@go-mondo/identity-sdk 0.0.2-beta.7 → 0.0.2-beta.71

package/dist/esm/activity/schema/types/unknown.test.js

@@ -0,0 +1,272 @@
+import { describe, expect, test } from 'vitest';
+import { generateActivityId } from '../utils.js';
+import { UnknownActivityPayloadSchema, UnknownActivitySchema, } from './unknown.js';
+describe('Activity Schema - Unknown', () => {
+    describe('UnknownActivitySchema', () => {
+        test('should accept complete unknown activity', () => {
+            const activity = {
+                id: generateActivityId(),
+                type: 'unknown',
+                message: 'Unrecognized activity detected',
+                performedBy: {
+                    type: 'guest',
+                    identifier: 'anonymous-user',
+                },
+                source: 'external-webhook',
+                isMutateable: true,
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                metadata: { webhook_source: 'third-party', event_type: 'custom' },
+            };
+            const result = UnknownActivitySchema.safeParse(activity);
+            // Parse succeeds for valid data
+        });
+        test('should accept unknown activity with system performer', () => {
+            const activity = {
+                id: generateActivityId(),
+                type: 'unknown',
+                message: 'System detected unexpected behavior',
+                performedBy: {
+                    type: 'system',
+                    identifier: 'anomaly-detector',
+                },
+                source: 'monitoring-service',
+                isMutateable: false,
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                metadata: { severity: 'low', category: 'anomaly' },
+            };
+            const result = UnknownActivitySchema.safeParse(activity);
+            // Parse succeeds for valid data
+        });
+        test('should accept unknown activity with integration performer', () => {
+            const activity = {
+                id: generateActivityId(),
+                type: 'unknown',
+                message: 'Received unknown event from integration',
+                performedBy: {
+                    type: 'integration',
+                    identifier: 'webhook-handler',
+                },
+                source: 'api-gateway',
+                isMutateable: true,
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                metadata: {
+                    integration: 'external-crm',
+                    event: 'unknown_event_type',
+                    raw_data: '{"type":"unknown","data":{}}',
+                },
+            };
+            const result = UnknownActivitySchema.safeParse(activity);
+            // Parse succeeds for valid data
+        });
+        test('should accept unknown activity with optional fields', () => {
+            const activity = {
+                id: generateActivityId(),
+                type: 'unknown',
+                message: 'Legacy system activity logged',
+                performedBy: {
+                    type: 'automation',
+                    identifier: 'legacy-bridge',
+                },
+                source: 'legacy-system',
+                isMutateable: true,
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                deletedAt: new Date(),
+                deactivatedAt: new Date(),
+                metadata: {
+                    legacy_id: 'old_system_123',
+                    migrated: false,
+                },
+            };
+            const result = UnknownActivitySchema.safeParse(activity);
+            // Parse succeeds for valid data
+        });
+        test('should reject unknown activity with wrong type', () => {
+            const activity = {
+                id: generateActivityId(),
+                type: 'note',
+                message: 'Wrong type activity',
+                performedBy: {
+                    type: 'guest',
+                    identifier: 'anonymous',
+                },
+                source: 'test',
+                isMutateable: true,
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                metadata: {},
+            };
+            const result = UnknownActivitySchema.safeParse(activity);
+            expect(result.success).toBe(false);
+        });
+        test('should reject unknown activity missing message', () => {
+            const activity = {
+                id: generateActivityId(),
+                type: 'unknown',
+                // missing message
+                performedBy: {
+                    type: 'guest',
+                    identifier: 'anonymous',
+                },
+                source: 'test',
+                isMutateable: true,
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                metadata: {},
+            };
+            const result = UnknownActivitySchema.safeParse(activity);
+            expect(result.success).toBe(false);
+        });
+        test('should reject unknown activity with non-string message', () => {
+            const activity = {
+                id: generateActivityId(),
+                type: 'unknown',
+                message: 123,
+                performedBy: {
+                    type: 'guest',
+                    identifier: 'anonymous',
+                },
+                source: 'test',
+                isMutateable: true,
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                metadata: {},
