@go-mondo/identity-sdk 0.0.2-beta.12 → 0.0.2-beta.13

package/dist/cjs/app/authorization/schema.js

@@ -1,73 +1,82 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.UpsertAuthorizationPayloadSchema = exports.AuthorizationPayloadSchema = exports.AuthorizationSchema = void 0;
-const arktype_1 = require("arktype");
+const zod_1 = require("zod");
 const dates_js_1 = require("../../common/schema/dates.js");
 const metadata_js_1 = require("../../common/schema/metadata.js");
 const schema_js_1 = require("../../oauth/common/schema.js");
 const schema_js_2 = require("../../workspace/authorization/schema.js");
-const UrlSetSchema = arktype_1.type.instanceOf((Set));
-const UrlArrayScheama = (0, arktype_1.type)('string.url.parse').array();
-const StringSetSchema = arktype_1.type.instanceOf((Set));
+const UrlSetSchema = zod_1.z.instanceof((Set));
+const UrlArrayScheama = zod_1.z.array(zod_1.z.url().pipe(zod_1.z.transform((url) => new URL(url))));
+const StringSetSchema = zod_1.z.instanceof((Set));
 // const UrlStringSchema = type('string.url[]').pipe((v) => v?.filter((i) => !!i));
-const StringSchema = (0, arktype_1.type)('string[]').pipe((v) => v?.filter((i) => !!i));
+const StringSchema = zod_1.z
+    .array(zod_1.z.string())
+    .pipe(zod_1.z.transform((v) => v?.filter((i) => !!i)));
 // const CallbackUrlsSchema = type('undefined')
 //   .or(UrlArrayScheama)
 //   .or(UrlSetSchema)
 //   .pipe((v) => (v instanceof Set ? Array.from(v.values()) : v));
-const CallbackUrlArraySchema = (0, arktype_1.type)('undefined')
-    .or(UrlArrayScheama)
-    .or(UrlSetSchema)
-    .pipe((v) => (v instanceof Set ? Array.from(v.values()) : v));
-const CallbackUrlSetSchema = (0, arktype_1.type)('undefined')
-    .or(UrlArrayScheama)
-    .or(UrlSetSchema)
-    .pipe((v) => (!v || v instanceof Set ? v : new Set(v)));
-const AvailableAudienceArraySchema = (0, arktype_1.type)('undefined')
-    .or(StringSchema)
-    .or(StringSetSchema)
-    .pipe((v) => (v instanceof Set ? Array.from(v.values()) : v));
-const AvailableAudienceSetSchema = (0, arktype_1.type)('undefined')
-    .or(StringSchema)
-    .or(StringSetSchema)
-    .pipe((v) => (!v || v instanceof Set ? v : new Set(v)));
-const GrantSetSchema = arktype_1.type.instanceOf((Set));
-const GrantArraySchema = arktype_1.type
-    .enumerated(schema_js_1.GrantType.AUTHORIZATION_CODE, schema_js_1.GrantType.CLIENT_CREDENTIALS, schema_js_1.GrantType.IMPLICIT, schema_js_1.GrantType.REFRESH_TOKEN)
-    .array();
-const AvailableGrantSetSchema = (0, arktype_1.type)('undefined')
-    .or(GrantArraySchema)
-    .or(GrantSetSchema)
-    .pipe((v) => (!v || v instanceof Set ? v : new Set(v)));
-const AvailableGrantArraySchema = (0, arktype_1.type)('undefined')
-    .or(GrantArraySchema)
-    .or(GrantSetSchema)
-    .pipe((v) => (v instanceof Set ? Array.from(v.values()) : v));
-const BaseAuthorization = schema_js_2.AuthorizationPayloadSchema.pick('refreshTokenDuration', 'accessTokenDuration', 'accessTokenSignatureAlgorithm');
-exports.AuthorizationSchema = BaseAuthorization.and({
-    loginUri: (0, arktype_1.type)('string.url | undefined').optional(),
+const CallbackUrlArraySchema = zod_1.z
+    .union([zod_1.z.undefined(), UrlArrayScheama, UrlSetSchema])
+    .pipe(zod_1.z.transform((v) => (v instanceof Set ? Array.from(v.values()) : v)));
+const CallbackUrlSetSchema = zod_1.z
+    .union([zod_1.z.undefined(), UrlArrayScheama, UrlSetSchema])
+    .pipe(zod_1.z.transform((v) => (!v || v instanceof Set ? v : new Set(v))));
+const AvailableAudienceArraySchema = zod_1.z
+    .union([zod_1.z.undefined(), StringSchema, StringSetSchema])
+    .pipe(zod_1.z.transform((v) => (v instanceof Set ? Array.from(v.values()) : v)));
+const AvailableAudienceSetSchema = zod_1.z
+    .union([zod_1.z.undefined(), StringSchema, StringSetSchema])
+    .pipe(zod_1.z.transform((v) => (!v || v instanceof Set ? v : new Set(v))));
+const GrantSetSchema = zod_1.z.instanceof((Set));
+const GrantArraySchema = zod_1.z.array(zod_1.z.enum([
+    schema_js_1.GrantType.AUTHORIZATION_CODE,
+    schema_js_1.GrantType.CLIENT_CREDENTIALS,
+    schema_js_1.GrantType.IMPLICIT,
+    schema_js_1.GrantType.REFRESH_TOKEN,
+]));
+const AvailableGrantSetSchema = zod_1.z
+    .union([zod_1.z.undefined(), GrantArraySchema, GrantSetSchema])
