@go-mondo/identity-sdk 0.0.2-beta.4 → 0.0.2-beta.41

package/dist/esm/oauth/token/schema/grants/refresh-token.js

@@ -1,14 +1,14 @@
-import { type } from 'arktype';
-import { AppIdSchema } from '../../../../app/schema/app.js';
+import * as z from 'zod/v4';
+import { AppIdSchema } from '../../../../app/schema.js';
 import { GrantType } from '../../../common/schema.js';
 /**
  * @see https://datatracker.ietf.org/doc/html/rfc6749#section-6
  */
-const GrantTypeSchema = type.enumerated(GrantType.REFRESH_TOKEN);
-export const RefreshTokenSchema = type({
+const GrantTypeSchema = z.enum([GrantType.REFRESH_TOKEN]);
+export const RefreshTokenSchema = z.object({
     grant_type: GrantTypeSchema,
-    refresh_token: type('string'),
-    scope: type('string').optional(),
+    refresh_token: z.string(),
+    scope: z.string().optional(),
     client_id: AppIdSchema,
-    client_secret: type('string'),
+    client_secret: z.string(),
 });

package/dist/esm/oauth/token/schema/schema.d.ts

@@ -1,28 +1,35 @@
+import * as z from 'zod/v4';
 export * from './grants/authorization-code.js';
 export * from './grants/client-credentials.js';
 export * from './grants/refresh-token.js';
 /**
  * Union(s)
  */
-export declare const Schema: import("arktype/internal/methods/object.ts").ObjectType<{
-    grant_type: "authorization_code";
-    code: string;
-    client_id: string;
-    redirect_uri: string;
-    client_secret?: string | undefined;
-    code_verifier?: string | undefined;
-} | {
-    grant_type: "client_credentials";
-    scope?: string | undefined;
-    audience?: string | undefined;
-    client_id: string;
-    client_secret: string;
-} | {
-    grant_type: "refresh_token";
-    refresh_token: string;
-    client_id: string;
-    client_secret: string;
-    scope?: string | undefined;
-}, {}>;
-export type Payload = typeof Schema.inferOut;
+export declare const Schema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    code_verifier: z.ZodOptional<z.ZodString>;
+    grant_type: z.ZodEnum<{
+        authorization_code: "authorization_code";
+    }>;
+    code: z.ZodString;
+    client_id: z.ZodString;
+    client_secret: z.ZodOptional<z.ZodString>;
+    redirect_uri: z.ZodURL;
+}, z.core.$strip>, z.ZodObject<{
+    client_id: z.ZodString;
+    client_secret: z.ZodString;
+    audience: z.ZodOptional<z.ZodString>;
+    scope: z.ZodOptional<z.ZodString>;
+    grant_type: z.ZodEnum<{
+        client_credentials: "client_credentials";
+    }>;
+}, z.core.$strip>, z.ZodObject<{
+    grant_type: z.ZodEnum<{
+        refresh_token: "refresh_token";
+    }>;
+    refresh_token: z.ZodString;
+    scope: z.ZodOptional<z.ZodString>;
+    client_id: z.ZodString;
+    client_secret: z.ZodString;
+}, z.core.$strip>], "grant_type">;
+export type Payload = z.output<typeof Schema>;
 //# sourceMappingURL=schema.d.ts.map

package/dist/esm/oauth/token/schema/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../../src/oauth/token/schema/schema.ts"],"names":[],"mappings":"AAIA,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,2BAA2B,CAAC;AAE1C;;GAEG;AACH,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;MAElB,CAAC;AACF,MAAM,MAAM,OAAO,GAAG,OAAO,MAAM,CAAC,QAAQ,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../../src/oauth/token/schema/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAM5B,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,2BAA2B,CAAC;AAE1C;;GAEG;AACH,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;iCAIjB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,MAAM,CAAC,CAAC"}

