@webiny/api-core 0.0.0-unstable.0d717d18dd

package/features/users/DeleteUser/DeleteUserUseCase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/users/DeleteUser/DeleteUserUseCase.js","sources":["../../../../src/features/users/DeleteUser/DeleteUserUseCase.ts"],"sourcesContent":["import { createImplementation } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport { IdentityContext } from \"~/features/security/IdentityContext/index.js\";\nimport { EventPublisher } from \"~/features/eventPublisher/index.js\";\nimport { DeleteUserUseCase as UseCaseAbstraction } from \"./abstractions.js\";\nimport { AdminUsersRepository } from \"~/features/users/shared/abstractions.js\";\nimport { NotAuthorizedError } from \"~/features/users/shared/errors.js\";\nimport { UserBeforeDeleteEvent, UserAfterDeleteEvent } from \"./events.js\";\nimport { CannotDeleteOwnAccountError } from \"./errors.js\";\n\nclass DeleteUserUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(\n        private identityContext: IdentityContext.Interface,\n        private eventPublisher: EventPublisher.Interface,\n        private repository: AdminUsersRepository.Interface\n    ) {}\n\n    async execute(id: string): Promise<Result<void, UseCaseAbstraction.Error>> {\n        // 1. Check permission\n        const permission = await this.identityContext.getPermission(\"adminUsers.user\");\n        if (!permission) {\n            return Result.fail(new NotAuthorizedError());\n        }\n\n        // 2. Get existing user\n        const getUserResult = await this.repository.get({ id });\n        if (getUserResult.isFail()) {\n            return Result.fail(getUserResult.error);\n        }\n\n        const user = getUserResult.value;\n\n        // 3. Check if trying to delete own account\n        const identity = this.identityContext.getIdentity();\n        if (user.id === identity.id) {\n            return Result.fail(new CannotDeleteOwnAccountError());\n        }\n\n        // 4. Publish before event\n        await this.eventPublisher.publish(new UserBeforeDeleteEvent({ user }));\n\n        // 5. Delete user via repository\n        const result = await this.repository.delete(user);\n        if (result.isFail()) {\n            return Result.fail(result.error);\n        }\n\n        // 6. Publish after event\n        await this.eventPublisher.publish(new UserAfterDeleteEvent({ user }));\n\n        return Result.ok();\n    }\n}\n\nexport const DeleteUserUseCase = createImplementation({\n    abstraction: UseCaseAbstraction,\n    implementation: DeleteUserUseCaseImpl,\n    dependencies: [IdentityContext, EventPublisher, AdminUsersRepository]\n});\n"],"names":["DeleteUserUseCaseImpl","identityContext","eventPublisher","repository","id","permission","Result","NotAuthorizedError","getUserResult","user","identity","CannotDeleteOwnAccountError","UserBeforeDeleteEvent","result","UserAfterDeleteEvent","DeleteUserUseCase","createImplementation","UseCaseAbstraction","IdentityContext","EventPublisher","AdminUsersRepository"],"mappings":";;;;;;;;AAUA,MAAMA;IACF,YACYC,eAA0C,EAC1CC,cAAwC,EACxCC,UAA0C,CACpD;aAHUF,eAAe,GAAfA;aACAC,cAAc,GAAdA;aACAC,UAAU,GAAVA;IACT;IAEH,MAAM,QAAQC,EAAU,EAAmD;QAEvE,MAAMC,aAAa,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC;QAC5D,IAAI,CAACA,YACD,OAAOC,OAAO,IAAI,CAAC,IAAIC;QAI3B,MAAMC,gBAAgB,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAEJ;QAAG;QACrD,IAAII,cAAc,MAAM,IACpB,OAAOF,OAAO,IAAI,CAACE,cAAc,KAAK;QAG1C,MAAMC,OAAOD,cAAc,KAAK;QAGhC,MAAME,WAAW,IAAI,CAAC,eAAe,CAAC,WAAW;QACjD,IAAID,KAAK,EAAE,KAAKC,SAAS,EAAE,EACvB,OAAOJ,OAAO,IAAI,CAAC,IAAIK;QAI3B,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAIC,sBAAsB;YAAEH;QAAK;QAGnE,MAAMI,SAAS,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAACJ;QAC5C,IAAII,OAAO,MAAM,IACb,OAAOP,OAAO,IAAI,CAACO,OAAO,KAAK;QAInC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAIC,qBAAqB;YAAEL;QAAK;QAElE,OAAOH,OAAO,EAAE;IACpB;AACJ;AAEO,MAAMS,sCAAoBC,qBAAqB;IAClD,aAAaC;IACb,gBAAgBjB;IAChB,cAAc;QAACkB;QAAiBC;QAAgBC;KAAqB;AACzE"}

package/features/users/DeleteUser/abstractions.d.ts

@@ -0,0 +1,25 @@
+import { Result } from "@webiny/feature/api";
+import type { AdminUser } from "../../../features/users/shared/types.js";
+import { AdminUsersRepository } from "../../../features/users/shared/abstractions.js";
+import { NotAuthorizedError } from "../../../features/users/shared/errors.js";
+import { CannotDeleteOwnAccountError } from "./errors.js";
+export interface IDeleteUserErrors {
+    notAuthorized: NotAuthorizedError;
+    cannotDeleteOwnAccount: CannotDeleteOwnAccountError;
+}
+export type DeleteUserError = IDeleteUserErrors[keyof IDeleteUserErrors] | AdminUsersRepository.Error;
+export interface IDeleteUser {
+    execute(id: string): Promise<Result<void, DeleteUserError>>;
+}
+/** Delete an admin user. */
+export declare const DeleteUserUseCase: import("@webiny/di").Abstraction<IDeleteUser>;
+export declare namespace DeleteUserUseCase {
+    type Interface = IDeleteUser;
+    type Error = DeleteUserError;
+}
+export interface UserBeforeDeletePayload {
+    user: AdminUser;
+}
+export interface UserAfterDeletePayload {
+    user: AdminUser;
+}

package/features/users/DeleteUser/abstractions.js

@@ -0,0 +1,5 @@
+import { createAbstraction } from "@webiny/feature/api";
+const DeleteUserUseCase = createAbstraction("DeleteUserUseCase");
+export { DeleteUserUseCase };
+
+//# sourceMappingURL=abstractions.js.map

