fix npm run build

dist/modules/identity/application/handlers/user/assign-permission.handler.js

@@ -0,0 +1,42 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AssignPermissionHandler = void 0;
+const common_1 = require("@nestjs/common");
+const user_interface_1 = require("../../../domain/repositories/user.interface");
+const permission_entity_1 = require("../../../domain/entities/permission.entity");
+let AssignPermissionHandler = class AssignPermissionHandler {
+    userRepository;
+    constructor(userRepository) {
+        this.userRepository = userRepository;
+    }
+    async execute(userId, permissionId) {
+        const user = await this.userRepository.getById(userId);
+        if (!user)
+            throw new common_1.NotFoundException('User not found.');
+        // Permission repository is not available; create a minimal PermissionData
+        const perm = permission_entity_1.PermissionData.restore({
+            id: permissionId,
+            name: permissionId,
+            description: '',
+            createdAt: new Date(),
+            updatedAt: new Date(),
+        });
+        user.assignPermission(perm);
+        return this.userRepository.update(user);
+    }
+};
+exports.AssignPermissionHandler = AssignPermissionHandler;
+exports.AssignPermissionHandler = AssignPermissionHandler = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [user_interface_1.IUser])
+], AssignPermissionHandler);
+//# sourceMappingURL=assign-permission.handler.js.map

dist/modules/identity/application/handlers/user/assign-permission.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assign-permission.handler.js","sourceRoot":"","sources":["../../../../../../src/modules/identity/application/handlers/user/assign-permission.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA+D;AAC/D,gFAAoE;AACpE,kFAA4E;AAGrE,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IACL;IAA7B,YAA6B,cAAqB;QAArB,mBAAc,GAAd,cAAc,CAAO;IAAG,CAAC;IAEtD,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,YAAoB;QAChD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,0BAAiB,CAAC,iBAAiB,CAAC,CAAC;QAE1D,0EAA0E;QAC1E,MAAM,IAAI,GAAG,kCAAc,CAAC,OAAO,CAAC;YAClC,EAAE,EAAE,YAAY;YAChB,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC,CAAC;QAEH,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAE5B,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;CACF,CAAA;AApBY,0DAAuB;kCAAvB,uBAAuB;IADnC,IAAA,mBAAU,GAAE;qCAEkC,sBAAK;GADvC,uBAAuB,CAoBnC"}

dist/modules/identity/application/handlers/user/assign-role.handler.js

@@ -0,0 +1,40 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AssignRoleHandler = void 0;
+const common_1 = require("@nestjs/common");
+const user_interface_1 = require("../../../domain/repositories/user.interface");
+const role_interface_1 = require("../../../domain/repositories/role.interface");
+let AssignRoleHandler = class AssignRoleHandler {
+    userRepository;
+    roleRepository;
+    constructor(userRepository, roleRepository) {
+        this.userRepository = userRepository;
+        this.roleRepository = roleRepository;
+    }
+    async execute(userId, roleId) {
+        const user = await this.userRepository.getById(userId);
+        if (!user)
+            throw new common_1.NotFoundException('User not found.');
+        const role = await this.roleRepository.findById(roleId);
+        if (!role)
+            throw new common_1.NotFoundException('Role not found.');
+        user.assignRole(role);
+        return this.userRepository.update(user);
+    }
+};
+exports.AssignRoleHandler = AssignRoleHandler;
+exports.AssignRoleHandler = AssignRoleHandler = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [user_interface_1.IUser,
+        role_interface_1.IRole])
+], AssignRoleHandler);
+//# sourceMappingURL=assign-role.handler.js.map

dist/modules/identity/application/handlers/user/assign-role.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assign-role.handler.js","sourceRoot":"","sources":["../../../../../../src/modules/identity/application/handlers/user/assign-role.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA+D;AAC/D,gFAAoE;AACpE,gFAAoE;AAG7D,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAET;IACA;IAFnB,YACmB,cAAqB,EACrB,cAAqB;QADrB,mBAAc,GAAd,cAAc,CAAO;QACrB,mBAAc,GAAd,cAAc,CAAO;IACrC,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,MAAc;QAC1C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,0BAAiB,CAAC,iBAAiB,CAAC,CAAC;QAE1D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,0BAAiB,CAAC,iBAAiB,CAAC,CAAC;QAE1D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAEtB,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;CACF,CAAA;AAjBY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;qCAGwB,sBAAK;QACL,sBAAK;GAH7B,iBAAiB,CAiB7B"}