package/dist/esm/oauth/token/schema/schema.js

@@ -1,3 +1,4 @@
+import * as z from 'zod/v4';
 import { AuthorizationCodeSchema } from './grants/authorization-code.js';
 import { ClientCredentialsSchema } from './grants/client-credentials.js';
 import { RefreshTokenSchema } from './grants/refresh-token.js';
@@ -7,4 +8,8 @@ export * from './grants/refresh-token.js';
 /**
  * Union(s)
  */
-export const Schema = AuthorizationCodeSchema.or(ClientCredentialsSchema).or(RefreshTokenSchema);
+export const Schema = z.discriminatedUnion('grant_type', [
+    AuthorizationCodeSchema,
+    ClientCredentialsSchema,
+    RefreshTokenSchema,
+]);

package/dist/esm/oauth/token/schema/schema.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=schema.test.d.ts.map

package/dist/esm/oauth/token/schema/schema.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.test.d.ts","sourceRoot":"","sources":["../../../../../src/oauth/token/schema/schema.test.ts"],"names":[],"mappings":""}

package/dist/esm/oauth/token/schema/schema.test.js

@@ -0,0 +1,134 @@
+import { describe, expect, test } from 'vitest';
+import { generateAppId } from '../../../app/utils.js';
+import { Schema } from './schema.js';
+describe('OAuth Token - Schema', () => {
+    describe('Schema union', () => {
+        test('should accept authorization code grant', () => {
+            const payload = {
+                grant_type: 'authorization_code',
+                code: 'auth_code_123',
+                client_id: generateAppId(),
+                redirect_uri: 'https://example.com/callback',
+            };
+            const result = Schema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.success).toBe(true);
+            if (result.success) {
+                expect(result.data).toEqual(payload);
+            }
+        });
+        test('should accept authorization code with PKCE', () => {
+            const payload = {
+                grant_type: 'authorization_code',
+                code: 'auth_code_123',
+                client_id: generateAppId(),
+                redirect_uri: 'https://example.com/callback',
+                code_verifier: 'pkce_verifier_123',
+            };
+            const result = Schema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.success).toBe(true);
+            if (result.success) {
+                expect(result.data).toEqual(payload);
+            }
+        });
+        test('should accept authorization code with client secret', () => {
+            const payload = {
+                grant_type: 'authorization_code',
+                code: 'auth_code_123',
+                client_id: generateAppId(),
+                client_secret: 'secret_123',
+                redirect_uri: 'https://example.com/callback',
+            };
+            const result = Schema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.success).toBe(true);
+            if (result.success) {
+                expect(result.data).toEqual(payload);
+            }
+        });
+        test('should accept client credentials grant', () => {
+            const payload = {
+                grant_type: 'client_credentials',
+                client_id: generateAppId(),
+                client_secret: 'secret_123',
+                scope: 'read write',
+            };
+            const result = Schema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.success).toBe(true);
+            if (result.success) {
+                expect(result.data).toEqual(payload);
+            }
+        });
+        test('should accept refresh token grant', () => {
+            const payload = {
+                grant_type: 'refresh_token',
+                refresh_token: 'refresh_token_123',
+                client_id: generateAppId(),
+                client_secret: 'secret_123',
+                scope: 'read',
+            };
+            const result = Schema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.success).toBe(true);
+            if (result.success) {
+                expect(result.data).toEqual(payload);
+            }
+        });
+        test('should reject invalid grant type', () => {
+            const payload = {
+                grant_type: 'invalid_grant',
+                code: 'auth_code_123',
+                client_id: generateAppId(),
+                redirect_uri: 'https://example.com/callback',
+            };
+            const result = Schema.safeParse(payload);
+            expect(result.success).toBe(false);
+        });
+        test('should reject authorization code without required fields', () => {
+            const payload = {
+                grant_type: 'authorization_code',
+                client_id: generateAppId(),
+                // missing code and redirect_uri
+            };
+            const result = Schema.safeParse(payload);
+            expect(result.success).toBe(false);
+        });
+        test('should reject invalid redirect URI', () => {
+            const payload = {
+                grant_type: 'authorization_code',
+                code: 'auth_code_123',
+                client_id: generateAppId(),
+                redirect_uri: 'not-a-valid-url',
+            };
+            const result = Schema.safeParse(payload);
+            expect(result.success).toBe(false);
+        });
+        test('should reject client credentials without required fields', () => {
+            const payload = {
+                grant_type: 'client_credentials',
+                client_id: generateAppId(),
+                // missing client_secret
+            };
+            const result = Schema.safeParse(payload);
+            expect(result.success).toBe(false);
+        });
+        test('should reject refresh token without required fields', () => {
+            const payload = {
+                grant_type: 'refresh_token',
+                client_id: 'app_123',
+                // missing refresh_token and client_secret
+            };
+            const result = Schema.safeParse(payload);
+            expect(result.success).toBe(false);
+        });
+        test('should reject completely invalid payload', () => {
+            const payload = {
+                invalid: 'data',
+            };
+            const result = Schema.safeParse(payload);
+            expect(result.success).toBe(false);
+        });
+    });
+});

