@go-mondo/identity-sdk 0.0.2-beta.1 → 0.0.2-beta.13

package/dist/esm/activity/schema/types/unknown.test.js

@@ -0,0 +1,272 @@
+import { describe, expect, test } from 'vitest';
+import { generateActivityId } from '../utils.js';
+import { UnknownActivityPayloadSchema, UnknownActivitySchema, } from './unknown.js';
+describe('Activity Schema - Unknown', () => {
+    describe('UnknownActivitySchema', () => {
+        test('should accept complete unknown activity', () => {
+            const activity = {
+                id: generateActivityId(),
+                type: 'unknown',
+                message: 'Unrecognized activity detected',
+                performedBy: {
+                    type: 'guest',
+                    identifier: 'anonymous-user',
+                },
+                source: 'external-webhook',
+                isMutateable: true,
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                metadata: { webhook_source: 'third-party', event_type: 'custom' },
+            };
+            const result = UnknownActivitySchema.safeParse(activity);
+            // Parse succeeds for valid data
+        });
+        test('should accept unknown activity with system performer', () => {
+            const activity = {
+                id: generateActivityId(),
+                type: 'unknown',
+                message: 'System detected unexpected behavior',
+                performedBy: {
+                    type: 'system',
+                    identifier: 'anomaly-detector',
+                },
+                source: 'monitoring-service',
+                isMutateable: false,
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                metadata: { severity: 'low', category: 'anomaly' },
+            };
+            const result = UnknownActivitySchema.safeParse(activity);
+            // Parse succeeds for valid data
+        });
+        test('should accept unknown activity with integration performer', () => {
+            const activity = {
+                id: generateActivityId(),
+                type: 'unknown',
+                message: 'Received unknown event from integration',
+                performedBy: {
+                    type: 'integration',
+                    identifier: 'webhook-handler',
+                },
+                source: 'api-gateway',
+                isMutateable: true,
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                metadata: {
+                    integration: 'external-crm',
+                    event: 'unknown_event_type',
+                    raw_data: '{"type":"unknown","data":{}}',
+                },
+            };
+            const result = UnknownActivitySchema.safeParse(activity);
+            // Parse succeeds for valid data
+        });
+        test('should accept unknown activity with optional fields', () => {
+            const activity = {
+                id: generateActivityId(),
+                type: 'unknown',
+                message: 'Legacy system activity logged',
+                performedBy: {
+                    type: 'automation',
+                    identifier: 'legacy-bridge',
+                },
+                source: 'legacy-system',
+                isMutateable: true,
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                deletedAt: new Date(),
+                deactivatedAt: new Date(),
+                metadata: {
+                    legacy_id: 'old_system_123',
+                    migrated: false,
+                },
+            };
+            const result = UnknownActivitySchema.safeParse(activity);
+            // Parse succeeds for valid data
+        });
+        test('should reject unknown activity with wrong type', () => {
+            const activity = {
+                id: generateActivityId(),
+                type: 'note',
+                message: 'Wrong type activity',
+                performedBy: {
+                    type: 'guest',
+                    identifier: 'anonymous',
+                },
+                source: 'test',
+                isMutateable: true,
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                metadata: {},
+            };
+            const result = UnknownActivitySchema.safeParse(activity);
+            expect(result.success).toBe(false);
+        });
+        test('should reject unknown activity missing message', () => {
+            const activity = {
+                id: generateActivityId(),
+                type: 'unknown',
+                // missing message
+                performedBy: {
+                    type: 'guest',
+                    identifier: 'anonymous',
+                },
+                source: 'test',
+                isMutateable: true,
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                metadata: {},
+            };
+            const result = UnknownActivitySchema.safeParse(activity);
+            expect(result.success).toBe(false);
+        });
+        test('should reject unknown activity with non-string message', () => {
+            const activity = {
+                id: generateActivityId(),
+                type: 'unknown',
+                message: 123,
+                performedBy: {
+                    type: 'guest',
+                    identifier: 'anonymous',
+                },
+                source: 'test',
+                isMutateable: true,
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                metadata: {},
+            };
