@go-mondo/identity-sdk 0.0.2-beta.12 → 0.0.2-beta.13

package/dist/cjs/oauth/authorize/schema/grants/implicit.js

@@ -1,21 +1,30 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ImplicitSchema = void 0;
-const arktype_1 = require("arktype");
+const zod_1 = require("zod");
 const schema_js_1 = require("../../../common/schema.js");
 /**
  * @see https://datatracker.ietf.org/doc/html/rfc6749#section-4.2.1
  * @see https://openid.net/specs/openid-connect-core-1_0.html#rfc.section.3.2.2.1
  */
-const ResponseTypeSchema = arktype_1.type.enumerated(schema_js_1.ResponseType.TOKEN, schema_js_1.ResponseType.ID_TOKEN, `${typeof schema_js_1.ResponseType.ID_TOKEN} ${typeof schema_js_1.ResponseType.TOKEN}`, `${typeof schema_js_1.ResponseType.TOKEN} ${typeof schema_js_1.ResponseType.ID_TOKEN}`);
-const OAuthSchema = (0, arktype_1.type)({
+const ResponseTypeSchema = zod_1.z.enum([
+    schema_js_1.ResponseType.TOKEN,
+    schema_js_1.ResponseType.ID_TOKEN,
+    `${schema_js_1.ResponseType.ID_TOKEN} ${schema_js_1.ResponseType.TOKEN}`,
+    `${schema_js_1.ResponseType.TOKEN} ${schema_js_1.ResponseType.ID_TOKEN}`,
+]);
+const OAuthSchema = zod_1.z.object({
     response_type: ResponseTypeSchema,
-    client_id: (0, arktype_1.type)('string'),
-    redirect_uri: (0, arktype_1.type)('string.url').optional(),
-    scope: (0, arktype_1.type)('string').optional(),
-    state: (0, arktype_1.type)('string').optional(),
+    client_id: zod_1.z.string(),
+    redirect_uri: zod_1.z.url().optional(),
+    scope: zod_1.z.string().optional(),
+    state: zod_1.z.string().optional(),
 });
-const OIDCSchema = (0, arktype_1.type)({
-    nonce: (0, arktype_1.type)('string').optional(), // OIDC (this is required if resposne_type includes ID TOKEN)
+const OIDCSchema = zod_1.z.object({
+    nonce: zod_1.z.string().optional(), // OIDC (this is required if resposne_type includes ID TOKEN)
+});
+exports.ImplicitSchema = zod_1.z.object({
+    ...OAuthSchema.shape,
+    ...OIDCSchema.shape,
+    ...schema_js_1.OptionalSchema.shape,
 });
-exports.ImplicitSchema = OAuthSchema.and(OIDCSchema).and(schema_js_1.OptionalSchema);

