happy2 0.0.5 → 0.0.11

package/packages/happy2-server/dist/modules/message/messageSendInTransaction.js

@@ -0,0 +1,260 @@
+import { CollaborationError } from "../chat/types.js";
+import {} from "../drizzle.js";
+import {} from "./impl/sendMessageDbInput.js";
+import { agentRigBindings, agentTurns, botIdentities, chatMembers, messageAttachments, messageAgentAudiences, messages, serverSettings, userChatPreferences, users, } from "../schema.js";
+import { and, eq, isNull, sql } from "drizzle-orm";
+import { chatHint } from "../chat/chatHint.js";
+import { createId } from "@paralleldrive/cuid2";
+import { earliestDate } from "./impl/earliestDate.js";
+import { number } from "../chat/number.js";
+import { text } from "../chat/text.js";
+import { chatAdvanceWithSequence } from "../chat/chatAdvanceWithSequence.js";
+import { chatAppendAudit } from "../chat/chatAppendAudit.js";
+import { fileCanAccessWith } from "../chat/fileCanAccessWith.js";
+import { chatGetAccess } from "../chat/chatGetAccess.js";
+import { findClientMutationDb } from "./impl/findClientMutationDb.js";
+import { messageGetProjection } from "./messageGetProjection.js";
+import { messageIndexForSearch } from "./messageIndexForSearch.js";
+import { chatIsPostingRestricted } from "../chat/chatIsPostingRestricted.js";
+import { syncSequenceNext } from "../sync/syncSequenceNext.js";
+import { messageRecordDelivery } from "./messageRecordDelivery.js";
+import { messageReplaceMentions } from "./messageReplaceMentions.js";
+import { chatRequireManager } from "../chat/chatRequireManager.js";
+import { messageRequireInChat } from "../chat/messageRequireInChat.js";
+import { userRequireServerAdmin } from "../chat/userRequireServerAdmin.js";
+import { storeClientMutationDb } from "./impl/storeClientMutationDb.js";
+import { agentTurnPromptBuild } from "../agent/agentTurnPromptBuild.js";
+/**
+ * Publishes messages with authorized messageAttachments, search and mention projections, delivery records, and any requested agentTurns work.
+ * The caller's transaction makes the channel point the boundary for every consequence of sending, including files, notifications, audit evidence, and agent execution.
+ */
+export async function messageSendInTransaction(tx, input) {
+    const scope = `message.send:${input.chatId}`;
+    return (async () => {
+        if (input.kind === "automated" && !input.agentSessionId) {
+            await userRequireServerAdmin(tx, input.actorUserId);
+            if (input.senderBotId &&
+                !(await tx
+                    .select({
+                    id: botIdentities.id,
+                })
+                    .from(botIdentities)
+                    .where(and(eq(botIdentities.id, input.senderBotId), eq(botIdentities.active, 1), isNull(botIdentities.deletedAt)))
+                    .limit(1))[0])
+                throw new CollaborationError("not_found", "Bot identity was not found");
+        }
+        if (input.clientMutationId) {
+            const previous = await findClientMutationDb(tx, input.actorUserId, scope, input.clientMutationId);
+            if (previous) {
+                const message = await messageGetProjection(tx, input.actorUserId, text(previous.messageId));
+                if (!message)
+                    throw new Error("Idempotent message result is missing");
+                return {
+                    message,
+                    hint: chatHint(number(previous.sequence), input.chatId, number(previous.pts)),
+                };
+            }
+        }
+        const access = input.kind === "automated" && !input.agentSessionId
+            ? await chatRequireManager(tx, input.actorUserId, input.chatId)
+            : await chatGetAccess(tx, input.actorUserId, input.chatId, true);
+        if (!access)
+            throw new CollaborationError("not_found", "Chat was not found");
+        const audience = input.audience ?? "people";
+        const requestedTurns = input.agentTurns ?? [];
+        if (audience === "people" && requestedTurns.length)
+            throw new CollaborationError("invalid", "People-only messages cannot start agent turns");
+        if (audience === "agents" && !requestedTurns.length)
+            throw new CollaborationError("invalid", "Agent-audience messages require an agent");
+        if (input.kind === "automated" && requestedTurns.length)
+            throw new CollaborationError("invalid", "Automated messages cannot start agent turns");
+        if (access.kind === "dm" && requestedTurns.length && access.dmType !== "direct")
+            throw new CollaborationError("invalid", "Group direct messages cannot start agent turns");
+        for (const requestedTurn of requestedTurns) {
+            const [binding] = await tx
+                .select({ userId: agentRigBindings.userId })
+                .from(agentRigBindings)
+                .innerJoin(chatMembers, and(eq(chatMembers.chatId, agentRigBindings.chatId), eq(chatMembers.userId, agentRigBindings.userId)))
+                .innerJoin(users, eq(users.id, agentRigBindings.userId))
+                .where(and(eq(agentRigBindings.chatId, input.chatId), eq(agentRigBindings.userId, requestedTurn.agentUserId), eq(agentRigBindings.sessionId, requestedTurn.sessionId), isNull(chatMembers.leftAt), isNull(users.deletedAt), eq(users.kind, "agent")))
+                .limit(1);
+            if (!binding)
+                throw new CollaborationError("conflict", "Agent conversation is not ready");
+        }
+        let senderUserId = input.kind === "automated" ? undefined : input.actorUserId;
+        if (input.agentSessionId) {
+            const [agent] = await tx
+                .select({
+                userId: agentRigBindings.userId,
+            })
+                .from(agentRigBindings)
+                .where(and(eq(agentRigBindings.chatId, input.chatId), eq(agentRigBindings.sessionId, input.agentSessionId)))
+                .limit(1);
+            if (!agent)
+                throw new CollaborationError("forbidden", "Agent session does not own this chat");
+            senderUserId = agent.userId;
+        }
+        if (access.archivedAt)
+            throw new CollaborationError("forbidden", "Archived chats are read-only");
+        if (await chatIsPostingRestricted(tx, input.actorUserId, input.chatId))
+            throw new CollaborationError("forbidden", "Posting is restricted by moderation");
+        const expiryMode = input.expiryMode ??
+            (input.expiresAt
+                ? "after_send"
+                : access.defaultExpiryMode === "none"
+                    ? "none"
+                    : access.defaultExpiryMode);
+        const selfDestructSeconds = input.selfDestructSeconds ?? access.defaultSelfDestructSeconds;
