@cobaltcore-dev/aurora 0.18.0 → 0.19.0

package/dist/client/trpcClient-BxcNKnhv.mjs

@@ -0,0 +1,65 @@
+import { createTRPCReact as e } from "@trpc/react-query";
+import { createTRPCClient as t, httpBatchLink as n, httpBatchStreamLink as r, httpLink as i, httpSubscriptionLink as a, isNonJsonSerializable as o, splitLink as s } from "@trpc/client";
+//#region src/client/trpcClient.ts
+var c = {
+	token: null,
+	pending: null,
+	async getHeaders() {
+		if (this.token) return { "x-csrf-token": this.token };
+		this.pending ||= fetch("/csrf-token").then((e) => e.json()).then(({ csrfToken: e }) => (this.token = e, this.pending = null, e)).catch((e) => (this.pending = null, console.error("Failed to fetch CSRF token:", e), null));
+		let e = await this.pending;
+		return e ? { "x-csrf-token": e } : {};
+	},
+	invalidate() {
+		this.token = null;
+	}
+}, l = new Set(["storage.swift.downloadObject", "storage.ceph.objects.downloadObject"]), u = { bffEndpoint: "/polaris-bff" };
+function d(e) {
+	u.bffEndpoint = e;
+}
+var f = () => [s({
+	condition: (e) => e.type === "subscription",
+	true: a({
+		url: u.bffEndpoint,
+		eventSourceOptions: async () => ({ headers: await c.getHeaders() })
+	}),
+	false: s({
+		condition: (e) => o(e.input),
+		true: i({
+			url: u.bffEndpoint,
+			async headers({ op: e }) {
+				let t = await c.getHeaders(), n = e.context?.headers ?? {};
+				return {
+					...t,
+					...n
+				};
+			}
+		}),
+		false: s({
+			condition: (e) => l.has(e.path),
+			true: r({
+				url: u.bffEndpoint,
+				async headers() {
+					return c.getHeaders();
+				}
+			}),
+			false: n({
+				url: u.bffEndpoint,
+				async headers() {
+					return c.getHeaders();
+				}
+			})
+		})
+	})
+})], p = e(), m = {
+	react: null,
+	vanilla: null
+}, h = new Proxy({}, { get(e, t) {
+	return m.react ||= p.createClient({ links: f() }), m.react[t];
+} }), g = new Proxy({}, { get(e, n) {
+	return m.vanilla ||= t({ links: f() }), m.vanilla[n];
+} });
+//#endregion
+export { h as i, g as n, p as r, d as t };
+
+//# sourceMappingURL=trpcClient-BxcNKnhv.mjs.map

package/dist/client/trpcClient-BxcNKnhv.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"trpcClient-BxcNKnhv.mjs","names":["createTRPCReact","createTRPCClient","httpBatchLink","httpBatchStreamLink","httpLink","splitLink","isNonJsonSerializable","httpSubscriptionLink","csrfCache","token","pending","getHeaders","fetch","then","res","json","csrfToken","catch","error","console","invalidate","invalidateCsrfToken","STREAMING_PROCEDURES","Set","config","bffEndpoint","setBffEndpoint","endpoint","getLinks","condition","op","type","true","url","eventSourceOptions","headers","false","input","csrf","extra","context","has","path","trpcReact","clients","react","vanilla","trpcReactClient","Proxy","get","_target","prop","createClient","links","trpcClient"],"sources":["../../src/client/trpcClient.ts"],"sourcesContent":["import { createTRPCReact } from \"@trpc/react-query\"\nimport type { CreateTRPCReact } from \"@trpc/react-query\"\nimport { createTRPCClient, type TRPCClient } from \"@trpc/client\"\nimport {\n  httpBatchLink,\n  httpBatchStreamLink,\n  httpLink,\n  splitLink,\n  isNonJsonSerializable,\n  httpSubscriptionLink,\n} from \"@trpc/client\"\nimport type { AuroraRouter } from \"../server/routers\"\n\n/** Type alias for the React tRPC client */\nexport type TrpcReact = ReturnType<typeof createTRPCReact<AuroraRouter>>\n\n/** Type alias for the vanilla tRPC client */\nexport type TrpcClient = ReturnType<typeof createTRPCClient<AuroraRouter>>\n\n/** Generic type for creating a typed React tRPC client with a custom router */\nexport type CreateTypedTrpcReact<TRouter extends AuroraRouter> = CreateTRPCReact<TRouter, unknown>\n\n/** Generic type for creating a typed vanilla tRPC client with a custom router */\nexport type CreateTypedTrpcClient<TRouter extends AuroraRouter> = TRPCClient<TRouter>\n\n// CSRF token cache with request deduplication\nconst csrfCache = {\n  token: null as string | null,\n  pending: null as Promise<string | null> | null,\n\n  async getHeaders() {\n    if (this.token) {\n      return { \"x-csrf-token\": this.token }\n    }\n\n    // Dedupe concurrent fetches - only one request in flight at a time\n    if (!this.pending) {\n      this.pending = fetch(\"/csrf-token\")\n        .then((res) => res.json())\n        .then(({ csrfToken }) => {\n          this.token = csrfToken\n          this.pending = null\n          return csrfToken as string\n        })\n        .catch((error) => {\n          this.pending = null\n          console.error(\"Failed to fetch CSRF token:\", error)\n          return null\n        })\n    }\n\n    const token = await this.pending\n    return token ? { \"x-csrf-token\": token } : {}\n  },\n\n  invalidate() {\n    this.token = null\n  },\n}\n\n/**\n * Invalidate the cached CSRF token.