modelence 0.8.0 → 0.9.0-dev.0

package/dist/app/websocketConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"websocketConfig.d.ts","sourceRoot":"","sources":["../../src/app/websocketConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,EAAE,uBAAuB,CAAC;CACpC,CAAC;AAIF,wBAAgB,kBAAkB,CAAC,kBAAkB,EAAE,eAAe,QAErE;AAED,wBAAgB,kBAAkB,oBAEjC"}

package/dist/app/websocketConfig.js

@@ -0,0 +1,8 @@
+let websocketConfig = Object.freeze({});
+export function setWebsocketConfig(newWebsocketConfig) {
+    websocketConfig = Object.freeze(Object.assign({}, websocketConfig, newWebsocketConfig));
+}
+export function getWebsocketConfig() {
+    return websocketConfig;
+}
+//# sourceMappingURL=websocketConfig.js.map

package/dist/app/websocketConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"websocketConfig.js","sourceRoot":"","sources":["../../src/app/websocketConfig.ts"],"names":[],"mappings":"AAMA,IAAI,eAAe,GAAoB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEzD,MAAM,UAAU,kBAAkB,CAAC,kBAAmC;IACpE,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,eAAe,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,eAAe,CAAC;AACzB,CAAC"}

package/dist/auth/client/index.d.ts

@@ -0,0 +1,69 @@
+export type UserInfo = {
+    id: string;
+    handle: string;
+    roles: string[];
+    hasRole: (role: string) => boolean;
+    requireRole: (role: string) => void;
+};
+/**
+ * Sign up a new user with an email and password.
+ *
+ * @example
+ * ```ts
+ * await signupWithPassword({ email: 'test@example.com', password: '12345678' });
+ * ```
+ * @param options.email - The email of the user.
+ * @param options.password - The password of the user.
+ */
+export declare function signupWithPassword(options: {
+    email: string;
+    password: string;
+}): Promise<void>;
+/**
+ * Login a user with an email and password.
+ *
+ * @example
+ * ```ts
+ * await loginWithPassword({ email: 'test@example.com', password: '12345678' });
+ * ```
+ * @param options.email - The email of the user.
+ * @param options.password - The password of the user.
+ */
+export declare function loginWithPassword(options: {
+    email: string;
+    password: string;
+}): Promise<UserInfo>;
+/**
+ * Verify user's email with a verification token.
+ *
+ * @example
+ * ```ts
+ * await verifyEmail({ token: 'verification-token' });
+ * ```
+ * @param options.token - The email verification token.
+ */
+export declare function verifyEmail(options: {
+    token: string;
+}): Promise<void>;
+/**
+ * Logout the current user.
+ *
+ */
+export declare function logout(): Promise<void>;
+/**
+ * Send reset password token.
+ * @param options.email - The email of the user.
+ */
+export declare function sendResetPasswordToken(options: {
+    email: string;
+}): Promise<void>;
+/**
+ * Reset password.
+ * @param options.token - The password reset token.
+ * @param options.password - The new password.
+ */
+export declare function resetPassword(options: {
+    token: string;
+    password: string;
+}): Promise<void>;
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/auth/client/index.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,QAAQ,GAAG;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACnC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACrC,CAAC;AAEF;;;;;;;;;GASG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,iBAGpF;AAED;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,qBAQnF;AAED;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,iBAG3D;AAED;;;GAGG;AACH,wBAAsB,MAAM,kBAG3B;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAAC,OAAO,EAAE;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,iBAKtE;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,iBAM/E"}

