@ninedeploy/schemas 0.10.6 → 0.16.1

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 NineDeploy
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 NineDeploy
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/accessGrants.d.ts

@@ -0,0 +1,156 @@
+import { z } from 'zod';
+/** Mirrors `accessGrantRole` in `@ninedeploy/db`. */
+export declare const accessGrantRole: z.ZodEnum<{
+    admin: "admin";
+    member: "member";
+    viewer: "viewer";
+}>;
+export type AccessGrantRole = z.infer<typeof accessGrantRole>;
+/**
+ * The uniqueness key stored in `access_grants.target_key`: `p:<project>`,
+ * `e:<environment>` or `pe:<project>:<environment>`. SQLite unique indexes
+ * treat NULLs as distinct, so the pair alone could not be unique.
+ */
+export declare function accessGrantTargetKey(target: {
+    projectId?: number | null;
+    environmentId?: number | null;
+}): string;
+/**
+ * POST /v1/workspaces/:wid/access-grants (workspace admin). Name the user by
+ * exactly one of `email` or `userId`, and target a project, an environment, or
+ * both (services linked to the project AND in the environment).
+ */
+export declare const accessGrantCreate: z.ZodObject<{
+    email: z.ZodOptional<z.ZodString>;
+    userId: z.ZodOptional<z.ZodNumber>;
+    projectId: z.ZodOptional<z.ZodNumber>;
+    environmentId: z.ZodOptional<z.ZodNumber>;
+    role: z.ZodEnum<{
+        admin: "admin";
+        member: "member";
+        viewer: "viewer";
+    }>;
+}, z.core.$strict>;
+export type AccessGrantCreate = z.infer<typeof accessGrantCreate>;
+/**
+ * PATCH /v1/workspaces/:wid/access-grants/:grantId: change the role, suspend
+ * or reinstate the grant, or both. `{role}` alone is the 0.15.0 contract and
+ * still means exactly that. `suspended: true` stops the grant counting (it
+ * stays listed, like a SCIM suspension); `false` makes it count again. The
+ * target and the user never change: revoke and grant again instead.
+ */
+export declare const accessGrantUpdate: z.ZodObject<{
+    role: z.ZodOptional<z.ZodEnum<{
+        admin: "admin";
+        member: "member";
+        viewer: "viewer";
+    }>>;
+    suspended: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+export type AccessGrantUpdate = z.infer<typeof accessGrantUpdate>;
+/** GET /v1/workspaces/:wid/access-grants query. Query strings arrive as text. */
+export declare const accessGrantListQuery: z.ZodObject<{
+    userId: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
+    projectId: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
+    environmentId: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
+}, z.core.$strict>;
+export type AccessGrantListQuery = z.infer<typeof accessGrantListQuery>;
+/** One grant as the workspace admin sees it. */
+export declare const accessGrant: z.ZodObject<{
+    id: z.ZodNumber;
+    workspaceId: z.ZodNumber;
+    user: z.ZodObject<{
+        id: z.ZodNumber;
+        email: z.ZodString;
+        name: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+    project: z.ZodNullable<z.ZodObject<{
+        id: z.ZodNumber;
+        name: z.ZodString;
+    }, z.core.$strip>>;
+    environment: z.ZodNullable<z.ZodObject<{
+        id: z.ZodNumber;
+        name: z.ZodString;
+    }, z.core.$strip>>;
+    role: z.ZodEnum<{
+        admin: "admin";
+        member: "member";
+        viewer: "viewer";
+    }>;
+    suspended: z.ZodBoolean;
+    createdAt: z.ZodString;
+    createdBy: z.ZodNullable<z.ZodObject<{
+        id: z.ZodNumber;
+        email: z.ZodString;
+    }, z.core.$strip>>;
+    isGuest: z.ZodBoolean;
+}, z.core.$strip>;
+export type AccessGrant = z.infer<typeof accessGrant>;
+/** How a user reaches a project, as GET /v1/projects/:id/access explains it. */
+export declare const projectAccessVia: z.ZodEnum<{
+    creator: "creator";
+    grant: "grant";
+    operator: "operator";
+    seat: "seat";
+}>;
+export type ProjectAccessVia = z.infer<typeof projectAccessVia>;
+/** GET /v1/projects/:id/access (project admin). */
+export declare const projectAccessEntry: z.ZodObject<{
+    user: z.ZodObject<{
+        id: z.ZodNumber;
+        email: z.ZodString;
+        name: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+    role: z.ZodEnum<{
+        admin: "admin";
+        member: "member";
+        owner: "owner";
+        viewer: "viewer";
+    }>;
+    via: z.ZodArray<z.ZodEnum<{
+        creator: "creator";
+        grant: "grant";
+        operator: "operator";
+        seat: "seat";
+    }>>;
+}, z.core.$strip>;
+export type ProjectAccessEntry = z.infer<typeof projectAccessEntry>;
+/** GET /v1/access/me (self): the caller's own grants and guest workspaces. */
+export declare const accessMe: z.ZodObject<{
+    grants: z.ZodArray<z.ZodObject<{
+        id: z.ZodNumber;
+        workspaceId: z.ZodNumber;
+        user: z.ZodObject<{
+            id: z.ZodNumber;
+            email: z.ZodString;
+            name: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>;
+        project: z.ZodNullable<z.ZodObject<{
+            id: z.ZodNumber;
+            name: z.ZodString;
+        }, z.core.$strip>>;
+        environment: z.ZodNullable<z.ZodObject<{
+            id: z.ZodNumber;
+            name: z.ZodString;
+        }, z.core.$strip>>;
+        role: z.ZodEnum<{
+            admin: "admin";
+            member: "member";
+            viewer: "viewer";
+        }>;
+        suspended: z.ZodBoolean;
+        createdAt: z.ZodString;
+        createdBy: z.ZodNullable<z.ZodObject<{
+            id: z.ZodNumber;
+            email: z.ZodString;
+        }, z.core.$strip>>;
+        isGuest: z.ZodBoolean;
+    }, z.core.$strip>>;
+    guestWorkspaces: z.ZodArray<z.ZodObject<{
+        id: z.ZodNumber;
+        name: z.ZodString;
+        slug: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type AccessMe = z.infer<typeof accessMe>;
+//# sourceMappingURL=accessGrants.d.ts.map