+            const result = UnknownActivitySchema.safeParse(activity);
+            expect(result.success).toBe(false);
+        });
+        test('should reject unknown activity missing required base fields', () => {
+            const activity = {
+                id: generateActivityId(),
+                type: 'unknown',
+                message: 'Test message',
+                // missing performedBy, source, isMutateable, dates, metadata
+            };
+            const result = UnknownActivitySchema.safeParse(activity);
+            expect(result.success).toBe(false);
+        });
+    });
+    describe('UnknownActivityPayloadSchema', () => {
+        test('should accept complete unknown activity payload', () => {
+            const payload = {
+                id: generateActivityId(),
+                type: 'unknown',
+                message: 'Unknown event from external source',
+                performedBy: {
+                    type: 'integration',
+                    identifier: 'webhook-processor',
+                },
+                source: 'external-api',
+                isMutateable: true,
+                createdAt: new Date().toISOString(),
+                updatedAt: new Date().toISOString(),
+                metadata: {
+                    source_system: 'partner-api',
+                    event_id: 'evt_123456',
+                    processed: false,
+                },
+            };
+            const result = UnknownActivityPayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.data).toEqual(payload);
+        });
+        test('should accept minimal unknown activity payload', () => {
+            const payload = {
+                id: generateActivityId(),
+                type: 'unknown',
+                message: 'Simple unknown event',
+                performedBy: {
+                    type: 'guest',
+                    identifier: 'anonymous',
+                },
+                source: 'unknown-source',
+                isMutateable: false,
+                createdAt: new Date().toISOString(),
+                updatedAt: new Date().toISOString(),
+                metadata: {},
+            };
+            const result = UnknownActivityPayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+        });
+        test('should accept payload with optional date fields', () => {
+            const payload = {
+                id: generateActivityId(),
+                type: 'unknown',
+                message: 'Archived unknown activity',
+                performedBy: {
+                    type: 'system',
+                    identifier: 'archival-service',
+                },
+                source: 'data-cleanup',
+                isMutateable: false,
+                createdAt: new Date().toISOString(),
+                updatedAt: new Date().toISOString(),
+                deletedAt: new Date().toISOString(),
+                deactivatedAt: new Date().toISOString(),
+                metadata: {
+                    archived: true,
+                    retention_policy: 'long_term',
+                },
+            };
+            const result = UnknownActivityPayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+        });
+        test('should reject payload with invalid date format', () => {
+            const payload = {
+                id: generateActivityId(),
+                type: 'unknown',
+                message: 'Test unknown activity',
+                performedBy: {
+                    type: 'guest',
+                    identifier: 'anonymous',
+                },
+                source: 'test',
+                isMutateable: true,
+                createdAt: 'invalid-date-format',
+                updatedAt: new Date().toISOString(),
+                metadata: {},
+            };
+            const result = UnknownActivityPayloadSchema.safeParse(payload);
+            expect(result.success).toBe(false);
+        });
+        test('should reject payload with wrong type', () => {
+            const payload = {
+                id: generateActivityId(),
+                type: 'operation',
+                message: 'Wrong type payload',
+                performedBy: {
+                    type: 'guest',
+                    identifier: 'anonymous',
+                },
+                source: 'test',
+                isMutateable: true,
+                createdAt: new Date().toISOString(),
+                updatedAt: new Date().toISOString(),
+                metadata: {},
+            };
+            const result = UnknownActivityPayloadSchema.safeParse(payload);
+            expect(result.success).toBe(false);
+        });
+        test('should reject payload missing message', () => {
+            const payload = {
+                id: generateActivityId(),
+                type: 'unknown',
+                // missing message
+                performedBy: {
+                    type: 'guest',
+                    identifier: 'anonymous',
+                },
+                source: 'test',
+                isMutateable: true,
+                createdAt: new Date().toISOString(),
+                updatedAt: new Date().toISOString(),
+                metadata: {},
+            };
+            const result = UnknownActivityPayloadSchema.safeParse(payload);
+            expect(result.success).toBe(false);
+        });
+    });
+});

package/dist/esm/activity/schema/utils.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=utils.test.d.ts.map

