@veap/auth 0.1.0 → 0.1.2

package/dist/providers/auth.provider.js

@@ -1,29 +1,29 @@
 import { isDatabaseInitialized } from "@veap/database";
-import { AUTH_ROUTES, ConfigService, Container, container as defaultContainer, logger, ROUTER_SERVICE, ServiceProvider, } from "@veap/kernel";
-import { bindAuthContext } from "../common/context";
-import { DEFAULT_AUTH_ROUTES, } from "../common/routes";
-import { AesSecretCipher } from "../crypto/aes-cipher";
-import { BcryptPasswordHasher } from "../crypto/bcrypt-hasher";
-import { PASSWORD_HASHER, SECRET_CIPHER, TOKEN_GENERATOR, } from "../crypto/contracts";
-import { OsloTokenGenerator } from "../crypto/token-generator";
-import { runAuthMigrations } from "../migrations";
-import { PASSWORD_RESET_REPOSITORY } from "../passwords/contracts";
-import { ActiveRecordPasswordResetRepository } from "../passwords/password-reset.repository";
-import { PasswordResetService } from "../passwords/password-reset.service";
-import { PERMISSION_REPOSITORY, ROLE_REPOSITORY } from "../rbac/contracts";
-import { ActiveRecordPermissionRepository, ActiveRecordRoleRepository, } from "../rbac/rbac.repository";
-import { RbacService } from "../rbac/rbac.service";
-import { AuthService } from "../session/auth.service";
-import { SESSION_REPOSITORY } from "../session/contracts";
-import { ActiveRecordSessionRepository } from "../session/session.repository";
-import { SessionService } from "../session/session.service";
-import { USER_REPOSITORY } from "../users/contracts";
-import { ActiveRecordUserRepository } from "../users/user.repository";
-import { UserService } from "../users/user.service";
-import { EMAIL_VERIFICATION_REPOSITORY } from "../verification/contracts";
-import { ActiveRecordEmailVerificationRepository } from "../verification/verification.repository";
-import { EmailVerificationService } from "../verification/verification.service";
-import { isSystemInstalled } from "./setup";
+import { ConfigService, Container, container as defaultContainer, logger, ServiceProvider, } from "@veap/kernel";
+import { bindAuthContext } from "../common/context.js";
+import { AUTH_ROUTES, DEFAULT_AUTH_ROUTES, ROUTER_SERVICE, } from "../common/routes.js";
+import { AesSecretCipher } from "../crypto/aes-cipher.js";
+import { BcryptPasswordHasher } from "../crypto/bcrypt-hasher.js";
+import { PASSWORD_HASHER, SECRET_CIPHER, TOKEN_GENERATOR, } from "../crypto/contracts.js";
+import { OsloTokenGenerator } from "../crypto/token-generator.js";
+import { runAuthMigrations } from "../migrations/index.js";
+import { PASSWORD_RESET_REPOSITORY } from "../passwords/contracts.js";
+import { ActiveRecordPasswordResetRepository } from "../passwords/password-reset.repository.js";
+import { PasswordResetService } from "../passwords/password-reset.service.js";
+import { PERMISSION_REPOSITORY, ROLE_REPOSITORY } from "../rbac/contracts.js";
+import { ActiveRecordPermissionRepository, ActiveRecordRoleRepository, } from "../rbac/rbac.repository.js";
+import { RbacService } from "../rbac/rbac.service.js";
+import { AuthService } from "../session/auth.service.js";
+import { SESSION_REPOSITORY } from "../session/contracts.js";
+import { ActiveRecordSessionRepository } from "../session/session.repository.js";
+import { SessionService } from "../session/session.service.js";
+import { USER_REPOSITORY } from "../users/contracts.js";
+import { ActiveRecordUserRepository } from "../users/user.repository.js";
+import { UserService } from "../users/user.service.js";
+import { EMAIL_VERIFICATION_REPOSITORY } from "../verification/contracts.js";
+import { ActiveRecordEmailVerificationRepository } from "../verification/verification.repository.js";
+import { EmailVerificationService } from "../verification/verification.service.js";
+import { isSystemInstalled } from "./setup.js";
 export class AuthServiceProvider extends ServiceProvider {
     config;
     constructor(container, config) {
@@ -103,7 +103,7 @@ export class AuthServiceProvider extends ServiceProvider {
             useClass: ActiveRecordEmailVerificationRepository,
             singleton: true,
         });
-        // Application services
+        // Services
         this.container.register({
             token: UserService,
             useClass: UserService,
@@ -136,7 +136,12 @@ export class AuthServiceProvider extends ServiceProvider {
         });
     }
     async boot() {
-        // 1. Resolve and bind global auth context
+        // 0. Auto-bootstrap setup state
+        try {
+            isSystemInstalled();
+        }
+        catch { }
+        // 1. Resolve domain services and bind singleton auth context
         const user = await this.container.resolve(UserService);
         const session = await this.container.resolve(SessionService);
         const rbac = await this.container.resolve(RbacService);
@@ -190,7 +195,5 @@ export class AuthServiceProvider extends ServiceProvider {
                 logger.error("veap:auth", "Failed to run auth database migrations during boot:", error.message);
             }
         }
-        // 4. Publish system:not-installed if no users exist
-        await isSystemInstalled();
     }
 }

