@fuzdev/fuz_app 0.104.0 → 0.105.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/actions/CLAUDE.md +2 -2
- package/dist/actions/action_bridge.d.ts.map +1 -1
- package/dist/actions/action_bridge.js +2 -2
- package/dist/actions/action_codegen.d.ts.map +1 -1
- package/dist/actions/action_codegen.js +3 -3
- package/dist/actions/action_dispatcher.d.ts.map +1 -1
- package/dist/actions/action_dispatcher.js +3 -3
- package/dist/actions/action_event.d.ts.map +1 -1
- package/dist/actions/action_event.js +11 -11
- package/dist/actions/action_event_data.d.ts.map +1 -1
- package/dist/actions/action_event_data.js +2 -2
- package/dist/actions/action_event_helpers.d.ts.map +1 -1
- package/dist/actions/action_event_helpers.js +2 -2
- package/dist/actions/action_event_types.d.ts.map +1 -1
- package/dist/actions/action_event_types.js +4 -4
- package/dist/actions/action_rpc.d.ts.map +1 -1
- package/dist/actions/action_rpc.js +13 -13
- package/dist/actions/action_spec.d.ts.map +1 -1
- package/dist/actions/action_spec.js +6 -6
- package/dist/actions/action_types.d.ts.map +1 -1
- package/dist/actions/broadcast_api.d.ts.map +1 -1
- package/dist/actions/broadcast_api.js +1 -1
- package/dist/actions/cancel.d.ts.map +1 -1
- package/dist/actions/cancel.js +3 -3
- package/dist/actions/compile_action_registry.d.ts.map +1 -1
- package/dist/actions/frontend_rpc_client.d.ts.map +1 -1
- package/dist/actions/frontend_rpc_client.js +3 -3
- package/dist/actions/heartbeat.d.ts.map +1 -1
- package/dist/actions/heartbeat.js +2 -2
- package/dist/actions/peer_ping.d.ts.map +1 -1
- package/dist/actions/peer_ping.js +6 -6
- package/dist/actions/peer_request.d.ts.map +1 -1
- package/dist/actions/perform_action.d.ts.map +1 -1
- package/dist/actions/perform_action.js +13 -13
- package/dist/actions/protocol.d.ts.map +1 -1
- package/dist/actions/protocol.js +1 -1
- package/dist/actions/register_action_ws.d.ts.map +1 -1
- package/dist/actions/register_action_ws.js +14 -11
- package/dist/actions/register_ws_endpoint.d.ts.map +1 -1
- package/dist/actions/register_ws_endpoint.js +3 -3
- package/dist/actions/request_tracker.svelte.d.ts.map +1 -1
- package/dist/actions/request_tracker.svelte.js +2 -2
- package/dist/actions/rpc_client.d.ts.map +1 -1
- package/dist/actions/rpc_client.js +7 -7
- package/dist/actions/socket.svelte.d.ts.map +1 -1
- package/dist/actions/socket.svelte.js +4 -3
- package/dist/actions/transports.d.ts.map +1 -1
- package/dist/actions/transports_http.d.ts.map +1 -1
- package/dist/actions/transports_http.js +7 -7
- package/dist/actions/transports_ws.d.ts.map +1 -1
- package/dist/actions/transports_ws.js +3 -3
- package/dist/actions/transports_ws_auth_guard.d.ts +4 -4
- package/dist/actions/transports_ws_auth_guard.d.ts.map +1 -1
- package/dist/actions/transports_ws_auth_guard.js +5 -5
- package/dist/actions/transports_ws_backend.d.ts.map +1 -1
- package/dist/actions/transports_ws_backend.js +2 -2
- package/dist/actions/ws_endpoint_spec.d.ts +2 -2
- package/dist/actions/ws_endpoint_spec.d.ts.map +1 -1
- package/dist/auth/CLAUDE.md +11 -7
- package/dist/auth/account_action_specs.d.ts +4 -4
- package/dist/auth/account_action_specs.d.ts.map +1 -1
- package/dist/auth/account_action_specs.js +18 -19
- package/dist/auth/account_actions.d.ts +3 -3
- package/dist/auth/account_actions.d.ts.map +1 -1
- package/dist/auth/account_actions.js +10 -10
- package/dist/auth/account_queries.d.ts.map +1 -1
- package/dist/auth/account_queries.js +6 -6
- package/dist/auth/account_route_schema.d.ts.map +1 -1
- package/dist/auth/account_route_schema.js +19 -19
- package/dist/auth/account_routes.d.ts +2 -2
- package/dist/auth/account_routes.d.ts.map +1 -1
- package/dist/auth/account_routes.js +27 -27
- package/dist/auth/account_schema.d.ts +13 -2
- package/dist/auth/account_schema.d.ts.map +1 -1
- package/dist/auth/account_schema.js +22 -11
- package/dist/auth/actor_lookup_action_specs.d.ts.map +1 -1
- package/dist/auth/actor_lookup_action_specs.js +5 -5
- package/dist/auth/actor_lookup_actions.d.ts +4 -2
- package/dist/auth/actor_lookup_actions.d.ts.map +1 -1
- package/dist/auth/actor_lookup_actions.js +3 -3
- package/dist/auth/actor_lookup_queries.d.ts.map +1 -1
- package/dist/auth/actor_search_action_specs.d.ts.map +1 -1
- package/dist/auth/actor_search_action_specs.js +6 -6
- package/dist/auth/actor_search_actions.d.ts +4 -2
- package/dist/auth/actor_search_actions.d.ts.map +1 -1
- package/dist/auth/actor_search_actions.js +5 -5
- package/dist/auth/actor_search_queries.d.ts.map +1 -1
- package/dist/auth/admin_action_specs.d.ts +2 -2
- package/dist/auth/admin_action_specs.d.ts.map +1 -1
- package/dist/auth/admin_action_specs.js +55 -55
- package/dist/auth/admin_actions.d.ts +5 -5
- package/dist/auth/admin_actions.d.ts.map +1 -1
- package/dist/auth/admin_actions.js +45 -44
- package/dist/auth/all_action_spec_registries.d.ts.map +1 -1
- package/dist/auth/all_action_spec_registries.js +1 -1
- package/dist/auth/all_cell_actions.d.ts.map +1 -1
- package/dist/auth/all_cell_actions.js +1 -1
- package/dist/auth/api_token.d.ts.map +1 -1
- package/dist/auth/api_token_queries.d.ts +7 -2
- package/dist/auth/api_token_queries.d.ts.map +1 -1
- package/dist/auth/api_token_queries.js +8 -3
- package/dist/auth/app_settings_queries.d.ts.map +1 -1
- package/dist/auth/app_settings_schema.d.ts.map +1 -1
- package/dist/auth/app_settings_schema.js +3 -3
- package/dist/auth/audit_emitter.d.ts +28 -20
- package/dist/auth/audit_emitter.d.ts.map +1 -1
- package/dist/auth/audit_emitter.js +37 -19
- package/dist/auth/audit_log_ddl.js +1 -1
- package/dist/auth/audit_log_queries.d.ts.map +1 -1
- package/dist/auth/audit_log_queries.js +2 -2
- package/dist/auth/audit_log_route_schema.d.ts.map +1 -1
- package/dist/auth/audit_log_route_schema.js +1 -1
- package/dist/auth/audit_log_routes.d.ts.map +1 -1
- package/dist/auth/audit_log_routes.js +3 -3
- package/dist/auth/audit_log_schema.d.ts +2 -2
- package/dist/auth/audit_log_schema.d.ts.map +1 -1
- package/dist/auth/audit_log_schema.js +69 -68
- package/dist/auth/auth_ddl.js +3 -3
- package/dist/auth/auth_guard_resolver.d.ts.map +1 -1
- package/dist/auth/bearer_auth.d.ts.map +1 -1
- package/dist/auth/bootstrap_account.d.ts.map +1 -1
- package/dist/auth/bootstrap_account.js +5 -5
- package/dist/auth/bootstrap_route_schema.d.ts.map +1 -1
- package/dist/auth/bootstrap_route_schema.js +6 -6
- package/dist/auth/bootstrap_routes.d.ts.map +1 -1
- package/dist/auth/bootstrap_routes.js +7 -7
- package/dist/auth/cell_action_specs.d.ts +1 -1
- package/dist/auth/cell_action_specs.d.ts.map +1 -1
- package/dist/auth/cell_action_specs.js +47 -47
- package/dist/auth/cell_actions.d.ts +2 -2
- package/dist/auth/cell_actions.d.ts.map +1 -1
- package/dist/auth/cell_actions.js +37 -37
- package/dist/auth/cell_audit_action_specs.d.ts.map +1 -1
- package/dist/auth/cell_audit_action_specs.js +4 -4
- package/dist/auth/cell_audit_actions.d.ts.map +1 -1
- package/dist/auth/cell_audit_actions.js +3 -3
- package/dist/auth/cell_audit_events.d.ts.map +1 -1
- package/dist/auth/cell_audit_events.js +5 -5
- package/dist/auth/cell_audit_metadata.d.ts.map +1 -1
- package/dist/auth/cell_audit_metadata.js +3 -3
- package/dist/auth/cell_authorize.d.ts.map +1 -1
- package/dist/auth/cell_data_schema.d.ts.map +1 -1
- package/dist/auth/cell_data_schema.js +1 -1
- package/dist/auth/cell_field_action_specs.d.ts.map +1 -1
- package/dist/auth/cell_field_action_specs.js +16 -16
- package/dist/auth/cell_field_actions.d.ts +2 -2
