@go-mondo/identity-sdk 0.0.2-beta.9 → 0.0.2-beta.92

package/README.md

@@ -1,3 +1,385 @@
-# Mondo Identity - Node SDK
+# Mondo Identity Node SDK
 
-## Getting Started
+TypeScript SDK for working with the Mondo Identity API from Node.js. The SDK
+provides a configured API instance, typed resource helpers, runtime validation
+with Zod, and exported schemas for common Mondo Identity objects.
+
+> This package is currently published as a beta. Public APIs may continue to
+> evolve before a stable `1.0.0` release.
+
+## Requirements
+
+- Node.js 20 or newer
+- A Mondo Identity access token
+
+## Installation
+
+```sh
+npm install @go-mondo/identity-sdk
+```
+
+```sh
+pnpm add @go-mondo/identity-sdk
+```
+
+```sh
+yarn add @go-mondo/identity-sdk
+```
+
+## Quick Start
+
+```ts
+import MondoIdentity, {
+  HttpError,
+  ValidationError,
+} from '@go-mondo/identity-sdk';
+import { insertUser, listUsers } from '@go-mondo/identity-sdk/customer';
+
+const mondo = new MondoIdentity({
+  accessToken: process.env.MONDO_ACCESS_TOKEN!,
+});
+
+try {
+  const user = await insertUser(mondo, {
+    givenName: 'Ada',
+    familyName: 'Lovelace',
+    verifiedEmail: 'ada@example.com',
+  });
+
+  console.log(user.id);
+
+  const users = await listUsers(mondo, {
+    pageSize: 25,
+  });
+
+  console.log(users.items);
+  console.log(users.pagination?.nextToken);
+} catch (error) {
+  if (error instanceof ValidationError) {
+    console.error(error.fields);
+  } else if (error instanceof HttpError) {
+    console.error(error.statusCode, error.type, error.message);
+  } else {
+    throw error;
+  }
+}
+```
+
+## Configuration
+
+Create a reusable `MondoIdentity` instance and pass it to resource functions.
+
+```ts
+import MondoIdentity from '@go-mondo/identity-sdk';
+
+const mondo = new MondoIdentity({
+  accessToken: 'access-token',
+});
+```
+
+By default, requests are sent to `https://api.mondoidentity.com`. Override the
+host for tests or private environments:
+
+```ts
+const mondo = new MondoIdentity({
+  host: 'https://api.example.com',
+  accessToken: 'access-token',
+});
+```
+
+`accessToken` can also be a provider function. When an API request receives a
+`401` or `403`, the SDK retries once with `refresh: true`.
+
+```ts
+const mondo = new MondoIdentity({
+  accessToken: async ({ refresh } = {}) => {
+    const token = refresh ? await refreshToken() : await getCachedToken();
+
+    return {
+      accessToken: token.value,
+      expiresAt: token.expiresAt,
+      scope: token.scope,
+      type: 'Bearer',
+    };
+  },
+});
+```
+
+## Resource Helpers
+
+Most API helpers are exported as functions from domain subpaths. Each helper
+accepts a configured `MondoIdentity` instance as its first argument.
