@vitnode/core 1.2.0-canary.76 → 1.2.0-canary.78

package/dist/src/api/models/storage.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"storage.js","names":[],"sources":["../../../../src/api/models/storage.ts"],"sourcesContent":["import type { Context } from \"hono\";\n\nimport { and, eq } from \"drizzle-orm\";\nimport { HTTPException } from \"hono/http-exception\";\n\nimport { core_files } from \"@/database/files\";\nimport {\n  buildStorageKey,\n  generateStorageFileName,\n  replaceFileExtension,\n} from \"@/lib/api/upload\";\n\nconst DEFAULT_IMAGE_QUALITY = 85;\n\n// Formats sharp can lossily re-encode. SVG/GIF are intentionally excluded to\n// preserve vectors and animation.\nconst PROCESSABLE_IMAGE_MIME_TYPES = new Set([\n  \"image/avif\",\n  \"image/jpeg\",\n  \"image/png\",\n  \"image/tiff\",\n  \"image/webp\",\n]);\n\nexport interface StorageUploadArgs {\n  body: Buffer;\n  contentType?: string;\n  key: string;\n}\n\nexport interface StorageUploadResult {\n  key: string;\n  url: string;\n}\n\n/**\n * Present only on disk-backed adapters (e.g. Local). The Node entry point reads\n * it to mount `serveStatic` for the stored files. Cloud adapters omit it.\n */\nexport interface StorageStaticConfig {\n  mountPath: string;\n  root: string;\n  stripPrefix: string;\n}\n\nexport interface StorageApiPlugin {\n  delete: (key: string) => Promise<void>;\n  getUrl: (key: string) => string;\n  static?: StorageStaticConfig;\n  upload: (args: StorageUploadArgs) => Promise<StorageUploadResult>;\n}\n\nexport interface StorageUploadOptions {\n  /** Allowed MIME types (e.g. `[\"image/png\", \"image/jpeg\"]`). Omit to allow any. */\n  allowedMimeTypes?: string[];\n  file: File;\n  /** Sub-folder under the dated prefix, e.g. `avatars` -> `month_7_2026/avatars/…`. */\n  folder: string;\n  /** Maximum file size in bytes. Omit for no limit. */\n  maxBytes?: number;\n  /** Extra data stored in the `core_files.metadata` JSON column. */\n  metadata?: Record<string, unknown>;\n  /**\n   * Owner recorded in `core_files.userId`. When omitted it defaults to the\n   * request's admin user (on admin routes), then the frontend session user, else\n   * null. Pass it explicitly - including `null` - to override, e.g. when an admin\n   * uploads on behalf of another user.\n   */\n  userId?: null | number;\n}\n\ninterface ProcessedImage {\n  body: Buffer;\n  dimensions: null | { height: number; width: number };\n  // New extension (incl. leading dot) when the format changed, else null.\n  extension: null | string;\n  mimeType: string;\n}\n\nexport class StorageModel {\n  constructor(c: Context) {\n    this.c = c;\n  }\n\n  protected readonly c: Context;\n\n  // Re-encodes images with sharp when `storage.image` is set: shrinks them at\n  // the configured quality, converts to WebP unless disabled, and reads their\n  // pixel dimensions. Non-image files (and everything when `image` is off) pass\n  // through untouched. sharp is imported lazily so it only loads when used.\n  private async processImage(\n    body: Buffer,\n    mimeType: string,\n  ): Promise<ProcessedImage> {\n    const image = this.c.get(\"core\")?.storage?.image;\n    if (!image || !PROCESSABLE_IMAGE_MIME_TYPES.has(mimeType)) {\n      return { body, mimeType, extension: null, dimensions: null };\n    }\n\n    const quality = image.quality ?? DEFAULT_IMAGE_QUALITY;\n    const toWebp = image.webp !== false;\n\n    let sharp;\n    try {\n      const { default: s } = await import(\"sharp\");\n      sharp = s;\n      // eslint-disable-next-line @typescript-eslint/no-unused-vars\n    } catch (err) {\n      throw new HTTPException(500, {\n        message: \"Image optimization library (sharp) failed to load\",\n      });\n    }\n\n    try {\n      const metadata = await sharp(body).metadata();\n      if (!metadata.format) {\n        return { body, mimeType, extension: null, dimensions: null };\n      }\n\n      const targetFormat = toWebp ? \"webp\" : metadata.format;\n      const output = await sharp(body)\n        .toFormat(targetFormat, { quality })\n        .toBuffer();\n\n      return {\n        body: output,\n        mimeType: toWebp ? \"image/webp\" : mimeType,\n        extension: toWebp ? \".webp\" : null,\n        dimensions:\n          metadata.width && metadata.height\n            ? { width: metadata.width, height: metadata.height }\n            : null,\n      };\n    } catch {\n      throw new HTTPException(400, {\n        message: \"Invalid or corrupt image file\",\n      });\n    }\n  }\n\n  private requireProvider(): StorageApiPlugin {\n    const provider = this.c.get(\"core\").storage?.adapter;\n    if (!provider) {\n      throw new HTTPException(500, {\n        message: \"Storage provider not found\",\n      });\n    }\n\n    return provider;\n  }\n\n  async delete(key: string): Promise<void> {\n    await this.requireProvider().delete(key);\n  }\n\n  /**\n   * Removes a stored file by its `core_files` id: deletes the underlying object\n   * from the storage provider (best-effort - a missing object doesn't block the\n   * record removal), then deletes the database row. Throws a 404 when no file\n   * with that id exists. Pass `ownerId` to scope the delete to that user's files\n   * (so a user can only remove their own uploads).\n   */\n  async deleteFile(id: number, ownerId?: number): Promise<void> {\n    const db = this.c.get(\"db\");\n    const where =\n      ownerId === undefined\n        ? eq(core_files.id, id)\n        : and(eq(core_files.id, id), eq(core_files.userId, ownerId));\n\n    const [row] = await db\n      .select({ key: core_files.key })\n      .from(core_files)\n      .where(where)\n      .limit(1);\n\n    if (!row) {\n      throw new HTTPException(404, { message: \"File not found\" });\n    }\n\n    const provider = this.c.get(\"core\").storage?.adapter;\n    if (provider) {\n      await provider.delete(row.key).catch(() => undefined);\n    }\n\n    await db.delete(core_files).where(where);\n  }\n\n  getUrl(key: string): string {\n    return this.requireProvider().getUrl(key);\n  }\n\n  async upload({\n    allowedMimeTypes,\n    file,\n    folder,\n    maxBytes,\n    metadata,\n    userId,\n  }: StorageUploadOptions): Promise<StorageUploadResult> {\n    const provider = this.requireProvider();\n\n    if (maxBytes !== undefined && file.size > maxBytes) {\n      throw new HTTPException(400, {\n        message: `File exceeds the maximum size of ${maxBytes} bytes`,\n      });\n    }\n    if (allowedMimeTypes && !allowedMimeTypes.includes(file.type)) {\n      throw new HTTPException(400, {\n        message: `Unsupported file type: ${file.type || \"unknown\"}`,\n      });\n    }\n\n    const processed = await this.processImage(\n      Buffer.from(await file.arrayBuffer()),\n      file.type,\n    );\n\n    // When a conversion changed the format, reflect the new extension in both\n    // the stored key and the display name so downloads and previews are honest.\n    const displayName = processed.extension\n      ? replaceFileExtension(file.name, processed.extension)\n      : file.name;\n    const key = buildStorageKey({\n      folder,\n      fileName: generateStorageFileName(\n        file.name,\n        processed.extension ?? undefined,\n      ),\n    });\n\n    const result = await provider.upload({\n      key,\n      body: processed.body,\n      contentType: processed.mimeType || undefined,\n    });\n\n    const ownerId =\n      userId !== undefined\n        ? userId\n        : (this.c.get(\"admin\")?.user.id ?? this.c.get(\"user\")?.id ?? null);\n\n    try {\n      await this.c\n        .get(\"db\")\n        .insert(core_files)\n        .values({\n          name: displayName,\n          key: result.key,\n          folder,\n          mimeType: processed.mimeType || null,\n          size: processed.body.length,\n          userId: ownerId,\n          pluginId: this.c.get(\"plugin\")?.id ?? null,\n          metadata: {\n            ...(metadata ?? {}),\n            ...(processed.dimensions\n              ? { dimensions: processed.dimensions }\n              : {}),\n          },\n        });\n    } catch (error) {\n      await provider.delete(result.key).catch(() => undefined);\n      throw error;\n    }\n\n    return result;\n  }\n}\n"],"mappings":"oQAYA,MAIM,EAA+B,IAAI,IAAI,CAC3C,aACA,aACA,YACA,aACA,YACF,CAAC,EAyDD,IAAa,EAAb,KAA0B,CACxB,YAAY,EAAY,CACtB,KAAK,EAAI,CACX,CAEA,EAMA,MAAc,aACZ,EACA,EACyB,CACzB,IAAM,EAAQ,KAAK,EAAE,IAAI,MAAM,CAAC,EAAE,SAAS,MAC3C,GAAI,CAAC,GAAS,CAAC,EAA6B,IAAI,CAAQ,EACtD,MAAO,CAAE,OAAM,WAAU,UAAW,KAAM,WAAY,IAAK,EAG7D,IAAM,EAAU,EAAM,SAAW,GAC3B,EAAS,EAAM,OAAS,GAE1B,EACJ,GAAI,CACF,GAAM,CAAE,QAAS,GAAM,MAAM,OAAO,SACpC,EAAQ,CAEV,MAAc,CACZ,MAAM,IAAI,EAAc,IAAK,CAC3B,QAAS,mDACX,CAAC,CACH,CAEA,GAAI,CACF,IAAM,EAAW,MAAM,EAAM,CAAI,CAAC,CAAC,SAAS,EAC5C,GAAI,CAAC,EAAS,OACZ,MAAO,CAAE,OAAM,WAAU,UAAW,KAAM,WAAY,IAAK,EAG7D,IAAM,EAAe,EAAS,OAAS,EAAS,OAKhD,MAAO,CACL,KAAM,MALa,EAAM,CAAI,CAAC,CAC7B,SAAS,EAAc,CAAE,SAAQ,CAAC,CAAC,CACnC,SAAS,EAIV,SAAU,EAAS,aAAe,EAClC,UAAW,EAAS,QAAU,KAC9B,WACE,EAAS,OAAS,EAAS,OACvB,CAAE,MAAO,EAAS,MAAO,OAAQ,EAAS,MAAO,EACjD,IACR,CACF,MAAQ,CACN,MAAM,IAAI,EAAc,IAAK,CAC3B,QAAS,+BACX,CAAC,CACH,CACF,CAEA,iBAA4C,CAC1C,IAAM,EAAW,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,SAAS,QAC7C,GAAI,CAAC,EACH,MAAM,IAAI,EAAc,IAAK,CAC3B,QAAS,4BACX,CAAC,EAGH,OAAO,CACT,CAEA,MAAM,OAAO,EAA4B,CACvC,MAAM,KAAK,gBAAgB,CAAC,CAAC,OAAO,CAAG,CACzC,CASA,MAAM,WAAW,EAAY,EAAiC,CAC5D,IAAM,EAAK,KAAK,EAAE,IAAI,IAAI,EACpB,EACJ,IAAY,IAAA,GACR,EAAG,EAAW,GAAI,CAAE,EACpB,EAAI,EAAG,EAAW,GAAI,CAAE,EAAG,EAAG,EAAW,OAAQ,CAAO,CAAC,EAEzD,CAAC,GAAO,MAAM,EACjB,OAAO,CAAE,IAAK,EAAW,GAAI,CAAC,CAAC,CAC/B,KAAK,CAAU,CAAC,CAChB,MAAM,CAAK,CAAC,CACZ,MAAM,CAAC,EAEV,GAAI,CAAC,EACH,MAAM,IAAI,EAAc,IAAK,CAAE,QAAS,gBAAiB,CAAC,EAG5D,IAAM,EAAW,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,SAAS,QACzC,GACF,MAAM,EAAS,OAAO,EAAI,GAAG,CAAC,CAAC,UAAY,IAAA,EAAS,EAGtD,MAAM,EAAG,OAAO,CAAU,CAAC,CAAC,MAAM,CAAK,CACzC,CAEA,OAAO,EAAqB,CAC1B,OAAO,KAAK,gBAAgB,CAAC,CAAC,OAAO,CAAG,CAC1C,CAEA,MAAM,OAAO,CACX,mBACA,OACA,SACA,WACA,WACA,UACqD,CACrD,IAAM,EAAW,KAAK,gBAAgB,EAEtC,GAAI,IAAa,IAAA,IAAa,EAAK,KAAO,EACxC,MAAM,IAAI,EAAc,IAAK,CAC3B,QAAS,oCAAoC,EAAS,OACxD,CAAC,EAEH,GAAI,GAAoB,CAAC,EAAiB,SAAS,EAAK,IAAI,EAC1D,MAAM,IAAI,EAAc,IAAK,CAC3B,QAAS,0BAA0B,EAAK,MAAQ,WAClD,CAAC,EAGH,IAAM,EAAY,MAAM,KAAK,aAC3B,OAAO,KAAK,MAAM,EAAK,YAAY,CAAC,EACpC,EAAK,IACP,EAIM,EAAc,EAAU,UAC1B,EAAqB,EAAK,KAAM,EAAU,SAAS,EACnD,EAAK,KACH,EAAM,EAAgB,CAC1B,SACA,SAAU,EACR,EAAK,KACL,EAAU,WAAa,IAAA,EACzB,CACF,CAAC,EAEK,EAAS,MAAM,EAAS,OAAO,CACnC,MACA,KAAM,EAAU,KAChB,YAAa,EAAU,UAAY,IAAA,EACrC,CAAC,EAEK,EACJ,IAAW,IAAA,GAEN,KAAK,EAAE,IAAI,OAAO,CAAC,EAAE,KAAK,IAAM,KAAK,EAAE,IAAI,MAAM,CAAC,EAAE,IAAM,KAD3D,EAGN,GAAI,CACF,MAAM,KAAK,EACR,IAAI,IAAI,CAAC,CACT,OAAO,CAAU,CAAC,CAClB,OAAO,CACN,KAAM,EACN,IAAK,EAAO,IACZ,SACA,SAAU,EAAU,UAAY,KAChC,KAAM,EAAU,KAAK,OACrB,OAAQ,EACR,SAAU,KAAK,EAAE,IAAI,QAAQ,CAAC,EAAE,IAAM,KACtC,SAAU,CACR,GAAI,GAAY,CAAC,EACjB,GAAI,EAAU,WACV,CAAE,WAAY,EAAU,UAAW,EACnC,CAAC,CACP,CACF,CAAC,CACL,OAAS,EAAO,CAEd,MADA,MAAM,EAAS,OAAO,EAAO,GAAG,CAAC,CAAC,UAAY,IAAA,EAAS,EACjD,CACR,CAEA,OAAO,CACT,CACF"}

package/dist/src/api/models/user/get-user-by-id.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"get-user-by-id.js","names":[],"sources":["../../../../../src/api/models/user/get-user-by-id.ts"],"sourcesContent":["import type { Context } from \"hono\";\n\nimport { eq } from \"drizzle-orm\";\n\nimport { core_users } from \"@/database/users\";\n\nexport const getUserById = async ({ id, c }: { c: Context; id: number }) => {\n  const [user] = await c\n    .get(\"db\")\n    .select({\n      id: core_users.id,\n      email: core_users.email,\n      name: core_users.name,\n      nameCode: core_users.nameCode,\n      createdAt: core_users.createdAt,\n      newsletter: core_users.newsletter,\n      avatarColor: core_users.avatarColor,\n      emailVerified: core_users.emailVerified,\n      roleId: core_users.roleId,\n      birthday: core_users.birthday,\n      language: core_users.language,\n    })\n    .from(core_users)\n    .where(eq(core_users.id, id))\n    .limit(1);\n  if (!user) return null;\n\n  return user;\n};\n"],"mappings":"yFAMA,MAAa,EAAc,MAAO,CAAE,KAAI,OAAoC,CAC1E,GAAM,CAAC,GAAQ,MAAM,EAClB,IAAI,IAAI,CAAC,CACT,OAAO,CACN,GAAI,EAAW,GACf,MAAO,EAAW,MAClB,KAAM,EAAW,KACjB,SAAU,EAAW,SACrB,UAAW,EAAW,UACtB,WAAY,EAAW,WACvB,YAAa,EAAW,YACxB,cAAe,EAAW,cAC1B,OAAQ,EAAW,OACnB,SAAU,EAAW,SACrB,SAAU,EAAW,QACvB,CAAC,CAAC,CACD,KAAK,CAAU,CAAC,CAChB,MAAM,EAAG,EAAW,GAAI,CAAE,CAAC,CAAC,CAC5B,MAAM,CAAC,EAGV,OAFK,GAAa,IAGpB"}

package/dist/src/api/models/user/get-user-by-name-code.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"get-user-by-name-code.js","names":[],"sources":["../../../../../src/api/models/user/get-user-by-name-code.ts"],"sourcesContent":["import type { Context } from \"hono\";\n\nimport { eq } from \"drizzle-orm\";\n\nimport { core_users } from \"@/database/users\";\n\nexport const getUserByNameCode = async ({\n  nameCode,\n  c,\n}: {\n  c: Context;\n  nameCode: string;\n}) => {\n  const [user] = await c\n    .get(\"db\")\n    .select({\n      id: core_users.id,\n      email: core_users.email,\n      name: core_users.name,\n      nameCode: core_users.nameCode,\n      createdAt: core_users.createdAt,\n      newsletter: core_users.newsletter,\n      avatarColor: core_users.avatarColor,\n      emailVerified: core_users.emailVerified,\n      roleId: core_users.roleId,\n      birthday: core_users.birthday,\n      language: core_users.language,\n    })\n    .from(core_users)\n    .where(eq(core_users.nameCode, nameCode))\n    .limit(1);\n  if (!user) return null;\n\n  return user;\n};\n"],"mappings":"yFAMA,MAAa,EAAoB,MAAO,CACtC,WACA,OAII,CACJ,GAAM,CAAC,GAAQ,MAAM,EAClB,IAAI,IAAI,CAAC,CACT,OAAO,CACN,GAAI,EAAW,GACf,MAAO,EAAW,MAClB,KAAM,EAAW,KACjB,SAAU,EAAW,SACrB,UAAW,EAAW,UACtB,WAAY,EAAW,WACvB,YAAa,EAAW,YACxB,cAAe,EAAW,cAC1B,OAAQ,EAAW,OACnB,SAAU,EAAW,SACrB,SAAU,EAAW,QACvB,CAAC,CAAC,CACD,KAAK,CAAU,CAAC,CAChB,MAAM,EAAG,EAAW,SAAU,CAAQ,CAAC,CAAC,CACxC,MAAM,CAAC,EAGV,OAFK,GAAa,IAGpB"}

package/dist/src/api/models/user/sign-in-with-passwords.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sign-in-with-passwords.js","names":[],"sources":["../../../../../src/api/models/user/sign-in-with-passwords.ts"],"sourcesContent":["import type { Context } from \"hono\";\n\nimport { eq } from \"drizzle-orm\";\nimport { HTTPException } from \"hono/http-exception\";\n\nimport { core_users } from \"@/database/users\";\n\nimport { PasswordModel } from \"../password\";\n\nexport const signInWithPassword = async ({\n  email,\n  password,\n  c,\n}: {\n  c: Context;\n  email: string;\n  password: string;\n}) => {\n  const [user] = await c\n    .get(\"db\")\n    .select({\n      id: core_users.id,\n      email: core_users.email,\n      password: core_users.password,\n    })\n    .from(core_users)\n    .where(eq(core_users.email, email))\n    .limit(1);\n\n  if (!user?.password) {\n    throw new HTTPException(403);\n  }\n\n  const validPassword = await new PasswordModel().verifyPassword(\n    password,\n    user.password,\n  );\n\n  if (!validPassword) {\n    throw new HTTPException(403);\n  }\n\n  return { id: user.id, email: user.email };\n};\n"],"mappings":"4LASA,MAAa,EAAqB,MAAO,CACvC,QACA,WACA,OAKI,CACJ,GAAM,CAAC,GAAQ,MAAM,EAClB,IAAI,IAAI,CAAC,CACT,OAAO,CACN,GAAI,EAAW,GACf,MAAO,EAAW,MAClB,SAAU,EAAW,QACvB,CAAC,CAAC,CACD,KAAK,CAAU,CAAC,CAChB,MAAM,EAAG,EAAW,MAAO,CAAK,CAAC,CAAC,CAClC,MAAM,CAAC,EAWV,GATI,CAAC,GAAM,UASP,CAAC,MALuB,IAAI,EAAc,CAAC,CAAC,eAC9C,EACA,EAAK,QACP,EAGE,MAAM,IAAI,EAAc,GAAG,EAG7B,MAAO,CAAE,GAAI,EAAK,GAAI,MAAO,EAAK,KAAM,CAC1C"}

package/dist/src/api/models/user/sign-up.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sign-up.js","names":[],"sources":["../../../../../src/api/models/user/sign-up.ts"],"sourcesContent":["import type { Context } from \"hono\";\n\nimport { and, count, eq, or } from \"drizzle-orm\";\nimport { HTTPException } from \"hono/http-exception\";\n\nimport { generateAvatarColor } from \"@/api/modules/users/avatar-color\";\nimport { core_roles } from \"@/database/roles\";\nimport { core_users } from \"@/database/users\";\nimport { removeSpecialCharacters } from \"@/lib/special-characters\";\n\nconst getDefaultData = async (\n  c: Context,\n): Promise<{\n  emailVerified: boolean;\n  roleId: number;\n}> => {\n  const [countUsers] = await c\n    .get(\"db\")\n    .select({ count: count() })\n    .from(core_users);\n\n  // If no users, return root group\n  if (countUsers.count === 0) {\n    const [defaultRole] = await c\n      .get(\"db\")\n      .select({\n        id: core_roles.id,\n      })\n      .from(core_roles)\n      .where(and(eq(core_roles.default, false), eq(core_roles.root, true)))\n      .limit(1);\n\n    if (!defaultRole) {\n      throw new HTTPException(400, {\n        message: \"Default group not found.\",\n      });\n    }\n\n    return {\n      roleId: defaultRole.id,\n      emailVerified: true,\n    };\n  }\n\n  const [defaultRole] = await c\n    .get(\"db\")\n    .select({\n      id: core_roles.id,\n    })\n    .from(core_roles)\n    .where(and(eq(core_roles.default, true), eq(core_roles.root, false)))\n    .limit(1);\n\n  if (!defaultRole) {\n    throw new HTTPException(400, {\n      message: \"Default role not found.\",\n    });\n  }\n\n  return {\n    roleId: defaultRole.id,\n    emailVerified: !c.get(\"core\").email?.adapter,\n  };\n};\n\nexport const signUp = async (\n  {\n    email,\n    name,\n    newsletter,\n    hashedPassword,\n  }: {\n    email: string;\n    hashedPassword: string | undefined;\n    name: string;\n    newsletter?: boolean;\n  },\n  c: Context,\n) => {\n  const convertToNameSEO = removeSpecialCharacters(name);\n  const checkIfUserExist = await c\n    .get(\"db\")\n    .select({\n      email: core_users.email,\n      name_code: core_users.nameCode,\n    })\n    .from(core_users)\n    .where(\n      or(\n        eq(core_users.email, email),\n        eq(core_users.nameCode, convertToNameSEO),\n      ),\n    );\n\n  const findEmail = checkIfUserExist.find(user => user.email === email);\n  if (findEmail) {\n    throw new HTTPException(409, {\n      message: \"Email already exists\",\n    });\n  }\n  const findName = checkIfUserExist.find(\n    user => user.name_code === convertToNameSEO,\n  );\n  if (findName) {\n    throw new HTTPException(409, {\n      message: \"Name already exists\",\n    });\n  }\n\n  const { roleId, emailVerified } = await getDefaultData(c);\n  const [data] = await c\n    .get(\"db\")\n    .insert(core_users)\n    .values({\n      email,\n      name,\n      nameCode: convertToNameSEO,\n      // TODO: Handle newsletter only if email is allowed\n      newsletter,\n      password: hashedPassword,\n      avatarColor: generateAvatarColor(name),\n      roleId,\n      emailVerified,\n      ipAddress: c.get(\"ipAddress\"),\n      // TODO: Handle language\n      // language: await this.getLanguage(req),\n    })\n    .returning();\n\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  const { password: _, ...user } = data;\n\n  return user;\n};\n"],"mappings":"wXAUA,MAAM,EAAiB,KACrB,IAII,CACJ,GAAM,CAAC,GAAc,MAAM,EACxB,IAAI,IAAI,CAAC,CACT,OAAO,CAAE,MAAO,EAAM,CAAE,CAAC,CAAC,CAC1B,KAAK,CAAU,EAGlB,GAAI,EAAW,QAAU,EAAG,CAC1B,GAAM,CAAC,GAAe,MAAM,EACzB,IAAI,IAAI,CAAC,CACT,OAAO,CACN,GAAI,EAAW,EACjB,CAAC,CAAC,CACD,KAAK,CAAU,CAAC,CAChB,MAAM,EAAI,EAAG,EAAW,QAAS,EAAK,EAAG,EAAG,EAAW,KAAM,EAAI,CAAC,CAAC,CAAC,CACpE,MAAM,CAAC,EAEV,GAAI,CAAC,EACH,MAAM,IAAI,EAAc,IAAK,CAC3B,QAAS,0BACX,CAAC,EAGH,MAAO,CACL,OAAQ,EAAY,GACpB,cAAe,EACjB,CACF,CAEA,GAAM,CAAC,GAAe,MAAM,EACzB,IAAI,IAAI,CAAC,CACT,OAAO,CACN,GAAI,EAAW,EACjB,CAAC,CAAC,CACD,KAAK,CAAU,CAAC,CAChB,MAAM,EAAI,EAAG,EAAW,QAAS,EAAI,EAAG,EAAG,EAAW,KAAM,EAAK,CAAC,CAAC,CAAC,CACpE,MAAM,CAAC,EAEV,GAAI,CAAC,EACH,MAAM,IAAI,EAAc,IAAK,CAC3B,QAAS,yBACX,CAAC,EAGH,MAAO,CACL,OAAQ,EAAY,GACpB,cAAe,CAAC,EAAE,IAAI,MAAM,CAAC,CAAC,OAAO,OACvC,CACF,EAEa,EAAS,MACpB,CACE,QACA,OACA,aACA,kBAOF,IACG,CACH,IAAM,EAAmB,EAAwB,CAAI,EAC/C,EAAmB,MAAM,EAC5B,IAAI,IAAI,CAAC,CACT,OAAO,CACN,MAAO,EAAW,MAClB,UAAW,EAAW,QACxB,CAAC,CAAC,CACD,KAAK,CAAU,CAAC,CAChB,MACC,EACE,EAAG,EAAW,MAAO,CAAK,EAC1B,EAAG,EAAW,SAAU,CAAgB,CAC1C,CACF,EAGF,GADkB,EAAiB,KAAK,GAAQ,EAAK,QAAU,CACnD,EACV,MAAM,IAAI,EAAc,IAAK,CAC3B,QAAS,sBACX,CAAC,EAKH,GAHiB,EAAiB,KAChC,GAAQ,EAAK,YAAc,CAElB,EACT,MAAM,IAAI,EAAc,IAAK,CAC3B,QAAS,qBACX,CAAC,EAGH,GAAM,CAAE,SAAQ,iBAAkB,MAAM,EAAe,CAAC,EAClD,CAAC,GAAQ,MAAM,EAClB,IAAI,IAAI,CAAC,CACT,OAAO,CAAU,CAAC,CAClB,OAAO,CACN,QACA,OACA,SAAU,EAEV,aACA,SAAU,EACV,YAAa,EAAoB,CAAI,EACrC,SACA,gBACA,UAAW,EAAE,IAAI,WAAW,CAG9B,CAAC,CAAC,CACD,UAAU,EAGP,CAAE,SAAU,EAAG,GAAG,GAAS,EAEjC,OAAO,CACT"}

package/dist/src/api/models/user.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"user.js","names":[],"sources":["../../../../src/api/models/user.ts"],"sourcesContent":["import { getUserById } from \"./user/get-user-by-id\";\nimport { getUserByNameCode } from \"./user/get-user-by-name-code\";\nimport { signInWithPassword } from \"./user/sign-in-with-passwords\";\nimport { signUp } from \"./user/sign-up\";\n\nexport class UserModel {\n  getUserById = getUserById;\n  getUserByNameCode = getUserByNameCode;\n  signInWithPassword = signInWithPassword;\n  signUp = signUp;\n}\n"],"mappings":"4OAKA,IAAa,EAAb,KAAuB,CACrB,YAAc,EACd,kBAAoB,EACpB,mBAAqB,EACrB,OAAS,CACX"}

