@go-mondo/identity-sdk 0.0.2-beta.4 → 0.0.2-beta.41

package/dist/esm/authentication/utils.test.js

@@ -0,0 +1,140 @@
+import { describe, expect, test } from 'vitest';
+import { Model, generateSessionId, generateStrategyId } from './utils.js';
+describe('Authentication Utils', () => {
+    describe('Model constants', () => {
+        test('should have correct Strategy model properties', () => {
+            expect(Model.Strategy.UIDPrefix).toBe('stg');
+            expect(Model.Strategy.TYPE).toBe('Strategy');
+        });
+        test('should have correct Session model properties', () => {
+            expect(Model.Session.UIDPrefix).toBe('ssn');
+            expect(Model.Session.TYPE).toBe('Session');
+        });
+        test('should be readonly (const assertion)', () => {
+            // Test that the Model object is properly typed as const
+            expect(typeof Model).toBe('object');
+            expect(Object.isFrozen(Model)).toBe(false); // const assertion doesn't freeze at runtime
+        });
+    });
+    describe('generateStrategyId', () => {
+        test('should generate ID with correct prefix', () => {
+            const id = generateStrategyId();
+            expect(id).toMatch(/^stg_/);
+        });
+        test('should generate ID with correct format', () => {
+            const id = generateStrategyId();
+            // Should match: prefix + underscore + KSUID (27 characters)
+            expect(id).toMatch(/^stg_[A-Za-z0-9]{27}$/);
+        });
+        test('should generate unique IDs on multiple calls', () => {
+            const id1 = generateStrategyId();
+            const id2 = generateStrategyId();
+            const id3 = generateStrategyId();
+            expect(id1).not.toBe(id2);
+            expect(id2).not.toBe(id3);
+            expect(id1).not.toBe(id3);
+        });
+        test('should generate IDs with correct total length', () => {
+            const id = generateStrategyId();
+            // prefix (3) + underscore (1) + KSUID (27) = 31 characters
+            expect(id.length).toBe(31);
+        });
+        test('should generate IDs that start with strategy prefix', () => {
+            const ids = Array.from({ length: 10 }, () => generateStrategyId());
+            for (const id of ids) {
+                expect(id.startsWith('stg_')).toBe(true);
+            }
+        });
+        test('should generate KSUID-compatible format', () => {
+            const id = generateStrategyId();
+            const ksuidPart = id.substring(4); // Remove 'stg_'
+            // KSUID should be 27 characters of base62
+            expect(ksuidPart.length).toBe(27);
+            expect(ksuidPart).toMatch(/^[A-Za-z0-9]{27}$/);
+        });
+        test('should be deterministic in format but random in content', () => {
+            const ids = Array.from({ length: 100 }, () => generateStrategyId());
+            // All should have same format
+            for (const id of ids) {
+                expect(id).toMatch(/^stg_[A-Za-z0-9]{27}$/);
+            }
+            // All should be unique
+            const uniqueIds = new Set(ids);
+            expect(uniqueIds.size).toBe(100);
+        });
+    });
+    describe('generateSessionId', () => {
+        test('should generate ID with correct prefix', () => {
+            const id = generateSessionId();
+            expect(id).toMatch(/^ssn_/);
+        });
+        test('should generate ID with correct format', () => {
+            const id = generateSessionId();
+            // Should match: prefix + underscore + KSUID (27 characters)
+            expect(id).toMatch(/^ssn_[A-Za-z0-9]{27}$/);
+        });
+        test('should generate unique IDs on multiple calls', () => {
+            const id1 = generateSessionId();
+            const id2 = generateSessionId();
+            const id3 = generateSessionId();
+            expect(id1).not.toBe(id2);
+            expect(id2).not.toBe(id3);
+            expect(id1).not.toBe(id3);
+        });
+        test('should generate IDs with correct total length', () => {
+            const id = generateSessionId();
+            // prefix (3) + underscore (1) + KSUID (27) = 31 characters
+            expect(id.length).toBe(31);
+        });
+        test('should generate IDs that start with session prefix', () => {
+            const ids = Array.from({ length: 10 }, () => generateSessionId());
+            for (const id of ids) {
+                expect(id.startsWith('ssn_')).toBe(true);
+            }
+        });
+        test('should generate KSUID-compatible format', () => {
+            const id = generateSessionId();
+            const ksuidPart = id.substring(4); // Remove 'ssn_'
+            // KSUID should be 27 characters of base62
+            expect(ksuidPart.length).toBe(27);
+            expect(ksuidPart).toMatch(/^[A-Za-z0-9]{27}$/);
+        });
+        test('should be deterministic in format but random in content', () => {
+            const ids = Array.from({ length: 100 }, () => generateSessionId());
+            // All should have same format
+            for (const id of ids) {
+                expect(id).toMatch(/^ssn_[A-Za-z0-9]{27}$/);
+            }
+            // All should be unique
+            const uniqueIds = new Set(ids);
+            expect(uniqueIds.size).toBe(100);
+        });
+    });
+    describe('ID generation comparison', () => {
+        test('should generate different formats for strategy vs session', () => {
+            const strategyId = generateStrategyId();
+            const sessionId = generateSessionId();
+            expect(strategyId.startsWith('stg_')).toBe(true);
+            expect(sessionId.startsWith('ssn_')).toBe(true);
+            expect(strategyId).not.toBe(sessionId);
+        });
+        test('should maintain format consistency across generators', () => {
+            const strategyIds = Array.from({ length: 10 }, () => generateStrategyId());
+            const sessionIds = Array.from({ length: 10 }, () => generateSessionId());
+            // All strategy IDs should have same prefix
+            for (const id of strategyIds) {
+                expect(id.startsWith('stg_')).toBe(true);
+                expect(id.length).toBe(31);
+            }
+            // All session IDs should have same prefix
+            for (const id of sessionIds) {
+                expect(id.startsWith('ssn_')).toBe(true);
+                expect(id.length).toBe(31);
+            }
+            // No overlap between the two sets
+            const allIds = [...strategyIds, ...sessionIds];
+            const uniqueIds = new Set(allIds);
+            expect(uniqueIds.size).toBe(20);
+        });
+    });
+});

