@ionite/valibot 0.0.24-beta.20260907.3 → 0.0.24-beta.20260915.2

package/dist/index.d.ts

@@ -218,4 +218,4 @@ declare function createControlValidators(): {
 	iam: IAMAppValidators;
 	sso: SSOAppValidators;
 };
-export { valibotValidators, isSafeRedirectUri, createValidators, createControlValidators, ConfigLocatorSchema, BaseUser, BaseTenantUpdateRequestSchema, BaseTenantCreateRequestSchema, BaseTenant, BaseCustomer };
+export { BaseCustomer, BaseTenant, BaseTenantCreateRequestSchema, BaseTenantUpdateRequestSchema, BaseUser, ConfigLocatorSchema, createControlValidators, createValidators, isSafeRedirectUri, valibotValidators };

package/dist/index.js

@@ -1,478 +1 @@
-// packages/valibot/src/index.ts
-import { ION_SCIM_USER_EXTENSION_URN, isEcid, withValidate } from "@ionite/core";
-import * as v from "valibot";
-var ECID_MESSAGE = 'must be a valid ECID formatted as "ecid:<realm>:<opaque>"';
-var ecidSchema = () => v.optional(v.pipe(v.string(), v.check((value) => isEcid(value), ECID_MESSAGE)));
-function isSafeRedirectUri(value) {
-  for (let i = 0;i < value.length; i++) {
-    const code = value.charCodeAt(i);
-    if (code <= 31 || code === 127)
-      return false;
-  }
-  let url2;
-  try {
-    url2 = new URL(value);
-  } catch {
-    return false;
-  }
-  if (url2.protocol === "https:")
-    return true;
-  if (url2.protocol === "http:") {
-    const host = url2.hostname.toLowerCase();
-    return host === "localhost" || host === "127.0.0.1" || host === "[::1]" || host === "::1";
-  }
-  return false;
-}
-var SAFE_REDIRECT_URI_MESSAGE = "must be an absolute https URL (http is allowed only for localhost)";
-var BaseUser = v.object({
-  userName: v.string(),
-  name: v.string(),
-  email: v.pipe(v.string(), v.email()),
-  id: v.optional(v.string()),
-  avatar: v.optional(v.union([v.pipe(v.string(), v.url()), v.literal("")])),
-  userType: v.optional(v.string()),
-  ecid: ecidSchema(),
-  accountClass: v.optional(v.string())
-});
-var BaseCustomer = v.object({
-  userName: v.string(),
-  name: v.string(),
-  email: v.pipe(v.string(), v.email()),
-  id: v.optional(v.string()),
-  avatar: v.optional(v.union([v.pipe(v.string(), v.url()), v.literal("")])),
-  userType: v.optional(v.string())
-});
-var authzEntityBaseSchema = v.object({
-  id: v.string(),
-  name: v.string(),
-  displayName: v.optional(v.string()),
-  description: v.string(),
-  metadata: v.optional(v.record(v.string(), v.unknown()))
-});
-var VaultConfigLocatorSchema = v.strictObject({
-  type: v.literal("vault"),
-  vaultUrl: v.optional(v.string()),
-  vaultPath: v.string(),
-  vaultTtl: v.optional(v.number()),
-  vaultWorkloadTokenUrl: v.optional(v.string()),
-  vaultWorkloadClientId: v.optional(v.string()),
-  vaultWorkloadScope: v.optional(v.string()),
-  vaultLfvServerUrl: v.optional(v.string()),
-  vaultLfvClientId: v.optional(v.string()),
-  vaultLfvDeliveryEndpoint: v.optional(v.string()),
-  vaultLfvVerifyJwks: v.optional(v.string()),
-  vaultLfvEventsEndpoint: v.optional(v.string()),
-  vaultLfvPath: v.optional(v.string()),
-  vaultLfvDeliveryTimeout: v.optional(v.number()),
-  vaultLfvRetryInterval: v.optional(v.number()),
-  vaultLfvWarnInterval: v.optional(v.number()),
-  vaultWebsocketUrl: v.optional(v.string()),
-  vaultWebsocketClientId: v.optional(v.string()),
-  vaultWebsocketHeader: v.optional(v.picklist(["X-Vault-Token", "Authorization"]))
-});
-var AwsConfigLocatorSchema = v.strictObject({
-  type: v.literal("aws"),
-  awsWebhookUrl: v.string(),
-  awsTtl: v.optional(v.number())
-});
-var AzureConfigLocatorSchema = v.strictObject({
-  type: v.literal("azure"),
-  azureAuthMethod: v.optional(v.picklist(["client_secret", "workload_identity", "managed_identity"])),
-  azureEntraTenantId: v.optional(v.string()),
-  azureClientId: v.optional(v.string()),
-  azureManagedIdentityClientId: v.optional(v.string()),
-  azureImdsApiVersion: v.optional(v.string()),
-  azurePath: v.optional(v.string()),
-  azureVaultUrl: v.optional(v.string()),
-  azureVaultName: v.optional(v.string()),
-  azureApiVersion: v.optional(v.string()),
-  azureScope: v.optional(v.string()),
-  azureSecretNamePrefix: v.optional(v.string()),
