@go-mondo/identity-sdk 0.0.1 → 0.0.2-beta.12

package/dist/cjs/app/authorization/schema.test.js

@@ -0,0 +1,353 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const arktype_1 = require("arktype");
+const vitest_1 = require("vitest");
+const schema_js_1 = require("./schema.js");
+(0, vitest_1.describe)('App Authorization - Schema', () => {
+    (0, vitest_1.describe)('AuthorizationSchema', () => {
+        (0, vitest_1.test)('should accept complete authorization object', () => {
+            const authorization = {
+                refreshTokenDuration: 3600,
+                accessTokenDuration: 900,
+                accessTokenSignatureAlgorithm: 'HS256',
+                loginUri: 'https://app.example.com/login',
+                callbackUrls: [
+                    'https://app.example.com/callback',
+                    'https://app.example.com/oauth/callback',
+                ],
+                availableAudiences: ['api.example.com', 'admin.example.com'],
+                availableGrants: new Set([
+                    'authorization_code',
+                    'refresh_token',
+                ]),
+                defaultAudience: 'api.example.com',
+                updatedAt: new Date(),
+                deletedAt: new Date(),
+                deactivatedAt: new Date(),
+                metadata: {
+                    oauth_version: '2.0',
+                    pkce_required: true,
+                    state_parameter_required: true,
+                },
+            };
+            const result = (0, schema_js_1.AuthorizationSchema)(authorization);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            (0, vitest_1.expect)(result.availableGrants).toBeInstanceOf(Set);
+        });
+        (0, vitest_1.test)('should accept minimal authorization object', () => {
+            const authorization = {
+                metadata: {},
+            };
+            const result = (0, schema_js_1.AuthorizationSchema)(authorization);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+        });
+        (0, vitest_1.test)('should accept authorization with grant array and convert to Set', () => {
+            const authorization = {
+                refreshTokenDuration: 7200,
+                accessTokenDuration: 1800,
+                availableGrants: ['authorization_code', 'client_credentials'],
+                metadata: {
+                    client_type: 'confidential',
+                },
+            };
+            const result = (0, schema_js_1.AuthorizationSchema)(authorization);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            (0, vitest_1.expect)(result.availableGrants).toBeInstanceOf(Set);
+            (0, vitest_1.expect)(result.availableGrants?.has('authorization_code')).toBe(true);
+            (0, vitest_1.expect)(result.availableGrants?.has('client_credentials')).toBe(true);
+        });
+        (0, vitest_1.test)('should accept authorization with Set of grants', () => {
+            const authorization = {
+                accessTokenDuration: 600,
+                availableGrants: new Set(['implicit', 'authorization_code']),
+                callbackUrls: ['https://spa.example.com/callback'],
+                metadata: {
+                    client_type: 'public',
+                    application_type: 'spa',
+                },
+            };
+            const result = (0, schema_js_1.AuthorizationSchema)(authorization);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            (0, vitest_1.expect)(result.availableGrants).toBeInstanceOf(Set);
+        });
+        (0, vitest_1.test)('should accept authorization with callback URLs as Set', () => {
+            const authorization = {
+                callbackUrls: new Set([
+                    'https://app.example.com/auth',
+                    'https://app.example.com/oauth',
+                ]),
+                availableAudiences: new Set(['api1.example.com', 'api2.example.com']),
+                metadata: {
+                    multi_tenant: true,
+                },
+            };
+            const result = (0, schema_js_1.AuthorizationSchema)(authorization);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            (0, vitest_1.expect)(result.callbackUrls).toBeInstanceOf(Set);
+            (0, vitest_1.expect)(result.availableAudiences).toBeInstanceOf(Set);
+        });
+        (0, vitest_1.test)('should accept authorization with optional fields', () => {
+            const authorization = {
+                refreshTokenDuration: 86400,
+                accessTokenDuration: 3600,
+                accessTokenSignatureAlgorithm: 'RS256',
+                loginUri: 'https://auth.example.com/login',
+                defaultAudience: 'https://api.example.com',
+                updatedAt: new Date(),
+                metadata: {
+                    jwt_configuration: {
+                        algorithm: 'RS256',
+                        public_key: 'MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA...',
+                    },
+                    scopes: ['read:users', 'write:users', 'admin:all'],
+                },
+            };
+            const result = (0, schema_js_1.AuthorizationSchema)(authorization);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+        });
+        (0, vitest_1.test)('should filter empty strings from URLs and audiences', () => {
+            const authorization = {
+                callbackUrls: new Set([
+                    'https://valid.example.com/callback',
+                    'https://another.example.com/auth',
+                ]),
