@portaidentity/server 1.7.3 → 1.9.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (494) hide show
  1. package/CHANGELOG.md +28 -0
  2. package/dist/applications/index.d.ts +2 -2
  3. package/dist/applications/index.d.ts.map +1 -1
  4. package/dist/applications/index.js +2 -2
  5. package/dist/applications/index.js.map +1 -1
  6. package/dist/applications/repository.d.ts +49 -4
  7. package/dist/applications/repository.d.ts.map +1 -1
  8. package/dist/applications/repository.js +148 -10
  9. package/dist/applications/repository.js.map +1 -1
  10. package/dist/applications/service.d.ts +35 -17
  11. package/dist/applications/service.d.ts.map +1 -1
  12. package/dist/applications/service.js +144 -35
  13. package/dist/applications/service.js.map +1 -1
  14. package/dist/applications/types.d.ts +1 -1
  15. package/dist/applications/types.d.ts.map +1 -1
  16. package/dist/applications/validators.d.ts +14 -0
  17. package/dist/applications/validators.d.ts.map +1 -0
  18. package/dist/applications/validators.js +14 -0
  19. package/dist/applications/validators.js.map +1 -0
  20. package/dist/auth/effective-branding.d.ts +35 -0
  21. package/dist/auth/effective-branding.d.ts.map +1 -0
  22. package/dist/auth/effective-branding.js +81 -0
  23. package/dist/auth/effective-branding.js.map +1 -0
  24. package/dist/auth/email-service.d.ts +3 -8
  25. package/dist/auth/email-service.d.ts.map +1 -1
  26. package/dist/auth/email-service.js +22 -30
  27. package/dist/auth/email-service.js.map +1 -1
  28. package/dist/auth/i18n.d.ts +5 -0
  29. package/dist/auth/i18n.d.ts.map +1 -1
  30. package/dist/auth/i18n.js +6 -5
  31. package/dist/auth/i18n.js.map +1 -1
  32. package/dist/auth/rate-limiter.d.ts +6 -10
  33. package/dist/auth/rate-limiter.d.ts.map +1 -1
  34. package/dist/auth/rate-limiter.js +12 -16
  35. package/dist/auth/rate-limiter.js.map +1 -1
  36. package/dist/auth/recovery-job-processor.d.ts.map +1 -1
  37. package/dist/auth/recovery-job-processor.js +1 -1
  38. package/dist/auth/recovery-job-processor.js.map +1 -1
  39. package/dist/auth/template-engine.d.ts +3 -1
  40. package/dist/auth/template-engine.d.ts.map +1 -1
  41. package/dist/auth/template-engine.js +1 -1
  42. package/dist/auth/template-engine.js.map +1 -1
  43. package/dist/auth/token-repository.d.ts +9 -3
  44. package/dist/auth/token-repository.d.ts.map +1 -1
  45. package/dist/auth/token-repository.js +17 -8
  46. package/dist/auth/token-repository.js.map +1 -1
  47. package/dist/cli/commands/init.d.ts +1 -1
  48. package/dist/cli/commands/init.d.ts.map +1 -1
  49. package/dist/cli/commands/init.js +12 -12
  50. package/dist/cli/commands/init.js.map +1 -1
  51. package/dist/cli/error-handler.d.ts +3 -2
  52. package/dist/cli/error-handler.d.ts.map +1 -1
  53. package/dist/cli/error-handler.js +9 -2
  54. package/dist/cli/error-handler.js.map +1 -1
  55. package/dist/cli/index.d.ts +1 -1
  56. package/dist/cli/index.d.ts.map +1 -1
  57. package/dist/cli/index.js +1 -1
  58. package/dist/cli/index.js.map +1 -1
  59. package/dist/clients/index.d.ts +1 -1
  60. package/dist/clients/index.js +1 -1
  61. package/dist/clients/repository.d.ts +24 -0
  62. package/dist/clients/repository.d.ts.map +1 -1
  63. package/dist/clients/repository.js +39 -0
  64. package/dist/clients/repository.js.map +1 -1
  65. package/dist/clients/secret-repository.d.ts +35 -8
  66. package/dist/clients/secret-repository.d.ts.map +1 -1
  67. package/dist/clients/secret-repository.js +69 -16
  68. package/dist/clients/secret-repository.js.map +1 -1
  69. package/dist/clients/secret-service.d.ts +5 -9
  70. package/dist/clients/secret-service.d.ts.map +1 -1
  71. package/dist/clients/secret-service.js +13 -22
  72. package/dist/clients/secret-service.js.map +1 -1
  73. package/dist/clients/service.d.ts +10 -13
  74. package/dist/clients/service.d.ts.map +1 -1
  75. package/dist/clients/service.js +121 -42
  76. package/dist/clients/service.js.map +1 -1
  77. package/dist/clients/types.d.ts +14 -1
  78. package/dist/clients/types.d.ts.map +1 -1
  79. package/dist/clients/types.js +1 -0
