@go-mondo/identity-sdk 0.0.2-beta.9 → 0.0.2-beta.92

package/dist/cjs/authorization/roles/schema.test.js

@@ -1,6 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-const arktype_1 = require("arktype");
 const vitest_1 = require("vitest");
 const utils_js_1 = require("../../app/utils.js");
 const schema_js_1 = require("../../customer/schema.js");
@@ -16,13 +15,13 @@ const schema_js_3 = require("./schema.js");
     (0, vitest_1.describe)('RoleIdPropertySchema', () => {
         (0, vitest_1.test)('should accept valid id property', () => {
             const payload = { id: (0, schema_js_2.generateRoleId)() };
-            const result = (0, schema_js_3.RoleIdPropertySchema)(payload);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)(result).toEqual({ id: payload.id });
+            const result = schema_js_3.RoleIdPropertySchema.safeParse(payload);
+            // Parse succeeds for valid data
+            (0, vitest_1.expect)(result.data).toEqual({ id: payload.id });
         });
         (0, vitest_1.test)('should reject missing id', () => {
-            const result = (0, schema_js_3.RoleIdPropertySchema)({});
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            const result = schema_js_3.RoleIdPropertySchema.safeParse({});
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
     });
     (0, vitest_1.describe)('RoleAssociationsSchema', () => {
@@ -32,31 +31,31 @@ const schema_js_3 = require("./schema.js");
                 permissions: [(0, schema_js_2.generatePermissionId)(), (0, schema_js_2.generatePermissionId)()],
                 users: [(0, schema_js_1.generateUserId)(), (0, schema_js_1.generateUserId)()],
             };
-            const result = (0, schema_js_3.RoleAssociationsSchema)(payload);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)(result).toEqual({
+            const result = schema_js_3.RoleAssociationsSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            (0, vitest_1.expect)(result.data).toEqual({
                 apps: payload.apps,
                 permissions: payload.permissions,
                 users: payload.users,
             });
         });
         (0, vitest_1.test)('should accept optional associations', () => {
-            const result = (0, schema_js_3.RoleAssociationsSchema)({});
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)(result).toEqual({});
+            const result = schema_js_3.RoleAssociationsSchema.safeParse({});
+            // Parse succeeds for valid data
+            (0, vitest_1.expect)(result.data).toEqual({});
         });
         (0, vitest_1.test)('should accept partial associations', () => {
-            const result = (0, schema_js_3.RoleAssociationsSchema)({
+            const result = schema_js_3.RoleAssociationsSchema.safeParse({
                 permissions: [(0, schema_js_2.generatePermissionId)()],
                 users: undefined,
             });
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            // Parse succeeds for valid data
         });
         (0, vitest_1.test)('should reject non-array associations', () => {
-            const result = (0, schema_js_3.RoleAssociationsSchema)({
+            const result = schema_js_3.RoleAssociationsSchema.safeParse({
                 apps: 'not-an-array',
             });
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
     });
     (0, vitest_1.describe)('RoleSchema', () => {
@@ -73,8 +72,8 @@ const schema_js_3 = require("./schema.js");
                 updatedAt: new Date(),
                 metadata: { key: 'value' },
             };
-            const result = (0, schema_js_3.RoleSchema)(role);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            const result = schema_js_3.RoleSchema.safeParse(role);
+            // Parse succeeds for valid data
         });
         (0, vitest_1.test)('should accept minimal role object', () => {
             const role = {
@@ -85,8 +84,8 @@ const schema_js_3 = require("./schema.js");
                 updatedAt: new Date(),
                 metadata: {},
             };
-            const result = (0, schema_js_3.RoleSchema)(role);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            const result = schema_js_3.RoleSchema.safeParse(role);
+            // Parse succeeds for valid data
         });
         (0, vitest_1.test)('should accept role with optional dates', () => {
             const role = {
@@ -99,8 +98,8 @@ const schema_js_3 = require("./schema.js");
                 deactivatedAt: new Date(),
                 metadata: {},
             };
-            const result = (0, schema_js_3.RoleSchema)(role);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            const result = schema_js_3.RoleSchema.safeParse(role);
+            // Parse succeeds for valid data
         });
         (0, vitest_1.test)('should reject invalid status', () => {
             const role = {
@@ -111,16 +110,16 @@ const schema_js_3 = require("./schema.js");
                 updatedAt: new Date(),
                 metadata: {},
             };
-            const result = (0, schema_js_3.RoleSchema)(role);
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            const result = schema_js_3.RoleSchema.safeParse(role);
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
         (0, vitest_1.test)('should reject missing required fields', () => {
             const role = {
                 id: (0, schema_js_2.generateRoleId)(),
                 name: 'admin',
             };
-            const result = (0, schema_js_3.RoleSchema)(role);
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            const result = schema_js_3.RoleSchema.safeParse(role);
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
     });
     (0, vitest_1.describe)('InsertRolePayloadSchema', () => {
@@ -135,26 +134,20 @@ const schema_js_3 = require("./schema.js");
                 users: [(0, schema_js_1.generateUserId)()],
                 metadata: { key: 'value' },
             };