package/dist/esm/authorization/index.d.ts

@@ -2,5 +2,5 @@ export * from './permissions/resources.js';
 export * from './permissions/schema.js';
 export * from './roles/resources.js';
 export * from './roles/schema.js';
-export * from './utils.js';
+export * from './schema.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/esm/authorization/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/authorization/index.ts"],"names":[],"mappings":"AAAA,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AAExC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAElC,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/authorization/index.ts"],"names":[],"mappings":"AACA,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AAGxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAElC,cAAc,aAAa,CAAC"}

package/dist/esm/authorization/index.js

@@ -1,5 +1,7 @@
+// Permissions
 export * from './permissions/resources.js';
 export * from './permissions/schema.js';
+// Roles
 export * from './roles/resources.js';
 export * from './roles/schema.js';
-export * from './utils.js';
+export * from './schema.js';

package/dist/esm/authorization/permissions/resources.d.ts

@@ -10,11 +10,11 @@ export declare class PermissionResources {
     getItem(id: string): Promise<Permission>;
     insertItem(item: InsertPermissionInput): Promise<Permission>;
     updateItem(id: string, item: UpdatePermissionInput): Promise<Permission>;
-    deleteItem(id: string): Promise<void>;
+    deleteItem(id: string): Promise<Permission>;
 }
 export declare function listPermissions(instance: MondoIdentity, pagination?: Pagination): Promise<PaginationCollection<Permission>>;
 export declare function getPermission(instance: MondoIdentity, id: string): Promise<Permission>;
 export declare function insertPermission(instance: MondoIdentity, item: InsertPermissionInput): Promise<Permission>;
 export declare function updatePermission(instance: MondoIdentity, id: string, item: UpdatePermissionInput): Promise<Permission>;
-export declare function deletePermission(instance: MondoIdentity, id: string): Promise<void>;
+export declare function deletePermission(instance: MondoIdentity, id: string): Promise<Permission>;
 //# sourceMappingURL=resources.d.ts.map