package/dist/esm/workspace/authorization/schema.d.ts

@@ -0,0 +1,75 @@
+import * as z from 'zod/v4';
+export declare const DEFAULT_SESSION_DURATION: number;
+export declare const DEFAULT_REFRESH_TOKEN_DURATION: number;
+export declare const DEFAULT_ACCESS_TOKEN_DURATION: number;
+export declare const AuthorizationSchema: z.ZodObject<{
+    metadata: z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Map<string, string | number | boolean>, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>;
+    deactivatedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    deletedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    updatedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    sessionDuration: z.ZodDefault<z.ZodNumber>;
+    refreshTokenDuration: z.ZodDefault<z.ZodNumber>;
+    accessTokenDuration: z.ZodDefault<z.ZodNumber>;
+    accessTokenSignatureAlgorithm: z.ZodDefault<z.ZodEnum<{
+        HS256: "HS256";
+        HS384: "HS384";
+        HS512: "HS512";
+        RS256: "RS256";
+        RS384: "RS384";
+        RS512: "RS512";
+        ES256: "ES256";
+        ES384: "ES384";
+        ES512: "ES512";
+        PS256: "PS256";
+        PS384: "PS384";
+        PS512: "PS512";
+    }>>;
+}, z.core.$strip>;
+export type AuthorizationProperties = z.input<typeof AuthorizationSchema>;
+export type Authorization = z.output<typeof AuthorizationSchema>;
+export declare const AuthorizationPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    deactivatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    deletedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    updatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    sessionDuration: z.ZodDefault<z.ZodNumber>;
+    refreshTokenDuration: z.ZodDefault<z.ZodNumber>;
+    accessTokenDuration: z.ZodDefault<z.ZodNumber>;
+    accessTokenSignatureAlgorithm: z.ZodDefault<z.ZodEnum<{
+        HS256: "HS256";
+        HS384: "HS384";
+        HS512: "HS512";
+        RS256: "RS256";
+        RS384: "RS384";
+        RS512: "RS512";
+        ES256: "ES256";
+        ES384: "ES384";
+        ES512: "ES512";
+        PS256: "PS256";
+        PS384: "PS384";
+        PS512: "PS512";
+    }>>;
+}, z.core.$strip>;
+export type AuthorizationPayload = z.output<typeof AuthorizationPayloadSchema>;
+export declare const UpsertAuthorizationPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    sessionDuration: z.ZodDefault<z.ZodNumber>;
+    refreshTokenDuration: z.ZodDefault<z.ZodNumber>;
+    accessTokenDuration: z.ZodDefault<z.ZodNumber>;
+    accessTokenSignatureAlgorithm: z.ZodDefault<z.ZodEnum<{
+        HS256: "HS256";
+        HS384: "HS384";
+        HS512: "HS512";
+        RS256: "RS256";
+        RS384: "RS384";
+        RS512: "RS512";
+        ES256: "ES256";
+        ES384: "ES384";
+        ES512: "ES512";
+        PS256: "PS256";
+        PS384: "PS384";
+        PS512: "PS512";
+    }>>;
+}, z.core.$strip>;
+export type UpsertAuthorizationPayload = z.output<typeof UpsertAuthorizationPayloadSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/esm/workspace/authorization/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/workspace/authorization/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAe5B,eAAO,MAAM,wBAAwB,QAAc,CAAC;AACpD,eAAO,MAAM,8BAA8B,QAAoB,CAAC;AAChE,eAAO,MAAM,6BAA6B,QAAc,CAAC;AASzD,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;iBAM9B,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAC1E,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEjE,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;iBAMrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE/E,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;iBAG3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAC/C,OAAO,gCAAgC,CACxC,CAAC"}