package/dist/esm/activity/schema/utils.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.test.d.ts","sourceRoot":"","sources":["../../../../src/activity/schema/utils.test.ts"],"names":[],"mappings":""}

package/dist/esm/activity/schema/utils.test.js

@@ -0,0 +1,24 @@
+import { describe, expect, test } from 'vitest';
+import { Model, generateActivityId } from './utils.js';
+describe('Activity Schema - Utils', () => {
+    describe('Model constants', () => {
+        test('should have correct UID prefix', () => {
+            expect(Model.Activity.UIDPrefix).toBe('act');
+        });
+    });
+    describe('generateActivityId', () => {
+        test('should generate ID with correct prefix', () => {
+            const id = generateActivityId();
+            expect(id).toMatch(/^act_[A-Za-z0-9]+$/);
+        });
+        test('should generate unique IDs', () => {
+            const id1 = generateActivityId();
+            const id2 = generateActivityId();
+            expect(id1).not.toBe(id2);
+        });
+        test('should generate IDs with correct length', () => {
+            const id = generateActivityId();
+            expect(id.length).toBeGreaterThan(4); // prefix + underscore + KSUID
+        });
+    });
+});

package/dist/esm/app/authorization/resources.d.ts

@@ -0,0 +1,12 @@
+import type { MondoIdentity } from '../../common/resources/init.js';
+import { type Authorization, type UpsertAuthorizationInput } from './schema.js';
+export declare class AuthorizationResources {
+    private readonly instance;
+    constructor(instance: MondoIdentity);
+    static buildPath(appId: string): string;
+    getItem(id: string): Promise<Authorization>;
+    upsertItem(appId: string, item: UpsertAuthorizationInput): Promise<Authorization>;
+}
+export declare function getAuthorization(instance: MondoIdentity, appId: string): Promise<Authorization>;
+export declare function upsertAuthorization(instance: MondoIdentity, appId: string, item: UpsertAuthorizationInput): Promise<Authorization>;
+//# sourceMappingURL=resources.d.ts.map

package/dist/esm/app/authorization/resources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../../../src/app/authorization/resources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAMpE,OAAO,EACL,KAAK,aAAa,EAElB,KAAK,wBAAwB,EAE9B,MAAM,aAAa,CAAC;AAIrB,qBAAa,sBAAsB;IACd,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,aAAa;IAE3D,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAIhC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAI3C,UAAU,CACf,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,aAAa,CAAC;CAG1B;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,aAAa,EACvB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,aAAa,CAAC,CAOxB;AAED,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,aAAa,EACvB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,aAAa,CAAC,CAQxB"}

package/dist/esm/app/authorization/resources.js

@@ -0,0 +1,25 @@
+import { getItemWithAuthorization, updateItemWithAuthorization, } from '../../common/resources/operations.js';
+import { PATH } from '../resources.js';
+import { AuthorizationSchema, UpsertAuthorizationPayloadSchema, } from './schema.js';
+const RESOURCE = 'authorization';
+export class AuthorizationResources {
+    instance;
+    constructor(instance) {
+        this.instance = instance;
+    }
+    static buildPath(appId) {
+        return [PATH, appId, RESOURCE].filter(Boolean).join('/');
+    }
+    getItem(id) {
+        return getAuthorization(this.instance, id);
+    }
+    upsertItem(appId, item) {
+        return upsertAuthorization(this.instance, appId, item);
+    }
+}
+export async function getAuthorization(instance, appId) {
+    return AuthorizationSchema.parse(await getItemWithAuthorization(new URL(AuthorizationResources.buildPath(appId), instance.config.host), instance.authorizer));
+}
+export async function upsertAuthorization(instance, appId, item) {
+    return AuthorizationSchema.parse(await updateItemWithAuthorization(new URL(AuthorizationResources.buildPath(appId), instance.config.host), instance.authorizer, UpsertAuthorizationPayloadSchema.parse(item)));
+}

