@go-mondo/identity-sdk 0.0.2-beta.8 → 0.0.2-beta.80

package/dist/cjs/customer/users/utils.d.ts

@@ -1,6 +1,7 @@
+import type { z } from 'zod';
 import type { EmailOrPhonePropertiesSchema, UpdateUserNamePropertiesSchema } from './schema.js';
-type UserName = typeof UpdateUserNamePropertiesSchema.inferIn;
-type UserEmailOrPhone = typeof EmailOrPhonePropertiesSchema.inferIn;
+type UserName = z.input<typeof UpdateUserNamePropertiesSchema>;
+type UserEmailOrPhone = z.input<typeof EmailOrPhonePropertiesSchema>;
 type User = UserName & UserEmailOrPhone;
 export declare function getInitials(name: string | undefined): string | undefined;
 export declare function buildName(item?: Pick<UserName, 'givenName' | 'familyName'>): string;

package/dist/cjs/customer/users/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../src/customer/users/utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,4BAA4B,EAC5B,8BAA8B,EAC/B,MAAM,aAAa,CAAC;AAErB,KAAK,QAAQ,GAAG,OAAO,8BAA8B,CAAC,OAAO,CAAC;AAC9D,KAAK,gBAAgB,GAAG,OAAO,4BAA4B,CAAC,OAAO,CAAC;AAEpE,KAAK,IAAI,GAAG,QAAQ,GAAG,gBAAgB,CAAC;AAExC,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAUxE;AAED,wBAAgB,SAAS,CACvB,IAAI,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,GAAG,YAAY,CAAC,GAChD,MAAM,CAER;AAED,wBAAgB,eAAe,CAC7B,IAAI,CAAC,EAAE,IAAI,CACT,QAAQ,EACN,WAAW,GACX,YAAY,GACZ,YAAY,GACZ,iBAAiB,GACjB,iBAAiB,CACpB,EACD,iBAAiB,UAAQ,GACxB,MAAM,CAUR;AAED,wBAAgB,cAAc,CAC5B,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,GAAG,YAAY,GAAG,OAAO,CAAC,GACtD,MAAM,CAER"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../src/customer/users/utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE7B,OAAO,KAAK,EACV,4BAA4B,EAC5B,8BAA8B,EAC/B,MAAM,aAAa,CAAC;AAErB,KAAK,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAC/D,KAAK,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAErE,KAAK,IAAI,GAAG,QAAQ,GAAG,gBAAgB,CAAC;AAExC,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAUxE;AAED,wBAAgB,SAAS,CACvB,IAAI,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,GAAG,YAAY,CAAC,GAChD,MAAM,CAER;AAED,wBAAgB,eAAe,CAC7B,IAAI,CAAC,EAAE,IAAI,CACT,QAAQ,EACN,WAAW,GACX,YAAY,GACZ,YAAY,GACZ,iBAAiB,GACjB,iBAAiB,CACpB,EACD,iBAAiB,UAAQ,GACxB,MAAM,CAUR;AAED,wBAAgB,cAAc,CAC5B,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,GAAG,YAAY,GAAG,OAAO,CAAC,GACtD,MAAM,CAER"}

package/dist/cjs/customer/users/utils.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=utils.test.d.ts.map

package/dist/cjs/customer/users/utils.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.test.d.ts","sourceRoot":"","sources":["../../../../src/customer/users/utils.test.ts"],"names":[],"mappings":""}

