@frigear-nu/account 0.0.6 → 0.0.8

package/dist/runtime/i18n/lang/en.json

@@ -2,38 +2,76 @@
   "account": {
     "title": "Account",
     "menu": {
-      "label": "Dashboard Menu"
+      "label": "Dashboard Menu",
+      "account": {
+        "label": "Account",
+        "description": "Your account."
+      },
+      "profile": {
+        "label": "Profile",
+        "description": "Manage your profile details and email address."
+      },
+      "security": {
+        "label": "Security",
+        "description": "Change your password and manage passkeys."
+      },
+      "documents": {
+        "label": "Documents",
+        "description": "Handbooks and other files for you."
+      },
+      "apiTokens": {
+        "label": "API tokens",
+        "description": "Create tokens for scripts and tools."
+      }
     },
     "identificationCode": {
       "title": "Frigear ID",
-      "description": "Press here to show your ID."
+      "description": "Press here to show your ID.",
+      "expiresIn": "Refreshes in {time}s",
+      "refresh": "Refresh",
+      "role": "Role",
+      "error": "Could not create your Frigear ID."
     },
     "profile": {
       "title": "Profile",
       "description": "Change your information.",
       "name": {
         "label": "Name",
-        "description": "Your full name."
+        "description": "Your full name.",
+        "required": "Please enter your name."
       },
       "email": {
         "label": "E-mail",
         "description": "Your awesome E-mail.",
         "change": {
           "title": "Change e-mail",
-          "label": "New e-mail"
-        }
+          "label": "New e-mail",
+          "sent": {
+            "title": "Check your inbox",
+            "description": "We sent a link to your new address. It takes effect once you confirm it."
+          },
+          "done": "Your email address was changed.",
+          "failed": "This confirmation link is invalid or has expired.",
+          "error": "Could not change your email address."
+        },
+        "invalid": "Enter a valid email address."
       },
       "avatar": {
         "label": "Avatar",
-        "description": "JPG, GIF or PNG. 1MB Max.",
-        "url": "Avatar URL"
+        "description": "Link to a square image.",
+        "url": "Avatar URL",
+        "invalid": "Enter a valid URL."
       },
-      "save": "Save profile"
+      "save": "Save profile",
+      "saved": "Profile updated",
+      "saveFailed": "Could not update your profile.",
+      "cancel": "Cancel"
     },
     "documents": {
       "title": "Documents",
       "description": "Your documents.",
-      "download": "Download"
+      "download": "Download",
+      "empty": "No documents for you yet."
     },
     "security": {
       "title": "Security",
@@ -46,19 +84,105 @@
         "title": "Change password",
         "submit": "Change password",
         "new": {
-          "label": "New password"
+          "label": "New password",
+          "min": "Use at least 8 characters."
         },
         "confirm": {
-          "label": "Confirm new password"
+          "label": "Confirm new password",
+          "mismatch": "The passwords do not match."
         },
         "current": {
-          "label": "Current password"
-        }
+          "label": "Current password",
+          "required": "Enter your current password."
+        },
+        "success": "Your password was changed.",
+        "error": "Could not change your password."
       },
       "passkeys": {
         "title": "Passkeys",
-        "register": "Register a passkey"
+        "register": "Register a passkey",
+        "description": "Sign in with your fingerprint, face or device PIN instead of a password.",
+        "unnamed": "Passkey",
+        "created": "Added {date}",
+        "remove": "Remove passkey",
+        "empty": "You have not added any passkeys yet.",
+        "name": {
+          "label": "Passkey name",
+          "placeholder": "Name, e.g. MacBook"
+        },
+        "registered": "Passkey added.",
+        "registerError": "Could not register the passkey.",
+        "removed": "Passkey removed.",
+        "removeError": "Could not remove the passkey.",
+        "loadError": "Could not load your passkeys."
       }
+    },
+    "backTo": "Back to account",
+    "signedInAs": "Signed in as",
+    "apiTokens": {
+      "title": "API tokens",
+      "description": "Create tokens for scripts and tools.",
+      "allScopes": "Full access",
+      "copy": "Copy",
+      "copied": "Token copied.",
+      "copiedSnippet": "Copied.",
+      "copyError": "Could not copy. Select the token and copy it manually.",
+      "create": {
+        "title": "Create an API token",
+        "description": "Tokens let scripts and tools such as MCP clients act as you. Give each one only the scopes it needs.",
+        "submit": "Create token"
+      },
+      "createError": "Could not create the token.",
+      "name": {
+        "label": "Name",
+        "placeholder": "e.g. My MCP client",
+        "required": "Give the token a name."
+      },
+      "scopes": {
+        "label": "Scopes",
+        "placeholder": "Choose what the token may do",
+        "required": "Pick at least one scope."
+      },
+      "expiry": {
+        "label": "Expires",
+        "30": "30 days",
+        "90": "90 days",
+        "365": "1 year",
+        "never": "No expiry"
+      },
+      "reveal": {
+        "title": "Copy your new token now",
+        "description": "This is the only time it is shown. If you lose it, create a new one.",
+        "label": "New token",
+        "done": "Done"
+      },
+      "connect": {
+        "title": "Connect to MCP",
+        "description": "Use your account from an AI assistant. Your API token is only filled into the commands right after you create it.",
+        "claude": {
+          "steps": "Claude.ai and Claude Desktop: open Settings → Connectors → Add custom connector, paste the URL below and sign in when asked. No token needed.",
+          "cli": "Claude Code (uses an API token):"
+        },
+        "chatgpt": {
+          "steps": "ChatGPT: open Settings → Connectors → Advanced, turn on Developer mode, then create a connector with the URL below. Choose OAuth and sign in when asked. No token needed."
+        }
+      },
+      "list": {
+        "title": "Your tokens",
+        "description": "Revoke a token to stop it working immediately.",
+        "empty": "You have not created any tokens yet.",
+        "created": "Created {date}",
+        "lastUsed": "Last used {date}",
+        "expires": "Expires {date}"
+      },
+      "status": {
+        "ok": "Active",
+        "revoked": "Revoked",
+        "expired": "Expired"
+      },
+      "revoke": "Revoke token",
+      "revoked": "Token revoked.",
+      "revokeError": "Could not revoke the token."
     }
   }
 }