package/dist/src/api/modules/admin/admin.module.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin.module.js","names":[],"sources":["../../../../../src/api/modules/admin/admin.module.ts"],"sourcesContent":["import { buildModule } from \"@/api/lib/module\";\nimport { CONFIG_PLUGIN } from \"@/config\";\n\nimport { advancedAdminModule } from \"./advanced/advanced.admin.module\";\nimport { debugAdminModule } from \"./debug/debug.admin.module\";\nimport { filesAdminModule } from \"./files/files.admin.module\";\nimport { rolesAdminModule } from \"./roles/roles.admin.module\";\nimport { sendNotificationRoute } from \"./routes/notifications.route\";\nimport { sessionAdminRoute } from \"./routes/session.route\";\nimport { staffAdminModule } from \"./staff/staff.admin.module\";\nimport { usersAdminModule } from \"./users/users.admin.module\";\n\nexport const adminModule = buildModule({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  name: \"admin\",\n  routes: [sessionAdminRoute, sendNotificationRoute],\n  modules: [\n    usersAdminModule,\n    rolesAdminModule,\n    staffAdminModule,\n    debugAdminModule,\n    advancedAdminModule,\n    filesAdminModule,\n  ],\n  cronJobs: [],\n});\n"],"mappings":"0nBAYA,MAAa,EAAc,EAAY,CACrC,SAAU,EAAc,SACxB,KAAM,QACN,OAAQ,CAAC,EAAmB,CAAqB,EACjD,QAAS,CACP,EACA,EACA,EACA,EACA,EACA,CACF,EACA,SAAU,CAAC,CACb,CAAC"}

package/dist/src/api/modules/admin/advanced/advanced.admin.module.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"advanced.admin.module.js","names":[],"sources":["../../../../../../src/api/modules/admin/advanced/advanced.admin.module.ts"],"sourcesContent":["import { buildModule } from \"@/api/lib/module\";\nimport { CONFIG_PLUGIN } from \"@/config\";\n\nimport { cronAdminModule } from \"./cron/cron.admin.module\";\nimport { queueAdminModule } from \"./queue/queue.admin.module\";\n\nexport const advancedAdminModule = buildModule({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  name: \"advanced\",\n  routes: [],\n  modules: [cronAdminModule, queueAdminModule],\n});\n"],"mappings":"0OAMA,MAAa,EAAsB,EAAY,CAC7C,SAAU,EAAc,SACxB,KAAM,WACN,OAAQ,CAAC,EACT,QAAS,CAAC,EAAiB,CAAgB,CAC7C,CAAC"}

package/dist/src/api/modules/admin/advanced/cron/cron.admin.module.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cron.admin.module.js","names":[],"sources":["../../../../../../../src/api/modules/admin/advanced/cron/cron.admin.module.ts"],"sourcesContent":["import { buildModule } from \"@/api/lib/module\";\nimport { CONFIG_PLUGIN } from \"@/config\";\n\nimport { getCronsRoute } from \"./routes/get.route\";\nimport { runCronRoute } from \"./routes/run.route\";\n\nexport const cronAdminModule = buildModule({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  name: \"cron\",\n  routes: [getCronsRoute, runCronRoute],\n});\n"],"mappings":"4NAMA,MAAa,EAAkB,EAAY,CACzC,SAAU,EAAc,SACxB,KAAM,OACN,OAAQ,CAAC,EAAe,CAAY,CACtC,CAAC"}

package/dist/src/api/modules/admin/advanced/cron/routes/get.route.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"get.route.js","names":[],"sources":["../../../../../../../../src/api/modules/admin/advanced/cron/routes/get.route.ts"],"sourcesContent":["import z from \"zod\";\n\nimport { buildRoute } from \"@/api/lib/route\";\nimport {\n  withPagination,\n  zodPaginationPageInfo,\n  zodPaginationQuery,\n} from \"@/api/lib/with-pagination\";\nimport { CONFIG_PLUGIN } from \"@/config\";\nimport { core_cron } from \"@/database/cron\";\n\nexport const getCronsRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  route: {\n    method: \"get\",\n    description: \"Get Admin Cron Logs\",\n    path: \"/\",\n    request: {\n      query: zodPaginationQuery.extend({\n        order: z.enum([\"asc\", \"desc\"]).optional(),\n        orderBy: z.enum([\"createdAt\", \"lastRun\", \"nextRun\"]).optional(),\n      }),\n    },\n    responses: {\n      200: {\n        content: {\n          \"application/json\": {\n            schema: z.object({\n              edges: z.array(\n                z.object({\n                  id: z.number(),\n                  createdAt: z.date(),\n                  name: z.string(),\n                  description: z.string().nullable(),\n                  pluginId: z.string(),\n                  module: z.string(),\n                  lastRun: z.date().nullable(),\n                  nextRun: z.date().nullable(),\n                  schedule: z.string(),\n                }),\n              ),\n              pageInfo: zodPaginationPageInfo,\n            }),\n          },\n        },\n        description: \"List of cron jobs\",\n      },\n    },\n  },\n  handler: async c => {\n    const query = c.req.valid(\"query\");\n    const data = await withPagination({\n      params: {\n        query,\n      },\n      c,\n      primaryCursor: core_cron.id,\n      query: async ({ limit, where, orderBy }) =>\n        await c\n          .get(\"db\")\n          .select()\n          .from(core_cron)\n          .where(where)\n          .orderBy(orderBy)\n          .limit(limit),\n      table: core_cron,\n      orderBy: {\n        column: query.orderBy ? core_cron[query.orderBy] : core_cron.lastRun,\n        order: query.order ?? \"desc\",\n      },\n    });\n\n    return c.json(data);\n  },\n});\n"],"mappings":"iUAWA,MAAa,EAAgB,EAAW,CACtC,SAAU,EAAc,SACxB,MAAO,CACL,OAAQ,MACR,YAAa,sBACb,KAAM,IACN,QAAS,CACP,MAAO,EAAmB,OAAO,CAC/B,MAAO,EAAE,KAAK,CAAC,MAAO,MAAM,CAAC,CAAC,CAAC,SAAS,EACxC,QAAS,EAAE,KAAK,CAAC,YAAa,UAAW,SAAS,CAAC,CAAC,CAAC,SAAS,CAChE,CAAC,CACH,EACA,UAAW,CACT,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,OAAO,CACf,MAAO,EAAE,MACP,EAAE,OAAO,CACP,GAAI,EAAE,OAAO,EACb,UAAW,EAAE,KAAK,EAClB,KAAM,EAAE,OAAO,EACf,YAAa,EAAE,OAAO,CAAC,CAAC,SAAS,EACjC,SAAU,EAAE,OAAO,EACnB,OAAQ,EAAE,OAAO,EACjB,QAAS,EAAE,KAAK,CAAC,CAAC,SAAS,EAC3B,QAAS,EAAE,KAAK,CAAC,CAAC,SAAS,EAC3B,SAAU,EAAE,OAAO,CACrB,CAAC,CACH,EACA,SAAU,CACZ,CAAC,CACH,CACF,EACA,YAAa,mBACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAClB,IAAM,EAAQ,EAAE,IAAI,MAAM,OAAO,EAC3B,EAAO,MAAM,EAAe,CAChC,OAAQ,CACN,OACF,EACA,IACA,cAAe,EAAU,GACzB,MAAO,MAAO,CAAE,QAAO,QAAO,aAC5B,MAAM,EACH,IAAI,IAAI,CAAC,CACT,OAAO,CAAC,CACR,KAAK,CAAS,CAAC,CACf,MAAM,CAAK,CAAC,CACZ,QAAQ,CAAO,CAAC,CAChB,MAAM,CAAK,EAChB,MAAO,EACP,QAAS,CACP,OAAQ,EAAM,QAAU,EAAU,EAAM,SAAW,EAAU,QAC7D,MAAO,EAAM,OAAS,MACxB,CACF,CAAC,EAED,OAAO,EAAE,KAAK,CAAI,CACpB,CACF,CAAC"}

package/dist/src/api/modules/admin/advanced/cron/routes/run.route.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"run.route.js","names":["z"],"sources":["../../../../../../../../src/api/modules/admin/advanced/cron/routes/run.route.ts"],"sourcesContent":["import { eq } from \"drizzle-orm\";\nimport { z } from \"zod\";\n\nimport type { CronJobConfig } from \"@/api/lib/cron\";\n\nimport { buildRoute } from \"@/api/lib/route\";\nimport { CONFIG_PLUGIN } from \"@/config\";\nimport { core_cron } from \"@/database/cron\";\nimport { getNextCronRunDate } from \"@/lib/api/get-next-cron-run-date\";\n\nexport const runCronRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  route: {\n    method: \"post\",\n    description: \"Run a specific cron job\",\n    path: \"/{id}\",\n    request: {\n      params: z.object({\n        id: z.string(),\n      }),\n    },\n    responses: {\n      201: {\n        content: {\n          \"application/json\": {\n            schema: z.object({\n              message: z.string().optional(),\n              error: z.string().optional(),\n            }),\n          },\n        },\n        description: \"Cron job executed successfully\",\n      },\n      404: {\n        content: {\n          \"application/json\": {\n            schema: z.object({\n              message: z.string().optional(),\n              error: z.string().optional(),\n            }),\n          },\n        },\n        description: \"Cron job not found\",\n      },\n      500: {\n        content: {\n          \"application/json\": {\n            schema: z.object({\n              message: z.string().optional(),\n              error: z.string().optional(),\n            }),\n          },\n        },\n        description: \"Internal server error\",\n      },\n    },\n  },\n  handler: async c => {\n    const db = c.get(\"db\");\n    const cronJobs: CronJobConfig[] = c.get(\"core\").cron;\n    const param = c.req.valid(\"param\");\n\n    try {\n      const cronFromDb = await db\n        .select()\n        .from(core_cron)\n        .where(eq(core_cron.id, +param.id))\n        .limit(1);\n\n      if (cronFromDb.length === 0) {\n        return c.json({ error: \"Cron job not found\" }, 404);\n      }\n\n      const dbCron = cronFromDb[0];\n\n      const job: CronJobConfig | undefined = cronJobs.find(\n        j =>\n          j.name === dbCron.name &&\n          j.pluginId === dbCron.pluginId &&\n          j.module === dbCron.module,\n      );\n\n      if (!job) {\n        return c.json({ error: \"Cron job configuration not found\" }, 404);\n      }\n\n      const now = new Date();\n\n      try {\n        await job.handler(c);\n\n        await db\n          .update(core_cron)\n          .set({\n            lastRun: now,\n            nextRun: getNextCronRunDate(job.schedule, now),\n          })\n          .where(eq(core_cron.id, dbCron.id));\n\n        return c.json(\n          {\n            message: \"Cron job executed successfully\",\n          },\n          201,\n        );\n      } catch (error) {\n        await c.get(\"log\").error(`Error executing cron job: ${error}`);\n\n        return c.json({ error: \"Failed to execute cron job\" }, 500);\n      }\n    } catch (error) {\n      await c.get(\"log\").error(`Error running cron job: ${error}`);\n\n      return c.json({ error: \"Internal server error\" }, 500);\n    }\n  },\n});\n"],"mappings":"sUAUA,MAAa,EAAe,EAAW,CACrC,SAAU,EAAc,SACxB,MAAO,CACL,OAAQ,OACR,YAAa,0BACb,KAAM,QACN,QAAS,CACP,OAAQA,EAAE,OAAO,CACf,GAAIA,EAAE,OAAO,CACf,CAAC,CACH,EACA,UAAW,CACT,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQA,EAAE,OAAO,CACf,QAASA,EAAE,OAAO,CAAC,CAAC,SAAS,EAC7B,MAAOA,EAAE,OAAO,CAAC,CAAC,SAAS,CAC7B,CAAC,CACH,CACF,EACA,YAAa,gCACf,EACA,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQA,EAAE,OAAO,CACf,QAASA,EAAE,OAAO,CAAC,CAAC,SAAS,EAC7B,MAAOA,EAAE,OAAO,CAAC,CAAC,SAAS,CAC7B,CAAC,CACH,CACF,EACA,YAAa,oBACf,EACA,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQA,EAAE,OAAO,CACf,QAASA,EAAE,OAAO,CAAC,CAAC,SAAS,EAC7B,MAAOA,EAAE,OAAO,CAAC,CAAC,SAAS,CAC7B,CAAC,CACH,CACF,EACA,YAAa,uBACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAClB,IAAM,EAAK,EAAE,IAAI,IAAI,EACf,EAA4B,EAAE,IAAI,MAAM,CAAC,CAAC,KAC1C,EAAQ,EAAE,IAAI,MAAM,OAAO,EAEjC,GAAI,CACF,IAAM,EAAa,MAAM,EACtB,OAAO,CAAC,CACR,KAAK,CAAS,CAAC,CACf,MAAM,EAAG,EAAU,GAAI,CAAC,EAAM,EAAE,CAAC,CAAC,CAClC,MAAM,CAAC,EAEV,GAAI,EAAW,SAAW,EACxB,OAAO,EAAE,KAAK,CAAE,MAAO,oBAAqB,EAAG,GAAG,EAGpD,IAAM,EAAS,EAAW,GAEpB,EAAiC,EAAS,KAC9C,GACE,EAAE,OAAS,EAAO,MAClB,EAAE,WAAa,EAAO,UACtB,EAAE,SAAW,EAAO,MACxB,EAEA,GAAI,CAAC,EACH,OAAO,EAAE,KAAK,CAAE,MAAO,kCAAmC,EAAG,GAAG,EAGlE,IAAM,EAAM,IAAI,KAEhB,GAAI,CAWF,OAVA,MAAM,EAAI,QAAQ,CAAC,EAEnB,MAAM,EACH,OAAO,CAAS,CAAC,CACjB,IAAI,CACH,QAAS,EACT,QAAS,EAAmB,EAAI,SAAU,CAAG,CAC/C,CAAC,CAAC,CACD,MAAM,EAAG,EAAU,GAAI,EAAO,EAAE,CAAC,EAE7B,EAAE,KACP,CACE,QAAS,gCACX,EACA,GACF,CACF,OAAS,EAAO,CAGd,OAFA,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC,MAAM,6BAA6B,GAAO,EAEtD,EAAE,KAAK,CAAE,MAAO,4BAA6B,EAAG,GAAG,CAC5D,CACF,OAAS,EAAO,CAGd,OAFA,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC,MAAM,2BAA2B,GAAO,EAEpD,EAAE,KAAK,CAAE,MAAO,uBAAwB,EAAG,GAAG,CACvD,CACF,CACF,CAAC"}

package/dist/src/api/modules/admin/advanced/queue/queue.admin.module.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"queue.admin.module.js","names":[],"sources":["../../../../../../../src/api/modules/admin/advanced/queue/queue.admin.module.ts"],"sourcesContent":["import { buildModule } from \"@/api/lib/module\";\nimport { CONFIG_PLUGIN } from \"@/config\";\n\nimport { getQueueTasksRoute } from \"./routes/get.route\";\n\nexport const queueAdminModule = buildModule({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  name: \"queue\",\n  routes: [getQueueTasksRoute],\n});\n"],"mappings":"4KAKA,MAAa,EAAmB,EAAY,CAC1C,SAAU,EAAc,SACxB,KAAM,QACN,OAAQ,CAAC,CAAkB,CAC7B,CAAC"}

package/dist/src/api/modules/admin/advanced/queue/routes/get.route.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"get.route.js","names":[],"sources":["../../../../../../../../src/api/modules/admin/advanced/queue/routes/get.route.ts"],"sourcesContent":["import { inArray } from \"drizzle-orm\";\nimport z from \"zod\";\n\nimport { buildRoute } from \"@/api/lib/route\";\nimport {\n  withPagination,\n  zodPaginationPageInfo,\n  zodPaginationQuery,\n} from \"@/api/lib/with-pagination\";\nimport { CONFIG_PLUGIN } from \"@/config\";\nimport { core_queue } from \"@/database/queue\";\n\nconst QUEUE_STATUSES = [\n  \"pending\",\n  \"processing\",\n  \"completed\",\n  \"failed\",\n] as const;\n\nexport const getQueueTasksRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  adminStaffPermission: { module: \"queue\", permission: \"can_view\" },\n  route: {\n    method: \"get\",\n    description: \"Get Admin Queue Tasks\",\n    path: \"/\",\n    request: {\n      query: zodPaginationQuery.extend({\n        order: z.enum([\"asc\", \"desc\"]).optional(),\n        orderBy: z.enum([\"createdAt\", \"availableAt\", \"status\"]).optional(),\n        status: z.string().optional(),\n      }),\n    },\n    responses: {\n      200: {\n        content: {\n          \"application/json\": {\n            schema: z.object({\n              edges: z.array(\n                z.object({\n                  id: z.number(),\n                  pluginId: z.string(),\n                  name: z.string(),\n                  queue: z.string(),\n                  status: z.enum(QUEUE_STATUSES),\n                  priority: z.number(),\n                  attempts: z.number(),\n                  maxAttempts: z.number(),\n                  availableAt: z.date(),\n                  reservedAt: z.date().nullable(),\n                  lastError: z.string().nullable(),\n                  createdAt: z.date(),\n                  completedAt: z.date().nullable(),\n                }),\n              ),\n              pageInfo: zodPaginationPageInfo,\n            }),\n          },\n        },\n        description: \"List of queue tasks\",\n      },\n    },\n  },\n  handler: async c => {\n    const query = c.req.valid(\"query\");\n    const statuses = (query.status?.split(\",\") ?? []).filter(\n      (status): status is (typeof QUEUE_STATUSES)[number] =>\n        (QUEUE_STATUSES as readonly string[]).includes(status),\n    );\n\n    const data = await withPagination({\n      params: { query },\n      c,\n      primaryCursor: core_queue.id,\n      where: statuses.length ? inArray(core_queue.status, statuses) : undefined,\n      query: async ({ limit, where, orderBy }) =>\n        await c\n          .get(\"db\")\n          .select()\n          .from(core_queue)\n          .where(where)\n          .orderBy(orderBy)\n          .limit(limit),\n      table: core_queue,\n      orderBy: {\n        column: query.orderBy\n          ? core_queue[query.orderBy]\n          : core_queue.createdAt,\n        order: query.order ?? \"desc\",\n      },\n    });\n\n    return c.json(data);\n  },\n});\n"],"mappings":"yWAYA,MAAM,EAAiB,CACrB,UACA,aACA,YACA,QACF,EAEa,EAAqB,EAAW,CAC3C,SAAU,EAAc,SACxB,qBAAsB,CAAE,OAAQ,QAAS,WAAY,UAAW,EAChE,MAAO,CACL,OAAQ,MACR,YAAa,wBACb,KAAM,IACN,QAAS,CACP,MAAO,EAAmB,OAAO,CAC/B,MAAO,EAAE,KAAK,CAAC,MAAO,MAAM,CAAC,CAAC,CAAC,SAAS,EACxC,QAAS,EAAE,KAAK,CAAC,YAAa,cAAe,QAAQ,CAAC,CAAC,CAAC,SAAS,EACjE,OAAQ,EAAE,OAAO,CAAC,CAAC,SAAS,CAC9B,CAAC,CACH,EACA,UAAW,CACT,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,OAAO,CACf,MAAO,EAAE,MACP,EAAE,OAAO,CACP,GAAI,EAAE,OAAO,EACb,SAAU,EAAE,OAAO,EACnB,KAAM,EAAE,OAAO,EACf,MAAO,EAAE,OAAO,EAChB,OAAQ,EAAE,KAAK,CAAc,EAC7B,SAAU,EAAE,OAAO,EACnB,SAAU,EAAE,OAAO,EACnB,YAAa,EAAE,OAAO,EACtB,YAAa,EAAE,KAAK,EACpB,WAAY,EAAE,KAAK,CAAC,CAAC,SAAS,EAC9B,UAAW,EAAE,OAAO,CAAC,CAAC,SAAS,EAC/B,UAAW,EAAE,KAAK,EAClB,YAAa,EAAE,KAAK,CAAC,CAAC,SAAS,CACjC,CAAC,CACH,EACA,SAAU,CACZ,CAAC,CACH,CACF,EACA,YAAa,qBACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAClB,IAAM,EAAQ,EAAE,IAAI,MAAM,OAAO,EAC3B,GAAY,EAAM,QAAQ,MAAM,GAAG,GAAK,CAAC,EAAA,CAAG,OAC/C,GACE,EAAqC,SAAS,CAAM,CACzD,EAEM,EAAO,MAAM,EAAe,CAChC,OAAQ,CAAE,OAAM,EAChB,IACA,cAAe,EAAW,GAC1B,MAAO,EAAS,OAAS,EAAQ,EAAW,OAAQ,CAAQ,EAAI,IAAA,GAChE,MAAO,MAAO,CAAE,QAAO,QAAO,aAC5B,MAAM,EACH,IAAI,IAAI,CAAC,CACT,OAAO,CAAC,CACR,KAAK,CAAU,CAAC,CAChB,MAAM,CAAK,CAAC,CACZ,QAAQ,CAAO,CAAC,CAChB,MAAM,CAAK,EAChB,MAAO,EACP,QAAS,CACP,OAAQ,EAAM,QACV,EAAW,EAAM,SACjB,EAAW,UACf,MAAO,EAAM,OAAS,MACxB,CACF,CAAC,EAED,OAAO,EAAE,KAAK,CAAI,CACpB,CACF,CAAC"}

package/dist/src/api/modules/admin/debug/debug.admin.module.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"debug.admin.module.js","names":[],"sources":["../../../../../../src/api/modules/admin/debug/debug.admin.module.ts"],"sourcesContent":["import { CONFIG_PLUGIN } from \"../../../../config\";\nimport { buildModule } from \"../../../lib/module\";\nimport { integrationsDebugAdminRoute } from \"./routes/integrations.route\";\nimport { logsDebugAdminRoute } from \"./routes/logs.route\";\nimport { queueDebugAdminRoute } from \"./routes/queue.route\";\nimport { sendTestEmailDebugAdminRoute } from \"./routes/send-test-email.route\";\nimport { testStorageUploadDebugAdminRoute } from \"./routes/test-storage-upload.route\";\n\nexport const debugAdminModule = buildModule({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  name: \"debug\",\n  routes: [\n    logsDebugAdminRoute,\n    integrationsDebugAdminRoute,\n    queueDebugAdminRoute,\n    sendTestEmailDebugAdminRoute,\n    testStorageUploadDebugAdminRoute,\n  ],\n});\n"],"mappings":"8dAQA,MAAa,EAAmB,EAAY,CAC1C,SAAU,EAAc,SACxB,KAAM,QACN,OAAQ,CACN,EACA,EACA,EACA,EACA,CACF,CACF,CAAC"}

package/dist/src/api/modules/admin/debug/routes/integrations.route.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"integrations.route.js","names":["z"],"sources":["../../../../../../../src/api/modules/admin/debug/routes/integrations.route.ts"],"sourcesContent":["import { inArray, sql } from \"drizzle-orm\";\nimport { z } from \"zod\";\n\nimport { CONFIG_PLUGIN } from \"@/config\";\nimport { core_cron } from \"@/database/cron\";\nimport { core_queue } from \"@/database/queue\";\nimport { isCronStale } from \"@/lib/api/is-cron-stale\";\nimport { INSECURE_DEFAULT_CRON_SECRET } from \"@/lib/config\";\nimport { isRealtimePubSubEnabled, isWebSocketEnabled } from \"@/ws/registry\";\n\nimport { buildRoute } from \"../../../../lib/route\";\n\nexport const integrationsDebugAdminRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  adminStaffPermission: { module: \"system\", permission: \"can_view\" },\n  route: {\n    method: \"get\",\n    description:\n      \"Report whether the core integrations (WebSocket, Redis, Email, Captcha, Cron) are active on the server.\",\n    path: \"/integrations\",\n    responses: {\n      200: {\n        content: {\n          \"application/json\": {\n            schema: z.object({\n              captcha: z.object({\n                active: z.boolean(),\n                type: z\n                  .enum([\"cloudflare_turnstile\", \"recaptcha_v3\"])\n                  .nullable(),\n              }),\n              cron: z.object({\n                // `true` when a cron adapter is configured, i.e. an in-process\n                // scheduler is running the registered jobs automatically.\n                active: z.boolean(),\n                // Registered cron jobs. Always >= 1 since core ships a job.\n                jobs: z.number(),\n                // ISO timestamp of the most recent cron execution, or `null`\n                // when no job has run yet.\n                lastRun: z.string().nullable(),\n                // `false` when `CRON_SECRET` is left at its well-known default,\n                // which leaves the cron endpoint effectively unauthenticated.\n                secure: z.boolean(),\n                // `true` when no job has run within the staleness window, i.e.\n                // the scheduler looks misconfigured or stopped even though jobs\n                // are registered.\n                stale: z.boolean(),\n              }),\n              email: z.object({\n                active: z.boolean(),\n              }),\n              queue: z.object({\n                // `true` when at least one handler is registered AND the cron\n                // worker is running - the queue is drained by cron, so a stale\n                // scheduler means tasks pile up unprocessed.\n                active: z.boolean(),\n                // `true` when handlers are registered but the queue is offline\n                // because the cron worker that drains it isn't running.\n                cronStale: z.boolean(),\n                // Number of pending tasks waiting to be processed.\n                pending: z.number(),\n                // Number of tasks currently being processed.\n                processing: z.number(),\n                // Registered queue task handlers across core + plugins.\n                tasks: z.number(),\n              }),\n              redis: z.object({\n                active: z.boolean(),\n                // `true` when Redis is configured but currently unreachable - a\n                // problem worth surfacing distinctly from \"not set up at all\".\n                configuredButDown: z.boolean(),\n              }),\n              storage: z.object({\n                // `true` when a storage adapter is configured, i.e. file\n                // uploads are enabled.\n                active: z.boolean(),\n              }),\n              websocket: z.object({\n                active: z.boolean(),\n                crossInstance: z.boolean(),\n              }),\n            }),\n          },\n        },\n        description: \"Integration statuses\",\n      },\n    },\n  },\n  handler: async c => {\n    const core = c.get(\"core\");\n    const captcha = core.captcha;\n    const redis = await c.get(\"cache\").status();\n\n    const queueGrouped = await c\n      .get(\"db\")\n      .select({\n        status: core_queue.status,\n        count: sql<number>`count(*)::int`,\n      })\n      .from(core_queue)\n      .where(inArray(core_queue.status, [\"pending\", \"processing\"]))\n      .groupBy(core_queue.status);\n    const queuePending =\n      queueGrouped.find(row => row.status === \"pending\")?.count ?? 0;\n    const queueProcessing =\n      queueGrouped.find(row => row.status === \"processing\")?.count ?? 0;\n\n    // Freshest cron heartbeat: a job's last successful run, or its creation\n    // time while it's never run so a brand-new install isn't flagged stale\n    // during the grace period before the first tick.\n    const [cronActivity] = await c\n      .get(\"db\")\n      .select({\n        lastRun: sql<Date | null>`max(${core_cron.lastRun})`,\n        lastActivity: sql<Date | null>`max(coalesce(${core_cron.lastRun}, ${core_cron.createdAt}))`,\n      })\n      .from(core_cron);\n\n    const cronLastRun = cronActivity?.lastRun\n      ? new Date(cronActivity.lastRun)\n      : null;\n    const cronStale = isCronStale(\n      cronActivity?.lastActivity ? new Date(cronActivity.lastActivity) : null,\n    );\n    const queueActive = core.queue.length > 0;\n\n    return c.json(\n      {\n        captcha: {\n          active: !!(captcha?.secretKey && captcha.siteKey),\n          type: captcha?.type ?? null,\n        },\n        cron: {\n          active: core.hasCronAdapter,\n          jobs: core.cron.length,\n          lastRun: cronLastRun ? cronLastRun.toISOString() : null,\n          secure:\n            !!core.cronSecret &&\n            core.cronSecret !== INSECURE_DEFAULT_CRON_SECRET,\n          stale: cronStale,\n        },\n        email: {\n          active: !!core.email?.adapter,\n        },\n        queue: {\n          active: queueActive && !cronStale,\n          cronStale: queueActive && cronStale,\n          pending: queuePending,\n          processing: queueProcessing,\n          tasks: core.queue.length,\n        },\n        redis: {\n          active: redis.configured && redis.connected,\n          configuredButDown: redis.configured && !redis.connected,\n        },\n        storage: {\n          active: !!core.storage?.adapter,\n        },\n        websocket: {\n          active: isWebSocketEnabled(),\n          crossInstance: isRealtimePubSubEnabled(),\n        },\n      },\n      200,\n    );\n  },\n});\n"],"mappings":"2fAYA,MAAa,EAA8B,EAAW,CACpD,SAAU,EAAc,SACxB,qBAAsB,CAAE,OAAQ,SAAU,WAAY,UAAW,EACjE,MAAO,CACL,OAAQ,MACR,YACE,0GACF,KAAM,gBACN,UAAW,CACT,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQA,EAAE,OAAO,CACf,QAASA,EAAE,OAAO,CAChB,OAAQA,EAAE,QAAQ,EAClB,KAAMA,EACH,KAAK,CAAC,uBAAwB,cAAc,CAAC,CAAC,CAC9C,SAAS,CACd,CAAC,EACD,KAAMA,EAAE,OAAO,CAGb,OAAQA,EAAE,QAAQ,EAElB,KAAMA,EAAE,OAAO,EAGf,QAASA,EAAE,OAAO,CAAC,CAAC,SAAS,EAG7B,OAAQA,EAAE,QAAQ,EAIlB,MAAOA,EAAE,QAAQ,CACnB,CAAC,EACD,MAAOA,EAAE,OAAO,CACd,OAAQA,EAAE,QAAQ,CACpB,CAAC,EACD,MAAOA,EAAE,OAAO,CAId,OAAQA,EAAE,QAAQ,EAGlB,UAAWA,EAAE,QAAQ,EAErB,QAASA,EAAE,OAAO,EAElB,WAAYA,EAAE,OAAO,EAErB,MAAOA,EAAE,OAAO,CAClB,CAAC,EACD,MAAOA,EAAE,OAAO,CACd,OAAQA,EAAE,QAAQ,EAGlB,kBAAmBA,EAAE,QAAQ,CAC/B,CAAC,EACD,QAASA,EAAE,OAAO,CAGhB,OAAQA,EAAE,QAAQ,CACpB,CAAC,EACD,UAAWA,EAAE,OAAO,CAClB,OAAQA,EAAE,QAAQ,EAClB,cAAeA,EAAE,QAAQ,CAC3B,CAAC,CACH,CAAC,CACH,CACF,EACA,YAAa,sBACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAClB,IAAM,EAAO,EAAE,IAAI,MAAM,EACnB,EAAU,EAAK,QACf,EAAQ,MAAM,EAAE,IAAI,OAAO,CAAC,CAAC,OAAO,EAEpC,EAAe,MAAM,EACxB,IAAI,IAAI,CAAC,CACT,OAAO,CACN,OAAQ,EAAW,OACnB,MAAO,CAAW,eACpB,CAAC,CAAC,CACD,KAAK,CAAU,CAAC,CAChB,MAAM,EAAQ,EAAW,OAAQ,CAAC,UAAW,YAAY,CAAC,CAAC,CAAC,CAC5D,QAAQ,EAAW,MAAM,EACtB,EACJ,EAAa,KAAK,GAAO,EAAI,SAAW,SAAS,CAAC,EAAE,OAAS,EACzD,EACJ,EAAa,KAAK,GAAO,EAAI,SAAW,YAAY,CAAC,EAAE,OAAS,EAK5D,CAAC,GAAgB,MAAM,EAC1B,IAAI,IAAI,CAAC,CACT,OAAO,CACN,QAAS,CAAgB,OAAO,EAAU,QAAQ,GAClD,aAAc,CAAgB,gBAAgB,EAAU,QAAQ,IAAI,EAAU,UAAU,GAC1F,CAAC,CAAC,CACD,KAAK,CAAS,EAEX,EAAc,GAAc,QAC9B,IAAI,KAAK,EAAa,OAAO,EAC7B,KACE,EAAY,EAChB,GAAc,aAAe,IAAI,KAAK,EAAa,YAAY,EAAI,IACrE,EACM,EAAc,EAAK,MAAM,OAAS,EAExC,OAAO,EAAE,KACP,CACE,QAAS,CACP,OAAQ,CAAC,EAAE,GAAS,WAAa,EAAQ,SACzC,KAAM,GAAS,MAAQ,IACzB,EACA,KAAM,CACJ,OAAQ,EAAK,eACb,KAAM,EAAK,KAAK,OAChB,QAAS,EAAc,EAAY,YAAY,EAAI,KACnD,OACE,CAAC,CAAC,EAAK,YACP,EAAK,aAAA,2CACP,MAAO,CACT,EACA,MAAO,CACL,OAAQ,CAAC,CAAC,EAAK,OAAO,OACxB,EACA,MAAO,CACL,OAAQ,GAAe,CAAC,EACxB,UAAW,GAAe,EAC1B,QAAS,EACT,WAAY,EACZ,MAAO,EAAK,MAAM,MACpB,EACA,MAAO,CACL,OAAQ,EAAM,YAAc,EAAM,UAClC,kBAAmB,EAAM,YAAc,CAAC,EAAM,SAChD,EACA,QAAS,CACP,OAAQ,CAAC,CAAC,EAAK,SAAS,OAC1B,EACA,UAAW,CACT,OAAQ,EAAmB,EAC3B,cAAe,EAAwB,CACzC,CACF,EACA,GACF,CACF,CACF,CAAC"}

