@plumix/core 0.1.0

package/dist/rpc/procedures/user/pending-email-change.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-email-change.d.ts","sourceRoot":"","sources":["../../../../src/rpc/procedures/user/pending-email-change.ts"],"names":[],"mappings":"AAuBA,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBA8C3B,CAAC"}

package/dist/rpc/procedures/user/pending-email-change.js

@@ -0,0 +1,62 @@
+import { and, eq } from "../../../db/index.js";
+import { authTokens } from "../../../db/schema/auth_tokens.js";
+import { users } from "../../../db/schema/users.js";
+import { authenticated } from "../../authenticated.js";
+import { base } from "../../base.js";
+import { userPendingEmailChangeInputSchema } from "./schemas.js";
+const EDIT_OWN_CAPABILITY = "user:edit_own";
+const EDIT_CAPABILITY = "user:edit";
+// Surface the pending email-change request for a user, if any. Used
+// by the admin UI's `/users/$id/edit` to render a "pending change to
+// X (cancel?)" banner so the operator knows there's a verification
+// in flight before they request a new one.
+//
+// Returns the new email + expiresAt without exposing the raw token —
+// the verification link is deliberately one-shot to the recipient's
+// inbox; surfacing the token to the admin UI would defeat the
+// "verify-at-new-address" guarantee.
+//
+// Auth: `user:edit_own` for self, `user:edit` for other (admin-only
+// surfaces don't need a separate capability — same gating as
+// requestEmailChange).
+export const pendingEmailChange = base
+    .use(authenticated)
+    .input(userPendingEmailChangeInputSchema)
+    .handler(async ({ input, context, errors }) => {
+    const isSelf = input.id === context.user.id;
+    const capability = isSelf ? EDIT_OWN_CAPABILITY : EDIT_CAPABILITY;
+    if (!context.auth.can(capability)) {
+        throw errors.FORBIDDEN({ data: { capability } });
+    }
+    const target = await context.db.query.users.findFirst({
+        where: eq(users.id, input.id),
+    });
+    if (!target) {
+        throw errors.NOT_FOUND({ data: { kind: "user", id: input.id } });
+    }
+    const row = await context.db
+        .select({
+        email: authTokens.email,
+        expiresAt: authTokens.expiresAt,
+        createdAt: authTokens.createdAt,
+    })
+        .from(authTokens)
+        .where(and(eq(authTokens.userId, target.id), eq(authTokens.type, "email_verification")))
+        .get();
+    if (row?.email == null)
+        return { pending: null };
+    if (row.expiresAt.getTime() < Date.now()) {
+        // Expired but not pruned — surface as no-pending so the UI
+        // doesn't show stale state. Cleanup runs lazily via the
+        // `requestEmailChange` purge or a future prune sweep.
+        return { pending: null };
+    }
+    return {
+        pending: {
+            newEmail: row.email,
+            expiresAt: row.expiresAt,
+            createdAt: row.createdAt,
+        },
+    };
+});
+//# sourceMappingURL=pending-email-change.js.map

package/dist/rpc/procedures/user/pending-email-change.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-email-change.js","sourceRoot":"","sources":["../../../../src/rpc/procedures/user/pending-email-change.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAC/D,OAAO,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,iCAAiC,EAAE,MAAM,cAAc,CAAC;AAEjE,MAAM,mBAAmB,GAAG,eAAe,CAAC;AAC5C,MAAM,eAAe,GAAG,WAAW,CAAC;AAEpC,oEAAoE;AACpE,qEAAqE;AACrE,mEAAmE;AACnE,2CAA2C;AAC3C,EAAE;AACF,qEAAqE;AACrE,oEAAoE;AACpE,8DAA8D;AAC9D,qCAAqC;AACrC,EAAE;AACF,oEAAoE;AACpE,6DAA6D;AAC7D,uBAAuB;AACvB,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI;KACnC,GAAG,CAAC,aAAa,CAAC;KAClB,KAAK,CAAC,iCAAiC,CAAC;KACxC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;IAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;IAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,eAAe,CAAC;IAClE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;QACpD,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;KAC9B,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,EAAE;SACzB,MAAM,CAAC;QACN,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,SAAS,EAAE,UAAU,CAAC,SAAS;KAChC,CAAC;SACD,IAAI,CAAC,UAAU,CAAC;SAChB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,EAChC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAC1C,CACF;SACA,GAAG,EAAE,CAAC;IAET,IAAI,GAAG,EAAE,KAAK,IAAI,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACjD,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACzC,2DAA2D;QAC3D,wDAAwD;QACxD,sDAAsD;QACtD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO;QACL,OAAO,EAAE;YACP,QAAQ,EAAE,GAAG,CAAC,KAAK;YACnB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB;KACF,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/rpc/procedures/user/request-email-change.d.ts

