@go-mondo/identity-sdk 0.0.2-beta.7 → 0.0.2-beta.71

package/dist/cjs/authentication/strategies/schema/types/totp.d.ts

@@ -1,3 +1,4 @@
+import * as z from 'zod/v4';
 export declare const DEFAULT_DIGITS = 6;
 export declare const DEFAULT_PERIOD = 30;
 export declare const TOTPAlgorithm: {
@@ -13,99 +14,111 @@ export declare const TOTPAlgorithm: {
     'SHA3-512': string;
 };
 export type AnyTOTPAlgorithm = (typeof TOTPAlgorithm)[keyof typeof TOTPAlgorithm];
-export declare const TOTPStrategySettingsSchema: import("arktype/out/methods/object.js").ObjectType<{
-    digits: import("arktype/out/attributes.js").Default<6 | 7 | 8, 6>;
-    period: import("arktype/out/attributes.js").Default<15 | 30 | 60, 30>;
-    algorithm: import("arktype/out/attributes.js").Default<string, string>;
-}, {}>;
-export type TOTPStrategySettings = typeof TOTPStrategySettingsSchema.inferOut;
-export declare const TOTPStrategySettingsPropertySchema: import("arktype/out/methods/object.js").ObjectType<{
-    settings: {
-        digits: import("arktype/out/attributes.js").Default<6 | 7 | 8, 6>;
-        period: import("arktype/out/attributes.js").Default<15 | 30 | 60, 30>;
-        algorithm: import("arktype/out/attributes.js").Default<string, string>;
-    };
-}, {}>;
-export type TOTPStrategySettingsProperty = typeof TOTPStrategySettingsPropertySchema.inferOut;
-export declare const TOTPStrategySchema: import("arktype/out/methods/object.js").ObjectType<{
-    id: string;
-    status: "enabled" | "disabled";
-    label: string;
-    createdAt: Date | ((In: string) => import("arktype/out/attributes.js").To<Date>);
-    updatedAt: Date | ((In: string) => import("arktype/out/attributes.js").To<Date>);
-    deletedAt?: Date | ((In: string) => import("arktype/out/attributes.js").To<Date>) | undefined;
-    deactivatedAt?: Date | ((In: string) => import("arktype/out/attributes.js").To<Date>) | undefined;
-    metadata: (In: import("arktype/out/attributes.js").Default<unknown, Map<string, string | number | boolean>>) => import("arktype").Out<Map<string, string | number | boolean> | Map<string, any>>;
-    type: "totp";
-    settings: {
-        digits: import("arktype/out/attributes.js").Default<6 | 7 | 8, 6>;
-        period: import("arktype/out/attributes.js").Default<15 | 30 | 60, 30>;
-        algorithm: import("arktype/out/attributes.js").Default<string, string>;
-    };
-}, {}>;
-export type TOTPStrategyProperties = typeof TOTPStrategySchema.inferIn;
-export type TOTPStrategy = typeof TOTPStrategySchema.inferOut;
-export declare const TOTPStrategyPayloadSchema: import("arktype/out/methods/object.js").ObjectType<{
-    id: string;
-    status: "enabled" | "disabled";
-    label: string;
-    createdAt: (In: string | Date) => import("arktype").Out<string>;
-    updatedAt: (In: string | Date) => import("arktype").Out<string>;
-    deletedAt?: ((In: string | Date | undefined) => import("arktype").Out<string | undefined>) | undefined;
-    deactivatedAt?: ((In: string | Date | undefined) => import("arktype").Out<string | undefined>) | undefined;
-    metadata?: ((In: {
-        [x: string]: string | number | boolean;
-    } | Map<string, string | number | boolean> | null | undefined) => import("arktype").Out<{
-        [x: string]: string | number | boolean;
-    } | undefined>) | undefined;
-    type: "totp";
-    settings: {
-        digits: import("arktype/out/attributes.js").Default<6 | 7 | 8, 6>;
-        period: import("arktype/out/attributes.js").Default<15 | 30 | 60, 30>;
-        algorithm: import("arktype/out/attributes.js").Default<string, string>;
-    };
-}, {}>;
-export type TOTPStrategyPayload = typeof TOTPStrategyPayloadSchema.inferOut;
-export declare const InsertTOTPStrategyPayloadSchema: import("arktype/out/methods/object.js").ObjectType<{
-    type: "totp";
-    label: string;
-    status: import("arktype/out/attributes.js").Default<"enabled" | "disabled", "enabled">;
-    id?: string | undefined;
-    metadata?: ((In: {
-        [x: string]: string | number | boolean;
-    } | Map<string, string | number | boolean> | null | undefined) => import("arktype").Out<{
-        [x: string]: string | number | boolean;
-    } | undefined>) | undefined;
-    settings?: {
-        digits: import("arktype/out/attributes.js").Default<6 | 7 | 8, 6>;
-        period: import("arktype/out/attributes.js").Default<15 | 30 | 60, 30>;
-        algorithm: import("arktype/out/attributes.js").Default<string, string>;
-    } | undefined;
-}, {}>;
-export type InsertTOTPStrategyInput = typeof InsertTOTPStrategyPayloadSchema.inferIn;
-export type InsertTOTPStrategyPayload = typeof InsertTOTPStrategyPayloadSchema.inferOut;
-export declare const UpdateTOTPStrategyPayloadSchema: import("arktype/out/methods/object.js").ObjectType<{
-    type: "totp";
-    label?: string | undefined;
-    status?: "enabled" | "disabled" | undefined;
-    metadata?: ((In: {
-        [x: string]: string | number | boolean;
-    } | Map<string, string | number | boolean> | null | undefined) => import("arktype").Out<{
-        [x: string]: string | number | boolean;
