@go-mondo/identity-sdk 0.0.2-beta.8 → 0.0.2-beta.80

package/dist/cjs/authentication/strategies/schema/types/totp.js

@@ -1,12 +1,45 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.VerifyTOTPSchema = exports.RegisterTOTPSchema = exports.UpdateTOTPStrategyPayloadSchema = exports.InsertTOTPStrategyPayloadSchema = exports.TOTPStrategyPayloadSchema = exports.TOTPStrategySchema = exports.TOTPStrategySettingsPropertySchema = exports.TOTPStrategySettingsSchema = exports.TOTPAlgorithm = exports.DEFAULT_PERIOD = exports.DEFAULT_DIGITS = void 0;
-const arktype_1 = require("arktype");
+const z = __importStar(require("zod/v4"));
 const base_js_1 = require("../base.js");
 exports.DEFAULT_DIGITS = 6;
 exports.DEFAULT_PERIOD = 30;
-const TypeSchema = (0, arktype_1.type)({
-    type: "'totp'",
+const TypeSchema = z.object({
+    type: z.literal(base_js_1.StrategyType.TOTP),
 });
 exports.TOTPAlgorithm = {
     DEFAULT: 'SHA256',
@@ -20,38 +53,62 @@ exports.TOTPAlgorithm = {
     'SHA3-384': 'SHA3-384',
     'SHA3-512': 'SHA3-512',
 };
-exports.TOTPStrategySettingsSchema = (0, arktype_1.type)({
-    digits: arktype_1.type.enumerated(6, 7, 8).default(exports.DEFAULT_DIGITS),
-    period: arktype_1.type.enumerated(15, 30, 60).default(exports.DEFAULT_PERIOD),
-    algorithm: arktype_1.type
-        .enumerated(exports.TOTPAlgorithm.SHA1, exports.TOTPAlgorithm.SHA224, exports.TOTPAlgorithm.SHA256, exports.TOTPAlgorithm.SHA384, exports.TOTPAlgorithm.SHA512, exports.TOTPAlgorithm['SHA3-224'], exports.TOTPAlgorithm['SHA3-256'], exports.TOTPAlgorithm['SHA3-384'], exports.TOTPAlgorithm['SHA3-512'])
+const allowedDigits = new Set([6, 7, 8]);
+const allowedPeriods = new Set([15, 30, 60]);
+exports.TOTPStrategySettingsSchema = z.object({
+    digits: z
+        .number()
+        .default(exports.DEFAULT_DIGITS)
+        .refine((val) => allowedDigits.has(val), {
+        message: 'Digit must be 6, 7, or 8',
+    }),
+    period: z
+        .number()
+        .default(exports.DEFAULT_PERIOD)
+        .refine((val) => allowedPeriods.has(val), {
+        message: 'Period must be 15, 30, or 60',
+    }),
+    algorithm: z
+        .enum([
+        exports.TOTPAlgorithm.SHA1,
+        exports.TOTPAlgorithm.SHA224,
+        exports.TOTPAlgorithm.SHA256,
+        exports.TOTPAlgorithm.SHA384,
+        exports.TOTPAlgorithm.SHA512,
+        exports.TOTPAlgorithm['SHA3-224'],
+        exports.TOTPAlgorithm['SHA3-256'],
+        exports.TOTPAlgorithm['SHA3-384'],
+        exports.TOTPAlgorithm['SHA3-512'],
+    ])
         .default(exports.TOTPAlgorithm.DEFAULT),
 });
-exports.TOTPStrategySettingsPropertySchema = (0, arktype_1.type)({
+exports.TOTPStrategySettingsPropertySchema = z.object({
     settings: exports.TOTPStrategySettingsSchema,
 });
-exports.TOTPStrategySchema = base_js_1.BaseStrategySchema.and(TypeSchema).and({
+exports.TOTPStrategySchema = z.object({
+    ...base_js_1.BaseStrategySchema.shape,
+    ...TypeSchema.shape,
     settings: exports.TOTPStrategySettingsSchema,
 });
-exports.TOTPStrategyPayloadSchema = base_js_1.BaseStrategyPayloadSchema.and(TypeSchema).and(exports.TOTPStrategySettingsPropertySchema);
-exports.InsertTOTPStrategyPayloadSchema = TypeSchema.and(base_js_1.BaseInsertStrategyPayloadSchema)
-    .and(TypeSchema)
-    .and({
+exports.TOTPStrategyPayloadSchema = z.object({
+    ...base_js_1.BaseStrategyPayloadSchema.shape,
+    ...TypeSchema.shape,
+    ...exports.TOTPStrategySettingsPropertySchema.shape,
+});
+exports.InsertTOTPStrategyPayloadSchema = z.object({
+    ...TypeSchema.shape,
+    ...base_js_1.BaseInsertStrategyPayloadSchema.shape,
     settings: exports.TOTPStrategySettingsSchema.optional(),
 });
-exports.UpdateTOTPStrategyPayloadSchema = TypeSchema.and(base_js_1.BaseUpdateStrategyPayloadSchema).and({
+exports.UpdateTOTPStrategyPayloadSchema = z.object({
+    ...TypeSchema.shape,
+    ...base_js_1.BaseUpdateStrategyPayloadSchema.shape,
     settings: exports.TOTPStrategySettingsSchema.optional(),
 });
-exports.RegisterTOTPSchema = (0, arktype_1.type)({
-    uri: (0, arktype_1.type)('string.url').configure({
-        message: 'An authenticator uri is required',
-    }),
-    token: (0, arktype_1.type)('string').configure({
-        message: 'An authenticator token is required',
-    }),
+exports.RegisterTOTPSchema = z.object({
+    uri: z.url('An authenticator uri is required'),
+    token: z.string('An authenticator token is required'),
 });
-exports.VerifyTOTPSchema = (0, arktype_1.type)({
-    token: (0, arktype_1.type)('string').configure({
-        message: 'An authenticator token is required',
-    }),
+exports.VerifyTOTPSchema = z.object({
+    token: z.string({ message: 'An authenticator token is required' }),
 });