@@ -0,0 +1,67 @@
+export declare const requestEmailChangeProc: import("@orpc/server").DecoratedProcedure<import("@orpc/server").MergedInitialContext<import("../../../index.js").AppContextBase<typeof import("../../../db/schema/index.js")> & import("../../../index.js").AppContextExtensions & Record<never, never>, import("../../../index.js").AppContextBase<typeof import("../../../db/schema/index.js")> & import("../../../index.js").AppContextExtensions & Record<never, never>, import("../../../index.js").AppContext>, import("@orpc/server").MergedCurrentContext<import("../../../index.js").AppContext, import("../../../index.js").AuthenticatedAppContext<typeof import("../../../db/schema/index.js")>>, import("valibot").ObjectSchema<{
+    readonly id: import("valibot").SchemaWithPipe<readonly [import("valibot").NumberSchema<undefined>, import("valibot").IntegerAction<number, undefined>, import("valibot").MinValueAction<number, 1, undefined>, import("valibot").MaxValueAction<number, number, undefined>]>;
+    readonly newEmail: import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").TrimAction, import("valibot").MinLengthAction<string, 1, () => string>, import("valibot").MaxLengthAction<string, 254, () => string>, import("valibot").EmailAction<string, () => string>]>;
+}, undefined>, import("@orpc/server").Schema<{
+    ok: true;
+    expiresAt: Date;
+}, {
+    ok: true;
+    expiresAt: Date;
+}>, import("@orpc/server").MergedErrorMap<Record<never, never>, {
+    readonly UNAUTHORIZED: {
+        readonly message: "Authentication required";
+    };
+    readonly BAD_REQUEST: {
+        readonly message: "Invalid input";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly reason: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly FORBIDDEN: {
+        readonly message: "Permission denied";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly capability: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly NOT_FOUND: {
+        readonly message: "Resource not found";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly kind: import("valibot").StringSchema<undefined>;
+            readonly id: import("valibot").UnionSchema<[import("valibot").StringSchema<undefined>, import("valibot").NumberSchema<undefined>], undefined>;
+        }, undefined>;
+    };
+    readonly CONFLICT: {
+        readonly message: "Resource conflict";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly reason: import("valibot").StringSchema<undefined>;
+            readonly key: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly PAYLOAD_TOO_LARGE: {
+        readonly message: "Payload too large";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly limit: import("valibot").NumberSchema<undefined>;
+            readonly received: import("valibot").OptionalSchema<import("valibot").NumberSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly UNSUPPORTED_MEDIA_TYPE: {
+        readonly message: "Unsupported media type";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly mime: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly INVALID_BLOCK_CONTENT: {
+        readonly message: "Block content failed registry validation";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly issues: import("valibot").ArraySchema<import("valibot").ObjectSchema<{
+                readonly code: import("valibot").StringSchema<undefined>;
+                readonly message: import("valibot").StringSchema<undefined>;
+                readonly path: import("valibot").StringSchema<undefined>;
+                readonly nodeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                readonly attributeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                readonly markName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+            }, undefined>, undefined>;
+        }, undefined>;
+    };
+}>, Record<never, never>>;
+//# sourceMappingURL=request-email-change.d.ts.map

package/dist/rpc/procedures/user/request-email-change.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-email-change.d.ts","sourceRoot":"","sources":["../../../../src/rpc/procedures/user/request-email-change.ts"],"names":[],"mappings":"AA8BA,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAgE/B,CAAC"}

