@go-mondo/identity-sdk 0.0.1 → 0.0.2-beta.3

package/dist/esm/oauth/common/schema.d.ts

@@ -0,0 +1,62 @@
+export declare const GrantType: {
+    readonly CLIENT_CREDENTIALS: "client_credentials";
+    readonly AUTHORIZATION_CODE: "authorization_code";
+    readonly IMPLICIT: "implicit";
+    readonly REFRESH_TOKEN: "refresh_token";
+};
+export type AnyGrantType = (typeof GrantType)[keyof typeof GrantType];
+export declare const ResponseType: {
+    readonly ID_TOKEN: "id_token";
+    readonly TOKEN: "token";
+    readonly CODE: "code";
+};
+export type AnyResponseType = (typeof ResponseType)[keyof typeof ResponseType];
+export declare const CodeChallengeMethod: {
+    readonly DEFAULT: "S256";
+    readonly S256: "S256";
+    readonly PLAIN: "plain";
+};
+export type AnyCodeChallengeMethod = (typeof CodeChallengeMethod)[keyof typeof CodeChallengeMethod];
+export declare const CodeChallengeMethodSchema: import("arktype/internal/methods/string.ts").StringType<"S256" | "plain", {}>;
+export declare const AuthorizationDisplay: {
+    readonly PAGE: "page";
+    readonly POPUP: "popup";
+    readonly TOUCH: "touch";
+    readonly WAP: "wap";
+};
+export type AnyAuthorizationDisplay = (typeof AuthorizationDisplay)[keyof typeof AuthorizationDisplay];
+export declare const AuthorizationDisplaySchema: import("arktype/internal/methods/string.ts").StringType<"page" | "popup" | "touch" | "wap", {}>;
+export declare const AuthorizationPrompt: {
+    readonly NONE: "none";
+    readonly LOGIN: "login";
+    readonly CONSENT: "consent";
+    readonly SELECT_ACCOUNT: "select_account";
+};
+export type AnyAuthorizationPrompt = (typeof AuthorizationPrompt)[keyof typeof AuthorizationPrompt];
+export declare const AuthorizationPromptSchema: import("arktype/internal/methods/string.ts").StringType<"none" | "login" | "consent" | "select_account", {}>;
+export declare const OptionalSchema: import("arktype/internal/methods/object.ts").ObjectType<{
+    audience?: string | undefined;
+}, {}>;
+export declare const OIDCScope: {
+    readonly OPENID: "openid";
+    readonly PROFILE: "profile";
+    readonly EMAIL: "email";
+    readonly ADDRESS: "address";
+    readonly PHONE: "phone";
+};
+export type AnyOIDCScope = (typeof OIDCScope)[keyof typeof OIDCScope];
+export declare const OAuthScope: {
+    readonly OFFLINE_ACCESS: "offline_access";
+};
+export type AnyOAuthScope = (typeof OAuthScope)[keyof typeof OAuthScope];
+export declare const Scope: {
+    OFFLINE_ACCESS: "offline_access";
+    OPENID: "openid";
+    PROFILE: "profile";
+    EMAIL: "email";
+    ADDRESS: "address";
+    PHONE: "phone";
+};
+export type AnyScope = AnyOAuthScope | AnyOIDCScope | string;
+export declare const ScopeSchema: import("arktype/internal/methods/string.ts").StringType<string, {}>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/esm/oauth/common/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/oauth/common/schema.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS;;;;;CAKZ,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,CAAC;AAEtE,eAAO,MAAM,YAAY;;;;CAIf,CAAC;AACX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAG/E,eAAO,MAAM,mBAAmB;;;;CAItB,CAAC;AACX,MAAM,MAAM,sBAAsB,GAChC,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;AACjE,eAAO,MAAM,yBAAyB,+EAGrC,CAAC;AAEF,eAAO,MAAM,oBAAoB;;;;;CAKvB,CAAC;AACX,MAAM,MAAM,uBAAuB,GACjC,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAC;AACnE,eAAO,MAAM,0BAA0B,iGAKtC,CAAC;AAEF,eAAO,MAAM,mBAAmB;;;;;CAKtB,CAAC;AACX,MAAM,MAAM,sBAAsB,GAChC,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;AACjE,eAAO,MAAM,yBAAyB,8GAKrC,CAAC;AAEF,eAAO,MAAM,cAAc;;MAEzB,CAAC;AAEH,eAAO,MAAM,SAAS;;;;;;CAMZ,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,CAAC;AAEtE,eAAO,MAAM,UAAU;;CAEb,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,OAAO,UAAU,CAAC,CAAC;AAEzE,eAAO,MAAM,KAAK;;;;;;;CAGjB,CAAC;AACF,MAAM,MAAM,QAAQ,GAAG,aAAa,GAAG,YAAY,GAAG,MAAM,CAAC;AAC7D,eAAO,MAAM,WAAW,qEAAiB,CAAC"}