\n * Call this when receiving a 403 response to trigger a fresh token fetch on the next request.\n */\nexport const invalidateCsrfToken = () => csrfCache.invalidate()\n\n// Procedures that return async iterables (chunked streaming responses).\n// These are routed through httpBatchStreamLink instead of httpBatchLink.\n// Add any new streaming procedure paths here.\nconst STREAMING_PROCEDURES = new Set<string>([\"storage.swift.downloadObject\", \"storage.ceph.objects.downloadObject\"])\n\n// BFF endpoint - set once by App before any tRPC calls are made\nconst config = {\n  bffEndpoint: \"/polaris-bff\",\n}\n\nexport function setBffEndpoint(endpoint: string) {\n  config.bffEndpoint = endpoint\n}\n\nconst getLinks = () => [\n  splitLink({\n    // First check: is it a subscription?\n    condition: (op) => op.type === \"subscription\",\n    // Use HTTP subscription link for subscriptions (long-polling)\n    true: httpSubscriptionLink({\n      url: config.bffEndpoint,\n      // Callback to populate headers\n      eventSourceOptions: async () => {\n        return { headers: await csrfCache.getHeaders() }\n      },\n    }),\n    // For non-subscriptions, check for non-JSON data or streaming procedures\n    false: splitLink({\n      // Non-JSON serializable input (FormData, Blob, ArrayBuffer, etc.) → plain httpLink.\n      condition: (op) => isNonJsonSerializable(op.input),\n      true: httpLink({\n        url: config.bffEndpoint,\n        async headers({ op }) {\n          const csrf = await csrfCache.getHeaders()\n          // Per-request headers can be injected via tRPC operation context.\n          // op.context is set by the caller and forwarded through the link chain.\n          const extra = (op.context as { headers?: Record<string, string> } | undefined)?.headers ?? {}\n          return { ...csrf, ...extra }\n        },\n      }),\n      // For JSON procedures, decide between streaming and regular batching\n      false: splitLink({\n        // Procedures returning async iterables must use httpBatchStreamLink.\n        // httpBatchLink buffers the full response before resolving, which\n        // breaks streaming. httpBatchStreamLink preserves batching while\n        // supporting chunked/streamed responses.\n        // Note: httpBatchStreamLink is intentionally NOT used globally because\n        // it is incompatible with the @fastify/csrf-protection cookie rotation\n        // used in this app — CSRF tokens can expire mid-stream on long-lived\n        // connections. Scope it only to procedures that actually need streaming.\n        condition: (op) => STREAMING_PROCEDURES.has(op.path),\n        true: httpBatchStreamLink({\n          url: config.bffEndpoint,\n          async headers() {\n            return csrfCache.getHeaders()\n          },\n        }),\n        // Regular JSON mutations/queries — standard batching\n        false: httpBatchLink({\n          url: config.bffEndpoint,\n          async headers() {\n            return csrfCache.getHeaders()\n          },\n        }),\n      }),\n    }),\n  }),\n]\n\n// React Query client (for hooks like useQuery/useMutation/useSubscription)\nexport const trpcReact: TrpcReact = createTRPCReact<AuroraRouter>()\n\n// Lazy-initialized clients - created on first access after setBffEndpoint() has been called by App\nconst clients = {\n  react: null as ReturnType<typeof trpcReact.createClient> | null,\n  vanilla: null as TrpcClient | null,\n}\n\nexport const trpcReactClient = new Proxy({} as ReturnType<typeof trpcReact.createClient>, {\n  get(_target, prop) {\n    if (!clients.react) {\n      clients.react = trpcReact.createClient({ links: getLinks() })\n    }\n    return (clients.react as Record<string | symbol, unknown>)[prop]\n  },\n})\n\nexport const trpcClient: TrpcClient = new Proxy({} as TrpcClient, {\n  get(_target, prop) {\n    if (!clients.vanilla) {\n      clients.vanilla = createTRPCClient<AuroraRouter>({ links: getLinks() })\n    }\n    return (clients.vanilla as Record<string | symbol, unknown>)[prop]\n  },\n})\n"],"mappings":";;;AA0BA,IAAMQ,IAAY;CAChBC,OAAO;CACPC,SAAS;CAET,MAAMC,aAAAA;EACJ,IAAI,KAAKF,OACP,OAAO,EAAE,gBAAgB,KAAKA,MAAM;EAItC,AACE,KAAKC,YAAUE,MAAM,aAAA,EAClBC,MAAMC,MAAQA,EAAIC,KAAI,CAAA,EACtBF,MAAM,EAAEG,oBACP,KAAKP,QAAQO,GACb,KAAKN,UAAU,MACRM,EACT,EACCC,OAAOC,OACN,KAAKR,UAAU,MACfS,QAAQD,MAAM,+BAA+BA,CAAAA,GACtC,KACT;EAGJ,IAAMT,IAAQ,MAAM,KAAKC;EACzB,OAAOD,IAAQ,EAAE,gBAAgBA,EAAM,IAAI,CAAC;CAC9C;CAEAW,aAAAA;EACE,KAAKX,QAAQ;CACf;AACF,GAWMa,IAAuB,IAAIC,IAAY,CAAC,gCAAgC,qCAAA,CAAsC,GAG9GC,IAAS,EACbC,aAAa,eACf;AAEA,SAAgBC,EAAeC,GAAgB;CAC7CH,EAAOC,cAAcE;AACvB;AAEA,IAAMC,UAAiB,CACrBvB,EAAU;CAERwB,YAAYC,MAAOA,EAAGC,SAAS;CAE/BC,MAAMzB,EAAqB;EACzB0B,KAAKT,EAAOC;EAEZS,oBAAoB,aACX,EAAEC,SAAS,MAAM3B,EAAUG,WAAU,EAAG;CAEnD,CAAA;CAEAyB,OAAO/B,EAAU;EAEfwB,YAAYC,MAAOxB,EAAsBwB,EAAGO,KAAK;EACjDL,MAAM5B,EAAS;GACb6B,KAAKT,EAAOC;GACZ,MAAMU,QAAQ,EAAEL,SAAI;IAClB,IAAMQ,IAAO,MAAM9B,EAAUG,WAAU,GAGjC4B,IAAQ,EAAIC,SAA8DL,WAAW,CAAC;IAC5F,OAAO;KAAE,GAAGG;KAAM,GAAGC;IAAM;GAC7B;EACF,CAAA;EAEAH,OAAO/B,EAAU;GASfwB,YAAYC,MAAOR,EAAqBmB,IAAIX,EAAGY,IAAI;GACnDV,MAAM7B,EAAoB;IACxB8B,KAAKT,EAAOC;IACZ,MAAMU,UAAAA;KACJ,OAAO3B,EAAUG,WAAU;IAC7B;GACF,CAAA;GAEAyB,OAAOlC,EAAc;IACnB+B,KAAKT,EAAOC;IACZ,MAAMU,UAAAA;KACJ,OAAO3B,EAAUG,WAAU;IAC7B;GACF,CAAA;EACF,CAAA;CACF,CAAA;AACF,CAAA,CAAA,GAIWgC,IAAuB3C,EAAAA,GAG9B4C,IAAU;CACdC,OAAO;CACPC,SAAS;AACX,GAEaC,IAAkB,IAAIC,MAAM,CAAC,GAAgD,EACxFC,IAAIC,GAASC,GAAI;CAIf,OAHA,AACEP,EAAQC,UAAQF,EAAUS,aAAa,EAAEC,OAAOzB,EAAAA,EAAW,CAAA,GAEtD,EAASiB,MAA2CM;AAC7D,EACF,CAAA,GAEaG,IAAyB,IAAIN,MAAM,CAAC,GAAiB,EAChEC,IAAIC,GAASC,GAAI;CAIf,OAHA,AACEP,EAAQE,YAAU7C,EAA+B,EAAEoD,OAAOzB,EAAAA,EAAW,CAAA,GAEhE,EAASkB,QAA6CK;AAC/D,EACF,CAAA"}

package/dist/client/trpcClient.d.ts

@@ -9,6 +9,11 @@ export type TrpcClient = ReturnType<typeof createTRPCClient<AuroraRouter>>;
 export type CreateTypedTrpcReact<TRouter extends AuroraRouter> = CreateTRPCReact<TRouter, unknown>;
 /** Generic type for creating a typed vanilla tRPC client with a custom router */
 export type CreateTypedTrpcClient<TRouter extends AuroraRouter> = TRPCClient<TRouter>;
+/**
+ * Invalidate the cached CSRF token.
+ * Call this when receiving a 403 response to trigger a fresh token fetch on the next request.
+ */
+export declare const invalidateCsrfToken: () => void;
 export declare function setBffEndpoint(endpoint: string): void;
 export declare const trpcReact: TrpcReact;
 export declare const trpcReactClient: TRPCClient<import('@trpc/server').TRPCBuiltRouter<{
@@ -50,22 +55,25 @@ export declare const trpcReactClient: TRPCClient<import('@trpc/server').TRPCBuil
                         } | undefined;
                         configuration?: {
                             subject: {
-                                common_name: string;
+                                named_attributes: {
+                                    cn: string;
+                                    c?: string[] | undefined;
+                                    l?: string[] | undefined;
+                                    o?: string[] | undefined;
+                                    ou?: string[] | undefined;
+                                    postal_code?: string[] | undefined;
+                                    st?: string[] | undefined;
+                                    serial_number?: string | undefined;
+                                    street?: string[] | undefined;
+                                };
                                 additional_attribute?: {
                                     key: number[];
                                     value: string;
                                 }[] | undefined;
-                                country?: string[] | undefined;
-                                locality?: string[] | undefined;
-                                organization?: string[] | undefined;
-                                organizational_unit?: string[] | undefined;
-                                postal_code?: string[] | undefined;
-                                province?: string[] | undefined;
-                                serial_number?: string | undefined;
-                                street_address?: string[] | undefined;
                             };
                         } | undefined;
                         csr?: string | undefined;
+                        display_subject?: string | undefined;
                         imported_certificate_chain?: string | undefined;