package/dist/rpc/procedures/user/request-email-change.js

@@ -0,0 +1,86 @@
+import { EmailChangeError, requestEmailChange, } from "../../../auth/email-change/index.js";
+import { eq } from "../../../db/index.js";
+import { users } from "../../../db/schema/users.js";
+import { authenticated } from "../../authenticated.js";
+import { base } from "../../base.js";
+import { userRequestEmailChangeInputSchema } from "./schemas.js";
+const EDIT_OWN_CAPABILITY = "user:edit_own";
+const EDIT_CAPABILITY = "user:edit";
+// Initiate an email change for a user. The new email is NOT committed
+// yet — a confirmation link goes to the *new* address; only the click
+// commits. See `auth/email-change/request.ts` for the rationale, and
+// `verify-email` route for the commit-side.
+//
+// Authorization:
+//   - self  (id === ctx.user.id): require `user:edit_own`
+//   - other (id !== ctx.user.id): require `user:edit`
+//
+// Mailer + magic-link config gate: the same `auth.magicLink` block
+// that wires the magic-link site name + mailer is required here so
+// the verification email can address the user with the same site
+// branding. If `magicLink` isn't configured the procedure returns
+// CONFLICT/mailer_not_configured rather than 503 — RPC layer
+// distinguishes "not implemented" (FORBIDDEN with a config-hint
+// reason is wrong) from "operator config missing" (CONFLICT is the
+// right shape; 503 lives at the route layer).
+export const requestEmailChangeProc = base
+    .use(authenticated)
+    .input(userRequestEmailChangeInputSchema)
+    .handler(async ({ input, context, errors }) => {
+    const isSelf = input.id === context.user.id;
+    const capability = isSelf ? EDIT_OWN_CAPABILITY : EDIT_CAPABILITY;
+    if (!context.auth.can(capability)) {
+        throw errors.FORBIDDEN({ data: { capability } });
+    }
+    const target = await context.db.query.users.findFirst({
+        where: eq(users.id, input.id),
+    });
+    if (!target) {
+        throw errors.NOT_FOUND({ data: { kind: "user", id: input.id } });
+    }
+    // Email change reuses the magic-link mailer + siteName config —
+    // operators that disable magic-link (no top-level mailer) also
+    // disable email change. The cross-field check in `plumix()` pins
+    // these together; context surfaces both as `mailer` + `siteName`.
+    if (!context.mailer || !context.siteName) {
+        throw errors.CONFLICT({ data: { reason: "mailer_not_configured" } });
+    }
+    try {
+        const result = await requestEmailChange(context.db, {
+            userId: target.id,
+            newEmail: input.newEmail,
+            origin: context.origin,
+            mailer: context.mailer,
+            siteName: context.siteName,
+            // Email body locale follows the recipient's persisted preference
+            // (`user.meta.locale`), not the actor's. An admin in English
+            // editing a German user's email still mails the German user
+            // in German.
+            locale: typeof target.meta.locale === "string"
+                ? target.meta.locale
+                : undefined,
+            logger: context.logger,
+        });
+        await context.hooks.doAction("user:email_change_requested", result.user, {
+            actor: context.user,
+            newEmail: input.newEmail.trim().toLowerCase(),
+            expiresAt: result.expiresAt,
+        });
+        return { ok: true, expiresAt: result.expiresAt };
+    }
+    catch (error) {
+        if (error instanceof EmailChangeError) {
+            if (error.code === "email_taken") {
+                throw errors.CONFLICT({ data: { reason: "email_taken" } });
+            }
+            if (error.code === "account_disabled") {
+                throw errors.CONFLICT({ data: { reason: "account_disabled" } });
+            }
+            if (error.code === "user_not_found") {
+                throw errors.NOT_FOUND({ data: { kind: "user", id: input.id } });
+            }
+        }
+        throw error;
+    }
+});
+//# sourceMappingURL=request-email-change.js.map