+    .pipe(zod_1.z.transform((v) => (!v || v instanceof Set ? v : new Set(v))));
+const AvailableGrantArraySchema = zod_1.z
+    .union([zod_1.z.undefined(), GrantArraySchema, GrantSetSchema])
+    .pipe(zod_1.z.transform((v) => (v instanceof Set ? Array.from(v.values()) : v)));
+const BaseAuthorization = schema_js_2.AuthorizationPayloadSchema.pick({
+    refreshTokenDuration: true,
+    accessTokenDuration: true,
+    accessTokenSignatureAlgorithm: true,
+});
+exports.AuthorizationSchema = zod_1.z.object({
+    ...BaseAuthorization.shape,
+    loginUri: zod_1.z.union([zod_1.z.url(), zod_1.z.undefined()]).optional(),
     callbackUrls: CallbackUrlSetSchema.optional(),
     availableAudiences: AvailableAudienceSetSchema.optional(),
     availableGrants: AvailableGrantSetSchema.optional(),
-    defaultAudience: (0, arktype_1.type)('string | undefined').optional(),
-    'updatedAt?': dates_js_1.OptionalDateSchema,
-    'deletedAt?': dates_js_1.OptionalDateSchema,
-    'deactivatedAt?': dates_js_1.OptionalDateSchema,
-}).and(metadata_js_1.MetadataMapPropertySchema);
-exports.AuthorizationPayloadSchema = BaseAuthorization.and({
-    loginUri: (0, arktype_1.type)('string.url | undefined').optional(),
+    defaultAudience: zod_1.z.union([zod_1.z.string(), zod_1.z.undefined()]).optional(),
+    updatedAt: dates_js_1.OptionalDateSchema.optional(),
+    deletedAt: dates_js_1.OptionalDateSchema.optional(),
+    deactivatedAt: dates_js_1.OptionalDateSchema.optional(),
+    ...metadata_js_1.MetadataMapPropertySchema.shape,
+});
+exports.AuthorizationPayloadSchema = zod_1.z.object({
+    ...BaseAuthorization.shape,
+    loginUri: zod_1.z.union([zod_1.z.url(), zod_1.z.undefined()]).optional(),
     callbackUrls: CallbackUrlArraySchema.optional(),
     availableAudiences: AvailableAudienceArraySchema.optional(),
     availableGrants: AvailableGrantArraySchema.optional(),
-    defaultAudience: (0, arktype_1.type)('string | undefined').optional(),
-    'updatedAt?': dates_js_1.OptionalDatePayloadSchema,
-    'deletedAt?': dates_js_1.OptionalDatePayloadSchema,
-    'deactivatedAt?': dates_js_1.OptionalDatePayloadSchema,
-}).and(metadata_js_1.MetadataPayloadPropertySchema);
-exports.UpsertAuthorizationPayloadSchema = BaseAuthorization.and({
-    loginUri: (0, arktype_1.type)('string.url | undefined').optional(),
+    defaultAudience: zod_1.z.union([zod_1.z.string(), zod_1.z.undefined()]).optional(),
+    updatedAt: dates_js_1.OptionalDatePayloadSchema.optional(),
+    deletedAt: dates_js_1.OptionalDatePayloadSchema.optional(),
+    deactivatedAt: dates_js_1.OptionalDatePayloadSchema.optional(),
+    ...metadata_js_1.MetadataPayloadPropertySchema.shape,
+});
+exports.UpsertAuthorizationPayloadSchema = zod_1.z.object({
+    ...BaseAuthorization.shape,
+    loginUri: zod_1.z.union([zod_1.z.url(), zod_1.z.undefined()]).optional(),
     callbackUrls: CallbackUrlArraySchema.optional(),
     availableAudiences: AvailableAudienceArraySchema.optional(),
     availableGrants: AvailableGrantArraySchema.optional(),
-    defaultAudience: (0, arktype_1.type)('string | undefined').optional(),
-}).and(metadata_js_1.UpsertMetadataPropertyPayloadSchema);
+    defaultAudience: zod_1.z.union([zod_1.z.string(), zod_1.z.undefined()]).optional(),
+    ...metadata_js_1.UpsertMetadataPropertyPayloadSchema.shape,
+});

package/dist/cjs/app/authorization/schema.test.js

@@ -1,6 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-const arktype_1 = require("arktype");
 const vitest_1 = require("vitest");
 const schema_js_1 = require("./schema.js");
 (0, vitest_1.describe)('App Authorization - Schema', () => {
@@ -30,16 +29,18 @@ const schema_js_1 = require("./schema.js");
                     state_parameter_required: true,
                 },
             };
-            const result = (0, schema_js_1.AuthorizationSchema)(authorization);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)(result.availableGrants).toBeInstanceOf(Set);
+            const result = schema_js_1.AuthorizationSchema.safeParse(authorization);
+            (0, vitest_1.expect)(result.success).toBe(true);
+            if (result.success) {
+                (0, vitest_1.expect)(result.data.availableGrants).toBeInstanceOf(Set);
+            }
         });
