@plumix/core 0.1.0

package/dist/rpc/procedures/auth/api-tokens/schemas.d.ts

@@ -0,0 +1,27 @@
+import * as v from "valibot";
+export declare const apiTokensListInputSchema: v.OptionalSchema<v.ObjectSchema<{}, undefined>, {}>;
+export declare const apiTokensCreateInputSchema: v.ObjectSchema<{
+    readonly name: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, "name must be non-empty">, v.MaxLengthAction<string, 64, "name must be ≤ 64 chars">, v.RegexAction<string, "name must not contain newlines">]>;
+    readonly expiresInDays: v.OptionalSchema<v.UnionSchema<[v.NullSchema<undefined>, v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>], undefined>, 90>;
+    readonly scopes: v.OptionalSchema<v.UnionSchema<[v.NullSchema<undefined>, v.SchemaWithPipe<readonly [v.ArraySchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, "capability must be non-empty">, v.MaxLengthAction<string, 96, "capability must be ≤ 96 chars">, v.RegexAction<string, "capability uses [A-Za-z0-9_:.\\-*] only">]>, undefined>, v.MaxLengthAction<string[], 128, "≤ 128 scopes">]>], undefined>, null>;
+}, undefined>;
+export declare const apiTokensRevokeInputSchema: v.ObjectSchema<{
+    readonly id: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 128, undefined>]>;
+}, undefined>;
+export declare const apiTokensAdminListInputSchema: v.OptionalSchema<v.ObjectSchema<{
+    /** When set, filter to a single user's tokens. Otherwise: all users. */
+    readonly userId: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>]>, undefined>;
+    /** Page size. Default 50, hard cap 200. */
+    readonly limit: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, 200, undefined>]>, 50>;
+    /** Page offset. */
+    readonly offset: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>]>, 0>;
+    /**
+     * Include revoked rows. Default false (the hot UI path is "active
+     * tokens"). Set to true for an audit-style view.
+     */
+    readonly includeRevoked: v.OptionalSchema<v.BooleanSchema<undefined>, false>;
+}, undefined>, {}>;
+export declare const apiTokensAdminRevokeInputSchema: v.ObjectSchema<{
+    readonly id: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 128, undefined>]>;
+}, undefined>;
+//# sourceMappingURL=schemas.d.ts.map

package/dist/rpc/procedures/auth/api-tokens/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../../../../src/rpc/procedures/auth/api-tokens/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC;AAsD7B,eAAO,MAAM,wBAAwB,qDAA+B,CAAC;AAErE,eAAO,MAAM,0BAA0B;;;;aAIrC,CAAC;AAEH,eAAO,MAAM,0BAA0B;;aAErC,CAAC;AAgBH,eAAO,MAAM,6BAA6B;IAEtC,wEAAwE;;IAExE,2CAA2C;;IAE3C,mBAAmB;;IAEnB;;;OAGG;;kBAIN,CAAC;AAEF,eAAO,MAAM,+BAA+B;;aAE1C,CAAC"}