-    } | undefined>) | undefined;
-    settings?: {
-        digits: import("arktype/out/attributes.js").Default<6 | 7 | 8, 6>;
-        period: import("arktype/out/attributes.js").Default<15 | 30 | 60, 30>;
-        algorithm: import("arktype/out/attributes.js").Default<string, string>;
-    } | undefined;
-}, {}>;
-export type UpdateTOTPStrategyInput = typeof UpdateTOTPStrategyPayloadSchema.inferIn;
-export type UpdateTOTPStrategyPayload = typeof UpdateTOTPStrategyPayloadSchema.inferOut;
-export declare const RegisterTOTPSchema: import("arktype/out/methods/object.js").ObjectType<{
-    uri: string;
-    token: string;
-}, {}>;
-export declare const VerifyTOTPSchema: import("arktype/out/methods/object.js").ObjectType<{
-    token: string;
-}, {}>;
+export declare const TOTPStrategySettingsSchema: z.ZodObject<{
+    digits: z.ZodDefault<z.ZodNumber>;
+    period: z.ZodDefault<z.ZodNumber>;
+    algorithm: z.ZodDefault<z.ZodEnum<{
+        [x: string]: string;
+    }>>;
+}, z.core.$strip>;
+export type TOTPStrategySettings = z.output<typeof TOTPStrategySettingsSchema>;
+export declare const TOTPStrategySettingsPropertySchema: z.ZodObject<{
+    settings: z.ZodObject<{
+        digits: z.ZodDefault<z.ZodNumber>;
+        period: z.ZodDefault<z.ZodNumber>;
+        algorithm: z.ZodDefault<z.ZodEnum<{
+            [x: string]: string;
+        }>>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type TOTPStrategySettingsProperty = z.output<typeof TOTPStrategySettingsPropertySchema>;
+export declare const TOTPStrategySchema: z.ZodObject<{
+    settings: z.ZodObject<{
+        digits: z.ZodDefault<z.ZodNumber>;
+        period: z.ZodDefault<z.ZodNumber>;
+        algorithm: z.ZodDefault<z.ZodEnum<{
+            [x: string]: string;
+        }>>;
+    }, z.core.$strip>;
+    type: z.ZodLiteral<"totp">;
+    metadata: z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Map<string, string | number | boolean>, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>;
+    deactivatedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    deletedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    updatedAt: z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>;
+    createdAt: z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>;
+    id: z.ZodString;
+    status: z.ZodDefault<z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>>;
+    label: z.ZodString;
+}, z.core.$strip>;
+export type TOTPStrategyProperties = z.input<typeof TOTPStrategySchema>;
+export type TOTPStrategy = z.output<typeof TOTPStrategySchema>;
+export declare const TOTPStrategyPayloadSchema: z.ZodObject<{
+    settings: z.ZodObject<{
+        digits: z.ZodDefault<z.ZodNumber>;
+        period: z.ZodDefault<z.ZodNumber>;
+        algorithm: z.ZodDefault<z.ZodEnum<{
+            [x: string]: string;
+        }>>;
+    }, z.core.$strip>;
+    type: z.ZodLiteral<"totp">;
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    deactivatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    deletedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    updatedAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+    createdAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+    id: z.ZodString;
+    status: z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>;
+    label: z.ZodString;
+}, z.core.$strip>;
+export type TOTPStrategyPayload = z.output<typeof TOTPStrategyPayloadSchema>;
+export declare const InsertTOTPStrategyPayloadSchema: z.ZodObject<{
+    settings: z.ZodOptional<z.ZodObject<{
+        digits: z.ZodDefault<z.ZodNumber>;
+        period: z.ZodDefault<z.ZodNumber>;
+        algorithm: z.ZodDefault<z.ZodEnum<{
+            [x: string]: string;
+        }>>;
+    }, z.core.$strip>>;
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    id: z.ZodOptional<z.ZodString>;
+    label: z.ZodString;
+    status: z.ZodDefault<z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>>;
+    type: z.ZodLiteral<"totp">;
+}, z.core.$strip>;
+export type InsertTOTPStrategyInput = z.input<typeof InsertTOTPStrategyPayloadSchema>;
+export type InsertTOTPStrategyPayload = z.output<typeof InsertTOTPStrategyPayloadSchema>;
+export declare const UpdateTOTPStrategyPayloadSchema: z.ZodObject<{
+    settings: z.ZodOptional<z.ZodObject<{
+        digits: z.ZodDefault<z.ZodNumber>;
+        period: z.ZodDefault<z.ZodNumber>;
+        algorithm: z.ZodDefault<z.ZodEnum<{
+            [x: string]: string;
+        }>>;
+    }, z.core.$strip>>;
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    label: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>>;
+    type: z.ZodLiteral<"totp">;
+}, z.core.$strip>;
+export type UpdateTOTPStrategyInput = z.input<typeof UpdateTOTPStrategyPayloadSchema>;
+export type UpdateTOTPStrategyPayload = z.output<typeof UpdateTOTPStrategyPayloadSchema>;
+export declare const RegisterTOTPSchema: z.ZodObject<{
+    uri: z.ZodURL;
+    token: z.ZodString;
+}, z.core.$strip>;
+export declare const VerifyTOTPSchema: z.ZodObject<{
+    token: z.ZodString;
+}, z.core.$strip>;
 //# sourceMappingURL=totp.d.ts.map