package/dist/esm/authorization/permissions/resources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../../../src/authorization/permissions/resources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAWpE,OAAO,EACL,KAAK,oBAAoB,EAE1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EACL,KAAK,qBAAqB,EAE1B,KAAK,UAAU,EAEf,KAAK,qBAAqB,EAE3B,MAAM,aAAa,CAAC;AAIrB,qBAAa,mBAAmB;IACX,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,aAAa;IAE3D,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM;IAQ9B,SAAS,CACd,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAIrC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAIxC,UAAU,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC;IAI5D,UAAU,CACf,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,UAAU,CAAC;IAIf,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG7C;AAED,wBAAsB,eAAe,CACnC,QAAQ,EAAE,aAAa,EACvB,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAW3C;AAED,wBAAsB,aAAa,CACjC,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,UAAU,CAAC,CASrB;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,aAAa,EACvB,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,UAAU,CAAC,CAYrB;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,UAAU,CAAC,CAYrB;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,IAAI,CAAC,CAKf"}
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../../../src/authorization/permissions/resources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAQpE,OAAO,EACL,KAAK,oBAAoB,EAE1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EACL,KAAK,qBAAqB,EAE1B,KAAK,UAAU,EAEf,KAAK,qBAAqB,EAE3B,MAAM,aAAa,CAAC;AAIrB,qBAAa,mBAAmB;IACX,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,aAAa;IAE3D,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM;IAQ9B,SAAS,CACd,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAIrC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAIxC,UAAU,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC;IAI5D,UAAU,CACf,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,UAAU,CAAC;IAIf,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;CAGnD;AAED,wBAAsB,eAAe,CACnC,QAAQ,EAAE,aAAa,EACvB,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAS3C;AAED,wBAAsB,aAAa,CACjC,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,UAAU,CAAC,CAOrB;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,aAAa,EACvB,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,UAAU,CAAC,CAQrB;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,UAAU,CAAC,CAQrB;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,UAAU,CAAC,CAOrB"}

package/dist/esm/authorization/permissions/resources.js

@@ -1,5 +1,5 @@
-import { deleteItemWithAuthorization, getItemWithAuthorization, insertItemWithAuthorization, updateItemWithAuthorization, } from '../../common/resources/operations.js';
-import { addPaginationToURL, parseEgressSchema, } from '../../common/resources/utils.js';
+import { deleteItemWithAuthorization, getItemWithAuthorization, patchItemWithAuthorization, postItemWithAuthorization, } from '../../common/resources/operations.js';
+import { addPaginationToURL } from '../../common/resources/utils.js';
 import { PaginationCollectionSchema, } from '../../common/schema/collection.js';
 import { InsertPermissionPayloadSchema, PermissionSchema, UpdatePermissionPayloadSchema, } from './schema.js';
 const PATH = '/v1/authorization/permissions';
@@ -32,17 +32,17 @@ export class PermissionResources {
 }
 export async function listPermissions(instance, pagination) {
     const url = addPaginationToURL(new URL(PermissionResources.buildPath(), instance.config.host), pagination);
-    return parseEgressSchema(PaginationCollectionSchema(PermissionSchema)(await getItemWithAuthorization(url, instance.authorizer)));
+    return PaginationCollectionSchema(PermissionSchema).parse(await getItemWithAuthorization(url, instance.authorizer));
 }
 export async function getPermission(instance, id) {
-    return parseEgressSchema(PermissionSchema(await getItemWithAuthorization(new URL(PermissionResources.buildPath(id), instance.config.host), instance.authorizer)));
+    return PermissionSchema.parse(await getItemWithAuthorization(new URL(PermissionResources.buildPath(id), instance.config.host), instance.authorizer));
 }
 export async function insertPermission(instance, item) {
-    return parseEgressSchema(PermissionSchema(await insertItemWithAuthorization(new URL(PermissionResources.buildPath(), instance.config.host), instance.authorizer, parseEgressSchema(InsertPermissionPayloadSchema.onUndeclaredKey('delete')(item)))));
+    return PermissionSchema.parse(await postItemWithAuthorization(new URL(PermissionResources.buildPath(), instance.config.host), instance.authorizer, InsertPermissionPayloadSchema.parse(item)));
 }
 export async function updatePermission(instance, id, item) {
-    return parseEgressSchema(PermissionSchema(await updateItemWithAuthorization(new URL(PermissionResources.buildPath(id), instance.config.host), instance.authorizer, parseEgressSchema(UpdatePermissionPayloadSchema.onUndeclaredKey('delete')(item)))));
+    return PermissionSchema.parse(await patchItemWithAuthorization(new URL(PermissionResources.buildPath(id), instance.config.host), instance.authorizer, UpdatePermissionPayloadSchema.parse(item)));
 }
 export async function deletePermission(instance, id) {
-    await deleteItemWithAuthorization(new URL(PermissionResources.buildPath(id), instance.config.host), instance.authorizer);
+    return PermissionSchema.parse(await deleteItemWithAuthorization(new URL(PermissionResources.buildPath(id), instance.config.host), instance.authorizer));
 }