package/dist/rpc/procedures/auth/api-tokens/schemas.js

@@ -0,0 +1,68 @@
+import * as v from "valibot";
+const tokenNameSchema = v.pipe(v.string(), v.trim(), v.minLength(1, "name must be non-empty"), v.maxLength(64, "name must be ≤ 64 chars"), 
+// CR/LF defense: same rationale as other label fields — a future
+// audit-log consumer might splice this into a line-oriented format.
+v.regex(/^[^\r\n]+$/, "name must not contain newlines"));
+// SHA-256 hex (64 chars) — what `hashToken` produces. 128-char ceiling
+// guards against pathological hostile input on the receiving handler.
+const tokenIdSchema = v.pipe(v.string(), v.minLength(1), v.maxLength(128));
+// Days-from-now expiry. The form offers 7 / 30 / 90 days as presets
+// plus "never" — modelled here as `null`, which the underlying
+// `createApiToken` accepts. Operators wanting longer windows pass an
+// integer day count up to 5 years; past that we'd want stronger
+// rotation policy (out of scope for v0.1.0).
+const expiresInDaysSchema = v.union([
+    v.null(),
+    v.pipe(v.number(), v.integer(), v.minValue(1), v.maxValue(365 * 5)),
+]);
+// Capability strings — `entry:post:read`, `settings:manage`, etc.
+// Same shape as device-flow's scope schema (kept in sync).
+const capabilitySchema = v.pipe(v.string(), v.minLength(1, "capability must be non-empty"), v.maxLength(96, "capability must be ≤ 96 chars"), v.regex(/^[A-Za-z0-9_:.\-*]+$/, "capability uses [A-Za-z0-9_:.\\-*] only"));
+// null = inherit role caps unrestricted (default); array = whitelist
+// the token narrows to. Cap at 128 entries to bound the column size
+// against a hostile self-mint.
+//
+// Empty array `[]` is legal and means "no caps" — the token still
+// authenticates (so `auth.session` and similar identity-only
+// procedures work) but `auth.can(...)` returns false for every cap.
+// Use case: keep a token alive for revocation timing / audit-log
+// continuity without granting access. Operators creating an empty
+// scope on purpose can do so via the wire layer; the admin UI
+// surfaces the "No caps" badge on the resulting row.
+const scopesSchema = v.optional(v.union([
+    v.null(),
+    v.pipe(v.array(capabilitySchema), v.maxLength(128, "≤ 128 scopes")),
+]), null);
+export const apiTokensListInputSchema = v.optional(v.object({}), {});
+export const apiTokensCreateInputSchema = v.object({
+    name: tokenNameSchema,
+    expiresInDays: v.optional(expiresInDaysSchema, 90),
+    scopes: scopesSchema,
+});
+export const apiTokensRevokeInputSchema = v.object({
+    id: tokenIdSchema,
+});
+// Admin-scope (`user:manage_tokens`) procedures. Distinct from the
+// self-scope ones above so the audit log can attribute "admin X
+// revoked user Y's token" cleanly (and so a future refinement can
+// gate them on a tighter capability without rewiring the self path).
+const userIdSchema = v.pipe(v.number(), v.integer(), v.minValue(1));
+const limitSchema = v.pipe(v.number(), v.integer(), v.minValue(1), v.maxValue(200));
+const offsetSchema = v.pipe(v.number(), v.integer(), v.minValue(0));
+export const apiTokensAdminListInputSchema = v.optional(v.object({
+    /** When set, filter to a single user's tokens. Otherwise: all users. */
+    userId: v.optional(userIdSchema),
+    /** Page size. Default 50, hard cap 200. */
+    limit: v.optional(limitSchema, 50),
+    /** Page offset. */
+    offset: v.optional(offsetSchema, 0),
+    /**
+     * Include revoked rows. Default false (the hot UI path is "active
+     * tokens"). Set to true for an audit-style view.
+     */
+    includeRevoked: v.optional(v.boolean(), false),
+}), {});
+export const apiTokensAdminRevokeInputSchema = v.object({
+    id: tokenIdSchema,
+});
+//# sourceMappingURL=schemas.js.map

package/dist/rpc/procedures/auth/api-tokens/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../../../../src/rpc/procedures/auth/api-tokens/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC;AAE7B,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAC5B,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,IAAI,EAAE,EACR,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,wBAAwB,CAAC,EACxC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,yBAAyB,CAAC;AAC1C,iEAAiE;AACjE,oEAAoE;AACpE,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE,gCAAgC,CAAC,CACxD,CAAC;AAEF,uEAAuE;AACvE,sEAAsE;AACtE,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;AAE3E,oEAAoE;AACpE,+DAA+D;AAC/D,qEAAqE;AACrE,gEAAgE;AAChE,6CAA6C;AAC7C,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC;IAClC,CAAC,CAAC,IAAI,EAAE;IACR,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;CACpE,CAAC,CAAC;AAEH,kEAAkE;AAClE,2DAA2D;AAC3D,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAC7B,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,8BAA8B,CAAC,EAC9C,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,+BAA+B,CAAC,EAChD,CAAC,CAAC,KAAK,CAAC,sBAAsB,EAAE,yCAAyC,CAAC,CAC3E,CAAC;AAEF,qEAAqE;AACrE,oEAAoE;AACpE,+BAA+B;AAC/B,EAAE;AACF,kEAAkE;AAClE,6DAA6D;AAC7D,oEAAoE;AACpE,iEAAiE;AACjE,kEAAkE;AAClE,8DAA8D;AAC9D,qDAAqD;AACrD,MAAM,YAAY,GAAG,CAAC,CAAC,QAAQ,CAC7B,CAAC,CAAC,KAAK,CAAC;IACN,CAAC,CAAC,IAAI,EAAE;IACR,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;CACpE,CAAC,EACF,IAAI,CACL,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AAErE,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,eAAe;IACrB,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,mBAAmB,EAAE,EAAE,CAAC;IAClD,MAAM,EAAE,YAAY;CACrB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,EAAE,EAAE,aAAa;CAClB,CAAC,CAAC;AAEH,mEAAmE;AACnE,gEAAgE;AAChE,kEAAkE;AAClE,qEAAqE;AAErE,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AACpE,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CACxB,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,OAAO,EAAE,EACX,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EACb,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAChB,CAAC;AACF,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAEpE,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,QAAQ,CACrD,CAAC,CAAC,MAAM,CAAC;IACP,wEAAwE;IACxE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;IAChC,2CAA2C;IAC3C,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;IAClC,mBAAmB;IACnB,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;IACnC;;;OAGG;IACH,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC;CAC/C,CAAC,EACF,EAAE,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,EAAE,EAAE,aAAa;CAClB,CAAC,CAAC"}