package/dist/cjs/authentication/strategies/schema/types/totp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"totp.d.ts","sourceRoot":"","sources":["../../../../../../src/authentication/strategies/schema/types/totp.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,cAAc,IAAI,CAAC;AAChC,eAAO,MAAM,cAAc,KAAK,CAAC;AAMjC,eAAO,MAAM,aAAa;;;;;;;;;;;CAWzB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAC1B,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,OAAO,aAAa,CAAC,CAAC;AAErD,eAAO,MAAM,0BAA0B;;;;MAgBrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,OAAO,0BAA0B,CAAC,QAAQ,CAAC;AAE9E,eAAO,MAAM,kCAAkC;;;;;;MAE7C,CAAC;AACH,MAAM,MAAM,4BAA4B,GACtC,OAAO,kCAAkC,CAAC,QAAQ,CAAC;AAErD,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;MAE7B,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,OAAO,kBAAkB,CAAC,OAAO,CAAC;AACvE,MAAM,MAAM,YAAY,GAAG,OAAO,kBAAkB,CAAC,QAAQ,CAAC;AAE9D,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;MAEG,CAAC;AAC1C,MAAM,MAAM,mBAAmB,GAAG,OAAO,yBAAyB,CAAC,QAAQ,CAAC;AAE5E,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;MAMxC,CAAC;AACL,MAAM,MAAM,uBAAuB,GACjC,OAAO,+BAA+B,CAAC,OAAO,CAAC;AACjD,MAAM,MAAM,yBAAyB,GACnC,OAAO,+BAA+B,CAAC,QAAQ,CAAC;AAElD,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;MAI1C,CAAC;AACH,MAAM,MAAM,uBAAuB,GACjC,OAAO,+BAA+B,CAAC,OAAO,CAAC;AACjD,MAAM,MAAM,yBAAyB,GACnC,OAAO,+BAA+B,CAAC,QAAQ,CAAC;AAElD,eAAO,MAAM,kBAAkB;;;MAO7B,CAAC;AAEH,eAAO,MAAM,gBAAgB;;MAI3B,CAAC"}
+{"version":3,"file":"totp.d.ts","sourceRoot":"","sources":["../../../../../../src/authentication/strategies/schema/types/totp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAS5B,eAAO,MAAM,cAAc,IAAI,CAAC;AAChC,eAAO,MAAM,cAAc,KAAK,CAAC;AAMjC,eAAO,MAAM,aAAa;;;;;;;;;;;CAWzB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAC1B,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,OAAO,aAAa,CAAC,CAAC;AAKrD,eAAO,MAAM,0BAA0B;;;;;;iBA0BrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE/E,eAAO,MAAM,kCAAkC;;;;;;;;iBAE7C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CACjD,OAAO,kCAAkC,CAC1C,CAAC;AAEF,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;iBAI7B,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACxE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE/D,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;iBAIpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE7E,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;iBAI1C,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,+BAA+B,CACvC,CAAC;AACF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAC9C,OAAO,+BAA+B,CACvC,CAAC;AAEF,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;iBAI1C,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,+BAA+B,CACvC,CAAC;AACF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAC9C,OAAO,+BAA+B,CACvC,CAAC;AAEF,eAAO,MAAM,kBAAkB;;;iBAG7B,CAAC;AAEH,eAAO,MAAM,gBAAgB;;iBAE3B,CAAC"}