package/dist/cjs/oauth/authorize/schema/schema.d.ts

@@ -1,42 +1,50 @@
+import type { z } from 'zod';
 export * from './grants/authorization-code.js';
 export * from './grants/implicit.js';
 /**
  * Union(s)
  */
-export declare const Schema: import("arktype/out/methods/object.js").ObjectType<{
-    response_type: "code";
-    client_id: string;
-    redirect_uri?: string | undefined;
-    scope?: string | undefined;
-    state?: string | undefined;
-    nonce?: string | undefined;
-    display?: "page" | "popup" | "touch" | "wap" | undefined;
-    prompt?: "none" | "login" | "consent" | "select_account" | undefined;
-    max_age?: number | undefined;
-    code_challenge_method?: "S256" | "plain" | undefined;
-    code_challenge?: string | undefined;
-    audience?: string | undefined;
-} | {
-    response_type: "code";
-    client_id: string;
-    redirect_uri?: string | undefined;
-    scope?: string | undefined;
-    state?: string | undefined;
-    nonce?: string | undefined;
-    display?: "page" | "popup" | "touch" | "wap" | undefined;
-    prompt?: "none" | "login" | "consent" | "select_account" | undefined;
-    max_age?: number | undefined;
-    code_challenge_method: "S256" | "plain";
-    code_challenge: string;
-    audience?: string | undefined;
-} | {
-    response_type: "token" | "id_token" | "string string" | "string number" | "string bigint" | "string boolean" | "string symbol" | "string undefined" | "string object" | "string function" | "number string" | "number number" | "number bigint" | "number boolean" | "number symbol" | "number undefined" | "number object" | "number function" | "bigint string" | "bigint number" | "bigint bigint" | "bigint boolean" | "bigint symbol" | "bigint undefined" | "bigint object" | "bigint function" | "boolean string" | "boolean number" | "boolean bigint" | "boolean boolean" | "boolean symbol" | "boolean undefined" | "boolean object" | "boolean function" | "symbol string" | "symbol number" | "symbol bigint" | "symbol boolean" | "symbol symbol" | "symbol undefined" | "symbol object" | "symbol function" | "undefined string" | "undefined number" | "undefined bigint" | "undefined boolean" | "undefined symbol" | "undefined undefined" | "undefined object" | "undefined function" | "object string" | "object number" | "object bigint" | "object boolean" | "object symbol" | "object undefined" | "object object" | "object function" | "function string" | "function number" | "function bigint" | "function boolean" | "function symbol" | "function undefined" | "function object" | "function function";
-    client_id: string;
-    redirect_uri?: string | undefined;
-    scope?: string | undefined;
-    state?: string | undefined;
-    nonce?: string | undefined;
-    audience?: string | undefined;
-}, {}>;
-export type Payload = typeof Schema.inferOut;
+export declare const Schema: z.ZodUnion<[z.ZodObject<{
+    code_challenge_method: z.ZodOptional<z.ZodEnum<{
+        S256: "S256";
+        plain: "plain";
+    }>>;
+    code_challenge: z.ZodOptional<z.ZodString>;
+    audience: z.ZodOptional<z.ZodString>;
+    nonce: z.ZodOptional<z.ZodString>;
+    display: z.ZodOptional<z.ZodEnum<{
+        page: "page";
+        popup: "popup";
+        touch: "touch";
+        wap: "wap";
+    }>>;
+    prompt: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        login: "login";
+        consent: "consent";
+        select_account: "select_account";
+    }>>;
+    max_age: z.ZodOptional<z.ZodNumber>;
+    response_type: z.ZodEnum<{
+        code: "code";
+    }>;
+    client_id: z.ZodString;
+    redirect_uri: z.ZodOptional<z.ZodURL>;
+    scope: z.ZodOptional<z.ZodString>;
+    state: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    audience: z.ZodOptional<z.ZodString>;
+    nonce: z.ZodOptional<z.ZodString>;
+    response_type: z.ZodEnum<{
+        token: "token";
+        id_token: "id_token";
+        "id_token token": "id_token token";
+        "token id_token": "token id_token";
+    }>;
+    client_id: z.ZodString;
+    redirect_uri: z.ZodOptional<z.ZodURL>;
+    scope: z.ZodOptional<z.ZodString>;
+    state: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>]>;
+export type Payload = z.output<typeof Schema>;
 //# sourceMappingURL=schema.d.ts.map

package/dist/cjs/oauth/authorize/schema/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../../src/oauth/authorize/schema/schema.ts"],"names":[],"mappings":"AAGA,cAAc,gCAAgC,CAAC;AAC/C,cAAc,sBAAsB,CAAC;AAErC;;GAEG;AACH,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAA6C,CAAC;AACjE,MAAM,MAAM,OAAO,GAAG,OAAO,MAAM,CAAC,QAAQ,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../../src/oauth/authorize/schema/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAK7B,cAAc,gCAAgC,CAAC;AAC/C,cAAc,sBAAsB,CAAC;AAErC;;GAEG;AACH,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAA6C,CAAC;AACjE,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,MAAM,CAAC,CAAC"}