package/dist/esm/oauth/common/schema.js

@@ -0,0 +1,51 @@
+import { type } from 'arktype';
+export const GrantType = {
+    CLIENT_CREDENTIALS: 'client_credentials',
+    AUTHORIZATION_CODE: 'authorization_code',
+    IMPLICIT: 'implicit',
+    REFRESH_TOKEN: 'refresh_token',
+};
+export const ResponseType = {
+    ID_TOKEN: 'id_token',
+    TOKEN: 'token',
+    CODE: 'code',
+};
+// export const ResponseTypeSchema = type.enumerated(ResponseType.CODE, ResponseType.ID_TOKEN, ResponseType.TOKEN)
+export const CodeChallengeMethod = {
+    DEFAULT: 'S256',
+    S256: 'S256',
+    PLAIN: 'plain',
+};
+export const CodeChallengeMethodSchema = type.enumerated(CodeChallengeMethod.PLAIN, CodeChallengeMethod.S256);
+export const AuthorizationDisplay = {
+    PAGE: 'page',
+    POPUP: 'popup',
+    TOUCH: 'touch',
+    WAP: 'wap',
+};
+export const AuthorizationDisplaySchema = type.enumerated(AuthorizationDisplay.PAGE, AuthorizationDisplay.POPUP, AuthorizationDisplay.TOUCH, AuthorizationDisplay.WAP);
+export const AuthorizationPrompt = {
+    NONE: 'none',
+    LOGIN: 'login',
+    CONSENT: 'consent',
+    SELECT_ACCOUNT: 'select_account',
+};
+export const AuthorizationPromptSchema = type.enumerated(AuthorizationPrompt.NONE, AuthorizationPrompt.LOGIN, AuthorizationPrompt.CONSENT, AuthorizationPrompt.SELECT_ACCOUNT);
+export const OptionalSchema = type({
+    audience: type('string').optional(),
+});
+export const OIDCScope = {
+    OPENID: 'openid',
+    PROFILE: 'profile',
+    EMAIL: 'email',
+    ADDRESS: 'address',
+    PHONE: 'phone',
+};
+export const OAuthScope = {
+    OFFLINE_ACCESS: 'offline_access',
+};
+export const Scope = {
+    ...OIDCScope,
+    ...OAuthScope,
+};
+export const ScopeSchema = type('string');

package/dist/esm/oauth/index.d.ts

@@ -0,0 +1,4 @@
+export { AuthorizationDisplay, AuthorizationDisplaySchema, AuthorizationPrompt, AuthorizationPromptSchema, CodeChallengeMethod, CodeChallengeMethodSchema, GrantType, OAuthScope, OIDCScope, ResponseType, type AnyAuthorizationDisplay, type AnyAuthorizationPrompt, type AnyCodeChallengeMethod, type AnyGrantType, type AnyOAuthScope, type AnyOIDCScope, type AnyResponseType, type AnyScope, } from './common/schema.js';
+export * as Authorize from './authorize/index.js';
+export * as Token from './token/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/oauth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/oauth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,mBAAmB,EACnB,yBAAyB,EACzB,mBAAmB,EACnB,yBAAyB,EACzB,SAAS,EACT,UAAU,EACV,SAAS,EACT,YAAY,EACZ,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,QAAQ,GACd,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,SAAS,MAAM,sBAAsB,CAAC;AAClD,OAAO,KAAK,KAAK,MAAM,kBAAkB,CAAC"}

package/dist/esm/oauth/index.js

@@ -0,0 +1,3 @@
+export { AuthorizationDisplay, AuthorizationDisplaySchema, AuthorizationPrompt, AuthorizationPromptSchema, CodeChallengeMethod, CodeChallengeMethodSchema, GrantType, OAuthScope, OIDCScope, ResponseType, } from './common/schema.js';
+export * as Authorize from './authorize/index.js';
+export * as Token from './token/index.js';

package/dist/esm/oauth/token/index.d.ts

@@ -0,0 +1,2 @@
+export * from './schema/schema.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/oauth/token/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/oauth/token/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC"}

package/dist/esm/oauth/token/index.js

@@ -0,0 +1 @@
+export * from './schema/schema.js';

