@adonis-agora/authkit-server 1.0.0-rc.8 → 1.0.0-rc.9

package/build/src/define_config.d.ts

@@ -1,5 +1,6 @@
 import type { AccessTokenFormat, AccessTokensConfig, JwksConfig, KeystoreStoreConfig, ObservabilityConfig, TtlConfig } from '@adonis-agora/authkit-core';
 import type { HttpContext } from '@adonisjs/core/http';
+import type { AccountConsoleConfig } from './account/runtime.js';
 import type { AccountStore, AuthAccount } from './accounts/account_store.js';
 import { type AdapterFactory, adapters, type OidcAdapterClass } from './adapters/factory.js';
 import { type PersonalAgentsConfigInput, type ResolvedPersonalAgentsConfig } from './agents/config.js';
@@ -311,6 +312,11 @@ export interface ResolvedRateLimitConfig {
      * force ANTES do lockout por interaction (contador persistido no slot do código).
      */
     otpLogin: RateLimitBucket;
+    /**
+     * Bucket das actions das páginas de extension do console de conta
+     * (`POST /account/<página>/actions/*`), keyed pela CONTA. Default 30/min.
+     */
+    accountActions?: RateLimitBucket;
     store?: string;
 }
 export declare function resolveRateLimit(input?: RateLimitConfigInput): ResolvedRateLimitConfig;
@@ -1251,6 +1257,16 @@ export interface AuthServerConfigInput {
     accountSession?: {
         acceptIdpSession?: boolean;
     };
+    /**
+     * Account console extensions: the pages other packages add to `/account/*`.
+     *
+     * - `subject(account, { activeOrg, tenant })`: who the account is in the app (default
+     *   `{ type: 'User', id: account.id }`); every extension receives it as `ctx.subject`.
+     * - `extensions`: turn off, rename or reorder pages, by extension id
+     *   (`{ payments: { pages: { 'payments.invoices': { segment: 'faturas' } } } }`).
+     * - `loadTimeoutMs`: budget of one page's `load()` (default 5000).
+     */
+    accountConsole?: AccountConsoleConfig;
 }
 export interface ResolvedServerConfig {
     customLoginMethods?: CustomLoginMethods;
@@ -1413,6 +1429,8 @@ export interface ResolvedServerConfig {
     accountSession: {
         acceptIdpSession: boolean;
     };
+    /** Account console extensions. Ver {@link AuthServerConfigInput.accountConsole}. */
+    accountConsole?: AccountConsoleConfig;
 }
 export declare function toSeconds(value: string | number | undefined, fallback: number): number;
 /**

package/build/src/define_config.js

@@ -27,6 +27,8 @@ const RATE_LIMIT_DEFAULTS = {
     sudo: { points: 10, duration: '1 min' },
     // Mais apertado que o login — verificação de código adivinhável.
     otpLogin: { points: 5, duration: '1 min' },
+    // Actions das extensions do console de conta, por conta.
+    accountActions: { points: 30, duration: '1 min' },
 };
 export function resolveRateLimit(input) {
     const enabled = input?.enabled ?? true;
@@ -37,6 +39,7 @@ export function resolveRateLimit(input) {
         adminIp: RATE_LIMIT_DEFAULTS.adminIp,
         sudo: RATE_LIMIT_DEFAULTS.sudo,
         otpLogin: RATE_LIMIT_DEFAULTS.otpLogin,
+        accountActions: RATE_LIMIT_DEFAULTS.accountActions,
         store: input?.store,
     };
 }
@@ -502,6 +505,7 @@ export function defineConfig(config) {
             // Opt-in: ausente = authkit nunca toca `ctx.auth` (comportamento de sempre).
             adonisAuth: config.adonisAuth,
             accountSession: { acceptIdpSession: config.accountSession?.acceptIdpSession !== false },
+            accountConsole: config.accountConsole,
         };
     });
 }

