@1mtx/did-api-contract 1.0.0

package/dist/index.js

@@ -0,0 +1,368 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  AuthScheme: () => AuthScheme,
+  CheckinInfoResponseSchema: () => CheckinInfoResponseSchema,
+  CheckinSubmitRequestSchema: () => CheckinSubmitRequestSchema,
+  CheckinSubmitResponseSchema: () => CheckinSubmitResponseSchema,
+  CreateEventSchema: () => CreateEventSchema,
+  EventDetailResponseSchema: () => EventDetailResponseSchema,
+  EventPublicInfoSchema: () => EventPublicInfoSchema,
+  EventResponseSchema: () => EventResponseSchema,
+  ParticipantSchema: () => ParticipantSchema,
+  SUPPORTED_FIELDS: () => SUPPORTED_FIELDS,
+  TurnCredentialsResponseSchema: () => TurnCredentialsResponseSchema,
+  UpdateEventSchema: () => UpdateEventSchema,
+  VerifyRequestSchema: () => VerifyRequestSchema,
+  VerifyResponseSchema: () => VerifyResponseSchema,
+  authContract: () => authContract,
+  buildAuthMessage: () => buildAuthMessage,
+  checkinContract: () => checkinContract,
+  contract: () => contract,
+  eventsContract: () => eventsContract,
+  turnContract: () => turnContract
+});
+module.exports = __toCommonJS(index_exports);
+var import_core5 = require("@ts-rest/core");
+
+// src/v1/auth.ts
+var import_core = require("@ts-rest/core");
+var import_zod = require("zod");
+var c = (0, import_core.initContract)();
+var AuthScheme = import_zod.z.enum(["eip191"]);
+var VerifyRequestSchema = import_zod.z.object({
+  did: import_zod.z.string().min(1).describe("DID of the authenticating user (e.g. `did:ethr:0xABC...`)"),
+  signature: import_zod.z.string().min(1).describe(
+    "Hex signature of the `message` string, produced by the scheme specified in the message"
+  ),
+  message: import_zod.z.string().min(1).describe(
+    "Canonical JSON string that was signed. Must be `JSON.stringify({ domain, did, issuedAt, scheme })` where `issuedAt` is an ISO-8601 UTC timestamp within the last 60 seconds and `scheme` is the signing scheme used."
+  )
+});
+var VerifyResponseSchema = import_zod.z.object({
+  accessToken: import_zod.z.string()
+});
+var authContract = c.router({
+  verify: {
+    method: "POST",
+    path: "/v1/auth/verify",
+    body: VerifyRequestSchema,
+    responses: {
+      200: VerifyResponseSchema,
+      400: import_zod.z.object({ message: import_zod.z.string() }),
+      401: import_zod.z.object({ message: import_zod.z.string() })
+    },
+    summary: "Verify DID signature and receive JWT",
+    description: [
+      "## Authentication Flow (1-turn)",
+      "",
+      "The client constructs a JSON message, signs it with their Ethereum private key, and submits everything in a single request.",
+      "",
+      "### Crypto Suite",
+      "",
+      "| Property | Value |",
+      "|----------|-------|",
+      '| **Signing scheme** | ECDSA secp256k1 (`scheme: "eip191"`) |',
+      "| **Signature format** | [EIP-191](https://eips.ethereum.org/EIPS/eip-191) `personal_sign` (65-byte `r\u2016s\u2016v`, hex-encoded with `0x` prefix) |",
+      "| **DID method** | `did:ethr` \u2014 the Ethereum address in the DID must match the signer |",
+      "| **Message encoding** | UTF-8 JSON string |",
+      "",
+      "### Steps",
+      "",
+      "1. **Build the message** \u2014 a canonical JSON string:",
+      "   ```json",
+      '   {"domain":"1Matrix Events","did":"did:ethr:0xYOUR_ADDRESS","issuedAt":"2026-02-25T12:00:00.000Z","scheme":"eip191"}',
+      "   ```",
+      "   Use the `buildAuthMessage(did)` helper from `@1mtx/did-api-contract`, or construct it manually.",
+      "",
+      "2. **Sign the message** using EIP-191 `personal_sign`:",
+      "   ```ts",
+      "   // ethers.js v6",
+      "   const signature = await wallet.signMessage(message);",
+      "   ```",
+      "",
+      "3. **POST** `{ did, signature, message }` to this endpoint.",
+      "",
+      "### Validation Rules",
+      "",
+      "- `issuedAt` must be within **60 seconds in the past** or **5 seconds in the future** (clock tolerance).",
