@go-mondo/identity-sdk 0.0.2-beta.12 → 0.0.2-beta.13

package/dist/cjs/identity/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/identity/schema.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,kBAAkB;;;CAGrB,CAAC;AAEX,MAAM,MAAM,qBAAqB,GAC/B,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAC;AAE/D,eAAO,MAAM,wBAAwB,8EAGpC,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/identity/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,kBAAkB;;;CAGrB,CAAC;AAEX,MAAM,MAAM,qBAAqB,GAC/B,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAC;AAE/D,eAAO,MAAM,wBAAwB;;;EAG1B,CAAC"}

package/dist/cjs/identity/schema.js

@@ -1,9 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.IdentityIdentifierSchema = exports.IdentityIdentifier = void 0;
-const arktype_1 = require("arktype");
+const zod_1 = require("zod");
 exports.IdentityIdentifier = {
     EMAIL: 'email',
     PHONE_NUMBER: 'phoneNumber',
 };
-exports.IdentityIdentifierSchema = arktype_1.type.enumerated(exports.IdentityIdentifier.EMAIL, exports.IdentityIdentifier.PHONE_NUMBER);
+exports.IdentityIdentifierSchema = zod_1.z.enum([
+    exports.IdentityIdentifier.EMAIL,
+    exports.IdentityIdentifier.PHONE_NUMBER,
+]);

package/dist/cjs/identity/schema.test.js

@@ -1,6 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-const arktype_1 = require("arktype");
 const vitest_1 = require("vitest");
 const schema_js_1 = require("./schema.js");
 (0, vitest_1.describe)('Identity - Schema', () => {
@@ -12,29 +11,35 @@ const schema_js_1 = require("./schema.js");
     });
     (0, vitest_1.describe)('IdentityIdentifierSchema', () => {
         (0, vitest_1.test)('should accept valid email identifier', () => {
-            const result = (0, schema_js_1.IdentityIdentifierSchema)('email');
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)(result).toBe('email');
+            const result = schema_js_1.IdentityIdentifierSchema.safeParse('email');
+            // Parse succeeds for valid data
+            (0, vitest_1.expect)(result.success).toBe(true);
+            if (result.success) {
+                (0, vitest_1.expect)(result.data).toBe('email');
+            }
         });
         (0, vitest_1.test)('should accept valid phone number identifier', () => {
-            const result = (0, schema_js_1.IdentityIdentifierSchema)('phoneNumber');
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)(result).toBe('phoneNumber');
+            const result = schema_js_1.IdentityIdentifierSchema.safeParse('phoneNumber');
+            // Parse succeeds for valid data
+            (0, vitest_1.expect)(result.success).toBe(true);
+            if (result.success) {
+                (0, vitest_1.expect)(result.data).toBe('phoneNumber');
+            }
         });
         (0, vitest_1.test)('should reject invalid identifiers', () => {
-            (0, vitest_1.expect)((0, schema_js_1.IdentityIdentifierSchema)('username')).toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)((0, schema_js_1.IdentityIdentifierSchema)('invalid')).toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)((0, schema_js_1.IdentityIdentifierSchema)('')).toBeInstanceOf(arktype_1.type.errors);
+            (0, vitest_1.expect)(schema_js_1.IdentityIdentifierSchema.safeParse('invalid').success).toBe(false);
+            (0, vitest_1.expect)(schema_js_1.IdentityIdentifierSchema.safeParse('username').success).toBe(false);
+            (0, vitest_1.expect)(schema_js_1.IdentityIdentifierSchema.safeParse('sms').success).toBe(false);
         });
         (0, vitest_1.test)('should reject non-string values', () => {
-            (0, vitest_1.expect)((0, schema_js_1.IdentityIdentifierSchema)(123)).toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)((0, schema_js_1.IdentityIdentifierSchema)(null)).toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)((0, schema_js_1.IdentityIdentifierSchema)(undefined)).toBeInstanceOf(arktype_1.type.errors);
+            (0, vitest_1.expect)(schema_js_1.IdentityIdentifierSchema.safeParse(123).success).toBe(false);
+            (0, vitest_1.expect)(schema_js_1.IdentityIdentifierSchema.safeParse(null).success).toBe(false);
+            (0, vitest_1.expect)(schema_js_1.IdentityIdentifierSchema.safeParse(undefined).success).toBe(false);
         });
         (0, vitest_1.test)('should be case sensitive', () => {
-            (0, vitest_1.expect)((0, schema_js_1.IdentityIdentifierSchema)('Email')).toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)((0, schema_js_1.IdentityIdentifierSchema)('PHONE_NUMBER')).toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)((0, schema_js_1.IdentityIdentifierSchema)('phonenumber')).toBeInstanceOf(arktype_1.type.errors);
+            (0, vitest_1.expect)(schema_js_1.IdentityIdentifierSchema.safeParse('EMAIL').success).toBe(false);
+            (0, vitest_1.expect)(schema_js_1.IdentityIdentifierSchema.safeParse('PHONE_NUMBER').success).toBe(false);
+            (0, vitest_1.expect)(schema_js_1.IdentityIdentifierSchema.safeParse('phonenumber').success).toBe(false);
         });
     });
 });