package/build/src/host/admin_api/dto.d.ts

@@ -69,7 +69,7 @@ export declare function grantDto(grant: AdminGrant): {
 };
 export declare function auditDto(event: StoredAuditEvent): {
     id: string;
-    type: "account.deleted" | "account.expiration_warned" | "account.expired_login_blocked" | "account.exported" | "account.locked" | "account.signed_out_all" | "agent.allowed" | "agent.blocked" | "agent.delegation_approved" | "agent.delegation_denied" | "agent.grant_revoked" | "agent.grant_revoked_by_admin" | "agent.registry_removed" | "bot_protection.rejected" | "client.created" | "client.deleted" | "client.disabled" | "client.enabled" | "client.secret_regenerated" | "client.updated" | "email.change_requested" | "email.changed" | "email_change.cancelled" | "email_change.confirmed" | "email_change.requested" | "email_verification.consumed" | "email_verification.issued" | "grant.revoked_by_user" | "impersonation" | "impersonation.panel_viewed" | "impersonation.stopped" | "keys.rotated" | "login.failure" | "login.magic_link_sent" | "login.new_device" | "login.new_ip_notified" | "login.otp_failed" | "login.otp_invalidated" | "login.otp_sent" | "login.otp_verified" | "login.success" | "maintenance.disabled" | "maintenance.enabled" | "mfa.disabled" | "mfa.enabled" | "mfa.recovery_codes_regenerated" | "organization.created" | "organization.deactivated" | "organization.deleted" | "organization.invitation_accepted" | "organization.invitation_revoked" | "organization.invitation_sent" | "organization.member_added" | "organization.member_removed" | "organization.member_role_changed" | "organization.member_role_updated" | "organization.switched" | "organization.updated" | "otp.locked" | "otp.unlock_failed" | "otp.unlocked" | "passkey.registered" | "passkey.removed" | "password.changed" | "password.expired_change_forced" | "password.rehashed" | "password_reset.consumed" | "password_reset.issued" | "pat.issued" | "pat.revoked" | "pat.used" | "profile.updated" | "roles_catalog.updated" | "security_notice.sent" | "service_tenant.token_issued" | "session.revoked" | "session.revoked_all" | "session.single_enforced" | "settings.updated" | "signup" | "sudo.confirmed" | "trusted_device.revoked" | "user.created" | "user.deleted" | "user.disabled" | "user.enabled" | "user.password_reset_sent";
+    type: "account.deleted" | "account.expiration_warned" | "account.expired_login_blocked" | "account.exported" | "account.extension.action" | "account.extension.redirect" | "account.locked" | "account.signed_out_all" | "agent.allowed" | "agent.blocked" | "agent.delegation_approved" | "agent.delegation_denied" | "agent.grant_revoked" | "agent.grant_revoked_by_admin" | "agent.registry_removed" | "bot_protection.rejected" | "client.created" | "client.deleted" | "client.disabled" | "client.enabled" | "client.secret_regenerated" | "client.updated" | "email.change_requested" | "email.changed" | "email_change.cancelled" | "email_change.confirmed" | "email_change.requested" | "email_verification.consumed" | "email_verification.issued" | "grant.revoked_by_user" | "impersonation" | "impersonation.panel_viewed" | "impersonation.stopped" | "keys.rotated" | "login.failure" | "login.magic_link_sent" | "login.new_device" | "login.new_ip_notified" | "login.otp_failed" | "login.otp_invalidated" | "login.otp_sent" | "login.otp_verified" | "login.success" | "maintenance.disabled" | "maintenance.enabled" | "mfa.disabled" | "mfa.enabled" | "mfa.recovery_codes_regenerated" | "organization.created" | "organization.deactivated" | "organization.deleted" | "organization.invitation_accepted" | "organization.invitation_revoked" | "organization.invitation_sent" | "organization.member_added" | "organization.member_removed" | "organization.member_role_changed" | "organization.member_role_updated" | "organization.switched" | "organization.updated" | "otp.locked" | "otp.unlock_failed" | "otp.unlocked" | "passkey.registered" | "passkey.removed" | "password.changed" | "password.expired_change_forced" | "password.rehashed" | "password_reset.consumed" | "password_reset.issued" | "pat.issued" | "pat.revoked" | "pat.used" | "profile.updated" | "roles_catalog.updated" | "security_notice.sent" | "service_tenant.token_issued" | "session.revoked" | "session.revoked_all" | "session.single_enforced" | "settings.updated" | "signup" | "sudo.confirmed" | "trusted_device.revoked" | "user.created" | "user.deleted" | "user.disabled" | "user.enabled" | "user.password_reset_sent";
     accountId: string | null;
     email: string | null;
     clientId: string | null;

