAAU;AAM3B,OAAO,eAAeC,sBACpBC,MAA+B;IAE/B,OAAO,MAAMH,6BAA6BC,MAAME;AAClD"}
+{"version":3,"sources":["../../src/db/admin-users.ts"],"sourcesContent":["import type {TimestampIdCursor} from '@shipfox/node-drizzle';\nimport type {AdministratorUserSummary} from '#core/entities/administrator-read-model.js';\nimport {\n  findAdministratorUserSummary,\n  type ListAdministratorUserSummariesResult,\n  listAdministratorUserSummaries,\n} from './admin-user-summary.js';\nimport {db} from './db.js';\n\nexport type AdministratorUserRecord = AdministratorUserSummary;\n\ntype AdministratorUserLookup = {id: string; email?: never} | {email: string; id?: never};\n\nexport async function findAdministratorUser(\n  params: AdministratorUserLookup,\n): Promise<AdministratorUserRecord | undefined> {\n  return await findAdministratorUserSummary(db(), params);\n}\n\nexport interface ListAdministratorUsersParams {\n  actorId: string;\n  limit: number;\n  cursor?: TimestampIdCursor | undefined;\n  search?: string | undefined;\n  status?: AdministratorUserSummary['status'] | undefined;\n  eligible?: boolean | undefined;\n}\n\nexport async function listAdministratorUsers(\n  params: ListAdministratorUsersParams,\n): Promise<ListAdministratorUserSummariesResult> {\n  return await listAdministratorUserSummaries(db(), params);\n}\n"],"names":["findAdministratorUserSummary","listAdministratorUserSummaries","db","findAdministratorUser","params","listAdministratorUsers"],"mappings":"AAEA,SACEA,4BAA4B,EAE5BC,8BAA8B,QACzB,0BAA0B;AACjC,SAAQC,EAAE,QAAO,UAAU;AAM3B,OAAO,eAAeC,sBACpBC,MAA+B;IAE/B,OAAO,MAAMJ,6BAA6BE,MAAME;AAClD;AAWA,OAAO,eAAeC,uBACpBD,MAAoC;IAEpC,OAAO,MAAMH,+BAA+BC,MAAME;AACpD"}

package/dist/db/agent-access-retention.d.ts

@@ -0,0 +1,10 @@
+export declare const AGENT_AUTHORIZATION_RETENTION_DAYS = 1;
+export declare const AGENT_REFRESH_TOKEN_RETENTION_DAYS = 30;
+export declare const AGENT_GRANT_RETENTION_DAYS = 90;
+export declare const AGENT_PAT_RETENTION_DAYS = 90;
+export declare const AGENT_CLIENT_RETENTION_DAYS = 30;
+export declare const AGENT_ACCESS_RETENTION_BATCH_LIMIT = 200;
+export declare const AGENT_ACCESS_RETENTION_MAX_ITERATIONS = 1000;
+export declare const AGENT_ACCESS_RETENTION_TIME_BUDGET_MS: number;
+export declare const AGENT_ACCESS_RETENTION_TIMEOUT_MARGIN_MS = 1000;
+//# sourceMappingURL=agent-access-retention.d.ts.map

package/dist/db/agent-access-retention.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-access-retention.d.ts","sourceRoot":"","sources":["../../src/db/agent-access-retention.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,kCAAkC,IAAI,CAAC;AACpD,eAAO,MAAM,kCAAkC,KAAK,CAAC;AACrD,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAC7C,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAC3C,eAAO,MAAM,2BAA2B,KAAK,CAAC;AAE9C,eAAO,MAAM,kCAAkC,MAAM,CAAC;AACtD,eAAO,MAAM,qCAAqC,OAAQ,CAAC;AAC3D,eAAO,MAAM,qCAAqC,QAAa,CAAC;AAChE,eAAO,MAAM,wCAAwC,OAAQ,CAAC"}

package/dist/db/agent-access-retention.js

@@ -0,0 +1,11 @@
+export const AGENT_AUTHORIZATION_RETENTION_DAYS = 1;
+export const AGENT_REFRESH_TOKEN_RETENTION_DAYS = 30;
+export const AGENT_GRANT_RETENTION_DAYS = 90;
+export const AGENT_PAT_RETENTION_DAYS = 90;
+export const AGENT_CLIENT_RETENTION_DAYS = 30;
+export const AGENT_ACCESS_RETENTION_BATCH_LIMIT = 200;
+export const AGENT_ACCESS_RETENTION_MAX_ITERATIONS = 1_000;
+export const AGENT_ACCESS_RETENTION_TIME_BUDGET_MS = 4 * 60_000;
+export const AGENT_ACCESS_RETENTION_TIMEOUT_MARGIN_MS = 1_000;
+
+//# sourceMappingURL=agent-access-retention.js.map

package/dist/db/agent-access-retention.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/db/agent-access-retention.ts"],"sourcesContent":["export const AGENT_AUTHORIZATION_RETENTION_DAYS = 1;\nexport const AGENT_REFRESH_TOKEN_RETENTION_DAYS = 30;\nexport const AGENT_GRANT_RETENTION_DAYS = 90;\nexport const AGENT_PAT_RETENTION_DAYS = 90;\nexport const AGENT_CLIENT_RETENTION_DAYS = 30;\n\nexport const AGENT_ACCESS_RETENTION_BATCH_LIMIT = 200;\nexport const AGENT_ACCESS_RETENTION_MAX_ITERATIONS = 1_000;\nexport const AGENT_ACCESS_RETENTION_TIME_BUDGET_MS = 4 * 60_000;\nexport const AGENT_ACCESS_RETENTION_TIMEOUT_MARGIN_MS = 1_000;\n"],"names":["AGENT_AUTHORIZATION_RETENTION_DAYS","AGENT_REFRESH_TOKEN_RETENTION_DAYS","AGENT_GRANT_RETENTION_DAYS","AGENT_PAT_RETENTION_DAYS","AGENT_CLIENT_RETENTION_DAYS","AGENT_ACCESS_RETENTION_BATCH_LIMIT","AGENT_ACCESS_RETENTION_MAX_ITERATIONS","AGENT_ACCESS_RETENTION_TIME_BUDGET_MS","AGENT_ACCESS_RETENTION_TIMEOUT_MARGIN_MS"],"mappings":"AAAA,OAAO,MAAMA,qCAAqC,EAAE;AACpD,OAAO,MAAMC,qCAAqC,GAAG;AACrD,OAAO,MAAMC,6BAA6B,GAAG;AAC7C,OAAO,MAAMC,2BAA2B,GAAG;AAC3C,OAAO,MAAMC,8BAA8B,GAAG;AAE9C,OAAO,MAAMC,qCAAqC,IAAI;AACtD,OAAO,MAAMC,wCAAwC,MAAM;AAC3D,OAAO,MAAMC,wCAAwC,IAAI,OAAO;AAChE,OAAO,MAAMC,2CAA2C,MAAM"}