package/dist/cjs/authentication/utils.d.ts

@@ -0,0 +1,13 @@
+export declare const Model: {
+    readonly Strategy: {
+        readonly UIDPrefix: "stg";
+        readonly TYPE: "Strategy";
+    };
+    readonly Session: {
+        readonly UIDPrefix: "ssn";
+        readonly TYPE: "Session";
+    };
+};
+export declare function generateStrategyId(): string;
+export declare function generateSessionId(): string;
+//# sourceMappingURL=utils.d.ts.map

package/dist/cjs/authentication/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/authentication/utils.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,KAAK;;;;;;;;;CASR,CAAC;AAEX,wBAAgB,kBAAkB,WAEjC;AAED,wBAAgB,iBAAiB,WAEhC"}

package/dist/cjs/authentication/utils.js

@@ -0,0 +1,25 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Model = void 0;
+exports.generateStrategyId = generateStrategyId;
+exports.generateSessionId = generateSessionId;
+const ksuid_1 = __importDefault(require("ksuid"));
+exports.Model = {
+    Strategy: {
+        UIDPrefix: 'stg',
+        TYPE: 'Strategy',
+    },
+    Session: {
+        UIDPrefix: 'ssn',
+        TYPE: 'Session',
+    },
+};
+function generateStrategyId() {
+    return `${exports.Model.Strategy.UIDPrefix}_${ksuid_1.default.randomSync().string}`;
+}
+function generateSessionId() {
+    return `${exports.Model.Session.UIDPrefix}_${ksuid_1.default.randomSync().string}`;
+}

package/dist/cjs/authentication/utils.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=utils.test.d.ts.map

package/dist/cjs/authentication/utils.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.test.d.ts","sourceRoot":"","sources":["../../../src/authentication/utils.test.ts"],"names":[],"mappings":""}