package/dist/esm/workspace/authorization/schema.js

@@ -0,0 +1,31 @@
+import * as z from 'zod/v4';
+import { DeactivatedAtPropertyPayloadSchema, DeactivatedAtPropertySchema, DeletedAtPropertyPayloadSchema, DeletedAtPropertySchema, OptionalDatePayloadSchema, OptionalDateSchema, } from '../../common/schema/dates.js';
+import { AlgorithmSchema, DEFAULT_ALGORITHM } from '../../common/schema/jwt.js';
+import { MetadataMapPropertySchema, MetadataPayloadPropertySchema, } from '../../common/schema/metadata.js';
+export const DEFAULT_SESSION_DURATION = 60 * 60 * 4; // 4 hour
+export const DEFAULT_REFRESH_TOKEN_DURATION = 60 * 60 * 24 * 14; // 14 days
+export const DEFAULT_ACCESS_TOKEN_DURATION = 60 * 60 * 2; // 2 hours
+const BaseAttributes = z.object({
+    sessionDuration: z.number().default(DEFAULT_SESSION_DURATION),
+    refreshTokenDuration: z.number().default(DEFAULT_REFRESH_TOKEN_DURATION),
+    accessTokenDuration: z.number().default(DEFAULT_ACCESS_TOKEN_DURATION),
+    accessTokenSignatureAlgorithm: AlgorithmSchema.default(DEFAULT_ALGORITHM),
+});
+export const AuthorizationSchema = z.object({
+    ...BaseAttributes.shape,
+    updatedAt: OptionalDateSchema,
+    ...DeletedAtPropertySchema.shape,
+    ...DeactivatedAtPropertySchema.shape,
+    ...MetadataMapPropertySchema.shape,
+});
+export const AuthorizationPayloadSchema = z.object({
+    ...BaseAttributes.shape,
+    updatedAt: OptionalDatePayloadSchema,
+    ...DeletedAtPropertyPayloadSchema.shape,
+    ...DeactivatedAtPropertyPayloadSchema.shape,
+    ...MetadataPayloadPropertySchema.shape,
+});
+export const UpsertAuthorizationPayloadSchema = z.object({
+    ...BaseAttributes.shape,
+    ...MetadataPayloadPropertySchema.shape,
+});

