@rakun-kit/core 1.3.11 → 1.4.1

package/dist/esm/api/routes/manager/auth/accountInfo.js

@@ -1,6 +1,6 @@
-import { Session, UserMfa } from "../../../../internal-content-types";
-import { getMongoService } from "../../../../orm";
-import { getSessionCookie } from "../../../sessionCookie";
+import { Session, UserMfa } from "../../../../internal-content-types/index.js";
+import { getMongoService } from "../../../../orm/index.js";
+import { getSessionCookie } from "../../../sessionCookie.js";
 export const accountInfoHandler = async ({ ctx, }) => {
     const user = ctx.getUser();
     const db = await getMongoService();

package/dist/esm/api/routes/manager/auth/deleteSession.d.ts

@@ -1,5 +1,5 @@
-import { RakunRequestContext } from "../../../context";
-import { DeleteSessionInput } from "../../../../schemas/manager/auth/deleteSession";
+import { RakunRequestContext } from "../../../context.js";
+import { DeleteSessionInput } from "../../../../schemas/manager/auth/deleteSession.js";
 export declare const deleteSessionHandler: ({ input, ctx, }: {
     input: DeleteSessionInput;
     ctx: RakunRequestContext;

package/dist/esm/api/routes/manager/auth/deleteSession.js

@@ -1,6 +1,6 @@
-import { Session } from "../../../../internal-content-types";
-import { throwAppError } from "../../../../lib/errors";
-import { getMongoService } from "../../../../orm";
+import { Session } from "../../../../internal-content-types/index.js";
+import { throwAppError } from "../../../../lib/errors/index.js";
+import { getMongoService } from "../../../../orm/index.js";
 export const deleteSessionHandler = async ({ input, ctx, }) => {
     const user = ctx.getUser();
     const db = await getMongoService();

package/dist/esm/api/routes/manager/auth/getSession.d.ts

@@ -1,4 +1,4 @@
-import { RakunRequestContext } from "../../../context";
+import { RakunRequestContext } from "../../../context.js";
 export declare const getSessionHandler: ({ ctx, }: {
     ctx: RakunRequestContext;
 }) => Promise<{
@@ -6,14 +6,16 @@ export declare const getSessionHandler: ({ ctx, }: {
     email: string;
     role: {
         name: string;
-        permissions: ("manager.users.readAny" | "manager.users.updateAny" | "manager.users.deleteAny" | "manager.roles.readAny" | "manager.roles.updateAny" | "manager.roles.deleteAny" | "manager.routes.readAny" | "manager.routes.updateAny" | "manager.routes.deleteAny" | "manager.languages.readAny" | "manager.languages.updateAny" | "manager.languages.deleteAny" | "manager.seo.readAny" | "manager.seo.updateAny" | "manager.seo.deleteAny" | "manager.permissions.readAny" | "manager.backups.readAny" | "manager.backups.updateAny" | "manager.migrations.readAny" | "manager.versions.readAny" | "manager.versions.updateAny" | "manager.apiOperations.readAny" | "content.Media.readAny" | "content.Media.own" | "content.Media.updateAny" | "content.Media.deleteAny" | "content.Redirect.readAny" | "content.Redirect.own" | "content.Redirect.updateAny" | "content.Redirect.deleteAny" | "manager.literals.readAny" | "manager.literals.updateAny")[];
+        permissions: (string | undefined)[];
         _type: "ManagerRole";
         _id: string;
         _schemaVersion?: number | undefined;
-        _visibility?: import("../../../..").DocumentVisibility | undefined;
-        _visibilityBeforeTrash?: Exclude<import("../../../..").DocumentVisibility, "trash"> | undefined;
+        _visibility?: import("../../../../index.js").DocumentVisibility | undefined;
+        _visibilityBeforeTrash?: Exclude<import("../../../../index.js").DocumentVisibility, "trash"> | undefined;
         _trashed?: boolean | undefined;
         _revision?: number | undefined;
+        _localeVariantGroupId?: string | undefined;
+        _localeVariantRole?: import("zod").infer<typeof import("../../../../index.js").LocaleVariantRole> | undefined;
         trashedAt?: Date | undefined;
         createdAt?: Date | undefined;
         updatedAt?: Date | undefined;
@@ -21,6 +23,7 @@ export declare const getSessionHandler: ({ ctx, }: {
     twoFactorEnabled: boolean;
     _type: "ManagerUser";
     _id: string;
+    name?: string | undefined;
     avatarId?: string | undefined;
     avatarKey?: string | undefined;
     avatarAccess?: "public" | "private" | undefined;
@@ -30,10 +33,12 @@ export declare const getSessionHandler: ({ ctx, }: {
     tutorialsPromptedAt?: Date | undefined;
     seenTours?: (string | undefined)[] | undefined;
     _schemaVersion?: number | undefined;
-    _visibility?: import("../../../..").DocumentVisibility | undefined;
-    _visibilityBeforeTrash?: Exclude<import("../../../..").DocumentVisibility, "trash"> | undefined;
+    _visibility?: import("../../../../index.js").DocumentVisibility | undefined;
+    _visibilityBeforeTrash?: Exclude<import("../../../../index.js").DocumentVisibility, "trash"> | undefined;
     _trashed?: boolean | undefined;
     _revision?: number | undefined;
+    _localeVariantGroupId?: string | undefined;
+    _localeVariantRole?: import("zod").infer<typeof import("../../../../index.js").LocaleVariantRole> | undefined;
     trashedAt?: Date | undefined;
     createdAt?: Date | undefined;
     updatedAt?: Date | undefined;

