@plumix/core 0.1.0

package/dist/rpc/errors.js

@@ -0,0 +1,62 @@
+import * as v from "valibot";
+export const RPC_ERRORS = {
+    UNAUTHORIZED: {
+        message: "Authentication required",
+    },
+    BAD_REQUEST: {
+        message: "Invalid input",
+        data: v.object({
+            reason: v.string(),
+        }),
+    },
+    FORBIDDEN: {
+        message: "Permission denied",
+        data: v.object({
+            capability: v.string(),
+        }),
+    },
+    NOT_FOUND: {
+        message: "Resource not found",
+        data: v.object({
+            kind: v.string(),
+            id: v.union([v.string(), v.number()]),
+        }),
+    },
+    CONFLICT: {
+        message: "Resource conflict",
+        data: v.object({
+            reason: v.string(),
+            // Optional identifier the client can surface in-context. Filled by
+            // reasons that pinpoint a specific field/row (e.g. `meta_*` reasons
+            // set this to the offending meta key); omitted otherwise.
+            key: v.optional(v.string()),
+        }),
+    },
+    PAYLOAD_TOO_LARGE: {
+        message: "Payload too large",
+        data: v.object({
+            limit: v.number(),
+            received: v.optional(v.number()),
+        }),
+    },
+    UNSUPPORTED_MEDIA_TYPE: {
+        message: "Unsupported media type",
+        data: v.object({
+            mime: v.string(),
+        }),
+    },
+    INVALID_BLOCK_CONTENT: {
+        message: "Block content failed registry validation",
+        data: v.object({
+            issues: v.array(v.object({
+                code: v.string(),
+                message: v.string(),
+                path: v.string(),
+                nodeName: v.optional(v.string()),
+                attributeName: v.optional(v.string()),
+                markName: v.optional(v.string()),
+            })),
+        }),
+    },
+};
+//# sourceMappingURL=errors.js.map

package/dist/rpc/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/rpc/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC;AAE7B,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,YAAY,EAAE;QACZ,OAAO,EAAE,yBAAyB;KACnC;IACD,WAAW,EAAE;QACX,OAAO,EAAE,eAAe;QACxB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YACb,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;SACnB,CAAC;KACH;IACD,SAAS,EAAE;QACT,OAAO,EAAE,mBAAmB;QAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YACb,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;SACvB,CAAC;KACH;IACD,SAAS,EAAE;QACT,OAAO,EAAE,oBAAoB;QAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YACb,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;SACtC,CAAC;KACH;IACD,QAAQ,EAAE;QACR,OAAO,EAAE,mBAAmB;QAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YACb,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;YAClB,mEAAmE;YACnE,oEAAoE;YACpE,0DAA0D;YAC1D,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SAC5B,CAAC;KACH;IACD,iBAAiB,EAAE;QACjB,OAAO,EAAE,mBAAmB;QAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YACb,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;YACjB,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjC,CAAC;KACH;IACD,sBAAsB,EAAE;QACtB,OAAO,EAAE,wBAAwB;QACjC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YACb,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;SACjB,CAAC;KACH;IACD,qBAAqB,EAAE;QACrB,OAAO,EAAE,0CAA0C;QACnD,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YACb,MAAM,EAAE,CAAC,CAAC,KAAK,CACb,CAAC,CAAC,MAAM,CAAC;gBACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;gBAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;gBACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;gBAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;gBAChC,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;gBACrC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjC,CAAC,CACH;SACF,CAAC;KACH;CACO,CAAC"}

package/dist/rpc/hooks.d.ts

@@ -0,0 +1,422 @@
+import type { AuthenticatedUser } from "../context/app.js";
+import type { ApiToken } from "../db/schema/api_tokens.js";
+import type { Credential } from "../db/schema/credentials.js";
+import type { Entry, EntryStatus, NewEntry } from "../db/schema/entries.js";
+import type { Term } from "../db/schema/terms.js";
+import type { User } from "../db/schema/users.js";
+import type { EntryMetaChanges } from "./procedures/entry/meta.js";
+import type { EntryCreateInput, EntryListInput, EntryUpdateInput } from "./procedures/entry/schemas.js";
+import type { SettingsGetInput, SettingsUpsertInput } from "./procedures/settings/schemas.js";
+import type { TermMetaChanges } from "./procedures/term/meta.js";
+import type { TermCreateInput, TermListInput, TermUpdateInput } from "./procedures/term/schemas.js";
+import type { UserMetaChanges } from "./procedures/user/meta.js";
+import type { UserInviteInput, UserListInput, UserUpdateInput } from "./procedures/user/schemas.js";
+type EntryWithTerms = Entry & {
+    readonly terms: Record<string, readonly number[]>;
+    readonly _preview?: {
+        readonly source: "live" | "autosave";
+        readonly autosaveUpdatedAt: Date | null;
+        readonly liveUpdatedAt: Date;
+    };
+};
+type UserListRow = User & {
+    readonly lastSignInAt: Date | null;
+};
+declare module "../hooks/types.js" {
+    interface FilterRegistry {
+        "rpc:entry.list:input": (input: EntryListInput) => EntryListInput;
+        "rpc:entry.list:output": (output: readonly Entry[]) => readonly Entry[];
+        "rpc:entry.get:input": (input: {
+            id: number;
+            preview?: boolean;
+        }) => typeof input;
+        "rpc:entry.get:output": (output: EntryWithTerms) => EntryWithTerms;