package/dist/providers/index.d.ts

@@ -1,2 +1,2 @@
-export * from "./auth.provider";
-export * from "./setup";
+export * from "./auth.provider.js";
+export * from "./setup.js";

package/dist/providers/index.js

@@ -1,2 +1,2 @@
-export * from "./auth.provider";
-export * from "./setup";
+export * from "./auth.provider.js";
+export * from "./setup.js";

package/dist/providers/setup.js

@@ -1,5 +1,5 @@
 import { eventBus, logger } from "@veap/kernel";
-import { User } from "../models/User";
+import { User } from "../models/User.js";
 /**
  * Checks if the system is installed.
  * A system is considered installed if at least one user exists in the database.

package/dist/rbac/contracts.d.ts

@@ -1,4 +1,4 @@
-import type { UserPermission, UserRole } from "../common";
+import type { UserPermission, UserRole } from "../common/index.js";
 export type { UserPermission, UserRole };
 /** A role as persisted (already mapped to a plain object). */
 export interface RoleRecord {

package/dist/rbac/index.d.ts

@@ -1,4 +1,4 @@
-export * from "./contracts";
-export * from "./rbac.facade";
-export * from "./rbac.repository";
-export * from "./rbac.service";
+export * from "./contracts.js";
+export * from "./rbac.facade.js";
+export * from "./rbac.repository.js";
+export * from "./rbac.service.js";

package/dist/rbac/index.js

@@ -1,4 +1,4 @@
-export * from "./contracts";
-export * from "./rbac.facade";
-export * from "./rbac.repository";
-export * from "./rbac.service";
+export * from "./contracts.js";
+export * from "./rbac.facade.js";
+export * from "./rbac.repository.js";
+export * from "./rbac.service.js";

package/dist/rbac/rbac.facade.d.ts

@@ -1,12 +1,12 @@
-export declare function getRoles(): Promise<import("./contracts").RoleRecord[]>;
-export declare function getRoleById(roleId: string): Promise<import("./contracts").RoleRecord | undefined>;
-export declare function createRole(name: string, description?: string): Promise<import("./contracts").RoleRecord[]>;
+export declare function getRoles(): Promise<import("./contracts.js").RoleRecord[]>;
+export declare function getRoleById(roleId: string): Promise<import("./contracts.js").RoleRecord | undefined>;
+export declare function createRole(name: string, description?: string): Promise<import("./contracts.js").RoleRecord[]>;
 export declare function deleteRole(roleId: string): Promise<void>;
-export declare function getPermissions(): Promise<import("./contracts").PermissionRecord[]>;
-export declare function getPermissionById(permissionId: string): Promise<import("./contracts").PermissionRecord | undefined>;
-export declare function createPermission(name: string, description?: string): Promise<import("./contracts").PermissionRecord[]>;
+export declare function getPermissions(): Promise<import("./contracts.js").PermissionRecord[]>;
+export declare function getPermissionById(permissionId: string): Promise<import("./contracts.js").PermissionRecord | undefined>;
+export declare function createPermission(name: string, description?: string): Promise<import("./contracts.js").PermissionRecord[]>;
 export declare function deletePermission(permissionId: string): Promise<void>;
-export declare function getRolePermissions(roleId: string): Promise<import("./contracts").AccessGrant[]>;
+export declare function getRolePermissions(roleId: string): Promise<import("./contracts.js").AccessGrant[]>;
 export declare function assignPermissionToRole(roleId: string, permissionId: string): Promise<void>;
 export declare function revokePermissionFromRole(roleId: string, permissionId: string): Promise<void>;
 export declare function assignRoleToUser(userId: string, roleId: string): Promise<void>;
@@ -18,6 +18,6 @@ export declare function getUserRbacData(userId: string): Promise<{
         id: string;
         name: string;
     }[];
-    directPermissions: import("./contracts").AccessGrant[];
-    effectivePermissions: import("./contracts").AccessGrant[];
+    directPermissions: import("./contracts.js").AccessGrant[];
+    effectivePermissions: import("./contracts.js").AccessGrant[];
 }>;

