Account RPC action specs — declarative contract for self-service account operations. Import this module for the specs, Input/Output schemas, and the all_account_action_specs registry. Handlers live in auth/account_actions.ts so consumers doing typed-client codegen or surface reporting don't transitively drag in server-only query code.
21 declarations
auth/account_action_specs.ts view source
{ method: string; kind: "request_response"; initiator: "frontend"; auth: { account: "required"; actor: "none"; }; side_effects: false; input: ZodVoid; output: ZodObject<{ sessions: ZodArray<ZodObject<{ id: $ZodBranded<ZodString, "SessionId", "out">; account_id: $ZodBranded<...>; created_at: ZodString; expires_at: Zo... import {account_session_list_action_spec} from '@fuzdev/fuz_app/auth/account_action_specs.js'; auth/account_action_specs.ts view source
{ method: string; kind: "request_response"; initiator: "frontend"; auth: { account: "required"; actor: "none"; credential_types: string[]; }; side_effects: true; input: ZodObject<{ session_id: $ZodBranded<ZodString, "SessionId", "out">; }, $strict>; output: ZodObject<...>; async: true; description: string; } import {account_session_revoke_action_spec} from '@fuzdev/fuz_app/auth/account_action_specs.js'; auth/account_action_specs.ts view source
{ method: string; kind: "request_response"; initiator: "frontend"; auth: { account: "required"; actor: "none"; credential_types: string[]; }; side_effects: true; input: ZodVoid; output: ZodObject<...>; async: true; description: string; } import {account_session_revoke_all_action_spec} from '@fuzdev/fuz_app/auth/account_action_specs.js'; auth/account_action_specs.ts view source
{ method: string; kind: "request_response"; initiator: "frontend"; auth: { account: "required"; actor: "none"; credential_types: string[]; }; side_effects: true; input: ZodObject<{ name: ZodDefault<ZodString>; scope: ZodDiscriminatedUnion<...>; lifetime: ZodDiscriminatedUnion<...>; }, $strict>; output: ZodObject<...... import {account_token_create_action_spec} from '@fuzdev/fuz_app/auth/account_action_specs.js'; credential_types: ['session'] — see docs/security.md §Credential-channel gating.
rate_limit: 'account' bounds the burn rate of API-token creates. The
outstanding-token count is already capped by max_tokens (via
query_api_token_enforce_limit), but the per-account *rate* of churn
is not — without this cap, a caller could rotate tokens in a tight
loop to amplify token_create audit churn or attempt to provoke
downstream rate-limit hot spots.
auth/account_action_specs.ts view source
{ method: string; kind: "request_response"; initiator: "frontend"; auth: { account: "required"; actor: "none"; }; side_effects: false; input: ZodVoid; output: ZodObject<{ tokens: ZodArray<ZodObject<{ id: ZodString; ... 6 more ...; scope: ZodString; }, $strict>>; }, $strict>; async: true; description: string; } import {account_token_list_action_spec} from '@fuzdev/fuz_app/auth/account_action_specs.js'; auth/account_action_specs.ts view source
{ method: string; kind: "request_response"; initiator: "frontend"; auth: { account: "required"; actor: "none"; credential_types: string[]; }; side_effects: true; input: ZodObject<{ token_id: ZodString; }, $strict>; output: ZodObject<...>; async: true; description: string; } import {account_token_revoke_action_spec} from '@fuzdev/fuz_app/auth/account_action_specs.js'; auth/account_action_specs.ts view source
{ method: string; kind: "request_response"; initiator: "frontend"; auth: { account: "required"; actor: "none"; }; side_effects: false; input: ZodVoid; output: ZodObject<{ id: $ZodBranded<ZodUUID, "Uuid", "out">; username: ZodPipe<...>; email: ZodNullable<...>; email_verified: ZodBoolean; created_at: ZodString; }, $s... import {account_verify_action_spec} from '@fuzdev/fuz_app/auth/account_action_specs.js'; auth/account_action_specs.ts view source
{ method: string; initiator: "frontend" | "backend" | "both"; side_effects: boolean; input: ZodType<unknown, unknown, $ZodTypeInternals<unknown, unknown>>; output: ZodType<unknown, unknown, $ZodTypeInternals<unknown, unknown>>; ... 6 more ...; rate_limit?: "both" | ... 2 more ... | undefined; }[] import {all_account_action_specs} from '@fuzdev/fuz_app/auth/account_action_specs.js'; All self-service account action specs — a codegen-ready registry. Consumers spread this into their own action-spec array to include account methods in a typed client surface.