package/features/users/DeleteUser/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/users/DeleteUser/abstractions.js","sources":["../../../../src/features/users/DeleteUser/abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport type { AdminUser } from \"~/features/users/shared/types.js\";\nimport { AdminUsersRepository } from \"~/features/users/shared/abstractions.js\";\nimport { NotAuthorizedError } from \"~/features/users/shared/errors.js\";\nimport { CannotDeleteOwnAccountError } from \"./errors.js\";\n\n// Use case specific errors\nexport interface IDeleteUserErrors {\n    notAuthorized: NotAuthorizedError;\n    cannotDeleteOwnAccount: CannotDeleteOwnAccountError;\n}\n\n// Combined error type (use case errors + repository errors)\nexport type DeleteUserError =\n    | IDeleteUserErrors[keyof IDeleteUserErrors]\n    | AdminUsersRepository.Error;\n\n// Use case interface\nexport interface IDeleteUser {\n    execute(id: string): Promise<Result<void, DeleteUserError>>;\n}\n\n/** Delete an admin user. */\nexport const DeleteUserUseCase = createAbstraction<IDeleteUser>(\"DeleteUserUseCase\");\n\n// Namespace exports\nexport namespace DeleteUserUseCase {\n    export type Interface = IDeleteUser;\n    export type Error = DeleteUserError;\n}\n\n// Event payload types\nexport interface UserBeforeDeletePayload {\n    user: AdminUser;\n}\n\nexport interface UserAfterDeletePayload {\n    user: AdminUser;\n}\n"],"names":["DeleteUserUseCase","createAbstraction"],"mappings":";AAwBO,MAAMA,oBAAoBC,kBAA+B"}

package/features/users/DeleteUser/decorators/DeleteUserWithWcpDecrement.d.ts

@@ -0,0 +1,10 @@
+import { DeleteUserUseCase } from "../abstractions.js";
+import { WcpContext } from "../../../../features/wcp/WcpContext/index.js";
+declare class DeleteUserWithWcpDecrementImpl implements DeleteUserUseCase.Interface {
+    private wcp;
+    private decoratee;
+    constructor(wcp: WcpContext.Interface, decoratee: DeleteUserUseCase.Interface);
+    execute(id: string): Promise<import("@webiny/feature/api").Result<void, import("../abstractions.js").DeleteUserError>>;
+}
+export declare const DeleteUserWithWcpDecrement: typeof DeleteUserWithWcpDecrementImpl;
+export {};

package/features/users/DeleteUser/decorators/DeleteUserWithWcpDecrement.js

@@ -0,0 +1,24 @@
+import { createDecorator } from "@webiny/feature/api";
+import { DeleteUserUseCase } from "../abstractions.js";
+import { WcpContext } from "../../../wcp/WcpContext/index.js";
+class DeleteUserWithWcpDecrementImpl {
+    constructor(wcp, decoratee){
+        this.wcp = wcp;
+        this.decoratee = decoratee;
+    }
+    async execute(id) {
+        const result = await this.decoratee.execute(id);
+        if (result.isOk()) await this.wcp.decrementSeats();
+        return result;
+    }
+}
+const DeleteUserWithWcpDecrement = createDecorator({
+    abstraction: DeleteUserUseCase,
+    decorator: DeleteUserWithWcpDecrementImpl,
+    dependencies: [
+        WcpContext
+    ]
+});
+export { DeleteUserWithWcpDecrement };
+
+//# sourceMappingURL=DeleteUserWithWcpDecrement.js.map

package/features/users/DeleteUser/decorators/DeleteUserWithWcpDecrement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/users/DeleteUser/decorators/DeleteUserWithWcpDecrement.js","sources":["../../../../../src/features/users/DeleteUser/decorators/DeleteUserWithWcpDecrement.ts"],"sourcesContent":["import { createDecorator } from \"@webiny/feature/api\";\nimport { DeleteUserUseCase } from \"../abstractions.js\";\nimport { WcpContext } from \"~/features/wcp/WcpContext/index.js\";\n\nclass DeleteUserWithWcpDecrementImpl implements DeleteUserUseCase.Interface {\n    constructor(\n        private wcp: WcpContext.Interface,\n        private decoratee: DeleteUserUseCase.Interface\n    ) {}\n\n    async execute(id: string) {\n        const result = await this.decoratee.execute(id);\n\n        // Only decrement seats if deletion was successful\n        if (result.isOk()) {\n            await this.wcp.decrementSeats();\n        }\n\n        return result;\n    }\n}\n\nexport const DeleteUserWithWcpDecrement = createDecorator({\n    abstraction: DeleteUserUseCase,\n    decorator: DeleteUserWithWcpDecrementImpl,\n    dependencies: [WcpContext]\n});\n"],"names":["DeleteUserWithWcpDecrementImpl","wcp","decoratee","id","result","DeleteUserWithWcpDecrement","createDecorator","DeleteUserUseCase","WcpContext"],"mappings":";;;AAIA,MAAMA;IACF,YACYC,GAAyB,EACzBC,SAAsC,CAChD;aAFUD,GAAG,GAAHA;aACAC,SAAS,GAATA;IACT;IAEH,MAAM,QAAQC,EAAU,EAAE;QACtB,MAAMC,SAAS,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAACD;QAG5C,IAAIC,OAAO,IAAI,IACX,MAAM,IAAI,CAAC,GAAG,CAAC,cAAc;QAGjC,OAAOA;IACX;AACJ;AAEO,MAAMC,6BAA6BC,gBAAgB;IACtD,aAAaC;IACb,WAAWP;IACX,cAAc;QAACQ;KAAW;AAC9B"}

package/features/users/DeleteUser/errors.d.ts

@@ -0,0 +1,5 @@
+import { BaseError } from "@webiny/feature/api";
+export declare class CannotDeleteOwnAccountError extends BaseError {
+    readonly code: "CANNOT_DELETE_OWN_ACCOUNT";
+    constructor();
+}

package/features/users/DeleteUser/errors.js

@@ -0,0 +1,11 @@
+import { BaseError } from "@webiny/feature/api";
+class CannotDeleteOwnAccountError extends BaseError {
+    constructor(){
+        super({
+            message: "You can't delete your own user account."
+        }), this.code = "CANNOT_DELETE_OWN_ACCOUNT";
+    }
+}
+export { CannotDeleteOwnAccountError };
+
+//# sourceMappingURL=errors.js.map

package/features/users/DeleteUser/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/users/DeleteUser/errors.js","sources":["../../../../src/features/users/DeleteUser/errors.ts"],"sourcesContent":["import { BaseError } from \"@webiny/feature/api\";\n\nexport class CannotDeleteOwnAccountError extends BaseError {\n    override readonly code = \"CANNOT_DELETE_OWN_ACCOUNT\" as const;\n\n    constructor() {\n        super({\n            message: \"You can't delete your own user account.\"\n        });\n    }\n}\n"],"names":["CannotDeleteOwnAccountError","BaseError"],"mappings":";AAEO,MAAMA,oCAAoCC;IAG7C,aAAc;QACV,KAAK,CAAC;YACF,SAAS;QACb,SALc,IAAI,GAAG;IAMzB;AACJ"}