package/dist/rbac/rbac.facade.js

@@ -1,8 +1,15 @@
 "use server";
 import { app } from "@veap/kernel";
-import { authContext, isAuthContextBound } from "../common/context";
-import { RbacService } from "./rbac.service";
+import { authContext, isAuthContextBound } from "../common/context.js";
+import { RbacService } from "./rbac.service.js";
 async function resolveRbacService() {
+    const g = globalThis;
+    if (g.__VEAP_BOOTSTRAPPING_PROMISE__) {
+        try {
+            await g.__VEAP_BOOTSTRAPPING_PROMISE__;
+        }
+        catch { }
+    }
     if (isAuthContextBound()) {
         return authContext().rbac;
     }

package/dist/rbac/rbac.repository.d.ts

@@ -1,4 +1,4 @@
-import type { AccessGrant, CreatePermissionRecord, CreateRoleRecord, IPermissionRepository, IRoleRepository, PermissionRecord, RoleRecord, UserAccess } from "./contracts";
+import type { AccessGrant, CreatePermissionRecord, CreateRoleRecord, IPermissionRepository, IRoleRepository, PermissionRecord, RoleRecord, UserAccess } from "./contracts.js";
 /**
  * `IRoleRepository` adapter backed by the `Role` ActiveRecord model and the
  * `users_to_roles` pivot table.

package/dist/rbac/rbac.repository.js

@@ -1,7 +1,7 @@
 import { getKnex } from "@veap/database";
-import { Permission } from "../models/Permission";
-import { Role } from "../models/Role";
-import { User } from "../models/User";
+import { Permission } from "../models/Permission.js";
+import { Role } from "../models/Role.js";
+import { User } from "../models/User.js";
 /**
  * `IRoleRepository` adapter backed by the `Role` ActiveRecord model and the
  * `users_to_roles` pivot table.

package/dist/rbac/rbac.service.d.ts

@@ -1,5 +1,5 @@
-import type { User } from "../common";
-import { type AccessGrant, type IPermissionRepository, type IRoleRepository, type PermissionRecord, type RoleRecord } from "./contracts";
+import type { User } from "../common/index.js";
+import { type AccessGrant, type IPermissionRepository, type IRoleRepository, type PermissionRecord, type RoleRecord } from "./contracts.js";
 /**
  * Core RBAC use cases. Persistence lives behind the role/permission
  * repositories, so this service stays framework-free and testable.

package/dist/rbac/rbac.service.js

@@ -11,7 +11,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
 import { Inject, Injectable } from "@veap/kernel";
-import { PERMISSION_REPOSITORY, ROLE_REPOSITORY, } from "./contracts";
+import { PERMISSION_REPOSITORY, ROLE_REPOSITORY, } from "./contracts.js";
 /**
  * Core RBAC use cases. Persistence lives behind the role/permission
  * repositories, so this service stays framework-free and testable.

