@camstack/types 0.1.19 → 0.1.21

package/dist/{auth-records-BsSRou-O.js → auth-records-BPN2YvK2.js}

@@ -7210,7 +7210,7 @@ const meshOrchestratorCapability = {
     )
   }
 };
-const UserRoleSchema$1 = zod.z.enum(["super_admin", "admin", "viewer", "agent"]);
+const UserRoleSchema$1 = zod.z.enum(["super_admin", "admin", "viewer", "agent", "scoped"]);
 const UserSummarySchema = zod.z.object({
   id: zod.z.string(),
   username: zod.z.string(),
@@ -7263,11 +7263,17 @@ const ScopedTokenSummarySchema = zod.z.object({
   name: zod.z.string(),
   tokenPrefix: zod.z.string(),
   scopes: zod.z.array(TokenScopeSchema$1),
-  expiresAt: zod.z.number().optional(),
-  lastUsedAt: zod.z.number().optional(),
+  // Mirror the storage schema: `.nullish()` accepts the SQLite-native
+  // `null` for absent timestamps as well as in-memory `undefined`.
+  expiresAt: zod.z.number().nullish(),
+  lastUsedAt: zod.z.number().nullish(),
   createdAt: zod.z.number()
 });
 const CreateScopedTokenInputSchema = zod.z.object({
+  // The owner the token is issued on behalf of. `adminProcedure` gates
+  // this call so an admin can mint tokens for any user; the CLI passes
+  // its own logged-in `user.id` here.
+  userId: zod.z.string(),
   name: zod.z.string(),
   scopes: zod.z.array(TokenScopeSchema$1),
   expiresAt: zod.z.number().optional()
@@ -7772,14 +7778,16 @@ const addonsCapability = {
     // ── Listing ──────────────────────────────────────────────────────
     list: method(zod.z.void(), zod.z.array(AddonListItemSchema).readonly()),
     // ── Logs (query) ────────────────────────────────────────────────
+    // Default auth (`protected`): authenticated users — including scoped
+    // tokens with the right route-prefix scope. Reading logs isn't an
+    // administrative action; install/restart/uninstall stay admin-only.
     getLogs: method(
       zod.z.object({
         addonId: zod.z.string(),
         limit: zod.z.number().min(1).max(500).default(100),
         level: LogLevelSchema.optional()
       }),
-      zod.z.array(LogQueryEntrySchema),
-      { auth: "admin" }
+      zod.z.array(LogQueryEntrySchema)
     ),
     // ── Packages ────────────────────────────────────────────────────
     listPackages: method(zod.z.void(), zod.z.array(InstalledPackageSchema).readonly()),
@@ -7924,7 +7932,7 @@ const PIPELINE_OWNER_CAPABILITY_NAMES = [
   "pipeline-orchestrator",
   "pipeline-runner"
 ];
-const UserRoleSchema = zod.z.enum(["super_admin", "admin", "viewer", "agent"]);
+const UserRoleSchema = zod.z.enum(["super_admin", "admin", "viewer", "agent", "scoped"]);
 const AllowedProviderSchema = zod.z.union([zod.z.literal("*"), zod.z.array(zod.z.string())]);
 const AllowedDevicesSchema = zod.z.record(zod.z.string(), zod.z.union([zod.z.literal("*"), zod.z.array(zod.z.string())]));
 const UserRecordSchema = zod.z.object({
@@ -8303,4 +8311,4 @@ exports.webrtcSessionCapability = webrtcSessionCapability;
 exports.zoneAnalyticsCapability = zoneAnalyticsCapability;
 exports.zoneRulesCapability = zoneRulesCapability;
 exports.zonesCapability = zonesCapability;
-//# sourceMappingURL=auth-records-BsSRou-O.js.map
+//# sourceMappingURL=auth-records-BPN2YvK2.js.map