-            const result = (0, schema_js_3.InsertRolePayloadSchema)(payload);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            const result = schema_js_3.InsertRolePayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
         });
         (0, vitest_1.test)('should accept minimal insert payload', () => {
             const payload = {
                 name: 'user',
             };
-            const result = (0, schema_js_3.InsertRolePayloadSchema)(payload);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)(result.status).toBe('enabled'); // default value
-        });
-        (0, vitest_1.test)('should generate default ID when not provided', () => {
-            const payload = { name: 'admin' };
-            const result = (0, schema_js_3.InsertRolePayloadSchema)(payload);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)(result.id).toMatch(/^rol_/);
+            const result = schema_js_3.InsertRolePayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            (0, vitest_1.expect)(result.data?.status).toBe('enabled'); // default value
         });
         (0, vitest_1.test)('should reject missing name', () => {
-            const result = (0, schema_js_3.InsertRolePayloadSchema)({});
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            const result = schema_js_3.InsertRolePayloadSchema.safeParse({});
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
         (0, vitest_1.test)('should accept associations in insert payload', () => {
             const payload = {
@@ -163,8 +156,8 @@ const schema_js_3 = require("./schema.js");
                 permissions: [(0, schema_js_2.generatePermissionId)(), (0, schema_js_2.generatePermissionId)()],
                 users: [(0, schema_js_1.generateUserId)()],
             };
-            const result = (0, schema_js_3.InsertRolePayloadSchema)(payload);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            const result = schema_js_3.InsertRolePayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
         });
     });
     (0, vitest_1.describe)('UpdateRolePayloadSchema', () => {
@@ -175,25 +168,25 @@ const schema_js_3 = require("./schema.js");
                 description: 'Updated description',
                 metadata: { updated: true },
             };
-            const result = (0, schema_js_3.UpdateRolePayloadSchema)(payload);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)(result).toEqual(payload);
+            const result = schema_js_3.UpdateRolePayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            (0, vitest_1.expect)(result.data).toEqual(payload);
         });
         (0, vitest_1.test)('should accept empty update payload', () => {
-            const result = (0, schema_js_3.UpdateRolePayloadSchema)({});
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)(result).toEqual({});
+            const result = schema_js_3.UpdateRolePayloadSchema.safeParse({});
+            // Parse succeeds for valid data
+            (0, vitest_1.expect)(result.data).toEqual({});
         });
         (0, vitest_1.test)('should accept partial updates', () => {
             const payload = { name: 'new-name' };
-            const result = (0, schema_js_3.UpdateRolePayloadSchema)(payload);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)(result).toEqual(payload);
+            const result = schema_js_3.UpdateRolePayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            (0, vitest_1.expect)(result.data).toEqual(payload);
         });
         (0, vitest_1.test)('should reject invalid status', () => {
             const payload = { status: 'invalid-status' };
-            const result = (0, schema_js_3.UpdateRolePayloadSchema)(payload);
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            const result = schema_js_3.UpdateRolePayloadSchema.safeParse(payload);
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
     });
     (0, vitest_1.describe)('RoleAssociationReferenceSchema', () => {
@@ -204,9 +197,9 @@ const schema_js_3 = require("./schema.js");
                 status: 'enabled',
                 model: 'Role',
             };
-            const result = (0, schema_js_3.RoleAssociationReferenceSchema)(reference);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)(result).toEqual(reference);
+            const result = schema_js_3.RoleAssociationReferenceSchema.safeParse(reference);
+            // Parse succeeds for valid data
+            (0, vitest_1.expect)(result.data).toEqual(reference);
         });
         (0, vitest_1.test)('should use default status when not provided', () => {
             const reference = {
@@ -214,14 +207,14 @@ const schema_js_3 = require("./schema.js");
                 name: 'admin',
                 model: 'Role',
             };
-            const result = (0, schema_js_3.RoleAssociationReferenceSchema)(reference);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)(result.status).toBe('disabled'); // default value
+            const result = schema_js_3.RoleAssociationReferenceSchema.safeParse(reference);
+            // Parse succeeds for valid data
+            (0, vitest_1.expect)(result.data?.status).toBe('disabled'); // default value
         });
         (0, vitest_1.test)('should reject missing required fields', () => {
             const reference = { id: (0, schema_js_2.generateRoleId)() };
-            const result = (0, schema_js_3.RoleAssociationReferenceSchema)(reference);
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            const result = schema_js_3.RoleAssociationReferenceSchema.safeParse(reference);
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
         (0, vitest_1.test)('should reject invalid model value', () => {
             const reference = {
@@ -229,8 +222,8 @@ const schema_js_3 = require("./schema.js");
                 name: 'admin',
                 model: 'InvalidModel',
             };
-            const result = (0, schema_js_3.RoleAssociationReferenceSchema)(reference);
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            const result = schema_js_3.RoleAssociationReferenceSchema.safeParse(reference);
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
     });
 });