+
+```ts
+import { listApps, insertApp } from '@go-mondo/identity-sdk/app';
+
+const app = await insertApp(mondo, {
+  label: 'Portal',
+  description: 'Customer portal',
+});
+
+const apps = await listApps(mondo, { pageSize: 10 });
+```
+
+Resource classes are also exported for code that prefers grouping operations:
+
+```ts
+import { UserResources } from '@go-mondo/identity-sdk/customer';
+
+const users = new UserResources(mondo);
+const page = await users.listItems({ pageSize: 25 });
+```
+
+## Modules
+
+| Import path | Includes |
+| --- | --- |
+| `@go-mondo/identity-sdk` | `MondoIdentity`, common schemas, HTTP errors, authorization types |
+| `@go-mondo/identity-sdk/action` | action payload schemas |
+| `@go-mondo/identity-sdk/activity` | activity listing helpers and activity schemas |
+| `@go-mondo/identity-sdk/app` | app CRUD, app authorization, OAuth, OIDC, registration, SAML, app schemas |
+| `@go-mondo/identity-sdk/association` | association list, upsert, delete helpers and schemas |
+| `@go-mondo/identity-sdk/authentication` | sessions, settings, strategies, factors, providers, authentication schemas |
+| `@go-mondo/identity-sdk/authorization` | roles, permissions, authorization schemas |
+| `@go-mondo/identity-sdk/customer` | users, organizations, customer schemas and user utilities |
+| `@go-mondo/identity-sdk/identity` | identity identifier schemas |
+| `@go-mondo/identity-sdk/oauth` | OAuth and OIDC request/response schemas |
+| `@go-mondo/identity-sdk/workspace` | workspace authorization, branding, membership, registration, settings, tenant, user schemas |
+
+## Common Operations
+
+### Users
+
+```ts
+import {
+  deleteUser,
+  getUser,
+  insertUser,
+  listUsers,
+  updateUser,
+} from '@go-mondo/identity-sdk/customer';
+
+const created = await insertUser(mondo, {
+  verifiedEmail: 'grace@example.com',
+  givenName: 'Grace',
+  familyName: 'Hopper',
+});
+
+const user = await getUser(mondo, created.id);
+
+await updateUser(mondo, user.id, {
+  familyName: 'Murray Hopper',
+});
+
+await deleteUser(mondo, user.id);
+
+const page = await listUsers(mondo, {
+  pageSize: 50,
+});
+```
+
+### Apps
+
+```ts
+import {
+  getApp,
+  insertApp,
+  listApps,
+  updateApp,
+} from '@go-mondo/identity-sdk/app';
+
+const app = await insertApp(mondo, {
+  label: 'Admin Console',
+});
+
+await updateApp(mondo, app.id, {
+  description: 'Internal administration app',
+});
+
+const sameApp = await getApp(mondo, app.id);
+const apps = await listApps(mondo, { pageSize: 25 });
+```
+
+### Authorization
+
+```ts
+import {
+  insertPermission,
+  insertRole,
+  listPermissions,
+  listRoles,
+} from '@go-mondo/identity-sdk/authorization';
+
+const permission = await insertPermission(mondo, {
+  name: 'Read users',
+  description: 'Read customer user records',
+});
+
+const role = await insertRole(mondo, {
+  name: 'Support',
+  description: 'Customer support access',
+});
+
+const permissions = await listPermissions(mondo);
+const roles = await listRoles(mondo);
+```
+
+### Authentication
+
+```ts
+import {
+  deleteSession,
+  getSettings,
+  listSessions,
+  upsertSettings,
+} from '@go-mondo/identity-sdk/authentication';
+
+const sessions = await listSessions(mondo, {
+  filter: {
+    user: 'usr_...',
+  },
+});
+
+await deleteSession(mondo, sessions.items[0].id);
+
+const settings = await getSettings(mondo);
+
+await upsertSettings(mondo, {
+  metadata: {
+    loginExperience: 'default',
+  },
+});
+```
+
+### Associations
+
+```ts
+import {
+  deleteAssociation,
+  listAssociations,
+  upsertAssociation,
+} from '@go-mondo/identity-sdk/association';
+
+await upsertAssociation(mondo, 'usr_...', 'rol_...', {
+  metadata: {
+    source: 'admin',
+  },
+});
+
+const associations = await listAssociations(mondo, 'usr_...', {
+  filter: {
+    type: 'Role',
+  },
+});
+
+await deleteAssociation(mondo, 'usr_...', 'rol_...');
+```
+
+## Pagination
+
+List helpers accept an optional pagination object:
+
+```ts
+const firstPage = await listUsers(mondo, { pageSize: 25 });
+
+if (firstPage.pagination?.nextToken) {
+  const nextPage = await listUsers(mondo, {
+    pageSize: 25,
+    nextToken: firstPage.pagination.nextToken,
+  });
+
+  console.log(nextPage.items);
+}
+```
+
+Paginated responses have the shape:
+
+```ts
+type PaginationCollection<T> = {
+  items: T[];
+  pagination?: {
+    pageSize?: number;
+    nextToken?: string;
+  };
+};
+```
+
+## Schemas and Types
+
+Schemas and TypeScript types are exported from each module. Use schemas when
+you want to validate data before calling the API or parse API-compatible data in
+your own code.