package/dist/accessGrants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accessGrants.d.ts","sourceRoot":"","sources":["../src/accessGrants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,qDAAqD;AACrD,eAAO,MAAM,eAAe;;;;EAAwC,CAAC;AACrE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,MAAM,CAOjH;AAMD;;;;GAIG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;kBAUgF,CAAC;AAC/G,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB;;;;;;;kBAM1B,CAAC;AACL,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,iFAAiF;AACjF,eAAO,MAAM,oBAAoB;;;;kBAMtB,CAAC;AACZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAMxE,gDAAgD;AAChD,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAYtB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,gFAAgF;AAChF,eAAO,MAAM,gBAAgB;;;;;EAAmD,CAAC;AACjF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,mDAAmD;AACnD,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;iBAK7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE,8EAA8E;AAC9E,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAInB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC"}

package/dist/accessGrants.js

@@ -0,0 +1,100 @@
+import { z } from 'zod';
+import { id } from './common.js';
+// ── Project and environment access grants (0.15) ────────────────────────────
+// Request and response shapes for `/v1/workspaces/:wid/access-grants`,
+// `/v1/projects/:id/access` and `/v1/access/me`. Grants are raise-only (owner
+// decision O5): a user's effective role on a resource is the higher of their
+// seat role and any matching, non-suspended grant; `owner` is never grantable.
+// The role cap (no higher than the granter's own role) and the workspace
+// consistency checks are enforced by the server. Design: DESIGN.md §4.
+/** Mirrors `accessGrantRole` in `@ninedeploy/db`. */
+export const accessGrantRole = z.enum(['viewer', 'member', 'admin']);
+/**
+ * The uniqueness key stored in `access_grants.target_key`: `p:<project>`,
+ * `e:<environment>` or `pe:<project>:<environment>`. SQLite unique indexes
+ * treat NULLs as distinct, so the pair alone could not be unique.
+ */
+export function accessGrantTargetKey(target) {
+    const p = target.projectId ?? null;
+    const e = target.environmentId ?? null;
+    if (p !== null && e !== null)
+        return `pe:${p}:${e}`;
+    if (p !== null)
+        return `p:${p}`;
+    if (e !== null)
+        return `e:${e}`;
+    throw new Error('an access grant needs a project or an environment');
+}
+const hasTarget = (v) => v.projectId != null || v.environmentId != null;
+const hasSubject = (v) => (v.email === undefined) !== (v.userId === undefined);
+/**
+ * POST /v1/workspaces/:wid/access-grants (workspace admin). Name the user by
+ * exactly one of `email` or `userId`, and target a project, an environment, or
+ * both (services linked to the project AND in the environment).
+ */
+export const accessGrantCreate = z
+    .object({
+    email: z.string().trim().toLowerCase().email().max(254).optional(),
+    userId: id.optional(),
+    projectId: id.optional(),
+    environmentId: id.optional(),
+    role: accessGrantRole,
+})
+    .strict()
+    .refine(hasSubject, { message: 'name the user by exactly one of email or userId', path: ['email'] })
+    .refine(hasTarget, { message: 'a grant needs a projectId, an environmentId, or both', path: ['projectId'] });
+/**
+ * PATCH /v1/workspaces/:wid/access-grants/:grantId: change the role, suspend
+ * or reinstate the grant, or both. `{role}` alone is the 0.15.0 contract and
+ * still means exactly that. `suspended: true` stops the grant counting (it
+ * stays listed, like a SCIM suspension); `false` makes it count again. The
+ * target and the user never change: revoke and grant again instead.
+ */
+export const accessGrantUpdate = z
+    .object({ role: accessGrantRole.optional(), suspended: z.boolean().optional() })
+    .strict()
+    .refine((v) => v.role !== undefined || v.suspended !== undefined, {
+    message: 'change the role, suspended, or both',
+    path: ['role'],
+});
+/** GET /v1/workspaces/:wid/access-grants query. Query strings arrive as text. */
+export const accessGrantListQuery = z
+    .object({
+    userId: z.coerce.number().int().positive().optional(),
+    projectId: z.coerce.number().int().positive().optional(),
+    environmentId: z.coerce.number().int().positive().optional(),
+})
+    .strict();
+const namedRef = z.object({ id, name: z.string() });
+/** `users.name` is optional; the API sends `null` when it is unset. */
+const userRef = z.object({ id, email: z.string(), name: z.string().nullable() });
+/** One grant as the workspace admin sees it. */
+export const accessGrant = z.object({
+    id,
+    workspaceId: id,
+    user: userRef,
+    project: namedRef.nullable(),
+    environment: namedRef.nullable(),
+    role: accessGrantRole,
+    suspended: z.boolean(),
+    createdAt: z.string(),
+    createdBy: z.object({ id, email: z.string() }).nullable(),
+    /** The user has no seat in the grant's workspace: they see only what grants cover. */
+    isGuest: z.boolean(),
+});
+/** How a user reaches a project, as GET /v1/projects/:id/access explains it. */
+export const projectAccessVia = z.enum(['operator', 'seat', 'grant', 'creator']);
+/** GET /v1/projects/:id/access (project admin). */
+export const projectAccessEntry = z.object({
+    user: userRef,
+    /** Effective role on the project (operators are `owner`). */
+    role: z.enum(['owner', 'admin', 'member', 'viewer']),
+    via: z.array(projectAccessVia).min(1),
+});
+/** GET /v1/access/me (self): the caller's own grants and guest workspaces. */
+export const accessMe = z.object({
+    grants: z.array(accessGrant),
+    /** Workspaces the caller reaches only through grants (no seat). */
+    guestWorkspaces: z.array(z.object({ id, name: z.string(), slug: z.string() })),
+});
+//# sourceMappingURL=accessGrants.js.map

