@go-mondo/identity-sdk 0.0.2-beta.1 → 0.0.2-beta.13

package/dist/cjs/authentication/strategies/schema/types/password.d.ts

@@ -0,0 +1,138 @@
+import { z } from 'zod';
+export declare const PasswordPolicyDefaults: {
+    minimumLength: number;
+    maximumLength: number;
+    minimumCapital: number;
+    minimumLower: number;
+    minimumNumber: number;
+    minimumSpecial: number;
+};
+export declare const PasswordPolicySchema: z.ZodObject<{
+    minimumLength: z.ZodDefault<z.ZodNumber>;
+    maximumLength: z.ZodDefault<z.ZodNumber>;
+    minimumCapital: z.ZodDefault<z.ZodNumber>;
+    minimumLower: z.ZodDefault<z.ZodNumber>;
+    minimumNumber: z.ZodDefault<z.ZodNumber>;
+    minimumSpecial: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const PasswordStrategySettingsPropertySchema: z.ZodObject<{
+    settings: z.ZodObject<{
+        passwordPolicy: z.ZodObject<{
+            minimumLength: z.ZodDefault<z.ZodNumber>;
+            maximumLength: z.ZodDefault<z.ZodNumber>;
+            minimumCapital: z.ZodDefault<z.ZodNumber>;
+            minimumLower: z.ZodDefault<z.ZodNumber>;
+            minimumNumber: z.ZodDefault<z.ZodNumber>;
+            minimumSpecial: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export declare const PasswordStrategySchema: z.ZodObject<{
+    settings: z.ZodObject<{
+        passwordPolicy: z.ZodObject<{
+            minimumLength: z.ZodDefault<z.ZodNumber>;
+            maximumLength: z.ZodDefault<z.ZodNumber>;
+            minimumCapital: z.ZodDefault<z.ZodNumber>;
+            minimumLower: z.ZodDefault<z.ZodNumber>;
+            minimumNumber: z.ZodDefault<z.ZodNumber>;
+            minimumSpecial: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+    type: z.ZodLiteral<"password">;
+    metadata: z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Map<string, string | number | boolean>, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>;
+    id: z.ZodString;
+    status: z.ZodDefault<z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>>;
+    label: z.ZodString;
+    createdAt: z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>;
+    updatedAt: z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>;
+    deletedAt: z.ZodOptional<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>>;
+    deactivatedAt: z.ZodOptional<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>>;
+}, z.core.$strip>;
+export type PasswordStrategyProperties = z.input<typeof PasswordStrategySchema>;
+export type PasswordStrategy = z.output<typeof PasswordStrategySchema>;
+export declare const PasswordStrategyPayloadSchema: z.ZodObject<{
+    settings: z.ZodObject<{
+        passwordPolicy: z.ZodObject<{
+            minimumLength: z.ZodDefault<z.ZodNumber>;
+            maximumLength: z.ZodDefault<z.ZodNumber>;
+            minimumCapital: z.ZodDefault<z.ZodNumber>;
+            minimumLower: z.ZodDefault<z.ZodNumber>;
+            minimumNumber: z.ZodDefault<z.ZodNumber>;
+            minimumSpecial: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+    type: z.ZodLiteral<"password">;
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    status: z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>;
+    label: z.ZodString;
+    createdAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+    updatedAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+    deletedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    deactivatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+}, z.core.$strip>;
+export type PasswordStrategyPayload = z.output<typeof PasswordStrategyPayloadSchema>;
+export declare const InsertPasswordStrategyPayloadSchema: z.ZodObject<{
+    settings: z.ZodOptional<z.ZodObject<{
+        passwordPolicy: z.ZodObject<{
+            minimumLength: z.ZodDefault<z.ZodNumber>;
+            maximumLength: z.ZodDefault<z.ZodNumber>;
+            minimumCapital: z.ZodDefault<z.ZodNumber>;
+            minimumLower: z.ZodDefault<z.ZodNumber>;
+            minimumNumber: z.ZodDefault<z.ZodNumber>;
+            minimumSpecial: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>;
+    }, z.core.$strip>>;
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    id: z.ZodOptional<z.ZodString>;
+    label: z.ZodString;
+    status: z.ZodDefault<z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>>;
+    type: z.ZodLiteral<"password">;
+}, z.core.$strip>;
+export type InsertPasswordStrategyInput = z.input<typeof InsertPasswordStrategyPayloadSchema>;
+export type InsertPasswordStrategyPayload = z.output<typeof InsertPasswordStrategyPayloadSchema>;
+export declare const UpdatePasswordStrategyPayloadSchema: z.ZodObject<{
+    settings: z.ZodOptional<z.ZodObject<{
+        passwordPolicy: z.ZodObject<{
+            minimumLength: z.ZodDefault<z.ZodNumber>;
+            maximumLength: z.ZodDefault<z.ZodNumber>;
+            minimumCapital: z.ZodDefault<z.ZodNumber>;
+            minimumLower: z.ZodDefault<z.ZodNumber>;
+            minimumNumber: z.ZodDefault<z.ZodNumber>;
+            minimumSpecial: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>;
+    }, z.core.$strip>>;
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    label: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>>;
+    type: z.ZodLiteral<"password">;
+}, z.core.$strip>;
+export type UpdatePasswordStrategyInput = z.input<typeof UpdatePasswordStrategyPayloadSchema>;
+export type UpdatePasswordStrategyPayload = z.output<typeof UpdatePasswordStrategyPayloadSchema>;
+export declare const ForgotPasswordSchema: z.ZodObject<{
+    identifier: z.ZodOptional<z.ZodString>;
+    identifierType: z.ZodOptional<z.ZodEnum<{
+        email: "email";
+        phoneNumber: "phoneNumber";
+    }>>;
+}, z.core.$strip>;
+export declare const VerifyPasswordSchema: z.ZodObject<{
+    password: z.ZodString;
+    identifier: z.ZodOptional<z.ZodString>;
+    identifierType: z.ZodOptional<z.ZodEnum<{
+        email: "email";
+        phoneNumber: "phoneNumber";
+    }>>;
+}, z.core.$strip>;
+//# sourceMappingURL=password.d.ts.map