  80. package/dist/clients/types.js.map +1 -1
  81. package/dist/clients/validators.d.ts +83 -1
  82. package/dist/clients/validators.d.ts.map +1 -1
  83. package/dist/clients/validators.js +110 -0
  84. package/dist/clients/validators.js.map +1 -1
  85. package/dist/config/index.d.ts +1 -0
  86. package/dist/config/index.d.ts.map +1 -1
  87. package/dist/config/index.js +1 -0
  88. package/dist/config/index.js.map +1 -1
  89. package/dist/config/schema.d.ts +1 -0
  90. package/dist/config/schema.d.ts.map +1 -1
  91. package/dist/config/schema.js +23 -1
  92. package/dist/config/schema.js.map +1 -1
  93. package/dist/custom-claims/repository.d.ts +14 -9
  94. package/dist/custom-claims/repository.d.ts.map +1 -1
  95. package/dist/custom-claims/repository.js +38 -11
  96. package/dist/custom-claims/repository.js.map +1 -1
  97. package/dist/custom-claims/service.d.ts +11 -6
  98. package/dist/custom-claims/service.d.ts.map +1 -1
  99. package/dist/custom-claims/service.js +43 -20
  100. package/dist/custom-claims/service.js.map +1 -1
  101. package/dist/index.js +8 -2
  102. package/dist/index.js.map +1 -1
  103. package/dist/lib/admin-permissions.d.ts +12 -7
  104. package/dist/lib/admin-permissions.d.ts.map +1 -1
  105. package/dist/lib/admin-permissions.js +26 -16
  106. package/dist/lib/admin-permissions.js.map +1 -1
  107. package/dist/lib/audit-log.d.ts +2 -2
  108. package/dist/lib/audit-log.d.ts.map +1 -1
  109. package/dist/lib/audit-log.js +1 -1
  110. package/dist/lib/audit-log.js.map +1 -1
  111. package/dist/lib/authority-revocation.d.ts +18 -0
  112. package/dist/lib/authority-revocation.d.ts.map +1 -0
  113. package/dist/lib/authority-revocation.js +37 -0
  114. package/dist/lib/authority-revocation.js.map +1 -0
  115. package/dist/lib/branding-assets.d.ts +35 -5
  116. package/dist/lib/branding-assets.d.ts.map +1 -1
  117. package/dist/lib/branding-assets.js +33 -26
  118. package/dist/lib/branding-assets.js.map +1 -1
  119. package/dist/lib/bulk-operations.d.ts +1 -1
  120. package/dist/lib/bulk-operations.d.ts.map +1 -1
  121. package/dist/lib/bulk-operations.js +1 -13
  122. package/dist/lib/bulk-operations.js.map +1 -1
  123. package/dist/lib/cursor.d.ts +2 -0
  124. package/dist/lib/cursor.d.ts.map +1 -1
  125. package/dist/lib/cursor.js +2 -7
  126. package/dist/lib/cursor.js.map +1 -1
  127. package/dist/lib/database.d.ts.map +1 -1
  128. package/dist/lib/database.js +5 -0
  129. package/dist/lib/database.js.map +1 -1
  130. package/dist/lib/deletion-cleanup.d.ts +43 -0
  131. package/dist/lib/deletion-cleanup.d.ts.map +1 -0
  132. package/dist/lib/deletion-cleanup.js +207 -0
  133. package/dist/lib/deletion-cleanup.js.map +1 -0
  134. package/dist/lib/image-validator.d.ts +3 -1
  135. package/dist/lib/image-validator.d.ts.map +1 -1
  136. package/dist/lib/image-validator.js +32 -19
  137. package/dist/lib/image-validator.js.map +1 -1
  138. package/dist/lib/log-format.d.ts +20 -0
  139. package/dist/lib/log-format.d.ts.map +1 -0
  140. package/dist/lib/log-format.js +22 -0
  141. package/dist/lib/log-format.js.map +1 -0
  142. package/dist/lib/logger.d.ts +3 -1
  143. package/dist/lib/logger.d.ts.map +1 -1
  144. package/dist/lib/logger.js +21 -4
  145. package/dist/lib/logger.js.map +1 -1
  146. package/dist/lib/redis.d.ts.map +1 -1
  147. package/dist/lib/redis.js +3 -0
  148. package/dist/lib/redis.js.map +1 -1
  149. package/dist/lib/session-tracking.d.ts +73 -11
  150. package/dist/lib/session-tracking.d.ts.map +1 -1
  151. package/dist/lib/session-tracking.js +76 -32
  152. package/dist/lib/session-tracking.js.map +1 -1
  153. package/dist/lib/signing-key-crypto.d.ts.map +1 -1
  154. package/dist/lib/signing-key-crypto.js +4 -5
  155. package/dist/lib/signing-key-crypto.js.map +1 -1
  156. package/dist/lib/signing-keys.d.ts +3 -4
  157. package/dist/lib/signing-keys.d.ts.map +1 -1
  158. package/dist/lib/signing-keys.js +66 -41
  159. package/dist/lib/signing-keys.js.map +1 -1
  160. package/dist/lib/super-admin-protection.d.ts +5 -5
  161. package/dist/lib/super-admin-protection.d.ts.map +1 -1
