@fragno-dev/auth 0.0.14

package/dist/browser/index.d.ts

@@ -0,0 +1,600 @@
+import * as _fragno_dev_core0 from "@fragno-dev/core";
+import * as _fragno_dev_core_client0 from "@fragno-dev/core/client";
+import { FragnoPublicClientConfig } from "@fragno-dev/core/client";
+import * as _fragno_dev_db_schema0 from "@fragno-dev/db/schema";
+import * as zod44 from "zod";
+import { z } from "zod";
+import { Cursor } from "@fragno-dev/db/cursor";
+import * as _fragno_dev_core_api4 from "@fragno-dev/core/api";
+import { FragnoRouteConfig } from "@fragno-dev/core/api";
+import * as zod_v4_core12 from "zod/v4/core";
+import * as _fragno_dev_db0 from "@fragno-dev/db";
+import { FragnoPublicConfigWithDatabase } from "@fragno-dev/db";
+import * as _fragno_dev_db_fragment_definition_builder0 from "@fragno-dev/db/fragment-definition-builder";
+
+//#region src/user/user-overview.d.ts
+type SortField = "email" | "createdAt";
+type SortOrder = "asc" | "desc";
+interface GetUsersParams {
+  search?: string;
+  sortBy: SortField;
+  sortOrder: SortOrder;
+  pageSize: number;
+  cursor?: Cursor;
+}
+interface UserResult {
+  id: string;
+  email: string;
+  role: "user" | "admin";
+  createdAt: Date;
+}
+//#endregion
+//#region src/utils/cookie.d.ts
+interface CookieOptions {
+  httpOnly?: boolean;
+  secure?: boolean;
+  sameSite?: "Strict" | "Lax" | "None";
+  maxAge?: number;
+  path?: string;
+}
+/**
+ * Parse cookies from a Cookie header string
+ */
+//#endregion
+//#region src/index.d.ts
+interface AuthConfig {
+  sendEmail?: (params: {
+    to: string;
+    subject: string;
+    body: string;
+  }) => Promise<void>;
+  cookieOptions?: CookieOptions;
+}
+declare const authFragmentDefinition: _fragno_dev_core0.FragmentDefinition<AuthConfig, FragnoPublicConfigWithDatabase, _fragno_dev_db0.ImplicitDatabaseDependencies<_fragno_dev_db_schema0.Schema<{
+  user: _fragno_dev_db_schema0.Table<Record<string, _fragno_dev_db_schema0.AnyColumn> & Record<"id", _fragno_dev_db_schema0.IdColumn<"varchar(30)", string | _fragno_dev_db_schema0.FragnoId | null, _fragno_dev_db_schema0.FragnoId>> & Record<"email", _fragno_dev_db_schema0.Column<"string", string, string>> & Record<"passwordHash", _fragno_dev_db_schema0.Column<"string", string, string>> & Record<"role", _fragno_dev_db_schema0.Column<"string", string | null, string>> & Record<"createdAt", _fragno_dev_db_schema0.Column<"timestamp", (_fragno_dev_db0.DbNow | Date) | null, Date>>, Record<string, _fragno_dev_db_schema0.AnyRelation>, Record<string, _fragno_dev_db_schema0.Index<_fragno_dev_db_schema0.AnyColumn[], readonly string[]>> & Record<"idx_user_createdAt", _fragno_dev_db_schema0.Index<readonly [_fragno_dev_db_schema0.Column<"timestamp", (_fragno_dev_db0.DbNow | Date) | null, Date>] & _fragno_dev_db_schema0.AnyColumn[], readonly ["createdAt"]>>>;
+  session: _fragno_dev_db_schema0.Table<Record<string, _fragno_dev_db_schema0.AnyColumn> & Record<"id", _fragno_dev_db_schema0.IdColumn<"varchar(30)", string | _fragno_dev_db_schema0.FragnoId | null, _fragno_dev_db_schema0.FragnoId>> & Record<"userId", _fragno_dev_db_schema0.Column<"bigint", string | bigint | _fragno_dev_db_schema0.FragnoId | _fragno_dev_db_schema0.FragnoReference, _fragno_dev_db_schema0.FragnoReference>> & Record<"expiresAt", _fragno_dev_db_schema0.Column<"timestamp", _fragno_dev_db0.DbNow | Date, Date>> & Record<"createdAt", _fragno_dev_db_schema0.Column<"timestamp", (_fragno_dev_db0.DbNow | Date) | null, Date>>, Record<string, _fragno_dev_db_schema0.AnyRelation> & Record<"sessionOwner", _fragno_dev_db_schema0.Relation<"one", _fragno_dev_db_schema0.Table<Record<string, _fragno_dev_db_schema0.AnyColumn> & Record<"id", _fragno_dev_db_schema0.IdColumn<"varchar(30)", string | _fragno_dev_db_schema0.FragnoId | null, _fragno_dev_db_schema0.FragnoId>> & Record<"email", _fragno_dev_db_schema0.Column<"string", string, string>> & Record<"passwordHash", _fragno_dev_db_schema0.Column<"string", string, string>> & Record<"role", _fragno_dev_db_schema0.Column<"string", string | null, string>> & Record<"createdAt", _fragno_dev_db_schema0.Column<"timestamp", (_fragno_dev_db0.DbNow | Date) | null, Date>>, Record<string, _fragno_dev_db_schema0.AnyRelation>, Record<string, _fragno_dev_db_schema0.Index<_fragno_dev_db_schema0.AnyColumn[], readonly string[]>> & Record<"idx_user_email", _fragno_dev_db_schema0.Index<readonly [_fragno_dev_db_schema0.Column<"string", string, string>] & _fragno_dev_db_schema0.AnyColumn[], readonly ["email"]>> & Record<"idx_user_id", _fragno_dev_db_schema0.Index<readonly [_fragno_dev_db_schema0.IdColumn<"varchar(30)", string | _fragno_dev_db_schema0.FragnoId | null, _fragno_dev_db_schema0.FragnoId>] & _fragno_dev_db_schema0.AnyColumn[], readonly ["id"]>>>>>, Record<string, _fragno_dev_db_schema0.Index<_fragno_dev_db_schema0.AnyColumn[], readonly string[]>> & Record<"idx_session_user", _fragno_dev_db_schema0.Index<readonly [_fragno_dev_db_schema0.Column<"bigint", string | bigint | _fragno_dev_db_schema0.FragnoId | _fragno_dev_db_schema0.FragnoReference, _fragno_dev_db_schema0.FragnoReference>] & _fragno_dev_db_schema0.AnyColumn[], readonly ["userId"]>>>;