package/dist/esm/workspace/branding/schema.d.ts

@@ -0,0 +1,48 @@
+import * as z from 'zod/v4';
+export declare const BrandingSchema: z.ZodObject<{
+    metadata: z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Map<string, string | number | boolean>, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>;
+    deactivatedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    deletedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    updatedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    logo: z.ZodOptional<z.ZodObject<{
+        dark: z.ZodOptional<z.ZodURL>;
+        light: z.ZodOptional<z.ZodURL>;
+        email: z.ZodOptional<z.ZodURL>;
+    }, z.core.$strip>>;
+    color: z.ZodOptional<z.ZodObject<{
+        link: z.ZodOptional<z.ZodString>;
+        linkHover: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type BrandingProperties = z.input<typeof BrandingSchema>;
+export type Branding = z.output<typeof BrandingSchema>;
+export declare const BrandingPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    deactivatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    deletedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    updatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    logo: z.ZodOptional<z.ZodObject<{
+        dark: z.ZodOptional<z.ZodURL>;
+        light: z.ZodOptional<z.ZodURL>;
+        email: z.ZodOptional<z.ZodURL>;
+    }, z.core.$strip>>;
+    color: z.ZodOptional<z.ZodObject<{
+        link: z.ZodOptional<z.ZodString>;
+        linkHover: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type BrandingPayload = z.output<typeof BrandingPayloadSchema>;
+export declare const UpsertBrandingPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    logo: z.ZodOptional<z.ZodObject<{
+        dark: z.ZodOptional<z.ZodURL>;
+        light: z.ZodOptional<z.ZodURL>;
+        email: z.ZodOptional<z.ZodURL>;
+    }, z.core.$strip>>;
+    color: z.ZodOptional<z.ZodObject<{
+        link: z.ZodOptional<z.ZodString>;
+        linkHover: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type UpsertBrandingPayload = z.output<typeof UpsertBrandingPayloadSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/esm/workspace/branding/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/workspace/branding/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AA8B5B,eAAO,MAAM,cAAc;;;;;;;;;;;;;;iBAMzB,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAChE,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,cAAc,CAAC,CAAC;AAEvD,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;iBAMhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAErE,eAAO,MAAM,2BAA2B;;;;;;;;;;;iBAGtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAC1C,OAAO,2BAA2B,CACnC,CAAC"}

package/dist/esm/workspace/branding/schema.js

@@ -0,0 +1,34 @@
+import * as z from 'zod/v4';
+import { DeactivatedAtPropertyPayloadSchema, DeactivatedAtPropertySchema, DeletedAtPropertyPayloadSchema, DeletedAtPropertySchema, OptionalDatePayloadSchema, OptionalDateSchema, } from '../../common/schema/dates.js';
+import { MetadataMapPropertySchema, MetadataPayloadPropertySchema, } from '../../common/schema/metadata.js';
+const LogoSchema = z.object({
+    dark: z.url().optional(),
+    light: z.url().optional(),
+    email: z.url().optional(),
+});
+const ColorSchema = z.object({
+    link: z.string().optional(),
+    linkHover: z.string().optional(),
+});
+const BaseSchema = z.object({
+    logo: LogoSchema.optional(),
+    color: ColorSchema.optional(),
+});
+export const BrandingSchema = z.object({
+    ...BaseSchema.shape,
+    updatedAt: OptionalDateSchema,
+    ...DeletedAtPropertySchema.shape,
+    ...DeactivatedAtPropertySchema.shape,
+    ...MetadataMapPropertySchema.shape,
+});
+export const BrandingPayloadSchema = z.object({
+    ...BaseSchema.shape,
+    updatedAt: OptionalDatePayloadSchema,
+    ...DeletedAtPropertyPayloadSchema.shape,
+    ...DeactivatedAtPropertyPayloadSchema.shape,
+    ...MetadataPayloadPropertySchema.shape,
+});
+export const UpsertBrandingPayloadSchema = z.object({
+    ...BaseSchema.shape,
+    ...MetadataPayloadPropertySchema.shape,
+});

package/dist/esm/workspace/index.d.ts

@@ -1,2 +1,9 @@
-export * from './schema/schema.js';
+export * from './authorization/schema.js';
+export * from './branding/schema.js';
+export * from './membership/schema.js';
+export * from './registration/schema.js';
+export * from './settings/schema.js';
+export * from './tenant/schema.js';
+export * from './user/schema.js';
+export * from './utils.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/esm/workspace/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/workspace/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/workspace/index.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AAEjC,cAAc,YAAY,CAAC"}