package/dist/cjs/authentication/utils.test.js

@@ -0,0 +1,142 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const utils_js_1 = require("./utils.js");
+(0, vitest_1.describe)('Authentication Utils', () => {
+    (0, vitest_1.describe)('Model constants', () => {
+        (0, vitest_1.test)('should have correct Strategy model properties', () => {
+            (0, vitest_1.expect)(utils_js_1.Model.Strategy.UIDPrefix).toBe('stg');
+            (0, vitest_1.expect)(utils_js_1.Model.Strategy.TYPE).toBe('Strategy');
+        });
+        (0, vitest_1.test)('should have correct Session model properties', () => {
+            (0, vitest_1.expect)(utils_js_1.Model.Session.UIDPrefix).toBe('ssn');
+            (0, vitest_1.expect)(utils_js_1.Model.Session.TYPE).toBe('Session');
+        });
+        (0, vitest_1.test)('should be readonly (const assertion)', () => {
+            // Test that the Model object is properly typed as const
+            (0, vitest_1.expect)(typeof utils_js_1.Model).toBe('object');
+            (0, vitest_1.expect)(Object.isFrozen(utils_js_1.Model)).toBe(false); // const assertion doesn't freeze at runtime
+        });
+    });
+    (0, vitest_1.describe)('generateStrategyId', () => {
+        (0, vitest_1.test)('should generate ID with correct prefix', () => {
+            const id = (0, utils_js_1.generateStrategyId)();
+            (0, vitest_1.expect)(id).toMatch(/^stg_/);
+        });
+        (0, vitest_1.test)('should generate ID with correct format', () => {
+            const id = (0, utils_js_1.generateStrategyId)();
+            // Should match: prefix + underscore + KSUID (27 characters)
+            (0, vitest_1.expect)(id).toMatch(/^stg_[A-Za-z0-9]{27}$/);
+        });
+        (0, vitest_1.test)('should generate unique IDs on multiple calls', () => {
+            const id1 = (0, utils_js_1.generateStrategyId)();
+            const id2 = (0, utils_js_1.generateStrategyId)();
+            const id3 = (0, utils_js_1.generateStrategyId)();
+            (0, vitest_1.expect)(id1).not.toBe(id2);
+            (0, vitest_1.expect)(id2).not.toBe(id3);
+            (0, vitest_1.expect)(id1).not.toBe(id3);
+        });
+        (0, vitest_1.test)('should generate IDs with correct total length', () => {
+            const id = (0, utils_js_1.generateStrategyId)();
+            // prefix (3) + underscore (1) + KSUID (27) = 31 characters
+            (0, vitest_1.expect)(id.length).toBe(31);
+        });
+        (0, vitest_1.test)('should generate IDs that start with strategy prefix', () => {
+            const ids = Array.from({ length: 10 }, () => (0, utils_js_1.generateStrategyId)());
+            for (const id of ids) {
+                (0, vitest_1.expect)(id.startsWith('stg_')).toBe(true);
+            }
+        });
+        (0, vitest_1.test)('should generate KSUID-compatible format', () => {
+            const id = (0, utils_js_1.generateStrategyId)();
+            const ksuidPart = id.substring(4); // Remove 'stg_'
+            // KSUID should be 27 characters of base62
+            (0, vitest_1.expect)(ksuidPart.length).toBe(27);
+            (0, vitest_1.expect)(ksuidPart).toMatch(/^[A-Za-z0-9]{27}$/);
+        });
+        (0, vitest_1.test)('should be deterministic in format but random in content', () => {
+            const ids = Array.from({ length: 100 }, () => (0, utils_js_1.generateStrategyId)());
+            // All should have same format
+            for (const id of ids) {
+                (0, vitest_1.expect)(id).toMatch(/^stg_[A-Za-z0-9]{27}$/);
+            }
+            // All should be unique
+            const uniqueIds = new Set(ids);
+            (0, vitest_1.expect)(uniqueIds.size).toBe(100);
+        });
+    });
+    (0, vitest_1.describe)('generateSessionId', () => {
+        (0, vitest_1.test)('should generate ID with correct prefix', () => {
+            const id = (0, utils_js_1.generateSessionId)();