package/build/src/host/auth_host_config.d.ts

@@ -1,4 +1,5 @@
 import type { HttpContext } from '@adonisjs/core/http';
+import type { AccountConsoleConfig } from '../account/runtime.js';
 import type { ResolvedPersonalAgentExtension } from '../agents/extension.js';
 import type { AuthSocialConfig, ResolvedRateLimitConfig } from '../define_config.js';
 import type { PolicyRouteOption } from './config_locks.js';
@@ -49,6 +50,8 @@ export interface AuthHostRuntimeConfig {
      * o console só entra por um `accountLoginUrl` do host (`registerAuthHost` recusa sem ele).
      */
     consoleNeedsLoginUrl?: boolean;
+    /** `accountConsole` do config: os overrides das páginas de extension. */
+    accountConsole?: AccountConsoleConfig;
     /**
      * API headless (Clerk-style). Presente quando o host a declarou — o provider o
      * stash no boot para `registerAuthHost` montar as rotas sem reler o config inteiro.

package/build/src/host/i18n.d.ts

@@ -174,6 +174,24 @@ export declare const DEFAULT_MESSAGES: {
     'account.delete.deleted': string;
     'account.delete.invalid_confirmation': string;
     'account.delete.not_supported': string;
+    'account.extension.logout': string;
+    'account.extension.nav_label': string;
+    'account.extension.unknown_block': string;
+    'account.extension.unsafe_link': string;
+    'account.extension.unsafe_script': string;
+    'account.extension.load_failed': string;
+    'account.extension.next_page': string;
+    'account.extension.confirm_title': string;
+    'account.extension.confirm_submit': string;
+    'account.extension.cancel': string;
+    'account.extension.action_failed': string;
+    'account.extension.action_not_found': string;
+    'account.extension.impersonation_refused': string;
+    'account.extension.field_required': string;
+    'account.extension.field_too_long': string;
+    'account.extension.field_invalid': string;
+    'account.extension.done': string;
+    'account.extension.provider_loading': string;
     'account.apps.page_title': string;
     'account.apps.title': string;
     'account.apps.intro': string;
@@ -928,6 +946,24 @@ export declare const PT_BR_MESSAGES: {
     'account.delete.deleted': string;
     'account.delete.invalid_confirmation': string;
     'account.delete.not_supported': string;
+    'account.extension.logout': string;
+    'account.extension.nav_label': string;
+    'account.extension.unknown_block': string;
+    'account.extension.unsafe_link': string;
+    'account.extension.unsafe_script': string;
+    'account.extension.load_failed': string;
+    'account.extension.next_page': string;
+    'account.extension.confirm_title': string;
+    'account.extension.confirm_submit': string;
+    'account.extension.cancel': string;
+    'account.extension.action_failed': string;
+    'account.extension.action_not_found': string;
+    'account.extension.impersonation_refused': string;
+    'account.extension.field_required': string;
+    'account.extension.field_too_long': string;
+    'account.extension.field_invalid': string;
+    'account.extension.done': string;
+    'account.extension.provider_loading': string;
     'account.apps.page_title': string;
     'account.apps.title': string;
     'account.apps.intro': string;

