@cogenta/auth 0.3.0 → 0.5.0

package/dist/types.d.ts

@@ -7,20 +7,54 @@
  * This package is that concern: it is what turns a role name into an actual
  * signed-in person.
  */
-export declare const CREDENTIAL_KINDS: readonly ['password', 'totp', 'webauthn'];
+export declare const CREDENTIAL_KINDS: readonly ['password', 'totp', 'webauthn', 'recovery_codes'];
 export type CredentialKind = (typeof CREDENTIAL_KINDS)[number];
+/**
+ * `invited` (fiche 17 task 1) and `anonymized` (fiche 17 task 5) joined
+ * `active`/`disabled` on the same grounds: neither is a role or a permission,
+ * both are states of the *account* itself, and both are enforced the same way
+ * every non-`active` status already was — `passwordLogin` and `resolveActor`
+ * both refuse anything but `active`, so an invited account (no password yet)
+ * and an anonymized one (deliberately made permanent) are blocked from
+ * signing in for free, with no new check anywhere.
+ */
+export type UserStatus = 'active' | 'disabled' | 'invited' | 'anonymized';
 export interface User {
     readonly id: string;
     readonly email: string;
     /** An open set of names, exactly as contract A's collection permissions expect. */
     readonly roles: readonly string[];
-    readonly status: 'active' | 'disabled';
+    readonly status: UserStatus;
     readonly createdAt: string;
     readonly updatedAt: string;
+    /**
+     * Public profile (fiche 17 task 3) — volunteered by the account itself,
+     * never inferred. `null` means "not set", not "empty string": a theme or an
+     * audit view falls back to the email only when this is genuinely absent.
+     */
+    readonly displayName: string | null;
+    /** A media asset id (`@cogenta/schema`'s media store), not a URL — resolved the same way any other avatar-shaped field is. */
+    readonly avatarMediaId: string | null;
+    readonly bio: string | null;
+    /** BCP-47-ish tag for the admin's own interface language, e.g. `en` or `fr-CA`. */
+    readonly locale: string | null;
 }
 export interface CreateUserInput {
     readonly email: string;
     readonly roles: readonly string[];
+    /**
+     * Defaults to `active`. Only `invited` (fiche 17 task 1) is meant to be
+     * passed by a caller today — `anonymized` is reached through
+     * `UserStore.anonymize`, never through `create`.
+     */
+    readonly status?: UserStatus;
+}
+/** Self-service only (fiche 17 task 3) — see `UserStore.updateProfile`'s doc comment for why. */
+export interface UpdateProfileInput {
+    readonly displayName?: string | null;
+    readonly avatarMediaId?: string | null;
+    readonly bio?: string | null;
+    readonly locale?: string | null;
 }
 export interface Session {
     readonly id: string;
@@ -30,6 +64,14 @@ export interface Session {
     readonly lastSeenAt: string;
     /** Free text, shown in "your sessions" so a person can recognise a device. */
     readonly label: string | undefined;
+    /**
+     * Browser family and device type, distilled from the `User-Agent` header at
+     * creation time and never anything more (fiche 18 task 2) — no IP address,
+     * no raw user-agent string, no third-party geolocation (R1, and privacy).
+     * `'unknown'` for a session created without one (a script, an old row).
+     */
+    readonly browser: string;
+    readonly device: string;
 }
 /**
  * A session as returned once, at creation. `token` is the bearer credential; it
@@ -49,6 +91,16 @@ export interface AuditEntry {
     readonly collection: string | null;
     readonly entryId: string | null;
     readonly diff: Readonly<Record<string, unknown>> | null;
+    /**
+     * The content version this action produced, when it produced one
+     * (`content.create`/`content.update`/`content.restore`; `null` for every
+     * other action, and for an action a site recorded before this field
+     * existed). Fiche 21 task 1: this is what lets the entry's detail view ask
+     * `GET .../diff?from={version-1}&to={version}` instead of re-deriving a
+     * diff from `at`, which a concurrent write could make point at the wrong
+     * pair of versions.
+     */
+    readonly version: number | null;
     /** Chains to the previous entry's hash. The first entry chains to null. */
     readonly hash: string;
     readonly previousHash: string | null;
@@ -60,7 +112,15 @@ export interface RecordAuditInput {
     readonly collection?: string | undefined;
     readonly entryId?: string | undefined;
     readonly diff?: Readonly<Record<string, unknown>> | undefined;
+    /** See `AuditEntry.version`. Omitted (not `null`) for an action that never produces one. */
+    readonly version?: number | undefined;
 }
+/**
+ * Who or what an entry names, from signals the log already carries — see
+ * `classifyAuditActor` in `audit.ts`.
+ */
+export declare const AUDIT_ACTOR_KINDS: readonly ['human', 'agent', 'api_key', 'system'];
+export type AuditActorKind = (typeof AUDIT_ACTOR_KINDS)[number];
 /**
  * A machine-to-machine bearer credential (L13 task 8).
  *