         (0, vitest_1.test)('should accept minimal authorization object', () => {
             const authorization = {
                 metadata: {},
             };
-            const result = (0, schema_js_1.AuthorizationSchema)(authorization);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            const result = schema_js_1.AuthorizationSchema.safeParse(authorization);
+            (0, vitest_1.expect)(result.success).toBe(true);
         });
         (0, vitest_1.test)('should accept authorization with grant array and convert to Set', () => {
             const authorization = {
@@ -50,11 +51,13 @@ const schema_js_1 = require("./schema.js");
                     client_type: 'confidential',
                 },
             };
-            const result = (0, schema_js_1.AuthorizationSchema)(authorization);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)(result.availableGrants).toBeInstanceOf(Set);
-            (0, vitest_1.expect)(result.availableGrants?.has('authorization_code')).toBe(true);
-            (0, vitest_1.expect)(result.availableGrants?.has('client_credentials')).toBe(true);
+            const result = schema_js_1.AuthorizationSchema.safeParse(authorization);
+            (0, vitest_1.expect)(result.success).toBe(true);
+            if (result.success) {
+                (0, vitest_1.expect)(result.data.availableGrants).toBeInstanceOf(Set);
+                (0, vitest_1.expect)(result.data.availableGrants?.has('authorization_code')).toBe(true);
+                (0, vitest_1.expect)(result.data.availableGrants?.has('client_credentials')).toBe(true);
+            }
         });
         (0, vitest_1.test)('should accept authorization with Set of grants', () => {
             const authorization = {
@@ -66,9 +69,11 @@ const schema_js_1 = require("./schema.js");
                     application_type: 'spa',
                 },
             };
-            const result = (0, schema_js_1.AuthorizationSchema)(authorization);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)(result.availableGrants).toBeInstanceOf(Set);
+            const result = schema_js_1.AuthorizationSchema.safeParse(authorization);
+            (0, vitest_1.expect)(result.success).toBe(true);
+            if (result.success) {
+                (0, vitest_1.expect)(result.data.availableGrants).toBeInstanceOf(Set);
+            }
         });
         (0, vitest_1.test)('should accept authorization with callback URLs as Set', () => {
             const authorization = {
@@ -81,10 +86,12 @@ const schema_js_1 = require("./schema.js");
                     multi_tenant: true,
                 },
             };
-            const result = (0, schema_js_1.AuthorizationSchema)(authorization);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)(result.callbackUrls).toBeInstanceOf(Set);
-            (0, vitest_1.expect)(result.availableAudiences).toBeInstanceOf(Set);
+            const result = schema_js_1.AuthorizationSchema.safeParse(authorization);
+            (0, vitest_1.expect)(result.success).toBe(true);
+            if (result.success) {
+                (0, vitest_1.expect)(result.data.callbackUrls).toBeInstanceOf(Set);
+                (0, vitest_1.expect)(result.data.availableAudiences).toBeInstanceOf(Set);
+            }
         });
         (0, vitest_1.test)('should accept authorization with optional fields', () => {
             const authorization = {
@@ -95,15 +102,13 @@ const schema_js_1 = require("./schema.js");
                 defaultAudience: 'https://api.example.com',
                 updatedAt: new Date(),
                 metadata: {
-                    jwt_configuration: {
-                        algorithm: 'RS256',
-                        public_key: 'MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA...',
-                    },
-                    scopes: ['read:users', 'write:users', 'admin:all'],
+                    algorithm: 'RS256',
+                    client_name: 'Test App',
+                    description: 'Test authorization with optional fields',
                 },
             };
-            const result = (0, schema_js_1.AuthorizationSchema)(authorization);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            const result = schema_js_1.AuthorizationSchema.safeParse(authorization);