+        if (expiryMode !== "none" && !selfDestructSeconds && !input.expiresAt)
+            throw new CollaborationError("invalid", "Self-destructing messages require a duration");
+        const selfDestructAt = expiryMode === "after_send"
+            ? (input.expiresAt ??
+                new Date(Date.now() + selfDestructSeconds * 1_000).toISOString())
+            : null;
+        let retentionSeconds = access.retentionSeconds;
+        if (access.retentionMode === "inherit") {
+            const [defaults] = await tx
+                .select({
+                defaultRetentionMode: serverSettings.defaultRetentionMode,
+                defaultRetentionSeconds: serverSettings.defaultRetentionSeconds,
+            })
+                .from(serverSettings)
+                .where(eq(serverSettings.id, 1));
+            retentionSeconds =
+                defaults?.defaultRetentionMode === "duration"
+                    ? (defaults.defaultRetentionSeconds ?? undefined)
+                    : undefined;
+        }
+        else if (access.retentionMode === "forever")
+            retentionSeconds = undefined;
+        const retentionAt = retentionSeconds
+            ? new Date(Date.now() + retentionSeconds * 1_000).toISOString()
+            : null;
+        const expiresAt = earliestDate(selfDestructAt, retentionAt);
+        if (input.quotedMessageId)
+            await messageRequireInChat(tx, input.quotedMessageId, input.chatId);
+        if (input.forwardedFromMessageId) {
+            const source = await messageGetProjection(tx, input.actorUserId, input.forwardedFromMessageId);
+            if (!source || source.deletedAt)
+                throw new CollaborationError("not_found", "Source message was not found");
+        }
+        const fileIds = [...new Set(input.attachmentFileIds ?? [])];
+        for (const fileId of fileIds)
+            if (!(await fileCanAccessWith(tx, input.actorUserId, fileId)))
+                throw new CollaborationError("not_found", "Attachment file was not found");
+        const id = createId();
+        const sequence = await syncSequenceNext(tx);
+        const mutation = await chatAdvanceWithSequence(tx, sequence, input.actorUserId, input.chatId, "message.created", id, undefined, true);
+        if (mutation.messageSequence === undefined)
+            throw new Error("Message sequence was not allocated");
+        await tx.insert(messages).values({
+            id,
+            chatId: input.chatId,
+            sequence: mutation.messageSequence,
+            changePts: mutation.pts,
+            senderUserId,
+            kind: input.kind ?? "user",
+            text: input.text,
+            quotedMessageId: input.quotedMessageId,
+            forwardedFromMessageId: input.forwardedFromMessageId,
+            expiresAt,
+            expiryMode,
+            selfDestructSeconds,
+            afterReadScope: input.afterReadScope ?? access.defaultAfterReadScope,
+            senderBotId: input.senderBotId,
+            publishedAt: input.deferPublication ? null : sql `CURRENT_TIMESTAMP`,
+            audience,
+        });
+        if (requestedTurns.length)
+            await tx.insert(messageAgentAudiences).values(requestedTurns.map(({ agentUserId }) => ({
+                messageId: id,
+                agentUserId,
+            })));
+        const mentions = input.deferPublication
+            ? {
+                notifyAll: false,
+                userIds: [],
+            }
+            : await messageReplaceMentions(tx, id, input.text);
+        if (!input.deferPublication)
+            await messageIndexForSearch(tx, id, input.chatId, input.text, 1);
+        if (fileIds.length)
+            await tx.insert(messageAttachments).values(fileIds.map((fileId, position) => ({
+                messageId: id,
+                fileId,
+                position,
+            })));
+        if (requestedTurns.length) {
+            const turns = [];
+            for (const requestedTurn of requestedTurns)
+                turns.push({
+                    userMessageId: id,
+                    agentUserId: requestedTurn.agentUserId,
+                    chatId: input.chatId,
+                    sessionId: requestedTurn.sessionId,
+                    prompt: access.kind === "dm"
+                        ? input.text
+                        : await agentTurnPromptBuild(tx, {
+                            agentUserId: requestedTurn.agentUserId,
+                            chatId: input.chatId,
+                            currentSequence: mutation.messageSequence,
+                        }),
+                });
+            await tx.insert(agentTurns).values(turns);
+        }
+        if (access.parentMessageId) {
+            await tx
+                .insert(userChatPreferences)
+                .values({
+                chatId: input.chatId,
+                userId: input.actorUserId,
+                followed: 1,
+                syncSequence: sequence,
+            })
+                .onConflictDoUpdate({
+                target: [userChatPreferences.userId, userChatPreferences.chatId],
+                set: {
+                    followed: 1,
+                    syncSequence: sequence,
+                    updatedAt: sql `CURRENT_TIMESTAMP`,
+                },
+            });
+        }
+        if (!input.deferPublication)
+            await messageRecordDelivery(tx, {
+                actorUserId: input.actorUserId,
+                chat: access,
+                messageId: id,
+                messageSequence: mutation.messageSequence,
+                mentionedUserIds: mentions.userIds,
+                mentionAll: mentions.notifyAll,
+                syncSequence: sequence,
+                senderUserId,
+            });
+        if (input.clientMutationId)
+            await storeClientMutationDb(tx, input.actorUserId, scope, input.clientMutationId, {
+                messageId: id,
+                sequence,
+                pts: mutation.pts,
+            });
+        const message = await messageGetProjection(tx, input.actorUserId, id);
+        if (!message)
+            throw new Error("Created message is not readable");
+        if (input.kind === "automated")
+            await chatAppendAudit(tx, {
+                actorUserId: input.actorUserId,
+                action: "message.automated_sent",
+                targetType: "message",
+                targetId: id,
+                chatId: input.chatId,
+                after: {
+                    botId: input.senderBotId,
+                },
+            });
+        return {
+            message,
+            hint: chatHint(sequence, input.chatId, mutation.pts),
+        };
+    })();
+}
+//# sourceMappingURL=messageSendInTransaction.js.map

