@go-mondo/identity-sdk 0.0.2-beta.4 → 0.0.2-beta.41

package/dist/cjs/activity/schema/types/unknown.test.js

@@ -0,0 +1,274 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const utils_js_1 = require("../utils.js");
+const unknown_js_1 = require("./unknown.js");
+(0, vitest_1.describe)('Activity Schema - Unknown', () => {
+    (0, vitest_1.describe)('UnknownActivitySchema', () => {
+        (0, vitest_1.test)('should accept complete unknown activity', () => {
+            const activity = {
+                id: (0, utils_js_1.generateActivityId)(),
+                type: 'unknown',
+                message: 'Unrecognized activity detected',
+                performedBy: {
+                    type: 'guest',
+                    identifier: 'anonymous-user',
+                },
+                source: 'external-webhook',
+                isMutateable: true,
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                metadata: { webhook_source: 'third-party', event_type: 'custom' },
+            };
+            const result = unknown_js_1.UnknownActivitySchema.safeParse(activity);
+            // Parse succeeds for valid data
+        });
+        (0, vitest_1.test)('should accept unknown activity with system performer', () => {
+            const activity = {
+                id: (0, utils_js_1.generateActivityId)(),
+                type: 'unknown',
+                message: 'System detected unexpected behavior',
+                performedBy: {
+                    type: 'system',
+                    identifier: 'anomaly-detector',
+                },
+                source: 'monitoring-service',
+                isMutateable: false,
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                metadata: { severity: 'low', category: 'anomaly' },
+            };
+            const result = unknown_js_1.UnknownActivitySchema.safeParse(activity);
+            // Parse succeeds for valid data
+        });
+        (0, vitest_1.test)('should accept unknown activity with integration performer', () => {
+            const activity = {
+                id: (0, utils_js_1.generateActivityId)(),
+                type: 'unknown',
+                message: 'Received unknown event from integration',
+                performedBy: {
+                    type: 'integration',
+                    identifier: 'webhook-handler',
+                },
+                source: 'api-gateway',
+                isMutateable: true,
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                metadata: {
+                    integration: 'external-crm',
+                    event: 'unknown_event_type',
+                    raw_data: '{"type":"unknown","data":{}}',
+                },
+            };
+            const result = unknown_js_1.UnknownActivitySchema.safeParse(activity);
+            // Parse succeeds for valid data
+        });
+        (0, vitest_1.test)('should accept unknown activity with optional fields', () => {
+            const activity = {
+                id: (0, utils_js_1.generateActivityId)(),
+                type: 'unknown',
+                message: 'Legacy system activity logged',
+                performedBy: {
+                    type: 'automation',
+                    identifier: 'legacy-bridge',
+                },
+                source: 'legacy-system',
+                isMutateable: true,
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                deletedAt: new Date(),
+                deactivatedAt: new Date(),
+                metadata: {
+                    legacy_id: 'old_system_123',
+                    migrated: false,
+                },
+            };
+            const result = unknown_js_1.UnknownActivitySchema.safeParse(activity);
+            // Parse succeeds for valid data
+        });
+        (0, vitest_1.test)('should reject unknown activity with wrong type', () => {
+            const activity = {
+                id: (0, utils_js_1.generateActivityId)(),
+                type: 'note',
+                message: 'Wrong type activity',
+                performedBy: {
+                    type: 'guest',
+                    identifier: 'anonymous',
+                },
+                source: 'test',
+                isMutateable: true,
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                metadata: {},
+            };
+            const result = unknown_js_1.UnknownActivitySchema.safeParse(activity);
+            (0, vitest_1.expect)(result.success).toBe(false);
+        });
+        (0, vitest_1.test)('should reject unknown activity missing message', () => {
+            const activity = {
+                id: (0, utils_js_1.generateActivityId)(),
+                type: 'unknown',
+                // missing message
+                performedBy: {
+                    type: 'guest',
+                    identifier: 'anonymous',
+                },
+                source: 'test',
+                isMutateable: true,
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                metadata: {},
+            };
+            const result = unknown_js_1.UnknownActivitySchema.safeParse(activity);
+            (0, vitest_1.expect)(result.success).toBe(false);
+        });
+        (0, vitest_1.test)('should reject unknown activity with non-string message', () => {
+            const activity = {
+                id: (0, utils_js_1.generateActivityId)(),
+                type: 'unknown',
+                message: 123,
+                performedBy: {
+                    type: 'guest',
+                    identifier: 'anonymous',
+                },
+                source: 'test',
+                isMutateable: true,
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                metadata: {},
+            };
