@plumix/core 0.1.0

package/dist/rpc/procedures/user/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/rpc/procedures/user/index.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAYb,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC"}

package/dist/rpc/procedures/user/index.js

@@ -0,0 +1,25 @@
+import { cancelEmailChangeProc } from "./cancel-email-change.js";
+import { del } from "./delete.js";
+import { disable } from "./disable.js";
+import { enable } from "./enable.js";
+import { get } from "./get.js";
+import { invite } from "./invite.js";
+import { list } from "./list.js";
+import { pendingEmailChange } from "./pending-email-change.js";
+import { requestEmailChangeProc } from "./request-email-change.js";
+import { setLocale } from "./set-locale.js";
+import { update } from "./update.js";
+export const userRouter = {
+    list,
+    get,
+    invite,
+    update,
+    disable,
+    enable,
+    delete: del,
+    setLocale,
+    requestEmailChange: requestEmailChangeProc,
+    cancelEmailChange: cancelEmailChangeProc,
+    pendingEmailChange,
+};
+//# sourceMappingURL=index.js.map

package/dist/rpc/procedures/user/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/rpc/procedures/user/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,IAAI;IACJ,GAAG;IACH,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM,EAAE,GAAG;IACX,SAAS;IACT,kBAAkB,EAAE,sBAAsB;IAC1C,iBAAiB,EAAE,qBAAqB;IACxC,kBAAkB;CACV,CAAC"}

package/dist/rpc/procedures/user/invite.d.ts

@@ -0,0 +1,68 @@
+export declare const invite: import("@orpc/server").DecoratedProcedure<import("@orpc/server").MergedInitialContext<import("../../../index.js").AppContextBase<typeof import("../../../db/schema/index.js")> & import("../../../index.js").AppContextExtensions & Record<never, never>, import("../../../index.js").AppContextBase<typeof import("../../../db/schema/index.js")> & import("../../../index.js").AppContextExtensions & Record<never, never>, import("../../../index.js").AppContext>, import("@orpc/server").MergedCurrentContext<import("../../../index.js").AppContext, import("../../../index.js").AuthenticatedAppContext<typeof import("../../../db/schema/index.js")>>, import("valibot").ObjectSchema<{
+    readonly email: import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").TrimAction, import("valibot").MinLengthAction<string, 1, () => string>, import("valibot").MaxLengthAction<string, 254, () => string>, import("valibot").EmailAction<string, () => string>]>;
+    readonly role: import("valibot").OptionalSchema<import("valibot").PicklistSchema<readonly ["subscriber", "contributor", "author", "editor", "admin"], undefined>, "subscriber">;
+    readonly name: import("valibot").OptionalSchema<import("valibot").NullableSchema<import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").TrimAction, import("valibot").MaxLengthAction<string, 200, () => string>]>, undefined>, undefined>;
+}, undefined>, import("@orpc/server").Schema<{
+    user: import("../../../index.js").User;
+    inviteToken: string;
+}, {
+    user: import("../../../index.js").User;
+    inviteToken: string;
+}>, import("@orpc/server").MergedErrorMap<Record<never, never>, {
+    readonly UNAUTHORIZED: {
+        readonly message: "Authentication required";
+    };
+    readonly BAD_REQUEST: {
+        readonly message: "Invalid input";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly reason: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly FORBIDDEN: {
+        readonly message: "Permission denied";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly capability: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly NOT_FOUND: {
+        readonly message: "Resource not found";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly kind: import("valibot").StringSchema<undefined>;
+            readonly id: import("valibot").UnionSchema<[import("valibot").StringSchema<undefined>, import("valibot").NumberSchema<undefined>], undefined>;
+        }, undefined>;
+    };
+    readonly CONFLICT: {
+        readonly message: "Resource conflict";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly reason: import("valibot").StringSchema<undefined>;
+            readonly key: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly PAYLOAD_TOO_LARGE: {
+        readonly message: "Payload too large";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly limit: import("valibot").NumberSchema<undefined>;
+            readonly received: import("valibot").OptionalSchema<import("valibot").NumberSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly UNSUPPORTED_MEDIA_TYPE: {
+        readonly message: "Unsupported media type";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly mime: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly INVALID_BLOCK_CONTENT: {
+        readonly message: "Block content failed registry validation";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly issues: import("valibot").ArraySchema<import("valibot").ObjectSchema<{
+                readonly code: import("valibot").StringSchema<undefined>;
+                readonly message: import("valibot").StringSchema<undefined>;
+                readonly path: import("valibot").StringSchema<undefined>;
+                readonly nodeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                readonly attributeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                readonly markName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+            }, undefined>, undefined>;
+        }, undefined>;
+    };
+}>, Record<never, never>>;
+//# sourceMappingURL=invite.d.ts.map

