@go-mondo/identity-sdk 0.0.2-beta.1 → 0.0.2-beta.13

package/dist/esm/oauth/token/schema/schema.test.js

@@ -0,0 +1,134 @@
+import { describe, expect, test } from 'vitest';
+import { generateAppId } from '../../../app/utils.js';
+import { Schema } from './schema.js';
+describe('OAuth Token - Schema', () => {
+    describe('Schema union', () => {
+        test('should accept authorization code grant', () => {
+            const payload = {
+                grant_type: 'authorization_code',
+                code: 'auth_code_123',
+                client_id: generateAppId(),
+                redirect_uri: 'https://example.com/callback',
+            };
+            const result = Schema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.success).toBe(true);
+            if (result.success) {
+                expect(result.data).toEqual(payload);
+            }
+        });
+        test('should accept authorization code with PKCE', () => {
+            const payload = {
+                grant_type: 'authorization_code',
+                code: 'auth_code_123',
+                client_id: generateAppId(),
+                redirect_uri: 'https://example.com/callback',
+                code_verifier: 'pkce_verifier_123',
+            };
+            const result = Schema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.success).toBe(true);
+            if (result.success) {
+                expect(result.data).toEqual(payload);
+            }
+        });
+        test('should accept authorization code with client secret', () => {
+            const payload = {
+                grant_type: 'authorization_code',
+                code: 'auth_code_123',
+                client_id: generateAppId(),
+                client_secret: 'secret_123',
+                redirect_uri: 'https://example.com/callback',
+            };
+            const result = Schema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.success).toBe(true);
+            if (result.success) {
+                expect(result.data).toEqual(payload);
+            }
+        });
+        test('should accept client credentials grant', () => {
+            const payload = {
+                grant_type: 'client_credentials',
+                client_id: generateAppId(),
+                client_secret: 'secret_123',
+                scope: 'read write',
+            };
+            const result = Schema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.success).toBe(true);
+            if (result.success) {
+                expect(result.data).toEqual(payload);
+            }
+        });
+        test('should accept refresh token grant', () => {
+            const payload = {
+                grant_type: 'refresh_token',
+                refresh_token: 'refresh_token_123',
+                client_id: generateAppId(),
+                client_secret: 'secret_123',
+                scope: 'read',
+            };
+            const result = Schema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.success).toBe(true);
+            if (result.success) {
+                expect(result.data).toEqual(payload);
+            }
+        });
+        test('should reject invalid grant type', () => {
+            const payload = {
+                grant_type: 'invalid_grant',
+                code: 'auth_code_123',
+                client_id: generateAppId(),
+                redirect_uri: 'https://example.com/callback',
+            };
+            const result = Schema.safeParse(payload);
+            expect(result.success).toBe(false);
+        });
+        test('should reject authorization code without required fields', () => {
+            const payload = {
+                grant_type: 'authorization_code',
+                client_id: generateAppId(),
+                // missing code and redirect_uri
+            };
+            const result = Schema.safeParse(payload);
+            expect(result.success).toBe(false);
+        });
+        test('should reject invalid redirect URI', () => {
+            const payload = {
+                grant_type: 'authorization_code',
+                code: 'auth_code_123',
+                client_id: generateAppId(),
+                redirect_uri: 'not-a-valid-url',
+            };
+            const result = Schema.safeParse(payload);
+            expect(result.success).toBe(false);
+        });
+        test('should reject client credentials without required fields', () => {
+            const payload = {
+                grant_type: 'client_credentials',
+                client_id: generateAppId(),
+                // missing client_secret
+            };
+            const result = Schema.safeParse(payload);
+            expect(result.success).toBe(false);
+        });
+        test('should reject refresh token without required fields', () => {
+            const payload = {
+                grant_type: 'refresh_token',
+                client_id: 'app_123',
+                // missing refresh_token and client_secret
+            };
+            const result = Schema.safeParse(payload);
+            expect(result.success).toBe(false);
+        });
+        test('should reject completely invalid payload', () => {
+            const payload = {
+                invalid: 'data',
+            };
+            const result = Schema.safeParse(payload);
+            expect(result.success).toBe(false);
+        });
+    });
+});

