@things-factory/auth-base 10.1.215 → 10.1.218

package/dist-server/service/invitation/invitation-query.js

@@ -1,89 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.InvitationQuery = void 0;
-const tslib_1 = require("tslib");
-const type_graphql_1 = require("type-graphql");
-const shell_1 = require("@things-factory/shell");
-const invitation_state_js_1 = require("../../utils/invitation-state.js");
-const invitation_js_1 = require("./invitation.js");
-const invitation_types_js_1 = require("./invitation-types.js");
-/*
- * ── What changed here, and why ──────────────────────────────────────────────
- * These read by `{ email, reference, type }` and took no domain at all — `invitations` did not
- * even take a context, so there was nothing to compare a caller against. An id from one tenant
- * and an id from another were the same kind of argument.
- *
- * They are the invitation **list** now: this domain's invitations, scoped the way every other
- * list in this package is scoped. `reference` is not read; the domain is a column.
- */
-const GATE = '@privilege(category: "user", privilege: "query", domainOwnerGranted: true, superUserGranted: true)';
-let InvitationQuery = class InvitationQuery {
-    async invitation(id, context) {
-        const { domain } = context.state;
-        return await (0, shell_1.getRepository)(invitation_js_1.Invitation).findOne({
-            where: { id, domain: { id: domain.id } },
-            relations: ['domain', 'roles']
-        });
-    }
-    /**
-     * Who was invited to this domain, by whom, when, and whether they came in.
-     *
-     * ⚠ This is why the rows are kept. Accepting used to delete the row, so the moment somebody
-     * joined, the fact that they had been invited stopped existing — there was nothing to put on a
-     * screen, so no screen was built, so nothing called any of this.
-     */
-    async invitations(params, context) {
-        const { domain } = context.state;
-        const queryBuilder = (0, shell_1.getQueryBuilderFromListParams)({
-            domain,
-            // this domain's rows only - a parent domain's are another tenant's, whatever `inherited` the caller sent
-            params: { ...params, inherited: shell_1.InheritedValueType.None },
-            repository: (0, shell_1.getRepository)(invitation_js_1.Invitation),
-            alias: 'invitation',
-            searchables: ['email']
-        });
-        const [items, total] = await queryBuilder.getManyAndCount();
-        return { items, total };
-    }
-    /**
-     * What state this invitation is in, read against the clock.
-     *
-     * ⚠ Not the stored column on its own. A pending row whose expiry has passed **is** expired
-     * whether or not anything has been round to write that down — otherwise the list would show a
-     * live invitation for a token that no longer opens anything, which is the more dangerous of
-     * the two ways to be wrong here.
-     */
-    async state(invitation) {
-        return (0, invitation_state_js_1.invitationState)(invitation);
-    }
-};
-exports.InvitationQuery = InvitationQuery;
-tslib_1.__decorate([
-    (0, type_graphql_1.Directive)(GATE),
-    (0, type_graphql_1.Query)(returns => invitation_js_1.Invitation, { nullable: true, description: 'To fetch an invitation of this domain' }),
-    tslib_1.__param(0, (0, type_graphql_1.Arg)('id')),
-    tslib_1.__param(1, (0, type_graphql_1.Ctx)()),
-    tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, Object]),
-    tslib_1.__metadata("design:returntype", Promise)
-], InvitationQuery.prototype, "invitation", null);
-tslib_1.__decorate([
-    (0, type_graphql_1.Directive)(GATE),
-    (0, type_graphql_1.Query)(returns => invitation_types_js_1.InvitationList, { description: "To fetch this domain's invitations" }),
-    tslib_1.__param(0, (0, type_graphql_1.Args)(type => shell_1.ListParam)),
-    tslib_1.__param(1, (0, type_graphql_1.Ctx)()),
-    tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [shell_1.ListParam, Object]),
-    tslib_1.__metadata("design:returntype", Promise)
-], InvitationQuery.prototype, "invitations", null);
-tslib_1.__decorate([
-    (0, type_graphql_1.FieldResolver)(type => String),
-    tslib_1.__param(0, (0, type_graphql_1.Root)()),
-    tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [invitation_js_1.Invitation]),
-    tslib_1.__metadata("design:returntype", Promise)
-], InvitationQuery.prototype, "state", null);
-exports.InvitationQuery = InvitationQuery = tslib_1.__decorate([
-    (0, type_graphql_1.Resolver)(invitation_js_1.Invitation)
-], InvitationQuery);
-//# sourceMappingURL=invitation-query.js.map