+        "rpc:entry.create:input": (input: EntryCreateInput) => EntryCreateInput;
+        "rpc:entry.create:output": (output: Entry) => Entry;
+        "rpc:entry.update:input": (input: EntryUpdateInput) => EntryUpdateInput;
+        "rpc:entry.update:output": (output: Entry) => Entry;
+        "rpc:entry.trash:input": (input: {
+            id: number;
+        }) => typeof input;
+        "rpc:entry.trash:output": (output: Entry) => Entry;
+        "rpc:entry.restore:input": (input: {
+            id: number;
+        }) => typeof input;
+        "rpc:entry.restore:output": (output: Entry) => Entry;
+        "rpc:entry.deletePermanent:input": (input: {
+            id: number;
+        }) => typeof input;
+        "rpc:entry.deletePermanent:output": (output: Entry) => Entry;
+        "rpc:entry.duplicate:input": (input: {
+            id: number;
+        }) => typeof input;
+        "rpc:entry.duplicate:output": (output: Entry) => Entry;
+        "rpc:user.list:input": (input: UserListInput) => UserListInput;
+        "rpc:user.list:output": (output: readonly UserListRow[]) => readonly UserListRow[];
+        "rpc:user.get:output": (output: User) => User;
+        "rpc:user.invite:input": (input: UserInviteInput) => UserInviteInput;
+        "rpc:user.invite:output": (output: {
+            user: User;
+            inviteToken: string;
+        }) => typeof output;
+        "rpc:user.update:input": (input: UserUpdateInput) => UserUpdateInput;
+        "rpc:user.update:output": (output: User) => User;
+        "rpc:user.disable:input": (input: {
+            id: number;
+        }) => typeof input;
+        "rpc:user.disable:output": (output: User) => User;
+        "rpc:user.enable:input": (input: {
+            id: number;
+        }) => typeof input;
+        "rpc:user.enable:output": (output: User) => User;
+        "rpc:user.delete:output": (output: User) => User;
+        "rpc:term.list:input": (input: TermListInput) => TermListInput;
+        "rpc:term.list:output": (output: readonly Term[]) => readonly Term[];
+        "rpc:term.get:output": (output: Term) => Term;
+        "rpc:term.create:input": (input: TermCreateInput) => TermCreateInput;
+        "rpc:term.create:output": (output: Term) => Term;
+        "rpc:term.update:input": (input: TermUpdateInput) => TermUpdateInput;
+        "rpc:term.update:output": (output: Term) => Term;
+        "rpc:term.delete:output": (output: Term) => Term;
+        "rpc:settings.get:input": (input: SettingsGetInput) => SettingsGetInput;
+        /**
+         * Output filter for the `settings.get` bag. Plugins can decorate
+         * (inject derived keys), redact secrets, or replace the bag
+         * entirely. Second argument carries the group name so one filter
+         * can branch on scope.
+         */
+        "rpc:settings.get:output": (output: Readonly<Record<string, unknown>>, context: {
+            readonly group: string;
+        }) => Readonly<Record<string, unknown>> | Promise<Readonly<Record<string, unknown>>>;
+        "rpc:settings.upsert:input": (input: SettingsUpsertInput) => SettingsUpsertInput;
+        /**
+         * Output filter for `settings.upsert`. Runs on the authoritative
+         * bag after the write. Same context shape as `settings.get:output`
+         * so plugins can share a single decorator across read and write
+         * paths.
+         */
+        "rpc:settings.upsert:output": (output: Readonly<Record<string, unknown>>, context: {
+            readonly group: string;
+        }) => Readonly<Record<string, unknown>> | Promise<Readonly<Record<string, unknown>>>;
+        /**
+         * `entry:before_save` fires on every save; `entry:<type>:before_save`
+         * fires the type-scoped variant first. Plugins can layer transforms
+         * (type-specific → generic).
+         */
+        "entry:before_save": (entry: NewEntry) => NewEntry;
+        [K: `entry:${string}:before_save`]: (entry: NewEntry) => NewEntry;
+    }
+    interface ActionRegistry {
+        /**
+         * Entry lifecycle. `entry:<event>` fires for every entry regardless
+         * of type; `entry:<type>:<event>` also fires so plugins can target
+         * one entry type without re-filtering inside a generic handler.
+         * Both always fire — subscribe to whichever granularity you need.
+         */
+        "entry:published": (entry: Entry) => void | Promise<void>;
+        "entry:updated": (entry: Entry, previous: Entry) => void | Promise<void>;
+        "entry:trashed": (entry: Entry) => void | Promise<void>;
+        "entry:restored": (entry: Entry) => void | Promise<void>;
+        "entry:deleted": (entry: Entry) => void | Promise<void>;
+        "entry:transition": (entry: Entry, oldStatus: EntryStatus) => void | Promise<void>;
+        [K: `entry:${string}:published`]: (entry: Entry) => void | Promise<void>;
+        [K: `entry:${string}:updated`]: (entry: Entry, previous: Entry) => void | Promise<void>;
+        [K: `entry:${string}:trashed`]: (entry: Entry) => void | Promise<void>;
+        [K: `entry:${string}:restored`]: (entry: Entry) => void | Promise<void>;
+        [K: `entry:${string}:deleted`]: (entry: Entry) => void | Promise<void>;
+        [K: `entry:${string}:transition`]: (entry: Entry, oldStatus: EntryStatus) => void | Promise<void>;
+        /**
+         * Revision lifecycle. Fires after a successful entry.update on a
+         * type with `supports: ['revisions']`. `revision_created` lands
+         * once per update; `revision_pruned` fires only when the new
+         * snapshot pushed past the per-type `maxRevisions` cap and oldest
+         * rows were deleted.
