@portaidentity/server 1.7.2 → 1.8.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (487) hide show
  1. package/CHANGELOG.md +10 -0
  2. package/dist/applications/index.d.ts +2 -2
  3. package/dist/applications/index.d.ts.map +1 -1
  4. package/dist/applications/index.js +2 -2
  5. package/dist/applications/index.js.map +1 -1
  6. package/dist/applications/repository.d.ts +49 -4
  7. package/dist/applications/repository.d.ts.map +1 -1
  8. package/dist/applications/repository.js +148 -10
  9. package/dist/applications/repository.js.map +1 -1
  10. package/dist/applications/service.d.ts +35 -17
  11. package/dist/applications/service.d.ts.map +1 -1
  12. package/dist/applications/service.js +144 -35
  13. package/dist/applications/service.js.map +1 -1
  14. package/dist/applications/types.d.ts +1 -1
  15. package/dist/applications/types.d.ts.map +1 -1
  16. package/dist/applications/validators.d.ts +14 -0
  17. package/dist/applications/validators.d.ts.map +1 -0
  18. package/dist/applications/validators.js +14 -0
  19. package/dist/applications/validators.js.map +1 -0
  20. package/dist/auth/effective-branding.d.ts +35 -0
  21. package/dist/auth/effective-branding.d.ts.map +1 -0
  22. package/dist/auth/effective-branding.js +81 -0
  23. package/dist/auth/effective-branding.js.map +1 -0
  24. package/dist/auth/email-service.d.ts +3 -8
  25. package/dist/auth/email-service.d.ts.map +1 -1
  26. package/dist/auth/email-service.js +22 -30
  27. package/dist/auth/email-service.js.map +1 -1
  28. package/dist/auth/i18n.d.ts +5 -0
  29. package/dist/auth/i18n.d.ts.map +1 -1
  30. package/dist/auth/i18n.js +6 -5
  31. package/dist/auth/i18n.js.map +1 -1
  32. package/dist/auth/rate-limiter.d.ts +6 -10
  33. package/dist/auth/rate-limiter.d.ts.map +1 -1
  34. package/dist/auth/rate-limiter.js +12 -16
  35. package/dist/auth/rate-limiter.js.map +1 -1
  36. package/dist/auth/recovery-job-processor.d.ts.map +1 -1
  37. package/dist/auth/recovery-job-processor.js +1 -1
  38. package/dist/auth/recovery-job-processor.js.map +1 -1
  39. package/dist/auth/template-engine.d.ts +3 -1
  40. package/dist/auth/template-engine.d.ts.map +1 -1
  41. package/dist/auth/template-engine.js +1 -1
  42. package/dist/auth/template-engine.js.map +1 -1
  43. package/dist/cli/commands/init.d.ts +1 -1
  44. package/dist/cli/commands/init.d.ts.map +1 -1
  45. package/dist/cli/commands/init.js +12 -12
  46. package/dist/cli/commands/init.js.map +1 -1
  47. package/dist/cli/error-handler.d.ts +3 -2
  48. package/dist/cli/error-handler.d.ts.map +1 -1
  49. package/dist/cli/error-handler.js +9 -2
  50. package/dist/cli/error-handler.js.map +1 -1
  51. package/dist/cli/index.d.ts +1 -1
  52. package/dist/cli/index.d.ts.map +1 -1
  53. package/dist/cli/index.js +1 -1
  54. package/dist/cli/index.js.map +1 -1
  55. package/dist/clients/index.d.ts +1 -1
  56. package/dist/clients/index.js +1 -1
  57. package/dist/clients/repository.d.ts +18 -0
  58. package/dist/clients/repository.d.ts.map +1 -1
  59. package/dist/clients/repository.js +36 -0
  60. package/dist/clients/repository.js.map +1 -1
  61. package/dist/clients/secret-repository.d.ts +35 -8
  62. package/dist/clients/secret-repository.d.ts.map +1 -1
  63. package/dist/clients/secret-repository.js +69 -16
  64. package/dist/clients/secret-repository.js.map +1 -1
  65. package/dist/clients/secret-service.d.ts +5 -9
  66. package/dist/clients/secret-service.d.ts.map +1 -1
  67. package/dist/clients/secret-service.js +13 -22
  68. package/dist/clients/secret-service.js.map +1 -1
  69. package/dist/clients/service.d.ts +10 -13
  70. package/dist/clients/service.d.ts.map +1 -1
  71. package/dist/clients/service.js +112 -40
  72. package/dist/clients/service.js.map +1 -1
  73. package/dist/clients/types.d.ts +1 -1
  74. package/dist/clients/types.d.ts.map +1 -1
  75. package/dist/clients/validators.d.ts +83 -1
  76. package/dist/clients/validators.d.ts.map +1 -1
  77. package/dist/clients/validators.js +110 -0
  78. package/dist/clients/validators.js.map +1 -1
  79. package/dist/config/index.d.ts +1 -0
  80. package/dist/config/index.d.ts.map +1 -1
  81. package/dist/config/index.js +1 -0
  82. package/dist/config/index.js.map +1 -1
  83. package/dist/config/schema.d.ts +1 -0
  84. package/dist/config/schema.d.ts.map +1 -1
  85. package/dist/config/schema.js +23 -1
  86. package/dist/config/schema.js.map +1 -1
  87. package/dist/custom-claims/repository.d.ts +14 -9
  88. package/dist/custom-claims/repository.d.ts.map +1 -1
  89. package/dist/custom-claims/repository.js +38 -11
  90. package/dist/custom-claims/repository.js.map +1 -1
  91. package/dist/custom-claims/service.d.ts +11 -6
  92. package/dist/custom-claims/service.d.ts.map +1 -1
  93. package/dist/custom-claims/service.js +43 -20
  94. package/dist/custom-claims/service.js.map +1 -1
  95. package/dist/index.js +8 -2
  96. package/dist/index.js.map +1 -1
  97. package/dist/lib/admin-permissions.d.ts +12 -7
  98. package/dist/lib/admin-permissions.d.ts.map +1 -1
  99. package/dist/lib/admin-permissions.js +26 -16
  100. package/dist/lib/admin-permissions.js.map +1 -1
  101. package/dist/lib/audit-log.d.ts +2 -2
  102. package/dist/lib/audit-log.d.ts.map +1 -1
  103. package/dist/lib/audit-log.js +1 -1
  104. package/dist/lib/audit-log.js.map +1 -1
  105. package/dist/lib/authority-revocation.d.ts +18 -0
  106. package/dist/lib/authority-revocation.d.ts.map +1 -0
  107. package/dist/lib/authority-revocation.js +37 -0
  108. package/dist/lib/authority-revocation.js.map +1 -0
  109. package/dist/lib/branding-assets.d.ts +35 -5
  110. package/dist/lib/branding-assets.d.ts.map +1 -1
  111. package/dist/lib/branding-assets.js +33 -26
  112. package/dist/lib/branding-assets.js.map +1 -1
  113. package/dist/lib/bulk-operations.d.ts +1 -1
  114. package/dist/lib/bulk-operations.d.ts.map +1 -1
  115. package/dist/lib/bulk-operations.js +1 -13