+      '- `domain` must equal `"1Matrix Events"`.',
+      "- `did` in the message must match the `did` in the request body.",
+      '- `scheme` must be a supported value (currently only `"eip191"`).',
+      "- No extra JSON keys beyond `domain`, `did`, `issuedAt`, `scheme` are allowed.",
+      "",
+      "### Error Codes",
+      "",
+      "| Status | Reason |",
+      "|--------|--------|",
+      "| `400` | Invalid message format (bad JSON, extra keys, wrong domain) |",
+      "| `401` | Message expired, DID mismatch, invalid or non-matching signature |"
+    ].join("\n"),
+    metadata: { openApiTags: ["Auth"] }
+  }
+});
+function buildAuthMessage(did, scheme = "eip191", domain = "1Matrix Events", issuedAt = (/* @__PURE__ */ new Date()).toISOString()) {
+  return JSON.stringify({ domain, did, issuedAt, scheme });
+}
+
+// src/v1/events.ts
+var import_core2 = require("@ts-rest/core");
+var import_zod2 = require("zod");
+var c2 = (0, import_core2.initContract)();
+var SUPPORTED_FIELDS = [
+  "fullName",
+  "age",
+  "portrait",
+  "gender",
+  "nationality",
+  "address",
+  "idNumber"
+];
+var CreateEventSchema = import_zod2.z.object({
+  name: import_zod2.z.string().min(1).max(255),
+  coverImageUrl: import_zod2.z.string().url().optional(),
+  description: import_zod2.z.string().optional(),
+  maxGuests: import_zod2.z.number().int().positive(),
+  dateTime: import_zod2.z.string().datetime(),
+  requestedFields: import_zod2.z.array(import_zod2.z.enum(SUPPORTED_FIELDS)).min(1)
+});
+var UpdateEventSchema = import_zod2.z.object({
+  name: import_zod2.z.string().min(1).max(255).optional(),
+  coverImageUrl: import_zod2.z.string().url().nullable().optional(),
+  description: import_zod2.z.string().nullable().optional(),
+  maxGuests: import_zod2.z.number().int().positive().optional(),
+  dateTime: import_zod2.z.string().datetime().optional(),
+  status: import_zod2.z.enum(["ACTIVE", "CANCELLED", "COMPLETED"]).optional()
+});
+var ParticipantSchema = import_zod2.z.object({
+  id: import_zod2.z.string(),
+  holderDid: import_zod2.z.string(),
+  disclosedFields: import_zod2.z.record(import_zod2.z.unknown()),
+  checkedInAt: import_zod2.z.string()
+});
+var EventResponseSchema = import_zod2.z.object({
+  id: import_zod2.z.string(),
+  name: import_zod2.z.string(),
+  coverImageUrl: import_zod2.z.string().nullable(),
+  description: import_zod2.z.string().nullable(),
+  maxGuests: import_zod2.z.number(),
+  dateTime: import_zod2.z.string(),
+  userId: import_zod2.z.string(),
+  requestedFields: import_zod2.z.array(import_zod2.z.string()),
+  status: import_zod2.z.enum(["ACTIVE", "CANCELLED", "COMPLETED"]),
+  participantCount: import_zod2.z.number(),
+  createdAt: import_zod2.z.string(),
+  updatedAt: import_zod2.z.string()
+});
+var EventDetailResponseSchema = EventResponseSchema.extend({
+  participants: import_zod2.z.array(ParticipantSchema),
+  vpRequest: import_zod2.z.record(import_zod2.z.unknown())
+});
+var SECURITY = [{ bearerAuth: [] }];
+var eventsContract = c2.router({
+  create: {
+    method: "POST",
+    path: "/v1/events",
+    body: CreateEventSchema,
+    responses: {
+      201: EventResponseSchema,
+      400: import_zod2.z.object({ message: import_zod2.z.string() }),
+      401: import_zod2.z.object({ message: import_zod2.z.string() })
+    },
+    summary: "Create a new event (organiser only)",
+    metadata: { openApiTags: ["Events"], openApiSecurity: SECURITY }
+  },
+  list: {
+    method: "GET",
+    path: "/v1/events",
+    responses: {
+      200: import_zod2.z.array(EventResponseSchema),
+      401: import_zod2.z.object({ message: import_zod2.z.string() })
+    },
+    summary: "List authenticated organiser's events",
+    metadata: { openApiTags: ["Events"], openApiSecurity: SECURITY }
+  },
+  getById: {
+    method: "GET",
+    path: "/v1/events/:id",
+    responses: {
+      200: EventDetailResponseSchema,
+      401: import_zod2.z.object({ message: import_zod2.z.string() }),