                     }[];
                     links: {
@@ -81,19 +89,9 @@ export declare const trpcReactClient: TRPCClient<import('@trpc/server').TRPCBuil
                     project_id: string;
                     configuration: {
                         subject: {
-                            common_name: string;
-                            additional_attribute?: {
-                                key: number[];
-                                value: string;
-                            }[] | undefined;
-                            country?: string[] | undefined;
-                            locality?: string[] | undefined;
-                            organization?: string[] | undefined;
-                            organizational_unit?: string[] | undefined;
-                            postal_code?: string[] | undefined;
-                            province?: string[] | undefined;
-                            serial_number?: string | undefined;
-                            street_address?: string[] | undefined;
+                            named_attributes: {
+                                cn: string;
+                            };
                         };
                     };
                 };
@@ -116,22 +114,25 @@ export declare const trpcReactClient: TRPCClient<import('@trpc/server').TRPCBuil
                     } | undefined;
                     configuration?: {
                         subject: {
-                            common_name: string;
+                            named_attributes: {
+                                cn: string;
+                                c?: string[] | undefined;
+                                l?: string[] | undefined;
+                                o?: string[] | undefined;
+                                ou?: string[] | undefined;
+                                postal_code?: string[] | undefined;
+                                st?: string[] | undefined;
+                                serial_number?: string | undefined;
+                                street?: string[] | undefined;
+                            };
                             additional_attribute?: {
                                 key: number[];
                                 value: string;
                             }[] | undefined;
-                            country?: string[] | undefined;
-                            locality?: string[] | undefined;
-                            organization?: string[] | undefined;
-                            organizational_unit?: string[] | undefined;
-                            postal_code?: string[] | undefined;
-                            province?: string[] | undefined;
-                            serial_number?: string | undefined;
-                            street_address?: string[] | undefined;
                         };
                     } | undefined;
                     csr?: string | undefined;
+                    display_subject?: string | undefined;
                     imported_certificate_chain?: string | undefined;
                 };
                 meta: object;
@@ -160,22 +161,25 @@ export declare const trpcReactClient: TRPCClient<import('@trpc/server').TRPCBuil
                     } | undefined;
                     configuration?: {
                         subject: {
-                            common_name: string;
+                            named_attributes: {
+                                cn: string;
+                                c?: string[] | undefined;
+                                l?: string[] | undefined;
+                                o?: string[] | undefined;
+                                ou?: string[] | undefined;
+                                postal_code?: string[] | undefined;
+                                st?: string[] | undefined;
+                                serial_number?: string | undefined;
+                                street?: string[] | undefined;
+                            };
                             additional_attribute?: {
                                 key: number[];
                                 value: string;
                             }[] | undefined;
-                            country?: string[] | undefined;
-                            locality?: string[] | undefined;
-                            organization?: string[] | undefined;