package/dist/esm/oauth/token/schema/grants/authorization-code.d.ts

@@ -0,0 +1,10 @@
+export declare const AuthorizationCodeSchema: import("arktype/internal/methods/object.ts").ObjectType<{
+    grant_type: "authorization_code";
+    code: string;
+    client_id: string;
+    redirect_uri: string;
+    client_secret?: string | undefined;
+    code_verifier?: string | undefined;
+}, {}>;
+export type AuthorizationCodePayload = typeof AuthorizationCodeSchema.inferOut;
+//# sourceMappingURL=authorization-code.d.ts.map

package/dist/esm/oauth/token/schema/grants/authorization-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-code.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/token/schema/grants/authorization-code.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,uBAAuB;;;;;;;MAMlB,CAAC;AACnB,MAAM,MAAM,wBAAwB,GAAG,OAAO,uBAAuB,CAAC,QAAQ,CAAC"}

package/dist/esm/oauth/token/schema/grants/authorization-code.js

@@ -0,0 +1,17 @@
+import { type } from 'arktype';
+import { GrantType } from '../../../common/schema.js';
+/**
+ * @see https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.3
+ * @see https://openid.net/specs/openid-connect-core-1_0.html#rfc.section.3.1.3.1
+ */
+const GrantTypeSchema = type.enumerated(GrantType.AUTHORIZATION_CODE);
+const PKCESchema = type({
+    code_verifier: type('string').optional(),
+});
+export const AuthorizationCodeSchema = type({
+    grant_type: GrantTypeSchema,
+    code: type('string'),
+    client_id: type('string'),
+    client_secret: type('string').optional(),
+    redirect_uri: type('string.url'),
+}).and(PKCESchema);

package/dist/esm/oauth/token/schema/grants/client-credentials.d.ts

@@ -0,0 +1,21 @@
+/**
+ * What the incoming body may look like.
+ *
+ * Note: the client_id and client_secrete may (likely) be in Authorization header
+ */
+export declare const ClientCredentialsPayloadSchema: import("arktype/internal/methods/object.ts").ObjectType<{
+    grant_type: "client_credentials";
+    scope?: string | undefined;
+    client_id?: string | undefined;
+    client_secret?: string | undefined;
+    audience?: string | undefined;
+}, {}>;
+export declare const ClientCredentialsSchema: import("arktype/internal/methods/object.ts").ObjectType<{
+    grant_type: "client_credentials";
+    scope?: string | undefined;
+    audience?: string | undefined;
+    client_id: string;
+    client_secret: string;
+}, {}>;
+export type ClientCredentialsPayload = typeof ClientCredentialsSchema.inferOut;
+//# sourceMappingURL=client-credentials.d.ts.map

package/dist/esm/oauth/token/schema/grants/client-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-credentials.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/token/schema/grants/client-credentials.ts"],"names":[],"mappings":"AAUA;;;;GAIG;AACH,eAAO,MAAM,8BAA8B;;;;;;MAKrB,CAAC;AAEvB,eAAO,MAAM,uBAAuB;;;;;;MAMlC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,OAAO,uBAAuB,CAAC,QAAQ,CAAC"}

package/dist/esm/oauth/token/schema/grants/client-credentials.js

@@ -0,0 +1,22 @@
+import { type } from 'arktype';
+import { AppIdSchema } from '../../../../app/schema/app.js';
+import { GrantType, OptionalSchema } from '../../../common/schema.js';
+/**
+ * @see https://datatracker.ietf.org/doc/html/rfc6749#section-4.4.2
+ */
+const GrantTypeSchema = type.enumerated(GrantType.CLIENT_CREDENTIALS);
+/**
+ * What the incoming body may look like.
+ *
+ * Note: the client_id and client_secrete may (likely) be in Authorization header
+ */
+export const ClientCredentialsPayloadSchema = type({
+    grant_type: GrantTypeSchema,
+    scope: type('string').optional(),
+    client_id: AppIdSchema.optional(),
+    client_secret: type('string').optional(),
+}).and(OptionalSchema);
+export const ClientCredentialsSchema = ClientCredentialsPayloadSchema.omit('client_id', 'client_secret').and({
+    client_id: AppIdSchema,
+    client_secret: type('string'),
+});

package/dist/esm/oauth/token/schema/grants/refresh-token.d.ts

@@ -0,0 +1,9 @@
+export declare const RefreshTokenSchema: import("arktype/internal/methods/object.ts").ObjectType<{
+    grant_type: "refresh_token";
+    refresh_token: string;
+    client_id: string;
+    client_secret: string;
+    scope?: string | undefined;
+}, {}>;
+export type RefreshTokenPayload = typeof RefreshTokenSchema.inferOut;
+//# sourceMappingURL=refresh-token.d.ts.map