package/dist/cjs/authentication/strategies/schema/types/totp.js

@@ -1,12 +1,45 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.VerifyTOTPSchema = exports.RegisterTOTPSchema = exports.UpdateTOTPStrategyPayloadSchema = exports.InsertTOTPStrategyPayloadSchema = exports.TOTPStrategyPayloadSchema = exports.TOTPStrategySchema = exports.TOTPStrategySettingsPropertySchema = exports.TOTPStrategySettingsSchema = exports.TOTPAlgorithm = exports.DEFAULT_PERIOD = exports.DEFAULT_DIGITS = void 0;
-const arktype_1 = require("arktype");
+const z = __importStar(require("zod/v4"));
 const base_js_1 = require("../base.js");
 exports.DEFAULT_DIGITS = 6;
 exports.DEFAULT_PERIOD = 30;
-const TypeSchema = (0, arktype_1.type)({
-    type: "'totp'",
+const TypeSchema = z.object({
+    type: z.literal(base_js_1.StrategyType.TOTP),
 });
 exports.TOTPAlgorithm = {
     DEFAULT: 'SHA256',
@@ -20,38 +53,62 @@ exports.TOTPAlgorithm = {
     'SHA3-384': 'SHA3-384',
     'SHA3-512': 'SHA3-512',
 };
-exports.TOTPStrategySettingsSchema = (0, arktype_1.type)({
-    digits: arktype_1.type.enumerated(6, 7, 8).default(exports.DEFAULT_DIGITS),
-    period: arktype_1.type.enumerated(15, 30, 60).default(exports.DEFAULT_PERIOD),
-    algorithm: arktype_1.type
-        .enumerated(exports.TOTPAlgorithm.SHA1, exports.TOTPAlgorithm.SHA224, exports.TOTPAlgorithm.SHA256, exports.TOTPAlgorithm.SHA384, exports.TOTPAlgorithm.SHA512, exports.TOTPAlgorithm['SHA3-224'], exports.TOTPAlgorithm['SHA3-256'], exports.TOTPAlgorithm['SHA3-384'], exports.TOTPAlgorithm['SHA3-512'])
+const allowedDigits = new Set([6, 7, 8]);
+const allowedPeriods = new Set([15, 30, 60]);
+exports.TOTPStrategySettingsSchema = z.object({
+    digits: z
+        .number()
+        .default(exports.DEFAULT_DIGITS)
+        .refine((val) => allowedDigits.has(val), {
+        message: 'Digit must be 6, 7, or 8',
+    }),
+    period: z
+        .number()
+        .default(exports.DEFAULT_PERIOD)
+        .refine((val) => allowedPeriods.has(val), {
+        message: 'Period must be 15, 30, or 60',
+    }),
+    algorithm: z
+        .enum([
+        exports.TOTPAlgorithm.SHA1,
+        exports.TOTPAlgorithm.SHA224,
+        exports.TOTPAlgorithm.SHA256,
+        exports.TOTPAlgorithm.SHA384,
+        exports.TOTPAlgorithm.SHA512,
+        exports.TOTPAlgorithm['SHA3-224'],
+        exports.TOTPAlgorithm['SHA3-256'],
+        exports.TOTPAlgorithm['SHA3-384'],
+        exports.TOTPAlgorithm['SHA3-512'],
+    ])
         .default(exports.TOTPAlgorithm.DEFAULT),
 });
-exports.TOTPStrategySettingsPropertySchema = (0, arktype_1.type)({
+exports.TOTPStrategySettingsPropertySchema = z.object({
     settings: exports.TOTPStrategySettingsSchema,
 });
-exports.TOTPStrategySchema = base_js_1.BaseStrategySchema.and(TypeSchema).and({
+exports.TOTPStrategySchema = z.object({
+    ...base_js_1.BaseStrategySchema.shape,
+    ...TypeSchema.shape,
     settings: exports.TOTPStrategySettingsSchema,
 });
-exports.TOTPStrategyPayloadSchema = base_js_1.BaseStrategyPayloadSchema.and(TypeSchema).and(exports.TOTPStrategySettingsPropertySchema);
-exports.InsertTOTPStrategyPayloadSchema = TypeSchema.and(base_js_1.BaseInsertStrategyPayloadSchema)
-    .and(TypeSchema)
-    .and({
+exports.TOTPStrategyPayloadSchema = z.object({
+    ...base_js_1.BaseStrategyPayloadSchema.shape,
+    ...TypeSchema.shape,
+    ...exports.TOTPStrategySettingsPropertySchema.shape,
+});
+exports.InsertTOTPStrategyPayloadSchema = z.object({
+    ...TypeSchema.shape,
+    ...base_js_1.BaseInsertStrategyPayloadSchema.shape,
     settings: exports.TOTPStrategySettingsSchema.optional(),
 });
-exports.UpdateTOTPStrategyPayloadSchema = TypeSchema.and(base_js_1.BaseUpdateStrategyPayloadSchema).and({
+exports.UpdateTOTPStrategyPayloadSchema = z.object({
+    ...TypeSchema.shape,
+    ...base_js_1.BaseUpdateStrategyPayloadSchema.shape,
     settings: exports.TOTPStrategySettingsSchema.optional(),
 });
-exports.RegisterTOTPSchema = (0, arktype_1.type)({
-    uri: (0, arktype_1.type)('string.url').configure({
-        message: 'An authenticator uri is required',
-    }),
-    token: (0, arktype_1.type)('string').configure({
-        message: 'An authenticator token is required',
-    }),
+exports.RegisterTOTPSchema = z.object({
+    uri: z.url('An authenticator uri is required'),
+    token: z.string('An authenticator token is required'),
 });
-exports.VerifyTOTPSchema = (0, arktype_1.type)({
-    token: (0, arktype_1.type)('string').configure({
-        message: 'An authenticator token is required',
-    }),
+exports.VerifyTOTPSchema = z.object({
+    token: z.string({ message: 'An authenticator token is required' }),
 });

