@webiny/api-core 0.0.0-unstable.61c048f412

package/features/tenancy/shared/TenantCache.js

@@ -0,0 +1,20 @@
+import DataLoader from "dataloader";
+export class TenantCache {
+  constructor(batchLoadFn) {
+    this.loader = new DataLoader(batchLoadFn);
+  }
+  async get(id) {
+    return await this.loader.load(id);
+  }
+  async getMany(ids) {
+    return await this.loader.loadMany(ids);
+  }
+  clear(id) {
+    this.loader.clear(id);
+  }
+  prime(id, tenant) {
+    this.loader.prime(id, tenant);
+  }
+}
+
+//# sourceMappingURL=TenantCache.js.map

package/features/tenancy/shared/TenantCache.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["DataLoader","TenantCache","constructor","batchLoadFn","loader","get","id","load","getMany","ids","loadMany","clear","prime","tenant"],"sources":["TenantCache.ts"],"sourcesContent":["import DataLoader from \"dataloader\";\nimport type { TenantCache as CacheAbstraction } from \"./abstractions.js\";\nimport type { Tenant } from \"~/types/tenancy.js\";\n\nexport interface TenantCacheBatchLoader {\n    (ids: readonly string[]): Promise<Tenant[]>;\n}\n\nexport class TenantCache implements CacheAbstraction.Interface {\n    private loader: DataLoader<string, Tenant>;\n\n    constructor(batchLoadFn: TenantCacheBatchLoader) {\n        this.loader = new DataLoader<string, Tenant>(batchLoadFn);\n    }\n\n    async get(id: string): Promise<Tenant> {\n        return (await this.loader.load(id)) as Tenant;\n    }\n\n    async getMany(ids: readonly string[]): Promise<Tenant[]> {\n        return (await this.loader.loadMany(ids)) as Tenant[];\n    }\n\n    clear(id: string): void {\n        this.loader.clear(id);\n    }\n\n    prime(id: string, tenant: Tenant | undefined): void {\n        this.loader.prime(id, tenant as Tenant);\n    }\n}\n"],"mappings":"AAAA,OAAOA,UAAU,MAAM,YAAY;AAQnC,OAAO,MAAMC,WAAW,CAAuC;EAG3DC,WAAWA,CAACC,WAAmC,EAAE;IAC7C,IAAI,CAACC,MAAM,GAAG,IAAIJ,UAAU,CAAiBG,WAAW,CAAC;EAC7D;EAEA,MAAME,GAAGA,CAACC,EAAU,EAAmB;IACnC,OAAQ,MAAM,IAAI,CAACF,MAAM,CAACG,IAAI,CAACD,EAAE,CAAC;EACtC;EAEA,MAAME,OAAOA,CAACC,GAAsB,EAAqB;IACrD,OAAQ,MAAM,IAAI,CAACL,MAAM,CAACM,QAAQ,CAACD,GAAG,CAAC;EAC3C;EAEAE,KAAKA,CAACL,EAAU,EAAQ;IACpB,IAAI,CAACF,MAAM,CAACO,KAAK,CAACL,EAAE,CAAC;EACzB;EAEAM,KAAKA,CAACN,EAAU,EAAEO,MAA0B,EAAQ;IAChD,IAAI,CAACT,MAAM,CAACQ,KAAK,CAACN,EAAE,EAAEO,MAAgB,CAAC;EAC3C;AACJ","ignoreList":[]}

package/features/tenancy/shared/abstractions.d.ts

@@ -0,0 +1,11 @@
+import type { Tenant } from "../../../types/tenancy.js";
+export interface ITenantCache {
+    get(id: string): Promise<Tenant>;
+    getMany(ids: readonly string[]): Promise<Tenant[]>;
+    clear(id: string): void;
+    prime(id: string, tenant: Tenant | undefined): void;
+}
+export declare const TenantCache: import("@webiny/di").Abstraction<ITenantCache>;
+export declare namespace TenantCache {
+    type Interface = ITenantCache;
+}

package/features/tenancy/shared/abstractions.js

@@ -0,0 +1,4 @@
+import { createAbstraction } from "@webiny/feature/api";
+export const TenantCache = createAbstraction("TenantCache");
+
+//# sourceMappingURL=abstractions.js.map

package/features/tenancy/shared/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createAbstraction","TenantCache"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { Tenant } from \"~/types/tenancy.js\";\n\nexport interface ITenantCache {\n    get(id: string): Promise<Tenant>;\n    getMany(ids: readonly string[]): Promise<Tenant[]>;\n    clear(id: string): void;\n    prime(id: string, tenant: Tenant | undefined): void;\n}\n\nexport const TenantCache = createAbstraction<ITenantCache>(\"TenantCache\");\n\nexport namespace TenantCache {\n    export type Interface = ITenantCache;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AAUvD,OAAO,MAAMC,WAAW,GAAGD,iBAAiB,CAAe,aAAa,CAAC","ignoreList":[]}

package/features/tenancy/shared/storageOperations.d.ts

@@ -0,0 +1,9 @@
+import type { TenancyStorageOperations as ITenancyStorageOperations } from "../../../types/tenancy.js";
+/**
+ * Abstraction for Tenancy Storage Operations
+ * This allows the legacy storage operations to be injected through DI
+ */
+export declare const TenancyStorageOperations: import("@webiny/di").Abstraction<ITenancyStorageOperations>;
+export declare namespace TenancyStorageOperations {
+    type Interface = ITenancyStorageOperations;
+}

package/features/tenancy/shared/storageOperations.js

@@ -0,0 +1,8 @@
+import { createAbstraction } from "@webiny/feature/api";
+/**
+ * Abstraction for Tenancy Storage Operations
+ * This allows the legacy storage operations to be injected through DI
+ */
+export const TenancyStorageOperations = createAbstraction("TenancyStorageOperations");
+
+//# sourceMappingURL=storageOperations.js.map

package/features/tenancy/shared/storageOperations.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createAbstraction","TenancyStorageOperations"],"sources":["storageOperations.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { TenancyStorageOperations as ITenancyStorageOperations } from \"~/types/tenancy.js\";\n\n/**\n * Abstraction for Tenancy Storage Operations\n * This allows the legacy storage operations to be injected through DI\n */\nexport const TenancyStorageOperations = createAbstraction<ITenancyStorageOperations>(\n    \"TenancyStorageOperations\"\n);\n\nexport namespace TenancyStorageOperations {\n    export type Interface = ITenancyStorageOperations;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AAGvD;AACA;AACA;AACA;AACA,OAAO,MAAMC,wBAAwB,GAAGD,iBAAiB,CACrD,0BACJ,CAAC","ignoreList":[]}

package/features/users/AdminUsersFeature.d.ts

@@ -0,0 +1 @@
+export declare const AdminUsersFeature: import("@webiny/feature/api/createFeature.js").FeatureDefinition<import("../../types/users.js").AdminUsersStorageOperations>;