- package/dist/auth/cell_field_actions.d.ts.map +1 -1
- package/dist/auth/cell_field_actions.js +11 -11
- package/dist/auth/cell_field_audit_metadata.d.ts.map +1 -1
- package/dist/auth/cell_field_audit_metadata.js +2 -2
- package/dist/auth/cell_grant_action_specs.d.ts.map +1 -1
- package/dist/auth/cell_grant_action_specs.js +15 -15
- package/dist/auth/cell_grant_actions.d.ts +2 -2
- package/dist/auth/cell_grant_actions.d.ts.map +1 -1
- package/dist/auth/cell_grant_actions.js +12 -12
- package/dist/auth/cell_grant_audit_metadata.d.ts.map +1 -1
- package/dist/auth/cell_grant_audit_metadata.js +3 -3
- package/dist/auth/cell_item_action_specs.d.ts +6 -2
- package/dist/auth/cell_item_action_specs.d.ts.map +1 -1
- package/dist/auth/cell_item_action_specs.js +25 -21
- package/dist/auth/cell_item_actions.d.ts +2 -2
- package/dist/auth/cell_item_actions.d.ts.map +1 -1
- package/dist/auth/cell_item_actions.js +14 -14
- package/dist/auth/cell_item_audit_metadata.d.ts.map +1 -1
- package/dist/auth/cell_item_audit_metadata.js +3 -3
- package/dist/auth/cell_relation_visibility.d.ts.map +1 -1
- package/dist/auth/cleanup.d.ts.map +1 -1
- package/dist/auth/cleanup.js +2 -2
- package/dist/auth/credential_type_schema.d.ts.map +1 -1
- package/dist/auth/credential_type_schema.js +5 -5
- package/dist/auth/daemon_token.d.ts.map +1 -1
- package/dist/auth/daemon_token_middleware.d.ts.map +1 -1
- package/dist/auth/daemon_token_middleware.js +2 -2
- package/dist/auth/deps.d.ts +20 -5
- package/dist/auth/deps.d.ts.map +1 -1
- package/dist/auth/grant_path_schema.d.ts.map +1 -1
- package/dist/auth/grant_path_schema.js +8 -8
- package/dist/auth/invite_queries.d.ts.map +1 -1
- package/dist/auth/invite_schema.d.ts.map +1 -1
- package/dist/auth/invite_schema.js +2 -2
- package/dist/auth/keyring.d.ts.map +1 -1
- package/dist/auth/keyring.js +1 -1
- package/dist/auth/middleware.d.ts.map +1 -1
- package/dist/auth/middleware.js +7 -7
- package/dist/auth/migrations.d.ts.map +1 -1
- package/dist/auth/migrations.js +22 -20
- package/dist/auth/password.d.ts.map +1 -1
- package/dist/auth/password_argon2.d.ts.map +1 -1
- package/dist/auth/password_argon2.js +2 -2
- package/dist/auth/request_context.d.ts.map +1 -1
- package/dist/auth/request_context.js +7 -7
- package/dist/auth/role_grant_offer_action_specs.d.ts.map +1 -1
- package/dist/auth/role_grant_offer_action_specs.js +35 -35
- package/dist/auth/role_grant_offer_actions.d.ts +7 -4
- package/dist/auth/role_grant_offer_actions.d.ts.map +1 -1
- package/dist/auth/role_grant_offer_actions.js +43 -43
- package/dist/auth/role_grant_offer_notifications.d.ts.map +1 -1
- package/dist/auth/role_grant_offer_notifications.js +13 -13
- package/dist/auth/role_grant_offer_queries.d.ts +1 -1
- package/dist/auth/role_grant_offer_queries.d.ts.map +1 -1
- package/dist/auth/role_grant_offer_queries.js +11 -11
- package/dist/auth/role_grant_offer_schema.d.ts.map +1 -1
- package/dist/auth/role_grant_offer_schema.js +7 -7
- package/dist/auth/role_grant_queries.d.ts.map +1 -1
- package/dist/auth/role_grant_queries.js +3 -3
- package/dist/auth/role_schema.d.ts.map +1 -1
- package/dist/auth/role_schema.js +7 -7
- package/dist/auth/scope_kind_schema.d.ts.map +1 -1
- package/dist/auth/self_service_role_action_specs.d.ts.map +1 -1
- package/dist/auth/self_service_role_action_specs.js +5 -5
- package/dist/auth/self_service_role_actions.d.ts +3 -3
- package/dist/auth/self_service_role_actions.d.ts.map +1 -1
- package/dist/auth/self_service_role_actions.js +9 -9
- package/dist/auth/session_cookie.d.ts.map +1 -1
- package/dist/auth/session_cookie.js +3 -3
- package/dist/auth/session_middleware.d.ts.map +1 -1
- package/dist/auth/session_middleware.js +4 -4
- package/dist/auth/session_queries.d.ts +14 -4
- package/dist/auth/session_queries.d.ts.map +1 -1
- package/dist/auth/session_queries.js +13 -3
- package/dist/auth/signup_route_schema.d.ts.map +1 -1
- package/dist/auth/signup_route_schema.js +6 -6
- package/dist/auth/signup_routes.d.ts.map +1 -1
- package/dist/auth/signup_routes.js +11 -11
- package/dist/auth/standard_action_specs.d.ts.map +1 -1
- package/dist/auth/standard_action_specs.js +1 -1
- package/dist/auth/standard_rpc_actions.d.ts +4 -4
- package/dist/auth/standard_rpc_actions.d.ts.map +1 -1
- package/dist/auth/standard_rpc_actions.js +3 -3
- package/dist/cli/args.d.ts.map +1 -1
- package/dist/cli/config.d.ts.map +1 -1
- package/dist/cli/daemon.d.ts.map +1 -1
- package/dist/cli/daemon.js +3 -3
- package/dist/cli/help.d.ts.map +1 -1
- package/dist/cli/help.js +1 -1
- package/dist/cli/logger.d.ts.map +1 -1
- package/dist/cli/logger.js +1 -1
- package/dist/cli/util.d.ts.map +1 -1
- package/dist/cli/util.js +1 -1
- package/dist/db/cell_audit_queries.d.ts.map +1 -1
- package/dist/db/cell_audit_queries.js +1 -1
- package/dist/db/cell_ddl.d.ts.map +1 -1
- package/dist/db/cell_ddl.js +7 -7
- package/dist/db/cell_field_queries.d.ts.map +1 -1
- package/dist/db/cell_grant_queries.d.ts.map +1 -1
- package/dist/db/cell_grant_queries.js +1 -1
- package/dist/db/cell_history_ddl.d.ts.map +1 -1
- package/dist/db/cell_history_ddl.js +4 -4
- package/dist/db/cell_item_queries.d.ts.map +1 -1
- package/dist/db/cell_queries.d.ts +1 -1
- package/dist/db/cell_queries.d.ts.map +1 -1
- package/dist/db/cell_queries.js +3 -3
- package/dist/db/create_db.d.ts.map +1 -1
- package/dist/db/create_db.js +1 -1
- package/dist/db/db.d.ts.map +1 -1
- package/dist/db/db_pg.d.ts.map +1 -1
- package/dist/db/db_pg.js +1 -1
- package/dist/db/db_pglite.d.ts.map +1 -1
- package/dist/db/db_pglite.js +1 -1
- package/dist/db/fact_ddl.d.ts.map +1 -1
- package/dist/db/fact_ddl.js +3 -3
- package/dist/db/fact_disk_storage.d.ts +1 -1
- package/dist/db/fact_disk_storage.d.ts.map +1 -1
- package/dist/db/fact_disk_storage.js +6 -6
- package/dist/db/fact_queries.d.ts +1 -1
- package/dist/db/fact_queries.d.ts.map +1 -1
- package/dist/db/fact_queries.js +2 -2
- package/dist/db/fact_store.d.ts +1 -1
- package/dist/db/fact_store.d.ts.map +1 -1
- package/dist/db/fact_store.js +9 -9
- package/dist/db/fact_store_errors.d.ts.map +1 -1
- package/dist/db/file_fact_url.d.ts +1 -1
- package/dist/db/file_fact_url.d.ts.map +1 -1
- package/dist/db/file_fact_url.js +1 -1
- package/dist/db/migrate.d.ts.map +1 -1
- package/dist/db/pg_error.d.ts.map +1 -1
- package/dist/db/query_deps.d.ts.map +1 -1
- package/dist/db/schema_ready.d.ts.map +1 -1
- package/dist/db/schema_ready.js +2 -2
- package/dist/db/status.d.ts.map +1 -1
- package/dist/db/status.js +6 -6
- package/dist/dev/setup.d.ts.map +1 -1
- package/dist/dev/setup.js +6 -6
- package/dist/env/dotenv.d.ts.map +1 -1
- package/dist/env/load.d.ts.map +1 -1
- package/dist/env/resolve.d.ts.map +1 -1
- package/dist/hono_context.d.ts.map +1 -1
- package/dist/hono_context.js +2 -2
- package/dist/http/auth_shape.d.ts.map +1 -1
- package/dist/http/auth_shape.js +6 -6
- package/dist/http/client_ip.d.ts.map +1 -1
- package/dist/http/common_routes.d.ts.map +1 -1
- package/dist/http/common_routes.js +8 -8
- package/dist/http/db_routes.d.ts.map +1 -1
- package/dist/http/db_routes.js +27 -23
- package/dist/http/error_schemas.d.ts +1 -1
- package/dist/http/error_schemas.d.ts.map +1 -1
- package/dist/http/error_schemas.js +13 -13
- package/dist/http/jsonrpc.d.ts.map +1 -1
- package/dist/http/jsonrpc.js +9 -9
- package/dist/http/jsonrpc_errors.d.ts.map +1 -1
- package/dist/http/jsonrpc_errors.js +21 -21
- package/dist/http/jsonrpc_helpers.d.ts.map +1 -1
- package/dist/http/jsonrpc_helpers.js +7 -7
- package/dist/http/middleware_spec.d.ts.map +1 -1