package/dist/accessGrants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accessGrants.js","sourceRoot":"","sources":["../src/accessGrants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEjC,+EAA+E;AAC/E,uEAAuE;AACvE,8EAA8E;AAC9E,6EAA6E;AAC7E,+EAA+E;AAC/E,yEAAyE;AACzE,uEAAuE;AAEvE,qDAAqD;AACrD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAGrE;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAoE;IACvG,MAAM,CAAC,GAAG,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC;IACnC,MAAM,CAAC,GAAG,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC;IACvC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;IACpD,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,EAAE,CAAC;IAChC,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,EAAE,CAAC;IAChC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,CAA+D,EAAE,EAAE,CACpF,CAAC,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,CAAC,aAAa,IAAI,IAAI,CAAC;AACjD,MAAM,UAAU,GAAG,CAAC,CAAsC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;AAEpH;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAClE,MAAM,EAAE,EAAE,CAAC,QAAQ,EAAE;IACrB,SAAS,EAAE,EAAE,CAAC,QAAQ,EAAE;IACxB,aAAa,EAAE,EAAE,CAAC,QAAQ,EAAE;IAC5B,IAAI,EAAE,eAAe;CACtB,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,iDAAiD,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;KACnG,MAAM,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,sDAAsD,EAAE,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;AAG/G;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;KAC/E,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,EAAE;IAChE,OAAO,EAAE,qCAAqC;IAC9C,IAAI,EAAE,CAAC,MAAM,CAAC;CACf,CAAC,CAAC;AAGL,iFAAiF;AACjF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACrD,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACxD,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC7D,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACpD,uEAAuE;AACvE,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAEjF,gDAAgD;AAChD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,EAAE;IACF,WAAW,EAAE,EAAE;IACf,IAAI,EAAE,OAAO;IACb,OAAO,EAAE,QAAQ,CAAC,QAAQ,EAAE;IAC5B,WAAW,EAAE,QAAQ,CAAC,QAAQ,EAAE;IAChC,IAAI,EAAE,eAAe;IACrB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzD,sFAAsF;IACtF,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAGH,gFAAgF;AAChF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AAGjF,mDAAmD;AACnD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,OAAO;IACb,6DAA6D;IAC7D,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACpD,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACtC,CAAC,CAAC;AAGH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;IAC5B,mEAAmE;IACnE,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;CAC/E,CAAC,CAAC"}

package/dist/agentCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agentCommand.d.ts","sourceRoot":"","sources":["../src/agentCommand.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,UAAU,8BAA8B,CAAC;AACtD,eAAO,MAAM,oBAAoB,OAAO,CAAC;AACzC,eAAO,MAAM,gBAAgB,kCAAkC,CAAC;AAEhE,MAAM,WAAW,mBAAmB;IAClC,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,QAAQ,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM,CAmBvE"}
+{"version":3,"file":"agentCommand.d.ts","sourceRoot":"","sources":["../src/agentCommand.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,UAAU,8BAA8B,CAAC;AACtD,eAAO,MAAM,oBAAoB,OAAO,CAAC;AACzC,eAAO,MAAM,gBAAgB,kCAAkC,CAAC;AAEhE,MAAM,WAAW,mBAAmB;IAClC,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,QAAQ,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAUD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM,CAsBvE"}