package/dist/esm/app/authorization/schema.d.ts

@@ -0,0 +1,98 @@
+import { z } from 'zod';
+import { type AnyGrantType } from '../../oauth/common/schema.js';
+export declare const AuthorizationSchema: z.ZodObject<{
+    metadata: z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Map<string, string | number | boolean>, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>;
+    loginUri: z.ZodOptional<z.ZodUnion<readonly [z.ZodURL, z.ZodUndefined]>>;
+    callbackUrls: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodArray<z.ZodPipe<z.ZodURL, z.ZodTransform<URL, string>>>, z.ZodCustom<Set<URL>, Set<URL>>]>, z.ZodTransform<Set<URL> | undefined, Set<URL> | URL[] | undefined>>>;
+    availableAudiences: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodPipe<z.ZodArray<z.ZodString>, z.ZodTransform<string[], string[]>>, z.ZodCustom<Set<string>, Set<string>>]>, z.ZodTransform<Set<string> | undefined, Set<string> | string[] | undefined>>>;
+    availableGrants: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodArray<z.ZodEnum<{
+        client_credentials: "client_credentials";
+        authorization_code: "authorization_code";
+        implicit: "implicit";
+        refresh_token: "refresh_token";
+    }>>, z.ZodCustom<Set<AnyGrantType>, Set<AnyGrantType>>]>, z.ZodTransform<Set<AnyGrantType> | undefined, Set<AnyGrantType> | ("client_credentials" | "authorization_code" | "implicit" | "refresh_token")[] | undefined>>>;
+    defaultAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodUndefined]>>;
+    updatedAt: z.ZodOptional<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>>;
+    deletedAt: z.ZodOptional<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>>;
+    deactivatedAt: z.ZodOptional<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>>;
+    refreshTokenDuration: z.ZodDefault<z.ZodNumber>;
+    accessTokenDuration: z.ZodDefault<z.ZodNumber>;
+    accessTokenSignatureAlgorithm: z.ZodDefault<z.ZodEnum<{
+        RS256: "RS256";
+        HS256: "HS256";
+        HS384: "HS384";
+        HS512: "HS512";
+        RS384: "RS384";
+        RS512: "RS512";
+        ES256: "ES256";
+        ES384: "ES384";
+        PS256: "PS256";
+        PS384: "PS384";
+        PS512: "PS512";
+    }>>;
+}, z.core.$strip>;
+export type AuthorizationProperties = z.input<typeof AuthorizationSchema>;
+export type Authorization = z.output<typeof AuthorizationSchema>;
+export declare const AuthorizationPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    loginUri: z.ZodOptional<z.ZodUnion<readonly [z.ZodURL, z.ZodUndefined]>>;
+    callbackUrls: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodArray<z.ZodPipe<z.ZodURL, z.ZodTransform<URL, string>>>, z.ZodCustom<Set<URL>, Set<URL>>]>, z.ZodTransform<URL[] | undefined, Set<URL> | URL[] | undefined>>>;
+    availableAudiences: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodPipe<z.ZodArray<z.ZodString>, z.ZodTransform<string[], string[]>>, z.ZodCustom<Set<string>, Set<string>>]>, z.ZodTransform<string[] | undefined, Set<string> | string[] | undefined>>>;
+    availableGrants: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodArray<z.ZodEnum<{
+        client_credentials: "client_credentials";
+        authorization_code: "authorization_code";
+        implicit: "implicit";
+        refresh_token: "refresh_token";
+    }>>, z.ZodCustom<Set<AnyGrantType>, Set<AnyGrantType>>]>, z.ZodTransform<("client_credentials" | "authorization_code" | "implicit" | "refresh_token")[] | undefined, Set<AnyGrantType> | ("client_credentials" | "authorization_code" | "implicit" | "refresh_token")[] | undefined>>>;