package/features/users/AdminUsersFeature.js

@@ -0,0 +1,33 @@
+import { createFeature } from "@webiny/feature/api";
+import { AdminUsersRepository } from "./shared/AdminUsersRepository.js";
+import { GetUserFeature } from "./GetUser/feature.js";
+import { GetIdentityProfileFeature } from "./GetIdentityProfile/feature.js";
+import { ListUsersFeature } from "./ListUsers/feature.js";
+import { CreateUserFeature } from "./CreateUser/feature.js";
+import { UpdateUserFeature } from "./UpdateUser/feature.js";
+import { DeleteUserFeature } from "./DeleteUser/feature.js";
+import { ListUserTeamsFeature } from "./ListUserTeams/feature.js";
+import { AdminUsersStorageOperations } from "./shared/storageAbstractions.js";
+import { ExternalIdpUserSyncFeature } from "./ExternalIdpUserSync/index.js";
+export const AdminUsersFeature = createFeature({
+  name: "AdminUsers",
+  register(container, storageOperations) {
+    // Register repository in singleton scope
+    container.register(AdminUsersRepository).inSingletonScope();
+
+    // Register all use cases
+    GetUserFeature.register(container);
+    GetIdentityProfileFeature.register(container);
+    ListUsersFeature.register(container);
+    ListUserTeamsFeature.register(container);
+    CreateUserFeature.register(container);
+    UpdateUserFeature.register(container);
+    DeleteUserFeature.register(container);
+    ExternalIdpUserSyncFeature.register(container);
+
+    // Legacy storage ops
+    container.registerInstance(AdminUsersStorageOperations, storageOperations);
+  }
+});
+
+//# sourceMappingURL=AdminUsersFeature.js.map

package/features/users/AdminUsersFeature.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createFeature","AdminUsersRepository","GetUserFeature","GetIdentityProfileFeature","ListUsersFeature","CreateUserFeature","UpdateUserFeature","DeleteUserFeature","ListUserTeamsFeature","AdminUsersStorageOperations","ExternalIdpUserSyncFeature","AdminUsersFeature","name","register","container","storageOperations","inSingletonScope","registerInstance"],"sources":["AdminUsersFeature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { AdminUsersRepository } from \"./shared/AdminUsersRepository.js\";\nimport { GetUserFeature } from \"./GetUser/feature.js\";\nimport { GetIdentityProfileFeature } from \"./GetIdentityProfile/feature.js\";\nimport { ListUsersFeature } from \"./ListUsers/feature.js\";\nimport { CreateUserFeature } from \"./CreateUser/feature.js\";\nimport { UpdateUserFeature } from \"./UpdateUser/feature.js\";\nimport { DeleteUserFeature } from \"./DeleteUser/feature.js\";\nimport { ListUserTeamsFeature } from \"./ListUserTeams/feature.js\";\nimport { AdminUsersStorageOperations } from \"./shared/storageAbstractions.js\";\nimport { ExternalIdpUserSyncFeature } from \"./ExternalIdpUserSync/index.js\";\n\nexport const AdminUsersFeature = createFeature({\n    name: \"AdminUsers\",\n    register(container, storageOperations: AdminUsersStorageOperations.Interface) {\n        // Register repository in singleton scope\n        container.register(AdminUsersRepository).inSingletonScope();\n\n        // Register all use cases\n        GetUserFeature.register(container);\n        GetIdentityProfileFeature.register(container);\n        ListUsersFeature.register(container);\n        ListUserTeamsFeature.register(container);\n        CreateUserFeature.register(container);\n        UpdateUserFeature.register(container);\n        DeleteUserFeature.register(container);\n        ExternalIdpUserSyncFeature.register(container);\n\n        // Legacy storage ops\n        container.registerInstance(AdminUsersStorageOperations, storageOperations);\n    }\n});\n"],"mappings":"AAAA,SAASA,aAAa,QAAQ,qBAAqB;AACnD,SAASC,oBAAoB;AAC7B,SAASC,cAAc;AACvB,SAASC,yBAAyB;AAClC,SAASC,gBAAgB;AACzB,SAASC,iBAAiB;AAC1B,SAASC,iBAAiB;AAC1B,SAASC,iBAAiB;AAC1B,SAASC,oBAAoB;AAC7B,SAASC,2BAA2B;AACpC,SAASC,0BAA0B;AAEnC,OAAO,MAAMC,iBAAiB,GAAGX,aAAa,CAAC;EAC3CY,IAAI,EAAE,YAAY;EAClBC,QAAQA,CAACC,SAAS,EAAEC,iBAAwD,EAAE;IAC1E;IACAD,SAAS,CAACD,QAAQ,CAACZ,oBAAoB,CAAC,CAACe,gBAAgB,CAAC,CAAC;;IAE3D;IACAd,cAAc,CAACW,QAAQ,CAACC,SAAS,CAAC;IAClCX,yBAAyB,CAACU,QAAQ,CAACC,SAAS,CAAC;IAC7CV,gBAAgB,CAACS,QAAQ,CAACC,SAAS,CAAC;IACpCN,oBAAoB,CAACK,QAAQ,CAACC,SAAS,CAAC;IACxCT,iBAAiB,CAACQ,QAAQ,CAACC,SAAS,CAAC;IACrCR,iBAAiB,CAACO,QAAQ,CAACC,SAAS,CAAC;IACrCP,iBAAiB,CAACM,QAAQ,CAACC,SAAS,CAAC;IACrCJ,0BAA0B,CAACG,QAAQ,CAACC,SAAS,CAAC;;IAE9C;IACAA,SAAS,CAACG,gBAAgB,CAACR,2BAA2B,EAAEM,iBAAiB,CAAC;EAC9E;AACJ,CAAC,CAAC","ignoreList":[]}

package/features/users/CreateUser/CreateUserUseCase.d.ts

@@ -0,0 +1,19 @@
+import { Result } from "@webiny/feature/api";
+import { TenantContext } from "../../../features/tenancy/TenantContext/index.js";
+import { IdentityContext } from "../../../features/security/IdentityContext/index.js";
+import { EventPublisher } from "../../../features/eventPublisher/index.js";
+import { CreateUserUseCase as UseCaseAbstraction } from "./abstractions.js";
+import { AdminUsersRepository } from "../../../features/users/shared/abstractions.js";
+import type { AdminUser } from "../../../features/users/shared/types.js";
+import type { CreateUserInput } from "../../../features/users/shared/types.js";
+declare class CreateUserUseCaseImpl implements UseCaseAbstraction.Interface {
+    private tenantContext;
+    private identityContext;
+    private eventPublisher;
+    private repository;
+    constructor(tenantContext: TenantContext.Interface, identityContext: IdentityContext.Interface, eventPublisher: EventPublisher.Interface, repository: AdminUsersRepository.Interface);
+    execute(input: CreateUserInput): Promise<Result<AdminUser, UseCaseAbstraction.Error>>;
+    private getDisplayName;
+}
+export declare const CreateUserUseCase: import("@webiny/di").Implementation<typeof CreateUserUseCaseImpl>;
+export {};