package/dist/src/api/modules/admin/debug/routes/logs.route.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"logs.route.js","names":["z"],"sources":["../../../../../../../src/api/modules/admin/debug/routes/logs.route.ts"],"sourcesContent":["import { eq } from \"drizzle-orm\";\nimport { z } from \"zod\";\n\nimport { CONFIG_PLUGIN } from \"@/config\";\nimport { core_logs } from \"@/database/logs\";\n\nimport { core_users } from \"../../../../../database/users\";\nimport { buildRoute } from \"../../../../lib/route\";\nimport {\n  withPagination,\n  zodPaginationPageInfo,\n  zodPaginationQuery,\n} from \"../../../../lib/with-pagination\";\n\nexport const logsDebugAdminRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  adminStaffPermission: { module: \"debug\", permission: \"can_view\" },\n  route: {\n    method: \"get\",\n    description: \"Get Admin Debug Logs\",\n    path: \"/logs\",\n    request: {\n      query: zodPaginationQuery.extend({\n        order: z.enum([\"asc\", \"desc\"]).optional(),\n        orderBy: z.enum([\"type\", \"createdAt\", \"pluginId\"]).optional(),\n      }),\n    },\n    responses: {\n      200: {\n        content: {\n          \"application/json\": {\n            schema: z.object({\n              edges: z.array(\n                z.object({\n                  id: z.number(),\n                  pluginId: z.string(),\n                  type: z.enum([\"warn\", \"error\", \"debug\"]),\n                  content: z.string(),\n                  createdAt: z.date(),\n                  ipAddress: z.string(),\n                  method: z.string(),\n                  path: z.string(),\n                  userAgent: z.string().nullable(),\n                  statusCode: z.number(),\n                  user: z\n                    .object({\n                      id: z.number(),\n                      name: z.string(),\n                      nameCode: z.string(),\n                    })\n                    .nullable(),\n                }),\n              ),\n              pageInfo: zodPaginationPageInfo,\n            }),\n          },\n        },\n        description: \"List of users\",\n      },\n    },\n  },\n  handler: async c => {\n    const query = c.req.valid(\"query\");\n    const data = await withPagination({\n      params: {\n        query,\n      },\n      primaryCursor: core_logs.id,\n      query: async ({ limit, where, orderBy }) =>\n        await c\n          .get(\"db\")\n          .select({\n            id: core_logs.id,\n            pluginId: core_logs.pluginId,\n            type: core_logs.type,\n            content: core_logs.content,\n            createdAt: core_logs.createdAt,\n            ipAddress: core_logs.ipAddress,\n            method: core_logs.method,\n            path: core_logs.path,\n            userAgent: core_logs.userAgent,\n            statusCode: core_logs.statusCode,\n            user: {\n              id: core_users.id,\n              name: core_users.name,\n              nameCode: core_users.nameCode,\n            },\n          })\n          .from(core_logs)\n          .leftJoin(core_users, eq(core_users.id, core_logs.userId))\n          .where(where)\n          .orderBy(orderBy)\n          .limit(limit),\n      table: core_logs,\n      orderBy: {\n        column: query.orderBy ? core_logs[query.orderBy] : core_logs.createdAt,\n        order: query.order ?? \"desc\",\n      },\n      c,\n    });\n\n    return c.json(data);\n  },\n});\n"],"mappings":"yZAcA,MAAa,EAAsB,EAAW,CAC5C,SAAU,EAAc,SACxB,qBAAsB,CAAE,OAAQ,QAAS,WAAY,UAAW,EAChE,MAAO,CACL,OAAQ,MACR,YAAa,uBACb,KAAM,QACN,QAAS,CACP,MAAO,EAAmB,OAAO,CAC/B,MAAOA,EAAE,KAAK,CAAC,MAAO,MAAM,CAAC,CAAC,CAAC,SAAS,EACxC,QAASA,EAAE,KAAK,CAAC,OAAQ,YAAa,UAAU,CAAC,CAAC,CAAC,SAAS,CAC9D,CAAC,CACH,EACA,UAAW,CACT,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQA,EAAE,OAAO,CACf,MAAOA,EAAE,MACPA,EAAE,OAAO,CACP,GAAIA,EAAE,OAAO,EACb,SAAUA,EAAE,OAAO,EACnB,KAAMA,EAAE,KAAK,CAAC,OAAQ,QAAS,OAAO,CAAC,EACvC,QAASA,EAAE,OAAO,EAClB,UAAWA,EAAE,KAAK,EAClB,UAAWA,EAAE,OAAO,EACpB,OAAQA,EAAE,OAAO,EACjB,KAAMA,EAAE,OAAO,EACf,UAAWA,EAAE,OAAO,CAAC,CAAC,SAAS,EAC/B,WAAYA,EAAE,OAAO,EACrB,KAAMA,EACH,OAAO,CACN,GAAIA,EAAE,OAAO,EACb,KAAMA,EAAE,OAAO,EACf,SAAUA,EAAE,OAAO,CACrB,CAAC,CAAC,CACD,SAAS,CACd,CAAC,CACH,EACA,SAAU,CACZ,CAAC,CACH,CACF,EACA,YAAa,eACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAClB,IAAM,EAAQ,EAAE,IAAI,MAAM,OAAO,EAC3B,EAAO,MAAM,EAAe,CAChC,OAAQ,CACN,OACF,EACA,cAAe,EAAU,GACzB,MAAO,MAAO,CAAE,QAAO,QAAO,aAC5B,MAAM,EACH,IAAI,IAAI,CAAC,CACT,OAAO,CACN,GAAI,EAAU,GACd,SAAU,EAAU,SACpB,KAAM,EAAU,KAChB,QAAS,EAAU,QACnB,UAAW,EAAU,UACrB,UAAW,EAAU,UACrB,OAAQ,EAAU,OAClB,KAAM,EAAU,KAChB,UAAW,EAAU,UACrB,WAAY,EAAU,WACtB,KAAM,CACJ,GAAI,EAAW,GACf,KAAM,EAAW,KACjB,SAAU,EAAW,QACvB,CACF,CAAC,CAAC,CACD,KAAK,CAAS,CAAC,CACf,SAAS,EAAY,EAAG,EAAW,GAAI,EAAU,MAAM,CAAC,CAAC,CACzD,MAAM,CAAK,CAAC,CACZ,QAAQ,CAAO,CAAC,CAChB,MAAM,CAAK,EAChB,MAAO,EACP,QAAS,CACP,OAAQ,EAAM,QAAU,EAAU,EAAM,SAAW,EAAU,UAC7D,MAAO,EAAM,OAAS,MACxB,EACA,GACF,CAAC,EAED,OAAO,EAAE,KAAK,CAAI,CACpB,CACF,CAAC"}

package/dist/src/api/modules/admin/debug/routes/queue.route.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"queue.route.js","names":[],"sources":["../../../../../../../src/api/modules/admin/debug/routes/queue.route.ts"],"sourcesContent":["import { asc, desc, inArray, sql } from \"drizzle-orm\";\nimport z from \"zod\";\n\nimport { buildRoute } from \"@/api/lib/route\";\nimport { CONFIG_PLUGIN } from \"@/config\";\nimport { core_queue } from \"@/database/queue\";\n\nconst QUEUE_STATUSES = [\n  \"pending\",\n  \"processing\",\n  \"completed\",\n  \"failed\",\n] as const;\n\nexport const queueDebugAdminRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  adminStaffPermission: { module: \"debug\", permission: \"can_view\" },\n  route: {\n    method: \"get\",\n    description:\n      \"Currently active (pending/processing) queue tasks and per-status counts.\",\n    path: \"/queue\",\n    responses: {\n      200: {\n        content: {\n          \"application/json\": {\n            schema: z.object({\n              counts: z.object({\n                pending: z.number(),\n                processing: z.number(),\n                completed: z.number(),\n                failed: z.number(),\n              }),\n              active: z.array(\n                z.object({\n                  id: z.number(),\n                  name: z.string(),\n                  pluginId: z.string(),\n                  queue: z.string(),\n                  status: z.enum(QUEUE_STATUSES),\n                  attempts: z.number(),\n                  maxAttempts: z.number(),\n                  availableAt: z.date(),\n                  createdAt: z.date(),\n                }),\n              ),\n            }),\n          },\n        },\n        description: \"Queue status\",\n      },\n    },\n  },\n  handler: async c => {\n    const db = c.get(\"db\");\n\n    const grouped = await db\n      .select({\n        status: core_queue.status,\n        count: sql<number>`count(*)::int`,\n      })\n      .from(core_queue)\n      .groupBy(core_queue.status);\n\n    const counts = { pending: 0, processing: 0, completed: 0, failed: 0 };\n    for (const row of grouped) {\n      if (row.status in counts) {\n        counts[row.status] = row.count;\n      }\n    }\n\n    const active = await db\n      .select({\n        id: core_queue.id,\n        name: core_queue.name,\n        pluginId: core_queue.pluginId,\n        queue: core_queue.queue,\n        status: core_queue.status,\n        attempts: core_queue.attempts,\n        maxAttempts: core_queue.maxAttempts,\n        availableAt: core_queue.availableAt,\n        createdAt: core_queue.createdAt,\n      })\n      .from(core_queue)\n      .where(inArray(core_queue.status, [\"pending\", \"processing\"]))\n      .orderBy(desc(core_queue.priority), asc(core_queue.availableAt))\n      .limit(50);\n\n    return c.json({ counts, active }, 200);\n  },\n});\n"],"mappings":"kQAcA,MAAa,EAAuB,EAAW,CAC7C,SAAU,EAAc,SACxB,qBAAsB,CAAE,OAAQ,QAAS,WAAY,UAAW,EAChE,MAAO,CACL,OAAQ,MACR,YACE,2EACF,KAAM,SACN,UAAW,CACT,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,OAAO,CACf,OAAQ,EAAE,OAAO,CACf,QAAS,EAAE,OAAO,EAClB,WAAY,EAAE,OAAO,EACrB,UAAW,EAAE,OAAO,EACpB,OAAQ,EAAE,OAAO,CACnB,CAAC,EACD,OAAQ,EAAE,MACR,EAAE,OAAO,CACP,GAAI,EAAE,OAAO,EACb,KAAM,EAAE,OAAO,EACf,SAAU,EAAE,OAAO,EACnB,MAAO,EAAE,OAAO,EAChB,OAAQ,EAAE,KAAK,CA/B/B,UACA,aACA,YACA,QA4B+B,CAAc,EAC7B,SAAU,EAAE,OAAO,EACnB,YAAa,EAAE,OAAO,EACtB,YAAa,EAAE,KAAK,EACpB,UAAW,EAAE,KAAK,CACpB,CAAC,CACH,CACF,CAAC,CACH,CACF,EACA,YAAa,cACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAClB,IAAM,EAAK,EAAE,IAAI,IAAI,EAEf,EAAU,MAAM,EACnB,OAAO,CACN,OAAQ,EAAW,OACnB,MAAO,CAAW,eACpB,CAAC,CAAC,CACD,KAAK,CAAU,CAAC,CAChB,QAAQ,EAAW,MAAM,EAEtB,EAAS,CAAE,QAAS,EAAG,WAAY,EAAG,UAAW,EAAG,OAAQ,CAAE,EACpE,IAAK,IAAM,KAAO,EACZ,EAAI,UAAU,IAChB,EAAO,EAAI,QAAU,EAAI,OAI7B,IAAM,EAAS,MAAM,EAClB,OAAO,CACN,GAAI,EAAW,GACf,KAAM,EAAW,KACjB,SAAU,EAAW,SACrB,MAAO,EAAW,MAClB,OAAQ,EAAW,OACnB,SAAU,EAAW,SACrB,YAAa,EAAW,YACxB,YAAa,EAAW,YACxB,UAAW,EAAW,SACxB,CAAC,CAAC,CACD,KAAK,CAAU,CAAC,CAChB,MAAM,EAAQ,EAAW,OAAQ,CAAC,UAAW,YAAY,CAAC,CAAC,CAAC,CAC5D,QAAQ,EAAK,EAAW,QAAQ,EAAG,EAAI,EAAW,WAAW,CAAC,CAAC,CAC/D,MAAM,EAAE,EAEX,OAAO,EAAE,KAAK,CAAE,SAAQ,QAAO,EAAG,GAAG,CACvC,CACF,CAAC"}

package/dist/src/api/modules/admin/debug/routes/send-test-email.route.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"send-test-email.route.js","names":["z"],"sources":["../../../../../../../src/api/modules/admin/debug/routes/send-test-email.route.ts"],"sourcesContent":["import { HTTPException } from \"hono/http-exception\";\nimport { z } from \"zod\";\n\nimport { buildRoute } from \"@/api/lib/route\";\nimport { CONFIG_PLUGIN } from \"@/config\";\nimport TestEmailTemplate from \"@/emails/test-email\";\n\nexport const zodSendTestEmailSchema = z.object({\n  content: z.string().min(1).max(5000),\n  subject: z.string().min(1).max(200),\n  to: z.email(),\n});\n\nexport const sendTestEmailDebugAdminRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  adminStaffPermission: { module: \"system\", permission: \"can_send_test_email\" },\n  route: {\n    method: \"post\",\n    description:\n      \"Send a test email to verify that the email adapter is configured correctly.\",\n    path: \"/send-test-email\",\n    request: {\n      body: {\n        required: true,\n        content: {\n          \"application/json\": {\n            schema: zodSendTestEmailSchema,\n          },\n        },\n      },\n    },\n    responses: {\n      200: {\n        content: {\n          \"application/json\": {\n            schema: z.object({ success: z.boolean() }),\n          },\n        },\n        description: \"Test email sent\",\n      },\n      400: {\n        description: \"Email adapter not configured\",\n      },\n    },\n  },\n  handler: async c => {\n    // The adapter check gives a clear error instead of the generic 500 the\n    // email model would otherwise throw when no provider is configured.\n    if (!c.get(\"core\").email?.adapter) {\n      throw new HTTPException(400, {\n        message: \"Email provider not configured\",\n      });\n    }\n\n    const { to, subject, content } = c.req.valid(\"json\");\n\n    await c.get(\"email\").send({\n      to,\n      locale: \"en\",\n      subject,\n      content: props => TestEmailTemplate({ ...props, content }),\n    });\n\n    return c.json({ success: true });\n  },\n});\n"],"mappings":"8OAOA,MAAa,EAAyBA,EAAE,OAAO,CAC7C,QAASA,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAI,EACnC,QAASA,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,EAClC,GAAIA,EAAE,MAAM,CACd,CAAC,EAEY,EAA+B,EAAW,CACrD,SAAU,EAAc,SACxB,qBAAsB,CAAE,OAAQ,SAAU,WAAY,qBAAsB,EAC5E,MAAO,CACL,OAAQ,OACR,YACE,8EACF,KAAM,mBACN,QAAS,CACP,KAAM,CACJ,SAAU,GACV,QAAS,CACP,mBAAoB,CAClB,OAAQ,CACV,CACF,CACF,CACF,EACA,UAAW,CACT,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQA,EAAE,OAAO,CAAE,QAASA,EAAE,QAAQ,CAAE,CAAC,CAC3C,CACF,EACA,YAAa,iBACf,EACA,IAAK,CACH,YAAa,8BACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAGlB,GAAI,CAAC,EAAE,IAAI,MAAM,CAAC,CAAC,OAAO,QACxB,MAAM,IAAI,EAAc,IAAK,CAC3B,QAAS,+BACX,CAAC,EAGH,GAAM,CAAE,KAAI,UAAS,WAAY,EAAE,IAAI,MAAM,MAAM,EASnD,OAPA,MAAM,EAAE,IAAI,OAAO,CAAC,CAAC,KAAK,CACxB,KACA,OAAQ,KACR,UACA,QAAS,GAAS,EAAkB,CAAE,GAAG,EAAO,SAAQ,CAAC,CAC3D,CAAC,EAEM,EAAE,KAAK,CAAE,QAAS,EAAK,CAAC,CACjC,CACF,CAAC"}

package/dist/src/api/modules/admin/debug/routes/test-storage-upload.route.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"test-storage-upload.route.js","names":["z"],"sources":["../../../../../../../src/api/modules/admin/debug/routes/test-storage-upload.route.ts"],"sourcesContent":["import { HTTPException } from \"hono/http-exception\";\nimport { z } from \"zod\";\n\nimport { buildRoute } from \"@/api/lib/route\";\nimport { CONFIG_PLUGIN } from \"@/config\";\n\nconst ADMIN_TEST_MAX_BYTES = 10 * 1024 * 1024; // 10 MB\n\nconst ADMIN_TEST_MIME_TYPES = [\n  \"image/avif\",\n  \"image/gif\",\n  \"image/jpeg\",\n  \"image/png\",\n  \"image/webp\",\n];\n\nexport const testStorageUploadDebugAdminRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  adminStaffPermission: { module: \"system\", permission: \"can_test_storage\" },\n  route: {\n    method: \"post\",\n    description:\n      \"Upload a test image to verify the storage adapter end-to-end from the admin panel.\",\n    path: \"/test-storage-upload\",\n    request: {\n      body: {\n        required: true,\n        content: {\n          \"multipart/form-data\": {\n            schema: z.object({\n              file: z\n                .instanceof(File)\n                .openapi({ format: \"binary\", type: \"string\" }),\n            }),\n          },\n        },\n      },\n    },\n    responses: {\n      200: {\n        content: {\n          \"application/json\": {\n            schema: z.object({ key: z.string(), url: z.string() }),\n          },\n        },\n        description: \"Image uploaded\",\n      },\n      400: {\n        description: \"Storage adapter not configured or invalid file\",\n      },\n    },\n  },\n  handler: async c => {\n    if (!c.get(\"core\").storage?.adapter) {\n      throw new HTTPException(400, {\n        message: \"Storage adapter not configured\",\n      });\n    }\n\n    const { file } = c.req.valid(\"form\");\n\n    const { key, url } = await c.get(\"storage\").upload({\n      file,\n      folder: \"admin-storage-test\",\n      maxBytes: ADMIN_TEST_MAX_BYTES,\n      allowedMimeTypes: ADMIN_TEST_MIME_TYPES,\n    });\n\n    return c.json({ key, url }, 200);\n  },\n});\n"],"mappings":"2LAMA,MAEM,EAAwB,CAC5B,aACA,YACA,aACA,YACA,YACF,EAEa,EAAmC,EAAW,CACzD,SAAU,EAAc,SACxB,qBAAsB,CAAE,OAAQ,SAAU,WAAY,kBAAmB,EACzE,MAAO,CACL,OAAQ,OACR,YACE,qFACF,KAAM,uBACN,QAAS,CACP,KAAM,CACJ,SAAU,GACV,QAAS,CACP,sBAAuB,CACrB,OAAQA,EAAE,OAAO,CACf,KAAMA,EACH,WAAW,IAAI,CAAC,CAChB,QAAQ,CAAE,OAAQ,SAAU,KAAM,QAAS,CAAC,CACjD,CAAC,CACH,CACF,CACF,CACF,EACA,UAAW,CACT,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQA,EAAE,OAAO,CAAE,IAAKA,EAAE,OAAO,EAAG,IAAKA,EAAE,OAAO,CAAE,CAAC,CACvD,CACF,EACA,YAAa,gBACf,EACA,IAAK,CACH,YAAa,gDACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAClB,GAAI,CAAC,EAAE,IAAI,MAAM,CAAC,CAAC,SAAS,QAC1B,MAAM,IAAI,EAAc,IAAK,CAC3B,QAAS,gCACX,CAAC,EAGH,GAAM,CAAE,QAAS,EAAE,IAAI,MAAM,MAAM,EAE7B,CAAE,MAAK,OAAQ,MAAM,EAAE,IAAI,SAAS,CAAC,CAAC,OAAO,CACjD,OACA,OAAQ,qBACR,SAAU,SACV,iBAAkB,CACpB,CAAC,EAED,OAAO,EAAE,KAAK,CAAE,MAAK,KAAI,EAAG,GAAG,CACjC,CACF,CAAC"}

package/dist/src/api/modules/admin/files/files.admin.module.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"files.admin.module.js","names":[],"sources":["../../../../../../src/api/modules/admin/files/files.admin.module.ts"],"sourcesContent":["import { buildModule } from \"@/api/lib/module\";\nimport { CONFIG_PLUGIN } from \"@/config\";\n\nimport { deleteFileAdminRoute } from \"./routes/delete.route\";\nimport { downloadFileAdminRoute } from \"./routes/download.route\";\nimport { listFilesAdminRoute } from \"./routes/list.route\";\n\nexport const filesAdminModule = buildModule({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  name: \"files\",\n  routes: [listFilesAdminRoute, downloadFileAdminRoute, deleteFileAdminRoute],\n});\n"],"mappings":"4SAOA,MAAa,EAAmB,EAAY,CAC1C,SAAU,EAAc,SACxB,KAAM,QACN,OAAQ,CAAC,EAAqB,EAAwB,CAAoB,CAC5E,CAAC"}

package/dist/src/api/modules/admin/files/routes/delete.route.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"delete.route.js","names":[],"sources":["../../../../../../../src/api/modules/admin/files/routes/delete.route.ts"],"sourcesContent":["import { z } from \"@hono/zod-openapi\";\n\nimport { buildRoute } from \"@/api/lib/route\";\nimport { CONFIG_PLUGIN } from \"@/config\";\n\nexport const deleteFileAdminRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  adminStaffPermission: { module: \"files\", permission: \"can_delete\" },\n  route: {\n    method: \"delete\",\n    description: \"Delete an uploaded file and its record (Admin only).\",\n    path: \"/{id}\",\n    request: {\n      params: z.object({\n        id: z.string().openapi({ example: \"1\" }),\n      }),\n    },\n    responses: {\n      200: {\n        description: \"File deleted\",\n      },\n      404: {\n        content: {\n          \"application/json\": {\n            schema: z.object({ error: z.string() }),\n          },\n        },\n        description: \"File not found\",\n      },\n    },\n  },\n  handler: async c => {\n    const { id } = c.req.valid(\"param\");\n    const fileId = Number(id);\n    if (!Number.isInteger(fileId)) {\n      return c.json({ error: \"File not found\" }, 404);\n    }\n\n    await c.get(\"storage\").deleteFile(fileId);\n\n    return c.body(null, 200);\n  },\n});\n"],"mappings":"qJAKA,MAAa,EAAuB,EAAW,CAC7C,SAAU,EAAc,SACxB,qBAAsB,CAAE,OAAQ,QAAS,WAAY,YAAa,EAClE,MAAO,CACL,OAAQ,SACR,YAAa,uDACb,KAAM,QACN,QAAS,CACP,OAAQ,EAAE,OAAO,CACf,GAAI,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAE,QAAS,GAAI,CAAC,CACzC,CAAC,CACH,EACA,UAAW,CACT,IAAK,CACH,YAAa,cACf,EACA,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,OAAO,CAAE,MAAO,EAAE,OAAO,CAAE,CAAC,CACxC,CACF,EACA,YAAa,gBACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAClB,GAAM,CAAE,MAAO,EAAE,IAAI,MAAM,OAAO,EAC5B,EAAS,OAAO,CAAE,EAOxB,OANK,OAAO,UAAU,CAAM,GAI5B,MAAM,EAAE,IAAI,SAAS,CAAC,CAAC,WAAW,CAAM,EAEjC,EAAE,KAAK,KAAM,GAAG,GALd,EAAE,KAAK,CAAE,MAAO,gBAAiB,EAAG,GAAG,CAMlD,CACF,CAAC"}