+    defaultAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodUndefined]>>;
+    updatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    deletedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    deactivatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    refreshTokenDuration: z.ZodDefault<z.ZodNumber>;
+    accessTokenDuration: z.ZodDefault<z.ZodNumber>;
+    accessTokenSignatureAlgorithm: z.ZodDefault<z.ZodEnum<{
+        RS256: "RS256";
+        HS256: "HS256";
+        HS384: "HS384";
+        HS512: "HS512";
+        RS384: "RS384";
+        RS512: "RS512";
+        ES256: "ES256";
+        ES384: "ES384";
+        PS256: "PS256";
+        PS384: "PS384";
+        PS512: "PS512";
+    }>>;
+}, z.core.$strip>;
+export type AuthorizationPayload = z.output<typeof AuthorizationPayloadSchema>;
+export declare const UpsertAuthorizationPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | null | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    loginUri: z.ZodOptional<z.ZodUnion<readonly [z.ZodURL, z.ZodUndefined]>>;
+    callbackUrls: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodArray<z.ZodPipe<z.ZodURL, z.ZodTransform<URL, string>>>, z.ZodCustom<Set<URL>, Set<URL>>]>, z.ZodTransform<URL[] | undefined, Set<URL> | URL[] | undefined>>>;
+    availableAudiences: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodPipe<z.ZodArray<z.ZodString>, z.ZodTransform<string[], string[]>>, z.ZodCustom<Set<string>, Set<string>>]>, z.ZodTransform<string[] | undefined, Set<string> | string[] | undefined>>>;
+    availableGrants: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodArray<z.ZodEnum<{
+        client_credentials: "client_credentials";
+        authorization_code: "authorization_code";
+        implicit: "implicit";
+        refresh_token: "refresh_token";
+    }>>, z.ZodCustom<Set<AnyGrantType>, Set<AnyGrantType>>]>, z.ZodTransform<("client_credentials" | "authorization_code" | "implicit" | "refresh_token")[] | undefined, Set<AnyGrantType> | ("client_credentials" | "authorization_code" | "implicit" | "refresh_token")[] | undefined>>>;
+    defaultAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodUndefined]>>;
+    refreshTokenDuration: z.ZodDefault<z.ZodNumber>;
+    accessTokenDuration: z.ZodDefault<z.ZodNumber>;
+    accessTokenSignatureAlgorithm: z.ZodDefault<z.ZodEnum<{
+        RS256: "RS256";
+        HS256: "HS256";
+        HS384: "HS384";
+        HS512: "HS512";
+        RS384: "RS384";
+        RS512: "RS512";
+        ES256: "ES256";
+        ES384: "ES384";
+        PS256: "PS256";
+        PS384: "PS384";
+        PS512: "PS512";
+    }>>;
+}, z.core.$strip>;
+export type UpsertAuthorizationInput = z.input<typeof UpsertAuthorizationPayloadSchema>;
+export type UpsertAuthorizationPayload = z.output<typeof UpsertAuthorizationPayloadSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/esm/app/authorization/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/app/authorization/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB,OAAO,EAAE,KAAK,YAAY,EAAa,MAAM,8BAA8B,CAAC;AA0D5E,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAW9B,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAC1E,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEjE,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAWrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE/E,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAQ3C,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,gCAAgC,CACxC,CAAC;AACF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAC/C,OAAO,gCAAgC,CACxC,CAAC"}