package/dist/auth/client/index.js

@@ -0,0 +1,79 @@
+import { setCurrentUser } from '../../client/session';
+import { callMethod } from '../../client/method';
+/**
+ * Sign up a new user with an email and password.
+ *
+ * @example
+ * ```ts
+ * await signupWithPassword({ email: 'test@example.com', password: '12345678' });
+ * ```
+ * @param options.email - The email of the user.
+ * @param options.password - The password of the user.
+ */
+export async function signupWithPassword(options) {
+    const { email, password } = options;
+    await callMethod('_system.user.signupWithPassword', { email, password });
+}
+/**
+ * Login a user with an email and password.
+ *
+ * @example
+ * ```ts
+ * await loginWithPassword({ email: 'test@example.com', password: '12345678' });
+ * ```
+ * @param options.email - The email of the user.
+ * @param options.password - The password of the user.
+ */
+export async function loginWithPassword(options) {
+    const { email, password } = options;
+    const { user } = await callMethod('_system.user.loginWithPassword', {
+        email,
+        password,
+    });
+    setCurrentUser(user);
+    return user;
+}
+/**
+ * Verify user's email with a verification token.
+ *
+ * @example
+ * ```ts
+ * await verifyEmail({ token: 'verification-token' });
+ * ```
+ * @param options.token - The email verification token.
+ */
+export async function verifyEmail(options) {
+    const { token } = options;
+    await callMethod('_system.user.verifyEmail', { token });
+}
+/**
+ * Logout the current user.
+ *
+ */
+export async function logout() {
+    await callMethod('_system.user.logout');
+    setCurrentUser(null);
+}
+/**
+ * Send reset password token.
+ * @param options.email - The email of the user.
+ */
+export async function sendResetPasswordToken(options) {
+    const { email } = options;
+    await callMethod('_system.user.sendResetPasswordToken', {
+        email,
+    });
+}
+/**
+ * Reset password.
+ * @param options.token - The password reset token.
+ * @param options.password - The new password.
+ */
+export async function resetPassword(options) {
+    const { token, password } = options;
+    await callMethod('_system.user.resetPassword', {
+        token,
+        password,
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/auth/client/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/client/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAUjD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAA4C;IACnF,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IACpC,MAAM,UAAU,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAA4C;IAClF,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IACpC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,UAAU,CAAqB,gCAAgC,EAAE;QACtF,KAAK;QACL,QAAQ;KACT,CAAC,CAAC;IACH,cAAc,CAAC,IAAI,CAAC,CAAC;IACrB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAA0B;IAC1D,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAC1B,MAAM,UAAU,CAAqB,0BAA0B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM;IAC1B,MAAM,UAAU,CAAC,qBAAqB,CAAC,CAAC;IACxC,cAAc,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAA0B;IACrE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAC1B,MAAM,UAAU,CAAC,qCAAqC,EAAE;QACtD,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA4C;IAC9E,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IACpC,MAAM,UAAU,CAAC,4BAA4B,EAAE;QAC7C,KAAK;QACL,QAAQ;KACT,CAAC,CAAC;AACL,CAAC"}