package/features/users/DeleteUser/events.d.ts

@@ -0,0 +1,23 @@
+import { DomainEvent } from "../../../features/eventPublisher/index.js";
+import type { IEventHandler } from "../../../features/eventPublisher/index.js";
+import type { UserBeforeDeletePayload, UserAfterDeletePayload } from "./abstractions.js";
+export declare class UserBeforeDeleteEvent extends DomainEvent<UserBeforeDeletePayload> {
+    eventType: "user.beforeDelete";
+    getHandlerAbstraction(): import("@webiny/di").Abstraction<IEventHandler<UserBeforeDeleteEvent>>;
+}
+/** Hook into user lifecycle before a user is deleted. */
+export declare const UserBeforeDeleteEventHandler: import("@webiny/di").Abstraction<IEventHandler<UserBeforeDeleteEvent>>;
+export declare namespace UserBeforeDeleteEventHandler {
+    type Interface = IEventHandler<UserBeforeDeleteEvent>;
+    type Event = UserBeforeDeleteEvent;
+}
+export declare class UserAfterDeleteEvent extends DomainEvent<UserAfterDeletePayload> {
+    eventType: "user.afterDelete";
+    getHandlerAbstraction(): import("@webiny/di").Abstraction<IEventHandler<UserAfterDeleteEvent>>;
+}
+/** Hook into user lifecycle after a user is deleted. */
+export declare const UserAfterDeleteEventHandler: import("@webiny/di").Abstraction<IEventHandler<UserAfterDeleteEvent>>;
+export declare namespace UserAfterDeleteEventHandler {
+    type Interface = IEventHandler<UserAfterDeleteEvent>;
+    type Event = UserAfterDeleteEvent;
+}

package/features/users/DeleteUser/events.js

@@ -0,0 +1,23 @@
+import { createAbstraction } from "@webiny/feature/api";
+import { DomainEvent } from "../../eventPublisher/index.js";
+class UserBeforeDeleteEvent extends DomainEvent {
+    getHandlerAbstraction() {
+        return UserBeforeDeleteEventHandler;
+    }
+    constructor(...args){
+        super(...args), this.eventType = "user.beforeDelete";
+    }
+}
+const UserBeforeDeleteEventHandler = createAbstraction("UserBeforeDeleteEventHandler");
+class UserAfterDeleteEvent extends DomainEvent {
+    getHandlerAbstraction() {
+        return UserAfterDeleteEventHandler;
+    }
+    constructor(...args){
+        super(...args), this.eventType = "user.afterDelete";
+    }
+}
+const UserAfterDeleteEventHandler = createAbstraction("UserAfterDeleteEventHandler");
+export { UserAfterDeleteEvent, UserAfterDeleteEventHandler, UserBeforeDeleteEvent, UserBeforeDeleteEventHandler };
+
+//# sourceMappingURL=events.js.map

package/features/users/DeleteUser/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/users/DeleteUser/events.js","sources":["../../../../src/features/users/DeleteUser/events.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport { DomainEvent } from \"~/features/eventPublisher/index.js\";\nimport type { IEventHandler } from \"~/features/eventPublisher/index.js\";\nimport type { UserBeforeDeletePayload, UserAfterDeletePayload } from \"./abstractions.js\";\n\n// Before Delete Event\nexport class UserBeforeDeleteEvent extends DomainEvent<UserBeforeDeletePayload> {\n    eventType = \"user.beforeDelete\" as const;\n\n    getHandlerAbstraction() {\n        return UserBeforeDeleteEventHandler;\n    }\n}\n\n/** Hook into user lifecycle before a user is deleted. */\nexport const UserBeforeDeleteEventHandler = createAbstraction<IEventHandler<UserBeforeDeleteEvent>>(\n    \"UserBeforeDeleteEventHandler\"\n);\n\nexport namespace UserBeforeDeleteEventHandler {\n    export type Interface = IEventHandler<UserBeforeDeleteEvent>;\n    export type Event = UserBeforeDeleteEvent;\n}\n\n// After Delete Event\nexport class UserAfterDeleteEvent extends DomainEvent<UserAfterDeletePayload> {\n    eventType = \"user.afterDelete\" as const;\n\n    getHandlerAbstraction() {\n        return UserAfterDeleteEventHandler;\n    }\n}\n\n/** Hook into user lifecycle after a user is deleted. */\nexport const UserAfterDeleteEventHandler = createAbstraction<IEventHandler<UserAfterDeleteEvent>>(\n    \"UserAfterDeleteEventHandler\"\n);\n\nexport namespace UserAfterDeleteEventHandler {\n    export type Interface = IEventHandler<UserAfterDeleteEvent>;\n    export type Event = UserAfterDeleteEvent;\n}\n"],"names":["UserBeforeDeleteEvent","DomainEvent","UserBeforeDeleteEventHandler","createAbstraction","UserAfterDeleteEvent","UserAfterDeleteEventHandler"],"mappings":";;AAMO,MAAMA,8BAA8BC;IAGvC,wBAAwB;QACpB,OAAOC;IACX;;QALG,qBACH,SAAS,GAAG;;AAKhB;AAGO,MAAMA,+BAA+BC,kBACxC;AASG,MAAMC,6BAA6BH;IAGtC,wBAAwB;QACpB,OAAOI;IACX;;QALG,qBACH,SAAS,GAAG;;AAKhB;AAGO,MAAMA,8BAA8BF,kBACvC"}

package/features/users/DeleteUser/feature.d.ts

@@ -0,0 +1,4 @@
+export declare const DeleteUserFeature: {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
+};

package/features/users/DeleteUser/feature.js

@@ -0,0 +1,13 @@
+import { createFeature } from "@webiny/feature/api";
+import { DeleteUserUseCase } from "./DeleteUserUseCase.js";
+import { DeleteUserWithWcpDecrement } from "./decorators/DeleteUserWithWcpDecrement.js";
+const DeleteUserFeature = createFeature({
+    name: "DeleteUser",
+    register (container) {
+        container.register(DeleteUserUseCase);
+        container.registerDecorator(DeleteUserWithWcpDecrement);
+    }
+});
+export { DeleteUserFeature };
+
+//# sourceMappingURL=feature.js.map

package/features/users/DeleteUser/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/users/DeleteUser/feature.js","sources":["../../../../src/features/users/DeleteUser/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { DeleteUserUseCase } from \"./DeleteUserUseCase.js\";\nimport { DeleteUserWithWcpDecrement } from \"./decorators/DeleteUserWithWcpDecrement.js\";\n\nexport const DeleteUserFeature = createFeature({\n    name: \"DeleteUser\",\n    register(container) {\n        container.register(DeleteUserUseCase);\n        container.registerDecorator(DeleteUserWithWcpDecrement);\n    }\n});\n"],"names":["DeleteUserFeature","createFeature","container","DeleteUserUseCase","DeleteUserWithWcpDecrement"],"mappings":";;;AAIO,MAAMA,oBAAoBC,cAAc;IAC3C,MAAM;IACN,UAASC,SAAS;QACdA,UAAU,QAAQ,CAACC;QACnBD,UAAU,iBAAiB,CAACE;IAChC;AACJ"}

package/features/users/DeleteUser/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./abstractions.js";
+export * from "./events.js";

package/features/users/DeleteUser/index.js

@@ -0,0 +1,2 @@
+export * from "./abstractions.js";
+export * from "./events.js";