package/dist-server/service/invitation/invitation-query.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"invitation-query.js","sourceRoot":"","sources":["../../../server/service/invitation/invitation-query.ts"],"names":[],"mappings":";;;;AAAA,+CAA8F;AAE9F,iDAAmH;AAEnH,yEAAiE;AACjE,mDAA4C;AAC5C,+DAAsD;AAEtD;;;;;;;;GAQG;AACH,MAAM,IAAI,GAAG,oGAAoG,CAAA;AAG1G,IAAM,eAAe,GAArB,MAAM,eAAe;IAGpB,AAAN,KAAK,CAAC,UAAU,CAAY,EAAU,EAAS,OAAwB;QACrE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;QAEhC,OAAO,MAAM,IAAA,qBAAa,EAAC,0BAAU,CAAC,CAAC,OAAO,CAAC;YAC7C,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE;YACxC,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;SAC/B,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;OAMG;IAGG,AAAN,KAAK,CAAC,WAAW,CACU,MAAiB,EACnC,OAAwB;QAE/B,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;QAEhC,MAAM,YAAY,GAAG,IAAA,qCAA6B,EAAC;YACjD,MAAM;YACN,yGAAyG;YACzG,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,0BAAkB,CAAC,IAAI,EAAE;YACzD,UAAU,EAAE,IAAA,qBAAa,EAAC,0BAAU,CAAC;YACrC,KAAK,EAAE,YAAY;YACnB,WAAW,EAAE,CAAC,OAAO,CAAC;SACvB,CAAC,CAAA;QAEF,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,MAAM,YAAY,CAAC,eAAe,EAAE,CAAA;QAE3D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;IACzB,CAAC;IAED;;;;;;;OAOG;IAEG,AAAN,KAAK,CAAC,KAAK,CAAS,UAAsB;QACxC,OAAO,IAAA,qCAAe,EAAC,UAAU,CAAC,CAAA;IACpC,CAAC;CACF,CAAA;AArDY,0CAAe;AAGpB;IAFL,IAAA,wBAAS,EAAC,IAAI,CAAC;IACf,IAAA,oBAAK,EAAC,OAAO,CAAC,EAAE,CAAC,0BAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,uCAAuC,EAAE,CAAC;IACrF,mBAAA,IAAA,kBAAG,EAAC,IAAI,CAAC,CAAA;IAAc,mBAAA,IAAA,kBAAG,GAAE,CAAA;;;;iDAO7C;AAWK;IAFL,IAAA,wBAAS,EAAC,IAAI,CAAC;IACf,IAAA,oBAAK,EAAC,OAAO,CAAC,EAAE,CAAC,oCAAc,EAAE,EAAE,WAAW,EAAE,oCAAoC,EAAE,CAAC;IAErF,mBAAA,IAAA,mBAAI,EAAC,IAAI,CAAC,EAAE,CAAC,iBAAS,CAAC,CAAA;IACvB,mBAAA,IAAA,kBAAG,GAAE,CAAA;;6CAD2B,iBAAS;;kDAiB3C;AAWK;IADL,IAAA,4BAAa,EAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC;IACjB,mBAAA,IAAA,mBAAI,GAAE,CAAA;;6CAAa,0BAAU;;4CAEzC;0BApDU,eAAe;IAD3B,IAAA,uBAAQ,EAAC,0BAAU,CAAC;GACR,eAAe,CAqD3B","sourcesContent":["import { Arg, Args, Ctx, Directive, FieldResolver, Query, Resolver, Root } from 'type-graphql'\n\nimport { getQueryBuilderFromListParams, InheritedValueType, getRepository, ListParam } from '@things-factory/shell'\n\nimport { invitationState } from '../../utils/invitation-state.js'\nimport { Invitation } from './invitation.js'\nimport { InvitationList } from './invitation-types.js'\n\n/*\n * ── What changed here, and why ──────────────────────────────────────────────\n * These read by `{ email, reference, type }` and took no domain at all — `invitations` did not\n * even take a context, so there was nothing to compare a caller against. An id from one tenant\n * and an id from another were the same kind of argument.\n *\n * They are the invitation **list** now: this domain's invitations, scoped the way every other\n * list in this package is scoped. `reference` is not read; the domain is a column.\n */\nconst GATE = '@privilege(category: \"user\", privilege: \"query\", domainOwnerGranted: true, superUserGranted: true)'\n\n@Resolver(Invitation)\nexport class InvitationQuery {\n  @Directive(GATE)\n  @Query(returns => Invitation, { nullable: true, description: 'To fetch an invitation of this domain' })\n  async invitation(@Arg('id') id: string, @Ctx() context: ResolverContext): Promise<Invitation> {\n    const { domain } = context.state\n\n    return await getRepository(Invitation).findOne({\n      where: { id, domain: { id: domain.id } },\n      relations: ['domain', 'roles']\n    })\n  }\n\n  /**\n   * Who was invited to this domain, by whom, when, and whether they came in.\n   *\n   * ⚠ This is why the rows are kept. Accepting used to delete the row, so the moment somebody\n   * joined, the fact that they had been invited stopped existing — there was nothing to put on a\n   * screen, so no screen was built, so nothing called any of this.\n   */\n  @Directive(GATE)\n  @Query(returns => InvitationList, { description: \"To fetch this domain's invitations\" })\n  async invitations(\n    @Args(type => ListParam) params: ListParam,\n    @Ctx() context: ResolverContext\n  ): Promise<InvitationList> {\n    const { domain } = context.state\n\n    const queryBuilder = getQueryBuilderFromListParams({\n      domain,\n      // this domain's rows only - a parent domain's are another tenant's, whatever `inherited` the caller sent\n      params: { ...params, inherited: InheritedValueType.None },\n      repository: getRepository(Invitation),\n      alias: 'invitation',\n      searchables: ['email']\n    })\n\n    const [items, total] = await queryBuilder.getManyAndCount()\n\n    return { items, total }\n  }\n\n  /**\n   * What state this invitation is in, read against the clock.\n   *\n   * ⚠ Not the stored column on its own. A pending row whose expiry has passed **is** expired\n   * whether or not anything has been round to write that down — otherwise the list would show a\n   * live invitation for a token that no longer opens anything, which is the more dangerous of\n   * the two ways to be wrong here.\n   */\n  @FieldResolver(type => String)\n  async state(@Root() invitation: Invitation): Promise<string> {\n    return invitationState(invitation)\n  }\n}\n"]}

package/dist-server/service/invitation/invitation-types.d.ts

@@ -1,5 +0,0 @@
-import { Invitation } from './invitation.js';
-export declare class InvitationList {
-    items: Invitation[];
-    total: number;
-}

package/dist-server/service/invitation/invitation-types.js

@@ -1,21 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.InvitationList = void 0;
-const tslib_1 = require("tslib");
-const invitation_js_1 = require("./invitation.js");
-const type_graphql_1 = require("type-graphql");
-let InvitationList = class InvitationList {
-};
-exports.InvitationList = InvitationList;
-tslib_1.__decorate([
-    (0, type_graphql_1.Field)(type => [invitation_js_1.Invitation], { nullable: true, description: 'The list of invitation items.' }),
-    tslib_1.__metadata("design:type", Array)
-], InvitationList.prototype, "items", void 0);
-tslib_1.__decorate([
-    (0, type_graphql_1.Field)(type => type_graphql_1.Int, { nullable: true, description: 'The total number of invitations.' }),
-    tslib_1.__metadata("design:type", Number)
-], InvitationList.prototype, "total", void 0);
-exports.InvitationList = InvitationList = tslib_1.__decorate([
-    (0, type_graphql_1.ObjectType)({ description: 'A paginated list of invitations.' })
-], InvitationList);
-//# sourceMappingURL=invitation-types.js.map

package/dist-server/service/invitation/invitation-types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"invitation-types.js","sourceRoot":"","sources":["../../../server/service/invitation/invitation-types.ts"],"names":[],"mappings":";;;;AAAA,mDAA4C;AAC5C,+CAAqD;AAG9C,IAAM,cAAc,GAApB,MAAM,cAAc;CAM1B,CAAA;AANY,wCAAc;AAEzB;IADC,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC,0BAAU,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,+BAA+B,EAAE,CAAC;;6CAC3E;AAGnB;IADC,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,kBAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;;6CAC3E;yBALF,cAAc;IAD1B,IAAA,yBAAU,EAAC,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;GACnD,cAAc,CAM1B","sourcesContent":["import { Invitation } from './invitation.js'\nimport { ObjectType, Field, Int } from 'type-graphql'\n\n@ObjectType({ description: 'A paginated list of invitations.' })\nexport class InvitationList {\n  @Field(type => [Invitation], { nullable: true, description: 'The list of invitation items.' })\n  items: Invitation[]\n\n  @Field(type => Int, { nullable: true, description: 'The total number of invitations.' })\n  total: number\n}\n"]}