+            (0, vitest_1.expect)(result.success).toBe(true);
         });
         (0, vitest_1.test)('should filter empty strings from URLs and audiences', () => {
             const authorization = {
@@ -114,29 +119,31 @@ const schema_js_1 = require("./schema.js");
                 availableAudiences: ['api.example.com', 'admin.example.com'],
                 metadata: {},
             };
-            const result = (0, schema_js_1.AuthorizationSchema)(authorization);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)(result.callbackUrls).toEqual(new Set([
-                'https://valid.example.com/callback',
-                'https://another.example.com/auth',
-            ]));
-            (0, vitest_1.expect)(result.availableAudiences).toEqual(new Set(['api.example.com', 'admin.example.com']));
+            const result = schema_js_1.AuthorizationSchema.safeParse(authorization);
+            (0, vitest_1.expect)(result.success).toBe(true);
+            if (result.success) {
+                (0, vitest_1.expect)(result.data.callbackUrls).toEqual(new Set([
+                    'https://valid.example.com/callback',
+                    'https://another.example.com/auth',
+                ]));
+                (0, vitest_1.expect)(result.data.availableAudiences).toEqual(new Set(['api.example.com', 'admin.example.com']));
+            }
         });
         (0, vitest_1.test)('should reject invalid grant types', () => {
             const authorization = {
                 availableGrants: ['invalid_grant_type'],
                 metadata: {},
             };
-            const result = (0, schema_js_1.AuthorizationSchema)(authorization);
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            const result = schema_js_1.AuthorizationSchema.safeParse(authorization);
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
         (0, vitest_1.test)('should reject invalid URL formats', () => {
             const authorization = {
                 loginUri: 'not-a-valid-url',
                 metadata: {},
             };
-            const result = (0, schema_js_1.AuthorizationSchema)(authorization);
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            const result = schema_js_1.AuthorizationSchema.safeParse(authorization);
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
     });
     (0, vitest_1.describe)('AuthorizationPayloadSchema', () => {
@@ -159,19 +166,28 @@ const schema_js_1 = require("./schema.js");
                     token_endpoint_auth_method: 'client_secret_basic',
                 },
             };
-            const result = (0, schema_js_1.AuthorizationPayloadSchema)(payload);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)(result).toEqual(payload);
+            const result = schema_js_1.AuthorizationPayloadSchema.safeParse(payload);
+            (0, vitest_1.expect)(result.success).toBe(true);
+            if (result.success) {
+                // The schema transforms string URLs to URL objects, so we check individual properties
+                (0, vitest_1.expect)(result.data).toHaveProperty('refreshTokenDuration', payload.refreshTokenDuration);
+                (0, vitest_1.expect)(result.data).toHaveProperty('accessTokenDuration', payload.accessTokenDuration);
+                (0, vitest_1.expect)(result.data).toHaveProperty('accessTokenSignatureAlgorithm', payload.accessTokenSignatureAlgorithm);
+                (0, vitest_1.expect)(result.data).toHaveProperty('loginUri', payload.loginUri);
+                (0, vitest_1.expect)(result.data).toHaveProperty('metadata', payload.metadata);
+                // callbackUrls will be transformed to URL objects
+                (0, vitest_1.expect)(result.data.callbackUrls).toBeDefined();
+            }
         });
         (0, vitest_1.test)('should accept minimal authorization payload', () => {
             const payload = {
                 metadata: {},
             };
-            const result = (0, schema_js_1.AuthorizationPayloadSchema)(payload);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)(result).toHaveProperty('accessTokenDuration');
-            (0, vitest_1.expect)(result).toHaveProperty('accessTokenSignatureAlgorithm');