@@ -80,15 +140,42 @@ export interface ApiKey {
     readonly expiresAt: string | undefined;
     readonly revokedAt: string | undefined;
     readonly lastUsedAt: string | undefined;
+    /** Requests per minute this key may make (fiche 20 task 3). Always a real number — `DEFAULT_RATE_LIMIT_PER_MINUTE` when none was chosen. */
+    readonly rateLimitPerMinute: number;
+    /**
+     * The id of the key that replaced this one, once rotated (fiche 20 task 2).
+     * `undefined` for a key that has never been rotated, or that *is* the
+     * result of a rotation. `expiresAt` is what actually ends this key's grace
+     * window; this field only names what it was superseded by.
+     */
+    readonly supersededBy: string | undefined;
 }
 export interface CreateApiKeyInput {
     readonly name: string;
     readonly scope: readonly string[];
     readonly createdBy: string | null;
     readonly expiresAt?: string | undefined;
+    /** Omit for `DEFAULT_RATE_LIMIT_PER_MINUTE`. */
+    readonly rateLimitPerMinute?: number | undefined;
 }
 /** An API key as returned once, at creation — `key` is never stored or shown again. */
 export interface IssuedApiKey extends ApiKey {
     readonly key: string;
 }
+/**
+ * "Faire tourner cette clé" (fiche 20 task 2): a fresh key with the same name,
+ * scope and quota as the one it replaces, and the replaced key kept valid
+ * for a chosen grace window rather than dying mid-flight.
+ */
+export interface ApiKeyRotationResult {
+    /** The new key, raw value included exactly once — same rule as `create`. */
+    readonly issued: IssuedApiKey;
+    /** The old key, now expiring at the end of its grace window. */
+    readonly previous: ApiKey;
+}
+/** Aggregated call counts for one key (fiche 20 task 4) — never a line per call. */
+export interface ApiKeyUsage {
+    readonly last7Days: number;
+    readonly last30Days: number;
+}
 //# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,eAAO,MAAM,gBAAgB,YAAI,UAAU,EAAE,MAAM,EAAE,UAAU,CAAU,CAAA;AACzE,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE9D,MAAM,WAAW,IAAI;IACnB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,mFAAmF;IACnF,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,UAAU,CAAA;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAClC;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,8EAA8E;IAC9E,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;CACnC;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAc,SAAQ,OAAO;IAC5C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,oEAAoE;IACpE,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,CAAA;IACvD,2EAA2E;IAC3E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CACrC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,CAAA;CAC9D;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,oEAAoE;IACpE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;CACxC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACxC;AAED,uFAAuF;AACvF,MAAM,WAAW,YAAa,SAAQ,MAAM;IAC1C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,eAAO,MAAM,gBAAgB,YAAI,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,gBAAgB,CAAU,CAAA;AAC3F,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE9D;;;;;;;;GAQG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,YAAY,CAAA;AAEzE,MAAM,WAAW,IAAI;IACnB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,mFAAmF;IACnF,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,8HAA8H;IAC9H,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,mFAAmF;IACnF,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAA;CAC7B;AAED,iGAAiG;AACjG,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAChC;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,8EAA8E;IAC9E,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;IAClC;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAc,SAAQ,OAAO;IAC5C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,oEAAoE;IACpE,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,CAAA;IACvD;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,2EAA2E;IAC3E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CACrC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,CAAA;IAC7D,4FAA4F;IAC5F,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACtC;AAED;;;GAGG;AACH,eAAO,MAAM,iBAAiB,YAAI,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAU,CAAA;AACjF,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE/D;;;;;;;GAOG;AACH,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,oEAAoE;IACpE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;IACvC,4IAA4I;IAC5I,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAA;IACnC;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAA;CAC1C;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACvC,gDAAgD;IAChD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACjD;AAED,uFAAuF;AACvF,MAAM,WAAW,YAAa,SAAQ,MAAM;IAC1C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;IAC7B,gEAAgE;IAChE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAC1B;AAED,oFAAoF;AACpF,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B"}