package/dist/cjs/oauth/common/schema.d.ts

@@ -1,3 +1,4 @@
+import { z } from 'zod';
 export declare const GrantType: {
     readonly CLIENT_CREDENTIALS: "client_credentials";
     readonly AUTHORIZATION_CODE: "authorization_code";
@@ -23,7 +24,10 @@ export declare const CodeChallengeMethod: {
     readonly PLAIN: "plain";
 };
 export type AnyCodeChallengeMethod = (typeof CodeChallengeMethod)[keyof typeof CodeChallengeMethod];
-export declare const CodeChallengeMethodSchema: import("arktype/out/methods/string").StringType<"S256" | "plain", {}>;
+export declare const CodeChallengeMethodSchema: z.ZodEnum<{
+    S256: "S256";
+    plain: "plain";
+}>;
 export declare const AuthorizationDisplay: {
     readonly PAGE: "page";
     readonly POPUP: "popup";
@@ -31,7 +35,12 @@ export declare const AuthorizationDisplay: {
     readonly WAP: "wap";
 };
 export type AnyAuthorizationDisplay = (typeof AuthorizationDisplay)[keyof typeof AuthorizationDisplay];
-export declare const AuthorizationDisplaySchema: import("arktype/out/methods/string").StringType<"page" | "popup" | "touch" | "wap", {}>;
+export declare const AuthorizationDisplaySchema: z.ZodEnum<{
+    page: "page";
+    popup: "popup";
+    touch: "touch";
+    wap: "wap";
+}>;
 export declare const AuthorizationPrompt: {
     readonly NONE: "none";
     readonly LOGIN: "login";
@@ -39,10 +48,15 @@ export declare const AuthorizationPrompt: {
     readonly SELECT_ACCOUNT: "select_account";
 };
 export type AnyAuthorizationPrompt = (typeof AuthorizationPrompt)[keyof typeof AuthorizationPrompt];
-export declare const AuthorizationPromptSchema: import("arktype/out/methods/string").StringType<"none" | "login" | "consent" | "select_account", {}>;
-export declare const OptionalSchema: import("arktype/out/methods/object").ObjectType<{
-    audience?: string | undefined;
-}, {}>;
+export declare const AuthorizationPromptSchema: z.ZodEnum<{
+    none: "none";
+    login: "login";
+    consent: "consent";
+    select_account: "select_account";
+}>;
+export declare const OptionalSchema: z.ZodObject<{
+    audience: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
 export declare const OIDCScope: {
     readonly OPENID: "openid";
     readonly PROFILE: "profile";
@@ -64,5 +78,5 @@ export declare const Scope: {
     PHONE: "phone";
 };
 export type AnyScope = AnyOAuthScope | AnyOIDCScope | string;
-export declare const ScopeSchema: import("arktype/out/methods/string").StringType<string, {}>;
+export declare const ScopeSchema: z.ZodString;
 //# sourceMappingURL=schema.d.ts.map

package/dist/cjs/oauth/common/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/oauth/common/schema.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS;;;;;CAKZ,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,CAAC;AAEtE,eAAO,MAAM,cAAc;;;;;CAKjB,CAAC;AAEX,eAAO,MAAM,YAAY;;;;CAIf,CAAC;AACX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAG/E,eAAO,MAAM,mBAAmB;;;;CAItB,CAAC;AACX,MAAM,MAAM,sBAAsB,GAChC,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;AACjE,eAAO,MAAM,yBAAyB,uEAGrC,CAAC;AAEF,eAAO,MAAM,oBAAoB;;;;;CAKvB,CAAC;AACX,MAAM,MAAM,uBAAuB,GACjC,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAC;AACnE,eAAO,MAAM,0BAA0B,yFAKtC,CAAC;AAEF,eAAO,MAAM,mBAAmB;;;;;CAKtB,CAAC;AACX,MAAM,MAAM,sBAAsB,GAChC,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;AACjE,eAAO,MAAM,yBAAyB,sGAKrC,CAAC;AAEF,eAAO,MAAM,cAAc;;MAEzB,CAAC;AAEH,eAAO,MAAM,SAAS;;;;;;CAMZ,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,CAAC;AAEtE,eAAO,MAAM,UAAU;;CAEb,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,OAAO,UAAU,CAAC,CAAC;AAEzE,eAAO,MAAM,KAAK;;;;;;;CAGjB,CAAC;AACF,MAAM,MAAM,QAAQ,GAAG,aAAa,GAAG,YAAY,GAAG,MAAM,CAAC;AAC7D,eAAO,MAAM,WAAW,6DAAiB,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/oauth/common/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,SAAS;;;;;CAKZ,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,CAAC;AAEtE,eAAO,MAAM,cAAc;;;;;CAKjB,CAAC;AAEX,eAAO,MAAM,YAAY;;;;CAIf,CAAC;AACX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAG/E,eAAO,MAAM,mBAAmB;;;;CAItB,CAAC;AACX,MAAM,MAAM,sBAAsB,GAChC,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;AACjE,eAAO,MAAM,yBAAyB;;;EAG3B,CAAC;AAEZ,eAAO,MAAM,oBAAoB;;;;;CAKvB,CAAC;AACX,MAAM,MAAM,uBAAuB,GACjC,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAC;AACnE,eAAO,MAAM,0BAA0B;;;;;EAK5B,CAAC;AAEZ,eAAO,MAAM,mBAAmB;;;;;CAKtB,CAAC;AACX,MAAM,MAAM,sBAAsB,GAChC,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;AACjE,eAAO,MAAM,yBAAyB;;;;;EAK3B,CAAC;AAEZ,eAAO,MAAM,cAAc;;iBAEzB,CAAC;AAEH,eAAO,MAAM,SAAS;;;;;;CAMZ,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,CAAC;AAEtE,eAAO,MAAM,UAAU;;CAEb,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,OAAO,UAAU,CAAC,CAAC;AAEzE,eAAO,MAAM,KAAK;;;;;;;CAGjB,CAAC;AACF,MAAM,MAAM,QAAQ,GAAG,aAAa,GAAG,YAAY,GAAG,MAAM,CAAC;AAC7D,eAAO,MAAM,WAAW,aAAa,CAAC"}