-            (0, vitest_1.expect)(result).toHaveProperty('refreshTokenDuration');
+            const result = schema_js_1.AuthorizationPayloadSchema.safeParse(payload);
+            (0, vitest_1.expect)(result.success).toBe(true);
+            if (result.success) {
+                (0, vitest_1.expect)(result.data).toHaveProperty('metadata');
+            }
         });
         (0, vitest_1.test)('should accept payload with grant arrays', () => {
             const payload = {
@@ -184,8 +200,8 @@ const schema_js_1 = require("./schema.js");
                     requires_client_secret: true,
                 },
             };
-            const result = (0, schema_js_1.AuthorizationPayloadSchema)(payload);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            const result = schema_js_1.AuthorizationPayloadSchema.safeParse(payload);
+            (0, vitest_1.expect)(result.success).toBe(true);
         });
         (0, vitest_1.test)('should accept payload with Set of grants', () => {
             const payload = {
@@ -197,8 +213,8 @@ const schema_js_1 = require("./schema.js");
                     application_type: 'single_page_app',
                 },
             };
-            const result = (0, schema_js_1.AuthorizationPayloadSchema)(payload);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            const result = schema_js_1.AuthorizationPayloadSchema.safeParse(payload);
+            (0, vitest_1.expect)(result.success).toBe(true);
         });
         (0, vitest_1.test)('should accept payload with comprehensive OAuth configuration', () => {
             const payload = {
@@ -231,24 +247,24 @@ const schema_js_1 = require("./schema.js");
                     policy_uri: 'https://corporate.com/privacy',
                 },
             };
-            const result = (0, schema_js_1.AuthorizationPayloadSchema)(payload);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            const result = schema_js_1.AuthorizationPayloadSchema.safeParse(payload);
+            (0, vitest_1.expect)(result.success).toBe(true);
         });
         (0, vitest_1.test)('should reject invalid date format', () => {
             const payload = {
                 updatedAt: 'invalid-date',
                 metadata: {},
             };
-            const result = (0, schema_js_1.AuthorizationPayloadSchema)(payload);
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            const result = schema_js_1.AuthorizationPayloadSchema.safeParse(payload);
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
         (0, vitest_1.test)('should reject invalid signature algorithm', () => {
             const payload = {
                 accessTokenSignatureAlgorithm: 'INVALID_ALG',
                 metadata: {},
             };
-            const result = (0, schema_js_1.AuthorizationPayloadSchema)(payload);
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            const result = schema_js_1.AuthorizationPayloadSchema.safeParse(payload);
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
     });
     (0, vitest_1.describe)('UpsertAuthorizationPayloadSchema', () => {
@@ -267,9 +283,18 @@ const schema_js_1 = require("./schema.js");
                     updated_by: 'admin@example.com',
                 },
             };
-            const result = (0, schema_js_1.UpsertAuthorizationPayloadSchema)(payload);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)(result).toEqual(payload);
+            const result = schema_js_1.UpsertAuthorizationPayloadSchema.safeParse(payload);
+            (0, vitest_1.expect)(result.success).toBe(true);
+            if (result.success) {
+                // The schema transforms string URLs to URL objects, so we check individual properties
+                (0, vitest_1.expect)(result.data).toHaveProperty('refreshTokenDuration', payload.refreshTokenDuration);
+                (0, vitest_1.expect)(result.data).toHaveProperty('accessTokenDuration', payload.accessTokenDuration);
+                (0, vitest_1.expect)(result.data).toHaveProperty('accessTokenSignatureAlgorithm', payload.accessTokenSignatureAlgorithm);
+                (0, vitest_1.expect)(result.data).toHaveProperty('loginUri', payload.loginUri);
+                (0, vitest_1.expect)(result.data).toHaveProperty('metadata', payload.metadata);
