@camstack/types 0.1.19 → 0.1.21

package/dist/{auth-records-Bq2XO-Mg.mjs → auth-records-Bsjs9Xri.mjs}

@@ -7209,7 +7209,7 @@ const meshOrchestratorCapability = {
     )
   }
 };
-const UserRoleSchema$1 = z.enum(["super_admin", "admin", "viewer", "agent"]);
+const UserRoleSchema$1 = z.enum(["super_admin", "admin", "viewer", "agent", "scoped"]);
 const UserSummarySchema = z.object({
   id: z.string(),
   username: z.string(),
@@ -7262,11 +7262,17 @@ const ScopedTokenSummarySchema = z.object({
   name: z.string(),
   tokenPrefix: z.string(),
   scopes: z.array(TokenScopeSchema$1),
-  expiresAt: z.number().optional(),
-  lastUsedAt: z.number().optional(),
+  // Mirror the storage schema: `.nullish()` accepts the SQLite-native
+  // `null` for absent timestamps as well as in-memory `undefined`.
+  expiresAt: z.number().nullish(),
+  lastUsedAt: z.number().nullish(),
   createdAt: z.number()
 });
 const CreateScopedTokenInputSchema = z.object({
+  // The owner the token is issued on behalf of. `adminProcedure` gates
+  // this call so an admin can mint tokens for any user; the CLI passes
+  // its own logged-in `user.id` here.
+  userId: z.string(),
   name: z.string(),
   scopes: z.array(TokenScopeSchema$1),
   expiresAt: z.number().optional()
@@ -7771,14 +7777,16 @@ const addonsCapability = {
     // ── Listing ──────────────────────────────────────────────────────
     list: method(z.void(), z.array(AddonListItemSchema).readonly()),
     // ── Logs (query) ────────────────────────────────────────────────
+    // Default auth (`protected`): authenticated users — including scoped
+    // tokens with the right route-prefix scope. Reading logs isn't an
+    // administrative action; install/restart/uninstall stay admin-only.
     getLogs: method(
       z.object({
         addonId: z.string(),
         limit: z.number().min(1).max(500).default(100),
         level: LogLevelSchema.optional()
       }),
-      z.array(LogQueryEntrySchema),
-      { auth: "admin" }
+      z.array(LogQueryEntrySchema)
     ),
     // ── Packages ────────────────────────────────────────────────────
     listPackages: method(z.void(), z.array(InstalledPackageSchema).readonly()),
@@ -7923,7 +7931,7 @@ const PIPELINE_OWNER_CAPABILITY_NAMES = [
   "pipeline-orchestrator",
   "pipeline-runner"
 ];
-const UserRoleSchema = z.enum(["super_admin", "admin", "viewer", "agent"]);
+const UserRoleSchema = z.enum(["super_admin", "admin", "viewer", "agent", "scoped"]);
 const AllowedProviderSchema = z.union([z.literal("*"), z.array(z.string())]);
 const AllowedDevicesSchema = z.record(z.string(), z.union([z.literal("*"), z.array(z.string())]));
 const UserRecordSchema = z.object({
@@ -8304,4 +8312,4 @@ export {
   addonsCapability as y,
   zonesCapability as z
 };
-//# sourceMappingURL=auth-records-Bq2XO-Mg.mjs.map
+//# sourceMappingURL=auth-records-Bsjs9Xri.mjs.map