package/dist/esm/api/routes/manager/auth/getSession.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getSession.d.ts","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/auth/getSession.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD,eAAO,MAAM,iBAAiB,GAAU,UAErC;IACD,GAAG,EAAE,mBAAmB,CAAC;CAC1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;SAAqB,CAAC"}
+{"version":3,"file":"getSession.d.ts","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/auth/getSession.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD,eAAO,MAAM,iBAAiB,GAAU,UAErC;IACD,GAAG,EAAE,mBAAmB,CAAC;CAC1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;SAAqB,CAAC"}

package/dist/esm/api/routes/manager/auth/login.d.ts

@@ -1,5 +1,7 @@
-import { LoginInput, LoginOutput } from "../../../../schemas/manager/auth/login";
-export declare const loginHandler: ({ input, }: {
+import { LoginInput, LoginOutput } from "../../../../schemas/manager/auth/login.js";
+import type { RakunRequestContext } from "../../../context.js";
+export declare const loginHandler: ({ input, ctx, }: {
     input: LoginInput;
+    ctx?: RakunRequestContext;
 }) => Promise<LoginOutput>;
 //# sourceMappingURL=login.d.ts.map

package/dist/esm/api/routes/manager/auth/login.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/auth/login.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,UAAU,EACV,WAAW,EACZ,MAAM,wCAAwC,CAAC;AAGhD,eAAO,MAAM,YAAY,GAAU,YAEhC;IACD,KAAK,EAAE,UAAU,CAAC;CACnB,KAAG,OAAO,CAAC,WAAW,CA0DtB,CAAC"}
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/auth/login.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,UAAU,EACV,WAAW,EACZ,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAS5D,eAAO,MAAM,YAAY,GAAU,iBAGhC;IACD,KAAK,EAAE,UAAU,CAAC;IAClB,GAAG,CAAC,EAAE,mBAAmB,CAAC;CAC3B,KAAG,OAAO,CAAC,WAAW,CA0EtB,CAAC"}

package/dist/esm/api/routes/manager/auth/login.js

@@ -1,20 +1,35 @@
 import { randomBytes } from "crypto";
-import { ManagerUser, UserMfa, MfaChallenge, Session, } from "../../../../internal-content-types";
-import { throwAppError } from "../../../../lib/errors";
-import { getMongoService } from "../../../../orm";
-import { verifyPassword } from "../../../utils/passwords";
-export const loginHandler = async ({ input, }) => {
+import { ManagerUser, UserMfa, MfaChallenge, Session, } from "../../../../internal-content-types/index.js";
+import { throwAppError } from "../../../../lib/errors/index.js";
+import { getMongoService } from "../../../../orm/index.js";
+import { SESSION_MAX_AGE_MS } from "../../../sessionCookie.js";
+import { assertAuthRateLimit, getRequestRateLimitIdentifier, resetAuthRateLimit, } from "../../../utils/authRateLimit.js";
+import { hashPassword, verifyStoredPassword } from "../../../utils/passwords.js";
+export const loginHandler = async ({ input, ctx, }) => {
     const { username, password } = input;
     const db = await getMongoService();
+    const rateLimitKey = `login:${getRequestRateLimitIdentifier(ctx)}:${username.toLowerCase()}`;
+    assertAuthRateLimit({
+        key: rateLimitKey,
+        limit: 8,
+        windowMs: 15 * 60 * 1000,
+    });
     const user = await db.find(ManagerUser, { email: username });
     if (!user)
         throwAppError("FORBIDDEN", {
             reason: "INVALID_CREDENTIALS",
         });
-    if (!verifyPassword(password, user.password))
+    const passwordCheck = verifyStoredPassword(password, user.password);
+    if (!passwordCheck.valid)
         throwAppError("FORBIDDEN", {
             reason: "INVALID_CREDENTIALS",
         });
+    if (passwordCheck.needsRehash) {
+        await db.update(ManagerUser, user._id, {
+            password: hashPassword(password),
+        });
+    }
+    resetAuthRateLimit(rateLimitKey);
     const mfa = await db.find(UserMfa, { "user._id": user._id });
     if (mfa?.enabled) {
         const challenge = randomBytes(32).toString("hex");
@@ -38,7 +53,7 @@ export const loginHandler = async ({ input, }) => {
         };
     }
     const token = crypto.randomUUID();
-    const expiresAt = new Date(Date.now() + 1000 * 60 * 60 * 24); // 1 day
+    const expiresAt = new Date(Date.now() + SESSION_MAX_AGE_MS);
     await db.create(Session, {
         token,
         user: {
@@ -51,6 +66,7 @@ export const loginHandler = async ({ input, }) => {
     });
     return {
         token,
+        expiresAt: expiresAt.toISOString(),
     };
 };
 //# sourceMappingURL=login.js.map