package/dist/cjs/authorization/schema.d.ts

@@ -1,3 +1,4 @@
+import * as z from 'zod/v4';
 export declare const Model: {
     readonly Permission: {
         readonly UIDPrefix: "per";
@@ -8,10 +9,10 @@ export declare const Model: {
 };
 export declare function generatePermissionId(): string;
 export declare function generateRoleId(): string;
-export declare const RoleIdSchema: import("arktype/out/methods/string.js").StringType<string, {}>;
-export type RoleId = typeof RoleIdSchema.inferOut;
-export declare const RoleIdAssociationsSchema: import("arktype").BaseType<string[] | undefined, {}>;
-export declare const PermissionIdSchema: import("arktype/out/methods/string.js").StringType<string, {}>;
-export type PermissionId = typeof PermissionIdSchema.inferOut;
-export declare const PermissionIdAssociationsSchema: import("arktype").BaseType<string[] | undefined, {}>;
+export declare const RoleIdSchema: z.ZodString;
+export type RoleId = z.output<typeof RoleIdSchema>;
+export declare const RoleIdAssociationsSchema: z.ZodUnion<readonly [z.ZodUndefined, z.ZodArray<z.ZodString>]>;
+export declare const PermissionIdSchema: z.ZodString;
+export type PermissionId = z.output<typeof PermissionIdSchema>;
+export declare const PermissionIdAssociationsSchema: z.ZodUnion<readonly [z.ZodUndefined, z.ZodArray<z.ZodString>]>;
 //# sourceMappingURL=schema.d.ts.map