+            };
+            const result = UnknownActivitySchema.safeParse(activity);
+            expect(result.success).toBe(false);
+        });
+        test('should reject unknown activity missing required base fields', () => {
+            const activity = {
+                id: generateActivityId(),
+                type: 'unknown',
+                message: 'Test message',
+                // missing performedBy, source, isMutateable, dates, metadata
+            };
+            const result = UnknownActivitySchema.safeParse(activity);
+            expect(result.success).toBe(false);
+        });
+    });
+    describe('UnknownActivityPayloadSchema', () => {
+        test('should accept complete unknown activity payload', () => {
+            const payload = {
+                id: generateActivityId(),
+                type: 'unknown',
+                message: 'Unknown event from external source',
+                performedBy: {
+                    type: 'integration',
+                    identifier: 'webhook-processor',
+                },
+                source: 'external-api',
+                isMutateable: true,
+                createdAt: new Date().toISOString(),
+                updatedAt: new Date().toISOString(),
+                metadata: {
+                    source_system: 'partner-api',
+                    event_id: 'evt_123456',
+                    processed: false,
+                },
+            };
+            const result = UnknownActivityPayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.data).toEqual(payload);
+        });
+        test('should accept minimal unknown activity payload', () => {
+            const payload = {
+                id: generateActivityId(),
+                type: 'unknown',
+                message: 'Simple unknown event',
+                performedBy: {
+                    type: 'guest',
+                    identifier: 'anonymous',
+                },
+                source: 'unknown-source',
+                isMutateable: false,
+                createdAt: new Date().toISOString(),
+                updatedAt: new Date().toISOString(),
+                metadata: {},
+            };
+            const result = UnknownActivityPayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+        });
+        test('should accept payload with optional date fields', () => {
+            const payload = {
+                id: generateActivityId(),
+                type: 'unknown',
+                message: 'Archived unknown activity',
+                performedBy: {
+                    type: 'system',
+                    identifier: 'archival-service',
+                },
+                source: 'data-cleanup',
+                isMutateable: false,
+                createdAt: new Date().toISOString(),
+                updatedAt: new Date().toISOString(),
+                deletedAt: new Date().toISOString(),
+                deactivatedAt: new Date().toISOString(),
+                metadata: {
+                    archived: true,
+                    retention_policy: 'long_term',
+                },
+            };
+            const result = UnknownActivityPayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+        });
+        test('should reject payload with invalid date format', () => {
+            const payload = {
+                id: generateActivityId(),
+                type: 'unknown',
+                message: 'Test unknown activity',
+                performedBy: {
+                    type: 'guest',
+                    identifier: 'anonymous',
+                },
+                source: 'test',
+                isMutateable: true,
+                createdAt: 'invalid-date-format',
+                updatedAt: new Date().toISOString(),
+                metadata: {},
+            };
+            const result = UnknownActivityPayloadSchema.safeParse(payload);
+            expect(result.success).toBe(false);
+        });
+        test('should reject payload with wrong type', () => {
+            const payload = {
+                id: generateActivityId(),
+                type: 'operation',
+                message: 'Wrong type payload',
+                performedBy: {
+                    type: 'guest',
+                    identifier: 'anonymous',
+                },
+                source: 'test',
+                isMutateable: true,
+                createdAt: new Date().toISOString(),
+                updatedAt: new Date().toISOString(),
+                metadata: {},
+            };
+            const result = UnknownActivityPayloadSchema.safeParse(payload);
+            expect(result.success).toBe(false);
+        });
+        test('should reject payload missing message', () => {
+            const payload = {
+                id: generateActivityId(),
+                type: 'unknown',
+                // missing message
+                performedBy: {
+                    type: 'guest',
+                    identifier: 'anonymous',
+                },
+                source: 'test',
+                isMutateable: true,
+                createdAt: new Date().toISOString(),
+                updatedAt: new Date().toISOString(),
+                metadata: {},
+            };
+            const result = UnknownActivityPayloadSchema.safeParse(payload);
+            expect(result.success).toBe(false);
+        });
+    });
+});