dist/modules/identity/application/handlers/user/create-user.handler.js

@@ -0,0 +1,39 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreateUserHandler = void 0;
+const common_1 = require("@nestjs/common");
+const user_interface_1 = require("../../../domain/repositories/user.interface");
+const user_service_1 = require("../../services/user.service");
+let CreateUserHandler = class CreateUserHandler {
+    userRepository;
+    userService;
+    constructor(userRepository, userService) {
+        this.userRepository = userRepository;
+        this.userService = userService;
+    }
+    async execute(dto) {
+        const exists = await this.userRepository.existByEmail(dto.email);
+        if (exists) {
+            throw new common_1.ConflictException('Email already exists.');
+        }
+        // Provisioning disabled: Do not create users in external IdP from RayLab.
+        // Reject attempts to create users via API to enforce creation-at-Authentik policy.
+        throw new common_1.BadRequestException('User creation via RayLab API is disabled. Create users in Authentik and then login to sync.');
+    }
+};
+exports.CreateUserHandler = CreateUserHandler;
+exports.CreateUserHandler = CreateUserHandler = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [user_interface_1.IUser,
+        user_service_1.UserService])
+], CreateUserHandler);
+//# sourceMappingURL=create-user.handler.js.map

dist/modules/identity/application/handlers/user/create-user.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-user.handler.js","sourceRoot":"","sources":["../../../../../../src/modules/identity/application/handlers/user/create-user.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAIwB;AAGxB,gFAAoE;AAEpE,8DAA0D;AAGnD,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAET;IACA;IAFnB,YACmB,cAAqB,EACrB,WAAwB;QADxB,mBAAc,GAAd,cAAc,CAAO;QACrB,gBAAW,GAAX,WAAW,CAAa;IACxC,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,GAAkB;QAE9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAEjE,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,IAAI,0BAAiB,CAAC,uBAAuB,CAAC,CAAC;QACvD,CAAC;QAED,0EAA0E;QAC1E,mFAAmF;QACnF,MAAM,IAAI,4BAAmB,CAAC,6FAA6F,CAAC,CAAC;IAC/H,CAAC;CACF,CAAA;AAlBY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;qCAGwB,sBAAK;QACR,0BAAW;GAHhC,iBAAiB,CAkB7B"}

dist/modules/identity/application/handlers/user/delete-user.handler.js

@@ -0,0 +1,32 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DeleteUserHandler = void 0;
+const common_1 = require("@nestjs/common");
+const user_interface_1 = require("../../../domain/repositories/user.interface");
+let DeleteUserHandler = class DeleteUserHandler {
+    userRepository;
+    constructor(userRepository) {
+        this.userRepository = userRepository;
+    }
+    async execute(id) {
+        const exists = await this.userRepository.existsById(id);
+        if (!exists)
+            throw new common_1.NotFoundException('User not found.');
+        await this.userRepository.softDelete(id);
+    }
+};
+exports.DeleteUserHandler = DeleteUserHandler;
+exports.DeleteUserHandler = DeleteUserHandler = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [user_interface_1.IUser])
+], DeleteUserHandler);
+//# sourceMappingURL=delete-user.handler.js.map

dist/modules/identity/application/handlers/user/delete-user.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-user.handler.js","sourceRoot":"","sources":["../../../../../../src/modules/identity/application/handlers/user/delete-user.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA+D;AAC/D,gFAAoE;AAG7D,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IACC;IAA7B,YAA6B,cAAqB;QAArB,mBAAc,GAAd,cAAc,CAAO;IAAG,CAAC;IAEtD,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,0BAAiB,CAAC,iBAAiB,CAAC,CAAC;QAE5D,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC3C,CAAC;CACF,CAAA;AATY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;qCAEkC,sBAAK;GADvC,iBAAiB,CAS7B"}