package/dist/cjs/authorization/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/authorization/schema.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,KAAK;;;;;;;CAOR,CAAC;AAEX,wBAAgB,oBAAoB,WAEnC;AAED,wBAAgB,cAAc,WAE7B;AAED,eAAO,MAAM,YAAY,gEAAoC,CAAC;AAC9D,MAAM,MAAM,MAAM,GAAG,OAAO,YAAY,CAAC,QAAQ,CAAC;AAElD,eAAO,MAAM,wBAAwB,sDAEpC,CAAC;AAEF,eAAO,MAAM,kBAAkB,gEAA0C,CAAC;AAC1E,MAAM,MAAM,YAAY,GAAG,OAAO,kBAAkB,CAAC,QAAQ,CAAC;AAE9D,eAAO,MAAM,8BAA8B,sDAE1C,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/authorization/schema.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,eAAO,MAAM,KAAK;;;;;;;CAOR,CAAC;AAEX,wBAAgB,oBAAoB,WAEnC;AAED,wBAAgB,cAAc,WAE7B;AAED,eAAO,MAAM,YAAY,aAAoC,CAAC;AAC9D,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,YAAY,CAAC,CAAC;AAEnD,eAAO,MAAM,wBAAwB,gEAGnC,CAAC;AAEH,eAAO,MAAM,kBAAkB,aAA0C,CAAC;AAC1E,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE/D,eAAO,MAAM,8BAA8B,gEAGzC,CAAC"}

package/dist/cjs/authorization/schema.js

@@ -1,4 +1,37 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
@@ -6,8 +39,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.PermissionIdAssociationsSchema = exports.PermissionIdSchema = exports.RoleIdAssociationsSchema = exports.RoleIdSchema = exports.Model = void 0;
 exports.generatePermissionId = generatePermissionId;
 exports.generateRoleId = generateRoleId;
-const arktype_1 = require("arktype");
 const ksuid_1 = __importDefault(require("ksuid"));
+const z = __importStar(require("zod/v4"));
 const id_js_1 = require("../common/schema/id.js");
 exports.Model = {
     Permission: {
@@ -24,6 +57,12 @@ function generateRoleId() {
     return `${exports.Model.Role.UIDPrefix}_${ksuid_1.default.randomSync().string}`;
 }
 exports.RoleIdSchema = (0, id_js_1.KSUIDSchema)(exports.Model.Role.UIDPrefix);
-exports.RoleIdAssociationsSchema = (0, arktype_1.type)('undefined').or(exports.RoleIdSchema.array());
+exports.RoleIdAssociationsSchema = z.union([
+    z.undefined(),
+    z.array(exports.RoleIdSchema),
+]);
 exports.PermissionIdSchema = (0, id_js_1.KSUIDSchema)(exports.Model.Permission.UIDPrefix);
-exports.PermissionIdAssociationsSchema = (0, arktype_1.type)('undefined').or(exports.PermissionIdSchema.array());
+exports.PermissionIdAssociationsSchema = z.union([
+    z.undefined(),
+    z.array(exports.PermissionIdSchema),
+]);

package/dist/cjs/common/index.d.ts

@@ -2,6 +2,8 @@ import { MondoIdentity } from './resources/init.js';
 export { defaultMutationRequestHeaders, defaultRequestHeaders, responseToHttpError, toHttpError, } from './resources/utils.js';
 export * from './errors/http.js';
 export * from './errors/validation.js';
+export type { MondoInstance } from './resources/init.js';
+export type { AccessTokenProvider, Authorizer, } from './resources/authorization.js';
 export * from './schema/schema.js';
 export default MondoIdentity;
 //# sourceMappingURL=index.d.ts.map

package/dist/cjs/common/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/common/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EACL,6BAA6B,EAC7B,qBAAqB,EACrB,mBAAmB,EACnB,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAE9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AAEvC,cAAc,oBAAoB,CAAC;AAEnC,eAAe,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/common/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EACL,6BAA6B,EAC7B,qBAAqB,EACrB,mBAAmB,EACnB,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAE9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,YAAY,EACV,mBAAmB,EACnB,UAAU,GACX,MAAM,8BAA8B,CAAC;AACtC,cAAc,oBAAoB,CAAC;AAEnC,eAAe,aAAa,CAAC"}