package/dist/rpc/procedures/user/invite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite.d.ts","sourceRoot":"","sources":["../../../../src/rpc/procedures/user/invite.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBA0Df,CAAC"}

package/dist/rpc/procedures/user/invite.js

@@ -0,0 +1,62 @@
+import { generateToken, hashToken } from "../../../auth/tokens.js";
+import { isUniqueConstraintError } from "../../../db/index.js";
+import { authTokens } from "../../../db/schema/auth_tokens.js";
+import { users } from "../../../db/schema/users.js";
+import { authenticated } from "../../authenticated.js";
+import { base } from "../../base.js";
+import { userInviteInputSchema } from "./schemas.js";
+const CREATE_CAPABILITY = "user:create";
+const INVITE_TTL_MS = 7 * 24 * 60 * 60 * 1000;
+export const invite = base
+    .use(authenticated)
+    .input(userInviteInputSchema)
+    .handler(async ({ input, context, errors }) => {
+    if (!context.auth.can(CREATE_CAPABILITY)) {
+        throw errors.FORBIDDEN({ data: { capability: CREATE_CAPABILITY } });
+    }
+    const filtered = await context.hooks.applyFilter("rpc:user.invite:input", input);
+    const token = generateToken();
+    const tokenHash = await hashToken(token);
+    const expiresAt = new Date(Date.now() + INVITE_TTL_MS);
+    let created;
+    try {
+        [created] = await context.db
+            .insert(users)
+            .values({
+            email: filtered.email,
+            name: filtered.name ?? null,
+            role: filtered.role,
+        })
+            .returning();
+    }
+    catch (error) {
+        if (isUniqueConstraintError(error)) {
+            throw errors.CONFLICT({ data: { reason: "email_taken" } });
+        }
+        throw error;
+    }
+    if (!created) {
+        throw errors.CONFLICT({ data: { reason: "insert_failed" } });
+    }
+    await context.db.insert(authTokens).values({
+        hash: tokenHash,
+        userId: created.id,
+        email: filtered.email,
+        type: "invite",
+        role: filtered.role,
+        invitedBy: context.user.id,
+        expiresAt,
+    });
+    // Fires before the output filter so plugins observing invites see the
+    // raw created user + token — e.g. an email-delivery plugin needs the
+    // token here to compose the invite URL. Parallel to WordPress's
+    // `user_register` action hook.
+    await context.hooks.doAction("user:invited", created, {
+        inviteToken: token,
+        invitedBy: context.user.id,
+        expiresAt,
+    });
+    const output = { user: created, inviteToken: token };
+    return context.hooks.applyFilter("rpc:user.invite:output", output);
+});
+//# sourceMappingURL=invite.js.map

package/dist/rpc/procedures/user/invite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite.js","sourceRoot":"","sources":["../../../../src/rpc/procedures/user/invite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAC/D,OAAO,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAErD,MAAM,iBAAiB,GAAG,aAAa,CAAC;AACxC,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE9C,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI;KACvB,GAAG,CAAC,aAAa,CAAC;KAClB,KAAK,CAAC,qBAAqB,CAAC;KAC5B,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;IAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACzC,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,WAAW,CAC9C,uBAAuB,EACvB,KAAK,CACN,CAAC;IAEF,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,CAAC;IAEvD,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,CAAC,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE;aACzB,MAAM,CAAC,KAAK,CAAC;aACb,MAAM,CAAC;YACN,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,IAAI;YAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;SACpB,CAAC;aACD,SAAS,EAAE,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;QACzC,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,OAAO,CAAC,EAAE;QAClB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;QAC1B,SAAS;KACV,CAAC,CAAC;IAEH,sEAAsE;IACtE,qEAAqE;IACrE,gEAAgE;IAChE,+BAA+B;IAC/B,MAAM,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,EAAE,OAAO,EAAE;QACpD,WAAW,EAAE,KAAK;QAClB,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;QAC1B,SAAS;KACV,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IACrD,OAAO,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC;AACrE,CAAC,CAAC,CAAC"}