package/dist/rpc/procedures/auth/credentials/delete.d.ts

@@ -0,0 +1,64 @@
+export declare const del: import("@orpc/server").DecoratedProcedure<import("@orpc/server").MergedInitialContext<import("../../../../index.js").AppContextBase<typeof import("../../../../db/schema/index.js")> & import("../../../../index.js").AppContextExtensions & Record<never, never>, import("../../../../index.js").AppContextBase<typeof import("../../../../db/schema/index.js")> & import("../../../../index.js").AppContextExtensions & Record<never, never>, import("../../../../index.js").AppContext>, import("@orpc/server").MergedCurrentContext<import("../../../../index.js").AppContext, import("../../../../index.js").AuthenticatedAppContext<typeof import("../../../../db/schema/index.js")>>, import("valibot").ObjectSchema<{
+    readonly id: import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").MinLengthAction<string, 1, undefined>, import("valibot").MaxLengthAction<string, 1024, undefined>]>;
+}, undefined>, import("@orpc/server").Schema<{
+    id: string;
+}, {
+    id: string;
+}>, import("@orpc/server").MergedErrorMap<Record<never, never>, {
+    readonly UNAUTHORIZED: {
+        readonly message: "Authentication required";
+    };
+    readonly BAD_REQUEST: {
+        readonly message: "Invalid input";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly reason: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly FORBIDDEN: {
+        readonly message: "Permission denied";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly capability: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly NOT_FOUND: {
+        readonly message: "Resource not found";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly kind: import("valibot").StringSchema<undefined>;
+            readonly id: import("valibot").UnionSchema<[import("valibot").StringSchema<undefined>, import("valibot").NumberSchema<undefined>], undefined>;
+        }, undefined>;
+    };
+    readonly CONFLICT: {
+        readonly message: "Resource conflict";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly reason: import("valibot").StringSchema<undefined>;
+            readonly key: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly PAYLOAD_TOO_LARGE: {
+        readonly message: "Payload too large";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly limit: import("valibot").NumberSchema<undefined>;
+            readonly received: import("valibot").OptionalSchema<import("valibot").NumberSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly UNSUPPORTED_MEDIA_TYPE: {
+        readonly message: "Unsupported media type";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly mime: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly INVALID_BLOCK_CONTENT: {
+        readonly message: "Block content failed registry validation";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly issues: import("valibot").ArraySchema<import("valibot").ObjectSchema<{
+                readonly code: import("valibot").StringSchema<undefined>;
+                readonly message: import("valibot").StringSchema<undefined>;
+                readonly path: import("valibot").StringSchema<undefined>;
+                readonly nodeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                readonly attributeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                readonly markName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+            }, undefined>, undefined>;
+        }, undefined>;
+    };
+}>, Record<never, never>>;
+//# sourceMappingURL=delete.d.ts.map

package/dist/rpc/procedures/auth/credentials/delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../../src/rpc/procedures/auth/credentials/delete.ts"],"names":[],"mappings":"AAkBA,eAAO,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAoCZ,CAAC"}