package/features/users/ExternalIdpUserSync/ExternalIdpUserSyncHandler.d.ts

@@ -0,0 +1,19 @@
+import { AfterLoginEventHandler } from "../../../features/security/login/index.js";
+import { IdentityContext } from "../../../features/security/IdentityContext/index.js";
+import { ListRolesUseCase } from "../../../features/security/roles/ListRoles/index.js";
+import { ListTeamsUseCase } from "../../../features/security/teams/ListTeams/index.js";
+import { GetUserUseCase } from "../../../features/users/GetUser/index.js";
+import { CreateUserUseCase } from "../../../features/users/CreateUser/index.js";
+import { UpdateUserUseCase } from "../../../features/users/UpdateUser/index.js";
+declare class ExternalIdpUserSyncHandlerImpl implements AfterLoginEventHandler.Interface {
+    private identityContext;
+    private getUserUseCase;
+    private createUserUseCase;
+    private updateUserUseCase;
+    private listRolesUseCase;
+    private listTeamsUseCase;
+    constructor(identityContext: IdentityContext.Interface, getUserUseCase: GetUserUseCase.Interface, createUserUseCase: CreateUserUseCase.Interface, updateUserUseCase: UpdateUserUseCase.Interface, listRolesUseCase: ListRolesUseCase.Interface, listTeamsUseCase: ListTeamsUseCase.Interface);
+    handle(event: AfterLoginEventHandler.Event): Promise<void>;
+}
+export declare const ExternalIdpUserSyncHandler: import("@webiny/di").Implementation<typeof ExternalIdpUserSyncHandlerImpl>;
+export {};

package/features/users/ExternalIdpUserSync/ExternalIdpUserSyncHandler.js

@@ -0,0 +1,75 @@
+import { createImplementation } from "@webiny/feature/api";
+import { AfterLoginEventHandler } from "../../security/login/index.js";
+import { IdentityContext } from "../../security/IdentityContext/index.js";
+import { ListRolesUseCase } from "../../security/roles/ListRoles/index.js";
+import { ListTeamsUseCase } from "../../security/teams/ListTeams/index.js";
+import { GetUserUseCase } from "../GetUser/index.js";
+import { CreateUserUseCase } from "../CreateUser/index.js";
+import { UpdateUserUseCase } from "../UpdateUser/index.js";
+class ExternalIdpUserSyncHandlerImpl {
+    constructor(identityContext, getUserUseCase, createUserUseCase, updateUserUseCase, listRolesUseCase, listTeamsUseCase){
+        this.identityContext = identityContext;
+        this.getUserUseCase = getUserUseCase;
+        this.createUserUseCase = createUserUseCase;
+        this.updateUserUseCase = updateUserUseCase;
+        this.listRolesUseCase = listRolesUseCase;
+        this.listTeamsUseCase = listTeamsUseCase;
+    }
+    async handle(event) {
+        const { identity } = event.payload;
+        if (!identity.profile.external) return;
+        await this.identityContext.withoutAuthorization(async ()=>{
+            const getUserResult = await this.getUserUseCase.execute({
+                id: identity.id
+            });
+            const id = identity.id;
+            const data = {
+                displayName: identity.displayName,
+                email: identity.profile.email,
+                firstName: identity.profile.firstName || "",
+                lastName: identity.profile.lastName || "",
+                roles: [],
+                teams: [],
+                external: true
+            };
+            const roleSlugs = identity.roles;
+            if (roleSlugs.length > 0) {
+                const listRolesResult = await this.listRolesUseCase.execute({
+                    where: {
+                        slug_in: roleSlugs
+                    }
+                });
+                if (listRolesResult.isOk()) data.roles = listRolesResult.value.map((role)=>role.id);
+            }
+            const teamSlugs = identity.teams;
+            if (teamSlugs.length > 0) {
+                const listTeamsResult = await this.listTeamsUseCase.execute({
+                    where: {
+                        slug_in: teamSlugs
+                    }
+                });
+                if (listTeamsResult.isOk()) data.teams = listTeamsResult.value.map((team)=>team.id);
+            }
+            if (getUserResult.isOk()) return void await this.updateUserUseCase.execute(identity.id, data);
+            await this.createUserUseCase.execute({
+                id,
+                ...data
+            });
+        });
+    }
+}
+const ExternalIdpUserSyncHandler = createImplementation({
+    abstraction: AfterLoginEventHandler,
+    implementation: ExternalIdpUserSyncHandlerImpl,
+    dependencies: [
+        IdentityContext,
+        GetUserUseCase,
+        CreateUserUseCase,
+        UpdateUserUseCase,
+        ListRolesUseCase,
+        ListTeamsUseCase
+    ]
+});
+export { ExternalIdpUserSyncHandler };
+
+//# sourceMappingURL=ExternalIdpUserSyncHandler.js.map

