@fonderie/auth 7.18.0 → 7.19.0

package/dist/index.d.cts

@@ -1,6 +1,6 @@
 import { IUser } from './types.cjs';
 export { IMfaChallenge, ISession } from './types.cjs';
-import { IFonderieModule, IAdminDescription, IReadinessProblem, IFonderieApp, IDefaultTemplate, IAdminRoute } from '@fonderie/core';
+import { IFonderieModule, IAdminDescription, IEventCatalogEntry, IReadinessProblem, IFonderieApp, IDefaultTemplate, IAdminRoute } from '@fonderie/core';
 import { IStoreAdapter } from '@fonderie/store';
 import { EventBus } from '@fonderie/events';
 import { I as IAuthConfig, a as IRequestLocation } from './session-B-IgXFu8.cjs';
@@ -19,6 +19,7 @@ declare class AuthModule implements IFonderieModule {
     readonly version: string;
     constructor(store: IStoreAdapter, config: IAuthConfig, bus?: EventBus | undefined);
     describeAdmin(): IAdminDescription;
+    describeEvents(): IEventCatalogEntry[];
     checkReadiness(): IReadinessProblem[];
     install(app: IFonderieApp): void;
 }
@@ -203,6 +204,6 @@ interface IAdminUserPageDTO {
     nextCursor: string | null;
 }
 declare function toAdminUserPageDTO(page: IUserPage): IAdminUserPageDTO;
-declare function describeAuthAdminRoutes(store: IStoreAdapter): IAdminRoute[];
+declare function describeAuthAdminRoutes(store: IStoreAdapter, bus?: EventBus): IAdminRoute[];
 
 export { AuthModule, type ChangePasswordInput, DEFAULT_TEMPLATES, type IAdminUserDTO, IAuthConfig, type IImportUser, type ILoginEventDTO, type ILoginHistoryPageDTO, type IPurgeOptions, IRequestLocation, type ISessionDTO, IUser, IUserDTO, type IUserRetentionScheduleOptions, type LoginInput, type RegisterInput, type ResetPasswordInput, describeAuthAdminRoutes, importUser, normalizeEmail, normalizeEmailSafe, purgeSoftDeletedUsers, schemas, startUserRetention, toAdminUserDTO, toAdminUserPageDTO, validateAuthConfig };

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import { IUser } from './types.js';
 export { IMfaChallenge, ISession } from './types.js';
-import { IFonderieModule, IAdminDescription, IReadinessProblem, IFonderieApp, IDefaultTemplate, IAdminRoute } from '@fonderie/core';
+import { IFonderieModule, IAdminDescription, IEventCatalogEntry, IReadinessProblem, IFonderieApp, IDefaultTemplate, IAdminRoute } from '@fonderie/core';
 import { IStoreAdapter } from '@fonderie/store';
 import { EventBus } from '@fonderie/events';
 import { I as IAuthConfig, a as IRequestLocation } from './session-B-IgXFu8.js';
@@ -19,6 +19,7 @@ declare class AuthModule implements IFonderieModule {
     readonly version: string;
     constructor(store: IStoreAdapter, config: IAuthConfig, bus?: EventBus | undefined);
     describeAdmin(): IAdminDescription;
+    describeEvents(): IEventCatalogEntry[];
     checkReadiness(): IReadinessProblem[];
     install(app: IFonderieApp): void;
 }
@@ -203,6 +204,6 @@ interface IAdminUserPageDTO {
     nextCursor: string | null;
 }
 declare function toAdminUserPageDTO(page: IUserPage): IAdminUserPageDTO;
-declare function describeAuthAdminRoutes(store: IStoreAdapter): IAdminRoute[];
+declare function describeAuthAdminRoutes(store: IStoreAdapter, bus?: EventBus): IAdminRoute[];
 
 export { AuthModule, type ChangePasswordInput, DEFAULT_TEMPLATES, type IAdminUserDTO, IAuthConfig, type IImportUser, type ILoginEventDTO, type ILoginHistoryPageDTO, type IPurgeOptions, IRequestLocation, type ISessionDTO, IUser, IUserDTO, type IUserRetentionScheduleOptions, type LoginInput, type RegisterInput, type ResetPasswordInput, describeAuthAdminRoutes, importUser, normalizeEmail, normalizeEmailSafe, purgeSoftDeletedUsers, schemas, startUserRetention, toAdminUserDTO, toAdminUserPageDTO, validateAuthConfig };