dist/modules/identity/application/handlers/user/disable-user.handler.js

@@ -0,0 +1,32 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DisableUserHandler = void 0;
+const common_1 = require("@nestjs/common");
+const user_interface_1 = require("../../../domain/repositories/user.interface");
+let DisableUserHandler = class DisableUserHandler {
+    userRepository;
+    constructor(userRepository) {
+        this.userRepository = userRepository;
+    }
+    async execute(id) {
+        const exists = await this.userRepository.existsById(id);
+        if (!exists)
+            throw new common_1.NotFoundException('User not found.');
+        return this.userRepository.disable(id);
+    }
+};
+exports.DisableUserHandler = DisableUserHandler;
+exports.DisableUserHandler = DisableUserHandler = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [user_interface_1.IUser])
+], DisableUserHandler);
+//# sourceMappingURL=disable-user.handler.js.map

dist/modules/identity/application/handlers/user/disable-user.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"disable-user.handler.js","sourceRoot":"","sources":["../../../../../../src/modules/identity/application/handlers/user/disable-user.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA+D;AAC/D,gFAAoE;AAG7D,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IACA;IAA7B,YAA6B,cAAqB;QAArB,mBAAc,GAAd,cAAc,CAAO;IAAG,CAAC;IAEtD,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,0BAAiB,CAAC,iBAAiB,CAAC,CAAC;QAE5D,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC;CACF,CAAA;AATY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;qCAEkC,sBAAK;GADvC,kBAAkB,CAS9B"}

dist/modules/identity/application/handlers/user/enable-user.handler.js

@@ -0,0 +1,32 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EnableUserHandler = void 0;
+const common_1 = require("@nestjs/common");
+const user_interface_1 = require("../../../domain/repositories/user.interface");
+let EnableUserHandler = class EnableUserHandler {
+    userRepository;
+    constructor(userRepository) {
+        this.userRepository = userRepository;
+    }
+    async execute(id) {
+        const exists = await this.userRepository.existsById(id);
+        if (!exists)
+            throw new common_1.NotFoundException('User not found.');
+        return this.userRepository.enable(id);
+    }
+};
+exports.EnableUserHandler = EnableUserHandler;
+exports.EnableUserHandler = EnableUserHandler = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [user_interface_1.IUser])
+], EnableUserHandler);
+//# sourceMappingURL=enable-user.handler.js.map

dist/modules/identity/application/handlers/user/enable-user.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enable-user.handler.js","sourceRoot":"","sources":["../../../../../../src/modules/identity/application/handlers/user/enable-user.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA+D;AAC/D,gFAAoE;AAG7D,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IACC;IAA7B,YAA6B,cAAqB;QAArB,mBAAc,GAAd,cAAc,CAAO;IAAG,CAAC;IAEtD,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,0BAAiB,CAAC,iBAAiB,CAAC,CAAC;QAE5D,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACxC,CAAC;CACF,CAAA;AATY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;qCAEkC,sBAAK;GADvC,iBAAiB,CAS7B"}

dist/modules/identity/application/handlers/user/get-current-user.handler.js

@@ -0,0 +1,21 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GetCurrentUserHandler = void 0;
+const common_1 = require("@nestjs/common");
+let GetCurrentUserHandler = class GetCurrentUserHandler {
+    async execute(currentUser) {
+        // currentUser is already domain user attached by CurrentUserGuard
+        return currentUser;
+    }
+};
+exports.GetCurrentUserHandler = GetCurrentUserHandler;
+exports.GetCurrentUserHandler = GetCurrentUserHandler = __decorate([
+    (0, common_1.Injectable)()
+], GetCurrentUserHandler);
+//# sourceMappingURL=get-current-user.handler.js.map

dist/modules/identity/application/handlers/user/get-current-user.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-current-user.handler.js","sourceRoot":"","sources":["../../../../../../src/modules/identity/application/handlers/user/get-current-user.handler.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAA4C;AAIrC,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAChC,KAAK,CAAC,OAAO,CAAC,WAAqB;QACjC,kEAAkE;QAClE,OAAO,WAAW,CAAC;IACrB,CAAC;CACF,CAAA;AALY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;GACA,qBAAqB,CAKjC"}

