@aibrains/shared-types 0.1.0

package/dist/validators/password.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Password Validation - Aligned with AWS Cognito Password Policy
+ *
+ * This is the single source of truth for password validation in EdForge.
+ * The validation rules here MUST match the Cognito User Pool password policy
+ * defined in server/lib/tenant-template/identity-provider.ts:
+ *
+ *   passwordPolicy: {
+ *     minLength: 8,
+ *     requireLowercase: true,
+ *     requireUppercase: true,
+ *     requireDigits: true,
+ *     requireSymbols: true
+ *   }
+ *
+ * Cognito's default special characters when requireSymbols=true:
+ *   ^ $ * . [ ] { } ( ) ? " ! @ # % & / \ , > < ' : ; | _ ~ ` + = -
+ *
+ * @see https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-policies.html
+ */
+import { z } from 'zod';
+/**
+ * Cognito password requirements configuration
+ * Use this for displaying requirements to users
+ */
+export declare const COGNITO_PASSWORD_REQUIREMENTS: {
+    readonly minLength: 8;
+    readonly maxLength: 128;
+    readonly requireLowercase: true;
+    readonly requireUppercase: true;
+    readonly requireDigits: true;
+    readonly requireSymbols: true;
+    readonly allowedSymbols: "^ $ * . [ ] { } ( ) ? \" ! @ # % & / \\ , > < ' : ; | _ ~ ` + = -";
+};
+/**
+ * Password schema that validates against Cognito's password policy
+ *
+ * Use this schema for:
+ * - New password validation in registration
+ * - Password change validation
+ * - Password reset validation
+ */
+export declare const passwordSchema: z.ZodString;
+/**
+ * Validate a password string against Cognito requirements
+ * Returns true if valid, false otherwise
+ */
+export declare function isValidPassword(password: string): boolean;
+/**
+ * Validate a password and return detailed error messages
+ */
+export declare function validatePassword(password: string): {
+    valid: boolean;
+    errors: string[];
+};
+/**
+ * Type for a valid password (branded type)
+ */
+export type ValidPassword = z.infer<typeof passwordSchema>;
+//# sourceMappingURL=password.d.ts.map

package/dist/validators/password.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../src/validators/password.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;CAQhC,CAAC;AAQX;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,aAgBxB,CAAC;AAEJ;;;GAGG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG;IAClD,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CASA;AAED;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC"}

package/dist/validators/password.js

@@ -0,0 +1,81 @@
+"use strict";
+/**
+ * Password Validation - Aligned with AWS Cognito Password Policy
+ *
+ * This is the single source of truth for password validation in EdForge.
+ * The validation rules here MUST match the Cognito User Pool password policy
+ * defined in server/lib/tenant-template/identity-provider.ts:
+ *
+ *   passwordPolicy: {
+ *     minLength: 8,
+ *     requireLowercase: true,
+ *     requireUppercase: true,
+ *     requireDigits: true,
+ *     requireSymbols: true
+ *   }
+ *
+ * Cognito's default special characters when requireSymbols=true:
+ *   ^ $ * . [ ] { } ( ) ? " ! @ # % & / \ , > < ' : ; | _ ~ ` + = -
+ *
+ * @see https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-policies.html
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.passwordSchema = exports.COGNITO_PASSWORD_REQUIREMENTS = void 0;
+exports.isValidPassword = isValidPassword;
+exports.validatePassword = validatePassword;
+const zod_1 = require("zod");
+/**
+ * Cognito password requirements configuration
+ * Use this for displaying requirements to users
+ */
+exports.COGNITO_PASSWORD_REQUIREMENTS = {
+    minLength: 8,
+    maxLength: 128,
+    requireLowercase: true,
+    requireUppercase: true,
+    requireDigits: true,
+    requireSymbols: true,
+    allowedSymbols: `^ $ * . [ ] { } ( ) ? " ! @ # % & / \\ , > < ' : ; | _ ~ \` + = -`,
+};
+/**
+ * Regex pattern for Cognito's allowed special characters
+ * Characters: ^ $ * . [ ] { } ( ) ? " ! @ # % & / \ , > < ' : ; | _ ~ ` + = -
+ */
+const COGNITO_SPECIAL_CHARS_REGEX = /[\^$*.\[\]{}()?"!@#%&/\\,><':;|_~`+=\-]/;
+/**
+ * Password schema that validates against Cognito's password policy
+ *
+ * Use this schema for:
+ * - New password validation in registration
+ * - Password change validation
+ * - Password reset validation
+ */
+exports.passwordSchema = zod_1.z
+    .string()
+    .min(exports.COGNITO_PASSWORD_REQUIREMENTS.minLength, `Password must be at least ${exports.COGNITO_PASSWORD_REQUIREMENTS.minLength} characters`)
+    .max(exports.COGNITO_PASSWORD_REQUIREMENTS.maxLength, `Password must be at most ${exports.COGNITO_PASSWORD_REQUIREMENTS.maxLength} characters`)
+    .regex(/[a-z]/, 'Password must contain at least one lowercase letter')
+    .regex(/[A-Z]/, 'Password must contain at least one uppercase letter')
+    .regex(/[0-9]/, 'Password must contain at least one digit')
+    .regex(COGNITO_SPECIAL_CHARS_REGEX, `Password must contain at least one special character (${exports.COGNITO_PASSWORD_REQUIREMENTS.allowedSymbols})`);
+/**
+ * Validate a password string against Cognito requirements
+ * Returns true if valid, false otherwise
+ */
+function isValidPassword(password) {
+    return exports.passwordSchema.safeParse(password).success;
+}
+/**
+ * Validate a password and return detailed error messages
+ */
+function validatePassword(password) {
+    const result = exports.passwordSchema.safeParse(password);
+    if (result.success) {
+        return { valid: true, errors: [] };
+    }
+    return {
+        valid: false,
+        errors: result.error.errors.map((e) => e.message),
+    };
+}
+//# sourceMappingURL=password.js.map

