@plumix/core 0.1.0

package/dist/rpc/procedures/auth/api-tokens/admin-list.d.ts

@@ -0,0 +1,101 @@
+export declare const adminList: import("@orpc/server").DecoratedProcedure<import("@orpc/server").MergedInitialContext<import("../../../../index.js").AppContextBase<typeof import("../../../../db/schema/index.js")> & import("../../../../index.js").AppContextExtensions & Record<never, never>, import("../../../../index.js").AppContextBase<typeof import("../../../../db/schema/index.js")> & import("../../../../index.js").AppContextExtensions & Record<never, never>, import("../../../../index.js").AppContext>, import("@orpc/server").MergedCurrentContext<import("../../../../index.js").AppContext, import("../../../../index.js").AuthenticatedAppContext<typeof import("../../../../db/schema/index.js")>>, import("valibot").OptionalSchema<import("valibot").ObjectSchema<{
+    readonly userId: import("valibot").OptionalSchema<import("valibot").SchemaWithPipe<readonly [import("valibot").NumberSchema<undefined>, import("valibot").IntegerAction<number, undefined>, import("valibot").MinValueAction<number, 1, undefined>]>, undefined>;
+    readonly limit: import("valibot").OptionalSchema<import("valibot").SchemaWithPipe<readonly [import("valibot").NumberSchema<undefined>, import("valibot").IntegerAction<number, undefined>, import("valibot").MinValueAction<number, 1, undefined>, import("valibot").MaxValueAction<number, 200, undefined>]>, 50>;
+    readonly offset: import("valibot").OptionalSchema<import("valibot").SchemaWithPipe<readonly [import("valibot").NumberSchema<undefined>, import("valibot").IntegerAction<number, undefined>, import("valibot").MinValueAction<number, 0, undefined>]>, 0>;
+    readonly includeRevoked: import("valibot").OptionalSchema<import("valibot").BooleanSchema<undefined>, false>;
+}, undefined>, {}>, import("@orpc/server").Schema<{
+    items: {
+        id: string;
+        name: string;
+        prefix: string;
+        scopes: readonly string[] | null;
+        expiresAt: Date | null;
+        lastUsedAt: Date | null;
+        createdAt: Date;
+        revokedAt: Date | null;
+        user: {
+            id: number;
+            email: string;
+            name: string | null;
+        };
+    }[];
+    total: number;
+    limit: number;
+    offset: number;
+}, {
+    items: {
+        id: string;
+        name: string;
+        prefix: string;
+        scopes: readonly string[] | null;
+        expiresAt: Date | null;
+        lastUsedAt: Date | null;
+        createdAt: Date;
+        revokedAt: Date | null;
+        user: {
+            id: number;
+            email: string;
+            name: string | null;
+        };
+    }[];
+    total: number;
+    limit: number;
+    offset: number;
+}>, import("@orpc/server").MergedErrorMap<Record<never, never>, {
+    readonly UNAUTHORIZED: {
+        readonly message: "Authentication required";
+    };
+    readonly BAD_REQUEST: {
+        readonly message: "Invalid input";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly reason: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly FORBIDDEN: {
+        readonly message: "Permission denied";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly capability: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly NOT_FOUND: {
+        readonly message: "Resource not found";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly kind: import("valibot").StringSchema<undefined>;
+            readonly id: import("valibot").UnionSchema<[import("valibot").StringSchema<undefined>, import("valibot").NumberSchema<undefined>], undefined>;
+        }, undefined>;
+    };
+    readonly CONFLICT: {
+        readonly message: "Resource conflict";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly reason: import("valibot").StringSchema<undefined>;
+            readonly key: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly PAYLOAD_TOO_LARGE: {
+        readonly message: "Payload too large";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly limit: import("valibot").NumberSchema<undefined>;
+            readonly received: import("valibot").OptionalSchema<import("valibot").NumberSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly UNSUPPORTED_MEDIA_TYPE: {
+        readonly message: "Unsupported media type";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly mime: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly INVALID_BLOCK_CONTENT: {
+        readonly message: "Block content failed registry validation";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly issues: import("valibot").ArraySchema<import("valibot").ObjectSchema<{
+                readonly code: import("valibot").StringSchema<undefined>;
+                readonly message: import("valibot").StringSchema<undefined>;
+                readonly path: import("valibot").StringSchema<undefined>;
+                readonly nodeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                readonly attributeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                readonly markName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+            }, undefined>, undefined>;
+        }, undefined>;
+    };
+}>, Record<never, never>>;
+//# sourceMappingURL=admin-list.d.ts.map