package/dist/cjs/oauth/authorize/schema/grants/authorization-code.d.ts

@@ -1,29 +1,32 @@
-export declare const AuthorizationCodeSchema: import("arktype/out/methods/object.js").ObjectType<{
-    response_type: "code";
-    client_id: string;
-    redirect_uri?: string | undefined;
-    scope?: string | undefined;
-    state?: string | undefined;
-    nonce?: string | undefined;
-    display?: "page" | "popup" | "touch" | "wap" | undefined;
-    prompt?: "none" | "login" | "consent" | "select_account" | undefined;
-    max_age?: number | undefined;
-    code_challenge_method?: "S256" | "plain" | undefined;
-    code_challenge?: string | undefined;
-    audience?: string | undefined;
-} | {
-    response_type: "code";
-    client_id: string;
-    redirect_uri?: string | undefined;
-    scope?: string | undefined;
-    state?: string | undefined;
-    nonce?: string | undefined;
-    display?: "page" | "popup" | "touch" | "wap" | undefined;
-    prompt?: "none" | "login" | "consent" | "select_account" | undefined;
-    max_age?: number | undefined;
-    code_challenge_method: "S256" | "plain";
-    code_challenge: string;
-    audience?: string | undefined;
-}, {}>;
-export type AuthorizationCodePayload = typeof AuthorizationCodeSchema.inferOut;
+import { z } from 'zod';
+export declare const AuthorizationCodeSchema: z.ZodObject<{
+    code_challenge_method: z.ZodOptional<z.ZodEnum<{
+        S256: "S256";
+        plain: "plain";
+    }>>;
+    code_challenge: z.ZodOptional<z.ZodString>;
+    audience: z.ZodOptional<z.ZodString>;
+    nonce: z.ZodOptional<z.ZodString>;
+    display: z.ZodOptional<z.ZodEnum<{
+        page: "page";
+        popup: "popup";
+        touch: "touch";
+        wap: "wap";
+    }>>;
+    prompt: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        login: "login";
+        consent: "consent";
+        select_account: "select_account";
+    }>>;
+    max_age: z.ZodOptional<z.ZodNumber>;
+    response_type: z.ZodEnum<{
+        code: "code";
+    }>;
+    client_id: z.ZodString;
+    redirect_uri: z.ZodOptional<z.ZodURL>;
+    scope: z.ZodOptional<z.ZodString>;
+    state: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type AuthorizationCodePayload = z.output<typeof AuthorizationCodeSchema>;
 //# sourceMappingURL=authorization-code.d.ts.map