+         */
+        "entry:revision_created": (revision: Entry, live: Entry) => void | Promise<void>;
+        "entry:revision_pruned": (live: Entry, prunedCount: number) => void | Promise<void>;
+        [K: `entry:${string}:revision_created`]: (revision: Entry, live: Entry) => void | Promise<void>;
+        [K: `entry:${string}:revision_pruned`]: (live: Entry, prunedCount: number) => void | Promise<void>;
+        /**
+         * Autosave lifecycle. Fires after `entry.update({ saveAs: 'draft' })`
+         * writes to the caller's autosave row (NOT the live row) and after
+         * `entry.discardDraft` removes it. Subscribers can sync editor
+         * sessions, drive co-author awareness, or log activity. The generic
+         * `entry:updated` hook deliberately does NOT fire on autosave writes
+         * — cache invalidators / RSS / sitemap should ignore pending drafts.
+         */
+        "entry:autosave_saved": (autosave: Entry, live: Entry) => void | Promise<void>;
+        "entry:autosave_discarded": (live: Entry, authorId: number) => void | Promise<void>;
+        [K: `entry:${string}:autosave_saved`]: (autosave: Entry, live: Entry) => void | Promise<void>;
+        [K: `entry:${string}:autosave_discarded`]: (live: Entry, authorId: number) => void | Promise<void>;
+        /**
+         * Fires when a user restores a past revision. For types that
+         * opt into `supports: ['autosave']` the restore lands on the
+         * caller's autosave row (paired with `entry:autosave_saved`).
+         * For non-autosave types the restore writes directly to live
+         * (paired with `entry:updated` via the same revision-on-write
+         * flow as a normal `entry.update`).
+         */
+        "entry:revision_restored": (revision: Entry, destination: Entry) => void | Promise<void>;
+        [K: `entry:${string}:revision_restored`]: (revision: Entry, destination: Entry) => void | Promise<void>;
+        /**
+         * Fires after a successful meta write. Payload carries the decoded
+         * upserts + deleted keys — matches WP's `updated_post_meta` /
+         * `deleted_post_meta` / `added_post_meta` collapsed into one
+         * action.
+         */
+        "entry:meta_changed": (entry: {
+            readonly id: number;
+            readonly type: string;
+        }, changes: EntryMetaChanges) => void | Promise<void>;
+        /**
+         * Fires after `user.invite` persists the pending user + token. Main
+         * consumer is an email-delivery plugin composing the invite link
+         * from `inviteToken`. Payload matches WP's `user_register` plus
+         * invite-specific fields — plugins listening on both `user:invited`
+         * and `user:registered` can tell "invite sent" from "invite taken".
+         *
+         * SECURITY: `inviteToken` is the raw plaintext (the DB stores only a
+         * hash). Treat it as a credential — do NOT log it, persist it
+         * outside the consuming plugin's scope, or forward it to analytics /
+         * error-tracking services. A leaked token grants anyone the ability
+         * to complete registration as the invited user until it's consumed
+         * or expires (7 days).
+         */
+        "user:invited": (user: User, context: {
+            readonly inviteToken: string;
+            readonly invitedBy: number;
+            readonly expiresAt: Date;
+        }) => void | Promise<void>;
+        /**
+         * Fires after a user completes invite acceptance (passkey persisted,
+         * invite token consumed, session created). Parallel to WordPress's
+         * `user_register` when the user comes online for the first time.
+         * Use this (not `user:invited`) for onboarding flows like welcome
+         * emails or default-content seeding.
+         *
+         * PII: payload carries `email`, `name`, `role`. Don't ship the full
+         * row to third-party log/analytics services without the user's
+         * consent. Same caveat applies to all `user:*` actions below.
+         */
+        "user:registered": (user: User) => void | Promise<void>;
+        /**
+         * Fires after a successful `user.update` row-columns write. Payload
+         * carries the post-write row and the pre-write row for diffing —
+         * matches WP's `profile_update(user_id, old_user_data)` signature.
+         * Use this instead of the output filter when you need to know what
+         * actually changed (role demotion, email swap, etc.).
+         *
+         * Only fires when row columns changed. A meta-only update does NOT
+         * fire `user:updated`; subscribe to `user:meta_changed` for that.
+         * The `user.meta` on the payload is the row's `.returning()` value
+         * captured *before* the meta write — so when the same RPC writes
+         * both row columns and meta, `user.meta` here is deterministically
+         * stale. Always subscribe to `user:meta_changed` for the
+         * authoritative meta diff.
+         */
+        "user:updated": (user: User, previous: User) => void | Promise<void>;
+        /**
+         * Fires after a successful meta write via `user.update`. Payload
+         * carries the decoded upserts + deleted keys — same shape as
+         * `entry:meta_changed` / `term:meta_changed` so plugins adopt one
+         * pattern across bags.
+         */
+        "user:meta_changed": (user: {
+            readonly id: number;
+        }, changes: UserMetaChanges) => void | Promise<void>;
+        /**
+         * Fires on both disable (`enabled: false`) and re-enable
+         * (`enabled: true`). One surface so "account state changed" is a
+         * single subscription, instead of two. Sessions for the affected
+         * user are already invalidated by the time this fires.