package/packages/happy2-server/dist/modules/message/messageSendInTransaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messageSendInTransaction.js","sourceRoot":"","sources":["../../../sources/modules/message/messageSendInTransaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAA0C,MAAM,kBAAkB,CAAC;AAC9F,OAAO,EAA2B,MAAM,eAAe,CAAC;AAExD,OAAO,EAA2B,MAAM,8BAA8B,CAAC;AACvE,OAAO,EACH,gBAAgB,EAChB,UAAU,EACV,aAAa,EACb,WAAW,EACX,kBAAkB,EAClB,qBAAqB,EACrB,QAAQ,EACR,cAAc,EACd,mBAAmB,EACnB,KAAK,GACR,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE3C,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAEvC,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC1C,EAAsB,EACtB,KAAyB;IAKzB,MAAM,KAAK,GAAG,gBAAgB,KAAK,CAAC,MAAM,EAAE,CAAC;IAC7C,OAAO,CAAC,KAAK,IAAI,EAAE;QACf,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YACtD,MAAM,sBAAsB,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;YACpD,IACI,KAAK,CAAC,WAAW;gBACjB,CAAC,CACG,MAAM,EAAE;qBACH,MAAM,CAAC;oBACJ,EAAE,EAAE,aAAa,CAAC,EAAE;iBACvB,CAAC;qBACD,IAAI,CAAC,aAAa,CAAC;qBACnB,KAAK,CACF,GAAG,CACC,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,CAAC,EACvC,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,EAC3B,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAClC,CACJ;qBACA,KAAK,CAAC,CAAC,CAAC,CAChB,CAAC,CAAC,CAAC;gBAEJ,MAAM,IAAI,kBAAkB,CAAC,WAAW,EAAE,4BAA4B,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CACvC,EAAE,EACF,KAAK,CAAC,WAAW,EACjB,KAAK,EACL,KAAK,CAAC,gBAAgB,CACzB,CAAC;YACF,IAAI,QAAQ,EAAE,CAAC;gBACX,MAAM,OAAO,GAAG,MAAM,oBAAoB,CACtC,EAAE,EACF,KAAK,CAAC,WAAW,EACjB,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAC3B,CAAC;gBACF,IAAI,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;gBACtE,OAAO;oBACH,OAAO;oBACP,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;iBAChF,CAAC;YACN,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GACR,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,cAAc;YAC/C,CAAC,CAAC,MAAM,kBAAkB,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC;YAC/D,CAAC,CAAC,MAAM,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzE,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,kBAAkB,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;QAC7E,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAC5C,MAAM,cAAc,GAAG,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;QAC9C,IAAI,QAAQ,KAAK,QAAQ,IAAI,cAAc,CAAC,MAAM;YAC9C,MAAM,IAAI,kBAAkB,CACxB,SAAS,EACT,+CAA+C,CAClD,CAAC;QACN,IAAI,QAAQ,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,MAAM;YAC/C,MAAM,IAAI,kBAAkB,CAAC,SAAS,EAAE,0CAA0C,CAAC,CAAC;QACxF,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,cAAc,CAAC,MAAM;YACnD,MAAM,IAAI,kBAAkB,CAAC,SAAS,EAAE,6CAA6C,CAAC,CAAC;QAC3F,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,cAAc,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;YAC3E,MAAM,IAAI,kBAAkB,CACxB,SAAS,EACT,gDAAgD,CACnD,CAAC;QACN,KAAK,MAAM,aAAa,IAAI,cAAc,EAAE,CAAC;YACzC,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE;iBACrB,MAAM,CAAC,EAAE,MAAM,EAAE,gBAAgB,CAAC,MAAM,EAAE,CAAC;iBAC3C,IAAI,CAAC,gBAAgB,CAAC;iBACtB,SAAS,CACN,WAAW,EACX,GAAG,CACC,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAC/C,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAClD,CACJ;iBACA,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC;iBACvD,KAAK,CACF,GAAG,CACC,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EACzC,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC,WAAW,CAAC,EACtD,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC,EACvD,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAC1B,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EACvB,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAC1B,CACJ;iBACA,KAAK,CAAC,CAAC,CAAC,CAAC;YACd,IAAI,CAAC,OAAO;gBACR,MAAM,IAAI,kBAAkB,CAAC,UAAU,EAAE,iCAAiC,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,YAAY,GAAG,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;QAC9E,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;YACvB,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,EAAE;iBACnB,MAAM,CAAC;gBACJ,MAAM,EAAE,gBAAgB,CAAC,MAAM;aAClC,CAAC;iBACD,IAAI,CAAC,gBAAgB,CAAC;iBACtB,KAAK,CACF,GAAG,CACC,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EACzC,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,cAAc,CAAC,CACvD,CACJ;iBACA,KAAK,CAAC,CAAC,CAAC,CAAC;YACd,IAAI,CAAC,KAAK;gBACN,MAAM,IAAI,kBAAkB,CAAC,WAAW,EAAE,sCAAsC,CAAC,CAAC;YACtF,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC;QAChC,CAAC;QACD,IAAI,MAAM,CAAC,UAAU;YACjB,MAAM,IAAI,kBAAkB,CAAC,WAAW,EAAE,8BAA8B,CAAC,CAAC;QAC9E,IAAI,MAAM,uBAAuB,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC;YAClE,MAAM,IAAI,kBAAkB,CAAC,WAAW,EAAE,qCAAqC,CAAC,CAAC;QACrF,MAAM,UAAU,GACZ,KAAK,CAAC,UAAU;YAChB,CAAC,KAAK,CAAC,SAAS;gBACZ,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,MAAM,CAAC,iBAAiB,KAAK,MAAM;oBACnC,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACtC,MAAM,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,IAAI,MAAM,CAAC,0BAA0B,CAAC;QAC3F,IAAI,UAAU,KAAK,MAAM,IAAI,CAAC,mBAAmB,IAAI,CAAC,KAAK,CAAC,SAAS;YACjE,MAAM,IAAI,kBAAkB,CAAC,SAAS,EAAE,8CAA8C,CAAC,CAAC;QAC5F,MAAM,cAAc,GAChB,UAAU,KAAK,YAAY;YACvB,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS;gBAChB,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,mBAAoB,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YACpE,CAAC,CAAC,IAAI,CAAC;QACf,IAAI,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC;QAC/C,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;iBACtB,MAAM,CAAC;gBACJ,oBAAoB,EAAE,cAAc,CAAC,oBAAoB;gBACzD,uBAAuB,EAAE,cAAc,CAAC,uBAAuB;aAClE,CAAC;iBACD,IAAI,CAAC,cAAc,CAAC;iBACpB,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;YACrC,gBAAgB;gBACZ,QAAQ,EAAE,oBAAoB,KAAK,UAAU;oBACzC,CAAC,CAAC,CAAC,QAAQ,CAAC,uBAAuB,IAAI,SAAS,CAAC;oBACjD,CAAC,CAAC,SAAS,CAAC;QACxB,CAAC;aAAM,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS;YAAE,gBAAgB,GAAG,SAAS,CAAC;QAC5E,MAAM,WAAW,GAAG,gBAAgB;YAChC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE;YAC/D,CAAC,CAAC,IAAI,CAAC;QACX,MAAM,SAAS,GAAG,YAAY,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QAC5D,IAAI,KAAK,CAAC,eAAe;YACrB,MAAM,oBAAoB,CAAC,EAAE,EAAE,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACxE,IAAI,KAAK,CAAC,sBAAsB,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,MAAM,oBAAoB,CACrC,EAAE,EACF,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,sBAAsB,CAC/B,CAAC;YACF,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS;gBAC3B,MAAM,IAAI,kBAAkB,CAAC,WAAW,EAAE,8BAA8B,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5D,KAAK,MAAM,MAAM,IAAI,OAAO;YACxB,IAAI,CAAC,CAAC,MAAM,iBAAiB,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;gBACzD,MAAM,IAAI,kBAAkB,CAAC,WAAW,EAAE,+BAA+B,CAAC,CAAC;QACnF,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAC1C,EAAE,EACF,QAAQ,EACR,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,MAAM,EACZ,iBAAiB,EACjB,EAAE,EACF,SAAS,EACT,IAAI,CACP,CAAC;QACF,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS;YACtC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC1D,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;YAC7B,EAAE;YACF,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,QAAQ,CAAC,eAAe;YAClC,SAAS,EAAE,QAAQ,CAAC,GAAG;YACvB,YAAY;YACZ,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,MAAM;YAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;YACpD,SAAS;YACT,UAAU;YACV,mBAAmB;YACnB,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,MAAM,CAAC,qBAAqB;YACpE,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,WAAW,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAA,mBAAmB;YACnE,QAAQ;SACX,CAAC,CAAC;QACH,IAAI,cAAc,CAAC,MAAM;YACrB,MAAM,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,MAAM,CACzC,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;gBACrC,SAAS,EAAE,EAAE;gBACb,WAAW;aACd,CAAC,CAAC,CACN,CAAC;QACN,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB;YACnC,CAAC,CAAC;gBACI,SAAS,EAAE,KAAK;gBAChB,OAAO,EAAE,EAAE;aACd;YACH,CAAC,CAAC,MAAM,sBAAsB,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK,CAAC,gBAAgB;YACvB,MAAM,qBAAqB,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACrE,IAAI,OAAO,CAAC,MAAM;YACd,MAAM,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM,CACtC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAC/B,SAAS,EAAE,EAAE;gBACb,MAAM;gBACN,QAAQ;aACX,CAAC,CAAC,CACN,CAAC;QACN,IAAI,cAAc,CAAC,MAAM,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,EAAE,CAAC;YACjB,KAAK,MAAM,aAAa,IAAI,cAAc;gBACtC,KAAK,CAAC,IAAI,CAAC;oBACP,aAAa,EAAE,EAAE;oBACjB,WAAW,EAAE,aAAa,CAAC,WAAW;oBACtC,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,SAAS,EAAE,aAAa,CAAC,SAAS;oBAClC,MAAM,EACF,MAAM,CAAC,IAAI,KAAK,IAAI;wBAChB,CAAC,CAAC,KAAK,CAAC,IAAI;wBACZ,CAAC,CAAC,MAAM,oBAAoB,CAAC,EAAE,EAAE;4BAC3B,WAAW,EAAE,aAAa,CAAC,WAAW;4BACtC,MAAM,EAAE,KAAK,CAAC,MAAM;4BACpB,eAAe,EAAE,QAAQ,CAAC,eAAe;yBAC5C,CAAC;iBACf,CAAC,CAAC;YACP,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YACzB,MAAM,EAAE;iBACH,MAAM,CAAC,mBAAmB,CAAC;iBAC3B,MAAM,CAAC;gBACJ,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM,EAAE,KAAK,CAAC,WAAW;gBACzB,QAAQ,EAAE,CAAC;gBACX,YAAY,EAAE,QAAQ;aACzB,CAAC;iBACD,kBAAkB,CAAC;gBAChB,MAAM,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC;gBAChE,GAAG,EAAE;oBACD,QAAQ,EAAE,CAAC;oBACX,YAAY,EAAE,QAAQ;oBACtB,SAAS,EAAE,GAAG,CAAA,mBAAmB;iBACpC;aACJ,CAAC,CAAC;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,gBAAgB;YACvB,MAAM,qBAAqB,CAAC,EAAE,EAAE;gBAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,IAAI,EAAE,MAAM;gBACZ,SAAS,EAAE,EAAE;gBACb,eAAe,EAAE,QAAQ,CAAC,eAAe;gBACzC,gBAAgB,EAAE,QAAQ,CAAC,OAAO;gBAClC,UAAU,EAAE,QAAQ,CAAC,SAAS;gBAC9B,YAAY,EAAE,QAAQ;gBACtB,YAAY;aACf,CAAC,CAAC;QACP,IAAI,KAAK,CAAC,gBAAgB;YACtB,MAAM,qBAAqB,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,gBAAgB,EAAE;gBAC9E,SAAS,EAAE,EAAE;gBACb,QAAQ;gBACR,GAAG,EAAE,QAAQ,CAAC,GAAG;aACpB,CAAC,CAAC;QACP,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACjE,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;YAC1B,MAAM,eAAe,CAAC,EAAE,EAAE;gBACtB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,MAAM,EAAE,wBAAwB;gBAChC,UAAU,EAAE,SAAS;gBACrB,QAAQ,EAAE,EAAE;gBACZ,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,KAAK,EAAE;oBACH,KAAK,EAAE,KAAK,CAAC,WAAW;iBAC3B;aACJ,CAAC,CAAC;QACP,OAAO;YACH,OAAO;YACP,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC;SACvD,CAAC;IACN,CAAC,CAAC,EAAE,CAAC;AACT,CAAC"}