package/features/users/CreateUser/CreateUserUseCase.js

@@ -0,0 +1,114 @@
+import { mdbid } from "@webiny/utils";
+import { createImplementation } from "@webiny/feature/api";
+import { Result } from "@webiny/feature/api";
+import { TenantContext } from "../../tenancy/TenantContext/index.js";
+import { IdentityContext } from "../../security/IdentityContext/index.js";
+import { EventPublisher } from "../../eventPublisher/index.js";
+import { CreateUserUseCase as UseCaseAbstraction } from "./abstractions.js";
+import { AdminUsersRepository } from "../shared/abstractions.js";
+import { createUserValidation } from "./schema.js";
+import { NotAuthorizedError, EmailTakenError, UserValidationError } from "../shared/errors.js";
+import { UserBeforeCreateEvent, UserAfterCreateEvent } from "./events.js";
+class CreateUserUseCaseImpl {
+  constructor(tenantContext, identityContext, eventPublisher, repository) {
+    this.tenantContext = tenantContext;
+    this.identityContext = identityContext;
+    this.eventPublisher = eventPublisher;
+    this.repository = repository;
+  }
+  async execute(input) {
+    // 1. Check permission
+    const permission = await this.identityContext.getPermission("adminUsers.user");
+    if (!permission) {
+      return Result.fail(new NotAuthorizedError());
+    }
+
+    // 2. Validate input
+    const validation = createUserValidation.safeParse(input);
+    if (!validation.success) {
+      return Result.fail(new UserValidationError(validation.error.errors[0].message));
+    }
+    const data = validation.data;
+
+    // 3. Check email uniqueness
+    const existingUserResult = await this.repository.get({
+      email: data.email
+    });
+    if (existingUserResult.isOk()) {
+      // This means the email is taken!
+      return Result.fail(new EmailTakenError(data.email));
+    }
+    if (existingUserResult.error.code !== "AdminUser/NotFound") {
+      return Result.fail(existingUserResult.error);
+    }
+
+    // 4. Generate ID if not provided
+    const id = data.id || mdbid();
+
+    // 5. Generate display name
+    const displayName = this.getDisplayName(data);
+
+    // 6. Get tenant and identity
+    const tenant = this.tenantContext.getTenant().id;
+    const identity = this.identityContext.getIdentity();
+    let createdBy = null;
+    if (identity) {
+      createdBy = {
+        id: identity.id,
+        displayName: identity.displayName,
+        type: identity.type
+      };
+    }
+
+    // 7. Create user entity
+    const user = {
+      ...data,
+      id,
+      email: data.email,
+      displayName,
+      createdOn: new Date().toISOString(),
+      createdBy,
+      tenant
+    };
+
+    // 8. Publish before event
+    await this.eventPublisher.publish(new UserBeforeCreateEvent({
+      user,
+      input: data
+    }));
+
+    // 10. Create user via repository
+    const result = await this.repository.create(user);
+    if (result.isFail()) {
+      return Result.fail(result.error);
+    }
+
+    // 11. Publish after event
+    await this.eventPublisher.publish(new UserAfterCreateEvent({
+      user: result.value,
+      input: data
+    }));
+    return Result.ok(result.value);
+  }
+  getDisplayName(data) {
+    // If display name is not set, try to get it from the first name and last name.
+    // If first name and last name are not set, use the e-mail address.
+    if (data.displayName) {
+      return data.displayName;
+    }
+    if (data.firstName || data.lastName) {
+      return `${data.firstName || ""} ${data.lastName || ""}`.trim();
+    }
+    if (data.email) {
+      return data.email;
+    }
+    return "Missing display name";
+  }
+}
+export const CreateUserUseCase = createImplementation({
+  abstraction: UseCaseAbstraction,
+  implementation: CreateUserUseCaseImpl,
+  dependencies: [TenantContext, IdentityContext, EventPublisher, AdminUsersRepository]
+});
+
+//# sourceMappingURL=CreateUserUseCase.js.map