package/dist/agentCommand.js

@@ -20,6 +20,13 @@
 export const AGENT_HOME = '/var/lib/ninedeploy-agent';
 export const AGENT_CONTAINER_PORT = 4600;
 export const AGENT_IMAGE_REPO = 'ghcr.io/ninedeploy/ninedeploy';
+/** Render a value for the copy-paste shell line (r473): bare when it is
+ *  provably shell-safe (the common case — numbers, hex tokens, plain URLs),
+ *  double-quoted otherwise. Unquoted, a panel URL carrying `&` would
+ *  background the pasted command and mangle the rest of the line. */
+function shellValue(value) {
+    return /^[\w.:/=-]+$/.test(value) ? value : `"${value.replace(/(["$`\\])/g, '\\$1')}"`;
+}
 export function agentDockerRunCommand(opts) {
     const env = [
         'NINEDEPLOY_AGENT=1',
@@ -38,7 +45,10 @@ export function agentDockerRunCommand(opts) {
         '-v /var/run/docker.sock:/var/run/docker.sock',
         `-v ${AGENT_HOME}:${AGENT_HOME}`,
         `-w ${AGENT_HOME}`,
-        ...env.map((e) => `-e ${e}`),
+        ...env.map((e) => {
+            const eq = e.indexOf('=');
+            return `-e ${e.slice(0, eq)}=${shellValue(e.slice(eq + 1))}`;
+        }),
         `${AGENT_IMAGE_REPO}:${opts.imageTag}`,
         'node /app/apps/server/dist/agent.js',
     ].join(' ');

package/dist/agentCommand.js.map

@@ -1 +1 @@
-{"version":3,"file":"agentCommand.js","sourceRoot":"","sources":["../src/agentCommand.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,2BAA2B,CAAC;AACtD,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AACzC,MAAM,CAAC,MAAM,gBAAgB,GAAG,+BAA+B,CAAC;AAehE,MAAM,UAAU,qBAAqB,CAAC,IAAyB;IAC7D,MAAM,GAAG,GAAa;QACpB,oBAAoB;QACpB,yBAAyB,oBAAoB,EAAE;KAChD,CAAC;IACF,IAAI,IAAI,CAAC,WAAW;QAAE,GAAG,CAAC,IAAI,CAAC,0BAA0B,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7E,IAAI,IAAI,CAAC,SAAS;QAAE,GAAG,CAAC,IAAI,CAAC,yBAAyB,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACxE,IAAI,IAAI,CAAC,cAAc;QAAE,GAAG,CAAC,IAAI,CAAC,8BAA8B,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;IACvF,OAAO;QACL,gEAAgE;QAChE,YAAY;QACZ,MAAM,IAAI,CAAC,QAAQ,IAAI,oBAAoB,EAAE;QAC7C,8CAA8C;QAC9C,MAAM,UAAU,IAAI,UAAU,EAAE;QAChC,MAAM,UAAU,EAAE;QAClB,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,GAAG,gBAAgB,IAAI,IAAI,CAAC,QAAQ,EAAE;QACtC,qCAAqC;KACtC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC"}
+{"version":3,"file":"agentCommand.js","sourceRoot":"","sources":["../src/agentCommand.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,2BAA2B,CAAC;AACtD,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AACzC,MAAM,CAAC,MAAM,gBAAgB,GAAG,+BAA+B,CAAC;AAehE;;;qEAGqE;AACrE,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAyB;IAC7D,MAAM,GAAG,GAAa;QACpB,oBAAoB;QACpB,yBAAyB,oBAAoB,EAAE;KAChD,CAAC;IACF,IAAI,IAAI,CAAC,WAAW;QAAE,GAAG,CAAC,IAAI,CAAC,0BAA0B,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7E,IAAI,IAAI,CAAC,SAAS;QAAE,GAAG,CAAC,IAAI,CAAC,yBAAyB,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACxE,IAAI,IAAI,CAAC,cAAc;QAAE,GAAG,CAAC,IAAI,CAAC,8BAA8B,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;IACvF,OAAO;QACL,gEAAgE;QAChE,YAAY;QACZ,MAAM,IAAI,CAAC,QAAQ,IAAI,oBAAoB,EAAE;QAC7C,8CAA8C;QAC9C,MAAM,UAAU,IAAI,UAAU,EAAE;QAChC,MAAM,UAAU,EAAE;QAClB,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACf,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC1B,OAAO,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,CAAC,CAAC;QACF,GAAG,gBAAgB,IAAI,IAAI,CAAC,QAAQ,EAAE;QACtC,qCAAqC;KACtC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC"}