package/dist/rpc/procedures/auth/api-tokens/admin-list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-list.d.ts","sourceRoot":"","sources":["../../../../../src/rpc/procedures/auth/api-tokens/admin-list.ts"],"names":[],"mappings":"AAkBA,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAsDlB,CAAC"}

package/dist/rpc/procedures/auth/api-tokens/admin-list.js

@@ -0,0 +1,69 @@
+import { and, desc, eq, isNull, sql } from "../../../../db/index.js";
+import { apiTokens } from "../../../../db/schema/api_tokens.js";
+import { users } from "../../../../db/schema/users.js";
+import { authenticated } from "../../../authenticated.js";
+import { base } from "../../../base.js";
+import { apiTokensAdminListInputSchema } from "./schemas.js";
+const ADMIN_CAPABILITY = "user:manage_tokens";
+// Cross-user token oversight. Returns paginated rows joined with the
+// owning user (id, email, name) so the admin UI can render a single
+// table without N+1-ing back to user.list. Optional `userId` filter
+// for a per-user drilldown.
+//
+// Joins on `apiTokens.userId` → `users.id` (PK + indexed); cheap.
+// `includeRevoked` toggles whether soft-deleted rows are surfaced —
+// the default-false matches the "active tokens" UX, the true case
+// is the audit view.
+export const adminList = base
+    .use(authenticated)
+    .input(apiTokensAdminListInputSchema)
+    .handler(async ({ input, context, errors }) => {
+    if (!context.auth.can(ADMIN_CAPABILITY)) {
+        throw errors.FORBIDDEN({ data: { capability: ADMIN_CAPABILITY } });
+    }
+    const filters = [
+        input.userId !== undefined ? eq(apiTokens.userId, input.userId) : null,
+        input.includeRevoked ? null : isNull(apiTokens.revokedAt),
+    ].filter((c) => c !== null);
+    const where = filters.length > 0 ? and(...filters) : undefined;
+    // Two queries (rows + total) so the UI can page without re-counting
+    // client-side. `total` reflects the same WHERE — accurate for the
+    // active filter set. SQLite handles count(*) over filtered rows
+    // efficiently with the userId/revokedAt indexes already present.
+    const [items, totalRow] = await Promise.all([
+        context.db
+            .select({
+            id: apiTokens.id,
+            name: apiTokens.name,
+            prefix: apiTokens.prefix,
+            scopes: apiTokens.scopes,
+            expiresAt: apiTokens.expiresAt,
+            lastUsedAt: apiTokens.lastUsedAt,
+            createdAt: apiTokens.createdAt,
+            revokedAt: apiTokens.revokedAt,
+            user: {
+                id: users.id,
+                email: users.email,
+                name: users.name,
+            },
+        })
+            .from(apiTokens)
+            .innerJoin(users, eq(users.id, apiTokens.userId))
+            .where(where)
+            .orderBy(desc(apiTokens.createdAt))
+            .limit(input.limit)
+            .offset(input.offset),
+        context.db
+            .select({ count: sql `count(*)`.as("count") })
+            .from(apiTokens)
+            .where(where)
+            .get(),
+    ]);
+    return {
+        items,
+        total: Number(totalRow?.count ?? 0),
+        limit: input.limit,
+        offset: input.offset,
+    };
+});
+//# sourceMappingURL=admin-list.js.map