package/features/users/CreateUser/CreateUserUseCase.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["mdbid","createImplementation","Result","TenantContext","IdentityContext","EventPublisher","CreateUserUseCase","UseCaseAbstraction","AdminUsersRepository","createUserValidation","NotAuthorizedError","EmailTakenError","UserValidationError","UserBeforeCreateEvent","UserAfterCreateEvent","CreateUserUseCaseImpl","constructor","tenantContext","identityContext","eventPublisher","repository","execute","input","permission","getPermission","fail","validation","safeParse","success","error","errors","message","data","existingUserResult","get","email","isOk","code","id","displayName","getDisplayName","tenant","getTenant","identity","getIdentity","createdBy","type","user","createdOn","Date","toISOString","publish","result","create","isFail","value","ok","firstName","lastName","trim","abstraction","implementation","dependencies"],"sources":["CreateUserUseCase.ts"],"sourcesContent":["import { mdbid } from \"@webiny/utils\";\nimport { createImplementation } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport { TenantContext } from \"~/features/tenancy/TenantContext/index.js\";\nimport { IdentityContext } from \"~/features/security/IdentityContext/index.js\";\nimport { EventPublisher } from \"~/features/eventPublisher/index.js\";\nimport { CreateUserUseCase as UseCaseAbstraction } from \"./abstractions.js\";\nimport { AdminUsersRepository } from \"~/features/users/shared/abstractions.js\";\nimport { createUserValidation } from \"./schema.js\";\nimport {\n    NotAuthorizedError,\n    EmailTakenError,\n    UserValidationError\n} from \"~/features/users/shared/errors.js\";\nimport { UserBeforeCreateEvent, UserAfterCreateEvent } from \"./events.js\";\nimport type { AdminUser } from \"~/features/users/shared/types.js\";\nimport type { CreateUserInput } from \"~/features/users/shared/types.js\";\nimport type { CreatedBy } from \"~/types/users.js\";\n\nclass CreateUserUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(\n        private tenantContext: TenantContext.Interface,\n        private identityContext: IdentityContext.Interface,\n        private eventPublisher: EventPublisher.Interface,\n        private repository: AdminUsersRepository.Interface\n    ) {}\n\n    async execute(input: CreateUserInput): Promise<Result<AdminUser, UseCaseAbstraction.Error>> {\n        // 1. Check permission\n        const permission = await this.identityContext.getPermission(\"adminUsers.user\");\n        if (!permission) {\n            return Result.fail(new NotAuthorizedError());\n        }\n\n        // 2. Validate input\n        const validation = createUserValidation.safeParse(input);\n        if (!validation.success) {\n            return Result.fail(new UserValidationError(validation.error.errors[0].message));\n        }\n\n        const data = validation.data;\n\n        // 3. Check email uniqueness\n        const existingUserResult = await this.repository.get({ email: data.email });\n        if (existingUserResult.isOk()) {\n            // This means the email is taken!\n            return Result.fail(new EmailTakenError(data.email));\n        }\n\n        if (existingUserResult.error.code !== \"AdminUser/NotFound\") {\n            return Result.fail(existingUserResult.error);\n        }\n\n        // 4. Generate ID if not provided\n        const id = data.id || mdbid();\n\n        // 5. Generate display name\n        const displayName = this.getDisplayName(data);\n\n        // 6. Get tenant and identity\n        const tenant = this.tenantContext.getTenant().id;\n        const identity = this.identityContext.getIdentity();\n\n        let createdBy: CreatedBy | null = null;\n        if (identity) {\n            createdBy = {\n                id: identity.id,\n                displayName: identity.displayName,\n                type: identity.type\n            };\n        }\n\n        // 7. Create user entity\n        const user: AdminUser = {\n            ...data,\n            id,\n            email: data.email,\n            displayName,\n            createdOn: new Date().toISOString(),\n            createdBy,\n            tenant\n        };\n\n        // 8. Publish before event\n        await this.eventPublisher.publish(new UserBeforeCreateEvent({ user, input: data }));\n\n        // 10. Create user via repository\n        const result = await this.repository.create(user);\n        if (result.isFail()) {\n            return Result.fail(result.error);\n        }\n\n        // 11. Publish after event\n        await this.eventPublisher.publish(\n            new UserAfterCreateEvent({ user: result.value, input: data })\n        );\n\n        return Result.ok(result.value);\n    }\n\n    private getDisplayName(data: CreateUserInput): string {\n        // If display name is not set, try to get it from the first name and last name.\n        // If first name and last name are not set, use the e-mail address.\n        if (data.displayName) {\n            return data.displayName;\n        }\n\n        if (data.firstName || data.lastName) {\n            return `${data.firstName || \"\"} ${data.lastName || \"\"}`.trim();\n        }\n\n        if (data.email) {\n            return data.email;\n        }\n\n        return \"Missing display name\";\n    }\n}\n\nexport const CreateUserUseCase = createImplementation({\n    abstraction: UseCaseAbstraction,\n    implementation: CreateUserUseCaseImpl,\n    dependencies: [TenantContext, IdentityContext, EventPublisher, AdminUsersRepository]\n});\n"],"mappings":"AAAA,SAASA,KAAK,QAAQ,eAAe;AACrC,SAASC,oBAAoB,QAAQ,qBAAqB;AAC1D,SAASC,MAAM,QAAQ,qBAAqB;AAC5C,SAASC,aAAa;AACtB,SAASC,eAAe;AACxB,SAASC,cAAc;AACvB,SAASC,iBAAiB,IAAIC,kBAAkB;AAChD,SAASC,oBAAoB;AAC7B,SAASC,oBAAoB;AAC7B,SACIC,kBAAkB,EAClBC,eAAe,EACfC,mBAAmB;AAEvB,SAASC,qBAAqB,EAAEC,oBAAoB;AAKpD,MAAMC,qBAAqB,CAAyC;EAChEC,WAAWA,CACCC,aAAsC,EACtCC,eAA0C,EAC1CC,cAAwC,EACxCC,UAA0C,EACpD;IAAA,KAJUH,aAAsC,GAAtCA,aAAsC;IAAA,KACtCC,eAA0C,GAA1CA,eAA0C;IAAA,KAC1CC,cAAwC,GAAxCA,cAAwC;IAAA,KACxCC,UAA0C,GAA1CA,UAA0C;EACnD;EAEH,MAAMC,OAAOA,CAACC,KAAsB,EAAwD;IACxF;IACA,MAAMC,UAAU,GAAG,MAAM,IAAI,CAACL,eAAe,CAACM,aAAa,CAAC,iBAAiB,CAAC;IAC9E,IAAI,CAACD,UAAU,EAAE;MACb,OAAOrB,MAAM,CAACuB,IAAI,CAAC,IAAIf,kBAAkB,CAAC,CAAC,CAAC;IAChD;;IAEA;IACA,MAAMgB,UAAU,GAAGjB,oBAAoB,CAACkB,SAAS,CAACL,KAAK,CAAC;IACxD,IAAI,CAACI,UAAU,CAACE,OAAO,EAAE;MACrB,OAAO1B,MAAM,CAACuB,IAAI,CAAC,IAAIb,mBAAmB,CAACc,UAAU,CAACG,KAAK,CAACC,MAAM,CAAC,CAAC,CAAC,CAACC,OAAO,CAAC,CAAC;IACnF;IAEA,MAAMC,IAAI,GAAGN,UAAU,CAACM,IAAI;;IAE5B;IACA,MAAMC,kBAAkB,GAAG,MAAM,IAAI,CAACb,UAAU,CAACc,GAAG,CAAC;MAAEC,KAAK,EAAEH,IAAI,CAACG;IAAM,CAAC,CAAC;IAC3E,IAAIF,kBAAkB,CAACG,IAAI,CAAC,CAAC,EAAE;MAC3B;MACA,OAAOlC,MAAM,CAACuB,IAAI,CAAC,IAAId,eAAe,CAACqB,IAAI,CAACG,KAAK,CAAC,CAAC;IACvD;IAEA,IAAIF,kBAAkB,CAACJ,KAAK,CAACQ,IAAI,KAAK,oBAAoB,EAAE;MACxD,OAAOnC,MAAM,CAACuB,IAAI,CAACQ,kBAAkB,CAACJ,KAAK,CAAC;IAChD;;IAEA;IACA,MAAMS,EAAE,GAAGN,IAAI,CAACM,EAAE,IAAItC,KAAK,CAAC,CAAC;;IAE7B;IACA,MAAMuC,WAAW,GAAG,IAAI,CAACC,cAAc,CAACR,IAAI,CAAC;;IAE7C;IACA,MAAMS,MAAM,GAAG,IAAI,CAACxB,aAAa,CAACyB,SAAS,CAAC,CAAC,CAACJ,EAAE;IAChD,MAAMK,QAAQ,GAAG,IAAI,CAACzB,eAAe,CAAC0B,WAAW,CAAC,CAAC;IAEnD,IAAIC,SAA2B,GAAG,IAAI;IACtC,IAAIF,QAAQ,EAAE;MACVE,SAAS,GAAG;QACRP,EAAE,EAAEK,QAAQ,CAACL,EAAE;QACfC,WAAW,EAAEI,QAAQ,CAACJ,WAAW;QACjCO,IAAI,EAAEH,QAAQ,CAACG;MACnB,CAAC;IACL;;IAEA;IACA,MAAMC,IAAe,GAAG;MACpB,GAAGf,IAAI;MACPM,EAAE;MACFH,KAAK,EAAEH,IAAI,CAACG,KAAK;MACjBI,WAAW;MACXS,SAAS,EAAE,IAAIC,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC,CAAC;MACnCL,SAAS;MACTJ;IACJ,CAAC;;IAED;IACA,MAAM,IAAI,CAACtB,cAAc,CAACgC,OAAO,CAAC,IAAItC,qBAAqB,CAAC;MAAEkC,IAAI;MAAEzB,KAAK,EAAEU;IAAK,CAAC,CAAC,CAAC;;IAEnF;IACA,MAAMoB,MAAM,GAAG,MAAM,IAAI,CAAChC,UAAU,CAACiC,MAAM,CAACN,IAAI,CAAC;IACjD,IAAIK,MAAM,CAACE,MAAM,CAAC,CAAC,EAAE;MACjB,OAAOpD,MAAM,CAACuB,IAAI,CAAC2B,MAAM,CAACvB,KAAK,CAAC;IACpC;;IAEA;IACA,MAAM,IAAI,CAACV,cAAc,CAACgC,OAAO,CAC7B,IAAIrC,oBAAoB,CAAC;MAAEiC,IAAI,EAAEK,MAAM,CAACG,KAAK;MAAEjC,KAAK,EAAEU;IAAK,CAAC,CAChE,CAAC;IAED,OAAO9B,MAAM,CAACsD,EAAE,CAACJ,MAAM,CAACG,KAAK,CAAC;EAClC;EAEQf,cAAcA,CAACR,IAAqB,EAAU;IAClD;IACA;IACA,IAAIA,IAAI,CAACO,WAAW,EAAE;MAClB,OAAOP,IAAI,CAACO,WAAW;IAC3B;IAEA,IAAIP,IAAI,CAACyB,SAAS,IAAIzB,IAAI,CAAC0B,QAAQ,EAAE;MACjC,OAAO,GAAG1B,IAAI,CAACyB,SAAS,IAAI,EAAE,IAAIzB,IAAI,CAAC0B,QAAQ,IAAI,EAAE,EAAE,CAACC,IAAI,CAAC,CAAC;IAClE;IAEA,IAAI3B,IAAI,CAACG,KAAK,EAAE;MACZ,OAAOH,IAAI,CAACG,KAAK;IACrB;IAEA,OAAO,sBAAsB;EACjC;AACJ;AAEA,OAAO,MAAM7B,iBAAiB,GAAGL,oBAAoB,CAAC;EAClD2D,WAAW,EAAErD,kBAAkB;EAC/BsD,cAAc,EAAE9C,qBAAqB;EACrC+C,YAAY,EAAE,CAAC3D,aAAa,EAAEC,eAAe,EAAEC,cAAc,EAAEG,oBAAoB;AACvF,CAAC,CAAC","ignoreList":[]}