package/dist/rpc/procedures/user/list.d.ts

@@ -0,0 +1,89 @@
+export declare const list: import("@orpc/server").DecoratedProcedure<import("@orpc/server").MergedInitialContext<import("../../../index.js").AppContextBase<typeof import("../../../db/schema/index.js")> & import("../../../index.js").AppContextExtensions & Record<never, never>, import("../../../index.js").AppContextBase<typeof import("../../../db/schema/index.js")> & import("../../../index.js").AppContextExtensions & Record<never, never>, import("../../../index.js").AppContext>, import("@orpc/server").MergedCurrentContext<import("../../../index.js").AppContext, import("../../../index.js").AuthenticatedAppContext<typeof import("../../../db/schema/index.js")>>, import("valibot").ObjectSchema<{
+    readonly limit: import("valibot").OptionalSchema<import("valibot").SchemaWithPipe<readonly [import("valibot").NumberSchema<undefined>, import("valibot").IntegerAction<number, undefined>, import("valibot").MinValueAction<number, 1, undefined>, import("valibot").MaxValueAction<number, 100, undefined>]>, 20>;
+    readonly offset: import("valibot").OptionalSchema<import("valibot").SchemaWithPipe<readonly [import("valibot").NumberSchema<undefined>, import("valibot").IntegerAction<number, undefined>, import("valibot").MinValueAction<number, 0, undefined>]>, 0>;
+    readonly role: import("valibot").OptionalSchema<import("valibot").PicklistSchema<readonly ["subscriber", "contributor", "author", "editor", "admin"], undefined>, undefined>;
+    readonly search: import("valibot").OptionalSchema<import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").TrimAction, import("valibot").MaxLengthAction<string, 200, undefined>]>, undefined>;
+}, undefined>, import("@orpc/server").Schema<readonly ({
+    id: number;
+    email: string;
+    name: string | null;
+    avatarUrl: string | null;
+    role: "subscriber" | "contributor" | "author" | "editor" | "admin";
+    meta: Record<string, unknown>;
+    emailVerifiedAt: Date | null;
+    disabledAt: Date | null;
+    createdAt: Date;
+    updatedAt: Date;
+} & {
+    readonly lastSignInAt: Date | null;
+})[], readonly ({
+    id: number;
+    email: string;
+    name: string | null;
+    avatarUrl: string | null;
+    role: "subscriber" | "contributor" | "author" | "editor" | "admin";
+    meta: Record<string, unknown>;
+    emailVerifiedAt: Date | null;
+    disabledAt: Date | null;
+    createdAt: Date;
+    updatedAt: Date;
+} & {
+    readonly lastSignInAt: Date | null;
+})[]>, import("@orpc/server").MergedErrorMap<Record<never, never>, {
+    readonly UNAUTHORIZED: {
+        readonly message: "Authentication required";
+    };
+    readonly BAD_REQUEST: {
+        readonly message: "Invalid input";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly reason: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly FORBIDDEN: {
+        readonly message: "Permission denied";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly capability: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly NOT_FOUND: {
+        readonly message: "Resource not found";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly kind: import("valibot").StringSchema<undefined>;
+            readonly id: import("valibot").UnionSchema<[import("valibot").StringSchema<undefined>, import("valibot").NumberSchema<undefined>], undefined>;
+        }, undefined>;
+    };
+    readonly CONFLICT: {
+        readonly message: "Resource conflict";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly reason: import("valibot").StringSchema<undefined>;
+            readonly key: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly PAYLOAD_TOO_LARGE: {
+        readonly message: "Payload too large";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly limit: import("valibot").NumberSchema<undefined>;
+            readonly received: import("valibot").OptionalSchema<import("valibot").NumberSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly UNSUPPORTED_MEDIA_TYPE: {
+        readonly message: "Unsupported media type";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly mime: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly INVALID_BLOCK_CONTENT: {
+        readonly message: "Block content failed registry validation";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly issues: import("valibot").ArraySchema<import("valibot").ObjectSchema<{
+                readonly code: import("valibot").StringSchema<undefined>;
+                readonly message: import("valibot").StringSchema<undefined>;
+                readonly path: import("valibot").StringSchema<undefined>;
+                readonly nodeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                readonly attributeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                readonly markName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+            }, undefined>, undefined>;
+        }, undefined>;
+    };
+}>, Record<never, never>>;
+//# sourceMappingURL=list.d.ts.map

package/dist/rpc/procedures/user/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../../src/rpc/procedures/user/list.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBA8Eb,CAAC"}