package/dist/rpc/procedures/auth/api-tokens/admin-list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-list.js","sourceRoot":"","sources":["../../../../../src/rpc/procedures/auth/api-tokens/admin-list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAC;AAChE,OAAO,EAAE,KAAK,EAAE,MAAM,gCAAgC,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,6BAA6B,EAAE,MAAM,cAAc,CAAC;AAE7D,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AAE9C,qEAAqE;AACrE,oEAAoE;AACpE,oEAAoE;AACpE,4BAA4B;AAC5B,EAAE;AACF,kEAAkE;AAClE,oEAAoE;AACpE,kEAAkE;AAClE,qBAAqB;AACrB,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI;KAC1B,GAAG,CAAC,aAAa,CAAC;KAClB,KAAK,CAAC,6BAA6B,CAAC;KACpC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;IAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,OAAO,GAAG;QACd,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;QACtE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC;KAC1D,CAAC,MAAM,CAAC,CAAC,CAAC,EAA8B,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE/D,oEAAoE;IACpE,kEAAkE;IAClE,gEAAgE;IAChE,iEAAiE;IACjE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC1C,OAAO,CAAC,EAAE;aACP,MAAM,CAAC;YACN,EAAE,EAAE,SAAS,CAAC,EAAE;YAChB,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,IAAI,EAAE;gBACJ,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB;SACF,CAAC;aACD,IAAI,CAAC,SAAS,CAAC;aACf,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;aAChD,KAAK,CAAC,KAAK,CAAC;aACZ,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;aAClC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;aAClB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;QACvB,OAAO,CAAC,EAAE;aACP,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAQ,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;aACpD,IAAI,CAAC,SAAS,CAAC;aACf,KAAK,CAAC,KAAK,CAAC;aACZ,GAAG,EAAE;KACT,CAAC,CAAC;IAEH,OAAO;QACL,KAAK;QACL,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,IAAI,CAAC,CAAC;QACnC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/rpc/procedures/auth/api-tokens/admin-revoke.d.ts

@@ -0,0 +1,64 @@
+export declare const adminRevoke: import("@orpc/server").DecoratedProcedure<import("@orpc/server").MergedInitialContext<import("../../../../index.js").AppContextBase<typeof import("../../../../db/schema/index.js")> & import("../../../../index.js").AppContextExtensions & Record<never, never>, import("../../../../index.js").AppContextBase<typeof import("../../../../db/schema/index.js")> & import("../../../../index.js").AppContextExtensions & Record<never, never>, import("../../../../index.js").AppContext>, import("@orpc/server").MergedCurrentContext<import("../../../../index.js").AppContext, import("../../../../index.js").AuthenticatedAppContext<typeof import("../../../../db/schema/index.js")>>, import("valibot").ObjectSchema<{
+    readonly id: import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").MinLengthAction<string, 1, undefined>, import("valibot").MaxLengthAction<string, 128, undefined>]>;
+}, undefined>, import("@orpc/server").Schema<{
+    id: string;
+}, {
+    id: string;
+}>, import("@orpc/server").MergedErrorMap<Record<never, never>, {
+    readonly UNAUTHORIZED: {
+        readonly message: "Authentication required";
+    };
+    readonly BAD_REQUEST: {
+        readonly message: "Invalid input";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly reason: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly FORBIDDEN: {
+        readonly message: "Permission denied";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly capability: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly NOT_FOUND: {
+        readonly message: "Resource not found";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly kind: import("valibot").StringSchema<undefined>;
+            readonly id: import("valibot").UnionSchema<[import("valibot").StringSchema<undefined>, import("valibot").NumberSchema<undefined>], undefined>;
+        }, undefined>;
+    };
+    readonly CONFLICT: {
+        readonly message: "Resource conflict";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly reason: import("valibot").StringSchema<undefined>;
+            readonly key: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly PAYLOAD_TOO_LARGE: {
+        readonly message: "Payload too large";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly limit: import("valibot").NumberSchema<undefined>;
+            readonly received: import("valibot").OptionalSchema<import("valibot").NumberSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly UNSUPPORTED_MEDIA_TYPE: {
+        readonly message: "Unsupported media type";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly mime: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly INVALID_BLOCK_CONTENT: {
+        readonly message: "Block content failed registry validation";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly issues: import("valibot").ArraySchema<import("valibot").ObjectSchema<{
+                readonly code: import("valibot").StringSchema<undefined>;
+                readonly message: import("valibot").StringSchema<undefined>;
+                readonly path: import("valibot").StringSchema<undefined>;
+                readonly nodeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                readonly attributeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                readonly markName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+            }, undefined>, undefined>;
+        }, undefined>;
+    };
+}>, Record<never, never>>;
+//# sourceMappingURL=admin-revoke.d.ts.map