+}>>, {
+  getUsersWithCursor: (this: _fragno_dev_core0.RequestThisContext & {
+    serviceTx<TSchema extends _fragno_dev_db_schema0.AnySchema>(schema: TSchema): _fragno_dev_db0.ServiceTxBuilder<TSchema, readonly [], [], [], unknown, unknown, false, false, false, false, {}>;
+  }, params: GetUsersParams) => _fragno_dev_db0.TxResult<{
+    users: UserResult[];
+    cursor: _fragno_dev_db0.Cursor | undefined;
+    hasNextPage: boolean;
+  }, {
+    users: UserResult[];
+    cursor: _fragno_dev_db0.Cursor | undefined;
+    hasNextPage: boolean;
+  }>;
+  buildSessionCookie: (sessionId: string) => string;
+  createSession: (this: _fragno_dev_core0.RequestThisContext & {
+    serviceTx<TSchema extends _fragno_dev_db_schema0.AnySchema>(schema: TSchema): _fragno_dev_db0.ServiceTxBuilder<TSchema, readonly [], [], [], unknown, unknown, false, false, false, false, {}>;
+  }, userId: string) => _fragno_dev_db0.TxResult<{
+    id: string;
+    userId: string;
+    expiresAt: Date;
+  }, {
+    id: string;
+    userId: string;
+    expiresAt: Date;
+  }>;
+  validateSession: (this: _fragno_dev_core0.RequestThisContext & {
+    serviceTx<TSchema extends _fragno_dev_db_schema0.AnySchema>(schema: TSchema): _fragno_dev_db0.ServiceTxBuilder<TSchema, readonly [], [], [], unknown, unknown, false, false, false, false, {}>;
+  }, sessionId: string) => _fragno_dev_db0.TxResult<{
+    id: string;
+    userId: string;
+    user: {
+      id: string;
+      email: string;
+      role: string;
+    };
+  } | null, [{
+    id: _fragno_dev_db_schema0.FragnoId;
+    userId: _fragno_dev_db_schema0.FragnoReference;
+    expiresAt: Date;
+    createdAt: Date;
+    sessionOwner: {
+      id: _fragno_dev_db_schema0.FragnoId;
+      email: string;
+      passwordHash: string;
+      role: string;
+      createdAt: Date;
+    } | null;
+  } | null]>;
+  invalidateSession: (this: _fragno_dev_core0.RequestThisContext & {
+    serviceTx<TSchema extends _fragno_dev_db_schema0.AnySchema>(schema: TSchema): _fragno_dev_db0.ServiceTxBuilder<TSchema, readonly [], [], [], unknown, unknown, false, false, false, false, {}>;
+  }, sessionId: string) => _fragno_dev_db0.TxResult<boolean, [{
+    id: _fragno_dev_db_schema0.FragnoId;
+    userId: _fragno_dev_db_schema0.FragnoReference;
+    expiresAt: Date;
+    createdAt: Date;
+  } | null]>;
+  getSession: (this: _fragno_dev_core0.RequestThisContext & {
+    serviceTx<TSchema extends _fragno_dev_db_schema0.AnySchema>(schema: TSchema): _fragno_dev_db0.ServiceTxBuilder<TSchema, readonly [], [], [], unknown, unknown, false, false, false, false, {}>;
+  }, headers: Headers) => _fragno_dev_db0.TxResult<{
+    userId: string;
+    email: string;
+  } | undefined, [{
+    id: _fragno_dev_db_schema0.FragnoId;
+    userId: _fragno_dev_db_schema0.FragnoReference;
+    expiresAt: Date;
+    createdAt: Date;
+    sessionOwner: {
+      id: _fragno_dev_db_schema0.FragnoId;
+      email: string;
+      passwordHash: string;
+      role: string;
+      createdAt: Date;
+    } | null;
+  } | null]>;
+  createUser: (this: _fragno_dev_core0.RequestThisContext & {
+    serviceTx<TSchema extends _fragno_dev_db_schema0.AnySchema>(schema: TSchema): _fragno_dev_db0.ServiceTxBuilder<TSchema, readonly [], [], [], unknown, unknown, false, false, false, false, {}>;
+  }, email: string, passwordHash: string, role?: "user" | "admin") => _fragno_dev_db0.TxResult<{
+    id: string;
+    email: string;
+    role: "user" | "admin";
+  }, {
+    id: string;
+    email: string;
+    role: "user" | "admin";
+  }>;
+  getUserByEmail: (this: _fragno_dev_core0.RequestThisContext & {
+    serviceTx<TSchema extends _fragno_dev_db_schema0.AnySchema>(schema: TSchema): _fragno_dev_db0.ServiceTxBuilder<TSchema, readonly [], [], [], unknown, unknown, false, false, false, false, {}>;