package/features/users/CreateUser/abstractions.d.ts

@@ -0,0 +1,29 @@
+import { Result } from "@webiny/feature/api";
+import type { AdminUser } from "../../../features/users/shared/types.js";
+import type { CreateUserInput } from "../../../features/users/shared/types.js";
+import { AdminUsersRepository } from "../../../features/users/shared/abstractions.js";
+import { NotAuthorizedError, EmailTakenError, UserValidationError } from "../../../features/users/shared/errors.js";
+export interface ICreateUserErrors {
+    notAuthorized: NotAuthorizedError;
+    userExists: EmailTakenError;
+    validation: UserValidationError;
+}
+type CreateUserError = ICreateUserErrors[keyof ICreateUserErrors] | AdminUsersRepository.Error;
+export interface ICreateUser {
+    execute(input: CreateUserInput): Promise<Result<AdminUser, CreateUserError>>;
+}
+export declare const CreateUserUseCase: import("@webiny/di").Abstraction<ICreateUser>;
+export declare namespace CreateUserUseCase {
+    type Interface = ICreateUser;
+    type Input = CreateUserInput;
+    type Error = CreateUserError;
+}
+export interface UserBeforeCreatePayload {
+    user: AdminUser;
+    input: CreateUserInput;
+}
+export interface UserAfterCreatePayload {
+    user: AdminUser;
+    input: CreateUserInput;
+}
+export {};

package/features/users/CreateUser/abstractions.js

@@ -0,0 +1,16 @@
+import { createAbstraction } from "@webiny/feature/api";
+
+// Use case specific errors
+
+// Combined error type (use case errors + repository errors)
+
+// Use case interface
+
+// Abstraction constant
+export const CreateUserUseCase = createAbstraction("CreateUserUseCase");
+
+// Namespace exports
+
+// Event payload types
+
+//# sourceMappingURL=abstractions.js.map

package/features/users/CreateUser/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createAbstraction","CreateUserUseCase"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport type { AdminUser } from \"~/features/users/shared/types.js\";\nimport type { CreateUserInput } from \"~/features/users/shared/types.js\";\nimport { AdminUsersRepository } from \"~/features/users/shared/abstractions.js\";\nimport {\n    NotAuthorizedError,\n    EmailTakenError,\n    UserValidationError\n} from \"~/features/users/shared/errors.js\";\n\n// Use case specific errors\nexport interface ICreateUserErrors {\n    notAuthorized: NotAuthorizedError;\n    userExists: EmailTakenError;\n    validation: UserValidationError;\n}\n\n// Combined error type (use case errors + repository errors)\ntype CreateUserError = ICreateUserErrors[keyof ICreateUserErrors] | AdminUsersRepository.Error;\n\n// Use case interface\nexport interface ICreateUser {\n    execute(input: CreateUserInput): Promise<Result<AdminUser, CreateUserError>>;\n}\n\n// Abstraction constant\nexport const CreateUserUseCase = createAbstraction<ICreateUser>(\"CreateUserUseCase\");\n\n// Namespace exports\nexport namespace CreateUserUseCase {\n    export type Interface = ICreateUser;\n    export type Input = CreateUserInput;\n    export type Error = CreateUserError;\n}\n\n// Event payload types\nexport interface UserBeforeCreatePayload {\n    user: AdminUser;\n    input: CreateUserInput;\n}\n\nexport interface UserAfterCreatePayload {\n    user: AdminUser;\n    input: CreateUserInput;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;;AAWvD;;AAOA;;AAGA;;AAKA;AACA,OAAO,MAAMC,iBAAiB,GAAGD,iBAAiB,CAAc,mBAAmB,CAAC;;AAEpF;;AAOA","ignoreList":[]}

package/features/users/CreateUser/decorators/CreateUserWithWcpIncrement.d.ts

@@ -0,0 +1,11 @@
+import { CreateUserUseCase } from "../abstractions.js";
+import type { CreateUserInput } from "../../../../features/users/shared/types.js";
+import { WcpContext } from "../../../../features/wcp/WcpContext/index.js";
+declare class CreateUserWithWcpIncrementImpl implements CreateUserUseCase.Interface {
+    private wcp;
+    private decoratee;
+    constructor(wcp: WcpContext.Interface, decoratee: CreateUserUseCase.Interface);
+    execute(input: CreateUserInput): Promise<import("@webiny/feature/api").Result<import("~/features/users/shared/types.js").AdminUser, import("../../shared/errors.js").UserStorageError | import("../../shared/errors.js").UserNotFoundError | import("../../shared/errors.js").EmailTakenError | import("../../shared/errors.js").UserValidationError | import("../../shared/errors.js").NotAuthorizedError>>;
+}
+export declare const CreateUserWithWcpIncrement: typeof CreateUserWithWcpIncrementImpl;
+export {};