package/dist/auth.d.ts

@@ -3,6 +3,7 @@ export declare const register: z.ZodObject<{
     email: z.ZodEmail;
     password: z.ZodString;
     name: z.ZodOptional<z.ZodString>;
+    setupToken: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type Register = z.infer<typeof register>;
 /** Initial bootstrap — same shape as register, only works when no users exist. */
@@ -10,6 +11,7 @@ export declare const setup: z.ZodObject<{
     email: z.ZodEmail;
     password: z.ZodString;
     name: z.ZodOptional<z.ZodString>;
+    setupToken: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type Setup = Register;
 export declare const login: z.ZodObject<{
@@ -28,6 +30,22 @@ export declare const twoFactorSetup: z.ZodObject<{
     password: z.ZodString;
 }, z.core.$strip>;
 export type TwoFactorSetup = z.infer<typeof twoFactorSetup>;
+/**
+ * Step-up proof for credential-planting actions (r502): the current password.
+ * Optional on the wire — an account without a usable password (SSO-only) may
+ * instead prove a FRESH sign-in (session younger than 10 minutes); the server
+ * decides which applies.
+ */
+export declare const stepUp: z.ZodObject<{
+    password: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type StepUp = z.infer<typeof stepUp>;
+/** Turning 2FA on: the code from the authenticator + the step-up proof (r502). */
+export declare const twoFactorEnable: z.ZodObject<{
+    code: z.ZodString;
+    password: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type TwoFactorEnable = z.infer<typeof twoFactorEnable>;
 export declare const twoFactorDisable: z.ZodObject<{
     password: z.ZodString;
     code: z.ZodString;
@@ -116,6 +134,10 @@ export declare const publicUser: z.ZodObject<{
     name: z.ZodNullable<z.ZodString>;
     isOperator: z.ZodBoolean;
     workspaceCount: z.ZodNumber;
+    ownedWorkspaces: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodNumber;
+        name: z.ZodString;
+    }, z.core.$strip>>>;
     createdAt: z.ZodString;
 }, z.core.$strip>;
 export type PublicUser = z.infer<typeof publicUser>;
@@ -126,6 +148,10 @@ export declare const session: z.ZodObject<{
         name: z.ZodNullable<z.ZodString>;
         isOperator: z.ZodBoolean;
         workspaceCount: z.ZodNumber;
+        ownedWorkspaces: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodNumber;
+            name: z.ZodString;
+        }, z.core.$strip>>>;
         createdAt: z.ZodString;
     }, z.core.$strip>;
     tokens: z.ZodObject<{
@@ -135,6 +161,32 @@ export declare const session: z.ZodObject<{
     }, z.core.$strip>;
 }, z.core.$strip>;
 export type Session = z.infer<typeof session>;
+/**
+ * r603: `POST /auth/password` — a session plus how many passkeys still sign in
+ * to the account (a change keeps them; a reset deletes them). Optional so a
+ * client talking to an older server keeps working.
+ */
+export declare const passwordChangeResult: z.ZodObject<{
+    user: z.ZodObject<{
+        id: z.ZodNumber;
+        email: z.ZodEmail;
+        name: z.ZodNullable<z.ZodString>;
+        isOperator: z.ZodBoolean;
+        workspaceCount: z.ZodNumber;
+        ownedWorkspaces: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodNumber;
+            name: z.ZodString;
+        }, z.core.$strip>>>;
+        createdAt: z.ZodString;
+    }, z.core.$strip>;
+    tokens: z.ZodObject<{
+        accessToken: z.ZodString;
+        refreshToken: z.ZodString;
+        expiresIn: z.ZodNumber;
+    }, z.core.$strip>;
+    passkeysRemaining: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export type PasswordChangeResult = z.infer<typeof passwordChangeResult>;
 export declare const createApiToken: z.ZodObject<{
     name: z.ZodPipe<z.ZodOptional<z.ZodString>, z.ZodTransform<string, string | undefined>>;
     scopes: z.ZodDefault<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<{
@@ -175,6 +227,7 @@ export type CreatedApiToken = z.infer<typeof createdApiToken>;
 export declare const passkeyRegisterVerify: z.ZodObject<{
     name: z.ZodString;
     response: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    password: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type PasskeyRegisterVerify = z.infer<typeof passkeyRegisterVerify>;
 /** Login verification: just the browser's authentication response (discoverable credentials). */