package/dist/auth/db.d.ts

@@ -0,0 +1,176 @@
+import { Store } from '../data/store';
+/**
+ * Database collection for storing user accounts with authentication methods and profile information.
+ *
+ * This is where **signupWithPassword** automatically creates new users.
+ *
+ * @example
+ * ```typescript
+ * // Find user by email
+ * const user = await dbUsers.findOne(
+ *   { 'emails.address': 'john@example.com' }
+ * );
+ * ```
+ *
+ */
+export declare const usersCollection: Store<{
+    handle: import("zod").ZodString;
+    emails: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodObject<{
+        address: import("zod").ZodString;
+        verified: import("zod").ZodBoolean;
+    }, "strip", import("zod").ZodTypeAny, {
+        address: string;
+        verified: boolean;
+    }, {
+        address: string;
+        verified: boolean;
+    }>, "many">>;
+    status: import("zod").ZodOptional<import("zod").ZodEnum<["active", "disabled", "deleted"]>>;
+    createdAt: import("zod").ZodDate;
+    disabledAt: import("zod").ZodOptional<import("zod").ZodDate>;
+    deletedAt: import("zod").ZodOptional<import("zod").ZodDate>;
+    roles: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString, "many">>;
+    authMethods: import("zod").ZodObject<{
+        password: import("zod").ZodOptional<import("zod").ZodObject<{
+            hash: import("zod").ZodString;
+        }, "strip", import("zod").ZodTypeAny, {
+            hash: string;
+        }, {
+            hash: string;
+        }>>;
+        google: import("zod").ZodOptional<import("zod").ZodObject<{
+            id: import("zod").ZodString;
+        }, "strip", import("zod").ZodTypeAny, {
+            id: string;
+        }, {
+            id: string;
+        }>>;
+        github: import("zod").ZodOptional<import("zod").ZodObject<{
+            id: import("zod").ZodString;
+        }, "strip", import("zod").ZodTypeAny, {
+            id: string;
+        }, {
+            id: string;
+        }>>;
+    }, "strip", import("zod").ZodTypeAny, {
+        password?: {
+            hash: string;
+        } | undefined;
+        google?: {
+            id: string;
+        } | undefined;
+        github?: {
+            id: string;
+        } | undefined;
+    }, {
+        password?: {
+            hash: string;
+        } | undefined;
+        google?: {
+            id: string;
+        } | undefined;
+        github?: {
+            id: string;
+        } | undefined;
+    }>;
+}, Record<string, (this: Pick<import("../types").InferDocumentType<{
+    handle: import("zod").ZodString;
+    emails: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodObject<{
+        address: import("zod").ZodString;
+        verified: import("zod").ZodBoolean;
+    }, "strip", import("zod").ZodTypeAny, {
+        address: string;
+        verified: boolean;
+    }, {
+        address: string;
+        verified: boolean;
+    }>, "many">>;
+    status: import("zod").ZodOptional<import("zod").ZodEnum<["active", "disabled", "deleted"]>>;
+    createdAt: import("zod").ZodDate;
+    disabledAt: import("zod").ZodOptional<import("zod").ZodDate>;
+    deletedAt: import("zod").ZodOptional<import("zod").ZodDate>;
+    roles: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString, "many">>;
+    authMethods: import("zod").ZodObject<{
+        password: import("zod").ZodOptional<import("zod").ZodObject<{
+            hash: import("zod").ZodString;
+        }, "strip", import("zod").ZodTypeAny, {
+            hash: string;
+        }, {
+            hash: string;
+        }>>;
+        google: import("zod").ZodOptional<import("zod").ZodObject<{
+            id: import("zod").ZodString;
+        }, "strip", import("zod").ZodTypeAny, {
+            id: string;
+        }, {
+            id: string;
+        }>>;
+        github: import("zod").ZodOptional<import("zod").ZodObject<{
+            id: import("zod").ZodString;
+        }, "strip", import("zod").ZodTypeAny, {
+            id: string;
+        }, {
+            id: string;
+        }>>;
+    }, "strip", import("zod").ZodTypeAny, {
+        password?: {
+            hash: string;
+        } | undefined;
+        google?: {
+            id: string;
+        } | undefined;
+        github?: {
+            id: string;
+        } | undefined;
+    }, {
+        password?: {
+            hash: string;
+        } | undefined;
+        google?: {
+            id: string;
+        } | undefined;
+        github?: {
+            id: string;
+        } | undefined;
+    }>;
+}>, "handle" | "roles" | "status" | "createdAt" | "emails" | "disabledAt" | "deletedAt" | "authMethods"> & {
+    _id: import("bson").ObjectId;
+}, ...args: any[]) => any>>;
+export declare const dbDisposableEmailDomains: Store<{
+    domain: import("zod").ZodString;
+    addedAt: import("zod").ZodDate;
+}, Record<string, (this: Pick<import("../types").InferDocumentType<{
+    domain: import("zod").ZodString;
+    addedAt: import("zod").ZodDate;
+}>, "domain" | "addedAt"> & {
+    _id: import("bson").ObjectId;
+}, ...args: any[]) => any>>;
+export declare const emailVerificationTokensCollection: Store<{
+    userId: import("zod").ZodType<import("bson").ObjectId, import("zod").ZodTypeDef, import("bson").ObjectId>;
+    email: import("zod").ZodOptional<import("zod").ZodString>;
+    token: import("zod").ZodString;
+    createdAt: import("zod").ZodDate;
+    expiresAt: import("zod").ZodDate;
+}, Record<string, (this: Pick<import("../types").InferDocumentType<{
+    userId: import("zod").ZodType<import("bson").ObjectId, import("zod").ZodTypeDef, import("bson").ObjectId>;
+    email: import("zod").ZodOptional<import("zod").ZodString>;
+    token: import("zod").ZodString;
+    createdAt: import("zod").ZodDate;
+    expiresAt: import("zod").ZodDate;
+}>, "email" | "token" | "createdAt" | "expiresAt" | "userId"> & {
+    _id: import("bson").ObjectId;
+}, ...args: any[]) => any>>;
+export declare const resetPasswordTokensCollection: Store<{
+    userId: import("zod").ZodType<import("bson").ObjectId, import("zod").ZodTypeDef, import("bson").ObjectId>;
+    token: import("zod").ZodString;
+    createdAt: import("zod").ZodDate;
+    expiresAt: import("zod").ZodDate;
+}, Record<string, (this: Pick<import("../types").InferDocumentType<{
+    userId: import("zod").ZodType<import("bson").ObjectId, import("zod").ZodTypeDef, import("bson").ObjectId>;
+    token: import("zod").ZodString;
+    createdAt: import("zod").ZodDate;
+    expiresAt: import("zod").ZodDate;
+}>, "token" | "createdAt" | "expiresAt" | "userId"> & {
+    _id: import("bson").ObjectId;
+}, ...args: any[]) => any>>;
+//# sourceMappingURL=db.d.ts.map