package/features/users/ExternalIdpUserSync/ExternalIdpUserSyncHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/users/ExternalIdpUserSync/ExternalIdpUserSyncHandler.js","sources":["../../../../src/features/users/ExternalIdpUserSync/ExternalIdpUserSyncHandler.ts"],"sourcesContent":["import { createImplementation } from \"@webiny/feature/api\";\nimport { AfterLoginEventHandler } from \"~/features/security/login/index.js\";\nimport { IdentityContext } from \"~/features/security/IdentityContext/index.js\";\nimport { ListRolesUseCase } from \"~/features/security/roles/ListRoles/index.js\";\nimport { ListTeamsUseCase } from \"~/features/security/teams/ListTeams/index.js\";\nimport { GetUserUseCase } from \"~/features/users/GetUser/index.js\";\nimport { CreateUserUseCase } from \"~/features/users/CreateUser/index.js\";\nimport { UpdateUserUseCase } from \"~/features/users/UpdateUser/index.js\";\n\nclass ExternalIdpUserSyncHandlerImpl implements AfterLoginEventHandler.Interface {\n    constructor(\n        private identityContext: IdentityContext.Interface,\n        private getUserUseCase: GetUserUseCase.Interface,\n        private createUserUseCase: CreateUserUseCase.Interface,\n        private updateUserUseCase: UpdateUserUseCase.Interface,\n        private listRolesUseCase: ListRolesUseCase.Interface,\n        private listTeamsUseCase: ListTeamsUseCase.Interface\n    ) {}\n\n    async handle(event: AfterLoginEventHandler.Event): Promise<void> {\n        const { identity } = event.payload;\n\n        // We only sync external identities\n        if (!identity.profile.external) {\n            return;\n        }\n\n        await this.identityContext.withoutAuthorization(async () => {\n            // Check if user exists\n            const getUserResult = await this.getUserUseCase.execute({ id: identity.id });\n\n            // Prepare user data\n            const id = identity.id;\n\n            const data = {\n                displayName: identity.displayName,\n                email: identity.profile.email,\n                firstName: identity.profile.firstName || \"\",\n                lastName: identity.profile.lastName || \"\",\n                roles: [] as string[],\n                teams: [] as string[],\n                external: true\n            };\n\n            // Resolve roles\n            const roleSlugs = identity.roles;\n            if (roleSlugs.length > 0) {\n                const listRolesResult = await this.listRolesUseCase.execute({\n                    where: { slug_in: roleSlugs }\n                });\n                if (listRolesResult.isOk()) {\n                    data.roles = listRolesResult.value.map(role => role.id);\n                }\n            }\n\n            // Resolve teams\n            const teamSlugs = identity.teams;\n            if (teamSlugs.length > 0) {\n                const listTeamsResult = await this.listTeamsUseCase.execute({\n                    where: { slug_in: teamSlugs }\n                });\n                if (listTeamsResult.isOk()) {\n                    data.teams = listTeamsResult.value.map(team => team.id);\n                }\n            }\n\n            // Update or create user\n            if (getUserResult.isOk()) {\n                await this.updateUserUseCase.execute(identity.id, data);\n                return;\n            }\n\n            await this.createUserUseCase.execute({ id, ...data });\n        });\n    }\n}\n\nexport const ExternalIdpUserSyncHandler = createImplementation({\n    abstraction: AfterLoginEventHandler,\n    implementation: ExternalIdpUserSyncHandlerImpl,\n    dependencies: [\n        IdentityContext,\n        GetUserUseCase,\n        CreateUserUseCase,\n        UpdateUserUseCase,\n        ListRolesUseCase,\n        ListTeamsUseCase\n    ]\n});\n"],"names":["ExternalIdpUserSyncHandlerImpl","identityContext","getUserUseCase","createUserUseCase","updateUserUseCase","listRolesUseCase","listTeamsUseCase","event","identity","getUserResult","id","data","roleSlugs","listRolesResult","role","teamSlugs","listTeamsResult","team","ExternalIdpUserSyncHandler","createImplementation","AfterLoginEventHandler","IdentityContext","GetUserUseCase","CreateUserUseCase","UpdateUserUseCase","ListRolesUseCase","ListTeamsUseCase"],"mappings":";;;;;;;;AASA,MAAMA;IACF,YACYC,eAA0C,EAC1CC,cAAwC,EACxCC,iBAA8C,EAC9CC,iBAA8C,EAC9CC,gBAA4C,EAC5CC,gBAA4C,CACtD;aANUL,eAAe,GAAfA;aACAC,cAAc,GAAdA;aACAC,iBAAiB,GAAjBA;aACAC,iBAAiB,GAAjBA;aACAC,gBAAgB,GAAhBA;aACAC,gBAAgB,GAAhBA;IACT;IAEH,MAAM,OAAOC,KAAmC,EAAiB;QAC7D,MAAM,EAAEC,QAAQ,EAAE,GAAGD,MAAM,OAAO;QAGlC,IAAI,CAACC,SAAS,OAAO,CAAC,QAAQ,EAC1B;QAGJ,MAAM,IAAI,CAAC,eAAe,CAAC,oBAAoB,CAAC;YAE5C,MAAMC,gBAAgB,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;gBAAE,IAAID,SAAS,EAAE;YAAC;YAG1E,MAAME,KAAKF,SAAS,EAAE;YAEtB,MAAMG,OAAO;gBACT,aAAaH,SAAS,WAAW;gBACjC,OAAOA,SAAS,OAAO,CAAC,KAAK;gBAC7B,WAAWA,SAAS,OAAO,CAAC,SAAS,IAAI;gBACzC,UAAUA,SAAS,OAAO,CAAC,QAAQ,IAAI;gBACvC,OAAO,EAAE;gBACT,OAAO,EAAE;gBACT,UAAU;YACd;YAGA,MAAMI,YAAYJ,SAAS,KAAK;YAChC,IAAII,UAAU,MAAM,GAAG,GAAG;gBACtB,MAAMC,kBAAkB,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;oBACxD,OAAO;wBAAE,SAASD;oBAAU;gBAChC;gBACA,IAAIC,gBAAgB,IAAI,IACpBF,KAAK,KAAK,GAAGE,gBAAgB,KAAK,CAAC,GAAG,CAACC,CAAAA,OAAQA,KAAK,EAAE;YAE9D;YAGA,MAAMC,YAAYP,SAAS,KAAK;YAChC,IAAIO,UAAU,MAAM,GAAG,GAAG;gBACtB,MAAMC,kBAAkB,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;oBACxD,OAAO;wBAAE,SAASD;oBAAU;gBAChC;gBACA,IAAIC,gBAAgB,IAAI,IACpBL,KAAK,KAAK,GAAGK,gBAAgB,KAAK,CAAC,GAAG,CAACC,CAAAA,OAAQA,KAAK,EAAE;YAE9D;YAGA,IAAIR,cAAc,IAAI,IAAI,YACtB,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAACD,SAAS,EAAE,EAAEG;YAItD,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC;gBAAED;gBAAI,GAAGC,IAAI;YAAC;QACvD;IACJ;AACJ;AAEO,MAAMO,6BAA6BC,qBAAqB;IAC3D,aAAaC;IACb,gBAAgBpB;IAChB,cAAc;QACVqB;QACAC;QACAC;QACAC;QACAC;QACAC;KACH;AACL"}

package/features/users/ExternalIdpUserSync/feature.d.ts

@@ -0,0 +1,4 @@
+export declare const ExternalIdpUserSyncFeature: {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
+};

package/features/users/ExternalIdpUserSync/feature.js

@@ -0,0 +1,11 @@
+import { createFeature } from "@webiny/feature/api";
+import { ExternalIdpUserSyncHandler } from "./ExternalIdpUserSyncHandler.js";
+const ExternalIdpUserSyncFeature = createFeature({
+    name: "ExternalIdpUserSync",
+    register (container) {
+        container.register(ExternalIdpUserSyncHandler);
+    }
+});
+export { ExternalIdpUserSyncFeature };
+
+//# sourceMappingURL=feature.js.map

package/features/users/ExternalIdpUserSync/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/users/ExternalIdpUserSync/feature.js","sources":["../../../../src/features/users/ExternalIdpUserSync/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { ExternalIdpUserSyncHandler } from \"./ExternalIdpUserSyncHandler.js\";\n\nexport const ExternalIdpUserSyncFeature = createFeature({\n    name: \"ExternalIdpUserSync\",\n    register(container) {\n        container.register(ExternalIdpUserSyncHandler);\n    }\n});\n"],"names":["ExternalIdpUserSyncFeature","createFeature","container","ExternalIdpUserSyncHandler"],"mappings":";;AAGO,MAAMA,6BAA6BC,cAAc;IACpD,MAAM;IACN,UAASC,SAAS;QACdA,UAAU,QAAQ,CAACC;IACvB;AACJ"}

package/features/users/ExternalIdpUserSync/index.d.ts

@@ -0,0 +1 @@
+export * from "./feature.js";

package/features/users/ExternalIdpUserSync/index.js

@@ -0,0 +1 @@
+export * from "./feature.js";

package/features/users/GetIdentityProfile/GetIdentityProfileUseCase.d.ts

@@ -0,0 +1,13 @@
+import { GetIdentityProfileUseCase as UseCaseAbstraction } from "./abstractions.js";
+import { TenantContext } from "../../../features/tenancy/TenantContext/index.js";
+import { GetTenantByIdUseCase } from "../../../features/tenancy/GetTenantById/index.js";
+import { AdminUsersRepository } from "../../../features/users/shared/abstractions.js";
+declare class GetIdentityProfileUseCaseImpl implements UseCaseAbstraction.Interface {
+    private tenantContext;
+    private getTenantUseCase;
+    private repository;
+    constructor(tenantContext: TenantContext.Interface, getTenantUseCase: GetTenantByIdUseCase.Interface, repository: AdminUsersRepository.Interface);
+    execute(identityId: string): UseCaseAbstraction.Return;
+}
+export declare const GetIdentityProfileUseCase: import("@webiny/di").Implementation<typeof GetIdentityProfileUseCaseImpl>;
+export {};