package/dist/esm/oauth/token/schema/grants/refresh-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-token.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/token/schema/grants/refresh-token.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,kBAAkB;;;;;;MAM7B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,OAAO,kBAAkB,CAAC,QAAQ,CAAC"}

package/dist/esm/oauth/token/schema/grants/refresh-token.js

@@ -0,0 +1,14 @@
+import { type } from 'arktype';
+import { AppIdSchema } from '../../../../app/schema/app.js';
+import { GrantType } from '../../../common/schema.js';
+/**
+ * @see https://datatracker.ietf.org/doc/html/rfc6749#section-6
+ */
+const GrantTypeSchema = type.enumerated(GrantType.REFRESH_TOKEN);
+export const RefreshTokenSchema = type({
+    grant_type: GrantTypeSchema,
+    refresh_token: type('string'),
+    scope: type('string').optional(),
+    client_id: AppIdSchema,
+    client_secret: type('string'),
+});

package/dist/esm/oauth/token/schema/schema.d.ts

@@ -0,0 +1,28 @@
+export * from './grants/authorization-code.js';
+export * from './grants/client-credentials.js';
+export * from './grants/refresh-token.js';
+/**
+ * Union(s)
+ */
+export declare const Schema: import("arktype/internal/methods/object.ts").ObjectType<{
+    grant_type: "authorization_code";
+    code: string;
+    client_id: string;
+    redirect_uri: string;
+    client_secret?: string | undefined;
+    code_verifier?: string | undefined;
+} | {
+    grant_type: "client_credentials";
+    scope?: string | undefined;
+    audience?: string | undefined;
+    client_id: string;
+    client_secret: string;
+} | {
+    grant_type: "refresh_token";
+    refresh_token: string;
+    client_id: string;
+    client_secret: string;
+    scope?: string | undefined;
+}, {}>;
+export type Payload = typeof Schema.inferOut;
+//# sourceMappingURL=schema.d.ts.map

package/dist/esm/oauth/token/schema/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../../src/oauth/token/schema/schema.ts"],"names":[],"mappings":"AAIA,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,2BAA2B,CAAC;AAE1C;;GAEG;AACH,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;MAElB,CAAC;AACF,MAAM,MAAM,OAAO,GAAG,OAAO,MAAM,CAAC,QAAQ,CAAC"}

package/dist/esm/oauth/token/schema/schema.js

@@ -0,0 +1,10 @@
+import { AuthorizationCodeSchema } from './grants/authorization-code.js';
+import { ClientCredentialsSchema } from './grants/client-credentials.js';
+import { RefreshTokenSchema } from './grants/refresh-token.js';
+export * from './grants/authorization-code.js';
+export * from './grants/client-credentials.js';
+export * from './grants/refresh-token.js';
+/**
+ * Union(s)
+ */
+export const Schema = AuthorizationCodeSchema.or(ClientCredentialsSchema).or(RefreshTokenSchema);

package/dist/esm/package.json

@@ -0,0 +1 @@
+{ "type": "module" }

package/dist/esm/workspace/index.d.ts

@@ -0,0 +1,2 @@
+export * from './schema/schema.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/workspace/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/workspace/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC"}

package/dist/esm/workspace/index.js

@@ -0,0 +1 @@
+export * from './schema/schema.js';