package/dist/cjs/authentication/strategies/schema/types/password.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../../../../../src/authentication/strategies/schema/types/password.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,eAAO,MAAM,sBAAsB;;;;;;;CAOlC,CAAC;AAMF,eAAO,MAAM,oBAAoB;;;;;;;iBAO/B,CAAC;AAMH,eAAO,MAAM,sCAAsC;;;;;;;;;;;iBAEjD,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;iBAIjC,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAChF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEvE,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;iBAIxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAC5C,OAAO,6BAA6B,CACrC,CAAC;AAEF,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;iBAI9C,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAC/C,OAAO,mCAAmC,CAC3C,CAAC;AACF,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAClD,OAAO,mCAAmC,CAC3C,CAAC;AAEF,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;iBAI9C,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAC/C,OAAO,mCAAmC,CAC3C,CAAC;AACF,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAClD,OAAO,mCAAmC,CAC3C,CAAC;AAEF,eAAO,MAAM,oBAAoB;;;;;;iBAG/B,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;iBAI/B,CAAC"}

package/dist/cjs/authentication/strategies/schema/types/password.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VerifyPasswordSchema = exports.ForgotPasswordSchema = exports.UpdatePasswordStrategyPayloadSchema = exports.InsertPasswordStrategyPayloadSchema = exports.PasswordStrategyPayloadSchema = exports.PasswordStrategySchema = exports.PasswordStrategySettingsPropertySchema = exports.PasswordPolicySchema = exports.PasswordPolicyDefaults = void 0;
+const zod_1 = require("zod");
+const schema_js_1 = require("../../../../identity/schema.js");
+const base_js_1 = require("../base.js");
+exports.PasswordPolicyDefaults = {
+    minimumLength: 8,
+    maximumLength: 36,
+    minimumCapital: 1,
+    minimumLower: 1,
+    minimumNumber: 1,
+    minimumSpecial: 1,
+};
+const TypeSchema = zod_1.z.object({
+    type: zod_1.z.literal('password'),
+});
+exports.PasswordPolicySchema = zod_1.z.object({
+    minimumLength: zod_1.z.number().default(exports.PasswordPolicyDefaults.minimumLength),
+    maximumLength: zod_1.z.number().default(exports.PasswordPolicyDefaults.maximumLength),
+    minimumCapital: zod_1.z.number().default(exports.PasswordPolicyDefaults.minimumCapital),
+    minimumLower: zod_1.z.number().default(exports.PasswordPolicyDefaults.minimumLower),
+    minimumNumber: zod_1.z.number().default(exports.PasswordPolicyDefaults.minimumNumber),
+    minimumSpecial: zod_1.z.number().default(exports.PasswordPolicyDefaults.minimumSpecial),
+});
+const SettingsSchema = zod_1.z.object({
+    passwordPolicy: exports.PasswordPolicySchema,
+});
+exports.PasswordStrategySettingsPropertySchema = zod_1.z.object({
+    settings: SettingsSchema,
+});
+exports.PasswordStrategySchema = zod_1.z.object({
+    ...base_js_1.BaseStrategySchema.shape,
+    ...TypeSchema.shape,
+    settings: SettingsSchema,
+});
+exports.PasswordStrategyPayloadSchema = zod_1.z.object({
+    ...base_js_1.BaseStrategyPayloadSchema.shape,
+    ...TypeSchema.shape,
+    ...exports.PasswordStrategySettingsPropertySchema.shape,
+});
+exports.InsertPasswordStrategyPayloadSchema = zod_1.z.object({
+    ...TypeSchema.shape,
+    ...base_js_1.BaseInsertStrategyPayloadSchema.shape,
+    settings: SettingsSchema.optional(),
+});
+exports.UpdatePasswordStrategyPayloadSchema = zod_1.z.object({
+    ...TypeSchema.shape,
+    ...base_js_1.BaseUpdateStrategyPayloadSchema.shape,
+    settings: SettingsSchema.optional(),
+});
+exports.ForgotPasswordSchema = zod_1.z.object({
+    identifier: zod_1.z.string().optional(),
+    identifierType: schema_js_1.IdentityIdentifierSchema.optional(),
+});
+exports.VerifyPasswordSchema = zod_1.z.object({
+    password: zod_1.z.string(),
+    identifier: zod_1.z.string().optional(),
+    identifierType: schema_js_1.IdentityIdentifierSchema.optional(),
+});

