@axium/server 0.7.6 → 0.9.0

package/dist/config.d.ts

@@ -1,169 +1,43 @@
+import { levelText } from 'logzen';
 import { type PartialRecursive } from 'utilium';
-import * as z from 'zod';
-export declare const Schema: z.ZodObject<{
-    auth: z.ZodObject<{
-        credentials: z.ZodBoolean;
-        debug: z.ZodBoolean;
-        secret: z.ZodString;
-        secure_cookies: z.ZodBoolean;
-    }, "strip", z.ZodTypeAny, {
-        debug: boolean;
-        credentials: boolean;
-        secret: string;
-        secure_cookies: boolean;
-    }, {
-        debug: boolean;
-        credentials: boolean;
-        secret: string;
-        secure_cookies: boolean;
-    }>;
-    db: z.ZodObject<{
-        host: z.ZodString;
-        port: z.ZodNumber;
-        password: z.ZodString;
-        user: z.ZodString;
-        database: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        host: string;
-        port: number;
-        password: string;
-        user: string;
-        database: string;
-    }, {
-        host: string;
-        port: number;
-        password: string;
-        user: string;
-        database: string;
-    }>;
-    debug: z.ZodBoolean;
-    log: z.ZodObject<{
-        level: z.ZodEnum<["error", "warn", "notice", "info", "debug"]>;
-        console: z.ZodBoolean;
-    }, "strip", z.ZodTypeAny, {
-        level: "debug" | "info" | "warn" | "error" | "notice";
-        console: boolean;
-    }, {
-        level: "debug" | "info" | "warn" | "error" | "notice";
-        console: boolean;
-    }>;
-    web: z.ZodObject<{
-        prefix: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        prefix: string;
-    }, {
-        prefix: string;
-    }>;
-}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
-    auth: z.ZodObject<{
-        credentials: z.ZodBoolean;
-        debug: z.ZodBoolean;
-        secret: z.ZodString;
-        secure_cookies: z.ZodBoolean;
-    }, "strip", z.ZodTypeAny, {
-        debug: boolean;
-        credentials: boolean;
-        secret: string;
-        secure_cookies: boolean;
-    }, {
-        debug: boolean;
-        credentials: boolean;
-        secret: string;
-        secure_cookies: boolean;
-    }>;
-    db: z.ZodObject<{
-        host: z.ZodString;
-        port: z.ZodNumber;
-        password: z.ZodString;
-        user: z.ZodString;
-        database: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        host: string;
-        port: number;
-        password: string;
-        user: string;
-        database: string;
-    }, {
-        host: string;
-        port: number;
-        password: string;
-        user: string;
-        database: string;
-    }>;
-    debug: z.ZodBoolean;
-    log: z.ZodObject<{
-        level: z.ZodEnum<["error", "warn", "notice", "info", "debug"]>;
-        console: z.ZodBoolean;
-    }, "strip", z.ZodTypeAny, {
-        level: "debug" | "info" | "warn" | "error" | "notice";
-        console: boolean;
-    }, {
-        level: "debug" | "info" | "warn" | "error" | "notice";
-        console: boolean;
-    }>;
-    web: z.ZodObject<{
-        prefix: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        prefix: string;
-    }, {
-        prefix: string;
-    }>;
-}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-    auth: z.ZodObject<{
-        credentials: z.ZodBoolean;
-        debug: z.ZodBoolean;
-        secret: z.ZodString;
-        secure_cookies: z.ZodBoolean;
-    }, "strip", z.ZodTypeAny, {
-        debug: boolean;
+import * as z from 'zod/v4';
+export interface Config extends Record<string, unknown> {
+    api: {
+        disable_metadata: boolean;
+        cookie_auth: boolean;
+    };
+    apps: {
+        disabled: string[];
+    };
+    auth: {
         credentials: boolean;
-        secret: string;
-        secure_cookies: boolean;
-    }, {
         debug: boolean;
-        credentials: boolean;
-        secret: string;
+        origin: string;
+        /** In minutes */
+        passkey_probation: number;
+        rp_id: string;
+        rp_name: string;
         secure_cookies: boolean;
-    }>;
-    db: z.ZodObject<{
-        host: z.ZodString;
