@go-mondo/identity-sdk 0.0.2-beta.7 → 0.0.2-beta.71

package/dist/esm/customer/users/utils.d.ts

@@ -1,6 +1,7 @@
+import type { z } from 'zod';
 import type { EmailOrPhonePropertiesSchema, UpdateUserNamePropertiesSchema } from './schema.js';
-type UserName = typeof UpdateUserNamePropertiesSchema.inferIn;
-type UserEmailOrPhone = typeof EmailOrPhonePropertiesSchema.inferIn;
+type UserName = z.input<typeof UpdateUserNamePropertiesSchema>;
+type UserEmailOrPhone = z.input<typeof EmailOrPhonePropertiesSchema>;
 type User = UserName & UserEmailOrPhone;
 export declare function getInitials(name: string | undefined): string | undefined;
 export declare function buildName(item?: Pick<UserName, 'givenName' | 'familyName'>): string;

package/dist/esm/customer/users/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../src/customer/users/utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,4BAA4B,EAC5B,8BAA8B,EAC/B,MAAM,aAAa,CAAC;AAErB,KAAK,QAAQ,GAAG,OAAO,8BAA8B,CAAC,OAAO,CAAC;AAC9D,KAAK,gBAAgB,GAAG,OAAO,4BAA4B,CAAC,OAAO,CAAC;AAEpE,KAAK,IAAI,GAAG,QAAQ,GAAG,gBAAgB,CAAC;AAExC,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAUxE;AAED,wBAAgB,SAAS,CACvB,IAAI,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,GAAG,YAAY,CAAC,GAChD,MAAM,CAER;AAED,wBAAgB,eAAe,CAC7B,IAAI,CAAC,EAAE,IAAI,CACT,QAAQ,EACN,WAAW,GACX,YAAY,GACZ,YAAY,GACZ,iBAAiB,GACjB,iBAAiB,CACpB,EACD,iBAAiB,UAAQ,GACxB,MAAM,CAUR;AAED,wBAAgB,cAAc,CAC5B,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,GAAG,YAAY,GAAG,OAAO,CAAC,GACtD,MAAM,CAER"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../src/customer/users/utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE7B,OAAO,KAAK,EACV,4BAA4B,EAC5B,8BAA8B,EAC/B,MAAM,aAAa,CAAC;AAErB,KAAK,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAC/D,KAAK,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAErE,KAAK,IAAI,GAAG,QAAQ,GAAG,gBAAgB,CAAC;AAExC,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAUxE;AAED,wBAAgB,SAAS,CACvB,IAAI,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,GAAG,YAAY,CAAC,GAChD,MAAM,CAER;AAED,wBAAgB,eAAe,CAC7B,IAAI,CAAC,EAAE,IAAI,CACT,QAAQ,EACN,WAAW,GACX,YAAY,GACZ,YAAY,GACZ,iBAAiB,GACjB,iBAAiB,CACpB,EACD,iBAAiB,UAAQ,GACxB,MAAM,CAUR;AAED,wBAAgB,cAAc,CAC5B,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,GAAG,YAAY,GAAG,OAAO,CAAC,GACtD,MAAM,CAER"}

package/dist/esm/customer/users/utils.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=utils.test.d.ts.map

package/dist/esm/customer/users/utils.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.test.d.ts","sourceRoot":"","sources":["../../../../src/customer/users/utils.test.ts"],"names":[],"mappings":""}