package/build/src/host/i18n.js

@@ -182,6 +182,25 @@ export const DEFAULT_MESSAGES = {
     'account.delete.deleted': 'Your account has been permanently deleted.',
     'account.delete.invalid_confirmation': 'Confirmation failed. Your account was not deleted.',
     'account.delete.not_supported': 'Account deletion is not available in this installation.',
+    // Console de conta — páginas de extensions (account/extension).
+    'account.extension.logout': 'Log out',
+    'account.extension.nav_label': 'Account',
+    'account.extension.unknown_block': 'This section cannot be shown here.',
+    'account.extension.unsafe_link': 'This link was hidden because its address is not allowed.',
+    'account.extension.unsafe_script': 'This section was hidden because it loads a script from an address that is not allowed.',
+    'account.extension.load_failed': 'This page could not be loaded right now. Try again in a moment.',
+    'account.extension.next_page': 'Next page',
+    'account.extension.confirm_title': 'Confirm',
+    'account.extension.confirm_submit': 'Continue',
+    'account.extension.cancel': 'Cancel',
+    'account.extension.action_failed': 'That did not work. Try again in a moment.',
+    'account.extension.action_not_found': 'This action is not available.',
+    'account.extension.impersonation_refused': 'This action is not available while acting as another user.',
+    'account.extension.field_required': '{field} is required.',
+    'account.extension.field_too_long': '{field} is too long.',
+    'account.extension.field_invalid': '{field} has an invalid value.',
+    'account.extension.done': 'Done.',
+    'account.extension.provider_loading': 'Loading…',
     // Console de conta — apps com acesso (account/apps).
     'account.apps.page_title': 'Apps with access',
     'account.apps.title': 'Apps with access',
@@ -1023,6 +1042,25 @@ export const PT_BR_MESSAGES = {
     'account.delete.deleted': 'Sua conta foi deletada permanentemente.',
     'account.delete.invalid_confirmation': 'Confirmação falhou. Sua conta NÃO foi deletada.',
     'account.delete.not_supported': 'A deleção de conta não está disponível nesta instalação.',
+    // Console de conta — páginas de extensions (account/extension).
+    'account.extension.logout': 'Sair',
+    'account.extension.nav_label': 'Conta',
+    'account.extension.unknown_block': 'Esta seção não pode ser exibida aqui.',
+    'account.extension.unsafe_link': 'Este link foi ocultado porque o endereço não é permitido.',
+    'account.extension.unsafe_script': 'Esta seção foi ocultada porque carrega um script de um endereço não permitido.',
+    'account.extension.load_failed': 'Não foi possível carregar esta página agora. Tente de novo em instantes.',
+    'account.extension.next_page': 'Próxima página',
+    'account.extension.confirm_title': 'Confirmar',
+    'account.extension.confirm_submit': 'Continuar',
+    'account.extension.cancel': 'Cancelar',
+    'account.extension.action_failed': 'Não deu certo. Tente de novo em instantes.',
+    'account.extension.action_not_found': 'Esta ação não está disponível.',
+    'account.extension.impersonation_refused': 'Esta ação não está disponível enquanto você age como outro usuário.',
+    'account.extension.field_required': '{field} é obrigatório.',
+    'account.extension.field_too_long': '{field} é longo demais.',
+    'account.extension.field_invalid': '{field} tem um valor inválido.',
+    'account.extension.done': 'Feito.',
+    'account.extension.provider_loading': 'Carregando…',
     // Console de conta — apps com acesso (account/apps).
     'account.apps.page_title': 'Apps com acesso',
     'account.apps.title': 'Apps com acesso',

package/build/src/host/rate_limit.d.ts

@@ -36,6 +36,14 @@ export interface AuthThrottles {
      * anti-brute-force do código adivinhável, ANTES do lockout por interaction.
      */
     otpLogin: ThrottleMiddleware;
+    /**
+     * Actions das páginas de extension do console de conta, keyed pela CONTA da sessão
+     * (bucket `authkit_account_actions`). `accountActions` responde 429 com a tela
+     * `throttled` (formulários); `accountActionsJson` responde o 429 cru (JSON API) —
+     * mesmo bucket, mesma contagem.
+     */
+    accountActions: ThrottleMiddleware;
+    accountActionsJson: ThrottleMiddleware;
 }
 /**
  * Service do `@adonisjs/limiter` resolvido de forma preguiçosa. Tipado como `any`