+         */
+        "user:status_changed": (user: User, context: {
+            readonly enabled: boolean;
+        }) => void | Promise<void>;
+        /**
+         * Fires after a successful `user.delete`. `reassignedTo` is the
+         * user id that inherited this account's entries, or `null` if the
+         * deleted user had no entries (so no reassignment happened). Mirrors
+         * WP's `deleted_user(user_id, reassign_to)`.
+         */
+        "user:deleted": (user: User, context: {
+            readonly reassignedTo: number | null;
+        }) => void | Promise<void>;
+        /** Fires after `term.create` persists a new term row. */
+        "term:created": (term: Term) => void | Promise<void>;
+        /**
+         * Fires after a successful `term.update` row-columns write. Payload
+         * carries the post-write row and the pre-write row for diffing —
+         * parallel to `entry:updated` / `user:updated`.
+         *
+         * Only fires when the row columns changed. A meta-only update does
+         * NOT fire `term:updated`; subscribe to `term:meta_changed` for
+         * that. The `term.meta` here reflects the row read right after the
+         * column write and may lag a meta write that happens in the same
+         * RPC call — use `term:meta_changed` for the authoritative meta
+         * diff.
+         */
+        "term:updated": (term: Term, previous: Term) => void | Promise<void>;
+        /** Fires after `term.delete` removes a term row. */
+        "term:deleted": (term: Term) => void | Promise<void>;
+        /**
+         * Fires after a successful meta write via `term.create` /
+         * `term.update`. Payload carries the decoded upserts + deleted
+         * keys — same shape as `entry:meta_changed` so plugins adopt one
+         * pattern across bags.
+         */
+        "term:meta_changed": (term: {
+            readonly id: number;
+            readonly taxonomy: string;
+        }, changes: TermMetaChanges) => void | Promise<void>;
+        /**
+         * Fires after a successful `settings.upsert`. Payload carries the
+         * group name plus the per-request `set` upserts and `removed`
+         * keys — shape mirrors `entry:meta_changed` so plugins can adopt
+         * the same pattern across bags. Subscribe for audit logs,
+         * cache-invalidators, derived-setting backfills.
+         */
+        "settings:group_changed": (changes: {
+            readonly group: string;
+            readonly set: Readonly<Record<string, unknown>>;
+            readonly removed: readonly string[];
+        }) => void | Promise<void>;
+        /**
+         * A user just signed in. Fires from every sign-in path:
+         * passkey, magic-link, OAuth callback, invite-accept, and any
+         * external IdP authenticator (cfAccess, etc.) on its first
+         * authenticated request.
+         *
+         * `method` distinguishes the surface; `provider` is set only for
+         * `oauth` so subscribers can branch on `github` vs `google` etc.
+         * `firstSignIn` is true when this is the user's first session
+         * ever (signup-then-signin paths set it once, subsequent logins
+         * are false).
+         */
+        "user:signed_in": (user: User, context: {
+            readonly method: "passkey" | "magic_link" | "oauth" | "invite" | "external";
+            readonly provider?: string;
+            readonly firstSignIn: boolean;
+        }) => void | Promise<void>;
+        /**
+         * A user signed out via the dedicated `/auth/signout` route. The
+         * session row is already deleted by the time this fires.
+         */
+        "user:signed_out": (user: User) => void | Promise<void>;
+        /**
+         * Fires after `user.requestEmailChange` writes the verification
+         * token + sends the confirmation mail. `actor` may differ from
+         * `user` when an admin requests the change for another user.
+         * Email is NOT changed yet — see `user:email_changed`.
+         */
+        "user:email_change_requested": (user: User, context: {
+            readonly actor: AuthenticatedUser;
+            readonly newEmail: string;
+            readonly expiresAt: Date;
+        }) => void | Promise<void>;
+        /**
+         * Fires after the verification link is clicked and the email
+         * commit lands. Payload has the post-write user (with new
+         * email + reset `emailVerifiedAt`) and the previous email for
+         * diff. Sessions for this user are invalidated by the time this
+         * fires — subscribers should not assume the actor's session
+         * still exists.
+         */
+        "user:email_changed": (user: User, context: {
+            readonly previousEmail: string;
+        }) => void | Promise<void>;
+        /**
+         * A passkey was registered. Fires on first signup, invite-accept,
+         * and the "add another passkey" flow. Payload omits the public-key
+         * blob to keep wire-friendly subscribers small; pull from `context.db`
+         * if you need the full row.
+         */
+        "credential:created": (credential: Pick<Credential, "id" | "userId" | "name" | "deviceType" | "isBackedUp">, context: {
+            readonly actor: AuthenticatedUser;
+        }) => void | Promise<void>;
+        /**
+         * A passkey was revoked via `auth.credentials.delete`. Self-only —
+         * cross-user passkey deletion is intentionally not a feature, so
+         * `actor.id === credential.userId` always.
+         */
+        "credential:revoked": (credential: {
+            readonly id: string;
+            readonly userId: number;
+        }, context: {
+            readonly actor: AuthenticatedUser;
+        }) => void | Promise<void>;
+        /**
+         * A passkey was renamed via `auth.credentials.rename`. Same
+         * self-only contract as `credential:revoked`.
+         */
+        "credential:renamed": (credential: {
+            readonly id: string;
+            readonly userId: number;
+        }, context: {
+            readonly actor: AuthenticatedUser;
+            readonly name: string;
+        }) => void | Promise<void>;
+        /**
+         * A browser session was explicitly revoked via `auth.sessions.revoke`
+         * or `auth.sessions.revokeOthers`. `mode` distinguishes single-row
+         * revoke from "everywhere except this browser" so the audit log
+         * can render either as one event or N. Cross-user revocation isn't
+         * exposed — sessions are second-factor security primitives.