package/dist/esm/api/routes/manager/auth/login.js.map

@@ -1 +1 @@
-{"version":3,"file":"login.js","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/auth/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAErC,OAAO,EACL,WAAW,EACX,OAAO,EACP,YAAY,EACZ,OAAO,GACR,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAKlD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,EACjC,KAAK,GAGN,EAAwB,EAAE;IACzB,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IACrC,MAAM,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;IAEnC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,IAAI;QACP,aAAa,CAAC,WAAW,EAAE;YACzB,MAAM,EAAE,qBAAqB;SAC9B,CAAC,CAAC;IAEL,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC;QAC1C,aAAa,CAAC,WAAW,EAAE;YACzB,MAAM,EAAE,qBAAqB;SAC9B,CAAC,CAAC;IAEL,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7D,IAAI,GAAG,EAAE,OAAO,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAElD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY;QAEpE,MAAM,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE;YAC5B,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE;gBACJ,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,WAAW,EAAE,WAAW,CAAC,IAAI;gBAC7B,IAAI,EAAE,UAAU;aACjB;YACD,MAAM,EAAE,GAAG,CAAC,eAAe,IAAI,MAAM;YACrC,SAAS;YACT,QAAQ,EAAE,CAAC;YACX,KAAK,EAAE,cAAc;SACtB,CAAC,CAAC;QAEH,OAAO;YACL,SAAS;YACT,MAAM,EAAE,GAAG,CAAC,eAAe,IAAI,MAAM;YACrC,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;SACnC,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ;IAEtE,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE;QACvB,KAAK;QACL,IAAI,EAAE;YACJ,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,WAAW,EAAE,WAAW,CAAC,IAAI;YAC7B,IAAI,EAAE,UAAU;SACjB;QACD,SAAS;QACT,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IAEH,OAAO;QACL,KAAK;KACN,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/auth/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAErC,OAAO,EACL,WAAW,EACX,OAAO,EACP,YAAY,EACZ,OAAO,GACR,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAMlD,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EACL,mBAAmB,EACnB,6BAA6B,EAC7B,kBAAkB,GACnB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAE9E,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,EACjC,KAAK,EACL,GAAG,GAIJ,EAAwB,EAAE;IACzB,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IACrC,MAAM,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;IACnC,MAAM,YAAY,GAAG,SAAS,6BAA6B,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;IAE7F,mBAAmB,CAAC;QAClB,GAAG,EAAE,YAAY;QACjB,KAAK,EAAE,CAAC;QACR,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;KACzB,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,IAAI;QACP,aAAa,CAAC,WAAW,EAAE;YACzB,MAAM,EAAE,qBAAqB;SAC9B,CAAC,CAAC;IAEL,MAAM,aAAa,GAAG,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpE,IAAI,CAAC,aAAa,CAAC,KAAK;QACtB,aAAa,CAAC,WAAW,EAAE;YACzB,MAAM,EAAE,qBAAqB;SAC9B,CAAC,CAAC;IAEL,IAAI,aAAa,CAAC,WAAW,EAAE,CAAC;QAC9B,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;YACrC,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC;SACjC,CAAC,CAAC;IACL,CAAC;IACD,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAEjC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7D,IAAI,GAAG,EAAE,OAAO,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAElD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY;QAEpE,MAAM,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE;YAC5B,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE;gBACJ,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,WAAW,EAAE,WAAW,CAAC,IAAI;gBAC7B,IAAI,EAAE,UAAU;aACjB;YACD,MAAM,EAAE,GAAG,CAAC,eAAe,IAAI,MAAM;YACrC,SAAS;YACT,QAAQ,EAAE,CAAC;YACX,KAAK,EAAE,cAAc;SACtB,CAAC,CAAC;QAEH,OAAO;YACL,SAAS;YACT,MAAM,EAAE,GAAG,CAAC,eAAe,IAAI,MAAM;YACrC,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;SACnC,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,kBAAkB,CAAC,CAAC;IAE5D,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE;QACvB,KAAK;QACL,IAAI,EAAE;YACJ,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,WAAW,EAAE,WAAW,CAAC,IAAI;YAC7B,IAAI,EAAE,UAAU;SACjB;QACD,SAAS;QACT,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IAEH,OAAO;QACL,KAAK;QACL,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;KACnC,CAAC;AACJ,CAAC,CAAC"}

package/dist/esm/api/routes/manager/auth/logout.d.ts

@@ -1,4 +1,4 @@
-import { RakunRequestContext } from "../../../context";
+import { RakunRequestContext } from "../../../context.js";
 export declare const logoutHandler: ({ ctx }: {
     ctx: RakunRequestContext;
 }) => Promise<{

package/dist/esm/api/routes/manager/auth/logout.js

@@ -1,6 +1,6 @@
-import { Session } from "../../../../internal-content-types";
-import { getMongoService } from "../../../../orm";
-import { getSessionCookie } from "../../../sessionCookie";
+import { Session } from "../../../../internal-content-types/index.js";
+import { getMongoService } from "../../../../orm/index.js";
+import { getSessionCookie } from "../../../sessionCookie.js";
 const emptyToken = { token: "" };
 export const logoutHandler = async ({ ctx }) => {
     if (!ctx?.req?.cookies)