package/dist/cjs/oauth/common/schema.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ScopeSchema = exports.Scope = exports.OAuthScope = exports.OIDCScope = exports.OptionalSchema = exports.AuthorizationPromptSchema = exports.AuthorizationPrompt = exports.AuthorizationDisplaySchema = exports.AuthorizationDisplay = exports.CodeChallengeMethodSchema = exports.CodeChallengeMethod = exports.ResponseType = exports.GrantTypeLabel = exports.GrantType = void 0;
-const arktype_1 = require("arktype");
+const zod_1 = require("zod");
 exports.GrantType = {
     CLIENT_CREDENTIALS: 'client_credentials',
     AUTHORIZATION_CODE: 'authorization_code',
@@ -25,23 +25,36 @@ exports.CodeChallengeMethod = {
     S256: 'S256',
     PLAIN: 'plain',
 };
-exports.CodeChallengeMethodSchema = arktype_1.type.enumerated(exports.CodeChallengeMethod.PLAIN, exports.CodeChallengeMethod.S256);
+exports.CodeChallengeMethodSchema = zod_1.z.enum([
+    exports.CodeChallengeMethod.PLAIN,
+    exports.CodeChallengeMethod.S256,
+]);
 exports.AuthorizationDisplay = {
     PAGE: 'page',
     POPUP: 'popup',
     TOUCH: 'touch',
     WAP: 'wap',
 };
-exports.AuthorizationDisplaySchema = arktype_1.type.enumerated(exports.AuthorizationDisplay.PAGE, exports.AuthorizationDisplay.POPUP, exports.AuthorizationDisplay.TOUCH, exports.AuthorizationDisplay.WAP);
+exports.AuthorizationDisplaySchema = zod_1.z.enum([
+    exports.AuthorizationDisplay.PAGE,
+    exports.AuthorizationDisplay.POPUP,
+    exports.AuthorizationDisplay.TOUCH,
+    exports.AuthorizationDisplay.WAP,
+]);
 exports.AuthorizationPrompt = {
     NONE: 'none',
     LOGIN: 'login',
     CONSENT: 'consent',
     SELECT_ACCOUNT: 'select_account',
 };
-exports.AuthorizationPromptSchema = arktype_1.type.enumerated(exports.AuthorizationPrompt.NONE, exports.AuthorizationPrompt.LOGIN, exports.AuthorizationPrompt.CONSENT, exports.AuthorizationPrompt.SELECT_ACCOUNT);
-exports.OptionalSchema = (0, arktype_1.type)({
-    audience: (0, arktype_1.type)('string').optional(),
+exports.AuthorizationPromptSchema = zod_1.z.enum([
+    exports.AuthorizationPrompt.NONE,
+    exports.AuthorizationPrompt.LOGIN,
+    exports.AuthorizationPrompt.CONSENT,
+    exports.AuthorizationPrompt.SELECT_ACCOUNT,
+]);
+exports.OptionalSchema = zod_1.z.object({
+    audience: zod_1.z.string().optional(),
 });
 exports.OIDCScope = {
     OPENID: 'openid',
@@ -57,4 +70,4 @@ exports.Scope = {
     ...exports.OIDCScope,
     ...exports.OAuthScope,
 };
-exports.ScopeSchema = (0, arktype_1.type)('string');
+exports.ScopeSchema = zod_1.z.string();