package/dist/rpc/procedures/user/request-email-change.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-email-change.js","sourceRoot":"","sources":["../../../../src/rpc/procedures/user/request-email-change.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,iCAAiC,EAAE,MAAM,cAAc,CAAC;AAEjE,MAAM,mBAAmB,GAAG,eAAe,CAAC;AAC5C,MAAM,eAAe,GAAG,WAAW,CAAC;AAEpC,sEAAsE;AACtE,sEAAsE;AACtE,qEAAqE;AACrE,4CAA4C;AAC5C,EAAE;AACF,iBAAiB;AACjB,0DAA0D;AAC1D,sDAAsD;AACtD,EAAE;AACF,mEAAmE;AACnE,mEAAmE;AACnE,iEAAiE;AACjE,kEAAkE;AAClE,6DAA6D;AAC7D,gEAAgE;AAChE,mEAAmE;AACnE,8CAA8C;AAC9C,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI;KACvC,GAAG,CAAC,aAAa,CAAC;KAClB,KAAK,CAAC,iCAAiC,CAAC;KACxC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;IAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;IAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,eAAe,CAAC;IAClE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;QACpD,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;KAC9B,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,gEAAgE;IAChE,+DAA+D;IAC/D,iEAAiE;IACjE,kEAAkE;IAClE,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACzC,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAAE;YAClD,MAAM,EAAE,MAAM,CAAC,EAAE;YACjB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,iEAAiE;YACjE,6DAA6D;YAC7D,4DAA4D;YAC5D,aAAa;YACb,MAAM,EACJ,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ;gBACpC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM;gBACpB,CAAC,CAAC,SAAS;YACf,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,6BAA6B,EAAE,MAAM,CAAC,IAAI,EAAE;YACvE,KAAK,EAAE,OAAO,CAAC,IAAI;YACnB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;YAC7C,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAC;QAEH,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;YACtC,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBACjC,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACtC,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;YAClE,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBACpC,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/rpc/procedures/user/schemas.d.ts

@@ -0,0 +1,52 @@
+import * as v from "valibot";
+export declare const userListInputSchema: v.ObjectSchema<{
+    readonly limit: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, 100, undefined>]>, 20>;
+    readonly offset: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>]>, 0>;
+    readonly role: v.OptionalSchema<v.PicklistSchema<readonly ["subscriber", "contributor", "author", "editor", "admin"], undefined>, undefined>;
+    readonly search: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MaxLengthAction<string, 200, undefined>]>, undefined>;
+}, undefined>;
+export declare const userGetInputSchema: v.ObjectSchema<{
+    readonly id: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+}, undefined>;
+export declare const userInviteInputSchema: v.ObjectSchema<{
+    readonly email: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, () => string>, v.MaxLengthAction<string, 254, () => string>, v.EmailAction<string, () => string>]>;
+    readonly role: v.OptionalSchema<v.PicklistSchema<readonly ["subscriber", "contributor", "author", "editor", "admin"], undefined>, "subscriber">;
+    readonly name: v.OptionalSchema<v.NullableSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MaxLengthAction<string, 200, () => string>]>, undefined>, undefined>;
+}, undefined>;
+export declare const userUpdateInputSchema: v.ObjectSchema<{
+    readonly id: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly name: v.OptionalSchema<v.NullableSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MaxLengthAction<string, 200, () => string>]>, undefined>, undefined>;
+    readonly avatarUrl: v.OptionalSchema<v.NullableSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MaxLengthAction<string, 2048, undefined>, v.UrlAction<string, undefined>]>, undefined>, undefined>;
+    readonly role: v.OptionalSchema<v.PicklistSchema<readonly ["subscriber", "contributor", "author", "editor", "admin"], undefined>, undefined>;
+    readonly meta: v.OptionalSchema<v.SchemaWithPipe<readonly [v.RecordSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 200, undefined>, v.RegexAction<string, "meta key must be alphanumeric/_/:/-">]>, v.UnknownSchema, undefined>, v.CheckAction<{
+        [x: string]: unknown;
+    }, "meta accepts at most 200 keys per request">]>, undefined>;
+}, undefined>;
+export declare const userDisableInputSchema: v.ObjectSchema<{
+    readonly id: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+}, undefined>;
+export declare const userEnableInputSchema: v.ObjectSchema<{
+    readonly id: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+}, undefined>;
+export declare const userDeleteInputSchema: v.ObjectSchema<{
+    readonly id: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    /** Reassign this user's authored entries to the given user id before deletion. */
+    readonly reassignTo: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>, undefined>;
+}, undefined>;
+export declare const userRequestEmailChangeInputSchema: v.ObjectSchema<{
+    readonly id: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly newEmail: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, () => string>, v.MaxLengthAction<string, 254, () => string>, v.EmailAction<string, () => string>]>;
+}, undefined>;
+export declare const userCancelEmailChangeInputSchema: v.ObjectSchema<{
+    readonly id: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+}, undefined>;
+export declare const userPendingEmailChangeInputSchema: v.ObjectSchema<{
+    readonly id: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+}, undefined>;
+export type UserListInput = v.InferOutput<typeof userListInputSchema>;
+export type UserGetInput = v.InferOutput<typeof userGetInputSchema>;
+export type UserInviteInput = v.InferOutput<typeof userInviteInputSchema>;
+export type UserUpdateInput = v.InferOutput<typeof userUpdateInputSchema>;
+export type UserDisableInput = v.InferOutput<typeof userDisableInputSchema>;
+export type UserDeleteInput = v.InferOutput<typeof userDeleteInputSchema>;
+//# sourceMappingURL=schemas.d.ts.map