package/dist/cjs/oauth/authorize/schema/grants/authorization-code.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-code.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/authorize/schema/grants/authorization-code.ts"],"names":[],"mappings":"AA8DA,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;MAEd,CAAC;AACvB,MAAM,MAAM,wBAAwB,GAAG,OAAO,uBAAuB,CAAC,QAAQ,CAAC"}
+{"version":3,"file":"authorization-code.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/authorize/schema/grants/authorization-code.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAyDxB,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAyBhC,CAAC;AACL,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC"}

package/dist/cjs/oauth/authorize/schema/grants/authorization-code.js

@@ -1,53 +1,72 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthorizationCodeSchema = void 0;
-const arktype_1 = require("arktype");
+const zod_1 = require("zod");
 const schema_js_1 = require("../../../../app/schema.js");
 const schema_js_2 = require("../../../common/schema.js");
 /**
  * @see https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.1
  * @see https://openid.net/specs/openid-connect-core-1_0.html#rfc.section.3.1.2.1
  */
-const ResponseTypeSchema = arktype_1.type.enumerated(schema_js_2.ResponseType.CODE);
-const PKCESchema = (0, arktype_1.type)({
+const ResponseTypeSchema = zod_1.z.enum([schema_js_2.ResponseType.CODE]);
+const CodeChallengeSchema = zod_1.z
+    .string()
+    .min(43, 'Code challenge must be at least 43 characters long.')
+    .max(128, 'Code challenge must be at most 128 characters long.')
+    .regex(/^[A-Za-z0-9\-_.~]+$/, 'Code challenge contains invalid characters.') // Base64url-encoded string
+    .describe('PKCE code challenge, derived from the code verifier.');
+// const PKCESchema = z.union([
+//   z.object({
+//     code_challenge_method: CodeChallengeMethodSchema.optional(),
+//     code_challenge: z.string().optional(),
+//   }),
+//   z.object({
+//     code_challenge_method: CodeChallengeMethodSchema,
+//     code_challenge: z.string().min(1),
+//   })
+// ]).refine((data) => {
+//   return (
+//     (data.code_challenge_method && data.code_challenge) ||
+//     (!data.code_challenge_method && !data.code_challenge)
+//   );
+// }, {
+//   message: 'code_challenge and code_challenge_method must both be present or both be absent',
+// });
+const OAuthSchema = zod_1.z.object({
+    response_type: ResponseTypeSchema,
+    client_id: schema_js_1.AppIdSchema,
+    redirect_uri: zod_1.z.url().optional(),
+    scope: zod_1.z.string().optional(),
+    state: zod_1.z.string().optional(),
+});
+const OIDCSchema = zod_1.z.object({
+    nonce: zod_1.z.string().optional(),
+    display: schema_js_2.AuthorizationDisplaySchema.optional(),
+    prompt: schema_js_2.AuthorizationPromptSchema.optional(),
+    max_age: zod_1.z.number().int().min(0).optional(),
+});
+exports.AuthorizationCodeSchema = zod_1.z
+    .object({
+    ...OAuthSchema.shape,
+    ...OIDCSchema.shape,
+    ...schema_js_2.OptionalSchema.shape,
     code_challenge_method: schema_js_2.CodeChallengeMethodSchema.optional(),
-    code_challenge: (0, arktype_1.type)('string').optional(),
-})
-    .or({
-    code_challenge_method: schema_js_2.CodeChallengeMethodSchema,
-    code_challenge: (0, arktype_1.type)('string').moreThanLength(0),
+    code_challenge: CodeChallengeSchema.optional(),
 })
-    .narrow((data, ctx) => {
-    if ((data.code_challenge_method && data.code_challenge) ||
-        (!data.code_challenge_method && !data.code_challenge)) {
-        return true;
+    .superRefine((data, ctx) => {
+    // If one is present, the other must also be present
+    if (data.code_challenge && !data.code_challenge_method) {
+        ctx.addIssue({
+            code: 'custom',
+            message: 'code_challenge_method is required when code_challenge is present',
+            path: ['code_challenge_method'],
+        });
     }
-    if (data.code_challenge_method && !data.code_challenge) {
-        return ctx.reject({
-            expected: 'is required',
-            actual: '',
+    else if (!data.code_challenge && data.code_challenge_method) {
+        ctx.addIssue({
+            code: 'custom',
+            message: 'code_challenge is required when code_challenge_method is present',
             path: ['code_challenge'],
         });
     }
-    return ctx.reject({
-        expected: 'is required',
-        actual: '',
-        path: ['code_challenge_method'],
-    });
-});
-const OAuthSchema = (0, arktype_1.type)({
-    response_type: ResponseTypeSchema,
-    client_id: schema_js_1.AppIdSchema,
-    redirect_uri: (0, arktype_1.type)('string.url').optional(),
-    scope: (0, arktype_1.type)('string').optional(),
-    state: (0, arktype_1.type)('string').optional(),
-});
-const OIDCSchema = (0, arktype_1.type)({
-    nonce: (0, arktype_1.type)('string').optional(),
-    display: schema_js_2.AuthorizationDisplaySchema.optional(),
-    prompt: schema_js_2.AuthorizationPromptSchema.optional(),
-    max_age: arktype_1.type.keywords.number.integer.atLeast(0).optional(),
 });
-exports.AuthorizationCodeSchema = OAuthSchema.and(OIDCSchema)
-    .and(PKCESchema)
-    .and(schema_js_2.OptionalSchema);