  162. package/dist/lib/super-admin-protection.js +6 -9
  163. package/dist/lib/super-admin-protection.js.map +1 -1
  164. package/dist/lib/system-config-catalog.d.ts +268 -0
  165. package/dist/lib/system-config-catalog.d.ts.map +1 -0
  166. package/dist/lib/system-config-catalog.js +90 -0
  167. package/dist/lib/system-config-catalog.js.map +1 -0
  168. package/dist/lib/system-config.d.ts +30 -33
  169. package/dist/lib/system-config.d.ts.map +1 -1
  170. package/dist/lib/system-config.js +78 -93
  171. package/dist/lib/system-config.js.map +1 -1
  172. package/dist/lib/with-timeout.d.ts +32 -0
  173. package/dist/lib/with-timeout.d.ts.map +1 -0
  174. package/dist/lib/with-timeout.js +45 -0
  175. package/dist/lib/with-timeout.js.map +1 -0
  176. package/dist/middleware/admin-auth.d.ts +6 -5
  177. package/dist/middleware/admin-auth.d.ts.map +1 -1
  178. package/dist/middleware/admin-auth.js +30 -20
  179. package/dist/middleware/admin-auth.js.map +1 -1
  180. package/dist/middleware/admin-cors.d.ts +3 -3
  181. package/dist/middleware/admin-cors.js +3 -3
  182. package/dist/middleware/admin-mutation-audit.d.ts +3 -2
  183. package/dist/middleware/admin-mutation-audit.d.ts.map +1 -1
  184. package/dist/middleware/admin-mutation-audit.js +12 -5
  185. package/dist/middleware/admin-mutation-audit.js.map +1 -1
  186. package/dist/middleware/admin-rate-limiter.d.ts +7 -8
  187. package/dist/middleware/admin-rate-limiter.d.ts.map +1 -1
  188. package/dist/middleware/admin-rate-limiter.js +7 -8
  189. package/dist/middleware/admin-rate-limiter.js.map +1 -1
  190. package/dist/middleware/client-secret-hash.d.ts +10 -29
  191. package/dist/middleware/client-secret-hash.d.ts.map +1 -1
  192. package/dist/middleware/client-secret-hash.js +161 -59
  193. package/dist/middleware/client-secret-hash.js.map +1 -1
  194. package/dist/middleware/health.d.ts +17 -0
  195. package/dist/middleware/health.d.ts.map +1 -1
  196. package/dist/middleware/health.js +25 -21
  197. package/dist/middleware/health.js.map +1 -1
  198. package/dist/middleware/ready.d.ts.map +1 -1
  199. package/dist/middleware/ready.js +1 -12
  200. package/dist/middleware/ready.js.map +1 -1
  201. package/dist/middleware/require-existing-organization.d.ts +18 -0
  202. package/dist/middleware/require-existing-organization.d.ts.map +1 -0
  203. package/dist/middleware/require-existing-organization.js +38 -0
  204. package/dist/middleware/require-existing-organization.js.map +1 -0
  205. package/dist/middleware/require-permission.d.ts.map +1 -1
  206. package/dist/middleware/require-permission.js +35 -1
  207. package/dist/middleware/require-permission.js.map +1 -1
  208. package/dist/middleware/require-user-organization.d.ts.map +1 -1
  209. package/dist/middleware/require-user-organization.js +4 -2
  210. package/dist/middleware/require-user-organization.js.map +1 -1
  211. package/dist/middleware/security-headers.d.ts +18 -0
  212. package/dist/middleware/security-headers.d.ts.map +1 -1
  213. package/dist/middleware/security-headers.js +32 -1
  214. package/dist/middleware/security-headers.js.map +1 -1
  215. package/dist/middleware/tenant-resolver.d.ts +1 -2
  216. package/dist/middleware/tenant-resolver.d.ts.map +1 -1
  217. package/dist/middleware/tenant-resolver.js +1 -5
  218. package/dist/middleware/tenant-resolver.js.map +1 -1
  219. package/dist/middleware/token-rate-limiter.d.ts +37 -16
  220. package/dist/middleware/token-rate-limiter.d.ts.map +1 -1
  221. package/dist/middleware/token-rate-limiter.js +126 -54
  222. package/dist/middleware/token-rate-limiter.js.map +1 -1
  223. package/dist/oidc/account-finder.d.ts +5 -5
  224. package/dist/oidc/account-finder.d.ts.map +1 -1
  225. package/dist/oidc/account-finder.js +31 -23
  226. package/dist/oidc/account-finder.js.map +1 -1
  227. package/dist/oidc/adapter-factory.d.ts.map +1 -1
  228. package/dist/oidc/adapter-factory.js +83 -3
  229. package/dist/oidc/adapter-factory.js.map +1 -1
  230. package/dist/oidc/configuration.d.ts +3 -8
  231. package/dist/oidc/configuration.d.ts.map +1 -1
  232. package/dist/oidc/configuration.js +67 -50