package/dist/rpc/procedures/user/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../../../src/rpc/procedures/user/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC;AAqB7B,eAAO,MAAM,mBAAmB;;;;;aAQ9B,CAAC;AAEH,eAAO,MAAM,kBAAkB;;aAA4B,CAAC;AAE5D,eAAO,MAAM,qBAAqB;;;;aAIhC,CAAC;AAOH,eAAO,MAAM,qBAAqB;;;;;;;;aAMhC,CAAC;AAEH,eAAO,MAAM,sBAAsB;;aAA4B,CAAC;AAEhE,eAAO,MAAM,qBAAqB;;aAA4B,CAAC;AAE/D,eAAO,MAAM,qBAAqB;;IAEhC,kFAAkF;;aAElF,CAAC;AAEH,eAAO,MAAM,iCAAiC;;;aAG5C,CAAC;AAEH,eAAO,MAAM,gCAAgC;;aAA4B,CAAC;AAE1E,eAAO,MAAM,iCAAiC;;aAA4B,CAAC;AAE3E,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAC;AACtE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACpE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAC1E,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAC1E,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAC5E,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/rpc/procedures/user/schemas.js

@@ -0,0 +1,44 @@
+import * as v from "valibot";
+import { USER_ROLES } from "../../../db/schema/users.js";
+import { emailField, idParam, metaInputSchema, nameField, } from "../../validation.js";
+const avatarUrlSchema = v.pipe(v.string(), v.trim(), v.maxLength(2048), v.url());
+const roleSchema = v.picklist(USER_ROLES);
+const searchSchema = v.pipe(v.string(), v.trim(), v.maxLength(200));
+export const userListInputSchema = v.object({
+    limit: v.optional(v.pipe(v.number(), v.integer(), v.minValue(1), v.maxValue(100)), 20),
+    offset: v.optional(v.pipe(v.number(), v.integer(), v.minValue(0)), 0),
+    role: v.optional(roleSchema),
+    search: v.optional(searchSchema),
+});
+export const userGetInputSchema = v.object({ id: idParam });
+export const userInviteInputSchema = v.object({
+    email: emailField,
+    role: v.optional(roleSchema, "subscriber"),
+    name: v.optional(v.nullable(nameField)),
+});
+// `email` is intentionally NOT in this schema. Email changes go
+// through the dedicated `user.requestEmailChange` flow which sends
+// a confirmation link to the new address — silently committing
+// would let an admin (or hijacked self-session) redirect a user's
+// recovery email without their consent.
+export const userUpdateInputSchema = v.object({
+    id: idParam,
+    name: v.optional(v.nullable(nameField)),
+    avatarUrl: v.optional(v.nullable(avatarUrlSchema)),
+    role: v.optional(roleSchema),
+    meta: v.optional(metaInputSchema),
+});
+export const userDisableInputSchema = v.object({ id: idParam });
+export const userEnableInputSchema = v.object({ id: idParam });
+export const userDeleteInputSchema = v.object({
+    id: idParam,
+    /** Reassign this user's authored entries to the given user id before deletion. */
+    reassignTo: v.optional(idParam),
+});
+export const userRequestEmailChangeInputSchema = v.object({
+    id: idParam,
+    newEmail: emailField,
+});
+export const userCancelEmailChangeInputSchema = v.object({ id: idParam });
+export const userPendingEmailChangeInputSchema = v.object({ id: idParam });
+//# sourceMappingURL=schemas.js.map