package/dist-server/service/invitation/invitation.d.ts

@@ -1,26 +0,0 @@
-import { Domain } from '@things-factory/shell';
-import { Role } from '../role/role.js';
-import { User } from '../user/user.js';
-import { InvitationStatus } from '../../utils/invitation-state.js';
-export declare class Invitation {
-    readonly id: string;
-    email: string;
-    domain: Domain;
-    domainId: string;
-    /** ⚠ Superseded by `domain`. Kept nullable for rows written before that column existed. */
-    reference?: string;
-    /** ⚠ Superseded by `domain`. Kept nullable for rows written before that column existed. */
-    type?: string;
-    roles?: Role[];
-    status: InvitationStatus;
-    expiresAt?: Date;
-    acceptedAt?: Date;
-    token: string;
-    state?: string;
-    createdAt: Date;
-    updatedAt: Date;
-    creator: User;
-    creatorId: string;
-    updater: User;
-    updaterId: string;
-}

package/dist-server/service/invitation/invitation.js

@@ -1,142 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Invitation = void 0;
-const tslib_1 = require("tslib");
-const typeorm_1 = require("typeorm");
-const type_graphql_1 = require("type-graphql");
-const graphql_scalars_1 = require("graphql-scalars");
-const env_1 = require("@things-factory/env");
-const shell_1 = require("@things-factory/shell");
-const role_js_1 = require("../role/role.js");
-const user_js_1 = require("../user/user.js");
-const invitation_state_js_1 = require("../../utils/invitation-state.js");
-const ORMCONFIG = env_1.config.get('ormconfig', {});
-const DATABASE_TYPE = ORMCONFIG.type;
-/*
- * ── Why there is no unique index on (domain, email) ─────────────────────────
- * There was one on `(email, reference, type)`, which meant a person could be invited to a
- * domain **once, ever**. That was consistent with a table whose rows were deleted on accept —
- * it held pending invitations and nothing else. Now the rows stay, so "invited last year, left,
- * invited again" has to be expressible, and a unique constraint across the history forbids it.
- *
- * What still has to hold is **at most one pending invitation** per person and domain. A partial
- * unique index would say that, and partial indexes are not portable across the databases this
- * framework supports (`reference_typeorm_column_type_portability`). So it is enforced where the
- * invitation is created, inside the same transaction, and the index below is for reading the
- * list.
- */
-let Invitation = class Invitation {
-};
-exports.Invitation = Invitation;
-tslib_1.__decorate([
-    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
-    (0, type_graphql_1.Field)(type => type_graphql_1.ID, { description: 'Unique identifier for the invitation.' }),
-    tslib_1.__metadata("design:type", String)
-], Invitation.prototype, "id", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)(),
-    (0, type_graphql_1.Field)(type => graphql_scalars_1.GraphQLEmailAddress, { description: 'The email address to which the invitation is sent.' }),
-    tslib_1.__metadata("design:type", String)
-], Invitation.prototype, "email", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.ManyToOne)(type => shell_1.Domain),
-    (0, type_graphql_1.Field)(type => shell_1.Domain, { description: 'The domain the user is invited to join.' }),
-    tslib_1.__metadata("design:type", shell_1.Domain)
-], Invitation.prototype, "domain", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.RelationId)((invitation) => invitation.domain),
-    tslib_1.__metadata("design:type", String)
-], Invitation.prototype, "domainId", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)({ nullable: true }),
-    (0, type_graphql_1.Field)({ nullable: true, description: 'Deprecated. The domain the invitation is to is `domain`.' }),
-    tslib_1.__metadata("design:type", String)
-], Invitation.prototype, "reference", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)({ nullable: true }),
-    (0, type_graphql_1.Field)({ nullable: true, description: 'Deprecated. See `reference`.' }),
-    tslib_1.__metadata("design:type", String)
-], Invitation.prototype, "type", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.ManyToMany)(type => role_js_1.Role),
-    (0, typeorm_1.JoinTable)({ name: 'invitations_roles' }),
-    (0, type_graphql_1.Field)(type => [role_js_1.Role], { nullable: true, description: 'Roles to grant when the invitation is accepted.' }),
-    tslib_1.__metadata("design:type", Array)
-], Invitation.prototype, "roles", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)({
-        type: DATABASE_TYPE == 'postgres' || DATABASE_TYPE == 'mysql' || DATABASE_TYPE == 'mariadb'
-            ? 'enum'
-            : DATABASE_TYPE == 'oracle'
-                ? 'varchar2'
-                : DATABASE_TYPE == 'mssql'
-                    ? 'nvarchar'
-                    : 'varchar',
-        enum: DATABASE_TYPE == 'postgres' || DATABASE_TYPE == 'mysql' || DATABASE_TYPE == 'mariadb'
-            ? invitation_state_js_1.InvitationStatus
-            : undefined,
-        length: DATABASE_TYPE == 'postgres' || DATABASE_TYPE == 'mysql' || DATABASE_TYPE == 'mariadb' ? undefined : 32,
-        default: invitation_state_js_1.InvitationStatus.PENDING
-    }),
-    (0, type_graphql_1.Field)(type => String, { description: 'pending, accepted, cancelled or expired.' }),
-    tslib_1.__metadata("design:type", String)
-], Invitation.prototype, "status", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)({ nullable: true }),
-    (0, type_graphql_1.Field)({ nullable: true, description: 'When this invitation stops being acceptable.' }),
-    tslib_1.__metadata("design:type", Date)
-], Invitation.prototype, "expiresAt", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)({ nullable: true }),
-    (0, type_graphql_1.Field)({ nullable: true, description: 'When the invitation was accepted.' }),
-    tslib_1.__metadata("design:type", Date
-    /*
-     * ⚠ Never returned to a client. The token is what opens the door, and an invitation list is a
-     * screen an administrator reads — printing it there would hand every pending invitation to
-     * whoever can see the list. `invitation-query.ts` does not resolve it.
-     */
-    )
-], Invitation.prototype, "acceptedAt", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.Column)(),
-    tslib_1.__metadata("design:type", String)
-], Invitation.prototype, "token", void 0);
-tslib_1.__decorate([
-    (0, type_graphql_1.Field)({ nullable: true, description: 'pending, accepted, cancelled or expired — read as of now.' }),
-    tslib_1.__metadata("design:type", String)
-], Invitation.prototype, "state", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.CreateDateColumn)({ nullable: true }),
-    (0, type_graphql_1.Field)({ nullable: true, description: 'The timestamp when the invitation was created.' }),
-    tslib_1.__metadata("design:type", Date)
-], Invitation.prototype, "createdAt", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.UpdateDateColumn)({ nullable: true }),
-    (0, type_graphql_1.Field)({ nullable: true, description: 'The timestamp when the invitation was last updated.' }),
-    tslib_1.__metadata("design:type", Date)
-], Invitation.prototype, "updatedAt", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.ManyToOne)(type => user_js_1.User, { nullable: true }),
-    (0, type_graphql_1.Field)({ nullable: true, description: 'The user who created the invitation.' }),
-    tslib_1.__metadata("design:type", user_js_1.User)
-], Invitation.prototype, "creator", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.RelationId)((invitation) => invitation.creator),
-    tslib_1.__metadata("design:type", String)
-], Invitation.prototype, "creatorId", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.ManyToOne)(type => user_js_1.User, { nullable: true }),
-    (0, type_graphql_1.Field)({ nullable: true, description: 'The user who last updated the invitation.' }),
-    tslib_1.__metadata("design:type", user_js_1.User)
-], Invitation.prototype, "updater", void 0);
-tslib_1.__decorate([
-    (0, typeorm_1.RelationId)((invitation) => invitation.updater),
-    tslib_1.__metadata("design:type", String)
-], Invitation.prototype, "updaterId", void 0);
-exports.Invitation = Invitation = tslib_1.__decorate([
-    (0, typeorm_1.Entity)(),
-    (0, typeorm_1.Index)('ix_invitation_0', (invitation) => [invitation.domain, invitation.email]),
-    (0, typeorm_1.Index)('ix_invitation_1', (invitation) => [invitation.token], { unique: true }),
-    (0, type_graphql_1.ObjectType)({ description: 'Represents an invitation for a user to join a system or a specific resource.' })
-], Invitation);
-//# sourceMappingURL=invitation.js.map