  233. package/dist/oidc/configuration.js.map +1 -1
  234. package/dist/oidc/provider.d.ts.map +1 -1
  235. package/dist/oidc/provider.js +7 -0
  236. package/dist/oidc/provider.js.map +1 -1
  237. package/dist/oidc/redis-adapter.d.ts +2 -3
  238. package/dist/oidc/redis-adapter.d.ts.map +1 -1
  239. package/dist/oidc/redis-adapter.js +54 -46
  240. package/dist/oidc/redis-adapter.js.map +1 -1
  241. package/dist/organizations/branding-url.d.ts +17 -0
  242. package/dist/organizations/branding-url.d.ts.map +1 -0
  243. package/dist/organizations/branding-url.js +38 -0
  244. package/dist/organizations/branding-url.js.map +1 -0
  245. package/dist/organizations/index.d.ts +2 -2
  246. package/dist/organizations/index.d.ts.map +1 -1
  247. package/dist/organizations/index.js +1 -1
  248. package/dist/organizations/index.js.map +1 -1
  249. package/dist/organizations/repository.d.ts +22 -32
  250. package/dist/organizations/repository.d.ts.map +1 -1
  251. package/dist/organizations/repository.js +64 -45
  252. package/dist/organizations/repository.js.map +1 -1
  253. package/dist/organizations/service.d.ts +14 -46
  254. package/dist/organizations/service.d.ts.map +1 -1
  255. package/dist/organizations/service.js +60 -112
  256. package/dist/organizations/service.js.map +1 -1
  257. package/dist/organizations/types.d.ts +1 -15
  258. package/dist/organizations/types.d.ts.map +1 -1
  259. package/dist/organizations/validators.d.ts +41 -0
  260. package/dist/organizations/validators.d.ts.map +1 -0
  261. package/dist/organizations/validators.js +48 -0
  262. package/dist/organizations/validators.js.map +1 -0
  263. package/dist/portability/apply.d.ts +15 -0
  264. package/dist/portability/apply.d.ts.map +1 -0
  265. package/dist/portability/apply.js +274 -0
  266. package/dist/portability/apply.js.map +1 -0
  267. package/dist/portability/authorization.d.ts +30 -0
  268. package/dist/portability/authorization.d.ts.map +1 -0
  269. package/dist/portability/authorization.js +130 -0
  270. package/dist/portability/authorization.js.map +1 -0
  271. package/dist/portability/cleanup.d.ts +29 -0
  272. package/dist/portability/cleanup.d.ts.map +1 -0
  273. package/dist/portability/cleanup.js +167 -0
  274. package/dist/portability/cleanup.js.map +1 -0
  275. package/dist/portability/export.d.ts +18 -0
  276. package/dist/portability/export.d.ts.map +1 -0
  277. package/dist/portability/export.js +125 -0
  278. package/dist/portability/export.js.map +1 -0
  279. package/dist/portability/import-repository.d.ts +204 -0
  280. package/dist/portability/import-repository.d.ts.map +1 -0
  281. package/dist/portability/import-repository.js +348 -0
  282. package/dist/portability/import-repository.js.map +1 -0
  283. package/dist/portability/import-user-client-writers.d.ts +40 -0
  284. package/dist/portability/import-user-client-writers.d.ts.map +1 -0
  285. package/dist/portability/import-user-client-writers.js +171 -0
  286. package/dist/portability/import-user-client-writers.js.map +1 -0
  287. package/dist/portability/index.d.ts +8 -0
  288. package/dist/portability/index.d.ts.map +1 -0
  289. package/dist/portability/index.js +8 -0
  290. package/dist/portability/index.js.map +1 -0
  291. package/dist/portability/plan-support.d.ts +137 -0
  292. package/dist/portability/plan-support.d.ts.map +1 -0
  293. package/dist/portability/plan-support.js +337 -0
  294. package/dist/portability/plan-support.js.map +1 -0
  295. package/dist/portability/plan.d.ts +34 -0
  296. package/dist/portability/plan.d.ts.map +1 -0
  297. package/dist/portability/plan.js +450 -0
  298. package/dist/portability/plan.js.map +1 -0
  299. package/dist/portability/repository.d.ts +95 -0
  300. package/dist/portability/repository.d.ts.map +1 -0
  301. package/dist/portability/repository.js +390 -0
  302. package/dist/portability/repository.js.map +1 -0
  303. package/dist/portability/schema.d.ts +591 -0
  304. package/dist/portability/schema.d.ts.map +1 -0
  305. package/dist/portability/schema.js +459 -0
  306. package/dist/portability/schema.js.map +1 -0