package/dist/rpc/procedures/auth/credentials/delete.js

@@ -0,0 +1,44 @@
+import { and, eq, sql } from "../../../../db/index.js";
+import { credentials } from "../../../../db/schema/credentials.js";
+import { authenticated } from "../../../authenticated.js";
+import { base } from "../../../base.js";
+import { credentialsDeleteInputSchema } from "./schemas.js";
+// Refuse to delete the user's last credential. Without this guard, a
+// user with passkey-only auth could lock themselves out by removing the
+// credential they're currently signed in with — recovery would require
+// admin intervention (re-issue invite). The user can still rotate by
+// enrolling the new device first (`/passkey/register/options` add-
+// device flow), then deleting the old one.
+//
+// Race-safety: the count check is folded into the DELETE's WHERE via a
+// subquery so the entire decision happens inside one SQLite statement
+// (per-statement isolation = atomic). Two concurrent deletes can no
+// longer both observe `count = 2` and both succeed; the second one
+// sees `count = 1` after the first commits and is denied.
+export const del = base
+    .use(authenticated)
+    .input(credentialsDeleteInputSchema)
+    .handler(async ({ input, context, errors }) => {
+    const userId = context.user.id;
+    const [row] = await context.db
+        .delete(credentials)
+        .where(and(eq(credentials.id, input.id), eq(credentials.userId, userId), sql `(SELECT COUNT(*) FROM ${credentials} WHERE ${credentials.userId} = ${userId}) > 1`))
+        .returning({ id: credentials.id });
+    if (row) {
+        await context.hooks.doAction("credential:revoked", { id: row.id, userId }, { actor: context.user });
+        return row;
+    }
+    // No row deleted — disambiguate the two failure modes so the
+    // client gets the right error code. NOT_FOUND if the target
+    // doesn't exist (or belongs to another user); CONFLICT if it
+    // does exist but the guard refused.
+    const [target] = await context.db
+        .select({ id: credentials.id })
+        .from(credentials)
+        .where(and(eq(credentials.id, input.id), eq(credentials.userId, userId)));
+    if (!target) {
+        throw errors.NOT_FOUND({ data: { kind: "credential", id: input.id } });
+    }
+    throw errors.CONFLICT({ data: { reason: "last_credential" } });
+});
+//# sourceMappingURL=delete.js.map

package/dist/rpc/procedures/auth/credentials/delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../../src/rpc/procedures/auth/credentials/delete.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,sCAAsC,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC;AAE5D,qEAAqE;AACrE,wEAAwE;AACxE,uEAAuE;AACvE,qEAAqE;AACrE,mEAAmE;AACnE,2CAA2C;AAC3C,EAAE;AACF,uEAAuE;AACvE,sEAAsE;AACtE,oEAAoE;AACpE,mEAAmE;AACnE,0DAA0D;AAC1D,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI;KACpB,GAAG,CAAC,aAAa,CAAC;KAClB,KAAK,CAAC,4BAA4B,CAAC;KACnC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;IAC/B,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE;SAC3B,MAAM,CAAC,WAAW,CAAC;SACnB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,EAC5B,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,GAAG,CAAA,yBAAyB,WAAW,UAAU,WAAW,CAAC,MAAM,MAAM,MAAM,OAAO,CACvF,CACF;SACA,SAAS,CAAC,EAAE,EAAE,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;IACrC,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,OAAO,CAAC,KAAK,CAAC,QAAQ,CAC1B,oBAAoB,EACpB,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,EACtB,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,CACxB,CAAC;QACF,OAAO,GAAG,CAAC;IACb,CAAC;IAED,6DAA6D;IAC7D,4DAA4D;IAC5D,6DAA6D;IAC7D,oCAAoC;IACpC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE;SAC9B,MAAM,CAAC,EAAE,EAAE,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC;SAC9B,IAAI,CAAC,WAAW,CAAC;SACjB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC5E,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;AACjE,CAAC,CAAC,CAAC"}