+            (0, vitest_1.expect)(id).toMatch(/^ssn_/);
+        });
+        (0, vitest_1.test)('should generate ID with correct format', () => {
+            const id = (0, utils_js_1.generateSessionId)();
+            // Should match: prefix + underscore + KSUID (27 characters)
+            (0, vitest_1.expect)(id).toMatch(/^ssn_[A-Za-z0-9]{27}$/);
+        });
+        (0, vitest_1.test)('should generate unique IDs on multiple calls', () => {
+            const id1 = (0, utils_js_1.generateSessionId)();
+            const id2 = (0, utils_js_1.generateSessionId)();
+            const id3 = (0, utils_js_1.generateSessionId)();
+            (0, vitest_1.expect)(id1).not.toBe(id2);
+            (0, vitest_1.expect)(id2).not.toBe(id3);
+            (0, vitest_1.expect)(id1).not.toBe(id3);
+        });
+        (0, vitest_1.test)('should generate IDs with correct total length', () => {
+            const id = (0, utils_js_1.generateSessionId)();
+            // prefix (3) + underscore (1) + KSUID (27) = 31 characters
+            (0, vitest_1.expect)(id.length).toBe(31);
+        });
+        (0, vitest_1.test)('should generate IDs that start with session prefix', () => {
+            const ids = Array.from({ length: 10 }, () => (0, utils_js_1.generateSessionId)());
+            for (const id of ids) {
+                (0, vitest_1.expect)(id.startsWith('ssn_')).toBe(true);
+            }
+        });
+        (0, vitest_1.test)('should generate KSUID-compatible format', () => {
+            const id = (0, utils_js_1.generateSessionId)();
+            const ksuidPart = id.substring(4); // Remove 'ssn_'
+            // KSUID should be 27 characters of base62
+            (0, vitest_1.expect)(ksuidPart.length).toBe(27);
+            (0, vitest_1.expect)(ksuidPart).toMatch(/^[A-Za-z0-9]{27}$/);
+        });
+        (0, vitest_1.test)('should be deterministic in format but random in content', () => {
+            const ids = Array.from({ length: 100 }, () => (0, utils_js_1.generateSessionId)());
+            // All should have same format
+            for (const id of ids) {
+                (0, vitest_1.expect)(id).toMatch(/^ssn_[A-Za-z0-9]{27}$/);
+            }
+            // All should be unique
+            const uniqueIds = new Set(ids);
+            (0, vitest_1.expect)(uniqueIds.size).toBe(100);
+        });
+    });
+    (0, vitest_1.describe)('ID generation comparison', () => {
+        (0, vitest_1.test)('should generate different formats for strategy vs session', () => {
+            const strategyId = (0, utils_js_1.generateStrategyId)();
+            const sessionId = (0, utils_js_1.generateSessionId)();
+            (0, vitest_1.expect)(strategyId.startsWith('stg_')).toBe(true);
+            (0, vitest_1.expect)(sessionId.startsWith('ssn_')).toBe(true);
+            (0, vitest_1.expect)(strategyId).not.toBe(sessionId);
+        });
+        (0, vitest_1.test)('should maintain format consistency across generators', () => {
+            const strategyIds = Array.from({ length: 10 }, () => (0, utils_js_1.generateStrategyId)());
+            const sessionIds = Array.from({ length: 10 }, () => (0, utils_js_1.generateSessionId)());
+            // All strategy IDs should have same prefix
+            for (const id of strategyIds) {
+                (0, vitest_1.expect)(id.startsWith('stg_')).toBe(true);
+                (0, vitest_1.expect)(id.length).toBe(31);
+            }
+            // All session IDs should have same prefix
+            for (const id of sessionIds) {
+                (0, vitest_1.expect)(id.startsWith('ssn_')).toBe(true);
+                (0, vitest_1.expect)(id.length).toBe(31);
+            }
+            // No overlap between the two sets
+            const allIds = [...strategyIds, ...sessionIds];
+            const uniqueIds = new Set(allIds);
+            (0, vitest_1.expect)(uniqueIds.size).toBe(20);
+        });
+    });
+});