package/dist/rpc/procedures/auth/api-tokens/admin-revoke.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-revoke.d.ts","sourceRoot":"","sources":["../../../../../src/rpc/procedures/auth/api-tokens/admin-revoke.ts"],"names":[],"mappings":"AAiBA,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAwBpB,CAAC"}

package/dist/rpc/procedures/auth/api-tokens/admin-revoke.js

@@ -0,0 +1,35 @@
+import { and, eq, isNull } from "../../../../db/index.js";
+import { apiTokens } from "../../../../db/schema/api_tokens.js";
+import { authenticated } from "../../../authenticated.js";
+import { base } from "../../../base.js";
+import { apiTokensAdminRevokeInputSchema } from "./schemas.js";
+const ADMIN_CAPABILITY = "user:manage_tokens";
+// Admin-only revoke for any user's token. Soft-delete (sets
+// `revokedAt`) so the row stays for the future audit-log surface.
+//
+// Distinct from the self-scope `revoke` procedure — same underlying
+// table mutation, but a separate procedure name lets future
+// telemetry/audit cleanly distinguish "user X revoked their own
+// token" from "admin Y revoked user X's token". Idempotent: a row
+// already in `revokedAt IS NOT NULL` is filtered by the WHERE
+// clause and surfaces as NOT_FOUND.
+export const adminRevoke = base
+    .use(authenticated)
+    .input(apiTokensAdminRevokeInputSchema)
+    .handler(async ({ input, context, errors }) => {
+    if (!context.auth.can(ADMIN_CAPABILITY)) {
+        throw errors.FORBIDDEN({ data: { capability: ADMIN_CAPABILITY } });
+    }
+    const result = await context.db
+        .update(apiTokens)
+        .set({ revokedAt: new Date() })
+        .where(and(eq(apiTokens.id, input.id), isNull(apiTokens.revokedAt)))
+        .returning({ id: apiTokens.id, userId: apiTokens.userId });
+    const row = result[0];
+    if (!row) {
+        throw errors.NOT_FOUND({ data: { kind: "api_token", id: input.id } });
+    }
+    await context.hooks.doAction("api_token:revoked", { id: row.id, userId: row.userId }, { actor: context.user, mode: "admin" });
+    return { id: input.id };
+});
+//# sourceMappingURL=admin-revoke.js.map

package/dist/rpc/procedures/auth/api-tokens/admin-revoke.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-revoke.js","sourceRoot":"","sources":["../../../../../src/rpc/procedures/auth/api-tokens/admin-revoke.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,+BAA+B,EAAE,MAAM,cAAc,CAAC;AAE/D,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AAE9C,4DAA4D;AAC5D,kEAAkE;AAClE,EAAE;AACF,oEAAoE;AACpE,4DAA4D;AAC5D,gEAAgE;AAChE,kEAAkE;AAClE,8DAA8D;AAC9D,oCAAoC;AACpC,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI;KAC5B,GAAG,CAAC,aAAa,CAAC;KAClB,KAAK,CAAC,+BAA+B,CAAC;KACtC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;IAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE;SAC5B,MAAM,CAAC,SAAS,CAAC;SACjB,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;SAC9B,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;SACnE,SAAS,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IAE7D,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACtB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,OAAO,CAAC,KAAK,CAAC,QAAQ,CAC1B,mBAAmB,EACnB,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAClC,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CACvC,CAAC;IACF,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;AAC1B,CAAC,CAAC,CAAC"}