package/dist/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,QAAQ;;;;iBAInB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD,kFAAkF;AAClF,eAAO,MAAM,KAAK;;;;iBAAW,CAAC;AAC9B,MAAM,MAAM,KAAK,GAAG,QAAQ,CAAC;AAE7B,eAAO,MAAM,KAAK;;;;iBAKhB,CAAC;AACH,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,CAAC;AAE1C,kEAAkE;AAClE,eAAO,MAAM,aAAa;;iBAAkD,CAAC;AAC7E,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,kFAAkF;AAClF,eAAO,MAAM,cAAc;;iBAA4C,CAAC;AACxE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,eAAO,MAAM,gBAAgB;;;iBAG3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,mEAAmE;AACnE,eAAO,MAAM,cAAc;;;iBAGzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,uDAAuD;AACvD;;;;;GAKG;AACH,eAAO,MAAM,UAAU;;;;iBAIrB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD,eAAO,MAAM,aAAa;;iBAExB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAwC1D,eAAO,MAAM,aAAa;;;;iBAA0C,CAAC;AACrE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D;;;;mBAImB;AACnB,eAAO,MAAM,qBAAqB,YAChC,UAAU,EACV,WAAW,EACX,SAAS,EACT,SAAS,EACT,QAAQ,EACR,UAAU,EACV,KAAK,EACL,SAAS,EACT,SAAS,EACT,UAAU,EACV,OAAO,EACP,QAAQ,EACR,eAAe,EACf,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,UAAU,EACV,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,QAAQ,EACR,OAAO,EACP,UAAU,EACV,KAAK,EACL,QAAQ,EACR,eAAe,EACf,cAAc,CACN,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnE;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa;;iBAExB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,yEAAyE;AACzE,eAAO,MAAM,cAAc;;iBAEzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,0EAA0E;AAC1E,eAAO,MAAM,sBAAsB;;;iBAGjC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E,sDAAsD;AACtD,eAAO,MAAM,SAAS;;;;iBAIpB,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAElD,eAAO,MAAM,OAAO;;iBAElB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAC;AAE9C;;;;;;GAMG;AACH,eAAO,MAAM,UAAU;;;;;;;iBASrB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD,eAAO,MAAM,OAAO;;;;;;;;;;;;;;iBAGlB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAC;AAG9C,eAAO,MAAM,cAAc;;;;;;;;iBAwBzB,CAAC;AACH,wEAAwE;AACxE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAC5D;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEjE,eAAO,MAAM,QAAQ;;;;;;;iBAQnB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD,iFAAiF;AACjF,eAAO,MAAM,eAAe;;;;;;;iBAO1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAG9D,gGAAgG;AAChG,eAAO,MAAM,qBAAqB;;;iBAGhC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE1E,iGAAiG;AACjG,eAAO,MAAM,kBAAkB;;iBAE7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE,eAAO,MAAM,iBAAiB;;;;iBAI5B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAGlE,eAAO,MAAM,aAAa;;;;;;;iBAOxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,QAAQ;;;;;iBAMnB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD,kFAAkF;AAClF,eAAO,MAAM,KAAK;;;;;iBAAW,CAAC;AAC9B,MAAM,MAAM,KAAK,GAAG,QAAQ,CAAC;AAE7B,eAAO,MAAM,KAAK;;;;iBAKhB,CAAC;AACH,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,CAAC;AAE1C,kEAAkE;AAClE,eAAO,MAAM,aAAa;;iBAAkD,CAAC;AAC7E,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,kFAAkF;AAClF,eAAO,MAAM,cAAc;;iBAA4C,CAAC;AACxE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D;;;;;GAKG;AACH,eAAO,MAAM,MAAM;;iBAAiE,CAAC;AACrF,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;AAE5C,kFAAkF;AAClF,eAAO,MAAM,eAAe;;;iBAA6E,CAAC;AAC1G,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,eAAO,MAAM,gBAAgB;;;iBAG3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,mEAAmE;AACnE,eAAO,MAAM,cAAc;;;iBAGzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,uDAAuD;AACvD;;;;;GAKG;AACH,eAAO,MAAM,UAAU;;;;iBAIrB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD,eAAO,MAAM,aAAa;;iBAExB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAwC1D,eAAO,MAAM,aAAa;;;;iBAA0C,CAAC;AACrE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D;;;;mBAImB;AACnB,eAAO,MAAM,qBAAqB,YAChC,UAAU,EACV,WAAW,EACX,SAAS,EACT,SAAS,EACT,QAAQ,EACR,UAAU,EACV,KAAK,EACL,SAAS,EACT,SAAS,EACT,UAAU,EACV,OAAO,EACP,QAAQ,EACR,eAAe,EACf,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,UAAU,EACV,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,QAAQ,EACR,OAAO,EACP,UAAU,EACV,KAAK,EACL,QAAQ,EACR,eAAe,EACf,cAAc,CACN,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnE;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa;;iBAExB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,yEAAyE;AACzE,eAAO,MAAM,cAAc;;iBAEzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,0EAA0E;AAC1E,eAAO,MAAM,sBAAsB;;;iBAGjC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E,sDAAsD;AACtD,eAAO,MAAM,SAAS;;;;iBAIpB,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAElD,eAAO,MAAM,OAAO;;iBAElB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAC;AAE9C;;;;;;GAMG;AACH,eAAO,MAAM,UAAU;;;;;;;;;;;iBAcrB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;iBAGlB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAC;AAE9C;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;iBAE/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAGxE,eAAO,MAAM,cAAc;;;;;;;;iBAwBzB,CAAC;AACH,wEAAwE;AACxE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAC5D;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEjE,eAAO,MAAM,QAAQ;;;;;;;iBAQnB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD,iFAAiF;AACjF,eAAO,MAAM,eAAe;;;;;;;iBAO1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAG9D,gGAAgG;AAChG,eAAO,MAAM,qBAAqB;;;;iBAKhC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE1E,iGAAiG;AACjG,eAAO,MAAM,kBAAkB;;iBAE7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE,eAAO,MAAM,iBAAiB;;;;iBAI5B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAGlE,eAAO,MAAM,aAAa;;;;;;;iBAOxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC"}