package/dist/cjs/authentication/strategies/schema/types/totp.d.ts

@@ -0,0 +1,123 @@
+import { z } from 'zod';
+export declare const DEFAULT_DIGITS = 6;
+export declare const DEFAULT_PERIOD = 30;
+export declare const TOTPAlgorithm: {
+    DEFAULT: string;
+    SHA1: string;
+    SHA224: string;
+    SHA256: string;
+    SHA384: string;
+    SHA512: string;
+    'SHA3-224': string;
+    'SHA3-256': string;
+    'SHA3-384': string;
+    'SHA3-512': string;
+};
+export type AnyTOTPAlgorithm = (typeof TOTPAlgorithm)[keyof typeof TOTPAlgorithm];
+export declare const TOTPStrategySettingsSchema: z.ZodObject<{
+    digits: z.ZodDefault<z.ZodNumber>;
+    period: z.ZodDefault<z.ZodNumber>;
+    algorithm: z.ZodDefault<z.ZodEnum<{
+        [x: string]: string;
+    }>>;
+}, z.core.$strip>;
+export type TOTPStrategySettings = z.output<typeof TOTPStrategySettingsSchema>;
+export declare const TOTPStrategySettingsPropertySchema: z.ZodObject<{
+    settings: z.ZodObject<{
+        digits: z.ZodDefault<z.ZodNumber>;
+        period: z.ZodDefault<z.ZodNumber>;
+        algorithm: z.ZodDefault<z.ZodEnum<{
+            [x: string]: string;
+        }>>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type TOTPStrategySettingsProperty = z.output<typeof TOTPStrategySettingsPropertySchema>;
+export declare const TOTPStrategySchema: z.ZodObject<{
+    settings: z.ZodObject<{
+        digits: z.ZodDefault<z.ZodNumber>;
+        period: z.ZodDefault<z.ZodNumber>;
+        algorithm: z.ZodDefault<z.ZodEnum<{
+            [x: string]: string;
+        }>>;
+    }, z.core.$strip>;
+    type: z.ZodLiteral<"totp">;
+    metadata: z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Map<string, string | number | boolean>, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>;
+    id: z.ZodString;
+    status: z.ZodDefault<z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>>;
+    label: z.ZodString;
+    createdAt: z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>;
+    updatedAt: z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>;
+    deletedAt: z.ZodOptional<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>>;
+    deactivatedAt: z.ZodOptional<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>>;
+}, z.core.$strip>;
+export type TOTPStrategyProperties = z.input<typeof TOTPStrategySchema>;
+export type TOTPStrategy = z.output<typeof TOTPStrategySchema>;
+export declare const TOTPStrategyPayloadSchema: z.ZodObject<{
+    settings: z.ZodObject<{
+        digits: z.ZodDefault<z.ZodNumber>;
+        period: z.ZodDefault<z.ZodNumber>;
+        algorithm: z.ZodDefault<z.ZodEnum<{
+            [x: string]: string;
+        }>>;
+    }, z.core.$strip>;
+    type: z.ZodLiteral<"totp">;
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    status: z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>;
+    label: z.ZodString;
+    createdAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+    updatedAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+    deletedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    deactivatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+}, z.core.$strip>;
+export type TOTPStrategyPayload = z.output<typeof TOTPStrategyPayloadSchema>;
+export declare const InsertTOTPStrategyPayloadSchema: z.ZodObject<{
+    settings: z.ZodOptional<z.ZodObject<{
+        digits: z.ZodDefault<z.ZodNumber>;
+        period: z.ZodDefault<z.ZodNumber>;
+        algorithm: z.ZodDefault<z.ZodEnum<{
+            [x: string]: string;
+        }>>;
+    }, z.core.$strip>>;
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    id: z.ZodOptional<z.ZodString>;
+    label: z.ZodString;
+    status: z.ZodDefault<z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>>;
+    type: z.ZodLiteral<"totp">;
+}, z.core.$strip>;
+export type InsertTOTPStrategyInput = z.input<typeof InsertTOTPStrategyPayloadSchema>;
+export type InsertTOTPStrategyPayload = z.output<typeof InsertTOTPStrategyPayloadSchema>;
+export declare const UpdateTOTPStrategyPayloadSchema: z.ZodObject<{
+    settings: z.ZodOptional<z.ZodObject<{
+        digits: z.ZodDefault<z.ZodNumber>;
+        period: z.ZodDefault<z.ZodNumber>;
+        algorithm: z.ZodDefault<z.ZodEnum<{
+            [x: string]: string;
+        }>>;
+    }, z.core.$strip>>;
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    label: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>>;
+    type: z.ZodLiteral<"totp">;
+}, z.core.$strip>;
+export type UpdateTOTPStrategyInput = z.input<typeof UpdateTOTPStrategyPayloadSchema>;
+export type UpdateTOTPStrategyPayload = z.output<typeof UpdateTOTPStrategyPayloadSchema>;
+export declare const RegisterTOTPSchema: z.ZodObject<{
+    uri: z.ZodURL;
+    token: z.ZodString;
+}, z.core.$strip>;
+export declare const VerifyTOTPSchema: z.ZodObject<{
+    token: z.ZodString;
+}, z.core.$strip>;
+//# sourceMappingURL=totp.d.ts.map

package/dist/cjs/authentication/strategies/schema/types/totp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"totp.d.ts","sourceRoot":"","sources":["../../../../../../src/authentication/strategies/schema/types/totp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,eAAO,MAAM,cAAc,IAAI,CAAC;AAChC,eAAO,MAAM,cAAc,KAAK,CAAC;AAMjC,eAAO,MAAM,aAAa;;;;;;;;;;;CAWzB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAC1B,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,OAAO,aAAa,CAAC,CAAC;AAKrD,eAAO,MAAM,0BAA0B;;;;;;iBA0BrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE/E,eAAO,MAAM,kCAAkC;;;;;;;;iBAE7C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CACjD,OAAO,kCAAkC,CAC1C,CAAC;AAEF,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;iBAI7B,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACxE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE/D,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;iBAIpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE7E,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;iBAI1C,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,+BAA+B,CACvC,CAAC;AACF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAC9C,OAAO,+BAA+B,CACvC,CAAC;AAEF,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;iBAI1C,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,+BAA+B,CACvC,CAAC;AACF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAC9C,OAAO,+BAA+B,CACvC,CAAC;AAEF,eAAO,MAAM,kBAAkB;;;iBAG7B,CAAC;AAEH,eAAO,MAAM,gBAAgB;;iBAE3B,CAAC"}