package/dist/cjs/authentication/utils.d.ts

@@ -0,0 +1,13 @@
+export declare const Model: {
+    readonly Strategy: {
+        readonly UIDPrefix: "stg";
+        readonly TYPE: "Strategy";
+    };
+    readonly Session: {
+        readonly UIDPrefix: "ssn";
+        readonly TYPE: "Session";
+    };
+};
+export declare function generateStrategyId(): string;
+export declare function generateSessionId(): string;
+//# sourceMappingURL=utils.d.ts.map

package/dist/cjs/authentication/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/authentication/utils.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,KAAK;;;;;;;;;CASR,CAAC;AAEX,wBAAgB,kBAAkB,WAEjC;AAED,wBAAgB,iBAAiB,WAEhC"}

package/dist/cjs/authentication/utils.js

@@ -0,0 +1,25 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Model = void 0;
+exports.generateStrategyId = generateStrategyId;
+exports.generateSessionId = generateSessionId;
+const ksuid_1 = __importDefault(require("ksuid"));
+exports.Model = {
+    Strategy: {
+        UIDPrefix: 'stg',
+        TYPE: 'Strategy',
+    },
+    Session: {
+        UIDPrefix: 'ssn',
+        TYPE: 'Session',
+    },
+};
+function generateStrategyId() {
+    return `${exports.Model.Strategy.UIDPrefix}_${ksuid_1.default.randomSync().string}`;
+}
+function generateSessionId() {
+    return `${exports.Model.Session.UIDPrefix}_${ksuid_1.default.randomSync().string}`;
+}

package/dist/cjs/authentication/utils.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=utils.test.d.ts.map

package/dist/cjs/authentication/utils.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.test.d.ts","sourceRoot":"","sources":["../../../src/authentication/utils.test.ts"],"names":[],"mappings":""}