+            const result = unknown_js_1.UnknownActivitySchema.safeParse(activity);
+            (0, vitest_1.expect)(result.success).toBe(false);
+        });
+        (0, vitest_1.test)('should reject unknown activity missing required base fields', () => {
+            const activity = {
+                id: (0, utils_js_1.generateActivityId)(),
+                type: 'unknown',
+                message: 'Test message',
+                // missing performedBy, source, isMutateable, dates, metadata
+            };
+            const result = unknown_js_1.UnknownActivitySchema.safeParse(activity);
+            (0, vitest_1.expect)(result.success).toBe(false);
+        });
+    });
+    (0, vitest_1.describe)('UnknownActivityPayloadSchema', () => {
+        (0, vitest_1.test)('should accept complete unknown activity payload', () => {
+            const payload = {
+                id: (0, utils_js_1.generateActivityId)(),
+                type: 'unknown',
+                message: 'Unknown event from external source',
+                performedBy: {
+                    type: 'integration',
+                    identifier: 'webhook-processor',
+                },
+                source: 'external-api',
+                isMutateable: true,
+                createdAt: new Date().toISOString(),
+                updatedAt: new Date().toISOString(),
+                metadata: {
+                    source_system: 'partner-api',
+                    event_id: 'evt_123456',
+                    processed: false,
+                },
+            };
+            const result = unknown_js_1.UnknownActivityPayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            (0, vitest_1.expect)(result.data).toEqual(payload);
+        });
+        (0, vitest_1.test)('should accept minimal unknown activity payload', () => {
+            const payload = {
+                id: (0, utils_js_1.generateActivityId)(),
+                type: 'unknown',
+                message: 'Simple unknown event',
+                performedBy: {
+                    type: 'guest',
+                    identifier: 'anonymous',
+                },
+                source: 'unknown-source',
+                isMutateable: false,
+                createdAt: new Date().toISOString(),
+                updatedAt: new Date().toISOString(),
+                metadata: {},
+            };
+            const result = unknown_js_1.UnknownActivityPayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+        });
+        (0, vitest_1.test)('should accept payload with optional date fields', () => {
+            const payload = {
+                id: (0, utils_js_1.generateActivityId)(),
+                type: 'unknown',
+                message: 'Archived unknown activity',
+                performedBy: {
+                    type: 'system',
+                    identifier: 'archival-service',
+                },
+                source: 'data-cleanup',
+                isMutateable: false,
+                createdAt: new Date().toISOString(),
+                updatedAt: new Date().toISOString(),
+                deletedAt: new Date().toISOString(),
+                deactivatedAt: new Date().toISOString(),
+                metadata: {
+                    archived: true,
+                    retention_policy: 'long_term',
+                },
+            };
+            const result = unknown_js_1.UnknownActivityPayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+        });
+        (0, vitest_1.test)('should reject payload with invalid date format', () => {
+            const payload = {
+                id: (0, utils_js_1.generateActivityId)(),
+                type: 'unknown',
+                message: 'Test unknown activity',
+                performedBy: {
+                    type: 'guest',
+                    identifier: 'anonymous',
+                },
+                source: 'test',
+                isMutateable: true,
+                createdAt: 'invalid-date-format',
+                updatedAt: new Date().toISOString(),
+                metadata: {},
+            };
+            const result = unknown_js_1.UnknownActivityPayloadSchema.safeParse(payload);
+            (0, vitest_1.expect)(result.success).toBe(false);
+        });
+        (0, vitest_1.test)('should reject payload with wrong type', () => {
+            const payload = {
+                id: (0, utils_js_1.generateActivityId)(),
+                type: 'operation',
+                message: 'Wrong type payload',
+                performedBy: {
+                    type: 'guest',
+                    identifier: 'anonymous',
+                },
+                source: 'test',
+                isMutateable: true,
+                createdAt: new Date().toISOString(),
+                updatedAt: new Date().toISOString(),
+                metadata: {},
+            };
+            const result = unknown_js_1.UnknownActivityPayloadSchema.safeParse(payload);
+            (0, vitest_1.expect)(result.success).toBe(false);
+        });
+        (0, vitest_1.test)('should reject payload missing message', () => {
+            const payload = {
+                id: (0, utils_js_1.generateActivityId)(),
+                type: 'unknown',
+                // missing message
+                performedBy: {
+                    type: 'guest',
+                    identifier: 'anonymous',
+                },
+                source: 'test',
+                isMutateable: true,
+                createdAt: new Date().toISOString(),
+                updatedAt: new Date().toISOString(),
+                metadata: {},
+            };
+            const result = unknown_js_1.UnknownActivityPayloadSchema.safeParse(payload);
+            (0, vitest_1.expect)(result.success).toBe(false);
+        });
+    });
+});