package/dist/esm/activity/schema/utils.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=utils.test.d.ts.map

package/dist/esm/activity/schema/utils.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.test.d.ts","sourceRoot":"","sources":["../../../../src/activity/schema/utils.test.ts"],"names":[],"mappings":""}

package/dist/esm/activity/schema/utils.test.js

@@ -0,0 +1,24 @@
+import { describe, expect, test } from 'vitest';
+import { Model, generateActivityId } from './utils.js';
+describe('Activity Schema - Utils', () => {
+    describe('Model constants', () => {
+        test('should have correct UID prefix', () => {
+            expect(Model.Activity.UIDPrefix).toBe('act');
+        });
+    });
+    describe('generateActivityId', () => {
+        test('should generate ID with correct prefix', () => {
+            const id = generateActivityId();
+            expect(id).toMatch(/^act_[A-Za-z0-9]+$/);
+        });
+        test('should generate unique IDs', () => {
+            const id1 = generateActivityId();
+            const id2 = generateActivityId();
+            expect(id1).not.toBe(id2);
+        });
+        test('should generate IDs with correct length', () => {
+            const id = generateActivityId();
+            expect(id.length).toBeGreaterThan(4); // prefix + underscore + KSUID
+        });
+    });
+});

package/dist/esm/app/authorization/resources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../../../src/app/authorization/resources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAOpE,OAAO,EACL,KAAK,aAAa,EAElB,KAAK,wBAAwB,EAE9B,MAAM,aAAa,CAAC;AAIrB,qBAAa,sBAAsB;IACd,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,aAAa;IAE3D,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAQhC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAI3C,UAAU,CACf,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,aAAa,CAAC;CAG1B;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,aAAa,EACvB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,aAAa,CAAC,CASxB;AAED,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,aAAa,EACvB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,aAAa,CAAC,CAYxB"}
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../../../src/app/authorization/resources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAMpE,OAAO,EACL,KAAK,aAAa,EAElB,KAAK,wBAAwB,EAE9B,MAAM,aAAa,CAAC;AAIrB,qBAAa,sBAAsB;IACd,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,aAAa;IAE3D,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAIhC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAI3C,UAAU,CACf,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,aAAa,CAAC;CAG1B;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,aAAa,EACvB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,aAAa,CAAC,CAOxB;AAED,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,aAAa,EACvB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,aAAa,CAAC,CAQxB"}

package/dist/esm/app/authorization/resources.js

@@ -1,5 +1,4 @@
-import { getItemWithAuthorization, insertItemWithAuthorization, } from '../../common/resources/operations.js';
-import { parseEgressSchema } from '../../common/resources/utils.js';
+import { getItemWithAuthorization, putItemWithAuthorization, } from '../../common/resources/operations.js';
 import { PATH } from '../resources.js';
 import { AuthorizationSchema, UpsertAuthorizationPayloadSchema, } from './schema.js';
 const RESOURCE = 'authorization';
@@ -9,9 +8,6 @@ export class AuthorizationResources {
         this.instance = instance;
     }
     static buildPath(appId) {
-        if (appId?.startsWith(PATH)) {
-            return appId;
-        }
         return [PATH, appId, RESOURCE].filter(Boolean).join('/');
     }
     getItem(id) {
@@ -22,8 +18,8 @@ export class AuthorizationResources {
     }
 }
 export async function getAuthorization(instance, appId) {
-    return parseEgressSchema(AuthorizationSchema(await getItemWithAuthorization(new URL(AuthorizationResources.buildPath(appId), instance.config.host), instance.authorizer)));
+    return AuthorizationSchema.parse(await getItemWithAuthorization(new URL(AuthorizationResources.buildPath(appId), instance.config.host), instance.authorizer));
 }
 export async function upsertAuthorization(instance, appId, item) {
-    return parseEgressSchema(AuthorizationSchema(await insertItemWithAuthorization(new URL(AuthorizationResources.buildPath(appId), instance.config.host), instance.authorizer, parseEgressSchema(UpsertAuthorizationPayloadSchema.onUndeclaredKey('delete')(item)))));
+    return AuthorizationSchema.parse(await putItemWithAuthorization(new URL(AuthorizationResources.buildPath(appId), instance.config.host), instance.authorizer, UpsertAuthorizationPayloadSchema.parse(item)));
 }