-  azureTtl: v.optional(v.number())
-});
-var GcpConfigLocatorSchema = v.strictObject({
-  type: v.literal("gcp"),
-  gcpTtl: v.optional(v.number())
-});
-var DirectConfigLocatorSchema = v.variant("type", [
-  VaultConfigLocatorSchema,
-  AwsConfigLocatorSchema,
-  AzureConfigLocatorSchema,
-  GcpConfigLocatorSchema
-]);
-var ConfigLocatorSchema = v.union([
-  DirectConfigLocatorSchema,
-  v.strictObject({
-    type: v.literal("mirror"),
-    from: DirectConfigLocatorSchema,
-    to: VaultConfigLocatorSchema
-  })
-]);
-var BaseTenant = v.object({
-  id: v.pipe(v.string(), v.minLength(1)),
-  companyId: v.string(),
-  companyName: v.string(),
-  environmentType: v.picklist(["POC", "DEV", "QA", "PROD"]),
-  status: v.picklist(["pending", "processing", "completed", "failed", "action_required"]),
-  createdAt: v.date(),
-  updatedAt: v.date(),
-  configLocator: v.optional(ConfigLocatorSchema),
-  email: v.optional(v.string()),
-  webhookUrl: v.optional(v.string()),
-  callbackUrl: v.optional(v.string()),
-  tenantUrl: v.optional(v.string()),
-  error: v.optional(v.string()),
-  actionUrl: v.optional(v.string()),
-  requestToken: v.optional(v.string()),
-  expiresAt: v.optional(v.string())
-});
-var BaseTenantCreateRequestSchema = v.object({
-  id: v.string(),
-  companyId: v.string(),
-  companyName: v.string(),
-  environmentType: v.picklist(["POC", "DEV", "QA", "PROD"]),
-  configLocator: v.optional(ConfigLocatorSchema),
-  email: v.optional(v.pipe(v.string(), v.email())),
-  webhookUrl: v.optional(v.pipe(v.string(), v.url())),
-  callbackUrl: v.optional(v.pipe(v.string(), v.url()))
-});
-var BaseTenantUpdateRequestSchema = v.object({
-  id: v.optional(v.string()),
-  companyId: v.optional(v.string()),
-  companyName: v.optional(v.string()),
-  environmentType: v.optional(v.picklist(["POC", "DEV", "QA", "PROD"])),
-  configLocator: v.optional(ConfigLocatorSchema),
-  email: v.optional(v.pipe(v.string(), v.email())),
-  webhookUrl: v.optional(v.pipe(v.string(), v.url())),
-  callbackUrl: v.optional(v.pipe(v.string(), v.url()))
-});
-var valibotValidators = {
-  authzEntityBase: () => withValidate(authzEntityBaseSchema),
-  authzResource: () => {
-    const resourceSchema = v.object({
-      ...authzEntityBaseSchema.entries,
-      type: v.string(),
-      parent: v.optional(v.lazy(() => v.union([v.string(), resourceSchema])))
-    });
-    return withValidate(resourceSchema);
-  },
-  authzPermission: () => {
-    const permissionSchema = v.object({
-      ...authzEntityBaseSchema.entries,
-      requestable: v.optional(v.boolean()),
-      action: v.optional(v.string()),
-      permissionTypes: v.optional(v.array(v.string())),
-      resourceTypes: v.optional(v.array(v.string())),
-      applyToSubResources: v.optional(v.boolean()),
-      assignableSubjectTypes: v.pipe(v.array(v.picklist(["user", "customer", "workload"])), v.minLength(1)),
-      recommendedSubjectTypes: v.optional(v.array(v.picklist(["user", "customer", "workload"])))
-    });
-    return withValidate(permissionSchema);
-  },
-  authzRole: () => {
-    const permissionSchema = valibotValidators.authzPermission();
-    const roleSchema = v.object({
-      ...authzEntityBaseSchema.entries,
-      requestable: v.optional(v.boolean()),
-      roles: v.optional(v.array(v.union([v.string(), v.lazy(() => roleSchema)]))),
-      permissions: v.optional(v.array(v.union([v.string(), permissionSchema]))),
-      assignableSubjectTypes: v.pipe(v.array(v.picklist(["user", "customer", "workload"])), v.minLength(1)),
-      recommendedSubjectTypes: v.optional(v.array(v.picklist(["user", "customer", "workload"])))
-    });
-    return withValidate(roleSchema);
-  },
-  authzGroup: () => {
-    const roleSchema = valibotValidators.authzRole();
-    const permissionSchema = valibotValidators.authzPermission();
-    const resourceSchema = valibotValidators.authzResource();
-    const groupSchema = v.object({
-      ...authzEntityBaseSchema.entries,
-      requestable: v.optional(v.boolean()),
-      groups: v.optional(v.array(v.union([v.string(), v.lazy(() => groupSchema)]))),