- package/dist/http/origin.d.ts.map +1 -1
- package/dist/http/pending_effects.d.ts.map +1 -1
- package/dist/http/proxy.d.ts.map +1 -1
- package/dist/http/proxy.js +1 -1
- package/dist/http/route_spec.d.ts.map +1 -1
- package/dist/http/route_spec.js +6 -6
- package/dist/http/schema_helpers.d.ts.map +1 -1
- package/dist/http/schema_helpers.js +1 -1
- package/dist/http/surface.d.ts.map +1 -1
- package/dist/http/surface.js +11 -11
- package/dist/http/surface_query.d.ts.map +1 -1
- package/dist/http/surface_query.js +1 -1
- package/dist/primitive_schemas.d.ts.map +1 -1
- package/dist/primitive_schemas.js +1 -1
- package/dist/rate_limiter.d.ts.map +1 -1
- package/dist/rate_limiter.js +4 -4
- package/dist/realtime/sse.d.ts.map +1 -1
- package/dist/realtime/sse.js +2 -2
- package/dist/realtime/sse_auth_guard.d.ts +4 -4
- package/dist/realtime/sse_auth_guard.d.ts.map +1 -1
- package/dist/realtime/sse_auth_guard.js +8 -8
- package/dist/realtime/subscriber_registry.d.ts.map +1 -1
- package/dist/runtime/deno.d.ts.map +1 -1
- package/dist/runtime/deno.js +7 -7
- package/dist/runtime/deps.d.ts.map +1 -1
- package/dist/runtime/fs.d.ts.map +1 -1
- package/dist/runtime/mock.d.ts.map +1 -1
- package/dist/runtime/mock.js +3 -3
- package/dist/runtime/node.d.ts.map +1 -1
- package/dist/runtime/node.js +7 -7
- package/dist/schema_meta.d.ts.map +1 -1
- package/dist/server/app_backend.d.ts +3 -3
- package/dist/server/app_backend.d.ts.map +1 -1
- package/dist/server/app_backend.js +3 -3
- package/dist/server/app_server.d.ts +6 -6
- package/dist/server/app_server.d.ts.map +1 -1
- package/dist/server/app_server.js +32 -32
- package/dist/server/app_server_context.d.ts.map +1 -1
- package/dist/server/env.d.ts.map +1 -1
- package/dist/server/env.js +9 -9
- package/dist/server/fact_write.d.ts +1 -1
- package/dist/server/fact_write.d.ts.map +1 -1
- package/dist/server/fact_write.js +2 -1
- package/dist/server/file_fact_fetcher.d.ts.map +1 -1
- package/dist/server/file_fact_fetcher.js +1 -1
- package/dist/server/serve_fact_route.d.ts.map +1 -1
- package/dist/server/serve_fact_route.js +15 -13
- package/dist/server/startup.d.ts.map +1 -1
- package/dist/server/static.d.ts.map +1 -1
- package/dist/server/validate_nginx.js +1 -1
- package/dist/server/x_accel.d.ts.map +1 -1
- package/dist/server/x_accel.js +1 -1
- package/dist/testing/CLAUDE.md +2 -2
- package/dist/testing/admin_integration.d.ts.map +1 -1
- package/dist/testing/admin_integration.js +62 -62
- package/dist/testing/adversarial_404.d.ts.map +1 -1
- package/dist/testing/adversarial_404.js +1 -1
- package/dist/testing/adversarial_headers.d.ts.map +1 -1
- package/dist/testing/adversarial_headers.js +15 -15
- package/dist/testing/adversarial_input.d.ts.map +1 -1
- package/dist/testing/adversarial_input.js +22 -22
- package/dist/testing/app_server.d.ts.map +1 -1
- package/dist/testing/app_server.js +32 -32
- package/dist/testing/assertions.d.ts.map +1 -1
- package/dist/testing/attack_surface.d.ts.map +1 -1
- package/dist/testing/attack_surface.js +12 -12
- package/dist/testing/audit_completeness.d.ts.map +1 -1
- package/dist/testing/audit_completeness.js +41 -41
- package/dist/testing/audit_drift_guard.d.ts +3 -1
- package/dist/testing/audit_drift_guard.d.ts.map +1 -1
- package/dist/testing/audit_drift_guard.js +12 -6
- package/dist/testing/auth_apps.d.ts.map +1 -1
- package/dist/testing/auth_apps.js +4 -4
- package/dist/testing/bootstrap_success.d.ts.map +1 -1
- package/dist/testing/bootstrap_success.js +11 -11
- package/dist/testing/connection_closer_helpers.d.ts.map +1 -1
- package/dist/testing/connection_closer_helpers.js +1 -1
- package/dist/testing/cross_backend/account_lifecycle.d.ts.map +1 -1
- package/dist/testing/cross_backend/account_lifecycle.js +1 -1
- package/dist/testing/cross_backend/action_manifest.d.ts.map +1 -1
- package/dist/testing/cross_backend/action_manifest.js +4 -4
- package/dist/testing/cross_backend/action_manifest_parity.d.ts.map +1 -1
- package/dist/testing/cross_backend/actor_lookup.d.ts.map +1 -1
- package/dist/testing/cross_backend/actor_lookup.js +3 -3
- package/dist/testing/cross_backend/actor_search.d.ts.map +1 -1
- package/dist/testing/cross_backend/actor_search.js +5 -5
- package/dist/testing/cross_backend/app_settings.d.ts.map +1 -1
- package/dist/testing/cross_backend/app_settings.js +6 -6
- package/dist/testing/cross_backend/backend_config.d.ts.map +1 -1
- package/dist/testing/cross_backend/bench/bench_report.d.ts.map +1 -1
- package/dist/testing/cross_backend/bench/bench_report.js +5 -5
- package/dist/testing/cross_backend/bench/run_cross_impl_bench.d.ts.map +1 -1
- package/dist/testing/cross_backend/bench/run_cross_impl_bench.js +2 -2
- package/dist/testing/cross_backend/bench/scenario.d.ts.map +1 -1
- package/dist/testing/cross_backend/bench/scenario.js +1 -1
- package/dist/testing/cross_backend/body_size.d.ts.map +1 -1
- package/dist/testing/cross_backend/body_size.js +1 -1
- package/dist/testing/cross_backend/bootstrap_backend.d.ts.map +1 -1
- package/dist/testing/cross_backend/bootstrap_backend.js +2 -2
- package/dist/testing/cross_backend/build_test_backend_paths.js +1 -1
- package/dist/testing/cross_backend/capabilities.js +2 -2
- package/dist/testing/cross_backend/cell_cross_helpers.d.ts.map +1 -1
- package/dist/testing/cross_backend/cell_crud.d.ts.map +1 -1
- package/dist/testing/cross_backend/cell_crud.js +5 -2
- package/dist/testing/cross_backend/cell_gated_create.d.ts.map +1 -1
- package/dist/testing/cross_backend/cell_gated_create.js +8 -7
- package/dist/testing/cross_backend/cell_grant_role.d.ts.map +1 -1
- package/dist/testing/cross_backend/cell_grant_role.js +2 -2
- package/dist/testing/cross_backend/cell_relations.d.ts.map +1 -1
- package/dist/testing/cross_backend/cell_relations.js +13 -13
- package/dist/testing/cross_backend/conformance_case.d.ts.map +1 -1
- package/dist/testing/cross_backend/conformance_case.js +11 -11
- package/dist/testing/cross_backend/conformance_table.d.ts.map +1 -1
- package/dist/testing/cross_backend/conformance_table.js +11 -11
- package/dist/testing/cross_backend/cookie_attributes.d.ts.map +1 -1
- package/dist/testing/cross_backend/cookie_attributes.js +4 -4
- package/dist/testing/cross_backend/create_cross_backend_global_setup.d.ts +1 -1
- package/dist/testing/cross_backend/create_cross_backend_global_setup.d.ts.map +1 -1
- package/dist/testing/cross_backend/create_cross_backend_global_setup.js +1 -1
- package/dist/testing/cross_backend/create_dual_spawn_global_setup.d.ts +1 -1
- package/dist/testing/cross_backend/create_dual_spawn_global_setup.d.ts.map +1 -1
- package/dist/testing/cross_backend/create_dual_spawn_global_setup.js +1 -1
- package/dist/testing/cross_backend/credential_header_robustness.js +1 -1
- package/dist/testing/cross_backend/default_backend_configs.d.ts.map +1 -1
- package/dist/testing/cross_backend/default_backend_configs.js +12 -12
- package/dist/testing/cross_backend/default_spine_surface.d.ts.map +1 -1
- package/dist/testing/cross_backend/default_spine_surface.js +9 -9
- package/dist/testing/cross_backend/fact_serving.d.ts.map +1 -1
- package/dist/testing/cross_backend/fact_serving.js +2 -2
- package/dist/testing/cross_backend/full_spine_mount.d.ts.map +1 -1
- package/dist/testing/cross_backend/full_spine_mount.js +4 -4
- package/dist/testing/cross_backend/identity_parity.d.ts.map +1 -1
- package/dist/testing/cross_backend/identity_parity.js +28 -24
- package/dist/testing/cross_backend/in_process_setup.d.ts.map +1 -1