package/dist/esm/api/routes/manager/auth/markTourSeen.d.ts

@@ -1,5 +1,5 @@
-import type { MarkTourSeenInput } from "../../../../schemas/manager/auth/tutorials";
-import { RakunRequestContext } from "../../../context";
+import type { MarkTourSeenInput } from "../../../../schemas/manager/auth/tutorials.js";
+import { RakunRequestContext } from "../../../context.js";
 export declare const markTourSeenHandler: ({ input, ctx, }: {
     input: MarkTourSeenInput;
     ctx: RakunRequestContext;
@@ -9,14 +9,16 @@ export declare const markTourSeenHandler: ({ input, ctx, }: {
     password: string;
     role: {
         name: string;
-        permissions: ("manager.users.readAny" | "manager.users.updateAny" | "manager.users.deleteAny" | "manager.roles.readAny" | "manager.roles.updateAny" | "manager.roles.deleteAny" | "manager.routes.readAny" | "manager.routes.updateAny" | "manager.routes.deleteAny" | "manager.languages.readAny" | "manager.languages.updateAny" | "manager.languages.deleteAny" | "manager.seo.readAny" | "manager.seo.updateAny" | "manager.seo.deleteAny" | "manager.permissions.readAny" | "manager.backups.readAny" | "manager.backups.updateAny" | "manager.migrations.readAny" | "manager.versions.readAny" | "manager.versions.updateAny" | "manager.apiOperations.readAny" | "content.Media.readAny" | "content.Media.own" | "content.Media.updateAny" | "content.Media.deleteAny" | "content.Redirect.readAny" | "content.Redirect.own" | "content.Redirect.updateAny" | "content.Redirect.deleteAny" | "manager.literals.readAny" | "manager.literals.updateAny")[];
+        permissions: (string | undefined)[];
         _type: "ManagerRole";
         _id: string;
         _schemaVersion?: number | undefined;
-        _visibility?: import("../../../..").DocumentVisibility | undefined;
-        _visibilityBeforeTrash?: Exclude<import("../../../..").DocumentVisibility, "trash"> | undefined;
+        _visibility?: import("../../../../index.js").DocumentVisibility | undefined;
+        _visibilityBeforeTrash?: Exclude<import("../../../../index.js").DocumentVisibility, "trash"> | undefined;
         _trashed?: boolean | undefined;
         _revision?: number | undefined;
+        _localeVariantGroupId?: string | undefined;
+        _localeVariantRole?: import("zod").infer<typeof import("../../../../index.js").LocaleVariantRole> | undefined;
         trashedAt?: Date | undefined;
         trashedBy?: string | undefined;
         createdAt?: Date | undefined;
@@ -27,6 +29,7 @@ export declare const markTourSeenHandler: ({ input, ctx, }: {
     twoFactorEnabled: boolean;
     _type: "ManagerUser";
     _id: string;
+    name?: string | undefined;
     avatarId?: string | undefined;
     avatarKey?: string | undefined;
     avatarAccess?: "public" | "private" | undefined;
@@ -36,10 +39,12 @@ export declare const markTourSeenHandler: ({ input, ctx, }: {
     tutorialsPromptedAt?: Date | undefined;
     seenTours?: (string | undefined)[] | undefined;
     _schemaVersion?: number | undefined;
-    _visibility?: import("../../../..").DocumentVisibility | undefined;
-    _visibilityBeforeTrash?: Exclude<import("../../../..").DocumentVisibility, "trash"> | undefined;
+    _visibility?: import("../../../../index.js").DocumentVisibility | undefined;
+    _visibilityBeforeTrash?: Exclude<import("../../../../index.js").DocumentVisibility, "trash"> | undefined;
     _trashed?: boolean | undefined;
     _revision?: number | undefined;
+    _localeVariantGroupId?: string | undefined;
+    _localeVariantRole?: import("zod").infer<typeof import("../../../../index.js").LocaleVariantRole> | undefined;
     trashedAt?: Date | undefined;
     trashedBy?: string | undefined;
     createdAt?: Date | undefined;

package/dist/esm/api/routes/manager/auth/markTourSeen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"markTourSeen.d.ts","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/auth/markTourSeen.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAGvD,eAAO,MAAM,mBAAmB,GAAU,iBAGvC;IACD,KAAK,EAAE,iBAAiB,CAAC;IACzB,GAAG,EAAE,mBAAmB,CAAC;CAC1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EASA,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAC9B,WAAW,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,EAC7C,QAAQ,MAAM,2BACwD,CAAC"}
+{"version":3,"file":"markTourSeen.d.ts","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/auth/markTourSeen.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAGvD,eAAO,MAAM,mBAAmB,GAAU,iBAGvC;IACD,KAAK,EAAE,iBAAiB,CAAC;IACzB,GAAG,EAAE,mBAAmB,CAAC;CAC1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWA,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAC9B,WAAW,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,EAC7C,QAAQ,MAAM,2BACwD,CAAC"}

package/dist/esm/api/routes/manager/auth/markTourSeen.js

@@ -1,13 +1,15 @@
-import { ManagerUser } from "../../../../internal-content-types";
-import { getMongoService } from "../../../../orm";
-import { populateRelations } from "../../../utils/populates/populateRelations";
+import { ManagerUser } from "../../../../internal-content-types/index.js";
+import { getMongoService } from "../../../../orm/index.js";
+import { populateRelations } from "../../../utils/populates/populateRelations.js";
 export const markTourSeenHandler = async ({ input, ctx, }) => {
     const user = ctx.getUser();
     const db = await getMongoService();
     const updated = await db.update(ManagerUser, user._id, {
         seenTours: getUpdatedSeenTours(user.seenTours, input.tourId),
     });
-    return await populateRelations(updated);
+    return await populateRelations(updated, {
+        exposePrivateMedia: true,
+    });
 };
 export const getUpdatedSeenTours = (seenTours, tourId) => Array.from(new Set([...(seenTours ?? []).filter(Boolean), tourId]));
 //# sourceMappingURL=markTourSeen.js.map

package/dist/esm/api/routes/manager/auth/markTourSeen.js.map

@@ -1 +1 @@
-{"version":3,"file":"markTourSeen.js","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/auth/markTourSeen.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAGlD,OAAO,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AAE/E,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EAAE,EACxC,KAAK,EACL,GAAG,GAIJ,EAAE,EAAE;IACH,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,MAAM,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;IAEnC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;QACrD,SAAS,EAAE,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC;KAC7D,CAAC,CAAC;IAEH,OAAO,MAAM,iBAAiB,CAAc,OAAO,CAAC,CAAC;AACvD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,SAA6C,EAC7C,MAAc,EACd,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC"}
+{"version":3,"file":"markTourSeen.js","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/auth/markTourSeen.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAGlD,OAAO,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AAE/E,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EAAE,EACxC,KAAK,EACL,GAAG,GAIJ,EAAE,EAAE;IACH,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,MAAM,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;IAEnC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;QACrD,SAAS,EAAE,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC;KAC7D,CAAC,CAAC;IAEH,OAAO,MAAM,iBAAiB,CAAc,OAAO,EAAE;QACnD,kBAAkB,EAAE,IAAI;KACzB,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,SAA6C,EAC7C,MAAc,EACd,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC"}

package/dist/esm/api/routes/manager/auth/totp/confirmTotp.d.ts

@@ -1,5 +1,5 @@
-import { RakunRequestContext } from "../../../../context";
-import { ConfirmTotpInput } from "../../../../../schemas/manager/auth/totp/confirmTotp";
+import { RakunRequestContext } from "../../../../context.js";
+import { ConfirmTotpInput } from "../../../../../schemas/manager/auth/totp/confirmTotp.js";
 export declare const confirmTotpHandler: ({ input, ctx, }: {
     input: ConfirmTotpInput;
     ctx: RakunRequestContext;