+      403: import_zod2.z.object({ message: import_zod2.z.string() }),
+      404: import_zod2.z.object({ message: import_zod2.z.string() })
+    },
+    summary: "Get event details including participants (organiser only)",
+    metadata: { openApiTags: ["Events"], openApiSecurity: SECURITY }
+  },
+  update: {
+    method: "PATCH",
+    path: "/v1/events/:id",
+    body: UpdateEventSchema,
+    responses: {
+      200: EventResponseSchema,
+      400: import_zod2.z.object({ message: import_zod2.z.string() }),
+      401: import_zod2.z.object({ message: import_zod2.z.string() }),
+      403: import_zod2.z.object({ message: import_zod2.z.string() }),
+      404: import_zod2.z.object({ message: import_zod2.z.string() })
+    },
+    summary: "Update event fields (organiser only)",
+    metadata: { openApiTags: ["Events"], openApiSecurity: SECURITY }
+  },
+  delete: {
+    method: "DELETE",
+    path: "/v1/events/:id",
+    body: c2.noBody(),
+    responses: {
+      204: import_zod2.z.undefined(),
+      401: import_zod2.z.object({ message: import_zod2.z.string() }),
+      403: import_zod2.z.object({ message: import_zod2.z.string() }),
+      404: import_zod2.z.object({ message: import_zod2.z.string() })
+    },
+    summary: "Delete event and all related data (organiser only)",
+    metadata: { openApiTags: ["Events"], openApiSecurity: SECURITY }
+  },
+  getCredentials: {
+    method: "GET",
+    path: "/v1/events/:id/credentials",
+    responses: {
+      200: import_zod2.z.array(import_zod2.z.record(import_zod2.z.unknown())),
+      401: import_zod2.z.object({ message: import_zod2.z.string() }),
+      403: import_zod2.z.object({ message: import_zod2.z.string() }),
+      404: import_zod2.z.object({ message: import_zod2.z.string() })
+    },
+    summary: "List issued VCs for event (organiser only)",
+    metadata: { openApiTags: ["Events"], openApiSecurity: SECURITY }
+  }
+});
+
+// src/v1/checkin.ts
+var import_core3 = require("@ts-rest/core");
+var import_zod3 = require("zod");
+var c3 = (0, import_core3.initContract)();
+var EventPublicInfoSchema = import_zod3.z.object({
+  id: import_zod3.z.string(),
+  name: import_zod3.z.string(),
+  coverImageUrl: import_zod3.z.string().nullable(),
+  description: import_zod3.z.string().nullable(),
+  maxGuests: import_zod3.z.number(),
+  dateTime: import_zod3.z.string(),
+  currentGuests: import_zod3.z.number(),
+  status: import_zod3.z.enum(["ACTIVE", "CANCELLED", "COMPLETED"])
+});
+var CheckinInfoResponseSchema = import_zod3.z.object({
+  event: EventPublicInfoSchema,
+  vpRequest: import_zod3.z.record(import_zod3.z.unknown())
+});
+var CheckinSubmitRequestSchema = import_zod3.z.object({
+  verifiablePresentation: import_zod3.z.record(import_zod3.z.unknown())
+});
+var CheckinSubmitResponseSchema = import_zod3.z.object({
+  success: import_zod3.z.literal(true),
+  credential: import_zod3.z.record(import_zod3.z.unknown())
+});
+var checkinContract = c3.router({
+  info: {
+    method: "GET",
+    path: "/v1/checkin/:eventId/info",
+    responses: {
+      200: CheckinInfoResponseSchema,
+      400: import_zod3.z.object({ message: import_zod3.z.string() }),
+      404: import_zod3.z.object({ message: import_zod3.z.string() })
+    },
+    summary: "Get event info and VP request for check-in (public)",
+    metadata: { openApiTags: ["Check-in"] }
+  },
+  submit: {
+    method: "POST",
+    path: "/v1/checkin/:eventId/submit",
+    body: CheckinSubmitRequestSchema,
+    responses: {
+      200: CheckinSubmitResponseSchema,
+      400: import_zod3.z.object({ message: import_zod3.z.string(), errors: import_zod3.z.array(import_zod3.z.string()).optional() }),
+      404: import_zod3.z.object({ message: import_zod3.z.string() }),
+      409: import_zod3.z.object({ message: import_zod3.z.string() })
+    },
+    summary: "Submit VP for event check-in \u2014 issues participation VC on success (public)",
+    metadata: { openApiTags: ["Check-in"] }
+  }
+});
+
+// src/v1/turn.ts