package/dist/esm/customer/users/utils.test.js

@@ -0,0 +1,143 @@
+import { describe, expect, test } from 'vitest';
+import { buildName, buildProperName, buildReference, getInitials, } from './utils.js';
+describe('Customer Users - Utils', () => {
+    describe('getInitials', () => {
+        test('should return initials for single name', () => {
+            expect(getInitials('John')).toBe('J');
+        });
+        test('should return initials for full name', () => {
+            expect(getInitials('John Doe')).toBe('JD');
+        });
+        test('should return initials for multiple names', () => {
+            expect(getInitials('John Michael Doe')).toBe('JMD');
+        });
+        test('should handle names with extra spaces', () => {
+            expect(getInitials('John  Doe')).toBe('JD');
+            expect(getInitials(' John Doe ')).toBe('JD');
+        });
+        test('should return undefined for empty string', () => {
+            expect(getInitials('')).toBeUndefined();
+        });
+        test('should return undefined for undefined input', () => {
+            expect(getInitials(undefined)).toBeUndefined();
+        });
+        test('should handle single character names', () => {
+            expect(getInitials('A B C')).toBe('ABC');
+        });
+        test('should filter out empty parts', () => {
+            expect(getInitials('John  Doe')).toBe('JD');
+        });
+    });
+    describe('buildName', () => {
+        test('should build name from givenName and familyName', () => {
+            const item = { givenName: 'John', familyName: 'Doe' };
+            expect(buildName(item)).toBe('John Doe');
+        });
+        test('should handle only givenName', () => {
+            const item = { givenName: 'John' };
+            expect(buildName(item)).toBe('John');
+        });
+        test('should handle only familyName', () => {
+            const item = { familyName: 'Doe' };
+            expect(buildName(item)).toBe('Doe');
+        });
+        test('should return empty string for empty object', () => {
+            expect(buildName({})).toBe('');
+        });
+        test('should return empty string for undefined', () => {
+            expect(buildName(undefined)).toBe('');
+        });
+        test('should filter out empty strings', () => {
+            const item = { givenName: 'John', familyName: '' };
+            expect(buildName(item)).toBe('John');
+        });
+    });
+    describe('buildProperName', () => {
+        test('should build proper name with all components', () => {
+            const item = {
+                honorificPrefix: 'Dr.',
+                givenName: 'John',
+                middleName: 'Michael',
+                familyName: 'Doe',
+                honorificSuffix: 'Jr.',
+            };
+            expect(buildProperName(item, true)).toBe('Dr. John Michael Doe Jr.');
+        });
+        test('should exclude middle name by default', () => {
+            const item = {
+                honorificPrefix: 'Dr.',
+                givenName: 'John',
+                middleName: 'Michael',
+                familyName: 'Doe',
+                honorificSuffix: 'Jr.',
+            };
+            expect(buildProperName(item)).toBe('Dr. John Doe Jr.');
+        });
+        test('should handle missing components', () => {
+            const item = {
+                givenName: 'John',
+                familyName: 'Doe',
+            };
+            expect(buildProperName(item)).toBe('John Doe');
+        });
+        test('should handle only prefix and suffix', () => {
+            const item = {
+                honorificPrefix: 'Dr.',
+                honorificSuffix: 'PhD',
+            };
+            expect(buildProperName(item)).toBe('Dr. PhD');
+        });
+        test('should return empty string for empty object', () => {
+            expect(buildProperName({})).toBe('');
+        });
+        test('should return empty string for undefined', () => {
+            expect(buildProperName(undefined)).toBe('');
+        });
+        test('should include middle name when explicitly requested', () => {
+            const item = {
+                givenName: 'John',
+                middleName: 'Michael',
+                familyName: 'Doe',
+            };
+            expect(buildProperName(item, true)).toBe('John Michael Doe');
+            expect(buildProperName(item, false)).toBe('John Doe');
+        });
+    });
+    describe('buildReference', () => {
+        test('should prioritize name over email', () => {
+            const item = {
+                givenName: 'John',
+                familyName: 'Doe',
+                email: 'john@example.com',
+            };
+            expect(buildReference(item)).toBe('John Doe');
+        });
+        test('should fallback to email when no name', () => {
+            const item = {
+                email: 'john@example.com',
+            };
+            expect(buildReference(item)).toBe('john@example.com');
+        });
+        test('should return empty string when no name or email', () => {
+            const item = {};
+            expect(buildReference(item)).toBe('');
+        });
+        test('should return empty string for undefined', () => {
+            expect(buildReference(undefined)).toBe('');
+        });
+        test('should use partial name if available', () => {
+            const item = {
+                givenName: 'John',
+                email: 'john@example.com',
+            };
+            expect(buildReference(item)).toBe('John');
+        });
+        test('should prefer family name over email if no given name', () => {
+            const item = {
+                familyName: 'Doe',
+                email: 'john@example.com',
+            };
+            expect(buildReference(item)).toBe('Doe');
+        });
+    });
+});