  116. package/dist/lib/bulk-operations.js.map +1 -1
  117. package/dist/lib/cursor.d.ts +2 -0
  118. package/dist/lib/cursor.d.ts.map +1 -1
  119. package/dist/lib/cursor.js +2 -7
  120. package/dist/lib/cursor.js.map +1 -1
  121. package/dist/lib/database.d.ts.map +1 -1
  122. package/dist/lib/database.js +5 -0
  123. package/dist/lib/database.js.map +1 -1
  124. package/dist/lib/deletion-cleanup.d.ts +43 -0
  125. package/dist/lib/deletion-cleanup.d.ts.map +1 -0
  126. package/dist/lib/deletion-cleanup.js +207 -0
  127. package/dist/lib/deletion-cleanup.js.map +1 -0
  128. package/dist/lib/image-validator.d.ts +3 -1
  129. package/dist/lib/image-validator.d.ts.map +1 -1
  130. package/dist/lib/image-validator.js +32 -19
  131. package/dist/lib/image-validator.js.map +1 -1
  132. package/dist/lib/log-format.d.ts +20 -0
  133. package/dist/lib/log-format.d.ts.map +1 -0
  134. package/dist/lib/log-format.js +22 -0
  135. package/dist/lib/log-format.js.map +1 -0
  136. package/dist/lib/logger.d.ts +3 -1
  137. package/dist/lib/logger.d.ts.map +1 -1
  138. package/dist/lib/logger.js +21 -4
  139. package/dist/lib/logger.js.map +1 -1
  140. package/dist/lib/redis.d.ts.map +1 -1
  141. package/dist/lib/redis.js +3 -0
  142. package/dist/lib/redis.js.map +1 -1
  143. package/dist/lib/session-tracking.d.ts +73 -11
  144. package/dist/lib/session-tracking.d.ts.map +1 -1
  145. package/dist/lib/session-tracking.js +76 -32
  146. package/dist/lib/session-tracking.js.map +1 -1
  147. package/dist/lib/signing-key-crypto.d.ts.map +1 -1
  148. package/dist/lib/signing-key-crypto.js +4 -5
  149. package/dist/lib/signing-key-crypto.js.map +1 -1
  150. package/dist/lib/signing-keys.d.ts +3 -4
  151. package/dist/lib/signing-keys.d.ts.map +1 -1
  152. package/dist/lib/signing-keys.js +66 -41
  153. package/dist/lib/signing-keys.js.map +1 -1
  154. package/dist/lib/super-admin-protection.d.ts +5 -5
  155. package/dist/lib/super-admin-protection.d.ts.map +1 -1
  156. package/dist/lib/super-admin-protection.js +6 -9
  157. package/dist/lib/super-admin-protection.js.map +1 -1
  158. package/dist/lib/system-config-catalog.d.ts +268 -0
  159. package/dist/lib/system-config-catalog.d.ts.map +1 -0
  160. package/dist/lib/system-config-catalog.js +90 -0
  161. package/dist/lib/system-config-catalog.js.map +1 -0
  162. package/dist/lib/system-config.d.ts +30 -33
  163. package/dist/lib/system-config.d.ts.map +1 -1
  164. package/dist/lib/system-config.js +78 -93
  165. package/dist/lib/system-config.js.map +1 -1
  166. package/dist/lib/with-timeout.d.ts +32 -0
  167. package/dist/lib/with-timeout.d.ts.map +1 -0
  168. package/dist/lib/with-timeout.js +45 -0
  169. package/dist/lib/with-timeout.js.map +1 -0
  170. package/dist/middleware/admin-auth.d.ts +6 -5
  171. package/dist/middleware/admin-auth.d.ts.map +1 -1
  172. package/dist/middleware/admin-auth.js +30 -20
  173. package/dist/middleware/admin-auth.js.map +1 -1
  174. package/dist/middleware/admin-cors.d.ts +3 -3
  175. package/dist/middleware/admin-cors.js +3 -3
  176. package/dist/middleware/admin-mutation-audit.d.ts +3 -2
  177. package/dist/middleware/admin-mutation-audit.d.ts.map +1 -1
  178. package/dist/middleware/admin-mutation-audit.js +12 -5
  179. package/dist/middleware/admin-mutation-audit.js.map +1 -1
  180. package/dist/middleware/admin-rate-limiter.d.ts +7 -8
  181. package/dist/middleware/admin-rate-limiter.d.ts.map +1 -1
  182. package/dist/middleware/admin-rate-limiter.js +7 -8
  183. package/dist/middleware/admin-rate-limiter.js.map +1 -1
  184. package/dist/middleware/client-secret-hash.d.ts +10 -29
  185. package/dist/middleware/client-secret-hash.d.ts.map +1 -1
  186. package/dist/middleware/client-secret-hash.js +161 -59
  187. package/dist/middleware/client-secret-hash.js.map +1 -1
  188. package/dist/middleware/health.d.ts +17 -0
  189. package/dist/middleware/health.d.ts.map +1 -1
  190. package/dist/middleware/health.js +25 -21
  191. package/dist/middleware/health.js.map +1 -1
  192. package/dist/middleware/ready.d.ts.map +1 -1
  193. package/dist/middleware/ready.js +1 -12
  194. package/dist/middleware/ready.js.map +1 -1
  195. package/dist/middleware/require-existing-organization.d.ts +18 -0
  196. package/dist/middleware/require-existing-organization.d.ts.map +1 -0
  197. package/dist/middleware/require-existing-organization.js +38 -0
  198. package/dist/middleware/require-existing-organization.js.map +1 -0
  199. package/dist/middleware/require-permission.d.ts.map +1 -1
  200. package/dist/middleware/require-permission.js +35 -1
  201. package/dist/middleware/require-permission.js.map +1 -1
  202. package/dist/middleware/require-user-organization.d.ts.map +1 -1
  203. package/dist/middleware/require-user-organization.js +4 -2
  204. package/dist/middleware/require-user-organization.js.map +1 -1
  205. package/dist/middleware/security-headers.d.ts +18 -0
  206. package/dist/middleware/security-headers.d.ts.map +1 -1
  207. package/dist/middleware/security-headers.js +32 -1
  208. package/dist/middleware/security-headers.js.map +1 -1
  209. package/dist/middleware/tenant-resolver.d.ts +1 -2
  210. package/dist/middleware/tenant-resolver.d.ts.map +1 -1
  211. package/dist/middleware/tenant-resolver.js +1 -5
  212. package/dist/middleware/tenant-resolver.js.map +1 -1
  213. package/dist/middleware/token-rate-limiter.d.ts +37 -16
  214. package/dist/middleware/token-rate-limiter.d.ts.map +1 -1
  215. package/dist/middleware/token-rate-limiter.js +126 -54
  216. package/dist/middleware/token-rate-limiter.js.map +1 -1
  217. package/dist/oidc/account-finder.d.ts +5 -5
  218. package/dist/oidc/account-finder.d.ts.map +1 -1
  219. package/dist/oidc/account-finder.js +31 -23
  220. package/dist/oidc/account-finder.js.map +1 -1
  221. package/dist/oidc/adapter-factory.d.ts.map +1 -1
  222. package/dist/oidc/adapter-factory.js +83 -3
  223. package/dist/oidc/adapter-factory.js.map +1 -1