package/dist/cjs/customer/users/utils.test.js

@@ -0,0 +1,145 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const utils_js_1 = require("./utils.js");
+(0, vitest_1.describe)('Customer Users - Utils', () => {
+    (0, vitest_1.describe)('getInitials', () => {
+        (0, vitest_1.test)('should return initials for single name', () => {
+            (0, vitest_1.expect)((0, utils_js_1.getInitials)('John')).toBe('J');
+        });
+        (0, vitest_1.test)('should return initials for full name', () => {
+            (0, vitest_1.expect)((0, utils_js_1.getInitials)('John Doe')).toBe('JD');
+        });
+        (0, vitest_1.test)('should return initials for multiple names', () => {
+            (0, vitest_1.expect)((0, utils_js_1.getInitials)('John Michael Doe')).toBe('JMD');
+        });
+        (0, vitest_1.test)('should handle names with extra spaces', () => {
+            (0, vitest_1.expect)((0, utils_js_1.getInitials)('John  Doe')).toBe('JD');
+            (0, vitest_1.expect)((0, utils_js_1.getInitials)(' John Doe ')).toBe('JD');
+        });
+        (0, vitest_1.test)('should return undefined for empty string', () => {
+            (0, vitest_1.expect)((0, utils_js_1.getInitials)('')).toBeUndefined();
+        });
+        (0, vitest_1.test)('should return undefined for undefined input', () => {
+            (0, vitest_1.expect)((0, utils_js_1.getInitials)(undefined)).toBeUndefined();
+        });
+        (0, vitest_1.test)('should handle single character names', () => {
+            (0, vitest_1.expect)((0, utils_js_1.getInitials)('A B C')).toBe('ABC');
+        });
+        (0, vitest_1.test)('should filter out empty parts', () => {
+            (0, vitest_1.expect)((0, utils_js_1.getInitials)('John  Doe')).toBe('JD');
+        });
+    });
+    (0, vitest_1.describe)('buildName', () => {
+        (0, vitest_1.test)('should build name from givenName and familyName', () => {
+            const item = { givenName: 'John', familyName: 'Doe' };
+            (0, vitest_1.expect)((0, utils_js_1.buildName)(item)).toBe('John Doe');
+        });
+        (0, vitest_1.test)('should handle only givenName', () => {
+            const item = { givenName: 'John' };
+            (0, vitest_1.expect)((0, utils_js_1.buildName)(item)).toBe('John');
+        });
+        (0, vitest_1.test)('should handle only familyName', () => {
+            const item = { familyName: 'Doe' };
+            (0, vitest_1.expect)((0, utils_js_1.buildName)(item)).toBe('Doe');
+        });
+        (0, vitest_1.test)('should return empty string for empty object', () => {
+            (0, vitest_1.expect)((0, utils_js_1.buildName)({})).toBe('');
+        });
+        (0, vitest_1.test)('should return empty string for undefined', () => {
+            (0, vitest_1.expect)((0, utils_js_1.buildName)(undefined)).toBe('');
+        });
+        (0, vitest_1.test)('should filter out empty strings', () => {
+            const item = { givenName: 'John', familyName: '' };
+            (0, vitest_1.expect)((0, utils_js_1.buildName)(item)).toBe('John');
+        });
+    });
+    (0, vitest_1.describe)('buildProperName', () => {
+        (0, vitest_1.test)('should build proper name with all components', () => {
+            const item = {
+                honorificPrefix: 'Dr.',
+                givenName: 'John',
+                middleName: 'Michael',
+                familyName: 'Doe',
+                honorificSuffix: 'Jr.',
+            };
+            (0, vitest_1.expect)((0, utils_js_1.buildProperName)(item, true)).toBe('Dr. John Michael Doe Jr.');
+        });
+        (0, vitest_1.test)('should exclude middle name by default', () => {
+            const item = {
+                honorificPrefix: 'Dr.',
+                givenName: 'John',
+                middleName: 'Michael',
+                familyName: 'Doe',
+                honorificSuffix: 'Jr.',
+            };
+            (0, vitest_1.expect)((0, utils_js_1.buildProperName)(item)).toBe('Dr. John Doe Jr.');
+        });
+        (0, vitest_1.test)('should handle missing components', () => {
+            const item = {
+                givenName: 'John',
+                familyName: 'Doe',
+            };
+            (0, vitest_1.expect)((0, utils_js_1.buildProperName)(item)).toBe('John Doe');
+        });
+        (0, vitest_1.test)('should handle only prefix and suffix', () => {
+            const item = {
+                honorificPrefix: 'Dr.',
+                honorificSuffix: 'PhD',
+            };
+            (0, vitest_1.expect)((0, utils_js_1.buildProperName)(item)).toBe('Dr. PhD');
+        });
+        (0, vitest_1.test)('should return empty string for empty object', () => {
+            (0, vitest_1.expect)((0, utils_js_1.buildProperName)({})).toBe('');
+        });
+        (0, vitest_1.test)('should return empty string for undefined', () => {
+            (0, vitest_1.expect)((0, utils_js_1.buildProperName)(undefined)).toBe('');
+        });
+        (0, vitest_1.test)('should include middle name when explicitly requested', () => {
+            const item = {
+                givenName: 'John',
+                middleName: 'Michael',
+                familyName: 'Doe',
+            };
+            (0, vitest_1.expect)((0, utils_js_1.buildProperName)(item, true)).toBe('John Michael Doe');
+            (0, vitest_1.expect)((0, utils_js_1.buildProperName)(item, false)).toBe('John Doe');
+        });
+    });
+    (0, vitest_1.describe)('buildReference', () => {
+        (0, vitest_1.test)('should prioritize name over email', () => {
+            const item = {
+                givenName: 'John',
+                familyName: 'Doe',
+                email: 'john@example.com',
+            };
+            (0, vitest_1.expect)((0, utils_js_1.buildReference)(item)).toBe('John Doe');
+        });
+        (0, vitest_1.test)('should fallback to email when no name', () => {
+            const item = {
+                email: 'john@example.com',
+            };
+            (0, vitest_1.expect)((0, utils_js_1.buildReference)(item)).toBe('john@example.com');
+        });
+        (0, vitest_1.test)('should return empty string when no name or email', () => {
+            const item = {};
+            (0, vitest_1.expect)((0, utils_js_1.buildReference)(item)).toBe('');
+        });
+        (0, vitest_1.test)('should return empty string for undefined', () => {
+            (0, vitest_1.expect)((0, utils_js_1.buildReference)(undefined)).toBe('');
+        });
+        (0, vitest_1.test)('should use partial name if available', () => {
+            const item = {
+                givenName: 'John',
+                email: 'john@example.com',
+            };
+            (0, vitest_1.expect)((0, utils_js_1.buildReference)(item)).toBe('John');
+        });
+        (0, vitest_1.test)('should prefer family name over email if no given name', () => {
+            const item = {
+                familyName: 'Doe',
+                email: 'john@example.com',
+            };
+            (0, vitest_1.expect)((0, utils_js_1.buildReference)(item)).toBe('Doe');
+        });
+    });
+});