package/dist/rpc/procedures/user/list.js

@@ -0,0 +1,75 @@
+import { and, desc, eq, like, sql } from "../../../db/index.js";
+import { sessions } from "../../../db/schema/sessions.js";
+import { users } from "../../../db/schema/users.js";
+import { authenticated } from "../../authenticated.js";
+import { base } from "../../base.js";
+import { userListInputSchema } from "./schemas.js";
+const CAPABILITY = "user:list";
+export const list = base
+    .use(authenticated)
+    .input(userListInputSchema)
+    .handler(async ({ input, context, errors }) => {
+    if (!context.auth.can(CAPABILITY)) {
+        throw errors.FORBIDDEN({ data: { capability: CAPABILITY } });
+    }
+    const filtered = await context.hooks.applyFilter("rpc:user.list:input", input);
+    const conditions = [];
+    if (filtered.role)
+        conditions.push(eq(users.role, filtered.role));
+    if (filtered.search && filtered.search.length > 0) {
+        conditions.push(like(users.email, `%${filtered.search}%`));
+    }
+    const where = conditions.length > 0 ? and(...conditions) : undefined;
+    // `lastSignInAt` is a correlated subselect, evaluated once per
+    // outer row. Single SQL statement; the existing
+    // `sessions_user_id_idx` makes the per-row lookup an index seek.
+    // Returns null when the user has never signed in — the admin's
+    // users-table renders that as "Never".
+    //
+    // Drizzle's `${col}` interpolation emits the bare column name
+    // without the table qualifier (`"user_id"` not `"sessions"."user_id"`).
+    // Inside the subquery scope, the unqualified `"user_id"` would
+    // resolve to `sessions.user_id` and the outer `users.id` would
+    // shadow as the inner `sessions.id` (a hash) — both columns
+    // exist in the inner scope, so the predicate compares the
+    // wrong fields and returns null. Use `sql.identifier` to emit
+    // table-qualified references.
+    const sessionsUserId = sql `${sql.identifier("sessions")}.${sql.identifier("user_id")}`;
+    const sessionsCreatedAt = sql `${sql.identifier("sessions")}.${sql.identifier("created_at")}`;
+    const usersId = sql `${sql.identifier("users")}.${sql.identifier("id")}`;
+    // The raw driver returns the subselect's MAX as a unix-epoch
+    // integer (the underlying column is `integer({ mode: "timestamp" })`,
+    // but drizzle's timestamp coercion only applies when reading a
+    // schema-typed column directly — `sql<...>` expressions bypass it).
+    // Type as `number | null` here and lift to `Date | null` in JS so
+    // the wire shape matches the rest of the row's timestamp fields.
+    const raw = await context.db
+        .select({
+        id: users.id,
+        email: users.email,
+        name: users.name,
+        avatarUrl: users.avatarUrl,
+        role: users.role,
+        meta: users.meta,
+        emailVerifiedAt: users.emailVerifiedAt,
+        disabledAt: users.disabledAt,
+        createdAt: users.createdAt,
+        updatedAt: users.updatedAt,
+        lastSignInEpoch: sql `(
+          SELECT MAX(${sessionsCreatedAt})
+          FROM ${sessions}
+          WHERE ${sessionsUserId} = ${usersId}
+        )`.as("lastSignInEpoch"),
+    })
+        .from(users)
+        .where(where)
+        .orderBy(desc(users.createdAt), desc(users.id))
+        .limit(filtered.limit)
+        .offset(filtered.offset);
+    const rows = raw.map(({ lastSignInEpoch, ...rest }) => ({
+        ...rest,
+        lastSignInAt: lastSignInEpoch === null ? null : new Date(lastSignInEpoch * 1000),
+    }));
+    return context.hooks.applyFilter("rpc:user.list:output", rows);
+});
+//# sourceMappingURL=list.js.map

package/dist/rpc/procedures/user/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../../src/rpc/procedures/user/list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAC1D,OAAO,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,UAAU,GAAG,WAAW,CAAC;AAE/B,MAAM,CAAC,MAAM,IAAI,GAAG,IAAI;KACrB,GAAG,CAAC,aAAa,CAAC;KAClB,KAAK,CAAC,mBAAmB,CAAC;KAC1B,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;IAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,WAAW,CAC9C,qBAAqB,EACrB,KAAK,CACN,CAAC;IAEF,MAAM,UAAU,GAAG,EAAE,CAAC;IACtB,IAAI,QAAQ,CAAC,IAAI;QAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAErE,+DAA+D;IAC/D,gDAAgD;IAChD,iEAAiE;IACjE,+DAA+D;IAC/D,uCAAuC;IACvC,EAAE;IACF,8DAA8D;IAC9D,wEAAwE;IACxE,+DAA+D;IAC/D,+DAA+D;IAC/D,4DAA4D;IAC5D,0DAA0D;IAC1D,8DAA8D;IAC9D,8BAA8B;IAC9B,MAAM,cAAc,GAAG,GAAG,CAAA,GAAG,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,UAAU,CACvE,SAAS,CACV,EAAE,CAAC;IACJ,MAAM,iBAAiB,GAAG,GAAG,CAAA,GAAG,GAAG,CAAC,UAAU,CAC5C,UAAU,CACX,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,GAAG,CAAA,GAAG,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;IAExE,6DAA6D;IAC7D,sEAAsE;IACtE,+DAA+D;IAC/D,oEAAoE;IACpE,kEAAkE;IAClE,iEAAiE;IACjE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,EAAE;SACzB,MAAM,CAAC;QACN,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,GAAG,CAAe;uBACpB,iBAAiB;iBACvB,QAAQ;kBACP,cAAc,MAAM,OAAO;UACnC,CAAC,EAAE,CAAC,iBAAiB,CAAC;KACzB,CAAC;SACD,IAAI,CAAC,KAAK,CAAC;SACX,KAAK,CAAC,KAAK,CAAC;SACZ,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;SAC9C,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;SACrB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE3B,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACtD,GAAG,IAAI;QACP,YAAY,EACV,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;KACrE,CAAC,CAAC,CAAC;IAEJ,OAAO,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC;AACjE,CAAC,CAAC,CAAC"}