+                availableAudiences: ['api.example.com', 'admin.example.com'],
+                metadata: {},
+            };
+            const result = (0, schema_js_1.AuthorizationSchema)(authorization);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            (0, vitest_1.expect)(result.callbackUrls).toEqual(new Set([
+                'https://valid.example.com/callback',
+                'https://another.example.com/auth',
+            ]));
+            (0, vitest_1.expect)(result.availableAudiences).toEqual(new Set(['api.example.com', 'admin.example.com']));
+        });
+        (0, vitest_1.test)('should reject invalid grant types', () => {
+            const authorization = {
+                availableGrants: ['invalid_grant_type'],
+                metadata: {},
+            };
+            const result = (0, schema_js_1.AuthorizationSchema)(authorization);
+            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+        });
+        (0, vitest_1.test)('should reject invalid URL formats', () => {
+            const authorization = {
+                loginUri: 'not-a-valid-url',
+                metadata: {},
+            };
+            const result = (0, schema_js_1.AuthorizationSchema)(authorization);
+            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+        });
+    });
+    (0, vitest_1.describe)('AuthorizationPayloadSchema', () => {
+        (0, vitest_1.test)('should accept complete authorization payload', () => {
+            const payload = {
+                refreshTokenDuration: 3600,
+                accessTokenDuration: 900,
+                accessTokenSignatureAlgorithm: 'HS256',
+                loginUri: 'https://app.example.com/login',
+                callbackUrls: ['https://app.example.com/callback'],
+                availableAudiences: ['api.example.com'],
+                availableGrants: ['authorization_code', 'refresh_token'],
+                defaultAudience: 'api.example.com',
+                updatedAt: new Date().toISOString(),
+                deletedAt: new Date().toISOString(),
+                deactivatedAt: new Date().toISOString(),
+                metadata: {
+                    client_id: 'oauth_client_123',
+                    client_secret_set: true,
+                    token_endpoint_auth_method: 'client_secret_basic',
+                },
+            };
+            const result = (0, schema_js_1.AuthorizationPayloadSchema)(payload);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            (0, vitest_1.expect)(result).toEqual(payload);
+        });
+        (0, vitest_1.test)('should accept minimal authorization payload', () => {
+            const payload = {
+                metadata: {},
+            };
+            const result = (0, schema_js_1.AuthorizationPayloadSchema)(payload);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            (0, vitest_1.expect)(result).toHaveProperty('accessTokenDuration');
+            (0, vitest_1.expect)(result).toHaveProperty('accessTokenSignatureAlgorithm');
+            (0, vitest_1.expect)(result).toHaveProperty('refreshTokenDuration');
+        });
+        (0, vitest_1.test)('should accept payload with grant arrays', () => {
+            const payload = {
+                refreshTokenDuration: 7200,
+                accessTokenDuration: 1800,
+                availableGrants: ['authorization_code', 'client_credentials'],
+                callbackUrls: ['https://server.example.com/oauth/callback'],
+                metadata: {
+                    client_type: 'confidential',
+                    requires_client_secret: true,
+                },
+            };
+            const result = (0, schema_js_1.AuthorizationPayloadSchema)(payload);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+        });
+        (0, vitest_1.test)('should accept payload with Set of grants', () => {
+            const payload = {
+                accessTokenDuration: 600,
+                availableGrants: new Set(['implicit']),
+                defaultAudience: 'https://spa-api.example.com',
+                metadata: {
+                    client_type: 'public',
+                    application_type: 'single_page_app',
+                },
+            };
+            const result = (0, schema_js_1.AuthorizationPayloadSchema)(payload);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+        });
+        (0, vitest_1.test)('should accept payload with comprehensive OAuth configuration', () => {
+            const payload = {
+                refreshTokenDuration: 2592000, // 30 days
+                accessTokenDuration: 3600, // 1 hour
+                accessTokenSignatureAlgorithm: 'RS256',
+                loginUri: 'https://auth.corporate.com/oauth/authorize',
+                callbackUrls: [
+                    'https://app.corporate.com/auth/callback',
+                    'https://mobile.corporate.com/oauth/callback',
+                    'https://admin.corporate.com/auth/return',
+                ],
+                availableAudiences: [
+                    'https://api.corporate.com',
+                    'https://admin-api.corporate.com',
+                    'https://analytics.corporate.com',
+                ],
+                availableGrants: [
+                    'authorization_code',
+                    'refresh_token',
+                    'client_credentials',
+                ],
+                defaultAudience: 'https://api.corporate.com',
+                updatedAt: new Date().toISOString(),
+                metadata: {
+                    client_name: 'Corporate Application',
+                    client_uri: 'https://corporate.com',