package/dist/cjs/authorization/index.d.ts

@@ -2,5 +2,5 @@ export * from './permissions/resources.js';
 export * from './permissions/schema.js';
 export * from './roles/resources.js';
 export * from './roles/schema.js';
-export * from './utils.js';
+export * from './schema.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/cjs/authorization/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/authorization/index.ts"],"names":[],"mappings":"AACA,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AAGxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAElC,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/authorization/index.ts"],"names":[],"mappings":"AACA,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AAGxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAElC,cAAc,aAAa,CAAC"}

package/dist/cjs/authorization/index.js

@@ -20,4 +20,4 @@ __exportStar(require("./permissions/schema.js"), exports);
 // Roles
 __exportStar(require("./roles/resources.js"), exports);
 __exportStar(require("./roles/schema.js"), exports);
-__exportStar(require("./utils.js"), exports);
+__exportStar(require("./schema.js"), exports);

package/dist/cjs/authorization/permissions/resources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../../../src/authorization/permissions/resources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAWpE,OAAO,EACL,KAAK,oBAAoB,EAE1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EACL,KAAK,qBAAqB,EAE1B,KAAK,UAAU,EAEf,KAAK,qBAAqB,EAE3B,MAAM,aAAa,CAAC;AAIrB,qBAAa,mBAAmB;IACX,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,aAAa;IAE3D,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM;IAQ9B,SAAS,CACd,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAIrC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAIxC,UAAU,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC;IAI5D,UAAU,CACf,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,UAAU,CAAC;IAIf,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;CAGnD;AAED,wBAAsB,eAAe,CACnC,QAAQ,EAAE,aAAa,EACvB,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAW3C;AAED,wBAAsB,aAAa,CACjC,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,UAAU,CAAC,CASrB;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,aAAa,EACvB,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,UAAU,CAAC,CAYrB;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,UAAU,CAAC,CAYrB;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,UAAU,CAAC,CASrB"}
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../../../src/authorization/permissions/resources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAQpE,OAAO,EACL,KAAK,oBAAoB,EAE1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EACL,KAAK,qBAAqB,EAE1B,KAAK,UAAU,EAEf,KAAK,qBAAqB,EAE3B,MAAM,aAAa,CAAC;AAIrB,qBAAa,mBAAmB;IACX,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,aAAa;IAE3D,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM;IAQ9B,SAAS,CACd,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAIrC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAIxC,UAAU,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC;IAI5D,UAAU,CACf,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,UAAU,CAAC;IAIf,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;CAGnD;AAED,wBAAsB,eAAe,CACnC,QAAQ,EAAE,aAAa,EACvB,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAS3C;AAED,wBAAsB,aAAa,CACjC,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,UAAU,CAAC,CAOrB;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,aAAa,EACvB,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,UAAU,CAAC,CAQrB;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,UAAU,CAAC,CAQrB;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,UAAU,CAAC,CAOrB"}

package/dist/cjs/authorization/permissions/resources.js

@@ -41,17 +41,17 @@ class PermissionResources {
 exports.PermissionResources = PermissionResources;
 async function listPermissions(instance, pagination) {
     const url = (0, utils_js_1.addPaginationToURL)(new URL(PermissionResources.buildPath(), instance.config.host), pagination);
-    return (0, utils_js_1.parseEgressSchema)((0, collection_js_1.PaginationCollectionSchema)(schema_js_1.PermissionSchema)(await (0, operations_js_1.getItemWithAuthorization)(url, instance.authorizer)));
+    return (0, collection_js_1.PaginationCollectionSchema)(schema_js_1.PermissionSchema).parse(await (0, operations_js_1.getItemWithAuthorization)(url, instance.authorizer));
 }
 async function getPermission(instance, id) {
-    return (0, utils_js_1.parseEgressSchema)((0, schema_js_1.PermissionSchema)(await (0, operations_js_1.getItemWithAuthorization)(new URL(PermissionResources.buildPath(id), instance.config.host), instance.authorizer)));
+    return schema_js_1.PermissionSchema.parse(await (0, operations_js_1.getItemWithAuthorization)(new URL(PermissionResources.buildPath(id), instance.config.host), instance.authorizer));
 }
 async function insertPermission(instance, item) {
-    return (0, utils_js_1.parseEgressSchema)((0, schema_js_1.PermissionSchema)(await (0, operations_js_1.insertItemWithAuthorization)(new URL(PermissionResources.buildPath(), instance.config.host), instance.authorizer, (0, utils_js_1.parseEgressSchema)(schema_js_1.InsertPermissionPayloadSchema.onUndeclaredKey('delete')(item)))));
+    return schema_js_1.PermissionSchema.parse(await (0, operations_js_1.postItemWithAuthorization)(new URL(PermissionResources.buildPath(), instance.config.host), instance.authorizer, schema_js_1.InsertPermissionPayloadSchema.parse(item)));
 }
 async function updatePermission(instance, id, item) {
-    return (0, utils_js_1.parseEgressSchema)((0, schema_js_1.PermissionSchema)(await (0, operations_js_1.updateItemWithAuthorization)(new URL(PermissionResources.buildPath(id), instance.config.host), instance.authorizer, (0, utils_js_1.parseEgressSchema)(schema_js_1.UpdatePermissionPayloadSchema.onUndeclaredKey('delete')(item)))));
+    return schema_js_1.PermissionSchema.parse(await (0, operations_js_1.patchItemWithAuthorization)(new URL(PermissionResources.buildPath(id), instance.config.host), instance.authorizer, schema_js_1.UpdatePermissionPayloadSchema.parse(item)));
 }
 async function deletePermission(instance, id) {
-    return (0, utils_js_1.parseEgressSchema)((0, schema_js_1.PermissionSchema)(await (0, operations_js_1.deleteItemWithAuthorization)(new URL(PermissionResources.buildPath(id), instance.config.host), instance.authorizer)));
+    return schema_js_1.PermissionSchema.parse(await (0, operations_js_1.deleteItemWithAuthorization)(new URL(PermissionResources.buildPath(id), instance.config.host), instance.authorizer));
 }