package/dist/esm/workspace/schema/authorization.d.ts

@@ -0,0 +1,31 @@
+export declare const DEFAULT_SESSION_DURATION: number;
+export declare const DEFAULT_REFRESH_TOKEN_DURATION: number;
+export declare const DEFAULT_ACCESS_TOKEN_DURATION: number;
+export declare const AuthorizationPayloadSchema: import("arktype/internal/methods/object.ts").ObjectType<{
+    sessionDuration: import("arktype/internal/attributes.ts").Default<number, number>;
+    refreshTokenDuration: import("arktype/internal/attributes.ts").Default<number, number>;
+    accessTokenDuration: import("arktype/internal/attributes.ts").Default<number, number>;
+    accessTokenSignatureAlgorithm: import("arktype/internal/attributes.ts").Default<string, string>;
+    updatedAt?: ((In: string | Date | undefined) => import("arktype/internal/attributes.ts").Out<string | undefined>) | undefined;
+    deletedAt?: ((In: string | Date | undefined) => import("arktype/internal/attributes.ts").Out<string | undefined>) | undefined;
+    deactivatedAt?: ((In: string | Date | undefined) => import("arktype/internal/attributes.ts").Out<string | undefined>) | undefined;
+    metadata?: ((In: {
+        [x: string]: string | number | boolean;
+    } | Map<string, string | number | boolean> | null | undefined) => import("arktype/internal/attributes.ts").Out<{
+        [x: string]: string | number | boolean;
+    } | undefined>) | undefined;
+}, {}>;
+export type AuthorizationPayload = typeof AuthorizationPayloadSchema.inferOut;
+export declare const UpsertAuthorizationPayloadSchema: import("arktype/internal/methods/object.ts").ObjectType<{
+    sessionDuration: import("arktype/internal/attributes.ts").Default<number, number>;
+    refreshTokenDuration: import("arktype/internal/attributes.ts").Default<number, number>;
+    accessTokenDuration: import("arktype/internal/attributes.ts").Default<number, number>;
+    accessTokenSignatureAlgorithm: import("arktype/internal/attributes.ts").Default<string, string>;
+    metadata?: ((In: {
+        [x: string]: string | number | boolean;
+    } | Map<string, string | number | boolean> | null | undefined) => import("arktype/internal/attributes.ts").Out<{
+        [x: string]: string | number | boolean;
+    } | undefined>) | undefined;
+}, {}>;
+export type UpsertAuthorizationPayload = typeof UpsertAuthorizationPayloadSchema.inferOut;
+//# sourceMappingURL=authorization.d.ts.map

package/dist/esm/workspace/schema/authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../../../../src/workspace/schema/authorization.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,wBAAwB,QAAc,CAAC;AACpD,eAAO,MAAM,8BAA8B,QAAoB,CAAC;AAChE,eAAO,MAAM,6BAA6B,QAAc,CAAC;AASzD,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;MAIF,CAAC;AACtC,MAAM,MAAM,oBAAoB,GAAG,OAAO,0BAA0B,CAAC,QAAQ,CAAC;AAE9E,eAAO,MAAM,gCAAgC;;;;;;;;;;MAE5C,CAAC;AACF,MAAM,MAAM,0BAA0B,GACpC,OAAO,gCAAgC,CAAC,QAAQ,CAAC"}

package/dist/esm/workspace/schema/authorization.js

@@ -0,0 +1,19 @@
+import { type } from 'arktype';
+import { OptionalDatePayloadSchema } from '../../common/schema/dates.js';
+import { Algorithm, AlgorithmSchema } from '../../common/schema/jwt.js';
+import { MetadataPayloadPropertySchema } from '../../common/schema/metadata.js';
+export const DEFAULT_SESSION_DURATION = 60 * 60 * 4; // 4 hour
+export const DEFAULT_REFRESH_TOKEN_DURATION = 60 * 60 * 24 * 14; // 14 days
+export const DEFAULT_ACCESS_TOKEN_DURATION = 60 * 60 * 2; // 2 hours
+const BaseAttributes = type({
+    sessionDuration: type('number').default(DEFAULT_SESSION_DURATION),
+    refreshTokenDuration: type('number').default(DEFAULT_REFRESH_TOKEN_DURATION),
+    accessTokenDuration: type('number').default(DEFAULT_ACCESS_TOKEN_DURATION),
+    accessTokenSignatureAlgorithm: AlgorithmSchema.default(Algorithm.DEFAULT),
+});
+export const AuthorizationPayloadSchema = BaseAttributes.and({
+    'updatedAt?': OptionalDatePayloadSchema,
+    'deletedAt?': OptionalDatePayloadSchema,
+    'deactivatedAt?': OptionalDatePayloadSchema,
+}).and(MetadataPayloadPropertySchema);
+export const UpsertAuthorizationPayloadSchema = BaseAttributes.and(MetadataPayloadPropertySchema);