package/dist/esm/api/routes/manager/auth/totp/confirmTotp.js

@@ -1,5 +1,5 @@
-import { UserMfa, ManagerUser } from "../../../../../internal-content-types";
-import { getMongoService } from "../../../../../orm";
+import { UserMfa, ManagerUser } from "../../../../../internal-content-types/index.js";
+import { getMongoService } from "../../../../../orm/index.js";
 import * as OTPAuth from "otpauth";
 export const confirmTotpHandler = async ({ input, ctx, }) => {
     const db = await getMongoService();

package/dist/esm/api/routes/manager/auth/totp/enrollTotp.d.ts

@@ -1,4 +1,4 @@
-import { RakunRequestContext } from "../../../../context";
+import { RakunRequestContext } from "../../../../context.js";
 export declare const enrollTotpHandler: ({ ctx, }: {
     ctx: RakunRequestContext;
 }) => Promise<{

package/dist/esm/api/routes/manager/auth/totp/enrollTotp.js

@@ -1,9 +1,9 @@
 import { randomBytes } from "crypto";
 import * as OTPAuth from "otpauth";
 import QRCode from "qrcode";
-import { UserMfa, ManagerUser } from "../../../../../internal-content-types";
-import { throwAppError } from "../../../../../lib/errors";
-import { getMongoService } from "../../../../../orm";
+import { UserMfa, ManagerUser } from "../../../../../internal-content-types/index.js";
+import { throwAppError } from "../../../../../lib/errors/index.js";
+import { getMongoService } from "../../../../../orm/index.js";
 export const enrollTotpHandler = async ({ ctx, }) => {
     const db = await getMongoService();
     const user = ctx.getUser();

package/dist/esm/api/routes/manager/auth/totp/verifyTotp.d.ts

@@ -1,11 +1,13 @@
-import { VerifyTotpInput } from "../../../../../schemas/manager/auth/totp/verifyTotp";
+import { VerifyTotpInput } from "../../../../../schemas/manager/auth/totp/verifyTotp.js";
 export declare const verifyTotpHandler: ({ input, }: {
     input: VerifyTotpInput;
 }) => Promise<{
     error: string;
     token?: undefined;
+    expiresAt?: undefined;
 } | {
     token: `${string}-${string}-${string}-${string}-${string}`;
+    expiresAt: string;
     error?: undefined;
 }>;
 //# sourceMappingURL=verifyTotp.d.ts.map

package/dist/esm/api/routes/manager/auth/totp/verifyTotp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verifyTotp.d.ts","sourceRoot":"","sources":["../../../../../../../src/api/routes/manager/auth/totp/verifyTotp.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,eAAe,EAAE,MAAM,qDAAqD,CAAC;AAEtF,eAAO,MAAM,iBAAiB,GAAU,YAErC;IACD,KAAK,EAAE,eAAe,CAAC;CACxB;;;;;;EA4FA,CAAC"}
+{"version":3,"file":"verifyTotp.d.ts","sourceRoot":"","sources":["../../../../../../../src/api/routes/manager/auth/totp/verifyTotp.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,eAAe,EAAE,MAAM,qDAAqD,CAAC;AAOtF,eAAO,MAAM,iBAAiB,GAAU,YAErC;IACD,KAAK,EAAE,eAAe,CAAC;CACxB;;;;;;;;EAqGA,CAAC"}

package/dist/esm/api/routes/manager/auth/totp/verifyTotp.js

@@ -1,10 +1,18 @@
 import * as OTPAuth from "otpauth";
-import { MfaChallenge, ManagerUser, UserMfa, Session, } from "../../../../../internal-content-types";
-import { throwAppError } from "../../../../../lib/errors";
-import { getMongoService } from "../../../../../orm";
+import { MfaChallenge, ManagerUser, UserMfa, Session, } from "../../../../../internal-content-types/index.js";
+import { throwAppError } from "../../../../../lib/errors/index.js";
+import { getMongoService } from "../../../../../orm/index.js";
+import { SESSION_MAX_AGE_MS } from "../../../../sessionCookie.js";
+import { assertAuthRateLimit, resetAuthRateLimit, } from "../../../../utils/authRateLimit.js";
 export const verifyTotpHandler = async ({ input, }) => {
     const db = await getMongoService();
     const { challenge, code } = input;
+    const rateLimitKey = `mfa:totp:${challenge}`;
+    assertAuthRateLimit({
+        key: rateLimitKey,
+        limit: 8,
+        windowMs: 5 * 60 * 1000,
+    });
     const mfaChallenge = await db.find(MfaChallenge, { token: challenge });
     if (!mfaChallenge) {
         throwAppError("NOT_FOUND", {
@@ -62,10 +70,11 @@ export const verifyTotpHandler = async ({ input, }) => {
             error: "INVALID_CODE",
         };
     }
+    resetAuthRateLimit(rateLimitKey);
     // consume challenge (así no se reutiliza)
     await db.update(MfaChallenge, mfaChallenge._id, { consumedAt: new Date() });
     const token = crypto.randomUUID();
-    const expiresAt = new Date(Date.now() + 1000 * 60 * 60 * 24); // 1 day
+    const expiresAt = new Date(Date.now() + SESSION_MAX_AGE_MS);
     await db.create(Session, {
         token,
         user: {
@@ -78,6 +87,7 @@ export const verifyTotpHandler = async ({ input, }) => {
     });
     return {
         token,
+        expiresAt: expiresAt.toISOString(),
     };
 };
 //# sourceMappingURL=verifyTotp.js.map