package/dist/cjs/authentication/strategies/schema/types/totp.js

@@ -0,0 +1,81 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VerifyTOTPSchema = exports.RegisterTOTPSchema = exports.UpdateTOTPStrategyPayloadSchema = exports.InsertTOTPStrategyPayloadSchema = exports.TOTPStrategyPayloadSchema = exports.TOTPStrategySchema = exports.TOTPStrategySettingsPropertySchema = exports.TOTPStrategySettingsSchema = exports.TOTPAlgorithm = exports.DEFAULT_PERIOD = exports.DEFAULT_DIGITS = void 0;
+const zod_1 = require("zod");
+const base_js_1 = require("../base.js");
+exports.DEFAULT_DIGITS = 6;
+exports.DEFAULT_PERIOD = 30;
+const TypeSchema = zod_1.z.object({
+    type: zod_1.z.literal('totp'),
+});
+exports.TOTPAlgorithm = {
+    DEFAULT: 'SHA256',
+    SHA1: 'SHA1',
+    SHA224: 'SHA224',
+    SHA256: 'SHA256',
+    SHA384: 'SHA384',
+    SHA512: 'SHA512',
+    'SHA3-224': 'SHA3-224',
+    'SHA3-256': 'SHA3-256',
+    'SHA3-384': 'SHA3-384',
+    'SHA3-512': 'SHA3-512',
+};
+const allowedDigits = new Set([6, 7, 8]);
+const allowedPeriods = new Set([15, 30, 60]);
+exports.TOTPStrategySettingsSchema = zod_1.z.object({
+    digits: zod_1.z
+        .number()
+        .default(exports.DEFAULT_DIGITS)
+        .refine((val) => allowedDigits.has(val), {
+        message: 'Digit must be 6, 7, or 8',
+    }),
+    period: zod_1.z
+        .number()
+        .default(exports.DEFAULT_PERIOD)
+        .refine((val) => allowedPeriods.has(val), {
+        message: 'Period must be 15, 30, or 60',
+    }),
+    algorithm: zod_1.z
+        .enum([
+        exports.TOTPAlgorithm.SHA1,
+        exports.TOTPAlgorithm.SHA224,
+        exports.TOTPAlgorithm.SHA256,
+        exports.TOTPAlgorithm.SHA384,
+        exports.TOTPAlgorithm.SHA512,
+        exports.TOTPAlgorithm['SHA3-224'],
+        exports.TOTPAlgorithm['SHA3-256'],
+        exports.TOTPAlgorithm['SHA3-384'],
+        exports.TOTPAlgorithm['SHA3-512'],
+    ])
+        .default(exports.TOTPAlgorithm.DEFAULT),
+});
+exports.TOTPStrategySettingsPropertySchema = zod_1.z.object({
+    settings: exports.TOTPStrategySettingsSchema,
+});
+exports.TOTPStrategySchema = zod_1.z.object({
+    ...base_js_1.BaseStrategySchema.shape,
+    ...TypeSchema.shape,
+    settings: exports.TOTPStrategySettingsSchema,
+});
+exports.TOTPStrategyPayloadSchema = zod_1.z.object({
+    ...base_js_1.BaseStrategyPayloadSchema.shape,
+    ...TypeSchema.shape,
+    ...exports.TOTPStrategySettingsPropertySchema.shape,
+});
+exports.InsertTOTPStrategyPayloadSchema = zod_1.z.object({
+    ...TypeSchema.shape,
+    ...base_js_1.BaseInsertStrategyPayloadSchema.shape,
+    settings: exports.TOTPStrategySettingsSchema.optional(),
+});
+exports.UpdateTOTPStrategyPayloadSchema = zod_1.z.object({
+    ...TypeSchema.shape,
+    ...base_js_1.BaseUpdateStrategyPayloadSchema.shape,
+    settings: exports.TOTPStrategySettingsSchema.optional(),
+});
+exports.RegisterTOTPSchema = zod_1.z.object({
+    uri: zod_1.z.url('An authenticator uri is required'),
+    token: zod_1.z.string('An authenticator token is required'),
+});
+exports.VerifyTOTPSchema = zod_1.z.object({
+    token: zod_1.z.string({ message: 'An authenticator token is required' }),
+});