package/dist/esm/workspace/schema/branding.d.ts

@@ -0,0 +1,38 @@
+export declare const BrandingPayloadSchema: import("arktype/internal/methods/object.ts").ObjectType<{
+    logo?: {
+        dark?: string | undefined;
+        light?: string | undefined;
+        email?: string | undefined;
+    } | undefined;
+    color?: {
+        link?: string | undefined;
+        linkHover?: string | undefined;
+    } | undefined;
+    updatedAt?: ((In: string | Date | undefined) => import("arktype/internal/attributes.ts").Out<string | undefined>) | undefined;
+    deletedAt?: ((In: string | Date | undefined) => import("arktype/internal/attributes.ts").Out<string | undefined>) | undefined;
+    deactivatedAt?: ((In: string | Date | undefined) => import("arktype/internal/attributes.ts").Out<string | undefined>) | undefined;
+    metadata?: ((In: {
+        [x: string]: string | number | boolean;
+    } | Map<string, string | number | boolean> | null | undefined) => import("arktype/internal/attributes.ts").Out<{
+        [x: string]: string | number | boolean;
+    } | undefined>) | undefined;
+}, {}>;
+export type BrandingPayload = typeof BrandingPayloadSchema.inferOut;
+export declare const UpsertBrandingPayloadSchema: import("arktype/internal/methods/object.ts").ObjectType<{
+    logo?: {
+        dark?: string | undefined;
+        light?: string | undefined;
+        email?: string | undefined;
+    } | undefined;
+    color?: {
+        link?: string | undefined;
+        linkHover?: string | undefined;
+    } | undefined;
+    metadata?: ((In: {
+        [x: string]: string | number | boolean;
+    } | Map<string, string | number | boolean> | null | undefined) => import("arktype/internal/attributes.ts").Out<{
+        [x: string]: string | number | boolean;
+    } | undefined>) | undefined;
+}, {}>;
+export type UpsertBrandingPayload = typeof UpsertBrandingPayloadSchema.inferOut;
+//# sourceMappingURL=branding.d.ts.map

package/dist/esm/workspace/schema/branding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"branding.d.ts","sourceRoot":"","sources":["../../../../src/workspace/schema/branding.ts"],"names":[],"mappings":"AAoBA,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;MAIG,CAAC;AACtC,MAAM,MAAM,eAAe,GAAG,OAAO,qBAAqB,CAAC,QAAQ,CAAC;AAEpE,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;MAEvC,CAAC;AACF,MAAM,MAAM,qBAAqB,GAAG,OAAO,2BAA2B,CAAC,QAAQ,CAAC"}

package/dist/esm/workspace/schema/branding.js

@@ -0,0 +1,22 @@
+import { type } from 'arktype';
+import { OptionalDatePayloadSchema } from '../../common/schema/dates.js';
+import { MetadataPayloadPropertySchema } from '../../common/schema/metadata.js';
+const LogoSchema = type({
+    dark: type('string.url').optional(),
+    light: type('string.url').optional(),
+    email: type('string.url').optional(),
+});
+const ColorSchema = type({
+    link: type('string').optional(),
+    linkHover: type('string').optional(),
+});
+const BaseAttributes = type({
+    logo: LogoSchema.optional(),
+    color: ColorSchema.optional(),
+});
+export const BrandingPayloadSchema = BaseAttributes.and({
+    'updatedAt?': OptionalDatePayloadSchema,
+    'deletedAt?': OptionalDatePayloadSchema,
+    'deactivatedAt?': OptionalDatePayloadSchema,
+}).and(MetadataPayloadPropertySchema);
+export const UpsertBrandingPayloadSchema = BaseAttributes.and(MetadataPayloadPropertySchema);

package/dist/esm/workspace/schema/membership.d.ts

@@ -0,0 +1,25 @@
+export declare const FeatureFlag: {
+    readonly REMOVE_BRANDING: "Branding.Remove";
+};
+export type AnyFeatureFlag = (typeof FeatureFlag)[keyof typeof FeatureFlag];
+export declare const FeaturePayloadSchema: import("arktype/internal/methods/object.ts").ObjectType<{
+    expiresAt: (In: string | Date) => import("arktype/internal/attributes.ts").Out<string>;
+}, {}>;
+export type FeaturePayload = typeof FeaturePayloadSchema.inferOut;
+export declare const FeaturesPayloadSchema: import("arktype/internal/methods/object.ts").ObjectType<{
+    "Branding.Remove"?: {
+        expiresAt: (In: string | Date) => import("arktype/internal/attributes.ts").Out<string>;
+    } | undefined;
+}, {}>;
+export type FeaturesPayload = typeof FeaturesPayloadSchema.inferOut;
+export declare const MembershipPayloadSchema: import("arktype/internal/methods/object.ts").ObjectType<{
+    features?: {
+        "Branding.Remove"?: {
+            expiresAt: (In: string | Date) => import("arktype/internal/attributes.ts").Out<string>;
+        } | undefined;
+    } | undefined;
+    startAt?: ((In: string | Date | undefined) => import("arktype/internal/attributes.ts").Out<string | undefined>) | undefined;
+    endAt?: ((In: string | Date | undefined) => import("arktype/internal/attributes.ts").Out<string | undefined>) | undefined;
+}, {}>;
+export type MembershipPayload = typeof MembershipPayloadSchema.inferOut;
+//# sourceMappingURL=membership.d.ts.map