package/dist/cjs/oauth/authorize/schema/grants/authorization-code.test.js

@@ -1,6 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-const arktype_1 = require("arktype");
 const vitest_1 = require("vitest");
 const utils_js_1 = require("../../../../app/utils.js");
 const schema_js_1 = require("../../../common/schema.js");
@@ -12,7 +11,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 response_type: schema_js_1.ResponseType.CODE,
                 client_id: (0, utils_js_1.generateAppId)(),
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(minimalPayload);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(minimalPayload);
             (0, vitest_1.expect)(result).toEqual(minimalPayload);
         });
         (0, vitest_1.test)('should validate complete authorization code request', () => {
@@ -30,7 +29,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 max_age: 3600,
                 audience: 'https://api.example.com',
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(completePayload);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(completePayload);
             (0, vitest_1.expect)(result).toEqual(completePayload);
         });
         (0, vitest_1.test)('should validate authorization code request with PKCE', () => {
@@ -43,7 +42,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 scope: 'openid',
                 state: 'xyz',
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(pkcePayload);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(pkcePayload);
             (0, vitest_1.expect)(result).toEqual(pkcePayload);
         });
         (0, vitest_1.test)('should validate authorization code request with plain PKCE', () => {
@@ -53,7 +52,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 code_challenge: 'dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk',
                 code_challenge_method: schema_js_1.CodeChallengeMethod.PLAIN,
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(plainPkcePayload);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(plainPkcePayload);
             (0, vitest_1.expect)(result).toEqual(plainPkcePayload);
         });
         (0, vitest_1.test)('should validate request without PKCE parameters', () => {
@@ -64,7 +63,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 scope: 'openid profile',
                 state: 'legacy-state',
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(noPkcePayload);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(noPkcePayload);
             (0, vitest_1.expect)(result).toEqual(noPkcePayload);
         });
         (0, vitest_1.test)('should validate OIDC specific parameters', () => {
@@ -77,7 +76,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 max_age: 7200,
                 scope: 'openid profile email address phone',
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(oidcPayload);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(oidcPayload);
             (0, vitest_1.expect)(result).toEqual(oidcPayload);
         });
         (0, vitest_1.test)('should validate with optional audience parameter', () => {
@@ -86,7 +85,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 client_id: (0, utils_js_1.generateAppId)(),
                 audience: 'https://api.myservice.com',
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(audiencePayload);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(audiencePayload);
             (0, vitest_1.expect)(result).toEqual(audiencePayload);
         });
     });
@@ -95,31 +94,31 @@ const authorization_code_js_1 = require("./authorization-code.js");
             const invalidPayload = {
                 client_id: (0, utils_js_1.generateAppId)(),
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(invalidPayload);
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.safeParse(invalidPayload);
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
         (0, vitest_1.test)('should reject invalid response_type', () => {
             const invalidPayload = {
                 response_type: 'invalid_type',
                 client_id: (0, utils_js_1.generateAppId)(),
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(invalidPayload);
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.safeParse(invalidPayload);
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
         (0, vitest_1.test)('should reject missing client_id', () => {
             const invalidPayload = {
                 response_type: schema_js_1.ResponseType.CODE,
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(invalidPayload);
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.safeParse(invalidPayload);
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
         (0, vitest_1.test)('should reject invalid client_id format', () => {
             const invalidPayload = {
                 response_type: schema_js_1.ResponseType.CODE,
                 client_id: 'invalid-client-id',
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(invalidPayload);