package/packages/happy2-server/dist/modules/moderation/accountBanApply.d.ts

@@ -0,0 +1,15 @@
+import { type AccountBan } from "../operations/types.js";
+import { type AuditContext } from "../operations/auditContext.js";
+import { type DrizzleExecutor } from "../drizzle.js";
+/**
+ * Creates an accountBans record, disables its accounts credential, and revokes active authSessions under operations-administrator authority.
+ * The ban, session cutoff, user sync hint, and audit evidence commit together so access disappears at the same boundary the moderation action becomes visible.
+ */
+export declare function accountBanApply(executor: DrizzleExecutor, input: {
+    actorUserId: string;
+    targetUserId: string;
+    reason?: string;
+    expiresAt?: string;
+    context?: AuditContext;
+}): Promise<AccountBan>;
+//# sourceMappingURL=accountBanApply.d.ts.map

package/packages/happy2-server/dist/modules/moderation/accountBanApply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accountBanApply.d.ts","sourceRoot":"","sources":["../../../sources/modules/moderation/accountBanApply.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,UAAU,EAAmB,MAAM,wBAAwB,CAAC;AAC1E,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,KAAK,eAAe,EAAmB,MAAM,eAAe,CAAC;AAoBtE;;;GAGG;AACH,wBAAsB,eAAe,CACjC,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,YAAY,CAAC;CAC1B,GACF,OAAO,CAAC,UAAU,CAAC,CAwDrB"}

package/packages/happy2-server/dist/modules/moderation/accountBanApply.js

@@ -0,0 +1,73 @@
+import { OperationsError } from "../operations/types.js";
+import {} from "../operations/auditContext.js";
+import { withTransaction } from "../drizzle.js";
+import { accountBans, accounts, authSessions } from "../schema.js";
+import { accountTargetState } from "./impl/accountTargetState.js";
+import { and, eq, isNull, sql } from "drizzle-orm";
+import { createId } from "@paralleldrive/cuid2";
+import { futureTimestamp } from "../operations/futureTimestamp.js";
+import { mergeContext } from "./impl/mergeContext.js";
+import { accountTargetDb } from "./impl/accountTargetDb.js";
+import { auditAppend } from "../operations/auditAppend.js";
+import { banDb } from "./impl/banDb.js";
+import { closeElapsedBan } from "./impl/closeElapsedBan.js";
+import { userRequireOperationsAdmin } from "../operations/userRequireOperationsAdmin.js";
+import { syncUserMutation } from "./impl/syncUserMutation.js";
+/**
+ * Creates an accountBans record, disables its accounts credential, and revokes active authSessions under operations-administrator authority.
+ * The ban, session cutoff, user sync hint, and audit evidence commit together so access disappears at the same boundary the moderation action becomes visible.
+ */
+export async function accountBanApply(executor, input) {
+    const expiresAt = futureTimestamp(input.expiresAt, "expiresAt");
+    return withTransaction(executor, async (tx) => {
+        await userRequireOperationsAdmin(tx, input.actorUserId);
+        if (input.actorUserId === input.targetUserId)
+            throw new OperationsError("forbidden", "Administrators cannot ban themselves");
+        const target = await accountTargetDb(tx, input.targetUserId);
+        await closeElapsedBan(tx, target);
+        if (target.bannedAt &&
+            (!target.banExpiresAt || Date.parse(target.banExpiresAt) > Date.now()))
+            throw new OperationsError("conflict", "User already has an active ban");
+        const id = createId();
+        await tx.insert(accountBans).values({
+            id,
+            accountId: target.accountId,
+            bannedByUserId: input.actorUserId,
+            reason: input.reason,
+            expiresAt,
+        });
+        await tx
+            .update(accounts)
+            .set({
+            bannedAt: sql `CURRENT_TIMESTAMP`,
+            banExpiresAt: expiresAt ?? null,
+            banReason: input.reason ?? null,
+            bannedByUserId: input.actorUserId,
+        })
+            .where(eq(accounts.id, target.accountId));
+        const sessions = await tx
+            .update(authSessions)
+            .set({
+            revokedAt: sql `CURRENT_TIMESTAMP`,
+        })
+            .where(and(eq(authSessions.accountId, target.accountId), isNull(authSessions.revokedAt)))
+            .returning({
+            id: authSessions.id,
+        });
+        await syncUserMutation(tx, input.actorUserId, target.userId, "user.banned");
+        const ban = await banDb(tx, id);
+        await auditAppend(tx, {
+            actorUserId: input.actorUserId,
+            action: "user.ban_applied",
+            targetType: "user",
+            targetId: target.userId,
+            before: accountTargetState(target),
+            after: ban,
+            context: mergeContext(input.context, {
+                revokedSessionCount: sessions.length,
+            }),
+        });
+        return ban;
+    });
+}
+//# sourceMappingURL=accountBanApply.js.map