+
+```ts
+import {
+  UserSchema,
+  UserStatus,
+  type User,
+} from '@go-mondo/identity-sdk/customer';
+
+const user: User = UserSchema.parse(payload);
+
+if (user.status === UserStatus.ACTIVE) {
+  console.log(user.email);
+}
+```
+
+The SDK uses Zod internally to validate mutation payloads and API responses.
+
+## Error Handling
+
+API and network failures are normalized to `HttpError`. API validation failures
+with field-level errors are represented as `ValidationError`.
+
+```ts
+import { HttpError, ValidationError } from '@go-mondo/identity-sdk';
+import { getUser } from '@go-mondo/identity-sdk/customer';
+
+try {
+  await getUser(mondo, 'usr_...');
+} catch (error) {
+  if (error instanceof ValidationError) {
+    console.error(error.fields);
+  } else if (error instanceof HttpError) {
+    console.error({
+      statusCode: error.statusCode,
+      type: error.type,
+      isAuthorizationError: error.isAuthorizationError,
+    });
+  } else {
+    throw error;
+  }
+}
+```
+
+## Development
+
+Install dependencies:
+
+```sh
+pnpm install
+```
+
+Run checks:
+
+```sh
+pnpm run check-types
+pnpm run lint
+pnpm test
+```
+
+Build CommonJS and ESM outputs:
+
+```sh
+pnpm run build
+```
+
+Format code:
+
+```sh
+pnpm run format:fix
+```
+
+## License
+
+MIT

package/dist/cjs/action/schema/base.d.ts

@@ -1,28 +1,28 @@
+import * as z from 'zod/v4';
 export declare const ActionOperation: {
-    readonly SET_PASSWORD: "set-password";
     readonly USER_ATTRIBUTE_VERIFICATION: "user-attribute-verification";
     readonly SIGN_UP: "sign-up";
     readonly SIGN_UP_VERIFICATION: "sign-up-verification";
 };
 export type AnyActionOperation = (typeof ActionOperation)[keyof typeof ActionOperation];
-export declare const ActionIdSchema: import("arktype/out/methods/string.js").StringType<string, {}>;
-export type ActionId = typeof ActionIdSchema.inferOut;
-export declare const ActionIdPropertySchema: import("arktype/out/methods/object.js").ObjectType<{
-    id: string;
-}, {}>;
-export type ActionIdProperty = typeof ActionIdPropertySchema.inferOut;
-export declare const OperationSchema: import("arktype/out/methods/string.js").StringType<"set-password" | "user-attribute-verification" | "sign-up" | "sign-up-verification", {}>;
-export declare const BasePayloadSchema: import("arktype/out/methods/object.js").ObjectType<{
-    id: string;
-    attempt: number;
-    expiresAt: (In: string | Date) => import("arktype").Out<string>;
-    updatedAt: (In: string | Date) => import("arktype").Out<string>;
-    deletedAt?: ((In: string | Date | undefined) => import("arktype").Out<string | undefined>) | undefined;
-    deactivatedAt?: ((In: string | Date | undefined) => import("arktype").Out<string | undefined>) | undefined;
-    metadata?: ((In: {
-        [x: string]: string | number | boolean;
-    } | Map<string, string | number | boolean> | null | undefined) => import("arktype").Out<{
-        [x: string]: string | number | boolean;
-    } | undefined>) | undefined;
-}, {}>;
+export declare const ActionIdSchema: z.ZodString;
+export type ActionId = z.output<typeof ActionIdSchema>;
+export declare const ActionIdPropertySchema: z.ZodObject<{
+    id: z.ZodString;
+}, z.core.$strip>;
+export type ActionIdProperty = z.output<typeof ActionIdPropertySchema>;
+export declare const OperationSchema: z.ZodEnum<{
+    "user-attribute-verification": "user-attribute-verification";
+    "sign-up": "sign-up";
+    "sign-up-verification": "sign-up-verification";
+}>;
+export declare const BasePayloadSchema: z.ZodObject<{
+    metadata: z.ZodPipe<z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodMap<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<import("../../common/schema/metadata.js").MetadataRecord, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>, z.ZodTransform<import("../../common/schema/metadata.js").MetadataRecord | undefined, import("../../common/schema/metadata.js").MetadataRecord | undefined>>;
+    deactivatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    deletedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    updatedAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+    attempt: z.ZodNumber;