package/dist/esm/app/authorization/schema.d.ts

@@ -1,54 +1,101 @@
+import * as z from 'zod/v4';
 import { type AnyGrantType } from '../../oauth/common/schema.js';
-export declare const AuthorizationSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    refreshTokenDuration: import("arktype/internal/attributes.ts").Default<number, number>;
-    accessTokenDuration: import("arktype/internal/attributes.ts").Default<number, number>;
-    accessTokenSignatureAlgorithm: import("arktype/internal/attributes.ts").Default<string, string>;
-    loginUri?: string | undefined;
-    callbackUrls?: ((In: Set<string> | string[] | undefined) => import("arktype").Out<string[] | undefined>) | undefined;
-    availableAudiences?: ((In: Set<string> | string[] | undefined) => import("arktype").Out<string[] | undefined>) | undefined;
-    availableGrants?: ((In: Set<AnyGrantType> | ("client_credentials" | "authorization_code" | "implicit" | "refresh_token")[] | undefined) => import("arktype").Out<Set<AnyGrantType>>) | undefined;
-    defaultAudience?: string | undefined;
-    updatedAt?: Date | ((In: string) => import("arktype/internal/attributes.ts").To<Date>) | undefined;
-    deletedAt?: Date | ((In: string) => import("arktype/internal/attributes.ts").To<Date>) | undefined;
-    deactivatedAt?: Date | ((In: string) => import("arktype/internal/attributes.ts").To<Date>) | undefined;
-    metadata: (In: import("arktype/internal/attributes.ts").Default<unknown, Map<string, string | number | boolean>>) => import("arktype").Out<Map<string, string | number | boolean> | Map<string, any>>;
-}, {}>;
-export type AuthorizationProperties = typeof AuthorizationSchema.inferIn;
-export type Authorization = typeof AuthorizationSchema.inferOut;
-export declare const AuthorizationPayloadSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    refreshTokenDuration: import("arktype/internal/attributes.ts").Default<number, number>;
-    accessTokenDuration: import("arktype/internal/attributes.ts").Default<number, number>;
-    accessTokenSignatureAlgorithm: import("arktype/internal/attributes.ts").Default<string, string>;
-    loginUri?: string | undefined;
-    callbackUrls?: ((In: Set<string> | string[] | undefined) => import("arktype").Out<string[] | undefined>) | undefined;
-    availableAudiences?: ((In: Set<string> | string[] | undefined) => import("arktype").Out<string[] | undefined>) | undefined;
-    availableGrants?: ((In: Set<AnyGrantType> | ("client_credentials" | "authorization_code" | "implicit" | "refresh_token")[] | undefined) => import("arktype").Out<("client_credentials" | "authorization_code" | "implicit" | "refresh_token")[] | undefined>) | undefined;
-    defaultAudience?: string | undefined;
-    updatedAt?: ((In: string | Date | undefined) => import("arktype").Out<string | undefined>) | undefined;
-    deletedAt?: ((In: string | Date | undefined) => import("arktype").Out<string | undefined>) | undefined;
-    deactivatedAt?: ((In: string | Date | undefined) => import("arktype").Out<string | undefined>) | undefined;
-    metadata?: ((In: {
-        [x: string]: string | number | boolean;
-    } | Map<string, string | number | boolean> | null | undefined) => import("arktype").Out<{
-        [x: string]: string | number | boolean;
-    } | undefined>) | undefined;
-}, {}>;
-export type AuthorizationPayload = typeof AuthorizationPayloadSchema.inferOut;
-export declare const UpsertAuthorizationPayloadSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    refreshTokenDuration: import("arktype/internal/attributes.ts").Default<number, number>;
-    accessTokenDuration: import("arktype/internal/attributes.ts").Default<number, number>;
-    accessTokenSignatureAlgorithm: import("arktype/internal/attributes.ts").Default<string, string>;
-    loginUri?: string | undefined;