package/dist/types.js

@@ -7,5 +7,14 @@
  * This package is that concern: it is what turns a role name into an actual
  * signed-in person.
  */
-export const CREDENTIAL_KINDS = ['password', 'totp', 'webauthn'];
+// `recovery_codes` (fiche 18 task 1) stores a JSON blob of hashed, single-use
+// codes — the way back in for an account that enrolled TOTP and then lost
+// the device. Same shape as every other kind here: interpreted only by
+// `credentials.ts`, never by this layer.
+export const CREDENTIAL_KINDS = ['password', 'totp', 'webauthn', 'recovery_codes'];
+/**
+ * Who or what an entry names, from signals the log already carries — see
+ * `classifyAuditActor` in `audit.ts`.
+ */
+export const AUDIT_ACTOR_KINDS = ['human', 'agent', 'api_key', 'system'];
 //# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,CAAU,CAAA"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,8EAA8E;AAC9E,0EAA0E;AAC1E,uEAAuE;AACvE,yCAAyC;AACzC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,gBAAgB,CAAU,CAAA;AAqH3F;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAU,CAAA"}

package/dist/user-agent.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Just enough of a `User-Agent` parse to answer "which of my sessions is my
+ * phone" — never more (fiche 18 task 2).
+ *
+ * A `User-Agent` string is personal data the moment it is stored whole: it
+ * fingerprints a browser build, an OS patch level, sometimes a device model.
+ * `sessions.ts` calls this once, at session creation, and keeps only the
+ * two-word answer below — the raw header itself is never written to a row
+ * and is discarded the instant this function returns. No dependency (R9): a
+ * handful of substring checks is the entire "library" a session list needs.
+ */
+export interface ParsedUserAgent {
+    readonly browser: string;
+    readonly device: string;
+}
+/** Distils a raw `User-Agent` header into a browser family and a device type. Never keeps anything else. */
+export declare function parseUserAgent(userAgent: string | null | undefined): ParsedUserAgent;
+//# sourceMappingURL=user-agent.d.ts.map

package/dist/user-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent.d.ts","sourceRoot":"","sources":["../src/user-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB;AA0BD,4GAA4G;AAC5G,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,eAAe,CAKpF"}

package/dist/user-agent.js

@@ -0,0 +1,39 @@
+const UNKNOWN = Object.freeze({ browser: 'unknown', device: 'unknown' });
+function deviceOf(ua) {
+    if (/ipad|tablet|kindle|playbook/iu.test(ua))
+        return 'tablet';
+    if (/mobi|iphone|ipod|android.*mobile|windows phone|blackberry/iu.test(ua))
+        return 'mobile';
+    if (/bot|crawler|spider|curl\/|wget\/|python-requests|axios\//iu.test(ua))
+        return 'bot';
+    return 'desktop';
+}
+function browserOf(ua) {
+    // Order matters: Edge and Opera both carry "Chrome" in their UA string, and
+    // Chrome itself carries "Safari" in its — the more specific token has to be
+    // checked first, or every Edge or Opera user would be reported as Chrome,
+    // and every Chrome user as Safari.
+    if (/edg\//iu.test(ua))
+        return 'edge';
+    if (/opr\/|opera/iu.test(ua))
+        return 'opera';
+    if (/firefox\/|fxios\//iu.test(ua))
+        return 'firefox';
+    if (/crios\//iu.test(ua))
+        return 'chrome';
+    if (/chrome\//iu.test(ua) && !/chromium/iu.test(ua))
+        return 'chrome';
+    if (/safari\//iu.test(ua))
+        return 'safari';
+    if (/bot|crawler|spider/iu.test(ua))
+        return 'bot';
+    return 'other';
+}
+/** Distils a raw `User-Agent` header into a browser family and a device type. Never keeps anything else. */
+export function parseUserAgent(userAgent) {
+    if (userAgent === null || userAgent === undefined || userAgent.trim().length === 0) {
+        return UNKNOWN;
+    }
+    return { browser: browserOf(userAgent), device: deviceOf(userAgent) };
+}
+//# sourceMappingURL=user-agent.js.map