package/dist/cjs/activity/schema/utils.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=utils.test.d.ts.map

package/dist/cjs/activity/schema/utils.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.test.d.ts","sourceRoot":"","sources":["../../../../src/activity/schema/utils.test.ts"],"names":[],"mappings":""}

package/dist/cjs/activity/schema/utils.test.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const utils_js_1 = require("./utils.js");
+(0, vitest_1.describe)('Activity Schema - Utils', () => {
+    (0, vitest_1.describe)('Model constants', () => {
+        (0, vitest_1.test)('should have correct UID prefix', () => {
+            (0, vitest_1.expect)(utils_js_1.Model.Activity.UIDPrefix).toBe('act');
+        });
+    });
+    (0, vitest_1.describe)('generateActivityId', () => {
+        (0, vitest_1.test)('should generate ID with correct prefix', () => {
+            const id = (0, utils_js_1.generateActivityId)();
+            (0, vitest_1.expect)(id).toMatch(/^act_[A-Za-z0-9]+$/);
+        });
+        (0, vitest_1.test)('should generate unique IDs', () => {
+            const id1 = (0, utils_js_1.generateActivityId)();
+            const id2 = (0, utils_js_1.generateActivityId)();
+            (0, vitest_1.expect)(id1).not.toBe(id2);
+        });
+        (0, vitest_1.test)('should generate IDs with correct length', () => {
+            const id = (0, utils_js_1.generateActivityId)();
+            (0, vitest_1.expect)(id.length).toBeGreaterThan(4); // prefix + underscore + KSUID
+        });
+    });
+});

package/dist/cjs/app/authorization/resources.d.ts

@@ -0,0 +1,12 @@
+import type { MondoIdentity } from '../../common/resources/init.js';
+import { type Authorization, type UpsertAuthorizationInput } from './schema.js';
+export declare class AuthorizationResources {
+    private readonly instance;
+    constructor(instance: MondoIdentity);
+    static buildPath(appId: string): string;
+    getItem(id: string): Promise<Authorization>;
+    upsertItem(appId: string, item: UpsertAuthorizationInput): Promise<Authorization>;
+}
+export declare function getAuthorization(instance: MondoIdentity, appId: string): Promise<Authorization>;
+export declare function upsertAuthorization(instance: MondoIdentity, appId: string, item: UpsertAuthorizationInput): Promise<Authorization>;
+//# sourceMappingURL=resources.d.ts.map

package/dist/cjs/app/authorization/resources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../../../src/app/authorization/resources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAMpE,OAAO,EACL,KAAK,aAAa,EAElB,KAAK,wBAAwB,EAE9B,MAAM,aAAa,CAAC;AAIrB,qBAAa,sBAAsB;IACd,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,aAAa;IAE3D,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAIhC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAI3C,UAAU,CACf,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,aAAa,CAAC;CAG1B;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,aAAa,EACvB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,aAAa,CAAC,CAOxB;AAED,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,aAAa,EACvB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,aAAa,CAAC,CAQxB"}