-                            organizational_unit?: string[] | undefined;
-                            postal_code?: string[] | undefined;
-                            province?: string[] | undefined;
-                            serial_number?: string | undefined;
-                            street_address?: string[] | undefined;
                         };
                     } | undefined;
                     csr?: string | undefined;
+                    display_subject?: string | undefined;
                     imported_certificate_chain?: string | undefined;
                 };
                 meta: object;
@@ -213,22 +217,25 @@ export declare const trpcReactClient: TRPCClient<import('@trpc/server').TRPCBuil
                     } | undefined;
                     configuration?: {
                         subject: {
-                            common_name: string;
+                            named_attributes: {
+                                cn: string;
+                                c?: string[] | undefined;
+                                l?: string[] | undefined;
+                                o?: string[] | undefined;
+                                ou?: string[] | undefined;
+                                postal_code?: string[] | undefined;
+                                st?: string[] | undefined;
+                                serial_number?: string | undefined;
+                                street?: string[] | undefined;
+                            };
                             additional_attribute?: {
                                 key: number[];
                                 value: string;
                             }[] | undefined;
-                            country?: string[] | undefined;
-                            locality?: string[] | undefined;
-                            organization?: string[] | undefined;
-                            organizational_unit?: string[] | undefined;
-                            postal_code?: string[] | undefined;
-                            province?: string[] | undefined;
-                            serial_number?: string | undefined;
-                            street_address?: string[] | undefined;
                         };
                     } | undefined;
                     csr?: string | undefined;
+                    display_subject?: string | undefined;
                     imported_certificate_chain?: string | undefined;
                 };
                 meta: object;

package/dist/server/index.d.ts

@@ -708,22 +708,25 @@ declare const buildBaseRouter: (policyDir: string) => _trpc_server.TRPCBuiltRout
                         } | undefined;
                         configuration?: {
                             subject: {
-                                common_name: string;
+                                named_attributes: {
+                                    cn: string;
+                                    c?: string[] | undefined;
+                                    l?: string[] | undefined;
+                                    o?: string[] | undefined;
+                                    ou?: string[] | undefined;
+                                    postal_code?: string[] | undefined;
+                                    st?: string[] | undefined;
+                                    serial_number?: string | undefined;
+                                    street?: string[] | undefined;
+                                };
                                 additional_attribute?: {
                                     key: number[];
                                     value: string;
                                 }[] | undefined;
-                                country?: string[] | undefined;
-                                locality?: string[] | undefined;
-                                organization?: string[] | undefined;
-                                organizational_unit?: string[] | undefined;
-                                postal_code?: string[] | undefined;
-                                province?: string[] | undefined;
-                                serial_number?: string | undefined;
-                                street_address?: string[] | undefined;
                             };
                         } | undefined;
                         csr?: string | undefined;
+                        display_subject?: string | undefined;