package/dist-server/service/invitation/invitation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"invitation.js","sourceRoot":"","sources":["../../../server/service/invitation/invitation.ts"],"names":[],"mappings":";;;;AAAA,qCAWgB;AAChB,+CAAoD;AACpD,qDAAqD;AACrD,6CAA4C;AAC5C,iDAA8C;AAE9C,6CAAsC;AACtC,6CAAsC;AACtC,yEAAkE;AAElE,MAAM,SAAS,GAAG,YAAM,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;AAC7C,MAAM,aAAa,GAAG,SAAS,CAAC,IAAI,CAAA;AAEpC;;;;;;;;;;;;GAYG;AAKI,IAAM,UAAU,GAAhB,MAAM,UAAU;CA+GtB,CAAA;AA/GY,gCAAU;AAGZ;IAFR,IAAA,gCAAsB,EAAC,MAAM,CAAC;IAC9B,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,iBAAE,EAAE,EAAE,WAAW,EAAE,uCAAuC,EAAE,CAAC;;sCACzD;AAInB;IAFC,IAAA,gBAAM,GAAE;IACR,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,qCAAmB,EAAE,EAAE,WAAW,EAAE,oDAAoD,EAAE,CAAC;;yCAC7F;AAab;IAFC,IAAA,mBAAS,EAAC,IAAI,CAAC,EAAE,CAAC,cAAM,CAAC;IACzB,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,cAAM,EAAE,EAAE,WAAW,EAAE,yCAAyC,EAAE,CAAC;sCAC1E,cAAM;0CAAA;AAGd;IADC,IAAA,oBAAU,EAAC,CAAC,UAAsB,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;;4CAC1C;AAKhB;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,0DAA0D,EAAE,CAAC;;6CACjF;AAKlB;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,8BAA8B,EAAE,CAAC;;wCAC1D;AAYb;IAHC,IAAA,oBAAU,EAAC,IAAI,CAAC,EAAE,CAAC,cAAI,CAAC;IACxB,IAAA,mBAAS,EAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;IACxC,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC,cAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,iDAAiD,EAAE,CAAC;;yCAC5F;AAmBd;IAjBC,IAAA,gBAAM,EAAC;QACN,IAAI,EACF,aAAa,IAAI,UAAU,IAAI,aAAa,IAAI,OAAO,IAAI,aAAa,IAAI,SAAS;YACnF,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,aAAa,IAAI,QAAQ;gBACzB,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,aAAa,IAAI,OAAO;oBACxB,CAAC,CAAC,UAAU;oBACZ,CAAC,CAAC,SAAS;QACnB,IAAI,EACF,aAAa,IAAI,UAAU,IAAI,aAAa,IAAI,OAAO,IAAI,aAAa,IAAI,SAAS;YACnF,CAAC,CAAC,sCAAgB;YAClB,CAAC,CAAC,SAAS;QACf,MAAM,EAAE,aAAa,IAAI,UAAU,IAAI,aAAa,IAAI,OAAO,IAAI,aAAa,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;QAC9G,OAAO,EAAE,sCAAgB,CAAC,OAAO;KAClC,CAAC;IACD,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,0CAA0C,EAAE,CAAC;;0CAC3D;AAQxB;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,8CAA8C,EAAE,CAAC;sCAC3E,IAAI;6CAAA;AAIhB;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,mCAAmC,EAAE,CAAC;sCAC/D,IAAI;IAEjB;;;;OAIG;;8CANc;AAQjB;IADC,IAAA,gBAAM,GAAE;;yCACI;AAIb;IADC,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,2DAA2D,EAAE,CAAC;;yCACtF;AAId;IAFC,IAAA,0BAAgB,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACpC,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,gDAAgD,EAAE,CAAC;sCAC9E,IAAI;6CAAA;AAIf;IAFC,IAAA,0BAAgB,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACpC,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,qDAAqD,EAAE,CAAC;sCACnF,IAAI;6CAAA;AAIf;IAFC,IAAA,mBAAS,EAAC,IAAI,CAAC,EAAE,CAAC,cAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,sCAAsC,EAAE,CAAC;sCACtE,cAAI;2CAAA;AAGb;IADC,IAAA,oBAAU,EAAC,CAAC,UAAsB,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;;6CAC1C;AAIjB;IAFC,IAAA,mBAAS,EAAC,IAAI,CAAC,EAAE,CAAC,cAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,2CAA2C,EAAE,CAAC;sCAC3E,cAAI;2CAAA;AAGb;IADC,IAAA,oBAAU,EAAC,CAAC,UAAsB,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;;6CAC1C;qBA9GN,UAAU;IAJtB,IAAA,gBAAM,GAAE;IACR,IAAA,eAAK,EAAC,iBAAiB,EAAE,CAAC,UAAsB,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IAC3F,IAAA,eAAK,EAAC,iBAAiB,EAAE,CAAC,UAAsB,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1F,IAAA,yBAAU,EAAC,EAAE,WAAW,EAAE,8EAA8E,EAAE,CAAC;GAC/F,UAAU,CA+GtB","sourcesContent":["import {\n  CreateDateColumn,\n  UpdateDateColumn,\n  Entity,\n  Index,\n  Column,\n  JoinTable,\n  ManyToMany,\n  ManyToOne,\n  RelationId,\n  PrimaryGeneratedColumn\n} from 'typeorm'\nimport { ObjectType, Field, ID } from 'type-graphql'\nimport { GraphQLEmailAddress } from 'graphql-scalars'\nimport { config } from '@things-factory/env'\nimport { Domain } from '@things-factory/shell'\n\nimport { Role } from '../role/role.js'\nimport { User } from '../user/user.js'\nimport { InvitationStatus } from '../../utils/invitation-state.js'\n\nconst ORMCONFIG = config.get('ormconfig', {})\nconst DATABASE_TYPE = ORMCONFIG.type\n\n/*\n * ── Why there is no unique index on (domain, email) ─────────────────────────\n * There was one on `(email, reference, type)`, which meant a person could be invited to a\n * domain **once, ever**. That was consistent with a table whose rows were deleted on accept —\n * it held pending invitations and nothing else. Now the rows stay, so \"invited last year, left,\n * invited again\" has to be expressible, and a unique constraint across the history forbids it.\n *\n * What still has to hold is **at most one pending invitation** per person and domain. A partial\n * unique index would say that, and partial indexes are not portable across the databases this\n * framework supports (`reference_typeorm_column_type_portability`). So it is enforced where the\n * invitation is created, inside the same transaction, and the index below is for reading the\n * list.