package/dist/index.js

@@ -284,8 +284,10 @@ var EVENT_KEYS = {
   userPurged: "fonderie.user.purged",
   emailVerified: "fonderie.user.email_verified",
   passwordChanged: "fonderie.user.password_changed",
-  // A session the server revoked — today: a refresh token reused after its
-  // grace (theft signal). { userId, sessionId, reason }.
+  // Sessions the server revoked: { userId, sids (null = all), reason }. Reaches
+  // the user's devices live (@fonderie/sse) so a revoked device signs out at
+  // once. Reasons: 'terminated' (signed out from the devices list),
+  // 'password-changed', 'admin', 'refresh-reuse' (theft signal).
   sessionRevoked: "fonderie.session.revoked"
 };
 
@@ -1176,22 +1178,30 @@ var SessionModel = class {
   // Terminate one session by row id, scoped to its owner (a user can never
   // delete another user's session). Returns whether a row was removed.
   async terminateById(userId, id) {
+    return await this.terminateByIdReturningSid(userId, id) !== void 0;
+  }
+  /** Terminate one of the user's sessions; its sid (null if unbound), or undefined if none was removed. */
+  async terminateByIdReturningSid(userId, id) {
     const rows = await this.store.query(
-      `DELETE FROM fonderie_sessions WHERE id = $1 AND user_id = $2 RETURNING id`,
+      `DELETE FROM fonderie_sessions WHERE id = $1 AND user_id = $2 RETURNING sid`,
       [id, userId]
     );
-    return rows.length > 0;
+    return rows.length ? rows[0]?.sid ?? null : void 0;
   }
   // Terminate all of a user's sessions except the current one (by sid).
   // Returns the number of sessions removed.
   async terminateOthers(userId, keepSid) {
+    return (await this.terminateOthersReturningSids(userId, keepSid)).length;
+  }
+  /** Terminate all of the user's sessions but `keepSid`; the sids removed. */
+  async terminateOthersReturningSids(userId, keepSid) {
     const rows = await this.store.query(
       `DELETE FROM fonderie_sessions
 			 WHERE user_id = $1 AND (sid IS DISTINCT FROM $2)
-			 RETURNING id`,
+			 RETURNING sid`,
       [userId, keepSid]
     );
-    return rows.length;
+    return rows.map((r) => r.sid);
   }
   async exists(token) {
     const rows = await this.store.query(
@@ -2066,7 +2076,7 @@ function authController(store, config, bus, locales = defineLocales()) {
         if (found.kind === "reused") {
           await sessions.revokeById(found.row.id);
           await background3(
-            bus?.emit(EVENT_KEYS.sessionRevoked, { userId: found.row.userId, sessionId: found.row.id, reason: "refresh-reuse" })
+            bus?.emit(EVENT_KEYS.sessionRevoked, { userId: found.row.userId, sids: [found.row.sid], reason: "refresh-reuse" })
           );
           return setApiResponse3(HTTP3.UNAUTHORIZED, "TOKEN_REFRESH_FAILED", "Session expired or already revoked");
         }
@@ -2504,10 +2514,11 @@ function userController(store, config, bus) {
       if (!id) {
         return setApiResponse4(HTTP4.NOT_FOUND, "NOT_FOUND", "Session not found");
       }
-      const removed = await sessions.terminateById(ctx.user.id, id);
-      if (!removed) {
+      const removed = await sessions.terminateByIdReturningSid(ctx.user.id, id);
+      if (removed === void 0) {
         return setApiResponse4(HTTP4.NOT_FOUND, "NOT_FOUND", "Session not found");
       }
+      await background4(bus?.emit(EVENT_KEYS.sessionRevoked, { userId: ctx.user.id, sids: [removed], reason: "terminated" }));
       return setApiResponse4(HTTP4.OK, "SESSION_TERMINATED", "Session terminated.", { id });
     },
     terminateOtherSessions: async (ctx) => {
@@ -2519,7 +2530,9 @@ function userController(store, config, bus) {
           "Cannot terminate others without a current session context"
         );
       }
-      const count = await sessions.terminateOthers(ctx.user.id, currentSid);
+      const sids = await sessions.terminateOthersReturningSids(ctx.user.id, currentSid);
+      const count = sids.length;
+      if (count) await background4(bus?.emit(EVENT_KEYS.sessionRevoked, { userId: ctx.user.id, sids, reason: "terminated" }));
       return setApiResponse4(HTTP4.OK, "SESSIONS_TERMINATED", "Other sessions terminated.", { count });
     },
     updateProfile: async (ctx) => {
@@ -2681,6 +2694,7 @@ function userController(store, config, bus) {
       const hash = await hashPassword2(newPassword);
       await users.updatePassword(ctx.user.id, hash);
       await sessions.deleteByUser(ctx.user.id);
+      await background4(bus?.emit(EVENT_KEYS.sessionRevoked, { userId: ctx.user.id, sids: null, reason: "password-changed" }));
       return setApiResponse4(HTTP4.OK, "PASSWORD_CHANGED", "Password updated successfully.");
     },
     /**
@@ -3575,6 +3589,7 @@ function extractToken(request) {
 