package/dist/cjs/app/authorization/resources.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthorizationResources = void 0;
+exports.getAuthorization = getAuthorization;
+exports.upsertAuthorization = upsertAuthorization;
+const operations_js_1 = require("../../common/resources/operations.js");
+const resources_js_1 = require("../resources.js");
+const schema_js_1 = require("./schema.js");
+const RESOURCE = 'authorization';
+class AuthorizationResources {
+    instance;
+    constructor(instance) {
+        this.instance = instance;
+    }
+    static buildPath(appId) {
+        return [resources_js_1.PATH, appId, RESOURCE].filter(Boolean).join('/');
+    }
+    getItem(id) {
+        return getAuthorization(this.instance, id);
+    }
+    upsertItem(appId, item) {
+        return upsertAuthorization(this.instance, appId, item);
+    }
+}
+exports.AuthorizationResources = AuthorizationResources;
+async function getAuthorization(instance, appId) {
+    return schema_js_1.AuthorizationSchema.parse(await (0, operations_js_1.getItemWithAuthorization)(new URL(AuthorizationResources.buildPath(appId), instance.config.host), instance.authorizer));
+}
+async function upsertAuthorization(instance, appId, item) {
+    return schema_js_1.AuthorizationSchema.parse(await (0, operations_js_1.putItemWithAuthorization)(new URL(AuthorizationResources.buildPath(appId), instance.config.host), instance.authorizer, schema_js_1.UpsertAuthorizationPayloadSchema.parse(item)));
+}