package/features/users/GetIdentityProfile/GetIdentityProfileUseCase.js

@@ -0,0 +1,39 @@
+import { Result, createImplementation } from "@webiny/feature/api";
+import { GetIdentityProfileUseCase } from "./abstractions.js";
+import { TenantContext } from "../../tenancy/TenantContext/index.js";
+import { GetTenantByIdUseCase } from "../../tenancy/GetTenantById/index.js";
+import { AdminUsersRepository } from "../shared/abstractions.js";
+class GetIdentityProfileUseCaseImpl {
+    constructor(tenantContext, getTenantUseCase, repository){
+        this.tenantContext = tenantContext;
+        this.getTenantUseCase = getTenantUseCase;
+        this.repository = repository;
+    }
+    async execute(identityId) {
+        const adminUserResult = await this.repository.get({
+            id: identityId
+        });
+        if (adminUserResult.isOk()) return Result.ok(adminUserResult.value);
+        const tenant = this.tenantContext.getTenant();
+        if (!tenant.parent) return Result.fail(adminUserResult.error);
+        const parentTenantResult = await this.getTenantUseCase.execute(tenant.parent);
+        if (parentTenantResult.isFail()) return Result.fail(adminUserResult.error);
+        const parentTenantUserResult = await this.tenantContext.withTenant(parentTenantResult.value, async ()=>this.repository.get({
+                id: identityId
+            }));
+        if (parentTenantUserResult.isFail()) return Result.fail(parentTenantUserResult.error);
+        return Result.ok(parentTenantUserResult.value);
+    }
+}
+const GetIdentityProfileUseCase_GetIdentityProfileUseCase = createImplementation({
+    abstraction: GetIdentityProfileUseCase,
+    implementation: GetIdentityProfileUseCaseImpl,
+    dependencies: [
+        TenantContext,
+        GetTenantByIdUseCase,
+        AdminUsersRepository
+    ]
+});
+export { GetIdentityProfileUseCase_GetIdentityProfileUseCase as GetIdentityProfileUseCase };
+
+//# sourceMappingURL=GetIdentityProfileUseCase.js.map

package/features/users/GetIdentityProfile/GetIdentityProfileUseCase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/users/GetIdentityProfile/GetIdentityProfileUseCase.js","sources":["../../../../src/features/users/GetIdentityProfile/GetIdentityProfileUseCase.ts"],"sourcesContent":["import { createImplementation } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport { GetIdentityProfileUseCase as UseCaseAbstraction } from \"./abstractions.js\";\nimport { TenantContext } from \"~/features/tenancy/TenantContext/index.js\";\nimport { GetTenantByIdUseCase } from \"~/features/tenancy/GetTenantById/index.js\";\nimport { AdminUsersRepository } from \"~/features/users/shared/abstractions.js\";\n\nclass GetIdentityProfileUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(\n        private tenantContext: TenantContext.Interface,\n        private getTenantUseCase: GetTenantByIdUseCase.Interface,\n        private repository: AdminUsersRepository.Interface\n    ) {}\n\n    async execute(identityId: string): UseCaseAbstraction.Return {\n        // Try to get user from the current tenant\n        const adminUserResult = await this.repository.get({ id: identityId });\n\n        if (adminUserResult.isOk()) {\n            return Result.ok(adminUserResult.value);\n        }\n\n        // If not found in current tenant, try parent tenant\n        const tenant = this.tenantContext.getTenant();\n\n        if (!tenant.parent) {\n            // No parent tenant, return the error\n            return Result.fail(adminUserResult.error);\n        }\n\n        const parentTenantResult = await this.getTenantUseCase.execute(tenant.parent);\n\n        if (parentTenantResult.isFail()) {\n            return Result.fail(adminUserResult.error);\n        }\n\n        const parentTenantUserResult = await this.tenantContext.withTenant(\n            parentTenantResult.value,\n            async () => {\n                return this.repository.get({ id: identityId });\n            }\n        );\n\n        if (parentTenantUserResult.isFail()) {\n            return Result.fail(parentTenantUserResult.error);\n        }\n\n        return Result.ok(parentTenantUserResult.value);\n    }\n}\n\nexport const GetIdentityProfileUseCase = createImplementation({\n    abstraction: UseCaseAbstraction,\n    implementation: GetIdentityProfileUseCaseImpl,\n    dependencies: [TenantContext, GetTenantByIdUseCase, AdminUsersRepository]\n});\n"],"names":["GetIdentityProfileUseCaseImpl","tenantContext","getTenantUseCase","repository","identityId","adminUserResult","Result","tenant","parentTenantResult","parentTenantUserResult","GetIdentityProfileUseCase","createImplementation","UseCaseAbstraction","TenantContext","GetTenantByIdUseCase","AdminUsersRepository"],"mappings":";;;;;AAOA,MAAMA;IACF,YACYC,aAAsC,EACtCC,gBAAgD,EAChDC,UAA0C,CACpD;aAHUF,aAAa,GAAbA;aACAC,gBAAgB,GAAhBA;aACAC,UAAU,GAAVA;IACT;IAEH,MAAM,QAAQC,UAAkB,EAA6B;QAEzD,MAAMC,kBAAkB,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,IAAID;QAAW;QAEnE,IAAIC,gBAAgB,IAAI,IACpB,OAAOC,OAAO,EAAE,CAACD,gBAAgB,KAAK;QAI1C,MAAME,SAAS,IAAI,CAAC,aAAa,CAAC,SAAS;QAE3C,IAAI,CAACA,OAAO,MAAM,EAEd,OAAOD,OAAO,IAAI,CAACD,gBAAgB,KAAK;QAG5C,MAAMG,qBAAqB,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAACD,OAAO,MAAM;QAE5E,IAAIC,mBAAmB,MAAM,IACzB,OAAOF,OAAO,IAAI,CAACD,gBAAgB,KAAK;QAG5C,MAAMI,yBAAyB,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAC9DD,mBAAmB,KAAK,EACxB,UACW,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,IAAIJ;YAAW;QAIpD,IAAIK,uBAAuB,MAAM,IAC7B,OAAOH,OAAO,IAAI,CAACG,uBAAuB,KAAK;QAGnD,OAAOH,OAAO,EAAE,CAACG,uBAAuB,KAAK;IACjD;AACJ;AAEO,MAAMC,sDAA4BC,qBAAqB;IAC1D,aAAaC;IACb,gBAAgBZ;IAChB,cAAc;QAACa;QAAeC;QAAsBC;KAAqB;AAC7E"}