package/dist/cjs/authentication/utils.d.ts

@@ -0,0 +1,13 @@
+export declare const Model: {
+    readonly Strategy: {
+        readonly UIDPrefix: "stg";
+        readonly TYPE: "Strategy";
+    };
+    readonly Session: {
+        readonly UIDPrefix: "ssn";
+        readonly TYPE: "Session";
+    };
+};
+export declare function generateStrategyId(): string;
+export declare function generateSessionId(): string;
+//# sourceMappingURL=utils.d.ts.map

package/dist/cjs/authentication/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/authentication/utils.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,KAAK;;;;;;;;;CASR,CAAC;AAEX,wBAAgB,kBAAkB,WAEjC;AAED,wBAAgB,iBAAiB,WAEhC"}

package/dist/cjs/authentication/utils.js

@@ -0,0 +1,25 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Model = void 0;
+exports.generateStrategyId = generateStrategyId;
+exports.generateSessionId = generateSessionId;
+const ksuid_1 = __importDefault(require("ksuid"));
+exports.Model = {
+    Strategy: {
+        UIDPrefix: 'stg',
+        TYPE: 'Strategy',
+    },
+    Session: {
+        UIDPrefix: 'ssn',
+        TYPE: 'Session',
+    },
+};
+function generateStrategyId() {
+    return `${exports.Model.Strategy.UIDPrefix}_${ksuid_1.default.randomSync().string}`;
+}
+function generateSessionId() {
+    return `${exports.Model.Session.UIDPrefix}_${ksuid_1.default.randomSync().string}`;
+}

package/dist/cjs/authentication/utils.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=utils.test.d.ts.map

package/dist/cjs/authentication/utils.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.test.d.ts","sourceRoot":"","sources":["../../../src/authentication/utils.test.ts"],"names":[],"mappings":""}