package/dist/cjs/app/authorization/schema.d.ts

@@ -0,0 +1,101 @@
+import * as z from 'zod/v4';
+import { type AnyGrantType } from '../../oauth/common/schema.js';
+export declare const AuthorizationSchema: z.ZodObject<{
+    metadata: z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Map<string, string | number | boolean>, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>;
+    deactivatedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    deletedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    loginUri: z.ZodOptional<z.ZodUnion<readonly [z.ZodURL, z.ZodUndefined]>>;
+    callbackUrls: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodPipe<z.ZodArray<z.ZodUnion<[z.ZodPipe<z.ZodURL, z.ZodTransform<URL, string>>, z.ZodCustom<URL, URL>]>>, z.ZodTransform<URL[], URL[]>>, z.ZodCustom<Set<URL>, Set<URL>>]>, z.ZodTransform<Set<URL> | undefined, Set<URL> | URL[] | undefined>>>;
+    availableAudiences: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodPipe<z.ZodArray<z.ZodString>, z.ZodTransform<string[], string[]>>, z.ZodSet<z.ZodString>]>, z.ZodTransform<Set<string> | undefined, Set<string> | string[] | undefined>>>;
+    availableGrants: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodArray<z.ZodEnum<{
+        client_credentials: "client_credentials";
+        authorization_code: "authorization_code";
+        implicit: "implicit";
+        refresh_token: "refresh_token";
+    }>>, z.ZodCustom<Set<AnyGrantType>, Set<AnyGrantType>>]>, z.ZodTransform<Set<AnyGrantType> | undefined, Set<AnyGrantType> | ("client_credentials" | "authorization_code" | "implicit" | "refresh_token")[] | undefined>>>;
+    defaultAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodUndefined]>>;
+    updatedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    refreshTokenDuration: z.ZodOptional<z.ZodNumber>;
+    accessTokenDuration: z.ZodOptional<z.ZodNumber>;
+    accessTokenSignatureAlgorithm: z.ZodOptional<z.ZodEnum<{
+        HS256: "HS256";
+        HS384: "HS384";
+        HS512: "HS512";
+        RS256: "RS256";
+        RS384: "RS384";
+        RS512: "RS512";
+        ES256: "ES256";
+        ES384: "ES384";
+        ES512: "ES512";
+        PS256: "PS256";
+        PS384: "PS384";
+        PS512: "PS512";
+    }>>;
+}, z.core.$strip>;
+export type AuthorizationProperties = z.input<typeof AuthorizationSchema>;
+export type Authorization = z.output<typeof AuthorizationSchema>;
+export declare const AuthorizationPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    deactivatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    deletedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    loginUri: z.ZodOptional<z.ZodUnion<readonly [z.ZodURL, z.ZodUndefined]>>;
+    callbackUrls: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodPipe<z.ZodArray<z.ZodUnion<[z.ZodPipe<z.ZodURL, z.ZodTransform<URL, string>>, z.ZodCustom<URL, URL>]>>, z.ZodTransform<URL[], URL[]>>, z.ZodCustom<Set<URL>, Set<URL>>]>, z.ZodTransform<URL[] | undefined, Set<URL> | URL[] | undefined>>>;
+    availableAudiences: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodPipe<z.ZodArray<z.ZodString>, z.ZodTransform<string[], string[]>>, z.ZodSet<z.ZodString>]>, z.ZodTransform<string[] | undefined, Set<string> | string[] | undefined>>>;
+    availableGrants: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodArray<z.ZodEnum<{
+        client_credentials: "client_credentials";
+        authorization_code: "authorization_code";
+        implicit: "implicit";
+        refresh_token: "refresh_token";
+    }>>, z.ZodCustom<Set<AnyGrantType>, Set<AnyGrantType>>]>, z.ZodTransform<("client_credentials" | "authorization_code" | "implicit" | "refresh_token")[] | undefined, Set<AnyGrantType> | ("client_credentials" | "authorization_code" | "implicit" | "refresh_token")[] | undefined>>>;
+    defaultAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodUndefined]>>;
+    updatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    refreshTokenDuration: z.ZodOptional<z.ZodNumber>;
+    accessTokenDuration: z.ZodOptional<z.ZodNumber>;
+    accessTokenSignatureAlgorithm: z.ZodOptional<z.ZodEnum<{
+        HS256: "HS256";
+        HS384: "HS384";
+        HS512: "HS512";
+        RS256: "RS256";
+        RS384: "RS384";
+        RS512: "RS512";
+        ES256: "ES256";
+        ES384: "ES384";
+        ES512: "ES512";
+        PS256: "PS256";
+        PS384: "PS384";
+        PS512: "PS512";
+    }>>;
+}, z.core.$strip>;
+export type AuthorizationPayload = z.output<typeof AuthorizationPayloadSchema>;
+export declare const UpsertAuthorizationPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | null | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    loginUri: z.ZodOptional<z.ZodUnion<readonly [z.ZodURL, z.ZodUndefined]>>;
+    callbackUrls: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodPipe<z.ZodArray<z.ZodUnion<[z.ZodPipe<z.ZodURL, z.ZodTransform<URL, string>>, z.ZodCustom<URL, URL>]>>, z.ZodTransform<URL[], URL[]>>, z.ZodCustom<Set<URL>, Set<URL>>]>, z.ZodTransform<URL[] | undefined, Set<URL> | URL[] | undefined>>>;
+    availableAudiences: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodPipe<z.ZodArray<z.ZodString>, z.ZodTransform<string[], string[]>>, z.ZodSet<z.ZodString>]>, z.ZodTransform<string[] | undefined, Set<string> | string[] | undefined>>>;
+    availableGrants: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodArray<z.ZodEnum<{
+        client_credentials: "client_credentials";
+        authorization_code: "authorization_code";
+        implicit: "implicit";
+        refresh_token: "refresh_token";
+    }>>, z.ZodCustom<Set<AnyGrantType>, Set<AnyGrantType>>]>, z.ZodTransform<("client_credentials" | "authorization_code" | "implicit" | "refresh_token")[] | undefined, Set<AnyGrantType> | ("client_credentials" | "authorization_code" | "implicit" | "refresh_token")[] | undefined>>>;
+    defaultAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodUndefined]>>;
+    refreshTokenDuration: z.ZodOptional<z.ZodNumber>;
+    accessTokenDuration: z.ZodOptional<z.ZodNumber>;
+    accessTokenSignatureAlgorithm: z.ZodOptional<z.ZodEnum<{
+        HS256: "HS256";
+        HS384: "HS384";
+        HS512: "HS512";
+        RS256: "RS256";
+        RS384: "RS384";
+        RS512: "RS512";
+        ES256: "ES256";
+        ES384: "ES384";
+        ES512: "ES512";
+        PS256: "PS256";
+        PS384: "PS384";
+        PS512: "PS512";
+    }>>;
+}, z.core.$strip>;
+export type UpsertAuthorizationInput = z.input<typeof UpsertAuthorizationPayloadSchema>;
+export type UpsertAuthorizationPayload = z.output<typeof UpsertAuthorizationPayloadSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/cjs/app/authorization/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/app/authorization/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAqB5B,OAAO,EAAE,KAAK,YAAY,EAAa,MAAM,8BAA8B,CAAC;AA+B5E,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAW9B,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAC1E,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEjE,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAWrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE/E,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAQ3C,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,gCAAgC,CACxC,CAAC;AACF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAC/C,OAAO,gCAAgC,CACxC,CAAC"}