- package/dist/testing/cross_backend/in_process_setup.js +9 -9
- package/dist/testing/cross_backend/login_security.d.ts.map +1 -1
- package/dist/testing/cross_backend/login_security.js +2 -2
- package/dist/testing/cross_backend/make_cross_backend_project.d.ts +1 -1
- package/dist/testing/cross_backend/make_cross_backend_project.d.ts.map +1 -1
- package/dist/testing/cross_backend/make_cross_backend_project.js +3 -3
- package/dist/testing/cross_backend/method_coverage.d.ts.map +1 -1
- package/dist/testing/cross_backend/origin.d.ts.map +1 -1
- package/dist/testing/cross_backend/origin.js +4 -4
- package/dist/testing/cross_backend/peer_ping_ws.d.ts.map +1 -1
- package/dist/testing/cross_backend/peer_ping_ws.js +6 -6
- package/dist/testing/cross_backend/ready.d.ts.map +1 -1
- package/dist/testing/cross_backend/role_grant_offer_enumeration.d.ts.map +1 -1
- package/dist/testing/cross_backend/role_grant_offer_enumeration.js +1 -1
- package/dist/testing/cross_backend/role_grant_offer_notification_ws.d.ts.map +1 -1
- package/dist/testing/cross_backend/role_grant_offer_notification_ws.js +1 -1
- package/dist/testing/cross_backend/role_grant_participation.d.ts.map +1 -1
- package/dist/testing/cross_backend/rust_spine_stub_backend_config.d.ts.map +1 -1
- package/dist/testing/cross_backend/rust_spine_stub_backend_config.js +5 -5
- package/dist/testing/cross_backend/setup.d.ts.map +1 -1
- package/dist/testing/cross_backend/setup.js +36 -36
- package/dist/testing/cross_backend/spawn_backend.d.ts.map +1 -1
- package/dist/testing/cross_backend/spawn_backend.js +1 -1
- package/dist/testing/cross_backend/sse_round_trip.d.ts.map +1 -1
- package/dist/testing/cross_backend/sse_round_trip.js +10 -7
- package/dist/testing/cross_backend/standard.d.ts.map +1 -1
- package/dist/testing/cross_backend/standard.js +5 -5
- package/dist/testing/cross_backend/testing_backdoor.d.ts.map +1 -1
- package/dist/testing/cross_backend/testing_backdoor.js +7 -7
- package/dist/testing/cross_backend/testing_reset_actions.d.ts.map +1 -1
- package/dist/testing/cross_backend/testing_reset_actions.js +24 -23
- package/dist/testing/cross_backend/testing_server_bun.d.ts.map +1 -1
- package/dist/testing/cross_backend/testing_server_bun.js +3 -3
- package/dist/testing/cross_backend/testing_server_core.d.ts.map +1 -1
- package/dist/testing/cross_backend/testing_server_core.js +1 -1
- package/dist/testing/cross_backend/testing_server_deno.d.ts.map +1 -1
- package/dist/testing/cross_backend/testing_server_deno.js +1 -1
- package/dist/testing/cross_backend/testing_server_node.d.ts.map +1 -1
- package/dist/testing/cross_backend/testing_server_node.js +3 -3
- package/dist/testing/cross_backend/ts_spine_backend_config.d.ts.map +1 -1
- package/dist/testing/cross_backend/ts_spine_backend_config.js +13 -13
- package/dist/testing/cross_backend/ws_round_trip.d.ts.map +1 -1
- package/dist/testing/cross_backend/ws_round_trip.js +2 -2
- package/dist/testing/data_exposure.d.ts.map +1 -1
- package/dist/testing/data_exposure.js +8 -8
- package/dist/testing/db.d.ts.map +1 -1
- package/dist/testing/db.js +3 -3
- package/dist/testing/db_entities.d.ts.map +1 -1
- package/dist/testing/db_entities.js +1 -1
- package/dist/testing/entities.d.ts.map +1 -1
- package/dist/testing/entities.js +5 -5
- package/dist/testing/error_coverage.d.ts.map +1 -1
- package/dist/testing/integration.d.ts.map +1 -1
- package/dist/testing/integration.js +106 -106
- package/dist/testing/integration_helpers.d.ts.map +1 -1
- package/dist/testing/integration_helpers.js +3 -3
- package/dist/testing/middleware.d.ts.map +1 -1
- package/dist/testing/middleware.js +11 -11
- package/dist/testing/mock_fs.js +1 -1
- package/dist/testing/rate_limiting.d.ts.map +1 -1
- package/dist/testing/rate_limiting.js +23 -23
- package/dist/testing/role_grant_helpers.d.ts.map +1 -1
- package/dist/testing/role_grant_helpers.js +3 -3
- package/dist/testing/round_trip.d.ts.map +1 -1
- package/dist/testing/round_trip.js +6 -6
- package/dist/testing/rpc_attack_surface.d.ts.map +1 -1
- package/dist/testing/rpc_attack_surface.js +12 -12
- package/dist/testing/rpc_helpers.d.ts.map +1 -1
- package/dist/testing/rpc_helpers.js +11 -11
- package/dist/testing/rpc_round_trip.d.ts.map +1 -1
- package/dist/testing/rpc_round_trip.js +3 -3
- package/dist/testing/schema_generators.d.ts.map +1 -1
- package/dist/testing/schema_generators.js +3 -3
- package/dist/testing/schema_introspect.d.ts.map +1 -1
- package/dist/testing/schema_introspect.js +12 -12
- package/dist/testing/schema_parity.d.ts.map +1 -1
- package/dist/testing/schema_parity.js +7 -7
- package/dist/testing/schema_ready_fixture.d.ts.map +1 -1
- package/dist/testing/sse_round_trip.d.ts.map +1 -1
- package/dist/testing/sse_round_trip.js +8 -8
- package/dist/testing/standard.d.ts.map +1 -1
- package/dist/testing/standard.js +8 -8
- package/dist/testing/stubs.d.ts +6 -6
- package/dist/testing/stubs.d.ts.map +1 -1
- package/dist/testing/stubs.js +26 -23
- package/dist/testing/surface_invariants.d.ts.map +1 -1
- package/dist/testing/surface_invariants.js +5 -5
- package/dist/testing/testing_rate_limiter.d.ts.map +1 -1
- package/dist/testing/transports/bootstrap.d.ts.map +1 -1
- package/dist/testing/transports/bootstrap.js +4 -4
- package/dist/testing/transports/fetch_transport.d.ts.map +1 -1
- package/dist/testing/transports/sse_frame_reader.d.ts.map +1 -1
- package/dist/testing/transports/sse_transport.js +1 -1
- package/dist/testing/transports/ws_client.d.ts.map +1 -1
- package/dist/testing/transports/ws_client.js +1 -1
- package/dist/testing/transports/ws_transport.js +4 -4
- package/dist/testing/ws_round_trip.d.ts.map +1 -1
- package/dist/testing/ws_round_trip.js +21 -21
- package/dist/ui/AccountSessions.svelte +11 -11
- package/dist/ui/AdminAccounts.svelte +10 -10
- package/dist/ui/AdminAuditLog.svelte +14 -14
- package/dist/ui/AdminInvites.svelte +13 -13
- package/dist/ui/AdminOverview.svelte +22 -22
- package/dist/ui/AdminRoleGrantHistory.svelte +11 -11
- package/dist/ui/AdminSessions.svelte +12 -12
- package/dist/ui/AdminSettings.svelte +1 -1
- package/dist/ui/AdminSurface.svelte +3 -3
- package/dist/ui/AppShell.svelte +8 -8
- package/dist/ui/AppShell.svelte.d.ts.map +1 -1
- package/dist/ui/BootstrapForm.svelte +9 -9
- package/dist/ui/CLAUDE.md +1 -1
- package/dist/ui/ColumnLayout.svelte +2 -2
- package/dist/ui/ColumnLayout.svelte.d.ts.map +1 -1
- package/dist/ui/ConfirmButton.svelte +8 -8
- package/dist/ui/ConfirmButton.svelte.d.ts.map +1 -1
- package/dist/ui/Datatable.svelte +6 -6
- package/dist/ui/Datatable.svelte.d.ts.map +1 -1
- package/dist/ui/LoginForm.svelte +6 -6
- package/dist/ui/LogoutButton.svelte +2 -2
- package/dist/ui/LogoutButton.svelte.d.ts.map +1 -1
- package/dist/ui/MenuLink.svelte +5 -5
- package/dist/ui/MenuLink.svelte.d.ts.map +1 -1
- package/dist/ui/OpenSignupToggle.svelte +2 -2
- package/dist/ui/PopoverButton.svelte +10 -10
- package/dist/ui/PopoverButton.svelte.d.ts.map +1 -1
- package/dist/ui/RoleGrantOfferForm.svelte +8 -11
- package/dist/ui/RoleGrantOfferForm.svelte.d.ts.map +1 -1
- package/dist/ui/RoleGrantOfferHistory.svelte +11 -11
- package/dist/ui/RoleGrantOfferHistory.svelte.d.ts.map +1 -1
- package/dist/ui/RoleGrantOfferInbox.svelte +6 -6
- package/dist/ui/RoleGrantOfferInbox.svelte.d.ts.map +1 -1
- package/dist/ui/SignupForm.svelte +9 -9
- package/dist/ui/SurfaceExplorer.svelte +11 -11
- package/dist/ui/SurfaceExplorer.svelte.d.ts.map +1 -1
- package/dist/ui/account_sessions_state.svelte.d.ts.map +1 -1