package/dist/cjs/authorization/permissions/schema.d.ts

@@ -1,104 +1,107 @@
+import * as z from 'zod/v4';
 export declare const PermissionStatus: {
     readonly ENABLED: "enabled";
     readonly DISABLED: "disabled";
 };
 export type AnyPermissionStatus = (typeof PermissionStatus)[keyof typeof PermissionStatus];
-export declare const PermissionIdSchema: import("arktype/out/methods/string.js").StringType<string, {}>;
-export declare const PermissionIdPropertySchema: import("arktype/out/methods/object.js").ObjectType<{
-    id: string;
-}, {}>;
-export type PermissionIdProperty = typeof PermissionIdPropertySchema.inferOut;
-export declare const PermissionAssociationsSchema: import("arktype/out/methods/object.js").ObjectType<{
-    apps?: string[] | undefined;
-    roles?: string[] | undefined;
-}, {}>;
-export type PermissionAssociations = typeof PermissionAssociationsSchema.inferOut;
-export declare const PermissionSchema: import("arktype/out/methods/object.js").ObjectType<{
-    id: string;
-    name: string;
-    status: "enabled" | "disabled";
-    description?: string | undefined;
-    createdAt: Date | ((In: string) => import("arktype/out/attributes.js").To<Date>);
-    updatedAt: Date | ((In: string) => import("arktype/out/attributes.js").To<Date>);
-    apps?: {
-        ids?: string[] | undefined;
-        count?: number | undefined;
-    } | undefined;
-    roles?: {
-        ids?: string[] | undefined;
-        count?: number | undefined;
-    } | undefined;
-    deletedAt?: Date | ((In: string) => import("arktype/out/attributes.js").To<Date>) | undefined;
-    deactivatedAt?: Date | ((In: string) => import("arktype/out/attributes.js").To<Date>) | undefined;
-    metadata: (In: import("arktype/out/attributes.js").Default<unknown, Map<string, string | number | boolean>>) => import("arktype").Out<Map<string, string | number | boolean> | Map<string, any>>;
-}, {}>;
-export type PermissionProperties = typeof PermissionSchema.inferIn;
-export type Permission = typeof PermissionSchema.inferOut;
-export declare const PermissionPayloadSchema: import("arktype/out/methods/object.js").ObjectType<{
-    id: string;
-    name: string;
-    status: "enabled" | "disabled";
-    description?: string | undefined;
-    createdAt: (In: string | Date) => import("arktype").Out<string>;
-    updatedAt: (In: string | Date) => import("arktype").Out<string>;
-    apps?: {
-        ids?: string[] | undefined;
-        count?: number | undefined;
-    } | undefined;
-    roles?: {
-        ids?: string[] | undefined;
-        count?: number | undefined;
-    } | undefined;
-    deletedAt?: ((In: string | Date | undefined) => import("arktype").Out<string | undefined>) | undefined;
-    deactivatedAt?: ((In: string | Date | undefined) => import("arktype").Out<string | undefined>) | undefined;
-    metadata?: ((In: {
-        [x: string]: string | number | boolean;
-    } | Map<string, string | number | boolean> | null | undefined) => import("arktype").Out<{
-        [x: string]: string | number | boolean;
-    } | undefined>) | undefined;
-}, {}>;
-export type PermissionPayload = typeof PermissionPayloadSchema.inferOut;
+export declare const PermissionIdPropertySchema: z.ZodObject<{
+    id: z.ZodString;
+}, z.core.$strip>;
+export type PermissionIdProperty = z.output<typeof PermissionIdPropertySchema>;
+export declare const PermissionAssociationsSchema: z.ZodObject<{
+    apps: z.ZodOptional<z.ZodUnion<[z.ZodUndefined, z.ZodArray<z.ZodString>]>>;
+    roles: z.ZodOptional<z.ZodUnion<readonly [z.ZodUndefined, z.ZodArray<z.ZodString>]>>;
+}, z.core.$strip>;
+export type PermissionAssociations = z.output<typeof PermissionAssociationsSchema>;
+export declare const PermissionSchema: z.ZodObject<{
+    metadata: z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Map<string, string | number | boolean>, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>;
+    deactivatedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    deletedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    updatedAt: z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>;
+    createdAt: z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>;
+    name: z.ZodString;
+    status: z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>;
+    description: z.ZodOptional<z.ZodString>;
+    apps: z.ZodOptional<z.ZodObject<{
+        ids: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        count: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    roles: z.ZodOptional<z.ZodObject<{
+        ids: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        count: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    id: z.ZodString;
