@go-mondo/identity-sdk 0.0.2-beta.7 → 0.0.2-beta.71

package/dist/esm/oauth/token/schema/schema.d.ts

@@ -1,28 +1,55 @@
+import * as z from 'zod/v4';
 export * from './grants/authorization-code.js';
 export * from './grants/client-credentials.js';
 export * from './grants/refresh-token.js';
 /**
  * Union(s)
  */
-export declare const Schema: import("arktype/internal/methods/object.ts").ObjectType<{
-    grant_type: "authorization_code";
-    code: string;
-    client_id: string;
-    redirect_uri: string;
-    client_secret?: string | undefined;
-    code_verifier?: string | undefined;
-} | {
-    grant_type: "client_credentials";
-    scope?: string | undefined;
-    audience?: string | undefined;
-    client_id: string;
-    client_secret: string;
-} | {
-    grant_type: "refresh_token";
-    refresh_token: string;
-    client_id: string;
-    client_secret: string;
-    scope?: string | undefined;
-}, {}>;
-export type Payload = typeof Schema.inferOut;
+export declare const TokenGrantSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    code_verifier: z.ZodOptional<z.ZodString>;
+    client_id: z.ZodString;
+    client_secret: z.ZodString;
+    grant_type: z.ZodEnum<{
+        authorization_code: "authorization_code";
+    }>;
+    code: z.ZodString;
+    redirect_uri: z.ZodOptional<z.ZodURL>;
+}, z.core.$strip>, z.ZodObject<{
+    audience: z.ZodOptional<z.ZodString>;
+    client_id: z.ZodString;
+    client_secret: z.ZodString;
+    grant_type: z.ZodEnum<{
+        client_credentials: "client_credentials";
+    }>;
+    scope: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    client_id: z.ZodString;
+    client_secret: z.ZodString;
+    grant_type: z.ZodEnum<{
+        refresh_token: "refresh_token";
+    }>;
+    refresh_token: z.ZodString;
+    scope: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>], "grant_type">;
+export type TokenGrantInput = z.input<typeof TokenGrantSchema>;
+export type TokenGrant = z.output<typeof TokenGrantSchema>;
+export declare const TokenSchema: z.ZodObject<{
+    access_token: z.ZodString;
+    token_type: z.ZodDefault<z.ZodLiteral<"Bearer">>;
+    expires_in: z.ZodOptional<z.ZodNumber>;
+    refresh_token: z.ZodOptional<z.ZodString>;
+    scope: z.ZodOptional<z.ZodString>;
+    id_token: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type TokenInput = z.input<typeof TokenSchema>;
+export type Token = z.output<typeof TokenSchema>;
+export declare const ImplicitTokenSchema: z.ZodObject<{
+    access_token: z.ZodOptional<z.ZodString>;
+    id_token: z.ZodOptional<z.ZodString>;
+    scope: z.ZodOptional<z.ZodString>;
+    token_type: z.ZodDefault<z.ZodLiteral<"Bearer">>;
+    expires_in: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export type ImplicitTokenInput = z.input<typeof ImplicitTokenSchema>;
+export type ImplicitToken = z.output<typeof ImplicitTokenSchema>;
 //# sourceMappingURL=schema.d.ts.map

package/dist/esm/oauth/token/schema/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../../src/oauth/token/schema/schema.ts"],"names":[],"mappings":"AAIA,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,2BAA2B,CAAC;AAE1C;;GAEG;AACH,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;MAElB,CAAC;AACF,MAAM,MAAM,OAAO,GAAG,OAAO,MAAM,CAAC,QAAQ,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../../src/oauth/token/schema/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAO5B,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,2BAA2B,CAAC;AAE1C;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;iCAI3B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC/D,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAK3D,eAAO,MAAM,WAAW;;;;;;;iBA8CtB,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AACrD,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,WAAW,CAAC,CAAC;AAEjD,eAAO,MAAM,mBAAmB;;;;;;iBAG9B,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AACrE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/esm/oauth/token/schema/schema.js