+                // callbackUrls will be transformed to URL objects
+                (0, vitest_1.expect)(result.data.callbackUrls).toBeDefined();
+            }
         });
         (0, vitest_1.test)('should accept partial upsert payload', () => {
             const payload = {
@@ -279,8 +304,8 @@ const schema_js_1 = require("./schema.js");
                     fields_updated: 'accessTokenDuration',
                 },
             };
-            const result = (0, schema_js_1.UpsertAuthorizationPayloadSchema)(payload);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            const result = schema_js_1.UpsertAuthorizationPayloadSchema.safeParse(payload);
+            (0, vitest_1.expect)(result.success).toBe(true);
         });
         (0, vitest_1.test)('should accept upsert with undefined values', () => {
             const payload = {
@@ -290,16 +315,16 @@ const schema_js_1 = require("./schema.js");
                     reset_fields: 'loginUri',
                 },
             };
-            const result = (0, schema_js_1.UpsertAuthorizationPayloadSchema)(payload);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            const result = schema_js_1.UpsertAuthorizationPayloadSchema.safeParse(payload);
+            (0, vitest_1.expect)(result.success).toBe(true);
         });
         (0, vitest_1.test)('should accept empty metadata upsert', () => {
             const payload = {
                 refreshTokenDuration: 7200,
                 metadata: {},
             };
-            const result = (0, schema_js_1.UpsertAuthorizationPayloadSchema)(payload);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            const result = schema_js_1.UpsertAuthorizationPayloadSchema.safeParse(payload);
+            (0, vitest_1.expect)(result.success).toBe(true);
         });
         (0, vitest_1.test)('should accept upsert with grant types modification', () => {
             const payload = {
@@ -312,8 +337,8 @@ const schema_js_1 = require("./schema.js");
                     added_grants: 'client_credentials',
                 },
             };
-            const result = (0, schema_js_1.UpsertAuthorizationPayloadSchema)(payload);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            const result = schema_js_1.UpsertAuthorizationPayloadSchema.safeParse(payload);
+            (0, vitest_1.expect)(result.success).toBe(true);
         });
         (0, vitest_1.test)('should accept upsert with complex callback URL updates', () => {
             const payload = {
@@ -330,24 +355,24 @@ const schema_js_1 = require("./schema.js");
                     environment: 'production',
                 },
             };
-            const result = (0, schema_js_1.UpsertAuthorizationPayloadSchema)(payload);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            const result = schema_js_1.UpsertAuthorizationPayloadSchema.safeParse(payload);
+            (0, vitest_1.expect)(result.success).toBe(true);
         });
         (0, vitest_1.test)('should reject invalid grant types in upsert', () => {
             const payload = {
                 availableGrants: ['invalid_grant'],
                 metadata: {},
             };
-            const result = (0, schema_js_1.UpsertAuthorizationPayloadSchema)(payload);
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            const result = schema_js_1.UpsertAuthorizationPayloadSchema.safeParse(payload);
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
         (0, vitest_1.test)('should reject invalid URL in upsert', () => {
             const payload = {
                 loginUri: 'not-a-valid-url',
                 metadata: {},
             };
-            const result = (0, schema_js_1.UpsertAuthorizationPayloadSchema)(payload);
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            const result = schema_js_1.UpsertAuthorizationPayloadSchema.safeParse(payload);
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
     });
 });