package/dist/esm/workspace/authorization/schema.d.ts

@@ -0,0 +1,48 @@
+import { z } from 'zod';
+export declare const DEFAULT_SESSION_DURATION: number;
+export declare const DEFAULT_REFRESH_TOKEN_DURATION: number;
+export declare const DEFAULT_ACCESS_TOKEN_DURATION: number;
+export declare const AuthorizationPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    updatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    deletedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    deactivatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    sessionDuration: z.ZodDefault<z.ZodNumber>;
+    refreshTokenDuration: z.ZodDefault<z.ZodNumber>;
+    accessTokenDuration: z.ZodDefault<z.ZodNumber>;
+    accessTokenSignatureAlgorithm: z.ZodDefault<z.ZodEnum<{
+        RS256: "RS256";
+        HS256: "HS256";
+        HS384: "HS384";
+        HS512: "HS512";
+        RS384: "RS384";
+        RS512: "RS512";
+        ES256: "ES256";
+        ES384: "ES384";
+        PS256: "PS256";
+        PS384: "PS384";
+        PS512: "PS512";
+    }>>;
+}, z.core.$strip>;
+export type AuthorizationPayload = z.output<typeof AuthorizationPayloadSchema>;
+export declare const UpsertAuthorizationPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    sessionDuration: z.ZodDefault<z.ZodNumber>;
+    refreshTokenDuration: z.ZodDefault<z.ZodNumber>;
+    accessTokenDuration: z.ZodDefault<z.ZodNumber>;
+    accessTokenSignatureAlgorithm: z.ZodDefault<z.ZodEnum<{
+        RS256: "RS256";
+        HS256: "HS256";
+        HS384: "HS384";
+        HS512: "HS512";
+        RS384: "RS384";
+        RS512: "RS512";
+        ES256: "ES256";
+        ES384: "ES384";
+        PS256: "PS256";
+        PS384: "PS384";
+        PS512: "PS512";
+    }>>;
+}, z.core.$strip>;
+export type UpsertAuthorizationPayload = z.output<typeof UpsertAuthorizationPayloadSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/esm/workspace/authorization/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/workspace/authorization/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,eAAO,MAAM,wBAAwB,QAAc,CAAC;AACpD,eAAO,MAAM,8BAA8B,QAAoB,CAAC;AAChE,eAAO,MAAM,6BAA6B,QAAc,CAAC;AASzD,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;iBAMrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE/E,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;iBAG3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAC/C,OAAO,gCAAgC,CACxC,CAAC"}

package/dist/esm/workspace/authorization/schema.js

@@ -0,0 +1,24 @@
+import { z } from 'zod';
+import { OptionalDatePayloadSchema } from '../../common/schema/dates.js';
+import { Algorithm, AlgorithmSchema } from '../../common/schema/jwt.js';
+import { MetadataPayloadPropertySchema } from '../../common/schema/metadata.js';
+export const DEFAULT_SESSION_DURATION = 60 * 60 * 4; // 4 hour
+export const DEFAULT_REFRESH_TOKEN_DURATION = 60 * 60 * 24 * 14; // 14 days
+export const DEFAULT_ACCESS_TOKEN_DURATION = 60 * 60 * 2; // 2 hours
+const BaseAttributes = z.object({
+    sessionDuration: z.number().default(DEFAULT_SESSION_DURATION),
+    refreshTokenDuration: z.number().default(DEFAULT_REFRESH_TOKEN_DURATION),
+    accessTokenDuration: z.number().default(DEFAULT_ACCESS_TOKEN_DURATION),
+    accessTokenSignatureAlgorithm: AlgorithmSchema.default(Algorithm.DEFAULT),
+});
+export const AuthorizationPayloadSchema = z.object({
+    ...BaseAttributes.shape,
+    updatedAt: OptionalDatePayloadSchema.optional(),
+    deletedAt: OptionalDatePayloadSchema.optional(),
+    deactivatedAt: OptionalDatePayloadSchema.optional(),
+    ...MetadataPayloadPropertySchema.shape,
+});
+export const UpsertAuthorizationPayloadSchema = z.object({
+    ...BaseAttributes.shape,
+    ...MetadataPayloadPropertySchema.shape,
+});