  307. package/dist/portability/types.d.ts +382 -0
  308. package/dist/portability/types.d.ts.map +1 -0
  309. package/dist/portability/types.js +19 -0
  310. package/dist/portability/types.js.map +1 -0
  311. package/dist/rbac/errors.d.ts +4 -0
  312. package/dist/rbac/errors.d.ts.map +1 -1
  313. package/dist/rbac/errors.js +7 -0
  314. package/dist/rbac/errors.js.map +1 -1
  315. package/dist/rbac/index.d.ts +3 -3
  316. package/dist/rbac/index.d.ts.map +1 -1
  317. package/dist/rbac/index.js +3 -3
  318. package/dist/rbac/index.js.map +1 -1
  319. package/dist/rbac/mapping-repository.d.ts +84 -9
  320. package/dist/rbac/mapping-repository.d.ts.map +1 -1
  321. package/dist/rbac/mapping-repository.js +222 -55
  322. package/dist/rbac/mapping-repository.js.map +1 -1
  323. package/dist/rbac/permission-repository.d.ts +36 -19
  324. package/dist/rbac/permission-repository.d.ts.map +1 -1
  325. package/dist/rbac/permission-repository.js +93 -35
  326. package/dist/rbac/permission-repository.js.map +1 -1
  327. package/dist/rbac/permission-service.d.ts +18 -19
  328. package/dist/rbac/permission-service.d.ts.map +1 -1
  329. package/dist/rbac/permission-service.js +100 -57
  330. package/dist/rbac/permission-service.js.map +1 -1
  331. package/dist/rbac/role-repository.d.ts +29 -24
  332. package/dist/rbac/role-repository.d.ts.map +1 -1
  333. package/dist/rbac/role-repository.js +66 -43
  334. package/dist/rbac/role-repository.js.map +1 -1
  335. package/dist/rbac/role-service.d.ts +35 -32
  336. package/dist/rbac/role-service.d.ts.map +1 -1
  337. package/dist/rbac/role-service.js +210 -96
  338. package/dist/rbac/role-service.js.map +1 -1
  339. package/dist/rbac/slugs.d.ts +16 -27
  340. package/dist/rbac/slugs.d.ts.map +1 -1
  341. package/dist/rbac/slugs.js +36 -59
  342. package/dist/rbac/slugs.js.map +1 -1
  343. package/dist/rbac/types.d.ts +2 -4
  344. package/dist/rbac/types.d.ts.map +1 -1
  345. package/dist/rbac/types.js.map +1 -1
  346. package/dist/rbac/user-role-service.d.ts +23 -24
  347. package/dist/rbac/user-role-service.d.ts.map +1 -1
  348. package/dist/rbac/user-role-service.js +117 -61
  349. package/dist/rbac/user-role-service.js.map +1 -1
  350. package/dist/routes/applications.d.ts +4 -2
  351. package/dist/routes/applications.d.ts.map +1 -1
  352. package/dist/routes/applications.js +57 -19
  353. package/dist/routes/applications.js.map +1 -1
  354. package/dist/routes/audit.js +1 -1
  355. package/dist/routes/audit.js.map +1 -1
  356. package/dist/routes/branding.d.ts +3 -3
  357. package/dist/routes/branding.d.ts.map +1 -1
  358. package/dist/routes/branding.js +44 -16
  359. package/dist/routes/branding.js.map +1 -1
  360. package/dist/routes/bulk.d.ts +0 -5
  361. package/dist/routes/bulk.d.ts.map +1 -1
  362. package/dist/routes/bulk.js +3 -5
  363. package/dist/routes/bulk.js.map +1 -1
  364. package/dist/routes/clients.d.ts +4 -4
  365. package/dist/routes/clients.d.ts.map +1 -1
  366. package/dist/routes/clients.js +113 -52
  367. package/dist/routes/clients.js.map +1 -1
  368. package/dist/routes/config.d.ts +17 -12
  369. package/dist/routes/config.d.ts.map +1 -1
  370. package/dist/routes/config.js +165 -64
  371. package/dist/routes/config.js.map +1 -1
  372. package/dist/routes/custom-claims.d.ts.map +1 -1
  373. package/dist/routes/custom-claims.js +8 -2
  374. package/dist/routes/custom-claims.js.map +1 -1
  375. package/dist/routes/exports.d.ts +2 -1
  376. package/dist/routes/exports.d.ts.map +1 -1
  377. package/dist/routes/exports.js +57 -1
  378. package/dist/routes/exports.js.map +1 -1
  379. package/dist/routes/imports.d.ts +2 -2
  380. package/dist/routes/imports.d.ts.map +1 -1
  381. package/dist/routes/imports.js +95 -40
  382. package/dist/routes/imports.js.map +1 -1
  383. package/dist/routes/interactions.d.ts.map +1 -1
  384. package/dist/routes/interactions.js +113 -87
  385. package/dist/routes/interactions.js.map +1 -1
  386. package/dist/routes/invitation.d.ts.map +1 -1
  387. package/dist/routes/invitation.js +28 -27
  388. package/dist/routes/invitation.js.map +1 -1
  389. package/dist/routes/keys.d.ts.map +1 -1