package/dist/cjs/app/oauth/resources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../../../src/app/oauth/resources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAOpE,OAAO,EACL,KAAK,gBAAgB,EAErB,KAAK,KAAK,EAEX,MAAM,aAAa,CAAC;AAIrB,qBAAa,cAAc;IACN,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,aAAa;IAE3D,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAQhC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IAInC,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;CAGpD;AAED,wBAAsB,QAAQ,CAC5B,QAAQ,EAAE,aAAa,EACvB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,KAAK,CAAC,CAShB;AAED,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,aAAa,EACvB,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,KAAK,CAAC,CAYhB"}
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../../../src/app/oauth/resources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAMpE,OAAO,EACL,KAAK,gBAAgB,EAErB,KAAK,KAAK,EAEX,MAAM,aAAa,CAAC;AAIrB,qBAAa,cAAc;IACN,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,aAAa;IAE3D,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAQhC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IAInC,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;CAGpD;AAED,wBAAsB,QAAQ,CAC5B,QAAQ,EAAE,aAAa,EACvB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,KAAK,CAAC,CAOhB;AAED,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,aAAa,EACvB,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,KAAK,CAAC,CAQhB"}

package/dist/cjs/app/oauth/resources.js

@@ -4,7 +4,6 @@ exports.OAuthResources = void 0;
 exports.getOAuth = getOAuth;
 exports.rotateOAuthSecret = rotateOAuthSecret;
 const operations_js_1 = require("../../common/resources/operations.js");
-const utils_js_1 = require("../../common/resources/utils.js");
 const resources_js_1 = require("../resources.js");
 const schema_js_1 = require("./schema.js");
 const RESOURCE = 'oauth';
@@ -28,8 +27,8 @@ class OAuthResources {
 }
 exports.OAuthResources = OAuthResources;
 async function getOAuth(instance, appId) {
-    return (0, utils_js_1.parseEgressSchema)((0, schema_js_1.OAuthSchema)(await (0, operations_js_1.getItemWithAuthorization)(new URL(OAuthResources.buildPath(appId), instance.config.host), instance.authorizer)));
+    return schema_js_1.OAuthSchema.parse(await (0, operations_js_1.getItemWithAuthorization)(new URL(OAuthResources.buildPath(appId), instance.config.host), instance.authorizer));
 }
 async function rotateOAuthSecret(instance, appId, item) {
-    return (0, utils_js_1.parseEgressSchema)((0, schema_js_1.OAuthSchema)(await (0, operations_js_1.insertItemWithAuthorization)(new URL(OAuthResources.buildPath(appId), instance.config.host), instance.authorizer, (0, utils_js_1.parseEgressSchema)(schema_js_1.InsertOAuthPayloadSchema.onUndeclaredKey('delete')(item)))));
+    return schema_js_1.OAuthSchema.parse(await (0, operations_js_1.insertItemWithAuthorization)(new URL(OAuthResources.buildPath(appId), instance.config.host), instance.authorizer, schema_js_1.InsertOAuthPayloadSchema.parse(item)));
 }

package/dist/cjs/app/oauth/schema.d.ts

@@ -1,42 +1,35 @@
-export declare const OAuthIdSchema: import("arktype/out/methods/string.js").StringType<string, {}>;
-export type OAuthId = typeof OAuthIdSchema.inferOut;
-export declare const OAuthIdPropertySchema: import("arktype/out/methods/object.js").ObjectType<{
-    id: string;
-}, {}>;
-export type OAuthIdProperty = typeof OAuthIdPropertySchema.inferOut;
-export declare const OAuthSchema: import("arktype/out/methods/object.js").ObjectType<{
-    id: string;
-    clientId: string;
-    clientSecret: string;
-    updatedAt?: Date | ((In: string) => import("arktype/out/attributes.js").To<Date>) | undefined;
-    deletedAt?: Date | ((In: string) => import("arktype/out/attributes.js").To<Date>) | undefined;
-    deactivatedAt?: Date | ((In: string) => import("arktype/out/attributes.js").To<Date>) | undefined;
-    metadata: (In: import("arktype/out/attributes.js").Default<unknown, Map<string, string | number | boolean>>) => import("arktype").Out<Map<string, string | number | boolean>>;
-}, {}>;
-export type OAuthProperties = typeof OAuthSchema.inferIn;
-export type OAuth = typeof OAuthSchema.inferOut;
-export declare const OAuthPayloadSchema: import("arktype/out/methods/object.js").ObjectType<{
-    id: string;
-    clientId: string;
-    clientSecret: string;
-    updatedAt?: ((In: string | Date | undefined) => import("arktype").Out<string | undefined>) | undefined;