package/dist/esm/identity/schema.d.ts

@@ -1,7 +1,11 @@
+import * as z from 'zod/v4';
 export declare const IdentityIdentifier: {
     readonly EMAIL: "email";
     readonly PHONE_NUMBER: "phoneNumber";
 };
 export type AnyIdentityIdentifier = (typeof IdentityIdentifier)[keyof typeof IdentityIdentifier];
-export declare const IdentityIdentifierSchema: import("arktype/internal/methods/string.ts").StringType<"email" | "phoneNumber", {}>;
+export declare const IdentityIdentifierSchema: z.ZodEnum<{
+    email: "email";
+    phoneNumber: "phoneNumber";
+}>;
 //# sourceMappingURL=schema.d.ts.map

package/dist/esm/identity/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/identity/schema.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,kBAAkB;;;CAGrB,CAAC;AAEX,MAAM,MAAM,qBAAqB,GAC/B,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAC;AAE/D,eAAO,MAAM,wBAAwB,sFAGpC,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/identity/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,eAAO,MAAM,kBAAkB;;;CAGrB,CAAC;AAEX,MAAM,MAAM,qBAAqB,GAC/B,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAC;AAE/D,eAAO,MAAM,wBAAwB;;;EAG1B,CAAC"}

package/dist/esm/identity/schema.js

@@ -1,6 +1,9 @@
-import { type } from 'arktype';
+import * as z from 'zod/v4';
 export const IdentityIdentifier = {
     EMAIL: 'email',
     PHONE_NUMBER: 'phoneNumber',
 };
-export const IdentityIdentifierSchema = type.enumerated(IdentityIdentifier.EMAIL, IdentityIdentifier.PHONE_NUMBER);
+export const IdentityIdentifierSchema = z.enum([
+    IdentityIdentifier.EMAIL,
+    IdentityIdentifier.PHONE_NUMBER,
+]);

package/dist/esm/identity/schema.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=schema.test.d.ts.map

package/dist/esm/identity/schema.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.test.d.ts","sourceRoot":"","sources":["../../../src/identity/schema.test.ts"],"names":[],"mappings":""}

package/dist/esm/identity/schema.test.js

@@ -0,0 +1,43 @@
+import { describe, expect, test } from 'vitest';
+import { IdentityIdentifier, IdentityIdentifierSchema } from './schema.js';
+describe('Identity - Schema', () => {
+    describe('IdentityIdentifier constants', () => {
+        test('should have correct identifier values', () => {
+            expect(IdentityIdentifier.EMAIL).toBe('email');
+            expect(IdentityIdentifier.PHONE_NUMBER).toBe('phoneNumber');
+        });
+    });
+    describe('IdentityIdentifierSchema', () => {
+        test('should accept valid email identifier', () => {
+            const result = IdentityIdentifierSchema.safeParse('email');
+            // Parse succeeds for valid data
+            expect(result.success).toBe(true);
+            if (result.success) {
+                expect(result.data).toBe('email');
+            }
+        });
+        test('should accept valid phone number identifier', () => {
+            const result = IdentityIdentifierSchema.safeParse('phoneNumber');
+            // Parse succeeds for valid data
+            expect(result.success).toBe(true);
+            if (result.success) {
+                expect(result.data).toBe('phoneNumber');
+            }
+        });
+        test('should reject invalid identifiers', () => {
+            expect(IdentityIdentifierSchema.safeParse('invalid').success).toBe(false);
+            expect(IdentityIdentifierSchema.safeParse('username').success).toBe(false);
+            expect(IdentityIdentifierSchema.safeParse('sms').success).toBe(false);
+        });
+        test('should reject non-string values', () => {
+            expect(IdentityIdentifierSchema.safeParse(123).success).toBe(false);
+            expect(IdentityIdentifierSchema.safeParse(null).success).toBe(false);
+            expect(IdentityIdentifierSchema.safeParse(undefined).success).toBe(false);
+        });
+        test('should be case sensitive', () => {
+            expect(IdentityIdentifierSchema.safeParse('EMAIL').success).toBe(false);
+            expect(IdentityIdentifierSchema.safeParse('PHONE_NUMBER').success).toBe(false);
+            expect(IdentityIdentifierSchema.safeParse('phonenumber').success).toBe(false);
+        });
+    });
+});