package/dist/validators/password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.js","sourceRoot":"","sources":["../../src/validators/password.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;;AAsDH,0CAEC;AAKD,4CAYC;AAvED,6BAAwB;AAExB;;;GAGG;AACU,QAAA,6BAA6B,GAAG;IAC3C,SAAS,EAAE,CAAC;IACZ,SAAS,EAAE,GAAG;IACd,gBAAgB,EAAE,IAAI;IACtB,gBAAgB,EAAE,IAAI;IACtB,aAAa,EAAE,IAAI;IACnB,cAAc,EAAE,IAAI;IACpB,cAAc,EAAE,mEAAmE;CAC3E,CAAC;AAEX;;;GAGG;AACH,MAAM,2BAA2B,GAAG,yCAAyC,CAAC;AAE9E;;;;;;;GAOG;AACU,QAAA,cAAc,GAAG,OAAC;KAC5B,MAAM,EAAE;KACR,GAAG,CACF,qCAA6B,CAAC,SAAS,EACvC,6BAA6B,qCAA6B,CAAC,SAAS,aAAa,CAClF;KACA,GAAG,CACF,qCAA6B,CAAC,SAAS,EACvC,4BAA4B,qCAA6B,CAAC,SAAS,aAAa,CACjF;KACA,KAAK,CAAC,OAAO,EAAE,qDAAqD,CAAC;KACrE,KAAK,CAAC,OAAO,EAAE,qDAAqD,CAAC;KACrE,KAAK,CAAC,OAAO,EAAE,0CAA0C,CAAC;KAC1D,KAAK,CACJ,2BAA2B,EAC3B,yDAAyD,qCAA6B,CAAC,cAAc,GAAG,CACzG,CAAC;AAEJ;;;GAGG;AACH,SAAgB,eAAe,CAAC,QAAgB;IAC9C,OAAO,sBAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,QAAgB;IAI/C,MAAM,MAAM,GAAG,sBAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACrC,CAAC;IACD,OAAO;QACL,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;KAClD,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,50 @@
+{
+  "name": "@aibrains/shared-types",
+  "version": "0.1.0",
+  "description": "Shared Zod schemas, TypeScript types, and validators for Education data models.",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "require": "./dist/index.js"
+    },
+    "./schemas/*": {
+      "types": "./dist/schemas/*.d.ts",
+      "require": "./dist/schemas/*.js"
+    },
+    "./validators": {
+      "types": "./dist/validators/index.d.ts",
+      "require": "./dist/validators/index.js"
+    },
+    "./mappers": {
+      "types": "./dist/mappers/index.d.ts",
+      "require": "./dist/mappers/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "watch": "tsc --watch",
+    "clean": "rimraf dist",
+    "typecheck": "tsc --noEmit",
+    "prepublishOnly": "npm run clean && npm run build"
+  },
+  "dependencies": {
+    "zod": "^3.23.8"
+  },
+  "peerDependencies": {
+    "zod": ">=3.22.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "rimraf": "^5.0.5",
+    "typescript": "^5.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}