package/dist/auth/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../src/auth/db.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAEtC;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAoD1B,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;;;;2BAWnC,CAAC;AAEH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;2BAkB5C,CAAC;AAEH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;2BAiBxC,CAAC"}

package/dist/auth/db.js

@@ -0,0 +1,117 @@
+import { schema } from '../data/types';
+import { Store } from '../data/store';
+/**
+ * Database collection for storing user accounts with authentication methods and profile information.
+ *
+ * This is where **signupWithPassword** automatically creates new users.
+ *
+ * @example
+ * ```typescript
+ * // Find user by email
+ * const user = await dbUsers.findOne(
+ *   { 'emails.address': 'john@example.com' }
+ * );
+ * ```
+ *
+ */
+export const usersCollection = new Store('_modelenceUsers', {
+    schema: {
+        handle: schema.string(),
+        emails: schema
+            .array(schema.object({
+            address: schema.string(),
+            verified: schema.boolean(),
+        }))
+            .optional(),
+        status: schema.enum(['active', 'disabled', 'deleted']).optional(),
+        createdAt: schema.date(),
+        disabledAt: schema.date().optional(),
+        deletedAt: schema.date().optional(),
+        roles: schema.array(schema.string()).optional(),
+        authMethods: schema.object({
+            password: schema
+                .object({
+                hash: schema.string(),
+            })
+                .optional(),
+            google: schema
+                .object({
+                id: schema.string(),
+            })
+                .optional(),
+            github: schema
+                .object({
+                id: schema.string(),
+            })
+                .optional(),
+        }),
+    },
+    indexes: [
+        {
+            key: { handle: 1 },
+            unique: true,
+            collation: { locale: 'en', strength: 2 }, // Case-insensitive
+        },
+        {
+            key: { 'emails.address': 1, status: 1 },
+        },
+        {
+            key: { 'authMethods.google.id': 1, status: 1 },
+            sparse: true,
+        },
+        {
+            key: { 'authMethods.github.id': 1, status: 1 },
+            sparse: true,
+        },
+    ],
+});
+export const dbDisposableEmailDomains = new Store('_modelenceDisposableEmailDomains', {
+    schema: {
+        domain: schema.string(),
+        addedAt: schema.date(),
+    },
+    indexes: [
+        {
+            key: { domain: 1 },
+            unique: true,
+        },
+    ],
+});
+export const emailVerificationTokensCollection = new Store('_modelenceEmailVerificationTokens', {
+    schema: {
+        userId: schema.objectId(),
+        email: schema.string().optional(),
+        token: schema.string(),
+        createdAt: schema.date(),
+        expiresAt: schema.date(),
+    },
+    indexes: [
+        {
+            key: { token: 1 },
+            unique: true,
+        },
+        {
+            key: { expiresAt: 1 },
+            expireAfterSeconds: 0,
+        },
+    ],
+});
+export const resetPasswordTokensCollection = new Store('_modelenceResetPasswordTokens', {
+    schema: {
+        userId: schema.objectId(),
+        token: schema.string(),
+        createdAt: schema.date(),
+        expiresAt: schema.date(),
+    },
+    indexes: [
+        {
+            key: { token: 1 },
+            unique: true,
+        },
+        {
+            key: { expiresAt: 1 },
+            expireAfterSeconds: 0,
+        },
+    ],
+});
+//# sourceMappingURL=db.js.map