+    expiresAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+    id: z.ZodString;
+}, z.core.$strip>;
 //# sourceMappingURL=base.d.ts.map

package/dist/cjs/action/schema/base.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../../src/action/schema/base.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,eAAe;;;;;CAOlB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAC5B,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,OAAO,eAAe,CAAC,CAAC;AAEzD,eAAO,MAAM,cAAc,gEAAsC,CAAC;AAClE,MAAM,MAAM,QAAQ,GAAG,OAAO,cAAc,CAAC,QAAQ,CAAC;AAEtD,eAAO,MAAM,sBAAsB;;MAEjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,OAAO,sBAAsB,CAAC,QAAQ,CAAC;AAEtE,eAAO,MAAM,eAAe,6IAK3B,CAAC;AAEF,eAAO,MAAM,iBAAiB;;;;;;;;;;;;MAMO,CAAC"}
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../../src/action/schema/base.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAW5B,eAAO,MAAM,eAAe;;;;CAKlB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAC5B,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,OAAO,eAAe,CAAC,CAAC;AAEzD,eAAO,MAAM,cAAc,aAAsC,CAAC;AAClE,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,cAAc,CAAC,CAAC;AAEvD,eAAO,MAAM,sBAAsB;;iBAEjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEvE,eAAO,MAAM,eAAe;;;;EAIjB,CAAC;AAEZ,eAAO,MAAM,iBAAiB;;;;;;;;iBAQ5B,CAAC"}

package/dist/cjs/action/schema/base.js

@@ -1,26 +1,64 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.BasePayloadSchema = exports.OperationSchema = exports.ActionIdPropertySchema = exports.ActionIdSchema = exports.ActionOperation = void 0;
-const arktype_1 = require("arktype");
+const z = __importStar(require("zod/v4"));
 const dates_js_1 = require("../../common/schema/dates.js");
 const id_js_1 = require("../../common/schema/id.js");
 const metadata_js_1 = require("../../common/schema/metadata.js");
 const utils_js_1 = require("./utils.js");
 exports.ActionOperation = {
-    SET_PASSWORD: 'set-password',
     USER_ATTRIBUTE_VERIFICATION: 'user-attribute-verification',
     SIGN_UP: 'sign-up',
     SIGN_UP_VERIFICATION: 'sign-up-verification',
 };
 exports.ActionIdSchema = (0, id_js_1.KSUIDSchema)(utils_js_1.Model.Action.UIDPrefix);
-exports.ActionIdPropertySchema = (0, arktype_1.type)({
+exports.ActionIdPropertySchema = z.object({
     id: exports.ActionIdSchema,
 });
-exports.OperationSchema = arktype_1.type.enumerated(exports.ActionOperation.SIGN_UP, exports.ActionOperation.SIGN_UP_VERIFICATION, exports.ActionOperation.SET_PASSWORD, exports.ActionOperation.USER_ATTRIBUTE_VERIFICATION);
-exports.BasePayloadSchema = exports.ActionIdPropertySchema.and({
-    attempt: (0, arktype_1.type)('number'),
+exports.OperationSchema = z.enum([
+    exports.ActionOperation.SIGN_UP,
+    exports.ActionOperation.SIGN_UP_VERIFICATION,
+    exports.ActionOperation.USER_ATTRIBUTE_VERIFICATION,
+]);
+exports.BasePayloadSchema = z.object({
+    ...exports.ActionIdPropertySchema.shape,
+    attempt: z.number(),
     expiresAt: dates_js_1.RequiredDatePayloadSchema,
-    updatedAt: dates_js_1.RequiredDatePayloadSchema,
-    'deletedAt?': dates_js_1.OptionalDatePayloadSchema,
-    'deactivatedAt?': dates_js_1.OptionalDatePayloadSchema,
-}).and(metadata_js_1.MetadataPayloadPropertySchema);
+    ...dates_js_1.UpdatedAtPropertyPayloadSchema.shape,
+    ...dates_js_1.DeletedAtPropertyPayloadSchema.shape,
+    ...dates_js_1.DeactivatedAtPropertyPayloadSchema.shape,
+    ...metadata_js_1.MetadataRecordPropertySchema.shape,
+});

package/dist/cjs/action/schema/base.test.js

@@ -1,13 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-const arktype_1 = require("arktype");
 const vitest_1 = require("vitest");
 const base_js_1 = require("./base.js");
 const utils_js_1 = require("./utils.js");
 (0, vitest_1.describe)('Action Schema - Base', () => {
     (0, vitest_1.describe)('ActionOperation constants', () => {
         (0, vitest_1.test)('should have correct operation values', () => {
-            (0, vitest_1.expect)(base_js_1.ActionOperation.SET_PASSWORD).toBe('set-password');
             (0, vitest_1.expect)(base_js_1.ActionOperation.USER_ATTRIBUTE_VERIFICATION).toBe('user-attribute-verification');
             (0, vitest_1.expect)(base_js_1.ActionOperation.SIGN_UP).toBe('sign-up');
