@drawnagency/primitives 0.1.104 → 0.1.106

package/src/schemas/audience.ts

@@ -15,6 +15,58 @@ export const AudienceColorSchema = HexColorSchema.nullable();
 export type AudienceName = z.infer<typeof AudienceNameSchema>;
 export type AudienceColor = z.infer<typeof AudienceColorSchema>;
 
+/**
+ * A viewer sign-in name. Looser than an audience slug — dots are allowed, so
+ * `agency.jane` works — but still constrained enough to be typed correctly over
+ * the phone. Always lowercased before storage and lookup, so `Agency2` and
+ * `agency2` are the same login.
+ */
+export const ViewerUsernameSchema = z
+  .string()
+  .min(1)
+  .max(64)
+  .regex(
+    /^[a-z0-9]([a-z0-9._-]*[a-z0-9])?$/,
+    "lowercase alphanumeric; dots, dashes and underscores allowed",
+  );
+
+/** Normalize a typed username for storage and lookup. */
+export function normalizeUsername(input: string): string {
+  return input.trim().toLowerCase();
+}
+
+/**
+ * Wire-facing username: lowercased and trimmed BEFORE validation, so `Agency4`
+ * is accepted and stored as `agency4` rather than 400-ing on a case difference.
+ * Everything else the base schema rejects still fails.
+ */
+export const NormalizedUsernameSchema = z
+  .string()
+  .min(1)
+  .max(128)
+  .transform(normalizeUsername)
+  .pipe(ViewerUsernameSchema);
+
+/** Minimum for a NEW credential password. Deliberately stricter than the
+ *  audience passwords it replaces (which allowed a single character). */
+export const VIEWER_PASSWORD_MIN_LENGTH = 8;
+
+export const ViewerPasswordSchema = z.string().min(VIEWER_PASSWORD_MIN_LENGTH);
+
+/** A credential as it travels to the editor and the Audience Details page.
+ *  Never carries the hash or the sealed copy. */
+export const ViewerCredentialSchema = z.object({
+  username: z.string(),
+  label: z.string().nullable(),
+  /** The audience slug this sign-in grants — its content access, verbatim. */
+  audienceName: z.string(),
+  createdAt: z.string(),
+});
+
+export type ViewerUsername = z.infer<typeof ViewerUsernameSchema>;
+export type ViewerCredential = z.infer<typeof ViewerCredentialSchema>;
+
+
 /**
  * Convert a friendly display string into an audience slug.
  * Lowercases, replaces non-alphanumeric runs with single dashes,

package/src/schemas/auth.ts

@@ -21,8 +21,14 @@ export const AudienceSchema = z.object({
   displayName: z.string(),
   color: z.string().nullable(),
   readonly: z.boolean(),
+  /** Some way in exists: a credential in credential mode, an audience-level
+   *  password in `.env` mode. Consumers that only ask "is this gated?" (admin
+   *  dashboard, MCP) keep using this and need no knowledge of credentials. */
   hasPassword: z.boolean(),
   isDefault: z.boolean(),
+  /** Named sign-ins pointing at this audience. Always 0 in `.env` mode, which
+   *  has no credentials — use `hasPassword` there. */
+  credentialCount: z.number().int().nonnegative().default(0),
 });
 
 export type Session = z.infer<typeof SessionSchema>;

package/src/schemas/site-config.ts

@@ -26,7 +26,7 @@ export type SectionMeta = z.infer<typeof SectionMetaSchema>;
 // add its first segment here (the test in Step 1 guards the known set). This is
 // the single source of truth for reserved slugs; the schema, uniquePageSlug, and
 // /api/save all import it.
-export const RESERVED_SLUGS = ["edit", "api", "login", "set-password", "404", "present", "print"] as const;
+export const RESERVED_SLUGS = ["edit", "api", "login", "set-password", "404", "present", "print", "audiences"] as const;
 
 // Subset of RESERVED_SLUGS the index schema hard-rejects at parse time. Only
 // slugs reserved since before client sites existed may hard-fail here: parse-

package/src/types/database.ts

@@ -707,6 +707,54 @@ export type Database = {
           },
         ]
       }
+      viewer_credentials: {
+        Row: {
+          audience_id: string
+          created_at: string
+          id: string
+          label: string | null
+          password_cipher: string | null
+          password_hash: string
+          site_id: string
+          username: string
+        }
+        Insert: {
+          audience_id: string
+          created_at?: string
+          id?: string
+          label?: string | null
+          password_cipher?: string | null
+          password_hash: string
+          site_id: string
+          username: string
+        }
+        Update: {
+          audience_id?: string
+          created_at?: string
+          id?: string
+          label?: string | null
+          password_cipher?: string | null
+          password_hash?: string
+          site_id?: string
+          username?: string
+        }
+        Relationships: [
+          {
+            foreignKeyName: "viewer_credentials_audience_id_fkey"
+            columns: ["audience_id"]
+            isOneToOne: false
+            referencedRelation: "viewer_audiences"
+            referencedColumns: ["id"]
+          },
+          {
+            foreignKeyName: "viewer_credentials_site_id_fkey"
+            columns: ["site_id"]
+            isOneToOne: false
+            referencedRelation: "sites"
+            referencedColumns: ["id"]
+          },
+        ]
+      }
     }
     Views: {
       [_ in never]: never
@@ -722,6 +770,12 @@ export type Database = {
           site_id: string
           user_id: string
         }[]
+        SetofOptions: {
+          from: "*"
+          to: "editor_locks"
+          isOneToOne: false
+          isSetofReturn: true
+        }
       }
       chat_usage_hit: {
         Args: {
@@ -737,9 +791,9 @@ export type Database = {
       get_site_users_with_status: {
         Args: { p_site_id: string }
         Returns: {
-          created_at: string | null
+          created_at: string
           email: string
-          last_sign_in_at: string | null
+          last_sign_in_at: string
           role: string
           user_id: string
         }[]
@@ -767,10 +821,10 @@ export type Database = {
           p_token_hash: string
         }
         Returns: {
+          client_id: string
+          family_id: string
+          platform_user_id: string
           status: string
-          family_id: string | null
-          client_id: string | null
-          platform_user_id: string | null
         }[]
       }
       provision_claim: { Args: { p_site_id: string }; Returns: boolean }

package/dist/chunk-ZDQ3TT47.js

@@ -1,30 +0,0 @@
-import {
-  HexColorSchema
-} from "./chunk-BGHWUJFV.js";
-
-// src/schemas/audience.ts
-import { z } from "zod";
-var AudienceNameSchema = z.string().min(1).max(32).regex(
-  /^[a-z0-9]([a-z0-9_-]*[a-z0-9])?$/,
-  "lowercase alphanumeric, dashes and underscores allowed"
-);
-var AudienceColorSchema = HexColorSchema.nullable();
-function slugifyAudienceName(input) {
-  return input.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
-}
-
-// src/schemas/media-grid-options.ts
-import { z as z2 } from "zod";
-var MediaGridOptionsSchema = z2.object({
-  square: z2.boolean().optional(),
-  border: z2.boolean().optional(),
-  crop: z2.boolean().optional(),
-  showCaptions: z2.boolean().optional()
-}).default({});
-
-export {
-  AudienceNameSchema,
-  AudienceColorSchema,
-  slugifyAudienceName,
-  MediaGridOptionsSchema
-};