package/dist/esm/workspace/branding/schema.d.ts

@@ -0,0 +1,31 @@
+import { z } from 'zod';
+export declare const BrandingPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    updatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    deletedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    deactivatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    logo: z.ZodOptional<z.ZodObject<{
+        dark: z.ZodOptional<z.ZodURL>;
+        light: z.ZodOptional<z.ZodURL>;
+        email: z.ZodOptional<z.ZodURL>;
+    }, z.core.$strip>>;
+    color: z.ZodOptional<z.ZodObject<{
+        link: z.ZodOptional<z.ZodString>;
+        linkHover: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type BrandingPayload = z.output<typeof BrandingPayloadSchema>;
+export declare const UpsertBrandingPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    logo: z.ZodOptional<z.ZodObject<{
+        dark: z.ZodOptional<z.ZodURL>;
+        light: z.ZodOptional<z.ZodURL>;
+        email: z.ZodOptional<z.ZodURL>;
+    }, z.core.$strip>>;
+    color: z.ZodOptional<z.ZodObject<{
+        link: z.ZodOptional<z.ZodString>;
+        linkHover: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type UpsertBrandingPayload = z.output<typeof UpsertBrandingPayloadSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/esm/workspace/branding/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/workspace/branding/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAoBxB,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;iBAMhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAErE,eAAO,MAAM,2BAA2B;;;;;;;;;;;iBAGtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAC1C,OAAO,2BAA2B,CACnC,CAAC"}

package/dist/esm/workspace/branding/schema.js

@@ -0,0 +1,27 @@
+import { z } from 'zod';
+import { OptionalDatePayloadSchema } from '../../common/schema/dates.js';
+import { MetadataPayloadPropertySchema } from '../../common/schema/metadata.js';
+const LogoSchema = z.object({
+    dark: z.url().optional(),
+    light: z.url().optional(),
+    email: z.url().optional(),
+});
+const ColorSchema = z.object({
+    link: z.string().optional(),
+    linkHover: z.string().optional(),
+});
+const BaseAttributes = z.object({
+    logo: LogoSchema.optional(),
+    color: ColorSchema.optional(),
+});
+export const BrandingPayloadSchema = z.object({
+    ...BaseAttributes.shape,
+    updatedAt: OptionalDatePayloadSchema.optional(),
+    deletedAt: OptionalDatePayloadSchema.optional(),
+    deactivatedAt: OptionalDatePayloadSchema.optional(),
+    ...MetadataPayloadPropertySchema.shape,
+});
+export const UpsertBrandingPayloadSchema = z.object({
+    ...BaseAttributes.shape,
+    ...MetadataPayloadPropertySchema.shape,
+});

package/dist/esm/workspace/index.d.ts

@@ -1,2 +1,9 @@
-export * from './schema/schema.js';
+export * from './authorization/schema.js';
+export * from './branding/schema.js';
+export * from './membership/schema.js';
+export * from './registration/schema.js';
+export * from './settings/schema.js';
+export * from './tenant/schema.js';
+export * from './user/schema.js';
+export * from './utils.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/esm/workspace/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/workspace/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/workspace/index.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AAEjC,cAAc,YAAY,CAAC"}

package/dist/esm/workspace/index.js

@@ -1 +1,8 @@
-export * from './schema/schema.js';
+export * from './authorization/schema.js';
+export * from './branding/schema.js';
+export * from './membership/schema.js';
+export * from './registration/schema.js';
+export * from './settings/schema.js';
+export * from './tenant/schema.js';
+export * from './user/schema.js';
+export * from './utils.js';

package/dist/esm/workspace/membership/schema.d.ts

@@ -0,0 +1,26 @@
+import { z } from 'zod';
+export declare const FeatureFlag: {
+    readonly REMOVE_BRANDING: "Branding.Remove";
+};
+export type AnyFeatureFlag = (typeof FeatureFlag)[keyof typeof FeatureFlag];
+export declare const FeaturePayloadSchema: z.ZodObject<{
+    expiresAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+}, z.core.$strip>;
+export type FeaturePayload = z.output<typeof FeaturePayloadSchema>;
+export declare const FeaturesPayloadSchema: z.ZodObject<{
+    "Branding.Remove": z.ZodOptional<z.ZodObject<{
+        expiresAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type FeaturesPayload = z.output<typeof FeaturesPayloadSchema>;
+export declare const MembershipPayloadSchema: z.ZodObject<{
+    features: z.ZodOptional<z.ZodObject<{
+        "Branding.Remove": z.ZodOptional<z.ZodObject<{
+            expiresAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    startAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    endAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+}, z.core.$strip>;
+export type MembershipPayload = z.output<typeof MembershipPayloadSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/esm/workspace/membership/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/workspace/membership/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,eAAO,MAAM,WAAW;;CAEd,CAAC;AACX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAE5E,eAAO,MAAM,oBAAoB;;iBAE/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEnE,eAAO,MAAM,qBAAqB;;;;iBAEhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAErE,eAAO,MAAM,uBAAuB;;;;;;;;iBAIlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC"}