-      roles: v.optional(v.array(v.union([v.string(), roleSchema]))),
-      permissions: v.optional(v.array(v.union([v.string(), permissionSchema]))),
-      resources: v.optional(v.array(v.union([v.string(), resourceSchema]))),
-      assignableSubjectTypes: v.pipe(v.array(v.picklist(["user", "customer", "workload"])), v.minLength(1)),
-      recommendedSubjectTypes: v.optional(v.array(v.picklist(["user", "customer", "workload"])))
-    });
-    return withValidate(groupSchema);
-  },
-  oidcCallbackParams: () => v.object({
-    code: v.string(),
-    state: v.optional(v.string()),
-    session_state: v.optional(v.string()),
-    error: v.optional(v.string()),
-    error_description: v.optional(v.string()),
-    error_uri: v.optional(v.string()),
-    iss: v.optional(v.string())
-  }),
-  idTokenClaims: () => v.looseObject({
-    sub: v.string(),
-    iss: v.string(),
-    aud: v.union([v.string(), v.pipe(v.array(v.string()), v.minLength(1))]),
-    exp: v.number(),
-    iat: v.optional(v.number()),
-    sid: v.optional(v.string()),
-    name: v.optional(v.string()),
-    email: v.optional(v.union([v.pipe(v.string(), v.email()), v.pipe(v.string(), v.regex(/^[^@]+@localhost$/i))])),
-    preferred_username: v.optional(v.string()),
-    picture: v.optional(v.pipe(v.string(), v.url()))
-  }),
-  tokenResponse: () => v.object({
-    access_token: v.string(),
-    id_token: v.string(),
-    refresh_token: v.optional(v.string()),
-    token_type: v.string(),
-    expires_in: v.optional(v.number()),
-    scope: v.optional(v.string()),
-    refresh_expires_in: v.optional(v.number()),
-    session_state: v.optional(v.string()),
-    expires: v.optional(v.string())
-  }),
-  scimUser: () => {
-    const nameSchema = v.object({
-      formatted: v.optional(v.string()),
-      familyName: v.optional(v.string()),
-      givenName: v.optional(v.string()),
-      middleName: v.optional(v.string()),
-      honorificPrefix: v.optional(v.string()),
-      honorificSuffix: v.optional(v.string())
-    });
-    const emailSchema = v.object({
-      value: v.pipe(v.string(), v.email()),
-      display: v.optional(v.string()),
-      type: v.optional(v.string()),
-      primary: v.optional(v.boolean())
-    });
-    const phoneNumberSchema = v.object({
-      value: v.string(),
-      display: v.optional(v.string()),
-      type: v.optional(v.string()),
-      primary: v.optional(v.boolean())
-    });
-    const addressSchema = v.object({
-      formatted: v.optional(v.string()),
-      streetAddress: v.optional(v.string()),
-      locality: v.optional(v.string()),
-      region: v.optional(v.string()),
-      postalCode: v.optional(v.string()),
-      country: v.optional(v.string()),
-      type: v.optional(v.string()),
-      primary: v.optional(v.boolean())
-    });
-    const groupSchema = v.object({
-      value: v.string(),
-      $ref: v.optional(v.string()),
-      display: v.optional(v.string()),
-      type: v.optional(v.string())
-    });
-    const roleSchema = v.object({
-      value: v.string(),
-      display: v.optional(v.string()),
-      type: v.optional(v.string()),
-      primary: v.optional(v.boolean())
-    });
-    const enterpriseUserSchema = v.object({
-      employeeNumber: v.optional(v.string()),
-      costCenter: v.optional(v.string()),
-      organization: v.optional(v.string()),
-      division: v.optional(v.string()),
-      department: v.optional(v.string()),
-      manager: v.optional(v.object({
-        value: v.optional(v.string()),
-        $ref: v.optional(v.string()),
-        displayName: v.optional(v.string())
-      }))
-    });
-    return v.object({
-      id: v.optional(v.string()),
-      externalId: v.optional(v.string()),
-      meta: v.optional(v.object({
-        resourceType: v.optional(v.string()),
-        created: v.optional(v.string()),
-        lastModified: v.optional(v.string()),
-        location: v.optional(v.string()),
-        version: v.optional(v.string())
-      })),
-      userName: v.string(),
-      name: v.optional(nameSchema),
-      displayName: v.optional(v.string()),
-      nickName: v.optional(v.string()),