package/dist/esm/api/routes/manager/auth/totp/verifyTotp.js.map

@@ -1 +1 @@
-{"version":3,"file":"verifyTotp.js","sourceRoot":"","sources":["../../../../../../../src/api/routes/manager/auth/totp/verifyTotp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,SAAS,CAAC;AACnC,OAAO,EACL,YAAY,EACZ,WAAW,EACX,OAAO,EACP,OAAO,GACR,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAGrD,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EAAE,EACtC,KAAK,GAGN,EAAE,EAAE;IACH,MAAM,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;IAEnC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAElC,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACvE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,aAAa,CAAC,WAAW,EAAE;YACzB,EAAE,EAAE,SAAS;YACb,QAAQ,EAAE,cAAc;SACzB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,YAAY,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACnC,aAAa,CAAC,UAAU,EAAE;YACxB,OAAO,EAAE,2BAA2B,YAAY,CAAC,MAAM,EAAE;SAC1D,CAAC,CAAC;IACL,CAAC;IACD,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC;QAC5B,aAAa,CAAC,UAAU,EAAE;YACxB,OAAO,EAAE,gCAAgC;SAC1C,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC7D,aAAa,CAAC,UAAU,EAAE;YACxB,OAAO,EAAE,uBAAuB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC;IACpD,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;QAClB,aAAa,CAAC,UAAU,EAAE;YACxB,OAAO,EAAE,sDAAsD;SAChE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,YAAY,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC;IAE5E,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;IAErC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,aAAa,CAAC,WAAW,EAAE;YACzB,EAAE,EAAE,MAAM;YACV,QAAQ,EAAE,aAAa;SACxB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3D,IAAI,CAAC,GAAG,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC;QACtC,aAAa,CAAC,UAAU,EAAE;YACxB,OAAO,EAAE,oCAAoC;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;QAC5B,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,MAAM;QACjB,MAAM,EAAE,CAAC;QACT,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC;KAClD,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IACxD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO;YACL,KAAK,EAAE,cAAc;SACtB,CAAC;IACJ,CAAC;IAED,0CAA0C;IAC1C,MAAM,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,YAAY,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IAE5E,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ;IAEtE,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE;QACvB,KAAK;QACL,IAAI,EAAE;YACJ,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,WAAW,EAAE,WAAW,CAAC,IAAI;YAC7B,IAAI,EAAE,UAAU;SACjB;QACD,SAAS;QACT,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IAEH,OAAO;QACL,KAAK;KACN,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"file":"verifyTotp.js","sourceRoot":"","sources":["../../../../../../../src/api/routes/manager/auth/totp/verifyTotp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,SAAS,CAAC;AACnC,OAAO,EACL,YAAY,EACZ,WAAW,EACX,OAAO,EACP,OAAO,GACR,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EACL,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,iCAAiC,CAAC;AAEzC,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EAAE,EACtC,KAAK,GAGN,EAAE,EAAE;IACH,MAAM,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;IAEnC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAClC,MAAM,YAAY,GAAG,YAAY,SAAS,EAAE,CAAC;IAE7C,mBAAmB,CAAC;QAClB,GAAG,EAAE,YAAY;QACjB,KAAK,EAAE,CAAC;QACR,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI;KACxB,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACvE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,aAAa,CAAC,WAAW,EAAE;YACzB,EAAE,EAAE,SAAS;YACb,QAAQ,EAAE,cAAc;SACzB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,YAAY,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACnC,aAAa,CAAC,UAAU,EAAE;YACxB,OAAO,EAAE,2BAA2B,YAAY,CAAC,MAAM,EAAE;SAC1D,CAAC,CAAC;IACL,CAAC;IACD,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC;QAC5B,aAAa,CAAC,UAAU,EAAE;YACxB,OAAO,EAAE,gCAAgC;SAC1C,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC7D,aAAa,CAAC,UAAU,EAAE;YACxB,OAAO,EAAE,uBAAuB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC;IACpD,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;QAClB,aAAa,CAAC,UAAU,EAAE;YACxB,OAAO,EAAE,sDAAsD;SAChE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,YAAY,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC;IAE5E,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;IAErC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,aAAa,CAAC,WAAW,EAAE;YACzB,EAAE,EAAE,MAAM;YACV,QAAQ,EAAE,aAAa;SACxB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3D,IAAI,CAAC,GAAG,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC;QACtC,aAAa,CAAC,UAAU,EAAE;YACxB,OAAO,EAAE,oCAAoC;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;QAC5B,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,MAAM;QACjB,MAAM,EAAE,CAAC;QACT,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC;KAClD,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IACxD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO;YACL,KAAK,EAAE,cAAc;SACtB,CAAC;IACJ,CAAC;IACD,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAEjC,0CAA0C;IAC1C,MAAM,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,YAAY,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IAE5E,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,kBAAkB,CAAC,CAAC;IAE5D,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE;QACvB,KAAK;QACL,IAAI,EAAE;YACJ,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,WAAW,EAAE,WAAW,CAAC,IAAI;YAC7B,IAAI,EAAE,UAAU;SACjB;QACD,SAAS;QACT,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IAEH,OAAO;QACL,KAAK;QACL,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;KACnC,CAAC;AACJ,CAAC,CAAC"}