@@ -1,10 +1,65 @@
-import { AuthorizationCodeSchema } from './grants/authorization-code.js';
-import { ClientCredentialsSchema } from './grants/client-credentials.js';
-import { RefreshTokenSchema } from './grants/refresh-token.js';
+import * as z from 'zod/v4';
+import { ScopeStringSchema } from '../../common/schema.js';
+import { AuthorizationCodeGrantTokenSchema } from './grants/authorization-code.js';
+import { ClientCredentialsGrantTokenSchema } from './grants/client-credentials.js';
+import { RefreshTokenGrantTokenSchema } from './grants/refresh-token.js';
 export * from './grants/authorization-code.js';
 export * from './grants/client-credentials.js';
 export * from './grants/refresh-token.js';
 /**
  * Union(s)
  */
-export const Schema = AuthorizationCodeSchema.or(ClientCredentialsSchema).or(RefreshTokenSchema);
+export const TokenGrantSchema = z.discriminatedUnion('grant_type', [
+    AuthorizationCodeGrantTokenSchema,
+    ClientCredentialsGrantTokenSchema,
+    RefreshTokenGrantTokenSchema,
+]);
+/*
+ * @see https://datatracker.ietf.org/doc/html/rfc6749#section-5.1
+ */
+export const TokenSchema = z.object({
+    /**
+     * REQUIRED. The access token issued by the authorization server.
+     * Typically a JWT or an opaque string.
+     */
+    access_token: z
+        .string()
+        .min(1)
+        .describe('The access token issued by the authorization server.'),
+    /**
+     * REQUIRED. The type of the token issued. Value is typically 'Bearer'.
+     */
+    token_type: z
+        .literal('Bearer')
+        .default('Bearer')
+        .describe('The type of the token issued. Must be "Bearer".'),
+    /**
+     * RECOMMENDED. The lifetime in seconds of the access token.
+     * For example, the value 3600 represents an expiration time of one hour.
+     */
+    expires_in: z
+        .number()
+        .int()
+        .positive()
+        .optional()
+        .describe('The lifetime in seconds of the access token.'),
+    /**
+     * OPTIONAL. The refresh token, which can be used to obtain a new access token
+     * when the current one expires.
+     */
+    refresh_token: z.string().min(1).optional().describe('The refresh token.'),
+    /**
+     * OPTIONAL. The scope of the access token as issued by the authorization server.
+     * If omitted, the scope is the same as the scope originally requested by the client.
+     */
+    scope: ScopeStringSchema.optional(),
+    /**
+     * OPTIONAL, for OpenID Connect (OIDC). The ID token, a JWT that contains claims
+     * about the authentication of the end-user.
+     */
+    id_token: z.string().min(1).optional().describe('The ID Token (OIDC only).'),
+});
+export const ImplicitTokenSchema = z.object({
+    ...TokenSchema.omit({ refresh_token: true, access_token: true }).shape,
+    ...TokenSchema.pick({ access_token: true }).partial().shape,
+});

package/dist/esm/oauth/token/schema/schema.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=schema.test.d.ts.map

package/dist/esm/oauth/token/schema/schema.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.test.d.ts","sourceRoot":"","sources":["../../../../../src/oauth/token/schema/schema.test.ts"],"names":[],"mappings":""}