  390. package/dist/routes/keys.js +26 -13
  391. package/dist/routes/keys.js.map +1 -1
  392. package/dist/routes/magic-link.d.ts.map +1 -1
  393. package/dist/routes/magic-link.js +5 -17
  394. package/dist/routes/magic-link.js.map +1 -1
  395. package/dist/routes/organizations.d.ts +1 -2
  396. package/dist/routes/organizations.d.ts.map +1 -1
  397. package/dist/routes/organizations.js +43 -104
  398. package/dist/routes/organizations.js.map +1 -1
  399. package/dist/routes/password-reset.d.ts.map +1 -1
  400. package/dist/routes/password-reset.js +13 -35
  401. package/dist/routes/password-reset.js.map +1 -1
  402. package/dist/routes/permissions.d.ts +1 -1
  403. package/dist/routes/permissions.d.ts.map +1 -1
  404. package/dist/routes/permissions.js +58 -17
  405. package/dist/routes/permissions.js.map +1 -1
  406. package/dist/routes/public-branding.d.ts +16 -0
  407. package/dist/routes/public-branding.d.ts.map +1 -0
  408. package/dist/routes/public-branding.js +52 -0
  409. package/dist/routes/public-branding.js.map +1 -0
  410. package/dist/routes/roles.d.ts +1 -1
  411. package/dist/routes/roles.d.ts.map +1 -1
  412. package/dist/routes/roles.js +63 -21
  413. package/dist/routes/roles.js.map +1 -1
  414. package/dist/routes/sessions.d.ts.map +1 -1
  415. package/dist/routes/sessions.js +23 -12
  416. package/dist/routes/sessions.js.map +1 -1
  417. package/dist/routes/two-factor.d.ts.map +1 -1
  418. package/dist/routes/two-factor.js +91 -38
  419. package/dist/routes/two-factor.js.map +1 -1
  420. package/dist/routes/user-roles.d.ts.map +1 -1
  421. package/dist/routes/user-roles.js +56 -9
  422. package/dist/routes/user-roles.js.map +1 -1
  423. package/dist/routes/users.d.ts +4 -8
  424. package/dist/routes/users.d.ts.map +1 -1
  425. package/dist/routes/users.js +108 -265
  426. package/dist/routes/users.js.map +1 -1
  427. package/dist/server.d.ts.map +1 -1
  428. package/dist/server.js +53 -37
  429. package/dist/server.js.map +1 -1
  430. package/dist/two-factor/errors.d.ts +9 -0
  431. package/dist/two-factor/errors.d.ts.map +1 -1
  432. package/dist/two-factor/errors.js +12 -0
  433. package/dist/two-factor/errors.js.map +1 -1
  434. package/dist/two-factor/index.d.ts +5 -4
  435. package/dist/two-factor/index.d.ts.map +1 -1
  436. package/dist/two-factor/index.js +4 -4
  437. package/dist/two-factor/index.js.map +1 -1
  438. package/dist/two-factor/repository.d.ts +17 -6
  439. package/dist/two-factor/repository.d.ts.map +1 -1
  440. package/dist/two-factor/repository.js +37 -9
  441. package/dist/two-factor/repository.js.map +1 -1
  442. package/dist/two-factor/service.d.ts.map +1 -1
  443. package/dist/two-factor/service.js +26 -19
  444. package/dist/two-factor/service.js.map +1 -1
  445. package/dist/two-factor/totp.d.ts +13 -2
  446. package/dist/two-factor/totp.d.ts.map +1 -1
  447. package/dist/two-factor/totp.js +20 -7
  448. package/dist/two-factor/totp.js.map +1 -1
  449. package/dist/two-factor/types.d.ts +3 -0
  450. package/dist/two-factor/types.d.ts.map +1 -1
  451. package/dist/two-factor/types.js +5 -0
  452. package/dist/two-factor/types.js.map +1 -1
  453. package/dist/users/gdpr.d.ts +2 -40
  454. package/dist/users/gdpr.d.ts.map +1 -1
  455. package/dist/users/gdpr.js +3 -110
  456. package/dist/users/gdpr.js.map +1 -1
  457. package/dist/users/index.d.ts +5 -4
  458. package/dist/users/index.d.ts.map +1 -1
  459. package/dist/users/index.js +5 -4
  460. package/dist/users/index.js.map +1 -1
  461. package/dist/users/repository.d.ts +49 -3
  462. package/dist/users/repository.d.ts.map +1 -1
  463. package/dist/users/repository.js +169 -18
  464. package/dist/users/repository.js.map +1 -1
  465. package/dist/users/service.d.ts +19 -51
  466. package/dist/users/service.d.ts.map +1 -1
  467. package/dist/users/service.js +72 -122
  468. package/dist/users/service.js.map +1 -1
  469. package/dist/users/types.d.ts +4 -5
  470. package/dist/users/types.d.ts.map +1 -1
  471. package/dist/users/types.js.map +1 -1
  472. package/dist/users/validators.d.ts +28 -0
  473. package/dist/users/validators.d.ts.map +1 -0