package/dist/esm/workspace/index.js

@@ -1 +1,8 @@
-export * from './schema/schema.js';
+export * from './authorization/schema.js';
+export * from './branding/schema.js';
+export * from './membership/schema.js';
+export * from './registration/schema.js';
+export * from './settings/schema.js';
+export * from './tenant/schema.js';
+export * from './user/schema.js';
+export * from './utils.js';

package/dist/esm/workspace/membership/schema.d.ts

@@ -0,0 +1,47 @@
+import * as z from 'zod/v4';
+export declare const FeatureFlag: {
+    readonly REMOVE_MEMBERSHIP: "Membership.Remove";
+    readonly REMOVE_BRANDING: "Branding.Remove";
+};
+export type AnyFeatureFlag = (typeof FeatureFlag)[keyof typeof FeatureFlag];
+export declare const FeaturePayloadSchema: z.ZodObject<{
+    expiresAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+}, z.core.$strip>;
+export type FeaturePayload = z.output<typeof FeaturePayloadSchema>;
+export declare const FeaturesPayloadSchema: z.ZodObject<{
+    "Membership.Remove": z.ZodOptional<z.ZodObject<{
+        expiresAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+    }, z.core.$strip>>;
+    "Branding.Remove": z.ZodOptional<z.ZodObject<{
+        expiresAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type FeaturesPayload = z.output<typeof FeaturesPayloadSchema>;
+export declare const MembershipSchema: z.ZodObject<{
+    features: z.ZodOptional<z.ZodObject<{
+        "Membership.Remove": z.ZodOptional<z.ZodObject<{
+            expiresAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+        }, z.core.$strip>>;
+        "Branding.Remove": z.ZodOptional<z.ZodObject<{
+            expiresAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    startAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    endAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+}, z.core.$strip>;
+export type MembershipProperties = z.input<typeof MembershipSchema>;
+export type Membership = z.output<typeof MembershipSchema>;
+export declare const MembershipPayloadSchema: z.ZodObject<{
+    features: z.ZodOptional<z.ZodObject<{
+        "Membership.Remove": z.ZodOptional<z.ZodObject<{
+            expiresAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+        }, z.core.$strip>>;
+        "Branding.Remove": z.ZodOptional<z.ZodObject<{
+            expiresAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    startAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    endAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+}, z.core.$strip>;
+export type MembershipPayload = z.output<typeof MembershipPayloadSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/esm/workspace/membership/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/workspace/membership/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAO5B,eAAO,MAAM,WAAW;;;CAGd,CAAC;AACX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAE5E,eAAO,MAAM,oBAAoB;;iBAE/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEnE,eAAO,MAAM,qBAAqB;;;;;;;iBAGhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAErE,eAAO,MAAM,gBAAgB;;;;;;;;;;;iBAI3B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AACpE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE3D,eAAO,MAAM,uBAAuB;;;;;;;;;;;iBAIlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC"}

package/dist/esm/workspace/membership/schema.js

@@ -0,0 +1,23 @@
+import * as z from 'zod/v4';
+import { OptionalDatePayloadSchema, OptionalDateSchema, RequiredDatePayloadSchema, } from '../../common/schema/dates.js';
+export const FeatureFlag = {
+    REMOVE_MEMBERSHIP: 'Membership.Remove',
+    REMOVE_BRANDING: 'Branding.Remove',
+};
+export const FeaturePayloadSchema = z.object({
+    expiresAt: RequiredDatePayloadSchema,
+});
+export const FeaturesPayloadSchema = z.object({
+    [FeatureFlag.REMOVE_MEMBERSHIP]: FeaturePayloadSchema.optional(),
+    [FeatureFlag.REMOVE_BRANDING]: FeaturePayloadSchema.optional(),
+});
+export const MembershipSchema = z.object({
+    features: FeaturesPayloadSchema.optional(),
+    startAt: OptionalDateSchema,
+    endAt: OptionalDateSchema,
+});
+export const MembershipPayloadSchema = z.object({
+    features: FeaturesPayloadSchema.optional(),
+    startAt: OptionalDatePayloadSchema,
+    endAt: OptionalDatePayloadSchema,
+});