package/dist/cjs/authentication/utils.test.js

@@ -0,0 +1,142 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const utils_js_1 = require("./utils.js");
+(0, vitest_1.describe)('Authentication Utils', () => {
+    (0, vitest_1.describe)('Model constants', () => {
+        (0, vitest_1.test)('should have correct Strategy model properties', () => {
+            (0, vitest_1.expect)(utils_js_1.Model.Strategy.UIDPrefix).toBe('stg');
+            (0, vitest_1.expect)(utils_js_1.Model.Strategy.TYPE).toBe('Strategy');
+        });
+        (0, vitest_1.test)('should have correct Session model properties', () => {
+            (0, vitest_1.expect)(utils_js_1.Model.Session.UIDPrefix).toBe('ssn');
+            (0, vitest_1.expect)(utils_js_1.Model.Session.TYPE).toBe('Session');
+        });
+        (0, vitest_1.test)('should be readonly (const assertion)', () => {
+            // Test that the Model object is properly typed as const
+            (0, vitest_1.expect)(typeof utils_js_1.Model).toBe('object');
+            (0, vitest_1.expect)(Object.isFrozen(utils_js_1.Model)).toBe(false); // const assertion doesn't freeze at runtime
+        });
+    });
+    (0, vitest_1.describe)('generateStrategyId', () => {
+        (0, vitest_1.test)('should generate ID with correct prefix', () => {
+            const id = (0, utils_js_1.generateStrategyId)();
+            (0, vitest_1.expect)(id).toMatch(/^stg_/);
+        });
+        (0, vitest_1.test)('should generate ID with correct format', () => {
+            const id = (0, utils_js_1.generateStrategyId)();
+            // Should match: prefix + underscore + KSUID (27 characters)
+            (0, vitest_1.expect)(id).toMatch(/^stg_[A-Za-z0-9]{27}$/);
+        });
+        (0, vitest_1.test)('should generate unique IDs on multiple calls', () => {
+            const id1 = (0, utils_js_1.generateStrategyId)();
+            const id2 = (0, utils_js_1.generateStrategyId)();
+            const id3 = (0, utils_js_1.generateStrategyId)();
+            (0, vitest_1.expect)(id1).not.toBe(id2);
+            (0, vitest_1.expect)(id2).not.toBe(id3);
+            (0, vitest_1.expect)(id1).not.toBe(id3);
+        });
+        (0, vitest_1.test)('should generate IDs with correct total length', () => {
+            const id = (0, utils_js_1.generateStrategyId)();
+            // prefix (3) + underscore (1) + KSUID (27) = 31 characters
+            (0, vitest_1.expect)(id.length).toBe(31);
+        });
+        (0, vitest_1.test)('should generate IDs that start with strategy prefix', () => {
+            const ids = Array.from({ length: 10 }, () => (0, utils_js_1.generateStrategyId)());
+            for (const id of ids) {
+                (0, vitest_1.expect)(id.startsWith('stg_')).toBe(true);
+            }
+        });
+        (0, vitest_1.test)('should generate KSUID-compatible format', () => {
+            const id = (0, utils_js_1.generateStrategyId)();
+            const ksuidPart = id.substring(4); // Remove 'stg_'
+            // KSUID should be 27 characters of base62
+            (0, vitest_1.expect)(ksuidPart.length).toBe(27);
+            (0, vitest_1.expect)(ksuidPart).toMatch(/^[A-Za-z0-9]{27}$/);
+        });
+        (0, vitest_1.test)('should be deterministic in format but random in content', () => {
+            const ids = Array.from({ length: 100 }, () => (0, utils_js_1.generateStrategyId)());
+            // All should have same format
+            for (const id of ids) {
+                (0, vitest_1.expect)(id).toMatch(/^stg_[A-Za-z0-9]{27}$/);
+            }
+            // All should be unique
+            const uniqueIds = new Set(ids);
+            (0, vitest_1.expect)(uniqueIds.size).toBe(100);
+        });
+    });
+    (0, vitest_1.describe)('generateSessionId', () => {
+        (0, vitest_1.test)('should generate ID with correct prefix', () => {
+            const id = (0, utils_js_1.generateSessionId)();