+var import_core4 = require("@ts-rest/core");
+var import_zod4 = require("zod");
+var c4 = (0, import_core4.initContract)();
+var IceServerSchema = import_zod4.z.object({
+  urls: import_zod4.z.union([import_zod4.z.string(), import_zod4.z.array(import_zod4.z.string())]),
+  username: import_zod4.z.string().optional(),
+  credential: import_zod4.z.string().optional()
+});
+var TurnCredentialsResponseSchema = import_zod4.z.object({
+  iceServers: import_zod4.z.array(IceServerSchema)
+});
+var turnContract = c4.router({
+  credentials: {
+    method: "GET",
+    path: "/v1/turn/credentials",
+    responses: {
+      200: TurnCredentialsResponseSchema,
+      401: import_zod4.z.object({ message: import_zod4.z.string() }),
+      502: import_zod4.z.object({ message: import_zod4.z.string() })
+    },
+    summary: "Get Cloudflare TURN credentials for WebRTC (authenticated)",
+    metadata: { openApiTags: ["TURN"] }
+  }
+});
+
+// src/index.ts
+var c5 = (0, import_core5.initContract)();
+var contract = c5.router({
+  v1: c5.router({
+    auth: authContract,
+    events: eventsContract,
+    checkin: checkinContract,
+    turn: turnContract
+  })
+});
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  AuthScheme,
+  CheckinInfoResponseSchema,
+  CheckinSubmitRequestSchema,
+  CheckinSubmitResponseSchema,
+  CreateEventSchema,
+  EventDetailResponseSchema,
+  EventPublicInfoSchema,
+  EventResponseSchema,
+  ParticipantSchema,
+  SUPPORTED_FIELDS,
+  TurnCredentialsResponseSchema,
+  UpdateEventSchema,
+  VerifyRequestSchema,
+  VerifyResponseSchema,
+  authContract,
+  buildAuthMessage,
+  checkinContract,
+  contract,
+  eventsContract,
+  turnContract
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/v1/auth.ts","../src/v1/events.ts","../src/v1/checkin.ts","../src/v1/turn.ts"],"sourcesContent":["import { initContract } from '@ts-rest/core';\nimport { authContract } from './v1/auth';\nimport { eventsContract } from './v1/events';\nimport { checkinContract } from './v1/checkin';\nimport { turnContract } from './v1/turn';\n\nexport * from './v1';\n\nconst c = initContract();\n\nexport const contract = c.router({\n  v1: c.router({\n    auth: authContract,\n    events: eventsContract,\n    checkin: checkinContract,\n    turn: turnContract,\n  }),\n});\n\nexport type Contract = typeof contract;\n","import { initContract } from '@ts-rest/core';\nimport { z } from 'zod';\n\nconst c = initContract();\n\nexport const AuthScheme = z.enum(['eip191']);\nexport type AuthScheme = z.infer<typeof AuthScheme>;\n\nexport const VerifyRequestSchema = z.object({\n  did: z.string().min(1).describe('DID of the authenticating user (e.g. `did:ethr:0xABC...`)'),\n  signature: z\n    .string()\n    .min(1)\n    .describe(\n      'Hex signature of the `message` string, produced by the scheme specified in the message',\n    ),\n  message: z\n    .string()\n    .min(1)\n    .describe(\n      'Canonical JSON string that was signed. Must be `JSON.stringify({ domain, did, issuedAt, scheme })` where `issuedAt` is an ISO-8601 UTC timestamp within the last 60 seconds and `scheme` is the signing scheme used.',\n    ),\n});\n\nexport const VerifyResponseSchema = z.object({\n  accessToken: z.string(),\n});\n\nexport const authContract = c.router({\n  verify: {\n    method: 'POST',\n    path: '/v1/auth/verify',\n    body: VerifyRequestSchema,\n    responses: {\n      200: VerifyResponseSchema,\n      400: z.object({ message: z.string() }),\n      401: z.object({ message: z.string() }),\n    },\n    summary: 'Verify DID signature and receive JWT',\n    description: [\n      '## Authentication Flow (1-turn)',\n      '',\n      'The client constructs a JSON message, signs it with their Ethereum private key, and submits everything in a single request.',\n      '',\n      '### Crypto Suite',\n      '',\n      '| Property | Value |',\n      '|----------|-------|',\n      '| **Signing scheme** | ECDSA secp256k1 (`scheme: \"eip191\"`) |',\n      '| **Signature