-    callbackUrls?: ((In: Set<string> | string[] | undefined) => import("arktype").Out<string[] | undefined>) | undefined;
-    availableAudiences?: ((In: Set<string> | string[] | undefined) => import("arktype").Out<string[] | undefined>) | undefined;
-    availableGrants?: ((In: Set<AnyGrantType> | ("client_credentials" | "authorization_code" | "implicit" | "refresh_token")[] | undefined) => import("arktype").Out<("client_credentials" | "authorization_code" | "implicit" | "refresh_token")[] | undefined>) | undefined;
-    defaultAudience?: string | undefined;
-    metadata?: ((In: {
-        [x: string]: string | number | boolean;
-    } | Map<string, string | number | boolean> | null | undefined) => import("arktype").Out<{
-        [x: string]: string | number | boolean;
-    } | null>) | undefined;
-}, {}>;
-export type UpsertAuthorizationInput = typeof UpsertAuthorizationPayloadSchema.inferIn;
-export type UpsertAuthorizationPayload = typeof UpsertAuthorizationPayloadSchema.inferOut;
+export declare const AuthorizationSchema: z.ZodObject<{
+    metadata: z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Map<string, string | number | boolean>, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>;
+    deactivatedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    deletedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    loginUri: z.ZodOptional<z.ZodUnion<readonly [z.ZodUnion<[z.ZodPipe<z.ZodURL, z.ZodTransform<URL, string>>, z.ZodCustom<URL, URL>]>, z.ZodUndefined]>>;
+    callbackUrls: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodPipe<z.ZodArray<z.ZodUnion<[z.ZodPipe<z.ZodURL, z.ZodTransform<URL, string>>, z.ZodCustom<URL, URL>]>>, z.ZodTransform<URL[], URL[]>>, z.ZodCustom<Set<URL>, Set<URL>>]>, z.ZodTransform<Set<URL> | undefined, Set<URL> | URL[] | undefined>>>;
+    availableAudiences: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodPipe<z.ZodArray<z.ZodString>, z.ZodTransform<string[], string[]>>, z.ZodSet<z.ZodString>]>, z.ZodTransform<Set<string> | undefined, Set<string> | string[] | undefined>>>;
+    availableGrants: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodArray<z.ZodEnum<{
+        client_credentials: "client_credentials";
+        authorization_code: "authorization_code";
+        implicit: "implicit";
+        refresh_token: "refresh_token";
+    }>>, z.ZodCustom<Set<AnyGrantType>, Set<AnyGrantType>>]>, z.ZodTransform<Set<AnyGrantType> | undefined, Set<AnyGrantType> | ("client_credentials" | "authorization_code" | "implicit" | "refresh_token")[] | undefined>>>;
+    defaultAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodUndefined]>>;
+    updatedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    refreshTokenDuration: z.ZodOptional<z.ZodNumber>;
+    accessTokenDuration: z.ZodOptional<z.ZodNumber>;
+    accessTokenSignatureAlgorithm: z.ZodOptional<z.ZodEnum<{
+        HS256: "HS256";
+        HS384: "HS384";
+        HS512: "HS512";
+        RS256: "RS256";
+        RS384: "RS384";
+        RS512: "RS512";
+        ES256: "ES256";
+        ES384: "ES384";
+        ES512: "ES512";
+        PS256: "PS256";
+        PS384: "PS384";
+        PS512: "PS512";
+    }>>;
+}, z.core.$strip>;
+export type AuthorizationProperties = z.input<typeof AuthorizationSchema>;
+export type Authorization = z.output<typeof AuthorizationSchema>;
+export declare const AuthorizationPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    deactivatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    deletedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    loginUri: z.ZodOptional<z.ZodUnion<readonly [z.ZodUnion<[z.ZodPipe<z.ZodCustom<URL, URL>, z.ZodTransform<string, URL>>, z.ZodURL]>, z.ZodUndefined]>>;
+    callbackUrls: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodPipe<z.ZodArray<z.ZodUnion<[z.ZodPipe<z.ZodURL, z.ZodTransform<URL, string>>, z.ZodCustom<URL, URL>]>>, z.ZodTransform<URL[], URL[]>>, z.ZodCustom<Set<URL>, Set<URL>>]>, z.ZodTransform<string[] | undefined, Set<URL> | URL[] | undefined>>>;