package/dist/runtime/menus.js

@@ -5,7 +5,9 @@ export default defineMenuSource(() => {
     extendMenuItem("account.dropdown", {
       id: "account",
       label: "Account",
+      labelKey: "account.menu.account.label",
       description: "Your account.",
+      descriptionKey: "account.menu.account.description",
       icon: "i-lucide-layout-dashboard",
       to: config.pages.index,
       order: -99
@@ -15,7 +17,9 @@ export default defineMenuSource(() => {
     const profileItem = defineMenuItem({
       id: "profile",
       label: "Profile",
+      labelKey: "account.menu.profile.label",
       description: "Manage your profile details and email address.",
+      descriptionKey: "account.menu.profile.description",
       icon: "i-lucide-user-round-pen",
       to: config.pages.profile,
       order: 10
@@ -27,10 +31,48 @@ export default defineMenuSource(() => {
     extendMenuItem("account", {
       id: "security",
       label: "Security",
+      labelKey: "account.menu.security.label",
       description: "Change your password and manage passkeys.",
+      descriptionKey: "account.menu.security.description",
       icon: "i-lucide-shield-user",
       to: config.pages.security,
       order: 20
     });
   }
+  if (config?.pages?.apiTokens) {
+    extendMenuItem("account", {
+      id: "api-tokens",
+      label: "API tokens",
+      labelKey: "account.menu.apiTokens.label",
+      description: "Create tokens for scripts and tools.",
+      descriptionKey: "account.menu.apiTokens.description",
+      icon: "i-lucide-key-round",
+      to: config.pages.apiTokens,
+      order: 25
+    });
+  }
+  if (config?.pages?.documents) {
+    extendMenuItem("account", {
+      id: "documents",
+      label: "Documents",
+      labelKey: "account.menu.documents.label",
+      description: "Handbooks and other files for you.",
+      descriptionKey: "account.menu.documents.description",
+      icon: "i-lucide-files",
+      to: config.pages.documents,
+      order: 30
+    });
+  }
+  if (config?.pages?.idCode) {
+    extendMenuItem("account", {
+      id: "id-code",
+      label: "Frigear ID",
+      labelKey: "account.identificationCode.title",
+      description: "Press here to show your ID.",
+      descriptionKey: "account.identificationCode.description",
+      icon: "i-lucide-qr-code",
+      to: config.pages.idCode,
+      order: 5
+    });
+  }
 });