+  }, email: string) => _fragno_dev_db0.TxResult<{
+    id: string;
+    email: string;
+    passwordHash: string;
+    role: "user" | "admin";
+  } | null, {
+    id: string;
+    email: string;
+    passwordHash: string;
+    role: "user" | "admin";
+  } | null>;
+  updateUserRole: (this: _fragno_dev_core0.RequestThisContext & {
+    serviceTx<TSchema extends _fragno_dev_db_schema0.AnySchema>(schema: TSchema): _fragno_dev_db0.ServiceTxBuilder<TSchema, readonly [], [], [], unknown, unknown, false, false, false, false, {}>;
+  }, userId: string, role: "user" | "admin") => _fragno_dev_db0.TxResult<{
+    success: boolean;
+  }, {
+    success: boolean;
+  }>;
+  updateUserPassword: (this: _fragno_dev_core0.RequestThisContext & {
+    serviceTx<TSchema extends _fragno_dev_db_schema0.AnySchema>(schema: TSchema): _fragno_dev_db0.ServiceTxBuilder<TSchema, readonly [], [], [], unknown, unknown, false, false, false, false, {}>;
+  }, userId: string, passwordHash: string) => _fragno_dev_db0.TxResult<{
+    success: boolean;
+  }, {
+    success: boolean;
+  }>;
+  signUpWithSession: (this: _fragno_dev_core0.RequestThisContext & {
+    serviceTx<TSchema extends _fragno_dev_db_schema0.AnySchema>(schema: TSchema): _fragno_dev_db0.ServiceTxBuilder<TSchema, readonly [], [], [], unknown, unknown, false, false, false, false, {}>;
+  }, email: string, passwordHash: string) => _fragno_dev_db0.TxResult<{
+    ok: false;
+    code: "email_already_exists";
+    sessionId?: undefined;
+    userId?: undefined;
+    email?: undefined;
+    role?: undefined;
+  } | {
+    ok: true;
+    sessionId: string;
+    userId: string;
+    email: string;
+    role: "user";
+    code?: undefined;
+  }, [{
+    id: _fragno_dev_db_schema0.FragnoId;
+    email: string;
+    passwordHash: string;
+    role: string;
+    createdAt: Date;
+  } | null]>;
+  updateUserRoleWithSession: (this: _fragno_dev_core0.RequestThisContext & {
+    serviceTx<TSchema extends _fragno_dev_db_schema0.AnySchema>(schema: TSchema): _fragno_dev_db0.ServiceTxBuilder<TSchema, readonly [], [], [], unknown, unknown, false, false, false, false, {}>;
+  }, sessionId: string, userId: string, role: "user" | "admin") => _fragno_dev_db0.TxResult<{
+    ok: false;
+    code: "session_invalid";
+  } | {
+    ok: false;
+    code: "permission_denied";
+  } | {
+    ok: true;
+    code?: undefined;
+  }, [{
+    id: _fragno_dev_db_schema0.FragnoId;
+    userId: _fragno_dev_db_schema0.FragnoReference;
+    expiresAt: Date;
+    createdAt: Date;
+    sessionOwner: {
+      id: _fragno_dev_db_schema0.FragnoId;
+      email: string;
+      passwordHash: string;
+      role: string;
+      createdAt: Date;
+    } | null;
+  } | null]>;
+  changePasswordWithSession: (this: _fragno_dev_core0.RequestThisContext & {
+    serviceTx<TSchema extends _fragno_dev_db_schema0.AnySchema>(schema: TSchema): _fragno_dev_db0.ServiceTxBuilder<TSchema, readonly [], [], [], unknown, unknown, false, false, false, false, {}>;
+  }, sessionId: string, passwordHash: string) => _fragno_dev_db0.TxResult<{
+    ok: false;
+    code: "session_invalid";
+  } | {
+    ok: true;
+    code?: undefined;
+  }, [{
+    id: _fragno_dev_db_schema0.FragnoId;
+    userId: _fragno_dev_db_schema0.FragnoReference;
+    expiresAt: Date;
+    createdAt: Date;
+    sessionOwner: {
+      id: _fragno_dev_db_schema0.FragnoId;
+      email: string;
+      passwordHash: string;
+      role: string;
+      createdAt: Date;
+    } | null;
+  } | null]>;
+}, {}, {}, {}, _fragno_dev_db0.DatabaseServiceContext<_fragno_dev_db0.HooksMap>, _fragno_dev_db0.DatabaseRequestContext<_fragno_dev_db0.HooksMap>, _fragno_dev_db_fragment_definition_builder0.DatabaseRequestStorage, {
+  _fragno_internal: _fragno_dev_db0.InternalFragmentInstance;
+}>;
+type AuthFragment = typeof authFragmentDefinition;
+declare function createAuthFragment(config: AuthConfig | undefined, fragnoConfig: FragnoPublicConfigWithDatabase): _fragno_dev_core0.FragnoInstantiatedFragment<readonly [_fragno_dev_core0.FragnoRouteConfig<"PATCH", "/users/:userId/role", zod44.ZodObject<{
+  role: zod44.ZodEnum<{
+    user: "user";
+    admin: "admin";
+  }>;
+}, zod_v4_core12.$strip>, zod44.ZodObject<{
+  success: zod44.ZodBoolean;
+}, zod_v4_core12.$strip>, "invalid_input" | "session_invalid" | "permission_denied", string, _fragno_dev_db0.DatabaseRequestContext<_fragno_dev_db0.HooksMap>>, _fragno_dev_core0.FragnoRouteConfig<"POST", "/sign-up", zod44.ZodObject<{
+  email: zod44.ZodEmail;