+    availableAudiences: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodPipe<z.ZodArray<z.ZodString>, z.ZodTransform<string[], string[]>>, z.ZodSet<z.ZodString>]>, z.ZodTransform<string[] | undefined, Set<string> | string[] | undefined>>>;
+    availableGrants: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodArray<z.ZodEnum<{
+        client_credentials: "client_credentials";
+        authorization_code: "authorization_code";
+        implicit: "implicit";
+        refresh_token: "refresh_token";
+    }>>, z.ZodCustom<Set<AnyGrantType>, Set<AnyGrantType>>]>, z.ZodTransform<("client_credentials" | "authorization_code" | "implicit" | "refresh_token")[] | undefined, Set<AnyGrantType> | ("client_credentials" | "authorization_code" | "implicit" | "refresh_token")[] | undefined>>>;
+    defaultAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodUndefined]>>;
+    updatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    refreshTokenDuration: z.ZodOptional<z.ZodNumber>;
+    accessTokenDuration: z.ZodOptional<z.ZodNumber>;
+    accessTokenSignatureAlgorithm: z.ZodOptional<z.ZodEnum<{
+        HS256: "HS256";
+        HS384: "HS384";
+        HS512: "HS512";
+        RS256: "RS256";
+        RS384: "RS384";
+        RS512: "RS512";
+        ES256: "ES256";
+        ES384: "ES384";
+        ES512: "ES512";
+        PS256: "PS256";
+        PS384: "PS384";
+        PS512: "PS512";
+    }>>;
+}, z.core.$strip>;
+export type AuthorizationPayload = z.output<typeof AuthorizationPayloadSchema>;
+export declare const UpsertAuthorizationPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | null | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    loginUri: z.ZodOptional<z.ZodUnion<readonly [z.ZodUnion<[z.ZodPipe<z.ZodCustom<URL, URL>, z.ZodTransform<string, URL>>, z.ZodURL]>, z.ZodUndefined]>>;
+    callbackUrls: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodPipe<z.ZodArray<z.ZodUnion<[z.ZodPipe<z.ZodURL, z.ZodTransform<URL, string>>, z.ZodCustom<URL, URL>]>>, z.ZodTransform<URL[], URL[]>>, z.ZodCustom<Set<URL>, Set<URL>>]>, z.ZodTransform<string[] | undefined, Set<URL> | URL[] | undefined>>>;
+    availableAudiences: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodPipe<z.ZodArray<z.ZodString>, z.ZodTransform<string[], string[]>>, z.ZodSet<z.ZodString>]>, z.ZodTransform<string[] | undefined, Set<string> | string[] | undefined>>>;
+    availableGrants: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodArray<z.ZodEnum<{
+        client_credentials: "client_credentials";
+        authorization_code: "authorization_code";
+        implicit: "implicit";
+        refresh_token: "refresh_token";
+    }>>, z.ZodCustom<Set<AnyGrantType>, Set<AnyGrantType>>]>, z.ZodTransform<("client_credentials" | "authorization_code" | "implicit" | "refresh_token")[] | undefined, Set<AnyGrantType> | ("client_credentials" | "authorization_code" | "implicit" | "refresh_token")[] | undefined>>>;
+    defaultAudience: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodUndefined]>>;
+    refreshTokenDuration: z.ZodOptional<z.ZodNumber>;
+    accessTokenDuration: z.ZodOptional<z.ZodNumber>;
+    accessTokenSignatureAlgorithm: z.ZodOptional<z.ZodEnum<{
+        HS256: "HS256";
+        HS384: "HS384";
+        HS512: "HS512";
+        RS256: "RS256";
+        RS384: "RS384";
+        RS512: "RS512";
+        ES256: "ES256";
+        ES384: "ES384";
+        ES512: "ES512";
+        PS256: "PS256";
+        PS384: "PS384";
+        PS512: "PS512";
+    }>>;
+}, z.core.$strip>;
+export type UpsertAuthorizationInput = z.input<typeof UpsertAuthorizationPayloadSchema>;
+export type UpsertAuthorizationPayload = z.output<typeof UpsertAuthorizationPayloadSchema>;
 //# sourceMappingURL=schema.d.ts.map