package/dist/rpc/procedures/auth/credentials/index.d.ts

@@ -0,0 +1,203 @@
+export declare const credentialsRouter: {
+    readonly list: import("@orpc/server").DecoratedProcedure<import("@orpc/server").MergedInitialContext<import("../../../../index.js").AppContextBase<typeof import("../../../../db/schema/index.js")> & import("../../../../index.js").AppContextExtensions & Record<never, never>, import("../../../../index.js").AppContextBase<typeof import("../../../../db/schema/index.js")> & import("../../../../index.js").AppContextExtensions & Record<never, never>, import("../../../../index.js").AppContext>, import("@orpc/server").MergedCurrentContext<import("../../../../index.js").AppContext, import("../../../../index.js").AuthenticatedAppContext<typeof import("../../../../db/schema/index.js")>>, import("valibot").OptionalSchema<import("valibot").ObjectSchema<{}, undefined>, {}>, import("@orpc/server").Schema<{
+        id: string;
+        name: string | null;
+        isBackedUp: boolean;
+        transports: import("../../../../index.js").CredentialTransport[] | null;
+        createdAt: Date;
+        lastUsedAt: Date;
+    }[], {
+        id: string;
+        name: string | null;
+        isBackedUp: boolean;
+        transports: import("../../../../index.js").CredentialTransport[] | null;
+        createdAt: Date;
+        lastUsedAt: Date;
+    }[]>, import("@orpc/server").MergedErrorMap<Record<never, never>, {
+        readonly UNAUTHORIZED: {
+            readonly message: "Authentication required";
+        };
+        readonly BAD_REQUEST: {
+            readonly message: "Invalid input";
+            readonly data: import("valibot").ObjectSchema<{
+                readonly reason: import("valibot").StringSchema<undefined>;
+            }, undefined>;
+        };
+        readonly FORBIDDEN: {
+            readonly message: "Permission denied";
+            readonly data: import("valibot").ObjectSchema<{
+                readonly capability: import("valibot").StringSchema<undefined>;
+            }, undefined>;
+        };
+        readonly NOT_FOUND: {
+            readonly message: "Resource not found";
+            readonly data: import("valibot").ObjectSchema<{
+                readonly kind: import("valibot").StringSchema<undefined>;
+                readonly id: import("valibot").UnionSchema<[import("valibot").StringSchema<undefined>, import("valibot").NumberSchema<undefined>], undefined>;
+            }, undefined>;
+        };
+        readonly CONFLICT: {
+            readonly message: "Resource conflict";
+            readonly data: import("valibot").ObjectSchema<{
+                readonly reason: import("valibot").StringSchema<undefined>;
+                readonly key: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+            }, undefined>;
+        };
+        readonly PAYLOAD_TOO_LARGE: {
+            readonly message: "Payload too large";
+            readonly data: import("valibot").ObjectSchema<{
+                readonly limit: import("valibot").NumberSchema<undefined>;
+                readonly received: import("valibot").OptionalSchema<import("valibot").NumberSchema<undefined>, undefined>;
+            }, undefined>;
+        };
+        readonly UNSUPPORTED_MEDIA_TYPE: {
+            readonly message: "Unsupported media type";
+            readonly data: import("valibot").ObjectSchema<{
+                readonly mime: import("valibot").StringSchema<undefined>;
+            }, undefined>;
+        };
+        readonly INVALID_BLOCK_CONTENT: {
+            readonly message: "Block content failed registry validation";
+            readonly data: import("valibot").ObjectSchema<{
+                readonly issues: import("valibot").ArraySchema<import("valibot").ObjectSchema<{
+                    readonly code: import("valibot").StringSchema<undefined>;
+                    readonly message: import("valibot").StringSchema<undefined>;
+                    readonly path: import("valibot").StringSchema<undefined>;
+                    readonly nodeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                    readonly attributeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                    readonly markName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                }, undefined>, undefined>;
+            }, undefined>;
+        };