-        port: z.ZodNumber;
-        password: z.ZodString;
-        user: z.ZodString;
-        database: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        host: string;
-        port: number;
-        password: string;
-        user: string;
-        database: string;
-    }, {
+        /** In minutes */
+        verification_timeout: number;
+        /** Whether users can verify emails */
+        email_verification: boolean;
+    };
+    db: {
         host: string;
         port: number;
         password: string;
         user: string;
         database: string;
-    }>;
-    debug: z.ZodBoolean;
-    log: z.ZodObject<{
-        level: z.ZodEnum<["error", "warn", "notice", "info", "debug"]>;
-        console: z.ZodBoolean;
-    }, "strip", z.ZodTypeAny, {
-        level: "debug" | "info" | "warn" | "error" | "notice";
+    };
+    debug: boolean;
+    log: {
+        level: (typeof levelText)[number];
         console: boolean;
-    }, {
-        level: "debug" | "info" | "warn" | "error" | "notice";
-        console: boolean;
-    }>;
-    web: z.ZodObject<{
-        prefix: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        prefix: string;
-    }, {
+    };
+    web: {
         prefix: string;
-    }>;
-}, z.ZodTypeAny, "passthrough">>;
-export interface Config extends Record<string, unknown>, z.infer<typeof Schema> {
+    };
 }
 export declare const configFiles: Map<string, PartialRecursive<Config>>;
 export declare function plainConfig(): Omit<Config, keyof typeof configShortcuts>;
@@ -179,178 +53,49 @@ declare const configShortcuts: {
 };
 export declare const config: Config & typeof configShortcuts;
 export default config;
-export declare const File: z.ZodObject<z.objectUtil.extendShape<{
-    auth: z.ZodOptional<z.ZodObject<{
-        credentials: z.ZodOptional<z.ZodBoolean>;
-        debug: z.ZodOptional<z.ZodBoolean>;
-        secret: z.ZodOptional<z.ZodString>;
-        secure_cookies: z.ZodOptional<z.ZodBoolean>;
-    }, "strip", z.ZodTypeAny, {
-        debug?: boolean | undefined;
-        credentials?: boolean | undefined;
-        secret?: string | undefined;
-        secure_cookies?: boolean | undefined;
-    }, {
-        debug?: boolean | undefined;
-        credentials?: boolean | undefined;
-        secret?: string | undefined;
-        secure_cookies?: boolean | undefined;
-    }>>;
-    db: z.ZodOptional<z.ZodObject<{
-        host: z.ZodOptional<z.ZodString>;
-        port: z.ZodOptional<z.ZodNumber>;
-        password: z.ZodOptional<z.ZodString>;
-        user: z.ZodOptional<z.ZodString>;
-        database: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        host?: string | undefined;
-        port?: number | undefined;
-        password?: string | undefined;
-        user?: string | undefined;
-        database?: string | undefined;
-    }, {
-        host?: string | undefined;
-        port?: number | undefined;
-        password?: string | undefined;
-        user?: string | undefined;
-        database?: string | undefined;
-    }>>;
-    debug: z.ZodOptional<z.ZodBoolean>;
-    log: z.ZodOptional<z.ZodObject<{
-        level: z.ZodOptional<z.ZodEnum<["error", "warn", "notice", "info", "debug"]>>;
-        console: z.ZodOptional<z.ZodBoolean>;
-    }, "strip", z.ZodTypeAny, {
-        level?: "debug" | "info" | "warn" | "error" | "notice" | undefined;
-        console?: boolean | undefined;
-    }, {
-        level?: "debug" | "info" | "warn" | "error" | "notice" | undefined;
-        console?: boolean | undefined;
-    }>>;
-    web: z.ZodOptional<z.ZodObject<{
-        prefix: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        prefix?: string | undefined;
-    }, {
-        prefix?: string | undefined;
-    }>>;
-}, {
-    include: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    plugins: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-}>, "passthrough", z.ZodTypeAny, z.objectOutputType<z.objectUtil.extendShape<{
-    auth: z.ZodOptional<z.ZodObject<{
-        credentials: z.ZodOptional<z.ZodBoolean>;
-        debug: z.ZodOptional<z.ZodBoolean>;
-        secret: z.ZodOptional<z.ZodString>;