                         imported_certificate_chain?: string | undefined;
                     }[];
                     links: {
@@ -739,19 +742,9 @@ declare const buildBaseRouter: (policyDir: string) => _trpc_server.TRPCBuiltRout
                     project_id: string;
                     configuration: {
                         subject: {
-                            common_name: string;
-                            additional_attribute?: {
-                                key: number[];
-                                value: string;
-                            }[] | undefined;
-                            country?: string[] | undefined;
-                            locality?: string[] | undefined;
-                            organization?: string[] | undefined;
-                            organizational_unit?: string[] | undefined;
-                            postal_code?: string[] | undefined;
-                            province?: string[] | undefined;
-                            serial_number?: string | undefined;
-                            street_address?: string[] | undefined;
+                            named_attributes: {
+                                cn: string;
+                            };
                         };
                     };
                 };
@@ -774,22 +767,25 @@ declare const buildBaseRouter: (policyDir: string) => _trpc_server.TRPCBuiltRout
                     } | undefined;
                     configuration?: {
                         subject: {
-                            common_name: string;
+                            named_attributes: {
+                                cn: string;
+                                c?: string[] | undefined;
+                                l?: string[] | undefined;
+                                o?: string[] | undefined;
+                                ou?: string[] | undefined;
+                                postal_code?: string[] | undefined;
+                                st?: string[] | undefined;
+                                serial_number?: string | undefined;
+                                street?: string[] | undefined;
+                            };
                             additional_attribute?: {
                                 key: number[];
                                 value: string;
                             }[] | undefined;
-                            country?: string[] | undefined;
-                            locality?: string[] | undefined;
-                            organization?: string[] | undefined;
-                            organizational_unit?: string[] | undefined;
-                            postal_code?: string[] | undefined;
-                            province?: string[] | undefined;
-                            serial_number?: string | undefined;
-                            street_address?: string[] | undefined;
                         };
                     } | undefined;
                     csr?: string | undefined;
+                    display_subject?: string | undefined;
                     imported_certificate_chain?: string | undefined;
                 };
                 meta: object;
@@ -818,22 +814,25 @@ declare const buildBaseRouter: (policyDir: string) => _trpc_server.TRPCBuiltRout
                     } | undefined;
                     configuration?: {
                         subject: {
-                            common_name: string;
+                            named_attributes: {
+                                cn: string;
+                                c?: string[] | undefined;
+                                l?: string[] | undefined;
+                                o?: string[] | undefined;
+                                ou?: string[] | undefined;
+                                postal_code?: string[] | undefined;
+                                st?: string[] | undefined;
+                                serial_number?: string | undefined;
+                                street?: string[] | undefined;
+                            };
                             additional_attribute?: {
                                 key: number[];
                                 value: string;
                             }[] | undefined;
-                            country?: string[] | undefined;
-                            locality?: string[] | undefined;