package/dist/esm/workspace/registration/schema.d.ts

@@ -0,0 +1,42 @@
+import * as z from 'zod/v4';
+export declare const RegistrationSchema: z.ZodObject<{
+    metadata: z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Map<string, string | number | boolean>, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>;
+    deactivatedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    deletedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    updatedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    allowSelfRegistration: z.ZodBoolean;
+    identifiers: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        type: z.ZodEnum<{
+            email: "email";
+            phoneNumber: "phoneNumber";
+        }>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type RegistrationProperties = z.input<typeof RegistrationSchema>;
+export type Registration = z.output<typeof RegistrationSchema>;
+export declare const RegistrationPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    deactivatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    deletedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    updatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    allowSelfRegistration: z.ZodBoolean;
+    identifiers: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        type: z.ZodEnum<{
+            email: "email";
+            phoneNumber: "phoneNumber";
+        }>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type RegistrationPayload = z.output<typeof RegistrationPayloadSchema>;
+export declare const UpsertRegistrationPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    allowSelfRegistration: z.ZodOptional<z.ZodBoolean>;
+    identifiers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        type: z.ZodEnum<{
+            email: "email";
+            phoneNumber: "phoneNumber";
+        }>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type UpsertRegistrationPayload = z.output<typeof UpsertRegistrationPayloadSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/esm/workspace/registration/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/workspace/registration/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAmC5B,eAAO,MAAM,kBAAkB;;;;;;;;;;;;iBAM7B,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACxE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE/D,eAAO,MAAM,yBAAyB;;;;;;;;;;;;iBAMpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE7E,eAAO,MAAM,+BAA+B;;;;;;;;;iBAI1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAC9C,OAAO,+BAA+B,CACvC,CAAC"}

package/dist/esm/workspace/registration/schema.js

@@ -0,0 +1,35 @@
+import * as z from 'zod/v4';
+import { DeactivatedAtPropertyPayloadSchema, DeactivatedAtPropertySchema, DeletedAtPropertyPayloadSchema, DeletedAtPropertySchema, OptionalDatePayloadSchema, OptionalDateSchema, } from '../../common/schema/dates.js';
+import { MetadataMapPropertySchema, MetadataPayloadPropertySchema, } from '../../common/schema/metadata.js';
+import { IdentityIdentifier, IdentityIdentifierSchema, } from '../../identity/schema.js';
+const IdentityIdentifierPropertySchema = z.array(z.object({
+    type: IdentityIdentifierSchema,
+}));
+const AllowSelfRegistrationSchema = z.boolean();
+const BaseSchema = z.object({
+    allowSelfRegistration: AllowSelfRegistrationSchema,
+    identifiers: IdentityIdentifierPropertySchema.default([
+        {
+            type: IdentityIdentifier.EMAIL,
+        },
+    ]),
+});
+export const RegistrationSchema = z.object({
+    ...BaseSchema.shape,
+    updatedAt: OptionalDateSchema,
+    ...DeletedAtPropertySchema.shape,
+    ...DeactivatedAtPropertySchema.shape,
+    ...MetadataMapPropertySchema.shape,
+});
+export const RegistrationPayloadSchema = z.object({
+    ...BaseSchema.shape,
+    updatedAt: OptionalDatePayloadSchema,
+    ...DeletedAtPropertyPayloadSchema.shape,
+    ...DeactivatedAtPropertyPayloadSchema.shape,
+    ...MetadataPayloadPropertySchema.shape,
+});
+export const UpsertRegistrationPayloadSchema = z.object({
+    allowSelfRegistration: AllowSelfRegistrationSchema.optional(),
+    identifiers: IdentityIdentifierPropertySchema.optional(),
+    ...MetadataPayloadPropertySchema.shape,
+});