  224. package/dist/oidc/configuration.d.ts +3 -8
  225. package/dist/oidc/configuration.d.ts.map +1 -1
  226. package/dist/oidc/configuration.js +64 -50
  227. package/dist/oidc/configuration.js.map +1 -1
  228. package/dist/oidc/provider.d.ts.map +1 -1
  229. package/dist/oidc/provider.js +7 -0
  230. package/dist/oidc/provider.js.map +1 -1
  231. package/dist/oidc/redis-adapter.d.ts +2 -3
  232. package/dist/oidc/redis-adapter.d.ts.map +1 -1
  233. package/dist/oidc/redis-adapter.js +54 -46
  234. package/dist/oidc/redis-adapter.js.map +1 -1
  235. package/dist/organizations/branding-url.d.ts +17 -0
  236. package/dist/organizations/branding-url.d.ts.map +1 -0
  237. package/dist/organizations/branding-url.js +38 -0
  238. package/dist/organizations/branding-url.js.map +1 -0
  239. package/dist/organizations/index.d.ts +2 -2
  240. package/dist/organizations/index.d.ts.map +1 -1
  241. package/dist/organizations/index.js +1 -1
  242. package/dist/organizations/index.js.map +1 -1
  243. package/dist/organizations/repository.d.ts +22 -32
  244. package/dist/organizations/repository.d.ts.map +1 -1
  245. package/dist/organizations/repository.js +64 -45
  246. package/dist/organizations/repository.js.map +1 -1
  247. package/dist/organizations/service.d.ts +14 -46
  248. package/dist/organizations/service.d.ts.map +1 -1
  249. package/dist/organizations/service.js +60 -112
  250. package/dist/organizations/service.js.map +1 -1
  251. package/dist/organizations/types.d.ts +1 -15
  252. package/dist/organizations/types.d.ts.map +1 -1
  253. package/dist/organizations/validators.d.ts +41 -0
  254. package/dist/organizations/validators.d.ts.map +1 -0
  255. package/dist/organizations/validators.js +48 -0
  256. package/dist/organizations/validators.js.map +1 -0
  257. package/dist/portability/apply.d.ts +15 -0
  258. package/dist/portability/apply.d.ts.map +1 -0
  259. package/dist/portability/apply.js +274 -0
  260. package/dist/portability/apply.js.map +1 -0
  261. package/dist/portability/authorization.d.ts +30 -0
  262. package/dist/portability/authorization.d.ts.map +1 -0
  263. package/dist/portability/authorization.js +130 -0
  264. package/dist/portability/authorization.js.map +1 -0
  265. package/dist/portability/cleanup.d.ts +29 -0
  266. package/dist/portability/cleanup.d.ts.map +1 -0
  267. package/dist/portability/cleanup.js +167 -0
  268. package/dist/portability/cleanup.js.map +1 -0
  269. package/dist/portability/export.d.ts +18 -0
  270. package/dist/portability/export.d.ts.map +1 -0
  271. package/dist/portability/export.js +125 -0
  272. package/dist/portability/export.js.map +1 -0
  273. package/dist/portability/import-repository.d.ts +204 -0
  274. package/dist/portability/import-repository.d.ts.map +1 -0
  275. package/dist/portability/import-repository.js +347 -0
  276. package/dist/portability/import-repository.js.map +1 -0
  277. package/dist/portability/import-user-client-writers.d.ts +40 -0
  278. package/dist/portability/import-user-client-writers.d.ts.map +1 -0
  279. package/dist/portability/import-user-client-writers.js +168 -0
  280. package/dist/portability/import-user-client-writers.js.map +1 -0
  281. package/dist/portability/index.d.ts +8 -0
  282. package/dist/portability/index.d.ts.map +1 -0
  283. package/dist/portability/index.js +8 -0
  284. package/dist/portability/index.js.map +1 -0
  285. package/dist/portability/plan-support.d.ts +137 -0
  286. package/dist/portability/plan-support.d.ts.map +1 -0
  287. package/dist/portability/plan-support.js +336 -0
  288. package/dist/portability/plan-support.js.map +1 -0
  289. package/dist/portability/plan.d.ts +34 -0
  290. package/dist/portability/plan.d.ts.map +1 -0
  291. package/dist/portability/plan.js +450 -0
  292. package/dist/portability/plan.js.map +1 -0
  293. package/dist/portability/repository.d.ts +95 -0
  294. package/dist/portability/repository.d.ts.map +1 -0
  295. package/dist/portability/repository.js +388 -0
  296. package/dist/portability/repository.js.map +1 -0
  297. package/dist/portability/schema.d.ts +589 -0
  298. package/dist/portability/schema.d.ts.map +1 -0
  299. package/dist/portability/schema.js +458 -0
  300. package/dist/portability/schema.js.map +1 -0
  301. package/dist/portability/types.d.ts +381 -0
  302. package/dist/portability/types.d.ts.map +1 -0
  303. package/dist/portability/types.js +19 -0
  304. package/dist/portability/types.js.map +1 -0
  305. package/dist/rbac/errors.d.ts +4 -0
  306. package/dist/rbac/errors.d.ts.map +1 -1
  307. package/dist/rbac/errors.js +7 -0
  308. package/dist/rbac/errors.js.map +1 -1
  309. package/dist/rbac/index.d.ts +3 -3
  310. package/dist/rbac/index.d.ts.map +1 -1
  311. package/dist/rbac/index.js +3 -3
  312. package/dist/rbac/index.js.map +1 -1
  313. package/dist/rbac/mapping-repository.d.ts +84 -9
  314. package/dist/rbac/mapping-repository.d.ts.map +1 -1
  315. package/dist/rbac/mapping-repository.js +222 -55
  316. package/dist/rbac/mapping-repository.js.map +1 -1
  317. package/dist/rbac/permission-repository.d.ts +36 -19
  318. package/dist/rbac/permission-repository.d.ts.map +1 -1
  319. package/dist/rbac/permission-repository.js +93 -35
  320. package/dist/rbac/permission-repository.js.map +1 -1
  321. package/dist/rbac/permission-service.d.ts +18 -19
  322. package/dist/rbac/permission-service.d.ts.map +1 -1
  323. package/dist/rbac/permission-service.js +100 -57
  324. package/dist/rbac/permission-service.js.map +1 -1
  325. package/dist/rbac/role-repository.d.ts +29 -24
  326. package/dist/rbac/role-repository.d.ts.map +1 -1
  327. package/dist/rbac/role-repository.js +66 -43
  328. package/dist/rbac/role-repository.js.map +1 -1
  329. package/dist/rbac/role-service.d.ts +35 -32
  330. package/dist/rbac/role-service.d.ts.map +1 -1
  331. package/dist/rbac/role-service.js +210 -96
  332. package/dist/rbac/role-service.js.map +1 -1