package/packages/happy2-server/dist/modules/moderation/accountBanApply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accountBanApply.js","sourceRoot":"","sources":["../../../sources/modules/moderation/accountBanApply.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC1E,OAAO,EAAqB,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAwB,eAAe,EAAE,MAAM,eAAe,CAAC;AAEtE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAElE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAEnE,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AACzF,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAE9D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACjC,QAAyB,EACzB,KAMC;IAED,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAChE,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,0BAA0B,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACxD,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,YAAY;YACxC,MAAM,IAAI,eAAe,CAAC,WAAW,EAAE,sCAAsC,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QAC7D,MAAM,eAAe,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAClC,IACI,MAAM,CAAC,QAAQ;YACf,CAAC,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAEtE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,gCAAgC,CAAC,CAAC;QAC5E,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;QACtB,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;YAChC,EAAE;YACF,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,cAAc,EAAE,KAAK,CAAC,WAAW;YACjC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS;SACZ,CAAC,CAAC;QACH,MAAM,EAAE;aACH,MAAM,CAAC,QAAQ,CAAC;aAChB,GAAG,CAAC;YACD,QAAQ,EAAE,GAAG,CAAA,mBAAmB;YAChC,YAAY,EAAE,SAAS,IAAI,IAAI;YAC/B,SAAS,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;YAC/B,cAAc,EAAE,KAAK,CAAC,WAAW;SACpC,CAAC;aACD,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,MAAM,EAAE;aACpB,MAAM,CAAC,YAAY,CAAC;aACpB,GAAG,CAAC;YACD,SAAS,EAAE,GAAG,CAAA,mBAAmB;SACpC,CAAC;aACD,KAAK,CACF,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CACpF;aACA,SAAS,CAAC;YACP,EAAE,EAAE,YAAY,CAAC,EAAE;SACtB,CAAC,CAAC;QACP,MAAM,gBAAgB,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC5E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAChC,MAAM,WAAW,CAAC,EAAE,EAAE;YAClB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,kBAAkB;YAC1B,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,MAAM,CAAC,MAAM;YACvB,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC;YAClC,KAAK,EAAE,GAAG;YACV,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE;gBACjC,mBAAmB,EAAE,QAAQ,CAAC,MAAM;aACvC,CAAC;SACL,CAAC,CAAC;QACH,OAAO,GAAG,CAAC;IACf,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/moderation/accountBanExpireDue.d.ts

@@ -0,0 +1,11 @@
+import { type AuditContext } from "../operations/auditContext.js";
+import { type DrizzleExecutor } from "../drizzle.js";
+/**
+ * Closes an elapsed accountBans interval and reactivates accounts only when no other effective ban still blocks the identity.
+ * Performing expiry with user synchronization and audit history prevents credentials from reopening without an attributable moderation transition.
+ */
+export declare function accountBanExpireDue(executor: DrizzleExecutor, input?: {
+    actorUserId?: string;
+    context?: AuditContext;
+}): Promise<number>;
+//# sourceMappingURL=accountBanExpireDue.d.ts.map

package/packages/happy2-server/dist/modules/moderation/accountBanExpireDue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accountBanExpireDue.d.ts","sourceRoot":"","sources":["../../../sources/modules/moderation/accountBanExpireDue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,KAAK,eAAe,EAAmB,MAAM,eAAe,CAAC;AAStE;;;GAGG;AACH,wBAAsB,mBAAmB,CACrC,QAAQ,EAAE,eAAe,EACzB,KAAK,CAAC,EAAE;IACJ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,YAAY,CAAC;CAC1B,GACF,OAAO,CAAC,MAAM,CAAC,CAsFjB"}

package/packages/happy2-server/dist/modules/moderation/accountBanExpireDue.js

@@ -0,0 +1,85 @@
+import {} from "../operations/auditContext.js";
+import { withTransaction } from "../drizzle.js";
+import { accountBans, accounts, users } from "../schema.js";
+import { and, eq, isNull, lte, sql } from "drizzle-orm";
+import { auditAppend } from "../operations/auditAppend.js";
+import { userRequireOperationsAdmin } from "../operations/userRequireOperationsAdmin.js";
+import { syncUserMutation } from "./impl/syncUserMutation.js";
+/**
+ * Closes an elapsed accountBans interval and reactivates accounts only when no other effective ban still blocks the identity.
+ * Performing expiry with user synchronization and audit history prevents credentials from reopening without an attributable moderation transition.
+ */
+export async function accountBanExpireDue(executor, input) {
+    const now = new Date().toISOString();
+    const dueCondition = and(sql `${accounts.bannedAt} IS NOT NULL`, sql `${accounts.banExpiresAt} IS NOT NULL`, lte(accounts.banExpiresAt, now));
+    if (!input?.actorUserId) {
+        const [candidate] = await executor
+            .select({
+            id: accounts.id,
+        })
+            .from(accounts)
+            .where(dueCondition)
+            .limit(1);
+        if (!candidate)
+            return 0;
+    }
+    return withTransaction(executor, async (tx) => {
+        if (input?.actorUserId)
+            await userRequireOperationsAdmin(tx, input.actorUserId);
+        const due = await tx
+            .select({
+            accountId: accounts.id,
+            userId: users.id,
+            bannedAt: accounts.bannedAt,
+            banExpiresAt: accounts.banExpiresAt,
+            banReason: accounts.banReason,
+            bannedByUserId: accounts.bannedByUserId,
+        })
+            .from(accounts)
+            .leftJoin(users, eq(users.accountId, accounts.id))
+            .where(dueCondition);
+        for (const row of due) {
+            await tx
+                .update(accountBans)
+                .set({
+                revokedAt: sql `coalesce(${accountBans.revokedAt}, ${now})`,
+                revokeReason: sql `coalesce(${accountBans.revokeReason}, 'expired')`,
+            })
+                .where(and(eq(accountBans.accountId, row.accountId), isNull(accountBans.revokedAt), lte(accountBans.expiresAt, now)));
+            const updated = await tx
+                .update(accounts)
+                .set({
+                bannedAt: null,
+                banExpiresAt: null,
+                banReason: null,
+                bannedByUserId: null,
+            })
+                .where(and(eq(accounts.id, row.accountId), sql `${accounts.bannedAt} IS NOT NULL`, sql `${accounts.banExpiresAt} IS NOT NULL`, lte(accounts.banExpiresAt, now)))
+                .returning({
+                id: accounts.id,
+            });
+            if (!updated.length)
+                continue;
+            if (row.userId)
+                await syncUserMutation(tx, input?.actorUserId, row.userId, "user.unbanned");
+            await auditAppend(tx, {
+                actorUserId: input?.actorUserId,
+                action: "user.ban_expired",
+                targetType: "user",
+                targetId: row.userId ?? undefined,
+                before: {
+                    bannedAt: row.bannedAt ?? undefined,
+                    expiresAt: row.banExpiresAt ?? undefined,
+                    reason: row.banReason ?? undefined,
+                    bannedByUserId: row.bannedByUserId ?? undefined,
+                },
+                after: {
+                    banned: false,
+                },
+                context: input?.context,
+            });
+        }
+        return due.length;
+    });
+}
+//# sourceMappingURL=accountBanExpireDue.js.map