package/features/users/CreateUser/decorators/CreateUserWithWcpIncrement.js

@@ -0,0 +1,24 @@
+import { createDecorator } from "@webiny/feature/api";
+import { CreateUserUseCase } from "../abstractions.js";
+import { WcpContext } from "../../../wcp/WcpContext/index.js";
+class CreateUserWithWcpIncrementImpl {
+  constructor(wcp, decoratee) {
+    this.wcp = wcp;
+    this.decoratee = decoratee;
+  }
+  async execute(input) {
+    await this.wcp.incrementSeats();
+    const result = await this.decoratee.execute(input);
+    if (result.isFail()) {
+      await this.wcp.decrementSeats();
+    }
+    return result;
+  }
+}
+export const CreateUserWithWcpIncrement = createDecorator({
+  abstraction: CreateUserUseCase,
+  decorator: CreateUserWithWcpIncrementImpl,
+  dependencies: [WcpContext]
+});
+
+//# sourceMappingURL=CreateUserWithWcpIncrement.js.map

package/features/users/CreateUser/decorators/CreateUserWithWcpIncrement.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createDecorator","CreateUserUseCase","WcpContext","CreateUserWithWcpIncrementImpl","constructor","wcp","decoratee","execute","input","incrementSeats","result","isFail","decrementSeats","CreateUserWithWcpIncrement","abstraction","decorator","dependencies"],"sources":["CreateUserWithWcpIncrement.ts"],"sourcesContent":["import { createDecorator } from \"@webiny/feature/api\";\nimport { CreateUserUseCase } from \"../abstractions.js\";\nimport type { CreateUserInput } from \"~/features/users/shared/types.js\";\nimport { WcpContext } from \"~/features/wcp/WcpContext/index.js\";\n\nclass CreateUserWithWcpIncrementImpl implements CreateUserUseCase.Interface {\n    constructor(\n        private wcp: WcpContext.Interface,\n        private decoratee: CreateUserUseCase.Interface\n    ) {}\n\n    async execute(input: CreateUserInput) {\n        await this.wcp.incrementSeats();\n\n        const result = await this.decoratee.execute(input);\n\n        if (result.isFail()) {\n            await this.wcp.decrementSeats();\n        }\n\n        return result;\n    }\n}\n\nexport const CreateUserWithWcpIncrement = createDecorator({\n    abstraction: CreateUserUseCase,\n    decorator: CreateUserWithWcpIncrementImpl,\n    dependencies: [WcpContext]\n});\n"],"mappings":"AAAA,SAASA,eAAe,QAAQ,qBAAqB;AACrD,SAASC,iBAAiB;AAE1B,SAASC,UAAU;AAEnB,MAAMC,8BAA8B,CAAwC;EACxEC,WAAWA,CACCC,GAAyB,EACzBC,SAAsC,EAChD;IAAA,KAFUD,GAAyB,GAAzBA,GAAyB;IAAA,KACzBC,SAAsC,GAAtCA,SAAsC;EAC/C;EAEH,MAAMC,OAAOA,CAACC,KAAsB,EAAE;IAClC,MAAM,IAAI,CAACH,GAAG,CAACI,cAAc,CAAC,CAAC;IAE/B,MAAMC,MAAM,GAAG,MAAM,IAAI,CAACJ,SAAS,CAACC,OAAO,CAACC,KAAK,CAAC;IAElD,IAAIE,MAAM,CAACC,MAAM,CAAC,CAAC,EAAE;MACjB,MAAM,IAAI,CAACN,GAAG,CAACO,cAAc,CAAC,CAAC;IACnC;IAEA,OAAOF,MAAM;EACjB;AACJ;AAEA,OAAO,MAAMG,0BAA0B,GAAGb,eAAe,CAAC;EACtDc,WAAW,EAAEb,iBAAiB;EAC9Bc,SAAS,EAAEZ,8BAA8B;EACzCa,YAAY,EAAE,CAACd,UAAU;AAC7B,CAAC,CAAC","ignoreList":[]}

package/features/users/CreateUser/events.d.ts

@@ -0,0 +1,21 @@
+import { DomainEvent } from "../../../features/eventPublisher/index.js";
+import type { IEventHandler } from "../../../features/eventPublisher/index.js";
+import type { UserBeforeCreatePayload, UserAfterCreatePayload } from "./abstractions.js";
+export declare class UserBeforeCreateEvent extends DomainEvent<UserBeforeCreatePayload> {
+    eventType: "user.beforeCreate";
+    getHandlerAbstraction(): import("@webiny/di").Abstraction<IEventHandler<UserBeforeCreateEvent>>;
+}
+export declare const UserBeforeCreateHandler: import("@webiny/di").Abstraction<IEventHandler<UserBeforeCreateEvent>>;
+export declare namespace UserBeforeCreateHandler {
+    type Interface = IEventHandler<UserBeforeCreateEvent>;
+    type Event = UserBeforeCreateEvent;
+}
+export declare class UserAfterCreateEvent extends DomainEvent<UserAfterCreatePayload> {
+    eventType: "user.afterCreate";
+    getHandlerAbstraction(): import("@webiny/di").Abstraction<IEventHandler<UserAfterCreateEvent>>;
+}
+export declare const UserAfterCreateHandler: import("@webiny/di").Abstraction<IEventHandler<UserAfterCreateEvent>>;
+export declare namespace UserAfterCreateHandler {
+    type Interface = IEventHandler<UserAfterCreateEvent>;
+    type Event = UserAfterCreateEvent;
+}

package/features/users/CreateUser/events.js

@@ -0,0 +1,20 @@
+import { createAbstraction } from "@webiny/feature/api";
+import { DomainEvent } from "../../eventPublisher/index.js";
+// Before Create Event
+export class UserBeforeCreateEvent extends DomainEvent {
+  eventType = "user.beforeCreate";
+  getHandlerAbstraction() {
+    return UserBeforeCreateHandler;
+  }
+}
+export const UserBeforeCreateHandler = createAbstraction("UserBeforeCreateHandler");
+// After Create Event
+export class UserAfterCreateEvent extends DomainEvent {
+  eventType = "user.afterCreate";
+  getHandlerAbstraction() {
+    return UserAfterCreateHandler;
+  }
+}
+export const UserAfterCreateHandler = createAbstraction("UserAfterCreateHandler");
+
+//# sourceMappingURL=events.js.map