package/dist/src/api/modules/admin/files/routes/download.route.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"download.route.js","names":[],"sources":["../../../../../../../src/api/modules/admin/files/routes/download.route.ts"],"sourcesContent":["import { z } from \"@hono/zod-openapi\";\nimport { eq } from \"drizzle-orm\";\n\nimport { buildRoute } from \"@/api/lib/route\";\nimport { CONFIG_PLUGIN } from \"@/config\";\nimport { core_files } from \"@/database/files\";\n\nexport const downloadFileAdminRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  adminStaffPermission: { module: \"files\", permission: \"can_download\" },\n  route: {\n    method: \"get\",\n    description:\n      \"Download an uploaded file as an attachment with its original name (Admin only).\",\n    path: \"/{id}/download\",\n    request: {\n      params: z.object({\n        id: z.string().openapi({ example: \"1\" }),\n      }),\n    },\n    responses: {\n      200: {\n        content: {\n          \"application/octet-stream\": {\n            schema: z.string().openapi({ format: \"binary\", type: \"string\" }),\n          },\n        },\n        description: \"File contents\",\n      },\n      404: {\n        content: {\n          \"application/json\": {\n            schema: z.object({ error: z.string() }),\n          },\n        },\n        description: \"File not found\",\n      },\n    },\n  },\n  handler: async c => {\n    const { id } = c.req.valid(\"param\");\n    const fileId = Number(id);\n    if (!Number.isInteger(fileId)) {\n      return c.json({ error: \"File not found\" }, 404);\n    }\n\n    const [file] = await c\n      .get(\"db\")\n      .select({\n        name: core_files.name,\n        key: core_files.key,\n        mimeType: core_files.mimeType,\n      })\n      .from(core_files)\n      .where(eq(core_files.id, fileId))\n      .limit(1);\n\n    if (!file || !c.get(\"core\").storage?.adapter) {\n      return c.json({ error: \"File not found\" }, 404);\n    }\n\n    // Adapter-agnostic: fetch the stored object from its (server-reachable)\n    // public URL and re-stream it as an attachment, so the browser saves it\n    // with the original file name instead of opening it inline.\n    const upstream = await fetch(c.get(\"storage\").getUrl(file.key));\n    if (!upstream.ok || !upstream.body) {\n      return c.json({ error: \"File not found\" }, 404);\n    }\n\n    c.header(\"Content-Type\", file.mimeType ?? \"application/octet-stream\");\n    c.header(\n      \"Content-Disposition\",\n      `attachment; filename*=UTF-8''${encodeURIComponent(file.name)}`,\n    );\n    const length = upstream.headers.get(\"content-length\");\n    if (length) {\n      c.header(\"Content-Length\", length);\n    }\n\n    return c.body(upstream.body, 200);\n  },\n});\n"],"mappings":"oPAOA,MAAa,EAAyB,EAAW,CAC/C,SAAU,EAAc,SACxB,qBAAsB,CAAE,OAAQ,QAAS,WAAY,cAAe,EACpE,MAAO,CACL,OAAQ,MACR,YACE,kFACF,KAAM,iBACN,QAAS,CACP,OAAQ,EAAE,OAAO,CACf,GAAI,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAE,QAAS,GAAI,CAAC,CACzC,CAAC,CACH,EACA,UAAW,CACT,IAAK,CACH,QAAS,CACP,2BAA4B,CAC1B,OAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAE,OAAQ,SAAU,KAAM,QAAS,CAAC,CACjE,CACF,EACA,YAAa,eACf,EACA,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,OAAO,CAAE,MAAO,EAAE,OAAO,CAAE,CAAC,CACxC,CACF,EACA,YAAa,gBACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAClB,GAAM,CAAE,MAAO,EAAE,IAAI,MAAM,OAAO,EAC5B,EAAS,OAAO,CAAE,EACxB,GAAI,CAAC,OAAO,UAAU,CAAM,EAC1B,OAAO,EAAE,KAAK,CAAE,MAAO,gBAAiB,EAAG,GAAG,EAGhD,GAAM,CAAC,GAAQ,MAAM,EAClB,IAAI,IAAI,CAAC,CACT,OAAO,CACN,KAAM,EAAW,KACjB,IAAK,EAAW,IAChB,SAAU,EAAW,QACvB,CAAC,CAAC,CACD,KAAK,CAAU,CAAC,CAChB,MAAM,EAAG,EAAW,GAAI,CAAM,CAAC,CAAC,CAChC,MAAM,CAAC,EAEV,GAAI,CAAC,GAAQ,CAAC,EAAE,IAAI,MAAM,CAAC,CAAC,SAAS,QACnC,OAAO,EAAE,KAAK,CAAE,MAAO,gBAAiB,EAAG,GAAG,EAMhD,IAAM,EAAW,MAAM,MAAM,EAAE,IAAI,SAAS,CAAC,CAAC,OAAO,EAAK,GAAG,CAAC,EAC9D,GAAI,CAAC,EAAS,IAAM,CAAC,EAAS,KAC5B,OAAO,EAAE,KAAK,CAAE,MAAO,gBAAiB,EAAG,GAAG,EAGhD,EAAE,OAAO,eAAgB,EAAK,UAAY,0BAA0B,EACpE,EAAE,OACA,sBACA,gCAAgC,mBAAmB,EAAK,IAAI,GAC9D,EACA,IAAM,EAAS,EAAS,QAAQ,IAAI,gBAAgB,EAKpD,OAJI,GACF,EAAE,OAAO,iBAAkB,CAAM,EAG5B,EAAE,KAAK,EAAS,KAAM,GAAG,CAClC,CACF,CAAC"}

package/dist/src/api/modules/admin/files/routes/list.route.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"list.route.js","names":[],"sources":["../../../../../../../src/api/modules/admin/files/routes/list.route.ts"],"sourcesContent":["import { eq } from \"drizzle-orm\";\nimport z from \"zod\";\n\nimport { resolveRoleNames } from \"@/api/lib/resolve-role-names\";\nimport { buildRoute } from \"@/api/lib/route\";\nimport {\n  withPagination,\n  zodPaginationPageInfo,\n  zodPaginationQuery,\n} from \"@/api/lib/with-pagination\";\nimport { CONFIG_PLUGIN } from \"@/config\";\nimport { core_files } from \"@/database/files\";\nimport { core_roles } from \"@/database/roles\";\nimport { core_users } from \"@/database/users\";\nimport { parseImageDimensions } from \"@/lib/api/upload\";\n\nexport const listFilesAdminRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  adminStaffPermission: { module: \"files\", permission: \"can_view\" },\n  route: {\n    method: \"get\",\n    description: \"List uploaded files stored in core_files (Admin only).\",\n    path: \"/\",\n    request: {\n      query: zodPaginationQuery.extend({\n        order: z.enum([\"asc\", \"desc\"]).optional(),\n        orderBy: z.enum([\"name\", \"size\", \"createdAt\"]).optional(),\n        search: z.string().optional(),\n      }),\n    },\n    responses: {\n      200: {\n        content: {\n          \"application/json\": {\n            schema: z.object({\n              edges: z.array(\n                z.object({\n                  id: z.number(),\n                  name: z.string(),\n                  folder: z.string(),\n                  mimeType: z.string().nullable(),\n                  size: z.number(),\n                  metadata: z.record(z.string(), z.unknown()),\n                  createdAt: z.date(),\n                  // Pixel dimensions for images, or `null` for non-images and\n                  // files uploaded without image processing.\n                  dimensions: z\n                    .object({ width: z.number(), height: z.number() })\n                    .nullable(),\n                  // The uploader, or `null` when uploaded anonymously or the\n                  // user has since been removed. `role.name` carries every\n                  // translation; the frontend resolves the active locale.\n                  user: z\n                    .object({\n                      id: z.number(),\n                      name: z.string(),\n                      nameCode: z.string(),\n                      role: z.object({\n                        id: z.number(),\n                        color: z.string().nullable(),\n                        name: z.array(\n                          z.object({\n                            name: z.string(),\n                            languageCode: z.string(),\n                          }),\n                        ),\n                      }),\n                    })\n                    .nullable(),\n                  // Public URL for the stored object, or `null` when no storage\n                  // adapter is currently configured.\n                  url: z.string().nullable(),\n                }),\n              ),\n              pageInfo: zodPaginationPageInfo,\n            }),\n          },\n        },\n        description: \"List of uploaded files\",\n      },\n    },\n  },\n  handler: async c => {\n    const query = c.req.valid(\"query\");\n    const hasAdapter = !!c.get(\"core\").storage?.adapter;\n    const storage = c.get(\"storage\");\n\n    const data = await withPagination({\n      params: { query },\n      c,\n      primaryCursor: core_files.id,\n      search: [core_files.name],\n      query: async ({ limit, where, orderBy }) =>\n        await c\n          .get(\"db\")\n          .select({\n            id: core_files.id,\n            name: core_files.name,\n            key: core_files.key,\n            folder: core_files.folder,\n            mimeType: core_files.mimeType,\n            size: core_files.size,\n            metadata: core_files.metadata,\n            createdAt: core_files.createdAt,\n            userId: core_files.userId,\n            userName: core_users.name,\n            userNameCode: core_users.nameCode,\n            userRoleId: core_users.roleId,\n            userRoleColor: core_roles.color,\n          })\n          .from(core_files)\n          .leftJoin(core_users, eq(core_users.id, core_files.userId))\n          .leftJoin(core_roles, eq(core_roles.id, core_users.roleId))\n          .where(where)\n          .orderBy(orderBy)\n          .limit(limit),\n      table: core_files,\n      orderBy: {\n        column: query.orderBy\n          ? core_files[query.orderBy]\n          : core_files.createdAt,\n        order: query.order ?? \"desc\",\n      },\n    });\n\n    const roleNames = await resolveRoleNames(\n      c,\n      data.edges\n        .map(edge => edge.userRoleId)\n        .filter((id): id is number => id != null),\n    );\n\n    return c.json({\n      ...data,\n      edges: data.edges.map(\n        ({\n          key,\n          userId,\n          userName,\n          userNameCode,\n          userRoleId,\n          userRoleColor,\n          ...file\n        }) => ({\n          ...file,\n          url: hasAdapter ? storage.getUrl(key) : null,\n          dimensions: parseImageDimensions(file.metadata),\n          user:\n            userId != null && userName != null\n              ? {\n                  id: userId,\n                  name: userName,\n                  nameCode: userNameCode ?? \"\",\n                  role: {\n                    id: userRoleId ?? 0,\n                    color: userRoleColor ?? null,\n                    name:\n                      userRoleId != null\n                        ? (roleNames.get(userRoleId) ?? [])\n                        : [],\n                  },\n                }\n              : null,\n        }),\n      ),\n    });\n  },\n});\n"],"mappings":"qmBAgBA,MAAa,EAAsB,EAAW,CAC5C,SAAU,EAAc,SACxB,qBAAsB,CAAE,OAAQ,QAAS,WAAY,UAAW,EAChE,MAAO,CACL,OAAQ,MACR,YAAa,yDACb,KAAM,IACN,QAAS,CACP,MAAO,EAAmB,OAAO,CAC/B,MAAO,EAAE,KAAK,CAAC,MAAO,MAAM,CAAC,CAAC,CAAC,SAAS,EACxC,QAAS,EAAE,KAAK,CAAC,OAAQ,OAAQ,WAAW,CAAC,CAAC,CAAC,SAAS,EACxD,OAAQ,EAAE,OAAO,CAAC,CAAC,SAAS,CAC9B,CAAC,CACH,EACA,UAAW,CACT,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,OAAO,CACf,MAAO,EAAE,MACP,EAAE,OAAO,CACP,GAAI,EAAE,OAAO,EACb,KAAM,EAAE,OAAO,EACf,OAAQ,EAAE,OAAO,EACjB,SAAU,EAAE,OAAO,CAAC,CAAC,SAAS,EAC9B,KAAM,EAAE,OAAO,EACf,SAAU,EAAE,OAAO,EAAE,OAAO,EAAG,EAAE,QAAQ,CAAC,EAC1C,UAAW,EAAE,KAAK,EAGlB,WAAY,EACT,OAAO,CAAE,MAAO,EAAE,OAAO,EAAG,OAAQ,EAAE,OAAO,CAAE,CAAC,CAAC,CACjD,SAAS,EAIZ,KAAM,EACH,OAAO,CACN,GAAI,EAAE,OAAO,EACb,KAAM,EAAE,OAAO,EACf,SAAU,EAAE,OAAO,EACnB,KAAM,EAAE,OAAO,CACb,GAAI,EAAE,OAAO,EACb,MAAO,EAAE,OAAO,CAAC,CAAC,SAAS,EAC3B,KAAM,EAAE,MACN,EAAE,OAAO,CACP,KAAM,EAAE,OAAO,EACf,aAAc,EAAE,OAAO,CACzB,CAAC,CACH,CACF,CAAC,CACH,CAAC,CAAC,CACD,SAAS,EAGZ,IAAK,EAAE,OAAO,CAAC,CAAC,SAAS,CAC3B,CAAC,CACH,EACA,SAAU,CACZ,CAAC,CACH,CACF,EACA,YAAa,wBACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAClB,IAAM,EAAQ,EAAE,IAAI,MAAM,OAAO,EAC3B,EAAa,CAAC,CAAC,EAAE,IAAI,MAAM,CAAC,CAAC,SAAS,QACtC,EAAU,EAAE,IAAI,SAAS,EAEzB,EAAO,MAAM,EAAe,CAChC,OAAQ,CAAE,OAAM,EAChB,IACA,cAAe,EAAW,GAC1B,OAAQ,CAAC,EAAW,IAAI,EACxB,MAAO,MAAO,CAAE,QAAO,QAAO,aAC5B,MAAM,EACH,IAAI,IAAI,CAAC,CACT,OAAO,CACN,GAAI,EAAW,GACf,KAAM,EAAW,KACjB,IAAK,EAAW,IAChB,OAAQ,EAAW,OACnB,SAAU,EAAW,SACrB,KAAM,EAAW,KACjB,SAAU,EAAW,SACrB,UAAW,EAAW,UACtB,OAAQ,EAAW,OACnB,SAAU,EAAW,KACrB,aAAc,EAAW,SACzB,WAAY,EAAW,OACvB,cAAe,EAAW,KAC5B,CAAC,CAAC,CACD,KAAK,CAAU,CAAC,CAChB,SAAS,EAAY,EAAG,EAAW,GAAI,EAAW,MAAM,CAAC,CAAC,CAC1D,SAAS,EAAY,EAAG,EAAW,GAAI,EAAW,MAAM,CAAC,CAAC,CAC1D,MAAM,CAAK,CAAC,CACZ,QAAQ,CAAO,CAAC,CAChB,MAAM,CAAK,EAChB,MAAO,EACP,QAAS,CACP,OAAQ,EAAM,QACV,EAAW,EAAM,SACjB,EAAW,UACf,MAAO,EAAM,OAAS,MACxB,CACF,CAAC,EAEK,EAAY,MAAM,EACtB,EACA,EAAK,MACF,IAAI,GAAQ,EAAK,UAAU,CAAC,CAC5B,OAAQ,GAAqB,GAAM,IAAI,CAC5C,EAEA,OAAO,EAAE,KAAK,CACZ,GAAG,EACH,MAAO,EAAK,MAAM,KACf,CACC,MACA,SACA,WACA,eACA,aACA,gBACA,GAAG,MACE,CACL,GAAG,EACH,IAAK,EAAa,EAAQ,OAAO,CAAG,EAAI,KACxC,WAAY,EAAqB,EAAK,QAAQ,EAC9C,KACE,GAAU,MAAQ,GAAY,KAC1B,CACE,GAAI,EACJ,KAAM,EACN,SAAU,GAAgB,GAC1B,KAAM,CACJ,GAAI,GAAc,EAClB,MAAO,GAAiB,KACxB,KACE,GAAc,KAEV,CAAC,EADA,EAAU,IAAI,CAAU,GAAK,CAAC,CAEvC,CACF,EACA,IACR,EACF,CACF,CAAC,CACH,CACF,CAAC"}

package/dist/src/api/modules/admin/roles/roles.admin.module.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"roles.admin.module.js","names":[],"sources":["../../../../../../src/api/modules/admin/roles/roles.admin.module.ts"],"sourcesContent":["import { buildModule } from \"@/api/lib/module\";\nimport { CONFIG_PLUGIN } from \"@/config\";\n\nimport { listRolesAdminRoute } from \"./routes/list.route\";\nimport { showRoleAdminRoute } from \"./routes/show.route\";\n\nexport const rolesAdminModule = buildModule({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  name: \"roles\",\n  routes: [listRolesAdminRoute, showRoleAdminRoute],\n});\n"],"mappings":"oOAMA,MAAa,EAAmB,EAAY,CAC1C,SAAU,EAAc,SACxB,KAAM,QACN,OAAQ,CAAC,EAAqB,CAAkB,CAClD,CAAC"}

package/dist/src/api/modules/admin/roles/routes/list.route.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"list.route.js","names":[],"sources":["../../../../../../../src/api/modules/admin/roles/routes/list.route.ts"],"sourcesContent":["import { z } from \"@hono/zod-openapi\";\nimport { and, count, eq, ilike, inArray } from \"drizzle-orm\";\n\nimport { buildRoute } from \"@/api/lib/route\";\nimport {\n  withPagination,\n  zodPaginationPageInfo,\n  zodPaginationQuery,\n} from \"@/api/lib/with-pagination\";\nimport { CONFIG_PLUGIN } from \"@/config\";\nimport { core_languages_words } from \"@/database/languages\";\nimport { core_roles } from \"@/database/roles\";\nimport { core_users } from \"@/database/users\";\n\nconst rolesAdminListSchema = z.object({\n  edges: z.array(\n    z.object({\n      id: z.number(),\n      // Every translation of the role name - resolved to the active locale on\n      // the frontend (see the `RoleFormat` component).\n      name: z.array(\n        z.object({\n          name: z.string(),\n          languageCode: z.string(),\n        }),\n      ),\n      color: z.string().nullable(),\n      protected: z.boolean(),\n      default: z.boolean(),\n      root: z.boolean(),\n      guest: z.boolean(),\n      createdAt: z.date(),\n      updatedAt: z.date(),\n      usersCount: z.number(),\n    }),\n  ),\n  pageInfo: zodPaginationPageInfo,\n});\n\nexport const listRolesAdminRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  route: {\n    method: \"get\",\n    description: \"Get list of all roles (Admin only)\",\n    path: \"/list\",\n    request: {\n      query: zodPaginationQuery.extend({\n        order: z.enum([\"asc\", \"desc\"]).optional(),\n        orderBy: z.enum([\"id\", \"createdAt\", \"updatedAt\"]).optional(),\n        search: z.string().optional(),\n      }),\n    },\n    responses: {\n      200: {\n        content: {\n          \"application/json\": {\n            schema: rolesAdminListSchema,\n          },\n        },\n        description: \"List of roles\",\n      },\n      403: {\n        description: \"Access Denied\",\n      },\n    },\n  },\n  handler: async c => {\n    const query = c.req.valid(\"query\");\n    const search = query.search?.trim();\n\n    const data = await withPagination({\n      params: {\n        query,\n      },\n      // Role names live in `core_languages_words`, so search resolves matching\n      // role ids from there instead of a column on `core_roles`.\n      where: search\n        ? inArray(\n            core_roles.id,\n            c\n              .get(\"db\")\n              .select({ id: core_languages_words.itemId })\n              .from(core_languages_words)\n              .where(\n                and(\n                  eq(core_languages_words.tableName, \"core_roles\"),\n                  eq(core_languages_words.variable, \"name\"),\n                  eq(core_languages_words.pluginCode, \"core\"),\n                  ilike(core_languages_words.value, `%${search}%`),\n                ),\n              ),\n          )\n        : undefined,\n      primaryCursor: core_roles.id,\n      query: async ({ limit, where, orderBy }) =>\n        await c\n          .get(\"db\")\n          .select({\n            id: core_roles.id,\n            color: core_roles.color,\n            protected: core_roles.protected,\n            default: core_roles.default,\n            root: core_roles.root,\n            guest: core_roles.guest,\n            createdAt: core_roles.createdAt,\n            updatedAt: core_roles.updatedAt,\n          })\n          .from(core_roles)\n          .where(where)\n          .orderBy(orderBy)\n          .limit(limit),\n      table: core_roles,\n      orderBy: {\n        column: query.orderBy\n          ? core_roles[query.orderBy]\n          : core_roles.updatedAt,\n        order: query.order ?? \"desc\",\n      },\n      c,\n    });\n\n    const roleIds = data.edges.map(role => role.id);\n    const names = roleIds.length\n      ? await c\n          .get(\"db\")\n          .select({\n            itemId: core_languages_words.itemId,\n            languageCode: core_languages_words.languageCode,\n            value: core_languages_words.value,\n          })\n          .from(core_languages_words)\n          .where(\n            and(\n              eq(core_languages_words.tableName, \"core_roles\"),\n              eq(core_languages_words.variable, \"name\"),\n              eq(core_languages_words.pluginCode, \"core\"),\n              inArray(core_languages_words.itemId, roleIds),\n            ),\n          )\n      : [];\n    const userCounts = roleIds.length\n      ? await c\n          .get(\"db\")\n          .select({\n            roleId: core_users.roleId,\n            total: count(),\n          })\n          .from(core_users)\n          .where(inArray(core_users.roleId, roleIds))\n          .groupBy(core_users.roleId)\n      : [];\n\n    return c.json({\n      pageInfo: data.pageInfo,\n      edges: data.edges.map(role => ({\n        ...role,\n        name: names\n          .filter(word => word.itemId === role.id)\n          .map(word => ({ name: word.value, languageCode: word.languageCode })),\n        usersCount:\n          userCounts.find(item => item.roleId === role.id)?.total ?? 0,\n      })),\n    });\n  },\n});\n"],"mappings":"iiBAcA,MAAM,EAAuB,EAAE,OAAO,CACpC,MAAO,EAAE,MACP,EAAE,OAAO,CACP,GAAI,EAAE,OAAO,EAGb,KAAM,EAAE,MACN,EAAE,OAAO,CACP,KAAM,EAAE,OAAO,EACf,aAAc,EAAE,OAAO,CACzB,CAAC,CACH,EACA,MAAO,EAAE,OAAO,CAAC,CAAC,SAAS,EAC3B,UAAW,EAAE,QAAQ,EACrB,QAAS,EAAE,QAAQ,EACnB,KAAM,EAAE,QAAQ,EAChB,MAAO,EAAE,QAAQ,EACjB,UAAW,EAAE,KAAK,EAClB,UAAW,EAAE,KAAK,EAClB,WAAY,EAAE,OAAO,CACvB,CAAC,CACH,EACA,SAAU,CACZ,CAAC,EAEY,EAAsB,EAAW,CAC5C,SAAU,EAAc,SACxB,MAAO,CACL,OAAQ,MACR,YAAa,qCACb,KAAM,QACN,QAAS,CACP,MAAO,EAAmB,OAAO,CAC/B,MAAO,EAAE,KAAK,CAAC,MAAO,MAAM,CAAC,CAAC,CAAC,SAAS,EACxC,QAAS,EAAE,KAAK,CAAC,KAAM,YAAa,WAAW,CAAC,CAAC,CAAC,SAAS,EAC3D,OAAQ,EAAE,OAAO,CAAC,CAAC,SAAS,CAC9B,CAAC,CACH,EACA,UAAW,CACT,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,CACV,CACF,EACA,YAAa,eACf,EACA,IAAK,CACH,YAAa,eACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAClB,IAAM,EAAQ,EAAE,IAAI,MAAM,OAAO,EAC3B,EAAS,EAAM,QAAQ,KAAK,EAE5B,EAAO,MAAM,EAAe,CAChC,OAAQ,CACN,OACF,EAGA,MAAO,EACH,EACE,EAAW,GACX,EACG,IAAI,IAAI,CAAC,CACT,OAAO,CAAE,GAAI,EAAqB,MAAO,CAAC,CAAC,CAC3C,KAAK,CAAoB,CAAC,CAC1B,MACC,EACE,EAAG,EAAqB,UAAW,YAAY,EAC/C,EAAG,EAAqB,SAAU,MAAM,EACxC,EAAG,EAAqB,WAAY,MAAM,EAC1C,EAAM,EAAqB,MAAO,IAAI,EAAO,EAAE,CACjD,CACF,CACJ,EACA,IAAA,GACJ,cAAe,EAAW,GAC1B,MAAO,MAAO,CAAE,QAAO,QAAO,aAC5B,MAAM,EACH,IAAI,IAAI,CAAC,CACT,OAAO,CACN,GAAI,EAAW,GACf,MAAO,EAAW,MAClB,UAAW,EAAW,UACtB,QAAS,EAAW,QACpB,KAAM,EAAW,KACjB,MAAO,EAAW,MAClB,UAAW,EAAW,UACtB,UAAW,EAAW,SACxB,CAAC,CAAC,CACD,KAAK,CAAU,CAAC,CAChB,MAAM,CAAK,CAAC,CACZ,QAAQ,CAAO,CAAC,CAChB,MAAM,CAAK,EAChB,MAAO,EACP,QAAS,CACP,OAAQ,EAAM,QACV,EAAW,EAAM,SACjB,EAAW,UACf,MAAO,EAAM,OAAS,MACxB,EACA,GACF,CAAC,EAEK,EAAU,EAAK,MAAM,IAAI,GAAQ,EAAK,EAAE,EACxC,EAAQ,EAAQ,OAClB,MAAM,EACH,IAAI,IAAI,CAAC,CACT,OAAO,CACN,OAAQ,EAAqB,OAC7B,aAAc,EAAqB,aACnC,MAAO,EAAqB,KAC9B,CAAC,CAAC,CACD,KAAK,CAAoB,CAAC,CAC1B,MACC,EACE,EAAG,EAAqB,UAAW,YAAY,EAC/C,EAAG,EAAqB,SAAU,MAAM,EACxC,EAAG,EAAqB,WAAY,MAAM,EAC1C,EAAQ,EAAqB,OAAQ,CAAO,CAC9C,CACF,EACF,CAAC,EACC,EAAa,EAAQ,OACvB,MAAM,EACH,IAAI,IAAI,CAAC,CACT,OAAO,CACN,OAAQ,EAAW,OACnB,MAAO,EAAM,CACf,CAAC,CAAC,CACD,KAAK,CAAU,CAAC,CAChB,MAAM,EAAQ,EAAW,OAAQ,CAAO,CAAC,CAAC,CAC1C,QAAQ,EAAW,MAAM,EAC5B,CAAC,EAEL,OAAO,EAAE,KAAK,CACZ,SAAU,EAAK,SACf,MAAO,EAAK,MAAM,IAAI,IAAS,CAC7B,GAAG,EACH,KAAM,EACH,OAAO,GAAQ,EAAK,SAAW,EAAK,EAAE,CAAC,CACvC,IAAI,IAAS,CAAE,KAAM,EAAK,MAAO,aAAc,EAAK,YAAa,EAAE,EACtE,WACE,EAAW,KAAK,GAAQ,EAAK,SAAW,EAAK,EAAE,CAAC,EAAE,OAAS,CAC/D,EAAE,CACJ,CAAC,CACH,CACF,CAAC"}