package/dist/esm/oauth/token/schema/schema.test.js

@@ -0,0 +1,136 @@
+import { describe, expect, test } from 'vitest';
+import { generateAppId } from '../../../app/utils.js';
+import { TokenGrantSchema } from './schema.js';
+describe('OAuth Token - Schema', () => {
+    describe('Schema union', () => {
+        test('should accept authorization code grant', () => {
+            const payload = {
+                grant_type: 'authorization_code',
+                code: 'auth_code_123',
+                client_id: generateAppId(),
+                client_secret: 'secret_123',
+                redirect_uri: 'https://example.com/callback',
+            };
+            const result = TokenGrantSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.success).toBe(true);
+            if (result.success) {
+                expect(result.data).toEqual(payload);
+            }
+        });
+        test('should accept authorization code with PKCE', () => {
+            const payload = {
+                grant_type: 'authorization_code',
+                code: 'auth_code_123',
+                client_id: generateAppId(),
+                client_secret: 'secret_123',
+                redirect_uri: 'https://example.com/callback',
+                code_verifier: 'pkce_verifier_123',
+            };
+            const result = TokenGrantSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.success).toBe(true);
+            if (result.success) {
+                expect(result.data).toEqual(payload);
+            }
+        });
+        test('should accept authorization code with client secret', () => {
+            const payload = {
+                grant_type: 'authorization_code',
+                code: 'auth_code_123',
+                client_id: generateAppId(),
+                client_secret: 'secret_123',
+                redirect_uri: 'https://example.com/callback',
+            };
+            const result = TokenGrantSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.success).toBe(true);
+            if (result.success) {
+                expect(result.data).toEqual(payload);
+            }
+        });
+        test('should accept client credentials grant', () => {
+            const payload = {
+                grant_type: 'client_credentials',
+                client_id: generateAppId(),
+                client_secret: 'secret_123',
+                scope: 'read write',
+            };
+            const result = TokenGrantSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.success).toBe(true);
+            if (result.success) {
+                expect(result.data).toEqual(payload);
+            }
+        });
+        test('should accept refresh token grant', () => {
+            const payload = {
+                grant_type: 'refresh_token',
+                refresh_token: 'refresh_token_123',
+                client_id: generateAppId(),
+                client_secret: 'secret_123',
+                scope: 'read',
+            };
+            const result = TokenGrantSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.success).toBe(true);
+            if (result.success) {
+                expect(result.data).toEqual(payload);
+            }
+        });
+        test('should reject invalid grant type', () => {
+            const payload = {
+                grant_type: 'invalid_grant',
+                code: 'auth_code_123',
+                client_id: generateAppId(),
+                redirect_uri: 'https://example.com/callback',
+            };
+            const result = TokenGrantSchema.safeParse(payload);
+            expect(result.success).toBe(false);
+        });
+        test('should reject authorization code without required fields', () => {
+            const payload = {
+                grant_type: 'authorization_code',
+                client_id: generateAppId(),
+                // missing code and redirect_uri
+            };
+            const result = TokenGrantSchema.safeParse(payload);
+            expect(result.success).toBe(false);
+        });
+        test('should reject invalid redirect URI', () => {
+            const payload = {
+                grant_type: 'authorization_code',
+                code: 'auth_code_123',
+                client_id: generateAppId(),
+                redirect_uri: 'not-a-valid-url',
+            };
+            const result = TokenGrantSchema.safeParse(payload);
+            expect(result.success).toBe(false);
+        });
+        test('should reject client credentials without required fields', () => {
+            const payload = {
+                grant_type: 'client_credentials',
+                client_id: generateAppId(),
+                // missing client_secret
+            };
+            const result = TokenGrantSchema.safeParse(payload);
+            expect(result.success).toBe(false);
+        });
+        test('should reject refresh token without required fields', () => {
+            const payload = {
+                grant_type: 'refresh_token',
+                client_id: 'app_123',
+                // missing refresh_token and client_secret
+            };
+            const result = TokenGrantSchema.safeParse(payload);
+            expect(result.success).toBe(false);
+        });
+        test('should reject completely invalid payload', () => {
+            const payload = {
+                invalid: 'data',
+            };
+            const result = TokenGrantSchema.safeParse(payload);
+            expect(result.success).toBe(false);
+        });
+    });
+});