package/packages/happy2-server/dist/modules/moderation/accountBanExpireDue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accountBanExpireDue.js","sourceRoot":"","sources":["../../../sources/modules/moderation/accountBanExpireDue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAwB,eAAe,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAE5D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAExD,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AACzF,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAE9D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACrC,QAAyB,EACzB,KAGC;IAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,YAAY,GAAG,GAAG,CACpB,GAAG,CAAA,GAAG,QAAQ,CAAC,QAAQ,cAAc,EACrC,GAAG,CAAA,GAAG,QAAQ,CAAC,YAAY,cAAc,EACzC,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,CAClC,CAAC;IACF,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC;QACtB,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,QAAQ;aAC7B,MAAM,CAAC;YACJ,EAAE,EAAE,QAAQ,CAAC,EAAE;SAClB,CAAC;aACD,IAAI,CAAC,QAAQ,CAAC;aACd,KAAK,CAAC,YAAY,CAAC;aACnB,KAAK,CAAC,CAAC,CAAC,CAAC;QACd,IAAI,CAAC,SAAS;YAAE,OAAO,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,IAAI,KAAK,EAAE,WAAW;YAAE,MAAM,0BAA0B,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QAChF,MAAM,GAAG,GAAG,MAAM,EAAE;aACf,MAAM,CAAC;YACJ,SAAS,EAAE,QAAQ,CAAC,EAAE;YACtB,MAAM,EAAE,KAAK,CAAC,EAAE;YAChB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,cAAc,EAAE,QAAQ,CAAC,cAAc;SAC1C,CAAC;aACD,IAAI,CAAC,QAAQ,CAAC;aACd,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;aACjD,KAAK,CAAC,YAAY,CAAC,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;YACpB,MAAM,EAAE;iBACH,MAAM,CAAC,WAAW,CAAC;iBACnB,GAAG,CAAC;gBACD,SAAS,EAAE,GAAG,CAAA,YAAY,WAAW,CAAC,SAAS,KAAK,GAAG,GAAG;gBAC1D,YAAY,EAAE,GAAG,CAAA,YAAY,WAAW,CAAC,YAAY,cAAc;aACtE,CAAC;iBACD,KAAK,CACF,GAAG,CACC,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,EACxC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,EAC7B,GAAG,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,CAClC,CACJ,CAAC;YACN,MAAM,OAAO,GAAG,MAAM,EAAE;iBACnB,MAAM,CAAC,QAAQ,CAAC;iBAChB,GAAG,CAAC;gBACD,QAAQ,EAAE,IAAI;gBACd,YAAY,EAAE,IAAI;gBAClB,SAAS,EAAE,IAAI;gBACf,cAAc,EAAE,IAAI;aACvB,CAAC;iBACD,KAAK,CACF,GAAG,CACC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,EAC9B,GAAG,CAAA,GAAG,QAAQ,CAAC,QAAQ,cAAc,EACrC,GAAG,CAAA,GAAG,QAAQ,CAAC,YAAY,cAAc,EACzC,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,CAClC,CACJ;iBACA,SAAS,CAAC;gBACP,EAAE,EAAE,QAAQ,CAAC,EAAE;aAClB,CAAC,CAAC;YACP,IAAI,CAAC,OAAO,CAAC,MAAM;gBAAE,SAAS;YAC9B,IAAI,GAAG,CAAC,MAAM;gBACV,MAAM,gBAAgB,CAAC,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;YAChF,MAAM,WAAW,CAAC,EAAE,EAAE;gBAClB,WAAW,EAAE,KAAK,EAAE,WAAW;gBAC/B,MAAM,EAAE,kBAAkB;gBAC1B,UAAU,EAAE,MAAM;gBAClB,QAAQ,EAAE,GAAG,CAAC,MAAM,IAAI,SAAS;gBACjC,MAAM,EAAE;oBACJ,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,SAAS;oBACnC,SAAS,EAAE,GAAG,CAAC,YAAY,IAAI,SAAS;oBACxC,MAAM,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;oBAClC,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,SAAS;iBAClD;gBACD,KAAK,EAAE;oBACH,MAAM,EAAE,KAAK;iBAChB;gBACD,OAAO,EAAE,KAAK,EAAE,OAAO;aAC1B,CAAC,CAAC;QACP,CAAC;QACD,OAAO,GAAG,CAAC,MAAM,CAAC;IACtB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/moderation/accountBanList.d.ts