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.safeParse(invalidPayload);
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
         (0, vitest_1.test)('should reject invalid redirect_uri format', () => {
             const invalidPayload = {
@@ -127,8 +126,8 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 client_id: (0, utils_js_1.generateAppId)(),
                 redirect_uri: 'not-a-url',
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(invalidPayload);
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.safeParse(invalidPayload);
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
         (0, vitest_1.test)('should reject invalid code_challenge_method', () => {
             const invalidPayload = {
@@ -137,8 +136,8 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 code_challenge: 'valid-challenge',
                 code_challenge_method: 'invalid_method',
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(invalidPayload);
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.safeParse(invalidPayload);
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
         (0, vitest_1.test)('should reject invalid display value', () => {
             const invalidPayload = {
@@ -146,8 +145,8 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 client_id: (0, utils_js_1.generateAppId)(),
                 display: 'invalid_display',
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(invalidPayload);
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.safeParse(invalidPayload);
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
         (0, vitest_1.test)('should reject invalid prompt value', () => {
             const invalidPayload = {
@@ -155,8 +154,8 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 client_id: (0, utils_js_1.generateAppId)(),
                 prompt: 'invalid_prompt',
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(invalidPayload);
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.safeParse(invalidPayload);
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
         (0, vitest_1.test)('should reject non-number max_age', () => {
             const invalidPayload = {
@@ -164,8 +163,8 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 client_id: (0, utils_js_1.generateAppId)(),
                 max_age: 'not-a-number',
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(invalidPayload);
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.safeParse(invalidPayload);
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
         (0, vitest_1.test)('should reject negative max_age', () => {
             const invalidPayload = {
@@ -173,8 +172,8 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 client_id: (0, utils_js_1.generateAppId)(),
                 max_age: -100,
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(invalidPayload);
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.safeParse(invalidPayload);
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
     });
     (0, vitest_1.describe)('PKCE validation edge cases', () => {
@@ -184,15 +183,15 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 client_id: (0, utils_js_1.generateAppId)(),
                 code_challenge: 'challenge-without-method',
             };
-            const result1 = (0, authorization_code_js_1.AuthorizationCodeSchema)(onlyChallenge);
-            (0, vitest_1.expect)(result1).toBeInstanceOf(arktype_1.type.errors);
+            const result1 = authorization_code_js_1.AuthorizationCodeSchema.safeParse(onlyChallenge);
+            (0, vitest_1.expect)(result1.success).toBe(false);
             const onlyMethod = {
                 response_type: schema_js_1.ResponseType.CODE,
                 client_id: (0, utils_js_1.generateAppId)(),
                 code_challenge_method: schema_js_1.CodeChallengeMethod.S256,
             };
-            const result2 = (0, authorization_code_js_1.AuthorizationCodeSchema)(onlyMethod);
-            (0, vitest_1.expect)(result2).toBeInstanceOf(arktype_1.type.errors);
+            const result2 = authorization_code_js_1.AuthorizationCodeSchema.safeParse(onlyMethod);
+            (0, vitest_1.expect)(result2.success).toBe(false);
         });
         (0, vitest_1.test)('should allow neither code_challenge nor code_challenge_method', () => {
             const noPkce = {
@@ -200,7 +199,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 client_id: (0, utils_js_1.generateAppId)(),
                 redirect_uri: 'https://example.com/callback',
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(noPkce);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(noPkce);
             (0, vitest_1.expect)(result).toEqual(noPkce);
         });
         (0, vitest_1.test)('should validate PKCE with S256 method', () => {
@@ -210,17 +209,17 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 code_challenge: 'dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk',
                 code_challenge_method: schema_js_1.CodeChallengeMethod.S256,
