gemi 0.70.1 → 0.71.0

package/dist/auth/UserProvider.d.ts

@@ -1,5 +1,65 @@
 import type { Account, AuthModels, CreateAccountArgs, CreateMagicLinkTokenArgs, CreatePasswordResetTokenArgs, CreateSessionArgs, CreateSocialAccountArgs, CreateUserArgs, DeletePasswordResetTokenArgs, DeleteSessionArgs, FindPasswordResetTokenArgs, FindSessionArgs, Invitation, PasswordResetToken, SessionWithUser, SocialAccount, UpdateSessionArgs, UpdateUserPasswordArgs, User } from "./types";
-export declare class UserProvider {
+/**
+ * The `select` all three session queries — `findSession`, `updateSession` and
+ * `createSessionV2` — run with, unless a provider's `sessionSelect()` returns
+ * another.
+ *
+ * Exported so that an override can **build on it rather than copy it**. A copy
+ * made field for field goes stale silently: it is how an application came to
+ * keep selecting `User.organizationId` after gemi stopped (#346), and a schema
+ * error inside `findSession` is caught and reads as "signed out", not as a bug.
+ * Spread this, and the columns gemi adds later arrive on their own.
+ *
+ * Frozen, because it is shared: assigning into it would change every
+ * provider's session, the default one's included, from wherever the
+ * assignment happened to run.
+ */
+export declare const SESSION_SELECT: {
+    readonly token: true;
+    readonly expiresAt: true;
+    readonly absoluteExpiresAt: true;
+    readonly updatedAt: true;
+    readonly location: true;
+    readonly userAgent: true;
+    readonly user: {
+        readonly select: {
+            readonly id: true;
+            readonly publicId: true;
+            readonly email: true;
+            readonly name: true;
+            readonly locale: true;
+            readonly globalRole: true;
+            readonly accounts: {
+                readonly select: {
+                    readonly id: true;
+                    readonly publicId: true;
+                    readonly organizationRole: true;
+                    readonly organization: true;
+                };
+            };
+        };
+    };
+};
+/**
+ * What `sessionSelect()` returns: a `select` on `Session`, in the ORM's
+ * grammar. Loose on purpose — the framework does not know an application's
+ * models, so it cannot name their columns. Check an override against them
+ * with `satisfies SelectInput<SessionTypes>` from the app's generated models.
+ */
+export type SessionSelect = {
+    readonly [field: string]: unknown;
+};
+/**
+ * `TSession` is the session the three session queries return. It defaults to
+ * `SessionWithUser`, so a provider that does not override `sessionSelect()`
+ * types exactly as before. One that does names the shape its select produces —
+ * derived from the select itself with the ORM's `Payload`, so the type cannot
+ * drift from the query:
+ *
+ *     type AppSession = Payload<SessionTypes, { select: typeof APP_SESSION_SELECT }>;
+ *     class AppUserProvider extends UserProvider<AppSession> { … }
+ */
+export declare class UserProvider<TSession = SessionWithUser> {
     protected models: AuthModels;
     /**
      * Defaults to the ORM registry, so an application needs no configuration to
@@ -16,6 +76,27 @@ export declare class UserProvider {
      * server error. One wrapper, applied uniformly, so no method can forget.
      */
     protected run<T>(fn: () => Promise<T>): Promise<T>;
+    /**