package/dist/esm/workspace/{schema/membership.js → membership/schema.js}

@@ -1,16 +1,16 @@
-import { type } from 'arktype';
+import { z } from 'zod';
 import { OptionalDatePayloadSchema, RequiredDatePayloadSchema, } from '../../common/schema/dates.js';
 export const FeatureFlag = {
     REMOVE_BRANDING: 'Branding.Remove',
 };
-export const FeaturePayloadSchema = type({
+export const FeaturePayloadSchema = z.object({
     expiresAt: RequiredDatePayloadSchema,
 });
-export const FeaturesPayloadSchema = type({
+export const FeaturesPayloadSchema = z.object({
     [FeatureFlag.REMOVE_BRANDING]: FeaturePayloadSchema.optional(),
 });
-export const MembershipPayloadSchema = type({
+export const MembershipPayloadSchema = z.object({
     features: FeaturesPayloadSchema.optional(),
-    'startAt?': OptionalDatePayloadSchema,
-    'endAt?': OptionalDatePayloadSchema,
+    startAt: OptionalDatePayloadSchema.optional(),
+    endAt: OptionalDatePayloadSchema.optional(),
 });

package/dist/esm/workspace/registration/schema.d.ts

@@ -0,0 +1,27 @@
+import { z } from 'zod';
+export declare const RegistrationPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    allowSelfRegistration: z.ZodBoolean;
+    identifiers: z.ZodArray<z.ZodObject<{
+        type: z.ZodEnum<{
+            email: "email";
+            phoneNumber: "phoneNumber";
+        }>;
+    }, z.core.$strip>>;
+    updatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    deletedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    deactivatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+}, z.core.$strip>;
+export type RegistrationPayload = z.output<typeof RegistrationPayloadSchema>;
+export declare const UpsertRegistrationPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    allowSelfRegistration: z.ZodOptional<z.ZodBoolean>;
+    identifiers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        type: z.ZodEnum<{
+            email: "email";
+            phoneNumber: "phoneNumber";
+        }>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type UpsertRegistrationPayload = z.output<typeof UpsertRegistrationPayloadSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/esm/workspace/registration/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/workspace/registration/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAaxB,eAAO,MAAM,yBAAyB;;;;;;;;;;;;iBAQpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE7E,eAAO,MAAM,+BAA+B;;;;;;;;;iBAI1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAC9C,OAAO,+BAA+B,CACvC,CAAC"}

package/dist/esm/workspace/registration/schema.js

@@ -0,0 +1,21 @@
+import { z } from 'zod';
+import { OptionalDatePayloadSchema } from '../../common/schema/dates.js';
+import { MetadataPayloadPropertySchema } from '../../common/schema/metadata.js';
+import { IdentityIdentifierSchema } from '../../identity/schema.js';
+const IdentityIdentifierPropertySchema = z.array(z.object({
+    type: IdentityIdentifierSchema,
+}));
+const AllowSelfRegistrationSchema = z.boolean();
+export const RegistrationPayloadSchema = z.object({
+    allowSelfRegistration: AllowSelfRegistrationSchema,
+    identifiers: IdentityIdentifierPropertySchema,
+    updatedAt: OptionalDatePayloadSchema.optional(),
+    deletedAt: OptionalDatePayloadSchema.optional(),
+    deactivatedAt: OptionalDatePayloadSchema.optional(),
+    ...MetadataPayloadPropertySchema.shape,
+});
+export const UpsertRegistrationPayloadSchema = z.object({
+    allowSelfRegistration: AllowSelfRegistrationSchema.optional(),
+    identifiers: IdentityIdentifierPropertySchema.optional(),
+    ...MetadataPayloadPropertySchema.shape,
+});