package/dist/rpc/procedures/user/lookup.d.ts

@@ -0,0 +1,4 @@
+import type { UserFieldScope } from "../../../plugin/fields/user.js";
+import type { LookupAdapter } from "../../../plugin/lookup.js";
+export declare const userLookupAdapter: LookupAdapter<UserFieldScope>;
+//# sourceMappingURL=lookup.d.ts.map

package/dist/rpc/procedures/user/lookup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lookup.d.ts","sourceRoot":"","sources":["../../../../src/rpc/procedures/user/lookup.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,EAAE,aAAa,EAAgB,MAAM,2BAA2B,CAAC;AAc7E,eAAO,MAAM,iBAAiB,EAAE,aAAa,CAAC,cAAc,CAgD3D,CAAC"}

package/dist/rpc/procedures/user/lookup.js

@@ -0,0 +1,95 @@
+import { and, eq, inArray, isNull, like, or, sql } from "../../../db/index.js";
+import { users } from "../../../db/schema/users.js";
+const DEFAULT_LIST_LIMIT = 20;
+const MAX_LIST_LIMIT = 100;
+const USER_ROW_COLUMNS = {
+    id: users.id,
+    email: users.email,
+    name: users.name,
+    role: users.role,
+};
+export const userLookupAdapter = {
+    async list(ctx, options) {
+        const conditions = scopeConditions(options.scope);
+        let limit;
+        if (options.ids !== undefined) {
+            // Resolve-by-id batch path: ignore `query` and bound the result
+            // to the parsed ids. Invalid (non-numeric) ids are silently
+            // dropped — they read as orphans on the caller's side. Limit
+            // tracks `numericIds.length` (not `MAX_LIST_LIMIT`) because the
+            // meta pipeline aggregates ids across same-`(kind,scope)` fields
+            // and can legitimately request >100 in one call.
+            const numericIds = options.ids
+                .map((id) => parseUserId(id))
+                .filter((id) => id !== null);
+            if (numericIds.length === 0)
+                return [];
+            conditions.push(inArray(users.id, numericIds));
+            limit = numericIds.length;
+        }
+        else {
+            const trimmedQuery = options.query?.trim();
+            if (trimmedQuery) {
+                const pattern = `%${trimmedQuery}%`;
+                const queryMatch = or(like(users.email, pattern), like(users.name, pattern));
+                if (queryMatch)
+                    conditions.push(queryMatch);
+            }
+            limit = clampLimit(options.limit);
+        }
+        const rows = await ctx.db
+            .select(USER_ROW_COLUMNS)
+            .from(users)
+            .where(conditions.length === 0 ? undefined : and(...conditions))
+            .orderBy(sql `coalesce(${users.name}, ${users.email})`)
+            .limit(limit);
+        return rows.map(toLookupResult);
+    },
+    async resolve(ctx, id, scope) {
+        const numericId = parseUserId(id);
+        if (numericId === null)
+            return null;
+        const [row] = await ctx.db
+            .select(USER_ROW_COLUMNS)
+            .from(users)
+            .where(buildUserWhere(numericId, scope))
+            .limit(1);
+        return row ? toLookupResult(row) : null;
+    },
+};
+function parseUserId(id) {
+    // users.id is autoincrement; reject anything that isn't a positive integer.
+    if (!/^[1-9]\d*$/.test(id))
+        return null;
+    const parsed = Number(id);
+    return Number.isSafeInteger(parsed) ? parsed : null;
+}
+function buildUserWhere(numericId, scope) {
+    return and(eq(users.id, numericId), ...scopeConditions(scope));
+}
+function scopeConditions(scope) {
+    const conditions = [];
+    if (scope?.roles && scope.roles.length > 0) {
+        conditions.push(inArray(users.role, scope.roles));
+    }
+    if (!scope?.includeDisabled) {
+        conditions.push(isNull(users.disabledAt));
+    }
+    return conditions;
+}
+function clampLimit(requested) {
+    if (requested === undefined)
+        return DEFAULT_LIST_LIMIT;
+    if (!Number.isFinite(requested) || requested <= 0)
+        return DEFAULT_LIST_LIMIT;
+    return Math.min(Math.floor(requested), MAX_LIST_LIMIT);
+}
+function toLookupResult(row) {
+    const trimmedName = row.name?.trim();
+    return {
+        id: String(row.id),
+        label: trimmedName !== undefined && trimmedName !== "" ? trimmedName : row.email,
+        subtitle: row.name ? `${row.email} · ${row.role}` : row.role,
+    };
+}
+//# sourceMappingURL=lookup.js.map