package/dist/esm/api/routes/manager/auth/updateAccount.d.ts

@@ -1,5 +1,5 @@
-import { UpdateAccountInput } from "../../../../schemas/manager/auth/accountInfo";
-import { RakunRequestContext } from "../../../context";
+import { UpdateAccountInput } from "../../../../schemas/manager/auth/accountInfo.js";
+import { RakunRequestContext } from "../../../context.js";
 export declare const updateAccountHandler: ({ input, ctx, }: {
     input: UpdateAccountInput;
     ctx: RakunRequestContext;
@@ -9,14 +9,16 @@ export declare const updateAccountHandler: ({ input, ctx, }: {
     password: string;
     role: {
         name: string;
-        permissions: ("manager.users.readAny" | "manager.users.updateAny" | "manager.users.deleteAny" | "manager.roles.readAny" | "manager.roles.updateAny" | "manager.roles.deleteAny" | "manager.routes.readAny" | "manager.routes.updateAny" | "manager.routes.deleteAny" | "manager.languages.readAny" | "manager.languages.updateAny" | "manager.languages.deleteAny" | "manager.seo.readAny" | "manager.seo.updateAny" | "manager.seo.deleteAny" | "manager.permissions.readAny" | "manager.backups.readAny" | "manager.backups.updateAny" | "manager.migrations.readAny" | "manager.versions.readAny" | "manager.versions.updateAny" | "manager.apiOperations.readAny" | "content.Media.readAny" | "content.Media.own" | "content.Media.updateAny" | "content.Media.deleteAny" | "content.Redirect.readAny" | "content.Redirect.own" | "content.Redirect.updateAny" | "content.Redirect.deleteAny" | "manager.literals.readAny" | "manager.literals.updateAny")[];
+        permissions: (string | undefined)[];
         _type: "ManagerRole";
         _id: string;
         _schemaVersion?: number | undefined;
-        _visibility?: import("../../../..").DocumentVisibility | undefined;
-        _visibilityBeforeTrash?: Exclude<import("../../../..").DocumentVisibility, "trash"> | undefined;
+        _visibility?: import("../../../../index.js").DocumentVisibility | undefined;
+        _visibilityBeforeTrash?: Exclude<import("../../../../index.js").DocumentVisibility, "trash"> | undefined;
         _trashed?: boolean | undefined;
         _revision?: number | undefined;
+        _localeVariantGroupId?: string | undefined;
+        _localeVariantRole?: import("zod").infer<typeof import("../../../../index.js").LocaleVariantRole> | undefined;
         trashedAt?: Date | undefined;
         trashedBy?: string | undefined;
         createdAt?: Date | undefined;
@@ -27,6 +29,7 @@ export declare const updateAccountHandler: ({ input, ctx, }: {
     twoFactorEnabled: boolean;
     _type: "ManagerUser";
     _id: string;
+    name?: string | undefined;
     avatarId?: string | undefined;
     avatarKey?: string | undefined;
     avatarAccess?: "public" | "private" | undefined;
@@ -36,10 +39,12 @@ export declare const updateAccountHandler: ({ input, ctx, }: {
     tutorialsPromptedAt?: Date | undefined;
     seenTours?: (string | undefined)[] | undefined;
     _schemaVersion?: number | undefined;
-    _visibility?: import("../../../..").DocumentVisibility | undefined;
-    _visibilityBeforeTrash?: Exclude<import("../../../..").DocumentVisibility, "trash"> | undefined;
+    _visibility?: import("../../../../index.js").DocumentVisibility | undefined;
+    _visibilityBeforeTrash?: Exclude<import("../../../../index.js").DocumentVisibility, "trash"> | undefined;
     _trashed?: boolean | undefined;
     _revision?: number | undefined;
+    _localeVariantGroupId?: string | undefined;
+    _localeVariantRole?: import("zod").infer<typeof import("../../../../index.js").LocaleVariantRole> | undefined;
     trashedAt?: Date | undefined;
     trashedBy?: string | undefined;
     createdAt?: Date | undefined;

package/dist/esm/api/routes/manager/auth/updateAccount.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"updateAccount.d.ts","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/auth/updateAccount.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,kBAAkB,EACnB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAGvD,eAAO,MAAM,oBAAoB,GAAU,iBAGxC;IACD,KAAK,EAAE,kBAAkB,CAAC;IAC1B,GAAG,EAAE,mBAAmB,CAAC;CAC1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkBA,CAAC"}
+{"version":3,"file":"updateAccount.d.ts","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/auth/updateAccount.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,kBAAkB,EACnB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAGvD,eAAO,MAAM,oBAAoB,GAAU,iBAGxC;IACD,KAAK,EAAE,kBAAkB,CAAC;IAC1B,GAAG,EAAE,mBAAmB,CAAC;CAC1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuBA,CAAC"}

package/dist/esm/api/routes/manager/auth/updateAccount.js

@@ -1,6 +1,6 @@
-import { ManagerUser, Media } from "../../../../internal-content-types";
-import { getMongoService } from "../../../../orm";
-import { populateRelations } from "../../../utils/populates/populateRelations";
+import { ManagerUser, Media } from "../../../../internal-content-types/index.js";
+import { getMongoService } from "../../../../orm/index.js";
+import { populateRelations } from "../../../utils/populates/populateRelations.js";
 export const updateAccountHandler = async ({ input, ctx, }) => {
     const user = ctx.getUser();
     const db = await getMongoService();
@@ -8,6 +8,9 @@ export const updateAccountHandler = async ({ input, ctx, }) => {
         ? await db.get(Media, input.avatarId)
         : undefined;
     const updated = await db.update(ManagerUser, user._id, {
+        ...(input.name !== undefined
+            ? { name: input.name?.trim() ?? "" }
+            : {}),
         user: input.user.trim(),
         avatarId: avatar?._id ?? user.avatarId,
         avatarKey: avatar?.key ?? user.avatarKey,
@@ -15,6 +18,8 @@ export const updateAccountHandler = async ({ input, ctx, }) => {
         avatarUrl: avatar?.url ?? user.avatarUrl,
         avatarPreviewUrl: avatar?.previewUrl ?? user.avatarPreviewUrl,
     });
-    return await populateRelations(updated);
+    return await populateRelations(updated, {
+        exposePrivateMedia: true,
+    });
 };
 //# sourceMappingURL=updateAccount.js.map