+         */
+        "session:revoked": (session: {
+            readonly id: string;
+            readonly userId: number;
+        }, context: {
+            readonly actor: AuthenticatedUser;
+            readonly mode: "single" | "all_others";
+        }) => void | Promise<void>;
+        /**
+         * A personal access token was minted via `auth.apiTokens.create`.
+         * Token row is shipped sans secret (PK = SHA-256 hash). Mint is
+         * always self-action — you can't mint for another user — so
+         * `actor.id === token.userId`.
+         */
+        "api_token:created": (token: Pick<ApiToken, "id" | "userId" | "name" | "prefix" | "scopes" | "expiresAt">, context: {
+            readonly actor: AuthenticatedUser;
+        }) => void | Promise<void>;
+        /**
+         * A personal access token was revoked. `mode: "self"` for the
+         * owner using `auth.apiTokens.revoke`; `mode: "admin"` for an
+         * admin-with-`user:manage_tokens` using `adminRevoke`. Audit log
+         * uses `mode` to pick copy ("you revoked" vs "admin X revoked").
+         */
+        "api_token:revoked": (token: {
+            readonly id: string;
+            readonly userId: number;
+        }, context: {
+            readonly actor: AuthenticatedUser;
+            readonly mode: "self" | "admin";
+        }) => void | Promise<void>;
+        /**
+         * A device-flow session was approved via `auth.deviceFlow.approve`.
+         * The polling client's next exchange will mint the API token; this
+         * fires at approval time so the audit log captures the human's
+         * decision separately from the token mint.
+         */
+        "device_code:approved": (deviceCode: {
+            readonly id: string;
+            readonly userCode: string;
+            readonly tokenName: string;
+            readonly scopes: readonly string[] | null;
+        }, context: {
+            readonly actor: AuthenticatedUser;
+        }) => void | Promise<void>;
+        /**
+         * A device-flow session was denied via `auth.deviceFlow.deny`.
+         * Polling client gets `access_denied` on the next exchange.
+         */
+        "device_code:denied": (deviceCode: {
+            readonly id: string;
+            readonly userCode: string;
+        }, context: {
+            readonly actor: AuthenticatedUser;
+        }) => void | Promise<void>;
+    }
+}
+export {};
+//# sourceMappingURL=hooks.d.ts.map

package/dist/rpc/hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../../src/rpc/hooks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EACjB,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EACV,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,KAAK,EACV,eAAe,EACf,aAAa,EACb,eAAe,EAChB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,KAAK,EACV,eAAe,EACf,aAAa,EACb,eAAe,EAChB,MAAM,8BAA8B,CAAC;AAMtC,KAAK,cAAc,GAAG,KAAK,GAAG;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC;IAClD,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC;QACrC,QAAQ,CAAC,iBAAiB,EAAE,IAAI,GAAG,IAAI,CAAC;QACxC,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC;KAC9B,CAAC;CACH,CAAC;AAKF,KAAK,WAAW,GAAG,IAAI,GAAG;IACxB,QAAQ,CAAC,YAAY,EAAE,IAAI,GAAG,IAAI,CAAC;CACpC,CAAC;AAEF,OAAO,QAAQ,mBAAmB,CAAC;IACjC,UAAU,cAAc;QACtB,sBAAsB,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,cAAc,CAAC;QAClE,uBAAuB,EAAE,CAAC,MAAM,EAAE,SAAS,KAAK,EAAE,KAAK,SAAS,KAAK,EAAE,CAAC;QAExE,qBAAqB,EAAE,CAAC,KAAK,EAAE;YAC7B,EAAE,EAAE,MAAM,CAAC;YACX,OAAO,CAAC,EAAE,OAAO,CAAC;SACnB,KAAK,OAAO,KAAK,CAAC;QACnB,sBAAsB,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,cAAc,CAAC;QAEnE,wBAAwB,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,gBAAgB,CAAC;QACxE,yBAAyB,EAAE,CAAC,MAAM,EAAE,KAAK,KAAK,KAAK,CAAC;QAEpD,wBAAwB,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,gBAAgB,CAAC;QACxE,yBAAyB,EAAE,CAAC,MAAM,EAAE,KAAK,KAAK,KAAK,CAAC;QAEpD,uBAAuB,EAAE,CAAC,KAAK,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,KAAK,OAAO,KAAK,CAAC;QACjE,wBAAwB,EAAE,CAAC,MAAM,EAAE,KAAK,KAAK,KAAK,CAAC;QAEnD,yBAAyB,EAAE,CAAC,KAAK,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,KAAK,OAAO,KAAK,CAAC;QACnE,0BAA0B,EAAE,CAAC,MAAM,EAAE,KAAK,KAAK,KAAK,CAAC;QAErD,iCAAiC,EAAE,CAAC,KAAK,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,KAAK,OAAO,KAAK,CAAC;QAC3E,kCAAkC,EAAE,CAAC,MAAM,EAAE,KAAK,KAAK,KAAK,CAAC;QAE7D,2BAA2B,EAAE,CAAC,KAAK,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,KAAK,OAAO,KAAK,CAAC;QACrE,4BAA4B,EAAE,CAAC,MAAM,EAAE,KAAK,KAAK,KAAK,CAAC;QAEvD,qBAAqB,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,aAAa,CAAC;QAC/D,sBAAsB,EAAE,CACtB,MAAM,EAAE,SAAS,WAAW,EAAE,KAC3B,SAAS,WAAW,EAAE,CAAC;QAE5B,qBAAqB,EAAE,CAAC,MAAM,EAAE,IAAI,KAAK,IAAI,CAAC;QAE9C,uBAAuB,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,eAAe,CAAC;QACrE,wBAAwB,EAAE,CAAC,MAAM,EAAE;YACjC,IAAI,EAAE,IAAI,CAAC;YACX,WAAW,EAAE,MAAM,CAAC;SACrB,KAAK,OAAO,MAAM,CAAC;QAEpB,uBAAuB,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,eAAe,CAAC;QACrE,wBAAwB,EAAE,CAAC,MAAM,EAAE,IAAI,KAAK,IAAI,CAAC;QAEjD,wBAAwB,EAAE,CAAC,KAAK,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,KAAK,OAAO,KAAK,CAAC;QAClE,yBAAyB,EAAE,CAAC,MAAM,EAAE,IAAI,KAAK,IAAI,CAAC;QAClD,uBAAuB,EAAE,CAAC,KAAK,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,KAAK,OAAO,KAAK,CAAC;QACjE,wBAAwB,EAAE,CAAC,MAAM,EAAE,IAAI,KAAK,IAAI,CAAC;QACjD,wBAAwB,EAAE,CAAC,MAAM,EAAE,IAAI,KAAK,IAAI,CAAC;QAEjD,qBAAqB,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,aAAa,CAAC;QAC/D,sBAAsB,EAAE,CAAC,MAAM,EAAE,SAAS,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,CAAC;QAErE,qBAAqB,EAAE,CAAC,MAAM,EAAE,IAAI,KAAK,IAAI,CAAC;QAE9C,uBAAuB,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,eAAe,CAAC;QACrE,wBAAwB,EAAE,CAAC,MAAM,EAAE,IAAI,KAAK,IAAI,CAAC;QAEjD,uBAAuB,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,eAAe,CAAC;QACrE,wBAAwB,EAAE,CAAC,MAAM,EAAE,IAAI,KAAK,IAAI,CAAC;QAEjD,wBAAwB,EAAE,CAAC,MAAM,EAAE,IAAI,KAAK,IAAI,CAAC;QAEjD,wBAAwB,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,gBAAgB,CAAC;QACxE;;;;;WAKG;QACH,yBAAyB,EAAE,CACzB,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACzC,OAAO,EAAE;YAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;SAAE,KAEjC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QAE/C,2BAA2B,EAAE,CAC3B,KAAK,EAAE,mBAAmB,KACvB,mBAAmB,CAAC;QACzB;;;;;WAKG;QACH,4BAA4B,EAAE,CAC5B,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACzC,OAAO,EAAE;YAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;SAAE,KAEjC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QAE/C;;;;WAIG;QACH,mBAAmB,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,QAAQ,CAAC;QACnD,CAAC,CAAC,EAAE,SAAS,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,QAAQ,KAAK,QAAQ,CAAC;KACnE;IAED,UAAU,cAAc;QACtB;;;;;WAKG;QACH,iBAAiB,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1D,eAAe,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACzE,eAAe,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACxD,gBAAgB,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACzD,eAAe,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACxD,kBAAkB,EAAE,CAClB,KAAK,EAAE,KAAK,EACZ,SAAS,EAAE,WAAW,KACnB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC,CAAC,EAAE,SAAS,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACzE,CAAC,CAAC,EAAE,SAAS,MAAM,UAAU,GAAG,CAC9B,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,KAAK,KACZ,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC,CAAC,EAAE,SAAS,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACvE,CAAC,CAAC,EAAE,SAAS,MAAM,WAAW,GAAG,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACxE,CAAC,CAAC,EAAE,SAAS,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACvE,CAAC,CAAC,EAAE,SAAS,MAAM,aAAa,GAAG,CACjC,KAAK,EAAE,KAAK,EACZ,SAAS,EAAE,WAAW,KACnB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAE1B;;;;;;WAMG;QACH,wBAAwB,EAAE,CACxB,QAAQ,EAAE,KAAK,EACf,IAAI,EAAE,KAAK,KACR,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,uBAAuB,EAAE,CACvB,IAAI,EAAE,KAAK,EACX,WAAW,EAAE,MAAM,KAChB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC,CAAC,EAAE,SAAS,MAAM,mBAAmB,GAAG,CACvC,QAAQ,EAAE,KAAK,EACf,IAAI,EAAE,KAAK,KACR,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC,CAAC,EAAE,SAAS,MAAM,kBAAkB,GAAG,CACtC,IAAI,EAAE,KAAK,EACX,WAAW,EAAE,MAAM,KAChB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAE1B;;;;;;;WAOG;QACH,sBAAsB,EAAE,CACtB,QAAQ,EAAE,KAAK,EACf,IAAI,EAAE,KAAK,KACR,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,0BAA0B,EAAE,CAC1B,IAAI,EAAE,KAAK,EACX,QAAQ,EAAE,MAAM,KACb,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC,CAAC,EAAE,SAAS,MAAM,iBAAiB,GAAG,CACrC,QAAQ,EAAE,KAAK,EACf,IAAI,EAAE,KAAK,KACR,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC,CAAC,EAAE,SAAS,MAAM,qBAAqB,GAAG,CACzC,IAAI,EAAE,KAAK,EACX,QAAQ,EAAE,MAAM,KACb,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAE1B;;;;;;;WAOG;QACH,yBAAyB,EAAE,CACzB,QAAQ,EAAE,KAAK,EACf,WAAW,EAAE,KAAK,KACf,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC,CAAC,EAAE,SAAS,MAAM,oBAAoB,GAAG,CACxC,QAAQ,EAAE,KAAK,EACf,WAAW,EAAE,KAAK,KACf,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAE1B;;;;;WAKG;QACH,oBAAoB,EAAE,CACpB,KAAK,EAAE;YAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;SAAE,EACrD,OAAO,EAAE,gBAAgB,KACtB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAE1B;;;;;;;;;;;;;WAaG;QACH,cAAc,EAAE,CACd,IAAI,EAAE,IAAI,EACV,OAAO,EAAE;YACP,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;YAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;YAC3B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;SAC1B,KACE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAE1B;;;;;;;;;;WAUG;QACH,iBAAiB,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAExD;;;;;;;;;;;;;;WAcG;QACH,cAAc,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAErE;;;;;WAKG;QACH,mBAAmB,EAAE,CACnB,IAAI,EAAE;YAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;SAAE,EAC7B,OAAO,EAAE,eAAe,KACrB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAE1B;;;;;WAKG;QACH,qBAAqB,EAAE,CACrB,IAAI,EAAE,IAAI,EACV,OAAO,EAAE;YAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;SAAE,KACnC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAE1B;;;;;WAKG;QACH,cAAc,EAAE,CACd,IAAI,EAAE,IAAI,EACV,OAAO,EAAE;YAAE,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,KAC9C,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAE1B,yDAAyD;QACzD,cAAc,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAErD;;;;;;;;;;;WAWG;QACH,cAAc,