  333. package/dist/rbac/slugs.d.ts +16 -27
  334. package/dist/rbac/slugs.d.ts.map +1 -1
  335. package/dist/rbac/slugs.js +36 -59
  336. package/dist/rbac/slugs.js.map +1 -1
  337. package/dist/rbac/types.d.ts +2 -4
  338. package/dist/rbac/types.d.ts.map +1 -1
  339. package/dist/rbac/types.js.map +1 -1
  340. package/dist/rbac/user-role-service.d.ts +23 -24
  341. package/dist/rbac/user-role-service.d.ts.map +1 -1
  342. package/dist/rbac/user-role-service.js +117 -61
  343. package/dist/rbac/user-role-service.js.map +1 -1
  344. package/dist/routes/applications.d.ts +4 -2
  345. package/dist/routes/applications.d.ts.map +1 -1
  346. package/dist/routes/applications.js +57 -19
  347. package/dist/routes/applications.js.map +1 -1
  348. package/dist/routes/audit.js +1 -1
  349. package/dist/routes/audit.js.map +1 -1
  350. package/dist/routes/branding.d.ts +3 -3
  351. package/dist/routes/branding.d.ts.map +1 -1
  352. package/dist/routes/branding.js +44 -16
  353. package/dist/routes/branding.js.map +1 -1
  354. package/dist/routes/bulk.d.ts +0 -5
  355. package/dist/routes/bulk.d.ts.map +1 -1
  356. package/dist/routes/bulk.js +3 -5
  357. package/dist/routes/bulk.js.map +1 -1
  358. package/dist/routes/clients.d.ts +4 -4
  359. package/dist/routes/clients.d.ts.map +1 -1
  360. package/dist/routes/clients.js +111 -52
  361. package/dist/routes/clients.js.map +1 -1
  362. package/dist/routes/config.d.ts +17 -12
  363. package/dist/routes/config.d.ts.map +1 -1
  364. package/dist/routes/config.js +165 -64
  365. package/dist/routes/config.js.map +1 -1
  366. package/dist/routes/custom-claims.d.ts.map +1 -1
  367. package/dist/routes/custom-claims.js +8 -2
  368. package/dist/routes/custom-claims.js.map +1 -1
  369. package/dist/routes/exports.d.ts +2 -1
  370. package/dist/routes/exports.d.ts.map +1 -1
  371. package/dist/routes/exports.js +57 -1
  372. package/dist/routes/exports.js.map +1 -1
  373. package/dist/routes/imports.d.ts +2 -2
  374. package/dist/routes/imports.d.ts.map +1 -1
  375. package/dist/routes/imports.js +95 -40
  376. package/dist/routes/imports.js.map +1 -1
  377. package/dist/routes/interactions.d.ts.map +1 -1
  378. package/dist/routes/interactions.js +16 -34
  379. package/dist/routes/interactions.js.map +1 -1
  380. package/dist/routes/invitation.d.ts.map +1 -1
  381. package/dist/routes/invitation.js +10 -23
  382. package/dist/routes/invitation.js.map +1 -1
  383. package/dist/routes/keys.d.ts.map +1 -1
  384. package/dist/routes/keys.js +26 -13
  385. package/dist/routes/keys.js.map +1 -1
  386. package/dist/routes/magic-link.d.ts.map +1 -1
  387. package/dist/routes/magic-link.js +5 -17
  388. package/dist/routes/magic-link.js.map +1 -1
  389. package/dist/routes/organizations.d.ts +1 -2
  390. package/dist/routes/organizations.d.ts.map +1 -1
  391. package/dist/routes/organizations.js +43 -104
  392. package/dist/routes/organizations.js.map +1 -1
  393. package/dist/routes/password-reset.d.ts.map +1 -1
  394. package/dist/routes/password-reset.js +13 -35
  395. package/dist/routes/password-reset.js.map +1 -1
  396. package/dist/routes/permissions.d.ts +1 -1
  397. package/dist/routes/permissions.d.ts.map +1 -1
  398. package/dist/routes/permissions.js +58 -17
  399. package/dist/routes/permissions.js.map +1 -1
  400. package/dist/routes/public-branding.d.ts +16 -0
  401. package/dist/routes/public-branding.d.ts.map +1 -0
  402. package/dist/routes/public-branding.js +52 -0
  403. package/dist/routes/public-branding.js.map +1 -0
  404. package/dist/routes/roles.d.ts +1 -1
  405. package/dist/routes/roles.d.ts.map +1 -1
  406. package/dist/routes/roles.js +63 -21
  407. package/dist/routes/roles.js.map +1 -1
  408. package/dist/routes/sessions.d.ts.map +1 -1
  409. package/dist/routes/sessions.js +23 -12
  410. package/dist/routes/sessions.js.map +1 -1
  411. package/dist/routes/two-factor.d.ts.map +1 -1
  412. package/dist/routes/two-factor.js +91 -38
  413. package/dist/routes/two-factor.js.map +1 -1
  414. package/dist/routes/user-roles.d.ts.map +1 -1
  415. package/dist/routes/user-roles.js +56 -9
  416. package/dist/routes/user-roles.js.map +1 -1
  417. package/dist/routes/users.d.ts +4 -8
  418. package/dist/routes/users.d.ts.map +1 -1
  419. package/dist/routes/users.js +108 -265
  420. package/dist/routes/users.js.map +1 -1
  421. package/dist/server.d.ts.map +1 -1
  422. package/dist/server.js +53 -37
  423. package/dist/server.js.map +1 -1
  424. package/dist/two-factor/errors.d.ts +9 -0
  425. package/dist/two-factor/errors.d.ts.map +1 -1
  426. package/dist/two-factor/errors.js +12 -0
  427. package/dist/two-factor/errors.js.map +1 -1
  428. package/dist/two-factor/index.d.ts +5 -4
  429. package/dist/two-factor/index.d.ts.map +1 -1
  430. package/dist/two-factor/index.js +4 -4
  431. package/dist/two-factor/index.js.map +1 -1
  432. package/dist/two-factor/repository.d.ts +17 -6
  433. package/dist/two-factor/repository.d.ts.map +1 -1
  434. package/dist/two-factor/repository.js +37 -9
  435. package/dist/two-factor/repository.js.map +1 -1
  436. package/dist/two-factor/service.d.ts.map +1 -1
  437. package/dist/two-factor/service.js +26 -19
  438. package/dist/two-factor/service.js.map +1 -1
  439. package/dist/two-factor/totp.d.ts +13 -2
  440. package/dist/two-factor/totp.d.ts.map +1 -1
  441. package/dist/two-factor/totp.js +20 -7
  442. package/dist/two-factor/totp.js.map +1 -1
  443. package/dist/two-factor/types.d.ts +3 -0
  444. package/dist/two-factor/types.d.ts.map +1 -1
  445. package/dist/two-factor/types.js +5 -0
  446. package/dist/two-factor/types.js.map +1 -1
  447. package/dist/users/gdpr.d.ts +2 -40
  448. package/dist/users/gdpr.d.ts.map +1 -1
  449. package/dist/users/gdpr.js +3 -110
  450. package/dist/users/gdpr.js.map +1 -1
  451. package/dist/users/index.d.ts +5 -4
  452. package/dist/users/index.d.ts.map +1 -1
  453. package/dist/users/index.js +5 -4