package/dist/cjs/authentication/utils.test.js

@@ -0,0 +1,142 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const utils_js_1 = require("./utils.js");
+(0, vitest_1.describe)('Authentication Utils', () => {
+    (0, vitest_1.describe)('Model constants', () => {
+        (0, vitest_1.test)('should have correct Strategy model properties', () => {
+            (0, vitest_1.expect)(utils_js_1.Model.Strategy.UIDPrefix).toBe('stg');
+            (0, vitest_1.expect)(utils_js_1.Model.Strategy.TYPE).toBe('Strategy');
+        });
+        (0, vitest_1.test)('should have correct Session model properties', () => {
+            (0, vitest_1.expect)(utils_js_1.Model.Session.UIDPrefix).toBe('ssn');
+            (0, vitest_1.expect)(utils_js_1.Model.Session.TYPE).toBe('Session');
+        });
+        (0, vitest_1.test)('should be readonly (const assertion)', () => {
+            // Test that the Model object is properly typed as const
+            (0, vitest_1.expect)(typeof utils_js_1.Model).toBe('object');
+            (0, vitest_1.expect)(Object.isFrozen(utils_js_1.Model)).toBe(false); // const assertion doesn't freeze at runtime
+        });
+    });
+    (0, vitest_1.describe)('generateStrategyId', () => {
+        (0, vitest_1.test)('should generate ID with correct prefix', () => {
+            const id = (0, utils_js_1.generateStrategyId)();
+            (0, vitest_1.expect)(id).toMatch(/^stg_/);
+        });
+        (0, vitest_1.test)('should generate ID with correct format', () => {
+            const id = (0, utils_js_1.generateStrategyId)();
+            // Should match: prefix + underscore + KSUID (27 characters)
+            (0, vitest_1.expect)(id).toMatch(/^stg_[A-Za-z0-9]{27}$/);
+        });
+        (0, vitest_1.test)('should generate unique IDs on multiple calls', () => {
+            const id1 = (0, utils_js_1.generateStrategyId)();
+            const id2 = (0, utils_js_1.generateStrategyId)();
+            const id3 = (0, utils_js_1.generateStrategyId)();
+            (0, vitest_1.expect)(id1).not.toBe(id2);
+            (0, vitest_1.expect)(id2).not.toBe(id3);
+            (0, vitest_1.expect)(id1).not.toBe(id3);
+        });
+        (0, vitest_1.test)('should generate IDs with correct total length', () => {
+            const id = (0, utils_js_1.generateStrategyId)();
+            // prefix (3) + underscore (1) + KSUID (27) = 31 characters
+            (0, vitest_1.expect)(id.length).toBe(31);
+        });
+        (0, vitest_1.test)('should generate IDs that start with strategy prefix', () => {
+            const ids = Array.from({ length: 10 }, () => (0, utils_js_1.generateStrategyId)());
+            for (const id of ids) {
+                (0, vitest_1.expect)(id.startsWith('stg_')).toBe(true);
+            }
+        });
+        (0, vitest_1.test)('should generate KSUID-compatible format', () => {
+            const id = (0, utils_js_1.generateStrategyId)();
+            const ksuidPart = id.substring(4); // Remove 'stg_'
+            // KSUID should be 27 characters of base62
+            (0, vitest_1.expect)(ksuidPart.length).toBe(27);
+            (0, vitest_1.expect)(ksuidPart).toMatch(/^[A-Za-z0-9]{27}$/);
+        });
+        (0, vitest_1.test)('should be deterministic in format but random in content', () => {
+            const ids = Array.from({ length: 100 }, () => (0, utils_js_1.generateStrategyId)());
+            // All should have same format
+            for (const id of ids) {
+                (0, vitest_1.expect)(id).toMatch(/^stg_[A-Za-z0-9]{27}$/);
+            }
+            // All should be unique
+            const uniqueIds = new Set(ids);
+            (0, vitest_1.expect)(uniqueIds.size).toBe(100);
+        });
+    });
+    (0, vitest_1.describe)('generateSessionId', () => {
+        (0, vitest_1.test)('should generate ID with correct prefix', () => {
+            const id = (0, utils_js_1.generateSessionId)();