package/dist/cjs/oauth/common/schema.test.js

@@ -1,6 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-const arktype_1 = require("arktype");
 const vitest_1 = require("vitest");
 const schema_js_1 = require("./schema.js");
 (0, vitest_1.describe)('OAuth Common Schema', () => {
@@ -62,14 +61,14 @@ const schema_js_1 = require("./schema.js");
             (0, vitest_1.expect)(schema_js_1.CodeChallengeMethod.PLAIN).toBe('plain');
         });
         (0, vitest_1.test)('CodeChallengeMethodSchema should validate valid methods', () => {
-            const validResult1 = (0, schema_js_1.CodeChallengeMethodSchema)('S256');
+            const validResult1 = schema_js_1.CodeChallengeMethodSchema.parse('S256');
             (0, vitest_1.expect)(validResult1).toBe('S256');
-            const validResult2 = (0, schema_js_1.CodeChallengeMethodSchema)('plain');
+            const validResult2 = schema_js_1.CodeChallengeMethodSchema.parse('plain');
             (0, vitest_1.expect)(validResult2).toBe('plain');
         });
         (0, vitest_1.test)('CodeChallengeMethodSchema should reject invalid methods', () => {
-            const invalidResult = (0, schema_js_1.CodeChallengeMethodSchema)('invalid_method');
-            (0, vitest_1.expect)(invalidResult).toBeInstanceOf(arktype_1.type.errors);
+            const invalidResult = schema_js_1.CodeChallengeMethodSchema.safeParse('invalid_method');
+            (0, vitest_1.expect)(invalidResult.success).toBe(false);
         });
         (0, vitest_1.test)('AnyCodeChallengeMethod type should work with valid values', () => {
             const validMethods = ['S256', 'plain'];
@@ -88,13 +87,13 @@ const schema_js_1 = require("./schema.js");
         (0, vitest_1.test)('AuthorizationDisplaySchema should validate valid display values', () => {
             const validDisplays = ['page', 'popup', 'touch', 'wap'];
             for (const display of validDisplays) {
-                const result = (0, schema_js_1.AuthorizationDisplaySchema)(display);
+                const result = schema_js_1.AuthorizationDisplaySchema.parse(display);
                 (0, vitest_1.expect)(result).toBe(display);
             }
         });
         (0, vitest_1.test)('AuthorizationDisplaySchema should reject invalid display values', () => {
-            const invalidResult = (0, schema_js_1.AuthorizationDisplaySchema)('invalid_display');
-            (0, vitest_1.expect)(invalidResult).toBeInstanceOf(arktype_1.type.errors);
+            const invalidResult = schema_js_1.AuthorizationDisplaySchema.safeParse('invalid_display');
+            (0, vitest_1.expect)(invalidResult.success).toBe(false);
         });
         (0, vitest_1.test)('AnyAuthorizationDisplay type should work with valid values', () => {
             const validDisplays = [
@@ -118,13 +117,13 @@ const schema_js_1 = require("./schema.js");
         (0, vitest_1.test)('AuthorizationPromptSchema should validate valid prompt values', () => {
             const validPrompts = ['none', 'login', 'consent', 'select_account'];
             for (const prompt of validPrompts) {
-                const result = (0, schema_js_1.AuthorizationPromptSchema)(prompt);
+                const result = schema_js_1.AuthorizationPromptSchema.parse(prompt);
                 (0, vitest_1.expect)(result).toBe(prompt);
             }
         });
         (0, vitest_1.test)('AuthorizationPromptSchema should reject invalid prompt values', () => {
-            const invalidResult = (0, schema_js_1.AuthorizationPromptSchema)('invalid_prompt');
-            (0, vitest_1.expect)(invalidResult).toBeInstanceOf(arktype_1.type.errors);
+            const invalidResult = schema_js_1.AuthorizationPromptSchema.safeParse('invalid_prompt');
+            (0, vitest_1.expect)(invalidResult.success).toBe(false);
         });
         (0, vitest_1.test)('AnyAuthorizationPrompt type should work with valid values', () => {
             const validPrompts = [
@@ -140,18 +139,18 @@ const schema_js_1 = require("./schema.js");
     });
     (0, vitest_1.describe)('OptionalSchema', () => {
         (0, vitest_1.test)('should validate object with optional audience', () => {
-            const validWithAudience = (0, schema_js_1.OptionalSchema)({
+            const validWithAudience = schema_js_1.OptionalSchema.parse({
                 audience: 'https://api.example.com',
             });
             (0, vitest_1.expect)(validWithAudience).toEqual({
                 audience: 'https://api.example.com',