package/dist/cjs/common/resources/authorization.d.ts

@@ -1,2 +1,19 @@
-export type Authorization = (request: RequestInit) => RequestInit;
+export type AuthorizeOptions = {
+    /** Force a credential refresh before authorizing the request. */
+    refresh?: boolean;
+};
+export type AccessToken = string | {
+    accessToken: string;
+    expiresAt?: number;
+    scope?: string;
+    type?: string;
+};
+export type AccessTokenProvider = (options?: AuthorizeOptions) => AccessToken | Promise<AccessToken>;
+/**
+ * Authorizer function type that adds authentication to requests.
+ * Takes a RequestInit object and returns it with authorization headers added.
+ * Async authorization can refresh credentials before the outbound API request.
+ */
+export type Authorizer = (request: RequestInit, options?: AuthorizeOptions) => RequestInit | Promise<RequestInit>;
+export declare function getAccessTokenValue(accessToken: AccessToken): string;
 //# sourceMappingURL=authorization.d.ts.map

package/dist/cjs/common/resources/authorization.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../../../../src/common/resources/authorization.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,WAAW,KAAK,WAAW,CAAC"}
+{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../../../../src/common/resources/authorization.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gBAAgB,GAAG;IAC7B,iEAAiE;IACjE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,WAAW,GACnB,MAAM,GACN;IACE,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEN,MAAM,MAAM,mBAAmB,GAAG,CAChC,OAAO,CAAC,EAAE,gBAAgB,KACvB,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;AAExC;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,CACvB,OAAO,EAAE,WAAW,EACpB,OAAO,CAAC,EAAE,gBAAgB,KACvB,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;AAExC,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,WAAW,GAAG,MAAM,CAIpE"}

package/dist/cjs/common/resources/authorization.js

@@ -1,2 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.getAccessTokenValue = getAccessTokenValue;
+function getAccessTokenValue(accessToken) {
+    return typeof accessToken === 'string'
+        ? accessToken
+        : accessToken.accessToken;
+}

package/dist/cjs/common/resources/init.d.ts

@@ -1,16 +1,33 @@
-declare const ConfigSchema: import("arktype/out/methods/object").ObjectType<{
-    host: (In: import("arktype/out/attributes").Default<string, "https://manage-api.mondoidentity.com">) => import("arktype/out/attributes").To<URL>;
-    accessToken: string;
-}, {}>;
-export type ConfigProps = typeof ConfigSchema.inferIn;
-export type Config = typeof ConfigSchema.inferOut;
-export declare class MondoIdentity {
+import * as z from 'zod/v4';
+import { type AccessTokenProvider, type Authorizer } from './authorization.js';
+declare const ConfigSchema: z.ZodObject<{
+    accessToken: z.ZodUnion<readonly [z.ZodString, z.ZodCustom<AccessTokenProvider, AccessTokenProvider>]>;
+    host: z.ZodPipe<z.ZodDefault<z.ZodURL>, z.ZodTransform<URL, string>>;
+}, z.core.$strip>;
+export type ConfigProps = z.input<typeof ConfigSchema>;
+export type Config = z.output<typeof ConfigSchema>;
+/**
+ * Interface representing a configured Mondo SDK instance.
+ * Provides the base URL and authorization function for API requests.
+ */
+export type MondoInstance = {
+    /** The base URL for API requests */
+    readonly baseUrl: URL;
+    /** Function that adds authorization headers to requests */
+    readonly authorize: Authorizer;
+};
+/**
+ * Type guard to check if a value is a MondoInstance.
+ * @param value - The value to check
+ * @returns True if the value is a MondoInstance
+ */
+export declare function isMondoInstance(value: unknown): value is MondoInstance;
+export declare class MondoIdentity implements MondoInstance {
     readonly config: Config;
+    readonly authorize: Authorizer;
     constructor(config: ConfigProps);
-    /**
-     * Builds an authorizer function based on the type of access token
-     */
-    get authorizer(): (request: RequestInit) => RequestInit;
+    /** The base URL for API requests. */
+    get baseUrl(): URL;
 }
 export {};
 //# sourceMappingURL=init.d.ts.map