  454. package/dist/users/index.js.map +1 -1
  455. package/dist/users/repository.d.ts +49 -3
  456. package/dist/users/repository.d.ts.map +1 -1
  457. package/dist/users/repository.js +169 -18
  458. package/dist/users/repository.js.map +1 -1
  459. package/dist/users/service.d.ts +19 -51
  460. package/dist/users/service.d.ts.map +1 -1
  461. package/dist/users/service.js +72 -122
  462. package/dist/users/service.js.map +1 -1
  463. package/dist/users/types.d.ts +4 -5
  464. package/dist/users/types.d.ts.map +1 -1
  465. package/dist/users/types.js.map +1 -1
  466. package/dist/users/validators.d.ts +28 -0
  467. package/dist/users/validators.d.ts.map +1 -0
  468. package/dist/users/validators.js +25 -0
  469. package/dist/users/validators.js.map +1 -0
  470. package/locales/default/en/errors.json +2 -1
  471. package/migrations/024_application_client_correction.sql +39 -0
  472. package/migrations/025_record_deletion_lifecycle.sql +26 -0
  473. package/migrations/026_simplify_user_lifecycle.sql +33 -0
  474. package/migrations/027_branding_asset_size_limits.sql +19 -0
  475. package/migrations/028_totp_replay_protection.sql +17 -0
  476. package/migrations/029_public_session_identifiers.sql +16 -0
  477. package/migrations/030_global_configuration_catalog.sql +39 -0
  478. package/migrations/031_monotonic_updated_at.sql +28 -0
  479. package/package.json +2 -2
  480. package/dist/lib/data-import-plan.d.ts +0 -50
  481. package/dist/lib/data-import-plan.d.ts.map +0 -1
  482. package/dist/lib/data-import-plan.js +0 -235
  483. package/dist/lib/data-import-plan.js.map +0 -1
  484. package/dist/lib/data-import.d.ts +0 -276
  485. package/dist/lib/data-import.d.ts.map +0 -1
  486. package/dist/lib/data-import.js +0 -1694
  487. package/dist/lib/data-import.js.map +0 -1
@@ -0,0 +1,589 @@
1
+ /** Strict runtime schemas for the selective portability wire contract. */
2
+ import { z } from 'zod';
3
+ /** Closed categories supported by the version 1.0 manifest. */
4
+ export declare const portabilityCategorySchema: z.ZodEnum<{
5
+ applications_authorization: "applications_authorization";
6
+ oidc_clients: "oidc_clients";
7
+ organizations: "organizations";
8
+ users_assignments: "users_assignments";
9
+ }>;
10
+ /** Organization or complete-environment source scope. */
11
+ export declare const portabilityScopeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
12
+ kind: z.ZodLiteral<"organization">;
13
+ organization_slug: z.ZodString;
14
+ }, z.core.$strict>, z.ZodObject<{
15
+ kind: z.ZodLiteral<"environment">;
16
+ }, z.core.$strict>], "kind">;
17
+ /** Explicit application filter shared by export requests and manifests. */
18
+ export declare const portabilityApplicationSelectionSchema: z.ZodObject<{
19
+ all_applications: z.ZodBoolean;
20
+ application_slugs: z.ZodArray<z.ZodString>;
21
+ }, z.core.$strict>;
22
+ /** Strict complete portability manifest schema. */
23
+ export declare const portabilityManifestSchema: z.ZodObject<{
24
+ version: z.ZodLiteral<"1.0">;
25
+ exported_at: z.ZodString;
26
+ scope: z.ZodDiscriminatedUnion<[z.ZodObject<{
27
+ kind: z.ZodLiteral<"organization">;
28
+ organization_slug: z.ZodString;
29
+ }, z.core.$strict>, z.ZodObject<{
30
+ kind: z.ZodLiteral<"environment">;
31
+ }, z.core.$strict>], "kind">;
32
+ categories: z.ZodArray<z.ZodEnum<{
33
+ applications_authorization: "applications_authorization";
34
+ oidc_clients: "oidc_clients";
35
+ organizations: "organizations";
36
+ users_assignments: "users_assignments";
37
+ }>>;
38
+ application_selection: z.ZodObject<{
39
+ all_applications: z.ZodBoolean;
40
+ application_slugs: z.ZodArray<z.ZodString>;
41
+ }, z.core.$strict>;
42
+ organizations: z.ZodArray<z.ZodObject<{
43
+ slug: z.ZodString;
44
+ name: z.ZodString;
45
+ status: z.ZodEnum<{
46
+ active: "active";
47
+ suspended: "suspended";
48
+ }>;
49
+ default_locale: z.ZodString;
50
+ default_login_methods: z.ZodArray<z.ZodEnum<{
51
+ magic_link: "magic_link";
52
+ password: "password";
53
+ }>>;
54
+ two_factor_policy: z.ZodEnum<{
55
+ optional: "optional";
56
+ required_any: "required_any";
57
+ required_email: "required_email";
58
+ required_totp: "required_totp";
59
+ }>;
60
+ branding: z.ZodObject<{
61
+ logo_url: z.ZodNullable<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
62
+ favicon_url: z.ZodNullable<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
63
+ primary_color: z.ZodNullable<z.ZodString>;
64
+ company_name: z.ZodNullable<z.ZodString>;
65
+ custom_css: z.ZodNullable<z.ZodString>;
66
+ logo_asset: z.ZodNullable<z.ZodPipe<z.ZodObject<{
67
+ media_type: z.ZodString;
68
+ content_base64: z.ZodString;
69
+ }, z.core.$strict>, z.ZodTransform<{
70
+ media_type: string;
71
+ content_base64: string;
72
+ }, {
73
+ media_type: string;
74
+ content_base64: string;
75
+ }>>>;
76
+ favicon_asset: z.ZodNullable<z.ZodPipe<z.ZodObject<{
77
+ media_type: z.ZodString;
78
+ content_base64: z.ZodString;
79
+ }, z.core.$strict>, z.ZodTransform<{
80
+ media_type: string;
81
+ content_base64: string;
82
+ }, {
83
+ media_type: string;
84
+ content_base64: string;
85
+ }>>>;
86
+ }, z.core.$strict>;
87
+ }, z.core.$strict>>;
88
+ applications: z.ZodArray<z.ZodObject<{
89
+ slug: z.ZodString;
90
+ name: z.ZodString;
91
+ description: z.ZodNullable<z.ZodString>;
92
+ status: z.ZodEnum<{
93
+ active: "active";
94
+ inactive: "inactive";
95
+ }>;
96
+ }, z.core.$strict>>;
97
+ application_modules: z.ZodArray<z.ZodObject<{
98
+ application_slug: z.ZodString;
99
+ slug: z.ZodString;
100
+ name: z.ZodString;
101
+ description: z.ZodNullable<z.ZodString>;
102
+ status: z.ZodEnum<{
103
+ active: "active";
104
+ inactive: "inactive";
105
+ }>;
106
+ }, z.core.$strict>>;
107
+ roles: z.ZodArray<z.ZodObject<{
108
+ application_slug: z.ZodString;
109
+ slug: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
110
+ name: z.ZodString;
111
+ description: z.ZodNullable<z.ZodString>;
112
+ }, z.core.$strict>>;