package/features/users/CreateUser/events.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createAbstraction","DomainEvent","UserBeforeCreateEvent","eventType","getHandlerAbstraction","UserBeforeCreateHandler","UserAfterCreateEvent","UserAfterCreateHandler"],"sources":["events.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport { DomainEvent } from \"~/features/eventPublisher/index.js\";\nimport type { IEventHandler } from \"~/features/eventPublisher/index.js\";\nimport type { UserBeforeCreatePayload, UserAfterCreatePayload } from \"./abstractions.js\";\n\n// Before Create Event\nexport class UserBeforeCreateEvent extends DomainEvent<UserBeforeCreatePayload> {\n    eventType = \"user.beforeCreate\" as const;\n\n    getHandlerAbstraction() {\n        return UserBeforeCreateHandler;\n    }\n}\n\nexport const UserBeforeCreateHandler =\n    createAbstraction<IEventHandler<UserBeforeCreateEvent>>(\"UserBeforeCreateHandler\");\n\nexport namespace UserBeforeCreateHandler {\n    export type Interface = IEventHandler<UserBeforeCreateEvent>;\n    export type Event = UserBeforeCreateEvent;\n}\n\n// After Create Event\nexport class UserAfterCreateEvent extends DomainEvent<UserAfterCreatePayload> {\n    eventType = \"user.afterCreate\" as const;\n\n    getHandlerAbstraction() {\n        return UserAfterCreateHandler;\n    }\n}\n\nexport const UserAfterCreateHandler =\n    createAbstraction<IEventHandler<UserAfterCreateEvent>>(\"UserAfterCreateHandler\");\n\nexport namespace UserAfterCreateHandler {\n    export type Interface = IEventHandler<UserAfterCreateEvent>;\n    export type Event = UserAfterCreateEvent;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AACvD,SAASC,WAAW;AAIpB;AACA,OAAO,MAAMC,qBAAqB,SAASD,WAAW,CAA0B;EAC5EE,SAAS,GAAG,mBAAmB;EAE/BC,qBAAqBA,CAAA,EAAG;IACpB,OAAOC,uBAAuB;EAClC;AACJ;AAEA,OAAO,MAAMA,uBAAuB,GAChCL,iBAAiB,CAAuC,yBAAyB,CAAC;AAOtF;AACA,OAAO,MAAMM,oBAAoB,SAASL,WAAW,CAAyB;EAC1EE,SAAS,GAAG,kBAAkB;EAE9BC,qBAAqBA,CAAA,EAAG;IACpB,OAAOG,sBAAsB;EACjC;AACJ;AAEA,OAAO,MAAMA,sBAAsB,GAC/BP,iBAAiB,CAAsC,wBAAwB,CAAC","ignoreList":[]}

package/features/users/CreateUser/feature.d.ts

@@ -0,0 +1 @@
+export declare const CreateUserFeature: import("@webiny/feature/api/createFeature.js").FeatureDefinition<unknown>;

package/features/users/CreateUser/feature.js

@@ -0,0 +1,12 @@
+import { createFeature } from "@webiny/feature/api";
+import { CreateUserUseCase } from "./CreateUserUseCase.js";
+import { CreateUserWithWcpIncrement } from "./decorators/CreateUserWithWcpIncrement.js";
+export const CreateUserFeature = createFeature({
+  name: "CreateUser",
+  register(container) {
+    container.register(CreateUserUseCase);
+    container.registerDecorator(CreateUserWithWcpIncrement);
+  }
+});
+
+//# sourceMappingURL=feature.js.map

package/features/users/CreateUser/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createFeature","CreateUserUseCase","CreateUserWithWcpIncrement","CreateUserFeature","name","register","container","registerDecorator"],"sources":["feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { CreateUserUseCase } from \"./CreateUserUseCase.js\";\nimport { CreateUserWithWcpIncrement } from \"./decorators/CreateUserWithWcpIncrement.js\";\n\nexport const CreateUserFeature = createFeature({\n    name: \"CreateUser\",\n    register(container) {\n        container.register(CreateUserUseCase);\n        container.registerDecorator(CreateUserWithWcpIncrement);\n    }\n});\n"],"mappings":"AAAA,SAASA,aAAa,QAAQ,qBAAqB;AACnD,SAASC,iBAAiB;AAC1B,SAASC,0BAA0B;AAEnC,OAAO,MAAMC,iBAAiB,GAAGH,aAAa,CAAC;EAC3CI,IAAI,EAAE,YAAY;EAClBC,QAAQA,CAACC,SAAS,EAAE;IAChBA,SAAS,CAACD,QAAQ,CAACJ,iBAAiB,CAAC;IACrCK,SAAS,CAACC,iBAAiB,CAACL,0BAA0B,CAAC;EAC3D;AACJ,CAAC,CAAC","ignoreList":[]}

package/features/users/CreateUser/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./abstractions.js";
+export * from "./events.js";

package/features/users/CreateUser/index.js

@@ -0,0 +1,4 @@
+export * from "./abstractions.js";
+export * from "./events.js";
+
+//# sourceMappingURL=index.js.map

package/features/users/CreateUser/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["index.ts"],"sourcesContent":["export * from \"./abstractions.js\";\nexport * from \"./events.js\";\n"],"mappings":"AAAA;AACA","ignoreList":[]}

package/features/users/CreateUser/schema.d.ts

@@ -0,0 +1,47 @@
+import { z } from "zod";
+export declare const createUserValidation: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    displayName: z.ZodOptional<z.ZodString>;
+    email: z.ZodString;
+    firstName: z.ZodOptional<z.ZodString>;
+    lastName: z.ZodOptional<z.ZodString>;
+    avatar: z.ZodNullable<z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        src: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
+        src: string;
+    }, {
+        id: string;
+        src: string;
+    }>>>;
+    roles: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+    teams: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
+    external: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+    email: string;
+    external: boolean;
+    roles: string[];
+    teams: string[];
+    firstName?: string | undefined;
+    lastName?: string | undefined;
+    id?: string | undefined;
+    displayName?: string | undefined;
+    avatar?: {
+        id: string;
+        src: string;
+    } | null | undefined;
+}, {
+    email: string;
+    firstName?: string | undefined;
+    lastName?: string | undefined;
+    external?: boolean | undefined;
+    id?: string | undefined;
+    displayName?: string | undefined;
+    roles?: string[] | undefined;
+    teams?: string[] | undefined;
+    avatar?: {
+        id: string;
+        src: string;
+    } | null | undefined;
+}>;

package/features/users/CreateUser/schema.js

@@ -0,0 +1,22 @@
+import { z } from "zod";
+export const createUserValidation = z.object({
+  id: z.string().min(1).optional(),
+  displayName: z.string().min(1).optional(),
+  // We did not use an e-mail validator here, just because external
+  // IdPs (Okta, Auth0) do not require e-mail to be present. When creating
+  // admin users, they're actually passing the user's ID as the e-mail.
+  // For example: packages/api-security-okta/src/createAdminUsersHooks.ts:13
+  // In the future, we might want to rename this field to `idpId` or similar.
+  email: z.string(),
+  firstName: z.string().optional(),
+  lastName: z.string().optional(),
+  avatar: z.object({
+    id: z.string().min(1),
+    src: z.string().url()
+  }).optional().nullable(),
+  roles: z.array(z.string()).optional().default([]),
+  teams: z.array(z.string()).optional().default([]),
+  external: z.boolean().optional().default(false)
+});
+
+//# sourceMappingURL=schema.js.map