package/dist/server.d.ts

@@ -1,3 +1,3 @@
-export * from "./actions";
-export * from "./crypto";
-export * from "./index";
+export * from "./actions/index.js";
+export * from "./crypto/index.js";
+export * from "./index.js";

package/dist/server.js

@@ -1,3 +1,3 @@
-export * from "./actions";
-export * from "./crypto";
-export * from "./index";
+export * from "./actions/index.js";
+export * from "./crypto/index.js";
+export * from "./index.js";

package/dist/session/auth.service.d.ts

@@ -1,10 +1,10 @@
 import { type ICacheProvider } from "@veap/kernel";
-import { type IPasswordHasher } from "../crypto/contracts";
-import type { AuthResponse, SessionFlags } from "../common";
-import { UserService } from "../users/user.service";
-import type { LoginInput, RegisterInput } from "../validation";
-import { EmailVerificationService } from "../verification/verification.service";
-import { SessionService } from "./session.service";
+import type { AuthResponse, SessionFlags } from "../common/index.js";
+import { type IPasswordHasher } from "../crypto/contracts.js";
+import { UserService } from "../users/user.service.js";
+import type { LoginInput, RegisterInput } from "../validation/index.js";
+import { EmailVerificationService } from "../verification/verification.service.js";
+import { SessionService } from "./session.service.js";
 export declare class AuthService {
     private userService;
     private sessionService;

package/dist/session/auth.service.js

@@ -11,12 +11,12 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
 import { CACHE_PROVIDER, eventBus, Inject, Injectable, } from "@veap/kernel";
-import { authValidators, performFullUserAugmentation } from "../common/logic";
-import { PASSWORD_HASHER } from "../crypto/contracts";
-import { UserService } from "../users/user.service";
-import { loginSchema, registerSchema } from "../validation";
-import { EmailVerificationService } from "../verification/verification.service";
-import { SessionService } from "./session.service";
+import { authValidators, performFullUserAugmentation, } from "../common/logic.js";
+import { PASSWORD_HASHER } from "../crypto/contracts.js";
+import { UserService } from "../users/user.service.js";
+import { loginSchema, registerSchema } from "../validation/index.js";
+import { EmailVerificationService } from "../verification/verification.service.js";
+import { SessionService } from "./session.service.js";
 let AuthService = class AuthService {
     userService;
     sessionService;
@@ -143,8 +143,7 @@ let AuthService = class AuthService {
                 message: "Email address is already registered",
             };
         }
-        const passwordHash = await this.hasher.hash(password);
-        const user = await this.userService.createUser(normalizedEmail, username, passwordHash);
+        const user = await this.userService.createUser(normalizedEmail, username, password);
         const sessionFlags = {};
         const sessionToken = await this.sessionService.generateSessionToken();
         const session = await this.sessionService.createSession(sessionToken, user.id, sessionFlags);

package/dist/session/contracts.d.ts

@@ -1,4 +1,4 @@
-import type { AuthSession, FullUser, Session, SessionFlags, UserSession } from "../common";
+import type { AuthSession, FullUser, Session, SessionFlags, UserSession } from "../common/index.js";
 export type { AuthSession, FullUser, Session, SessionFlags, UserSession };
 /** A session together with its owner, as loaded by `findWithUser`. */
 export interface SessionWithUser {

package/dist/session/index.d.ts

@@ -1,5 +1,5 @@
-export * from "./auth.service";
-export * from "./contracts";
-export * from "./session.facade";
-export * from "./session.repository";
-export * from "./session.service";
+export * from "./auth.service.js";
+export * from "./contracts.js";
+export * from "./session.facade.js";
+export * from "./session.repository.js";
+export * from "./session.service.js";

package/dist/session/index.js

@@ -1,5 +1,5 @@
-export * from "./auth.service";
-export * from "./contracts";
-export * from "./session.facade";
-export * from "./session.repository";
-export * from "./session.service";
+export * from "./auth.service.js";
+export * from "./contracts.js";
+export * from "./session.facade.js";
+export * from "./session.repository.js";
+export * from "./session.service.js";