- package/dist/ui/admin_accounts_state.svelte.d.ts.map +1 -1
- package/dist/ui/admin_accounts_state.svelte.js +2 -2
- package/dist/ui/admin_invites_state.svelte.d.ts.map +1 -1
- package/dist/ui/admin_rpc_adapters.d.ts.map +1 -1
- package/dist/ui/admin_rpc_adapters.js +5 -5
- package/dist/ui/admin_sessions_state.svelte.d.ts.map +1 -1
- package/dist/ui/app_settings_state.svelte.d.ts.map +1 -1
- package/dist/ui/async_slot.svelte.d.ts.map +1 -1
- package/dist/ui/audit_log_state.svelte.d.ts.map +1 -1
- package/dist/ui/audit_log_state.svelte.js +1 -1
- package/dist/ui/auth_state.svelte.js +4 -4
- package/dist/ui/form_state.svelte.d.ts.map +1 -1
- package/dist/ui/format_scope.d.ts.map +1 -1
- package/dist/ui/keyed_async_slot.svelte.d.ts.map +1 -1
- package/dist/ui/popover.svelte.d.ts.map +1 -1
- package/dist/ui/popover.svelte.js +1 -1
- package/dist/ui/position_helpers.js +1 -1
- package/dist/ui/role_grant_offers_state.svelte.d.ts.map +1 -1
- package/dist/ui/role_grant_offers_state.svelte.js +1 -1
- package/dist/ui/table_state.svelte.d.ts.map +1 -1
- package/dist/ui/ui_fetch.d.ts.map +1 -1
- package/dist/ui/ui_format.js +2 -2
- package/package.json +13 -12
|
@@ -28,7 +28,7 @@ import { rpc_action } from '../actions/action_rpc.js';
|
|
|
28
28
|
import { query_actor_search } from './actor_search_queries.js';
|
|
29
29
|
import { query_account_has_global_role } from './role_grant_queries.js';
|
|
30
30
|
import { ROLE_ADMIN } from './role_schema.js';
|
|
31
|
-
import { ACTOR_SEARCH_LIMIT_DEFAULT, ERROR_ACTOR_SEARCH_SCOPE_REQUIRED, actor_search_action_spec
|
|
31
|
+
import { ACTOR_SEARCH_LIMIT_DEFAULT, ERROR_ACTOR_SEARCH_SCOPE_REQUIRED, actor_search_action_spec } from './actor_search_action_specs.js';
|
|
32
32
|
export const create_actor_search_actions = (_deps) => {
|
|
33
33
|
const handler = async (input, ctx) => {
|
|
34
34
|
if (!input.scope_ids || input.scope_ids.length === 0) {
|
|
@@ -37,14 +37,14 @@ export const create_actor_search_actions = (_deps) => {
|
|
|
37
37
|
const is_admin = await query_account_has_global_role(ctx, ctx.auth.account.id, ROLE_ADMIN);
|
|
38
38
|
if (!is_admin) {
|
|
39
39
|
throw jsonrpc_errors.invalid_params('scope_ids required for non-admin callers', {
|
|
40
|
-
reason: ERROR_ACTOR_SEARCH_SCOPE_REQUIRED
|
|
40
|
+
reason: ERROR_ACTOR_SEARCH_SCOPE_REQUIRED
|
|
41
41
|
});
|
|
42
42
|
}
|
|
43
43
|
}
|
|
44
44
|
const rows = await query_actor_search(ctx, {
|
|
45
45
|
query: input.query,
|
|
46
46
|
scope_ids: input.scope_ids,
|
|
47
|
-
limit: input.limit ?? ACTOR_SEARCH_LIMIT_DEFAULT
|
|
47
|
+
limit: input.limit ?? ACTOR_SEARCH_LIMIT_DEFAULT
|
|
48
48
|
});
|
|
49
49
|
return {
|
|
50
50
|
actors: rows.map((row) => {
|
|
@@ -52,9 +52,9 @@ export const create_actor_search_actions = (_deps) => {
|
|
|
52
52
|
return {
|
|
53
53
|
id: row.id,
|
|
54
54
|
username: row.username,
|
|
55
|
-
...(display_name ? { display_name } : {})
|
|
55
|
+
...(display_name ? { display_name } : {})
|
|
56
56
|
};
|
|
57
|
-
})
|
|
57
|
+
})
|
|
58
58
|
};
|
|
59
59
|
};
|
|
60
60
|
return [rpc_action(actor_search_action_spec, handler)];
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"actor_search_queries.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/actor_search_queries.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAEH,OAAO,KAAK,
|
|
1
|
+
{"version":3,"file":"actor_search_queries.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/actor_search_queries.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,wBAAwB,CAAC;AAEnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAEhE,uCAAuC;AACvC,MAAM,WAAW,qBAAqB;IACrC,0FAA0F;IAC1F,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,SAAS,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC;IAChC,8EAA8E;IAC9E,KAAK,EAAE,MAAM,CAAC;CACd;AASD;;;GAGG;AACH,eAAO,MAAM,kBAAkB,GAC9B,MAAM,SAAS,EACf,OAAO,qBAAqB,KAC1B,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAmC/B,CAAC"}
|
|
@@ -79,7 +79,7 @@ export type AdminSessionListInput = z.infer<typeof AdminSessionListInput>;
|
|
|
79
79
|
/** Output for `admin_session_list`. Cross-account listing; fan-out already scoped by role auth. */
|
|
80
80
|
export declare const AdminSessionListOutput: z.ZodObject<{
|
|
81
81
|
sessions: z.ZodArray<z.ZodObject<{
|
|
82
|
-
id: z.ZodString
|
|
82
|
+
id: z.core.$ZodBranded<z.ZodString, "SessionId", "out">;
|
|
83
83
|
account_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
|
|
84
84
|
created_at: z.ZodString;
|
|
85
85
|
expires_at: z.ZodString;
|
|
@@ -425,7 +425,7 @@ export declare const admin_session_list_action_spec: {
|
|
|
425
425
|
}, z.core.$strict>>;
|
|
426
426
|
output: z.ZodObject<{
|
|
427
427
|
sessions: z.ZodArray<z.ZodObject<{
|
|
428
|
-
id: z.ZodString
|
|
428
|
+
id: z.core.$ZodBranded<z.ZodString, "SessionId", "out">;
|
|
429
429
|
account_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
|
|
430
430
|
created_at: z.ZodString;
|
|
431
431
|
expires_at: z.ZodString;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"admin_action_specs.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/admin_action_specs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,
|
|
1
|
+
{"version":3,"file":"admin_action_specs.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/admin_action_specs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAiB3E,+BAA+B;AAC/B,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAE5C,8CAA8C;AAC9C,eAAO,MAAM,gCAAgC,KAAK,CAAC;AACnD,0CAA0C;AAC1C,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAIhD,sCAAsC;AACtC,eAAO,MAAM,qBAAqB;;;;;mBAoBrB,CAAC;AACd,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE1E,uCAAuC;AACvC,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAGjC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E,sCAAsC;AACtC,eAAO,MAAM,qBAAqB;;mBAIrB,CAAC;AACd,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE1E,mGAAmG;AACnG,eAAO,MAAM,sBAAsB;;;;;;;;;kBAEjC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E,4CAA4C;AAC5C,eAAO,MAAM,0BAA0B;;;kBAGrC,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAEpF,6CAA6C;AAC7C,eAAO,MAAM,2BAA2B;;;kBAGtC,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEtF,0CAA0C;AAC1C,eAAO,MAAM,wBAAwB;;;kBAGnC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEhF,2CAA2C;AAC3C,eAAO,MAAM,yBAAyB;;;kBAGpC,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAElF;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;mBA2BjB,CAAC;AACd,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,mCAAmC;AACnC,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;kBAE7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE,gDAAgD;AAChD,eAAO,MAAM,6BAA6B;;;;mBAgB7B,CAAC;AACd,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAE1F,iDAAiD;AACjD,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;kBAEzC,CAAC;AACH,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAE5F,wFAAwF;AACxF,eAAO,MAAM,iBAAiB;;;;kBAS3B,CAAC;AACJ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,kCAAkC;AAClC,eAAO,MAAM,kBAAkB;;;;;;;;;;;kBAG7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE,+BAA+B;AAC/B,eAAO,MAAM,eAAe;;mBAIf,CAAC;AACd,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,2FAA2F;AAC3F,eAAO,MAAM,gBAAgB;;;;;;;;;;;;kBAE3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,iCAAiC;AACjC,eAAO,MAAM,iBAAiB;;;kBAG5B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,kCAAkC;AAClC,eAAO,MAAM,kBAAkB;;kBAE7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE,oCAAoC;AACpC,eAAO,MAAM,mBAAmB;;mBAInB,CAAC;AACd,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