package/dist/esm/authorization/permissions/schema.d.ts

@@ -1,104 +1,107 @@
+import * as z from 'zod/v4';
 export declare const PermissionStatus: {
     readonly ENABLED: "enabled";
     readonly DISABLED: "disabled";
 };
 export type AnyPermissionStatus = (typeof PermissionStatus)[keyof typeof PermissionStatus];
-export declare const PermissionIdSchema: import("arktype/internal/methods/string.ts").StringType<string, {}>;
-export declare const PermissionIdPropertySchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    id: string;
-}, {}>;
-export type PermissionIdProperty = typeof PermissionIdPropertySchema.inferOut;
-export declare const PermissionAssociationsSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    apps?: string[] | undefined;
-    roles?: string[] | undefined;
-}, {}>;
-export type PermissionAssociations = typeof PermissionAssociationsSchema.inferOut;
-export declare const PermissionSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    id: string;
-    name: string;
-    status: "enabled" | "disabled";
-    description?: string | undefined;
-    createdAt: Date | ((In: string) => import("arktype/internal/attributes.ts").To<Date>);
-    updatedAt: Date | ((In: string) => import("arktype/internal/attributes.ts").To<Date>);
-    apps?: {
-        ids?: string[] | undefined;
-        count?: number | undefined;
-    } | undefined;
-    roles?: {
-        ids?: string[] | undefined;
-        count?: number | undefined;
-    } | undefined;
-    deletedAt?: Date | ((In: string) => import("arktype/internal/attributes.ts").To<Date>) | undefined;
-    deactivatedAt?: Date | ((In: string) => import("arktype/internal/attributes.ts").To<Date>) | undefined;
-    metadata: (In: import("arktype/internal/attributes.ts").Default<unknown, Map<string, string | number | boolean>>) => import("arktype/internal/attributes.ts").Out<Map<string, string | number | boolean> | Map<string, any>>;
-}, {}>;
-export type PermissionProperties = typeof PermissionSchema.inferIn;
-export type Permission = typeof PermissionSchema.inferOut;
-export declare const PermissionPayloadSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    id: string;
-    name: string;
-    status: "enabled" | "disabled";
-    description?: string | undefined;
-    createdAt: (In: string | Date) => import("arktype/internal/attributes.ts").Out<string>;
-    updatedAt: (In: string | Date) => import("arktype/internal/attributes.ts").Out<string>;
-    apps?: {
-        ids?: string[] | undefined;
-        count?: number | undefined;
-    } | undefined;
-    roles?: {
-        ids?: string[] | undefined;
-        count?: number | undefined;
-    } | undefined;
-    deletedAt?: ((In: string | Date | undefined) => import("arktype/internal/attributes.ts").Out<string | undefined>) | undefined;
-    deactivatedAt?: ((In: string | Date | undefined) => import("arktype/internal/attributes.ts").Out<string | undefined>) | undefined;
-    metadata?: ((In: {
-        [x: string]: string | number | boolean;
-    } | Map<string, string | number | boolean> | null | undefined) => import("arktype/internal/attributes.ts").Out<{
-        [x: string]: string | number | boolean;
-    } | undefined>) | undefined;
-}, {}>;
-export type PermissionPayload = typeof PermissionPayloadSchema.inferOut;
+export declare const PermissionIdPropertySchema: z.ZodObject<{
+    id: z.ZodString;
+}, z.core.$strip>;
+export type PermissionIdProperty = z.output<typeof PermissionIdPropertySchema>;
+export declare const PermissionAssociationsSchema: z.ZodObject<{
+    apps: z.ZodOptional<z.ZodUnion<[z.ZodUndefined, z.ZodArray<z.ZodString>]>>;
+    roles: z.ZodOptional<z.ZodUnion<readonly [z.ZodUndefined, z.ZodArray<z.ZodString>]>>;
+}, z.core.$strip>;
+export type PermissionAssociations = z.output<typeof PermissionAssociationsSchema>;
+export declare const PermissionSchema: z.ZodObject<{
+    metadata: z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Map<string, string | number | boolean>, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>;
+    deactivatedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    deletedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    updatedAt: z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>;
+    createdAt: z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>;
+    name: z.ZodString;
+    status: z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>;
+    description: z.ZodOptional<z.ZodString>;
+    apps: z.ZodOptional<z.ZodObject<{
+        ids: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        count: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    roles: z.ZodOptional<z.ZodObject<{