 // src/admin.ts
 import { HTTP as HTTP7, encodeKeysetCursor as encodeKeysetCursor2, setApiResponse as setApiResponse7 } from "@fonderie/core";
+import { background as background6 } from "@fonderie/core";
 function toAdminUserDTO(user) {
   return {
     ...toUserDTO(user),
@@ -3591,7 +3606,7 @@ function toAdminUserPageDTO(page) {
 var ADMIN_PREFIX = "/_admin";
 var idOf = (ctx) => ctx.meta.params?.["id"] ?? "";
 var NOT_FOUND = () => setApiResponse7(HTTP7.NOT_FOUND, "NOT_FOUND", "No such user");
-function adminRouteTable(store) {
+function adminRouteTable(store, bus) {
   const users = new UserModel(store);
   const sessions = new SessionModel(store);
   const events = new LoginEventModel(store);
@@ -3664,6 +3679,7 @@ function adminRouteTable(store) {
       async (ctx) => {
         if (!await users.findById(idOf(ctx))) return NOT_FOUND();
         await sessions.deleteByUser(idOf(ctx));
+        await background6(bus?.emit(EVENT_KEYS.sessionRevoked, { userId: idOf(ctx), sids: null, reason: "admin" }));
         return setApiResponse7(HTTP7.OK, "SESSIONS_REVOKED", "All sessions revoked");
       }
     ],
@@ -3696,8 +3712,8 @@ function adminRouteTable(store) {
     ["POST", "/_admin/users/:id/unsuspend", setSuspended(false)]
   ];
 }
-function describeAuthAdminRoutes(store) {
-  return adminRouteTable(store).map(([method, path, h]) => ({
+function describeAuthAdminRoutes(store, bus) {
+  return adminRouteTable(store, bus).map(([method, path, h]) => ({
     method,
     path: path.slice(ADMIN_PREFIX.length),
     handlers: [h]
@@ -3718,10 +3734,22 @@ var AuthModule = class {
   name = "@fonderie/auth";
   // Baked in at build time by tsup.base, so the operator's Modules page can
   // say what is actually deployed rather than 'not reported'.
-  version = "7.18.0";
+  version = "7.19.0";
   // Users, sessions, login history, suspend — only through @fonderie/admin.
   describeAdmin() {
-    return { routes: describeAuthAdminRoutes(this.store) };
+    return { routes: describeAuthAdminRoutes(this.store, this.bus) };
+  }
+  // Live sign-out (docs/SESSION-DESIGN.md, Phase 5): a revoked device hears it
+  // at once over @fonderie/sse — only the user it is about, ids only.
+  describeEvents() {
+    const revoked = {
+      type: EVENT_KEYS.sessionRevoked,
+      description: "Some of your sessions were signed out \u2014 sign out if this device is one of them",
+      audience: "user",
+      scope: (p) => ({ userId: p.userId }),
+      project: (p) => ({ sids: p.sids, reason: p.reason })
+    };
+    return [revoked];
   }
   // Report config problems for app.checkProductionReadiness() (data, not throw).
   checkReadiness() {