\n */\n@Entity()\n@Index('ix_invitation_0', (invitation: Invitation) => [invitation.domain, invitation.email])\n@Index('ix_invitation_1', (invitation: Invitation) => [invitation.token], { unique: true })\n@ObjectType({ description: 'Represents an invitation for a user to join a system or a specific resource.' })\nexport class Invitation {\n  @PrimaryGeneratedColumn('uuid')\n  @Field(type => ID, { description: 'Unique identifier for the invitation.' })\n  readonly id: string\n\n  @Column()\n  @Field(type => GraphQLEmailAddress, { description: 'The email address to which the invitation is sent.' })\n  email: string\n\n  /*\n   * The domain this invitation is to.\n   *\n   * ⚠ `reference` below used to carry this. Every live use read it as a domain id\n   * (`Domain.findOneBy({ id: reference })`), and the line above the first of them said\n   * `// TODO reference should not be a domain.id (security reason)` — so the code was doing the\n   * thing its own author had written down as wrong. The column says it now, which is what that\n   * note was asking for, and it is what the list is scoped by.\n   */\n  @ManyToOne(type => Domain)\n  @Field(type => Domain, { description: 'The domain the user is invited to join.' })\n  domain: Domain\n\n  @RelationId((invitation: Invitation) => invitation.domain)\n  domainId: string\n\n  /** ⚠ Superseded by `domain`. Kept nullable for rows written before that column existed. */\n  @Column({ nullable: true })\n  @Field({ nullable: true, description: 'Deprecated. The domain the invitation is to is `domain`.' })\n  reference?: string\n\n  /** ⚠ Superseded by `domain`. Kept nullable for rows written before that column existed. */\n  @Column({ nullable: true })\n  @Field({ nullable: true, description: 'Deprecated. See `reference`.' })\n  type?: string\n\n  /*\n   * The roles this person gets on arrival.\n   *\n   * Without them somebody accepts an invitation, signs in, and has no screens at all — the\n   * `user-invite` screen already decided that roles are chosen where the person is invited, for\n   * exactly that reason. An invitation is that place for the people who arrive this way.\n   */\n  @ManyToMany(type => Role)\n  @JoinTable({ name: 'invitations_roles' })\n  @Field(type => [Role], { nullable: true, description: 'Roles to grant when the invitation is accepted.' })\n  roles?: Role[]\n\n  @Column({\n    type:\n      DATABASE_TYPE == 'postgres' || DATABASE_TYPE == 'mysql' || DATABASE_TYPE == 'mariadb'\n        ? 'enum'\n        : DATABASE_TYPE == 'oracle'\n          ? 'varchar2'\n          : DATABASE_TYPE == 'mssql'\n            ? 'nvarchar'\n            : 'varchar',\n    enum:\n      DATABASE_TYPE == 'postgres' || DATABASE_TYPE == 'mysql' || DATABASE_TYPE == 'mariadb'\n        ? InvitationStatus\n        : undefined,\n    length: DATABASE_TYPE == 'postgres' || DATABASE_TYPE == 'mysql' || DATABASE_TYPE == 'mariadb' ? undefined : 32,\n    default: InvitationStatus.PENDING\n  })\n  @Field(type => String, { description: 'pending, accepted, cancelled or expired.' })\n  status: InvitationStatus\n\n  /*\n   * ⚠ Nullable only because rows written before this column existed have nothing here, and those\n   * read as expired (`utils/invitation-state.ts`). Everything written from now on sets it.\n   */\n  @Column({ nullable: true })\n  @Field({ nullable: true, description: 'When this invitation stops being acceptable.' })\n  expiresAt?: Date\n\n  @Column({ nullable: true })\n  @Field({ nullable: true, description: 'When the invitation was accepted.' })\n  acceptedAt?: Date\n\n  /*\n   * ⚠ Never returned to a client. The token is what opens the door, and an invitation list is a\n   * screen an administrator reads — printing it there would hand every pending invitation to\n   * whoever can see the list. `invitation-query.ts` does not resolve it.\n   */\n  @Column()\n  token: string\n\n  /* Resolved against the clock in `invitation-query.ts`, not stored on its own. */\n  @Field({ nullable: true, description: 'pending, accepted, cancelled or expired — read as of now.' })\n  state?: string\n\n  @CreateDateColumn({ nullable: true })\n  @Field({ nullable: true, description: 'The timestamp when the invitation was created.' })\n  createdAt: Date\n\n  @UpdateDateColumn({ nullable: true })\n  @Field({ nullable: true, description: 'The timestamp when the invitation was last updated.' })\n  updatedAt: Date\n\n  @ManyToOne(type => User, { nullable: true })\n  @Field({ nullable: true, description: 'The user who created the invitation.' })\n  creator: User\n\n  @RelationId((invitation: Invitation) => invitation.creator)\n  creatorId: string\n\n  @ManyToOne(type => User, { nullable: true })\n  @Field({ nullable: true, description: 'The user who last updated the invitation.' })\n  updater: User\n\n  @RelationId((invitation: Invitation) => invitation.updater)\n  updaterId: string\n}\n"]}