package/dist/esm/workspace/authorization/schema.d.ts

@@ -1,31 +1,75 @@
+import * as z from 'zod/v4';
 export declare const DEFAULT_SESSION_DURATION: number;
 export declare const DEFAULT_REFRESH_TOKEN_DURATION: number;
 export declare const DEFAULT_ACCESS_TOKEN_DURATION: number;
-export declare const AuthorizationPayloadSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    sessionDuration: import("arktype/internal/attributes.ts").Default<number, number>;
-    refreshTokenDuration: import("arktype/internal/attributes.ts").Default<number, number>;
-    accessTokenDuration: import("arktype/internal/attributes.ts").Default<number, number>;
-    accessTokenSignatureAlgorithm: import("arktype/internal/attributes.ts").Default<string, string>;
-    updatedAt?: ((In: string | Date | undefined) => import("arktype").Out<string | undefined>) | undefined;
-    deletedAt?: ((In: string | Date | undefined) => import("arktype").Out<string | undefined>) | undefined;
-    deactivatedAt?: ((In: string | Date | undefined) => import("arktype").Out<string | undefined>) | undefined;
-    metadata?: ((In: {
-        [x: string]: string | number | boolean;
-    } | Map<string, string | number | boolean> | null | undefined) => import("arktype").Out<{
-        [x: string]: string | number | boolean;
-    } | undefined>) | undefined;
-}, {}>;
-export type AuthorizationPayload = typeof AuthorizationPayloadSchema.inferOut;
-export declare const UpsertAuthorizationPayloadSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    sessionDuration: import("arktype/internal/attributes.ts").Default<number, number>;
-    refreshTokenDuration: import("arktype/internal/attributes.ts").Default<number, number>;
-    accessTokenDuration: import("arktype/internal/attributes.ts").Default<number, number>;
-    accessTokenSignatureAlgorithm: import("arktype/internal/attributes.ts").Default<string, string>;
-    metadata?: ((In: {
-        [x: string]: string | number | boolean;
-    } | Map<string, string | number | boolean> | null | undefined) => import("arktype").Out<{
-        [x: string]: string | number | boolean;
-    } | undefined>) | undefined;
-}, {}>;
-export type UpsertAuthorizationPayload = typeof UpsertAuthorizationPayloadSchema.inferOut;
+export declare const AuthorizationSchema: z.ZodObject<{
+    metadata: z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Map<string, string | number | boolean>, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>;
+    deactivatedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    deletedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    updatedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    sessionDuration: z.ZodDefault<z.ZodNumber>;
+    refreshTokenDuration: z.ZodDefault<z.ZodNumber>;
+    accessTokenDuration: z.ZodDefault<z.ZodNumber>;
+    accessTokenSignatureAlgorithm: z.ZodDefault<z.ZodEnum<{
+        HS256: "HS256";
+        HS384: "HS384";
+        HS512: "HS512";
+        RS256: "RS256";
+        RS384: "RS384";
+        RS512: "RS512";
+        ES256: "ES256";
+        ES384: "ES384";
+        ES512: "ES512";
+        PS256: "PS256";
+        PS384: "PS384";
+        PS512: "PS512";
+    }>>;
+}, z.core.$strip>;
+export type AuthorizationProperties = z.input<typeof AuthorizationSchema>;
+export type Authorization = z.output<typeof AuthorizationSchema>;
+export declare const AuthorizationPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    deactivatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    deletedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    updatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    sessionDuration: z.ZodDefault<z.ZodNumber>;
+    refreshTokenDuration: z.ZodDefault<z.ZodNumber>;
+    accessTokenDuration: z.ZodDefault<z.ZodNumber>;
+    accessTokenSignatureAlgorithm: z.ZodDefault<z.ZodEnum<{
+        HS256: "HS256";
+        HS384: "HS384";
+        HS512: "HS512";
+        RS256: "RS256";
+        RS384: "RS384";
+        RS512: "RS512";
+        ES256: "ES256";
+        ES384: "ES384";
+        ES512: "ES512";
+        PS256: "PS256";
+        PS384: "PS384";
+        PS512: "PS512";
+    }>>;
+}, z.core.$strip>;
+export type AuthorizationPayload = z.output<typeof AuthorizationPayloadSchema>;
+export declare const UpsertAuthorizationPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    sessionDuration: z.ZodDefault<z.ZodNumber>;
+    refreshTokenDuration: z.ZodDefault<z.ZodNumber>;
+    accessTokenDuration: z.ZodDefault<z.ZodNumber>;
+    accessTokenSignatureAlgorithm: z.ZodDefault<z.ZodEnum<{
+        HS256: "HS256";
+        HS384: "HS384";
+        HS512: "HS512";
+        RS256: "RS256";
+        RS384: "RS384";
+        RS512: "RS512";
+        ES256: "ES256";
+        ES384: "ES384";
+        ES512: "ES512";
+        PS256: "PS256";
+        PS384: "PS384";
+        PS512: "PS512";
+    }>>;
+}, z.core.$strip>;
+export type UpsertAuthorizationPayload = z.output<typeof UpsertAuthorizationPayloadSchema>;
 //# sourceMappingURL=schema.d.ts.map