-        secure_cookies: z.ZodOptional<z.ZodBoolean>;
-    }, "strip", z.ZodTypeAny, {
-        debug?: boolean | undefined;
-        credentials?: boolean | undefined;
-        secret?: string | undefined;
-        secure_cookies?: boolean | undefined;
-    }, {
-        debug?: boolean | undefined;
-        credentials?: boolean | undefined;
-        secret?: string | undefined;
-        secure_cookies?: boolean | undefined;
-    }>>;
-    db: z.ZodOptional<z.ZodObject<{
-        host: z.ZodOptional<z.ZodString>;
-        port: z.ZodOptional<z.ZodNumber>;
-        password: z.ZodOptional<z.ZodString>;
-        user: z.ZodOptional<z.ZodString>;
-        database: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        host?: string | undefined;
-        port?: number | undefined;
-        password?: string | undefined;
-        user?: string | undefined;
-        database?: string | undefined;
-    }, {
-        host?: string | undefined;
-        port?: number | undefined;
-        password?: string | undefined;
-        user?: string | undefined;
-        database?: string | undefined;
-    }>>;
-    debug: z.ZodOptional<z.ZodBoolean>;
-    log: z.ZodOptional<z.ZodObject<{
-        level: z.ZodOptional<z.ZodEnum<["error", "warn", "notice", "info", "debug"]>>;
-        console: z.ZodOptional<z.ZodBoolean>;
-    }, "strip", z.ZodTypeAny, {
-        level?: "debug" | "info" | "warn" | "error" | "notice" | undefined;
-        console?: boolean | undefined;
-    }, {
-        level?: "debug" | "info" | "warn" | "error" | "notice" | undefined;
-        console?: boolean | undefined;
-    }>>;
-    web: z.ZodOptional<z.ZodObject<{
-        prefix: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        prefix?: string | undefined;
-    }, {
-        prefix?: string | undefined;
-    }>>;
-}, {
-    include: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    plugins: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-}>, z.ZodTypeAny, "passthrough">, z.objectInputType<z.objectUtil.extendShape<{
+export declare const File: z.ZodObject<{
+    api: z.ZodOptional<z.ZodObject<{
+        disable_metadata: z.ZodOptional<z.ZodBoolean>;
+        cookie_auth: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    apps: z.ZodOptional<z.ZodObject<{
+        disabled: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
     auth: z.ZodOptional<z.ZodObject<{
         credentials: z.ZodOptional<z.ZodBoolean>;
         debug: z.ZodOptional<z.ZodBoolean>;
-        secret: z.ZodOptional<z.ZodString>;
+        origin: z.ZodOptional<z.ZodString>;
+        passkey_probation: z.ZodOptional<z.ZodNumber>;
+        rp_id: z.ZodOptional<z.ZodString>;
+        rp_name: z.ZodOptional<z.ZodString>;
         secure_cookies: z.ZodOptional<z.ZodBoolean>;
-    }, "strip", z.ZodTypeAny, {
-        debug?: boolean | undefined;
-        credentials?: boolean | undefined;
-        secret?: string | undefined;
-        secure_cookies?: boolean | undefined;
-    }, {
-        debug?: boolean | undefined;
-        credentials?: boolean | undefined;
-        secret?: string | undefined;
-        secure_cookies?: boolean | undefined;
-    }>>;
+        verification_timeout: z.ZodOptional<z.ZodNumber>;
+        email_verification: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
     db: z.ZodOptional<z.ZodObject<{
         host: z.ZodOptional<z.ZodString>;
         port: z.ZodOptional<z.ZodNumber>;
         password: z.ZodOptional<z.ZodString>;
         user: z.ZodOptional<z.ZodString>;
         database: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        host?: string | undefined;
-        port?: number | undefined;
-        password?: string | undefined;
-        user?: string | undefined;
-        database?: string | undefined;
-    }, {
-        host?: string | undefined;
-        port?: number | undefined;
-        password?: string | undefined;
-        user?: string | undefined;
-        database?: string | undefined;
-    }>>;
+    }, z.core.$strip>>;
     debug: z.ZodOptional<z.ZodBoolean>;
     log: z.ZodOptional<z.ZodObject<{
-        level: z.ZodOptional<z.ZodEnum<["error", "warn", "notice", "info", "debug"]>>;