+            (0, vitest_1.expect)(id).toMatch(/^ssn_/);
+        });
+        (0, vitest_1.test)('should generate ID with correct format', () => {
+            const id = (0, utils_js_1.generateSessionId)();
+            // Should match: prefix + underscore + KSUID (27 characters)
+            (0, vitest_1.expect)(id).toMatch(/^ssn_[A-Za-z0-9]{27}$/);
+        });
+        (0, vitest_1.test)('should generate unique IDs on multiple calls', () => {
+            const id1 = (0, utils_js_1.generateSessionId)();
+            const id2 = (0, utils_js_1.generateSessionId)();
+            const id3 = (0, utils_js_1.generateSessionId)();
+            (0, vitest_1.expect)(id1).not.toBe(id2);
+            (0, vitest_1.expect)(id2).not.toBe(id3);
+            (0, vitest_1.expect)(id1).not.toBe(id3);
+        });
+        (0, vitest_1.test)('should generate IDs with correct total length', () => {
+            const id = (0, utils_js_1.generateSessionId)();
+            // prefix (3) + underscore (1) + KSUID (27) = 31 characters
+            (0, vitest_1.expect)(id.length).toBe(31);
+        });
+        (0, vitest_1.test)('should generate IDs that start with session prefix', () => {
+            const ids = Array.from({ length: 10 }, () => (0, utils_js_1.generateSessionId)());
+            for (const id of ids) {
+                (0, vitest_1.expect)(id.startsWith('ssn_')).toBe(true);
+            }
+        });
+        (0, vitest_1.test)('should generate KSUID-compatible format', () => {
+            const id = (0, utils_js_1.generateSessionId)();
+            const ksuidPart = id.substring(4); // Remove 'ssn_'
+            // KSUID should be 27 characters of base62
+            (0, vitest_1.expect)(ksuidPart.length).toBe(27);
+            (0, vitest_1.expect)(ksuidPart).toMatch(/^[A-Za-z0-9]{27}$/);
+        });
+        (0, vitest_1.test)('should be deterministic in format but random in content', () => {
+            const ids = Array.from({ length: 100 }, () => (0, utils_js_1.generateSessionId)());
+            // All should have same format
+            for (const id of ids) {
+                (0, vitest_1.expect)(id).toMatch(/^ssn_[A-Za-z0-9]{27}$/);
+            }
+            // All should be unique
+            const uniqueIds = new Set(ids);
+            (0, vitest_1.expect)(uniqueIds.size).toBe(100);
+        });
+    });
+    (0, vitest_1.describe)('ID generation comparison', () => {
+        (0, vitest_1.test)('should generate different formats for strategy vs session', () => {
+            const strategyId = (0, utils_js_1.generateStrategyId)();
+            const sessionId = (0, utils_js_1.generateSessionId)();
+            (0, vitest_1.expect)(strategyId.startsWith('stg_')).toBe(true);
+            (0, vitest_1.expect)(sessionId.startsWith('ssn_')).toBe(true);
+            (0, vitest_1.expect)(strategyId).not.toBe(sessionId);
+        });
+        (0, vitest_1.test)('should maintain format consistency across generators', () => {
+            const strategyIds = Array.from({ length: 10 }, () => (0, utils_js_1.generateStrategyId)());
+            const sessionIds = Array.from({ length: 10 }, () => (0, utils_js_1.generateSessionId)());
+            // All strategy IDs should have same prefix
+            for (const id of strategyIds) {
+                (0, vitest_1.expect)(id.startsWith('stg_')).toBe(true);
+                (0, vitest_1.expect)(id.length).toBe(31);
+            }
+            // All session IDs should have same prefix
+            for (const id of sessionIds) {
+                (0, vitest_1.expect)(id.startsWith('ssn_')).toBe(true);
+                (0, vitest_1.expect)(id.length).toBe(31);
+            }
+            // No overlap between the two sets
+            const allIds = [...strategyIds, ...sessionIds];
+            const uniqueIds = new Set(allIds);
+            (0, vitest_1.expect)(uniqueIds.size).toBe(20);
+        });
+    });
+});