+            (0, vitest_1.expect)(id).toMatch(/^ssn_/);
+        });
+        (0, vitest_1.test)('should generate ID with correct format', () => {
+            const id = (0, utils_js_1.generateSessionId)();
+            // Should match: prefix + underscore + KSUID (27 characters)
+            (0, vitest_1.expect)(id).toMatch(/^ssn_[A-Za-z0-9]{27}$/);
+        });
+        (0, vitest_1.test)('should generate unique IDs on multiple calls', () => {
+            const id1 = (0, utils_js_1.generateSessionId)();
+            const id2 = (0, utils_js_1.generateSessionId)();
+            const id3 = (0, utils_js_1.generateSessionId)();
+            (0, vitest_1.expect)(id1).not.toBe(id2);
+            (0, vitest_1.expect)(id2).not.toBe(id3);
+            (0, vitest_1.expect)(id1).not.toBe(id3);
+        });
+        (0, vitest_1.test)('should generate IDs with correct total length', () => {
+            const id = (0, utils_js_1.generateSessionId)();
+            // prefix (3) + underscore (1) + KSUID (27) = 31 characters
+            (0, vitest_1.expect)(id.length).toBe(31);
+        });
+        (0, vitest_1.test)('should generate IDs that start with session prefix', () => {
+            const ids = Array.from({ length: 10 }, () => (0, utils_js_1.generateSessionId)());
+            for (const id of ids) {
+                (0, vitest_1.expect)(id.startsWith('ssn_')).toBe(true);
+            }
+        });
+        (0, vitest_1.test)('should generate KSUID-compatible format', () => {
+            const id = (0, utils_js_1.generateSessionId)();
+            const ksuidPart = id.substring(4); // Remove 'ssn_'
+            // KSUID should be 27 characters of base62
+            (0, vitest_1.expect)(ksuidPart.length).toBe(27);
+            (0, vitest_1.expect)(ksuidPart).toMatch(/^[A-Za-z0-9]{27}$/);
+        });
+        (0, vitest_1.test)('should be deterministic in format but random in content', () => {
+            const ids = Array.from({ length: 100 }, () => (0, utils_js_1.generateSessionId)());
+            // All should have same format
+            for (const id of ids) {
+                (0, vitest_1.expect)(id).toMatch(/^ssn_[A-Za-z0-9]{27}$/);
+            }
+            // All should be unique
+            const uniqueIds = new Set(ids);
+            (0, vitest_1.expect)(uniqueIds.size).toBe(100);
+        });
+    });
+    (0, vitest_1.describe)('ID generation comparison', () => {
+        (0, vitest_1.test)('should generate different formats for strategy vs session', () => {
+            const strategyId = (0, utils_js_1.generateStrategyId)();
+            const sessionId = (0, utils_js_1.generateSessionId)();
+            (0, vitest_1.expect)(strategyId.startsWith('stg_')).toBe(true);
+            (0, vitest_1.expect)(sessionId.startsWith('ssn_')).toBe(true);
+            (0, vitest_1.expect)(strategyId).not.toBe(sessionId);
+        });
+        (0, vitest_1.test)('should maintain format consistency across generators', () => {
+            const strategyIds = Array.from({ length: 10 }, () => (0, utils_js_1.generateStrategyId)());
+            const sessionIds = Array.from({ length: 10 }, () => (0, utils_js_1.generateSessionId)());
+            // All strategy IDs should have same prefix
+            for (const id of strategyIds) {
+                (0, vitest_1.expect)(id.startsWith('stg_')).toBe(true);
+                (0, vitest_1.expect)(id.length).toBe(31);
+            }
+            // All session IDs should have same prefix
+            for (const id of sessionIds) {
+                (0, vitest_1.expect)(id.startsWith('ssn_')).toBe(true);
+                (0, vitest_1.expect)(id.length).toBe(31);
+            }
+            // No overlap between the two sets
+            const allIds = [...strategyIds, ...sessionIds];
+            const uniqueIds = new Set(allIds);
+            (0, vitest_1.expect)(uniqueIds.size).toBe(20);
+        });
+    });
+});