dist/modules/identity/application/handlers/user/get-user.handler.js

@@ -0,0 +1,29 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GetUserHandler = void 0;
+const common_1 = require("@nestjs/common");
+const user_interface_1 = require("../../../domain/repositories/user.interface");
+let GetUserHandler = class GetUserHandler {
+    userRepository;
+    constructor(userRepository) {
+        this.userRepository = userRepository;
+    }
+    async execute(id) {
+        return this.userRepository.getById(id);
+    }
+};
+exports.GetUserHandler = GetUserHandler;
+exports.GetUserHandler = GetUserHandler = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [user_interface_1.IUser])
+], GetUserHandler);
+//# sourceMappingURL=get-user.handler.js.map

dist/modules/identity/application/handlers/user/get-user.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-user.handler.js","sourceRoot":"","sources":["../../../../../../src/modules/identity/application/handlers/user/get-user.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,gFAAoE;AAG7D,IAAM,cAAc,GAApB,MAAM,cAAc;IACI;IAA7B,YAA6B,cAAqB;QAArB,mBAAc,GAAd,cAAc,CAAO;IAAG,CAAC;IAEtD,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC;CACF,CAAA;AANY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;qCAEkC,sBAAK;GADvC,cAAc,CAM1B"}

dist/modules/identity/application/handlers/user/get-users.handler.js

@@ -0,0 +1,37 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GetUsersHandler = void 0;
+const common_1 = require("@nestjs/common");
+const user_interface_1 = require("../../../domain/repositories/user.interface");
+let GetUsersHandler = class GetUsersHandler {
+    userRepository;
+    constructor(userRepository) {
+        this.userRepository = userRepository;
+    }
+    async execute(query) {
+        const res = await this.userRepository.find({
+            page: query.page,
+            limit: query.limit,
+            search: query.search || null,
+            isActive: query.isActive !== undefined ? query.isActive : null,
+            deleted: query.deleted !== undefined ? query.deleted : null,
+            roleId: query.roleId || null,
+        });
+        return res;
+    }
+};
+exports.GetUsersHandler = GetUsersHandler;
+exports.GetUsersHandler = GetUsersHandler = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [user_interface_1.IUser])
+], GetUsersHandler);
+//# sourceMappingURL=get-users.handler.js.map

dist/modules/identity/application/handlers/user/get-users.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-users.handler.js","sourceRoot":"","sources":["../../../../../../src/modules/identity/application/handlers/user/get-users.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,gFAAoE;AAG7D,IAAM,eAAe,GAArB,MAAM,eAAe;IACG;IAA7B,YAA6B,cAAqB;QAArB,mBAAc,GAAd,cAAc,CAAO;IAAG,CAAC;IAEtD,KAAK,CAAC,OAAO,CAAC,KAOb;QACC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;YACzC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;YAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;YAC9D,OAAO,EAAE,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;YAC3D,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;SAC7B,CAAC,CAAC;QAEH,OAAO,GAAG,CAAC;IACb,CAAC;CACF,CAAA;AAtBY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;qCAEkC,sBAAK;GADvC,eAAe,CAsB3B"}

dist/modules/identity/application/handlers/user/remove-permission.handler.js

@@ -0,0 +1,33 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RemovePermissionHandler = void 0;
+const common_1 = require("@nestjs/common");
+const user_interface_1 = require("../../../domain/repositories/user.interface");
+let RemovePermissionHandler = class RemovePermissionHandler {
+    userRepository;
+    constructor(userRepository) {
+        this.userRepository = userRepository;
+    }
+    async execute(userId, permissionId) {
+        const user = await this.userRepository.getById(userId);
+        if (!user)
+            throw new common_1.NotFoundException('User not found.');
+        user.removePermission(permissionId);
+        return this.userRepository.update(user);
+    }
+};
+exports.RemovePermissionHandler = RemovePermissionHandler;
+exports.RemovePermissionHandler = RemovePermissionHandler = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [user_interface_1.IUser])
+], RemovePermissionHandler);
+//# sourceMappingURL=remove-permission.handler.js.map