+        ids: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        count: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    id: z.ZodString;
+}, z.core.$strip>;
+export type PermissionProperties = z.input<typeof PermissionSchema>;
+export type Permission = z.output<typeof PermissionSchema>;
+export declare const PermissionPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    deactivatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    deletedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    updatedAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+    createdAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+    name: z.ZodString;
+    status: z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>;
+    description: z.ZodOptional<z.ZodString>;
+    apps: z.ZodOptional<z.ZodObject<{
+        ids: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        count: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    roles: z.ZodOptional<z.ZodObject<{
+        ids: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        count: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    id: z.ZodString;
+}, z.core.$strip>;
+export type PermissionPayload = z.output<typeof PermissionPayloadSchema>;
 /**
  * Insert
  */
-export declare const InsertPermissionPayloadSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    id: import("arktype/internal/attributes.ts").Default<string, string>;
-    name: string;
-    status: import("arktype/internal/attributes.ts").Default<"enabled" | "disabled", "enabled">;
-    description?: string | undefined;
-    apps?: string[] | undefined;
-    roles?: string[] | undefined;
-    metadata?: ((In: {
-        [x: string]: string | number | boolean;
-    } | Map<string, string | number | boolean> | null | undefined) => import("arktype/internal/attributes.ts").Out<{
-        [x: string]: string | number | boolean;
-    } | null>) | undefined;
-}, {}>;
-export type InsertPermissionInput = typeof InsertPermissionPayloadSchema.inferIn;
-export type InsertPermissionPayload = typeof InsertPermissionPayloadSchema.inferOut;
+export declare const InsertPermissionPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | null | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    apps: z.ZodOptional<z.ZodUnion<[z.ZodUndefined, z.ZodArray<z.ZodString>]>>;
+    roles: z.ZodOptional<z.ZodUnion<readonly [z.ZodUndefined, z.ZodArray<z.ZodString>]>>;
+    id: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+    status: z.ZodDefault<z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>>;
+    description: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type InsertPermissionInput = z.input<typeof InsertPermissionPayloadSchema>;
+export type InsertPermissionPayload = z.output<typeof InsertPermissionPayloadSchema>;
 /**
  * Update
  */
-export declare const UpdatePermissionPayloadSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    name?: string | undefined;
-    status?: "enabled" | "disabled" | undefined;
-    description?: string | undefined;
-    metadata?: ((In: {
-        [x: string]: string | number | boolean;
-    } | Map<string, string | number | boolean> | null | undefined) => import("arktype/internal/attributes.ts").Out<{
-        [x: string]: string | number | boolean;
-    } | null>) | undefined;
-}, {}>;
-export type UpdatePermissionInput = typeof UpdatePermissionPayloadSchema.inferIn;
-export type UpdatePermissionPayload = typeof UpdatePermissionPayloadSchema.inferOut;
+export declare const UpdatePermissionPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | null | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    name: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>>;
+    description: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type UpdatePermissionInput = z.input<typeof UpdatePermissionPayloadSchema>;
+export type UpdatePermissionPayload = z.output<typeof UpdatePermissionPayloadSchema>;
 /**
  * Association
  */
-export declare const PermissionAssociationReferenceSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    id: string;
-    name: string;
-    status: "enabled" | "disabled";
-    model: "Permission";
-}, {}>;
-export type PermissionAssociationReference = typeof PermissionAssociationReferenceSchema.inferOut;
+export declare const PermissionAssociationReferenceSchema: z.ZodObject<{
+    name: z.ZodString;
+    status: z.ZodDefault<z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>>;
+    model: z.ZodLiteral<"Permission">;
+    id: z.ZodString;
+}, z.core.$strip>;
+export type PermissionAssociationReference = z.output<typeof PermissionAssociationReferenceSchema>;
 //# sourceMappingURL=schema.d.ts.map