+     * **The session query's `select`, shared by `findSession`, `updateSession`
+     * and `createSessionV2`.** Override it to change what a session carries
+     * without owning those queries: select an extra column (`deletedAt`), order
+     * or filter `user.accounts` with an `orderBy` or `where` on the relation.
+     * Start from `SESSION_SELECT` and spread it, so the fields gemi selects keep
+     * coming along:
+     *
+     *     protected sessionSelect() {
+     *       return APP_SESSION_SELECT; // `{ ...SESSION_SELECT, user: … }`
+     *     }
+     *
+     * The order or filter lives *in the query*, so every session gemi hands
+     * out — to the web app and to a native client alike — has it, and nothing
+     * re-queries `Account` on the auth hot path to recover a field.
+     *
+     * Keep the fields the default selects, the ones `AuthManager` reads above
+     * all: `token`, `expiresAt`, `absoluteExpiresAt` and `user`. A row that
+     * lacks an expiry is treated as expired.
+     */
+    protected sessionSelect(): SessionSelect;
     /**
      * Runs `fn` inside a transaction on the connection the `User` model lives on.
      * Every ORM query in it joins automatically, at any call depth — see
@@ -60,24 +141,27 @@ export declare class UserProvider {
     /**
      * `AuthManager` reads a new session back through `findSession` before
      * handing it out, so an override that shapes the session there need not
-     * repeat the shaping here.
+     * repeat the shaping here. Selects with `sessionSelect()`, as that does.
      */
-    createSessionV2(args: CreateSessionArgs): Promise<SessionWithUser>;
+    createSessionV2(args: CreateSessionArgs): Promise<TSession>;
     /**
      * **The shape of every session `AuthManager` hands out.** It serves this
      * result on each request, keeps it when `updateSession` slides the expiry
      * (taking only the new `expiresAt`), and reads a sign-in's new row back
-     * through it. So an override here — ordering `user.accounts`, filtering
-     * them, adding a field — is the only one a provider needs to shape a
-     * session; it can call `super.findSession` and post-process the result.
+     * through it. So this is the only method a provider needs to shape a
+     * session. What can be said in the query — an extra column, an order or a
+     * filter on `user.accounts` — belongs in `sessionSelect()`, which this
+     * reads with; what cannot, an override here does by calling
+     * `super.findSession` and post-processing the result.
      */
-    findSession(args: FindSessionArgs): Promise<SessionWithUser | null>;
+    findSession(args: FindSessionArgs): Promise<TSession | null>;
     /**
      * `AuthManager` takes only `expiresAt` from the result and keeps the session
      * `findSession` returned, so the user selected here is not what a request
-     * sees.
+     * sees. Selects with `sessionSelect()` all the same, so that a caller
+     * reading this row gets the shape every other session has.
      */
-    updateSession(args: UpdateSessionArgs): Promise<SessionWithUser | null>;
+    updateSession(args: UpdateSessionArgs): Promise<TSession | null>;
     deleteSession(args: DeleteSessionArgs): Promise<void>;
     deleteAllUserSessions(userId: number): Promise<void>;
     createPasswordResetToken(args: CreatePasswordResetTokenArgs): Promise<string>;