-      profileUrl: v.optional(v.pipe(v.string(), v.url())),
-      title: v.optional(v.string()),
-      userType: v.optional(v.string()),
-      preferredLanguage: v.optional(v.string()),
-      locale: v.optional(v.string()),
-      timezone: v.optional(v.string()),
-      active: v.optional(v.boolean()),
-      password: v.optional(v.never()),
-      emails: v.optional(v.array(emailSchema)),
-      phoneNumbers: v.optional(v.array(phoneNumberSchema)),
-      ims: v.optional(v.array(v.object({
-        value: v.string(),
-        display: v.optional(v.string()),
-        type: v.optional(v.string()),
-        primary: v.optional(v.boolean())
-      }))),
-      photos: v.optional(v.array(v.object({
-        value: v.string(),
-        display: v.optional(v.string()),
-        type: v.optional(v.string()),
-        primary: v.optional(v.boolean())
-      }))),
-      addresses: v.optional(v.array(addressSchema)),
-      groups: v.optional(v.array(groupSchema)),
-      entitlements: v.optional(v.array(v.object({
-        value: v.string(),
-        display: v.optional(v.string()),
-        type: v.optional(v.string()),
-        primary: v.optional(v.boolean())
-      }))),
-      roles: v.optional(v.array(roleSchema)),
-      x509Certificates: v.optional(v.array(v.object({
-        value: v.string(),
-        display: v.optional(v.string()),
-        type: v.optional(v.string()),
-        primary: v.optional(v.boolean())
-      }))),
-      "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User": v.optional(enterpriseUserSchema),
-      [ION_SCIM_USER_EXTENSION_URN]: v.optional(v.object({
-        ecid: ecidSchema(),
-        accountClass: v.optional(v.string())
-      })),
-      schemas: v.optional(v.array(v.string()))
-    });
-  },
-  scimGroup: () => {
-    const groupMemberSchema = v.object({
-      value: v.string(),
-      $ref: v.optional(v.string()),
-      display: v.optional(v.string()),
-      type: v.optional(v.picklist(["User", "Group", "Workload", "Customer"]))
-    });
-    return v.object({
-      id: v.optional(v.string()),
-      externalId: v.optional(v.string()),
-      meta: v.optional(v.object({
-        resourceType: v.optional(v.string()),
-        created: v.optional(v.string()),
-        lastModified: v.optional(v.string()),
-        location: v.optional(v.string()),
-        version: v.optional(v.string())
-      })),
-      displayName: v.string(),
-      members: v.optional(v.array(groupMemberSchema)),
-      "urn:ionite:params:scim:schemas:extension:authz:2.0:Group": v.optional(v.object({
-        type: v.optional(v.picklist(["group", "role", "permission"])),
-        requestable: v.optional(v.boolean()),
-        description: v.optional(v.string()),
-        resources: v.optional(v.array(v.string()))
-      })),
-      schemas: v.optional(v.array(v.string()))
-    });
-  },
-  jwtAssertionClaims: () => v.looseObject({
-    iss: v.string(),
-    sub: v.string(),
-    aud: v.optional(v.union([v.string(), v.array(v.string())])),
-    exp: v.number(),
-    iat: v.number(),
-    jti: v.optional(v.string()),
-    scope: v.optional(v.string())
-  }),
-  workloadTokenResponse: () => v.object({
-    access_token: v.string(),
-    token_type: v.string(),
-    expires_in: v.optional(v.number()),
-    scope: v.optional(v.string()),
-    refresh_token: v.optional(v.string()),
-    expires: v.optional(v.string())
-  }),
-  createTenantRequest: (extendedShape) => extendedShape ? v.object({ ...BaseTenantCreateRequestSchema.entries, ...extendedShape }) : BaseTenantCreateRequestSchema,
-  updateTenantRequest: (extendedShape) => extendedShape ? v.object({ ...BaseTenantUpdateRequestSchema.entries, ...extendedShape }) : BaseTenantUpdateRequestSchema,
-  baseUser: () => BaseUser,
-  customer: () => BaseCustomer,
-  tenantResponse: () => v.union([
-    v.object({
-      tenantUrl: v.optional(v.pipe(v.string(), v.url())),
-      status: v.picklist(["pending", "processing", "completed", "failed"]),
-      error: v.optional(v.string())
-    }),
-    v.object({
-      status: v.literal("action_required"),
-      actionUrl: v.pipe(v.string(), v.url()),
-      requestToken: v.string(),