dist/modules/identity/application/handlers/user/remove-permission.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove-permission.handler.js","sourceRoot":"","sources":["../../../../../../src/modules/identity/application/handlers/user/remove-permission.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA+D;AAC/D,gFAAoE;AAG7D,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IACL;IAA7B,YAA6B,cAAqB;QAArB,mBAAc,GAAd,cAAc,CAAO;IAAG,CAAC;IAEtD,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,YAAoB;QAChD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,0BAAiB,CAAC,iBAAiB,CAAC,CAAC;QAE1D,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAEpC,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;CACF,CAAA;AAXY,0DAAuB;kCAAvB,uBAAuB;IADnC,IAAA,mBAAU,GAAE;qCAEkC,sBAAK;GADvC,uBAAuB,CAWnC"}

dist/modules/identity/application/handlers/user/remove-role.handler.js

@@ -0,0 +1,33 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RemoveRoleHandler = void 0;
+const common_1 = require("@nestjs/common");
+const user_interface_1 = require("../../../domain/repositories/user.interface");
+let RemoveRoleHandler = class RemoveRoleHandler {
+    userRepository;
+    constructor(userRepository) {
+        this.userRepository = userRepository;
+    }
+    async execute(userId, roleId) {
+        const user = await this.userRepository.getById(userId);
+        if (!user)
+            throw new common_1.NotFoundException('User not found.');
+        user.removeRole(roleId);
+        return this.userRepository.update(user);
+    }
+};
+exports.RemoveRoleHandler = RemoveRoleHandler;
+exports.RemoveRoleHandler = RemoveRoleHandler = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [user_interface_1.IUser])
+], RemoveRoleHandler);
+//# sourceMappingURL=remove-role.handler.js.map

dist/modules/identity/application/handlers/user/remove-role.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove-role.handler.js","sourceRoot":"","sources":["../../../../../../src/modules/identity/application/handlers/user/remove-role.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA+D;AAC/D,gFAAoE;AAG7D,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IACC;IAA7B,YAA6B,cAAqB;QAArB,mBAAc,GAAd,cAAc,CAAO;IAAG,CAAC;IAEtD,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,MAAc;QAC1C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,0BAAiB,CAAC,iBAAiB,CAAC,CAAC;QAE1D,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAExB,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;CACF,CAAA;AAXY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;qCAEkC,sBAAK;GADvC,iBAAiB,CAW7B"}

dist/modules/identity/application/handlers/user/restore-user.handler.js

@@ -0,0 +1,32 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RestoreUserHandler = void 0;
+const common_1 = require("@nestjs/common");
+const user_interface_1 = require("../../../domain/repositories/user.interface");
+let RestoreUserHandler = class RestoreUserHandler {
+    userRepository;
+    constructor(userRepository) {
+        this.userRepository = userRepository;
+    }
+    async execute(id) {
+        const exists = await this.userRepository.existsById(id);
+        if (!exists)
+            throw new common_1.NotFoundException('User not found.');
+        return this.userRepository.restore(id);
+    }
+};
+exports.RestoreUserHandler = RestoreUserHandler;
+exports.RestoreUserHandler = RestoreUserHandler = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [user_interface_1.IUser])
+], RestoreUserHandler);
+//# sourceMappingURL=restore-user.handler.js.map

dist/modules/identity/application/handlers/user/restore-user.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restore-user.handler.js","sourceRoot":"","sources":["../../../../../../src/modules/identity/application/handlers/user/restore-user.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA+D;AAC/D,gFAAoE;AAG7D,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IACA;IAA7B,YAA6B,cAAqB;QAArB,mBAAc,GAAd,cAAc,CAAO;IAAG,CAAC;IAEtD,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,0BAAiB,CAAC,iBAAiB,CAAC,CAAC;QAE5D,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC;CACF,CAAA;AATY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;qCAEkC,sBAAK;GADvC,kBAAkB,CAS9B"}

