@techelusive/nest-auth 0.0.0-stage → 0.2.0

package/dist/features/admin/admin.dto.d.ts

@@ -0,0 +1,61 @@
+import { AccountStatus } from '../../constants.js';
+import type { JsonObject } from '../../database/entities/json-object.js';
+/** Query string of GET /auth/admin/users */
+export declare class SearchUsersQuery {
+    search?: string;
+    status?: AccountStatus;
+    role?: string;
+    page?: number;
+    pageSize?: number;
+}
+/** Query string of GET /auth/admin/audit-log */
+export declare class SearchAuditLogQuery {
+    userId?: string;
+    eventName?: string;
+    page?: number;
+    pageSize?: number;
+}
+/** Query string for paged lists (webhook deliveries). */
+export declare class PageQuery {
+    page?: number;
+    pageSize?: number;
+}
+/** PATCH /auth/admin/users/:userId */
+export declare class AdminUpdateUserInput {
+    firstName?: string;
+    lastName?: string;
+    metadata?: JsonObject;
+}
+/** PUT /auth/admin/users/:userId/roles */
+export declare class SetRolesInput {
+    roles: string[];
+}
+/** POST /auth/admin/users/:userId/suspend */
+export declare class SuspendUserInput {
+    /** Kept for support staff; not shown to the user. */
+    reason: string;
+}
+/** POST /auth/admin/api-keys */
+export declare class CreateApiKeyInput {
+    name: string;
+    /** What the key may do, e.g. ["rides:read"]. Your routes check them with @ApiKeyScopes(). */
+    scopes: string[];
+    organizationId?: string;
+    /** Optional expiry, ISO 8601, e.g. "2027-01-01T00:00:00Z". */
+    expiresAt?: string;
+}
+/** POST /auth/admin/webhooks */
+export declare class CreateWebhookInput {
+    url: string;
+    /** Events to receive, e.g. ["user.created"]. Leave empty for all events. */
+    eventNames?: string[];
+    description?: string;
+    isEnabled?: boolean;
+}
+/** PATCH /auth/admin/webhooks/:webhookId */
+export declare class UpdateWebhookInput {
+    url?: string;
+    eventNames?: string[];
+    description?: string;
+    isEnabled?: boolean;
+}

package/dist/features/admin/admin.dto.js

@@ -0,0 +1,253 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateWebhookInput = exports.CreateWebhookInput = exports.CreateApiKeyInput = exports.SuspendUserInput = exports.SetRolesInput = exports.AdminUpdateUserInput = exports.PageQuery = exports.SearchAuditLogQuery = exports.SearchUsersQuery = void 0;
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+const constants_1 = require("../../constants.js");
+/** Query string of GET /auth/admin/users */
+class SearchUsersQuery {
+    search;
+    status;
+    role;
+    page;
+    pageSize;
+}
+exports.SearchUsersQuery = SearchUsersQuery;
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(constants_1.DISPLAY_NAME_MAX_LENGTH),
+    __metadata("design:type", String)
+], SearchUsersQuery.prototype, "search", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsIn)(constants_1.ACCOUNT_STATUSES),
+    __metadata("design:type", String)
+], SearchUsersQuery.prototype, "status", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.Matches)(constants_1.ROLE_NAME_PATTERN),
+    __metadata("design:type", String)
+], SearchUsersQuery.prototype, "role", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_transformer_1.Type)(() => Number),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(1),
+    __metadata("design:type", Number)
+], SearchUsersQuery.prototype, "page", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_transformer_1.Type)(() => Number),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(1),
+    (0, class_validator_1.Max)(constants_1.MAXIMUM_PAGE_SIZE),
+    __metadata("design:type", Number)
+], SearchUsersQuery.prototype, "pageSize", void 0);
+/** Query string of GET /auth/admin/audit-log */
+class SearchAuditLogQuery {
+    userId;
+    eventName;
+    page;
+    pageSize;
+}
+exports.SearchAuditLogQuery = SearchAuditLogQuery;
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsUUID)(),