package/dist/user-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent.js","sourceRoot":"","sources":["../src/user-agent.ts"],"names":[],"mappings":"AAgBA,MAAM,OAAO,GAAoB,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;AAEzF,SAAS,QAAQ,CAAC,EAAU;IAC1B,IAAI,+BAA+B,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC7D,IAAI,6DAA6D,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC3F,IAAI,4DAA4D,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,KAAK,CAAA;IACvF,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,SAAS,CAAC,EAAU;IAC3B,4EAA4E;IAC5E,4EAA4E;IAC5E,0EAA0E;IAC1E,mCAAmC;IACnC,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,MAAM,CAAA;IACrC,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,OAAO,CAAA;IAC5C,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,SAAS,CAAA;IACpD,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,QAAQ,CAAA;IACzC,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,QAAQ,CAAA;IACpE,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC1C,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,KAAK,CAAA;IACjD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,cAAc,CAAC,SAAoC;IACjE,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnF,OAAO,OAAO,CAAA;IAChB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAA;AACvE,CAAC"}

package/dist/users.d.ts

@@ -1,5 +1,5 @@
 import { type DatabaseHandle } from '@cogenta/core';
-import type { CreateUserInput, User } from './types.js';
+import type { CreateUserInput, UpdateProfileInput, User } from './types.js';
 export interface UserStore {
     create(input: CreateUserInput): Promise<User>;
     byEmail(email: string): Promise<User | null>;
@@ -7,6 +7,29 @@ export interface UserStore {
     setRoles(id: string, roles: readonly string[]): Promise<void>;
     setStatus(id: string, status: User['status']): Promise<void>;
     list(): Promise<readonly User[]>;
+    /** Self-service profile fields (fiche 17 task 3) — see `UpdateProfileInput`'s doc comment. */
+    updateProfile(id: string, input: UpdateProfileInput): Promise<void>;
+    /**
+     * Real, hard deletion — the one exception to "accounts are disabled, never
+     * removed" (this file's header, and `users-router.ts`'s). The exception
+     * holds only because of what an `invited` account structurally cannot be:
+     * signing in requires `status === 'active'` (`login.ts`), so an account
+     * still sitting in `invited` has never authenticated and therefore cannot
+     * have authored a single row anywhere — there is nothing for the audit log
+     * or a `createdBy` column to lose. The caller (`users-router.ts`'s cancel
+     * route) is what enforces that this is only ever reached for such a row;
+     * this method itself does not re-check the status, the same way `setRoles`
+     * does not re-check who is asking.
+     */
+    delete(id: string): Promise<void>;
+    /**
+     * The RGPD-erasure half of fiche 17 task 5. Irreversible by construction:
+     * the original email is never stored anywhere, hashed or otherwise — there
+     * is nothing left in this table (or this process) that could reconstruct
+     * it. Returns the updated row so the caller can build one response instead
+     * of anonymizing and then re-reading.
+     */
+    anonymize(id: string): Promise<User>;
 }
 export declare function createUserStore(db: DatabaseHandle, now?: () => number): UserStore;
 //# sourceMappingURL=users.d.ts.map

package/dist/users.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../src/users.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,cAAc,EAA0B,MAAM,eAAe,CAAA;AAEzF,OAAO,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AA0BvD,MAAM,WAAW,SAAS;IACxB,MAAM,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7C,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;IAC5C,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;IACtC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7D,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5D,IAAI,IAAI,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAA;CACjC;AAED,wBAAgB,eAAe,CAAC,EAAE,EAAE,cAAc,EAAE,GAAG,GAAE,MAAM,MAAiB,GAAG,SAAS,CAgE3F"}
+{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../src/users.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,cAAc,EAKpB,MAAM,eAAe,CAAA;AAEtB,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AA8C3E,MAAM,WAAW,SAAS;IACxB,MAAM,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7C,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;IAC5C,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;IACtC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7D,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5D,IAAI,IAAI,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAA;IAChC,8FAA8F;IAC9F,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnE;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjC;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACrC;AAED,wBAAgB,eAAe,CAAC,EAAE,EAAE,cAAc,EAAE,GAAG,GAAE,MAAM,MAAiB,GAAG,SAAS,CA6H3F"}