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(s256Pkce);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(s256Pkce);
             (0, vitest_1.expect)(result).toEqual(s256Pkce);
         });
         (0, vitest_1.test)('should validate PKCE with plain method', () => {
             const plainPkce = {
                 response_type: schema_js_1.ResponseType.CODE,
                 client_id: (0, utils_js_1.generateAppId)(),
-                code_challenge: 'plain-text-challenge',
+                code_challenge: 'E9Melhoa2OwvFrEMTJguCHaoeK1t8URWbuGJSstw-cM',
                 code_challenge_method: schema_js_1.CodeChallengeMethod.PLAIN,
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(plainPkce);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(plainPkce);
             (0, vitest_1.expect)(result).toEqual(plainPkce);
         });
     });
@@ -236,7 +235,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 code_challenge_method: schema_js_1.CodeChallengeMethod.S256,
                 nonce: 'xyz789',
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(spaRequest);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(spaRequest);
             (0, vitest_1.expect)(result).toEqual(spaRequest);
         });
         (0, vitest_1.test)('should validate server-side web app authorization request', () => {
@@ -247,7 +246,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 scope: 'openid profile email address phone',
                 state: 'secure-random-state-12345',
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(webAppRequest);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(webAppRequest);
             (0, vitest_1.expect)(result).toEqual(webAppRequest);
         });
         (0, vitest_1.test)('should validate mobile app authorization request', () => {
@@ -261,7 +260,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 code_challenge_method: schema_js_1.CodeChallengeMethod.S256,
                 display: 'touch',
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(mobileRequest);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(mobileRequest);
             (0, vitest_1.expect)(result).toEqual(mobileRequest);
         });
         (0, vitest_1.test)('should validate enterprise SSO request', () => {
@@ -275,7 +274,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 max_age: 28800, // 8 hours
                 audience: 'https://api.enterprise.example.com',
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(enterpriseRequest);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(enterpriseRequest);
             (0, vitest_1.expect)(result).toEqual(enterpriseRequest);
         });
         (0, vitest_1.test)('should validate request with multiple scopes', () => {
@@ -285,7 +284,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 scope: 'openid profile email address phone offline_access custom:read custom:write',
                 redirect_uri: 'https://example.com/callback',
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(multiScopeRequest);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(multiScopeRequest);
             (0, vitest_1.expect)(result).toEqual(multiScopeRequest);
         });
     });
@@ -298,7 +297,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 state: '',
                 nonce: '',
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(emptyStringsPayload);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(emptyStringsPayload);
             (0, vitest_1.expect)(result).toEqual(emptyStringsPayload);
         });
         (0, vitest_1.test)('should handle very long valid values', () => {
@@ -309,7 +308,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 nonce: 'b'.repeat(500),
                 scope: `openid profile email ${'custom:scope'.repeat(100)}`,
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(longValuesPayload);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(longValuesPayload);
             (0, vitest_1.expect)(result).toEqual(longValuesPayload);
         });
         (0, vitest_1.test)('should handle zero max_age', () => {
@@ -318,7 +317,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 client_id: (0, utils_js_1.generateAppId)(),
                 max_age: 0,
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(zeroMaxAge);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(zeroMaxAge);
             (0, vitest_1.expect)(result).toEqual(zeroMaxAge);
         });
         (0, vitest_1.test)('should handle large max_age values', () => {
@@ -327,7 +326,7 @@ const authorization_code_js_1 = require("./authorization-code.js");
                 client_id: (0, utils_js_1.generateAppId)(),
                 max_age: 31536000, // 1 year in seconds
             };
-            const result = (0, authorization_code_js_1.AuthorizationCodeSchema)(largeMaxAge);
+            const result = authorization_code_js_1.AuthorizationCodeSchema.parse(largeMaxAge);
             (0, vitest_1.expect)(result).toEqual(largeMaxAge);
         });
     });