package/dist/rpc/procedures/user/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../../../src/rpc/procedures/user/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EACL,UAAU,EACV,OAAO,EACP,eAAe,EACf,SAAS,GACV,MAAM,qBAAqB,CAAC;AAE7B,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAC5B,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,IAAI,EAAE,EACR,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,EACjB,CAAC,CAAC,GAAG,EAAE,CACR,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AAE1C,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;AAEpE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,KAAK,EAAE,CAAC,CAAC,QAAQ,CACf,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC/D,EAAE,CACH;IACD,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;IAC5B,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AAE5D,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,KAAK,EAAE,UAAU;IACjB,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;CACxC,CAAC,CAAC;AAEH,gEAAgE;AAChE,mEAAmE;AACnE,+DAA+D;AAC/D,kEAAkE;AAClE,wCAAwC;AACxC,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,EAAE,EAAE,OAAO;IACX,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACvC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAClD,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;IAC5B,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC;CAClC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AAEhE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AAE/D,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,EAAE,EAAE,OAAO;IACX,kFAAkF;IAClF,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;CAChC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,EAAE,EAAE,OAAO;IACX,QAAQ,EAAE,UAAU;CACrB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AAE1E,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC"}

package/dist/rpc/procedures/user/set-locale.d.ts

@@ -0,0 +1,61 @@
+import * as v from "valibot";
+export declare const setLocale: import("@orpc/server").DecoratedProcedure<import("@orpc/server").MergedInitialContext<import("../../../index.js").AppContextBase<typeof import("../../../db/schema/index.js")> & import("../../../index.js").AppContextExtensions & Record<never, never>, import("../../../index.js").AppContextBase<typeof import("../../../db/schema/index.js")> & import("../../../index.js").AppContextExtensions & Record<never, never>, import("../../../index.js").AppContext>, import("@orpc/server").MergedCurrentContext<import("../../../index.js").AppContext, import("../../../index.js").AuthenticatedAppContext<typeof import("../../../db/schema/index.js")>>, v.ObjectSchema<{
+    readonly code: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+}, undefined>, import("@orpc/server").Schema<void, void>, import("@orpc/server").MergedErrorMap<Record<never, never>, {
+    readonly UNAUTHORIZED: {
+        readonly message: "Authentication required";
+    };
+    readonly BAD_REQUEST: {
+        readonly message: "Invalid input";
+        readonly data: v.ObjectSchema<{
+            readonly reason: v.StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly FORBIDDEN: {
+        readonly message: "Permission denied";
+        readonly data: v.ObjectSchema<{
+            readonly capability: v.StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly NOT_FOUND: {
+        readonly message: "Resource not found";
+        readonly data: v.ObjectSchema<{
+            readonly kind: v.StringSchema<undefined>;
+            readonly id: v.UnionSchema<[v.StringSchema<undefined>, v.NumberSchema<undefined>], undefined>;
+        }, undefined>;
+    };
+    readonly CONFLICT: {
+        readonly message: "Resource conflict";
+        readonly data: v.ObjectSchema<{
+            readonly reason: v.StringSchema<undefined>;
+            readonly key: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly PAYLOAD_TOO_LARGE: {
+        readonly message: "Payload too large";
+        readonly data: v.ObjectSchema<{
+            readonly limit: v.NumberSchema<undefined>;
+            readonly received: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly UNSUPPORTED_MEDIA_TYPE: {
+        readonly message: "Unsupported media type";
+        readonly data: v.ObjectSchema<{
+            readonly mime: v.StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly INVALID_BLOCK_CONTENT: {
+        readonly message: "Block content failed registry validation";
+        readonly data: v.ObjectSchema<{
+            readonly issues: v.ArraySchema<v.ObjectSchema<{
+                readonly code: v.StringSchema<undefined>;
+                readonly message: v.StringSchema<undefined>;
+                readonly path: v.StringSchema<undefined>;
+                readonly nodeName: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+                readonly attributeName: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+                readonly markName: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+            }, undefined>, undefined>;
+        }, undefined>;
+    };
+}>, Record<never, never>>;
+//# sourceMappingURL=set-locale.d.ts.map