package/dist/cjs/identity/schema.d.ts

@@ -1,7 +1,11 @@
+import * as z from 'zod/v4';
 export declare const IdentityIdentifier: {
     readonly EMAIL: "email";
     readonly PHONE_NUMBER: "phoneNumber";
 };
 export type AnyIdentityIdentifier = (typeof IdentityIdentifier)[keyof typeof IdentityIdentifier];
-export declare const IdentityIdentifierSchema: import("arktype/out/methods/string").StringType<"email" | "phoneNumber", {}>;
+export declare const IdentityIdentifierSchema: z.ZodEnum<{
+    email: "email";
+    phoneNumber: "phoneNumber";
+}>;
 //# sourceMappingURL=schema.d.ts.map

package/dist/cjs/identity/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/identity/schema.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,kBAAkB;;;CAGrB,CAAC;AAEX,MAAM,MAAM,qBAAqB,GAC/B,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAC;AAE/D,eAAO,MAAM,wBAAwB,8EAGpC,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/identity/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,eAAO,MAAM,kBAAkB;;;CAGrB,CAAC;AAEX,MAAM,MAAM,qBAAqB,GAC/B,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAC;AAE/D,eAAO,MAAM,wBAAwB;;;EAG1B,CAAC"}

package/dist/cjs/identity/schema.js

@@ -1,9 +1,45 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.IdentityIdentifierSchema = exports.IdentityIdentifier = void 0;
-const arktype_1 = require("arktype");
+const z = __importStar(require("zod/v4"));
 exports.IdentityIdentifier = {
     EMAIL: 'email',
     PHONE_NUMBER: 'phoneNumber',
 };
-exports.IdentityIdentifierSchema = arktype_1.type.enumerated(exports.IdentityIdentifier.EMAIL, exports.IdentityIdentifier.PHONE_NUMBER);
+exports.IdentityIdentifierSchema = z.enum([
+    exports.IdentityIdentifier.EMAIL,
+    exports.IdentityIdentifier.PHONE_NUMBER,
+]);

