@stacksjs/actions 0.75.28 → 0.75.30

package/dist/auth/client-options.d.ts

@@ -0,0 +1,12 @@
+export declare function parseAuthClientArgs(args: readonly string[]): AuthClientArgs;
+export declare interface AuthClientArgs {
+  name: string
+  redirects: string[]
+  personal: boolean
+  password: boolean
+  provider: boolean
+  ownerId: number | null
+  type: 'confidential' | 'public'
+  scopes: string[]
+  resources: string[]
+}

package/dist/auth/client-options.js

@@ -0,0 +1 @@
+function option(args,name,short){const names=[`--${name}`,...short?[`-${short}`]:[]];for(let index=0;index<args.length;index++){const argument=args[index];for(const candidate of names){if(argument.startsWith(`${candidate}=`))return argument.slice(candidate.length+1);if(argument===candidate){const value=args[index+1];return value&&!value.startsWith("-")?value:void 0}}}return}function flag(args,name){return args.includes(`--${name}`)}function list(value){return value?.split(",").map((item)=>item.trim()).filter(Boolean)??[]}export function parseAuthClientArgs(args){const owner=Number(option(args,"owner"));return{name:option(args,"name","n")||"OAuth Client",redirects:list(option(args,"redirect","r")??"http://localhost"),personal:flag(args,"personal"),password:flag(args,"password"),provider:flag(args,"provider"),ownerId:Number.isSafeInteger(owner)&&owner>0?owner:null,type:flag(args,"public")?"public":"confidential",scopes:list(option(args,"scopes")),resources:list(option(args,"resources"))}}

package/dist/auth/client.js

@@ -1,2 +1,2 @@
-import process from"node:process";import{createClient}from"@stacksjs/auth";import{ensureDatabaseConfigLoaded}from"@stacksjs/database";import{log}from"@stacksjs/logging";const args=process.argv.slice(2),getArg=(name)=>{const idx=args.findIndex((a)=>a.startsWith(`--${name}=`)||a.startsWith(`-${name.charAt(0)}=`));if(idx!==-1){const arg=args[idx];if(!arg)return;const eqIdx=arg.indexOf("=");return eqIdx>=0?arg.slice(eqIdx+1):void 0}const flagIdx=args.findIndex((a)=>a===`--${name}`||a===`-${name.charAt(0)}`),value=flagIdx!==-1?args[flagIdx+1]:void 0;if(value&&!value.startsWith("-"))return value;return},hasFlag=(name)=>{return args.includes(`--${name}`)},name=getArg("name")||"OAuth Client",redirect=getArg("redirect")||"http://localhost",isPersonalAccess=hasFlag("personal"),isPasswordClient=hasFlag("password");log.info(`Creating OAuth client: ${name}`);await ensureDatabaseConfigLoaded();const{client,plainTextSecret}=await createClient({name,redirect,personalAccessClient:isPersonalAccess,passwordClient:isPasswordClient});log.success("OAuth client created successfully");log.info("");log.info("Client Details:");log.info(`  Client ID: ${client.id}`);log.info("  Client Secret: [REDACTED]");process.stdout.write(`Client Secret (save now, shown once): ${plainTextSecret}
-`);log.info(`  Redirect URI: ${redirect}`);log.info("");log.warn("Make sure to save the client secret. You will not be able to retrieve it again.");await log.flush();process.exit(0);
+import process from"node:process";import{createClient,registerOAuthClient,resolveOAuthProviderConfig}from"@stacksjs/auth";import{config}from"@stacksjs/config";import{ensureDatabaseConfigLoaded}from"@stacksjs/database";import{log}from"@stacksjs/logging";import{parseAuthClientArgs}from"./client-options";const options=parseAuthClientArgs(process.argv.slice(2));log.info(`Creating OAuth client: ${options.name}`);await ensureDatabaseConfigLoaded();const result=options.provider?await createProviderClient():await createClient({name:options.name,redirect:options.redirects[0]||"http://localhost",personalAccessClient:options.personal,passwordClient:options.password});async function createProviderClient(){if(options.personal||options.password)throw Error("Provider clients cannot use --personal or --password.");if(!options.ownerId)throw Error("Provider clients require a positive --owner user id.");if(!options.scopes.length)throw Error("Provider clients require at least one --scopes value.");const provider=resolveOAuthProviderConfig(config.auth.oauthProvider);if(!provider)throw Error("The OAuth authorization server is not enabled in config/auth.ts.");return registerOAuthClient(provider,options.ownerId,{name:options.name,type:options.type,tokenEndpointAuthMethod:options.type==="public"?"none":"client_secret_basic",redirectUris:options.redirects,grantTypes:["authorization_code","refresh_token"],scopes:options.scopes,resources:options.resources})}const{client,plainTextSecret}=result;log.success("OAuth client created successfully");log.info("");log.info("Client Details:");log.info(`  Client ID: ${client.id}`);if(plainTextSecret)process.stdout.write(`Client Secret (save now, shown once): ${plainTextSecret}
+`);else log.info("  Client Secret: none (public client)");log.info(`  Redirect URI: ${options.redirects.join(", ")}`);log.info("");if(plainTextSecret)log.warn("Make sure to save the client secret. You will not be able to retrieve it again.");await log.flush();process.exit(0);