package/features/users/CreateUser/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["z","createUserValidation","object","id","string","min","optional","displayName","email","firstName","lastName","avatar","src","url","nullable","roles","array","default","teams","external","boolean"],"sources":["schema.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const createUserValidation = z.object({\n    id: z.string().min(1).optional(),\n    displayName: z.string().min(1).optional(),\n    // We did not use an e-mail validator here, just because external\n    // IdPs (Okta, Auth0) do not require e-mail to be present. When creating\n    // admin users, they're actually passing the user's ID as the e-mail.\n    // For example: packages/api-security-okta/src/createAdminUsersHooks.ts:13\n    // In the future, we might want to rename this field to `idpId` or similar.\n    email: z.string(),\n    firstName: z.string().optional(),\n    lastName: z.string().optional(),\n    avatar: z\n        .object({\n            id: z.string().min(1),\n            src: z.string().url()\n        })\n        .optional()\n        .nullable(),\n    roles: z.array(z.string()).optional().default([]),\n    teams: z.array(z.string()).optional().default([]),\n    external: z.boolean().optional().default(false)\n});\n"],"mappings":"AAAA,SAASA,CAAC,QAAQ,KAAK;AAEvB,OAAO,MAAMC,oBAAoB,GAAGD,CAAC,CAACE,MAAM,CAAC;EACzCC,EAAE,EAAEH,CAAC,CAACI,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC;EAChCC,WAAW,EAAEP,CAAC,CAACI,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAAC,CAACC,QAAQ,CAAC,CAAC;EACzC;EACA;EACA;EACA;EACA;EACAE,KAAK,EAAER,CAAC,CAACI,MAAM,CAAC,CAAC;EACjBK,SAAS,EAAET,CAAC,CAACI,MAAM,CAAC,CAAC,CAACE,QAAQ,CAAC,CAAC;EAChCI,QAAQ,EAAEV,CAAC,CAACI,MAAM,CAAC,CAAC,CAACE,QAAQ,CAAC,CAAC;EAC/BK,MAAM,EAAEX,CAAC,CACJE,MAAM,CAAC;IACJC,EAAE,EAAEH,CAAC,CAACI,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAAC;IACrBO,GAAG,EAAEZ,CAAC,CAACI,MAAM,CAAC,CAAC,CAACS,GAAG,CAAC;EACxB,CAAC,CAAC,CACDP,QAAQ,CAAC,CAAC,CACVQ,QAAQ,CAAC,CAAC;EACfC,KAAK,EAAEf,CAAC,CAACgB,KAAK,CAAChB,CAAC,CAACI,MAAM,CAAC,CAAC,CAAC,CAACE,QAAQ,CAAC,CAAC,CAACW,OAAO,CAAC,EAAE,CAAC;EACjDC,KAAK,EAAElB,CAAC,CAACgB,KAAK,CAAChB,CAAC,CAACI,MAAM,CAAC,CAAC,CAAC,CAACE,QAAQ,CAAC,CAAC,CAACW,OAAO,CAAC,EAAE,CAAC;EACjDE,QAAQ,EAAEnB,CAAC,CAACoB,OAAO,CAAC,CAAC,CAACd,QAAQ,CAAC,CAAC,CAACW,OAAO,CAAC,KAAK;AAClD,CAAC,CAAC","ignoreList":[]}

package/features/users/DeleteUser/DeleteUserUseCase.d.ts

@@ -0,0 +1,14 @@
+import { Result } from "@webiny/feature/api";
+import { IdentityContext } from "../../../features/security/IdentityContext/index.js";
+import { EventPublisher } from "../../../features/eventPublisher/index.js";
+import { DeleteUserUseCase as UseCaseAbstraction } from "./abstractions.js";
+import { AdminUsersRepository } from "../../../features/users/shared/abstractions.js";
+declare class DeleteUserUseCaseImpl implements UseCaseAbstraction.Interface {
+    private identityContext;
+    private eventPublisher;
+    private repository;
+    constructor(identityContext: IdentityContext.Interface, eventPublisher: EventPublisher.Interface, repository: AdminUsersRepository.Interface);
+    execute(id: string): Promise<Result<void, UseCaseAbstraction.Error>>;
+}
+export declare const DeleteUserUseCase: import("@webiny/di").Implementation<typeof DeleteUserUseCaseImpl>;
+export {};

package/features/users/DeleteUser/DeleteUserUseCase.js

@@ -0,0 +1,62 @@
+import { createImplementation } from "@webiny/feature/api";
+import { Result } from "@webiny/feature/api";
+import { IdentityContext } from "../../security/IdentityContext/index.js";
+import { EventPublisher } from "../../eventPublisher/index.js";
+import { DeleteUserUseCase as UseCaseAbstraction } from "./abstractions.js";
+import { AdminUsersRepository } from "../shared/abstractions.js";
+import { NotAuthorizedError } from "../shared/errors.js";
+import { UserBeforeDeleteEvent, UserAfterDeleteEvent } from "./events.js";
+import { CannotDeleteOwnAccountError } from "./errors.js";
+class DeleteUserUseCaseImpl {
+  constructor(identityContext, eventPublisher, repository) {
+    this.identityContext = identityContext;
+    this.eventPublisher = eventPublisher;
+    this.repository = repository;
+  }
+  async execute(id) {
+    // 1. Check permission
+    const permission = await this.identityContext.getPermission("adminUsers.user");
+    if (!permission) {
+      return Result.fail(new NotAuthorizedError());
+    }
+
+    // 2. Get existing user
+    const getUserResult = await this.repository.get({
+      id
+    });
+    if (getUserResult.isFail()) {
+      return Result.fail(getUserResult.error);
+    }
+    const user = getUserResult.value;
+
+    // 3. Check if trying to delete own account
+    const identity = this.identityContext.getIdentity();
+    if (user.id === identity.id) {
+      return Result.fail(new CannotDeleteOwnAccountError());
+    }
+
+    // 4. Publish before event
+    await this.eventPublisher.publish(new UserBeforeDeleteEvent({
+      user
+    }));
+
+    // 5. Delete user via repository
+    const result = await this.repository.delete(user);
+    if (result.isFail()) {
+      return Result.fail(result.error);
+    }
+
+    // 6. Publish after event
+    await this.eventPublisher.publish(new UserAfterDeleteEvent({
+      user
+    }));
+    return Result.ok();
+  }
+}
+export const DeleteUserUseCase = createImplementation({
+  abstraction: UseCaseAbstraction,
+  implementation: DeleteUserUseCaseImpl,
+  dependencies: [IdentityContext, EventPublisher, AdminUsersRepository]
+});
+
+//# sourceMappingURL=DeleteUserUseCase.js.map