package/dist/users.js

@@ -1,4 +1,5 @@
-import { CogentaError, identifier, newId, sql } from '@cogenta/core';
+import { randomBytes } from 'node:crypto';
+import { CogentaError, identifier, newId, sql, } from '@cogenta/core';
 import { TABLES } from './tables.js';
 function fromRow(row) {
     return {
@@ -8,8 +9,23 @@ function fromRow(row) {
         status: row.status,
         createdAt: row.created_at,
         updatedAt: row.updated_at,
+        displayName: row.display_name ?? null,
+        avatarMediaId: row.avatar_media_id ?? null,
+        bio: row.bio ?? null,
+        locale: row.locale ?? null,
     };
 }
+/**
+ * The non-reversible token an anonymized account's email becomes (fiche 17
+ * task 5). `.invalid` is the reserved TLD RFC 2606 sets aside for exactly
+ * this — an address guaranteed to never resolve, so nobody could ever
+ * mistake it for a real, deliverable mailbox. Random rather than derived from
+ * the old address: derivation would be a second, weaker encoding of the very
+ * thing this is meant to erase.
+ */
+function anonymizedEmail() {
+    return `anon-${randomBytes(16).toString('hex')}@anonymized.invalid`;
+}
 function normaliseEmail(email) {
     return email.trim().toLowerCase();
 }
@@ -28,16 +44,21 @@ export function createUserStore(db, now = Date.now) {
             }
             const id = newId();
             const timestamp = new Date(now()).toISOString();
+            const status = input.status ?? 'active';
             await db.query(sql `
         insert into ${table} (id, email, roles, status, created_at, updated_at)
-        values (${id}, ${email}, ${JSON.stringify(input.roles)}, ${'active'}, ${timestamp}, ${timestamp})`);
+        values (${id}, ${email}, ${JSON.stringify(input.roles)}, ${status}, ${timestamp}, ${timestamp})`);
             return {
                 id,
                 email,
                 roles: input.roles,
-                status: 'active',
+                status,
                 createdAt: timestamp,
                 updatedAt: timestamp,
+                displayName: null,
+                avatarMediaId: null,
+                bio: null,
+                locale: null,
             };
         },
         byEmail: async (email) => {
@@ -64,6 +85,54 @@ export function createUserStore(db, now = Date.now) {
             const result = await db.query(sql `select * from ${table} order by created_at asc`);
             return result.rows.map(fromRow);
         },
+        updateProfile: async (id, input) => {
+            // Only the fields actually present in `input` are touched — `undefined`
+            // means "leave alone", `null` means "clear it". A caller that wants a
+            // partial update (change just the bio) must not have the other three
+            // silently wiped by a full-row overwrite.
+            const assignments = [];
+            if ('displayName' in input) {
+                assignments.push(sql `${identifier('display_name', db.dialect)} = ${input.displayName ?? null}`);
+            }
+            if ('avatarMediaId' in input) {
+                assignments.push(sql `${identifier('avatar_media_id', db.dialect)} = ${input.avatarMediaId ?? null}`);
+            }
+            if ('bio' in input) {
+                assignments.push(sql `${identifier('bio', db.dialect)} = ${input.bio ?? null}`);
+            }
+            if ('locale' in input) {
+                assignments.push(sql `${identifier('locale', db.dialect)} = ${input.locale ?? null}`);
+            }
+            if (assignments.length === 0)
+                return;
+            const set = assignments.reduce((left, right) => sql `${left}, ${right}`);
+            await db.query(sql `
+        update ${table} set ${set}, updated_at = ${new Date(now()).toISOString()}
+        where id = ${id}`);
+        },
+        delete: async (id) => {
+            await db.query(sql `delete from ${table} where id = ${id}`);
+        },
+        anonymize: async (id) => {
+            const timestamp = new Date(now()).toISOString();
+            const email = anonymizedEmail();
+            await db.query(sql `
+        update ${table}
+        set email = ${email}, status = ${'anonymized'},
+            display_name = ${null}, avatar_media_id = ${null}, bio = ${null}, locale = ${null},
+            updated_at = ${timestamp}
+        where id = ${id}`);
+            const result = await db.query(sql `select * from ${table} where id = ${id}`);
+            const row = result.rows[0];
+            if (row === undefined) {
+                throw new CogentaError({
+                    code: 'AUTH_USER_NOT_FOUND',
+                    message: 'No account with that id.',
+                    hint: 'It may have been removed between the check and this call.',
+                });
+            }
+            return fromRow(row);
+        },
     };
 }
 //# sourceMappingURL=users.js.map