,qCAAqC;AACrC,eAAO,MAAM,oBAAoB;;;;;;;kBAE/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE,uCAAuC;AACvC,eAAO,MAAM,sBAAsB;;;kBAGjC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E,wCAAwC;AACxC,eAAO,MAAM,uBAAuB;;;;;;;;kBAGlC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,EAAG,qBAA8B,CAAC;AAExE;;;;;;;;;GASG;AACH,eAAO,MAAM,0BAA0B,EAAG,sBAA+B,CAAC;AAE1E;;;;;;;;;GASG;AACH,eAAO,MAAM,8BAA8B,EAAG,0BAAmC,CAAC;AAElF;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB;;;mBAOlB,CAAC;AACd,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE,mCAAmC;AACnC,eAAO,MAAM,mBAAmB;;;kBAG9B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,0EAA0E;AAC1E,eAAO,MAAM,iBAAiB;;;;kBAM5B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,kCAAkC;AAClC,eAAO,MAAM,kBAAkB;;;kBAG7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB;;;kBAG/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE,qCAAqC;AACrC,eAAO,MAAM,qBAAqB;;;kBAGhC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAI1E;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWN,CAAC;AAEtC;;;;GAIG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;CAWN,CAAC;AAEtC,eAAO,MAAM,oCAAoC;;;;;;;;;;;;;;;;;;;;;CAWZ,CAAC;AAEtC,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;CAWV,CAAC;AAEtC;;;;;;;GAOG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWF,CAAC;AAEtC;;;;GAIG;AACH,eAAO,MAAM,wCAAwC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWhB,CAAC;AAEtC,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWD,CAAC;AAEtC;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWC,CAAC;AAEtC,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;CAWD,CAAC;AAEtC;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;CAYF,CAAC;AAEtC;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;CAiBD,CAAC;AAEtC;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;CAYJ,CAAC;AAEtC,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;CAUJ,CAAC;AAEtC,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;CAWP,CAAC;AAEtC;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,EAAE,KAAK,CAAC,yBAAyB,CAenE,CAAC"}
|
|
@@ -22,7 +22,7 @@ import { CREDENTIAL_TYPE_DAEMON_TOKEN } from './credential_type_schema.js';
|
|
|
22
22
|
import { AdminAccountEntryJson } from './account_schema.js';
|
|
23
23
|
import { Email, Username } from '../primitive_schemas.js';
|
|
24
24
|
import { ActingActor } from '../http/auth_shape.js';
|
|
25
|
-
import { AdminSessionJson, AUDIT_LOG_DEFAULT_LIMIT, AuditEventTypeName, AuditLogEventWithUsernamesJson, AuditOutcome, RoleGrantHistoryEventJson
|
|
25
|
+
import { AdminSessionJson, AUDIT_LOG_DEFAULT_LIMIT, AuditEventTypeName, AuditLogEventWithUsernamesJson, AuditOutcome, RoleGrantHistoryEventJson } from './audit_log_schema.js';
|
|
26
26
|
import { InviteJson, InviteWithUsernamesJson } from './invite_schema.js';
|
|
27
27
|
import { AppSettingsWithUsernameJson } from './app_settings_schema.js';
|
|
28
28
|
/** Max audit-log page size. */
|
|
@@ -43,48 +43,48 @@ export const AdminAccountListInput = z
|
|
|
43
43
|
.max(ADMIN_ACCOUNT_LIST_LIMIT_MAX)
|
|
44
44
|
.nullish()
|
|
45
45
|
.meta({
|
|
46
|
-
description: `Max accounts to return (default ${ADMIN_ACCOUNT_LIST_DEFAULT_LIMIT}, max ${ADMIN_ACCOUNT_LIST_LIMIT_MAX})
|
|
46
|
+
description: `Max accounts to return (default ${ADMIN_ACCOUNT_LIST_DEFAULT_LIMIT}, max ${ADMIN_ACCOUNT_LIST_LIMIT_MAX}).`
|
|
47
47
|
}),
|
|
48
48
|
offset: z.number().int().min(0).nullish().meta({ description: 'Pagination offset.' }),
|
|
49
49
|
include_deleted: z.boolean().nullish().meta({
|
|
50
|
-
description: 'Include soft-deleted (tombstoned) accounts in the listing. Default false (active only). Used by the admin UI to surface accounts for reactivation via `account_undelete`.'
|
|
51
|
-
})
|
|
50
|
+
description: 'Include soft-deleted (tombstoned) accounts in the listing. Default false (active only). Used by the admin UI to surface accounts for reactivation via `account_undelete`.'
|
|
51
|
+
})
|
|
52
52
|
})
|
|
53
53
|
.default({});
|
|
54
54
|
/** Output for `admin_account_list`. */
|
|
55
55
|
export const AdminAccountListOutput = z.strictObject({
|
|
56
56
|
accounts: z.array(AdminAccountEntryJson),
|
|
57
|
-
grantable_roles: z.array(RoleName)
|
|
57
|
+
grantable_roles: z.array(RoleName)
|
|
58
58
|
});
|
|
59
59
|
/** Input for `admin_session_list`. */
|
|
60
60
|
export const AdminSessionListInput = z
|
|
61
61
|
.strictObject({
|
|
62
|
-
acting: ActingActor
|
|
62
|
+
acting: ActingActor
|
|
63
63
|
})
|
|
64
64
|
.default({});
|
|
65
65
|
/** Output for `admin_session_list`. Cross-account listing; fan-out already scoped by role auth. */
|
|
66
66
|
export const AdminSessionListOutput = z.strictObject({
|
|
67
|
-
sessions: z.array(AdminSessionJson)
|
|
67
|
+
sessions: z.array(AdminSessionJson)
|
|
68
68
|
});
|
|
69
69
|
/** Input for `admin_session_revoke_all`. */
|
|
70
70
|
export const AdminSessionRevokeAllInput = z.strictObject({
|
|
71
71
|
account_id: Uuid.meta({ description: 'Account whose sessions to revoke.' }),
|
|
72
|
-
acting: ActingActor
|
|
72
|
+
acting: ActingActor
|
|
73
73
|
});
|
|
74
74
|
/** Output for `admin_session_revoke_all`. */
|
|
75
75
|
export const AdminSessionRevokeAllOutput = z.strictObject({
|
|
76
76
|
ok: z.literal(true),
|
|
77
|
-
count: z.number()
|
|
77
|
+
count: z.number()
|
|
78
78
|
});
|
|
79
79
|
/** Input for `admin_token_revoke_all`. */
|
|
80
80
|
export const AdminTokenRevokeAllInput = z.strictObject({
|
|
81
81
|
account_id: Uuid.meta({ description: 'Account whose API tokens to revoke.' }),
|
|
82
|
-
acting: ActingActor
|
|
82
|
+
acting: ActingActor
|
|
83
83
|
});
|
|
84
84
|
/** Output for `admin_token_revoke_all`. */
|
|
85
85
|
export const AdminTokenRevokeAllOutput = z.strictObject({
|
|
86
86
|
ok: z.literal(true),
|
|
87
|
-
count: z.number()
|
|
87
|
+
count: z.number()
|
|
88
88
|
});
|
|
89
89
|
/**
|
|
90
90
|
* Input for `audit_log_list`. All filter fields are optional — omit for the
|
|
@@ -95,10 +95,10 @@ export const AdminTokenRevokeAllOutput = z.strictObject({
|
|
|
95
95
|
export const AuditLogListInput = z
|
|
96
96
|
.strictObject({
|
|
97
97
|
event_type: AuditEventTypeName.nullish().meta({
|
|
98
|
-
description: 'Filter by event type. Accepts builtin or consumer-registered names (regex-validated).'
|
|
98
|
+
description: 'Filter by event type. Accepts builtin or consumer-registered names (regex-validated).'
|
|
99
99
|
}),
|
|
100
100
|
outcome: AuditOutcome.nullish().meta({
|
|
101
|
-
description: 'Filter by outcome (`success` or `failure`).'
|
|
101
|
+
description: 'Filter by outcome (`success` or `failure`).'
|
|
102
102
|
}),
|
|
103
103
|
account_id: Uuid.nullish().meta({ description: 'Filter by actor account id.' }),
|
|
104
104
|
limit: z
|
|
@@ -108,18 +108,18 @@ export const AuditLogListInput = z
|
|
|
108
108
|
.max(AUDIT_LOG_LIST_LIMIT_MAX)
|
|
109
109
|
.nullish()
|
|
110
110
|
.meta({
|
|
111
|
-
description: `Max rows to return (default ${AUDIT_LOG_DEFAULT_LIMIT}, max ${AUDIT_LOG_LIST_LIMIT_MAX})
|
|
111
|
+
description: `Max rows to return (default ${AUDIT_LOG_DEFAULT_LIMIT}, max ${AUDIT_LOG_LIST_LIMIT_MAX}).`
|
|
112
112
|
}),
|
|
113
113
|
offset: z.number().int().min(0).nullish().meta({ description: 'Pagination offset.' }),
|
|
114
114
|
since_seq: z.number().int().min(0).nullish().meta({
|
|
115
|
-
description: 'Gap-fill from this seq forward. Used for SSE reconnection.'
|
|
115
|
+
description: 'Gap-fill from this seq forward. Used for SSE reconnection.'