-      expiresAt: v.string()
-    })
-  ]),
-  registerIAMAppPayload: () => v.object({
-    id: v.pipe(v.string(), v.minLength(1)),
-    companyId: v.pipe(v.string(), v.minLength(1)),
-    companyName: v.pipe(v.string(), v.minLength(1)),
-    environmentType: v.picklist(["POC", "DEV", "QA", "PROD"]),
-    tenantUrl: v.optional(v.pipe(v.string(), v.url())),
-    displayName: v.optional(v.string()),
-    productId: v.optional(v.string()),
-    applicationId: v.optional(v.string()),
-    scimBaseUrl: v.optional(v.pipe(v.string(), v.url())),
-    workload: v.optional(v.record(v.string(), v.unknown()))
-  }),
-  registerSSOAppPayload: () => v.object({
-    redirectUris: v.pipe(v.array(v.pipe(v.string(), v.check(isSafeRedirectUri, `redirectUri ${SAFE_REDIRECT_URI_MESSAGE}`))), v.minLength(1)),
-    backchannelLogoutUri: v.optional(v.pipe(v.string(), v.check(isSafeRedirectUri, `backchannelLogoutUri ${SAFE_REDIRECT_URI_MESSAGE}`))),
-    displayName: v.optional(v.string()),
-    defaultScope: v.optional(v.string()),
-    issuerTenant: v.optional(v.string()),
-    applicationId: v.optional(v.string())
-  })
-};
-function createValidators() {
-  return {
-    sso: {
-      callbackParams: withValidate(valibotValidators.oidcCallbackParams()),
-      idTokenClaims: withValidate(valibotValidators.idTokenClaims()),
-      tokenResponse: withValidate(valibotValidators.tokenResponse())
-    },
-    iam: {
-      user: withValidate(valibotValidators.scimUser()),
-      group: withValidate(valibotValidators.scimGroup())
-    },
-    workload: {
-      jwtAssertionClaims: withValidate(valibotValidators.jwtAssertionClaims()),
-      tokenResponse: withValidate(valibotValidators.workloadTokenResponse())
-    },
-    tenant: {
-      createTenantRequest: withValidate(valibotValidators.createTenantRequest()),
-      updateTenantRequest: withValidate(valibotValidators.updateTenantRequest()),
-      tenantResponse: withValidate(valibotValidators.tenantResponse())
-    },
-    ciam: {
-      customer: withValidate(valibotValidators.customer()),
-      callbackParams: withValidate(valibotValidators.oidcCallbackParams()),
-      idTokenClaims: withValidate(valibotValidators.idTokenClaims()),
-      tokenResponse: withValidate(valibotValidators.tokenResponse())
-    }
-  };
-}
-function createControlValidators() {
-  return {
-    iam: {
-      registerIAMAppPayload: withValidate(valibotValidators.registerIAMAppPayload())
-    },
-    sso: {
-      registerSSOAppPayload: withValidate(valibotValidators.registerSSOAppPayload())
-    }
-  };
-}
-export {
-  valibotValidators,
-  isSafeRedirectUri,
-  createValidators,
-  createControlValidators,
-  ConfigLocatorSchema,
-  BaseUser,
-  BaseTenantUpdateRequestSchema,
-  BaseTenantCreateRequestSchema,
-  BaseTenant,
-  BaseCustomer
-};
+import{ION_SCIM_USER_EXTENSION_URN as k,isEcid as b,withValidate as t}from"@ionite/core";import*as e from"valibot";var T='must be a valid ECID formatted as "ecid:<realm>:<opaque>"',g=()=>e.optional(e.pipe(e.string(),e.check((n)=>b(n),T)));function p(n){for(let a=0;a<n.length;a++){let r=n.charCodeAt(a);if(r<=31||r===127)return!1}let i;try{i=new URL(n)}catch{return!1}if(i.protocol==="https:")return!0;if(i.protocol==="http:"){let a=i.hostname.toLowerCase();return a==="localhost"||a==="127.0.0.1"||a==="[::1]"||a==="::1"}return!1}var l="must be an absolute https URL (http is allowed only for localhost)",f=e.object({userName:e.string(),name:e.string(),email:e.pipe(e.string(),e.email()),id:e.optional(e.string()),avatar:e.optional(e.union([e.pipe(e.string(),e.url()),e.literal("")])),userType:e.optional(e.string()),ecid:g(),accountClass:e.optional(e.string())}),w=e.object({userName:e.string(),name:e.string(),email:e.pipe(e.string(),e.email()),id:e.optional(e.string()),avatar:e.optional(e.union([e.pipe(e.string(),e.url()),e.literal("")])),userType:e.optional(e.string())}),s=e.object({id:e.string(),name:e.string(),displayName:e.optional(e.string()),description:e.string(),metadata:e.optional(e.record(e.string(),e.unknown()))}),d=e.strictObject({type:e.literal("vault"),vaultUrl:e.optional(e.string()),vaultPath:e.string(),vaultTtl:e.optional(e.number()),vaultWorkloadTokenUrl:e.optional(e.string()),vaultWorkloadClientId:e.optional(e.string()),vaultWorkloadScope:e.optional(e.string()),vaultLfvServerUrl:e.optional(e.string()),vaultLfvClientId:e.optional(e.string()),vaultLfvDeliveryEndpoint:e.optional(e.string()),vaultLfvVerifyJwks:e.optional(e.string()),vaultLfvEventsEndpoint:e.optional(e.string()),vaultLfvPath:e.optional(e.string()),vaultLfvDeliveryTimeout:e.optional(e.number()),vaultLfvRetryInterval:e.optional(e.number()),vaultLfvWarnInterval:e.optional(e.number()),vaultWebsocketUrl:e.optional(e.string()),vaultWebsocketClientId:e.optional(e.string()),vaultWebsocketHeader:e.optional(e.picklist(["X-Vault-Token","Authorization"]))}),R=e.strictObject({type:e.literal("aws"),awsWebhookUrl:e.string(),awsTtl:e.optional(e.number())}),j=e.strictObject({type:e.literal("azure"),azureAuthMethod:e.optional(e.picklist(["client_secret","workload_identity","managed_identity"])),azureEntraTenantId:e.optional(e.string()),azureClientId:e.optional(e.string()),azureManagedIdentityClientId:e.optional(e.string()),azureImdsApiVersion:e.optional(e.string()),azurePath:e.optional(e.string()),azureVaultUrl:e.optional(e.string()),azureVaultName:e.optional(e.string()),azureApiVersion:e.optional(e.string()),azureScope:e.optional(e.string()),azureSecretNamePrefix:e.optional(e.string()),azureTtl:e.optional(e.number())}),C=e.strictObject({type:e.literal("gcp"),gcpTtl:e.optional(e.number())}),c=e.variant("type",[d,R,j,C]),v=e.union([c,e.strictObject({type:e.literal("mirror"),from:c,to:d})]),U=e.object({id:e.pipe(e.string(),e.minLength(1)),companyId:e.string(),companyName:e.string(),environmentType:e.picklist(["POC","DEV","QA","PROD"]),status:e.picklist(["pending","processing","completed","failed","action_required"]),createdAt:e.date(),updatedAt:e.date(),configLocator:e.optional(v),email:e.optional(e.string()),webhookUrl:e.optional(e.string()),callbackUrl:e.optional(e.string()),tenantUrl:e.optional(e.string()),error:e.optional(e.string()),actionUrl:e.optional(e.string()),requestToken:e.optional(e.string()),expiresAt:e.optional(e.string())}),u=e.object({id:e.string(),companyId:e.string(),companyName:e.string(),environmentType:e.picklist(["POC","DEV","QA","PROD"]),configLocator:e.optional(v),email:e.optional(e.pipe(e.string(),e.email())),webhookUrl:e.optional(e.pipe(e.string(),e.url())),callbackUrl:e.optional(e.pipe(e.string(),e.url()))}),m=e.object({id:e.optional(e.string()),companyId:e.optional(e.string()),companyName:e.optional(e.string()),environmentType:e.optional(e.picklist(["POC","DEV","QA","PROD"])),configLocator:e.optional(v),email:e.optional(e.pipe(e.string(),e.email())),webhookUrl:e.optional(e.pipe(e.string(),e.url())),callbackUrl:e.optional(e.pipe(e.string(),e.url()))}),o={authzEntityBase:()=>t(s),authzResource:()=>{let n=e.object({...s.entries,type:e.string(),parent:e.optional(e.lazy(()=>e.union([e.string(),n])))});return t(n)},authzPermission:()=>{let n=e.object({...s.entries,requestable:e.optional(e.boolean()),riskLevel:e.optional(e.string()),action:e.optional(e.string()),permissionTypes:e.optional(e.array(e.string())),resourceTypes:e.optional(e.array(e.string())),applyToSubResources:e.optional(e.boolean()),assignableSubjectTypes:e.pipe(e.array(e.picklist(["user","customer","workload"])),e.minLength(1)),recommendedSubjectTypes:e.optional(e.array(e.picklist(["user","customer","workload"])))});return t(n)},authzRole:()=>{let n=o.authzPermission(),i=e.object({...s.entries,requestable:e.optional(e.boolean()),riskLevel:e.optional(e.string()),roles:e.optional(e.array(e.union([e.string(),e.lazy(()=>i)]))),permissions:e.optional(e.array(e.union([e.string(),n]))),assignableSubjectTypes:e.pipe(e.array(e.picklist(["user","customer","workload"])),e.minLength(1)),recommendedSubjectTypes:e.optional(e.array(e.picklist(["user","customer","workload"])))});return t(i)},authzGroup:()=>{let