package/dist-server/templates/invitation-email.d.ts

@@ -1,6 +0,0 @@
-export declare function getInvitationEmailForm({ username, email, acceptUrl, code }: {
-    username: any;
-    email: any;
-    acceptUrl: any;
-    code: any;
-}): string;

package/dist-server/templates/invitation-email.js

@@ -1,82 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getInvitationEmailForm = getInvitationEmailForm;
-/*
- * The link carries the token in its fragment, which needs JavaScript to read. The same token is
- * printed as text so somebody whose mail client or browser will not follow it can paste it into
- * the page instead.
- */
-function getInvitationEmailForm({ username, email, acceptUrl, code }) {
-    return `
-  <html lang="en">
-    <head>
-      <meta charset="utf-8" />
-      
-      <title>Invitation from Operato</title>
-      <meta name="description" content="Invitation" />
-      <meta name="author" content="hatiolab" />
-      <meta name="google" content="notranslate"/>
-    </head>
-
-    <body>
-      <div style="background-color:#f6f6f6">
-        <!--header begin-->
-        <div style="background-color:#fff;padding:0 10px;border-top: 2px solid #394e64;">
-          <a href="#" target="_blank"
-            ><img
-              src="http://www.hatiolab.com/assets/img/logo-operato.png"
-              style="max-height:50px"
-          /></a>
-        </div>
-        <!--header end-->
-
-        <!--title begin-->
-        <div
-          style="background-color:#22a6a7;padding:12px 10px 10px 10px;min-height:50px;"
-        >
-          <img
-            src="http://www.hatiolab.com/assets/img/icon-mail.png"
-            style="float:left;margin:0 10px 0 40px"
-          />
-          <span style="display:block;color:#fff;font-size:20px"
-            >Hi ${email}!</span
-          >
-          <span style="display:block;color:#fff;font-size:34px;font-weight:bold"
-            >Verify your email</span
-          >
-        </div>
-        <!--title end-->
-
-        <!--body begin-->
-        <p style="padding:10px 20px;line-height:1.5;font-size:16px">
-          You have been invited to join Operato.
-          Use the button below to accept, and you will be asked for this email address to confirm
-          it reached the right person.
-          <br />
-          <a
-            href="${acceptUrl}"
-            style="display:inline-block;margin:10px 5px 5px 0;border-radius:7px;background-color:#22a6a7;padding:7px 15px;color:#fff;font-size:18px;text-decoration:none;text-transform:capitalize;"
-            >Accept invitation</a
-          >
-        </p>
-
-        <p style="padding:0 20px 10px 20px;line-height:1.5;font-size:13px;color:#666">
-          If the button does not work, open the invitation page and paste this code:
-          <br />
-          <span style="font-family:monospace;font-size:15px;color:#222">${code}</span>
-        </p>
-        <!--body end-->
-
-        <!--footer begin-->
-        <div
-          style="background-color:#3d5874;padding:7px 20px 5px 20px;font-size:12px;color:#efefef"
-        >
-          © Hatio, Lab. Inc. All rights reserved.
-        </div>
-        <!--footer end-->
-      </div>
-    </body>
-  </html>
-  `;
-}
-//# sourceMappingURL=invitation-email.js.map

package/dist-server/templates/invitation-email.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"invitation-email.js","sourceRoot":"","sources":["../../server/templates/invitation-email.ts"],"names":[],"mappings":";;AAKA,wDAwEC;AA7ED;;;;GAIG;AACH,SAAgB,sBAAsB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE;IACzE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAgCS,KAAK;;;;;;;;;;;;;;;oBAeH,SAAS;;;;;;;;;0EAS6C,IAAI;;;;;;;;;;;;;;GAc3E,CAAA;AACH,CAAC","sourcesContent":["/*\n * The link carries the token in its fragment, which needs JavaScript to read. The same token is\n * printed as text so somebody whose mail client or browser will not follow it can paste it into\n * the page instead.\n */\nexport function getInvitationEmailForm({ username, email, acceptUrl, code }) {\n  return `\n  <html lang=\"en\">\n    <head>\n      <meta charset=\"utf-8\" />\n      \n      <title>Invitation from Operato</title>\n      <meta name=\"description\" content=\"Invitation\" />\n      <meta name=\"author\" content=\"hatiolab\" />\n      <meta name=\"google\" content=\"notranslate\"/>\n    </head>\n\n    <body>\n      <div style=\"background-color:#f6f6f6\">\n        <!--header begin-->\n        <div style=\"background-color:#fff;padding:0 10px;border-top: 2px solid #394e64;\">\n          <a href=\"#\" target=\"_blank\"\n            ><img\n              src=\"http://www.hatiolab.com/assets/img/logo-operato.png\"\n              style=\"max-height:50px\"\n          /></a>\n        </div>\n        <!--header end-->\n\n        <!--title begin-->\n        <div\n          style=\"background-color:#22a6a7;padding:12px 10px 10px 10px;min-height:50px;\"\n        >\n          <img\n            src=\"http://www.hatiolab.com/assets/img/icon-mail.png\"\n            style=\"float:left;margin:0 10px 0 40px\"\n          />\n          <span style=\"display:block;color:#fff;font-size:20px\"\n            >Hi ${email}!</span\n          >\n          <span style=\"display:block;color:#fff;font-size:34px;font-weight:bold\"\n            >Verify your email</span\n          >\n        </div>\n        <!--title end-->\n\n        <!--body begin-->\n        <p style=\"padding:10px 20px;line-height:1.5;font-size:16px\">\n          You have been invited to join Operato.\n          Use the button below to accept, and you will be asked for this email address to confirm\n          it reached the right person.\n          <br />\n          <a\n            href=\"${acceptUrl}\"\n            style=\"display:inline-block;margin:10px 5px 5px 0;border-radius:7px;background-color:#22a6a7;padding:7px 15px;color:#fff;font-size:18px;text-decoration:none;text-transform:capitalize;\"\n            >Accept invitation</a\n          >\n        </p>\n\n        <p style=\"padding:0 20px 10px 20px;line-height:1.5;font-size:13px;color:#666\">\n          If the button does not work, open the invitation page and paste this code:\n          <br />\n          <span style=\"font-family:monospace;font-size:15px;color:#222\">${code}</span>\n        </p>\n        <!--body end-->\n\n        <!--footer begin-->\n        <div\n          style=\"background-color:#3d5874;padding:7px 20px 5px 20px;font-size:12px;color:#efefef\"\n        >\n          © Hatio, Lab. Inc. All rights reserved.\n        </div>\n        <!--footer end-->\n      </div>\n    </body>\n  </html>\n  `\n}\n"]}