113
+ permissions: z.ZodArray<z.ZodObject<{
114
+ application_slug: z.ZodString;
115
+ slug: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
116
+ module_slug: z.ZodNullable<z.ZodString>;
117
+ name: z.ZodString;
118
+ description: z.ZodNullable<z.ZodString>;
119
+ }, z.core.$strict>>;
120
+ claim_definitions: z.ZodArray<z.ZodObject<{
121
+ application_slug: z.ZodString;
122
+ claim_name: z.ZodString;
123
+ claim_type: z.ZodEnum<{
124
+ boolean: "boolean";
125
+ json: "json";
126
+ number: "number";
127
+ string: "string";
128
+ }>;
129
+ description: z.ZodNullable<z.ZodString>;
130
+ include_in_id_token: z.ZodBoolean;
131
+ include_in_access_token: z.ZodBoolean;
132
+ include_in_userinfo: z.ZodBoolean;
133
+ }, z.core.$strict>>;
134
+ role_permission_mappings: z.ZodArray<z.ZodObject<{
135
+ application_slug: z.ZodString;
136
+ role_slug: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
137
+ permission_slugs: z.ZodArray<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
138
+ }, z.core.$strict>>;
139
+ users: z.ZodArray<z.ZodObject<{
140
+ given_name: z.ZodNullable<z.ZodString>;
141
+ family_name: z.ZodNullable<z.ZodString>;
142
+ middle_name: z.ZodNullable<z.ZodString>;
143
+ nickname: z.ZodNullable<z.ZodString>;
144
+ preferred_username: z.ZodNullable<z.ZodString>;
145
+ profile_url: z.ZodNullable<z.ZodString>;
146
+ picture_url: z.ZodNullable<z.ZodString>;
147
+ website_url: z.ZodNullable<z.ZodString>;
148
+ gender: z.ZodNullable<z.ZodString>;
149
+ birthdate: z.ZodNullable<z.ZodString>;
150
+ zoneinfo: z.ZodNullable<z.ZodString>;
151
+ locale: z.ZodNullable<z.ZodString>;
152
+ phone_number: z.ZodNullable<z.ZodString>;
153
+ phone_number_verified: z.ZodBoolean;
154
+ address_street: z.ZodNullable<z.ZodString>;
155
+ address_locality: z.ZodNullable<z.ZodString>;
156
+ address_region: z.ZodNullable<z.ZodString>;
157
+ address_postal_code: z.ZodNullable<z.ZodString>;
158
+ address_country: z.ZodNullable<z.ZodString>;
159
+ organization_slug: z.ZodString;
160
+ email: z.ZodPreprocess<z.ZodString>;
161
+ email_verified: z.ZodBoolean;
162
+ status: z.ZodEnum<{
163
+ active: "active";
164
+ inactive: "inactive";
165
+ }>;
166
+ }, z.core.$strict>>;
167
+ user_role_assignments: z.ZodArray<z.ZodObject<{
168
+ organization_slug: z.ZodString;
169
+ email: z.ZodPreprocess<z.ZodString>;
170
+ application_slug: z.ZodString;
171
+ role_slug: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
172
+ }, z.core.$strict>>;
173
+ user_claim_values: z.ZodArray<z.ZodObject<{
174
+ organization_slug: z.ZodString;
175
+ email: z.ZodPreprocess<z.ZodString>;
176
+ application_slug: z.ZodString;
177
+ claim_name: z.ZodString;
178
+ value: z.ZodJSONSchema;
179
+ }, z.core.$strict>>;
180
+ clients: z.ZodArray<z.ZodObject<{
181
+ client_id: z.ZodString;
182
+ organization_slug: z.ZodString;
183
+ application_slug: z.ZodString;
184
+ name: z.ZodString;
185
+ client_type: z.ZodEnum<{
186
+ confidential: "confidential";
187
+ public: "public";
188
+ }>;
189
+ application_type: z.ZodEnum<{
190
+ native: "native";
191
+ spa: "spa";
192
+ web: "web";
193
+ }>;
194
+ status: z.ZodEnum<{
195
+ active: "active";
196
+ inactive: "inactive";
197
+ }>;
198
+ grant_types: z.ZodArray<z.ZodEnum<{
199
+ authorization_code: "authorization_code";
200
+ client_credentials: "client_credentials";
201
+ refresh_token: "refresh_token";
202
+ }>>;
203
+ response_types: z.ZodArray<z.ZodLiteral<"code">>;
204
+ scope: z.ZodString;
205
+ login_methods: z.ZodNullable<z.ZodArray<z.ZodEnum<{
206
+ magic_link: "magic_link";
207
+ password: "password";
208
+ }>>>;
209
+ token_endpoint_auth_method: z.ZodEnum<{
210
+ client_secret_basic: "client_secret_basic";
211
+ client_secret_post: "client_secret_post";
212
+ none: "none";
213
+ }>;
214
+ redirect_uris: z.ZodArray<z.ZodString>;
215
+ post_logout_redirect_uris: z.ZodArray<z.ZodString>;
216
+ allowed_origins: z.ZodArray<z.ZodString>;
217
+ require_pkce: z.ZodBoolean;
218
+ }, z.core.$strict>>;
219
+ }, z.core.$strict>;
220
+ /** Strict export-manifest request schema. */
221
+ export declare const exportManifestRequestSchema: z.ZodObject<{
222
+ scope: z.ZodDiscriminatedUnion<[z.ZodObject<{
223
+ kind: z.ZodLiteral<"organization">;
224
+ organization_slug: z.ZodString;
225
+ }, z.core.$strict>, z.ZodObject<{
226
+ kind: z.ZodLiteral<"environment">;
227
+ }, z.core.$strict>], "kind">;
228
+ categories: z.ZodArray<z.ZodEnum<{
229
+ applications_authorization: "applications_authorization";
230
+ oidc_clients: "oidc_clients";
231
+ organizations: "organizations";
232
+ users_assignments: "users_assignments";
233
+ }>>;
234
+ application_selection: z.ZodObject<{
235
+ all_applications: z.ZodBoolean;
236
+ application_slugs: z.ZodArray<z.ZodString>;
237
+ }, z.core.$strict>;
238
+ }, z.core.$strict>;
239
+ /** Strict preview/apply request schema. */
240
+ export declare const importManifestRequestSchema: z.ZodObject<{
241
+ manifest: z.ZodObject<{
242
+ version: z.ZodLiteral<"1.0">;
243
+ exported_at: z.ZodString;
244
+ scope: z.ZodDiscriminatedUnion<[z.ZodObject<{
245
+ kind: z.ZodLiteral<"organization">;
246
+ organization_slug: z.ZodString;
247
+ }, z.core.$strict>, z.ZodObject<{
248
+ kind: z.ZodLiteral<"environment">;
249
+ }, z.core.$strict>], "kind">;
250
+ categories: z.ZodArray<z.ZodEnum<{
251
+ applications_authorization: "applications_authorization";
252
+ oidc_clients: "oidc_clients";
253
+ organizations: "organizations";
254
+ users_assignments: "users_assignments";
255
+ }>>;
256
+ application_selection: z.ZodObject<{
257
+ all_applications: z.ZodBoolean;
258
+ application_slugs: z.ZodArray<z.ZodString>;
259
+ }, z.core.$strict>;
260
+ organizations: z.ZodArray<z.ZodObject<{
261
+ slug: z.ZodString;
262
+ name: z.ZodString;
263
+ status: z.ZodEnum<{
264
+ active: "active";
265
+ suspended: "suspended";
266
+ }>;
267
+ default_locale: z.ZodString;
268
+ default_login_methods: z.ZodArray<z.ZodEnum<{
269