package/dist/cjs/authorization/index.d.ts

@@ -2,5 +2,5 @@ export * from './permissions/resources.js';
 export * from './permissions/schema.js';
 export * from './roles/resources.js';
 export * from './roles/schema.js';
-export * from './utils.js';
+export * from './schema.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/cjs/authorization/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/authorization/index.ts"],"names":[],"mappings":"AACA,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AAGxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAElC,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/authorization/index.ts"],"names":[],"mappings":"AACA,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AAGxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAElC,cAAc,aAAa,CAAC"}

package/dist/cjs/authorization/index.js

@@ -20,4 +20,4 @@ __exportStar(require("./permissions/schema.js"), exports);
 // Roles
 __exportStar(require("./roles/resources.js"), exports);
 __exportStar(require("./roles/schema.js"), exports);
-__exportStar(require("./utils.js"), exports);
+__exportStar(require("./schema.js"), exports);

package/dist/cjs/authorization/permissions/resources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../../../src/authorization/permissions/resources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAWpE,OAAO,EACL,KAAK,oBAAoB,EAE1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EACL,KAAK,qBAAqB,EAE1B,KAAK,UAAU,EAEf,KAAK,qBAAqB,EAE3B,MAAM,aAAa,CAAC;AAIrB,qBAAa,mBAAmB;IACX,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,aAAa;IAE3D,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM;IAQ9B,SAAS,CACd,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAIrC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAIxC,UAAU,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC;IAI5D,UAAU,CACf,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,UAAU,CAAC;IAIf,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;CAGnD;AAED,wBAAsB,eAAe,CACnC,QAAQ,EAAE,aAAa,EACvB,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAW3C;AAED,wBAAsB,aAAa,CACjC,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,UAAU,CAAC,CASrB;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,aAAa,EACvB,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,UAAU,CAAC,CAYrB;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,UAAU,CAAC,CAYrB;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,UAAU,CAAC,CASrB"}
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../../../src/authorization/permissions/resources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAQpE,OAAO,EACL,KAAK,oBAAoB,EAE1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EACL,KAAK,qBAAqB,EAE1B,KAAK,UAAU,EAEf,KAAK,qBAAqB,EAE3B,MAAM,aAAa,CAAC;AAIrB,qBAAa,mBAAmB;IACX,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,aAAa;IAE3D,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM;IAQ9B,SAAS,CACd,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAIrC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAIxC,UAAU,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC;IAI5D,UAAU,CACf,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,UAAU,CAAC;IAIf,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;CAGnD;AAED,wBAAsB,eAAe,CACnC,QAAQ,EAAE,aAAa,EACvB,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAS3C;AAED,wBAAsB,aAAa,CACjC,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,UAAU,CAAC,CAOrB;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,aAAa,EACvB,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,UAAU,CAAC,CAQrB;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,UAAU,CAAC,CAQrB;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,UAAU,CAAC,CAOrB"}

package/dist/cjs/authorization/permissions/resources.js

@@ -41,17 +41,17 @@ class PermissionResources {
 exports.PermissionResources = PermissionResources;
 async function listPermissions(instance, pagination) {
     const url = (0, utils_js_1.addPaginationToURL)(new URL(PermissionResources.buildPath(), instance.config.host), pagination);
-    return (0, utils_js_1.parseEgressSchema)((0, collection_js_1.PaginationCollectionSchema)(schema_js_1.PermissionSchema)(await (0, operations_js_1.getItemWithAuthorization)(url, instance.authorizer)));
+    return (0, collection_js_1.PaginationCollectionSchema)(schema_js_1.PermissionSchema).parse(await (0, operations_js_1.getItemWithAuthorization)(url, instance.authorizer));
 }
 async function getPermission(instance, id) {
-    return (0, utils_js_1.parseEgressSchema)((0, schema_js_1.PermissionSchema)(await (0, operations_js_1.getItemWithAuthorization)(new URL(PermissionResources.buildPath(id), instance.config.host), instance.authorizer)));
+    return schema_js_1.PermissionSchema.parse(await (0, operations_js_1.getItemWithAuthorization)(new URL(PermissionResources.buildPath(id), instance.config.host), instance.authorizer));
 }
 async function insertPermission(instance, item) {
-    return (0, utils_js_1.parseEgressSchema)((0, schema_js_1.PermissionSchema)(await (0, operations_js_1.insertItemWithAuthorization)(new URL(PermissionResources.buildPath(), instance.config.host), instance.authorizer, (0, utils_js_1.parseEgressSchema)(schema_js_1.InsertPermissionPayloadSchema.onUndeclaredKey('delete')(item)))));
+    return schema_js_1.PermissionSchema.parse(await (0, operations_js_1.postItemWithAuthorization)(new URL(PermissionResources.buildPath(), instance.config.host), instance.authorizer, schema_js_1.InsertPermissionPayloadSchema.parse(item)));
 }
 async function updatePermission(instance, id, item) {
-    return (0, utils_js_1.parseEgressSchema)((0, schema_js_1.PermissionSchema)(await (0, operations_js_1.updateItemWithAuthorization)(new URL(PermissionResources.buildPath(id), instance.config.host), instance.authorizer, (0, utils_js_1.parseEgressSchema)(schema_js_1.UpdatePermissionPayloadSchema.onUndeclaredKey('delete')(item)))));
+    return schema_js_1.PermissionSchema.parse(await (0, operations_js_1.patchItemWithAuthorization)(new URL(PermissionResources.buildPath(id), instance.config.host), instance.authorizer, schema_js_1.UpdatePermissionPayloadSchema.parse(item)));
 }
 async function deletePermission(instance, id) {
-    return (0, utils_js_1.parseEgressSchema)((0, schema_js_1.PermissionSchema)(await (0, operations_js_1.deleteItemWithAuthorization)(new URL(PermissionResources.buildPath(id), instance.config.host), instance.authorizer)));
+    return schema_js_1.PermissionSchema.parse(await (0, operations_js_1.deleteItemWithAuthorization)(new URL(PermissionResources.buildPath(id), instance.config.host), instance.authorizer));
 }