package/dist/auth/UserProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"UserProvider.d.ts","sourceRoot":"","sources":["../../auth/UserProvider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,OAAO,EACP,UAAU,EACV,iBAAiB,EACjB,wBAAwB,EACxB,4BAA4B,EAC5B,iBAAiB,EACjB,uBAAuB,EACvB,cAAc,EACd,4BAA4B,EAC5B,iBAAiB,EACjB,0BAA0B,EAC1B,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,sBAAsB,EACtB,IAAI,EACL,MAAM,SAAS,CAAC;AAuIjB,qBAAa,YAAY;IAMX,SAAS,CAAC,MAAM,EAAE,UAAU;IALxC;;;;OAIG;gBACmB,MAAM,GAAE,UAA6B;IAE3D;;;;;;;OAOG;IACH,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAIlD;;;;;;;;;;;;;;;;OAgBG;IACH,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAIhD;;;;;;;;;;;;;;;;OAgBG;IACG,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAO/C,kBAAkB,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAa/D,sBAAsB,CAC1B,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,OAAO,GACnB,OAAO,CAAC,IAAI,CAAC;IAaV,2BAA2B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAMhE,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASxC,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,eAAe,CAAC;IAMtE;;;;OAIG;IACG,eAAe,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,eAAe,CAAC;IASxE;;;;;;;OAOG;IACG,WAAW,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IA8BzE;;;;OAIG;IACG,aAAa,CACjB,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAkB5B,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAcrD,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMpD,wBAAwB,CAC5B,IAAI,EAAE,4BAA4B,GACjC,OAAO,CAAC,MAAM,CAAC;IAWZ,sBAAsB,CAC1B,IAAI,EAAE,0BAA0B,GAC/B,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAS/B,wBAAwB,CAC5B,IAAI,EAAE,4BAA4B,GACjC,OAAO,CAAC,MAAM,CAAC;IAMZ,cAAc,CAClB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,UAAU,CAAC;IAQhB,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQzD,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAY/D,oBAAoB,CACxB,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAQpC,sBAAsB,CAAC,IAAI,EAAE;QACjC,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;KACf,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAgBlB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMlD,mBAAmB,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,GAAG,CAAC;IAMtE;;;;;;;;;;;OAWG;IACG,uBAAuB,CAC3B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAWjB,kBAAkB,CACtB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,aAAa,EAAE,CAAC;IAS3B;;;;;;;OAOG;IACG,kBAAkB,CACtB,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,GAAG,YAAY,CAAC,EACjD,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,OAAO,CAAC;CASpB"}
+{"version":3,"file":"UserProvider.d.ts","sourceRoot":"","sources":["../../auth/UserProvider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,OAAO,EACP,UAAU,EACV,iBAAiB,EACjB,wBAAwB,EACxB,4BAA4B,EAC5B,iBAAiB,EACjB,uBAAuB,EACvB,cAAc,EACd,4BAA4B,EAC5B,iBAAiB,EACjB,0BAA0B,EAC1B,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,sBAAsB,EACtB,IAAI,EACL,MAAM,SAAS,CAAC;AA+IjB;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;CAQhB,CAAC;AAEZ;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG;IAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC;AAElE;;;;;;;;;GASG;AACH,qBAAa,YAAY,CAAC,QAAQ,GAAG,eAAe;IAMtC,SAAS,CAAC,MAAM,EAAE,UAAU;IALxC;;;;OAIG;gBACmB,MAAM,GAAE,UAA6B;IAE3D;;;;;;;OAOG;IACH,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAIlD;;;;;;;;;;;;;;;;;;;OAmBG;IACH,SAAS,CAAC,aAAa,IAAI,aAAa;IAIxC;;;;;;;;;;;;;;;;OAgBG;IACH,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAIhD;;;;;;;;;;;;;;;;OAgBG;IACG,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAO/C,kBAAkB,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAa/D,sBAAsB,CAC1B,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,OAAO,GACnB,OAAO,CAAC,IAAI,CAAC;IAaV,2BAA2B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAMhE,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASxC,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,eAAe,CAAC;IAMtE;;;;OAIG;IACG,eAAe,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,QAAQ,CAAC;IAMjE;;;;;;;;;OASG;IACG,WAAW,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAsBlE;;;;;OAKG;IACG,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAUhE,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAcrD,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMpD,wBAAwB,CAC5B,IAAI,EAAE,4BAA4B,GACjC,OAAO,CAAC,MAAM,CAAC;IAWZ,sBAAsB,CAC1B,IAAI,EAAE,0BAA0B,GAC/B,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAS/B,wBAAwB,CAC5B,IAAI,EAAE,4BAA4B,GACjC,OAAO,CAAC,MAAM,CAAC;IAMZ,cAAc,CAClB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,UAAU,CAAC;IAQhB,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQzD,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAY/D,oBAAoB,CACxB,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAQpC,sBAAsB,CAAC,IAAI,EAAE;QACjC,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;KACf,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAgBlB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMlD,mBAAmB,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,GAAG,CAAC;IAMtE;;;;;;;;;;;OAWG;IACG,uBAAuB,CAC3B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAWjB,kBAAkB,CACtB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,aAAa,EAAE,CAAC;IAS3B;;;;;;;OAOG;IACG,kBAAkB,CACtB,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,GAAG,YAAY,CAAC,EACjD,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,OAAO,CAAC;CASpB"}