package/dist/esm/workspace/schema/membership.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"membership.d.ts","sourceRoot":"","sources":["../../../../src/workspace/schema/membership.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,WAAW;;CAEd,CAAC;AACX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAE5E,eAAO,MAAM,oBAAoB;;MAE/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,OAAO,oBAAoB,CAAC,QAAQ,CAAC;AAElE,eAAO,MAAM,qBAAqB;;;;MAEhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,qBAAqB,CAAC,QAAQ,CAAC;AAEpE,eAAO,MAAM,uBAAuB;;;;;;;;MAIlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,uBAAuB,CAAC,QAAQ,CAAC"}

package/dist/esm/workspace/schema/membership.js

@@ -0,0 +1,16 @@
+import { type } from 'arktype';
+import { OptionalDatePayloadSchema, RequiredDatePayloadSchema, } from '../../common/schema/dates.js';
+export const FeatureFlag = {
+    REMOVE_BRANDING: 'Branding.Remove',
+};
+export const FeaturePayloadSchema = type({
+    expiresAt: RequiredDatePayloadSchema,
+});
+export const FeaturesPayloadSchema = type({
+    [FeatureFlag.REMOVE_BRANDING]: FeaturePayloadSchema.optional(),
+});
+export const MembershipPayloadSchema = type({
+    features: FeaturesPayloadSchema.optional(),
+    'startAt?': OptionalDatePayloadSchema,
+    'endAt?': OptionalDatePayloadSchema,
+});

package/dist/esm/workspace/schema/registration.d.ts

@@ -0,0 +1,28 @@
+export declare const RegistrationPayloadSchema: import("arktype/internal/methods/object.ts").ObjectType<{
+    allowSelfRegistration: boolean;
+    identifiers: {
+        type: "email" | "phoneNumber";
+    }[];
+    updatedAt?: ((In: string | Date | undefined) => import("arktype/internal/attributes.ts").Out<string | undefined>) | undefined;
+    deletedAt?: ((In: string | Date | undefined) => import("arktype/internal/attributes.ts").Out<string | undefined>) | undefined;
+    deactivatedAt?: ((In: string | Date | undefined) => import("arktype/internal/attributes.ts").Out<string | undefined>) | undefined;
+    metadata?: ((In: {
+        [x: string]: string | number | boolean;
+    } | Map<string, string | number | boolean> | null | undefined) => import("arktype/internal/attributes.ts").Out<{
+        [x: string]: string | number | boolean;
+    } | undefined>) | undefined;
+}, {}>;
+export type RegistrationPayload = typeof RegistrationPayloadSchema.inferOut;
+export declare const UpsertRegistrationPayloadSchema: import("arktype/internal/methods/object.ts").ObjectType<{
+    allowSelfRegistration?: boolean | undefined;
+    identifiers?: {
+        type: "email" | "phoneNumber";
+    }[] | undefined;
+    metadata?: ((In: {
+        [x: string]: string | number | boolean;
+    } | Map<string, string | number | boolean> | null | undefined) => import("arktype/internal/attributes.ts").Out<{
+        [x: string]: string | number | boolean;
+    } | undefined>) | undefined;
+}, {}>;
+export type UpsertRegistrationPayload = typeof UpsertRegistrationPayloadSchema.inferOut;
+//# sourceMappingURL=registration.d.ts.map

package/dist/esm/workspace/schema/registration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registration.d.ts","sourceRoot":"","sources":["../../../../src/workspace/schema/registration.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;MAOD,CAAC;AACtC,MAAM,MAAM,mBAAmB,GAAG,OAAO,yBAAyB,CAAC,QAAQ,CAAC;AAE5E,eAAO,MAAM,+BAA+B;;;;;;;;;;MAGP,CAAC;AACtC,MAAM,MAAM,yBAAyB,GACnC,OAAO,+BAA+B,CAAC,QAAQ,CAAC"}