format** | [EIP-191](https://eips.ethereum.org/EIPS/eip-191) `personal_sign` (65-byte `r‖s‖v`, hex-encoded with `0x` prefix) |',\n      '| **DID method** | `did:ethr` — the Ethereum address in the DID must match the signer |',\n      '| **Message encoding** | UTF-8 JSON string |',\n      '',\n      '### Steps',\n      '',\n      '1. **Build the message** — a canonical JSON string:',\n      '   ```json',\n      '   {\"domain\":\"1Matrix Events\",\"did\":\"did:ethr:0xYOUR_ADDRESS\",\"issuedAt\":\"2026-02-25T12:00:00.000Z\",\"scheme\":\"eip191\"}',\n      '   ```',\n      '   Use the `buildAuthMessage(did)` helper from `@1mtx/did-api-contract`, or construct it manually.',\n      '',\n      '2. **Sign the message** using EIP-191 `personal_sign`:',\n      '   ```ts',\n      '   // ethers.js v6',\n      '   const signature = await wallet.signMessage(message);',\n      '   ```',\n      '',\n      '3. **POST** `{ did, signature, message }` to this endpoint.',\n      '',\n      '### Validation Rules',\n      '',\n      '- `issuedAt` must be within **60 seconds in the past** or **5 seconds in the future** (clock tolerance).',\n      '- `domain` must equal `\"1Matrix Events\"`.',\n      '- `did` in the message must match the `did` in the request body.',\n      '- `scheme` must be a supported value (currently only `\"eip191\"`).',\n      '- No extra JSON keys beyond `domain`, `did`, `issuedAt`, `scheme` are allowed.',\n      '',\n      '### Error Codes',\n      '',\n      '| Status | Reason |',\n      '|--------|--------|',\n      '| `400` | Invalid message format (bad JSON, extra keys, wrong domain) |',\n      '| `401` | Message expired, DID mismatch, invalid or non-matching signature |',\n    ].join('\\n'),\n    metadata: { openApiTags: ['Auth'] },\n  },\n});\n\n/**\n * Builds the canonical JSON string to be signed by the client.\n *\n * Usage:\n *   const message = buildAuthMessage(did);\n *   const signature = await wallet.signMessage(message);\n *   // POST /v1/auth/verify  { did, signature, message }\n */\nexport function buildAuthMessage(\n  did: string,\n  scheme: AuthScheme = 'eip191',\n  domain = '1Matrix Events',\n  issuedAt: string = new Date().toISOString(),\n): string {\n  return JSON.stringify({ domain, did, issuedAt, scheme });\n}\n","import { initContract } from '@ts-rest/core';\nimport { z } from 'zod';\n\nconst c = initContract();\n\nexport const SUPPORTED_FIELDS = [\n  'fullName',\n  'age',\n  'portrait',\n  'gender',\n  'nationality',\n  'address',\n  'idNumber',\n] as const;\n\nexport type SupportedField = (typeof SUPPORTED_FIELDS)[number];\n\nexport const CreateEventSchema = z.object({\n  name: z.string().min(1).max(255),\n  coverImageUrl: z.string().url().optional(),\n  description: z.string().optional(),\n  maxGuests: z.number().int().positive(),\n  dateTime: z.string().datetime(),\n  requestedFields: z.array(z.enum(SUPPORTED_FIELDS)).min(1),\n});\n\nexport const UpdateEventSchema = z.object({\n  name: z.string().min(1).max(255).optional(),\n  coverImageUrl: z.string().url().nullable().optional(),\n  description: z.string().nullable().optional(),\n  maxGuests: z.number().int().positive().optional(),\n  dateTime: z.string().datetime().optional(),\n  status: z.enum(['ACTIVE', 'CANCELLED', 'COMPLETED']).optional(),\n});\n\nexport const ParticipantSchema = z.object({\n  id: z.string(),\n  holderDid: z.string(),\n  disclosedFields: z.record(z.unknown()),\n  checkedInAt: z.string(),\n});\n\nexport const EventResponseSchema = z.object({\n  id: z.string(),\n  name: z.string(),\n  coverImageUrl: z.string().nullable(),\n  description: z.string().nullable(),\n  maxGuests: z.number(),\n  dateTime: z.string(),\n  userId: z.string(),\n  requestedFields: z.array(z.string()),\n  status: z.enum(['ACTIVE', 'CANCELLED', 'COMPLETED']),\n  participantCount: z.number(),\n  createdAt: z.string(),\n  updatedAt: z.string(),\n});\n\nexport const EventDetailResponseSchema = EventResponseSchema.extend({\n  participants: z.array(ParticipantSchema),\n  vpRequest: z.record(z.unknown()),\n});\n\nconst SECURITY = [{ bearerAuth: [] }];\n\nexport const eventsContract = c.router({\n  create: {\n    method: 'POST',\n    path: '/v1/events',\n    body: CreateEventSchema,\n    responses: {\n      201: EventResponseSchema,\n      400: z.object({ message: z.string() }),\n      401: z.object({ message: z.string() }),\n    },\n    summary: 'Create a new event (organiser only)',\n    metadata: { openApiTags: ['Events'], openApiSecurity: SECURITY },\n  },\n  list: {\n    method: 'GET',\n    path: '/v1/events',\n    responses: {\n      200: z.array(EventResponseSchema),\n      401: z.object({ message: z.string() }),\n    },\n    summary: \"List authenticated organiser's events\",\n    metadata: { openApiTags: ['Events'], openApiSecurity: SECURITY },\n  },\n  getById: {\n    method: 'GET',\n    path: '/v1/events/:id',\n    responses: {\n      200: EventDetailResponseSchema,\n      401: z.object({ message: z.string() }),\n      403: z.object({ message: z.string() }),\n      404: z.object({ message: z.string() }),\n    },\n    summary: 'Get event details including participants (organiser only)',\n    metadata: { openApiTags: ['Events'], openApiSecurity: SECURITY },\n  },\n  update: {\n    method: 'PATCH',\n    path: '/v1/events/:id',\n    body: UpdateEventSchema,\n    responses: {\n      200: EventResponseSchema,\n      400: z.object({ message: z.string() }),\n      401: z.object({ message: z.string() }),\n      403: z.object({ message: z.string() }),\n      404: z.object({ message: z.string() }),\n    },\n    summary: 'Update event fields (organiser only)',\n    metadata: { openApiTags: ['Events'], openApiSecurity: SECURITY },\n  },\n  delete: {\n    method: 'DELETE',\n    path: '/v1/events/:id',\n    body: c.noBody(),\n    responses: {\n      204: z.undefined(),\n      401: z.object({ message: z.string() }),\n      403: z.object({ message: z.string() }),\n      404: z.object({ message: z.string() }),\n    },\n    summary: 'Delete event and all related data (organiser only)',\n    metadata: { openApiTags: ['Events'], openApiSecurity: SECURITY },\n  },\n  getCredentials: {\n    method: 'GET',\n    path: '/v1/events/:id/credentials',\n    responses: {\n      200: z.array(z.record(z.unknown())),\n      401: z.object({ message: z.string() }),\n      403: z.object({ message: z.string() }),\n      404: z.object({ message: z.string() }),\n    },\n    summary: 'List issued VCs for event (organiser only)',\n    metadata: { openApiTags: ['Events'], openApiSecurity: SECURITY },\n  },\n});\n","import { initContract } from '@ts-rest/core';\nimport { z } from 'zod';\n\nconst c = initContract();\n\nexport const EventPublicInfoSchema = z.object({\n  id: z.string(),\n  name: z.string(),\n  coverImageUrl: z.string().nullable(),\n  description: z.string().nullable(),\n  maxGuests: z.number(),\n  dateTime: z.string(),\n  currentGuests: z.number(),\n  status: z.enum(['ACTIVE', 'CANCELLED', 'COMPLETED']),\n});\n\nexport const CheckinInfoResponseSchema = z.object({\n  event: EventPublicInfoSchema,\n  vpRequest: z.record(z.unknown()),\n});\n\nexport const CheckinSubmitRequestSchema = z.object({\n  verifiablePresentation: z.record(z.unknown()),\n});\n\nexport const CheckinSubmitResponseSchema = z.object({\n  success: z.literal(true),\n  credential: z.record(z.unknown()),\n});\n\nexport const checkinContract = c.router({\n  info: {\n    method: 'GET',\n    path: '/v1/checkin/:eventId/info',\n    responses: {\n      200: CheckinInfoResponseSchema,\n      400: z.object({ message: z.string() }),\n      404: z.object({ message: z.string() }),\n    },\n    summary: 'Get event info and VP request for check-in (public)',\n    metadata: { openApiTags: ['Check-in'] },\n  },\n  submit: {\n    method: 'POST',\n    path: '/v1/checkin/:eventId/submit',\n    body: CheckinSubmitRequestSchema,\n    responses: {\n      200: CheckinSubmitResponseSchema,\n      400: z.object({ message: z.string(), errors: z.array(z.string()).optional() }),\n      404: z.object({ message: z.string() }),\n      409: z.object({ message: z.string() }),\n    },\n    summary: 'Submit VP for event check-in — issues participation VC on success (public)',\n    metadata: { openApiTags: ['Check-in'] },\n  },\n});\n","import { initContract } from '@ts-rest/core';\nimport { z } from 'zod';\n\nconst c = initContract();\n\nconst IceServerSchema = z.object({\n  urls: z.union([z.string(), z.array(z.string())]),\n  username: z.string().optional(),\n  credential: z.string().optional(),\n});\n\nexport const TurnCredentialsResponseSchema = z.object({\n  iceServers: z.array(IceServerSchema),\n});\n\nexport const turnContract = c.router({\n  credentials: {\n    method: 'GET',\n    path: '/v1/turn/credentials',\n    responses: {\n      200: TurnCredentialsResponseSchema,\n      401: z.object({ message: z.string() }),\n      502: z.object({ message: z.string() }),\n    },\n    summary: 'Get Cloudflare TURN credentials for WebRTC (authenticated)',\n    metadata: { openApiTags: ['TURN'] },\n  },\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAAA,eAA6B;;;ACA7B,kBAA6B;AAC7B,iBAAkB;AAElB,IAAM,QAAI,0BAAa;AAEhB,IAAM,aAAa,aAAE,KAAK,CAAC,QAAQ,CAAC;AAGpC,IAAM,sBAAsB,aAAE,OAAO;AAAA,EAC1C,KAAK,aAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,2DAA2D;AAAA,EAC3F,WAAW,aACR,OAAO,EACP,IAAI,CAAC,EACL;AAAA,IACC;AAAA,EACF;AAAA,EACF,SAAS,aACN,OAAO,EACP,IAAI,CAAC,EACL;AAAA,IACC;AAAA,EACF;AACJ,CAAC;AAEM,IAAM,uBAAuB,aAAE,OAAO;AAAA,EAC3C,aAAa,aAAE,OAAO;AACxB,CAAC;AAEM,IAAM,eAAe,EAAE,OAAO;AAAA,EACnC,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,MACT,KAAK;AAAA,MACL,KAAK,aAAE,OAAO,EAAE,SAAS,aAAE,OAAO,EAAE,CAAC;AAAA,MACrC,KAAK,aAAE,OAAO,EAAE,SAAS,aAAE,OAAO,EAAE,CAAC;AAAA,IACvC;AAAA,IACA,SAAS;AAAA,IACT,aAAa;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,IACX,UAAU,EAAE,aAAa,CAAC,MAAM,EAAE;AAAA,EACpC;AACF,CAAC;AAUM,SAAS,iBACd,KACA,SAAqB,UACrB,SAAS,kBACT,YAAmB,oBAAI,KAAK,GAAE,YAAY,GAClC;AACR,SAAO,KAAK,UAAU,EAAE,QAAQ,KAAK,UAAU,OAAO,CAAC;AACzD;;;ACvGA,IAAAC,eAA6B;AAC7B,IAAAC,cAAkB;AAElB,IAAMC,SAAI,2BAAa;AAEhB,IAAM,mBAAmB;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAIO,IAAM,oBAAoB,cAAE,OAAO;AAAA,EACxC,MAAM,cAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC/B,eAAe,cAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACzC,aAAa,cAAE,OAAO,EAAE,SAAS;AAAA,EACjC,WAAW,cAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACrC,UAAU,cAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,iBAAiB,cAAE,MAAM,cAAE,KAAK,gBAAgB,CAAC,EAAE,IAAI,CAAC;AAC1D,CAAC;AAEM,IAAM,oBAAoB,cAAE,OAAO;AAAA,EACxC,MAAM,cAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC1C,eAAe,cAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EACpD,aAAa,cAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,WAAW,cAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EAChD,UAAU,cAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACzC,QAAQ,cAAE,KAAK,CAAC,UAAU,aAAa,WAAW,CAAC,EAAE,SAAS;AAChE,CAAC;AAEM,IAAM,oBAAoB,cAAE,OAAO;AAAA,EACxC,IAAI,cAAE,OAAO;AAAA,EACb,WAAW,cAAE,OAAO;AAAA,EACpB,iBAAiB,cAAE,OAAO,cAAE,QAAQ,CAAC;AAAA,EACrC,aAAa,cAAE,OAAO;AACxB,CAAC;AAEM,IAAM,sBAAsB,cAAE,OAAO;AAAA,EAC1C,IAAI,cAAE,OAAO;AAAA,EACb,MAAM,cAAE,OAAO;AAAA,EACf,eAAe,cAAE,OAAO,EAAE,SAAS;AAAA,EACnC,aAAa,cAAE,OAAO,EAAE,SAAS;AAAA,EACjC,WAAW,cAAE,OAAO;AAAA,EACpB,UAAU,cAAE,OAAO;AAAA,EACnB,QAAQ,cAAE,OAAO;AAAA,EACjB,iBAAiB,cAAE,MAAM,cAAE,OAAO,CAAC;AAAA,EACnC,QAAQ,cAAE,KAAK,CAAC,UAAU,aAAa,WAAW,CAAC;AAAA,EACnD,kBAAkB,cAAE,OAAO;AAAA,EAC3B,WAAW,cAAE,OAAO;AAAA,EACpB,WAAW,cAAE,OAAO;AACtB,CAAC;AAEM,IAAM,4BAA4B,oBAAoB,OAAO;AAAA,EAClE,cAAc,cAAE,MAAM,iBAAiB;AAAA,EACvC,WAAW,cAAE,OAAO,cAAE,QAAQ,CAAC;AACjC,CAAC;AAED,IAAM,WAAW,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC;AAE7B,IAAM,iBAAiBA,GAAE,OAAO;AAAA,EACrC,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,MACT,KAAK;AAAA,MACL,KAAK,cAAE,OAAO,EAAE,SAAS,cAAE,OAAO,EAAE,CAAC;AAAA,MACrC,KAAK,cAAE,OAAO,EAAE,SAAS,cAAE,OAAO,EAAE,CAAC;AAAA,IACvC;AAAA,IACA,SAAS;AAAA,IACT,UAAU,EAAE,aAAa,CAAC,QAAQ,GAAG,iBAAiB,SAAS;AAAA,EACjE;AAAA,EACA,