package/dist/rpc/procedures/user/lookup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lookup.js","sourceRoot":"","sources":["../../../../src/rpc/procedures/user/lookup.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AAEpD,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,MAAM,gBAAgB,GAAG;IACvB,EAAE,EAAE,KAAK,CAAC,EAAE;IACZ,KAAK,EAAE,KAAK,CAAC,KAAK;IAClB,IAAI,EAAE,KAAK,CAAC,IAAI;IAChB,IAAI,EAAE,KAAK,CAAC,IAAI;CACR,CAAC;AAEX,MAAM,CAAC,MAAM,iBAAiB,GAAkC;IAC9D,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO;QACrB,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,KAAa,CAAC;QAClB,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC9B,gEAAgE;YAChE,4DAA4D;YAC5D,6DAA6D;YAC7D,gEAAgE;YAChE,iEAAiE;YACjE,iDAAiD;YACjD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG;iBAC3B,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;iBAC5B,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;YAC7C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YACvC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;YAC/C,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;YAC3C,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,OAAO,GAAG,IAAI,YAAY,GAAG,CAAC;gBACpC,MAAM,UAAU,GAAG,EAAE,CACnB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,EAC1B,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAC1B,CAAC;gBACF,IAAI,UAAU;oBAAE,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC9C,CAAC;YACD,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE;aACtB,MAAM,CAAC,gBAAgB,CAAC;aACxB,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;aAC/D,OAAO,CAAC,GAAG,CAAA,YAAY,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,GAAG,CAAC;aACrD,KAAK,CAAC,KAAK,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK;QAC1B,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE;aACvB,MAAM,CAAC,gBAAgB,CAAC;aACxB,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;aACvC,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1C,CAAC;CACF,CAAC;AAEF,SAAS,WAAW,CAAC,EAAU;IAC7B,4EAA4E;IAC5E,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED,SAAS,cAAc,CAAC,SAAiB,EAAE,KAAiC;IAC1E,OAAO,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,eAAe,CAAC,KAAiC;IACxD,MAAM,UAAU,GAAU,EAAE,CAAC;IAC7B,IAAI,KAAK,EAAE,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAmB,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,eAAe,EAAE,CAAC;QAC5B,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,UAAU,CAAC,SAA6B;IAC/C,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,kBAAkB,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC;QAAE,OAAO,kBAAkB,CAAC;IAC7E,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,cAAc,CAAC,GAKvB;IACC,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IACrC,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAClB,KAAK,EACH,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK;QAC3E,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI;KAC7D,CAAC;AACJ,CAAC"}

package/dist/rpc/procedures/user/meta.d.ts

@@ -0,0 +1,32 @@
+import type { AppContext } from "../../../context/app.js";
+import type { PluginRegistry } from "../../../plugin/manifest.js";
+import type { MetaPatch } from "../../meta/core.js";
+import { sanitizeMetaForRpc as sanitizeMetaForRpcCore } from "../../meta/core.js";
+export type { MetaChanges as UserMetaChanges } from "../../meta/core.js";
+/** RPC-facing sanitizer for a user's meta input. User meta is a flat
+ *  keyspace — no scope argument. */
+export declare function sanitizeMetaForRpc(registry: PluginRegistry, input: Record<string, unknown> | undefined, errors: Parameters<typeof sanitizeMetaForRpcCore>[2]): MetaPatch | null;
+export declare function validateUserMetaReferences(ctx: AppContext, patch: MetaPatch, errors: Parameters<typeof sanitizeMetaForRpcCore>[2]): Promise<void>;
+/** Mirror of `assertEntryMetaCapabilities` for the user meta surface. */
+export declare function assertUserMetaCapabilities(registry: PluginRegistry, patch: MetaPatch, auth: {
+    can(capability: string): boolean;
+}, errors: {
+    FORBIDDEN: (args: {
+        data: {
+            capability: string;
+        };
+    }) => Error;
+}): void;
+export declare function decodeMetaBag(registry: PluginRegistry, raw: Readonly<Record<string, unknown>> | null | undefined): Record<string, unknown>;
+export declare function loadUserMeta(ctx: AppContext, user: {
+    readonly id: number;
+}): Promise<Record<string, unknown>>;
+/**
+ * Apply a meta patch to `users.meta` and fire `user:meta_changed`.
+ * Plugins that need to mutate the patch subscribe to
+ * `rpc:user.update:input` and mutate `input.meta` there.
+ */
+export declare function writeUserMeta(ctx: AppContext, user: {
+    readonly id: number;
+}, patch: MetaPatch): Promise<void>;
+//# sourceMappingURL=meta.d.ts.map