+  password: zod44.ZodString;
+}, zod_v4_core12.$strip>, zod44.ZodObject<{
+  sessionId: zod44.ZodString;
+  userId: zod44.ZodString;
+  email: zod44.ZodString;
+  role: zod44.ZodEnum<{
+    user: "user";
+    admin: "admin";
+  }>;
+}, zod_v4_core12.$strip>, "invalid_input" | "email_already_exists", string, _fragno_dev_db0.DatabaseRequestContext<_fragno_dev_db0.HooksMap>>, _fragno_dev_core0.FragnoRouteConfig<"POST", "/sign-in", zod44.ZodObject<{
+  email: zod44.ZodEmail;
+  password: zod44.ZodString;
+}, zod_v4_core12.$strip>, zod44.ZodObject<{
+  sessionId: zod44.ZodString;
+  userId: zod44.ZodString;
+  email: zod44.ZodString;
+  role: zod44.ZodEnum<{
+    user: "user";
+    admin: "admin";
+  }>;
+}, zod_v4_core12.$strip>, "invalid_credentials", string, _fragno_dev_db0.DatabaseRequestContext<_fragno_dev_db0.HooksMap>>, _fragno_dev_core0.FragnoRouteConfig<"POST", "/change-password", zod44.ZodObject<{
+  newPassword: zod44.ZodString;
+}, zod_v4_core12.$strip>, zod44.ZodObject<{
+  success: zod44.ZodBoolean;
+}, zod_v4_core12.$strip>, "session_invalid", string, _fragno_dev_db0.DatabaseRequestContext<_fragno_dev_db0.HooksMap>>, _fragno_dev_core0.FragnoRouteConfig<"POST", "/sign-out", zod44.ZodOptional<zod44.ZodObject<{
+  sessionId: zod44.ZodOptional<zod44.ZodString>;
+}, zod_v4_core12.$strip>>, zod44.ZodObject<{
+  success: zod44.ZodBoolean;
+}, zod_v4_core12.$strip>, "session_not_found", string, _fragno_dev_db0.DatabaseRequestContext<_fragno_dev_db0.HooksMap>>, _fragno_dev_core0.FragnoRouteConfig<"GET", "/me", undefined, zod44.ZodObject<{
+  userId: zod44.ZodString;
+  email: zod44.ZodString;
+  role: zod44.ZodEnum<{
+    user: "user";
+    admin: "admin";
+  }>;
+}, zod_v4_core12.$strip>, "session_invalid", "sessionId", _fragno_dev_db0.DatabaseRequestContext<_fragno_dev_db0.HooksMap>>, _fragno_dev_core0.FragnoRouteConfig<"GET", "/users", undefined, zod44.ZodObject<{
+  users: zod44.ZodArray<zod44.ZodObject<{
+    id: zod44.ZodString;
+    email: zod44.ZodString;
+    role: zod44.ZodEnum<{
+      user: "user";
+      admin: "admin";
+    }>;
+    createdAt: zod44.ZodString;
+  }, zod_v4_core12.$strip>>;
+  cursor: zod44.ZodOptional<zod44.ZodString>;
+  hasNextPage: zod44.ZodBoolean;
+  sortBy: zod44.ZodEnum<{
+    createdAt: "createdAt";
+    email: "email";
+  }>;
+}, zod_v4_core12.$strip>, "invalid_input", "pageSize" | "search" | "cursor" | "sortOrder" | "sortBy", _fragno_dev_db0.DatabaseRequestContext<_fragno_dev_db0.HooksMap>>, ..._fragno_dev_core0.FragnoRouteConfig<_fragno_dev_core_api4.HTTPMethod, `/_internal/${string}`, any, any, any, any, any>[]], _fragno_dev_db0.ImplicitDatabaseDependencies<_fragno_dev_db_schema0.Schema<{
+  user: _fragno_dev_db_schema0.Table<Record<string, _fragno_dev_db_schema0.AnyColumn> & Record<"id", _fragno_dev_db_schema0.IdColumn<"varchar(30)", string | _fragno_dev_db_schema0.FragnoId | null, _fragno_dev_db_schema0.FragnoId>> & Record<"email", _fragno_dev_db_schema0.Column<"string", string, string>> & Record<"passwordHash", _fragno_dev_db_schema0.Column<"string", string, string>> & Record<"role", _fragno_dev_db_schema0.Column<"string", string | null, string>> & Record<"createdAt", _fragno_dev_db_schema0.Column<"timestamp", (_fragno_dev_db0.DbNow | Date) | null, Date>>, Record<string, _fragno_dev_db_schema0.AnyRelation>, Record<string, _fragno_dev_db_schema0.Index<_fragno_dev_db_schema0.AnyColumn[], readonly string[]>> & Record<"idx_user_createdAt", _fragno_dev_db_schema0.Index<readonly [_fragno_dev_db_schema0.Column<"timestamp", (_fragno_dev_db0.DbNow | Date) | null, Date>] & _fragno_dev_db_schema0.AnyColumn[], readonly ["createdAt"]>>>;
+  session: _fragno_dev_db_schema0.Table<Record<string, _fragno_dev_db_schema0.AnyColumn> & Record<"id", _fragno_dev_db_schema0.IdColumn<"varchar(30)", string | _fragno_dev_db_schema0.FragnoId | null, _fragno_dev_db_schema0.FragnoId>> & Record<"userId", _fragno_dev_db_schema0.Column<"bigint", string | bigint | _fragno_dev_db_schema0.FragnoId | _fragno_dev_db_schema0.FragnoReference, _fragno_dev_db_schema0.FragnoReference>> & Record<"expiresAt", _fragno_dev_db_schema0.Column<"timestamp", _fragno_dev_db0.DbNow | Date, Date>> & Record<"createdAt", _fragno_dev_db_schema0.Column<"timestamp", (_fragno_dev_db0.DbNow | Date) | null, Date>>, Record<string, _fragno_dev_db_schema0.AnyRelation> & Record<"sessionOwner", _fragno_dev_db_schema0.Relation<"one", _fragno_dev_db_schema0.Table<Record<string, _fragno_dev_db_schema0.AnyColumn> & Record<"id", _fragno_dev_db_schema0.IdColumn<"varchar(30)", string | _fragno_dev_db_schema0.FragnoId | null, _fragno_dev_db_schema0.FragnoId>> & Record<"email", _fragno_dev_db_schema0.Column<"string", string, string>> & Record<"passwordHash", _fragno_dev_db_schema0.Column<"string", string, string>> & Record<"role", _fragno_dev_db_schema0.Column<"string", string | null, string>> & Record<"createdAt", _fragno_dev_db_schema0.Column<"timestamp", (_fragno_dev_db0.DbNow | Date) | null, Date>>, Record<string, _fragno_dev_db_schema0.AnyRelation>, Record<string, _fragno_dev_db_schema0.Index<_fragno_dev_db_schema0.AnyColumn[], readonly string[]>> & Record<"idx_user_email", _fragno_dev_db_schema0.Index<readonly [_fragno_dev_db_schema0.Column<"string", string, string>] & _fragno_dev_db_schema0.AnyColumn[], readonly ["email"]>> & Record<"idx_user_id", _fragno_dev_db_schema0.Index<readonly [_fragno_dev_db_schema0.IdColumn<"varchar(30)", string | _fragno_dev_db_schema0.FragnoId | null, _fragno_dev_db_schema0.FragnoId>] & _fragno_dev_db_schema0.AnyColumn[], readonly ["id"]>>>>>, Record<string, _fragno_dev_db_schema0.Index<_fragno_dev_db_schema0.AnyColumn[], readonly string[]>> & Record<"idx_session_user", _fragno_dev_db_schema0.Index<readonly [_fragno_dev_db_schema0.Column<"bigint", string | bigint | _fragno_dev_db_schema0.FragnoId | _fragno_dev_db_schema0.FragnoReference, _fragno_dev_db_schema0.FragnoReference>] & _fragno_dev_db_schema0.AnyColumn[], readonly ["userId"]>>>;
+}>>, _fragno_dev_core0.BoundServices<{
+  getUsersWithCursor: (this: _fragno_dev_core0.RequestThisContext & {
+    serviceTx<TSchema extends _fragno_dev_db_schema0.AnySchema>(schema: TSchema): _fragno_dev_db0.ServiceTxBuilder<TSchema, readonly [], [], [], unknown, unknown, false, false, false, false, {}>;
+  }, params: GetUsersParams) => _fragno_dev_db0.TxResult<{
+    users: UserResult[];
+    cursor: _fragno_dev_db0.Cursor | undefined;
+    hasNextPage: boolean;
+  }, {
+    users: UserResult[];
+    cursor: _fragno_dev_db0.Cursor | undefined;
+    hasNextPage: boolean;
+  }>;
+  buildSessionCookie: (sessionId: string) => string;
+  createSession: (this: _fragno_dev_core0.RequestThisContext & {
+    serviceTx<TSchema extends _fragno_dev_db_schema0.AnySchema>(schema: TSchema): _fragno_dev_db0.ServiceTxBuilder<TSchema, readonly [], [], [], unknown, unknown, false, false, false, false, {}>;
+  }, userId: string) => _fragno_dev_db0.TxResult<{
+    id: string;
+    userId: string;
+    expiresAt: Date;
+  }, {
+    id: string;
+    userId: string;
+    expiresAt: Date;
+  }>;
+  validateSession: (this: _fragno_dev_core0.RequestThisContext & {
+    serviceTx<TSchema extends _fragno_dev_db_schema0.AnySchema>(schema: TSchema): _fragno_dev_db0.ServiceTxBuilder<TSchema, readonly [], [], [], unknown, unknown, false, false, false, false, {}>;
+  }, sessionId: string) => _fragno_dev_db0.TxResult<{
+    id: string;
+    userId: string;
+    user: {
+      id: string;
+      email: string;
+      role: string;
+    };
+  } | null, [{
+    id: _fragno_dev_db_schema0.FragnoId;
+    userId: _fragno_dev_db_schema0.FragnoReference;
+    expiresAt: Date;
+    createdAt: Date;
+    sessionOwner: {
+      id: _fragno_dev_db_schema0.FragnoId;
+      email: string;
+      passwordHash: string;
+      role: string;
+      createdAt: Date;
+    } | null;
+  } | null]>;
+  invalidateSession: (this: _fragno_dev_core0.RequestThisContext & {
+    serviceTx<TSchema extends _fragno_dev_db_schema0.AnySchema>(schema: TSchema): _fragno_dev_db0.ServiceTxBuilder<TSchema, readonly [], [], [], unknown, unknown, false, false, false, false, {}>;
+  }, sessionId: string) => _fragno_dev_db0.TxResult<boolean, [{
+    id: _fragno_dev_db_schema0.FragnoId;
+    userId: _fragno_dev_db_schema0.FragnoReference;
+    expiresAt: Date;
+    createdAt: Date;
+  } | null]>;
+  getSession: (this: _fragno_dev_core0.RequestThisContext & {
+    serviceTx<TSchema extends _fragno_dev_db_schema0.AnySchema>(schema: TSchema): _fragno_dev_db0.ServiceTxBuilder<TSchema, readonly [], [], [], unknown, unknown, false, false, false, false, {}>;
+  }, headers: Headers) => _fragno_dev_db0.TxResult<{
+    userId: string;
+    email: string;
+  } | undefined, [{
+    id: _fragno_dev_db_schema0.FragnoId;
+    userId: _fragno_dev_db_schema0.FragnoReference;
+    expiresAt: Date;
+    createdAt: Date;
+    sessionOwner: {
+      id: _fragno_dev_db_schema0.FragnoId;
+      email: string;
+      passwordHash: string;