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAErE,oDAAoD;QACpD,cAAc,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAErD;;;;;WAKG;QACH,mBAAmB,EAAE,CACnB,IAAI,EAAE;YAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,EACxD,OAAO,EAAE,eAAe,KACrB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAE1B;;;;;;WAMG;QACH,wBAAwB,EAAE,CAAC,OAAO,EAAE;YAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;YACvB,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;YAChD,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;SACrC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAiB3B;;;;;;;;;;;WAWG;QACH,gBAAgB,EAAE,CAChB,IAAI,EAAE,IAAI,EACV,OAAO,EAAE;YACP,QAAQ,CAAC,MAAM,EACb,SAAS,GAAG,YAAY,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAC;YAC7D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;YAC3B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;SAC/B,KACE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAE1B;;;WAGG;QACH,iBAAiB,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAExD;;;;;WAKG;QACH,6BAA6B,EAAE,CAC7B,IAAI,EAAE,IAAI,EACV,OAAO,EAAE;YACP,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;YAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;YAC1B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;SAC1B,KACE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAE1B;;;;;;;WAOG;QACH,oBAAoB,EAAE,CACpB,IAAI,EAAE,IAAI,EACV,OAAO,EAAE;YAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;SAAE,KACxC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAE1B;;;;;WAKG;QACH,oBAAoB,EAAE,CACpB,UAAU,EAAE,IAAI,CACd,UAAU,EACV,IAAI,GAAG,QAAQ,GAAG,MAAM,GAAG,YAAY,GAAG,YAAY,CACvD,EACD,OAAO,EAAE;YAAE,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAA;SAAE,KAC3C,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAE1B;;;;WAIG;QACH,oBAAoB,EAAE,CACpB,UAAU,EAAE;YAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;SAAE,EAC5D,OAAO,EAAE;YAAE,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAA;SAAE,KAC3C,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAE1B;;;WAGG;QACH,oBAAoB,EAAE,CACpB,UAAU,EAAE;YAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;SAAE,EAC5D,OAAO,EAAE;YAAE,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;SAAE,KAClE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAE1B;;;;;;WAMG;QACH,iBAAiB,EAAE,CACjB,OAAO,EAAE;YAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;SAAE,EACzD,OAAO,EAAE;YACP,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;YAClC,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,YAAY,CAAC;SACxC,KACE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAE1B;;;;;WAKG;QACH,mBAAmB,EAAE,CACnB,KAAK,EAAE,IAAI,CACT,QAAQ,EACR,IAAI,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,CAC7D,EACD,OAAO,EAAE;YAAE,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAA;SAAE,KAC3C,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAE1B;;;;;WAKG;QACH,mBAAmB,EAAE,CACnB,KAAK,EAAE;YAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;SAAE,EACvD,OAAO,EAAE;YACP,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;YAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;SACjC,KACE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAE1B;;;;;WAKG;QACH,sBAAsB,EAAE,CACtB,UAAU,EAAE;YACV,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;YACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;YAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;YAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;SAC3C,EACD,OAAO,EAAE;YAAE,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAA;SAAE,KAC3C,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAE1B;;;WAGG;QACH,oBAAoB,EAAE,CACpB,UAAU,EAAE;YAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,EAC9D,OAAO,EAAE;YAAE,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAA;SAAE,KAC3C,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAC3B;CACF;AAED,OAAO,EAAE,CAAC"}

package/dist/rpc/hooks.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=hooks.js.map

package/dist/rpc/hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.js","sourceRoot":"","sources":["../../src/rpc/hooks.ts"],"names":[],"mappings":"AAkjBA,OAAO,EAAE,CAAC"}

package/dist/rpc/index.d.ts

@@ -0,0 +1,32 @@
+import "./hooks.js";
+export { authenticated } from "./authenticated.js";
+export { registerCoreLookupAdapters } from "./procedures/lookup-adapters.js";
+export { base } from "./base.js";
+export type { Base } from "./base.js";
+export { RPC_ERRORS } from "./errors.js";
+export { authRouter } from "./procedures/auth/index.js";
+export type { AuthRouter } from "./procedures/auth/index.js";
+export { authSessionOutputSchema } from "./procedures/auth/schemas.js";
+export type { AuthSessionOutput, AuthSessionUser, } from "./procedures/auth/schemas.js";
+export { emailField, nameField } from "./validation.js";
+export { applyEntryBeforeSave, fireEntryPublished, fireEntryTransition, fireEntryTrashed, fireEntryUpdated, entryCapability, } from "./procedures/entry/lifecycle.js";
+export { entryRouter } from "./procedures/entry/index.js";
+export type { EntryRouter } from "./procedures/entry/index.js";
+export { escapeLikePattern } from "./procedures/entry/search-terms.js";
+export { entryCreateInputSchema, entryGetInputSchema, entryListInputSchema, entryTrashInputSchema, entryUpdateInputSchema, } from "./procedures/entry/schemas.js";