-    deletedAt?: ((In: string | Date | undefined) => import("arktype").Out<string | undefined>) | undefined;
-    deactivatedAt?: ((In: string | Date | undefined) => import("arktype").Out<string | undefined>) | undefined;
-    metadata?: ((In: {
-        [x: string]: string | number | boolean;
-    } | Map<string, string | number | boolean> | null | undefined) => import("arktype").Out<{
-        [x: string]: string | number | boolean;
-    } | undefined>) | undefined;
-}, {}>;
-export type OAuthPayload = typeof OAuthPayloadSchema.inferOut;
-export declare const InsertOAuthPayloadSchema: import("arktype/out/methods/object.js").ObjectType<{
-    id: import("arktype/out/attributes.js").Default<string, string>;
-    metadata?: ((In: {
-        [x: string]: string | number | boolean;
-    } | Map<string, string | number | boolean> | null | undefined) => import("arktype").Out<{
-        [x: string]: string | number | boolean;
-    } | undefined>) | undefined;
-}, {}>;
-export type InsertOAuthInput = typeof InsertOAuthPayloadSchema.inferIn;
-export type InsertOAuthPayload = typeof InsertOAuthPayloadSchema.inferOut;
+import { z } from 'zod';
+export declare const OAuthIdSchema: z.ZodString;
+export type OAuthId = z.output<typeof OAuthIdSchema>;
+export declare const OAuthIdPropertySchema: z.ZodObject<{
+    id: z.ZodString;
+}, z.core.$strip>;
+export type OAuthIdProperty = z.output<typeof OAuthIdPropertySchema>;
+export declare const OAuthSchema: z.ZodObject<{
+    metadata: z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Map<string, string | number | boolean>, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>;
+    updatedAt: z.ZodOptional<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>>;
+    deletedAt: z.ZodOptional<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>>;
+    deactivatedAt: z.ZodOptional<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>>;
+    clientId: z.ZodString;
+    clientSecret: z.ZodString;
+    id: z.ZodString;
+}, z.core.$strip>;
+export type OAuthProperties = z.input<typeof OAuthSchema>;
+export type OAuth = z.output<typeof OAuthSchema>;
+export declare const OAuthPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    updatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    deletedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    deactivatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    clientId: z.ZodString;
+    clientSecret: z.ZodString;
+    id: z.ZodString;
+}, z.core.$strip>;
+export type OAuthPayload = z.output<typeof OAuthPayloadSchema>;
+export declare const InsertOAuthPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    id: z.ZodDefault<z.ZodString>;
+}, z.core.$strip>;
+export type InsertOAuthInput = z.input<typeof InsertOAuthPayloadSchema>;
+export type InsertOAuthPayload = z.output<typeof InsertOAuthPayloadSchema>;
 //# sourceMappingURL=schema.d.ts.map

package/dist/cjs/app/oauth/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/app/oauth/schema.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,aAAa,gEAAqC,CAAC;AAChE,MAAM,MAAM,OAAO,GAAG,OAAO,aAAa,CAAC,QAAQ,CAAC;AAEpD,eAAO,MAAM,qBAAqB;;MAEhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,qBAAqB,CAAC,QAAQ,CAAC;AAOpE,eAAO,MAAM,WAAW;;;;;;;;MAIS,CAAC;AAClC,MAAM,MAAM,eAAe,GAAG,OAAO,WAAW,CAAC,OAAO,CAAC;AACzD,MAAM,MAAM,KAAK,GAAG,OAAO,WAAW,CAAC,QAAQ,CAAC;AAEhD,eAAO,MAAM,kBAAkB;;;;;;;;;;;;MAIM,CAAC;AACtC,MAAM,MAAM,YAAY,GAAG,OAAO,kBAAkB,CAAC,QAAQ,CAAC;AAE9D,eAAO,MAAM,wBAAwB;;;;;;;MAEA,CAAC;AACtC,MAAM,MAAM,gBAAgB,GAAG,OAAO,wBAAwB,CAAC,OAAO,CAAC;AACvE,MAAM,MAAM,kBAAkB,GAAG,OAAO,wBAAwB,CAAC,QAAQ,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/app/oauth/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAYxB,eAAO,MAAM,aAAa,aAAqC,CAAC;AAChE,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,aAAa,CAAC,CAAC;AAErD,eAAO,MAAM,qBAAqB;;iBAEhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAQrE,eAAO,MAAM,WAAW;;;;;;;;iBAMtB,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAC1D,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,WAAW,CAAC,CAAC;AAEjD,eAAO,MAAM,kBAAkB;;;;;;;;iBAM7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE/D,eAAO,MAAM,wBAAwB;;;iBAGnC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AACxE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,wBAAwB,CAAC,CAAC"}