package/dist/src/api/modules/admin/roles/routes/show.route.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"show.route.js","names":[],"sources":["../../../../../../../src/api/modules/admin/roles/routes/show.route.ts"],"sourcesContent":["import { z } from \"@hono/zod-openapi\";\nimport { and, eq } from \"drizzle-orm\";\n\nimport { buildRoute } from \"@/api/lib/route\";\nimport { CONFIG_PLUGIN } from \"@/config\";\nimport { core_languages_words } from \"@/database/languages\";\nimport { core_roles } from \"@/database/roles\";\n\nconst roleAdminSchema = z.object({\n  id: z.number(),\n  // Every translation of the role name - resolved to the active locale on the\n  // frontend (see the `RoleFormat` component).\n  name: z.array(\n    z.object({\n      name: z.string(),\n      languageCode: z.string(),\n    }),\n  ),\n  color: z.string().nullable(),\n  protected: z.boolean(),\n  default: z.boolean(),\n  root: z.boolean(),\n  guest: z.boolean(),\n  createdAt: z.date(),\n  updatedAt: z.date(),\n});\n\nexport const showRoleAdminRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  route: {\n    method: \"get\",\n    description: \"Get a single role by id (Admin only)\",\n    path: \"/{id}\",\n    request: {\n      params: z.object({\n        id: z.string().openapi({ example: \"1\" }),\n      }),\n    },\n    responses: {\n      200: {\n        content: {\n          \"application/json\": {\n            schema: roleAdminSchema,\n          },\n        },\n        description: \"Role found\",\n      },\n      403: {\n        description: \"Access Denied\",\n      },\n      404: {\n        content: {\n          \"application/json\": {\n            schema: z.object({\n              error: z.string(),\n            }),\n          },\n        },\n        description: \"Role not found\",\n      },\n    },\n  },\n  handler: async c => {\n    const { id } = c.req.valid(\"param\");\n    const roleId = Number(id);\n    if (!Number.isInteger(roleId)) {\n      return c.json({ error: \"Role not found\" }, 404);\n    }\n\n    const [role] = await c\n      .get(\"db\")\n      .select({\n        id: core_roles.id,\n        color: core_roles.color,\n        protected: core_roles.protected,\n        default: core_roles.default,\n        root: core_roles.root,\n        guest: core_roles.guest,\n        createdAt: core_roles.createdAt,\n      })\n      .from(core_roles)\n      .where(eq(core_roles.id, roleId))\n      .limit(1);\n\n    if (!role) {\n      return c.json({ error: \"Role not found\" }, 404);\n    }\n\n    const names = await c\n      .get(\"db\")\n      .select({\n        languageCode: core_languages_words.languageCode,\n        value: core_languages_words.value,\n      })\n      .from(core_languages_words)\n      .where(\n        and(\n          eq(core_languages_words.tableName, \"core_roles\"),\n          eq(core_languages_words.variable, \"name\"),\n          eq(core_languages_words.pluginCode, \"core\"),\n          eq(core_languages_words.itemId, roleId),\n        ),\n      );\n\n    return c.json(\n      {\n        ...role,\n        name: names.map(word => ({\n          name: word.value,\n          languageCode: word.languageCode,\n        })),\n      },\n      200,\n    );\n  },\n});\n"],"mappings":"yUAQA,MAAM,EAAkB,EAAE,OAAO,CAC/B,GAAI,EAAE,OAAO,EAGb,KAAM,EAAE,MACN,EAAE,OAAO,CACP,KAAM,EAAE,OAAO,EACf,aAAc,EAAE,OAAO,CACzB,CAAC,CACH,EACA,MAAO,EAAE,OAAO,CAAC,CAAC,SAAS,EAC3B,UAAW,EAAE,QAAQ,EACrB,QAAS,EAAE,QAAQ,EACnB,KAAM,EAAE,QAAQ,EAChB,MAAO,EAAE,QAAQ,EACjB,UAAW,EAAE,KAAK,EAClB,UAAW,EAAE,KAAK,CACpB,CAAC,EAEY,EAAqB,EAAW,CAC3C,SAAU,EAAc,SACxB,MAAO,CACL,OAAQ,MACR,YAAa,uCACb,KAAM,QACN,QAAS,CACP,OAAQ,EAAE,OAAO,CACf,GAAI,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAE,QAAS,GAAI,CAAC,CACzC,CAAC,CACH,EACA,UAAW,CACT,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,CACV,CACF,EACA,YAAa,YACf,EACA,IAAK,CACH,YAAa,eACf,EACA,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,OAAO,CACf,MAAO,EAAE,OAAO,CAClB,CAAC,CACH,CACF,EACA,YAAa,gBACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAClB,GAAM,CAAE,MAAO,EAAE,IAAI,MAAM,OAAO,EAC5B,EAAS,OAAO,CAAE,EACxB,GAAI,CAAC,OAAO,UAAU,CAAM,EAC1B,OAAO,EAAE,KAAK,CAAE,MAAO,gBAAiB,EAAG,GAAG,EAGhD,GAAM,CAAC,GAAQ,MAAM,EAClB,IAAI,IAAI,CAAC,CACT,OAAO,CACN,GAAI,EAAW,GACf,MAAO,EAAW,MAClB,UAAW,EAAW,UACtB,QAAS,EAAW,QACpB,KAAM,EAAW,KACjB,MAAO,EAAW,MAClB,UAAW,EAAW,SACxB,CAAC,CAAC,CACD,KAAK,CAAU,CAAC,CAChB,MAAM,EAAG,EAAW,GAAI,CAAM,CAAC,CAAC,CAChC,MAAM,CAAC,EAEV,GAAI,CAAC,EACH,OAAO,EAAE,KAAK,CAAE,MAAO,gBAAiB,EAAG,GAAG,EAGhD,IAAM,EAAQ,MAAM,EACjB,IAAI,IAAI,CAAC,CACT,OAAO,CACN,aAAc,EAAqB,aACnC,MAAO,EAAqB,KAC9B,CAAC,CAAC,CACD,KAAK,CAAoB,CAAC,CAC1B,MACC,EACE,EAAG,EAAqB,UAAW,YAAY,EAC/C,EAAG,EAAqB,SAAU,MAAM,EACxC,EAAG,EAAqB,WAAY,MAAM,EAC1C,EAAG,EAAqB,OAAQ,CAAM,CACxC,CACF,EAEF,OAAO,EAAE,KACP,CACE,GAAG,EACH,KAAM,EAAM,IAAI,IAAS,CACvB,KAAM,EAAK,MACX,aAAc,EAAK,YACrB,EAAE,CACJ,EACA,GACF,CACF,CACF,CAAC"}

package/dist/src/api/modules/admin/routes/notifications.route.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"notifications.route.js","names":["z"],"sources":["../../../../../../src/api/modules/admin/routes/notifications.route.ts"],"sourcesContent":["import { HTTPException } from \"hono/http-exception\";\nimport { z } from \"zod\";\n\nimport { buildRoute } from \"@/api/lib/route\";\nimport { CONFIG_PLUGIN } from \"@/config\";\nimport { notificationsChannel } from \"@/ws/notifications\";\n\nexport const zodSendNotificationSchema = z.object({\n  description: z.string().optional(),\n  title: z.string().min(1, \"Title is required\"),\n  type: z.enum([\"error\", \"info\", \"success\", \"warning\"]).optional(),\n  userId: z.number(),\n});\n\nexport const sendNotificationRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  route: {\n    method: \"post\",\n    description: \"Send a notification to a user\",\n    path: \"/notifications/send\",\n    request: {\n      body: {\n        content: {\n          \"application/json\": {\n            schema: zodSendNotificationSchema,\n          },\n        },\n      },\n    },\n    responses: {\n      200: {\n        content: {\n          \"application/json\": {\n            schema: z.object({ success: z.boolean() }),\n          },\n        },\n        description: \"Notification sent\",\n      },\n      403: {\n        description: \"Access Denied\",\n      },\n    },\n  },\n  handler: c => {\n    const admin = c.get(\"admin\")?.user;\n    if (!admin) throw new HTTPException(403);\n\n    const { userId, title, description, type } = c.req.valid(\"json\");\n\n    // Delivered only to that user's connections, across all their browsers.\n    c.get(\"realtime\").sendToUser(userId, notificationsChannel, {\n      description,\n      title,\n      type,\n    });\n\n    return c.json({ success: true });\n  },\n});\n"],"mappings":"4PAOA,MAAa,EAA4BA,EAAE,OAAO,CAChD,YAAaA,EAAE,OAAO,CAAC,CAAC,SAAS,EACjC,MAAOA,EAAE,OAAO,CAAC,CAAC,IAAI,EAAG,mBAAmB,EAC5C,KAAMA,EAAE,KAAK,CAAC,QAAS,OAAQ,UAAW,SAAS,CAAC,CAAC,CAAC,SAAS,EAC/D,OAAQA,EAAE,OAAO,CACnB,CAAC,EAEY,EAAwB,EAAW,CAC9C,SAAU,EAAc,SACxB,MAAO,CACL,OAAQ,OACR,YAAa,gCACb,KAAM,sBACN,QAAS,CACP,KAAM,CACJ,QAAS,CACP,mBAAoB,CAClB,OAAQ,CACV,CACF,CACF,CACF,EACA,UAAW,CACT,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQA,EAAE,OAAO,CAAE,QAASA,EAAE,QAAQ,CAAE,CAAC,CAC3C,CACF,EACA,YAAa,mBACf,EACA,IAAK,CACH,YAAa,eACf,CACF,CACF,EACA,QAAS,GAAK,CAEZ,GAAI,CADU,EAAE,IAAI,OAAO,CAAC,EAAE,KAClB,MAAM,IAAI,EAAc,GAAG,EAEvC,GAAM,CAAE,SAAQ,QAAO,cAAa,QAAS,EAAE,IAAI,MAAM,MAAM,EAS/D,OANA,EAAE,IAAI,UAAU,CAAC,CAAC,WAAW,EAAQ,EAAsB,CACzD,cACA,QACA,MACF,CAAC,EAEM,EAAE,KAAK,CAAE,QAAS,EAAK,CAAC,CACjC,CACF,CAAC"}

package/dist/src/api/modules/admin/routes/session.route.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session.route.js","names":["z"],"sources":["../../../../../../src/api/modules/admin/routes/session.route.ts"],"sourcesContent":["import { HTTPException } from \"hono/http-exception\";\nimport { z } from \"zod\";\n\nimport { resolveStaffPermissions } from \"@/api/lib/check-staff-permission\";\nimport { buildRoute } from \"@/api/lib/route\";\nimport { CONFIG_PLUGIN } from \"@/config\";\n\nexport const sessionAdminRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  route: {\n    method: \"get\",\n    description: \"Verify admin session\",\n    path: \"/session\",\n    responses: {\n      200: {\n        content: {\n          \"application/json\": {\n            schema: z.object({\n              user: z.object({\n                id: z.number(),\n                email: z.string(),\n                name: z.string(),\n                nameCode: z.string(),\n                createdAt: z.date(),\n                newsletter: z.boolean(),\n                avatarColor: z.string(),\n                emailVerified: z.boolean(),\n                roleId: z.number(),\n                birthday: z.date().nullable(),\n              }),\n              permissions: z.object({\n                root: z.boolean(),\n                permissions: z.array(\n                  z.object({\n                    plugin: z.string(),\n                    module: z.string(),\n                    permission: z.string(),\n                  }),\n                ),\n              }),\n              vitnode_version: z.string(),\n            }),\n          },\n        },\n        description: \"User\",\n      },\n      403: {\n        description: \"Access Denied\",\n      },\n    },\n  },\n  handler: async c => {\n    const user = c.get(\"admin\")?.user;\n    if (!user) throw new HTTPException(403);\n\n    const permissions = await resolveStaffPermissions(c, {\n      type: \"admin\",\n      user,\n    });\n\n    return c.json({\n      user,\n      permissions,\n      vitnode_version: CONFIG_PLUGIN.version,\n    });\n  },\n});\n"],"mappings":"sQAOA,MAAa,EAAoB,EAAW,CAC1C,SAAU,EAAc,SACxB,MAAO,CACL,OAAQ,MACR,YAAa,uBACb,KAAM,WACN,UAAW,CACT,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQA,EAAE,OAAO,CACf,KAAMA,EAAE,OAAO,CACb,GAAIA,EAAE,OAAO,EACb,MAAOA,EAAE,OAAO,EAChB,KAAMA,EAAE,OAAO,EACf,SAAUA,EAAE,OAAO,EACnB,UAAWA,EAAE,KAAK,EAClB,WAAYA,EAAE,QAAQ,EACtB,YAAaA,EAAE,OAAO,EACtB,cAAeA,EAAE,QAAQ,EACzB,OAAQA,EAAE,OAAO,EACjB,SAAUA,EAAE,KAAK,CAAC,CAAC,SAAS,CAC9B,CAAC,EACD,YAAaA,EAAE,OAAO,CACpB,KAAMA,EAAE,QAAQ,EAChB,YAAaA,EAAE,MACbA,EAAE,OAAO,CACP,OAAQA,EAAE,OAAO,EACjB,OAAQA,EAAE,OAAO,EACjB,WAAYA,EAAE,OAAO,CACvB,CAAC,CACH,CACF,CAAC,EACD,gBAAiBA,EAAE,OAAO,CAC5B,CAAC,CACH,CACF,EACA,YAAa,MACf,EACA,IAAK,CACH,YAAa,eACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAClB,IAAM,EAAO,EAAE,IAAI,OAAO,CAAC,EAAE,KAC7B,GAAI,CAAC,EAAM,MAAM,IAAI,EAAc,GAAG,EAEtC,IAAM,EAAc,MAAM,EAAwB,EAAG,CACnD,KAAM,QACN,MACF,CAAC,EAED,OAAO,EAAE,KAAK,CACZ,OACA,cACA,gBAAiB,EAAc,OACjC,CAAC,CACH,CACF,CAAC"}

package/dist/src/api/modules/admin/staff/lib/resolve-staff-edges.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"resolve-staff-edges.js","names":[],"sources":["../../../../../../../src/api/modules/admin/staff/lib/resolve-staff-edges.ts"],"sourcesContent":["import type { Context } from \"hono\";\n\nimport { eq, inArray } from \"drizzle-orm\";\n\nimport { getUserRoleIds } from \"@/api/lib/check-staff-permission\";\nimport { resolveRoleNames } from \"@/api/lib/resolve-role-names\";\nimport { core_roles } from \"@/database/roles\";\nimport { core_users } from \"@/database/users\";\n\ninterface RawStaffEdge {\n  createdAt: Date;\n  data?: null | { unrestricted: boolean };\n  id: number;\n  protected: boolean;\n  roleId: null | number;\n  updatedAt: Date;\n  userId: null | number;\n}\n\nexport const resolveStaffEdges = async (c: Context, edges: RawStaffEdge[]) => {\n  const currentUser = c.get(\"admin\")?.user;\n  const currentUserRoleIds = currentUser\n    ? new Set(await getUserRoleIds(c, currentUser))\n    : new Set<number>();\n\n  const entryRoleIds = edges\n    .map(edge => edge.roleId)\n    .filter((id): id is number => id != null);\n  const userIds = edges\n    .map(edge => edge.userId)\n    .filter((id): id is number => id != null);\n\n  const entryRoles = entryRoleIds.length\n    ? await c\n        .get(\"db\")\n        .select({ id: core_roles.id, color: core_roles.color })\n        .from(core_roles)\n        .where(inArray(core_roles.id, entryRoleIds))\n    : [];\n\n  const users = userIds.length\n    ? await c\n        .get(\"db\")\n        .select({\n          id: core_users.id,\n          name: core_users.name,\n          nameCode: core_users.nameCode,\n          avatarColor: core_users.avatarColor,\n          roleId: core_users.roleId,\n          roleColor: core_roles.color,\n        })\n        .from(core_users)\n        .leftJoin(core_roles, eq(core_roles.id, core_users.roleId))\n        .where(inArray(core_users.id, userIds))\n    : [];\n\n  const roleNames = await resolveRoleNames(c, [\n    ...entryRoleIds,\n    ...users.map(user => user.roleId),\n  ]);\n\n  return edges.map(edge => {\n    const entryRole = entryRoles.find(role => role.id === edge.roleId);\n    const user = users.find(item => item.id === edge.userId);\n\n    const self =\n      currentUser != null &&\n      ((edge.userId != null && edge.userId === currentUser.id) ||\n        (edge.roleId != null && currentUserRoleIds.has(edge.roleId)));\n\n    return {\n      id: edge.id,\n      createdAt: edge.createdAt,\n      updatedAt: edge.updatedAt,\n      unrestricted: edge.data?.unrestricted ?? false,\n      protected: edge.protected,\n      self,\n      role: entryRole\n        ? {\n            id: entryRole.id,\n            color: entryRole.color,\n            name: roleNames.get(entryRole.id) ?? [],\n          }\n        : null,\n      user: user\n        ? {\n            id: user.id,\n            name: user.name,\n            nameCode: user.nameCode,\n            avatarColor: user.avatarColor,\n            role: {\n              id: user.roleId,\n              color: user.roleColor,\n              name: roleNames.get(user.roleId) ?? [],\n            },\n          }\n        : null,\n    };\n  });\n};\n"],"mappings":"8TAmBA,MAAa,EAAoB,MAAO,EAAY,IAA0B,CAC5E,IAAM,EAAc,EAAE,IAAI,OAAO,CAAC,EAAE,KAC9B,EAAqB,EACvB,IAAI,IAAI,MAAM,EAAe,EAAG,CAAW,CAAC,EAC5C,IAAI,IAEF,EAAe,EAClB,IAAI,GAAQ,EAAK,MAAM,CAAC,CACxB,OAAQ,GAAqB,GAAM,IAAI,EACpC,EAAU,EACb,IAAI,GAAQ,EAAK,MAAM,CAAC,CACxB,OAAQ,GAAqB,GAAM,IAAI,EAEpC,EAAa,EAAa,OAC5B,MAAM,EACH,IAAI,IAAI,CAAC,CACT,OAAO,CAAE,GAAI,EAAW,GAAI,MAAO,EAAW,KAAM,CAAC,CAAC,CACtD,KAAK,CAAU,CAAC,CAChB,MAAM,EAAQ,EAAW,GAAI,CAAY,CAAC,EAC7C,CAAC,EAEC,EAAQ,EAAQ,OAClB,MAAM,EACH,IAAI,IAAI,CAAC,CACT,OAAO,CACN,GAAI,EAAW,GACf,KAAM,EAAW,KACjB,SAAU,EAAW,SACrB,YAAa,EAAW,YACxB,OAAQ,EAAW,OACnB,UAAW,EAAW,KACxB,CAAC,CAAC,CACD,KAAK,CAAU,CAAC,CAChB,SAAS,EAAY,EAAG,EAAW,GAAI,EAAW,MAAM,CAAC,CAAC,CAC1D,MAAM,EAAQ,EAAW,GAAI,CAAO,CAAC,EACxC,CAAC,EAEC,EAAY,MAAM,EAAiB,EAAG,CAC1C,GAAG,EACH,GAAG,EAAM,IAAI,GAAQ,EAAK,MAAM,CAClC,CAAC,EAED,OAAO,EAAM,IAAI,GAAQ,CACvB,IAAM,EAAY,EAAW,KAAK,GAAQ,EAAK,KAAO,EAAK,MAAM,EAC3D,EAAO,EAAM,KAAK,GAAQ,EAAK,KAAO,EAAK,MAAM,EAEjD,EACJ,GAAe,OACb,EAAK,QAAU,MAAQ,EAAK,SAAW,EAAY,IAClD,EAAK,QAAU,MAAQ,EAAmB,IAAI,EAAK,MAAM,GAE9D,MAAO,CACL,GAAI,EAAK,GACT,UAAW,EAAK,UAChB,UAAW,EAAK,UAChB,aAAc,EAAK,MAAM,cAAgB,GACzC,UAAW,EAAK,UAChB,OACA,KAAM,EACF,CACE,GAAI,EAAU,GACd,MAAO,EAAU,MACjB,KAAM,EAAU,IAAI,EAAU,EAAE,GAAK,CAAC,CACxC,EACA,KACJ,KAAM,EACF,CACE,GAAI,EAAK,GACT,KAAM,EAAK,KACX,SAAU,EAAK,SACf,YAAa,EAAK,YAClB,KAAM,CACJ,GAAI,EAAK,OACT,MAAO,EAAK,UACZ,KAAM,EAAU,IAAI,EAAK,MAAM,GAAK,CAAC,CACvC,CACF,EACA,IACN,CACF,CAAC,CACH"}

package/dist/src/api/modules/admin/staff/lib/schema.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"schema.js","names":[],"sources":["../../../../../../../src/api/modules/admin/staff/lib/schema.ts"],"sourcesContent":["import { z } from \"@hono/zod-openapi\";\n\nimport {\n  zodPaginationPageInfo,\n  zodPaginationQuery,\n} from \"@/api/lib/with-pagination\";\n\n// Shared between the moderators and admins staff lists - both read from a\n// permissions table that links either a role or a user to a staff group.\nexport const staffListAdminQuery = zodPaginationQuery.extend({\n  order: z.enum([\"asc\", \"desc\"]).optional(),\n  orderBy: z.enum([\"id\", \"createdAt\", \"updatedAt\"]).optional(),\n});\n\n// A role reference resolved for the `RoleFormat` component (it picks the active\n// locale from the translated names on the frontend).\nexport const staffRoleSchema = z.object({\n  id: z.number(),\n  color: z.string().nullable(),\n  name: z.array(\n    z.object({\n      name: z.string(),\n      languageCode: z.string(),\n    }),\n  ),\n});\n\n// A single resolved staff entry - the shape returned by `resolveStaffEdges`.\nexport const staffEntrySchema = z.object({\n  id: z.number(),\n  createdAt: z.date(),\n  updatedAt: z.date(),\n  unrestricted: z.boolean(),\n  protected: z.boolean(),\n  self: z.boolean(),\n  role: staffRoleSchema.nullable(),\n  user: z\n    .object({\n      id: z.number(),\n      name: z.string(),\n      nameCode: z.string(),\n      avatarColor: z.string(),\n      role: staffRoleSchema,\n    })\n    .nullable(),\n});\n\nexport const staffListAdminSchema = z.object({\n  edges: z.array(staffEntrySchema),\n  pageInfo: zodPaginationPageInfo,\n});\n\nexport const permissionsStaffArgsSchema = z.object({\n  plugin: z.string(),\n  module: z.string(),\n  permission: z.string(),\n});\n\nexport const staffTypeSchema = z.enum([\"admin\", \"moderator\"]);\n\n// Maps a staff entry type to the admin permission-catalog module that gates\n// managing it, so moderator and administrator staff can be governed separately.\nexport const staffPermissionModuleByType = {\n  admin: \"staff_admins\",\n  moderator: \"staff_moderators\",\n} as const;\n"],"mappings":"yIASA,MAAa,EAAsB,EAAmB,OAAO,CAC3D,MAAO,EAAE,KAAK,CAAC,MAAO,MAAM,CAAC,CAAC,CAAC,SAAS,EACxC,QAAS,EAAE,KAAK,CAAC,KAAM,YAAa,WAAW,CAAC,CAAC,CAAC,SAAS,CAC7D,CAAC,EAIY,EAAkB,EAAE,OAAO,CACtC,GAAI,EAAE,OAAO,EACb,MAAO,EAAE,OAAO,CAAC,CAAC,SAAS,EAC3B,KAAM,EAAE,MACN,EAAE,OAAO,CACP,KAAM,EAAE,OAAO,EACf,aAAc,EAAE,OAAO,CACzB,CAAC,CACH,CACF,CAAC,EAGY,EAAmB,EAAE,OAAO,CACvC,GAAI,EAAE,OAAO,EACb,UAAW,EAAE,KAAK,EAClB,UAAW,EAAE,KAAK,EAClB,aAAc,EAAE,QAAQ,EACxB,UAAW,EAAE,QAAQ,EACrB,KAAM,EAAE,QAAQ,EAChB,KAAM,EAAgB,SAAS,EAC/B,KAAM,EACH,OAAO,CACN,GAAI,EAAE,OAAO,EACb,KAAM,EAAE,OAAO,EACf,SAAU,EAAE,OAAO,EACnB,YAAa,EAAE,OAAO,EACtB,KAAM,CACR,CAAC,CAAC,CACD,SAAS,CACd,CAAC,EAEY,EAAuB,EAAE,OAAO,CAC3C,MAAO,EAAE,MAAM,CAAgB,EAC/B,SAAU,CACZ,CAAC,EAEY,EAA6B,EAAE,OAAO,CACjD,OAAQ,EAAE,OAAO,EACjB,OAAQ,EAAE,OAAO,EACjB,WAAY,EAAE,OAAO,CACvB,CAAC,EAEY,EAAkB,EAAE,KAAK,CAAC,QAAS,WAAW,CAAC,EAI/C,EAA8B,CACzC,MAAO,eACP,UAAW,kBACb"}

package/dist/src/api/modules/admin/staff/routes/admins.route.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"admins.route.js","names":[],"sources":["../../../../../../../src/api/modules/admin/staff/routes/admins.route.ts"],"sourcesContent":["import { buildRoute } from \"@/api/lib/route\";\nimport { withPagination } from \"@/api/lib/with-pagination\";\nimport { CONFIG_PLUGIN } from \"@/config\";\nimport { core_admin_permissions } from \"@/database/admins\";\n\nimport { resolveStaffEdges } from \"../lib/resolve-staff-edges\";\nimport { staffListAdminQuery, staffListAdminSchema } from \"../lib/schema\";\n\nexport const listAdminsStaffAdminRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  adminStaffPermission: { module: \"staff_admins\", permission: \"can_view\" },\n  route: {\n    method: \"get\",\n    description: \"Get list of administrators staff (Admin only)\",\n    path: \"/admins\",\n    request: {\n      query: staffListAdminQuery,\n    },\n    responses: {\n      200: {\n        content: {\n          \"application/json\": {\n            schema: staffListAdminSchema,\n          },\n        },\n        description: \"List of administrators staff\",\n      },\n      403: {\n        description: \"Access Denied\",\n      },\n    },\n  },\n  handler: async c => {\n    const query = c.req.valid(\"query\");\n\n    const data = await withPagination({\n      params: {\n        query,\n      },\n      primaryCursor: core_admin_permissions.id,\n      query: async ({ limit, where, orderBy }) =>\n        await c\n          .get(\"db\")\n          .select({\n            id: core_admin_permissions.id,\n            roleId: core_admin_permissions.roleId,\n            userId: core_admin_permissions.userId,\n            createdAt: core_admin_permissions.createdAt,\n            updatedAt: core_admin_permissions.updatedAt,\n            data: core_admin_permissions.data,\n            protected: core_admin_permissions.protected,\n          })\n          .from(core_admin_permissions)\n          .where(where)\n          .orderBy(orderBy)\n          .limit(limit),\n      table: core_admin_permissions,\n      orderBy: {\n        column: query.orderBy\n          ? core_admin_permissions[query.orderBy]\n          : core_admin_permissions.updatedAt,\n        order: query.order ?? \"desc\",\n      },\n      c,\n    });\n\n    return c.json({\n      pageInfo: data.pageInfo,\n      edges: await resolveStaffEdges(c, data.edges),\n    });\n  },\n});\n"],"mappings":"iZAQA,MAAa,EAA4B,EAAW,CAClD,SAAU,EAAc,SACxB,qBAAsB,CAAE,OAAQ,eAAgB,WAAY,UAAW,EACvE,MAAO,CACL,OAAQ,MACR,YAAa,gDACb,KAAM,UACN,QAAS,CACP,MAAO,CACT,EACA,UAAW,CACT,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,CACV,CACF,EACA,YAAa,8BACf,EACA,IAAK,CACH,YAAa,eACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAClB,IAAM,EAAQ,EAAE,IAAI,MAAM,OAAO,EAE3B,EAAO,MAAM,EAAe,CAChC,OAAQ,CACN,OACF,EACA,cAAe,EAAuB,GACtC,MAAO,MAAO,CAAE,QAAO,QAAO,aAC5B,MAAM,EACH,IAAI,IAAI,CAAC,CACT,OAAO,CACN,GAAI,EAAuB,GAC3B,OAAQ,EAAuB,OAC/B,OAAQ,EAAuB,OAC/B,UAAW,EAAuB,UAClC,UAAW,EAAuB,UAClC,KAAM,EAAuB,KAC7B,UAAW,EAAuB,SACpC,CAAC,CAAC,CACD,KAAK,CAAsB,CAAC,CAC5B,MAAM,CAAK,CAAC,CACZ,QAAQ,CAAO,CAAC,CAChB,MAAM,CAAK,EAChB,MAAO,EACP,QAAS,CACP,OAAQ,EAAM,QACV,EAAuB,EAAM,SAC7B,EAAuB,UAC3B,MAAO,EAAM,OAAS,MACxB,EACA,GACF,CAAC,EAED,OAAO,EAAE,KAAK,CACZ,SAAU,EAAK,SACf,MAAO,MAAM,EAAkB,EAAG,EAAK,KAAK,CAC9C,CAAC,CACH,CACF,CAAC"}