package/dist/cjs/common/resources/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../../../src/common/resources/init.ts"],"names":[],"mappings":"AAYA,QAAA,MAAM,YAAY;;;MAA0B,CAAC;AAE7C,MAAM,MAAM,WAAW,GAAG,OAAO,YAAY,CAAC,OAAO,CAAC;AACtD,MAAM,MAAM,MAAM,GAAG,OAAO,YAAY,CAAC,QAAQ,CAAC;AAElD,qBAAa,aAAa;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEL,MAAM,EAAE,WAAW;IAItC;;OAEG;IACH,IAAW,UAAU,IAAI,CAAC,OAAO,EAAE,WAAW,KAAK,WAAW,CAU7D;CAuBF"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../../../src/common/resources/init.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,UAAU,EAEhB,MAAM,oBAAoB,CAAC;AAmB5B,QAAA,MAAM,YAAY;;;iBAA0B,CAAC;AAE7C,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AACvD,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,YAAY,CAAC,CAAC;AAEnD;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,oCAAoC;IACpC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC;IACtB,2DAA2D;IAC3D,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAStE;AAED,qBAAa,aAAc,YAAW,aAAa;IACjD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,SAAgB,SAAS,EAAE,UAAU,CAAC;gBAEnB,MAAM,EAAE,WAAW;IAiBtC,qCAAqC;IACrC,IAAW,OAAO,IAAI,GAAG,CAExB;CACF"}

package/dist/cjs/common/resources/init.js

@@ -1,38 +1,98 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.MondoIdentity = void 0;
-const arktype_1 = require("arktype");
-const BaseConfigSchema = (0, arktype_1.type)({
-    host: (0, arktype_1.type)('string.url.parse').default('https://manage-api.mondoidentity.com'),
+exports.isMondoInstance = isMondoInstance;
+const z = __importStar(require("zod/v4"));
+const authorization_js_1 = require("./authorization.js");
+const BaseConfigSchema = z.object({
+    host: z
+        .url()
+        .default('https://api.mondoidentity.com')
+        .pipe(z.transform((v) => new URL(v))),
 });
-const AccessTokenConfigSchema = BaseConfigSchema.and({
-    accessToken: (0, arktype_1.type)('string').moreThanLength(0),
+const AccessTokenConfigSchema = z.object({
+    ...BaseConfigSchema.shape,
+    accessToken: z.union([
+        z.string().min(1),
+        z.custom((value) => typeof value === 'function', {
+            error: 'Access token must be a string or token provider function',
+        }),
+    ]),
 });
 const ConfigSchema = AccessTokenConfigSchema;
+/**
+ * Type guard to check if a value is a MondoInstance.
+ * @param value - The value to check
+ * @returns True if the value is a MondoInstance
+ */
+function isMondoInstance(value) {
+    const maybeInstance = value;
+    return (maybeInstance !== null &&
+        typeof maybeInstance === 'object' &&
+        maybeInstance.baseUrl instanceof URL &&
+        typeof maybeInstance.authorize === 'function');
+}
 class MondoIdentity {
     config;
+    authorize;
     constructor(config) {
         this.config = initConfig(config);
+        this.authorize = async (request, options) => {
+            const accessToken = typeof this.config.accessToken === 'function'
+                ? await this.config.accessToken(options)
+                : this.config.accessToken;
+            request.headers = new Headers(request.headers);
+            request.headers.set('authorization', `Bearer ${(0, authorization_js_1.getAccessTokenValue)(accessToken)}`);
+            return request;
+        };
     }
-    /**
-     * Builds an authorizer function based on the type of access token
-     */
-    get authorizer() {
-        if (this.config.accessToken) {
-            return (request) => {
-                request.headers = new Headers(request.headers);
-                request.headers.append('authorization', this.config.accessToken);
-                return request;
-            };
-        }
-        return (request) => request;
+    /** The base URL for API requests. */
+    get baseUrl() {
+        return this.config.host;
     }
 }
 exports.MondoIdentity = MondoIdentity;
 function initConfig(config) {
-    const out = ConfigSchema(config);
-    if (out instanceof arktype_1.type.errors) {
-        throw new Error(`Invalid configuration: ${out.summary}`);
+    try {
+        return ConfigSchema.parse(config);
+    }
+    catch (error) {
+        if (error instanceof z.ZodError) {
+            throw new Error(`Invalid configuration: ${error.message}`);
+        }
+        throw error;
     }
-    return out;
 }