package/dist/cjs/identity/schema.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=schema.test.d.ts.map

package/dist/cjs/identity/schema.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.test.d.ts","sourceRoot":"","sources":["../../../src/identity/schema.test.ts"],"names":[],"mappings":""}

package/dist/cjs/identity/schema.test.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const schema_js_1 = require("./schema.js");
+(0, vitest_1.describe)('Identity - Schema', () => {
+    (0, vitest_1.describe)('IdentityIdentifier constants', () => {
+        (0, vitest_1.test)('should have correct identifier values', () => {
+            (0, vitest_1.expect)(schema_js_1.IdentityIdentifier.EMAIL).toBe('email');
+            (0, vitest_1.expect)(schema_js_1.IdentityIdentifier.PHONE_NUMBER).toBe('phoneNumber');
+        });
+    });
+    (0, vitest_1.describe)('IdentityIdentifierSchema', () => {
+        (0, vitest_1.test)('should accept valid email identifier', () => {
+            const result = schema_js_1.IdentityIdentifierSchema.safeParse('email');
+            // Parse succeeds for valid data
+            (0, vitest_1.expect)(result.success).toBe(true);
+            if (result.success) {
+                (0, vitest_1.expect)(result.data).toBe('email');
+            }
+        });
+        (0, vitest_1.test)('should accept valid phone number identifier', () => {
+            const result = schema_js_1.IdentityIdentifierSchema.safeParse('phoneNumber');
+            // Parse succeeds for valid data
+            (0, vitest_1.expect)(result.success).toBe(true);
+            if (result.success) {
+                (0, vitest_1.expect)(result.data).toBe('phoneNumber');
+            }
+        });
+        (0, vitest_1.test)('should reject invalid identifiers', () => {
+            (0, vitest_1.expect)(schema_js_1.IdentityIdentifierSchema.safeParse('invalid').success).toBe(false);
+            (0, vitest_1.expect)(schema_js_1.IdentityIdentifierSchema.safeParse('username').success).toBe(false);
+            (0, vitest_1.expect)(schema_js_1.IdentityIdentifierSchema.safeParse('sms').success).toBe(false);
+        });
+        (0, vitest_1.test)('should reject non-string values', () => {
+            (0, vitest_1.expect)(schema_js_1.IdentityIdentifierSchema.safeParse(123).success).toBe(false);
+            (0, vitest_1.expect)(schema_js_1.IdentityIdentifierSchema.safeParse(null).success).toBe(false);
+            (0, vitest_1.expect)(schema_js_1.IdentityIdentifierSchema.safeParse(undefined).success).toBe(false);
+        });
+        (0, vitest_1.test)('should be case sensitive', () => {
+            (0, vitest_1.expect)(schema_js_1.IdentityIdentifierSchema.safeParse('EMAIL').success).toBe(false);
+            (0, vitest_1.expect)(schema_js_1.IdentityIdentifierSchema.safeParse('PHONE_NUMBER').success).toBe(false);
+            (0, vitest_1.expect)(schema_js_1.IdentityIdentifierSchema.safeParse('phonenumber').success).toBe(false);
+        });
+    });
+});