+ magic_link: "magic_link";
270
+ password: "password";
271
+ }>>;
272
+ two_factor_policy: z.ZodEnum<{
273
+ optional: "optional";
274
+ required_any: "required_any";
275
+ required_email: "required_email";
276
+ required_totp: "required_totp";
277
+ }>;
278
+ branding: z.ZodObject<{
279
+ logo_url: z.ZodNullable<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
280
+ favicon_url: z.ZodNullable<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
281
+ primary_color: z.ZodNullable<z.ZodString>;
282
+ company_name: z.ZodNullable<z.ZodString>;
283
+ custom_css: z.ZodNullable<z.ZodString>;
284
+ logo_asset: z.ZodNullable<z.ZodPipe<z.ZodObject<{
285
+ media_type: z.ZodString;
286
+ content_base64: z.ZodString;
287
+ }, z.core.$strict>, z.ZodTransform<{
288
+ media_type: string;
289
+ content_base64: string;
290
+ }, {
291
+ media_type: string;
292
+ content_base64: string;
293
+ }>>>;
294
+ favicon_asset: z.ZodNullable<z.ZodPipe<z.ZodObject<{
295
+ media_type: z.ZodString;
296
+ content_base64: z.ZodString;
297
+ }, z.core.$strict>, z.ZodTransform<{
298
+ media_type: string;
299
+ content_base64: string;
300
+ }, {
301
+ media_type: string;
302
+ content_base64: string;
303
+ }>>>;
304
+ }, z.core.$strict>;
305
+ }, z.core.$strict>>;
306
+ applications: z.ZodArray<z.ZodObject<{
307
+ slug: z.ZodString;
308
+ name: z.ZodString;
309
+ description: z.ZodNullable<z.ZodString>;
310
+ status: z.ZodEnum<{
311
+ active: "active";
312
+ inactive: "inactive";
313
+ }>;
314
+ }, z.core.$strict>>;
315
+ application_modules: z.ZodArray<z.ZodObject<{
316
+ application_slug: z.ZodString;
317
+ slug: z.ZodString;
318
+ name: z.ZodString;
319
+ description: z.ZodNullable<z.ZodString>;
320
+ status: z.ZodEnum<{
321
+ active: "active";
322
+ inactive: "inactive";
323
+ }>;
324
+ }, z.core.$strict>>;
325
+ roles: z.ZodArray<z.ZodObject<{
326
+ application_slug: z.ZodString;
327
+ slug: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
328
+ name: z.ZodString;
329
+ description: z.ZodNullable<z.ZodString>;
330
+ }, z.core.$strict>>;
331
+ permissions: z.ZodArray<z.ZodObject<{
332
+ application_slug: z.ZodString;
333
+ slug: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
334
+ module_slug: z.ZodNullable<z.ZodString>;
335
+ name: z.ZodString;
336
+ description: z.ZodNullable<z.ZodString>;
337
+ }, z.core.$strict>>;
338
+ claim_definitions: z.ZodArray<z.ZodObject<{
339
+ application_slug: z.ZodString;
340
+ claim_name: z.ZodString;
341
+ claim_type: z.ZodEnum<{
342
+ boolean: "boolean";
343
+ json: "json";
344
+ number: "number";
345
+ string: "string";
346
+ }>;
347
+ description: z.ZodNullable<z.ZodString>;
348
+ include_in_id_token: z.ZodBoolean;
349
+ include_in_access_token: z.ZodBoolean;
350
+ include_in_userinfo: z.ZodBoolean;
351
+ }, z.core.$strict>>;
352
+ role_permission_mappings: z.ZodArray<z.ZodObject<{
353
+ application_slug: z.ZodString;
354
+ role_slug: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
355
+ permission_slugs: z.ZodArray<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
356
+ }, z.core.$strict>>;
357
+ users: z.ZodArray<z.ZodObject<{
358
+ given_name: z.ZodNullable<z.ZodString>;
359
+ family_name: z.ZodNullable<z.ZodString>;
360
+ middle_name: z.ZodNullable<z.ZodString>;
361
+ nickname: z.ZodNullable<z.ZodString>;
362
+ preferred_username: z.ZodNullable<z.ZodString>;
363
+ profile_url: z.ZodNullable<z.ZodString>;
364
+ picture_url: z.ZodNullable<z.ZodString>;
365
+ website_url: z.ZodNullable<z.ZodString>;
366
+ gender: z.ZodNullable<z.ZodString>;
367
+ birthdate: z.ZodNullable<z.ZodString>;
368
+ zoneinfo: z.ZodNullable<z.ZodString>;
369
+ locale: z.ZodNullable<z.ZodString>;
370
+ phone_number: z.ZodNullable<z.ZodString>;
371
+ phone_number_verified: z.ZodBoolean;
372
+ address_street: z.ZodNullable<z.ZodString>;
373
+ address_locality: z.ZodNullable<z.ZodString>;
374
+ address_region: z.ZodNullable<z.ZodString>;
375
+ address_postal_code: z.ZodNullable<z.ZodString>;
376
+ address_country: z.ZodNullable<z.ZodString>;
377
+ organization_slug: z.ZodString;
378
+ email: z.ZodPreprocess<z.ZodString>;
379
+ email_verified: z.ZodBoolean;
380
+ status: z.ZodEnum<{
381
+ active: "active";
382
+ inactive: "inactive";
383
+ }>;
384
+ }, z.core.$strict>>;
385
+ user_role_assignments: z.ZodArray<z.ZodObject<{
386
+ organization_slug: z.ZodString;
387
+ email: z.ZodPreprocess<z.ZodString>;
388
+ application_slug: z.ZodString;
389
+ role_slug: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
390
+ }, z.core.$strict>>;
391
+ user_claim_values: z.ZodArray<z.ZodObject<{
392
+ organization_slug: z.ZodString;
393
+ email: z.ZodPreprocess<z.ZodString>;
394
+ application_slug: z.ZodString;
395
+ claim_name: z.ZodString;
396
+ value: z.ZodJSONSchema;
397
+ }, z.core.$strict>>;
398
+ clients: z.ZodArray<z.ZodObject<{
399
+ client_id: z.ZodString;
400
+ organization_slug: z.ZodString;
401
+ application_slug: z.ZodString;
402
+ name: z.ZodString;
403
+ client_type: z.ZodEnum<{
404
+ confidential: "confidential";
405
+ public: "public";
406
+ }>;
407
+ application_type: z.ZodEnum<{
408
+ native: "native";
409
+ spa: "spa";
410
+ web: "web";
411
+ }>;
412
+ status: z.ZodEnum<{
413
+ active: "active";
414
+ inactive: "inactive";
415
+ }>;
416
+ grant_types: z.ZodArray<z.ZodEnum<{
417
+ authorization_code: "authorization_code";
418
+ client_credentials: "client_credentials";
419
+ refresh_token: "refresh_token";
420
+ }>>;
421
+ response_types: z.ZodArray<z.ZodLiteral<"code">>;
422
+ scope: z.ZodString;
423
+ login_methods: z.ZodNullable<z.ZodArray<z.ZodEnum<{
424
+ magic_link: "magic_link";
425
+ password: "password";
426
+ }>>>;
427
+ token_endpoint_auth_method: z.ZodEnum<{
428
+ client_secret_basic: "client_secret_basic";
429
+ client_secret_post: "client_secret_post";
430
+ none: "none";
431
+ }>;
432
+ redirect_uris: z.ZodArray<z.ZodString>;
433
+ post_logout_redirect_uris: z.ZodArray<z.ZodString>;
434