package/dist/runtime/server/routes/account/id-code.get.js

@@ -0,0 +1,20 @@
+import { SignJWT, importPKCS8 } from "jose";
+const TTL_SECONDS = 60;
+function normalizePem(raw) {
+  return raw.trim().replace(/^["']|["']$/g, "").replace(/\\n/g, "\n").trim();
+}
+export default defineEventHandler(async (event) => {
+  const user = await requireUser(event, { sessionOnly: true });
+  const config = useRuntimeConfig(event);
+  const own = config.account?.idCode;
+  const oauth = config.oauthServer;
+  const pem = normalizePem(own?.privateKey || oauth?.privateKey || "");
+  if (!pem) {
+    throw createError({ statusCode: 501, statusMessage: "Frigear ID is not configured: set a signing key." });
+  }
+  const keyId = own?.keyId || oauth?.keyId || "key-1";
+  const issuer = own?.issuer || oauth?.issuer || getRequestURL(event).origin;
+  const key = await importPKCS8(pem, "RS256");
+  const jwt = await new SignJWT({ typ: "frigear:id" }).setProtectedHeader({ alg: "RS256", kid: keyId }).setIssuer(issuer).setSubject(String(user.id)).setAudience("frigear:id").setIssuedAt().setExpirationTime(`${TTL_SECONDS}s`).setJti(crypto.randomUUID()).sign(key);
+  return { idCode: jwt, payload: `urn:frigear:id:${jwt}`, expiresIn: TTL_SECONDS };
+});

package/package.json

@@ -1,10 +1,12 @@
 {
   "name": "@frigear-nu/account",
-  "version": "0.0.6",
+  "version": "0.0.8",
   "description": "A module for managing the account area (profile, email, password, security) in the main frigear app.",
+  "homepage": "https://docs.frigear.dev/modules/account",
   "repository": {
     "type": "git",
-    "url": "your-org/@frigear-nu/account"
+    "url": "git+https://github.com/frigear-nu/frigear-nu.git",
+    "directory": "packages/account"
   },
   "license": "MIT",
   "type": "module",
@@ -22,31 +24,44 @@
     "playground"
   ],
   "dependencies": {
-    "@frigear-nu/users": "1.0.7",
+    "@frigear-nu/module-kit": "0.1.7",
+    "@frigear-nu/auth": "0.0.3",
+    "@frigear-nu/users": "1.0.9",
     "@libsql/client": "^0.18.0",
     "@nuxt/kit": "^4.6.0",
+    "@vueuse/core": "^15.0.0",
     "drizzle-kit": "^0.31.11",
     "drizzle-orm": "^0.45.3",
-    "zod": "^4.6.5",
-    "@frigear-nu/menu": "0.0.7",
-    "@frigear-nu/module-kit": "0.1.5",
-    "@vueuse/core": "^15.0.0"
+    "jose": "^6.1.0",
+    "uqr": "^0.1.2",
+    "zod": "^4.6.5"
   },
   "peerDependencies": {
-    "@nuxthub/core": "^0.10.8",
-    "@nuxt/ui": "^4.10.0"
+    "@frigear-nu/authorization": "0.0.6",
+    "@frigear-nu/menu": "0.0.9",
+    "@nuxt/ui": "^4.10.0",
+    "@nuxthub/core": "^0.10.8"
   },
   "peerDependenciesMeta": {
+    "@frigear-nu/authorization": {
+      "optional": true
+    },
+    "@frigear-nu/menu": {
+      "optional": true
+    },
     "@nuxt/ui": {
       "optional": true
     }
   },
   "devDependencies": {
+    "@frigear-nu/authorization": "0.0.6",
+    "@frigear-nu/menu": "0.0.9",
     "@nuxt/devtools": "^3.4.2",
     "@nuxt/eslint-config": "^1.17.0",
     "@nuxt/module-builder": "^1.0.3",
     "@nuxt/schema": "^4.6.0",
     "@nuxt/test-utils": "^4.3.2",
+    "@nuxt/ui": "^4.11.0",
     "@nuxthub/core": "^0.10.8",
     "@types/node": "latest",
     "changelogen": "^0.6.2",
@@ -54,8 +69,7 @@
     "nuxt": "^4.6.1",
     "typescript": "^6.0.3",
     "vitest": "^5.0.1",
-    "vue-tsc": "^3.3.11",
-    "@nuxt/ui": "^4.11.0"
+    "vue-tsc": "^3.3.11"
   },
   "scripts": {
     "postinstall": "nuxt-module-build build --stub && nuxt prepare",