  474. package/dist/users/validators.js +25 -0
  475. package/dist/users/validators.js.map +1 -0
  476. package/locales/default/en/errors.json +2 -1
  477. package/migrations/024_application_client_correction.sql +39 -0
  478. package/migrations/025_record_deletion_lifecycle.sql +26 -0
  479. package/migrations/026_simplify_user_lifecycle.sql +33 -0
  480. package/migrations/027_branding_asset_size_limits.sql +19 -0
  481. package/migrations/028_totp_replay_protection.sql +17 -0
  482. package/migrations/029_public_session_identifiers.sql +16 -0
  483. package/migrations/030_global_configuration_catalog.sql +39 -0
  484. package/migrations/031_monotonic_updated_at.sql +28 -0
  485. package/migrations/032_client_require_consent.sql +15 -0
  486. package/package.json +2 -2
  487. package/dist/lib/data-import-plan.d.ts +0 -50
  488. package/dist/lib/data-import-plan.d.ts.map +0 -1
  489. package/dist/lib/data-import-plan.js +0 -235
  490. package/dist/lib/data-import-plan.js.map +0 -1
  491. package/dist/lib/data-import.d.ts +0 -276
  492. package/dist/lib/data-import.d.ts.map +0 -1
  493. package/dist/lib/data-import.js +0 -1694
  494. package/dist/lib/data-import.js.map +0 -1
@@ -0,0 +1,591 @@
1
+ /** Strict runtime schemas for the selective portability wire contract. */
2
+ import { z } from 'zod';
3
+ /** Closed categories supported by the version 1.0 manifest. */
4
+ export declare const portabilityCategorySchema: z.ZodEnum<{
5
+ applications_authorization: "applications_authorization";
6
+ oidc_clients: "oidc_clients";
7
+ organizations: "organizations";
8
+ users_assignments: "users_assignments";
9
+ }>;
10
+ /** Organization or complete-environment source scope. */
11
+ export declare const portabilityScopeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
12
+ kind: z.ZodLiteral<"organization">;
13
+ organization_slug: z.ZodString;
14
+ }, z.core.$strict>, z.ZodObject<{
15
+ kind: z.ZodLiteral<"environment">;
16
+ }, z.core.$strict>], "kind">;
17
+ /** Explicit application filter shared by export requests and manifests. */
18
+ export declare const portabilityApplicationSelectionSchema: z.ZodObject<{
19
+ all_applications: z.ZodBoolean;
20
+ application_slugs: z.ZodArray<z.ZodString>;
21
+ }, z.core.$strict>;
22
+ /** Strict complete portability manifest schema. */
23
+ export declare const portabilityManifestSchema: z.ZodObject<{
24
+ version: z.ZodLiteral<"1.0">;
25
+ exported_at: z.ZodString;
26
+ scope: z.ZodDiscriminatedUnion<[z.ZodObject<{
27
+ kind: z.ZodLiteral<"organization">;
28
+ organization_slug: z.ZodString;
29
+ }, z.core.$strict>, z.ZodObject<{
30
+ kind: z.ZodLiteral<"environment">;
31
+ }, z.core.$strict>], "kind">;
32
+ categories: z.ZodArray<z.ZodEnum<{
33
+ applications_authorization: "applications_authorization";
34
+ oidc_clients: "oidc_clients";
35
+ organizations: "organizations";
36
+ users_assignments: "users_assignments";
37
+ }>>;
38
+ application_selection: z.ZodObject<{
39
+ all_applications: z.ZodBoolean;
40
+ application_slugs: z.ZodArray<z.ZodString>;
41
+ }, z.core.$strict>;
42
+ organizations: z.ZodArray<z.ZodObject<{
43
+ slug: z.ZodString;
44
+ name: z.ZodString;
45
+ status: z.ZodEnum<{
46
+ active: "active";
47
+ suspended: "suspended";
48
+ }>;
49
+ default_locale: z.ZodString;
50
+ default_login_methods: z.ZodArray<z.ZodEnum<{
51
+ magic_link: "magic_link";
52
+ password: "password";
53
+ }>>;
54
+ two_factor_policy: z.ZodEnum<{
55
+ optional: "optional";
56
+ required_any: "required_any";
57
+ required_email: "required_email";
58
+ required_totp: "required_totp";
59
+ }>;
60
+ branding: z.ZodObject<{
61
+ logo_url: z.ZodNullable<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
62
+ favicon_url: z.ZodNullable<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
63
+ primary_color: z.ZodNullable<z.ZodString>;
64
+ company_name: z.ZodNullable<z.ZodString>;
65
+ custom_css: z.ZodNullable<z.ZodString>;
66
+ logo_asset: z.ZodNullable<z.ZodPipe<z.ZodObject<{
67
+ media_type: z.ZodString;
68
+ content_base64: z.ZodString;
69
+ }, z.core.$strict>, z.ZodTransform<{