package/dist/esm/app/authorization/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/app/authorization/schema.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,KAAK,YAAY,EAAa,MAAM,8BAA8B,CAAC;AAyC5E,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;MAcC,CAAC;AAClC,MAAM,MAAM,uBAAuB,GAAG,OAAO,mBAAmB,CAAC,OAAO,CAAC;AACzE,MAAM,MAAM,aAAa,GAAG,OAAO,mBAAmB,CAAC,QAAQ,CAAC;AAEhE,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;MAOF,CAAC;AACtC,MAAM,MAAM,oBAAoB,GAAG,OAAO,0BAA0B,CAAC,QAAQ,CAAC;AAE9E,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;MAIF,CAAC;AAC5C,MAAM,MAAM,wBAAwB,GAClC,OAAO,gCAAgC,CAAC,OAAO,CAAC;AAClD,MAAM,MAAM,0BAA0B,GACpC,OAAO,gCAAgC,CAAC,QAAQ,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/app/authorization/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAyB5B,OAAO,EAAE,KAAK,YAAY,EAAa,MAAM,8BAA8B,CAAC;AA4B5E,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAW9B,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAC1E,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEjE,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAWrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE/E,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAQ3C,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,gCAAgC,CACxC,CAAC;AACF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAC/C,OAAO,gCAAgC,CACxC,CAAC"}