package/dist-server/utils/invitation-state.d.ts

@@ -1,52 +0,0 @@
-/**
- * What state an invitation is in, and whether it can still be accepted. (Pure rule.)
- *
- * ## Why the table keeps rows now
- *
- * Accepting used to delete the row and cancelling still does, so the table was a queue of
- * pending invitations and nothing else. The moment somebody joined, the fact that they had been
- * invited stopped existing — which is why no screen was ever built on it, and why nothing calls
- * any of it. An invitation list has to be able to say *who was invited, by whom, when, and
- * whether they came in*.
- *
- * So the row survives and carries its state. `pending` → one of the other three, and never back.
- *
- * ## Why expiry is derived and not only stored
- *
- * A token that outlives its invitation is a credential nobody is watching. If `expired` were
- * only ever a written value, it would depend on something running to write it, and the gap
- * between the expiry passing and that thing running is a window where the token still works.
- * So the rule reads the clock: a pending row past its `expiresAt` **is** expired, whatever the
- * column says. Writing the status is then bookkeeping for the list, not the guard.
- *
- * ## What an absent value means, and why it refuses
- *
- * Rows written before this existed have neither status nor expiry. They come from a flow that
- * never completed — the link in the email led nowhere — so treating them as live would keep
- * tokens alive that were never usable in the first place.
- *
- *   status absent       reads as `pending`, which is what the old table meant by a row existing
- *   expiresAt absent    reads as **expired**. An invitation that cannot say when it dies is not
- *                       a live invitation, and this is a credential: absence refuses.
- */
-/** The states an invitation row can be in. Stored, and also derived for expiry. */
-export declare enum InvitationStatus {
-    PENDING = "pending",
-    ACCEPTED = "accepted",
-    CANCELLED = "cancelled",
-    EXPIRED = "expired"
-}
-/** The parts of an invitation this rule reads. */
-export type InvitationRecord = {
-    status?: string | null;
-    expiresAt?: Date | string | null;
-} | null | undefined;
-/**
- * The state this invitation is in, as of `now`.
- *
- * Only a pending row is measured against the clock. Once a row has been accepted or cancelled
- * that is what happened to it, and time passing does not rewrite history.
- */
-export declare function invitationState(invitation: InvitationRecord, now?: Date): InvitationStatus;
-/** May this invitation still be accepted? Only a pending one that has not run out. */
-export declare function mayAccept(invitation: InvitationRecord, now?: Date): boolean;

package/dist-server/utils/invitation-state.js

@@ -1,76 +0,0 @@
-"use strict";
-/**
- * What state an invitation is in, and whether it can still be accepted. (Pure rule.)
- *
- * ## Why the table keeps rows now
- *
- * Accepting used to delete the row and cancelling still does, so the table was a queue of
- * pending invitations and nothing else. The moment somebody joined, the fact that they had been
- * invited stopped existing — which is why no screen was ever built on it, and why nothing calls
- * any of it. An invitation list has to be able to say *who was invited, by whom, when, and
- * whether they came in*.
- *
- * So the row survives and carries its state. `pending` → one of the other three, and never back.
- *
- * ## Why expiry is derived and not only stored
- *
- * A token that outlives its invitation is a credential nobody is watching. If `expired` were
- * only ever a written value, it would depend on something running to write it, and the gap
- * between the expiry passing and that thing running is a window where the token still works.
- * So the rule reads the clock: a pending row past its `expiresAt` **is** expired, whatever the
- * column says. Writing the status is then bookkeeping for the list, not the guard.
- *
- * ## What an absent value means, and why it refuses
- *
- * Rows written before this existed have neither status nor expiry. They come from a flow that
- * never completed — the link in the email led nowhere — so treating them as live would keep
- * tokens alive that were never usable in the first place.
- *
- *   status absent       reads as `pending`, which is what the old table meant by a row existing
- *   expiresAt absent    reads as **expired**. An invitation that cannot say when it dies is not
- *                       a live invitation, and this is a credential: absence refuses.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.InvitationStatus = void 0;
-exports.invitationState = invitationState;
-exports.mayAccept = mayAccept;
-/** The states an invitation row can be in. Stored, and also derived for expiry. */
-var InvitationStatus;
-(function (InvitationStatus) {
-    InvitationStatus["PENDING"] = "pending";
-    InvitationStatus["ACCEPTED"] = "accepted";
-    InvitationStatus["CANCELLED"] = "cancelled";
-    InvitationStatus["EXPIRED"] = "expired";
-})(InvitationStatus || (exports.InvitationStatus = InvitationStatus = {}));
-function expiryPassed(expiresAt, now) {
-    if (!expiresAt) {
-        /* No expiry recorded — see the note above. Absence refuses. */
-        return true;
-    }
-    const at = expiresAt instanceof Date ? expiresAt : new Date(expiresAt);
-    if (Number.isNaN(at.getTime())) {
-        return true;
-    }
-    return at.getTime() <= now.getTime();
-}
-/**
- * The state this invitation is in, as of `now`.
- *
- * Only a pending row is measured against the clock. Once a row has been accepted or cancelled
- * that is what happened to it, and time passing does not rewrite history.
- */
-function invitationState(invitation, now = new Date()) {
-    const status = invitation?.status || InvitationStatus.PENDING;
-    if (status === InvitationStatus.ACCEPTED || status === InvitationStatus.CANCELLED) {
-        return status;
-    }
-    if (status === InvitationStatus.EXPIRED) {
-        return InvitationStatus.EXPIRED;
-    }
-    return expiryPassed(invitation?.expiresAt, now) ? InvitationStatus.EXPIRED : InvitationStatus.PENDING;
-}
-/** May this invitation still be accepted? Only a pending one that has not run out. */
-function mayAccept(invitation, now = new Date()) {
-    return !!invitation && invitationState(invitation, now) === InvitationStatus.PENDING;
-}
-//# sourceMappingURL=invitation-state.js.map