-                            organization?: string[] | undefined;
-                            organizational_unit?: string[] | undefined;
-                            postal_code?: string[] | undefined;
-                            province?: string[] | undefined;
-                            serial_number?: string | undefined;
-                            street_address?: string[] | undefined;
                         };
                     } | undefined;
                     csr?: string | undefined;
+                    display_subject?: string | undefined;
                     imported_certificate_chain?: string | undefined;
                 };
                 meta: object;
@@ -871,22 +870,25 @@ declare const buildBaseRouter: (policyDir: string) => _trpc_server.TRPCBuiltRout
                     } | undefined;
                     configuration?: {
                         subject: {
-                            common_name: string;
+                            named_attributes: {
+                                cn: string;
+                                c?: string[] | undefined;
+                                l?: string[] | undefined;
+                                o?: string[] | undefined;
+                                ou?: string[] | undefined;
+                                postal_code?: string[] | undefined;
+                                st?: string[] | undefined;
+                                serial_number?: string | undefined;
+                                street?: string[] | undefined;
+                            };
                             additional_attribute?: {
                                 key: number[];
                                 value: string;
                             }[] | undefined;
-                            country?: string[] | undefined;
-                            locality?: string[] | undefined;
-                            organization?: string[] | undefined;
-                            organizational_unit?: string[] | undefined;
-                            postal_code?: string[] | undefined;
-                            province?: string[] | undefined;
-                            serial_number?: string | undefined;
-                            street_address?: string[] | undefined;
                         };
                     } | undefined;
                     csr?: string | undefined;
+                    display_subject?: string | undefined;
                     imported_certificate_chain?: string | undefined;
                 };
                 meta: object;

package/dist/server/index.js

@@ -34673,10 +34673,20 @@ var objectRouter = {
         throw mappedError;
       }
     }, "emitMappedError");
-    const response = await s3.send(new import_client_s33.GetObjectCommand({
-      Bucket: containerName,
-      Key: objectKey
-    })).catch(emitMappedError);
+    const response = await s3.send(
+      new import_client_s33.GetObjectCommand({
+        Bucket: containerName,
+        Key: objectKey
+      }),
+      // AWS SDK v3's per-call cancellation option — the equivalent of passing
+      // `{ signal }` to a raw fetch() (see 0010_abort_signal_propagation.md).
+      // ctx.req.signal is aborted automatically when the client disconnects
+      // (tab closed, navigated away) or explicitly via the cancel button,
+      // which calls AbortController.abort() on the frontend.
+      {
+        abortSignal: ctx.req.signal
+      }
+    ).catch(emitMappedError);
     const body = response.Body;
     if (!body) {
       emitMappedError(new import_server13.TRPCError({
@@ -34695,8 +34705,13 @@ var objectRouter = {
     });
     let isFirst = true;
     let downloaded = 0;
+    let aborted = false;
     try {
       for await (const value of body) {
+        if (ctx.req.signal?.aborted) {
+          aborted = true;
+          break;
+        }
         downloaded += value.byteLength;
         const progress = downloadProgressMap2.get(scopedDownloadId);
         progress.downloaded = downloaded;
@@ -34716,7 +34731,9 @@ var objectRouter = {
         };
         isFirst = false;
       }
-      downloadProgressEmitter2.emit(`progress:${scopedDownloadId}:complete`);
+      if (!aborted) {
+        downloadProgressEmitter2.emit(`progress:${scopedDownloadId}:complete`);
+      }
     } catch (error) {
       emitMappedError(error);
     } finally {
@@ -37559,24 +37576,31 @@ var CertificateAuthorityAdditionalAttributeSchema = import_zod25.z.object({