+                    logo_uri: 'https://corporate.com/logo.png',
+                    tos_uri: 'https://corporate.com/terms',
+                    policy_uri: 'https://corporate.com/privacy',
+                },
+            };
+            const result = (0, schema_js_1.AuthorizationPayloadSchema)(payload);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+        });
+        (0, vitest_1.test)('should reject invalid date format', () => {
+            const payload = {
+                updatedAt: 'invalid-date',
+                metadata: {},
+            };
+            const result = (0, schema_js_1.AuthorizationPayloadSchema)(payload);
+            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+        });
+        (0, vitest_1.test)('should reject invalid signature algorithm', () => {
+            const payload = {
+                accessTokenSignatureAlgorithm: 'INVALID_ALG',
+                metadata: {},
+            };
+            const result = (0, schema_js_1.AuthorizationPayloadSchema)(payload);
+            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+        });
+    });
+    (0, vitest_1.describe)('UpsertAuthorizationPayloadSchema', () => {
+        (0, vitest_1.test)('should accept upsert with all fields', () => {
+            const payload = {
+                refreshTokenDuration: 3600,
+                accessTokenDuration: 900,
+                accessTokenSignatureAlgorithm: 'HS256',
+                loginUri: 'https://updated.example.com/login',
+                callbackUrls: ['https://updated.example.com/callback'],
+                availableAudiences: ['updated-api.example.com'],
+                availableGrants: ['authorization_code'],
+                defaultAudience: 'updated-api.example.com',
+                metadata: {
+                    update_reason: 'security_enhancement',
+                    updated_by: 'admin@example.com',
+                },
+            };
+            const result = (0, schema_js_1.UpsertAuthorizationPayloadSchema)(payload);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            (0, vitest_1.expect)(result).toEqual(payload);
+        });
+        (0, vitest_1.test)('should accept partial upsert payload', () => {
+            const payload = {
+                accessTokenDuration: 1800,
+                callbackUrls: ['https://new-callback.example.com'],
+                metadata: {
+                    fields_updated: 'accessTokenDuration',
+                },
+            };
+            const result = (0, schema_js_1.UpsertAuthorizationPayloadSchema)(payload);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+        });
+        (0, vitest_1.test)('should accept upsert with undefined values', () => {
+            const payload = {
+                loginUri: undefined,
+                defaultAudience: undefined,
+                metadata: {
+                    reset_fields: 'loginUri',
+                },
+            };
+            const result = (0, schema_js_1.UpsertAuthorizationPayloadSchema)(payload);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+        });
+        (0, vitest_1.test)('should accept empty metadata upsert', () => {
+            const payload = {
+                refreshTokenDuration: 7200,
+                metadata: {},
+            };
+            const result = (0, schema_js_1.UpsertAuthorizationPayloadSchema)(payload);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+        });
+        (0, vitest_1.test)('should accept upsert with grant types modification', () => {
+            const payload = {
+                availableGrants: [
+                    'authorization_code',
+                    'refresh_token',
+                    'client_credentials',
+                ],
+                metadata: {
+                    added_grants: 'client_credentials',
+                },
+            };
+            const result = (0, schema_js_1.UpsertAuthorizationPayloadSchema)(payload);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+        });
+        (0, vitest_1.test)('should accept upsert with complex callback URL updates', () => {
+            const payload = {
+                callbackUrls: [
+                    'https://prod.example.com/oauth/callback',
+                    'https://staging.example.com/oauth/callback',
+                    'https://dev.example.com/oauth/callback',
+                ],
+                availableAudiences: [
+                    'https://api.example.com',
+                    'https://staging-api.example.com',
+                ],
+                metadata: {
+                    environment: 'production',
+                },
+            };
+            const result = (0, schema_js_1.UpsertAuthorizationPayloadSchema)(payload);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+        });
+        (0, vitest_1.test)('should reject invalid grant types in upsert', () => {
+            const payload = {
+                availableGrants: ['invalid_grant'],
+                metadata: {},
+            };
+            const result = (0, schema_js_1.UpsertAuthorizationPayloadSchema)(payload);
+            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+        });
+        (0, vitest_1.test)('should reject invalid URL in upsert', () => {
+            const payload = {
+                loginUri: 'not-a-valid-url',
+                metadata: {},
+            };
+            const result = (0, schema_js_1.UpsertAuthorizationPayloadSchema)(payload);
+            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+        });
+    });
+});