package/dist/users.js.map

@@ -1 +1 @@
-{"version":3,"file":"users.js","sourceRoot":"","sources":["../src/users.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAuB,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,eAAe,CAAA;AACzF,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAYpC,SAAS,OAAO,CAAC,GAAY;IAC3B,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAsB;QACjD,MAAM,EAAE,GAAG,CAAC,MAAwB;QACpC,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;AACnC,CAAC;AAWD,MAAM,UAAU,eAAe,CAAC,EAAkB,EAAE,GAAG,GAAiB,IAAI,CAAC,GAAG;IAC9E,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,CAAA;IAElD,OAAO;QACL,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACtB,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YACzC,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,KAAK,CAC7B,GAAG,CAAA,kBAAkB,KAAK,kBAAkB,KAAK,EAAE,CACpD,CAAA;YACD,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,kBAAkB;oBACxB,OAAO,EAAE,yBAAyB,KAAK,kBAAkB;oBACzD,IAAI,EAAE,sDAAsD;iBAC7D,CAAC,CAAA;YACJ,CAAC;YAED,MAAM,EAAE,GAAG,KAAK,EAAE,CAAA;YAClB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;YAC/C,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;sBACF,KAAK;kBACT,EAAE,KAAK,KAAK,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ,KAAK,SAAS,KAAK,SAAS,GAAG,CAAC,CAAA;YAErG,OAAO;gBACL,EAAE;gBACF,KAAK;gBACL,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM,EAAE,QAAQ;gBAChB,SAAS,EAAE,SAAS;gBACpB,SAAS,EAAE,SAAS;aACrB,CAAA;QACH,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACvB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAC3B,GAAG,CAAA,iBAAiB,KAAK,kBAAkB,cAAc,CAAC,KAAK,CAAC,EAAE,CACnE,CAAA;YACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC1B,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAChD,CAAC;QAED,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACjB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAU,GAAG,CAAA,iBAAiB,KAAK,eAAe,EAAE,EAAE,CAAC,CAAA;YACpF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC1B,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAChD,CAAC;QAED,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE;YAC5B,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;iBACP,KAAK,gBAAgB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,kBAAkB,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;qBACrF,EAAE,EAAE,CAAC,CAAA;QACtB,CAAC;QAED,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE;YAC9B,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;iBACP,KAAK,iBAAiB,MAAM,kBAAkB,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;qBACvE,EAAE,EAAE,CAAC,CAAA;QACtB,CAAC;QAED,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAU,GAAG,CAAA,iBAAiB,KAAK,0BAA0B,CAAC,CAAA;YAC3F,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACjC,CAAC;KACF,CAAA;AACH,CAAC"}
+{"version":3,"file":"users.js","sourceRoot":"","sources":["../src/users.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EACL,YAAY,EAEZ,UAAU,EACV,KAAK,EAEL,GAAG,GACJ,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAgBpC,SAAS,OAAO,CAAC,GAAY;IAC3B,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAsB;QACjD,MAAM,EAAE,GAAG,CAAC,MAAwB;QACpC,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,WAAW,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI;QACrC,aAAa,EAAE,GAAG,CAAC,eAAe,IAAI,IAAI;QAC1C,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,IAAI;QACpB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI;KAC3B,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe;IACtB,OAAO,QAAQ,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,qBAAqB,CAAA;AACrE,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;AACnC,CAAC;AAkCD,MAAM,UAAU,eAAe,CAAC,EAAkB,EAAE,GAAG,GAAiB,IAAI,CAAC,GAAG;IAC9E,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,CAAA;IAElD,OAAO;QACL,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACtB,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YACzC,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,KAAK,CAC7B,GAAG,CAAA,kBAAkB,KAAK,kBAAkB,KAAK,EAAE,CACpD,CAAA;YACD,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,kBAAkB;oBACxB,OAAO,EAAE,yBAAyB,KAAK,kBAAkB;oBACzD,IAAI,EAAE,sDAAsD;iBAC7D,CAAC,CAAA;YACJ,CAAC;YAED,MAAM,EAAE,GAAG,KAAK,EAAE,CAAA;YAClB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;YAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAA;YACvC