package/dist/broadcasting/index.js

@@ -1,4 +1,4 @@
 // @bun
-import"../chunk-vpvde0nb.js";class n{async subscribe(r){return!0}publish(r){return{}}}export{n as BroadcastingChannel};
+import"../chunk-5fxqzs72.js";class n{async subscribe(r){return!0}publish(r){return{}}}export{n as BroadcastingChannel};
 
 //# debugId=3E2D2EBC3796AA1A64756E2164756E21

package/dist/bun/plugin.js

@@ -1,4 +1,4 @@
 // @bun
-import{ca as a}from"../chunk-qxfby5zf.js";import"../chunk-s7v66c70.js";import"../chunk-2qyghpe0.js";import"../chunk-vpvde0nb.js";export{a as gemiPlugin};
+import{ca as a}from"../chunk-bt9rjc80.js";import"../chunk-yvkm7qya.js";import"../chunk-zz0t0pwk.js";import"../chunk-5fxqzs72.js";export{a as gemiPlugin};
 
 //# debugId=DBAE3729A59FFE4464756E2164756E21

package/dist/bun/preload.js

@@ -1,4 +1,4 @@
 // @bun
-import{ca as k}from"../chunk-qxfby5zf.js";import"../chunk-s7v66c70.js";import"../chunk-2qyghpe0.js";import{ua as j}from"../chunk-gvkydx8r.js";import"../chunk-vpvde0nb.js";var{plugin:q}=globalThis.Bun;q(k());var y=await j(process.cwd());for(let x of y.bun?.plugins??[])q(x);
+import{ca as k}from"../chunk-bt9rjc80.js";import"../chunk-yvkm7qya.js";import"../chunk-zz0t0pwk.js";import{ua as j}from"../chunk-gvkydx8r.js";import"../chunk-5fxqzs72.js";var{plugin:q}=globalThis.Bun;q(k());var y=await j(process.cwd());for(let x of y.bun?.plugins??[])q(x);
 
 //# debugId=D461962ED718EDF864756E2164756E21

package/dist/{chunk-p0m3qgs5.js → chunk-0kpvbnz0.js}

@@ -1,5 +1,5 @@
 // @bun
 function j(h){return h}function p(){return{supportedLocales:[],defaultLocale:"en-US",prefetch:{},components:{},detectLocale:()=>null,onLocaleChange:(h)=>{console.log(`Locale changed to ${h}`)}}}
-export{j as hc,p as ic};
+export{j as fc,p as gc};
 
-//# debugId=D4C044C0C33F961964756E2164756E21
+//# debugId=C1453D4E8D4DC38964756E2164756E21

package/dist/{chunk-p0m3qgs5.js.map → chunk-0kpvbnz0.js.map}

@@ -5,6 +5,6 @@
     "import type { Dictionary } from \"./Dictionary\";\nimport type { HttpRequest } from \"../http/HttpRequest\";\n\n// Config key: `translation`. Derived from `I18nServiceProvider`.\nexport interface TranslationConfig {\n  supportedLocales?: string[];\n  defaultLocale?: string;\n  /**\n   * @deprecated Only for `Dictionary.create` dictionaries. A `defineDictionary`\n   * dictionary needs no entry here — the component that reads it pulls it in,\n   * and the bundler ships only the active locale.\n   */\n  prefetch?: Record<string, Array<Dictionary<any>>>;\n  /** @deprecated Only for `Dictionary.create` dictionaries. See `prefetch`. */\n  components?: Record<string, Dictionary<any>>;\n\n  // Returning `null` falls back to gemi's own locale detection.\n  detectLocale?: (req: HttpRequest) => string | null;\n  onLocaleChange?: (locale: string) => Promise<void> | void;\n}\n\nexport function defineTranslationConfig(\n  config: TranslationConfig,\n): TranslationConfig {\n  return config;\n}\n\nexport function translationConfigDefaults(): Required<TranslationConfig> {\n  return {\n    supportedLocales: [],\n    defaultLocale: \"en-US\",\n    prefetch: {},\n    components: {},\n    detectLocale: () => null,\n    onLocaleChange: (locale) => {\n      console.log(`Locale changed to ${locale}`);\n    },\n  };\n}\n"
   ],
   "mappings": ";AAqBO,SAAS,CAAuB,CACrC,EACmB,CACnB,OAAO,EAGF,SAAS,CAAyB,EAAgC,CACvE,MAAO,CACL,iBAAkB,CAAC,EACnB,cAAe,QACf,SAAU,CAAC,EACX,WAAY,CAAC,EACb,aAAc,IAAM,KACpB,eAAgB,CAAC,IAAW,CAC1B,QAAQ,IAAI,qBAAqB,GAAQ,EAE7C",
-  "debugId": "D4C044C0C33F961964756E2164756E21",
+  "debugId": "C1453D4E8D4DC38964756E2164756E21",
   "names": []
 }