+      role: string;
+      createdAt: Date;
+    } | null;
+  } | null]>;
+  createUser: (this: _fragno_dev_core0.RequestThisContext & {
+    serviceTx<TSchema extends _fragno_dev_db_schema0.AnySchema>(schema: TSchema): _fragno_dev_db0.ServiceTxBuilder<TSchema, readonly [], [], [], unknown, unknown, false, false, false, false, {}>;
+  }, email: string, passwordHash: string, role?: "user" | "admin") => _fragno_dev_db0.TxResult<{
+    id: string;
+    email: string;
+    role: "user" | "admin";
+  }, {
+    id: string;
+    email: string;
+    role: "user" | "admin";
+  }>;
+  getUserByEmail: (this: _fragno_dev_core0.RequestThisContext & {
+    serviceTx<TSchema extends _fragno_dev_db_schema0.AnySchema>(schema: TSchema): _fragno_dev_db0.ServiceTxBuilder<TSchema, readonly [], [], [], unknown, unknown, false, false, false, false, {}>;
+  }, email: string) => _fragno_dev_db0.TxResult<{
+    id: string;
+    email: string;
+    passwordHash: string;
+    role: "user" | "admin";
+  } | null, {
+    id: string;
+    email: string;
+    passwordHash: string;
+    role: "user" | "admin";
+  } | null>;
+  updateUserRole: (this: _fragno_dev_core0.RequestThisContext & {
+    serviceTx<TSchema extends _fragno_dev_db_schema0.AnySchema>(schema: TSchema): _fragno_dev_db0.ServiceTxBuilder<TSchema, readonly [], [], [], unknown, unknown, false, false, false, false, {}>;
+  }, userId: string, role: "user" | "admin") => _fragno_dev_db0.TxResult<{
+    success: boolean;
+  }, {
+    success: boolean;
+  }>;
+  updateUserPassword: (this: _fragno_dev_core0.RequestThisContext & {
+    serviceTx<TSchema extends _fragno_dev_db_schema0.AnySchema>(schema: TSchema): _fragno_dev_db0.ServiceTxBuilder<TSchema, readonly [], [], [], unknown, unknown, false, false, false, false, {}>;
+  }, userId: string, passwordHash: string) => _fragno_dev_db0.TxResult<{
+    success: boolean;
+  }, {
+    success: boolean;
+  }>;
+  signUpWithSession: (this: _fragno_dev_core0.RequestThisContext & {
+    serviceTx<TSchema extends _fragno_dev_db_schema0.AnySchema>(schema: TSchema): _fragno_dev_db0.ServiceTxBuilder<TSchema, readonly [], [], [], unknown, unknown, false, false, false, false, {}>;
+  }, email: string, passwordHash: string) => _fragno_dev_db0.TxResult<{
+    ok: false;
+    code: "email_already_exists";
+    sessionId?: undefined;
+    userId?: undefined;
+    email?: undefined;
+    role?: undefined;
+  } | {
+    ok: true;
+    sessionId: string;
+    userId: string;
+    email: string;
+    role: "user";
+    code?: undefined;
+  }, [{
+    id: _fragno_dev_db_schema0.FragnoId;
+    email: string;
+    passwordHash: string;
+    role: string;
+    createdAt: Date;
+  } | null]>;
+  updateUserRoleWithSession: (this: _fragno_dev_core0.RequestThisContext & {
+    serviceTx<TSchema extends _fragno_dev_db_schema0.AnySchema>(schema: TSchema): _fragno_dev_db0.ServiceTxBuilder<TSchema, readonly [], [], [], unknown, unknown, false, false, false, false, {}>;
+  }, sessionId: string, userId: string, role: "user" | "admin") => _fragno_dev_db0.TxResult<{
+    ok: false;
+    code: "session_invalid";
+  } | {
+    ok: false;
+    code: "permission_denied";
+  } | {
+    ok: true;
+    code?: undefined;
+  }, [{
+    id: _fragno_dev_db_schema0.FragnoId;
+    userId: _fragno_dev_db_schema0.FragnoReference;
+    expiresAt: Date;
+    createdAt: Date;
+    sessionOwner: {
+      id: _fragno_dev_db_schema0.FragnoId;
+      email: string;
+      passwordHash: string;
+      role: string;
+      createdAt: Date;
+    } | null;
+  } | null]>;
+  changePasswordWithSession: (this: _fragno_dev_core0.RequestThisContext & {
+    serviceTx<TSchema extends _fragno_dev_db_schema0.AnySchema>(schema: TSchema): _fragno_dev_db0.ServiceTxBuilder<TSchema, readonly [], [], [], unknown, unknown, false, false, false, false, {}>;
+  }, sessionId: string, passwordHash: string) => _fragno_dev_db0.TxResult<{
+    ok: false;
+    code: "session_invalid";
+  } | {
+    ok: true;
+    code?: undefined;
+  }, [{
+    id: _fragno_dev_db_schema0.FragnoId;
+    userId: _fragno_dev_db_schema0.FragnoReference;
+    expiresAt: Date;
+    createdAt: Date;
+    sessionOwner: {
+      id: _fragno_dev_db_schema0.FragnoId;
+      email: string;
+      passwordHash: string;
+      role: string;
+      createdAt: Date;
+    } | null;
+  } | null]>;
+}>, _fragno_dev_db0.DatabaseServiceContext<_fragno_dev_db0.HooksMap>, _fragno_dev_db0.DatabaseRequestContext<_fragno_dev_db0.HooksMap>, _fragno_dev_db_fragment_definition_builder0.DatabaseRequestStorage, FragnoPublicConfigWithDatabase, {