package/build/src/host/rate_limit.js

@@ -6,6 +6,7 @@ var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExte
     }
     return path;
 };
+import { ACCOUNT_SESSION_KEY } from './account_session_key.js';
 import { brandFor } from './branding.js';
 let limiterServicePromise;
 /**
@@ -73,6 +74,12 @@ function buildThrottle(name, bucket, store, keyOf) {
 export function createAuthThrottles(config) {
     if (!config.enabled)
         return undefined;
+    const accountActions = buildThrottle('authkit_account_actions', config.accountActions ?? { points: 30, duration: '1 min' }, config.store, (ctx) => {
+        const accountId = ctx.session?.get?.(ACCOUNT_SESSION_KEY);
+        return typeof accountId === 'string' && accountId !== ''
+            ? `account:${accountId}`
+            : `account-ip:${ctx.request.ip?.() ?? 'unknown'}`;
+    });
     return {
         // Login/signup/forgot/reset: keyed por IP (default do HttpLimiter).
         // `friendly`: rota de BROWSER — 429 vira a tela themeável `throttled`
@@ -102,6 +109,8 @@ export function createAuthThrottles(config) {
         // Verificação de código OTP: keyed por IP (default), bucket próprio e mais
         // apertado que o login. O namespace do nome mantém a contagem separada.
         otpLogin: withFriendly429(buildThrottle('authkit_otp_login', config.otpLogin, config.store)),
+        accountActions: withFriendly429(accountActions),
+        accountActionsJson: accountActions,
     };
 }
 /**

package/build/src/host/register_auth_host.d.ts

@@ -1,4 +1,5 @@
 import type { Router } from '@adonisjs/core/http';
+import { type AccountExtensionRouteEntry } from '../account/mount.js';
 import type { AuthSocialConfig, RateLimitConfigInput } from '../define_config.js';
 import { type AccountPathKey, type AccountPathsOptions } from './account_paths.js';
 import type { PolicyRouteOption } from './config_locks.js';
@@ -312,6 +313,11 @@ export interface AuthHostRouteMap {
         loginUrl: string;
         /** Quais telas foram efetivamente montadas. */
         screens: Record<keyof AccountScreensOptions, boolean>;
+        /**
+         * Account console extension pages (filled once every provider booted): id, path, label (a
+         * literal, or the message key) and order. `useAccountExtensions()` gives the localized nav.
+         */
+        extensions: AccountExtensionRouteEntry[];
     };
     /** Console admin: prefixo resolvido, ou `null` quando não foi montado. */
     admin: {

package/build/src/host/register_auth_host.js

@@ -1,4 +1,5 @@
 import { getBootedApp } from '../../services/booted_app.js';
+import { mountAccountExtensions } from '../account/mount.js';
 import { registerAgoraConsole } from '../console_switcher.js';
 import { resolveRateLimit } from '../define_config.js';
 import { accountHome } from './account_home.js';
@@ -988,6 +989,32 @@ export function registerAuthHost(router, opts = {}) {
         router.post(`${apiBase}/mfa/passkeys/verify`, [C.accountMfaApi, 'passkeyRegisterVerify']);
     })
         .use([accountGuard]);
+    // Account console extensions (`@adonis-agora/authkit-server/account-extension`): pages other
+    // packages register from their provider's `boot()`. Same guard as the built-in screens; the
+    // page routes mount once every provider booted. `account: false` turns them off too.
+    const extensionEntries = [];
+    if (accountOpt !== false) {
+        const builtins = {};
+        if (mountSecurity)
+            builtins.security = securityPath;
+        if (mountMfa)
+            builtins.mfa = mfaPath;
+        if (mountTokens)
+            builtins.tokens = tokensPath;
+        if (mountApps)
+            builtins.apps = appsPath;
+        if (mountOrgs)
+            builtins.orgs = orgsPath;
+        mountAccountExtensions(router, {
+            guard: accountGuard,
+            ...(throttles
+                ? { throttle: { html: throttles.accountActions, json: throttles.accountActionsJson } }
+                : {}),
+            overrides: hostCfg?.accountConsole?.extensions,
+            builtins,
+            entries: extensionEntries,
+        });
+    }
     // API headless (Clerk-style) — montada fora do `accountGuard` (não depende da
     // sessão de CONTA), autenticada pelo resolver do host (`headless.resolveAccountId`).
     // `PUT` usa CSRF igual à API do console (middleware de shield do host).
@@ -1217,6 +1244,7 @@ export function registerAuthHost(router, opts = {}) {
                 mfa: mountMfa,
                 apps: mountApps,
             },
+            extensions: extensionEntries,
         },
         admin: resolvedAdminPrefix ? { prefix: resolvedAdminPrefix } : null,
         adminApi: resolvedAdminApiPrefix ? { prefix: resolvedAdminApiPrefix } : null,