package/dist/session/session.facade.d.ts

@@ -1,4 +1,4 @@
-import type { AuthSession, SessionFlags, Session as SessionType, UserSession } from "../common";
+import type { AuthSession, SessionFlags, Session as SessionType, UserSession } from "../common/index.js";
 export declare function getIPAddress(): Promise<string | null>;
 export declare function validateSessionToken(token: string): Promise<AuthSession>;
 export declare const getCurrentSession: () => Promise<AuthSession>;

package/dist/session/session.facade.js

@@ -1,8 +1,8 @@
 "use server";
 import { app } from "@veap/kernel";
 import { cache } from "react";
-import { authContext, isAuthContextBound } from "../common/context";
-import { SessionService } from "./session.service";
+import { authContext, isAuthContextBound } from "../common/context.js";
+import { SessionService } from "./session.service.js";
 async function resolveSessionService() {
     const g = globalThis;
     if (g.__VEAP_BOOTSTRAPPING_PROMISE__) {

package/dist/session/session.repository.d.ts

@@ -1,5 +1,5 @@
-import type { Session as SessionEntity } from "../common";
-import type { CreateSessionRecord, ISessionRepository, SessionWithUser } from "./contracts";
+import type { Session as SessionEntity } from "../common/index.js";
+import type { CreateSessionRecord, ISessionRepository, SessionWithUser } from "./contracts.js";
 /**
  * `ISessionRepository` adapter backed by the `Session` ActiveRecord model.
  */

package/dist/session/session.repository.js

@@ -1,4 +1,4 @@
-import { Session } from "../models/Session";
+import { Session } from "../models/Session.js";
 /**
  * `ISessionRepository` adapter backed by the `Session` ActiveRecord model.
  */

package/dist/session/session.service.d.ts

@@ -1,7 +1,7 @@
 import { type ICookieStore, type IHttpRequestContext } from "@veap/kernel";
-import { type ITokenGenerator } from "../crypto/contracts";
-import type { AuthSession, SessionFlags, Session as SessionType, UserSession } from "../common";
-import { type ISessionRepository } from "./contracts";
+import type { AuthSession, SessionFlags, Session as SessionType, UserSession } from "../common/index.js";
+import { type ITokenGenerator } from "../crypto/contracts.js";
+import { type ISessionRepository } from "./contracts.js";
 export declare class SessionService {
     private readonly sessions;
     private readonly tokens;

package/dist/session/session.service.js

@@ -13,10 +13,11 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 import { isIP } from "node:net";
 import { COOKIE_STORE, Inject, Injectable, REQUEST_CONTEXT, } from "@veap/kernel";
 import { addDays } from "date-fns";
-import { augmentSession } from "../common/augment";
-import { performFullUserAugmentation } from "../common/logic";
-import { TOKEN_GENERATOR } from "../crypto/contracts";
-import { SESSION_REPOSITORY } from "./contracts";
+import { augmentSession } from "../common/augment.js";
+import { getAuthRoutes } from "../common/context.js";
+import { performFullUserAugmentation } from "../common/logic.js";
+import { TOKEN_GENERATOR } from "../crypto/contracts.js";
+import { SESSION_REPOSITORY } from "./contracts.js";
 let SessionService = class SessionService {
     sessions;
     tokens;
@@ -175,7 +176,8 @@ let SessionService = class SessionService {
             await this.invalidateSession(session.id);
             await this.deleteSessionTokenCookie();
         }
-        await this.requestContext.redirect("/signin");
+        const routes = getAuthRoutes();
+        await this.requestContext.redirect(routes.signIn);
     }
     /**
      * Get all active sessions for a user.

package/dist/users/contracts.d.ts

@@ -1,4 +1,4 @@
-import type { FullUser, User } from "../common";
+import type { FullUser, User } from "../common/index.js";
 export type { FullUser, User };
 export interface CreateUserRecord {
     email: string;
@@ -27,6 +27,7 @@ export interface IUserRepository {
     update(id: string, changes: UpdateUserRecord): Promise<void>;
     setRecoveryCode(id: string, encrypted: Uint8Array): Promise<void>;
     setEmailVerifiedIfEmailMatches(id: string, email: string): Promise<boolean>;
+    isEmailAvailable(email: string): Promise<boolean>;
 }
 /** Injection token for the user repository port. */
 export declare const USER_REPOSITORY: unique symbol;