             });
-            const validWithoutAudience = (0, schema_js_1.OptionalSchema)({});
+            const validWithoutAudience = schema_js_1.OptionalSchema.parse({});
             (0, vitest_1.expect)(validWithoutAudience).toEqual({});
         });
         (0, vitest_1.test)('should reject non-string audience values', () => {
-            const invalidResult = (0, schema_js_1.OptionalSchema)({ audience: 123 });
-            (0, vitest_1.expect)(invalidResult).toBeInstanceOf(arktype_1.type.errors);
+            const invalidResult = schema_js_1.OptionalSchema.safeParse({ audience: 123 });
+            (0, vitest_1.expect)(invalidResult.success).toBe(false);
         });
         (0, vitest_1.test)('should allow additional properties to be filtered', () => {
             // Depending on schema configuration, extra properties might be filtered
@@ -159,7 +158,7 @@ const schema_js_1 = require("./schema.js");
                 audience: 'https://api.example.com',
                 extraProperty: 'should be handled based on schema config',
             };
-            const result = (0, schema_js_1.OptionalSchema)(input);
+            const result = schema_js_1.OptionalSchema.parse(input);
             // The result depends on schema configuration (onUndeclaredKey behavior)
             (0, vitest_1.expect)(result).toHaveProperty('audience', 'https://api.example.com');
         });
@@ -224,15 +223,15 @@ const schema_js_1 = require("./schema.js");
                 'offline_access',
             ];
             for (const scope of validScopes) {
-                const result = (0, schema_js_1.ScopeSchema)(scope);
+                const result = schema_js_1.ScopeSchema.parse(scope);
                 (0, vitest_1.expect)(result).toBe(scope);
             }
         });
         (0, vitest_1.test)('ScopeSchema should reject non-string values', () => {
             const invalidValues = [123, true, null, undefined, {}, []];
             for (const value of invalidValues) {
-                const result = (0, schema_js_1.ScopeSchema)(value);
-                (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+                const result = schema_js_1.ScopeSchema.safeParse(value);
+                (0, vitest_1.expect)(result.success).toBe(false);
             }
         });
     });
@@ -265,25 +264,25 @@ const schema_js_1 = require("./schema.js");
     (0, vitest_1.describe)('Schema edge cases', () => {
         (0, vitest_1.test)('should handle empty strings appropriately', () => {
             const emptyString = '';
-            const scopeResult = (0, schema_js_1.ScopeSchema)(emptyString);
+            const scopeResult = schema_js_1.ScopeSchema.parse(emptyString);
             (0, vitest_1.expect)(scopeResult).toBe(emptyString); // Empty string is valid string
-            const challengeResult = (0, schema_js_1.CodeChallengeMethodSchema)(emptyString);
-            (0, vitest_1.expect)(challengeResult).toBeInstanceOf(arktype_1.type.errors); // Empty string not valid enum
+            const challengeResult = schema_js_1.CodeChallengeMethodSchema.safeParse(emptyString);
+            (0, vitest_1.expect)(challengeResult.success).toBe(false); // Empty string not valid enum
         });
         (0, vitest_1.test)('should handle whitespace and special characters', () => {
             const spacedScope = '  openid profile  ';
-            const result = (0, schema_js_1.ScopeSchema)(spacedScope);
+            const result = schema_js_1.ScopeSchema.parse(spacedScope);
             (0, vitest_1.expect)(result).toBe(spacedScope); // Preserves whitespace
             const specialScope = 'custom:read+write';
-            const specialResult = (0, schema_js_1.ScopeSchema)(specialScope);
+            const specialResult = schema_js_1.ScopeSchema.parse(specialScope);
             (0, vitest_1.expect)(specialResult).toBe(specialScope);
         });
         (0, vitest_1.test)('should validate complex optional schema scenarios', () => {
-            const complexValid = (0, schema_js_1.OptionalSchema)({
+            const complexValid = schema_js_1.OptionalSchema.parse({
                 audience: 'urn:example:audience',
             });
             (0, vitest_1.expect)(complexValid.audience).toBe('urn:example:audience');
-            const emptyValid = (0, schema_js_1.OptionalSchema)({});
+            const emptyValid = schema_js_1.OptionalSchema.parse({});
             (0, vitest_1.expect)(emptyValid).toEqual({});
         });
     });