|
|
116
116
|
}),
|
|
117
|
-
acting: ActingActor
|
|
117
|
+
acting: ActingActor
|
|
118
118
|
})
|
|
119
119
|
.default({});
|
|
120
120
|
/** Output for `audit_log_list`. */
|
|
121
121
|
export const AuditLogListOutput = z.strictObject({
|
|
122
|
-
events: z.array(AuditLogEventWithUsernamesJson)
|
|
122
|
+
events: z.array(AuditLogEventWithUsernamesJson)
|
|
123
123
|
});
|
|
124
124
|
/** Input for `audit_log_role_grant_history`. */
|
|
125
125
|
export const AuditLogRoleGrantHistoryInput = z
|
|
@@ -131,70 +131,70 @@ export const AuditLogRoleGrantHistoryInput = z
|
|
|
131
131
|
.max(AUDIT_LOG_LIST_LIMIT_MAX)
|
|
132
132
|
.nullish()
|
|
133
133
|
.meta({
|
|
134
|
-
description: `Max rows to return (default ${AUDIT_LOG_DEFAULT_LIMIT}, max ${AUDIT_LOG_LIST_LIMIT_MAX})
|
|
134
|
+
description: `Max rows to return (default ${AUDIT_LOG_DEFAULT_LIMIT}, max ${AUDIT_LOG_LIST_LIMIT_MAX}).`
|
|
135
135
|
}),
|
|
136
136
|
offset: z.number().int().min(0).nullish().meta({ description: 'Pagination offset.' }),
|
|
137
|
-
acting: ActingActor
|
|
137
|
+
acting: ActingActor
|
|
138
138
|
})
|
|
139
139
|
.default({});
|
|
140
140
|
/** Output for `audit_log_role_grant_history`. */
|
|
141
141
|
export const AuditLogRoleGrantHistoryOutput = z.strictObject({
|
|
142
|
-
events: z.array(RoleGrantHistoryEventJson)
|
|
142
|
+
events: z.array(RoleGrantHistoryEventJson)
|
|
143
143
|
});
|
|
144
144
|
/** Input for `invite_create`. At least one of `email` / `username` must be provided. */
|
|
145
145
|
export const InviteCreateInput = z
|
|
146
146
|
.strictObject({
|
|
147
147
|
email: Email.nullish().meta({ description: 'Invitee email.' }),
|
|
148
148
|
username: Username.nullish().meta({ description: 'Invitee username.' }),
|
|
149
|
-
acting: ActingActor
|
|
149
|
+
acting: ActingActor
|
|
150
150
|
})
|
|
151
151
|
.refine((v) => v.email != null || v.username != null, {
|
|
152
152
|
message: 'at least one of email or username is required',
|
|
153
|
-
path: ['email']
|
|
153
|
+
path: ['email']
|
|
154
154
|
});
|
|
155
155
|
/** Output for `invite_create`. */
|
|
156
156
|
export const InviteCreateOutput = z.strictObject({
|
|
157
157
|
ok: z.literal(true),
|
|
158
|
-
invite: InviteJson
|
|
158
|
+
invite: InviteJson
|
|
159
159
|
});
|
|
160
160
|
/** Input for `invite_list`. */
|
|
161
161
|
export const InviteListInput = z
|
|
162
162
|
.strictObject({
|
|
163
|
-
acting: ActingActor
|
|
163
|
+
acting: ActingActor
|
|
164
164
|
})
|
|
165
165
|
.default({});
|
|
166
166
|
/** Output for `invite_list`. Uses the enriched row including creator/claimer usernames. */
|
|
167
167
|
export const InviteListOutput = z.strictObject({
|
|
168
|
-
invites: z.array(InviteWithUsernamesJson)
|
|
168
|
+
invites: z.array(InviteWithUsernamesJson)
|
|
169
169
|
});
|
|
170
170
|
/** Input for `invite_delete`. */
|
|
171
171
|
export const InviteDeleteInput = z.strictObject({
|
|
172
172
|
invite_id: Uuid.meta({ description: 'Invite to delete. Must be unclaimed.' }),
|
|
173
|
-
acting: ActingActor
|
|
173
|
+
acting: ActingActor
|
|
174
174
|
});
|
|
175
175
|
/** Output for `invite_delete`. */
|
|
176
176
|
export const InviteDeleteOutput = z.strictObject({
|
|
177
|
-
ok: z.literal(true)
|
|
177
|
+
ok: z.literal(true)
|
|
178
178
|
});
|
|
179
179
|
/** Input for `app_settings_get`. */
|
|
180
180
|
export const AppSettingsGetInput = z
|
|
181
181
|
.strictObject({
|
|
182
|
-
acting: ActingActor
|
|
182
|
+
acting: ActingActor
|
|
183
183
|
})
|
|
184
184
|
.default({});
|
|
185
185
|
/** Output for `app_settings_get`. */
|
|
186
186
|
export const AppSettingsGetOutput = z.strictObject({
|
|
187
|
-
settings: AppSettingsWithUsernameJson
|
|
187
|
+
settings: AppSettingsWithUsernameJson
|
|
188
188
|
});
|
|
189
189
|
/** Input for `app_settings_update`. */
|
|
190
190
|
export const AppSettingsUpdateInput = z.strictObject({
|
|
191
191
|
open_signup: z.boolean().meta({ description: 'New value for the open signup toggle.' }),
|
|
192
|
-
acting: ActingActor
|
|
192
|
+
acting: ActingActor
|
|
193
193
|
});
|
|
194
194
|
/** Output for `app_settings_update`. */
|
|
195
195
|
export const AppSettingsUpdateOutput = z.strictObject({
|
|
196
196
|
ok: z.literal(true),
|
|
197
|
-
settings: AppSettingsWithUsernameJson
|
|
197
|
+
settings: AppSettingsWithUsernameJson
|
|
198
198
|
});
|
|
199
199
|
/**
|
|
200
200
|
* `data.reason` on `account_purge` when `confirm: true` is absent.
|
|
@@ -233,28 +233,28 @@ export const ERROR_CANNOT_DELETE_LAST_ADMIN = 'cannot_delete_last_admin';
|
|
|
233
233
|
export const AccountDeleteInput = z
|
|
234
234
|
.strictObject({
|
|
235
235
|
account_id: Uuid.nullish().meta({
|
|
236
|
-
description: 'Account to soft-delete. Omit for self-delete; another account requires admin.'
|
|
236
|
+
description: 'Account to soft-delete. Omit for self-delete; another account requires admin.'
|
|
237
237
|
}),
|
|
238
|
-
acting: ActingActor
|
|
238
|
+
acting: ActingActor
|
|
239
239
|
})
|
|
240
240
|
.default({});
|
|
241
241
|
/** Output for `account_delete`. */
|
|
242
242
|
export const AccountDeleteOutput = z.strictObject({
|
|
243
243
|
ok: z.literal(true),
|
|
244
|
-
deleted: z.boolean()
|
|
244
|
+
deleted: z.boolean()
|
|
245
245
|
});
|
|
246
246
|
/** Input for `account_purge` (hard, irreversible delete). Keeper-only. */
|
|
247
247
|
export const AccountPurgeInput = z.strictObject({
|
|
248
248
|
account_id: Uuid.meta({ description: 'Account to hard-purge.' }),
|
|
249
249
|
confirm: z.boolean().optional().meta({
|
|
250
|
-
description: 'Must be `true` — fail-loud guard against an accidental irreversible purge.'
|
|
250
|
+
description: 'Must be `true` — fail-loud guard against an accidental irreversible purge.'
|
|
251
251
|
}),
|
|
252
|
-
acting: ActingActor
|
|
252
|
+
acting: ActingActor
|
|
253
253
|
});
|
|
254
254
|
/** Output for `account_purge`. */
|
|
255
255
|
export const AccountPurgeOutput = z.strictObject({
|
|
256
256
|
ok: z.literal(true),
|
|
257
|
-
purged: z.boolean()
|
|
257
|
+
purged: z.boolean()
|
|
258
258
|
});
|
|
259
259
|
/**
|
|
260
260
|
* Input for `account_undelete` (reactivation). `account_id` is required —
|
|
@@ -264,12 +264,12 @@ export const AccountPurgeOutput = z.strictObject({
|
|
|
264
264
|
*/
|
|
265
265
|
export const AccountUndeleteInput = z.strictObject({
|
|
266
266
|
account_id: Uuid.meta({ description: 'Soft-deleted account to reactivate.' }),
|
|
267
|
-
acting: ActingActor
|
|
267
|
+
acting: ActingActor
|
|
268
268
|
});
|
|
269
269
|
/** Output for `account_undelete`. */
|
|
270
270
|
export const AccountUndeleteOutput = z.strictObject({
|
|
271
271
|
ok: z.literal(true),
|
|
272
|
-
undeleted: z.boolean()
|
|
272
|
+
undeleted: z.boolean()
|
|
273
273
|
});
|
|
274
274
|
// -- Action specs -----------------------------------------------------------
|
|
275
275
|
/**
|
|
@@ -288,7 +288,7 @@ export const admin_account_list_action_spec = {
|
|
|
288
288
|
output: AdminAccountListOutput,
|
|
289
289
|
async: true,
|
|
290
290
|
description: 'List all accounts with their actors, role_grants, and pending offers. Admin-only.',
|
|
291
|
-
rate_limit: 'account'
|
|
291
|
+
rate_limit: 'account'
|
|
292
292
|
};
|
|
293
293
|
/**
|
|
294
294
|
* `rate_limit: 'account'` bounds cross-account scraping of every active
|
|
@@ -305,7 +305,7 @@ export const admin_session_list_action_spec = {
|
|
|
305
305
|
output: AdminSessionListOutput,
|
|
306
306
|
async: true,
|
|
307
307
|
description: 'List every active auth session across all accounts. Admin-only.',
|
|
308
|
-
rate_limit: 'account'
|
|
308
|
+
rate_limit: 'account'
|
|
309
309
|
};
|
|
310
310
|
export const admin_session_revoke_all_action_spec = {
|
|
311
311
|
method: 'admin_session_revoke_all',
|
|
@@ -317,7 +317,7 @@ export const admin_session_revoke_all_action_spec = {
|
|
|
317
317
|
output: AdminSessionRevokeAllOutput,
|
|
318
318
|
async: true,
|
|
319
319
|
description: 'Revoke all sessions for an account. Admin-only.',
|
|
320
|
-