n=o.authzRole(),i=o.authzPermission(),a=o.authzResource(),r=e.object({...s.entries,requestable:e.optional(e.boolean()),riskLevel:e.optional(e.string()),groups:e.optional(e.array(e.union([e.string(),e.lazy(()=>r)]))),roles:e.optional(e.array(e.union([e.string(),n]))),permissions:e.optional(e.array(e.union([e.string(),i]))),resources:e.optional(e.array(e.union([e.string(),a]))),assignableSubjectTypes:e.pipe(e.array(e.picklist(["user","customer","workload"])),e.minLength(1)),recommendedSubjectTypes:e.optional(e.array(e.picklist(["user","customer","workload"])))});return t(r)},oidcCallbackParams:()=>e.object({code:e.string(),state:e.optional(e.string()),session_state:e.optional(e.string()),error:e.optional(e.string()),error_description:e.optional(e.string()),error_uri:e.optional(e.string()),iss:e.optional(e.string())}),idTokenClaims:()=>e.looseObject({sub:e.string(),iss:e.string(),aud:e.union([e.string(),e.pipe(e.array(e.string()),e.minLength(1))]),exp:e.number(),iat:e.optional(e.number()),sid:e.optional(e.string()),name:e.optional(e.string()),email:e.optional(e.union([e.pipe(e.string(),e.email()),e.pipe(e.string(),e.regex(/^[^@]+@localhost$/i))])),preferred_username:e.optional(e.string()),picture:e.optional(e.pipe(e.string(),e.url()))}),tokenResponse:()=>e.object({access_token:e.string(),id_token:e.string(),refresh_token:e.optional(e.string()),token_type:e.string(),expires_in:e.optional(e.number()),scope:e.optional(e.string()),refresh_expires_in:e.optional(e.number()),session_state:e.optional(e.string()),expires:e.optional(e.string())}),scimUser:()=>{let n=e.object({formatted:e.optional(e.string()),familyName:e.optional(e.string()),givenName:e.optional(e.string()),middleName:e.optional(e.string()),honorificPrefix:e.optional(e.string()),honorificSuffix:e.optional(e.string())}),i=e.object({value:e.pipe(e.string(),e.email()),display:e.optional(e.string()),type:e.optional(e.string()),primary:e.optional(e.boolean())}),a=e.object({value:e.string(),display:e.optional(e.string()),type:e.optional(e.string()),primary:e.optional(e.boolean())}),r=e.object({formatted:e.optional(e.string()),streetAddress:e.optional(e.string()),locality:e.optional(e.string()),region:e.optional(e.string()),postalCode:e.optional(e.string()),country:e.optional(e.string()),type:e.optional(e.string()),primary:e.optional(e.boolean())}),h=e.object({value:e.string(),$ref:e.optional(e.string()),display:e.optional(e.string()),type:e.optional(e.string())}),y=e.object({value:e.string(),display:e.optional(e.string()),type:e.optional(e.string()),primary:e.optional(e.boolean())}),S=e.object({employeeNumber:e.optional(e.string()),costCenter:e.optional(e.string()),organization:e.optional(e.string()),division:e.optional(e.string()),department:e.optional(e.string()),manager:e.optional(e.object({value:e.optional(e.string()),$ref:e.optional(e.string()),displayName:e.optional(e.string())}))});return e.object({id:e.optional(e.string()),externalId:e.optional(e.string()),meta:e.optional(e.object({resourceType:e.optional(e.string()),created:e.optional(e.string()),lastModified:e.optional(e.string()),location:e.optional(e.string()),version:e.optional(e.string())})),userName:e.string(),name:e.optional(n),displayName:e.optional(e.string()),nickName:e.optional(e.string()),profileUrl:e.optional(e.pipe(e.string(),e.url())),title:e.optional(e.string()),userType:e.optional(e.string()),preferredLanguage:e.optional(e.string()),locale:e.optional(e.string()),timezone:e.optional(e.string()),active:e.optional(e.boolean()),password:e.optional(e.never()),emails:e.optional(e.array(i)),phoneNumbers:e.optional(e.array(a)),ims:e.optional(e.array(e.object({value:e.string(),display:e.optional(e.string()),type:e.optional(e.string()),primary:e.optional(e.boolean())}))),photos:e.optional(e.array(e.object({value:e.string(),display:e.optional(e.string()),type:e.optional(e.string()),primary:e.optional(e.boolean())}))),addresses:e.optional(e.array(r)),groups:e.optional(e.array(h)),entitlements:e.optional(e.array(e.object({value:e.string(),display:e.optional(e.string()),type:e.optional(e.string()),primary:e.optional(e.boolean())}))),roles:e.optional(e.array(y)),x509Certificates:e.optional(e.array(e.object({value:e.string(),display:e.optional(e.string()),type:e.optional(e.string()),primary:e.optional(e.boolean())}))),"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User":e.optional(S),[k]:e.optional(e.object({ecid:g(),accountClass:e.optional(e.string())})),schemas:e.optional(e.array(e.string()))})},scimGroup:()=>{let