package/dist/esm/authorization/permissions/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/authorization/permissions/schema.ts"],"names":[],"mappings":"AAeA,eAAO,MAAM,gBAAgB;;;CAGnB,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAC7B,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,OAAO,gBAAgB,CAAC,CAAC;AAE3D,eAAO,MAAM,kBAAkB,qEAAc,CAAC;AAE9C,eAAO,MAAM,0BAA0B;;MAErC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,OAAO,0BAA0B,CAAC,QAAQ,CAAC;AAS9E,eAAO,MAAM,4BAA4B;;;MAGvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAChC,OAAO,4BAA4B,CAAC,QAAQ,CAAC;AAQ/C,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;MAOI,CAAC;AAClC,MAAM,MAAM,oBAAoB,GAAG,OAAO,gBAAgB,CAAC,OAAO,CAAC;AACnE,MAAM,MAAM,UAAU,GAAG,OAAO,gBAAgB,CAAC,QAAQ,CAAC;AAE1D,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;MAOC,CAAC;AACtC,MAAM,MAAM,iBAAiB,GAAG,OAAO,uBAAuB,CAAC,QAAQ,CAAC;AAExE;;GAEG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;MAOC,CAAC;AAC5C,MAAM,MAAM,qBAAqB,GAC/B,OAAO,6BAA6B,CAAC,OAAO,CAAC;AAC/C,MAAM,MAAM,uBAAuB,GACjC,OAAO,6BAA6B,CAAC,QAAQ,CAAC;AAEhD;;GAEG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;MAIC,CAAC;AAC5C,MAAM,MAAM,qBAAqB,GAC/B,OAAO,6BAA6B,CAAC,OAAO,CAAC;AAC/C,MAAM,MAAM,uBAAuB,GACjC,OAAO,6BAA6B,CAAC,QAAQ,CAAC;AAEhD;;GAEG;AACH,eAAO,MAAM,oCAAoC;;;;;MAG7C,CAAC;AACL,MAAM,MAAM,8BAA8B,GACxC,OAAO,oCAAoC,CAAC,QAAQ,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/authorization/permissions/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAoB5B,eAAO,MAAM,gBAAgB;;;CAGnB,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAC7B,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,OAAO,gBAAgB,CAAC,CAAC;AAE3D,eAAO,MAAM,0BAA0B;;iBAErC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAO/E,eAAO,MAAM,4BAA4B;;;iBAGvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAC3C,OAAO,4BAA4B,CACpC,CAAC;AAWF,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;iBAO3B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AACpE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE3D,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;iBAOlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEzE;;GAEG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;;iBAOxC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CACzC,OAAO,6BAA6B,CACrC,CAAC;AACF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAC5C,OAAO,6BAA6B,CACrC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;iBAKxC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CACzC,OAAO,6BAA6B,CACrC,CAAC;AACF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAC5C,OAAO,6BAA6B,CACrC,CAAC;AAEF;;GAEG;AAEH,eAAO,MAAM,oCAAoC;;;;;;;;iBAK/C,CAAC;AACH,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CACnD,OAAO,oCAAoC,CAC5C,CAAC"}