package/dist/src/api/modules/admin/staff/routes/create.route.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"create.route.js","names":[],"sources":["../../../../../../../src/api/modules/admin/staff/routes/create.route.ts"],"sourcesContent":["import { z } from \"@hono/zod-openapi\";\nimport { eq, or } from \"drizzle-orm\";\n\nimport { assertStaffPermission } from \"@/api/lib/check-staff-permission\";\nimport { buildRoute } from \"@/api/lib/route\";\nimport { CONFIG_PLUGIN } from \"@/config\";\nimport { core_admin_permissions } from \"@/database/admins\";\nimport { core_moderators_permissions } from \"@/database/moderators\";\n\nimport { staffPermissionModuleByType, staffTypeSchema } from \"../lib/schema\";\n\nconst tableByType = {\n  admin: core_admin_permissions,\n  moderator: core_moderators_permissions,\n} as const;\n\nexport const createStaffAdminRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  route: {\n    method: \"post\",\n    description: \"Create a staff entry for a role or a user (Admin only)\",\n    path: \"/entry/{type}\",\n    request: {\n      params: z.object({\n        type: staffTypeSchema,\n      }),\n      body: {\n        content: {\n          \"application/json\": {\n            schema: z\n              .object({\n                roleId: z.number().nullable().optional(),\n                userId: z.number().nullable().optional(),\n              })\n              // Exactly one of role/user must be provided.\n              .refine(\n                value => Boolean(value.roleId) !== Boolean(value.userId),\n                { message: \"Provide exactly one of roleId or userId\" },\n              ),\n          },\n        },\n      },\n    },\n    responses: {\n      201: {\n        content: {\n          \"application/json\": {\n            schema: z.object({ id: z.number() }),\n          },\n        },\n        description: \"Staff entry created\",\n      },\n      403: {\n        description: \"Access Denied\",\n      },\n      409: {\n        content: {\n          \"application/json\": {\n            schema: z.object({ error: z.string() }),\n          },\n        },\n        description: \"Staff entry already exists\",\n      },\n    },\n  },\n  handler: async c => {\n    const { type } = c.req.valid(\"param\");\n    await assertStaffPermission(c, {\n      type: \"admin\",\n      plugin: CONFIG_PLUGIN.pluginId,\n      module: staffPermissionModuleByType[type],\n      permission: \"can_create\",\n    });\n\n    const { roleId, userId } = c.req.valid(\"json\");\n    const table = tableByType[type];\n\n    // Prevent assigning the same role/user twice.\n    const [existing] = await c\n      .get(\"db\")\n      .select({ id: table.id })\n      .from(table)\n      .where(\n        or(\n          roleId ? eq(table.roleId, roleId) : undefined,\n          userId ? eq(table.userId, userId) : undefined,\n        ),\n      )\n      .limit(1);\n\n    if (existing) {\n      return c.json({ error: \"Staff entry already exists\" }, 409);\n    }\n\n    const [created] = await c\n      .get(\"db\")\n      .insert(table)\n      .values({\n        roleId: roleId ?? null,\n        userId: userId ?? null,\n        data: { unrestricted: false, permissions: [] },\n      })\n      .returning({ id: table.id });\n\n    return c.json({ id: created.id }, 201);\n  },\n});\n"],"mappings":"mgBAWA,MAAM,EAAc,CAClB,MAAO,EACP,UAAW,CACb,EAEa,EAAwB,EAAW,CAC9C,SAAU,EAAc,SACxB,MAAO,CACL,OAAQ,OACR,YAAa,yDACb,KAAM,gBACN,QAAS,CACP,OAAQ,EAAE,OAAO,CACf,KAAM,CACR,CAAC,EACD,KAAM,CACJ,QAAS,CACP,mBAAoB,CAClB,OAAQ,EACL,OAAO,CACN,OAAQ,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,EACvC,OAAQ,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,CACzC,CAAC,CAAC,CAED,OACC,GAAS,EAAQ,EAAM,QAAY,EAAQ,EAAM,OACjD,CAAE,QAAS,yCAA0C,CACvD,CACJ,CACF,CACF,CACF,EACA,UAAW,CACT,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,OAAO,CAAE,GAAI,EAAE,OAAO,CAAE,CAAC,CACrC,CACF,EACA,YAAa,qBACf,EACA,IAAK,CACH,YAAa,eACf,EACA,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,OAAO,CAAE,MAAO,EAAE,OAAO,CAAE,CAAC,CACxC,CACF,EACA,YAAa,4BACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAClB,GAAM,CAAE,QAAS,EAAE,IAAI,MAAM,OAAO,EACpC,MAAM,EAAsB,EAAG,CAC7B,KAAM,QACN,OAAQ,EAAc,SACtB,OAAQ,EAA4B,GACpC,WAAY,YACd,CAAC,EAED,GAAM,CAAE,SAAQ,UAAW,EAAE,IAAI,MAAM,MAAM,EACvC,EAAQ,EAAY,GAGpB,CAAC,GAAY,MAAM,EACtB,IAAI,IAAI,CAAC,CACT,OAAO,CAAE,GAAI,EAAM,EAAG,CAAC,CAAC,CACxB,KAAK,CAAK,CAAC,CACX,MACC,EACE,EAAS,EAAG,EAAM,OAAQ,CAAM,EAAI,IAAA,GACpC,EAAS,EAAG,EAAM,OAAQ,CAAM,EAAI,IAAA,EACtC,CACF,CAAC,CACA,MAAM,CAAC,EAEV,GAAI,EACF,OAAO,EAAE,KAAK,CAAE,MAAO,4BAA6B,EAAG,GAAG,EAG5D,GAAM,CAAC,GAAW,MAAM,EACrB,IAAI,IAAI,CAAC,CACT,OAAO,CAAK,CAAC,CACb,OAAO,CACN,OAAQ,GAAU,KAClB,OAAQ,GAAU,KAClB,KAAM,CAAE,aAAc,GAAO,YAAa,CAAC,CAAE,CAC/C,CAAC,CAAC,CACD,UAAU,CAAE,GAAI,EAAM,EAAG,CAAC,EAE7B,OAAO,EAAE,KAAK,CAAE,GAAI,EAAQ,EAAG,EAAG,GAAG,CACvC,CACF,CAAC"}

package/dist/src/api/modules/admin/staff/routes/delete.route.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"delete.route.js","names":[],"sources":["../../../../../../../src/api/modules/admin/staff/routes/delete.route.ts"],"sourcesContent":["import { z } from \"@hono/zod-openapi\";\nimport { eq } from \"drizzle-orm\";\nimport { HTTPException } from \"hono/http-exception\";\n\nimport {\n  assertStaffPermission,\n  getUserRoleIds,\n} from \"@/api/lib/check-staff-permission\";\nimport { buildRoute } from \"@/api/lib/route\";\nimport { CONFIG_PLUGIN } from \"@/config\";\nimport { core_admin_permissions } from \"@/database/admins\";\nimport { core_moderators_permissions } from \"@/database/moderators\";\n\nimport { staffPermissionModuleByType, staffTypeSchema } from \"../lib/schema\";\n\nconst tableByType = {\n  admin: core_admin_permissions,\n  moderator: core_moderators_permissions,\n} as const;\n\nexport const deleteStaffAdminRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  route: {\n    method: \"delete\",\n    description: \"Remove a staff entry (Admin only)\",\n    path: \"/entry/{type}/{id}\",\n    request: {\n      params: z.object({\n        type: staffTypeSchema,\n        id: z.string().openapi({ example: \"1\" }),\n      }),\n    },\n    responses: {\n      200: {\n        description: \"Staff entry removed\",\n      },\n      403: {\n        description: \"Access Denied\",\n      },\n      404: {\n        content: {\n          \"application/json\": {\n            schema: z.object({ error: z.string() }),\n          },\n        },\n        description: \"Staff entry not found\",\n      },\n    },\n  },\n  handler: async c => {\n    const { type, id } = c.req.valid(\"param\");\n    await assertStaffPermission(c, {\n      type: \"admin\",\n      plugin: CONFIG_PLUGIN.pluginId,\n      module: staffPermissionModuleByType[type],\n      permission: \"can_delete\",\n    });\n\n    const entryId = Number(id);\n    if (!Number.isInteger(entryId)) {\n      return c.json({ error: \"Staff entry not found\" }, 404);\n    }\n\n    const table = tableByType[type];\n    const [entry] = await c\n      .get(\"db\")\n      .select({\n        protected: table.protected,\n        userId: table.userId,\n        roleId: table.roleId,\n      })\n      .from(table)\n      .where(eq(table.id, entryId))\n      .limit(1);\n\n    if (!entry) {\n      return c.json({ error: \"Staff entry not found\" }, 404);\n    }\n    // Protected entries are managed by the system and cannot be removed.\n    if (entry.protected) {\n      throw new HTTPException(403, { message: \"Forbidden\" });\n    }\n\n    // An admin cannot remove the entry that governs their own access - their own\n    // user entry or an entry for any role they belong to (primary or secondary).\n    const currentUser = c.get(\"admin\")?.user;\n    const currentUserRoleIds = currentUser\n      ? await getUserRoleIds(c, currentUser)\n      : [];\n    const isSelf =\n      currentUser != null &&\n      ((entry.userId != null && entry.userId === currentUser.id) ||\n        (entry.roleId != null && currentUserRoleIds.includes(entry.roleId)));\n    if (isSelf) {\n      throw new HTTPException(403, {\n        message: \"You cannot remove your own staff permissions.\",\n      });\n    }\n\n    await c.get(\"db\").delete(table).where(eq(table.id, entryId));\n\n    return c.body(null, 200);\n  },\n});\n"],"mappings":"mkBAeA,MAAM,EAAc,CAClB,MAAO,EACP,UAAW,CACb,EAEa,EAAwB,EAAW,CAC9C,SAAU,EAAc,SACxB,MAAO,CACL,OAAQ,SACR,YAAa,oCACb,KAAM,qBACN,QAAS,CACP,OAAQ,EAAE,OAAO,CACf,KAAM,EACN,GAAI,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAE,QAAS,GAAI,CAAC,CACzC,CAAC,CACH,EACA,UAAW,CACT,IAAK,CACH,YAAa,qBACf,EACA,IAAK,CACH,YAAa,eACf,EACA,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,OAAO,CAAE,MAAO,EAAE,OAAO,CAAE,CAAC,CACxC,CACF,EACA,YAAa,uBACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAClB,GAAM,CAAE,OAAM,MAAO,EAAE,IAAI,MAAM,OAAO,EACxC,MAAM,EAAsB,EAAG,CAC7B,KAAM,QACN,OAAQ,EAAc,SACtB,OAAQ,EAA4B,GACpC,WAAY,YACd,CAAC,EAED,IAAM,EAAU,OAAO,CAAE,EACzB,GAAI,CAAC,OAAO,UAAU,CAAO,EAC3B,OAAO,EAAE,KAAK,CAAE,MAAO,uBAAwB,EAAG,GAAG,EAGvD,IAAM,EAAQ,EAAY,GACpB,CAAC,GAAS,MAAM,EACnB,IAAI,IAAI,CAAC,CACT,OAAO,CACN,UAAW,EAAM,UACjB,OAAQ,EAAM,OACd,OAAQ,EAAM,MAChB,CAAC,CAAC,CACD,KAAK,CAAK,CAAC,CACX,MAAM,EAAG,EAAM,GAAI,CAAO,CAAC,CAAC,CAC5B,MAAM,CAAC,EAEV,GAAI,CAAC,EACH,OAAO,EAAE,KAAK,CAAE,MAAO,uBAAwB,EAAG,GAAG,EAGvD,GAAI,EAAM,UACR,MAAM,IAAI,EAAc,IAAK,CAAE,QAAS,WAAY,CAAC,EAKvD,IAAM,EAAc,EAAE,IAAI,OAAO,CAAC,EAAE,KAC9B,EAAqB,EACvB,MAAM,EAAe,EAAG,CAAW,EACnC,CAAC,EAKL,GAHE,GAAe,OACb,EAAM,QAAU,MAAQ,EAAM,SAAW,EAAY,IACpD,EAAM,QAAU,MAAQ,EAAmB,SAAS,EAAM,MAAM,GAEnE,MAAM,IAAI,EAAc,IAAK,CAC3B,QAAS,+CACX,CAAC,EAKH,OAFA,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC,OAAO,CAAK,CAAC,CAAC,MAAM,EAAG,EAAM,GAAI,CAAO,CAAC,EAEpD,EAAE,KAAK,KAAM,GAAG,CACzB,CACF,CAAC"}

package/dist/src/api/modules/admin/staff/routes/moderators.route.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"moderators.route.js","names":[],"sources":["../../../../../../../src/api/modules/admin/staff/routes/moderators.route.ts"],"sourcesContent":["import { buildRoute } from \"@/api/lib/route\";\nimport { withPagination } from \"@/api/lib/with-pagination\";\nimport { CONFIG_PLUGIN } from \"@/config\";\nimport { core_moderators_permissions } from \"@/database/moderators\";\n\nimport { resolveStaffEdges } from \"../lib/resolve-staff-edges\";\nimport { staffListAdminQuery, staffListAdminSchema } from \"../lib/schema\";\n\nexport const listModeratorsStaffAdminRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  adminStaffPermission: { module: \"staff_moderators\", permission: \"can_view\" },\n  route: {\n    method: \"get\",\n    description: \"Get list of moderators staff (Admin only)\",\n    path: \"/moderators\",\n    request: {\n      query: staffListAdminQuery,\n    },\n    responses: {\n      200: {\n        content: {\n          \"application/json\": {\n            schema: staffListAdminSchema,\n          },\n        },\n        description: \"List of moderators staff\",\n      },\n      403: {\n        description: \"Access Denied\",\n      },\n    },\n  },\n  handler: async c => {\n    const query = c.req.valid(\"query\");\n\n    const data = await withPagination({\n      params: {\n        query,\n      },\n      primaryCursor: core_moderators_permissions.id,\n      query: async ({ limit, where, orderBy }) =>\n        await c\n          .get(\"db\")\n          .select({\n            id: core_moderators_permissions.id,\n            roleId: core_moderators_permissions.roleId,\n            userId: core_moderators_permissions.userId,\n            createdAt: core_moderators_permissions.createdAt,\n            updatedAt: core_moderators_permissions.updatedAt,\n            data: core_moderators_permissions.data,\n            protected: core_moderators_permissions.protected,\n          })\n          .from(core_moderators_permissions)\n          .where(where)\n          .orderBy(orderBy)\n          .limit(limit),\n      table: core_moderators_permissions,\n      orderBy: {\n        column: query.orderBy\n          ? core_moderators_permissions[query.orderBy]\n          : core_moderators_permissions.updatedAt,\n        order: query.order ?? \"desc\",\n      },\n      c,\n    });\n\n    return c.json({\n      pageInfo: data.pageInfo,\n      edges: await resolveStaffEdges(c, data.edges),\n    });\n  },\n});\n"],"mappings":"0ZAQA,MAAa,EAAgC,EAAW,CACtD,SAAU,EAAc,SACxB,qBAAsB,CAAE,OAAQ,mBAAoB,WAAY,UAAW,EAC3E,MAAO,CACL,OAAQ,MACR,YAAa,4CACb,KAAM,cACN,QAAS,CACP,MAAO,CACT,EACA,UAAW,CACT,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,CACV,CACF,EACA,YAAa,0BACf,EACA,IAAK,CACH,YAAa,eACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAClB,IAAM,EAAQ,EAAE,IAAI,MAAM,OAAO,EAE3B,EAAO,MAAM,EAAe,CAChC,OAAQ,CACN,OACF,EACA,cAAe,EAA4B,GAC3C,MAAO,MAAO,CAAE,QAAO,QAAO,aAC5B,MAAM,EACH,IAAI,IAAI,CAAC,CACT,OAAO,CACN,GAAI,EAA4B,GAChC,OAAQ,EAA4B,OACpC,OAAQ,EAA4B,OACpC,UAAW,EAA4B,UACvC,UAAW,EAA4B,UACvC,KAAM,EAA4B,KAClC,UAAW,EAA4B,SACzC,CAAC,CAAC,CACD,KAAK,CAA2B,CAAC,CACjC,MAAM,CAAK,CAAC,CACZ,QAAQ,CAAO,CAAC,CAChB,MAAM,CAAK,EAChB,MAAO,EACP,QAAS,CACP,OAAQ,EAAM,QACV,EAA4B,EAAM,SAClC,EAA4B,UAChC,MAAO,EAAM,OAAS,MACxB,EACA,GACF,CAAC,EAED,OAAO,EAAE,KAAK,CACZ,SAAU,EAAK,SACf,MAAO,MAAM,EAAkB,EAAG,EAAK,KAAK,CAC9C,CAAC,CACH,CACF,CAAC"}

package/dist/src/api/modules/admin/staff/routes/permission-catalog.route.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permission-catalog.route.js","names":[],"sources":["../../../../../../../src/api/modules/admin/staff/routes/permission-catalog.route.ts"],"sourcesContent":["import { z } from \"@hono/zod-openapi\";\n\nimport { buildRoute } from \"@/api/lib/route\";\nimport { CONFIG_PLUGIN } from \"@/config\";\n\nconst permissionStaffModulesSchema = z.record(\n  z.string(),\n  z.array(\n    z.object({\n      permission: z.string(),\n      dependsOn: z.array(z.string()),\n    }),\n  ),\n);\n\nexport const permissionCatalogStaffAdminRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  route: {\n    method: \"get\",\n    description:\n      \"Get the staff permission catalog declared by every plugin (Admin only)\",\n    path: \"/permission-catalog\",\n    responses: {\n      200: {\n        content: {\n          \"application/json\": {\n            schema: z.array(\n              z.object({\n                pluginId: z.string(),\n                admin: permissionStaffModulesSchema,\n                moderator: permissionStaffModulesSchema,\n              }),\n            ),\n          },\n        },\n        description: \"Staff permission catalog\",\n      },\n      403: {\n        description: \"Access Denied\",\n      },\n    },\n  },\n  handler: c => {\n    return c.json(c.get(\"core\").permissionStaff, 200);\n  },\n});\n"],"mappings":"qJAKA,MAAM,EAA+B,EAAE,OACrC,EAAE,OAAO,EACT,EAAE,MACA,EAAE,OAAO,CACP,WAAY,EAAE,OAAO,EACrB,UAAW,EAAE,MAAM,EAAE,OAAO,CAAC,CAC/B,CAAC,CACH,CACF,EAEa,EAAmC,EAAW,CACzD,SAAU,EAAc,SACxB,MAAO,CACL,OAAQ,MACR,YACE,yEACF,KAAM,sBACN,UAAW,CACT,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,MACR,EAAE,OAAO,CACP,SAAU,EAAE,OAAO,EACnB,MAAO,EACP,UAAW,CACb,CAAC,CACH,CACF,CACF,EACA,YAAa,0BACf,EACA,IAAK,CACH,YAAa,eACf,CACF,CACF,EACA,QAAS,GACA,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,gBAAiB,GAAG,CAEpD,CAAC"}

package/dist/src/api/modules/admin/staff/routes/show-permissions.route.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"show-permissions.route.js","names":[],"sources":["../../../../../../../src/api/modules/admin/staff/routes/show-permissions.route.ts"],"sourcesContent":["import { z } from \"@hono/zod-openapi\";\nimport { eq } from \"drizzle-orm\";\n\nimport { assertStaffPermission } from \"@/api/lib/check-staff-permission\";\nimport { buildRoute } from \"@/api/lib/route\";\nimport { CONFIG_PLUGIN } from \"@/config\";\nimport { core_admin_permissions } from \"@/database/admins\";\nimport { core_moderators_permissions } from \"@/database/moderators\";\n\nimport { resolveStaffEdges } from \"../lib/resolve-staff-edges\";\nimport {\n  permissionsStaffArgsSchema,\n  staffEntrySchema,\n  staffPermissionModuleByType,\n  staffTypeSchema,\n} from \"../lib/schema\";\n\nconst tableByType = {\n  admin: core_admin_permissions,\n  moderator: core_moderators_permissions,\n} as const;\n\nexport const showPermissionsStaffAdminRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  route: {\n    method: \"get\",\n    description:\n      \"Get a single staff entry with its granted permissions (Admin only)\",\n    path: \"/entry/{type}/{id}\",\n    request: {\n      params: z.object({\n        type: staffTypeSchema,\n        id: z.string().openapi({ example: \"1\" }),\n      }),\n    },\n    responses: {\n      200: {\n        content: {\n          \"application/json\": {\n            schema: staffEntrySchema.extend({\n              permissions: z.array(permissionsStaffArgsSchema),\n            }),\n          },\n        },\n        description: \"Staff entry\",\n      },\n      403: {\n        description: \"Access Denied\",\n      },\n      404: {\n        content: {\n          \"application/json\": {\n            schema: z.object({ error: z.string() }),\n          },\n        },\n        description: \"Staff entry not found\",\n      },\n    },\n  },\n  handler: async c => {\n    const { type, id } = c.req.valid(\"param\");\n    await assertStaffPermission(c, {\n      type: \"admin\",\n      plugin: CONFIG_PLUGIN.pluginId,\n      module: staffPermissionModuleByType[type],\n      permission: \"can_edit\",\n    });\n\n    const entryId = Number(id);\n    if (!Number.isInteger(entryId)) {\n      return c.json({ error: \"Staff entry not found\" }, 404);\n    }\n\n    const table = tableByType[type];\n    const [entry] = await c\n      .get(\"db\")\n      .select({\n        id: table.id,\n        roleId: table.roleId,\n        userId: table.userId,\n        createdAt: table.createdAt,\n        updatedAt: table.updatedAt,\n        data: table.data,\n        protected: table.protected,\n      })\n      .from(table)\n      .where(eq(table.id, entryId))\n      .limit(1);\n\n    if (!entry) {\n      return c.json({ error: \"Staff entry not found\" }, 404);\n    }\n\n    const [resolved] = await resolveStaffEdges(c, [entry]);\n\n    return c.json(\n      {\n        ...resolved,\n        permissions: entry.data?.permissions ?? [],\n      },\n      200,\n    );\n  },\n});\n"],"mappings":"mnBAiBA,MAAM,EAAc,CAClB,MAAO,EACP,UAAW,CACb,EAEa,EAAiC,EAAW,CACvD,SAAU,EAAc,SACxB,MAAO,CACL,OAAQ,MACR,YACE,qEACF,KAAM,qBACN,QAAS,CACP,OAAQ,EAAE,OAAO,CACf,KAAM,EACN,GAAI,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAE,QAAS,GAAI,CAAC,CACzC,CAAC,CACH,EACA,UAAW,CACT,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAiB,OAAO,CAC9B,YAAa,EAAE,MAAM,CAA0B,CACjD,CAAC,CACH,CACF,EACA,YAAa,aACf,EACA,IAAK,CACH,YAAa,eACf,EACA,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,OAAO,CAAE,MAAO,EAAE,OAAO,CAAE,CAAC,CACxC,CACF,EACA,YAAa,uBACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAClB,GAAM,CAAE,OAAM,MAAO,EAAE,IAAI,MAAM,OAAO,EACxC,MAAM,EAAsB,EAAG,CAC7B,KAAM,QACN,OAAQ,EAAc,SACtB,OAAQ,EAA4B,GACpC,WAAY,UACd,CAAC,EAED,IAAM,EAAU,OAAO,CAAE,EACzB,GAAI,CAAC,OAAO,UAAU,CAAO,EAC3B,OAAO,EAAE,KAAK,CAAE,MAAO,uBAAwB,EAAG,GAAG,EAGvD,IAAM,EAAQ,EAAY,GACpB,CAAC,GAAS,MAAM,EACnB,IAAI,IAAI,CAAC,CACT,OAAO,CACN,GAAI,EAAM,GACV,OAAQ,EAAM,OACd,OAAQ,EAAM,OACd,UAAW,EAAM,UACjB,UAAW,EAAM,UACjB,KAAM,EAAM,KACZ,UAAW,EAAM,SACnB,CAAC,CAAC,CACD,KAAK,CAAK,CAAC,CACX,MAAM,EAAG,EAAM,GAAI,CAAO,CAAC,CAAC,CAC5B,MAAM,CAAC,EAEV,GAAI,CAAC,EACH,OAAO,EAAE,KAAK,CAAE,MAAO,uBAAwB,EAAG,GAAG,EAGvD,GAAM,CAAC,GAAY,MAAM,EAAkB,EAAG,CAAC,CAAK,CAAC,EAErD,OAAO,EAAE,KACP,CACE,GAAG,EACH,YAAa,EAAM,MAAM,aAAe,CAAC,CAC3C,EACA,GACF,CACF,CACF,CAAC"}