+  _fragno_internal: _fragno_dev_db0.InternalFragmentInstance;
+}>;
+declare function createAuthFragmentClients(fragnoConfig?: FragnoPublicClientConfig): {
+  useSignUp: _fragno_dev_core_client0.FragnoClientMutatorData<_fragno_dev_core_api4.NonGetHTTPMethod, "/sign-up", zod44.ZodObject<{
+    email: zod44.ZodEmail;
+    password: zod44.ZodString;
+  }, zod_v4_core12.$strip> | undefined, zod44.ZodObject<{
+    sessionId: zod44.ZodString;
+    userId: zod44.ZodString;
+    email: zod44.ZodString;
+    role: zod44.ZodEnum<{
+      user: "user";
+      admin: "admin";
+    }>;
+  }, zod_v4_core12.$strip> | undefined, "invalid_input" | "email_already_exists", string>;
+  useSignIn: _fragno_dev_core_client0.FragnoClientMutatorData<_fragno_dev_core_api4.NonGetHTTPMethod, "/sign-in", zod44.ZodObject<{
+    email: zod44.ZodEmail;
+    password: zod44.ZodString;
+  }, zod_v4_core12.$strip> | undefined, zod44.ZodObject<{
+    sessionId: zod44.ZodString;
+    userId: zod44.ZodString;
+    email: zod44.ZodString;
+    role: zod44.ZodEnum<{
+      user: "user";
+      admin: "admin";
+    }>;
+  }, zod_v4_core12.$strip> | undefined, "invalid_credentials", string>;
+  useSignOut: _fragno_dev_core_client0.FragnoClientMutatorData<_fragno_dev_core_api4.NonGetHTTPMethod, "/sign-out", zod44.ZodOptional<zod44.ZodObject<{
+    sessionId: zod44.ZodOptional<zod44.ZodString>;
+  }, zod_v4_core12.$strip>> | undefined, zod44.ZodObject<{
+    success: zod44.ZodBoolean;
+  }, zod_v4_core12.$strip> | undefined, "session_not_found", string>;
+  useMe: _fragno_dev_core_client0.FragnoClientHookData<"GET", "/me", zod44.ZodObject<{
+    userId: zod44.ZodString;
+    email: zod44.ZodString;
+    role: zod44.ZodEnum<{
+      user: "user";
+      admin: "admin";
+    }>;
+  }, zod_v4_core12.$strip>, "session_invalid", "sessionId">;
+  useUsers: _fragno_dev_core_client0.FragnoClientHookData<"GET", "/users", zod44.ZodObject<{
+    users: zod44.ZodArray<zod44.ZodObject<{
+      id: zod44.ZodString;
+      email: zod44.ZodString;
+      role: zod44.ZodEnum<{
+        user: "user";
+        admin: "admin";
+      }>;
+      createdAt: zod44.ZodString;
+    }, zod_v4_core12.$strip>>;
+    cursor: zod44.ZodOptional<zod44.ZodString>;
+    hasNextPage: zod44.ZodBoolean;
+    sortBy: zod44.ZodEnum<{
+      createdAt: "createdAt";
+      email: "email";
+    }>;
+  }, zod_v4_core12.$strip>, "invalid_input", "pageSize" | "search" | "cursor" | "sortOrder" | "sortBy">;
+  useUpdateUserRole: _fragno_dev_core_client0.FragnoClientMutatorData<_fragno_dev_core_api4.NonGetHTTPMethod, "/users/:userId/role", zod44.ZodObject<{
+    role: zod44.ZodEnum<{
+      user: "user";
+      admin: "admin";
+    }>;
+  }, zod_v4_core12.$strip> | undefined, zod44.ZodObject<{
+    success: zod44.ZodBoolean;
+  }, zod_v4_core12.$strip> | undefined, "invalid_input" | "session_invalid" | "permission_denied", string>;
+  useChangePassword: _fragno_dev_core_client0.FragnoClientMutatorData<_fragno_dev_core_api4.NonGetHTTPMethod, "/change-password", zod44.ZodObject<{
+    newPassword: zod44.ZodString;
+  }, zod_v4_core12.$strip> | undefined, zod44.ZodObject<{
+    success: zod44.ZodBoolean;
+  }, zod_v4_core12.$strip> | undefined, "session_invalid", string>;
+  signIn: {
+    email: ({
+      email,
+      password,
+      rememberMe: _rememberMe
+    }: {
+      email: string;
+      password: string;
+      rememberMe?: boolean;
+    }) => Promise<{
+      sessionId: string;
+      userId: string;
+      email: string;
+      role: "user" | "admin";
+    } | undefined>;
+  };
+  signUp: {
+    email: ({
+      email,
+      password
+    }: {
+      email: string;
+      password: string;
+    }) => Promise<{
+      sessionId: string;
+      userId: string;
+      email: string;
+      role: "user" | "admin";
+    } | undefined>;
+  };
+  signOut: (params?: {
+    sessionId?: string;
+  }) => Promise<{
+    success: boolean;
+  } | undefined>;
+  me: (params?: {
+    sessionId?: string;
+  }) => Promise<{
+    userId: string;
+    email: string;
+    role: "user" | "admin";
+  }>;
+};
+type Role = "user" | "admin";
+//# sourceMappingURL=index.d.ts.map
+
+//#endregion
+export { AuthConfig, AuthFragment, type FragnoRouteConfig, type GetUsersParams, Role, type SortField, type SortOrder, type UserResult, authFragmentDefinition, createAuthFragment, createAuthFragmentClients };