package/dist/auth/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../../src/auth/db.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAEtC;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,KAAK,CAAC,iBAAiB,EAAE;IAC1D,MAAM,EAAE;QACN,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QACvB,MAAM,EAAE,MAAM;aACX,KAAK,CACJ,MAAM,CAAC,MAAM,CAAC;YACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE;YACxB,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE;SAC3B,CAAC,CACH;aACA,QAAQ,EAAE;QACb,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;QACjE,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE;QACxB,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QACpC,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QACnC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC/C,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;YACzB,QAAQ,EAAE,MAAM;iBACb,MAAM,CAAC;gBACN,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE;aACtB,CAAC;iBACD,QAAQ,EAAE;YACb,MAAM,EAAE,MAAM;iBACX,MAAM,CAAC;gBACN,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE;aACpB,CAAC;iBACD,QAAQ,EAAE;YACb,MAAM,EAAE,MAAM;iBACX,MAAM,CAAC;gBACN,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE;aACpB,CAAC;iBACD,QAAQ,EAAE;SACd,CAAC;KACH;IACD,OAAO,EAAE;QACP;YACE,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE;YAClB,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,mBAAmB;SAC9D;QACD;YACE,GAAG,EAAE,EAAE,gBAAgB,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;SACxC;QACD;YACE,GAAG,EAAE,EAAE,uBAAuB,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;YAC9C,MAAM,EAAE,IAAI;SACb;QACD;YACE,GAAG,EAAE,EAAE,uBAAuB,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;YAC9C,MAAM,EAAE,IAAI;SACb;KACF;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,KAAK,CAAC,kCAAkC,EAAE;IACpF,MAAM,EAAE;QACN,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QACvB,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE;KACvB;IACD,OAAO,EAAE;QACP;YACE,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE;YAClB,MAAM,EAAE,IAAI;SACb;KACF;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iCAAiC,GAAG,IAAI,KAAK,CAAC,mCAAmC,EAAE;IAC9F,MAAM,EAAE;QACN,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;QACzB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;QACtB,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE;QACxB,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE;KACzB;IACD,OAAO,EAAE;QACP;YACE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;YACjB,MAAM,EAAE,IAAI;SACb;QACD;YACE,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;YACrB,kBAAkB,EAAE,CAAC;SACtB;KACF;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,KAAK,CAAC,+BAA+B,EAAE;IACtF,MAAM,EAAE;QACN,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;QACzB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;QACtB,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE;QACxB,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE;KACzB;IACD,OAAO,EAAE;QACP;YACE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;YACjB,MAAM,EAAE,IAAI;SACb;QACD;YACE,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;YACrB,kBAAkB,EAAE,CAAC;SACtB;KACF;CACF,CAAC,CAAC"}

package/dist/auth/deleteUser.d.ts

@@ -0,0 +1,5 @@
+import { ObjectId } from 'mongodb';
+export declare function clearTokens(userId: ObjectId): Promise<void>;
+export declare function disableUser(userId: ObjectId): Promise<void>;
+export declare function deleteUser(userId: ObjectId): Promise<void>;
+//# sourceMappingURL=deleteUser.d.ts.map

package/dist/auth/deleteUser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deleteUser.d.ts","sourceRoot":"","sources":["../../src/auth/deleteUser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAQnC,wBAAsB,WAAW,CAAC,MAAM,EAAE,QAAQ,iBAQjD;AAED,wBAAsB,WAAW,CAAC,MAAM,EAAE,QAAQ,iBASjD;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,QAAQ,iBAiBhD"}

package/dist/auth/deleteUser.js

@@ -0,0 +1,34 @@
+import { randomUUID } from 'crypto';
+import { usersCollection, emailVerificationTokensCollection, resetPasswordTokensCollection, } from './db';
+export async function clearTokens(userId) {
+    await emailVerificationTokensCollection.deleteMany({
+        userId,
+    });
+    await resetPasswordTokensCollection.deleteMany({
+        userId,
+    });
+}
+export async function disableUser(userId) {
+    await clearTokens(userId);
+    await usersCollection.updateOne(userId, {
+        $set: {
+            status: 'disabled',
+            disabledAt: new Date(),
+        },
+    });
+}
+export async function deleteUser(userId) {
+    await clearTokens(userId);
+    await usersCollection.updateOne({
+        _id: userId,
+    }, {
+        $set: {
+            handle: `deleted-${userId}-${randomUUID()}`,
+            status: 'deleted',
+            deletedAt: new Date(),
+            authMethods: {},
+            emails: [],
+        },
+    });
+}
+//# sourceMappingURL=deleteUser.js.map