package/dist/esm/authorization/permissions/schema.js

@@ -1,65 +1,74 @@
-import { type } from 'arktype';
-import { OptionalDatePayloadSchema, OptionalDateSchema, RequiredDatePayloadSchema, RequiredDateSchema, } from '../../common/index.js';
+import * as z from 'zod/v4';
+import { AppIdAssociationsSchema } from '../../app/schema.js';
 import { AggregateSchema } from '../../common/schema/aggregate.js';
-import { MetadataMapPropertySchema, MetadataPayloadPropertySchema, UpsertMetadataPayloadPropertySchema, } from '../../common/schema/metadata.js';
-import { generatePermissionId } from '../utils.js';
+import { CreatedAtPropertyPayloadSchema, CreatedAtPropertySchema, DeactivatedAtPropertyPayloadSchema, DeactivatedAtPropertySchema, DeletedAtPropertyPayloadSchema, DeletedAtPropertySchema, UpdatedAtPropertyPayloadSchema, UpdatedAtPropertySchema, } from '../../common/schema/dates.js';
+import { MetadataMapPropertySchema, MetadataPayloadPropertySchema, UpsertMetadataPropertyPayloadSchema, } from '../../common/schema/metadata.js';
+import { PermissionIdSchema, RoleIdAssociationsSchema } from '../schema.js';
 export const PermissionStatus = {
     ENABLED: 'enabled',
     DISABLED: 'disabled',
 };
-export const PermissionIdSchema = type.string;
-export const PermissionIdPropertySchema = type({
+export const PermissionIdPropertySchema = z.object({
     id: PermissionIdSchema,
 });
-const PermissionStatusSchema = type.enumerated(PermissionStatus.ENABLED, PermissionStatus.DISABLED);
-const AssociationSchema = type('string[] | undefined');
-export const PermissionAssociationsSchema = type({
-    apps: AssociationSchema.optional(),
-    roles: AssociationSchema.optional(),
+const PermissionStatusSchema = z.enum([
+    PermissionStatus.ENABLED,
+    PermissionStatus.DISABLED,
+]);
+export const PermissionAssociationsSchema = z.object({
+    apps: AppIdAssociationsSchema.optional(),
+    roles: RoleIdAssociationsSchema.optional(),
 });
-const BaseSchema = PermissionIdPropertySchema.and({
-    name: type('string'),
+const BaseSchema = z.object({
+    ...PermissionIdPropertySchema.shape,
+    name: z.string(),
     status: PermissionStatusSchema,
-    description: type('string').optional(),
-});
-export const PermissionSchema = BaseSchema.and({
-    apps: AggregateSchema.optional(),
-    roles: AggregateSchema.optional(),
-    createdAt: RequiredDateSchema,
-    updatedAt: RequiredDateSchema,
-    'deletedAt?': OptionalDateSchema,
-    'deactivatedAt?': OptionalDateSchema,
-}).and(MetadataMapPropertySchema);
-export const PermissionPayloadSchema = BaseSchema.and({
+    description: z.string().optional(),
     apps: AggregateSchema.optional(),
     roles: AggregateSchema.optional(),
-    createdAt: RequiredDatePayloadSchema,
-    updatedAt: RequiredDatePayloadSchema,
-    'deletedAt?': OptionalDatePayloadSchema,
-    'deactivatedAt?': OptionalDatePayloadSchema,
-}).and(MetadataPayloadPropertySchema);
+});
+export const PermissionSchema = z.object({
+    ...BaseSchema.shape,
+    ...CreatedAtPropertySchema.shape,
+    ...UpdatedAtPropertySchema.shape,
+    ...DeletedAtPropertySchema.shape,
+    ...DeactivatedAtPropertySchema.shape,
+    ...MetadataMapPropertySchema.shape,
+});
+export const PermissionPayloadSchema = z.object({
+    ...BaseSchema.shape,
+    ...CreatedAtPropertyPayloadSchema.shape,
+    ...UpdatedAtPropertyPayloadSchema.shape,
+    ...DeletedAtPropertyPayloadSchema.shape,
+    ...DeactivatedAtPropertyPayloadSchema.shape,
+    ...MetadataPayloadPropertySchema.shape,
+});
 /**
  * Insert
  */
-export const InsertPermissionPayloadSchema = type({
-    id: PermissionIdSchema.default(() => generatePermissionId()),
-    name: type('string'),
+export const InsertPermissionPayloadSchema = z.object({
+    id: PermissionIdSchema.optional(),
+    name: z.string(),
     status: PermissionStatusSchema.default(PermissionStatus.ENABLED),
-    description: type('string').optional(),
-})
-    .and(PermissionAssociationsSchema)
-    .and(UpsertMetadataPayloadPropertySchema);
+    description: z.string().optional(),
+    ...PermissionAssociationsSchema.shape,
+    ...UpsertMetadataPropertyPayloadSchema.shape,
+});
 /**
  * Update
  */
-export const UpdatePermissionPayloadSchema = type({
-    name: type('string').optional(),
+export const UpdatePermissionPayloadSchema = z.object({
+    name: z.string().optional(),
     status: PermissionStatusSchema.optional(),
-    description: type('string').optional(),
-}).and(UpsertMetadataPayloadPropertySchema);
+    description: z.string().optional(),
+    ...UpsertMetadataPropertyPayloadSchema.shape,
+});
 /**
  * Association
  */
-export const PermissionAssociationReferenceSchema = PermissionPayloadSchema.pick('id', 'name', 'status').and({
-    model: "'Permission'",
+export const PermissionAssociationReferenceSchema = z.object({
+    ...PermissionIdPropertySchema.shape,
+    name: z.string(),
+    status: PermissionStatusSchema.default('disabled'),
+    model: z.literal('Permission'),
 });

package/dist/esm/authorization/permissions/schema.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=schema.test.d.ts.map

package/dist/esm/authorization/permissions/schema.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.test.d.ts","sourceRoot":"","sources":["../../../../src/authorization/permissions/schema.test.ts"],"names":[],"mappings":""}