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,WAAW;AAAA,MACT,KAAK,cAAE,MAAM,mBAAmB;AAAA,MAChC,KAAK,cAAE,OAAO,EAAE,SAAS,cAAE,OAAO,EAAE,CAAC;AAAA,IACvC;AAAA,IACA,SAAS;AAAA,IACT,UAAU,EAAE,aAAa,CAAC,QAAQ,GAAG,iBAAiB,SAAS;AAAA,EACjE;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,WAAW;AAAA,MACT,KAAK;AAAA,MACL,KAAK,cAAE,OAAO,EAAE,SAAS,cAAE,OAAO,EAAE,CAAC;AAAA,MACrC,KAAK,cAAE,OAAO,EAAE,SAAS,cAAE,OAAO,EAAE,CAAC;AAAA,MACrC,KAAK,cAAE,OAAO,EAAE,SAAS,cAAE,OAAO,EAAE,CAAC;AAAA,IACvC;AAAA,IACA,SAAS;AAAA,IACT,UAAU,EAAE,aAAa,CAAC,QAAQ,GAAG,iBAAiB,SAAS;AAAA,EACjE;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,MACT,KAAK;AAAA,MACL,KAAK,cAAE,OAAO,EAAE,SAAS,cAAE,OAAO,EAAE,CAAC;AAAA,MACrC,KAAK,cAAE,OAAO,EAAE,SAAS,cAAE,OAAO,EAAE,CAAC;AAAA,MACrC,KAAK,cAAE,OAAO,EAAE,SAAS,cAAE,OAAO,EAAE,CAAC;AAAA,MACrC,KAAK,cAAE,OAAO,EAAE,SAAS,cAAE,OAAO,EAAE,CAAC;AAAA,IACvC;AAAA,IACA,SAAS;AAAA,IACT,UAAU,EAAE,aAAa,CAAC,QAAQ,GAAG,iBAAiB,SAAS;AAAA,EACjE;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,MAAMA,GAAE,OAAO;AAAA,IACf,WAAW;AAAA,MACT,KAAK,cAAE,UAAU;AAAA,MACjB,KAAK,cAAE,OAAO,EAAE,SAAS,cAAE,OAAO,EAAE,CAAC;AAAA,MACrC,KAAK,cAAE,OAAO,EAAE,SAAS,cAAE,OAAO,EAAE,CAAC;AAAA,MACrC,KAAK,cAAE,OAAO,EAAE,SAAS,cAAE,OAAO,EAAE,CAAC;AAAA,IACvC;AAAA,IACA,SAAS;AAAA,IACT,UAAU,EAAE,aAAa,CAAC,QAAQ,GAAG,iBAAiB,SAAS;AAAA,EACjE;AAAA,EACA,gBAAgB;AAAA,IACd,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,WAAW;AAAA,MACT,KAAK,cAAE,MAAM,cAAE,OAAO,cAAE,QAAQ,CAAC,CAAC;AAAA,MAClC,KAAK,cAAE,OAAO,EAAE,SAAS,cAAE,OAAO,EAAE,CAAC;AAAA,MACrC,KAAK,cAAE,OAAO,EAAE,SAAS,cAAE,OAAO,EAAE,CAAC;AAAA,MACrC,KAAK,cAAE,OAAO,EAAE,SAAS,cAAE,OAAO,EAAE,CAAC;AAAA,IACvC;AAAA,IACA,SAAS;AAAA,IACT,UAAU,EAAE,aAAa,CAAC,QAAQ,GAAG,iBAAiB,SAAS;AAAA,EACjE;AACF,CAAC;;;AC1ID,IAAAC,eAA6B;AAC7B,IAAAC,cAAkB;AAElB,IAAMC,SAAI,2BAAa;AAEhB,IAAM,wBAAwB,cAAE,OAAO;AAAA,EAC5C,IAAI,cAAE,OAAO;AAAA,EACb,MAAM,cAAE,OAAO;AAAA,EACf,eAAe,cAAE,OAAO,EAAE,SAAS;AAAA,EACnC,aAAa,cAAE,OAAO,EAAE,SAAS;AAAA,EACjC,WAAW,cAAE,OAAO;AAAA,EACpB,UAAU,cAAE,OAAO;AAAA,EACnB,eAAe,cAAE,OAAO;AAAA,EACxB,QAAQ,cAAE,KAAK,CAAC,UAAU,aAAa,WAAW,CAAC;AACrD,CAAC;AAEM,IAAM,4BAA4B,cAAE,OAAO;AAAA,EAChD,OAAO;AAAA,EACP,WAAW,cAAE,OAAO,cAAE,QAAQ,CAAC;AACjC,CAAC;AAEM,IAAM,6BAA6B,cAAE,OAAO;AAAA,EACjD,wBAAwB,cAAE,OAAO,cAAE,QAAQ,CAAC;AAC9C,CAAC;AAEM,IAAM,8BAA8B,cAAE,OAAO;AAAA,EAClD,SAAS,cAAE,QAAQ,IAAI;AAAA,EACvB,YAAY,cAAE,OAAO,cAAE,QAAQ,CAAC;AAClC,CAAC;AAEM,IAAM,kBAAkBA,GAAE,OAAO;AAAA,EACtC,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,WAAW;AAAA,MACT,KAAK;AAAA,MACL,KAAK,cAAE,OAAO,EAAE,SAAS,cAAE,OAAO,EAAE,CAAC;AAAA,MACrC,KAAK,cAAE,OAAO,EAAE,SAAS,cAAE,OAAO,EAAE,CAAC;AAAA,IACvC;AAAA,IACA,SAAS;AAAA,IACT,UAAU,EAAE,aAAa,CAAC,UAAU,EAAE;AAAA,EACxC;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,MACT,KAAK;AAAA,MACL,KAAK,cAAE,OAAO,EAAE,SAAS,cAAE,OAAO,GAAG,QAAQ,cAAE,MAAM,cAAE,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC;AAAA,MAC7E,KAAK,cAAE,OAAO,EAAE,SAAS,cAAE,OAAO,EAAE,CAAC;AAAA,MACrC,KAAK,cAAE,OAAO,EAAE,SAAS,cAAE,OAAO,EAAE,CAAC;AAAA,IACvC;AAAA,IACA,SAAS;AAAA,IACT,UAAU,EAAE,aAAa,CAAC,UAAU,EAAE;AAAA,EACxC;AACF,CAAC;;;ACvDD,IAAAC,eAA6B;AAC7B,IAAAC,cAAkB;AAElB,IAAMC,SAAI,2BAAa;AAEvB,IAAM,kBAAkB,cAAE,OAAO;AAAA,EAC/B,MAAM,cAAE,MAAM,CAAC,cAAE,OAAO,GAAG,cAAE,MAAM,cAAE,OAAO,CAAC,CAAC,CAAC;AAAA,EAC/C,UAAU,cAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,YAAY,cAAE,OAAO,EAAE,SAAS;AAClC,CAAC;AAEM,IAAM,gCAAgC,cAAE,OAAO;AAAA,EACpD,YAAY,cAAE,MAAM,eAAe;AACrC,CAAC;AAEM,IAAM,eAAeA,GAAE,OAAO;AAAA,EACnC,aAAa;AAAA,IACX,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,WAAW;AAAA,MACT,KAAK;AAAA,MACL,KAAK,cAAE,OAAO,EAAE,SAAS,cAAE,OAAO,EAAE,CAAC;AAAA,MACrC,KAAK,cAAE,OAAO,EAAE,SAAS,cAAE,OAAO,EAAE,CAAC;AAAA,IACvC;AAAA,IACA,SAAS;AAAA,IACT,UAAU,EAAE,aAAa,CAAC,MAAM,EAAE;AAAA,EACpC;AACF,CAAC;;;AJnBD,IAAMC,SAAI,2BAAa;AAEhB,IAAM,WAAWA,GAAE,OAAO;AAAA,EAC/B,IAAIA,GAAE,OAAO;AAAA,IACX,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,MAAM;AAAA,EACR,CAAC;AACH,CAAC;","names":["import_core","import_core","import_zod","c","import_core","import_zod","c","import_core","import_zod","c","c"]}