+ allowed_origins: z.ZodArray<z.ZodString>;
435
+ require_pkce: z.ZodBoolean;
436
+ }, z.core.$strict>>;
437
+ }, z.core.$strict>;
438
+ mode: z.ZodEnum<{
439
+ "dry-run": "dry-run";
440
+ "keep-existing": "keep-existing";
441
+ "update-existing": "update-existing";
442
+ }>;
443
+ }, z.core.$strict>;
444
+ /** Result entity names in dependency order. */
445
+ export declare const portabilityEntityTypeSchema: z.ZodEnum<{
446
+ application_modules: "application_modules";
447
+ applications: "applications";
448
+ claim_definitions: "claim_definitions";
449
+ clients: "clients";
450
+ organizations: "organizations";
451
+ permissions: "permissions";
452
+ role_permission_mappings: "role_permission_mappings";
453
+ roles: "roles";
454
+ user_claim_values: "user_claim_values";
455
+ user_role_assignments: "user_role_assignments";
456
+ users: "users";
457
+ }>;
458
+ /** Strict safe portability preview/apply result schema. */
459
+ export declare const portabilityResultSchema: z.ZodObject<{
460
+ mode: z.ZodEnum<{
461
+ "dry-run": "dry-run";
462
+ "keep-existing": "keep-existing";
463
+ "update-existing": "update-existing";
464
+ }>;
465
+ summary: z.ZodObject<{
466
+ organizations: z.ZodObject<{
467
+ created: z.ZodNumber;
468
+ updated: z.ZodNumber;
469
+ skipped: z.ZodNumber;
470
+ rejected: z.ZodNumber;
471
+ }, z.core.$strict>;
472
+ applications: z.ZodObject<{
473
+ created: z.ZodNumber;
474
+ updated: z.ZodNumber;
475
+ skipped: z.ZodNumber;
476
+ rejected: z.ZodNumber;
477
+ }, z.core.$strict>;
478
+ application_modules: z.ZodObject<{
479
+ created: z.ZodNumber;
480
+ updated: z.ZodNumber;
481
+ skipped: z.ZodNumber;
482
+ rejected: z.ZodNumber;
483
+ }, z.core.$strict>;
484
+ roles: z.ZodObject<{
485
+ created: z.ZodNumber;
486
+ updated: z.ZodNumber;
487
+ skipped: z.ZodNumber;
488
+ rejected: z.ZodNumber;
489
+ }, z.core.$strict>;
490
+ permissions: z.ZodObject<{
491
+ created: z.ZodNumber;
492
+ updated: z.ZodNumber;
493
+ skipped: z.ZodNumber;
494
+ rejected: z.ZodNumber;
495
+ }, z.core.$strict>;
496
+ claim_definitions: z.ZodObject<{
497
+ created: z.ZodNumber;
498
+ updated: z.ZodNumber;
499
+ skipped: z.ZodNumber;
500
+ rejected: z.ZodNumber;
501
+ }, z.core.$strict>;
502
+ role_permission_mappings: z.ZodObject<{
503
+ created: z.ZodNumber;
504
+ updated: z.ZodNumber;
505
+ skipped: z.ZodNumber;
506
+ rejected: z.ZodNumber;
507
+ }, z.core.$strict>;
508
+ users: z.ZodObject<{
509
+ created: z.ZodNumber;
510
+ updated: z.ZodNumber;
511
+ skipped: z.ZodNumber;
512
+ rejected: z.ZodNumber;
513
+ }, z.core.$strict>;
514
+ user_role_assignments: z.ZodObject<{
515
+ created: z.ZodNumber;
516
+ updated: z.ZodNumber;
517
+ skipped: z.ZodNumber;
518
+ rejected: z.ZodNumber;
519
+ }, z.core.$strict>;
520
+ user_claim_values: z.ZodObject<{
521
+ created: z.ZodNumber;
522
+ updated: z.ZodNumber;
523
+ skipped: z.ZodNumber;
524
+ rejected: z.ZodNumber;
525
+ }, z.core.$strict>;
526
+ clients: z.ZodObject<{
527
+ created: z.ZodNumber;
528
+ updated: z.ZodNumber;
529
+ skipped: z.ZodNumber;
530
+ rejected: z.ZodNumber;
531
+ }, z.core.$strict>;
532
+ }, z.core.$strict>;
533
+ items: z.ZodArray<z.ZodObject<{
534
+ entity_type: z.ZodEnum<{
535
+ application_modules: "application_modules";
536
+ applications: "applications";
537
+ claim_definitions: "claim_definitions";
538
+ clients: "clients";
539
+ organizations: "organizations";
540
+ permissions: "permissions";
541
+ role_permission_mappings: "role_permission_mappings";
542
+ roles: "roles";
543
+ user_claim_values: "user_claim_values";
544
+ user_role_assignments: "user_role_assignments";
545
+ users: "users";
546
+ }>;
547
+ action: z.ZodEnum<{
548
+ created: "created";
549
+ rejected: "rejected";
550
+ skipped: "skipped";
551
+ updated: "updated";
552
+ }>;
553
+ natural_key: z.ZodRecord<z.ZodString, z.ZodString>;
554
+ credential_will_be_generated: z.ZodOptional<z.ZodBoolean>;
555
+ }, z.core.$strict>>;
556
+ errors: z.ZodArray<z.ZodObject<{
557
+ entity_type: z.ZodEnum<{
558
+ application_modules: "application_modules";
559
+ applications: "applications";
560
+ claim_definitions: "claim_definitions";
561
+ clients: "clients";
562
+ organizations: "organizations";
563
+ permissions: "permissions";
564
+ role_permission_mappings: "role_permission_mappings";
565
+ roles: "roles";
566
+ user_claim_values: "user_claim_values";
567
+ user_role_assignments: "user_role_assignments";
568
+ users: "users";
569
+ }>;
570
+ natural_key: z.ZodRecord<z.ZodString, z.ZodString>;
571
+ code: z.ZodEnum<{
572
+ ambiguous_dependency: "ambiguous_dependency";
573
+ client_id_collision: "client_id_collision";
574
+ control_plane_record: "control_plane_record";
575
+ cross_scope_reference: "cross_scope_reference";
576
+ duplicate_natural_key: "duplicate_natural_key";
577
+ incompatible_record: "incompatible_record";
578
+ invalid_record: "invalid_record";
579
+ missing_dependency: "missing_dependency";
580
+ }>;
581
+ }, z.core.$strict>>;
582
+ credentials: z.ZodOptional<z.ZodArray<z.ZodObject<{
583
+ client_id: z.ZodString;
584
+ label: z.ZodString;
585
+ secret: z.ZodString;
586
+ expires_at: z.ZodString;
587
+ }, z.core.$strict>>>;
588
+ }, z.core.$strict>;
589
+ //# sourceMappingURL=schema.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/portability/schema.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAE1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA4FxB,+DAA+D;AAC/D,eAAO,MAAM,yBAAyB;;;;;EAKpC,CAAC;AAEH,yDAAyD;AACzD,eAAO,MAAM,sBAAsB;;;;;4BAGjC,CAAC;AAEH,2EAA2E;AAC3E,eAAO,MAAM,qCAAqC;;;kBAKvC,CAAC;AAoRZ,mDAAmD;AACnD,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAelC,CAAC;AAEL,6CAA6C;AAC7C,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;kBAOI,CAAC;AAE7C,2CAA2C;AAC3C,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAK7B,CAAC;AAEZ,+CAA+C;AAC/C,eAAO,MAAM,2BAA2B;;;;;;;;;;;;EAYtC,CAAC;AA6EH,2DAA2D;AAC3D,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA0ChC,CAAC"}