dist/modules/identity/application/handlers/user/sync-identity.handler.js

@@ -0,0 +1,92 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SyncIdentityHandler = void 0;
+const common_1 = require("@nestjs/common");
+const user_interface_1 = require("../../../domain/repositories/user.interface");
+const role_interface_1 = require("../../../domain/repositories/role.interface");
+const i_auth_config_1 = require("../../config/i-auth-config");
+const user_entity_1 = require("../../../domain/entities/user.entity");
+let SyncIdentityHandler = class SyncIdentityHandler {
+    userRepository;
+    roleRepository;
+    authConfig;
+    constructor(userRepository, roleRepository, authConfig) {
+        this.userRepository = userRepository;
+        this.roleRepository = roleRepository;
+        this.authConfig = authConfig;
+    }
+    async execute(identity) {
+        const { sub, preferred_username, email } = identity;
+        if (!sub)
+            throw new common_1.UnauthorizedException('Invalid identity payload.');
+        // Try find by authentikId
+        let user = await this.userRepository.findByAuthentikId(sub);
+        const syncEmail = this.authConfig.syncEmail();
+        const syncUsername = this.authConfig.syncUsername();
+        if (!user) {
+            // User does not exist locally: create minimal local record per new architecture
+            const username = preferred_username || email || sub;
+            const userEntity = user_entity_1.UserData.create({ username, email: email || '', authentikId: sub });
+            // assign default role if available
+            try {
+                const defaultRole = await this.roleRepository.getDefaultRole();
+                if (defaultRole) {
+                    userEntity.assignRole(defaultRole);
+                }
+            }
+            catch (e) {
+                // ignore if role repo not available or no default role
+            }
+            // persist local user
+            user = await this.userRepository.create(userEntity);
+            // return freshly created user
+            return user;
+        }
+        else {
+            let changed = false;
+            if (syncEmail && email && user.email !== email) {
+                user.changeEmail(email);
+                changed = true;
+                // prepare event class instance if needed (no dispatch)
+            }
+            if (syncUsername && preferred_username && user.username !== preferred_username) {
+                user.changeUsername(preferred_username);
+                changed = true;
+                // prepare event class instance if needed (no dispatch)
+            }
+            // update last seen
+            user.touchLastSeen();
+            changed = true;
+            if (changed) {
+                user = await this.userRepository.update(user);
+            }
+        }
+        // Validations
+        if (!user.isActive) {
+            // Authentication succeeded but user is disabled
+            throw new common_1.ForbiddenException('User is not active.');
+        }
+        if (user.deletedAt) {
+            throw new common_1.ForbiddenException('User is deleted.');
+        }
+        // Ensure roles/permissions loaded (repo should return includes)
+        return user;
+    }
+};
+exports.SyncIdentityHandler = SyncIdentityHandler;
+exports.SyncIdentityHandler = SyncIdentityHandler = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [user_interface_1.IUser,
+        role_interface_1.IRole,
+        i_auth_config_1.IAuthConfig])
+], SyncIdentityHandler);
+//# sourceMappingURL=sync-identity.handler.js.map

dist/modules/identity/application/handlers/user/sync-identity.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-identity.handler.js","sourceRoot":"","sources":["../../../../../../src/modules/identity/application/handlers/user/sync-identity.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA+F;AAC/F,gFAAoE;AACpE,gFAAoE;AACpE,8DAAyD;AACzD,sEAAgE;AAIzD,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAEX;IACA;IACA;IAHnB,YACmB,cAAqB,EACrB,cAAqB,EACrB,UAAuB;QAFvB,mBAAc,GAAd,cAAc,CAAO;QACrB,mBAAc,GAAd,cAAc,CAAO;QACrB,eAAU,GAAV,UAAU,CAAa;IACvC,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,QAAsB;QAClC,MAAM,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,GAAG,QAAe,CAAC;QAE3D,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,8BAAqB,CAAC,2BAA2B,CAAC,CAAC;QAEvE,0BAA0B;QAC1B,IAAI,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAE5D,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;QAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;QAEpD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,gFAAgF;YAChF,MAAM,QAAQ,GAAG,kBAAkB,IAAI,KAAK,IAAI,GAAG,CAAC;YACpD,MAAM,UAAU,GAAG,sBAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;YAEvF,mCAAmC;YACnC,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,CAAC;gBAC/D,IAAI,WAAW,EAAE,CAAC;oBAChB,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;gBACrC,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,uDAAuD;YACzD,CAAC;YAED,qBAAqB;YACrB,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAEpD,8BAA8B;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;aAAM,CAAC;YACN,IAAI,OAAO,GAAG,KAAK,CAAC;YAEpB,IAAI,SAAS,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;gBAC/C,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;gBACxB,OAAO,GAAG,IAAI,CAAC;gBAEf,uDAAuD;YACzD,CAAC;YAED,IAAI,YAAY,IAAI,kBAAkB,IAAI,IAAI,CAAC,QAAQ,KAAK,kBAAkB,EAAE,CAAC;gBAC/E,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;gBACxC,OAAO,GAAG,IAAI,CAAC;gBAEf,uDAAuD;YACzD,CAAC;YAED,mBAAmB;YACnB,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,OAAO,GAAG,IAAI,CAAC;YAEf,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QAED,cAAc;QACd,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,gDAAgD;YAChD,MAAM,IAAI,2BAAkB,CAAC,qBAAqB,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,IAAI,2BAAkB,CAAC,kBAAkB,CAAC,CAAC;QACnD,CAAC;QAED,gEAAgE;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AA7EY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,mBAAU,GAAE;qCAGwB,sBAAK;QACL,sBAAK;QACT,2BAAW;GAJ/B,mBAAmB,CA6E/B"}