+    __metadata("design:type", String)
+], SearchAuditLogQuery.prototype, "userId", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(constants_1.DISPLAY_NAME_MAX_LENGTH),
+    __metadata("design:type", String)
+], SearchAuditLogQuery.prototype, "eventName", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_transformer_1.Type)(() => Number),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(1),
+    __metadata("design:type", Number)
+], SearchAuditLogQuery.prototype, "page", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_transformer_1.Type)(() => Number),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(1),
+    (0, class_validator_1.Max)(constants_1.MAXIMUM_PAGE_SIZE),
+    __metadata("design:type", Number)
+], SearchAuditLogQuery.prototype, "pageSize", void 0);
+/** Query string for paged lists (webhook deliveries). */
+class PageQuery {
+    page;
+    pageSize;
+}
+exports.PageQuery = PageQuery;
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_transformer_1.Type)(() => Number),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(1),
+    __metadata("design:type", Number)
+], PageQuery.prototype, "page", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_transformer_1.Type)(() => Number),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(1),
+    (0, class_validator_1.Max)(constants_1.MAXIMUM_PAGE_SIZE),
+    __metadata("design:type", Number)
+], PageQuery.prototype, "pageSize", void 0);
+/** PATCH /auth/admin/users/:userId */
+class AdminUpdateUserInput {
+    firstName;
+    lastName;
+    metadata;
+}
+exports.AdminUpdateUserInput = AdminUpdateUserInput;
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(constants_1.DISPLAY_NAME_MAX_LENGTH),
+    __metadata("design:type", String)
+], AdminUpdateUserInput.prototype, "firstName", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(constants_1.DISPLAY_NAME_MAX_LENGTH),
+    __metadata("design:type", String)
+], AdminUpdateUserInput.prototype, "lastName", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsObject)(),
+    __metadata("design:type", Object)
+], AdminUpdateUserInput.prototype, "metadata", void 0);
+/** PUT /auth/admin/users/:userId/roles */
+class SetRolesInput {
+    roles;
+}
+exports.SetRolesInput = SetRolesInput;
+__decorate([
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayMaxSize)(constants_1.MAXIMUM_ROLES_PER_USER),
+    (0, class_validator_1.IsString)({ each: true }),
+    (0, class_validator_1.Matches)(constants_1.ROLE_NAME_PATTERN, { each: true }),
+    __metadata("design:type", Array)
+], SetRolesInput.prototype, "roles", void 0);
+/** POST /auth/admin/users/:userId/suspend */
+class SuspendUserInput {
+    /** Kept for support staff; not shown to the user. */
+    reason;
+}
+exports.SuspendUserInput = SuspendUserInput;
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(constants_1.SUSPENSION_REASON_MAX_LENGTH),
+    __metadata("design:type", String)
+], SuspendUserInput.prototype, "reason", void 0);
+/** POST /auth/admin/api-keys */
+class CreateApiKeyInput {
+    name;
+    /** What the key may do, e.g. ["rides:read"]. Your routes check them with @ApiKeyScopes(). */
+    scopes;
+    organizationId;
+    /** Optional expiry, ISO 8601, e.g. "2027-01-01T00:00:00Z". */
+    expiresAt;
+}
+exports.CreateApiKeyInput = CreateApiKeyInput;
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(constants_1.API_KEY_NAME_MAX_LENGTH),
+    __metadata("design:type", String)
+], CreateApiKeyInput.prototype, "name", void 0);
+__decorate([
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayMaxSize)(constants_1.MAXIMUM_API_KEY_SCOPES),
+    (0, class_validator_1.IsString)({ each: true }),
+    (0, class_validator_1.Matches)(constants_1.API_KEY_SCOPE_PATTERN, { each: true }),
+    __metadata("design:type", Array)
+], CreateApiKeyInput.prototype, "scopes", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsUUID)(),