+}, z.core.$strip>;
+export type PermissionProperties = z.input<typeof PermissionSchema>;
+export type Permission = z.output<typeof PermissionSchema>;
+export declare const PermissionPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    deactivatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    deletedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    updatedAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+    createdAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+    name: z.ZodString;
+    status: z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>;
+    description: z.ZodOptional<z.ZodString>;
+    apps: z.ZodOptional<z.ZodObject<{
+        ids: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        count: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    roles: z.ZodOptional<z.ZodObject<{
+        ids: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        count: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    id: z.ZodString;
+}, z.core.$strip>;
+export type PermissionPayload = z.output<typeof PermissionPayloadSchema>;
 /**
  * Insert
  */
-export declare const InsertPermissionPayloadSchema: import("arktype/out/methods/object.js").ObjectType<{
-    id: import("arktype/out/attributes.js").Default<string, string>;
-    name: string;
-    status: import("arktype/out/attributes.js").Default<"enabled" | "disabled", "enabled">;
-    description?: string | undefined;
-    apps?: string[] | undefined;
-    roles?: string[] | undefined;
-    metadata?: ((In: {
-        [x: string]: string | number | boolean;
-    } | Map<string, string | number | boolean> | null | undefined) => import("arktype").Out<{
-        [x: string]: string | number | boolean;
-    } | null>) | undefined;
-}, {}>;
-export type InsertPermissionInput = typeof InsertPermissionPayloadSchema.inferIn;
-export type InsertPermissionPayload = typeof InsertPermissionPayloadSchema.inferOut;
+export declare const InsertPermissionPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | null | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    apps: z.ZodOptional<z.ZodUnion<[z.ZodUndefined, z.ZodArray<z.ZodString>]>>;
+    roles: z.ZodOptional<z.ZodUnion<readonly [z.ZodUndefined, z.ZodArray<z.ZodString>]>>;
+    id: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+    status: z.ZodDefault<z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>>;
+    description: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type InsertPermissionInput = z.input<typeof InsertPermissionPayloadSchema>;
+export type InsertPermissionPayload = z.output<typeof InsertPermissionPayloadSchema>;
 /**
  * Update
  */
-export declare const UpdatePermissionPayloadSchema: import("arktype/out/methods/object.js").ObjectType<{
-    name?: string | undefined;
-    status?: "enabled" | "disabled" | undefined;
-    description?: string | undefined;
-    metadata?: ((In: {
-        [x: string]: string | number | boolean;
-    } | Map<string, string | number | boolean> | null | undefined) => import("arktype").Out<{
-        [x: string]: string | number | boolean;
-    } | null>) | undefined;
-}, {}>;
-export type UpdatePermissionInput = typeof UpdatePermissionPayloadSchema.inferIn;
-export type UpdatePermissionPayload = typeof UpdatePermissionPayloadSchema.inferOut;
+export declare const UpdatePermissionPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | null | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    name: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>>;
+    description: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type UpdatePermissionInput = z.input<typeof UpdatePermissionPayloadSchema>;
+export type UpdatePermissionPayload = z.output<typeof UpdatePermissionPayloadSchema>;
 /**
  * Association
  */
-export declare const PermissionAssociationReferenceSchema: import("arktype/out/methods/object.js").ObjectType<{
-    id: string;
-    name: string;
-    status: import("arktype/out/attributes.js").Default<"enabled" | "disabled", "disabled">;
-    model: "Permission";
-}, {}>;
-export type PermissionAssociationReference = typeof PermissionAssociationReferenceSchema.inferOut;
+export declare const PermissionAssociationReferenceSchema: z.ZodObject<{
+    name: z.ZodString;
+    status: z.ZodDefault<z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>>;
+    model: z.ZodLiteral<"Permission">;
+    id: z.ZodString;
+}, z.core.$strip>;
+export type PermissionAssociationReference = z.output<typeof PermissionAssociationReferenceSchema>;
 //# sourceMappingURL=schema.d.ts.map