package/dist/src/api/modules/admin/staff/routes/update-permissions.route.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"update-permissions.route.js","names":[],"sources":["../../../../../../../src/api/modules/admin/staff/routes/update-permissions.route.ts"],"sourcesContent":["import { z } from \"@hono/zod-openapi\";\nimport { eq } from \"drizzle-orm\";\nimport { HTTPException } from \"hono/http-exception\";\n\nimport type { PermissionsStaffArgs } from \"@/api/lib/permission-staff\";\n\nimport {\n  assertStaffPermission,\n  getUserRoleIds,\n} from \"@/api/lib/check-staff-permission\";\nimport { buildRoute } from \"@/api/lib/route\";\nimport { staffPermissionKey } from \"@/api/lib/staff-permission\";\nimport { CONFIG_PLUGIN } from \"@/config\";\nimport { core_admin_permissions } from \"@/database/admins\";\nimport { core_moderators_permissions } from \"@/database/moderators\";\n\nimport {\n  permissionsStaffArgsSchema,\n  staffPermissionModuleByType,\n  staffTypeSchema,\n} from \"../lib/schema\";\n\nconst tableByType = {\n  admin: core_admin_permissions,\n  moderator: core_moderators_permissions,\n} as const;\n\nexport const updatePermissionsStaffAdminRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  route: {\n    method: \"patch\",\n    description: \"Update the granted permissions of a staff entry (Admin only)\",\n    path: \"/entry/{type}/{id}\",\n    request: {\n      params: z.object({\n        type: staffTypeSchema,\n        id: z.string().openapi({ example: \"1\" }),\n      }),\n      body: {\n        content: {\n          \"application/json\": {\n            schema: z.object({\n              unrestricted: z.boolean(),\n              permissions: z.array(permissionsStaffArgsSchema),\n            }),\n          },\n        },\n      },\n    },\n    responses: {\n      200: {\n        content: {\n          \"application/json\": {\n            schema: z.object({\n              unrestricted: z.boolean(),\n              permissions: z.array(permissionsStaffArgsSchema),\n            }),\n          },\n        },\n        description: \"Updated permissions\",\n      },\n      403: {\n        description: \"Access Denied\",\n      },\n      404: {\n        content: {\n          \"application/json\": {\n            schema: z.object({ error: z.string() }),\n          },\n        },\n        description: \"Staff entry not found\",\n      },\n    },\n  },\n  handler: async c => {\n    const { type, id } = c.req.valid(\"param\");\n    await assertStaffPermission(c, {\n      type: \"admin\",\n      plugin: CONFIG_PLUGIN.pluginId,\n      module: staffPermissionModuleByType[type],\n      permission: \"can_edit\",\n    });\n\n    const { unrestricted, permissions } = c.req.valid(\"json\");\n\n    const entryId = Number(id);\n    if (!Number.isInteger(entryId)) {\n      return c.json({ error: \"Staff entry not found\" }, 404);\n    }\n\n    const table = tableByType[type];\n\n    const [entry] = await c\n      .get(\"db\")\n      .select({\n        protected: table.protected,\n        userId: table.userId,\n        roleId: table.roleId,\n      })\n      .from(table)\n      .where(eq(table.id, entryId))\n      .limit(1);\n\n    if (!entry) {\n      return c.json({ error: \"Staff entry not found\" }, 404);\n    }\n    // Protected entries are managed by the system and cannot be edited.\n    if (entry.protected) {\n      throw new HTTPException(403, { message: \"Forbidden\" });\n    }\n\n    // An admin cannot edit the entry that governs their own access - their own\n    // user entry or an entry for any role they belong to (primary or\n    // secondary). This stops them from escalating their own permissions.\n    const currentUser = c.get(\"admin\")?.user;\n    const currentUserRoleIds = currentUser\n      ? await getUserRoleIds(c, currentUser)\n      : [];\n    const isSelf =\n      currentUser != null &&\n      ((entry.userId != null && entry.userId === currentUser.id) ||\n        (entry.roleId != null && currentUserRoleIds.includes(entry.roleId)));\n    if (isSelf) {\n      throw new HTTPException(403, {\n        message: \"You cannot edit your own staff permissions.\",\n      });\n    }\n\n    // Only persist permissions that actually exist in the catalog for this\n    // staff type - silently drops anything unknown/forged. Also record each\n    // permission's dependencies (the keys of the permissions it `dependsOn`\n    // within the same module) so we can drop grants whose gate is missing.\n    const allowed = new Set<string>();\n    const dependencies = new Map<string, string[]>();\n    for (const plugin of c.get(\"core\").permissionStaff) {\n      for (const [module, modulePermissions] of Object.entries(plugin[type])) {\n        for (const entry of modulePermissions) {\n          const key = staffPermissionKey({\n            plugin: plugin.pluginId,\n            module,\n            permission: entry.permission,\n          });\n          allowed.add(key);\n          dependencies.set(\n            key,\n            entry.dependsOn.map(dependency =>\n              staffPermissionKey({\n                plugin: plugin.pluginId,\n                module,\n                permission: dependency,\n              }),\n            ),\n          );\n        }\n      }\n    }\n\n    const seen = new Set<string>();\n    const granted = new Map<string, PermissionsStaffArgs>();\n    // When unrestricted, the explicit list is irrelevant - store none.\n    if (!unrestricted) {\n      for (const permission of permissions) {\n        const key = staffPermissionKey(permission);\n        if (!allowed.has(key) || seen.has(key)) continue;\n        seen.add(key);\n        granted.set(key, permission);\n      }\n\n      // Drop any granted permission whose dependencies aren't all granted too,\n      // repeating until stable so a broken chain (a → b → c) collapses fully.\n      let changed = true;\n      while (changed) {\n        changed = false;\n        for (const key of granted.keys()) {\n          const deps = dependencies.get(key) ?? [];\n          if (deps.some(dependency => !granted.has(dependency))) {\n            granted.delete(key);\n            changed = true;\n          }\n        }\n      }\n    }\n\n    const sanitized: PermissionsStaffArgs[] = [...granted.values()];\n\n    const [updated] = await c\n      .get(\"db\")\n      .update(table)\n      .set({ data: { unrestricted, permissions: sanitized } })\n      .where(eq(table.id, entryId))\n      .returning({ id: table.id });\n\n    if (!updated) {\n      return c.json({ error: \"Staff entry not found\" }, 404);\n    }\n\n    return c.json({ unrestricted, permissions: sanitized }, 200);\n  },\n});\n"],"mappings":"4qBAsBA,MAAM,EAAc,CAClB,MAAO,EACP,UAAW,CACb,EAEa,EAAmC,EAAW,CACzD,SAAU,EAAc,SACxB,MAAO,CACL,OAAQ,QACR,YAAa,+DACb,KAAM,qBACN,QAAS,CACP,OAAQ,EAAE,OAAO,CACf,KAAM,EACN,GAAI,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAE,QAAS,GAAI,CAAC,CACzC,CAAC,EACD,KAAM,CACJ,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,OAAO,CACf,aAAc,EAAE,QAAQ,EACxB,YAAa,EAAE,MAAM,CAA0B,CACjD,CAAC,CACH,CACF,CACF,CACF,EACA,UAAW,CACT,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,OAAO,CACf,aAAc,EAAE,QAAQ,EACxB,YAAa,EAAE,MAAM,CAA0B,CACjD,CAAC,CACH,CACF,EACA,YAAa,qBACf,EACA,IAAK,CACH,YAAa,eACf,EACA,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,OAAO,CAAE,MAAO,EAAE,OAAO,CAAE,CAAC,CACxC,CACF,EACA,YAAa,uBACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAClB,GAAM,CAAE,OAAM,MAAO,EAAE,IAAI,MAAM,OAAO,EACxC,MAAM,EAAsB,EAAG,CAC7B,KAAM,QACN,OAAQ,EAAc,SACtB,OAAQ,EAA4B,GACpC,WAAY,UACd,CAAC,EAED,GAAM,CAAE,eAAc,eAAgB,EAAE,IAAI,MAAM,MAAM,EAElD,EAAU,OAAO,CAAE,EACzB,GAAI,CAAC,OAAO,UAAU,CAAO,EAC3B,OAAO,EAAE,KAAK,CAAE,MAAO,uBAAwB,EAAG,GAAG,EAGvD,IAAM,EAAQ,EAAY,GAEpB,CAAC,GAAS,MAAM,EACnB,IAAI,IAAI,CAAC,CACT,OAAO,CACN,UAAW,EAAM,UACjB,OAAQ,EAAM,OACd,OAAQ,EAAM,MAChB,CAAC,CAAC,CACD,KAAK,CAAK,CAAC,CACX,MAAM,EAAG,EAAM,GAAI,CAAO,CAAC,CAAC,CAC5B,MAAM,CAAC,EAEV,GAAI,CAAC,EACH,OAAO,EAAE,KAAK,CAAE,MAAO,uBAAwB,EAAG,GAAG,EAGvD,GAAI,EAAM,UACR,MAAM,IAAI,EAAc,IAAK,CAAE,QAAS,WAAY,CAAC,EAMvD,IAAM,EAAc,EAAE,IAAI,OAAO,CAAC,EAAE,KAC9B,EAAqB,EACvB,MAAM,EAAe,EAAG,CAAW,EACnC,CAAC,EAKL,GAHE,GAAe,OACb,EAAM,QAAU,MAAQ,EAAM,SAAW,EAAY,IACpD,EAAM,QAAU,MAAQ,EAAmB,SAAS,EAAM,MAAM,GAEnE,MAAM,IAAI,EAAc,IAAK,CAC3B,QAAS,6CACX,CAAC,EAOH,IAAM,EAAU,IAAI,IACd,EAAe,IAAI,IACzB,IAAK,IAAM,KAAU,EAAE,IAAI,MAAM,CAAC,CAAC,gBACjC,IAAK,GAAM,CAAC,EAAQ,KAAsB,OAAO,QAAQ,EAAO,EAAK,EACnE,IAAK,IAAM,KAAS,EAAmB,CACrC,IAAM,EAAM,EAAmB,CAC7B,OAAQ,EAAO,SACf,SACA,WAAY,EAAM,UACpB,CAAC,EACD,EAAQ,IAAI,CAAG,EACf,EAAa,IACX,EACA,EAAM,UAAU,IAAI,GAClB,EAAmB,CACjB,OAAQ,EAAO,SACf,SACA,WAAY,CACd,CAAC,CACH,CACF,CACF,CAIJ,IAAM,EAAO,IAAI,IACX,EAAU,IAAI,IAEpB,GAAI,CAAC,EAAc,CACjB,IAAK,IAAM,KAAc,EAAa,CACpC,IAAM,EAAM,EAAmB,CAAU,EACrC,CAAC,EAAQ,IAAI,CAAG,GAAK,EAAK,IAAI,CAAG,IACrC,EAAK,IAAI,CAAG,EACZ,EAAQ,IAAI,EAAK,CAAU,EAC7B,CAIA,IAAI,EAAU,GACd,KAAO,GAAS,CACd,EAAU,GACV,IAAK,IAAM,KAAO,EAAQ,KAAK,GAChB,EAAa,IAAI,CAAG,GAAK,CAAC,EAAA,CAC9B,KAAK,GAAc,CAAC,EAAQ,IAAI,CAAU,CAAC,IAClD,EAAQ,OAAO,CAAG,EAClB,EAAU,GAGhB,CACF,CAEA,IAAM,EAAoC,CAAC,GAAG,EAAQ,OAAO,CAAC,EAExD,CAAC,GAAW,MAAM,EACrB,IAAI,IAAI,CAAC,CACT,OAAO,CAAK,CAAC,CACb,IAAI,CAAE,KAAM,CAAE,eAAc,YAAa,CAAU,CAAE,CAAC,CAAC,CACvD,MAAM,EAAG,EAAM,GAAI,CAAO,CAAC,CAAC,CAC5B,UAAU,CAAE,GAAI,EAAM,EAAG,CAAC,EAM7B,OAJK,EAIE,EAAE,KAAK,CAAE,eAAc,YAAa,CAAU,EAAG,GAAG,EAHlD,EAAE,KAAK,CAAE,MAAO,uBAAwB,EAAG,GAAG,CAIzD,CACF,CAAC"}

package/dist/src/api/modules/admin/staff/staff.admin.module.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"staff.admin.module.js","names":[],"sources":["../../../../../../src/api/modules/admin/staff/staff.admin.module.ts"],"sourcesContent":["import { buildModule } from \"@/api/lib/module\";\nimport { CONFIG_PLUGIN } from \"@/config\";\n\nimport { listAdminsStaffAdminRoute } from \"./routes/admins.route\";\nimport { createStaffAdminRoute } from \"./routes/create.route\";\nimport { deleteStaffAdminRoute } from \"./routes/delete.route\";\nimport { listModeratorsStaffAdminRoute } from \"./routes/moderators.route\";\nimport { permissionCatalogStaffAdminRoute } from \"./routes/permission-catalog.route\";\nimport { showPermissionsStaffAdminRoute } from \"./routes/show-permissions.route\";\nimport { updatePermissionsStaffAdminRoute } from \"./routes/update-permissions.route\";\n\nexport const staffAdminModule = buildModule({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  name: \"staff\",\n  routes: [\n    listModeratorsStaffAdminRoute,\n    listAdminsStaffAdminRoute,\n    permissionCatalogStaffAdminRoute,\n    showPermissionsStaffAdminRoute,\n    updatePermissionsStaffAdminRoute,\n    createStaffAdminRoute,\n    deleteStaffAdminRoute,\n  ],\n});\n"],"mappings":"moBAWA,MAAa,EAAmB,EAAY,CAC1C,SAAU,EAAc,SACxB,KAAM,QACN,OAAQ,CACN,EACA,EACA,EACA,EACA,EACA,EACA,CACF,CACF,CAAC"}

package/dist/src/api/modules/admin/users/lib/assert-edit-user-permission.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"assert-edit-user-permission.js","names":[],"sources":["../../../../../../../src/api/modules/admin/users/lib/assert-edit-user-permission.ts"],"sourcesContent":["import type { Context } from \"hono\";\n\nimport { eq } from \"drizzle-orm\";\n\nimport { assertStaffPermission } from \"@/api/lib/check-staff-permission\";\nimport { SessionAdminModel } from \"@/api/models/session-admin\";\nimport { CONFIG_PLUGIN } from \"@/config\";\nimport { core_admin_permissions } from \"@/database/admins\";\n\nconst assertCanEditAdmin = async (c: Context): Promise<void> => {\n  await assertStaffPermission(c, {\n    type: \"admin\",\n    plugin: CONFIG_PLUGIN.pluginId,\n    module: \"users\",\n    permission: \"can_edit_admin\",\n  });\n};\n\nexport const assertCanEditAdminTarget = async (\n  c: Context,\n  userId: number,\n): Promise<void> => {\n  const isTargetAdmin = await new SessionAdminModel(c).checkIfUserIsAdmin(\n    userId,\n  );\n  if (!isTargetAdmin) return;\n\n  await assertCanEditAdmin(c);\n};\n\n/**\n * A role grants admin access when it has a row in `core_admin_permissions`.\n * Assigning such a role as a user's primary role turns that user into an admin\n * (see `SessionAdminModel.checkIfUserIsAdmin`), so it must require the same\n * `can_edit_admin` permission as editing an already-admin user - otherwise a\n * `can_edit`-only admin could escalate a non-admin user into an admin.\n */\nexport const assertCanAssignPrimaryRole = async (\n  c: Context,\n  roleId: number,\n): Promise<void> => {\n  const [adminRole] = await c\n    .get(\"db\")\n    .select({ id: core_admin_permissions.id })\n    .from(core_admin_permissions)\n    .where(eq(core_admin_permissions.roleId, roleId))\n    .limit(1);\n\n  if (!adminRole) return;\n\n  await assertCanEditAdmin(c);\n};\n"],"mappings":"+TASA,MAAM,EAAqB,KAAO,IAA8B,CAC9D,MAAM,EAAsB,EAAG,CAC7B,KAAM,QACN,OAAQ,EAAc,SACtB,OAAQ,QACR,WAAY,gBACd,CAAC,CACH,EAEa,EAA2B,MACtC,EACA,IACkB,CAIb,MAHuB,IAAI,EAAkB,CAAC,CAAC,CAAC,mBACnD,CACF,GAGA,MAAM,EAAmB,CAAC,CAC5B,EASa,EAA6B,MACxC,EACA,IACkB,CAClB,GAAM,CAAC,GAAa,MAAM,EACvB,IAAI,IAAI,CAAC,CACT,OAAO,CAAE,GAAI,EAAuB,EAAG,CAAC,CAAC,CACzC,KAAK,CAAsB,CAAC,CAC5B,MAAM,EAAG,EAAuB,OAAQ,CAAM,CAAC,CAAC,CAChD,MAAM,CAAC,EAEL,GAEL,MAAM,EAAmB,CAAC,CAC5B"}

package/dist/src/api/modules/admin/users/routes/create.route.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"create.route.js","names":[],"sources":["../../../../../../../src/api/modules/admin/users/routes/create.route.ts"],"sourcesContent":["import { z } from \"@hono/zod-openapi\";\n\nimport { buildRoute } from \"@/api/lib/route\";\nimport { PasswordModel } from \"@/api/models/password\";\nimport { UserModel } from \"@/api/models/user\";\nimport { CONFIG_PLUGIN } from \"@/config\";\n\nconst nameRegex = /^(?!.* {2})[\\p{L}\\p{N}._@ -]*$/u;\n\nexport const zodCreateUserAdminSchema = z.object({\n  email: z.email().toLowerCase().openapi({\n    example: \"test@test.com\",\n  }),\n  name: z\n    .string()\n    .openapi({ example: \"test\" })\n    .min(3)\n    .refine(val => nameRegex.test(val), {\n      message: \"Invalid name\",\n    }),\n  password: z.string().min(8).openapi({\n    example: \"Test123!\",\n  }),\n});\n\nexport const createUserAdminRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  adminStaffPermission: { module: \"users\", permission: \"can_create\" },\n  route: {\n    method: \"post\",\n    description: \"Create a new user (Admin only)\",\n    path: \"/create\",\n    request: {\n      body: {\n        required: true,\n        content: {\n          \"application/json\": {\n            schema: zodCreateUserAdminSchema,\n          },\n        },\n      },\n    },\n    responses: {\n      201: {\n        content: {\n          \"application/json\": {\n            schema: z.object({\n              id: z.number(),\n              name: z.string(),\n              email: z.email(),\n            }),\n          },\n        },\n        description: \"User created\",\n      },\n      403: {\n        description: \"Access Denied\",\n      },\n      409: {\n        description: \"Email or name already exists\",\n      },\n    },\n  },\n  handler: async c => {\n    const { password, ...input } = c.req.valid(\"json\");\n    const hashedPassword = await new PasswordModel().encryptPassword(password);\n    const data = await new UserModel().signUp({ ...input, hashedPassword }, c);\n\n    return c.json(\n      {\n        id: data.id,\n        name: data.name,\n        email: data.email,\n      },\n      201,\n    );\n  },\n});\n"],"mappings":"2QAOA,MAAM,EAAY,kCAEL,EAA2B,EAAE,OAAO,CAC/C,MAAO,EAAE,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,QAAQ,CACrC,QAAS,eACX,CAAC,EACD,KAAM,EACH,OAAO,CAAC,CACR,QAAQ,CAAE,QAAS,MAAO,CAAC,CAAC,CAC5B,IAAI,CAAC,CAAC,CACN,OAAO,GAAO,EAAU,KAAK,CAAG,EAAG,CAClC,QAAS,cACX,CAAC,EACH,SAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAClC,QAAS,UACX,CAAC,CACH,CAAC,EAEY,EAAuB,EAAW,CAC7C,SAAU,EAAc,SACxB,qBAAsB,CAAE,OAAQ,QAAS,WAAY,YAAa,EAClE,MAAO,CACL,OAAQ,OACR,YAAa,iCACb,KAAM,UACN,QAAS,CACP,KAAM,CACJ,SAAU,GACV,QAAS,CACP,mBAAoB,CAClB,OAAQ,CACV,CACF,CACF,CACF,EACA,UAAW,CACT,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,OAAO,CACf,GAAI,EAAE,OAAO,EACb,KAAM,EAAE,OAAO,EACf,MAAO,EAAE,MAAM,CACjB,CAAC,CACH,CACF,EACA,YAAa,cACf,EACA,IAAK,CACH,YAAa,eACf,EACA,IAAK,CACH,YAAa,8BACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAClB,GAAM,CAAE,WAAU,GAAG,GAAU,EAAE,IAAI,MAAM,MAAM,EAC3C,EAAiB,MAAM,IAAI,EAAc,CAAC,CAAC,gBAAgB,CAAQ,EACnE,EAAO,MAAM,IAAI,EAAU,CAAC,CAAC,OAAO,CAAE,GAAG,EAAO,gBAAe,EAAG,CAAC,EAEzE,OAAO,EAAE,KACP,CACE,GAAI,EAAK,GACT,KAAM,EAAK,KACX,MAAO,EAAK,KACd,EACA,GACF,CACF,CACF,CAAC"}

package/dist/src/api/modules/admin/users/routes/list.route.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"list.route.js","names":[],"sources":["../../../../../../../src/api/modules/admin/users/routes/list.route.ts"],"sourcesContent":["import { z } from \"@hono/zod-openapi\";\nimport { eq, inArray } from \"drizzle-orm\";\n\nimport { resolveRoleNames } from \"@/api/lib/resolve-role-names\";\nimport { buildRoute } from \"@/api/lib/route\";\nimport {\n  withPagination,\n  zodPaginationPageInfo,\n  zodPaginationQuery,\n} from \"@/api/lib/with-pagination\";\nimport { CONFIG_PLUGIN } from \"@/config\";\nimport { core_roles } from \"@/database/roles\";\nimport { core_users, core_users_secondary_roles } from \"@/database/users\";\n\nexport const listUsersAdminRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  adminStaffPermission: { module: \"users\", permission: \"can_view\" },\n  route: {\n    method: \"get\",\n    description: \"Get list of all users\",\n    path: \"/list\",\n    request: {\n      query: zodPaginationQuery.extend({\n        order: z.enum([\"asc\", \"desc\"]).optional(),\n        orderBy: z.enum([\"name\", \"createdAt\"]).optional(),\n        roleId: z.string().optional(),\n        search: z.string().optional(),\n      }),\n    },\n    responses: {\n      200: {\n        content: {\n          \"application/json\": {\n            schema: z.object({\n              edges: z.array(\n                z.object({\n                  id: z.number(),\n                  name: z.string(),\n                  email: z.string(),\n                  nameCode: z.string(),\n                  createdAt: z.date(),\n                  newsletter: z.boolean(),\n                  avatarColor: z.string(),\n                  emailVerified: z.boolean(),\n                  roleId: z.number(),\n                  role: z.object({\n                    id: z.number(),\n                    color: z.string().nullable(),\n                    name: z.array(\n                      z.object({\n                        name: z.string(),\n                        languageCode: z.string(),\n                      }),\n                    ),\n                  }),\n                  secondaryRoles: z.array(\n                    z.object({\n                      id: z.number(),\n                      color: z.string().nullable(),\n                      name: z.array(\n                        z.object({\n                          name: z.string(),\n                          languageCode: z.string(),\n                        }),\n                      ),\n                    }),\n                  ),\n                  birthday: z.date().nullable(),\n                  language: z.string(),\n                }),\n              ),\n              pageInfo: zodPaginationPageInfo,\n            }),\n          },\n        },\n        description: \"List of users\",\n      },\n    },\n  },\n  handler: async c => {\n    const query = c.req.valid(\"query\");\n    const roleIds = (query.roleId?.split(\",\") ?? [])\n      .filter(Boolean)\n      .map(id => Number(id))\n      .filter(id => !Number.isNaN(id));\n    const data = await withPagination({\n      params: {\n        query,\n      },\n      search: [core_users.name, core_users.email],\n      where: roleIds.length ? inArray(core_users.roleId, roleIds) : undefined,\n      primaryCursor: core_users.id,\n      query: async ({ limit, where, orderBy }) =>\n        await c\n          .get(\"db\")\n          .select({\n            id: core_users.id,\n            name: core_users.name,\n            email: core_users.email,\n            nameCode: core_users.nameCode,\n            createdAt: core_users.createdAt,\n            newsletter: core_users.newsletter,\n            avatarColor: core_users.avatarColor,\n            emailVerified: core_users.emailVerified,\n            roleId: core_users.roleId,\n            roleColor: core_roles.color,\n            birthday: core_users.birthday,\n            language: core_users.language,\n          })\n          .from(core_users)\n          .leftJoin(core_roles, eq(core_roles.id, core_users.roleId))\n          .where(where)\n          .orderBy(orderBy)\n          .limit(limit),\n      table: core_users,\n      orderBy: {\n        column: query.orderBy\n          ? core_users[query.orderBy]\n          : core_users.createdAt,\n        order: query.order ?? \"desc\",\n      },\n      c,\n    });\n\n    // Secondary roles are a user<->role join, so collect every assignment for\n    // the listed users in a single query (with the role color alongside).\n    const userIds = data.edges.map(user => user.id);\n    const secondaryRoleRows = userIds.length\n      ? await c\n          .get(\"db\")\n          .select({\n            userId: core_users_secondary_roles.userId,\n            roleId: core_users_secondary_roles.roleId,\n            roleColor: core_roles.color,\n          })\n          .from(core_users_secondary_roles)\n          .innerJoin(\n            core_roles,\n            eq(core_roles.id, core_users_secondary_roles.roleId),\n          )\n          .where(inArray(core_users_secondary_roles.userId, userIds))\n      : [];\n\n    // Role names live in `core_languages_words`, so resolve the translations for\n    // every role referenced by the listed users (primary and secondary) at once.\n    const roleNames = await resolveRoleNames(c, [\n      ...data.edges.map(user => user.roleId),\n      ...secondaryRoleRows.map(row => row.roleId),\n    ]);\n\n    return c.json({\n      pageInfo: data.pageInfo,\n      edges: data.edges.map(({ roleColor, ...user }) => ({\n        ...user,\n        role: {\n          id: user.roleId,\n          color: roleColor,\n          name: roleNames.get(user.roleId) ?? [],\n        },\n        secondaryRoles: secondaryRoleRows\n          .filter(row => row.userId === user.id)\n          .map(row => ({\n            id: row.roleId,\n            color: row.roleColor,\n            name: roleNames.get(row.roleId) ?? [],\n          })),\n      })),\n    });\n  },\n});\n"],"mappings":"+hBAcA,MAAa,EAAsB,EAAW,CAC5C,SAAU,EAAc,SACxB,qBAAsB,CAAE,OAAQ,QAAS,WAAY,UAAW,EAChE,MAAO,CACL,OAAQ,MACR,YAAa,wBACb,KAAM,QACN,QAAS,CACP,MAAO,EAAmB,OAAO,CAC/B,MAAO,EAAE,KAAK,CAAC,MAAO,MAAM,CAAC,CAAC,CAAC,SAAS,EACxC,QAAS,EAAE,KAAK,CAAC,OAAQ,WAAW,CAAC,CAAC,CAAC,SAAS,EAChD,OAAQ,EAAE,OAAO,CAAC,CAAC,SAAS,EAC5B,OAAQ,EAAE,OAAO,CAAC,CAAC,SAAS,CAC9B,CAAC,CACH,EACA,UAAW,CACT,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,OAAO,CACf,MAAO,EAAE,MACP,EAAE,OAAO,CACP,GAAI,EAAE,OAAO,EACb,KAAM,EAAE,OAAO,EACf,MAAO,EAAE,OAAO,EAChB,SAAU,EAAE,OAAO,EACnB,UAAW,EAAE,KAAK,EAClB,WAAY,EAAE,QAAQ,EACtB,YAAa,EAAE,OAAO,EACtB,cAAe,EAAE,QAAQ,EACzB,OAAQ,EAAE,OAAO,EACjB,KAAM,EAAE,OAAO,CACb,GAAI,EAAE,OAAO,EACb,MAAO,EAAE,OAAO,CAAC,CAAC,SAAS,EAC3B,KAAM,EAAE,MACN,EAAE,OAAO,CACP,KAAM,EAAE,OAAO,EACf,aAAc,EAAE,OAAO,CACzB,CAAC,CACH,CACF,CAAC,EACD,eAAgB,EAAE,MAChB,EAAE,OAAO,CACP,GAAI,EAAE,OAAO,EACb,MAAO,EAAE,OAAO,CAAC,CAAC,SAAS,EAC3B,KAAM,EAAE,MACN,EAAE,OAAO,CACP,KAAM,EAAE,OAAO,EACf,aAAc,EAAE,OAAO,CACzB,CAAC,CACH,CACF,CAAC,CACH,EACA,SAAU,EAAE,KAAK,CAAC,CAAC,SAAS,EAC5B,SAAU,EAAE,OAAO,CACrB,CAAC,CACH,EACA,SAAU,CACZ,CAAC,CACH,CACF,EACA,YAAa,eACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAClB,IAAM,EAAQ,EAAE,IAAI,MAAM,OAAO,EAC3B,GAAW,EAAM,QAAQ,MAAM,GAAG,GAAK,CAAC,EAAA,CAC3C,OAAO,OAAO,CAAC,CACf,IAAI,GAAM,OAAO,CAAE,CAAC,CAAC,CACrB,OAAO,GAAM,CAAC,OAAO,MAAM,CAAE,CAAC,EAC3B,EAAO,MAAM,EAAe,CAChC,OAAQ,CACN,OACF,EACA,OAAQ,CAAC,EAAW,KAAM,EAAW,KAAK,EAC1C,MAAO,EAAQ,OAAS,EAAQ,EAAW,OAAQ,CAAO,EAAI,IAAA,GAC9D,cAAe,EAAW,GAC1B,MAAO,MAAO,CAAE,QAAO,QAAO,aAC5B,MAAM,EACH,IAAI,IAAI,CAAC,CACT,OAAO,CACN,GAAI,EAAW,GACf,KAAM,EAAW,KACjB,MAAO,EAAW,MAClB,SAAU,EAAW,SACrB,UAAW,EAAW,UACtB,WAAY,EAAW,WACvB,YAAa,EAAW,YACxB,cAAe,EAAW,cAC1B,OAAQ,EAAW,OACnB,UAAW,EAAW,MACtB,SAAU,EAAW,SACrB,SAAU,EAAW,QACvB,CAAC,CAAC,CACD,KAAK,CAAU,CAAC,CAChB,SAAS,EAAY,EAAG,EAAW,GAAI,EAAW,MAAM,CAAC,CAAC,CAC1D,MAAM,CAAK,CAAC,CACZ,QAAQ,CAAO,CAAC,CAChB,MAAM,CAAK,EAChB,MAAO,EACP,QAAS,CACP,OAAQ,EAAM,QACV,EAAW,EAAM,SACjB,EAAW,UACf,MAAO,EAAM,OAAS,MACxB,EACA,GACF,CAAC,EAIK,EAAU,EAAK,MAAM,IAAI,GAAQ,EAAK,EAAE,EACxC,EAAoB,EAAQ,OAC9B,MAAM,EACH,IAAI,IAAI,CAAC,CACT,OAAO,CACN,OAAQ,EAA2B,OACnC,OAAQ,EAA2B,OACnC,UAAW,EAAW,KACxB,CAAC,CAAC,CACD,KAAK,CAA0B,CAAC,CAChC,UACC,EACA,EAAG,EAAW,GAAI,EAA2B,MAAM,CACrD,CAAC,CACA,MAAM,EAAQ,EAA2B,OAAQ,CAAO,CAAC,EAC5D,CAAC,EAIC,EAAY,MAAM,EAAiB,EAAG,CAC1C,GAAG,EAAK,MAAM,IAAI,GAAQ,EAAK,MAAM,EACrC,GAAG,EAAkB,IAAI,GAAO,EAAI,MAAM,CAC5C,CAAC,EAED,OAAO,EAAE,KAAK,CACZ,SAAU,EAAK,SACf,MAAO,EAAK,MAAM,KAAK,CAAE,YAAW,GAAG,MAAY,CACjD,GAAG,EACH,KAAM,CACJ,GAAI,EAAK,OACT,MAAO,EACP,KAAM,EAAU,IAAI,EAAK,MAAM,GAAK,CAAC,CACvC,EACA,eAAgB,EACb,OAAO,GAAO,EAAI,SAAW,EAAK,EAAE,CAAC,CACrC,IAAI,IAAQ,CACX,GAAI,EAAI,OACR,MAAO,EAAI,UACX,KAAM,EAAU,IAAI,EAAI,MAAM,GAAK,CAAC,CACtC,EAAE,CACN,EAAE,CACJ,CAAC,CACH,CACF,CAAC"}