             (0, vitest_1.expect)(base_js_1.ActionOperation.SIGN_UP_VERIFICATION).toBe('sign-up-verification');
@@ -16,50 +14,65 @@ const utils_js_1 = require("./utils.js");
     (0, vitest_1.describe)('ActionIdSchema', () => {
         (0, vitest_1.test)('should accept valid action ID', () => {
             const id = (0, utils_js_1.generateActionId)();
-            const result = (0, base_js_1.ActionIdSchema)(id);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)(result).toBe(id);
+            const result = base_js_1.ActionIdSchema.safeParse(id);
+            // Parse succeeds for valid data
+            (0, vitest_1.expect)(result.success).toBe(true);
+            if (result.success) {
+                (0, vitest_1.expect)(result.data).toBe(id);
+            }
         });
         (0, vitest_1.test)('should reject invalid action ID format', () => {
-            (0, vitest_1.expect)((0, base_js_1.ActionIdSchema)('invalid_id')).toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)((0, base_js_1.ActionIdSchema)('wrong_prefix_123')).toBeInstanceOf(arktype_1.type.errors);
+            const result1 = base_js_1.ActionIdSchema.safeParse('invalid_id');
+            (0, vitest_1.expect)(result1.success).toBe(false);
+            const result2 = base_js_1.ActionIdSchema.safeParse('act_');
+            (0, vitest_1.expect)(result2.success).toBe(false);
         });
         (0, vitest_1.test)('should reject non-string values', () => {
-            (0, vitest_1.expect)((0, base_js_1.ActionIdSchema)(123)).toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)((0, base_js_1.ActionIdSchema)(null)).toBeInstanceOf(arktype_1.type.errors);
+            const result1 = base_js_1.ActionIdSchema.safeParse(123);
+            (0, vitest_1.expect)(result1.success).toBe(false);
+            const result2 = base_js_1.ActionIdSchema.safeParse(null);
+            (0, vitest_1.expect)(result2.success).toBe(false);
         });
     });
     (0, vitest_1.describe)('ActionIdPropertySchema', () => {
         (0, vitest_1.test)('should accept valid id property', () => {
             const payload = { id: (0, utils_js_1.generateActionId)() };
-            const result = (0, base_js_1.ActionIdPropertySchema)(payload);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)(result).toEqual(payload);
+            const result = base_js_1.ActionIdPropertySchema.safeParse(payload);
+            // Parse succeeds for valid data
+            (0, vitest_1.expect)(result.success).toBe(true);
+            if (result.success) {
+                (0, vitest_1.expect)(result.data).toEqual(payload);
+            }
         });
         (0, vitest_1.test)('should reject missing id', () => {
-            const result = (0, base_js_1.ActionIdPropertySchema)({});
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            const result = base_js_1.ActionIdPropertySchema.safeParse({});
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
         (0, vitest_1.test)('should reject invalid id format', () => {
-            const result = (0, base_js_1.ActionIdPropertySchema)({ id: 'invalid_id' });
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            const result = base_js_1.ActionIdPropertySchema.safeParse({ id: 'invalid_id' });
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
     });
     (0, vitest_1.describe)('OperationSchema', () => {
         (0, vitest_1.test)('should accept valid operations', () => {
-            (0, vitest_1.expect)((0, base_js_1.OperationSchema)('sign-up')).not.toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)((0, base_js_1.OperationSchema)('sign-up-verification')).not.toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)((0, base_js_1.OperationSchema)('set-password')).not.toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)((0, base_js_1.OperationSchema)('user-attribute-verification')).not.toBeInstanceOf(arktype_1.type.errors);
+            // Parse succeeds for valid data
+            (0, vitest_1.expect)(base_js_1.OperationSchema.safeParse('sign-up-verification').success).toBe(true);
+            // Parse succeeds for valid data
+            (0, vitest_1.expect)(base_js_1.OperationSchema.safeParse('user-attribute-verification').success).toBe(true);