package/dist/auth.js

@@ -3,6 +3,8 @@ export const register = z.object({
     email: z.email().max(255),
     password: z.string().min(8).max(128),
     name: z.string().min(1).max(100).optional(),
+    /** First-run setup token (0.16): required by the bootstrap of an empty production instance. */
+    setupToken: z.string().max(200).optional(),
 });
 /** Initial bootstrap — same shape as register, only works when no users exist. */
 export const setup = register;
@@ -16,6 +18,15 @@ export const login = z.object({
 export const twoFactorCode = z.object({ code: z.string().regex(/^\d{6}$/) });
 /** Regenerating the 2FA secret: password required when 2FA is already enabled. */
 export const twoFactorSetup = z.object({ password: z.string().min(1) });
+/**
+ * Step-up proof for credential-planting actions (r502): the current password.
+ * Optional on the wire — an account without a usable password (SSO-only) may
+ * instead prove a FRESH sign-in (session younger than 10 minutes); the server
+ * decides which applies.
+ */
+export const stepUp = z.object({ password: z.string().min(1).max(1024).optional() });
+/** Turning 2FA on: the code from the authenticator + the step-up proof (r502). */
+export const twoFactorEnable = twoFactorCode.extend({ password: z.string().min(1).max(1024).optional() });
 export const twoFactorDisable = z.object({
     password: z.string().min(1),
     code: z.string().regex(/^\d{6}$/),
@@ -154,12 +165,25 @@ export const publicUser = z.object({
     isOperator: z.boolean(),
     /** Number of workspaces the user belongs to. Computed by the server. */
     workspaceCount: z.number().int().nonnegative(),
+    /**
+     * r540: workspaces this user owns — the ones deleting the account hands to
+     * the operator (or `transferTo`). Only `GET /v1/users` fills it.
+     */
+    ownedWorkspaces: z.array(z.object({ id: z.number().int(), name: z.string() })).optional(),
     createdAt: z.string().datetime(),
 });
 export const session = z.object({
     user: publicUser,
     tokens: tokenPair,
 });
+/**
+ * r603: `POST /auth/password` — a session plus how many passkeys still sign in
+ * to the account (a change keeps them; a reset deletes them). Optional so a
+ * client talking to an older server keeps working.
+ */
+export const passwordChangeResult = session.extend({
+    passkeysRemaining: z.number().int().nonnegative().optional(),
+});
 // ── API tokens (for the CLI / CI) ─────────────────────────────────────────
 export const createApiToken = z.object({
     // Lenient on purpose: this endpoint historically accepted any string, sliced
@@ -209,6 +233,8 @@ export const createdApiToken = z.object({
 export const passkeyRegisterVerify = z.object({
     name: z.string().min(1).max(100),
     response: z.record(z.string(), z.unknown()),
+    /** r502: step-up proof — see `stepUp`. */
+    password: z.string().min(1).max(1024).optional(),
 });
 /** Login verification: just the browser's authentication response (discoverable credentials). */
 export const passkeyLoginVerify = z.object({

package/dist/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;IACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAGH,kFAAkF;AAClF,MAAM,CAAC,MAAM,KAAK,GAAG,QAAQ,CAAC;AAG9B,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,iDAAiD;IACjD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAGH,kEAAkE;AAClE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AAG7E,kFAAkF;AAClF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAGxE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;CAClC,CAAC,CAAC;AAGH,mEAAmE;AACnE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACxC,CAAC,CAAC;AAGH,uDAAuD;AACvD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;IACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACxC,CAAC,CAAC;AAGH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,6EAA6E;AAC7E,kEAAkE;AAClE,oDAAoD;AACpD,oEAAoE;AACpE,sDAAsD;AACtD,+CAA+C;AAC/C,EAAE;AACF,6DAA6D;AAC7D,gEAAgE;AAChE,yDAAyD;AACzD,mCAAmC;AACnC,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;AAC3D,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CACrC,0DAA0D,EAC1D,mDAAmD,CACpD,CAAC;AACF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;AAGrE;;;;mBAImB;AACnB,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,UAAU;IACV,WAAW;IACX,SAAS;IACT,SAAS;IACT,QAAQ;IACR,UAAU;IACV,KAAK;IACL,SAAS;IACT,SAAS;IACT,UAAU;IACV,OAAO;IACP,QAAQ;IACR,eAAe;IACf,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,UAAU;IACV,WAAW;IACX,kBAAkB;IAClB,cAAc;IACd,QAAQ;IACR,OAAO;IACP,UAAU;IACV,KAAK;IACL,QAAQ;IACR,eAAe;IACf,cAAc;CACN,CAAC;AAGX;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;CACxB,CAAC,CAAC;AAGH,yEAAyE;AACzE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;CACjB,CAAC,CAAC;AAGH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACxC,CAAC,CAAC;AAGH,sDAAsD;AACtD,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAChC,CAAC,CAAC;AAGH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACpB,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,qEAAqE;IACrE,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;IACvB,wEAAwE;IACxE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,IAAI,EAAE,UAAU;IAChB,MAAM,EAAE,SAAS;CAClB,CAAC,CAAC;AAGH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,6EAA6E;IAC7E,8EAA8E;IAC9E,mCAAmC;IACnC,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC;IACrD;;;;;;;OAOG;IACH,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9D;;;;;OAKG;IACH,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;CAC9D,CAAC,CAAC;AAUH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,4EAA4E;IAC5E,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAGH,iFAAiF;AACjF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAGH,8EAA8E;AAC9E,gGAAgG;AAChG,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;CAC5C,CAAC,CAAC;AAGH,iGAAiG;AACjG,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;CAC5C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAGH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACpB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;IACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,+FAA+F;IAC/F,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC;AAGH,kFAAkF;AAClF,MAAM,CAAC,MAAM,KAAK,GAAG,QAAQ,CAAC;AAG9B,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,iDAAiD;IACjD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAGH,kEAAkE;AAClE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AAG7E,kFAAkF;AAClF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAGxE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAGrF,kFAAkF;AAClF,MAAM,CAAC,MAAM,eAAe,GAAG,aAAa,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAG1G,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;CAClC,CAAC,CAAC;AAGH,mEAAmE;AACnE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACxC,CAAC,CAAC;AAGH,uDAAuD;AACvD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;IACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACxC,CAAC,CAAC;AAGH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,6EAA6E;AAC7E,kEAAkE;AAClE,oDAAoD;AACpD,oEAAoE;AACpE,sDAAsD;AACtD,+CAA+C;AAC/C,EAAE;AACF,6DAA6D;AAC7D,gEAAgE;AAChE,yDAAyD;AACzD,mCAAmC;AACnC,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;AAC3D,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CACrC,0DAA0D,EAC1D,mDAAmD,CACpD,CAAC;AACF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;AAGrE;;;;mBAImB;AACnB,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,UAAU;IACV,WAAW;IACX,SAAS;IACT,SAAS;IACT,QAAQ;IACR,UAAU;IACV,KAAK;IACL,SAAS;IACT,SAAS;IACT,UAAU;IACV,OAAO;IACP,QAAQ;IACR,eAAe;IACf,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,UAAU;IACV,WAAW;IACX,kBAAkB;IAClB,cAAc;IACd,QAAQ;IACR,OAAO;IACP,UAAU;IACV,KAAK;IACL,QAAQ;IACR,eAAe;IACf,cAAc;CACN,CAAC;AAGX;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;CACxB,CAAC,CAAC;AAGH,yEAAyE;AACzE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;CACjB,CAAC,CAAC;AAGH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACxC,CAAC,CAAC;AAGH,sDAAsD;AACtD,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAChC,CAAC,CAAC;AAGH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACpB,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,qEAAqE;IACrE,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;IACvB,wEAAwE;IACxE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC9C;;;OAGG;IACH,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,IAAI,EAAE,UAAU;IAChB,MAAM,EAAE,SAAS;CAClB,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC;IACjD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CAC7D,CAAC,CAAC;AAGH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,6EAA6E;IAC7E,8EAA8E;IAC9E,mCAAmC;IACnC,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC;IACrD;;;;;;;OAOG;IACH,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9D;;;;;OAKG;IACH,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;CAC9D,CAAC,CAAC;AAUH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,4EAA4E;IAC5E,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAGH,iFAAiF;AACjF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAGH,8EAA8E;AAC9E,gGAAgG;AAChG,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAC3C,0CAA0C;IAC1C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAGH,iGAAiG;AACjG,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;CAC5C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAGH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACpB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC"}