package/dist/src/api/modules/admin/users/routes/show.route.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"show.route.js","names":[],"sources":["../../../../../../../src/api/modules/admin/users/routes/show.route.ts"],"sourcesContent":["import { z } from \"@hono/zod-openapi\";\nimport { eq } from \"drizzle-orm\";\n\nimport { resolveRoleNames } from \"@/api/lib/resolve-role-names\";\nimport { buildRoute } from \"@/api/lib/route\";\nimport { SessionAdminModel } from \"@/api/models/session-admin\";\nimport { UserModel } from \"@/api/models/user\";\nimport { CONFIG_PLUGIN } from \"@/config\";\nimport { core_roles } from \"@/database/roles\";\nimport { core_users_secondary_roles } from \"@/database/users\";\n\nconst roleSchema = z.object({\n  id: z.number(),\n  color: z.string().nullable(),\n  name: z.array(\n    z.object({\n      name: z.string(),\n      languageCode: z.string(),\n    }),\n  ),\n});\n\nexport const showUserAdminRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  adminStaffPermission: { module: \"users\", permission: \"can_view\" },\n  route: {\n    method: \"get\",\n    description: \"Get a single user by id (Admin only)\",\n    path: \"/{id}\",\n    request: {\n      params: z.object({\n        id: z.string().openapi({ example: \"1\" }),\n      }),\n    },\n    responses: {\n      200: {\n        content: {\n          \"application/json\": {\n            schema: z.object({\n              id: z.number(),\n              name: z.string(),\n              email: z.string(),\n              nameCode: z.string(),\n              createdAt: z.date(),\n              newsletter: z.boolean(),\n              avatarColor: z.string(),\n              emailVerified: z.boolean(),\n              roleId: z.number(),\n              role: roleSchema,\n              secondaryRoles: z.array(roleSchema),\n              birthday: z.date().nullable(),\n              language: z.string(),\n              isAdmin: z.boolean(),\n            }),\n          },\n        },\n        description: \"User found\",\n      },\n      403: {\n        description: \"Access Denied\",\n      },\n      404: {\n        content: {\n          \"application/json\": {\n            schema: z.object({\n              error: z.string(),\n            }),\n          },\n        },\n        description: \"User not found\",\n      },\n    },\n  },\n  handler: async c => {\n    const { id } = c.req.valid(\"param\");\n    const userId = Number(id);\n    if (!Number.isInteger(userId)) {\n      return c.json({ error: \"User not found\" }, 404);\n    }\n\n    const user = await new UserModel().getUserById({\n      id: userId,\n      c,\n    });\n\n    if (!user) {\n      return c.json({ error: \"User not found\" }, 404);\n    }\n\n    const db = c.get(\"db\");\n    const secondaryRoleRows = await db\n      .select({\n        id: core_roles.id,\n        color: core_roles.color,\n      })\n      .from(core_users_secondary_roles)\n      .innerJoin(\n        core_roles,\n        eq(core_roles.id, core_users_secondary_roles.roleId),\n      )\n      .where(eq(core_users_secondary_roles.userId, user.id));\n\n    const [primaryRole] = await db\n      .select({ id: core_roles.id, color: core_roles.color })\n      .from(core_roles)\n      .where(eq(core_roles.id, user.roleId))\n      .limit(1);\n\n    const names = await resolveRoleNames(c, [\n      user.roleId,\n      ...secondaryRoleRows.map(role => role.id),\n    ]);\n\n    // Whether the listed user is themselves an administrator. The frontend uses\n    // this to require the elevated `can_edit_admin` permission before showing\n    // edit controls (the backend enforces the same rule on write).\n    const isAdmin = await new SessionAdminModel(c).checkIfUserIsAdmin(user.id);\n\n    return c.json(\n      {\n        ...user,\n        isAdmin,\n        role: {\n          id: user.roleId,\n          color: primaryRole?.color ?? null,\n          name: names.get(user.roleId) ?? [],\n        },\n        secondaryRoles: secondaryRoleRows.map(role => ({\n          id: role.id,\n          color: role.color,\n          name: names.get(role.id) ?? [],\n        })),\n      },\n      200,\n    );\n  },\n});\n"],"mappings":"0gBAWA,MAAM,EAAa,EAAE,OAAO,CAC1B,GAAI,EAAE,OAAO,EACb,MAAO,EAAE,OAAO,CAAC,CAAC,SAAS,EAC3B,KAAM,EAAE,MACN,EAAE,OAAO,CACP,KAAM,EAAE,OAAO,EACf,aAAc,EAAE,OAAO,CACzB,CAAC,CACH,CACF,CAAC,EAEY,EAAqB,EAAW,CAC3C,SAAU,EAAc,SACxB,qBAAsB,CAAE,OAAQ,QAAS,WAAY,UAAW,EAChE,MAAO,CACL,OAAQ,MACR,YAAa,uCACb,KAAM,QACN,QAAS,CACP,OAAQ,EAAE,OAAO,CACf,GAAI,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAE,QAAS,GAAI,CAAC,CACzC,CAAC,CACH,EACA,UAAW,CACT,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,OAAO,CACf,GAAI,EAAE,OAAO,EACb,KAAM,EAAE,OAAO,EACf,MAAO,EAAE,OAAO,EAChB,SAAU,EAAE,OAAO,EACnB,UAAW,EAAE,KAAK,EAClB,WAAY,EAAE,QAAQ,EACtB,YAAa,EAAE,OAAO,EACtB,cAAe,EAAE,QAAQ,EACzB,OAAQ,EAAE,OAAO,EACjB,KAAM,EACN,eAAgB,EAAE,MAAM,CAAU,EAClC,SAAU,EAAE,KAAK,CAAC,CAAC,SAAS,EAC5B,SAAU,EAAE,OAAO,EACnB,QAAS,EAAE,QAAQ,CACrB,CAAC,CACH,CACF,EACA,YAAa,YACf,EACA,IAAK,CACH,YAAa,eACf,EACA,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,OAAO,CACf,MAAO,EAAE,OAAO,CAClB,CAAC,CACH,CACF,EACA,YAAa,gBACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAClB,GAAM,CAAE,MAAO,EAAE,IAAI,MAAM,OAAO,EAC5B,EAAS,OAAO,CAAE,EACxB,GAAI,CAAC,OAAO,UAAU,CAAM,EAC1B,OAAO,EAAE,KAAK,CAAE,MAAO,gBAAiB,EAAG,GAAG,EAGhD,IAAM,EAAO,MAAM,IAAI,EAAU,CAAC,CAAC,YAAY,CAC7C,GAAI,EACJ,GACF,CAAC,EAED,GAAI,CAAC,EACH,OAAO,EAAE,KAAK,CAAE,MAAO,gBAAiB,EAAG,GAAG,EAGhD,IAAM,EAAK,EAAE,IAAI,IAAI,EACf,EAAoB,MAAM,EAC7B,OAAO,CACN,GAAI,EAAW,GACf,MAAO,EAAW,KACpB,CAAC,CAAC,CACD,KAAK,CAA0B,CAAC,CAChC,UACC,EACA,EAAG,EAAW,GAAI,EAA2B,MAAM,CACrD,CAAC,CACA,MAAM,EAAG,EAA2B,OAAQ,EAAK,EAAE,CAAC,EAEjD,CAAC,GAAe,MAAM,EACzB,OAAO,CAAE,GAAI,EAAW,GAAI,MAAO,EAAW,KAAM,CAAC,CAAC,CACtD,KAAK,CAAU,CAAC,CAChB,MAAM,EAAG,EAAW,GAAI,EAAK,MAAM,CAAC,CAAC,CACrC,MAAM,CAAC,EAEJ,EAAQ,MAAM,EAAiB,EAAG,CACtC,EAAK,OACL,GAAG,EAAkB,IAAI,GAAQ,EAAK,EAAE,CAC1C,CAAC,EAKK,EAAU,MAAM,IAAI,EAAkB,CAAC,CAAC,CAAC,mBAAmB,EAAK,EAAE,EAEzE,OAAO,EAAE,KACP,CACE,GAAG,EACH,UACA,KAAM,CACJ,GAAI,EAAK,OACT,MAAO,GAAa,OAAS,KAC7B,KAAM,EAAM,IAAI,EAAK,MAAM,GAAK,CAAC,CACnC,EACA,eAAgB,EAAkB,IAAI,IAAS,CAC7C,GAAI,EAAK,GACT,MAAO,EAAK,MACZ,KAAM,EAAM,IAAI,EAAK,EAAE,GAAK,CAAC,CAC/B,EAAE,CACJ,EACA,GACF,CACF,CACF,CAAC"}

package/dist/src/api/modules/admin/users/routes/update.route.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"update.route.js","names":[],"sources":["../../../../../../../src/api/modules/admin/users/routes/update.route.ts"],"sourcesContent":["import { z } from \"@hono/zod-openapi\";\nimport { and, eq, inArray, ne } from \"drizzle-orm\";\n\nimport { buildRoute } from \"@/api/lib/route\";\nimport { CONFIG_PLUGIN } from \"@/config\";\nimport { core_roles } from \"@/database/roles\";\nimport { core_users, core_users_secondary_roles } from \"@/database/users\";\n\nimport {\n  assertCanAssignPrimaryRole,\n  assertCanEditAdminTarget,\n} from \"../lib/assert-edit-user-permission\";\n\nconst nameRegex = /^(?!.* {2})[\\p{L}\\p{N}._@ -]*$/u;\n\nexport const zodUpdateUserAdminSchema = z\n  .object({\n    email: z.email().toLowerCase().openapi({\n      example: \"test@test.com\",\n    }),\n    name: z\n      .string()\n      .min(3)\n      .refine(val => nameRegex.test(val), {\n        message: \"Invalid name\",\n      })\n      .openapi({ example: \"test\" }),\n    nameCode: z\n      .string()\n      .min(3)\n      .max(255)\n      .regex(/^[a-zA-Z0-9-]+$/, { message: \"Invalid name code\" })\n      .openapi({ example: \"test\" }),\n    roleId: z.number().int().positive().openapi({ example: 1 }),\n    secondaryRoleIds: z\n      .array(z.number().int().positive())\n      .openapi({ example: [2, 3] }),\n  })\n  .partial()\n  .refine(body => Object.values(body).some(value => value !== undefined), {\n    message: \"At least one field is required\",\n  });\n\nexport const updateUserAdminRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  adminStaffPermission: { module: \"users\", permission: \"can_edit\" },\n  route: {\n    method: \"patch\",\n    description: \"Update a user's name or email by id (Admin only)\",\n    path: \"/{id}\",\n    request: {\n      params: z.object({\n        id: z.string().openapi({ example: \"1\" }),\n      }),\n      body: {\n        required: true,\n        content: {\n          \"application/json\": {\n            schema: zodUpdateUserAdminSchema,\n          },\n        },\n      },\n    },\n    responses: {\n      200: {\n        content: {\n          \"application/json\": {\n            schema: z.object({\n              id: z.number(),\n              name: z.string(),\n              email: z.email(),\n              nameCode: z.string(),\n            }),\n          },\n        },\n        description: \"User updated\",\n      },\n      400: {\n        content: {\n          \"application/json\": {\n            schema: z.object({ error: z.string() }),\n          },\n        },\n        description: \"Invalid role\",\n      },\n      403: {\n        description: \"Access Denied\",\n      },\n      404: {\n        content: {\n          \"application/json\": {\n            schema: z.object({ error: z.string() }),\n          },\n        },\n        description: \"User not found\",\n      },\n      409: {\n        content: {\n          \"application/json\": {\n            schema: z.object({ error: z.string() }),\n          },\n        },\n        description: \"Email or name already exists\",\n      },\n    },\n  },\n  handler: async c => {\n    const { id } = c.req.valid(\"param\");\n    const body = c.req.valid(\"json\");\n    const db = c.get(\"db\");\n\n    const userId = Number(id);\n    if (!Number.isInteger(userId)) {\n      return c.json({ error: \"User not found\" }, 404);\n    }\n\n    const [user] = await db\n      .select({ id: core_users.id, roleId: core_users.roleId })\n      .from(core_users)\n      .where(eq(core_users.id, userId))\n      .limit(1);\n\n    if (!user) {\n      return c.json({ error: \"User not found\" }, 404);\n    }\n\n    await assertCanEditAdminTarget(c, userId);\n\n    const values: Partial<typeof core_users.$inferInsert> = {};\n\n    if (body.email !== undefined) {\n      const [existing] = await db\n        .select({ id: core_users.id })\n        .from(core_users)\n        .where(\n          and(eq(core_users.email, body.email), ne(core_users.id, user.id)),\n        )\n        .limit(1);\n\n      if (existing) {\n        return c.json({ error: \"Email already exists\" }, 409);\n      }\n\n      values.email = body.email;\n    }\n\n    if (body.name !== undefined) {\n      const [existing] = await db\n        .select({ id: core_users.id })\n        .from(core_users)\n        .where(and(eq(core_users.name, body.name), ne(core_users.id, user.id)))\n        .limit(1);\n\n      if (existing) {\n        return c.json({ error: \"Name already exists\" }, 409);\n      }\n\n      values.name = body.name;\n    }\n\n    if (body.nameCode !== undefined) {\n      // The name code is the user's URL identifier (`@mention` handle), so it\n      // must stay globally unique.\n      const [existing] = await db\n        .select({ id: core_users.id })\n        .from(core_users)\n        .where(\n          and(\n            eq(core_users.nameCode, body.nameCode),\n            ne(core_users.id, user.id),\n          ),\n        )\n        .limit(1);\n\n      if (existing) {\n        return c.json({ error: \"Name code already exists\" }, 409);\n      }\n\n      values.nameCode = body.nameCode;\n    }\n\n    const effectivePrimaryId = body.roleId ?? user.roleId;\n    const secondaryRoleIds =\n      body.secondaryRoleIds !== undefined\n        ? [...new Set(body.secondaryRoleIds)].filter(\n            id => id !== effectivePrimaryId,\n          )\n        : undefined;\n\n    const roleIdsToValidate = [\n      ...(body.roleId !== undefined ? [body.roleId] : []),\n      ...(secondaryRoleIds ?? []),\n    ];\n\n    if (roleIdsToValidate.length > 0) {\n      const existingRoles = await db\n        .select({ id: core_roles.id, guest: core_roles.guest })\n        .from(core_roles)\n        .where(inArray(core_roles.id, roleIdsToValidate));\n      const assignableRoleIds = new Set(\n        existingRoles.filter(role => !role.guest).map(role => role.id),\n      );\n\n      if (roleIdsToValidate.some(id => !assignableRoleIds.has(id))) {\n        return c.json({ error: \"Invalid role\" }, 400);\n      }\n    }\n\n    if (body.roleId !== undefined) {\n      await assertCanAssignPrimaryRole(c, body.roleId);\n      values.roleId = body.roleId;\n    }\n\n    if (secondaryRoleIds !== undefined) {\n      await db\n        .delete(core_users_secondary_roles)\n        .where(eq(core_users_secondary_roles.userId, user.id));\n\n      if (secondaryRoleIds.length > 0) {\n        await db.insert(core_users_secondary_roles).values(\n          secondaryRoleIds.map(roleId => ({\n            userId: user.id,\n            roleId,\n          })),\n        );\n      }\n    }\n\n    if (Object.keys(values).length > 0) {\n      const [updated] = await db\n        .update(core_users)\n        .set(values)\n        .where(eq(core_users.id, user.id))\n        .returning({\n          id: core_users.id,\n          name: core_users.name,\n          email: core_users.email,\n          nameCode: core_users.nameCode,\n        });\n\n      return c.json(updated, 200);\n    }\n\n    const [current] = await db\n      .select({\n        id: core_users.id,\n        name: core_users.name,\n        email: core_users.email,\n        nameCode: core_users.nameCode,\n      })\n      .from(core_users)\n      .where(eq(core_users.id, user.id))\n      .limit(1);\n\n    return c.json(current, 200);\n  },\n});\n"],"mappings":"ieAaA,MAAM,EAAY,kCAEL,EAA2B,EACrC,OAAO,CACN,MAAO,EAAE,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,QAAQ,CACrC,QAAS,eACX,CAAC,EACD,KAAM,EACH,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,OAAO,GAAO,EAAU,KAAK,CAAG,EAAG,CAClC,QAAS,cACX,CAAC,CAAC,CACD,QAAQ,CAAE,QAAS,MAAO,CAAC,EAC9B,SAAU,EACP,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,IAAI,GAAG,CAAC,CACR,MAAM,kBAAmB,CAAE,QAAS,mBAAoB,CAAC,CAAC,CAC1D,QAAQ,CAAE,QAAS,MAAO,CAAC,EAC9B,OAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAE,QAAS,CAAE,CAAC,EAC1D,iBAAkB,EACf,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,CAClC,QAAQ,CAAE,QAAS,CAAC,EAAG,CAAC,CAAE,CAAC,CAChC,CAAC,CAAC,CACD,QAAQ,CAAC,CACT,OAAO,GAAQ,OAAO,OAAO,CAAI,CAAC,CAAC,KAAK,GAAS,IAAU,IAAA,EAAS,EAAG,CACtE,QAAS,gCACX,CAAC,EAEU,EAAuB,EAAW,CAC7C,SAAU,EAAc,SACxB,qBAAsB,CAAE,OAAQ,QAAS,WAAY,UAAW,EAChE,MAAO,CACL,OAAQ,QACR,YAAa,mDACb,KAAM,QACN,QAAS,CACP,OAAQ,EAAE,OAAO,CACf,GAAI,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAE,QAAS,GAAI,CAAC,CACzC,CAAC,EACD,KAAM,CACJ,SAAU,GACV,QAAS,CACP,mBAAoB,CAClB,OAAQ,CACV,CACF,CACF,CACF,EACA,UAAW,CACT,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,OAAO,CACf,GAAI,EAAE,OAAO,EACb,KAAM,EAAE,OAAO,EACf,MAAO,EAAE,MAAM,EACf,SAAU,EAAE,OAAO,CACrB,CAAC,CACH,CACF,EACA,YAAa,cACf,EACA,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,OAAO,CAAE,MAAO,EAAE,OAAO,CAAE,CAAC,CACxC,CACF,EACA,YAAa,cACf,EACA,IAAK,CACH,YAAa,eACf,EACA,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,OAAO,CAAE,MAAO,EAAE,OAAO,CAAE,CAAC,CACxC,CACF,EACA,YAAa,gBACf,EACA,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,OAAO,CAAE,MAAO,EAAE,OAAO,CAAE,CAAC,CACxC,CACF,EACA,YAAa,8BACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAClB,GAAM,CAAE,MAAO,EAAE,IAAI,MAAM,OAAO,EAC5B,EAAO,EAAE,IAAI,MAAM,MAAM,EACzB,EAAK,EAAE,IAAI,IAAI,EAEf,EAAS,OAAO,CAAE,EACxB,GAAI,CAAC,OAAO,UAAU,CAAM,EAC1B,OAAO,EAAE,KAAK,CAAE,MAAO,gBAAiB,EAAG,GAAG,EAGhD,GAAM,CAAC,GAAQ,MAAM,EAClB,OAAO,CAAE,GAAI,EAAW,GAAI,OAAQ,EAAW,MAAO,CAAC,CAAC,CACxD,KAAK,CAAU,CAAC,CAChB,MAAM,EAAG,EAAW,GAAI,CAAM,CAAC,CAAC,CAChC,MAAM,CAAC,EAEV,GAAI,CAAC,EACH,OAAO,EAAE,KAAK,CAAE,MAAO,gBAAiB,EAAG,GAAG,EAGhD,MAAM,EAAyB,EAAG,CAAM,EAExC,IAAM,EAAkD,CAAC,EAEzD,GAAI,EAAK,QAAU,IAAA,GAAW,CAC5B,GAAM,CAAC,GAAY,MAAM,EACtB,OAAO,CAAE,GAAI,EAAW,EAAG,CAAC,CAAC,CAC7B,KAAK,CAAU,CAAC,CAChB,MACC,EAAI,EAAG,EAAW,MAAO,EAAK,KAAK,EAAG,EAAG,EAAW,GAAI,EAAK,EAAE,CAAC,CAClE,CAAC,CACA,MAAM,CAAC,EAEV,GAAI,EACF,OAAO,EAAE,KAAK,CAAE,MAAO,sBAAuB,EAAG,GAAG,EAGtD,EAAO,MAAQ,EAAK,KACtB,CAEA,GAAI,EAAK,OAAS,IAAA,GAAW,CAC3B,GAAM,CAAC,GAAY,MAAM,EACtB,OAAO,CAAE,GAAI,EAAW,EAAG,CAAC,CAAC,CAC7B,KAAK,CAAU,CAAC,CAChB,MAAM,EAAI,EAAG,EAAW,KAAM,EAAK,IAAI,EAAG,EAAG,EAAW,GAAI,EAAK,EAAE,CAAC,CAAC,CAAC,CACtE,MAAM,CAAC,EAEV,GAAI,EACF,OAAO,EAAE,KAAK,CAAE,MAAO,qBAAsB,EAAG,GAAG,EAGrD,EAAO,KAAO,EAAK,IACrB,CAEA,GAAI,EAAK,WAAa,IAAA,GAAW,CAG/B,GAAM,CAAC,GAAY,MAAM,EACtB,OAAO,CAAE,GAAI,EAAW,EAAG,CAAC,CAAC,CAC7B,KAAK,CAAU,CAAC,CAChB,MACC,EACE,EAAG,EAAW,SAAU,EAAK,QAAQ,EACrC,EAAG,EAAW,GAAI,EAAK,EAAE,CAC3B,CACF,CAAC,CACA,MAAM,CAAC,EAEV,GAAI,EACF,OAAO,EAAE,KAAK,CAAE,MAAO,0BAA2B,EAAG,GAAG,EAG1D,EAAO,SAAW,EAAK,QACzB,CAEA,IAAM,EAAqB,EAAK,QAAU,EAAK,OACzC,EACJ,EAAK,mBAAqB,IAAA,GAItB,IAAA,GAHA,CAAC,GAAG,IAAI,IAAI,EAAK,gBAAgB,CAAC,CAAC,CAAC,OAClC,GAAM,IAAO,CACf,EAGA,EAAoB,CACxB,GAAI,EAAK,SAAW,IAAA,GAA4B,CAAC,EAAjB,CAAC,EAAK,MAAM,EAC5C,GAAI,GAAoB,CAAC,CAC3B,EAEA,GAAI,EAAkB,OAAS,EAAG,CAChC,IAAM,EAAgB,MAAM,EACzB,OAAO,CAAE,GAAI,EAAW,GAAI,MAAO,EAAW,KAAM,CAAC,CAAC,CACtD,KAAK,CAAU,CAAC,CAChB,MAAM,EAAQ,EAAW,GAAI,CAAiB,CAAC,EAC5C,EAAoB,IAAI,IAC5B,EAAc,OAAO,GAAQ,CAAC,EAAK,KAAK,CAAC,CAAC,IAAI,GAAQ,EAAK,EAAE,CAC/D,EAEA,GAAI,EAAkB,KAAK,GAAM,CAAC,EAAkB,IAAI,CAAE,CAAC,EACzD,OAAO,EAAE,KAAK,CAAE,MAAO,cAAe,EAAG,GAAG,CAEhD,CAsBA,GApBI,EAAK,SAAW,IAAA,KAClB,MAAM,EAA2B,EAAG,EAAK,MAAM,EAC/C,EAAO,OAAS,EAAK,QAGnB,IAAqB,IAAA,KACvB,MAAM,EACH,OAAO,CAA0B,CAAC,CAClC,MAAM,EAAG,EAA2B,OAAQ,EAAK,EAAE,CAAC,EAEnD,EAAiB,OAAS,GAC5B,MAAM,EAAG,OAAO,CAA0B,CAAC,CAAC,OAC1C,EAAiB,IAAI,IAAW,CAC9B,OAAQ,EAAK,GACb,QACF,EAAE,CACJ,GAIA,OAAO,KAAK,CAAM,CAAC,CAAC,OAAS,EAAG,CAClC,GAAM,CAAC,GAAW,MAAM,EACrB,OAAO,CAAU,CAAC,CAClB,IAAI,CAAM,CAAC,CACX,MAAM,EAAG,EAAW,GAAI,EAAK,EAAE,CAAC,CAAC,CACjC,UAAU,CACT,GAAI,EAAW,GACf,KAAM,EAAW,KACjB,MAAO,EAAW,MAClB,SAAU,EAAW,QACvB,CAAC,EAEH,OAAO,EAAE,KAAK,EAAS,GAAG,CAC5B,CAEA,GAAM,CAAC,GAAW,MAAM,EACrB,OAAO,CACN,GAAI,EAAW,GACf,KAAM,EAAW,KACjB,MAAO,EAAW,MAClB,SAAU,EAAW,QACvB,CAAC,CAAC,CACD,KAAK,CAAU,CAAC,CAChB,MAAM,EAAG,EAAW,GAAI,EAAK,EAAE,CAAC,CAAC,CACjC,MAAM,CAAC,EAEV,OAAO,EAAE,KAAK,EAAS,GAAG,CAC5B,CACF,CAAC"}

package/dist/src/api/modules/admin/users/routes/users.route.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"users.route.js","names":[],"sources":["../../../../../../../src/api/modules/admin/users/routes/users.route.ts"],"sourcesContent":["import { z } from \"@hono/zod-openapi\";\n\nimport { buildRoute } from \"@/api/lib/route\";\nimport {\n  withPagination,\n  zodPaginationPageInfo,\n  zodPaginationQuery,\n} from \"@/api/lib/with-pagination\";\nimport { CONFIG_PLUGIN } from \"@/config\";\nimport { core_users } from \"@/database/users\";\n\nexport const usersAdminRoute = buildRoute({\n  pluginId: CONFIG_PLUGIN.pluginId,\n  route: {\n    method: \"get\",\n    description: \"Get list of all users (Admin only)\",\n    path: \"/list\",\n    request: {\n      query: zodPaginationQuery.extend({\n        order: z.enum([\"asc\", \"desc\"]).optional(),\n        orderBy: z.enum([\"id\", \"name\", \"email\", \"createdAt\"]).optional(),\n      }),\n    },\n    responses: {\n      200: {\n        content: {\n          \"application/json\": {\n            schema: z.object({\n              edges: z.array(\n                z.object({\n                  id: z.number(),\n                  name: z.string(),\n                  email: z.string(),\n                  nameCode: z.string(),\n                  createdAt: z.date(),\n                  newsletter: z.boolean(),\n                  avatarColor: z.string(),\n                  emailVerified: z.boolean(),\n                  roleId: z.number(),\n                  birthday: z.date().nullable(),\n                  language: z.string(),\n                }),\n              ),\n              pageInfo: zodPaginationPageInfo,\n            }),\n          },\n        },\n        description: \"List of users\",\n      },\n      403: {\n        description: \"Access Denied\",\n      },\n    },\n  },\n  handler: async c => {\n    const query = c.req.valid(\"query\");\n    const data = await withPagination({\n      params: {\n        query,\n      },\n      primaryCursor: core_users.id,\n      query: async ({ limit, where, orderBy }) =>\n        await c\n          .get(\"db\")\n          .select({\n            id: core_users.id,\n            name: core_users.name,\n            email: core_users.email,\n            nameCode: core_users.nameCode,\n            createdAt: core_users.createdAt,\n            newsletter: core_users.newsletter,\n            avatarColor: core_users.avatarColor,\n            emailVerified: core_users.emailVerified,\n            roleId: core_users.roleId,\n            birthday: core_users.birthday,\n            language: core_users.language,\n          })\n          .from(core_users)\n          .where(where)\n          .orderBy(orderBy)\n          .limit(limit),\n      table: core_users,\n      orderBy: {\n        column: query.orderBy\n          ? core_users[query.orderBy]\n          : core_users.createdAt,\n        order: query.order ?? \"desc\",\n      },\n      c,\n    });\n\n    return c.json(data);\n  },\n});\n"],"mappings":"0UAWA,MAAa,EAAkB,EAAW,CACxC,SAAU,EAAc,SACxB,MAAO,CACL,OAAQ,MACR,YAAa,qCACb,KAAM,QACN,QAAS,CACP,MAAO,EAAmB,OAAO,CAC/B,MAAO,EAAE,KAAK,CAAC,MAAO,MAAM,CAAC,CAAC,CAAC,SAAS,EACxC,QAAS,EAAE,KAAK,CAAC,KAAM,OAAQ,QAAS,WAAW,CAAC,CAAC,CAAC,SAAS,CACjE,CAAC,CACH,EACA,UAAW,CACT,IAAK,CACH,QAAS,CACP,mBAAoB,CAClB,OAAQ,EAAE,OAAO,CACf,MAAO,EAAE,MACP,EAAE,OAAO,CACP,GAAI,EAAE,OAAO,EACb,KAAM,EAAE,OAAO,EACf,MAAO,EAAE,OAAO,EAChB,SAAU,EAAE,OAAO,EACnB,UAAW,EAAE,KAAK,EAClB,WAAY,EAAE,QAAQ,EACtB,YAAa,EAAE,OAAO,EACtB,cAAe,EAAE,QAAQ,EACzB,OAAQ,EAAE,OAAO,EACjB,SAAU,EAAE,KAAK,CAAC,CAAC,SAAS,EAC5B,SAAU,EAAE,OAAO,CACrB,CAAC,CACH,EACA,SAAU,CACZ,CAAC,CACH,CACF,EACA,YAAa,eACf,EACA,IAAK,CACH,YAAa,eACf,CACF,CACF,EACA,QAAS,KAAM,IAAK,CAClB,IAAM,EAAQ,EAAE,IAAI,MAAM,OAAO,EAC3B,EAAO,MAAM,EAAe,CAChC,OAAQ,CACN,OACF,EACA,cAAe,EAAW,GAC1B,MAAO,MAAO,CAAE,QAAO,QAAO,aAC5B,MAAM,EACH,IAAI,IAAI,CAAC,CACT,OAAO,CACN,GAAI,EAAW,GACf,KAAM,EAAW,KACjB,MAAO,EAAW,MAClB,SAAU,EAAW,SACrB,UAAW,EAAW,UACtB,WAAY,EAAW,WACvB,YAAa,EAAW,YACxB,cAAe,EAAW,cAC1B,OAAQ,EAAW,OACnB,SAAU,EAAW,SACrB,SAAU,EAAW,QACvB,CAAC,CAAC,CACD,KAAK,CAAU,CAAC,CAChB,MAAM,CAAK,CAAC,CACZ,QAAQ,CAAO,CAAC,CAChB,MAAM,CAAK,EAChB,MAAO,EACP,QAAS,CACP,OAAQ,EAAM,QACV,EAAW,EAAM,SACjB,EAAW,UACf,MAAO,EAAM,OAAS,MACxB,EACA,GACF,CAAC,EAED,OAAO,EAAE,KAAK,CAAI,CACpB,CACF,CAAC"}