package/dist/rpc/procedures/user/set-locale.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-locale.d.ts","sourceRoot":"","sources":["../../../../src/rpc/procedures/user/set-locale.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC;AAe7B,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBA6BlB,CAAC"}

package/dist/rpc/procedures/user/set-locale.js

@@ -0,0 +1,31 @@
+import * as v from "valibot";
+import { isSecureRequest } from "../../../auth/cookies.js";
+import { buildLocaleCookie } from "../../../i18n/cookie.js";
+import { findEnabledLocale } from "../../../i18n/locale-registry.js";
+import { authenticated } from "../../authenticated.js";
+import { base } from "../../base.js";
+import { writeUserMeta } from "./meta.js";
+const inputSchema = v.object({
+    code: v.pipe(v.string(), v.minLength(1)),
+});
+const EDIT_OWN_CAPABILITY = "user:edit_own";
+export const setLocale = base
+    .use(authenticated)
+    .input(inputSchema)
+    .handler(async ({ input, context, errors }) => {
+    if (!context.auth.can(EDIT_OWN_CAPABILITY)) {
+        throw errors.FORBIDDEN({ data: { capability: EDIT_OWN_CAPABILITY } });
+    }
+    const match = findEnabledLocale(context.i18n, input.code);
+    if (!match) {
+        throw errors.CONFLICT({
+            data: { reason: "locale_not_supported", key: input.code },
+        });
+    }
+    await writeUserMeta(context, { id: context.user.id }, {
+        upserts: new Map([["locale", match.code]]),
+        deletes: [],
+    });
+    context.resHeaders?.append("set-cookie", buildLocaleCookie(match.code, isSecureRequest(context.request), context.basePath));
+});
+//# sourceMappingURL=set-locale.js.map

package/dist/rpc/procedures/user/set-locale.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-locale.js","sourceRoot":"","sources":["../../../../src/rpc/procedures/user/set-locale.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;CACzC,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,eAAe,CAAC;AAE5C,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI;KAC1B,GAAG,CAAC,aAAa,CAAC;KAClB,KAAK,CAAC,WAAW,CAAC;KAClB,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;IAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC3C,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,MAAM,CAAC,QAAQ,CAAC;YACpB,IAAI,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE;SAC1D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,aAAa,CACjB,OAAO,EACP,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EACvB;QACE,OAAO,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,OAAO,EAAE,EAAE;KACZ,CACF,CAAC;IACF,OAAO,CAAC,UAAU,EAAE,MAAM,CACxB,YAAY,EACZ,iBAAiB,CACf,KAAK,CAAC,IAAI,EACV,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,EAChC,OAAO,CAAC,QAAQ,CACjB,CACF,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/rpc/procedures/user/update.d.ts