package/dist/esm/workspace/authorization/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/workspace/authorization/schema.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,wBAAwB,QAAc,CAAC;AACpD,eAAO,MAAM,8BAA8B,QAAoB,CAAC;AAChE,eAAO,MAAM,6BAA6B,QAAc,CAAC;AASzD,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;MAIF,CAAC;AACtC,MAAM,MAAM,oBAAoB,GAAG,OAAO,0BAA0B,CAAC,QAAQ,CAAC;AAE9E,eAAO,MAAM,gCAAgC;;;;;;;;;;MAE5C,CAAC;AACF,MAAM,MAAM,0BAA0B,GACpC,OAAO,gCAAgC,CAAC,QAAQ,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/workspace/authorization/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAe5B,eAAO,MAAM,wBAAwB,QAAc,CAAC;AACpD,eAAO,MAAM,8BAA8B,QAAoB,CAAC;AAChE,eAAO,MAAM,6BAA6B,QAAc,CAAC;AASzD,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;iBAM9B,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAC1E,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEjE,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;iBAMrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE/E,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;iBAG3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAC/C,OAAO,gCAAgC,CACxC,CAAC"}

package/dist/esm/workspace/authorization/schema.js

@@ -1,19 +1,31 @@
-import { type } from 'arktype';
-import { OptionalDatePayloadSchema } from '../../common/schema/dates.js';
-import { Algorithm, AlgorithmSchema } from '../../common/schema/jwt.js';
-import { MetadataPayloadPropertySchema } from '../../common/schema/metadata.js';
+import * as z from 'zod/v4';
+import { DeactivatedAtPropertyPayloadSchema, DeactivatedAtPropertySchema, DeletedAtPropertyPayloadSchema, DeletedAtPropertySchema, OptionalDatePayloadSchema, OptionalDateSchema, } from '../../common/schema/dates.js';
+import { AlgorithmSchema, DEFAULT_ALGORITHM } from '../../common/schema/jwt.js';
+import { MetadataMapPropertySchema, MetadataPayloadPropertySchema, } from '../../common/schema/metadata.js';
 export const DEFAULT_SESSION_DURATION = 60 * 60 * 4; // 4 hour
 export const DEFAULT_REFRESH_TOKEN_DURATION = 60 * 60 * 24 * 14; // 14 days
 export const DEFAULT_ACCESS_TOKEN_DURATION = 60 * 60 * 2; // 2 hours
-const BaseAttributes = type({
-    sessionDuration: type('number').default(DEFAULT_SESSION_DURATION),
-    refreshTokenDuration: type('number').default(DEFAULT_REFRESH_TOKEN_DURATION),
-    accessTokenDuration: type('number').default(DEFAULT_ACCESS_TOKEN_DURATION),
-    accessTokenSignatureAlgorithm: AlgorithmSchema.default(Algorithm.DEFAULT),
+const BaseAttributes = z.object({
+    sessionDuration: z.number().default(DEFAULT_SESSION_DURATION),
+    refreshTokenDuration: z.number().default(DEFAULT_REFRESH_TOKEN_DURATION),
+    accessTokenDuration: z.number().default(DEFAULT_ACCESS_TOKEN_DURATION),
+    accessTokenSignatureAlgorithm: AlgorithmSchema.default(DEFAULT_ALGORITHM),
+});
+export const AuthorizationSchema = z.object({
+    ...BaseAttributes.shape,
+    updatedAt: OptionalDateSchema,
+    ...DeletedAtPropertySchema.shape,
+    ...DeactivatedAtPropertySchema.shape,
+    ...MetadataMapPropertySchema.shape,
+});
+export const AuthorizationPayloadSchema = z.object({
+    ...BaseAttributes.shape,
+    updatedAt: OptionalDatePayloadSchema,
+    ...DeletedAtPropertyPayloadSchema.shape,
+    ...DeactivatedAtPropertyPayloadSchema.shape,
+    ...MetadataPayloadPropertySchema.shape,
+});
+export const UpsertAuthorizationPayloadSchema = z.object({
+    ...BaseAttributes.shape,
+    ...MetadataPayloadPropertySchema.shape,
 });
-export const AuthorizationPayloadSchema = BaseAttributes.and({
-    'updatedAt?': OptionalDatePayloadSchema,
-    'deletedAt?': OptionalDatePayloadSchema,
-    'deactivatedAt?': OptionalDatePayloadSchema,
-}).and(MetadataPayloadPropertySchema);
-export const UpsertAuthorizationPayloadSchema = BaseAttributes.and(MetadataPayloadPropertySchema);