package/dist/rpc/procedures/user/meta.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"meta.d.ts","sourceRoot":"","sources":["../../../../src/rpc/procedures/user/meta.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAGpD,OAAO,EAML,kBAAkB,IAAI,sBAAsB,EAE7C,MAAM,oBAAoB,CAAC;AAG5B,YAAY,EAAE,WAAW,IAAI,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAEzE;oCACoC;AACpC,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC1C,MAAM,EAAE,UAAU,CAAC,OAAO,sBAAsB,CAAC,CAAC,CAAC,CAAC,GACnD,SAAS,GAAG,IAAI,CAMlB;AAED,wBAAsB,0BAA0B,CAC9C,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,SAAS,EAChB,MAAM,EAAE,UAAU,CAAC,OAAO,sBAAsB,CAAC,CAAC,CAAC,CAAC,GACnD,OAAO,CAAC,IAAI,CAAC,CAOf;AAED,yEAAyE;AACzE,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,SAAS,EAChB,IAAI,EAAE;IAAE,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,EAC1C,MAAM,EAAE;IACN,SAAS,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE;YAAE,UAAU,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,KAAK,KAAK,CAAC;CAC9D,GACA,IAAI,CAON;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,cAAc,EACxB,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,SAAS,GACxD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzB;AAED,wBAAsB,YAAY,CAChC,GAAG,EAAE,UAAU,EACf,IAAI,EAAE;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC5B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CASlC;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,UAAU,EACf,IAAI,EAAE;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EAC7B,KAAK,EAAE,SAAS,GACf,OAAO,CAAC,IAAI,CAAC,CAOf"}

package/dist/rpc/procedures/user/meta.js

@@ -0,0 +1,38 @@
+import { users } from "../../../db/schema/users.js";
+import { findUserMetaField } from "../../../plugin/manifest.js";
+import { applyMetaPatch, decodeMetaBag as decodeMetaBagCore, filterMetaOrphans as filterMetaOrphansCore, isEmptyMetaPatch, loadMeta, sanitizeMetaForRpc as sanitizeMetaForRpcCore, validateMetaReferencesForRpc, } from "../../meta/core.js";
+import { assertMetaCapabilities } from "../entry/meta.js";
+/** RPC-facing sanitizer for a user's meta input. User meta is a flat
+ *  keyspace — no scope argument. */
+export function sanitizeMetaForRpc(registry, input, errors) {
+    return sanitizeMetaForRpcCore((key) => findUserMetaField(registry, key), input, errors);
+}
+export async function validateUserMetaReferences(ctx, patch, errors) {
+    await validateMetaReferencesForRpc(ctx, (key) => findUserMetaField(ctx.plugins, key), patch, errors);
+}
+/** Mirror of `assertEntryMetaCapabilities` for the user meta surface. */
+export function assertUserMetaCapabilities(registry, patch, auth, errors) {
+    assertMetaCapabilities(patch, (key) => findUserMetaField(registry, key), auth, errors);
+}
+export function decodeMetaBag(registry, raw) {
+    return decodeMetaBagCore((key) => findUserMetaField(registry, key), raw);
+}
+export async function loadUserMeta(ctx, user) {
+    const decoded = await loadMeta(ctx, users, users.id, user.id, (key) => findUserMetaField(ctx.plugins, key));
+    return filterMetaOrphansCore(ctx, (key) => findUserMetaField(ctx.plugins, key), decoded);
+}
+/**
+ * Apply a meta patch to `users.meta` and fire `user:meta_changed`.
+ * Plugins that need to mutate the patch subscribe to
+ * `rpc:user.update:input` and mutate `input.meta` there.
+ */
+export async function writeUserMeta(ctx, user, patch) {
+    if (isEmptyMetaPatch(patch))
+        return;
+    await applyMetaPatch(ctx, users, users.id, user.id, patch);
+    await ctx.hooks.doAction("user:meta_changed", user, {
+        set: Object.fromEntries(patch.upserts),
+        removed: [...patch.deletes],
+    });
+}
+//# sourceMappingURL=meta.js.map