package/dist/cjs/app/index.d.ts

@@ -0,0 +1,14 @@
+export * from './resources.js';
+export * from './schema.js';
+export * from './authorization/resources.js';
+export * from './authorization/schema.js';
+export * from './oauth/resources.js';
+export * from './oauth/schema.js';
+export * from './oidc/resources.js';
+export * from './oidc/schema.js';
+export * from './registration/resources.js';
+export * from './registration/schema.js';
+export * from './saml/resources.js';
+export * from './saml/schema.js';
+export * from './utils.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/app/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/app/index.ts"],"names":[],"mappings":"AACA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAG5B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAG1C,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAGlC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AAGjC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AAGzC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AAGjC,cAAc,YAAY,CAAC"}

package/dist/cjs/app/index.js

@@ -0,0 +1,36 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+// Apps
+__exportStar(require("./resources.js"), exports);
+__exportStar(require("./schema.js"), exports);
+// Authorization
+__exportStar(require("./authorization/resources.js"), exports);
+__exportStar(require("./authorization/schema.js"), exports);
+// Oauth
+__exportStar(require("./oauth/resources.js"), exports);
+__exportStar(require("./oauth/schema.js"), exports);
+// OIDC
+__exportStar(require("./oidc/resources.js"), exports);
+__exportStar(require("./oidc/schema.js"), exports);
+// Registration
+__exportStar(require("./registration/resources.js"), exports);
+__exportStar(require("./registration/schema.js"), exports);
+// SAML
+__exportStar(require("./saml/resources.js"), exports);
+__exportStar(require("./saml/schema.js"), exports);
+// Misc
+__exportStar(require("./utils.js"), exports);

package/dist/cjs/app/oauth/resources.d.ts

@@ -0,0 +1,12 @@
+import type { MondoIdentity } from '../../common/resources/init.js';
+import { type InsertOAuthInput, type OAuth } from './schema.js';
+export declare class OAuthResources {
+    private readonly instance;
+    constructor(instance: MondoIdentity);
+    static buildPath(appId: string): string;
+    getItem(id: string): Promise<OAuth>;
+    rotateItemSecret(id: string): Promise<OAuth>;
+}
+export declare function getOAuth(instance: MondoIdentity, appId: string): Promise<OAuth>;
+export declare function rotateOAuthSecret(instance: MondoIdentity, appId: string, item?: InsertOAuthInput): Promise<OAuth>;
+//# sourceMappingURL=resources.d.ts.map

package/dist/cjs/app/oauth/resources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../../../src/app/oauth/resources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAOpE,OAAO,EACL,KAAK,gBAAgB,EAErB,KAAK,KAAK,EAEX,MAAM,aAAa,CAAC;AAIrB,qBAAa,cAAc;IACN,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,aAAa;IAE3D,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAQhC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IAInC,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;CAGpD;AAED,wBAAsB,QAAQ,CAC5B,QAAQ,EAAE,aAAa,EACvB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,KAAK,CAAC,CAShB;AAED,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,aAAa,EACvB,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,KAAK,CAAC,CAYhB"}