package/dist/esm/workspace/branding/schema.d.ts

@@ -1,38 +1,48 @@
-export declare const BrandingPayloadSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    logo?: {
-        dark?: string | undefined;
-        light?: string | undefined;
-        email?: string | undefined;
-    } | undefined;
-    color?: {
-        link?: string | undefined;
-        linkHover?: string | undefined;
-    } | undefined;
-    updatedAt?: ((In: string | Date | undefined) => import("arktype").Out<string | undefined>) | undefined;
-    deletedAt?: ((In: string | Date | undefined) => import("arktype").Out<string | undefined>) | undefined;
-    deactivatedAt?: ((In: string | Date | undefined) => import("arktype").Out<string | undefined>) | undefined;
-    metadata?: ((In: {
-        [x: string]: string | number | boolean;
-    } | Map<string, string | number | boolean> | null | undefined) => import("arktype").Out<{
-        [x: string]: string | number | boolean;
-    } | undefined>) | undefined;
-}, {}>;
-export type BrandingPayload = typeof BrandingPayloadSchema.inferOut;
-export declare const UpsertBrandingPayloadSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    logo?: {
-        dark?: string | undefined;
-        light?: string | undefined;
-        email?: string | undefined;
-    } | undefined;
-    color?: {
-        link?: string | undefined;
-        linkHover?: string | undefined;
-    } | undefined;
-    metadata?: ((In: {
-        [x: string]: string | number | boolean;
-    } | Map<string, string | number | boolean> | null | undefined) => import("arktype").Out<{
-        [x: string]: string | number | boolean;
-    } | undefined>) | undefined;
-}, {}>;
-export type UpsertBrandingPayload = typeof UpsertBrandingPayloadSchema.inferOut;
+import * as z from 'zod/v4';
+export declare const BrandingSchema: z.ZodObject<{
+    metadata: z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Map<string, string | number | boolean>, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>;
+    deactivatedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    deletedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    updatedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    logo: z.ZodOptional<z.ZodObject<{
+        dark: z.ZodOptional<z.ZodURL>;
+        light: z.ZodOptional<z.ZodURL>;
+        email: z.ZodOptional<z.ZodURL>;
+    }, z.core.$strip>>;
+    color: z.ZodOptional<z.ZodObject<{
+        link: z.ZodOptional<z.ZodString>;
+        linkHover: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type BrandingProperties = z.input<typeof BrandingSchema>;
+export type Branding = z.output<typeof BrandingSchema>;
+export declare const BrandingPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    deactivatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    deletedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    updatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    logo: z.ZodOptional<z.ZodObject<{
+        dark: z.ZodOptional<z.ZodURL>;
+        light: z.ZodOptional<z.ZodURL>;
+        email: z.ZodOptional<z.ZodURL>;
+    }, z.core.$strip>>;
+    color: z.ZodOptional<z.ZodObject<{
+        link: z.ZodOptional<z.ZodString>;
+        linkHover: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type BrandingPayload = z.output<typeof BrandingPayloadSchema>;
+export declare const UpsertBrandingPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    logo: z.ZodOptional<z.ZodObject<{
+        dark: z.ZodOptional<z.ZodURL>;
+        light: z.ZodOptional<z.ZodURL>;
+        email: z.ZodOptional<z.ZodURL>;
+    }, z.core.$strip>>;
+    color: z.ZodOptional<z.ZodObject<{
+        link: z.ZodOptional<z.ZodString>;
+        linkHover: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type UpsertBrandingPayload = z.output<typeof UpsertBrandingPayloadSchema>;
 //# sourceMappingURL=schema.d.ts.map