package/dist/rpc/procedures/user/meta.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"meta.js","sourceRoot":"","sources":["../../../../src/rpc/procedures/user/meta.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EACL,cAAc,EACd,aAAa,IAAI,iBAAiB,EAClC,iBAAiB,IAAI,qBAAqB,EAC1C,gBAAgB,EAChB,QAAQ,EACR,kBAAkB,IAAI,sBAAsB,EAC5C,4BAA4B,GAC7B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAI1D;oCACoC;AACpC,MAAM,UAAU,kBAAkB,CAChC,QAAwB,EACxB,KAA0C,EAC1C,MAAoD;IAEpD,OAAO,sBAAsB,CAC3B,CAAC,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC,EACzC,KAAK,EACL,MAAM,CACP,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,GAAe,EACf,KAAgB,EAChB,MAAoD;IAEpD,MAAM,4BAA4B,CAChC,GAAG,EACH,CAAC,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,EAC5C,KAAK,EACL,MAAM,CACP,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,0BAA0B,CACxC,QAAwB,EACxB,KAAgB,EAChB,IAA0C,EAC1C,MAEC;IAED,sBAAsB,CACpB,KAAK,EACL,CAAC,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC,EACzC,IAAI,EACJ,MAAM,CACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,QAAwB,EACxB,GAAyD;IAEzD,OAAO,iBAAiB,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAe,EACf,IAA6B;IAE7B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CACpE,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CACpC,CAAC;IACF,OAAO,qBAAqB,CAC1B,GAAG,EACH,CAAC,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,EAC5C,OAAO,CACR,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAe,EACf,IAA6B,EAC7B,KAAgB;IAEhB,IAAI,gBAAgB,CAAC,KAAK,CAAC;QAAE,OAAO;IACpC,MAAM,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC3D,MAAM,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,mBAAmB,EAAE,IAAI,EAAE;QAClD,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC;QACtC,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;KAC5B,CAAC,CAAC;AACL,CAAC"}

package/dist/rpc/procedures/user/pending-email-change.d.ts

@@ -0,0 +1,76 @@
+export declare const pendingEmailChange: import("@orpc/server").DecoratedProcedure<import("@orpc/server").MergedInitialContext<import("../../../index.js").AppContextBase<typeof import("../../../db/schema/index.js")> & import("../../../index.js").AppContextExtensions & Record<never, never>, import("../../../index.js").AppContextBase<typeof import("../../../db/schema/index.js")> & import("../../../index.js").AppContextExtensions & Record<never, never>, import("../../../index.js").AppContext>, import("@orpc/server").MergedCurrentContext<import("../../../index.js").AppContext, import("../../../index.js").AuthenticatedAppContext<typeof import("../../../db/schema/index.js")>>, import("valibot").ObjectSchema<{
+    readonly id: import("valibot").SchemaWithPipe<readonly [import("valibot").NumberSchema<undefined>, import("valibot").IntegerAction<number, undefined>, import("valibot").MinValueAction<number, 1, undefined>, import("valibot").MaxValueAction<number, number, undefined>]>;
+}, undefined>, import("@orpc/server").Schema<{
+    pending: null;
+} | {
+    pending: {
+        newEmail: string;
+        expiresAt: Date;
+        createdAt: Date;
+    };
+}, {
+    pending: null;
+} | {
+    pending: {
+        newEmail: string;
+        expiresAt: Date;
+        createdAt: Date;
+    };
+}>, import("@orpc/server").MergedErrorMap<Record<never, never>, {
+    readonly UNAUTHORIZED: {
+        readonly message: "Authentication required";
+    };
+    readonly BAD_REQUEST: {
+        readonly message: "Invalid input";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly reason: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly FORBIDDEN: {
+        readonly message: "Permission denied";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly capability: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly NOT_FOUND: {
+        readonly message: "Resource not found";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly kind: import("valibot").StringSchema<undefined>;
+            readonly id: import("valibot").UnionSchema<[import("valibot").StringSchema<undefined>, import("valibot").NumberSchema<undefined>], undefined>;
+        }, undefined>;
+    };
+    readonly CONFLICT: {
+        readonly message: "Resource conflict";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly reason: import("valibot").StringSchema<undefined>;
+            readonly key: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly PAYLOAD_TOO_LARGE: {
+        readonly message: "Payload too large";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly limit: import("valibot").NumberSchema<undefined>;
+            readonly received: import("valibot").OptionalSchema<import("valibot").NumberSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly UNSUPPORTED_MEDIA_TYPE: {
+        readonly message: "Unsupported media type";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly mime: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly INVALID_BLOCK_CONTENT: {
+        readonly message: "Block content failed registry validation";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly issues: import("valibot").ArraySchema<import("valibot").ObjectSchema<{
+                readonly code: import("valibot").StringSchema<undefined>;
+                readonly message: import("valibot").StringSchema<undefined>;
+                readonly path: import("valibot").StringSchema<undefined>;
+                readonly nodeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                readonly attributeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                readonly markName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+            }, undefined>, undefined>;
+        }, undefined>;
+    };
+}>, Record<never, never>>;
+//# sourceMappingURL=pending-email-change.d.ts.map