package/dist/esm/oauth/authorize/schema/grants/authorization-code.d.ts

@@ -1,29 +1,35 @@
-export declare const AuthorizationCodeSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    response_type: "code";
-    client_id: string;
-    redirect_uri?: string | undefined;
-    scope?: string | undefined;
-    state?: string | undefined;
-    nonce?: string | undefined;
-    display?: "page" | "popup" | "touch" | "wap" | undefined;
-    prompt?: "none" | "login" | "consent" | "select_account" | undefined;
-    max_age?: number | undefined;
-    code_challenge_method?: "S256" | "plain" | undefined;
-    code_challenge?: string | undefined;
-    audience?: string | undefined;
-} | {
-    response_type: "code";
-    client_id: string;
-    redirect_uri?: string | undefined;
-    scope?: string | undefined;
-    state?: string | undefined;
-    nonce?: string | undefined;
-    display?: "page" | "popup" | "touch" | "wap" | undefined;
-    prompt?: "none" | "login" | "consent" | "select_account" | undefined;
-    max_age?: number | undefined;
-    code_challenge_method: "S256" | "plain";
-    code_challenge: string;
-    audience?: string | undefined;
-}, {}>;
-export type AuthorizationCodePayload = typeof AuthorizationCodeSchema.inferOut;
+import * as z from 'zod/v4';
+export declare const CodeChallengeSchema: z.ZodString;
+export declare const AuthorizationCodeGrantAuthorizationSchema: z.ZodObject<{
+    audience: z.ZodOptional<z.ZodString>;
+    device: z.ZodOptional<z.ZodString>;
+    code_challenge_method: z.ZodOptional<z.ZodEnum<{
+        S256: "S256";
+        plain: "plain";
+    }>>;
+    code_challenge: z.ZodOptional<z.ZodString>;
+    nonce: z.ZodOptional<z.ZodString>;
+    display: z.ZodOptional<z.ZodEnum<{
+        page: "page";
+        popup: "popup";
+        touch: "touch";
+        wap: "wap";
+    }>>;
+    prompt: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        login: "login";
+        consent: "consent";
+        select_account: "select_account";
+    }>>;
+    max_age: z.ZodOptional<z.ZodNumber>;
+    response_type: z.ZodEnum<{
+        code: "code";
+    }>;
+    client_id: z.ZodString;
+    redirect_uri: z.ZodOptional<z.ZodURL>;
+    scope: z.ZodOptional<z.ZodString>;
+    state: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type AuthorizationCodeGrantAuthorizationInput = z.input<typeof AuthorizationCodeGrantAuthorizationSchema>;
+export type AuthorizationCodeGrantAuthorization = z.output<typeof AuthorizationCodeGrantAuthorizationSchema>;
 //# sourceMappingURL=authorization-code.d.ts.map

package/dist/esm/oauth/authorize/schema/grants/authorization-code.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-code.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/authorize/schema/grants/authorization-code.ts"],"names":[],"mappings":"AAwCA,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;MAEd,CAAC;AACvB,MAAM,MAAM,wBAAwB,GAAG,OAAO,uBAAuB,CAAC,QAAQ,CAAC"}
+{"version":3,"file":"authorization-code.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/authorize/schema/grants/authorization-code.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAmB5B,eAAO,MAAM,mBAAmB,aAKmC,CAAC;AAqCpE,eAAO,MAAM,yCAAyC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA2BlD,CAAC;AACL,MAAM,MAAM,wCAAwC,GAAG,CAAC,CAAC,KAAK,CAC5D,OAAO,yCAAyC,CACjD,CAAC;AACF,MAAM,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CACxD,OAAO,yCAAyC,CACjD,CAAC"}