package/dist/auth/prune.js

@@ -1 +1 @@
-import process from"node:process";import{db,sql}from"@stacksjs/database/runtime";import{log}from"@stacksjs/logging";const args=process.argv.slice(2),hasFlag=(name)=>{return args.includes(`--${name}`)},getArg=(name)=>{const idx=args.findIndex((a)=>a.startsWith(`--${name}=`)||a.startsWith(`-${name.charAt(0)}=`));if(idx!==-1){const arg=args[idx];if(!arg)return;const eqIdx=arg.indexOf("=");return eqIdx>=0?arg.slice(eqIdx+1):void 0}const flagIdx=args.findIndex((a)=>a===`--${name}`||a===`-${name.charAt(0)}`),value=flagIdx!==-1?args[flagIdx+1]:void 0;if(value&&!value.startsWith("-"))return value;return},pruneExpired=!hasFlag("no-expired"),pruneRevoked=!hasFlag("no-revoked"),daysOld=Number(getArg("days"))||7;log.info("Pruning authentication tokens...");let expiredCount=0,revokedCount=0;if(pruneExpired){log.info("Removing expired tokens...");expiredCount=await db.deleteFrom("personal_access_tokens").where("expires_at","<",sql.raw("NOW()")).execute();log.success(`Removed ${expiredCount} expired token(s)`)}if(pruneRevoked){log.info(`Removing tokens revoked more than ${daysOld} day(s) ago...`);const cutoffDate=new Date;cutoffDate.setDate(cutoffDate.getDate()-daysOld);revokedCount=await db.deleteFrom("personal_access_tokens").whereNotNull("revoked_at").where("revoked_at","<",cutoffDate.toISOString()).execute();log.success(`Removed ${revokedCount} revoked token(s)`)}log.success(`Token pruning complete. Total removed: ${expiredCount+revokedCount}`);await log.flush();process.exit(0);
+import process from"node:process";import{deleteExpiredTokens,deleteRevokedTokens,pruneOAuthAuthorizationArtifacts}from"@stacksjs/auth";import{log}from"@stacksjs/logging";const args=process.argv.slice(2),hasFlag=(name)=>{return args.includes(`--${name}`)},getArg=(name)=>{const idx=args.findIndex((a)=>a.startsWith(`--${name}=`)||a.startsWith(`-${name.charAt(0)}=`));if(idx!==-1){const arg=args[idx];if(!arg)return;const eqIdx=arg.indexOf("=");return eqIdx>=0?arg.slice(eqIdx+1):void 0}const flagIdx=args.findIndex((a)=>a===`--${name}`||a===`-${name.charAt(0)}`),value=flagIdx!==-1?args[flagIdx+1]:void 0;if(value&&!value.startsWith("-"))return value;return},pruneExpired=!hasFlag("no-expired"),pruneRevoked=!hasFlag("no-revoked"),daysOld=Number(getArg("days"))||7;log.info("Pruning authentication tokens...");let expiredCount=0,revokedCount=0,oauthCount=0;if(pruneExpired){log.info("Removing expired tokens...");expiredCount=await deleteExpiredTokens();log.success(`Removed ${expiredCount} expired token(s)`);const oauth=await pruneOAuthAuthorizationArtifacts({consumedRetentionMs:daysOld*24*60*60*1000});oauthCount=oauth.authorizationRequests+oauth.authorizationCodes;log.success(`Removed ${oauth.authorizationRequests} OAuth authorization request(s)`);log.success(`Removed ${oauth.authorizationCodes} OAuth authorization code(s)`)}if(pruneRevoked){log.info(`Removing tokens revoked more than ${daysOld} day(s) ago...`);revokedCount=await deleteRevokedTokens(daysOld);log.success(`Removed ${revokedCount} revoked token(s)`)}log.success(`Token pruning complete. Total removed: ${expiredCount+revokedCount+oauthCount}`);await log.flush();process.exit(0);