rate_limit: 'account'
|
|
320
|
+
rate_limit: 'account'
|
|
321
321
|
};
|
|
322
322
|
export const admin_token_revoke_all_action_spec = {
|
|
323
323
|
method: 'admin_token_revoke_all',
|
|
@@ -329,7 +329,7 @@ export const admin_token_revoke_all_action_spec = {
|
|
|
329
329
|
output: AdminTokenRevokeAllOutput,
|
|
330
330
|
async: true,
|
|
331
331
|
description: 'Revoke all API tokens for an account. Admin-only.',
|
|
332
|
-
rate_limit: 'account'
|
|
332
|
+
rate_limit: 'account'
|
|
333
333
|
};
|
|
334
334
|
/**
|
|
335
335
|
* `rate_limit: 'account'` bounds admin-side enumeration of the entire
|
|
@@ -349,7 +349,7 @@ export const audit_log_list_action_spec = {
|
|
|
349
349
|
output: AuditLogListOutput,
|
|
350
350
|
async: true,
|
|
351
351
|
description: 'List audit log events with optional filters. Admin-only.',
|
|
352
|
-
rate_limit: 'account'
|
|
352
|
+
rate_limit: 'account'
|
|
353
353
|
};
|
|
354
354
|
/**
|
|
355
355
|
* `rate_limit: 'account'` bounds admin-side enumeration of the role_grant
|
|
@@ -366,7 +366,7 @@ export const audit_log_role_grant_history_action_spec = {
|
|
|
366
366
|
output: AuditLogRoleGrantHistoryOutput,
|
|
367
367
|
async: true,
|
|
368
368
|
description: 'List role_grant grant and revoke events with usernames. Admin-only.',
|
|
369
|
-
rate_limit: 'account'
|
|
369
|
+
rate_limit: 'account'
|
|
370
370
|
};
|
|
371
371
|
export const invite_create_action_spec = {
|
|
372
372
|
method: 'invite_create',
|
|
@@ -378,7 +378,7 @@ export const invite_create_action_spec = {
|
|
|
378
378
|
output: InviteCreateOutput,
|
|
379
379
|
async: true,
|
|
380
380
|
description: 'Create an invite addressed to an email, username, or both. Admin-only.',
|
|
381
|
-
rate_limit: 'account'
|
|
381
|
+
rate_limit: 'account'
|
|
382
382
|
};
|
|
383
383
|
/**
|
|
384
384
|
* `rate_limit: 'account'` bounds admin-side scraping of the invite table —
|
|
@@ -396,7 +396,7 @@ export const invite_list_action_spec = {
|
|
|
396
396
|
output: InviteListOutput,
|
|
397
397
|
async: true,
|
|
398
398
|
description: 'List all invites with creator and claimer usernames. Admin-only.',
|
|
399
|
-
rate_limit: 'account'
|
|
399
|
+
rate_limit: 'account'
|
|
400
400
|
};
|
|
401
401
|
export const invite_delete_action_spec = {
|
|
402
402
|
method: 'invite_delete',
|
|
@@ -408,7 +408,7 @@ export const invite_delete_action_spec = {
|
|
|
408
408
|
output: InviteDeleteOutput,
|
|
409
409
|
async: true,
|
|
410
410
|
description: 'Delete an unclaimed invite. Admin-only.',
|
|
411
|
-
rate_limit: 'account'
|
|
411
|
+
rate_limit: 'account'
|
|
412
412
|
};
|
|
413
413
|
/**
|
|
414
414
|
* Soft-delete an account (reversible tombstone). Self-or-admin: the
|
|
@@ -427,7 +427,7 @@ export const account_delete_action_spec = {
|
|
|
427
427
|
output: AccountDeleteOutput,
|
|
428
428
|
async: true,
|
|
429
429
|
description: 'Soft-delete an account (reversible tombstone): blocks auth, revokes sessions/tokens, soft-deletes its actor(s). Self-service for own account; admin required to delete another.',
|
|
430
|
-
rate_limit: 'account'
|
|
430
|
+
rate_limit: 'account'
|
|
431
431
|
};
|
|
432
432
|
/**
|
|
433
433
|
* Hard-purge an account (keeper-gated, irreversible). Keeper credential
|
|
@@ -444,14 +444,14 @@ export const account_purge_action_spec = {
|
|
|
444
444
|
account: 'required',
|
|
445
445
|
actor: 'required',
|
|
446
446
|
roles: [ROLE_KEEPER],
|
|
447
|
-
credential_types: [CREDENTIAL_TYPE_DAEMON_TOKEN]
|
|
447
|
+
credential_types: [CREDENTIAL_TYPE_DAEMON_TOKEN]
|
|
448
448
|
},
|
|
449
449
|
side_effects: true,
|
|
450
450
|
input: AccountPurgeInput,
|
|
451
451
|
output: AccountPurgeOutput,
|
|
452
452
|
async: true,
|
|
453
453
|
description: 'Hard-purge an account (irreversible cascading delete). Keeper-only + explicit confirm. Audit ids survive; identity snapshotted in metadata.',
|
|
454
|
-
rate_limit: 'account'
|
|
454
|
+
rate_limit: 'account'
|
|
455
455
|
};
|
|
456
456
|
/**
|
|
457
457
|
* Reactivate a soft-deleted account (clears the tombstone). Admin-only —
|
|
@@ -471,7 +471,7 @@ export const account_undelete_action_spec = {
|
|
|
471
471
|
output: AccountUndeleteOutput,
|
|
472
472
|
async: true,
|
|
473
473
|
description: 'Reactivate a soft-deleted account (clears the deleted_at tombstone on the account + its actors). Admin-only. Does not restore revoked sessions/tokens — principals re-auth fresh.',
|
|
474
|
-
rate_limit: 'account'
|
|
474
|
+
rate_limit: 'account'
|
|
475
475
|
};
|
|
476
476
|
export const app_settings_get_action_spec = {
|
|
477
477
|
method: 'app_settings_get',
|
|
@@ -482,7 +482,7 @@ export const app_settings_get_action_spec = {
|
|
|
482
482
|
input: AppSettingsGetInput,
|
|
483
483
|
output: AppSettingsGetOutput,
|
|
484
484
|
async: true,
|
|
485
|
-
description: 'Read global app settings. Admin-only.'
|
|
485
|
+
description: 'Read global app settings. Admin-only.'
|
|
486
486
|
};
|
|
487
487
|
export const app_settings_update_action_spec = {
|
|
488
488
|
method: 'app_settings_update',
|
|
@@ -494,7 +494,7 @@ export const app_settings_update_action_spec = {
|
|
|
494
494
|
output: AppSettingsUpdateOutput,
|
|
495
495
|
async: true,
|
|
496
496
|
description: 'Update global app settings (currently just the open signup toggle). Admin-only.',
|
|
497
|
-
rate_limit: 'account'
|
|
497
|
+
rate_limit: 'account'
|
|
498
498
|
};
|
|
499
499
|
/**
|
|
500
500
|
* All admin action specs — a codegen-ready registry. Consumers spread this
|
|
@@ -516,5 +516,5 @@ export const all_admin_action_specs = [
|
|
|
516
516
|
account_purge_action_spec,
|
|
517
517
|
account_undelete_action_spec,
|
|
518
518
|
app_settings_get_action_spec,
|
|
519
|
-
app_settings_update_action_spec
|
|
519
|
+
app_settings_update_action_spec
|
|
520
520
|
];
|
|
@@ -31,7 +31,7 @@
|
|
|
31
31
|
import { type RpcAction } from '../actions/action_rpc.js';
|
|
32
32
|
import type { ConnectionCloser } from '../actions/connection_closer.js';
|
|
33
33
|
import { type RoleSchemaResult } from './role_schema.js';
|
|
34
|
-
import type {
|
|
34
|
+
import type { ActionFactoryDeps } from './deps.js';
|
|
35
35
|
/** Options for `create_admin_actions`. */
|
|
36
36
|
export interface AdminActionOptions {
|
|
37
37
|
/**
|
|
@@ -55,12 +55,12 @@ export interface AdminActionOptions {
|
|
|
55
55
|
/**
|
|
56
56
|
* Create the admin-only RPC actions.
|
|
57
57
|
*
|
|
58
|
-
* @param deps - `
|
|
58
|
+
* @param deps - `ActionFactoryDeps` (`log`, `audit`). `log` drives RPC-
|
|
59
59
|
* internal error logging; `audit.emit` writes audit rows via the captured
|
|
60
|
-
* pool. The bound emitter encapsulates
|
|
61
|
-
*
|
|
60
|
+
* pool. The bound emitter encapsulates listener fan-out and the optional
|
|
61
|
+
* `AuditLogConfig`.
|
|
62
62
|
* @param options - role schema for `grantable_roles` derivation
|
|
63
63
|
* @returns the `RpcAction` array to spread into a `create_rpc_endpoint` call
|
|
64
64
|
*/
|
|
65
|
-
export declare const create_admin_actions: (deps:
|
|
65
|
+
export declare const create_admin_actions: (deps: ActionFactoryDeps, options?: AdminActionOptions) => Array<RpcAction>;
|
|
66
66
|
//# sourceMappingURL=admin_actions.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"admin_actions.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/admin_actions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,
|
|
1
|
+
{"version":3,"file":"admin_actions.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/admin_actions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAuC,KAAK,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAC/F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAExE,OAAO,EAKN,KAAK,gBAAgB,EACrB,MAAM,kBAAkB,CAAC;AAyC1B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AA0DnD,0CAA0C;AAC1C,MAAM,WAAW,kBAAkB;IAClC;;;;;OAKG;IACH,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;CAC5C;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB,GAChC,MAAM,iBAAiB,EACvB,UAAS,kBAAuB,KAC9B,KAAK,CAAC,SAAS,CAwfjB,CAAC"}
|