@@ -0,0 +1,89 @@
+import type { AuthenticatedAppContext } from "../../../context/app.js";
+export declare const update: import("@orpc/server").DecoratedProcedure<import("@orpc/server").MergedInitialContext<import("../../../index.js").AppContextBase<typeof import("../../../db/schema/index.js")> & import("../../../index.js").AppContextExtensions & Record<never, never>, import("../../../index.js").AppContextBase<typeof import("../../../db/schema/index.js")> & import("../../../index.js").AppContextExtensions & Record<never, never>, import("../../../index.js").AppContext>, import("@orpc/server").MergedCurrentContext<import("../../../index.js").AppContext, AuthenticatedAppContext<typeof import("../../../db/schema/index.js")>>, import("valibot").ObjectSchema<{
+    readonly id: import("valibot").SchemaWithPipe<readonly [import("valibot").NumberSchema<undefined>, import("valibot").IntegerAction<number, undefined>, import("valibot").MinValueAction<number, 1, undefined>, import("valibot").MaxValueAction<number, number, undefined>]>;
+    readonly name: import("valibot").OptionalSchema<import("valibot").NullableSchema<import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").TrimAction, import("valibot").MaxLengthAction<string, 200, () => string>]>, undefined>, undefined>;
+    readonly avatarUrl: import("valibot").OptionalSchema<import("valibot").NullableSchema<import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").TrimAction, import("valibot").MaxLengthAction<string, 2048, undefined>, import("valibot").UrlAction<string, undefined>]>, undefined>, undefined>;
+    readonly role: import("valibot").OptionalSchema<import("valibot").PicklistSchema<readonly ["subscriber", "contributor", "author", "editor", "admin"], undefined>, undefined>;
+    readonly meta: import("valibot").OptionalSchema<import("valibot").SchemaWithPipe<readonly [import("valibot").RecordSchema<import("valibot").SchemaWithPipe<readonly [import("valibot").StringSchema<undefined>, import("valibot").TrimAction, import("valibot").MinLengthAction<string, 1, undefined>, import("valibot").MaxLengthAction<string, 200, undefined>, import("valibot").RegexAction<string, "meta key must be alphanumeric/_/:/-">]>, import("valibot").UnknownSchema, undefined>, import("valibot").CheckAction<{
+        [x: string]: unknown;
+    }, "meta accepts at most 200 keys per request">]>, undefined>;
+}, undefined>, import("@orpc/server").Schema<{
+    id: number;
+    email: string;
+    name: string | null;
+    avatarUrl: string | null;
+    role: "subscriber" | "contributor" | "author" | "editor" | "admin";
+    meta: Record<string, unknown>;
+    emailVerifiedAt: Date | null;
+    disabledAt: Date | null;
+    createdAt: Date;
+    updatedAt: Date;
+}, {
+    id: number;
+    email: string;
+    name: string | null;
+    avatarUrl: string | null;
+    role: "subscriber" | "contributor" | "author" | "editor" | "admin";
+    meta: Record<string, unknown>;
+    emailVerifiedAt: Date | null;
+    disabledAt: Date | null;
+    createdAt: Date;
+    updatedAt: Date;
+}>, import("@orpc/server").MergedErrorMap<Record<never, never>, {
+    readonly UNAUTHORIZED: {
+        readonly message: "Authentication required";
+    };
+    readonly BAD_REQUEST: {
+        readonly message: "Invalid input";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly reason: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly FORBIDDEN: {
+        readonly message: "Permission denied";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly capability: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly NOT_FOUND: {
+        readonly message: "Resource not found";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly kind: import("valibot").StringSchema<undefined>;
+            readonly id: import("valibot").UnionSchema<[import("valibot").StringSchema<undefined>, import("valibot").NumberSchema<undefined>], undefined>;
+        }, undefined>;
+    };
+    readonly CONFLICT: {
+        readonly message: "Resource conflict";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly reason: import("valibot").StringSchema<undefined>;
+            readonly key: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly PAYLOAD_TOO_LARGE: {
+        readonly message: "Payload too large";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly limit: import("valibot").NumberSchema<undefined>;
+            readonly received: import("valibot").OptionalSchema<import("valibot").NumberSchema<undefined>, undefined>;
+        }, undefined>;
+    };
+    readonly UNSUPPORTED_MEDIA_TYPE: {
+        readonly message: "Unsupported media type";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly mime: import("valibot").StringSchema<undefined>;
+        }, undefined>;
+    };
+    readonly INVALID_BLOCK_CONTENT: {
+        readonly message: "Block content failed registry validation";
+        readonly data: import("valibot").ObjectSchema<{
+            readonly issues: import("valibot").ArraySchema<import("valibot").ObjectSchema<{
+                readonly code: import("valibot").StringSchema<undefined>;
+                readonly message: import("valibot").StringSchema<undefined>;
+                readonly path: import("valibot").StringSchema<undefined>;
+                readonly nodeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                readonly attributeName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+                readonly markName: import("valibot").OptionalSchema<import("valibot").StringSchema<undefined>, undefined>;
+            }, undefined>, undefined>;
+        }, undefined>;
+    };
+}>, Record<never, never>>;
+//# sourceMappingURL=update.d.ts.map

package/dist/rpc/procedures/user/update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../src/rpc/procedures/user/update.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAwFvE,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBA6Gf,CAAC"}