+    }>, Record<never, never>>;
+    readonly rename: import("@orpc/server").DecoratedProcedure<import("@orpc/server").MergedInitialContext<import("../../../../index.js").AppContextBase<typeof import("../../../../db/schema/index.js")> & import("../../../../index.js").AppContextExtensions & Record<never, never>, import("../../../../index.js").AppContextBase<typeof import("../../../../db/schema/index.js")> & import("../../../../index.js").AppContextExtensions & Record<never, never>, import("../../../../index.js").AppContext>, import("@orpc/server").MergedCurrentContext<import("../../../../index.js").AppContext, import("../../../../index.js").AuthenticatedAppContext<typeof import("../../../../db/schema/index.js")>>, import("valibot").ObjectSchema<{
+        readonly id: import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").MinLengthAction<string, 1, undefined>, import("valibot").MaxLengthAction<string, 1024, undefined>]>;
+        readonly name: import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").TrimAction, import("valibot").MinLengthAction<string, 1, "name must be non-empty">, import("valibot").MaxLengthAction<string, 64, "name must be ≤ 64 chars">, import("valibot").RegexAction<string, "name must not contain newlines">]>;
+    }, undefined>, import("@orpc/server").Schema<{
+        id: string;
+        name: string | null;
+    }, {
+        id: string;
+        name: string | null;
+    }>, import("@orpc/server").MergedErrorMap<Record<never, never>, {
+        readonly UNAUTHORIZED: {
+            readonly message: "Authentication required";
+        };
+        readonly BAD_REQUEST: {
+            readonly message: "Invalid input";
+            readonly data: import("valibot").ObjectSchema<{
+                readonly reason: import("valibot").StringSchema<undefined>;
+            }, undefined>;
+        };
+        readonly FORBIDDEN: {
+            readonly message: "Permission denied";
+            readonly data: import("valibot").ObjectSchema<{
+                readonly capability: import("valibot").StringSchema<undefined>;
+            }, undefined>;
+        };
+        readonly NOT_FOUND: {
+            readonly message: "Resource not found";
+            readonly data: import("valibot").ObjectSchema<{
+                readonly kind: import("valibot").StringSchema<undefined>;
+                readonly id: import("valibot").UnionSchema<[import("valibot").StringSchema<undefined>, import("valibot").NumberSchema<undefined>], undefined>;
+            }, undefined>;
+        };
+        readonly CONFLICT: {
+            readonly message: "Resource conflict";
+            readonly data: import("valibot").ObjectSchema<{
+                readonly reason: import("valibot").StringSchema<undefined>;
+                readonly key: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+            }, undefined>;
+        };
+        readonly PAYLOAD_TOO_LARGE: {
+            readonly message: "Payload too large";
+            readonly data: import("valibot").ObjectSchema<{
+                readonly limit: import("valibot").NumberSchema<undefined>;
+                readonly received: import("valibot").OptionalSchema<import("valibot").NumberSchema<undefined>, undefined>;
+            }, undefined>;
+        };
+        readonly UNSUPPORTED_MEDIA_TYPE: {
+            readonly message: "Unsupported media type";
+            readonly data: import("valibot").ObjectSchema<{
+                readonly mime: import("valibot").StringSchema<undefined>;
+            }, undefined>;
+        };
+        readonly INVALID_BLOCK_CONTENT: {
+            readonly message: "Block content failed registry validation";
+            readonly data: import("valibot").ObjectSchema<{
+                readonly issues: import("valibot").ArraySchema<import("valibot").ObjectSchema<{
+                    readonly code: import("valibot").StringSchema<undefined>;
+                    readonly message: import("valibot").StringSchema<undefined>;
+                    readonly path: import("valibot").StringSchema<undefined>;
+                    readonly nodeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                    readonly attributeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                    readonly markName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                }, undefined>, undefined>;
