Account RPC action specs — declarative contract for self-service account operations. Import this module for the specs, Input/Output schemas, and the all_account_action_specs registry. Handlers live in auth/account_actions.ts so consumers doing typed-client codegen or surface reporting don't transitively drag in server-only query code.
21 declarations
auth/account_action_specs.ts view source
{ method: string; kind: "request_response"; initiator: "frontend"; auth: "authenticated"; side_effects: false; input: ZodVoid; output: ZodObject<{ sessions: ZodArray<ZodObject<{ id: ZodString; account_id: $ZodBranded<...>; created_at: ZodString; expires_at: ZodString; last_seen_at: ZodString; }, $strict>>; }, $stric... auth/account_action_specs.ts view source
{ method: string; kind: "request_response"; initiator: "frontend"; auth: "authenticated"; side_effects: true; input: ZodObject<{ session_id: ZodString; }, $strict>; output: ZodObject<...>; async: true; description: string; } auth/account_action_specs.ts view source
{ method: string; kind: "request_response"; initiator: "frontend"; auth: "authenticated"; side_effects: true; input: ZodVoid; output: ZodObject<{ ok: ZodLiteral<true>; count: ZodNumber; }, $strict>; async: true; description: string; } auth/account_action_specs.ts view source
{ method: string; kind: "request_response"; initiator: "frontend"; auth: "authenticated"; side_effects: true; input: ZodObject<{ name: ZodDefault<ZodString>; }, $strict>; output: ZodObject<...>; async: true; description: string; } auth/account_action_specs.ts view source
{ method: string; kind: "request_response"; initiator: "frontend"; auth: "authenticated"; side_effects: false; input: ZodVoid; output: ZodObject<{ tokens: ZodArray<ZodObject<{ id: ZodString; account_id: $ZodBranded<...>; ... 4 more ...; created_at: ZodString; }, $strict>>; }, $strict>; async: true; description: stri... auth/account_action_specs.ts view source
{ method: string; kind: "request_response"; initiator: "frontend"; auth: "authenticated"; side_effects: true; input: ZodObject<{ token_id: ZodString; }, $strict>; output: ZodObject<...>; async: true; description: string; } auth/account_action_specs.ts view source
{ method: string; kind: "request_response"; initiator: "frontend"; auth: "authenticated"; side_effects: false; input: ZodVoid; output: ZodObject<{ id: $ZodBranded<ZodUUID, "Uuid", "out">; username: ZodString; email: ZodNullable<...>; email_verified: ZodBoolean; created_at: ZodString; }, $strict>; async: true; descri... auth/account_action_specs.ts view source
{ method: string; initiator: "frontend" | "backend" | "both"; side_effects: boolean; input: ZodType<unknown, unknown, $ZodTypeInternals<unknown, unknown>>; output: ZodType<unknown, unknown, $ZodTypeInternals<unknown, unknown>>; ... 6 more ...; rate_limit?: "both" | ... 2 more ... | undefined; }[] All self-service account action specs — a codegen-ready registry. Consumers spread this into their own action-spec array to include account methods in a typed client surface.
auth/account_action_specs.ts view source
ZodVoid Input for account_session_list. No parameters.
auth/account_action_specs.ts view source
ZodObject<{ sessions: ZodArray<ZodObject<{ id: ZodString; account_id: $ZodBranded<ZodUUID, "Uuid", "out">; created_at: ZodString; expires_at: ZodString; last_seen_at: ZodString; }, $strict>>; }, $strict> Output for account_session_list.
auth/account_action_specs.ts view source
ZodVoid Input for account_session_revoke_all. No parameters.
auth/account_action_specs.ts view source
ZodObject<{ ok: ZodLiteral<true>; count: ZodNumber; }, $strict> Output for account_session_revoke_all.
auth/account_action_specs.ts view source
ZodObject<{ session_id: ZodString; }, $strict> Input for account_session_revoke. session_id is the blake3 hash.
auth/account_action_specs.ts view source
ZodObject<{ ok: ZodLiteral<true>; revoked: ZodBoolean; }, $strict> Output for account_session_revoke. revoked is false for IDOR misses.
auth/account_action_specs.ts view source
ZodObject<{ name: ZodDefault<ZodString>; }, $strict> Input for account_token_create.
auth/account_action_specs.ts view source
ZodObject<{ ok: ZodLiteral<true>; token: ZodString; id: ZodString; name: ZodString; }, $strict> Output for account_token_create. token is returned exactly once.
auth/account_action_specs.ts view source
ZodVoid Input for account_token_list. No parameters.
auth/account_action_specs.ts view source
ZodObject<{ tokens: ZodArray<ZodObject<{ id: ZodString; account_id: $ZodBranded<ZodUUID, "Uuid", "out">; name: ZodString; expires_at: ZodNullable<ZodString>; last_used_at: ZodNullable<...>; last_used_ip: ZodNullable<...>; created_at: ZodString; }, $strict>>; }, $strict> Output for account_token_list. Hashes are excluded.
auth/account_action_specs.ts view source
ZodObject<{ token_id: ZodString; }, $strict> Input for account_token_revoke.
auth/account_action_specs.ts view source
ZodObject<{ ok: ZodLiteral<true>; revoked: ZodBoolean; }, $strict> Output for account_token_revoke. revoked is false for IDOR misses.
auth/account_action_specs.ts view source
ZodVoid Input for account_verify. No parameters — the caller is the subject.