+    __metadata("design:type", String)
+], CreateApiKeyInput.prototype, "organizationId", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsDateString)(),
+    __metadata("design:type", String)
+], CreateApiKeyInput.prototype, "expiresAt", void 0);
+/** POST /auth/admin/webhooks */
+class CreateWebhookInput {
+    url;
+    /** Events to receive, e.g. ["user.created"]. Leave empty for all events. */
+    eventNames;
+    description;
+    isEnabled;
+}
+exports.CreateWebhookInput = CreateWebhookInput;
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(constants_1.WEBHOOK_URL_MAX_LENGTH),
+    __metadata("design:type", String)
+], CreateWebhookInput.prototype, "url", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.IsString)({ each: true }),
+    __metadata("design:type", Array)
+], CreateWebhookInput.prototype, "eventNames", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(constants_1.WEBHOOK_DESCRIPTION_MAX_LENGTH),
+    __metadata("design:type", String)
+], CreateWebhookInput.prototype, "description", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], CreateWebhookInput.prototype, "isEnabled", void 0);
+/** PATCH /auth/admin/webhooks/:webhookId */
+class UpdateWebhookInput {
+    url;
+    eventNames;
+    description;
+    isEnabled;
+}
+exports.UpdateWebhookInput = UpdateWebhookInput;
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(constants_1.WEBHOOK_URL_MAX_LENGTH),
+    __metadata("design:type", String)
+], UpdateWebhookInput.prototype, "url", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.IsString)({ each: true }),
+    __metadata("design:type", Array)
+], UpdateWebhookInput.prototype, "eventNames", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(constants_1.WEBHOOK_DESCRIPTION_MAX_LENGTH),
+    __metadata("design:type", String)
+], UpdateWebhookInput.prototype, "description", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], UpdateWebhookInput.prototype, "isEnabled", void 0);
+//# sourceMappingURL=admin.dto.js.map

package/dist/features/admin/admin.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.dto.js","sourceRoot":"","sources":["../../../src/features/admin/admin.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,yDAAyC;AACzC,qDAeyB;AACzB,2CAaqB;AAGrB,4CAA4C;AAC5C,MAAa,gBAAgB;IAE3B,MAAM,CAAU;IAGhB,MAAM,CAAiB;IAGvB,IAAI,CAAU;IAGd,IAAI,CAAU;IAGd,QAAQ,CAAU;CACnB;AAfD,4CAeC;AAbC;IADC,IAAA,4BAAU,GAAE;IAAE,IAAA,0BAAQ,GAAE;IAAE,IAAA,2BAAS,EAAC,mCAAuB,CAAC;;gDAC7C;AAGhB;IADC,IAAA,4BAAU,GAAE;IAAE,IAAA,sBAAI,EAAC,4BAAgB,CAAC;;gDACd;AAGvB;IADC,IAAA,4BAAU,GAAE;IAAE,IAAA,0BAAQ,GAAE;IAAE,IAAA,yBAAO,EAAC,6BAAiB,CAAC;;8CACvC;AAGd;IADC,IAAA,4BAAU,GAAE;IAAE,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAAE,IAAA,uBAAK,GAAE;IAAE,IAAA,qBAAG,EAAC,CAAC,CAAC;;8CACpC;AAGd;IADC,IAAA,4BAAU,GAAE;IAAE,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAAE,IAAA,uBAAK,GAAE;IAAE,IAAA,qBAAG,EAAC,CAAC,CAAC;IAAE,IAAA,qBAAG,EAAC,6BAAiB,CAAC;;kDACxD;AAGpB,gDAAgD;AAChD,MAAa,mBAAmB;IAE9B,MAAM,CAAU;IAGhB,SAAS,CAAU;IAGnB,IAAI,CAAU;IAGd,QAAQ,CAAU;CACnB;AAZD,kDAYC;AAVC;IADC,IAAA,4BAAU,GAAE;IAAE,IAAA,wBAAM,GAAE;;mDACP;AAGhB;IADC,IAAA,4BAAU,GAAE;IAAE,IAAA,0BAAQ,GAAE;IAAE,IAAA,2BAAS,EAAC,mCAAuB,CAAC;;sDAC1C;AAGnB;IADC,IAAA,4BAAU,GAAE;IAAE,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAAE,IAAA,uBAAK,GAAE;IAAE,IAAA,qBAAG,EAAC,CAAC,CAAC;;iDACpC;AAGd;IADC,IAAA,4BAAU,GAAE;IAAE,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAAE,IAAA,uBAAK,GAAE;IAAE,IAAA,qBAAG,EAAC,CAAC,CAAC;IAAE,IAAA,qBAAG,EAAC,6BAAiB,CAAC;;qDACxD;AAGpB,yDAAyD;AACzD,MAAa,SAAS;IAEpB,IAAI,CAAU;IAGd,QAAQ,CAAU;CACnB;AAND,8BAMC;AAJC;IADC,IAAA,4BAAU,GAAE;IAAE,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAAE,IAAA,uBAAK,GAAE;IAAE,IAAA,qBAAG,EAAC,CAAC,CAAC;;uCACpC;AAGd;IADC,IAAA,4BAAU,GAAE;IAAE,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAAE,IAAA,uBAAK,GAAE;IAAE,IAAA,qBAAG,EAAC,CAAC,CAAC;IAAE,IAAA,qBAAG,EAAC,6BAAiB,CAAC;;2CACxD;AAGpB,sCAAsC;AACtC,MAAa,oBAAoB;IAE/B,SAAS,CAAU;IAGnB,QAAQ,CAAU;IAGlB,QAAQ,CAAc;CACvB;AATD,oDASC;AAPC;IADC,IAAA,4BAAU,GAAE;IAAE,IAAA,0BAAQ,GAAE;IAAE,IAAA,2BAAS,EAAC,mCAAuB,CAAC;;uDAC1C;AAGnB;IADC,IAAA,4BAAU,GAAE;IAAE,IAAA,0BAAQ,GAAE;IAAE,IAAA,2BAAS,EAAC,mCAAuB,CAAC;;sDAC3C;AAGlB;IADC,IAAA,4BAAU,GAAE;IAAE,IAAA,0BAAQ,GAAE;;sDACH;AAGxB,0CAA0C;AAC1C,MAAa,aAAa;IAExB,KAAK,CAAW;CACjB;AAHD,sCAGC;AADC;IADC,IAAA,yBAAO,GAAE;IAAE,IAAA,8BAAY,EAAC,kCAAsB,CAAC;IAAE,IAAA,0BAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAAE,IAAA,yBAAO,EAAC,6BAAiB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;4CACtG;AAGlB,6CAA6C;AAC7C,MAAa,gBAAgB;IAC3B,qDAAqD;IAErD,MAAM,CAAS;CAChB;AAJD,4CAIC;AADC;IADC,IAAA,0BAAQ,GAAE;IAAE,IAAA,2BAAS,EAAC,wCAA4B,CAAC;;gDACrC;AAGjB,gCAAgC;AAChC,MAAa,iBAAiB;IAE5B,IAAI,CAAS;IAEb,6FAA6F;IAE7F,MAAM,CAAW;IAGjB,cAAc,CAAU;IAExB,8DAA8D;IAE9D,SAAS,CAAU;CACpB;AAdD,8CAcC;AAZC;IADC,IAAA,0BAAQ,GAAE;IAAE,IAAA,2BAAS,EAAC,mCAAuB,CAAC;;+CAClC;AAIb;IADC,IAAA,yBAAO,GAAE;IAAE,IAAA,8BAAY,EAAC,kCAAsB,CAAC;IAAE,IAAA,0BAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAAE,IAAA,yBAAO,EAAC,iCAAqB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;iDACzG;AAGjB;IADC,IAAA,4BAAU,GAAE;IAAE,IAAA,wBAAM,GAAE;;yDACC;AAIxB;IADC,IAAA,4BAAU,GAAE;IAAE,IAAA,8BAAY,GAAE;;oDACV;AAGrB,gCAAgC;AAChC,MAAa,kBAAkB;IAE7B,GAAG,CAAS;IAEZ,4EAA4E;IAE5E,UAAU,CAAY;IAGtB,WAAW,CAAU;IAGrB,SAAS,CAAW;CACrB;AAbD,gDAaC;AAXC;IADC,IAAA,0BAAQ,GAAE;IAAE,IAAA,2BAAS,EAAC,kCAAsB,CAAC;;+CAClC;AAIZ;IADC,IAAA,4BAAU,GAAE;IAAE,IAAA,yBAAO,GAAE;IAAE,IAAA,0BAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;sDAC5B;AAGtB;IADC,IAAA,4BAAU,GAAE;IAAE,IAAA,0BAAQ,GAAE;IAAE,IAAA,2BAAS,EAAC,0CAA8B,CAAC;;uDAC/C;AAGrB;IADC,IAAA,4BAAU,GAAE;IAAE,IAAA,2BAAS,GAAE;;qDACN;AAGtB,4CAA4C;AAC5C,MAAa,kBAAkB;IAE7B,GAAG,CAAU;IAGb,UAAU,CAAY;IAGtB,WAAW,CAAU;IAGrB,SAAS,CAAW;CACrB;AAZD,gDAYC;AAVC;IADC,IAAA,4BAAU,GAAE;IAAE,IAAA,0BAAQ,GAAE;IAAE,IAAA,2BAAS,EAAC,kCAAsB,CAAC;;+CAC/C;AAGb;IADC,IAAA,4BAAU,GAAE;IAAE,IAAA,yBAAO,GAAE;IAAE,IAAA,0BAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;sDAC5B;AAGtB;IADC,IAAA,4BAAU,GAAE;IAAE,IAAA,0BAAQ,GAAE;IAAE,IAAA,2BAAS,EAAC,0CAA8B,CAAC;;uDAC/C;AAGrB;IADC,IAAA,4BAAU,GAAE;IAAE,IAAA,2BAAS,GAAE;;qDACN"}

package/dist/features/admin/admin.service.d.ts

@@ -0,0 +1,142 @@
+import { AuthOptions } from '../../auth-options.js';
+import { RequestContext } from '../../common/request-context.js';
+import { AccountStatus } from '../../constants.js';
+import { AuditLogEntity } from '../../database/entities/index.js';
+import { AuthEventsService } from '../events/auth-events.service.js';
+import { SessionService } from '../sessions/session.service.js';
+import { SettingsService } from '../settings/settings.service.js';
+import { AuthSettings, SettingsChanges } from '../settings/settings.types.js';
+import { SignInMethodsService } from '../users/sign-in-methods.service.js';
+import { UsersService } from '../users/users.service.js';
+export interface UserSearch {
+    /** Matches email, phone number, first or last name (partial, case-insensitive). */
+    search?: string;
+    status?: AccountStatus;
+    role?: string;
+    page?: number;
+    pageSize?: number;
+}
+export interface AuditLogSearch {
+    userId?: string;
+    eventName?: string;
+    page?: number;
+    pageSize?: number;
+}
+/** Read-heavy admin operations. Changes to a single user go through UsersService, so the rules stay in one place. */
+export declare class AdminService {
+    private readonly settingsService;
+    private readonly users;
+    private readonly sessions;
+    private readonly signInMethods;
+    private readonly events;
+    private readonly database;
+    constructor(options: AuthOptions, settingsService: SettingsService, users: UsersService, sessions: SessionService, signInMethods: SignInMethodsService, events: AuthEventsService);
+    /**
+     * Paged user list with search and filters. Deleted accounts are excluded unless asked for
+     * with `status: "DELETED"`.