package/dist/cjs/oauth/authorize/schema/grants/authorization-code.d.ts

@@ -1,29 +1,35 @@
-export declare const AuthorizationCodeSchema: import("arktype/out/methods/object.js").ObjectType<{
-    response_type: "code";
-    client_id: string;
-    redirect_uri?: string | undefined;
-    scope?: string | undefined;
-    state?: string | undefined;
-    nonce?: string | undefined;
-    display?: "page" | "popup" | "touch" | "wap" | undefined;
-    prompt?: "none" | "login" | "consent" | "select_account" | undefined;
-    max_age?: number | undefined;
-    code_challenge_method?: "S256" | "plain" | undefined;
-    code_challenge?: string | undefined;
-    audience?: string | undefined;
-} | {
-    response_type: "code";
-    client_id: string;
-    redirect_uri?: string | undefined;
-    scope?: string | undefined;
-    state?: string | undefined;
-    nonce?: string | undefined;
-    display?: "page" | "popup" | "touch" | "wap" | undefined;
-    prompt?: "none" | "login" | "consent" | "select_account" | undefined;
-    max_age?: number | undefined;
-    code_challenge_method: "S256" | "plain";
-    code_challenge: string;
-    audience?: string | undefined;
-}, {}>;
-export type AuthorizationCodePayload = typeof AuthorizationCodeSchema.inferOut;
+import * as z from 'zod/v4';
+export declare const CodeChallengeSchema: z.ZodString;
+export declare const AuthorizationCodeGrantAuthorizationSchema: z.ZodObject<{
+    audience: z.ZodOptional<z.ZodString>;
+    device: z.ZodOptional<z.ZodString>;
+    code_challenge_method: z.ZodOptional<z.ZodEnum<{
+        S256: "S256";
+        plain: "plain";
+    }>>;
+    code_challenge: z.ZodOptional<z.ZodString>;
+    nonce: z.ZodOptional<z.ZodString>;
+    display: z.ZodOptional<z.ZodEnum<{
+        page: "page";
+        popup: "popup";
+        touch: "touch";
+        wap: "wap";
+    }>>;
+    prompt: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        login: "login";
+        consent: "consent";
+        select_account: "select_account";
+    }>>;
+    max_age: z.ZodOptional<z.ZodNumber>;
+    response_type: z.ZodEnum<{
+        code: "code";
+    }>;
+    client_id: z.ZodString;
+    redirect_uri: z.ZodOptional<z.ZodURL>;
+    scope: z.ZodOptional<z.ZodString>;
+    state: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type AuthorizationCodeGrantAuthorizationInput = z.input<typeof AuthorizationCodeGrantAuthorizationSchema>;
+export type AuthorizationCodeGrantAuthorization = z.output<typeof AuthorizationCodeGrantAuthorizationSchema>;
 //# sourceMappingURL=authorization-code.d.ts.map

package/dist/cjs/oauth/authorize/schema/grants/authorization-code.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-code.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/authorize/schema/grants/authorization-code.ts"],"names":[],"mappings":"AAwCA,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;MAEd,CAAC;AACvB,MAAM,MAAM,wBAAwB,GAAG,OAAO,uBAAuB,CAAC,QAAQ,CAAC"}
+{"version":3,"file":"authorization-code.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/authorize/schema/grants/authorization-code.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAmB5B,eAAO,MAAM,mBAAmB,aAKmC,CAAC;AAqCpE,eAAO,MAAM,yCAAyC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA2BlD,CAAC;AACL,MAAM,MAAM,wCAAwC,GAAG,CAAC,CAAC,KAAK,CAC5D,OAAO,yCAAyC,CACjD,CAAC;AACF,MAAM,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CACxD,OAAO,yCAAyC,CACjD,CAAC"}