         });
         (0, vitest_1.test)('should reject invalid operations', () => {
-            (0, vitest_1.expect)((0, base_js_1.OperationSchema)('invalid-operation')).toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)((0, base_js_1.OperationSchema)('signup')).toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)((0, base_js_1.OperationSchema)('')).toBeInstanceOf(arktype_1.type.errors);
+            const result1 = base_js_1.OperationSchema.safeParse('invalid-operation');
+            (0, vitest_1.expect)(result1.success).toBe(false);
+            const result2 = base_js_1.OperationSchema.safeParse('another-invalid');
+            (0, vitest_1.expect)(result2.success).toBe(false);
+            const result3 = base_js_1.OperationSchema.safeParse('');
+            (0, vitest_1.expect)(result3.success).toBe(false);
         });
         (0, vitest_1.test)('should reject non-string values', () => {
-            (0, vitest_1.expect)((0, base_js_1.OperationSchema)(123)).toBeInstanceOf(arktype_1.type.errors);
-            (0, vitest_1.expect)((0, base_js_1.OperationSchema)(null)).toBeInstanceOf(arktype_1.type.errors);
+            const result1 = base_js_1.OperationSchema.safeParse(123);
+            (0, vitest_1.expect)(result1.success).toBe(false);
+            const result2 = base_js_1.OperationSchema.safeParse(null);
+            (0, vitest_1.expect)(result2.success).toBe(false);
         });
     });
     (0, vitest_1.describe)('BasePayloadSchema', () => {
@@ -71,8 +84,9 @@ const utils_js_1 = require("./utils.js");
                 updatedAt: new Date().toISOString(),
                 metadata: { key: 'value' },
             };
-            const result = (0, base_js_1.BasePayloadSchema)(payload);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            const result = base_js_1.BasePayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            (0, vitest_1.expect)(result.success).toBe(true);
         });
         (0, vitest_1.test)('should accept base payload with optional dates', () => {
             const payload = {
@@ -84,8 +98,9 @@ const utils_js_1 = require("./utils.js");
                 deactivatedAt: new Date().toISOString(),
                 metadata: {},
             };
-            const result = (0, base_js_1.BasePayloadSchema)(payload);
-            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            const result = base_js_1.BasePayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            (0, vitest_1.expect)(result.success).toBe(true);
         });
         (0, vitest_1.test)('should reject missing required fields', () => {
             const payload = {
@@ -93,8 +108,8 @@ const utils_js_1 = require("./utils.js");
                 attempt: 1,
                 // missing expiresAt, updatedAt, metadata
             };
-            const result = (0, base_js_1.BasePayloadSchema)(payload);
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            const result = base_js_1.BasePayloadSchema.safeParse(payload);
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
         (0, vitest_1.test)('should reject invalid attempt type', () => {
             const payload = {
@@ -104,8 +119,8 @@ const utils_js_1 = require("./utils.js");
                 updatedAt: new Date().toISOString(),
                 metadata: {},
             };
-            const result = (0, base_js_1.BasePayloadSchema)(payload);
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            const result = base_js_1.BasePayloadSchema.safeParse(payload);
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
         (0, vitest_1.test)('should reject invalid date formats', () => {
             const payload = {
@@ -115,8 +130,8 @@ const utils_js_1 = require("./utils.js");
                 updatedAt: new Date().toISOString(),
                 metadata: {},
             };
-            const result = (0, base_js_1.BasePayloadSchema)(payload);
-            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+            const result = base_js_1.BasePayloadSchema.safeParse(payload);
+            (0, vitest_1.expect)(result.success).toBe(false);
         });
     });
 });