package/dist/cjs/oauth/authorize/schema/grants/implicit.d.ts

@@ -1,11 +1,17 @@
-export declare const ImplicitSchema: import("arktype/out/methods/object.js").ObjectType<{
-    response_type: "token" | "id_token" | "string string" | "string number" | "string bigint" | "string boolean" | "string symbol" | "string undefined" | "string object" | "string function" | "number string" | "number number" | "number bigint" | "number boolean" | "number symbol" | "number undefined" | "number object" | "number function" | "bigint string" | "bigint number" | "bigint bigint" | "bigint boolean" | "bigint symbol" | "bigint undefined" | "bigint object" | "bigint function" | "boolean string" | "boolean number" | "boolean bigint" | "boolean boolean" | "boolean symbol" | "boolean undefined" | "boolean object" | "boolean function" | "symbol string" | "symbol number" | "symbol bigint" | "symbol boolean" | "symbol symbol" | "symbol undefined" | "symbol object" | "symbol function" | "undefined string" | "undefined number" | "undefined bigint" | "undefined boolean" | "undefined symbol" | "undefined undefined" | "undefined object" | "undefined function" | "object string" | "object number" | "object bigint" | "object boolean" | "object symbol" | "object undefined" | "object object" | "object function" | "function string" | "function number" | "function bigint" | "function boolean" | "function symbol" | "function undefined" | "function object" | "function function";
-    client_id: string;
-    redirect_uri?: string | undefined;
-    scope?: string | undefined;
-    state?: string | undefined;
-    nonce?: string | undefined;
-    audience?: string | undefined;
-}, {}>;
-export type ImplicitPayload = typeof ImplicitSchema.inferOut;
+import { z } from 'zod';
+export declare const ImplicitSchema: z.ZodObject<{
+    audience: z.ZodOptional<z.ZodString>;
+    nonce: z.ZodOptional<z.ZodString>;
+    response_type: z.ZodEnum<{
+        token: "token";
+        id_token: "id_token";
+        "id_token token": "id_token token";
+        "token id_token": "token id_token";
+    }>;
+    client_id: z.ZodString;
+    redirect_uri: z.ZodOptional<z.ZodURL>;
+    scope: z.ZodOptional<z.ZodString>;
+    state: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ImplicitPayload = z.output<typeof ImplicitSchema>;
 //# sourceMappingURL=implicit.d.ts.map

package/dist/cjs/oauth/authorize/schema/grants/implicit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"implicit.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/authorize/schema/grants/implicit.ts"],"names":[],"mappings":"AA2BA,eAAO,MAAM,cAAc;;;;;;;;MAAkD,CAAC;AAC9E,MAAM,MAAM,eAAe,GAAG,OAAO,cAAc,CAAC,QAAQ,CAAC"}
+{"version":3,"file":"implicit.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/authorize/schema/grants/implicit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA2BxB,eAAO,MAAM,cAAc;;;;;;;;;;;;;iBAIzB,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,cAAc,CAAC,CAAC"}