@@ -0,0 +1,14 @@
+import { type AccountBan, type Page } from "../operations/types.js";
+import { type DrizzleExecutor } from "../drizzle.js";
+/**
+ * Returns an administrator-only reverse-chronological page of bans filtered by target user and active, expired, or revoked state.
+ * Computing lifecycle status against one request timestamp and a banned-at/id cursor keeps pagination stable around expiry boundaries.
+ */
+export declare function accountBanList(executor: DrizzleExecutor, input: {
+    actorUserId: string;
+    targetUserId?: string;
+    status?: "active" | "expired" | "revoked";
+    before?: string;
+    limit: number;
+}): Promise<Page<AccountBan>>;
+//# sourceMappingURL=accountBanList.d.ts.map

package/packages/happy2-server/dist/modules/moderation/accountBanList.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accountBanList.d.ts","sourceRoot":"","sources":["../../../sources/modules/moderation/accountBanList.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,UAAU,EAAE,KAAK,IAAI,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAarD;;;GAGG;AACH,wBAAsB,cAAc,CAChC,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACjB,GACF,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAiC3B"}

package/packages/happy2-server/dist/modules/moderation/accountBanList.js

@@ -0,0 +1,42 @@
+import {} from "../operations/types.js";
+import {} from "../drizzle.js";
+import { and, desc, eq, gt, isNull, lte, or, sql } from "drizzle-orm";
+import { accountBans, users } from "../schema.js";
+import { asBan } from "./impl/asBan.js";
+import { banSelection } from "./impl/banSelection.js";
+import { cursorCondition } from "../operations/cursorCondition.js";
+import { decodeCursor } from "../operations/decodeCursor.js";
+import { page } from "../operations/page.js";
+import { userRequireOperationsAdmin } from "../operations/userRequireOperationsAdmin.js";
+/**
+ * Returns an administrator-only reverse-chronological page of bans filtered by target user and active, expired, or revoked state.
+ * Computing lifecycle status against one request timestamp and a banned-at/id cursor keeps pagination stable around expiry boundaries.
+ */
+export async function accountBanList(executor, input) {
+    await userRequireOperationsAdmin(executor, input.actorUserId);
+    const cursor = decodeCursor(input.before);
+    const conditions = [];
+    if (input.targetUserId)
+        conditions.push(eq(users.id, input.targetUserId));
+    const now = new Date().toISOString();
+    if (input.status === "active") {
+        conditions.push(and(isNull(accountBans.revokedAt), or(isNull(accountBans.expiresAt), gt(accountBans.expiresAt, now))));
+    }
+    else if (input.status === "expired") {
+        conditions.push(and(isNull(accountBans.revokedAt), sql `${accountBans.expiresAt} IS NOT NULL`, lte(accountBans.expiresAt, now)));
+    }
+    else if (input.status === "revoked") {
+        conditions.push(sql `${accountBans.revokedAt} IS NOT NULL`);
+    }
+    if (cursor)
+        conditions.push(cursorCondition(accountBans.bannedAt, accountBans.id, cursor));
+    const rows = await executor
+        .select(banSelection)
+        .from(accountBans)
+        .leftJoin(users, eq(users.accountId, accountBans.accountId))
+        .where(and(...conditions))
+        .orderBy(desc(accountBans.bannedAt), desc(accountBans.id))
+        .limit(input.limit + 1);
+    return page(rows, input.limit, asBan, (item) => item.bannedAt);
+}
+//# sourceMappingURL=accountBanList.js.map

package/packages/happy2-server/dist/modules/moderation/accountBanList.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accountBanList.js","sourceRoot":"","sources":["../../../sources/modules/moderation/accountBanList.ts"],"names":[],"mappings":"AAAA,OAAO,EAA8B,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAwB,MAAM,eAAe,CAAC;AAErD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAY,MAAM,aAAa,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAE7D,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAE7C,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AACzF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAChC,QAAyB,EACzB,KAMC;IAED,MAAM,0BAA0B,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAU,EAAE,CAAC;IAC7B,IAAI,KAAK,CAAC,YAAY;QAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC5B,UAAU,CAAC,IAAI,CACX,GAAG,CACC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,EAC7B,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CACnE,CACL,CAAC;IACN,CAAC;SAAM,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACpC,UAAU,CAAC,IAAI,CACX,GAAG,CACC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,EAC7B,GAAG,CAAA,GAAG,WAAW,CAAC,SAAS,cAAc,EACzC,GAAG,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,CACjC,CACL,CAAC;IACN,CAAC;SAAM,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACpC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAA,GAAG,WAAW,CAAC,SAAS,cAAc,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,MAAM;QAAE,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3F,MAAM,IAAI,GAAG,MAAM,QAAQ;SACtB,MAAM,CAAC,YAAY,CAAC;SACpB,IAAI,CAAC,WAAW,CAAC;SACjB,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC;SAC3D,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;SACzB,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;SACzD,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAC5B,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACnE,CAAC"}

package/packages/happy2-server/dist/modules/moderation/accountBanRevoke.d.ts

@@ -0,0 +1,14 @@
+import { type AccountBan } from "../operations/types.js";
+import { type AuditContext } from "../operations/auditContext.js";
+import { type DrizzleExecutor } from "../drizzle.js";
+/**
+ * Revokes the current accountBans interval and restores accounts authority when no remaining ban applies to the target.
+ * The administrator-audited transaction keeps account activation, product user state, and the visible moderation record in agreement.
+ */
+export declare function accountBanRevoke(executor: DrizzleExecutor, input: {
+    actorUserId: string;
+    targetUserId: string;
+    reason?: string;
+    context?: AuditContext;
+}): Promise<AccountBan>;
+//# sourceMappingURL=accountBanRevoke.d.ts.map

package/packages/happy2-server/dist/modules/moderation/accountBanRevoke.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accountBanRevoke.d.ts","sourceRoot":"","sources":["../../../sources/modules/moderation/accountBanRevoke.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,UAAU,EAAmB,MAAM,wBAAwB,CAAC;AAC1E,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,KAAK,eAAe,EAAmB,MAAM,eAAe,CAAC;AAgBtE;;;GAGG;AACH,wBAAsB,gBAAgB,CAClC,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,YAAY,CAAC;CAC1B,GACF,OAAO,CAAC,UAAU,CAAC,CA2CrB"}