+     *
+     * @param filters - Search text, status, role, page and page size.
+     * @returns One page of public profiles, plus the total number of matches.
+     */
+    searchUsers(filters: UserSearch): Promise<{
+        success: true;
+        users: import("../..").PublicUserProfile[];
+        total: number;
+        page: number;
+        pageSize: number;
+    }>;
+    /**
+     * Everything support staff need about one user: profile, suspension reason, sign-in methods, devices.
+     *
+     * @param userId - The user.
+     * @returns The profile and the extra details.
+     * @throws AuthError NOT_FOUND when the user doesn't exist.
+     */
+    getUserDetails(userId: string): Promise<{
+        success: true;
+        user: import("../..").PublicUserProfile;
+        suspensionReason: string | null;
+        statusChangedAt: string | null;
+        termsAcceptedAt: string | null;
+        privacyPolicyAcceptedAt: string | null;
+        signInMethods: import("../users/sign-in-methods.service.js").UserSignInMethods;
+        sessions: {
+            id: string;
+            signInMethod: string;
+            ipAddress: string | null;
+            userAgent: string | null;
+            createdAt: string;
+            lastUsedAt: string;
+        }[];
+    }>;
+    /**
+     * Paged security history, newest first.
+     *
+     * @param filters - Optional user id and event name, plus page and page size.
+     * @returns One page of audit log entries, plus the total number of matches.
+     */
+    searchAuditLog(filters: AuditLogSearch): Promise<{
+        success: true;
+        entries: AuditLogEntity[];
+        total: number;
+        page: number;
+        pageSize: number;
+    }>;
+    /**
+     * @returns The settings in force: the code settings with any admin changes on top.
+     */
+    getSettings(): Promise<{
+        success: true;
+        settings: AuthSettings;
+    }>;
+    /**
+     * Saves admin changes on top of the code settings. Takes effect on every server within seconds.
+     *
+     * @param changes - Only the sections and fields to change.
+     * @param adminUserId - The admin doing it (for the audit log).
+     * @param request - Who is asking.
+     * @returns The settings now in force.
+     * @throws AuthError INVALID_SETTINGS when a value is not allowed.
+     */
+    changeSettings(changes: SettingsChanges, adminUserId: string, request: RequestContext): Promise<{
+        success: true;
+        settings: AuthSettings;
+    }>;
+    /**
+     * Throws away all admin changes, back to the settings in code.
+     *
+     * @param adminUserId - The admin doing it (for the audit log).
+     * @param request - Who is asking.
+     * @returns The settings now in force.
+     */
+    resetSettings(adminUserId: string, request: RequestContext): Promise<{
+        success: true;
+        settings: AuthSettings;
+    }>;
+    /**
+     * Numbers for an admin dashboard or monitoring: accounts by status, signed-in devices, and what
+     * happened in the last 24 hours (from the audit log, so it covers every server).
+     *
+     * @returns The counts and when they were generated.
+     */
+    getStats(): Promise<{
+        success: true;
+        usersByStatus: {
+            [k: string]: number;
+        };
+        activeSessions: number;
+        last24Hours: {
+            [k: string]: number;
+        };
+        pendingWebhookDeliveries: number;
+        generatedAt: string;
+    }>;
+    /**
+     * Turns the requested page and page size into safe values (at least 1, at most MAXIMUM_PAGE_SIZE).
+     *
+     * @param requestedPage - 1-based page number.
+     * @param requestedPageSize - Rows per page.
+     * @returns The clean page, page size, and how many rows to skip.
+     */
+    private paging;
+}