+            }, undefined>;
+        };
+    }>, Record<never, never>>;
+    readonly delete: import("@orpc/server").DecoratedProcedure<import("@orpc/server").MergedInitialContext<import("../../../../index.js").AppContextBase<typeof import("../../../../db/schema/index.js")> & import("../../../../index.js").AppContextExtensions & Record<never, never>, import("../../../../index.js").AppContextBase<typeof import("../../../../db/schema/index.js")> & import("../../../../index.js").AppContextExtensions & Record<never, never>, import("../../../../index.js").AppContext>, import("@orpc/server").MergedCurrentContext<import("../../../../index.js").AppContext, import("../../../../index.js").AuthenticatedAppContext<typeof import("../../../../db/schema/index.js")>>, import("valibot").ObjectSchema<{
+        readonly id: import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").MinLengthAction<string, 1, undefined>, import("valibot").MaxLengthAction<string, 1024, undefined>]>;
+    }, undefined>, import("@orpc/server").Schema<{
+        id: string;
+    }, {
+        id: string;
+    }>, import("@orpc/server").MergedErrorMap<Record<never, never>, {
+        readonly UNAUTHORIZED: {
+            readonly message: "Authentication required";
+        };
+        readonly BAD_REQUEST: {
+            readonly message: "Invalid input";
+            readonly data: import("valibot").ObjectSchema<{
+                readonly reason: import("valibot").StringSchema<undefined>;
+            }, undefined>;
+        };
+        readonly FORBIDDEN: {
+            readonly message: "Permission denied";
+            readonly data: import("valibot").ObjectSchema<{
+                readonly capability: import("valibot").StringSchema<undefined>;
+            }, undefined>;
+        };
+        readonly NOT_FOUND: {
+            readonly message: "Resource not found";
+            readonly data: import("valibot").ObjectSchema<{
+                readonly kind: import("valibot").StringSchema<undefined>;
+                readonly id: import("valibot").UnionSchema<[import("valibot").StringSchema<undefined>, import("valibot").NumberSchema<undefined>], undefined>;
+            }, undefined>;
+        };
+        readonly CONFLICT: {
+            readonly message: "Resource conflict";
+            readonly data: import("valibot").ObjectSchema<{
+                readonly reason: import("valibot").StringSchema<undefined>;
+                readonly key: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+            }, undefined>;
+        };
+        readonly PAYLOAD_TOO_LARGE: {
+            readonly message: "Payload too large";
+            readonly data: import("valibot").ObjectSchema<{
+                readonly limit: import("valibot").NumberSchema<undefined>;
+                readonly received: import("valibot").OptionalSchema<import("valibot").NumberSchema<undefined>, undefined>;
+            }, undefined>;
+        };
+        readonly UNSUPPORTED_MEDIA_TYPE: {
+            readonly message: "Unsupported media type";
+            readonly data: import("valibot").ObjectSchema<{
+                readonly mime: import("valibot").StringSchema<undefined>;
+            }, undefined>;
+        };
+        readonly INVALID_BLOCK_CONTENT: {
+            readonly message: "Block content failed registry validation";
+            readonly data: import("valibot").ObjectSchema<{
+                readonly issues: import("valibot").ArraySchema<import("valibot").ObjectSchema<{
+                    readonly code: import("valibot").StringSchema<undefined>;
+                    readonly message: import("valibot").StringSchema<undefined>;
+                    readonly path: import("valibot").StringSchema<undefined>;
+                    readonly nodeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                    readonly attributeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                    readonly markName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                }, undefined>, undefined>;
+            }, undefined>;
+        };
+    }>, Record<never, never>>;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/rpc/procedures/auth/credentials/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/rpc/procedures/auth/credentials/index.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAIpB,CAAC"}