package/dist/cjs/oauth/token/schema/grants/authorization-code.d.ts

@@ -1,10 +1,13 @@
-export declare const AuthorizationCodeSchema: import("arktype/out/methods/object.js").ObjectType<{
-    grant_type: "authorization_code";
-    code: string;
-    client_id: string;
-    redirect_uri: string;
-    client_secret?: string | undefined;
-    code_verifier?: string | undefined;
-}, {}>;
-export type AuthorizationCodePayload = typeof AuthorizationCodeSchema.inferOut;
+import { z } from 'zod';
+export declare const AuthorizationCodeSchema: z.ZodObject<{
+    code_verifier: z.ZodOptional<z.ZodString>;
+    grant_type: z.ZodEnum<{
+        authorization_code: "authorization_code";
+    }>;
+    code: z.ZodString;
+    client_id: z.ZodString;
+    client_secret: z.ZodOptional<z.ZodString>;
+    redirect_uri: z.ZodURL;
+}, z.core.$strip>;
+export type AuthorizationCodePayload = z.output<typeof AuthorizationCodeSchema>;
 //# sourceMappingURL=authorization-code.d.ts.map

package/dist/cjs/oauth/token/schema/grants/authorization-code.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-code.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/token/schema/grants/authorization-code.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,uBAAuB;;;;;;;MAMlB,CAAC;AACnB,MAAM,MAAM,wBAAwB,GAAG,OAAO,uBAAuB,CAAC,QAAQ,CAAC"}
+{"version":3,"file":"authorization-code.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/token/schema/grants/authorization-code.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAcxB,eAAO,MAAM,uBAAuB;;;;;;;;;iBAOlC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC"}

package/dist/cjs/oauth/token/schema/grants/authorization-code.js

@@ -1,20 +1,21 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthorizationCodeSchema = void 0;
-const arktype_1 = require("arktype");
+const zod_1 = require("zod");
 const schema_js_1 = require("../../../common/schema.js");
 /**
  * @see https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.3
  * @see https://openid.net/specs/openid-connect-core-1_0.html#rfc.section.3.1.3.1
  */
-const GrantTypeSchema = arktype_1.type.enumerated(schema_js_1.GrantType.AUTHORIZATION_CODE);
-const PKCESchema = (0, arktype_1.type)({
-    code_verifier: (0, arktype_1.type)('string').optional(),
+const GrantTypeSchema = zod_1.z.enum([schema_js_1.GrantType.AUTHORIZATION_CODE]);
+const PKCESchema = zod_1.z.object({
+    code_verifier: zod_1.z.string().optional(),
 });
-exports.AuthorizationCodeSchema = (0, arktype_1.type)({
+exports.AuthorizationCodeSchema = zod_1.z.object({
     grant_type: GrantTypeSchema,
-    code: (0, arktype_1.type)('string'),
-    client_id: (0, arktype_1.type)('string'),
-    client_secret: (0, arktype_1.type)('string').optional(),
-    redirect_uri: (0, arktype_1.type)('string.url'),
-}).and(PKCESchema);
+    code: zod_1.z.string(),
+    client_id: zod_1.z.string(),
+    client_secret: zod_1.z.string().optional(),
+    redirect_uri: zod_1.z.url(),
+    ...PKCESchema.shape,
+});

package/dist/cjs/oauth/token/schema/grants/client-credentials.d.ts

@@ -1,21 +1,26 @@
+import { z } from 'zod';
 /**
  * What the incoming body may look like.
  *
  * Note: the client_id and client_secrete may (likely) be in Authorization header
  */
-export declare const ClientCredentialsPayloadSchema: import("arktype/out/methods/object.js").ObjectType<{
-    grant_type: "client_credentials";
-    scope?: string | undefined;
-    client_id?: string | undefined;
-    client_secret?: string | undefined;
-    audience?: string | undefined;
-}, {}>;
-export declare const ClientCredentialsSchema: import("arktype/out/methods/object.js").ObjectType<{
-    grant_type: "client_credentials";
-    scope?: string | undefined;
-    audience?: string | undefined;
-    client_id: string;
-    client_secret: string;
-}, {}>;
-export type ClientCredentialsPayload = typeof ClientCredentialsSchema.inferOut;
+export declare const ClientCredentialsPayloadSchema: z.ZodObject<{
+    audience: z.ZodOptional<z.ZodString>;
+    grant_type: z.ZodEnum<{
+        client_credentials: "client_credentials";
+    }>;
+    scope: z.ZodOptional<z.ZodString>;
+    client_id: z.ZodOptional<z.ZodString>;
+    client_secret: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const ClientCredentialsSchema: z.ZodObject<{
+    client_id: z.ZodString;
+    client_secret: z.ZodString;
+    audience: z.ZodOptional<z.ZodString>;
+    scope: z.ZodOptional<z.ZodString>;
+    grant_type: z.ZodEnum<{
+        client_credentials: "client_credentials";
+    }>;
+}, z.core.$strip>;
+export type ClientCredentialsPayload = z.output<typeof ClientCredentialsSchema>;
 //# sourceMappingURL=client-credentials.d.ts.map

package/dist/cjs/oauth/token/schema/grants/client-credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client-credentials.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/token/schema/grants/client-credentials.ts"],"names":[],"mappings":"AAUA;;;;GAIG;AACH,eAAO,MAAM,8BAA8B;;;;;;MAKrB,CAAC;AAEvB,eAAO,MAAM,uBAAuB;;;;;;MAMlC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,OAAO,uBAAuB,CAAC,QAAQ,CAAC"}
+{"version":3,"file":"client-credentials.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/token/schema/grants/client-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB;;;;GAIG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;iBAMzC,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;iBAOlC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC"}