package/dist/users/index.d.ts

@@ -1,4 +1,4 @@
-export * from "./contracts";
-export * from "./user.facade";
-export * from "./user.repository";
-export * from "./user.service";
+export * from "./contracts.js";
+export * from "./user.facade.js";
+export * from "./user.repository.js";
+export * from "./user.service.js";

package/dist/users/index.js

@@ -1,4 +1,4 @@
-export * from "./contracts";
-export * from "./user.facade";
-export * from "./user.repository";
-export * from "./user.service";
+export * from "./contracts.js";
+export * from "./user.facade.js";
+export * from "./user.repository.js";
+export * from "./user.service.js";

package/dist/users/user.facade.d.ts

@@ -1,12 +1,26 @@
-import type { User } from "../common";
+import type { User } from "../common/index.js";
 export declare function verifyUsernameInput(username: string): Promise<boolean>;
+export declare function isEmailAvailable(email: string): Promise<boolean>;
+/**
+ * Checks if an email address is available for registration.
+ * Compatible with legacy imports.
+ */
+export declare function checkEmailAvailability(email: string): Promise<boolean>;
 export declare function createUser(email: string, username: string, password: string): Promise<User>;
 export declare function createOAuthUser(email: string, name: string, image?: string): Promise<User>;
 export declare function getUserById(userId: string): Promise<User | null>;
+export declare function getUserRecoveryCode(userId: string): Promise<string>;
+/**
+ * @deprecated Use `getUserRecoveryCode` instead.
+ */
 export declare function getUserRecoverCode(userId: string): Promise<string>;
 export declare function resetUserRecoveryCode(userId: string): Promise<string>;
 export declare function updateUserPassword(userId: string, password: string): Promise<void>;
 export declare function updateUserName(userId: string, name: string): Promise<void>;
+export declare function updateUserAvatar(userId: string, image: string): Promise<void>;
+/**
+ * @deprecated Use `updateUserAvatar` instead.
+ */
 export declare function updateUserAwatar(userId: string, image: string): Promise<void>;
 export declare function updateUserEmailAndSetEmailAsVerified(userId: string, email: string): Promise<void>;
 export declare function setUserAsEmailVerifiedIfEmailMatches(userId: string, email: string): Promise<boolean>;

package/dist/users/user.facade.js

@@ -1,8 +1,15 @@
 "use server";
 import { app } from "@veap/kernel";
-import { authContext, isAuthContextBound } from "../common/context";
-import { UserService } from "./user.service";
+import { authContext, isAuthContextBound } from "../common/context.js";
+import { UserService } from "./user.service.js";
 async function resolveUserService() {
+    const g = globalThis;
+    if (g.__VEAP_BOOTSTRAPPING_PROMISE__) {
+        try {
+            await g.__VEAP_BOOTSTRAPPING_PROMISE__;
+        }
+        catch { }
+    }
     if (isAuthContextBound()) {
         return authContext().user;
     }
@@ -12,6 +19,17 @@ export async function verifyUsernameInput(username) {
     const service = await resolveUserService();
     return service.verifyUsernameInput(username);
 }
+export async function isEmailAvailable(email) {
+    const service = await resolveUserService();
+    return service.isEmailAvailable(email);
+}
+/**
+ * Checks if an email address is available for registration.
+ * Compatible with legacy imports.
+ */
+export async function checkEmailAvailability(email) {
+    return isEmailAvailable(email);
+}
 export async function createUser(email, username, password) {
     const service = await resolveUserService();
     return service.createUser(email, username, password);
@@ -24,9 +42,15 @@ export async function getUserById(userId) {
     const service = await resolveUserService();
     return service.getUserById(userId);
 }
-export async function getUserRecoverCode(userId) {
+export async function getUserRecoveryCode(userId) {
     const service = await resolveUserService();
-    return service.getUserRecoverCode(userId);
+    return service.getUserRecoveryCode(userId);
+}
+/**
+ * @deprecated Use `getUserRecoveryCode` instead.
+ */
+export async function getUserRecoverCode(userId) {
+    return getUserRecoveryCode(userId);
 }
 export async function resetUserRecoveryCode(userId) {
     const service = await resolveUserService();
@@ -40,9 +64,15 @@ export async function updateUserName(userId, name) {
     const service = await resolveUserService();
     return service.updateUserName(userId, name);
 }
-export async function updateUserAwatar(userId, image) {
+export async function updateUserAvatar(userId, image) {
     const service = await resolveUserService();
-    return service.updateUserAwatar(userId, image);
+    return service.updateUserAvatar(userId, image);
+}
+/**
+ * @deprecated Use `updateUserAvatar` instead.
+ */
+export async function updateUserAwatar(userId, image) {
+    return updateUserAvatar(userId, image);
 }
 export async function updateUserEmailAndSetEmailAsVerified(userId, email) {
     const service = await resolveUserService();