package/dist/cjs/authorization/index.d.ts

@@ -2,5 +2,5 @@ export * from './permissions/resources.js';
 export * from './permissions/schema.js';
 export * from './roles/resources.js';
 export * from './roles/schema.js';
-export * from './utils.js';
+export * from './schema.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/cjs/authorization/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/authorization/index.ts"],"names":[],"mappings":"AAAA,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AAExC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAElC,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/authorization/index.ts"],"names":[],"mappings":"AACA,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AAGxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAElC,cAAc,aAAa,CAAC"}

package/dist/cjs/authorization/index.js

@@ -14,8 +14,10 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+// Permissions
 __exportStar(require("./permissions/resources.js"), exports);
 __exportStar(require("./permissions/schema.js"), exports);
+// Roles
 __exportStar(require("./roles/resources.js"), exports);
 __exportStar(require("./roles/schema.js"), exports);
-__exportStar(require("./utils.js"), exports);
+__exportStar(require("./schema.js"), exports);

package/dist/cjs/authorization/permissions/resources.d.ts

@@ -10,11 +10,11 @@ export declare class PermissionResources {
     getItem(id: string): Promise<Permission>;
     insertItem(item: InsertPermissionInput): Promise<Permission>;
     updateItem(id: string, item: UpdatePermissionInput): Promise<Permission>;
-    deleteItem(id: string): Promise<void>;
+    deleteItem(id: string): Promise<Permission>;
 }
 export declare function listPermissions(instance: MondoIdentity, pagination?: Pagination): Promise<PaginationCollection<Permission>>;
 export declare function getPermission(instance: MondoIdentity, id: string): Promise<Permission>;
 export declare function insertPermission(instance: MondoIdentity, item: InsertPermissionInput): Promise<Permission>;
 export declare function updatePermission(instance: MondoIdentity, id: string, item: UpdatePermissionInput): Promise<Permission>;
-export declare function deletePermission(instance: MondoIdentity, id: string): Promise<void>;
+export declare function deletePermission(instance: MondoIdentity, id: string): Promise<Permission>;
 //# sourceMappingURL=resources.d.ts.map