package/dist/backupPolicy.d.ts

@@ -0,0 +1,37 @@
+import { z } from 'zod';
+/** Bounds for both retention counts. At least one dump is always kept, so a
+ *  policy can never prune a database's last good backup. */
+export declare const BACKUP_RETAIN_MIN = 1;
+export declare const BACKUP_RETAIN_MAX = 365;
+/** What a database WITHOUT a policy gets: the built-in schedule. */
+export declare const DEFAULT_BACKUP_RETAIN_COUNT = 7;
+/**
+ * PUT /v1/databases/:id/backup-policy — the whole policy (PUT replaces).
+ * The cron expression is validated with croner (5-part) at the route, the
+ * same rule scheduled jobs use; the schema package has no cron dependency.
+ */
+export declare const backupPolicyInput: z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    cron: z.ZodString;
+    retainCount: z.ZodNumber;
+    retainRemoteCount: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodNumber>>, z.ZodTransform<number | null, number | null | undefined>>;
+    destinationId: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodNumber>>, z.ZodTransform<number | null, number | null | undefined>>;
+    localOnly: z.ZodPipe<z.ZodOptional<z.ZodBoolean>, z.ZodTransform<boolean, boolean | undefined>>;
+}, z.core.$strip>;
+export type BackupPolicyInput = z.input<typeof backupPolicyInput>;
+/** GET/PUT response. `configured: false` = no policy row: the built-in
+ *  schedule (daily, 7 kept, active destination) applies and `cron` is null. */
+export declare const backupPolicy: z.ZodObject<{
+    databaseId: z.ZodNumber;
+    configured: z.ZodBoolean;
+    enabled: z.ZodBoolean;
+    cron: z.ZodNullable<z.ZodString>;
+    retainCount: z.ZodNumber;
+    retainRemoteCount: z.ZodNullable<z.ZodNumber>;
+    destinationId: z.ZodNullable<z.ZodNumber>;
+    localOnly: z.ZodBoolean;
+    nextRunAt: z.ZodNullable<z.ZodString>;
+    updatedAt: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type BackupPolicy = z.infer<typeof backupPolicy>;
+//# sourceMappingURL=backupPolicy.d.ts.map

package/dist/backupPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupPolicy.d.ts","sourceRoot":"","sources":["../src/backupPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;4DAC4D;AAC5D,eAAO,MAAM,iBAAiB,IAAI,CAAC;AACnC,eAAO,MAAM,iBAAiB,MAAM,CAAC;AACrC,oEAAoE;AACpE,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAI7C;;;;GAIG;AACH,eAAO,MAAM,iBAAiB;;;;;;;iBAmB1B,CAAC;AACL,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE;+EAC+E;AAC/E,eAAO,MAAM,YAAY;;;;;;;;;;;iBAYvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC"}