+        level: z.ZodOptional<z.ZodEnum<{
+            error: "error";
+            warn: "warn";
+            info: "info";
+            debug: "debug";
+            notice: "notice";
+        }>>;
         console: z.ZodOptional<z.ZodBoolean>;
-    }, "strip", z.ZodTypeAny, {
-        level?: "debug" | "info" | "warn" | "error" | "notice" | undefined;
-        console?: boolean | undefined;
-    }, {
-        level?: "debug" | "info" | "warn" | "error" | "notice" | undefined;
-        console?: boolean | undefined;
-    }>>;
+    }, z.core.$strip>>;
     web: z.ZodOptional<z.ZodObject<{
         prefix: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        prefix?: string | undefined;
-    }, {
-        prefix?: string | undefined;
-    }>>;
-}, {
-    include: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    plugins: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-}>, z.ZodTypeAny, "passthrough">>;
+    }, z.core.$strip>>;
+    include: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString>>>;
+    plugins: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString>>>;
+}, z.core.$loose>;
 export interface File extends PartialRecursive<Config>, z.infer<typeof File> {
 }
 /**

package/dist/config.js

@@ -1,36 +1,10 @@
-/* eslint-disable @typescript-eslint/no-unsafe-assignment */
 import { levelText } from 'logzen';
 import { existsSync, readFileSync, writeFileSync } from 'node:fs';
 import { dirname, join, resolve } from 'node:path/posix';
 import { deepAssign, omit } from 'utilium';
-import * as z from 'zod';
+import * as z from 'zod/v4';
 import { findDir, logger, output } from './io.js';
 import { loadPlugin } from './plugins.js';
-export const Schema = z
-    .object({
-    auth: z.object({
-        credentials: z.boolean(),
-        debug: z.boolean(),
-        secret: z.string(),
-        secure_cookies: z.boolean(),
-    }),
-    db: z.object({
-        host: z.string(),
-        port: z.number(),
-        password: z.string(),
-        user: z.string(),
-        database: z.string(),
-    }),
-    debug: z.boolean(),
-    log: z.object({
-        level: z.enum(levelText),
-        console: z.boolean(),
-    }),
-    web: z.object({
-        prefix: z.string(),
-    }),
-})
-    .passthrough();
 export const configFiles = new Map();
 export function plainConfig() {
     return omit(config, Object.keys(configShortcuts));
@@ -47,11 +21,23 @@ const configShortcuts = {
 };
 export const config = {
     ...configShortcuts,
+    api: {
+        disable_metadata: false,
+        cookie_auth: false,
+    },
+    apps: {
+        disabled: [],
+    },
     auth: {
         credentials: false,
         debug: false,
-        secret: '',
+        origin: 'https://test.localhost',
+        passkey_probation: 60,
+        rp_id: 'test.localhost',
+        rp_name: 'Axium',
         secure_cookies: true,
+        verification_timeout: 60,
+        email_verification: false,
     },
     db: {
         database: process.env.PGDATABASE || 'axium',
@@ -71,12 +57,60 @@ export const config = {
 };
 export default config;
 // config from file
-export const File = Schema.deepPartial()
-    .extend({
+export const File = z
+    .looseObject({
+    api: z
+        .object({
+        disable_metadata: z.boolean(),
+        cookie_auth: z.boolean(),
+    })
+        .partial(),
+    apps: z
+        .object({
+        disabled: z.array(z.string()),
+    })
+        .partial(),
+    auth: z
+        .object({
+        credentials: z.boolean(),
+        debug: z.boolean(),
+        origin: z.string(),
+        /** In minutes */
+        passkey_probation: z.number(),
+        rp_id: z.string(),
+        rp_name: z.string(),
+        secure_cookies: z.boolean(),
+        /** In minutes */
+        verification_timeout: z.number(),
+        /** Whether users can verify emails */
+        email_verification: z.boolean(),
+    })
+        .partial(),
+    db: z
+        .object({
+        host: z.string(),
+        port: z.number(),
+        password: z.string(),
+        user: z.string(),
+        database: z.string(),
+    })
+        .partial(),
+    debug: z.boolean(),