package/dist/runtime/server/db/schema.sqlite.d.ts

@@ -1,24 +0,0 @@
-export declare const users: import("drizzle-orm/sqlite-core").SQLiteTableWithColumns<{
-    name: "users";
-    schema: undefined;
-    columns: {
-        acceptedTermsAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "accepted_terms_at";
-            tableName: "users";
-            dataType: "number";
-            columnType: "SQLiteInteger";
-            data: number;
-            driverParam: number;
-            notNull: false;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: undefined;
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-    };
-    dialect: "sqlite";
-}>;

package/dist/runtime/server/db/schema.sqlite.js

@@ -1,4 +0,0 @@
-import { sqliteTable, integer } from "drizzle-orm/sqlite-core";
-export const users = sqliteTable("users", {
-  acceptedTermsAt: integer("accepted_terms_at")
-});

package/dist/runtime/server/routes/account/change-email.post.js

@@ -1,20 +0,0 @@
-import { db, schema } from "@nuxthub/db";
-import { eq } from "drizzle-orm";
-import { z } from "zod";
-const bodySchema = z.object({
-  email: z.string().email()
-});
-export default defineEventHandler(async (event) => {
-  const { user } = await requireUserSession(event);
-  const { email } = await readValidatedBody(event, bodySchema.parse);
-  const existing = await db.query.users.findFirst({ where: (t, { eq: eq2 }) => eq2(t.email, email) });
-  if (existing && existing.id !== user.id) {
-    throw createError({ statusCode: 409, statusMessage: "A user with this email already exists." });
-  }
-  const [updated] = await db.update(schema.users).set({ email }).where(eq(schema.users.id, user.id)).returning();
-  if (!updated) {
-    throw createError({ statusCode: 404, statusMessage: "User not found." });
-  }
-  await setUserSession(event, { user: mapUserToSession(updated) });
-  return { id: updated.id };
-});

package/dist/runtime/server/routes/account/change-password.post.d.ts

@@ -1,2 +0,0 @@
-declare const _default: any;
-export default _default;

package/dist/runtime/server/routes/account/change-password.post.js

@@ -1,26 +0,0 @@
-import { db, schema } from "@nuxthub/db";
-import { eq } from "drizzle-orm";
-import { z } from "zod";
-const bodySchema = z.object({
-  currentPassword: z.string().min(1),
-  newPassword: z.string().min(8),
-  confirmNewPassword: z.string().min(8)
-}).refine((data) => data.newPassword === data.confirmNewPassword, {
-  message: "Passwords do not match.",
-  path: ["confirmNewPassword"]
-});
-export default defineEventHandler(async (event) => {
-  const { user } = await requireUserSession(event);
-  const { currentPassword, newPassword } = await readValidatedBody(event, bodySchema.parse);
-  const dbUser = await db.query.users.findFirst({ where: (t, { eq: eq2 }) => eq2(t.id, user.id) });
-  if (!dbUser?.password || !await verifyPassword(dbUser.password, currentPassword)) {
-    throw createError({ statusCode: 401, statusMessage: "Your current password is incorrect." });
-  }
-  const hashed = await hashPassword(newPassword);
-  const [updated] = await db.update(schema.users).set({ password: hashed }).where(eq(schema.users.id, user.id)).returning();
-  if (!updated) {
-    throw createError({ statusCode: 404, statusMessage: "User not found." });
-  }
-  await setUserSession(event, { user: mapUserToSession(updated) });
-  return { id: updated.id };
-});

package/dist/runtime/server/routes/account/profile.post.d.ts

@@ -1,2 +0,0 @@
-declare const _default: any;
-export default _default;

package/dist/runtime/server/routes/account/profile.post.js

@@ -1,17 +0,0 @@
-import { db, schema } from "@nuxthub/db";
-import { eq } from "drizzle-orm";
-import { z } from "zod";
-const bodySchema = z.object({
-  name: z.string().min(1),
-  avatar: z.string().optional()
-});
-export default defineEventHandler(async (event) => {
-  const { user } = await requireUserSession(event);
-  const { name, avatar } = await readValidatedBody(event, bodySchema.parse);
-  const [updated] = await db.update(schema.users).set({ name, avatar }).where(eq(schema.users.id, user.id)).returning();
-  if (!updated) {
-    throw createError({ statusCode: 404, statusMessage: "User not found." });
-  }
-  await setUserSession(event, { user: mapUserToSession(updated) });
-  return { id: updated.id };
-});