package/dist/cjs/app/oauth/resources.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuthResources = void 0;
+exports.getOAuth = getOAuth;
+exports.rotateOAuthSecret = rotateOAuthSecret;
+const operations_js_1 = require("../../common/resources/operations.js");
+const utils_js_1 = require("../../common/resources/utils.js");
+const resources_js_1 = require("../resources.js");
+const schema_js_1 = require("./schema.js");
+const RESOURCE = 'oauth';
+class OAuthResources {
+    instance;
+    constructor(instance) {
+        this.instance = instance;
+    }
+    static buildPath(appId) {
+        if (appId?.startsWith(resources_js_1.PATH)) {
+            return appId;
+        }
+        return [resources_js_1.PATH, appId, RESOURCE].filter(Boolean).join('/');
+    }
+    getItem(id) {
+        return getOAuth(this.instance, id);
+    }
+    rotateItemSecret(id) {
+        return rotateOAuthSecret(this.instance, id);
+    }
+}
+exports.OAuthResources = OAuthResources;
+async function getOAuth(instance, appId) {
+    return (0, utils_js_1.parseEgressSchema)((0, schema_js_1.OAuthSchema)(await (0, operations_js_1.getItemWithAuthorization)(new URL(OAuthResources.buildPath(appId), instance.config.host), instance.authorizer)));
+}
+async function rotateOAuthSecret(instance, appId, item) {
+    return (0, utils_js_1.parseEgressSchema)((0, schema_js_1.OAuthSchema)(await (0, operations_js_1.insertItemWithAuthorization)(new URL(OAuthResources.buildPath(appId), instance.config.host), instance.authorizer, (0, utils_js_1.parseEgressSchema)(schema_js_1.InsertOAuthPayloadSchema.onUndeclaredKey('delete')(item)))));
+}

package/dist/cjs/app/oauth/schema.d.ts

@@ -0,0 +1,42 @@
+export declare const OAuthIdSchema: import("arktype/out/methods/string.js").StringType<string, {}>;
+export type OAuthId = typeof OAuthIdSchema.inferOut;
+export declare const OAuthIdPropertySchema: import("arktype/out/methods/object.js").ObjectType<{
+    id: string;
+}, {}>;
+export type OAuthIdProperty = typeof OAuthIdPropertySchema.inferOut;
+export declare const OAuthSchema: import("arktype/out/methods/object.js").ObjectType<{
+    id: string;
+    clientId: string;
+    clientSecret: string;
+    updatedAt?: Date | ((In: string) => import("arktype/out/attributes.js").To<Date>) | undefined;
+    deletedAt?: Date | ((In: string) => import("arktype/out/attributes.js").To<Date>) | undefined;
+    deactivatedAt?: Date | ((In: string) => import("arktype/out/attributes.js").To<Date>) | undefined;
+    metadata: (In: import("arktype/out/attributes.js").Default<unknown, Map<string, string | number | boolean>>) => import("arktype").Out<Map<string, string | number | boolean>>;
+}, {}>;
+export type OAuthProperties = typeof OAuthSchema.inferIn;
+export type OAuth = typeof OAuthSchema.inferOut;
+export declare const OAuthPayloadSchema: import("arktype/out/methods/object.js").ObjectType<{
+    id: string;
+    clientId: string;
+    clientSecret: string;
+    updatedAt?: ((In: string | Date | undefined) => import("arktype").Out<string | undefined>) | undefined;
+    deletedAt?: ((In: string | Date | undefined) => import("arktype").Out<string | undefined>) | undefined;
+    deactivatedAt?: ((In: string | Date | undefined) => import("arktype").Out<string | undefined>) | undefined;
+    metadata?: ((In: {
+        [x: string]: string | number | boolean;
+    } | Map<string, string | number | boolean> | null | undefined) => import("arktype").Out<{
+        [x: string]: string | number | boolean;
+    } | undefined>) | undefined;
+}, {}>;
+export type OAuthPayload = typeof OAuthPayloadSchema.inferOut;
+export declare const InsertOAuthPayloadSchema: import("arktype/out/methods/object.js").ObjectType<{
+    id: import("arktype/out/attributes.js").Default<string, string>;
+    metadata?: ((In: {
+        [x: string]: string | number | boolean;
+    } | Map<string, string | number | boolean> | null | undefined) => import("arktype").Out<{
+        [x: string]: string | number | boolean;
+    } | undefined>) | undefined;
+}, {}>;
+export type InsertOAuthInput = typeof InsertOAuthPayloadSchema.inferIn;
+export type InsertOAuthPayload = typeof InsertOAuthPayloadSchema.inferOut;
+//# sourceMappingURL=schema.d.ts.map