package/dist/cjs/authorization/permissions/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/authorization/permissions/schema.ts"],"names":[],"mappings":"AAeA,eAAO,MAAM,gBAAgB;;;CAGnB,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAC7B,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,OAAO,gBAAgB,CAAC,CAAC;AAE3D,eAAO,MAAM,kBAAkB,gEAAc,CAAC;AAE9C,eAAO,MAAM,0BAA0B;;MAErC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,OAAO,0BAA0B,CAAC,QAAQ,CAAC;AAS9E,eAAO,MAAM,4BAA4B;;;MAGvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAChC,OAAO,4BAA4B,CAAC,QAAQ,CAAC;AAQ/C,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;MAOI,CAAC;AAClC,MAAM,MAAM,oBAAoB,GAAG,OAAO,gBAAgB,CAAC,OAAO,CAAC;AACnE,MAAM,MAAM,UAAU,GAAG,OAAO,gBAAgB,CAAC,QAAQ,CAAC;AAE1D,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;MAOC,CAAC;AACtC,MAAM,MAAM,iBAAiB,GAAG,OAAO,uBAAuB,CAAC,QAAQ,CAAC;AAExE;;GAEG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;MAOC,CAAC;AAC5C,MAAM,MAAM,qBAAqB,GAC/B,OAAO,6BAA6B,CAAC,OAAO,CAAC;AAC/C,MAAM,MAAM,uBAAuB,GACjC,OAAO,6BAA6B,CAAC,QAAQ,CAAC;AAEhD;;GAEG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;MAIC,CAAC;AAC5C,MAAM,MAAM,qBAAqB,GAC/B,OAAO,6BAA6B,CAAC,OAAO,CAAC;AAC/C,MAAM,MAAM,uBAAuB,GACjC,OAAO,6BAA6B,CAAC,QAAQ,CAAC;AAEhD;;GAEG;AACH,eAAO,MAAM,oCAAoC;;;;;MAK7C,CAAC;AACL,MAAM,MAAM,8BAA8B,GACxC,OAAO,oCAAoC,CAAC,QAAQ,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/authorization/permissions/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAoB5B,eAAO,MAAM,gBAAgB;;;CAGnB,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAC7B,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,OAAO,gBAAgB,CAAC,CAAC;AAE3D,eAAO,MAAM,0BAA0B;;iBAErC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAO/E,eAAO,MAAM,4BAA4B;;;iBAGvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAC3C,OAAO,4BAA4B,CACpC,CAAC;AAWF,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;iBAO3B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AACpE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE3D,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;iBAOlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEzE;;GAEG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;;iBAOxC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CACzC,OAAO,6BAA6B,CACrC,CAAC;AACF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAC5C,OAAO,6BAA6B,CACrC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;iBAKxC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CACzC,OAAO,6BAA6B,CACrC,CAAC;AACF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAC5C,OAAO,6BAA6B,CACrC,CAAC;AAEF;;GAEG;AAEH,eAAO,MAAM,oCAAoC;;;;;;;;iBAK/C,CAAC;AACH,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CACnD,OAAO,oCAAoC,CAC5C,CAAC"}