package/dist/auth/deleteUser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deleteUser.js","sourceRoot":"","sources":["../../src/auth/deleteUser.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EACL,eAAe,EACf,iCAAiC,EACjC,6BAA6B,GAC9B,MAAM,MAAM,CAAC;AAEd,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAgB;IAChD,MAAM,iCAAiC,CAAC,UAAU,CAAC;QACjD,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,6BAA6B,CAAC,UAAU,CAAC;QAC7C,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAgB;IAChD,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;IAE1B,MAAM,eAAe,CAAC,SAAS,CAAC,MAAM,EAAE;QACtC,IAAI,EAAE;YACJ,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,IAAI,IAAI,EAAE;SACvB;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAgB;IAC/C,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;IAE1B,MAAM,eAAe,CAAC,SAAS,CAC7B;QACE,GAAG,EAAE,MAAM;KACZ,EACD;QACE,IAAI,EAAE;YACJ,MAAM,EAAE,WAAW,MAAM,IAAI,UAAU,EAAE,EAAE;YAC3C,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,WAAW,EAAE,EAAE;YACf,MAAM,EAAE,EAAE;SACX;KACF,CACF,CAAC;AACJ,CAAC"}

package/dist/auth/disposableEmails.d.ts

@@ -0,0 +1,6 @@
+export declare function isDisposableEmail(email: string): Promise<boolean>;
+export declare const updateDisposableEmailListCron: {
+    interval: number;
+    handler(): Promise<void>;
+};
+//# sourceMappingURL=disposableEmails.d.ts.map

package/dist/auth/disposableEmails.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"disposableEmails.d.ts","sourceRoot":"","sources":["../../src/auth/disposableEmails.ts"],"names":[],"mappings":"AAGA,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CASvE;AAED,eAAO,MAAM,6BAA6B;;;CA6CzC,CAAC"}

package/dist/auth/disposableEmails.js

@@ -0,0 +1,47 @@
+import { time } from '../time';
+import { dbDisposableEmailDomains } from './db';
+export async function isDisposableEmail(email) {
+    const emailParts = email.toLowerCase().trim().split('@');
+    if (emailParts.length !== 2) {
+        return false;
+    }
+    const domain = emailParts[1];
+    const result = await dbDisposableEmailDomains.findOne({ domain });
+    return Boolean(result);
+}
+export const updateDisposableEmailListCron = {
+    interval: time.days(1),
+    async handler() {
+        const response = await fetch('https://disposable.github.io/disposable-email-domains/domains.txt');
+        if (!response.ok) {
+            throw new Error(`HTTP ${response.status}: ${response.statusText}`);
+        }
+        const domainsText = await response.text();
+        const domains = domainsText
+            .split('\n')
+            .map((domain) => domain.trim().toLowerCase())
+            .filter((domain) => domain.length > 0);
+        const now = new Date();
+        // Insert domains in batches to avoid overwhelming the database
+        const batchSize = 500;
+        for (let i = 0; i < domains.length; i += batchSize) {
+            const batch = domains.slice(i, i + batchSize);
+            try {
+                await dbDisposableEmailDomains.insertMany(batch.map((domain) => ({
+                    domain,
+                    addedAt: now,
+                })));
+            }
+            catch (error) {
+                // MongoDB throws BulkWriteError when some documents are duplicates
+                if (error &&
+                    typeof error === 'object' &&
+                    'name' in error &&
+                    error.name === 'MongoBulkWriteError') {
+                    // console.warn(`Error inserting batch starting at index ${i}:`, error.message);
+                }
+            }
+        }
+    },
+};
+//# sourceMappingURL=disposableEmails.js.map