package/dist/cjs/app/oauth/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/app/oauth/schema.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,aAAa,gEAAqC,CAAC;AAChE,MAAM,MAAM,OAAO,GAAG,OAAO,aAAa,CAAC,QAAQ,CAAC;AAEpD,eAAO,MAAM,qBAAqB;;MAEhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,qBAAqB,CAAC,QAAQ,CAAC;AAOpE,eAAO,MAAM,WAAW;;;;;;;;MAIS,CAAC;AAClC,MAAM,MAAM,eAAe,GAAG,OAAO,WAAW,CAAC,OAAO,CAAC;AACzD,MAAM,MAAM,KAAK,GAAG,OAAO,WAAW,CAAC,QAAQ,CAAC;AAEhD,eAAO,MAAM,kBAAkB;;;;;;;;;;;;MAIM,CAAC;AACtC,MAAM,MAAM,YAAY,GAAG,OAAO,kBAAkB,CAAC,QAAQ,CAAC;AAE9D,eAAO,MAAM,wBAAwB;;;;;;;MAEA,CAAC;AACtC,MAAM,MAAM,gBAAgB,GAAG,OAAO,wBAAwB,CAAC,OAAO,CAAC;AACvE,MAAM,MAAM,kBAAkB,GAAG,OAAO,wBAAwB,CAAC,QAAQ,CAAC"}

package/dist/cjs/app/oauth/schema.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InsertOAuthPayloadSchema = exports.OAuthPayloadSchema = exports.OAuthSchema = exports.OAuthIdPropertySchema = exports.OAuthIdSchema = void 0;
+const arktype_1 = require("arktype");
+const dates_js_1 = require("../../common/schema/dates.js");
+const id_js_1 = require("../../common/schema/id.js");
+const metadata_js_1 = require("../../common/schema/metadata.js");
+const utils_js_1 = require("../utils.js");
+exports.OAuthIdSchema = (0, id_js_1.KSUIDSchema)(utils_js_1.Model.OAuth.UIDPrefix);
+exports.OAuthIdPropertySchema = (0, arktype_1.type)({
+    id: exports.OAuthIdSchema,
+});
+const BaseOAuth = exports.OAuthIdPropertySchema.and({
+    clientId: (0, arktype_1.type)('string'),
+    clientSecret: (0, arktype_1.type)('string'),
+});
+exports.OAuthSchema = BaseOAuth.and({
+    'updatedAt?': dates_js_1.OptionalDateSchema,
+    'deletedAt?': dates_js_1.OptionalDateSchema,
+    'deactivatedAt?': dates_js_1.OptionalDateSchema,
+}).and(metadata_js_1.MetadataMapPropertySchema);
+exports.OAuthPayloadSchema = BaseOAuth.and({
+    'updatedAt?': dates_js_1.OptionalDatePayloadSchema,
+    'deletedAt?': dates_js_1.OptionalDatePayloadSchema,
+    'deactivatedAt?': dates_js_1.OptionalDatePayloadSchema,
+}).and(metadata_js_1.MetadataPayloadPropertySchema);
+exports.InsertOAuthPayloadSchema = (0, arktype_1.type)({
+    id: exports.OAuthIdSchema.default(() => (0, utils_js_1.generateOAuthId)()),
+}).and(metadata_js_1.MetadataPayloadPropertySchema);

package/dist/cjs/app/oauth/schema.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=schema.test.d.ts.map

package/dist/cjs/app/oauth/schema.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.test.d.ts","sourceRoot":"","sources":["../../../../src/app/oauth/schema.test.ts"],"names":[],"mappings":""}