package/package.json

@@ -2,7 +2,7 @@
   "name": "@stacksjs/actions",
   "type": "module",
   "sideEffects": false,
-  "version": "0.75.28",
+  "version": "0.75.30",
   "description": "The Stacks actions.",
   "author": "Chris Breuer",
   "contributors": [
@@ -60,53 +60,53 @@
     "prepublishOnly": "bun run build"
   },
   "dependencies": {
-    "@stacksjs/action-runner": "0.75.28",
-    "@stacksjs/ai": "0.75.28",
-    "@stacksjs/analytics": "0.75.28",
-    "@stacksjs/api": "0.75.28",
-    "@stacksjs/auth": "0.75.28",
-    "@stacksjs/build": "0.75.28",
+    "@stacksjs/action-runner": "0.75.30",
+    "@stacksjs/ai": "0.75.30",
+    "@stacksjs/analytics": "0.75.30",
+    "@stacksjs/api": "0.75.30",
+    "@stacksjs/auth": "0.75.30",
+    "@stacksjs/build": "0.75.30",
     "@stacksjs/bumpx": "^0.2.6",
     "@stacksjs/bunpress": "^0.2.8",
-    "@stacksjs/cli": "0.75.28",
-    "@stacksjs/cloud": "0.75.28",
-    "@stacksjs/cms": "0.75.28",
-    "@stacksjs/components": "^0.2.336",
-    "@stacksjs/config": "0.75.28",
-    "@stacksjs/database": "0.75.28",
-    "@stacksjs/desktop-build": "0.75.28",
-    "@stacksjs/dns": "0.75.28",
-    "@stacksjs/enums": "0.75.28",
-    "@stacksjs/env": "0.75.28",
-    "@stacksjs/error-handling": "0.75.28",
+    "@stacksjs/cli": "0.75.30",
+    "@stacksjs/cloud": "0.75.30",
+    "@stacksjs/cms": "0.75.30",
+    "@stacksjs/components": "^0.2.337",
+    "@stacksjs/config": "0.75.30",
+    "@stacksjs/database": "0.75.30",
+    "@stacksjs/desktop-build": "0.75.30",
+    "@stacksjs/dns": "0.75.30",
+    "@stacksjs/enums": "0.75.30",
+    "@stacksjs/env": "0.75.30",
+    "@stacksjs/error-handling": "0.75.30",
     "@stacksjs/gitit": "^0.2.5",
-    "@stacksjs/i18n": "0.75.28",
-    "@stacksjs/image": "0.75.28",
-    "@stacksjs/logging": "0.75.28",
+    "@stacksjs/i18n": "0.75.30",
+    "@stacksjs/image": "0.75.30",
+    "@stacksjs/logging": "0.75.30",
     "@stacksjs/logsmith": "^0.2.3",
-    "@stacksjs/orm": "0.75.28",
-    "@stacksjs/path": "0.75.28",
-    "@stacksjs/payments": "0.75.28",
-    "@stacksjs/queue": "0.75.28",
-    "@stacksjs/registry": "0.75.28",
-    "@stacksjs/router": "0.75.28",
+    "@stacksjs/orm": "0.75.30",
+    "@stacksjs/path": "0.75.30",
+    "@stacksjs/payments": "0.75.30",
+    "@stacksjs/queue": "0.75.30",
+    "@stacksjs/registry": "0.75.30",
+    "@stacksjs/router": "0.75.30",
     "@stacksjs/rpx": "^0.11.54",
-    "@stacksjs/scheduler": "0.75.28",
-    "@stacksjs/search-engine": "0.75.28",
-    "@stacksjs/security": "0.75.28",
-    "@stacksjs/server": "0.75.28",
-    "@stacksjs/sites": "0.75.28",
-    "@stacksjs/storage": "0.75.28",
-    "@stacksjs/strings": "0.75.28",
-    "@stacksjs/stx": "^0.2.336",
+    "@stacksjs/scheduler": "0.75.30",
+    "@stacksjs/search-engine": "0.75.30",
+    "@stacksjs/security": "0.75.30",
+    "@stacksjs/server": "0.75.30",
+    "@stacksjs/sites": "0.75.30",
+    "@stacksjs/storage": "0.75.30",
+    "@stacksjs/strings": "0.75.30",
+    "@stacksjs/stx": "^0.2.337",
     "@stacksjs/tlsx": "^0.13.19",
     "@stacksjs/ts-cloud": "^0.16.15",
     "@stacksjs/ts-md": "^0.1.1",
-    "@stacksjs/tunnel": "0.75.28",
-    "@stacksjs/types": "0.75.28",
-    "@stacksjs/utils": "0.75.28",
-    "@stacksjs/whois": "0.75.28",
-    "bun-plugin-stx": "^0.2.336"
+    "@stacksjs/tunnel": "0.75.30",
+    "@stacksjs/types": "0.75.30",
+    "@stacksjs/utils": "0.75.30",
+    "@stacksjs/whois": "0.75.30",
+    "bun-plugin-stx": "^0.2.337"
   },
   "peerDependencies": {
     "craft-native": ">=0.0.103",
@@ -121,7 +121,7 @@
     }
   },
   "devDependencies": {
-    "@stacksjs/validation": "0.75.28",
+    "@stacksjs/validation": "0.75.30",
     "better-dx": "^0.2.24"
   }
 }