package/build/src/host/renderers/edge_renderer.js

@@ -1,3 +1,4 @@
+import { accountNavFor } from '../../account/runtime.js';
 import { getAccountLoginUrl } from '../account_login_url.js';
 import { accountPathsMap } from '../account_paths.js';
 import { DEFAULT_MESSAGES, translate } from '../i18n.js';
@@ -40,9 +41,13 @@ export async function renderEdgeView(ctx, view, props) {
     // `accountRoutes` — sem cada view conhecer o prefixo. Os action-subpaths
     // fixos (`/password`, `/passkeys/verify`, ...) são concatenados na própria view.
     const accountPaths = accountPathsMap();
+    // `accountNav` como prop global das telas do console de conta: telas embutidas montadas e
+    // páginas de extension visíveis para a conta (partial `authkit::account/partials/nav`).
+    const accountNav = props.accountNav ?? (await accountNavFor(ctx, view, props));
     return ctx.view.render(`authkit::${view}`, {
         loginUrl,
         accountPaths,
+        accountNav,
         ...props,
         t,
         messages,

package/build/src/host/renderers/inertia_renderer.js

@@ -1,3 +1,4 @@
+import { accountNavFor } from '../../account/runtime.js';
 import { DEFAULT_MESSAGES } from '../i18n.js';
 import { renderEdgeView } from './edge_renderer.js';
 /**
@@ -68,6 +69,11 @@ export function inertiaRenderer(opts) {
         // Happy path: view vai ao Inertia.
         // `messages` vai como shared prop para as páginas React traduzirem.
         const messages = await resolveMessagesFromCtx(ctx);
-        return ctx.inertia.render(`${opts.prefix}/${view}`, { ...props, messages });
+        const accountNav = props.accountNav ?? (await accountNavFor(ctx, view, props));
+        return ctx.inertia.render(`${opts.prefix}/${view}`, {
+            ...(accountNav ? { accountNav } : {}),
+            ...props,
+            messages,
+        });
     };
 }

package/build/src/host/screen_props.d.ts

@@ -8,6 +8,8 @@
  * typed per view, so a controller that drifts from these types fails the
  * package's `tsc`.
  */
+import type { ResolvedActionStep } from '../account/http.js';
+import type { AccountNavEntry, ResolvedAccountPage } from '../account/runtime.js';
 import type { OrgInvitation, OrgMember, OrgSummary } from '../accounts/account_store.js';
 import type { PatRecord } from '../pat/pat_store.js';
 import type { AccountConfirmProps, AccountEmailConfirmedProps, AccountLoginProps, AccountMfaProps, AccountSecurityProps } from './account_screen_props.js';
@@ -279,6 +281,31 @@ export interface AccountOrgsProps extends WithMessages {
     invitation?: OrgInvitation | null;
     token?: string;
 }
+/**
+ * `account/extension` — a page an account console extension added. `page` is the resolved page
+ * (texts translated, values formatted); `step` is set on the confirmation step of an action.
+ * `accountNav` (the console navigation) is added by the renderer to every account screen.
+ */
+export interface AccountExtensionProps extends WithMessages {
+    csrfToken: string;
+    page: ResolvedAccountPage;
+    step: ResolvedActionStep | null;
+    flash: {
+        tone: 'success' | 'danger';
+        text: string;
+    } | null;
+    /** The response's CSP nonce, for the scripts of `component` blocks. */
+    cspNonce: string | null;
+    accountNav?: AccountNavEntry[] | null;
+    /** `<html lang>` of the console locale. */
+    htmlLang?: string;
+    /** Edge only: the `<script>` tag of a `component` block's script (nonce included). */
+    scriptTag?: (script: {
+        src: string;
+        integrity: string | null;
+        module: boolean;
+    }) => string;
+}
 /** Props of every screen, by view name. */
 export interface AuthkitScreenProps {
     login: LoginProps;
@@ -302,6 +329,7 @@ export interface AuthkitScreenProps {
     'account/orgs': AccountOrgsProps;
     'account/confirm': AccountConfirmProps;
     'account/email-confirmed': AccountEmailConfirmedProps;
+    'account/extension': AccountExtensionProps;
 }
 /** Every screen authkit-server renders. */
 export type AuthkitScreen = keyof AuthkitScreenProps;