+export type { EntryCreateInput, EntryGetInput, EntryListInput, EntryTrashInput, EntryUpdateInput, } from "./procedures/entry/schemas.js";
+export { settingsRouter } from "./procedures/settings/index.js";
+export type { SettingsRouter } from "./procedures/settings/index.js";
+export { settingsGetInputSchema, settingsUpsertInputSchema, } from "./procedures/settings/schemas.js";
+export type { SettingsGetInput, SettingsUpsertInput, } from "./procedures/settings/schemas.js";
+export { termRouter } from "./procedures/term/index.js";
+export type { TermRouter } from "./procedures/term/index.js";
+export { termCreateInputSchema, termDeleteInputSchema, termGetInputSchema, termListInputSchema, termUpdateInputSchema, } from "./procedures/term/schemas.js";
+export type { TermCreateInput, TermDeleteInput, TermGetInput, TermListInput, TermUpdateInput, } from "./procedures/term/schemas.js";
+export { userRouter } from "./procedures/user/index.js";
+export type { UserRouter } from "./procedures/user/index.js";
+export { userDeleteInputSchema, userDisableInputSchema, userGetInputSchema, userInviteInputSchema, userListInputSchema, userUpdateInputSchema, } from "./procedures/user/schemas.js";
+export type { UserDeleteInput, UserDisableInput, UserGetInput, UserInviteInput, UserListInput, UserUpdateInput, } from "./procedures/user/schemas.js";
+export { appRouter } from "./router.js";
+export type { AppRouter, AppRouterClient } from "./router.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/rpc/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/rpc/index.ts"],"names":[],"mappings":"AAAA,OAAO,YAAY,CAAC;AAEpB,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,YAAY,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,YAAY,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,YAAY,EACV,iBAAiB,EACjB,eAAe,GAChB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,GAChB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,YAAY,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,+BAA+B,CAAC;AACvC,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,eAAe,EACf,gBAAgB,GACjB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,YAAY,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EACV,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,YAAY,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AACtC,YAAY,EACV,eAAe,EACf,eAAe,EACf,YAAY,EACZ,aAAa,EACb,eAAe,GAChB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,YAAY,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AACtC,YAAY,EACV,eAAe,EACf,gBAAgB,EAChB,YAAY,EACZ,eAAe,EACf,aAAa,EACb,eAAe,GAChB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC"}

package/dist/rpc/index.js

@@ -0,0 +1,20 @@
+import "./hooks.js";
+export { authenticated } from "./authenticated.js";
+export { registerCoreLookupAdapters } from "./procedures/lookup-adapters.js";
+export { base } from "./base.js";
+export { RPC_ERRORS } from "./errors.js";
+export { authRouter } from "./procedures/auth/index.js";
+export { authSessionOutputSchema } from "./procedures/auth/schemas.js";
+export { emailField, nameField } from "./validation.js";
+export { applyEntryBeforeSave, fireEntryPublished, fireEntryTransition, fireEntryTrashed, fireEntryUpdated, entryCapability, } from "./procedures/entry/lifecycle.js";
+export { entryRouter } from "./procedures/entry/index.js";
+export { escapeLikePattern } from "./procedures/entry/search-terms.js";
+export { entryCreateInputSchema, entryGetInputSchema, entryListInputSchema, entryTrashInputSchema, entryUpdateInputSchema, } from "./procedures/entry/schemas.js";
+export { settingsRouter } from "./procedures/settings/index.js";
+export { settingsGetInputSchema, settingsUpsertInputSchema, } from "./procedures/settings/schemas.js";
+export { termRouter } from "./procedures/term/index.js";
+export { termCreateInputSchema, termDeleteInputSchema, termGetInputSchema, termListInputSchema, termUpdateInputSchema, } from "./procedures/term/schemas.js";
+export { userRouter } from "./procedures/user/index.js";
+export { userDeleteInputSchema, userDisableInputSchema, userGetInputSchema, userInviteInputSchema, userListInputSchema, userUpdateInputSchema, } from "./procedures/user/schemas.js";
+export { appRouter } from "./router.js";
+//# sourceMappingURL=index.js.map

package/dist/rpc/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/rpc/index.ts"],"names":[],"mappings":"AAAA,OAAO,YAAY,CAAC;AAEpB,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAExD,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAKvE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,GAChB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAE1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,+BAA+B,CAAC;AAQvC,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAEhE,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,kCAAkC,CAAC;AAK1C,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAExD,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AAQtC,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAExD,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AAStC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC"}