package/dist/rpc/procedures/auth/api-tokens/create.d.ts

@@ -0,0 +1,84 @@
+export declare const create: import("@orpc/server").DecoratedProcedure<import("@orpc/server").MergedInitialContext<import("../../../../index.js").AppContextBase<typeof import("../../../../db/schema/index.js")> & import("../../../../index.js").AppContextExtensions & Record<never, never>, import("../../../../index.js").AppContextBase<typeof import("../../../../db/schema/index.js")> & import("../../../../index.js").AppContextExtensions & Record<never, never>, import("../../../../index.js").AppContext>, import("@orpc/server").MergedCurrentContext<import("../../../../index.js").AppContext, import("../../../../index.js").AuthenticatedAppContext<typeof import("../../../../db/schema/index.js")>>, import("valibot").ObjectSchema<{
+    readonly name: import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").TrimAction, import("valibot").MinLengthAction<string, 1, "name must be non-empty">, import("valibot").MaxLengthAction<string, 64, "name must be ≤ 64 chars">, import("valibot").RegexAction<string, "name must not contain newlines">]>;
+    readonly expiresInDays: import("valibot").OptionalSchema<import("valibot").UnionSchema<[import("valibot").NullSchema<undefined>, import("valibot").SchemaWithPipe<readonly [import("valibot").NumberSchema<undefined>, import("valibot").IntegerAction<number, undefined>, import("valibot").MinValueAction<number, 1, undefined>, import("valibot").MaxValueAction<number, number, undefined>]>], undefined>, 90>;
+    readonly scopes: import("valibot").OptionalSchema<import("valibot").UnionSchema<[import("valibot").NullSchema<undefined>, import("valibot").SchemaWithPipe<readonly [import("valibot").ArraySchema<import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").MinLengthAction<string, 1, "capability must be non-empty">, import("valibot").MaxLengthAction<string, 96, "capability must be ≤ 96 chars">, import("valibot").RegexAction<string, "capability uses [A-Za-z0-9_:.\\-*] only">]>, undefined>, import("valibot").MaxLengthAction<string[], 128, "≤ 128 scopes">]>], undefined>, null>;
+}, undefined>, import("@orpc/server").Schema<{
+    secret: string;
+    token: {
+        id: string;
+        name: string;
+        prefix: string;
+        expiresAt: Date | null;
+        lastUsedAt: Date | null;
+        createdAt: Date;
+        scopes: readonly string[] | null;
+    };
+}, {
+    secret: string;
+    token: {
+        id: string;
+        name: string;
+        prefix: string;
+        expiresAt: Date | null;
+        lastUsedAt: Date | null;
+        createdAt: Date;
+        scopes: readonly string[] | null;
+    };
+}>, import("@orpc/server").MergedErrorMap<Record<never, never>, {
+    readonly UNAUTHORIZED: {
+        readonly message: "Authentication required";
+    };
+    readonly BAD_REQUEST: {
+        readonly message: "Invalid input";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly reason: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly FORBIDDEN: {
+        readonly message: "Permission denied";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly capability: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly NOT_FOUND: {
+        readonly message: "Resource not found";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly kind: import("valibot").StringSchema<undefined>;
+            readonly id: import("valibot").UnionSchema<[import("valibot").StringSchema<undefined>, import("valibot").NumberSchema<undefined>], undefined>;
+        }, undefined>;
+    };
+    readonly CONFLICT: {
+        readonly message: "Resource conflict";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly reason: import("valibot").StringSchema<undefined>;
+            readonly key: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly PAYLOAD_TOO_LARGE: {
+        readonly message: "Payload too large";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly limit: import("valibot").NumberSchema<undefined>;
+            readonly received: import("valibot").OptionalSchema<import("valibot").NumberSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly UNSUPPORTED_MEDIA_TYPE: {
+        readonly message: "Unsupported media type";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly mime: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly INVALID_BLOCK_CONTENT: {
+        readonly message: "Block content failed registry validation";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly issues: import("valibot").ArraySchema<import("valibot").ObjectSchema<{
+                readonly code: import("valibot").StringSchema<undefined>;
+                readonly message: import("valibot").StringSchema<undefined>;
+                readonly path: import("valibot").StringSchema<undefined>;
+                readonly nodeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                readonly attributeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                readonly markName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+            }, undefined>, undefined>;
+        }, undefined>;
+    };
+}>, Record<never, never>>;
+//# sourceMappingURL=create.d.ts.map