package/dist/esm/app/authorization/schema.js

@@ -1,57 +1,60 @@
-import { type } from 'arktype';
-import { OptionalDatePayloadSchema, OptionalDateSchema, } from '../../common/schema/dates.js';
-import { MetadataMapPropertySchema, MetadataPayloadPropertySchema, UpsertMetadataPayloadPropertySchema, } from '../../common/schema/metadata.js';
+import * as z from 'zod/v4';
+import { DeactivatedAtPropertyPayloadSchema, DeactivatedAtPropertySchema, DeletedAtPropertyPayloadSchema, DeletedAtPropertySchema, OptionalDatePayloadSchema, OptionalDateSchema, } from '../../common/schema/dates.js';
+import { AlgorithmSchema } from '../../common/schema/jwt.js';
+import { MetadataMapPropertySchema, MetadataPayloadPropertySchema, UpsertMetadataPropertyPayloadSchema, } from '../../common/schema/metadata.js';
+import { UniqueStringArraySchema, UniqueStringSetSchema, } from '../../common/schema/sets.js';
+import { UniqueWebUrlObjectSetSchema, UniqueWebUrlStringArraySchema, WebUrlObjectSchema, WebUrlStringSchema, } from '../../common/schema/url.js';
 import { GrantType } from '../../oauth/common/schema.js';
-import { AuthorizationPayloadSchema as WorkspaceAuthorizationPayloadSchema } from '../../workspace/authorization/schema.js';
-const StringSetSchema = type.instanceOf((Set));
-const UrlStringSchema = type('string.url[]').pipe((v) => v.filter((i) => !!i));
-const StringSchema = type('string[]').pipe((v) => v.filter((i) => !!i));
-const CallbackUrlsSchema = type('undefined')
-    .or(UrlStringSchema)
-    .or(StringSetSchema)
-    .pipe((v) => (v instanceof Set ? Array.from(v.values()) : v));
-const AvailableAudiencesSchema = type('undefined')
-    .or(StringSchema)
-    .or(StringSetSchema)
-    .pipe((v) => (v instanceof Set ? Array.from(v.values()) : v));
-const GrantSetSchema = type.instanceOf((Set));
-const GrantArraySchema = type
-    .enumerated(GrantType.AUTHORIZATION_CODE, GrantType.CLIENT_CREDENTIALS, GrantType.IMPLICIT, GrantType.REFRESH_TOKEN)
-    .array();
-const AvailableGrantsSchema = type.undefined
-    .or(GrantArraySchema)
-    .or(GrantSetSchema)
-    .pipe((v) => (v instanceof Set ? Array.from(v.values()) : v));
-const BaseAuthorization = WorkspaceAuthorizationPayloadSchema.pick('refreshTokenDuration', 'accessTokenDuration', 'accessTokenSignatureAlgorithm').and({
-    loginUri: type('string.url | undefined').optional(),
-    callbackUrls: CallbackUrlsSchema.optional(),
-    availableAudiences: AvailableAudiencesSchema.optional(),
+const AudienceArraySchema = UniqueStringArraySchema;
+const AudienceSetSchema = UniqueStringSetSchema;
+const GrantSetSchema = z.instanceof((Set));
+const GrantArraySchema = z.array(z.enum([
+    GrantType.AUTHORIZATION_CODE,
+    GrantType.CLIENT_CREDENTIALS,
+    GrantType.IMPLICIT,
+    GrantType.REFRESH_TOKEN,
+]));
+const AvailableGrantSetSchema = z
+    .union([z.undefined(), GrantArraySchema, GrantSetSchema])
+    .pipe(z.transform((v) => (!v || v instanceof Set ? v : new Set(v))));
+const AvailableGrantArraySchema = z
+    .union([z.undefined(), GrantArraySchema, GrantSetSchema])
+    .pipe(z.transform((v) => (v instanceof Set ? Array.from(v.values()) : v)));
+const BaseAuthorization = z.object({
+    refreshTokenDuration: z.number().optional(),
+    accessTokenDuration: z.number().optional(),
+    accessTokenSignatureAlgorithm: AlgorithmSchema.optional(),
+});
+export const AuthorizationSchema = z.object({
+    ...BaseAuthorization.shape,
+    loginUri: z.union([WebUrlObjectSchema, z.undefined()]).optional(),
+    callbackUrls: UniqueWebUrlObjectSetSchema.optional(),
+    availableAudiences: AudienceSetSchema.optional(),
+    availableGrants: AvailableGrantSetSchema.optional(),
+    defaultAudience: z.union([z.string(), z.undefined()]).optional(),
+    updatedAt: OptionalDateSchema,
+    ...DeletedAtPropertySchema.shape,
+    ...DeactivatedAtPropertySchema.shape,
+    ...MetadataMapPropertySchema.shape,
+});
+export const AuthorizationPayloadSchema = z.object({
+    ...BaseAuthorization.shape,
+    loginUri: z.union([WebUrlStringSchema, z.undefined()]).optional(),
+    callbackUrls: UniqueWebUrlStringArraySchema.optional(),
+    availableAudiences: AudienceArraySchema.optional(),
+    availableGrants: AvailableGrantArraySchema.optional(),
+    defaultAudience: z.union([z.string(), z.undefined()]).optional(),
+    updatedAt: OptionalDatePayloadSchema,
+    ...DeletedAtPropertyPayloadSchema.shape,
+    ...DeactivatedAtPropertyPayloadSchema.shape,
+    ...MetadataPayloadPropertySchema.shape,
+});
+export const UpsertAuthorizationPayloadSchema = z.object({
+    ...BaseAuthorization.shape,
+    loginUri: z.union([WebUrlStringSchema, z.undefined()]).optional(),
+    callbackUrls: UniqueWebUrlStringArraySchema.optional(),
+    availableAudiences: AudienceArraySchema.optional(),
+    availableGrants: AvailableGrantArraySchema.optional(),
+    defaultAudience: z.union([z.string(), z.undefined()]).optional(),
+    ...UpsertMetadataPropertyPayloadSchema.shape,
 });
-export const AuthorizationSchema = BaseAuthorization.and({
-    availableGrants: type.undefined
-        .or(GrantArraySchema)
-        .or(GrantSetSchema)
-        .pipe((v) => (v instanceof Set ? v : new Set(v)))
-        .optional(),
-    //   availableAudiences: type('string[] | undefined')
-    //     .or(StringSetSchema)
-    //     .pipe((v) => (v instanceof Set ? v : new Set(v)))
-    //     .optional(),
-    defaultAudience: type('string | undefined').optional(),
-    'updatedAt?': OptionalDateSchema,
-    'deletedAt?': OptionalDateSchema,
-    'deactivatedAt?': OptionalDateSchema,
-}).and(MetadataMapPropertySchema);
-export const AuthorizationPayloadSchema = BaseAuthorization.and({
-    availableGrants: AvailableGrantsSchema.optional(),
-    //   availableAudiences: AvailableAudiencesSchema.optional(),
-    defaultAudience: type('string | undefined').optional(),
-    'updatedAt?': OptionalDatePayloadSchema,
-    'deletedAt?': OptionalDatePayloadSchema,
-    'deactivatedAt?': OptionalDatePayloadSchema,
-}).and(MetadataPayloadPropertySchema);
-export const UpsertAuthorizationPayloadSchema = BaseAuthorization.and({
-    availableGrants: AvailableGrantsSchema.optional(),
-    //   availableAudiences: type('string').array().optional(),
-    defaultAudience: type('string | undefined').optional(),
-}).and(UpsertMetadataPayloadPropertySchema);

package/dist/esm/app/authorization/schema.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=schema.test.d.ts.map

package/dist/esm/app/authorization/schema.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.test.d.ts","sourceRoot":"","sources":["../../../../src/app/authorization/schema.test.ts"],"names":[],"mappings":""}