package/features/users/GetIdentityProfile/abstractions.d.ts

@@ -0,0 +1,18 @@
+import { Result } from "@webiny/feature/api";
+import type { AdminUser } from "../../../features/users/shared/types.js";
+import { AdminUsersRepository } from "../../../features/users/shared/abstractions.js";
+import { NotAuthorizedError } from "../../../features/users/shared/errors.js";
+export interface IGetIdentityProfileErrors {
+    notAuthorized: NotAuthorizedError;
+}
+type GetIdentityProfileError = IGetIdentityProfileErrors[keyof IGetIdentityProfileErrors] | AdminUsersRepository.Error;
+export interface IGetIdentityProfile {
+    execute(identityId: string): Promise<Result<AdminUser, GetIdentityProfileError>>;
+}
+export declare const GetIdentityProfileUseCase: import("@webiny/di").Abstraction<IGetIdentityProfile>;
+export declare namespace GetIdentityProfileUseCase {
+    type Interface = IGetIdentityProfile;
+    type Return = Promise<Result<AdminUser, GetIdentityProfileError>>;
+    type Error = GetIdentityProfileError;
+}
+export {};

package/features/users/GetIdentityProfile/abstractions.js

@@ -0,0 +1,5 @@
+import { createAbstraction } from "@webiny/feature/api";
+const GetIdentityProfileUseCase = createAbstraction("GetIdentityProfileUseCase");
+export { GetIdentityProfileUseCase };
+
+//# sourceMappingURL=abstractions.js.map

package/features/users/GetIdentityProfile/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/users/GetIdentityProfile/abstractions.js","sources":["../../../../src/features/users/GetIdentityProfile/abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport type { AdminUser } from \"~/features/users/shared/types.js\";\nimport { AdminUsersRepository } from \"~/features/users/shared/abstractions.js\";\nimport { NotAuthorizedError } from \"~/features/users/shared/errors.js\";\n\n// Use case specific errors\nexport interface IGetIdentityProfileErrors {\n    notAuthorized: NotAuthorizedError;\n}\n\n// Combined error type (use case errors + repository errors)\ntype GetIdentityProfileError =\n    | IGetIdentityProfileErrors[keyof IGetIdentityProfileErrors]\n    | AdminUsersRepository.Error;\n\n// Use case interface\nexport interface IGetIdentityProfile {\n    execute(identityId: string): Promise<Result<AdminUser, GetIdentityProfileError>>;\n}\n\n// Abstraction constant\nexport const GetIdentityProfileUseCase = createAbstraction<IGetIdentityProfile>(\n    \"GetIdentityProfileUseCase\"\n);\n\n// Namespace exports\nexport namespace GetIdentityProfileUseCase {\n    export type Interface = IGetIdentityProfile;\n    export type Return = Promise<Result<AdminUser, GetIdentityProfileError>>;\n    export type Error = GetIdentityProfileError;\n}\n"],"names":["GetIdentityProfileUseCase","createAbstraction"],"mappings":";AAsBO,MAAMA,4BAA4BC,kBACrC"}

package/features/users/GetIdentityProfile/feature.d.ts

@@ -0,0 +1,4 @@
+export declare const GetIdentityProfileFeature: {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
+};

package/features/users/GetIdentityProfile/feature.js

@@ -0,0 +1,11 @@
+import { createFeature } from "@webiny/feature/api";
+import { GetIdentityProfileUseCase } from "./GetIdentityProfileUseCase.js";
+const GetIdentityProfileFeature = createFeature({
+    name: "GetIdentityProfile",
+    register (container) {
+        container.register(GetIdentityProfileUseCase);
+    }
+});
+export { GetIdentityProfileFeature };
+
+//# sourceMappingURL=feature.js.map

package/features/users/GetIdentityProfile/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/users/GetIdentityProfile/feature.js","sources":["../../../../src/features/users/GetIdentityProfile/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { GetIdentityProfileUseCase } from \"./GetIdentityProfileUseCase.js\";\n\nexport const GetIdentityProfileFeature = createFeature({\n    name: \"GetIdentityProfile\",\n    register(container) {\n        container.register(GetIdentityProfileUseCase);\n    }\n});\n"],"names":["GetIdentityProfileFeature","createFeature","container","GetIdentityProfileUseCase"],"mappings":";;AAGO,MAAMA,4BAA4BC,cAAc;IACnD,MAAM;IACN,UAASC,SAAS;QACdA,UAAU,QAAQ,CAACC;IACvB;AACJ"}

package/features/users/GetIdentityProfile/index.d.ts

@@ -0,0 +1 @@
+export { GetIdentityProfileUseCase } from "./abstractions.js";

package/features/users/GetIdentityProfile/index.js

@@ -0,0 +1 @@
+export { GetIdentityProfileUseCase } from "./abstractions.js";

package/features/users/GetIdentityProfile/types.d.ts

@@ -0,0 +1,11 @@
+export interface IdentityProfile {
+    firstName: string;
+    lastName: string;
+    email?: string;
+    avatar?: {
+        id: string;
+        src: string;
+    } | null;
+    external: boolean;
+    createdOn: string;
+}

package/features/users/GetUser/GetUserUseCase.d.ts

@@ -0,0 +1,14 @@
+import { Result } from "@webiny/feature/api";
+import { IdentityContext } from "../../../features/security/IdentityContext/index.js";
+import { GetUserUseCase as UseCaseAbstraction } from "./abstractions.js";
+import { AdminUsersRepository } from "../../../features/users/shared/abstractions.js";
+import type { AdminUser } from "../../../features/users/shared/types.js";
+import type { GetUserInput } from "../../../features/users/shared/types.js";
+declare class GetUserUseCaseImpl implements UseCaseAbstraction.Interface {
+    private identityContext;
+    private repository;
+    constructor(identityContext: IdentityContext.Interface, repository: AdminUsersRepository.Interface);
+    execute(input: GetUserInput): Promise<Result<AdminUser, UseCaseAbstraction.Error>>;
+}
+export declare const GetUserUseCase: import("@webiny/di").Implementation<typeof GetUserUseCaseImpl>;
+export {};

package/features/users/GetUser/GetUserUseCase.js

@@ -0,0 +1,29 @@
+import { Result, createImplementation } from "@webiny/feature/api";
+import { IdentityContext } from "../../security/IdentityContext/index.js";
+import { GetUserUseCase } from "./abstractions.js";
+import { AdminUsersRepository } from "../shared/abstractions.js";
+import { NotAuthorizedError } from "../shared/errors.js";
+class GetUserUseCaseImpl {
+    constructor(identityContext, repository){
+        this.identityContext = identityContext;
+        this.repository = repository;
+    }
+    async execute(input) {
+        const permission = await this.identityContext.getPermission("adminUsers.user");
+        if (!permission) return Result.fail(new NotAuthorizedError());
+        const result = await this.repository.get(input);
+        if (result.isFail()) return Result.fail(result.error);
+        return Result.ok(result.value);
+    }
+}
+const GetUserUseCase_GetUserUseCase = createImplementation({
+    abstraction: GetUserUseCase,
+    implementation: GetUserUseCaseImpl,
+    dependencies: [
+        IdentityContext,
+        AdminUsersRepository
+    ]
+});
+export { GetUserUseCase_GetUserUseCase as GetUserUseCase };
+
+//# sourceMappingURL=GetUserUseCase.js.map