   key: import_zod25.z.array(import_zod25.z.number().int()),
   value: import_zod25.z.string()
 });
+var stringOrStringArray = import_zod25.z.union([
+  import_zod25.z.array(import_zod25.z.string()),
+  import_zod25.z.string().transform((s) => [
+    s
+  ])
+]);
 var CertificateAuthoritySubjectSchema = import_zod25.z.object({
   additional_attribute: import_zod25.z.array(CertificateAuthorityAdditionalAttributeSchema).optional(),
-  /** Typically domain name */
-  common_name: import_zod25.z.string(),
-  /** Country codes (ISO 3166-1 alpha-2). */
-  country: import_zod25.z.array(import_zod25.z.string()).optional(),
-  /** Locality/city names. */
-  locality: import_zod25.z.array(import_zod25.z.string()).optional(),
-  /** Organization names. */
-  organization: import_zod25.z.array(import_zod25.z.string()).optional(),
-  /** Organizational unit names. */
-  organizational_unit: import_zod25.z.array(import_zod25.z.string()).optional(),
-  /** Postal/ZIP codes. */
-  postal_code: import_zod25.z.array(import_zod25.z.string()).optional(),
-  /** State or province names. */
-  province: import_zod25.z.array(import_zod25.z.string()).optional(),
-  serial_number: import_zod25.z.string().optional(),
-  street_address: import_zod25.z.array(import_zod25.z.string()).optional()
+  named_attributes: import_zod25.z.object({
+    cn: import_zod25.z.string(),
+    /** Country codes (ISO 3166-1 alpha-2). */
+    c: stringOrStringArray.optional(),
+    /** Locality/city names. */
+    l: stringOrStringArray.optional(),
+    /** Organization names. */
+    o: stringOrStringArray.optional(),
+    /** Organizational unit names. */
+    ou: stringOrStringArray.optional(),
+    /** Postal/ZIP codes. */
+    postal_code: stringOrStringArray.optional(),
+    /** State or province names. */
+    st: stringOrStringArray.optional(),
+    serial_number: import_zod25.z.string().optional(),
+    street: stringOrStringArray.optional()
+  })
 });
 var CertificateAuthorityStateSchema = import_zod25.z.enum([
   "CREATING",
@@ -37594,6 +37618,8 @@ var CertificateAuthoritySchema = import_zod25.z.object({
     subject: CertificateAuthoritySubjectSchema
   }).optional(),
   csr: import_zod25.z.string().optional(),
+  /** Human-readable subject string, e.g. "CN=demo-ca.test.sci". */
+  display_subject: import_zod25.z.string().optional(),
   id: import_zod25.z.string(),
   /**
   * Required on import certificate operation.
@@ -37622,7 +37648,11 @@ var CertificateAuthoritiesListInputSchema = projectScopedInputSchema.extend({
 });
 var CertificateAuthorityCreateSchema = import_zod25.z.object({
   configuration: import_zod25.z.object({
-    subject: CertificateAuthoritySubjectSchema
+    subject: import_zod25.z.object({
+      named_attributes: import_zod25.z.object({
+        cn: import_zod25.z.string().trim().min(1)
+      })
+    })
   })
 });
 var CertificateAuthorityIdInputSchema = projectScopedInputSchema.extend({
@@ -37662,7 +37692,7 @@ var CertificatesListSchema = import_zod25.z.object({
 });
 
 // src/server/Services/routers/pcaRouter.ts
-var PCA_BASE_URL = "certificate-authorities";
+var PCA_BASE_URL = "v1/certificate-authorities";
 var pcaRouter = {
   list: projectScopedProcedure.input(CertificateAuthoritiesListInputSchema).query(async ({ input, ctx }) => {
     return withErrorHandling3(async () => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cobaltcore-dev/aurora",
-  "version": "0.18.0",
+  "version": "0.19.0",
   "private": false,
   "description": "Aurora OpenStack dashboard — server and client library",
   "license": "Apache-2.0",
@@ -51,6 +51,7 @@
     "@headlessui/react": "^2.2.2",
     "@lingui/core": "^5.9.5",
     "@lingui/react": "^5.9.5",
+    "@peculiar/x509": "^2.0.0",
     "@tanstack/react-form": "^1.28.5",
     "@tanstack/react-query": "^5.95.2",
     "@tanstack/react-router": "^1.168.4",
@@ -65,6 +66,7 @@
     "node-fetch": "^3.3.2",
     "react-error-boundary": "^6.1.0",
     "react-icons": "^5.6.0",
+    "reflect-metadata": "^0.2.2",
     "tailwind-merge": "^3.2.0",
     "zod": "^4.0.0"
   },
@@ -106,8 +108,8 @@
     "vite-plugin-svgr": "^5.0.0",
     "vite-tsconfig-paths": "^6.1.1",
     "vitest": "^4.1.2",
-    "@cobaltcore-dev/policy-engine": "2.0.0",
     "@cobaltcore-dev/aurora-config": "0.0.1",
+    "@cobaltcore-dev/policy-engine": "2.0.0",
     "@cobaltcore-dev/signal-openstack": "1.0.0"
   },
   "scripts": {