package/dist/cjs/oauth/authorize/schema/grants/authorization-code.js

@@ -1,34 +1,108 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthorizationCodeSchema = void 0;
-const arktype_1 = require("arktype");
+exports.AuthorizationCodeGrantAuthorizationSchema = exports.CodeChallengeSchema = void 0;
+const z = __importStar(require("zod/v4"));
 const schema_js_1 = require("../../../../app/schema.js");
 const schema_js_2 = require("../../../common/schema.js");
+const common_js_1 = require("./common.js");
 /**
  * @see https://datatracker.ietf.org/doc/html/rfc6749#section-4.1.1
  * @see https://openid.net/specs/openid-connect-core-1_0.html#rfc.section.3.1.2.1
  */
-const ResponseTypeSchema = arktype_1.type.enumerated(schema_js_2.ResponseType.CODE);
-const PKCESchema = (0, arktype_1.type)({
-    code_challenge_method: schema_js_2.CodeChallengeMethodSchema.optional(),
-    code_challenge: (0, arktype_1.type)('string').optional(),
-}).or({
-    code_challenge_method: schema_js_2.CodeChallengeMethodSchema,
-    code_challenge: (0, arktype_1.type)('string'),
-});
-const OAuthSchema = (0, arktype_1.type)({
-    response_type: ResponseTypeSchema,
-    client_id: schema_js_1.AppIdSchema,
-    redirect_uri: (0, arktype_1.type)('string.url').optional(),
-    scope: (0, arktype_1.type)('string').optional(),
-    state: (0, arktype_1.type)('string').optional(),
+const ResponseTypeSchema = z.enum([schema_js_2.ResponseType.CODE]);
+exports.CodeChallengeSchema = z
+    .string()
+    .min(43, 'Code challenge must be at least 43 characters long.')
+    .max(128, 'Code challenge must be at most 128 characters long.')
+    .regex(/^[A-Za-z0-9\-_.~]+$/, 'Code challenge contains invalid characters.') // Base64url-encoded string
+    .describe('PKCE code challenge, derived from the code verifier.');
+// const PKCESchema = z.union([
+//   z.object({
+//     code_challenge_method: CodeChallengeMethodSchema.optional(),
+//     code_challenge: z.string().optional(),
+//   }),
+//   z.object({
+//     code_challenge_method: CodeChallengeMethodSchema,
+//     code_challenge: z.string().min(1),
+//   })
+// ]).refine((data) => {
+//   return (
+//     (data.code_challenge_method && data.code_challenge) ||
+//     (!data.code_challenge_method && !data.code_challenge)
+//   );
+// }, {
+//   message: 'code_challenge and code_challenge_method must both be present or both be absent',
+// });
+const OAuthSchema = z.object({
+    response_type: ResponseTypeSchema.describe('Must be set to "code" for Authorization Code flow.'),
+    client_id: schema_js_1.AppIdSchema.describe('The Client ID.'),
+    redirect_uri: z.url().optional().describe('The callback URL.'),
+    scope: schema_js_2.ScopeStringSchema.optional(),
+    state: z.string().min(1).optional().describe('Opaque value to prevent CSRF.'),
 });
-const OIDCSchema = (0, arktype_1.type)({
-    nonce: (0, arktype_1.type)('string').optional(),
+const OIDCSchema = z.object({
+    nonce: z.string().optional(),
     display: schema_js_2.AuthorizationDisplaySchema.optional(),
     prompt: schema_js_2.AuthorizationPromptSchema.optional(),
-    max_age: (0, arktype_1.type)('number').optional(),
+    max_age: z.number().int().min(0).optional(),
+});
+exports.AuthorizationCodeGrantAuthorizationSchema = z
+    .object({
+    ...OAuthSchema.shape,
+    ...OIDCSchema.shape,
+    ...schema_js_2.OptionalSchema.shape,
+    code_challenge_method: schema_js_2.CodeChallengeMethodSchema.optional(),
+    code_challenge: exports.CodeChallengeSchema.optional(),
+    // Custom
+    ...common_js_1.ExtraGrantSchema.shape,
+})
+    .superRefine((data, ctx) => {
+    // If one is present, the other must also be present
+    if (data.code_challenge && !data.code_challenge_method) {
+        ctx.addIssue({
+            code: 'custom',
+            message: 'code_challenge_method is required when code_challenge is present',
+            path: ['code_challenge_method'],
+        });
+    }
+    else if (!data.code_challenge && data.code_challenge_method) {
+        ctx.addIssue({
+            code: 'custom',
+            message: 'code_challenge is required when code_challenge_method is present',
+            path: ['code_challenge'],
+        });
+    }
 });
-exports.AuthorizationCodeSchema = OAuthSchema.and(OIDCSchema)
-    .and(PKCESchema)
-    .and(schema_js_2.OptionalSchema);

package/dist/cjs/oauth/authorize/schema/grants/authorization-code.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=authorization-code.test.d.ts.map

package/dist/cjs/oauth/authorize/schema/grants/authorization-code.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-code.test.d.ts","sourceRoot":"","sources":["../../../../../../src/oauth/authorize/schema/grants/authorization-code.test.ts"],"names":[],"mappings":""}