package/dist/rpc/procedures/auth/api-tokens/create.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../../../src/rpc/procedures/auth/api-tokens/create.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBA0Cf,CAAC"}

package/dist/rpc/procedures/auth/api-tokens/create.js

@@ -0,0 +1,50 @@
+import { createApiToken } from "../../../../auth/api-tokens.js";
+import { authenticated } from "../../../authenticated.js";
+import { base } from "../../../base.js";
+import { apiTokensCreateInputSchema } from "./schemas.js";
+const MS_PER_DAY = 24 * 60 * 60 * 1000;
+// Mints a new personal access token for the calling user. The raw
+// secret is returned in the response *exactly once* — the admin UI
+// shows a copy-to-clipboard panel and warns the user it won't be
+// shown again. The DB stores only the SHA-256 hash + a short
+// recognisable prefix fragment.
+//
+// Self-scoped: no capability check beyond `authenticated`. Tokens
+// inherit the user's current role/capabilities at request time, so
+// minting requires no extra privilege beyond being authed.
+export const create = base
+    .use(authenticated)
+    .input(apiTokensCreateInputSchema)
+    .handler(async ({ input, context }) => {
+    const expiresAt = input.expiresInDays === null
+        ? null
+        : new Date(Date.now() + input.expiresInDays * MS_PER_DAY);
+    const minted = await createApiToken(context.db, {
+        userId: context.user.id,
+        name: input.name,
+        expiresAt,
+        scopes: input.scopes,
+    });
+    await context.hooks.doAction("api_token:created", {
+        id: minted.row.id,
+        userId: minted.row.userId,
+        name: minted.row.name,
+        prefix: minted.row.prefix,
+        scopes: minted.row.scopes,
+        expiresAt: minted.row.expiresAt,
+    }, { actor: context.user });
+    return {
+        // The full secret — show once, never recoverable.
+        secret: minted.secret,
+        token: {
+            id: minted.row.id,
+            name: minted.row.name,
+            prefix: minted.row.prefix,
+            expiresAt: minted.row.expiresAt,
+            lastUsedAt: minted.row.lastUsedAt,
+            createdAt: minted.row.createdAt,
+            scopes: minted.row.scopes,
+        },
+    };
+});
+//# sourceMappingURL=create.js.map

package/dist/rpc/procedures/auth/api-tokens/create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../../src/rpc/procedures/auth/api-tokens/create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAE1D,MAAM,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEvC,kEAAkE;AAClE,mEAAmE;AACnE,iEAAiE;AACjE,6DAA6D;AAC7D,gCAAgC;AAChC,EAAE;AACF,kEAAkE;AAClE,mEAAmE;AACnE,2DAA2D;AAC3D,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI;KACvB,GAAG,CAAC,aAAa,CAAC;KAClB,KAAK,CAAC,0BAA0B,CAAC;KACjC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;IACpC,MAAM,SAAS,GACb,KAAK,CAAC,aAAa,KAAK,IAAI;QAC1B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,aAAa,GAAG,UAAU,CAAC,CAAC;IAE9D,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,EAAE,EAAE;QAC9C,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;QACvB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS;QACT,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IAEH,MAAM,OAAO,CAAC,KAAK,CAAC,QAAQ,CAC1B,mBAAmB,EACnB;QACE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE;QACjB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM;QACzB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI;QACrB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM;QACzB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM;QACzB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS;KAChC,EACD,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,CACxB,CAAC;IAEF,OAAO;QACL,kDAAkD;QAClD,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE;YACL,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE;YACjB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI;YACrB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM;YACzB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS;YAC/B,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU;YACjC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS;YAC/B,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM;SAC1B;KACF,CAAC;AACJ,CAAC,CAAC,CAAC"}