package/dist/esm/workspace/schema/registration.js

@@ -0,0 +1,19 @@
+import { type } from 'arktype';
+import { OptionalDatePayloadSchema } from '../../common/schema/dates.js';
+import { MetadataPayloadPropertySchema } from '../../common/schema/metadata.js';
+import { IdentityIdentifierSchema } from '../../identity/schema/schema.js';
+const IdentityIdentifierPropertySchema = type({
+    type: IdentityIdentifierSchema,
+}).array();
+const AllowSelfRegistrationSchema = type('boolean');
+export const RegistrationPayloadSchema = type({
+    allowSelfRegistration: AllowSelfRegistrationSchema,
+    identifiers: IdentityIdentifierPropertySchema,
+    'updatedAt?': OptionalDatePayloadSchema,
+    'deletedAt?': OptionalDatePayloadSchema,
+    'deactivatedAt?': OptionalDatePayloadSchema,
+}).and(MetadataPayloadPropertySchema);
+export const UpsertRegistrationPayloadSchema = type({
+    allowSelfRegistration: AllowSelfRegistrationSchema.optional(),
+    identifiers: IdentityIdentifierPropertySchema.optional(),
+}).and(MetadataPayloadPropertySchema);

package/dist/esm/workspace/schema/schema.d.ts

@@ -0,0 +1,10 @@
+export * from './authorization.js';
+export * from './branding.js';
+export * from './membership.js';
+export * from './registration.js';
+export * from './settings.js';
+export * from './tenant.js';
+export * from './user-notification.js';
+export * from './user-preferences.js';
+export * from './utils.js';
+//# sourceMappingURL=schema.d.ts.map

package/dist/esm/workspace/schema/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/workspace/schema/schema.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AAEtC,cAAc,YAAY,CAAC"}

package/dist/esm/workspace/schema/schema.js

@@ -0,0 +1,9 @@
+export * from './authorization.js';
+export * from './branding.js';
+export * from './membership.js';
+export * from './registration.js';
+export * from './settings.js';
+export * from './tenant.js';
+export * from './user-notification.js';
+export * from './user-preferences.js';
+export * from './utils.js';

package/dist/esm/workspace/schema/settings.d.ts

@@ -0,0 +1,23 @@
+/**
+ * This isn't really being used yet...but some general settings would go here
+ */
+export declare const SettingsPayloadSchema: import("arktype/internal/methods/object.ts").ObjectType<{
+    updatedAt?: ((In: string | Date | undefined) => import("arktype/internal/attributes.ts").Out<string | undefined>) | undefined;
+    deletedAt?: ((In: string | Date | undefined) => import("arktype/internal/attributes.ts").Out<string | undefined>) | undefined;
+    deactivatedAt?: ((In: string | Date | undefined) => import("arktype/internal/attributes.ts").Out<string | undefined>) | undefined;
+    metadata?: ((In: {
+        [x: string]: string | number | boolean;
+    } | Map<string, string | number | boolean> | null | undefined) => import("arktype/internal/attributes.ts").Out<{
+        [x: string]: string | number | boolean;
+    } | undefined>) | undefined;
+}, {}>;
+export type SettingsPayload = typeof SettingsPayloadSchema.inferOut;
+export declare const UpsertSettingsPayloadSchema: import("arktype/internal/methods/object.ts").ObjectType<{
+    metadata?: ((In: {
+        [x: string]: string | number | boolean;
+    } | Map<string, string | number | boolean> | null | undefined) => import("arktype/internal/attributes.ts").Out<{
+        [x: string]: string | number | boolean;
+    } | undefined>) | undefined;
+}, {}>;
+export type UpsertSettingsPayload = typeof UpsertSettingsPayloadSchema.inferOut;
+//# sourceMappingURL=settings.d.ts.map

package/dist/esm/workspace/schema/settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../../../../src/workspace/schema/settings.ts"],"names":[],"mappings":"AAIA;;GAEG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;MAIG,CAAC;AACtC,MAAM,MAAM,eAAe,GAAG,OAAO,qBAAqB,CAAC,QAAQ,CAAC;AAEpE,eAAO,MAAM,2BAA2B;;;;;;MAAgC,CAAC;AACzE,MAAM,MAAM,qBAAqB,GAAG,OAAO,2BAA2B,CAAC,QAAQ,CAAC"}

package/dist/esm/workspace/schema/settings.js

@@ -0,0 +1,12 @@
+import { type } from 'arktype';
+import { OptionalDatePayloadSchema } from '../../common/schema/dates.js';
+import { MetadataPayloadPropertySchema } from '../../common/schema/metadata.js';
+/**
+ * This isn't really being used yet...but some general settings would go here
+ */
+export const SettingsPayloadSchema = type({
+    'updatedAt?': OptionalDatePayloadSchema,
+    'deletedAt?': OptionalDatePayloadSchema,
+    'deactivatedAt?': OptionalDatePayloadSchema,
+}).and(MetadataPayloadPropertySchema);
+export const UpsertSettingsPayloadSchema = MetadataPayloadPropertySchema;