package/dist-server/utils/invitation-state.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"invitation-state.js","sourceRoot":"","sources":["../../server/utils/invitation-state.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;;;AAqCH,0CAYC;AAGD,8BAEC;AApDD,mFAAmF;AACnF,IAAY,gBAKX;AALD,WAAY,gBAAgB;IAC1B,uCAAmB,CAAA;IACnB,yCAAqB,CAAA;IACrB,2CAAuB,CAAA;IACvB,uCAAmB,CAAA;AACrB,CAAC,EALW,gBAAgB,gCAAhB,gBAAgB,QAK3B;AAQD,SAAS,YAAY,CAAC,SAA2C,EAAE,GAAS;IAC1E,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,+DAA+D;QAC/D,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,EAAE,GAAG,SAAS,YAAY,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAA;IAEtE,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO,EAAE,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,CAAA;AACtC,CAAC;AAED;;;;;GAKG;AACH,SAAgB,eAAe,CAAC,UAA4B,EAAE,MAAY,IAAI,IAAI,EAAE;IAClF,MAAM,MAAM,GAAG,UAAU,EAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAA;IAE7D,IAAI,MAAM,KAAK,gBAAgB,CAAC,QAAQ,IAAI,MAAM,KAAK,gBAAgB,CAAC,SAAS,EAAE,CAAC;QAClF,OAAO,MAA0B,CAAA;IACnC,CAAC;IAED,IAAI,MAAM,KAAK,gBAAgB,CAAC,OAAO,EAAE,CAAC;QACxC,OAAO,gBAAgB,CAAC,OAAO,CAAA;IACjC,CAAC;IAED,OAAO,YAAY,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAA;AACvG,CAAC;AAED,sFAAsF;AACtF,SAAgB,SAAS,CAAC,UAA4B,EAAE,MAAY,IAAI,IAAI,EAAE;IAC5E,OAAO,CAAC,CAAC,UAAU,IAAI,eAAe,CAAC,UAAU,EAAE,GAAG,CAAC,KAAK,gBAAgB,CAAC,OAAO,CAAA;AACtF,CAAC","sourcesContent":["/**\n * What state an invitation is in, and whether it can still be accepted. (Pure rule.)\n *\n * ## Why the table keeps rows now\n *\n * Accepting used to delete the row and cancelling still does, so the table was a queue of\n * pending invitations and nothing else. The moment somebody joined, the fact that they had been\n * invited stopped existing — which is why no screen was ever built on it, and why nothing calls\n * any of it. An invitation list has to be able to say *who was invited, by whom, when, and\n * whether they came in*.\n *\n * So the row survives and carries its state. `pending` → one of the other three, and never back.\n *\n * ## Why expiry is derived and not only stored\n *\n * A token that outlives its invitation is a credential nobody is watching. If `expired` were\n * only ever a written value, it would depend on something running to write it, and the gap\n * between the expiry passing and that thing running is a window where the token still works.\n * So the rule reads the clock: a pending row past its `expiresAt` **is** expired, whatever the\n * column says. Writing the status is then bookkeeping for the list, not the guard.\n *\n * ## What an absent value means, and why it refuses\n *\n * Rows written before this existed have neither status nor expiry. They come from a flow that\n * never completed — the link in the email led nowhere — so treating them as live would keep\n * tokens alive that were never usable in the first place.\n *\n *   status absent       reads as `pending`, which is what the old table meant by a row existing\n *   expiresAt absent    reads as **expired**. An invitation that cannot say when it dies is not\n *                       a live invitation, and this is a credential: absence refuses.\n */\n\n/** The states an invitation row can be in. Stored, and also derived for expiry. */\nexport enum InvitationStatus {\n  PENDING = 'pending',\n  ACCEPTED = 'accepted',\n  CANCELLED = 'cancelled',\n  EXPIRED = 'expired'\n}\n\n/** The parts of an invitation this rule reads. */\nexport type InvitationRecord = {\n  status?: string | null\n  expiresAt?: Date | string | null\n} | null | undefined\n\nfunction expiryPassed(expiresAt: Date | string | null | undefined, now: Date): boolean {\n  if (!expiresAt) {\n    /* No expiry recorded — see the note above. Absence refuses. */\n    return true\n  }\n\n  const at = expiresAt instanceof Date ? expiresAt : new Date(expiresAt)\n\n  if (Number.isNaN(at.getTime())) {\n    return true\n  }\n\n  return at.getTime() <= now.getTime()\n}\n\n/**\n * The state this invitation is in, as of `now`.\n *\n * Only a pending row is measured against the clock. Once a row has been accepted or cancelled\n * that is what happened to it, and time passing does not rewrite history.\n */\nexport function invitationState(invitation: InvitationRecord, now: Date = new Date()): InvitationStatus {\n  const status = invitation?.status || InvitationStatus.PENDING\n\n  if (status === InvitationStatus.ACCEPTED || status === InvitationStatus.CANCELLED) {\n    return status as InvitationStatus\n  }\n\n  if (status === InvitationStatus.EXPIRED) {\n    return InvitationStatus.EXPIRED\n  }\n\n  return expiryPassed(invitation?.expiresAt, now) ? InvitationStatus.EXPIRED : InvitationStatus.PENDING\n}\n\n/** May this invitation still be accepted? Only a pending one that has not run out. */\nexport function mayAccept(invitation: InvitationRecord, now: Date = new Date()): boolean {\n  return !!invitation && invitationState(invitation, now) === InvitationStatus.PENDING\n}\n"]}