package/features/users/GetUser/GetUserUseCase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/users/GetUser/GetUserUseCase.js","sources":["../../../../src/features/users/GetUser/GetUserUseCase.ts"],"sourcesContent":["import { createImplementation } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport { IdentityContext } from \"~/features/security/IdentityContext/index.js\";\nimport { GetUserUseCase as UseCaseAbstraction } from \"./abstractions.js\";\nimport { AdminUsersRepository } from \"~/features/users/shared/abstractions.js\";\nimport { NotAuthorizedError } from \"~/features/users/shared/errors.js\";\nimport type { AdminUser } from \"~/features/users/shared/types.js\";\nimport type { GetUserInput } from \"~/features/users/shared/types.js\";\n\nclass GetUserUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(\n        private identityContext: IdentityContext.Interface,\n        private repository: AdminUsersRepository.Interface\n    ) {}\n\n    async execute(input: GetUserInput): Promise<Result<AdminUser, UseCaseAbstraction.Error>> {\n        // 1. Check permission\n        const permission = await this.identityContext.getPermission(\"adminUsers.user\");\n        if (!permission) {\n            return Result.fail(new NotAuthorizedError());\n        }\n\n        // 2. Get user from repository\n        const result = await this.repository.get(input);\n        if (result.isFail()) {\n            return Result.fail(result.error);\n        }\n\n        return Result.ok(result.value);\n    }\n}\n\nexport const GetUserUseCase = createImplementation({\n    abstraction: UseCaseAbstraction,\n    implementation: GetUserUseCaseImpl,\n    dependencies: [IdentityContext, AdminUsersRepository]\n});\n"],"names":["GetUserUseCaseImpl","identityContext","repository","input","permission","Result","NotAuthorizedError","result","GetUserUseCase","createImplementation","UseCaseAbstraction","IdentityContext","AdminUsersRepository"],"mappings":";;;;;AASA,MAAMA;IACF,YACYC,eAA0C,EAC1CC,UAA0C,CACpD;aAFUD,eAAe,GAAfA;aACAC,UAAU,GAAVA;IACT;IAEH,MAAM,QAAQC,KAAmB,EAAwD;QAErF,MAAMC,aAAa,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC;QAC5D,IAAI,CAACA,YACD,OAAOC,OAAO,IAAI,CAAC,IAAIC;QAI3B,MAAMC,SAAS,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAACJ;QACzC,IAAII,OAAO,MAAM,IACb,OAAOF,OAAO,IAAI,CAACE,OAAO,KAAK;QAGnC,OAAOF,OAAO,EAAE,CAACE,OAAO,KAAK;IACjC;AACJ;AAEO,MAAMC,gCAAiBC,qBAAqB;IAC/C,aAAaC;IACb,gBAAgBV;IAChB,cAAc;QAACW;QAAiBC;KAAqB;AACzD"}

package/features/users/GetUser/abstractions.d.ts

@@ -0,0 +1,19 @@
+import { Result } from "@webiny/feature/api";
+import type { AdminUser } from "../../../features/users/shared/types.js";
+import type { GetUserInput } from "../../../features/users/shared/types.js";
+import { AdminUsersRepository } from "../../../features/users/shared/abstractions.js";
+import { NotAuthorizedError } from "../../../features/users/shared/errors.js";
+export interface IGetUserErrors {
+    notAuthorized: NotAuthorizedError;
+}
+type GetUserError = IGetUserErrors[keyof IGetUserErrors] | AdminUsersRepository.Error;
+export interface IGetUser {
+    execute(input: GetUserInput): Promise<Result<AdminUser, GetUserError>>;
+}
+/** Retrieve an admin user. */
+export declare const GetUserUseCase: import("@webiny/di").Abstraction<IGetUser>;
+export declare namespace GetUserUseCase {
+    type Interface = IGetUser;
+    type Error = GetUserError;
+}
+export {};

package/features/users/GetUser/abstractions.js

@@ -0,0 +1,5 @@
+import { createAbstraction } from "@webiny/feature/api";
+const GetUserUseCase = createAbstraction("GetUserUseCase");
+export { GetUserUseCase };
+
+//# sourceMappingURL=abstractions.js.map

package/features/users/GetUser/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/users/GetUser/abstractions.js","sources":["../../../../src/features/users/GetUser/abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport type { AdminUser } from \"~/features/users/shared/types.js\";\nimport type { GetUserInput } from \"~/features/users/shared/types.js\";\nimport { AdminUsersRepository } from \"~/features/users/shared/abstractions.js\";\nimport { NotAuthorizedError } from \"~/features/users/shared/errors.js\";\n\n// Use case specific errors\nexport interface IGetUserErrors {\n    notAuthorized: NotAuthorizedError;\n}\n\n// Combined error type (use case errors + repository errors)\ntype GetUserError = IGetUserErrors[keyof IGetUserErrors] | AdminUsersRepository.Error;\n\n// Use case interface\nexport interface IGetUser {\n    execute(input: GetUserInput): Promise<Result<AdminUser, GetUserError>>;\n}\n\n/** Retrieve an admin user. */\nexport const GetUserUseCase = createAbstraction<IGetUser>(\"GetUserUseCase\");\n\n// Namespace exports\nexport namespace GetUserUseCase {\n    export type Interface = IGetUser;\n    export type Error = GetUserError;\n}\n"],"names":["GetUserUseCase","createAbstraction"],"mappings":";AAqBO,MAAMA,iBAAiBC,kBAA4B"}

package/features/users/GetUser/feature.d.ts

@@ -0,0 +1,4 @@
+export declare const GetUserFeature: {
+    name: string;
+    register(container: import("@webiny/di").Container): void;
+};

package/features/users/GetUser/feature.js

@@ -0,0 +1,11 @@
+import { createFeature } from "@webiny/feature/api";
+import { GetUserUseCase } from "./GetUserUseCase.js";
+const GetUserFeature = createFeature({
+    name: "GetUser",
+    register (container) {
+        container.register(GetUserUseCase);
+    }
+});
+export { GetUserFeature };
+
+//# sourceMappingURL=feature.js.map

package/features/users/GetUser/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/users/GetUser/feature.js","sources":["../../../../src/features/users/GetUser/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { GetUserUseCase } from \"./GetUserUseCase.js\";\n\nexport const GetUserFeature = createFeature({\n    name: \"GetUser\",\n    register(container) {\n        container.register(GetUserUseCase);\n    }\n});\n"],"names":["GetUserFeature","createFeature","container","GetUserUseCase"],"mappings":";;AAGO,MAAMA,iBAAiBC,cAAc;IACxC,MAAM;IACN,UAASC,SAAS;QACdA,UAAU,QAAQ,CAACC;IACvB;AACJ"}

package/features/users/GetUser/index.d.ts

@@ -0,0 +1 @@
+export * from "./abstractions.js";