package/dist/users/user.repository.d.ts

@@ -1,5 +1,5 @@
-import type { User as UserEntity } from "../common";
-import type { CreateUserRecord, IUserRepository, UpdateUserRecord } from "./contracts";
+import type { User as UserEntity } from "../common/index.js";
+import type { CreateUserRecord, IUserRepository, UpdateUserRecord } from "./contracts.js";
 /**
  * `IUserRepository` adapter backed by the `User` ActiveRecord model.
  */
@@ -12,4 +12,5 @@ export declare class ActiveRecordUserRepository implements IUserRepository {
     update(id: string, changes: UpdateUserRecord): Promise<void>;
     setRecoveryCode(id: string, encrypted: Uint8Array): Promise<void>;
     setEmailVerifiedIfEmailMatches(id: string, email: string): Promise<boolean>;
+    isEmailAvailable(email: string): Promise<boolean>;
 }

package/dist/users/user.repository.js

@@ -1,4 +1,4 @@
-import { User } from "../models/User";
+import { User } from "../models/User.js";
 /**
  * `IUserRepository` adapter backed by the `User` ActiveRecord model.
  */
@@ -52,4 +52,9 @@ export class ActiveRecordUserRepository {
         });
         return updated > 0;
     }
+    async isEmailAvailable(email) {
+        const normalized = email.toLowerCase().trim();
+        const exists = await User.where("email", normalized).exists();
+        return !exists;
+    }
 }

package/dist/users/user.service.d.ts

@@ -1,7 +1,7 @@
-import { type IPasswordHasher, type ISecretCipher, type ITokenGenerator } from "../crypto/contracts";
-import type { User } from "../common";
-import { type IRoleRepository } from "../rbac/contracts";
-import { type IUserRepository } from "./contracts";
+import type { User } from "../common/index.js";
+import { type IPasswordHasher, type ISecretCipher, type ITokenGenerator } from "../crypto/contracts.js";
+import { type IRoleRepository } from "../rbac/contracts.js";
+import { type IUserRepository } from "./contracts.js";
 export declare class UserService {
     private readonly users;
     private readonly roles;
@@ -13,6 +13,10 @@ export declare class UserService {
      * Validates the username input.
      */
     verifyUsernameInput(username: string): Promise<boolean>;
+    /**
+     * Checks whether the specified email is available for registration.
+     */
+    isEmailAvailable(email: string): Promise<boolean>;
     /**
      * Creates a new user with an initial recovery code and default 'user' role.
      */
@@ -28,6 +32,10 @@ export declare class UserService {
     /**
      * Decrypts and returns the user's recovery code.
      */
+    getUserRecoveryCode(userId: string): Promise<string>;
+    /**
+     * @deprecated Use `getUserRecoveryCode` instead.
+     */
     getUserRecoverCode(userId: string): Promise<string>;
     /**
      * Generates and sets a new recovery code for the user.
@@ -42,7 +50,11 @@ export declare class UserService {
      */
     updateUserName(userId: string, name: string): Promise<void>;
     /**
-     * Updates the user's image.
+     * Updates the user's avatar image.
+     */
+    updateUserAvatar(userId: string, image: string): Promise<void>;
+    /**
+     * @deprecated Use `updateUserAvatar` instead.
      */
     updateUserAwatar(userId: string, image: string): Promise<void>;
     /**