package/dist/esm/workspace/branding/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/workspace/branding/schema.ts"],"names":[],"mappings":"AAoBA,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;MAIG,CAAC;AACtC,MAAM,MAAM,eAAe,GAAG,OAAO,qBAAqB,CAAC,QAAQ,CAAC;AAEpE,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;MAEvC,CAAC;AACF,MAAM,MAAM,qBAAqB,GAAG,OAAO,2BAA2B,CAAC,QAAQ,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/workspace/branding/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AA8B5B,eAAO,MAAM,cAAc;;;;;;;;;;;;;;iBAMzB,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAChE,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,cAAc,CAAC,CAAC;AAEvD,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;iBAMhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAErE,eAAO,MAAM,2BAA2B;;;;;;;;;;;iBAGtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAC1C,OAAO,2BAA2B,CACnC,CAAC"}

package/dist/esm/workspace/branding/schema.js

@@ -1,22 +1,34 @@
-import { type } from 'arktype';
-import { OptionalDatePayloadSchema } from '../../common/schema/dates.js';
-import { MetadataPayloadPropertySchema } from '../../common/schema/metadata.js';
-const LogoSchema = type({
-    dark: type('string.url').optional(),
-    light: type('string.url').optional(),
-    email: type('string.url').optional(),
+import * as z from 'zod/v4';
+import { DeactivatedAtPropertyPayloadSchema, DeactivatedAtPropertySchema, DeletedAtPropertyPayloadSchema, DeletedAtPropertySchema, OptionalDatePayloadSchema, OptionalDateSchema, } from '../../common/schema/dates.js';
+import { MetadataMapPropertySchema, MetadataPayloadPropertySchema, } from '../../common/schema/metadata.js';
+const LogoSchema = z.object({
+    dark: z.url().optional(),
+    light: z.url().optional(),
+    email: z.url().optional(),
 });
-const ColorSchema = type({
-    link: type('string').optional(),
-    linkHover: type('string').optional(),
+const ColorSchema = z.object({
+    link: z.string().optional(),
+    linkHover: z.string().optional(),
 });
-const BaseAttributes = type({
+const BaseSchema = z.object({
     logo: LogoSchema.optional(),
     color: ColorSchema.optional(),
 });
-export const BrandingPayloadSchema = BaseAttributes.and({
-    'updatedAt?': OptionalDatePayloadSchema,
-    'deletedAt?': OptionalDatePayloadSchema,
-    'deactivatedAt?': OptionalDatePayloadSchema,
-}).and(MetadataPayloadPropertySchema);
-export const UpsertBrandingPayloadSchema = BaseAttributes.and(MetadataPayloadPropertySchema);
+export const BrandingSchema = z.object({
+    ...BaseSchema.shape,
+    updatedAt: OptionalDateSchema,
+    ...DeletedAtPropertySchema.shape,
+    ...DeactivatedAtPropertySchema.shape,
+    ...MetadataMapPropertySchema.shape,
+});
+export const BrandingPayloadSchema = z.object({
+    ...BaseSchema.shape,
+    updatedAt: OptionalDatePayloadSchema,
+    ...DeletedAtPropertyPayloadSchema.shape,
+    ...DeactivatedAtPropertyPayloadSchema.shape,
+    ...MetadataPayloadPropertySchema.shape,
+});
+export const UpsertBrandingPayloadSchema = z.object({
+    ...BaseSchema.shape,
+    ...MetadataPayloadPropertySchema.shape,
+});