dist/modules/identity/application/handlers/user/update-user.handler.js

@@ -0,0 +1,45 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateUserHandler = void 0;
+const common_1 = require("@nestjs/common");
+const user_interface_1 = require("../../../domain/repositories/user.interface");
+let UpdateUserHandler = class UpdateUserHandler {
+    userRepository;
+    constructor(userRepository) {
+        this.userRepository = userRepository;
+    }
+    async execute(id, dto) {
+        // Password management is not allowed in RayLab Core
+        if (dto.password)
+            throw new common_1.BadRequestException('Password management is not allowed.');
+        const user = await this.userRepository.getById(id);
+        if (!user)
+            throw new common_1.NotFoundException('User not found.');
+        // Only allow updating profile fields: name, email, metadata, storage settings
+        if (dto.name !== undefined)
+            user.changeUsername(dto.name);
+        if (dto.email !== undefined)
+            user.changeEmail(dto.email);
+        // metadata field not handled at domain level yet
+        if (dto.storageQuota !== undefined)
+            user.setStorageQuota(dto.storageQuota);
+        if (dto.storageUsed !== undefined)
+            user.setStorageUsed(dto.storageUsed);
+        return this.userRepository.update(user);
+    }
+};
+exports.UpdateUserHandler = UpdateUserHandler;
+exports.UpdateUserHandler = UpdateUserHandler = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [user_interface_1.IUser])
+], UpdateUserHandler);
+//# sourceMappingURL=update-user.handler.js.map

dist/modules/identity/application/handlers/user/update-user.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-user.handler.js","sourceRoot":"","sources":["../../../../../../src/modules/identity/application/handlers/user/update-user.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAoF;AACpF,gFAAoE;AAI7D,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IACC;IAA7B,YAA6B,cAAqB;QAArB,mBAAc,GAAd,cAAc,CAAO;IAAG,CAAC;IAEtD,KAAK,CAAC,OAAO,CAAC,EAAU,EAAE,GAAkB;QAC1C,oDAAoD;QACpD,IAAK,GAAW,CAAC,QAAQ;YAAE,MAAM,IAAI,4BAAmB,CAAC,qCAAqC,CAAC,CAAC;QAEhG,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,0BAAiB,CAAC,iBAAiB,CAAC,CAAC;QAE1D,8EAA8E;QAC9E,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzD,iDAAiD;QACjD,IAAK,GAAW,CAAC,YAAY,KAAK,SAAS;YAAE,IAAI,CAAC,eAAe,CAAE,GAAW,CAAC,YAAY,CAAC,CAAC;QAC7F,IAAK,GAAW,CAAC,WAAW,KAAK,SAAS;YAAE,IAAI,CAAC,cAAc,CAAE,GAAW,CAAC,WAAW,CAAC,CAAC;QAE1F,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;CACF,CAAA;AAnBY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;qCAEkC,sBAAK;GADvC,iBAAiB,CAmB7B"}