package/dist/cjs/app/authorization/schema.js

@@ -0,0 +1,97 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpsertAuthorizationPayloadSchema = exports.AuthorizationPayloadSchema = exports.AuthorizationSchema = void 0;
+const z = __importStar(require("zod/v4"));
+const dates_js_1 = require("../../common/schema/dates.js");
+const jwt_js_1 = require("../../common/schema/jwt.js");
+const metadata_js_1 = require("../../common/schema/metadata.js");
+const sets_js_1 = require("../../common/schema/sets.js");
+const schema_js_1 = require("../../oauth/common/schema.js");
+const CallbackUrlArraySchema = sets_js_1.UniqueUrlArraySchema;
+const CallbackUrlSetSchema = sets_js_1.UniqueUrlSetSchema;
+const AudienceArraySchema = sets_js_1.UniqueStringArraySchema;
+const AudienceSetSchema = sets_js_1.UniqueStringSetSchema;
+const GrantSetSchema = z.instanceof((Set));
+const GrantArraySchema = z.array(z.enum([
+    schema_js_1.GrantType.AUTHORIZATION_CODE,
+    schema_js_1.GrantType.CLIENT_CREDENTIALS,
+    schema_js_1.GrantType.IMPLICIT,
+    schema_js_1.GrantType.REFRESH_TOKEN,
+]));
+const AvailableGrantSetSchema = z
+    .union([z.undefined(), GrantArraySchema, GrantSetSchema])
+    .pipe(z.transform((v) => (!v || v instanceof Set ? v : new Set(v))));
+const AvailableGrantArraySchema = z
+    .union([z.undefined(), GrantArraySchema, GrantSetSchema])
+    .pipe(z.transform((v) => (v instanceof Set ? Array.from(v.values()) : v)));
+const BaseAuthorization = z.object({
+    refreshTokenDuration: z.number().optional(),
+    accessTokenDuration: z.number().optional(),
+    accessTokenSignatureAlgorithm: jwt_js_1.AlgorithmSchema.optional(),
+});
+exports.AuthorizationSchema = z.object({
+    ...BaseAuthorization.shape,
+    loginUri: z.union([z.url(), z.undefined()]).optional(),
+    callbackUrls: CallbackUrlSetSchema.optional(),
+    availableAudiences: AudienceSetSchema.optional(),
+    availableGrants: AvailableGrantSetSchema.optional(),
+    defaultAudience: z.union([z.string(), z.undefined()]).optional(),
+    updatedAt: dates_js_1.OptionalDateSchema,
+    ...dates_js_1.DeletedAtPropertySchema.shape,
+    ...dates_js_1.DeactivatedAtPropertySchema.shape,
+    ...metadata_js_1.MetadataMapPropertySchema.shape,
+});
+exports.AuthorizationPayloadSchema = z.object({
+    ...BaseAuthorization.shape,
+    loginUri: z.union([z.url(), z.undefined()]).optional(),
+    callbackUrls: CallbackUrlArraySchema.optional(),
+    availableAudiences: AudienceArraySchema.optional(),
+    availableGrants: AvailableGrantArraySchema.optional(),
+    defaultAudience: z.union([z.string(), z.undefined()]).optional(),
+    updatedAt: dates_js_1.OptionalDatePayloadSchema,
+    ...dates_js_1.DeletedAtPropertyPayloadSchema.shape,
+    ...dates_js_1.DeactivatedAtPropertyPayloadSchema.shape,
+    ...metadata_js_1.MetadataPayloadPropertySchema.shape,
+});
+exports.UpsertAuthorizationPayloadSchema = z.object({
+    ...BaseAuthorization.shape,
+    loginUri: z.union([z.url(), z.undefined()]).optional(),
+    callbackUrls: CallbackUrlArraySchema.optional(),
+    availableAudiences: AudienceArraySchema.optional(),
+    availableGrants: AvailableGrantArraySchema.optional(),
+    defaultAudience: z.union([z.string(), z.undefined()]).optional(),
+    ...metadata_js_1.UpsertMetadataPropertyPayloadSchema.shape,
+});

package/dist/cjs/app/authorization/schema.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=schema.test.d.ts.map

package/dist/cjs/app/authorization/schema.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.test.d.ts","sourceRoot":"","sources":["../../../../src/app/authorization/schema.test.ts"],"names":[],"mappings":""}