package/dist/auth/disposableEmails.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"disposableEmails.js","sourceRoot":"","sources":["../../src/auth/disposableEmails.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,wBAAwB,EAAE,MAAM,MAAM,CAAC;AAEhD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAa;IACnD,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAClE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACtB,KAAK,CAAC,OAAO;QACX,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,mEAAmE,CACpE,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAE1C,MAAM,OAAO,GAAG,WAAW;aACxB,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;aAC5C,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAEzC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,+DAA+D;QAC/D,MAAM,SAAS,GAAG,GAAG,CAAC;QACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC;YACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC;YAE9C,IAAI,CAAC;gBACH,MAAM,wBAAwB,CAAC,UAAU,CACvC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;oBACrB,MAAM;oBACN,OAAO,EAAE,GAAG;iBACb,CAAC,CAAC,CACJ,CAAC;YACJ,CAAC;YAAC,OAAO,KAAc,EAAE,CAAC;gBACxB,mEAAmE;gBACnE,IACE,KAAK;oBACL,OAAO,KAAK,KAAK,QAAQ;oBACzB,MAAM,IAAI,KAAK;oBACf,KAAK,CAAC,IAAI,KAAK,qBAAqB,EACpC,CAAC;oBACD,gFAAgF;gBAClF,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/auth/index.d.ts

@@ -0,0 +1,7 @@
+import { Role, Session, UserInfo } from './types';
+export declare function authenticate(authToken: string | null): Promise<{
+    session: Session;
+    user: UserInfo | null;
+    roles: Role[];
+}>;
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAElD,wBAAsB,YAAY,CAChC,SAAS,EAAE,MAAM,GAAG,IAAI,GACvB,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,IAAI,EAAE,CAAA;CAAE,CAAC,CA8BrE"}

package/dist/auth/index.js

@@ -0,0 +1,33 @@
+import { ObjectId } from 'mongodb';
+import { obtainSession } from './session';
+import { usersCollection } from './db';
+import { getDefaultAuthenticatedRoles, getUnauthenticatedRoles } from './role';
+export async function authenticate(authToken) {
+    const session = await obtainSession(authToken);
+    const userDoc = session.userId
+        ? await usersCollection.findOne({
+            _id: new ObjectId(session.userId),
+            status: { $nin: ['deleted', 'disabled'] },
+        })
+        : null;
+    const user = userDoc
+        ? {
+            id: userDoc._id.toString(),
+            handle: userDoc.handle,
+            roles: userDoc.roles || [],
+            hasRole: (role) => (userDoc.roles || []).includes(role),
+            requireRole: (role) => {
+                if (!(userDoc.roles || []).includes(role)) {
+                    throw new Error(`Access denied - role '${role}' required`);
+                }
+            },
+        }
+        : null;
+    const roles = user ? getDefaultAuthenticatedRoles() : getUnauthenticatedRoles();
+    return {
+        user,
+        session,
+        roles,
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEnC,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,MAAM,CAAC;AACvC,OAAO,EAAE,4BAA4B,EAAE,uBAAuB,EAAE,MAAM,QAAQ,CAAC;AAG/E,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,SAAwB;IAExB,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;IAE/C,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM;QAC5B,CAAC,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC;YAC5B,GAAG,EAAE,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;YACjC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE;SAC1C,CAAC;QACJ,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,IAAI,GAAG,OAAO;QAClB,CAAC,CAAC;YACE,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE;YAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;YAC1B,OAAO,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC/D,WAAW,EAAE,CAAC,IAAY,EAAE,EAAE;gBAC5B,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1C,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,YAAY,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC;SACF;QACH,CAAC,CAAC,IAAI,CAAC;IAET,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC,uBAAuB,EAAE,CAAC;IAEhF,OAAO;QACL,IAAI;QACJ,OAAO;QACP,KAAK;KACN,CAAC;AACJ,CAAC"}

package/dist/auth/login.d.ts

@@ -0,0 +1,9 @@
+import { Args, Context } from '../methods/types';
+export declare function handleLoginWithPassword(args: Args, { user, session, connectionInfo }: Context): Promise<{
+    user: {
+        id: import("bson").ObjectId;
+        handle: string;
+    };
+}>;
+export declare function handleLogout(args: Args, { session }: Context): Promise<void>;
+//# sourceMappingURL=login.d.ts.map

package/dist/auth/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/auth/login.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAUjD,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,IAAI,EACV,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,OAAO;;;;;GA8F3C;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,iBAMlE"}