package/dist/rpc/procedures/auth/credentials/index.js

@@ -0,0 +1,9 @@
+import { del } from "./delete.js";
+import { list } from "./list.js";
+import { rename } from "./rename.js";
+export const credentialsRouter = {
+    list,
+    rename,
+    delete: del,
+};
+//# sourceMappingURL=index.js.map

package/dist/rpc/procedures/auth/credentials/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/rpc/procedures/auth/credentials/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI;IACJ,MAAM;IACN,MAAM,EAAE,GAAG;CACH,CAAC"}

package/dist/rpc/procedures/auth/credentials/list.d.ts

@@ -0,0 +1,72 @@
+export declare const list: import("@orpc/server").DecoratedProcedure<import("@orpc/server").MergedInitialContext<import("../../../../index.js").AppContextBase<typeof import("../../../../db/schema/index.js")> & import("../../../../index.js").AppContextExtensions & Record<never, never>, import("../../../../index.js").AppContextBase<typeof import("../../../../db/schema/index.js")> & import("../../../../index.js").AppContextExtensions & Record<never, never>, import("../../../../index.js").AppContext>, import("@orpc/server").MergedCurrentContext<import("../../../../index.js").AppContext, import("../../../../index.js").AuthenticatedAppContext<typeof import("../../../../db/schema/index.js")>>, import("valibot").OptionalSchema<import("valibot").ObjectSchema<{}, undefined>, {}>, import("@orpc/server").Schema<{
+    id: string;
+    name: string | null;
+    isBackedUp: boolean;
+    transports: import("../../../../index.js").CredentialTransport[] | null;
+    createdAt: Date;
+    lastUsedAt: Date;
+}[], {
+    id: string;
+    name: string | null;
+    isBackedUp: boolean;
+    transports: import("../../../../index.js").CredentialTransport[] | null;
+    createdAt: Date;
+    lastUsedAt: Date;
+}[]>, import("@orpc/server").MergedErrorMap<Record<never, never>, {
+    readonly UNAUTHORIZED: {
+        readonly message: "Authentication required";
+    };
+    readonly BAD_REQUEST: {
+        readonly message: "Invalid input";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly reason: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly FORBIDDEN: {
+        readonly message: "Permission denied";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly capability: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly NOT_FOUND: {
+        readonly message: "Resource not found";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly kind: import("valibot").StringSchema<undefined>;
+            readonly id: import("valibot").UnionSchema<[import("valibot").StringSchema<undefined>, import("valibot").NumberSchema<undefined>], undefined>;
+        }, undefined>;
+    };
+    readonly CONFLICT: {
+        readonly message: "Resource conflict";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly reason: import("valibot").StringSchema<undefined>;
+            readonly key: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly PAYLOAD_TOO_LARGE: {
+        readonly message: "Payload too large";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly limit: import("valibot").NumberSchema<undefined>;
+            readonly received: import("valibot").OptionalSchema<import("valibot").NumberSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly UNSUPPORTED_MEDIA_TYPE: {
+        readonly message: "Unsupported media type";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly mime: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly INVALID_BLOCK_CONTENT: {
+        readonly message: "Block content failed registry validation";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly issues: import("valibot").ArraySchema<import("valibot").ObjectSchema<{
+                readonly code: import("valibot").StringSchema<undefined>;
+                readonly message: import("valibot").StringSchema<undefined>;
+                readonly path: import("valibot").StringSchema<undefined>;
+                readonly nodeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                readonly attributeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                readonly markName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+            }, undefined>, undefined>;
+        }, undefined>;
+    };
+}>, Record<never, never>>;
+//# sourceMappingURL=list.d.ts.map

package/dist/rpc/procedures/auth/credentials/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../../../src/rpc/procedures/auth/credentials/list.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAgBb,CAAC"}

package/dist/rpc/procedures/auth/credentials/list.js

@@ -0,0 +1,27 @@
+import { asc, eq } from "../../../../db/index.js";
+import { credentials } from "../../../../db/schema/credentials.js";
+import { authenticated } from "../../../authenticated.js";
+import { base } from "../../../base.js";
+import { credentialsListInputSchema } from "./schemas.js";
+// Returns the *current user's* registered passkeys. Self-scoped — no
+// capability check; users always see their own credentials. Drops the
+// raw `publicKey` blob (binary, useless to the admin UI, and a chunky
+// payload to ship over the wire on every list call).
+export const list = base
+    .use(authenticated)
+    .input(credentialsListInputSchema)
+    .handler(async ({ context }) => {
+    return context.db
+        .select({
+        id: credentials.id,
+        name: credentials.name,
+        isBackedUp: credentials.isBackedUp,
+        transports: credentials.transports,
+        createdAt: credentials.createdAt,
+        lastUsedAt: credentials.lastUsedAt,
+    })
+        .from(credentials)
+        .where(eq(credentials.userId, context.user.id))
+        .orderBy(asc(credentials.createdAt));
+});
+//# sourceMappingURL=list.js.map

package/dist/rpc/procedures/auth/credentials/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../../../src/rpc/procedures/auth/credentials/list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,yBAAyB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,sCAAsC,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAE1D,qEAAqE;AACrE,sEAAsE;AACtE,sEAAsE;AACtE,qDAAqD;AACrD,MAAM,CAAC,MAAM,IAAI,GAAG,IAAI;KACrB,GAAG,CAAC,aAAa,CAAC;KAClB,KAAK,CAAC,0BAA0B,CAAC;KACjC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;IAC7B,OAAO,OAAO,CAAC,EAAE;SACd,MAAM,CAAC;QACN,EAAE,EAAE,WAAW,CAAC,EAAE;QAClB,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,UAAU,EAAE,WAAW,CAAC,UAAU;QAClC,UAAU,EAAE,WAAW,CAAC,UAAU;QAClC,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,UAAU,EAAE,WAAW,CAAC,UAAU;KACnC,CAAC;SACD,IAAI,CAAC,WAAW,CAAC;SACjB,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;SAC9C,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;AACzC,CAAC,CAAC,CAAC"}