package/dist/cjs/oauth/token/schema/grants/client-credentials.js

@@ -1,25 +1,30 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ClientCredentialsSchema = exports.ClientCredentialsPayloadSchema = void 0;
-const arktype_1 = require("arktype");
+const zod_1 = require("zod");
 const schema_js_1 = require("../../../../app/schema.js");
 const schema_js_2 = require("../../../common/schema.js");
 /**
  * @see https://datatracker.ietf.org/doc/html/rfc6749#section-4.4.2
  */
-const GrantTypeSchema = arktype_1.type.enumerated(schema_js_2.GrantType.CLIENT_CREDENTIALS);
+const GrantTypeSchema = zod_1.z.enum([schema_js_2.GrantType.CLIENT_CREDENTIALS]);
 /**
  * What the incoming body may look like.
  *
  * Note: the client_id and client_secrete may (likely) be in Authorization header
  */
-exports.ClientCredentialsPayloadSchema = (0, arktype_1.type)({
+exports.ClientCredentialsPayloadSchema = zod_1.z.object({
     grant_type: GrantTypeSchema,
-    scope: (0, arktype_1.type)('string').optional(),
+    scope: zod_1.z.string().optional(),
     client_id: schema_js_1.AppIdSchema.optional(),
-    client_secret: (0, arktype_1.type)('string').optional(),
-}).and(schema_js_2.OptionalSchema);
-exports.ClientCredentialsSchema = exports.ClientCredentialsPayloadSchema.omit('client_id', 'client_secret').and({
+    client_secret: zod_1.z.string().optional(),
+    ...schema_js_2.OptionalSchema.shape,
+});
+exports.ClientCredentialsSchema = zod_1.z.object({
+    ...exports.ClientCredentialsPayloadSchema.omit({
+        client_id: true,
+        client_secret: true,
+    }).shape,
     client_id: schema_js_1.AppIdSchema,
-    client_secret: (0, arktype_1.type)('string'),
+    client_secret: zod_1.z.string(),
 });

package/dist/cjs/oauth/token/schema/grants/refresh-token.d.ts

@@ -1,9 +1,12 @@
-export declare const RefreshTokenSchema: import("arktype/out/methods/object.js").ObjectType<{
-    grant_type: "refresh_token";
-    refresh_token: string;
-    client_id: string;
-    client_secret: string;
-    scope?: string | undefined;
-}, {}>;
-export type RefreshTokenPayload = typeof RefreshTokenSchema.inferOut;
+import { z } from 'zod';
+export declare const RefreshTokenSchema: z.ZodObject<{
+    grant_type: z.ZodEnum<{
+        refresh_token: "refresh_token";
+    }>;
+    refresh_token: z.ZodString;
+    scope: z.ZodOptional<z.ZodString>;
+    client_id: z.ZodString;
+    client_secret: z.ZodString;
+}, z.core.$strip>;
+export type RefreshTokenPayload = z.output<typeof RefreshTokenSchema>;
 //# sourceMappingURL=refresh-token.d.ts.map

package/dist/cjs/oauth/token/schema/grants/refresh-token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"refresh-token.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/token/schema/grants/refresh-token.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,kBAAkB;;;;;;MAM7B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,OAAO,kBAAkB,CAAC,QAAQ,CAAC"}
+{"version":3,"file":"refresh-token.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/token/schema/grants/refresh-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,eAAO,MAAM,kBAAkB;;;;;;;;iBAM7B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/cjs/oauth/token/schema/grants/refresh-token.js

@@ -1,17 +1,17 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.RefreshTokenSchema = void 0;
-const arktype_1 = require("arktype");
+const zod_1 = require("zod");
 const schema_js_1 = require("../../../../app/schema.js");
 const schema_js_2 = require("../../../common/schema.js");
 /**
  * @see https://datatracker.ietf.org/doc/html/rfc6749#section-6
  */
-const GrantTypeSchema = arktype_1.type.enumerated(schema_js_2.GrantType.REFRESH_TOKEN);
-exports.RefreshTokenSchema = (0, arktype_1.type)({
+const GrantTypeSchema = zod_1.z.enum([schema_js_2.GrantType.REFRESH_TOKEN]);
+exports.RefreshTokenSchema = zod_1.z.object({
     grant_type: GrantTypeSchema,
-    refresh_token: (0, arktype_1.type)('string'),
-    scope: (0, arktype_1.type)('string').optional(),
+    refresh_token: zod_1.z.string(),
+    scope: zod_1.z.string().optional(),
     client_id: schema_js_1.AppIdSchema,
-    client_secret: (0, arktype_1.type)('string'),
+    client_secret: zod_1.z.string(),
 });