package/dist/esm/workspace/settings/schema.d.ts

@@ -0,0 +1,16 @@
+import { z } from 'zod';
+/**
+ * This isn't really being used yet...but some general settings would go here
+ */
+export declare const SettingsPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    updatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    deletedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    deactivatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+}, z.core.$strip>;
+export type SettingsPayload = z.output<typeof SettingsPayloadSchema>;
+export declare const UpsertSettingsPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+}, z.core.$strip>;
+export type UpsertSettingsPayload = z.output<typeof UpsertSettingsPayloadSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/esm/workspace/settings/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/workspace/settings/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;GAEG;AACH,eAAO,MAAM,qBAAqB;;;;;iBAKhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAErE,eAAO,MAAM,2BAA2B;;iBAAgC,CAAC;AACzE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAC1C,OAAO,2BAA2B,CACnC,CAAC"}

package/dist/esm/workspace/{schema/settings.js → settings/schema.js}

@@ -1,12 +1,13 @@
-import { type } from 'arktype';
+import { z } from 'zod';
 import { OptionalDatePayloadSchema } from '../../common/schema/dates.js';
 import { MetadataPayloadPropertySchema } from '../../common/schema/metadata.js';
 /**
  * This isn't really being used yet...but some general settings would go here
  */
-export const SettingsPayloadSchema = type({
-    'updatedAt?': OptionalDatePayloadSchema,
-    'deletedAt?': OptionalDatePayloadSchema,
-    'deactivatedAt?': OptionalDatePayloadSchema,
-}).and(MetadataPayloadPropertySchema);
+export const SettingsPayloadSchema = z.object({
+    updatedAt: OptionalDatePayloadSchema.optional(),
+    deletedAt: OptionalDatePayloadSchema.optional(),
+    deactivatedAt: OptionalDatePayloadSchema.optional(),
+    ...MetadataPayloadPropertySchema.shape,
+});
 export const UpsertSettingsPayloadSchema = MetadataPayloadPropertySchema;

package/dist/esm/workspace/settings/schema.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=schema.test.d.ts.map

package/dist/esm/workspace/settings/schema.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.test.d.ts","sourceRoot":"","sources":["../../../../src/workspace/settings/schema.test.ts"],"names":[],"mappings":""}

package/dist/esm/workspace/settings/schema.test.js

@@ -0,0 +1,70 @@
+import { describe, expect, test } from 'vitest';
+import { SettingsPayloadSchema, UpsertSettingsPayloadSchema, } from './schema.js';
+describe('Workspace Settings - Schema', () => {
+    describe('SettingsPayloadSchema', () => {
+        test('should accept complete settings payload', () => {
+            const payload = {
+                updatedAt: new Date().toISOString(),
+                deletedAt: new Date().toISOString(),
+                deactivatedAt: new Date().toISOString(),
+                metadata: { version: '1.0', theme: 'dark' },
+            };
+            const result = SettingsPayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.data).toEqual(payload);
+        });
+        test('should accept minimal settings payload', () => {
+            const payload = {
+                metadata: {},
+            };
+            const result = SettingsPayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.data).toEqual(payload);
+        });
+        test('should accept payload with some optional dates', () => {
+            const payload = {
+                updatedAt: new Date().toISOString(),
+                metadata: { lastModified: 'now' },
+            };
+            const result = SettingsPayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+        });
+        test('should accept payload with only metadata', () => {
+            const payload = {
+                metadata: {
+                    preferences: 'yes',
+                },
+            };
+            const result = SettingsPayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+        });
+        test('should reject invalid date format', () => {
+            const payload = {
+                updatedAt: 'invalid-date',
+                metadata: {},
+            };
+            const result = SettingsPayloadSchema.safeParse(payload);
+            expect(result.success).toBe(false);
+        });
+    });
+    describe('UpsertSettingsPayloadSchema', () => {
+        test('should accept metadata for upsert', () => {
+            const payload = {
+                metadata: {
+                    settings: 'light',
+                },
+            };
+            const result = UpsertSettingsPayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.data).toEqual(payload);
+        });
+        test('should accept empty metadata', () => {
+            const payload = {
+                metadata: {},
+            };
+            const result = UpsertSettingsPayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.data).toEqual(payload);
+        });
+    });
+});