package/dist/esm/api/routes/manager/auth/updateAccount.js.map

@@ -1 +1 @@
-{"version":3,"file":"updateAccount.js","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/auth/updateAccount.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAKlD,OAAO,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AAE/E,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,EAAE,EACzC,KAAK,EACL,GAAG,GAIJ,EAAE,EAAE;IACH,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,MAAM,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;IACnC,MAAM,MAAM,GACV,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;QAChD,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC;QACrC,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;QACrD,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;QACvB,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,QAAQ;QACtC,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,SAAS;QACxC,YAAY,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC,YAAY;QACjD,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,SAAS;QACxC,gBAAgB,EAAE,MAAM,EAAE,UAAU,IAAI,IAAI,CAAC,gBAAgB;KAC9D,CAAC,CAAC;IAEH,OAAO,MAAM,iBAAiB,CAAc,OAAO,CAAC,CAAC;AACvD,CAAC,CAAC"}
+{"version":3,"file":"updateAccount.js","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/auth/updateAccount.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAKlD,OAAO,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AAE/E,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,EAAE,EACzC,KAAK,EACL,GAAG,GAIJ,EAAE,EAAE;IACH,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,MAAM,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;IACnC,MAAM,MAAM,GACV,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;QAChD,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC;QACrC,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;QACrD,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;YAC1B,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YACpC,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;QACvB,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,QAAQ;QACtC,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,SAAS;QACxC,YAAY,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC,YAAY;QACjD,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,SAAS;QACxC,gBAAgB,EAAE,MAAM,EAAE,UAAU,IAAI,IAAI,CAAC,gBAAgB;KAC9D,CAAC,CAAC;IAEH,OAAO,MAAM,iBAAiB,CAAc,OAAO,EAAE;QACnD,kBAAkB,EAAE,IAAI;KACzB,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/esm/api/routes/manager/auth/updatePassword.d.ts

@@ -1,5 +1,5 @@
-import { RakunRequestContext } from "../../../context";
-import { UpdatePasswordInput } from "../../../../schemas/manager/updatePassword";
+import { RakunRequestContext } from "../../../context.js";
+import { UpdatePasswordInput } from "../../../../schemas/manager/updatePassword.js";
 export declare const updatePasswordHandler: ({ input, ctx, }: {
     input: UpdatePasswordInput;
     ctx: RakunRequestContext;

package/dist/esm/api/routes/manager/auth/updatePassword.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"updatePassword.d.ts","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/auth/updatePassword.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AAGjF,eAAO,MAAM,qBAAqB,GAAU,iBAGzC;IACD,KAAK,EAAE,mBAAmB,CAAC;IAC3B,GAAG,EAAE,mBAAmB,CAAC;CAC1B;;EAcA,CAAC"}
+{"version":3,"file":"updatePassword.d.ts","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/auth/updatePassword.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AAGjF,eAAO,MAAM,qBAAqB,GAAU,iBAGzC;IACD,KAAK,EAAE,mBAAmB,CAAC;IAC3B,GAAG,EAAE,mBAAmB,CAAC;CAC1B;;EAsBA,CAAC"}

package/dist/esm/api/routes/manager/auth/updatePassword.js

@@ -1,15 +1,25 @@
-import { ManagerUser } from "../../../../internal-content-types";
-import { getMongoService } from "../../../../orm";
-import { verifyPassword, hashPassword } from "../../../utils/passwords";
+import { ManagerUser, Session } from "../../../../internal-content-types/index.js";
+import { throwAppError } from "../../../../lib/errors/index.js";
+import { getMongoService } from "../../../../orm/index.js";
+import { getSessionCookie } from "../../../sessionCookie.js";
+import { verifyStoredPassword } from "../../../utils/passwords.js";
 export const updatePasswordHandler = async ({ input, ctx, }) => {
     const db = await getMongoService();
     const user = ctx.getUser();
     const password = (await db.get(ManagerUser, user._id, ["password"])).password;
-    if (!verifyPassword(input.currentPassword, password)) {
-        throw new Error("Current password is incorrect");
+    if (!verifyStoredPassword(input.currentPassword, password).valid) {
+        throwAppError("FORBIDDEN", {
+            reason: "INVALID_CREDENTIALS",
+        });
     }
     await db.update(ManagerUser, user._id, {
-        password: hashPassword(input.newPassword),
+        password: input.newPassword,
+    });
+    await db.delete(Session, {
+        "user._id": user._id,
+        ...(getSessionCookie(ctx)
+            ? { token: { $ne: getSessionCookie(ctx) } }
+            : {}),
     });
     return { ok: true };
 };

package/dist/esm/api/routes/manager/auth/updatePassword.js.map

@@ -1 +1 @@
-{"version":3,"file":"updatePassword.js","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/auth/updatePassword.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAGlD,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExE,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EAAE,EAC1C,KAAK,EACL,GAAG,GAIJ,EAAE,EAAE;IACH,MAAM,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAE9E,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,eAAe,EAAE,QAAQ,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;QACrC,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC;KAC1C,CAAC,CAAC;IAEH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC,CAAC"}
+{"version":3,"file":"updatePassword.js","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/auth/updatePassword.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EAAE,EAC1C,KAAK,EACL,GAAG,GAIJ,EAAE,EAAE;IACH,MAAM,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAE9E,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC;QACjE,aAAa,CAAC,WAAW,EAAE;YACzB,MAAM,EAAE,qBAAqB;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;QACrC,QAAQ,EAAE,KAAK,CAAC,WAAW;KAC5B,CAAC,CAAC;IACH,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE;QACvB,UAAU,EAAE,IAAI,CAAC,GAAG;QACpB,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC;YACvB,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE;YAC3C,CAAC,CAAC,EAAE,CAAC;KACC,CAAC,CAAC;IAEZ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC,CAAC"}