+    log: z
+        .object({
+        level: z.enum(levelText),
+        console: z.boolean(),
+    })
+        .partial(),
+    web: z
+        .object({
+        prefix: z.string(),
+    })
+        .partial(),
     include: z.array(z.string()).optional(),
     plugins: z.array(z.string()).optional(),
 })
-    .passthrough();
+    .partial();
 /**
  * Update the current config
  */

package/dist/database.d.ts

@@ -1,64 +1,52 @@
-import type { AdapterAccountType as db } from '@auth/core/adapters';
+import type { Preferences } from '@axium/core';
 import { Kysely, type GeneratedAlways } from 'kysely';
-import type { Preferences } from './auth.js';
-import { type MaybeOutput, type WithOutput } from './io.js';
+import type { VerificationRole } from './auth.js';
+import type { MaybeOutput, WithOutput } from './io.js';
+import type { AuthenticatorTransportFuture, CredentialDeviceType } from '@simplewebauthn/server';
 export interface Schema {
-    User: {
-        id: GeneratedAlways<string>;
-        name: string | null;
+    users: {
+        id: GeneratedAlways<string> & string;
         email: string;
-        emailVerified: Date | null;
-        image: string | null;
-        password: string | null;
-        salt: string | null;
-        preferences: Preferences;
-    };
-    Account: {
-        id: GeneratedAlways<string>;
-        userId: string;
-        type: db;
-        provider: string;
-        providerAccountId: string;
-        refresh_token?: string;
-        access_token?: string;
-        expires_at?: number;
-        token_type?: Lowercase<string>;
-        scope?: string;
-        id_token?: string;
-        session_state: string | null;
+        name: string;
+        image?: string | null;
+        emailVerified?: Date | null;
+        preferences?: Preferences;
     };
-    Session: {
+    sessions: {
         id: GeneratedAlways<string>;
+        created: GeneratedAlways<Date>;
         userId: string;
-        sessionToken: string;
+        token: string;
         expires: Date;
+        elevated: boolean;
     };
-    VerificationToken: {
-        identifier: string;
+    verifications: {
+        userId: string;
         token: string;
         expires: Date;
+        role: VerificationRole;
     };
-    Authenticator: {
-        credentialID: string;
+    passkeys: {
+        id: string;
+        name: string | null;
+        createdAt: GeneratedAlways<Date>;
         userId: string;
-        providerAccountId: string;
-        credentialPublicKey: string;
+        publicKey: Uint8Array;
         counter: number;
-        credentialDeviceType: string;
-        credentialBackedUp: boolean;
-        transports: string | null;
+        deviceType: CredentialDeviceType;
+        backedUp: boolean;
+        transports: AuthenticatorTransportFuture[];
     };
 }
-export interface Database extends Kysely<Schema>, AsyncDisposable {
-}
+export type Database = Kysely<Schema> & AsyncDisposable;
 export declare let database: Database;
 export declare function connect(): Database;
 export interface Stats {
     users: number;
-    accounts: number;
+    passkeys: number;
     sessions: number;
 }
-export declare function count(table: keyof Schema): Promise<number>;
+export declare function count<const T extends keyof Schema>(table: T): Promise<number>;
 export declare function status(): Promise<Stats>;
 export declare function statusText(): Promise<string>;
 export interface OpOptions extends MaybeOutput {
@@ -69,11 +57,14 @@ export interface InitOptions extends OpOptions {
     skip: boolean;
 }
 export declare function shouldRecreate(opt: InitOptions & WithOutput): boolean;
+export declare function getHBA(opt: OpOptions & WithOutput): Promise<[content: string, writeBack: (newContent: string) => void]>;
 export interface PluginShortcuts {
     done: () => void;
     warnExists: (error: string | Error) => void;
 }
 export declare function init(opt: InitOptions): Promise<void>;
+export declare function check(opt: OpOptions): Promise<void>;
+export declare function clean(opt: Partial<OpOptions>): Promise<void>;
 /**
  * Completely remove Axium from the database.
  */