package/dist/esm/app/authorization/schema.js

@@ -0,0 +1,79 @@
+import { z } from 'zod';
+import { OptionalDatePayloadSchema, OptionalDateSchema, } from '../../common/schema/dates.js';
+import { MetadataMapPropertySchema, MetadataPayloadPropertySchema, UpsertMetadataPropertyPayloadSchema, } from '../../common/schema/metadata.js';
+import { GrantType } from '../../oauth/common/schema.js';
+import { AuthorizationPayloadSchema as WorkspaceAuthorizationPayloadSchema } from '../../workspace/authorization/schema.js';
+const UrlSetSchema = z.instanceof((Set));
+const UrlArrayScheama = z.array(z.url().pipe(z.transform((url) => new URL(url))));
+const StringSetSchema = z.instanceof((Set));
+// const UrlStringSchema = type('string.url[]').pipe((v) => v?.filter((i) => !!i));
+const StringSchema = z
+    .array(z.string())
+    .pipe(z.transform((v) => v?.filter((i) => !!i)));
+// const CallbackUrlsSchema = type('undefined')
+//   .or(UrlArrayScheama)
+//   .or(UrlSetSchema)
+//   .pipe((v) => (v instanceof Set ? Array.from(v.values()) : v));
+const CallbackUrlArraySchema = z
+    .union([z.undefined(), UrlArrayScheama, UrlSetSchema])
+    .pipe(z.transform((v) => (v instanceof Set ? Array.from(v.values()) : v)));
+const CallbackUrlSetSchema = z
+    .union([z.undefined(), UrlArrayScheama, UrlSetSchema])
+    .pipe(z.transform((v) => (!v || v instanceof Set ? v : new Set(v))));
+const AvailableAudienceArraySchema = z
+    .union([z.undefined(), StringSchema, StringSetSchema])
+    .pipe(z.transform((v) => (v instanceof Set ? Array.from(v.values()) : v)));
+const AvailableAudienceSetSchema = z
+    .union([z.undefined(), StringSchema, StringSetSchema])
+    .pipe(z.transform((v) => (!v || v instanceof Set ? v : new Set(v))));
+const GrantSetSchema = z.instanceof((Set));
+const GrantArraySchema = z.array(z.enum([
+    GrantType.AUTHORIZATION_CODE,
+    GrantType.CLIENT_CREDENTIALS,
+    GrantType.IMPLICIT,
+    GrantType.REFRESH_TOKEN,
+]));
+const AvailableGrantSetSchema = z
+    .union([z.undefined(), GrantArraySchema, GrantSetSchema])
+    .pipe(z.transform((v) => (!v || v instanceof Set ? v : new Set(v))));
+const AvailableGrantArraySchema = z
+    .union([z.undefined(), GrantArraySchema, GrantSetSchema])
+    .pipe(z.transform((v) => (v instanceof Set ? Array.from(v.values()) : v)));
+const BaseAuthorization = WorkspaceAuthorizationPayloadSchema.pick({
+    refreshTokenDuration: true,
+    accessTokenDuration: true,
+    accessTokenSignatureAlgorithm: true,
+});
+export const AuthorizationSchema = z.object({
+    ...BaseAuthorization.shape,
+    loginUri: z.union([z.url(), z.undefined()]).optional(),
+    callbackUrls: CallbackUrlSetSchema.optional(),
+    availableAudiences: AvailableAudienceSetSchema.optional(),
+    availableGrants: AvailableGrantSetSchema.optional(),
+    defaultAudience: z.union([z.string(), z.undefined()]).optional(),
+    updatedAt: OptionalDateSchema.optional(),
+    deletedAt: OptionalDateSchema.optional(),
+    deactivatedAt: OptionalDateSchema.optional(),
+    ...MetadataMapPropertySchema.shape,
+});
+export const AuthorizationPayloadSchema = z.object({
+    ...BaseAuthorization.shape,
+    loginUri: z.union([z.url(), z.undefined()]).optional(),
+    callbackUrls: CallbackUrlArraySchema.optional(),
+    availableAudiences: AvailableAudienceArraySchema.optional(),
+    availableGrants: AvailableGrantArraySchema.optional(),
+    defaultAudience: z.union([z.string(), z.undefined()]).optional(),
+    updatedAt: OptionalDatePayloadSchema.optional(),
+    deletedAt: OptionalDatePayloadSchema.optional(),
+    deactivatedAt: OptionalDatePayloadSchema.optional(),
+    ...MetadataPayloadPropertySchema.shape,
+});
+export const UpsertAuthorizationPayloadSchema = z.object({
+    ...BaseAuthorization.shape,
+    loginUri: z.union([z.url(), z.undefined()]).optional(),
+    callbackUrls: CallbackUrlArraySchema.optional(),
+    availableAudiences: AvailableAudienceArraySchema.optional(),
+    availableGrants: AvailableGrantArraySchema.optional(),
+    defaultAudience: z.union([z.string(), z.undefined()]).optional(),
+    ...UpsertMetadataPropertyPayloadSchema.shape,
+});

package/dist/esm/app/authorization/schema.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=schema.test.d.ts.map

package/dist/esm/app/authorization/schema.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.test.d.ts","sourceRoot":"","sources":["../../../../src/app/authorization/schema.test.ts"],"names":[],"mappings":""}