n=e.object({value:e.string(),$ref:e.optional(e.string()),display:e.optional(e.string()),type:e.optional(e.picklist(["User","Group","Workload","Customer"]))});return e.object({id:e.optional(e.string()),externalId:e.optional(e.string()),meta:e.optional(e.object({resourceType:e.optional(e.string()),created:e.optional(e.string()),lastModified:e.optional(e.string()),location:e.optional(e.string()),version:e.optional(e.string())})),displayName:e.string(),members:e.optional(e.array(n)),"urn:ionite:params:scim:schemas:extension:authz:2.0:Group":e.optional(e.object({type:e.optional(e.picklist(["group","role","permission"])),requestable:e.optional(e.boolean()),description:e.optional(e.string()),resources:e.optional(e.array(e.string()))})),schemas:e.optional(e.array(e.string()))})},jwtAssertionClaims:()=>e.looseObject({iss:e.string(),sub:e.string(),aud:e.optional(e.union([e.string(),e.array(e.string())])),exp:e.number(),iat:e.number(),jti:e.optional(e.string()),scope:e.optional(e.string())}),workloadTokenResponse:()=>e.object({access_token:e.string(),token_type:e.string(),expires_in:e.optional(e.number()),scope:e.optional(e.string()),refresh_token:e.optional(e.string()),expires:e.optional(e.string())}),createTenantRequest:(n)=>n?e.object({...u.entries,...n}):u,updateTenantRequest:(n)=>n?e.object({...m.entries,...n}):m,baseUser:()=>f,customer:()=>w,tenantResponse:()=>e.union([e.object({tenantUrl:e.optional(e.pipe(e.string(),e.url())),status:e.picklist(["pending","processing","completed","failed"]),error:e.optional(e.string())}),e.object({status:e.literal("action_required"),actionUrl:e.pipe(e.string(),e.url()),requestToken:e.string(),expiresAt:e.string()})]),registerIAMAppPayload:()=>e.object({id:e.pipe(e.string(),e.minLength(1)),companyId:e.pipe(e.string(),e.minLength(1)),companyName:e.pipe(e.string(),e.minLength(1)),environmentType:e.picklist(["POC","DEV","QA","PROD"]),tenantUrl:e.optional(e.pipe(e.string(),e.url())),displayName:e.optional(e.string()),productId:e.optional(e.string()),applicationId:e.optional(e.string()),scimBaseUrl:e.optional(e.pipe(e.string(),e.url())),workload:e.optional(e.record(e.string(),e.unknown()))}),registerSSOAppPayload:()=>e.object({redirectUris:e.pipe(e.array(e.pipe(e.string(),e.check(p,`redirectUri ${l}`))),e.minLength(1)),backchannelLogoutUri:e.optional(e.pipe(e.string(),e.check(p,`backchannelLogoutUri ${l}`))),displayName:e.optional(e.string()),defaultScope:e.optional(e.string()),issuerTenant:e.optional(e.string()),applicationId:e.optional(e.string())})};function V(){return{sso:{callbackParams:t(o.oidcCallbackParams()),idTokenClaims:t(o.idTokenClaims()),tokenResponse:t(o.tokenResponse())},iam:{user:t(o.scimUser()),group:t(o.scimGroup())},workload:{jwtAssertionClaims:t(o.jwtAssertionClaims()),tokenResponse:t(o.workloadTokenResponse())},tenant:{createTenantRequest:t(o.createTenantRequest()),updateTenantRequest:t(o.updateTenantRequest()),tenantResponse:t(o.tenantResponse())},ciam:{customer:t(o.customer()),callbackParams:t(o.oidcCallbackParams()),idTokenClaims:t(o.idTokenClaims()),tokenResponse:t(o.tokenResponse())}}}function O(){return{iam:{registerIAMAppPayload:t(o.registerIAMAppPayload())},sso:{registerSSOAppPayload:t(o.registerSSOAppPayload())}}}export{w as BaseCustomer,U as BaseTenant,u as BaseTenantCreateRequestSchema,m as BaseTenantUpdateRequestSchema,f as BaseUser,v as ConfigLocatorSchema,O as createControlValidators,V as createValidators,p as isSafeRedirectUri,o as valibotValidators};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ionite/valibot",
-  "version": "0.0.24-beta.20260907.3",
+  "version": "0.0.24-beta.20260915.2",
   "description": "Valibot validators for ionite (SSO, IAM, workload, tenant, CIAM)",
   "type": "module",
   "engines": {
@@ -9,7 +9,7 @@
   "author": "ionite",
   "license": "SEE LICENSE IN LICENSE",
   "dependencies": {
-    "@ionite/core": "0.0.24-beta.20260907.3",
+    "@ionite/core": "0.0.24-beta.20260915.2",
     "@standard-schema/spec": "^1.1.0",
     "valibot": "^1.4.2"
   },