+//# sourceMappingURL=index.d.ts.map

package/dist/browser/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/user/user-overview.ts","../../../src/utils/cookie.ts","../../../src/index.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;;;;;KAOY,SAAA;KACA,SAAA;UAEK,cAAA;;UAEP;aACG;;WAEF;;UAGM,UAAA;;;EAXL,IAAA,EAAA,MAAS,GAAA,OAAA;EACT,SAAA,EAcC,IAdQ;AAErB;;;UCHiB,aAAA;;;;;;;;;;;;UCSA,UAAA;;;;;QACwD;kBACvD;;cAGL,0CAAsB,mBAAA,YAAA,gCAAA,eAAA,CAAA,oDAAA;oDAAA,sBAAA,CAAA,SAAA;;AFdnC,CAAA,CAAA,CAAA,EAAY;EACA,kBAAS,EAAA,CAAA,IAAA,EEac,iBAAA,CAAA,kBAAA,GFbd;IAEJ,SAAA,CAAA,gDAAc,CAAA,CAAA,MAAA,SAAA,CAAA,kCAAA,QAAA,EAAA,SAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,OAAA,EAAA,OAAA,EAAA,KAAA,EAAA,KAAA,EAAA,KAAA,EAAA,KAAA,EAAA,CAAA,CAAA,CAAA;EAAA,CAAA,EAAA,MAAA,gBAAA,EAAA,2BAAA,CAAA;IAErB,KAAA,YAAA,EAAA;IACG,MAAA,2BAAA,SAAA;IAEF,WAAA,EAAA,OAAA;EAAM,CAAA,EAAA;IAGA,KAAA,YAAU,EAAA;;;;ECXV,kBAAa,EAAA,CAAA,SAAA,EAAA,MAAA,EAAA,GAAA,MAAA;;;;ICSb,EAAA,EAAA,MAAU;IAAA,MAAA,EAAA,MAAA;IAC8C,SAAA,MAAA;EAAO,CAAA,EAC9D;IAAa,EAAA,EAAA,MAAA;IAGlB,MAAA,EAAA,MAAA;IASH,SAAA,MAAA;EAAA,CAAA,CAAA;EATyB,eAAA,EAAA,CAAA,IAAA,yCAAA;IAAA,SAAA,CAAA,gDAAA,CAAA,CAAA,MAAA,SAAA,CAAA,kCAAA,QAAA,EAAA,SAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,OAAA,EAAA,OAAA,EAAA,KAAA,EAAA,KAAA,EAAA,KAAA,EAAA,KAAA,EAAA,CAAA,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAAA,IAAA,EAAA,MAAA;IAAA,IAAA,CAAA,EAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAWvB,YAAA,UAAsB;iBAElB,kBAAA,SACN,sCACM,mDAA8B,uDAAA,wDAAA;QAAA,KAAA,CAAA;;;;;WAAA,KAAA,CAAA;;SAAA,KAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAfX,CAAA,uBAAA,EAAA,eAAA,EAAA,UAAA,GAAA,QAAA,GAAA,QAAA,GAAA,WAAA,GAAA,QAAA,wCAAA,0BAAA,CAAA,EAAA,sCAAA,mCAAA,cAAA,MAAA,EAAA,EAAA,GAAA,EAAA,GAAA,EAAA,GAAA,EAAA,GAAA,EAAA,GAAA,CAAA,EAAA,CAAA,8CAAA,8BAAA,CAAA;EAWvB,IAAA,8BAAsB,OAAsB,CAAA,MAAA,mCAAA,SAAA,CAAA,IAAA,iCAAA,CAAA,aAAA,EAAA,MAAA,qCAAA,IAAA,kCAAA,CAAA,SAAA,CAAA,OAAA,+BAAA,CAAA,QAAA,EAAA,MAAA,EAAA,MAAA,CAAA,CAAA,SAAA,CAAA,cAAA,+BAAA,CAAA,QAAA,EAAA,MAAA,EAAA,MAAA,CAAA,CAAA,SAAA,CAAA,MAAA,+BAAA,CAAA,QAAA,EAAA,MAAA,GAAA,IAAA,EAAA,MAAA,CAAA,CAAA,SAAA,CAAA,WAAA,+BAAA,CAAA,WAAA,EAAA,6BAAA,CAAA,GAAA,IAAA,MAAA,CAAA,CAAA,QAAA,CAAA,MAAA,qCAAA,QAAA,CAAA,MAAA,8BAAA,mCAAA,EAAA,SAAA,MAAA,EAAA,CAAA,CAAA,SAAA,CAAA,oBAAA,8BAAA,CAAA,SAAA,8BAAA,CAAA,WAAA,EAAA,6BAAA,CAAA,GAAA,IAAA,MAAA,CAAA,CAAA,qCAAA,EAAA,SAAA,CAAA,WAAA,CAAA,CAAA,CAAA,CAAA;EAExC,OAAA,8BAAkB,OAAA,CAAA,MAAA,mCAAA,SAAA,CAAA,IAAA,iCAAA,CAAA,aAAA,EAAA,MAAA,qCAAA,IAAA,kCAAA,CAAA,SAAA,CAAA,QAAA,+BAAA,CAAA,QAAA,EAAA,MAAA,GAAA,MAAA,2EAAA,yCAAA,CAAA,SAAA,CAAA,WAAA,+BAAA,CAAA,WAAA,8BAAA,MAAA,CAAA,CAAA,SAAA,CAAA,WAAA,+BAAA,CAAA,WAAA,EAAA,6BAAA,CAAA,GAAA,IAAA,MAAA,CAAA,CAAA,QAAA,CAAA,MAAA,qCAAA,SAAA,CAAA,cAAA,iCAAA,CAAA,KAAA,8BAAA,OAAA,CAAA,MAAA,mCAAA,SAAA,CAAA,IAAA,iCAAA,CAAA,aAAA,EAAA,MAAA,qCAAA,IAAA,kCAAA,CAAA,SAAA,CAAA,OAAA,+BAAA,CAAA,QAAA,EAAA,MAAA,EAAA,MAAA,CAAA,CAAA,SAAA,CAAA,cAAA,+BAAA,CAAA,QAAA,EAAA,MAAA,EAAA,MAAA,CAAA,CAAA,SAAA,CAAA,MAAA,+BAAA,CAAA,QAAA,EAAA,MAAA,GAAA,IAAA,EAAA,MAAA,CAAA,CAAA,SAAA,CAAA,WAAA,+BAAA,CAAA,WAAA,EAAA,6BAAA,CAAA,GAAA,IAAA,MAAA,CAAA,CAAA,QAAA,CAAA,MAAA,qCAAA,QAAA,CAAA,MAAA,8BAAA,mCAAA,EAAA,SAAA,MAAA,EAAA,CAAA,CAAA,SAAA,CAAA,gBAAA,8BAAA,CAAA,SAAA,8BAAA,CAAA,QAAA,EAAA,MAAA,EAAA,MAAA,CAAA,CAAA,qCAAA,EAAA,SAAA,CAAA,OAAA,CAAA,CAAA,CAAA,SAAA,CAAA,aAAA,8BAAA,CAAA,SAAA,gCAAA,CAAA,aAAA,EAAA,MAAA,qCAAA,IAAA,kCAAA,CAAA,qCAAA,EAAA,SAAA,CAAA,IAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,QAAA,CAAA,MAAA,8BAAA,mCAAA,EAAA,SAAA,MAAA,EAAA,CAAA,CAAA,SAAA,CAAA,kBAAA,8BAAA,CAAA,SAAA,8BAAA,CAAA,QAAA,EAAA,MAAA,GAAA,MAAA,2EAAA,yCAAA,CAAA,qCAAA,EAAA,SAAA,CAAA,QAAA,CAAA,CAAA,CAAA,CAAA;CAAA,CAAA,CAAA,iCAAA,CAAA;EAAA,kBACxB,EAAA,CAAA,IAAA,yCAAA;IACM,SAAA,CAAA,gDAAA,CAAA,CAAA,MAAA,SAAA,CAAA,kCAAA,QAAA,EAAA,SAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,OAAA,EAAA,OAAA,EAAA,KAAA,EAAA,KAAA,EAAA,KAAA,EAAA,KAAA,EAAA,CAAA,CAAA,CAAA;EAA8B,CAAA,EAAA,MAAA,gBAAA,EAAA,2BAAA,CAAA;;UAAA,2BAAA,SAAA;IAAA,WAAA,EAAA,OAAA;;;;;;EAAA,kBAAA,EAAA,CAAA,SAAA,EAAA,MAAA,EAAA,GAAA,MAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkB9B,yBAAA,gBAAyC;8DAAwB,qBAAA,CAAA,gBAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UAmD1E;;;;;;;;;;;;;;UAYqE;;;;;;;;;QAU/B;;;;;QAMC;;;;;;KAalC,IAAA"}

package/dist/browser/index.js

@@ -0,0 +1,3 @@
+import { authFragmentDefinition, createAuthFragment, createAuthFragmentClients } from "./src-DNrh9CQq.js";
+
+export { authFragmentDefinition, createAuthFragment, createAuthFragmentClients };