package/dist/esm/oauth/authorize/schema/grants/authorization-code.js

@@ -1,31 +1,72 @@
-import { type } from 'arktype';
+import * as z from 'zod/v4';
 import { AppIdSchema } from '../../../../app/schema.js';
-import { AuthorizationDisplaySchema, AuthorizationPromptSchema, CodeChallengeMethodSchema, OptionalSchema, ResponseType, } from '../../../common/schema.js';
+import { AuthorizationDisplaySchema, AuthorizationPromptSchema, CodeChallengeMethodSchema, OptionalSchema, ResponseType, ScopeStringSchema, } from '../../../common/schema.js';
+import { ExtraGrantSchema } from './common.js';
 /**
  * @see https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.1
  * @see https://openid.net/specs/openid-connect-core-1_0.html#rfc.section.3.1.2.1
  */
-const ResponseTypeSchema = type.enumerated(ResponseType.CODE);
-const PKCESchema = type({
-    code_challenge_method: CodeChallengeMethodSchema.optional(),
-    code_challenge: type('string').optional(),
-}).or({
-    code_challenge_method: CodeChallengeMethodSchema,
-    code_challenge: type('string'),
-});
-const OAuthSchema = type({
-    response_type: ResponseTypeSchema,
-    client_id: AppIdSchema,
-    redirect_uri: type('string.url').optional(),
-    scope: type('string').optional(),
-    state: type('string').optional(),
+const ResponseTypeSchema = z.enum([ResponseType.CODE]);
+export const CodeChallengeSchema = z
+    .string()
+    .min(43, 'Code challenge must be at least 43 characters long.')
+    .max(128, 'Code challenge must be at most 128 characters long.')
+    .regex(/^[A-Za-z0-9\-_.~]+$/, 'Code challenge contains invalid characters.') // Base64url-encoded string
+    .describe('PKCE code challenge, derived from the code verifier.');
+// const PKCESchema = z.union([
+//   z.object({
+//     code_challenge_method: CodeChallengeMethodSchema.optional(),
+//     code_challenge: z.string().optional(),
+//   }),
+//   z.object({
+//     code_challenge_method: CodeChallengeMethodSchema,
+//     code_challenge: z.string().min(1),
+//   })
+// ]).refine((data) => {
+//   return (
+//     (data.code_challenge_method && data.code_challenge) ||
+//     (!data.code_challenge_method && !data.code_challenge)
+//   );
+// }, {
+//   message: 'code_challenge and code_challenge_method must both be present or both be absent',
+// });
+const OAuthSchema = z.object({
+    response_type: ResponseTypeSchema.describe('Must be set to "code" for Authorization Code flow.'),
+    client_id: AppIdSchema.describe('The Client ID.'),
+    redirect_uri: z.url().optional().describe('The callback URL.'),
+    scope: ScopeStringSchema.optional(),
+    state: z.string().min(1).optional().describe('Opaque value to prevent CSRF.'),
 });
-const OIDCSchema = type({
-    nonce: type('string').optional(),
+const OIDCSchema = z.object({
+    nonce: z.string().optional(),
     display: AuthorizationDisplaySchema.optional(),
     prompt: AuthorizationPromptSchema.optional(),
-    max_age: type('number').optional(),
+    max_age: z.number().int().min(0).optional(),
+});
+export const AuthorizationCodeGrantAuthorizationSchema = z
+    .object({
+    ...OAuthSchema.shape,
+    ...OIDCSchema.shape,
+    ...OptionalSchema.shape,
+    code_challenge_method: CodeChallengeMethodSchema.optional(),
+    code_challenge: CodeChallengeSchema.optional(),
+    // Custom
+    ...ExtraGrantSchema.shape,
+})
+    .superRefine((data, ctx) => {
+    // If one is present, the other must also be present
+    if (data.code_challenge && !data.code_challenge_method) {
+        ctx.addIssue({
+            code: 'custom',
+            message: 'code_challenge_method is required when code_challenge is present',
+            path: ['code_challenge_method'],
+        });
+    }
+    else if (!data.code_challenge && data.code_challenge_method) {
+        ctx.addIssue({
+            code: 'custom',
+            message: 'code_challenge is required when code_challenge_method is present',
+            path: ['code_challenge'],
+        });
+    }
 });
-export const AuthorizationCodeSchema = OAuthSchema.and(OIDCSchema)
-    .and(PKCESchema)
-    .and(OptionalSchema);

package/dist/esm/oauth/authorize/schema/grants/authorization-code.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=authorization-code.test.d.ts.map

package/dist/esm/oauth/authorize/schema/grants/authorization-code.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-code.test.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/authorize/schema/grants/authorization-code.test.ts"],"names":[],"mappings":""}