auth/account_action_specs.ts view source
ZodVoid import type {SessionListInput} from '@fuzdev/fuz_app/auth/account_action_specs.js'; Input for account_session_list. No parameters.
auth/account_action_specs.ts view source
ZodObject<{ sessions: ZodArray<ZodObject<{ id: $ZodBranded<ZodString, "SessionId", "out">; account_id: $ZodBranded<ZodUUID, "Uuid", "out">; created_at: ZodString; expires_at: ZodString; }, $strict>>; }, $strict> import type {SessionListOutput} from '@fuzdev/fuz_app/auth/account_action_specs.js'; Output for account_session_list.
auth/account_action_specs.ts view source
ZodVoid import type {SessionRevokeAllInput} from '@fuzdev/fuz_app/auth/account_action_specs.js'; Input for account_session_revoke_all. No parameters.
auth/account_action_specs.ts view source
ZodObject<{ ok: ZodLiteral<true>; count: ZodNumber; }, $strict> import type {SessionRevokeAllOutput} from '@fuzdev/fuz_app/auth/account_action_specs.js'; Output for account_session_revoke_all.
auth/account_action_specs.ts view source
ZodObject<{ session_id: $ZodBranded<ZodString, "SessionId", "out">; }, $strict> import type {SessionRevokeInput} from '@fuzdev/fuz_app/auth/account_action_specs.js'; Input for account_session_revoke. session_id is the blake3 hash.
auth/account_action_specs.ts view source
ZodObject<{ ok: ZodLiteral<true>; revoked: ZodBoolean; }, $strict> import type {SessionRevokeOutput} from '@fuzdev/fuz_app/auth/account_action_specs.js'; Output for account_session_revoke. revoked is false for IDOR misses.
auth/account_action_specs.ts view source
ZodObject<{ name: ZodDefault<ZodString>; scope: ZodDiscriminatedUnion<[ZodObject<{ kind: ZodLiteral<"full">; }, $strict>, ZodObject<{ kind: ZodLiteral<"methods">; methods: ZodArray<...>; }, $strict>], "kind">; lifetime: ZodDiscriminatedUnion<...>; }, $strict> import type {TokenCreateInput} from '@fuzdev/fuz_app/auth/account_action_specs.js'; Input for account_token_create.
scope is required — default-deny at mint. There is deliberately no
permissive default: a caller who wants full authority spells
{kind: 'full'}, and the stored document records that they did. That is the
reversal of the 2026-02 design, where the field existed but nothing depended
on it. Because scope has no default, the object as a whole no longer
carries .prefault({}).
lifetime follows the same rule — a never-expiring token is
{kind: 'eternal'}, spelled out, so expires_at IS NULL always means
"deliberately eternal" (see auth/token_lifetime.ts).
auth/account_action_specs.ts view source
ZodObject<{ ok: ZodLiteral<true>; token: ZodString; id: ZodString; name: ZodString; expires_at: ZodNullable<ZodString>; }, $strict> import type {TokenCreateOutput} from '@fuzdev/fuz_app/auth/account_action_specs.js'; Output for account_token_create. token is returned exactly once.
auth/account_action_specs.ts view source
ZodVoid import type {TokenListInput} from '@fuzdev/fuz_app/auth/account_action_specs.js'; Input for account_token_list. No parameters.
auth/account_action_specs.ts view source
ZodObject<{ tokens: ZodArray<ZodObject<{ id: ZodString; account_id: $ZodBranded<ZodUUID, "Uuid", "out">; name: ZodString; expires_at: ZodNullable<ZodString>; last_used_at: ZodNullable<...>; last_used_ip: ZodNullable<...>; created_at: ZodString; scope: ZodString; }, $strict>>; }, $strict> import type {TokenListOutput} from '@fuzdev/fuz_app/auth/account_action_specs.js'; Output for account_token_list. Hashes are excluded.
auth/account_action_specs.ts view source
ZodObject<{ token_id: ZodString; }, $strict> import type {TokenRevokeInput} from '@fuzdev/fuz_app/auth/account_action_specs.js'; Input for account_token_revoke.
auth/account_action_specs.ts view source
ZodObject<{ ok: ZodLiteral<true>; revoked: ZodBoolean; }, $strict> import type {TokenRevokeOutput} from '@fuzdev/fuz_app/auth/account_action_specs.js'; Output for account_token_revoke. revoked is false for IDOR misses.
auth/account_action_specs.ts view source
ZodVoid import type {VerifyInput} from '@fuzdev/fuz_app/auth/account_action_specs.js'; Input for account_verify. No parameters — the caller is the subject.