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;sBACF,KAAK;kBACT,EAAE,KAAK,KAAK,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,MAAM,KAAK,SAAS,KAAK,SAAS,GAAG,CAAC,CAAA;YAEnG,OAAO;gBACL,EAAE;gBACF,KAAK;gBACL,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM;gBACN,SAAS,EAAE,SAAS;gBACpB,SAAS,EAAE,SAAS;gBACpB,WAAW,EAAE,IAAI;gBACjB,aAAa,EAAE,IAAI;gBACnB,GAAG,EAAE,IAAI;gBACT,MAAM,EAAE,IAAI;aACb,CAAA;QACH,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACvB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAC3B,GAAG,CAAA,iBAAiB,KAAK,kBAAkB,cAAc,CAAC,KAAK,CAAC,EAAE,CACnE,CAAA;YACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC1B,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAChD,CAAC;QAED,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACjB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAU,GAAG,CAAA,iBAAiB,KAAK,eAAe,EAAE,EAAE,CAAC,CAAA;YACpF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC1B,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAChD,CAAC;QAED,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE;YAC5B,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;iBACP,KAAK,gBAAgB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,kBAAkB,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;qBACrF,EAAE,EAAE,CAAC,CAAA;QACtB,CAAC;QAED,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE;YAC9B,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;iBACP,KAAK,iBAAiB,MAAM,kBAAkB,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;qBACvE,EAAE,EAAE,CAAC,CAAA;QACtB,CAAC;QAED,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAU,GAAG,CAAA,iBAAiB,KAAK,0BAA0B,CAAC,CAAA;YAC3F,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACjC,CAAC;QAED,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE;YACjC,wEAAwE;YACxE,sEAAsE;YACtE,qEAAqE;YACrE,0CAA0C;YAC1C,MAAM,WAAW,GAAkB,EAAE,CAAA;YACrC,IAAI,aAAa,IAAI,KAAK,EAAE,CAAC;gBAC3B,WAAW,CAAC,IAAI,CACd,GAAG,CAAA,GAAG,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,WAAW,IAAI,IAAI,EAAE,CAC9E,CAAA;YACH,CAAC;YACD,IAAI,eAAe,IAAI,KAAK,EAAE,CAAC;gBAC7B,WAAW,CAAC,IAAI,CACd,GAAG,CAAA,GAAG,UAAU,CAAC,iBAAiB,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,aAAa,IAAI,IAAI,EAAE,CACnF,CAAA;YACH,CAAC;YACD,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;gBACnB,WAAW,CAAC,IAAI,CAAC,GAAG,CAAA,GAAG,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC,CAAA;YAChF,CAAC;YACD,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;gBACtB,WAAW,CAAC,IAAI,CAAC,GAAG,CAAA,GAAG,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAA;YACtF,CAAC;YACD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAM;YAEpC,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAA,GAAG,IAAI,KAAK,KAAK,EAAE,CAAC,CAAA;YACvE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;iBACP,KAAK,QAAQ,GAAG,kBAAkB,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;qBAC3D,EAAE,EAAE,CAAC,CAAA;QACtB,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACnB,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA,eAAe,KAAK,eAAe,EAAE,EAAE,CAAC,CAAA;QAC5D,CAAC;QAED,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACtB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;YAC/C,MAAM,KAAK,GAAG,eAAe,EAAE,CAAA;YAC/B,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;iBACP,KAAK;sBACA,KAAK,cAAc,YAAY;6BACxB,IAAI,uBAAuB,IAAI,WAAW,IAAI,cAAc,IAAI;2BAClE,SAAS;qBACf,EAAE,EAAE,CAAC,CAAA;YAEpB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAU,GAAG,CAAA,iBAAiB,KAAK,eAAe,EAAE,EAAE,CAAC,CAAA;YACpF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC1B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,qBAAqB;oBAC3B,OAAO,EAAE,0BAA0B;oBACnC,IAAI,EAAE,2DAA2D;iBAClE,CAAC,CAAA;YACJ,CAAC;YACD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAA;QACrB,CAAC;KACF,CAAA;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cogenta/auth",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "description": "Identity, sessions and credentials: password, TOTP and WebAuthn, plus the append-only audit log.",
   "license": "MPL-2.0",
   "type": "module",
@@ -28,8 +28,8 @@
   },
   "dependencies": {
     "@simplewebauthn/server": "^13.3.2",
-    "@cogenta/core": "0.4.0",
-    "@cogenta/schema": "0.3.0"
+    "@cogenta/core": "0.6.0",
+    "@cogenta/schema": "0.4.1"
   },
   "devDependencies": {
     "typescript": "^7.0.2",