package/dist/esm/workspace/tenant/schema.d.ts

@@ -0,0 +1,56 @@
+import { z } from 'zod';
+export declare const TenantIdSchema: z.ZodString;
+export type TenantId = z.output<typeof TenantIdSchema>;
+export declare const TenantIdPropertySchema: z.ZodObject<{
+    id: z.ZodString;
+}, z.core.$strip>;
+export declare const TenantPayloadSchema: z.ZodObject<{
+    handle: z.ZodString;
+    supportEmail: z.ZodOptional<z.ZodEmail>;
+    authHost: z.ZodOptional<z.ZodURL>;
+    membership: z.ZodOptional<z.ZodObject<{
+        features: z.ZodOptional<z.ZodObject<{
+            "Branding.Remove": z.ZodOptional<z.ZodObject<{
+                expiresAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        startAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+        endAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    }, z.core.$strip>>;
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    status: z.ZodDefault<z.ZodEnum<{
+        active: "active";
+        suspended: "suspended";
+    }>>;
+    name: z.ZodString;
+    createdAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+    updatedAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+    deletedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    deactivatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    id: z.ZodString;
+}, z.core.$strip>;
+export type TenantPayload = z.output<typeof TenantPayloadSchema>;
+export declare const InsertTenantPayloadSchema: z.ZodObject<{
+    id: z.ZodDefault<z.ZodString>;
+    handle: z.ZodDefault<z.ZodString>;
+    supportEmail: z.ZodOptional<z.ZodEmail>;
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | null | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    status: z.ZodOptional<z.ZodEnum<{
+        active: "active";
+        suspended: "suspended";
+    }>>;
+    name: z.ZodString;
+}, z.core.$strip>;
+export type InsertTenantPayload = z.output<typeof InsertTenantPayloadSchema>;
+export declare const UpdateTenantPayloadSchema: z.ZodObject<{
+    handle: z.ZodOptional<z.ZodString>;
+    supportEmail: z.ZodOptional<z.ZodEmail>;
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | null | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    status: z.ZodOptional<z.ZodUnion<[z.ZodEnum<{
+        active: "active";
+        suspended: "suspended";
+    }>, z.ZodNull]>>;
+    name: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodNull]>>;
+}, z.core.$strip>;
+export type UpdateTenantPayload = z.output<typeof UpdateTenantPayloadSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/esm/workspace/tenant/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/workspace/tenant/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB,eAAO,MAAM,cAAc,aAAsC,CAAC;AAClE,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,cAAc,CAAC,CAAC;AAEvD,eAAO,MAAM,sBAAsB;;iBAEjC,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;iBAM9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEjE,eAAO,MAAM,yBAAyB;;;;;;;;;;iBAOpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE7E,eAAO,MAAM,yBAAyB;;;;;;;;;iBAIpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,yBAAyB,CAAC,CAAC"}

package/dist/esm/workspace/tenant/schema.js

@@ -0,0 +1,29 @@
+import { z } from 'zod';
+import { KSUIDSchema } from '../../common/schema/id.js';
+import { InsertOrganizationPayloadSchema, OrganizationPayloadSchema, UpdateOrganizationPayloadSchema, } from '../../customer/organization/schema.js';
+import { MembershipPayloadSchema } from '../membership/schema.js';
+import { Model, generateHandle, generateTenantId } from '../utils.js';
+export const TenantIdSchema = KSUIDSchema(Model.Tenant.UIDPrefix);
+export const TenantIdPropertySchema = z.object({
+    id: TenantIdSchema,
+});
+export const TenantPayloadSchema = z.object({
+    ...OrganizationPayloadSchema.shape,
+    handle: z.string(),
+    supportEmail: z.email().optional(),
+    authHost: z.url().optional(), // Not live yet (used for dev now)
+    membership: MembershipPayloadSchema.optional(),
+});
+export const InsertTenantPayloadSchema = z.object({
+    ...InsertOrganizationPayloadSchema.omit({
+        id: true,
+    }).shape,
+    id: TenantIdSchema.default(() => generateTenantId()),
+    handle: z.string().default(() => generateHandle()),
+    supportEmail: z.email().optional(),
+});
+export const UpdateTenantPayloadSchema = z.object({
+    ...UpdateOrganizationPayloadSchema.shape,
+    handle: z.string().optional(),
+    supportEmail: z.email().optional(),
+});