70
+ media_type: string;
71
+ content_base64: string;
72
+ }, {
73
+ media_type: string;
74
+ content_base64: string;
75
+ }>>>;
76
+ favicon_asset: z.ZodNullable<z.ZodPipe<z.ZodObject<{
77
+ media_type: z.ZodString;
78
+ content_base64: z.ZodString;
79
+ }, z.core.$strict>, z.ZodTransform<{
80
+ media_type: string;
81
+ content_base64: string;
82
+ }, {
83
+ media_type: string;
84
+ content_base64: string;
85
+ }>>>;
86
+ }, z.core.$strict>;
87
+ }, z.core.$strict>>;
88
+ applications: z.ZodArray<z.ZodObject<{
89
+ slug: z.ZodString;
90
+ name: z.ZodString;
91
+ description: z.ZodNullable<z.ZodString>;
92
+ status: z.ZodEnum<{
93
+ active: "active";
94
+ inactive: "inactive";
95
+ }>;
96
+ }, z.core.$strict>>;
97
+ application_modules: z.ZodArray<z.ZodObject<{
98
+ application_slug: z.ZodString;
99
+ slug: z.ZodString;
100
+ name: z.ZodString;
101
+ description: z.ZodNullable<z.ZodString>;
102
+ status: z.ZodEnum<{
103
+ active: "active";
104
+ inactive: "inactive";
105
+ }>;
106
+ }, z.core.$strict>>;
107
+ roles: z.ZodArray<z.ZodObject<{
108
+ application_slug: z.ZodString;
109
+ slug: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
110
+ name: z.ZodString;
111
+ description: z.ZodNullable<z.ZodString>;
112
+ }, z.core.$strict>>;
113
+ permissions: z.ZodArray<z.ZodObject<{
114
+ application_slug: z.ZodString;
115
+ slug: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
116
+ module_slug: z.ZodNullable<z.ZodString>;
117
+ name: z.ZodString;
118
+ description: z.ZodNullable<z.ZodString>;
119
+ }, z.core.$strict>>;
120
+ claim_definitions: z.ZodArray<z.ZodObject<{
121
+ application_slug: z.ZodString;
122
+ claim_name: z.ZodString;
123
+ claim_type: z.ZodEnum<{
124
+ boolean: "boolean";
125
+ json: "json";
126
+ number: "number";
127
+ string: "string";
128
+ }>;
129
+ description: z.ZodNullable<z.ZodString>;
130
+ include_in_id_token: z.ZodBoolean;
131
+ include_in_access_token: z.ZodBoolean;
132
+ include_in_userinfo: z.ZodBoolean;
133
+ }, z.core.$strict>>;
134
+ role_permission_mappings: z.ZodArray<z.ZodObject<{
135
+ application_slug: z.ZodString;
136
+ role_slug: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
137
+ permission_slugs: z.ZodArray<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
138
+ }, z.core.$strict>>;
139
+ users: z.ZodArray<z.ZodObject<{
140
+ given_name: z.ZodNullable<z.ZodString>;
141
+ family_name: z.ZodNullable<z.ZodString>;
142
+ middle_name: z.ZodNullable<z.ZodString>;
143
+ nickname: z.ZodNullable<z.ZodString>;
144
+ preferred_username: z.ZodNullable<z.ZodString>;
145
+ profile_url: z.ZodNullable<z.ZodString>;
146
+ picture_url: z.ZodNullable<z.ZodString>;
147
+ website_url: z.ZodNullable<z.ZodString>;
148
+ gender: z.ZodNullable<z.ZodString>;
149
+ birthdate: z.ZodNullable<z.ZodString>;
150
+ zoneinfo: z.ZodNullable<z.ZodString>;
151
+ locale: z.ZodNullable<z.ZodString>;
152
+ phone_number: z.ZodNullable<z.ZodString>;
153
+ phone_number_verified: z.ZodBoolean;
154
+ address_street: z.ZodNullable<z.ZodString>;
155
+ address_locality: z.ZodNullable<z.ZodString>;
156
+ address_region: z.ZodNullable<z.ZodString>;
157
+ address_postal_code: z.ZodNullable<z.ZodString>;
158
+ address_country: z.ZodNullable<z.ZodString>;
159
+ organization_slug: z.ZodString;
160
+ email: z.ZodPreprocess<z.ZodString>;
161
+ email_verified: z.ZodBoolean;
162
+ status: z.ZodEnum<{
163
+ active: "active";
164
+ inactive: "inactive";
165
+ }>;
166
+ }, z.core.$strict>>;
167
+ user_role_assignments: z.ZodArray<z.ZodObject<{
168
+ organization_slug: z.ZodString;
169
+ email: z.ZodPreprocess<z.ZodString>;
170
+ application_slug: z.ZodString;
171
+ role_slug: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
172
+ }, z.core.$strict>>;
173
+ user_claim_values: z.ZodArray<z.ZodObject<{
174
+ organization_slug: z.ZodString;
175
+ email: z.ZodPreprocess<z.ZodString>;
176
+ application_slug: z.ZodString;
177
+ claim_name: z.ZodString;
178
+ value: z.ZodJSONSchema;
179
+ }, z.core.$strict>>;
180
+ clients: z.ZodArray<z.ZodObject<{
181
+ client_id: z.ZodString;
182
+ organization_slug: z.ZodString;
183
+ application_slug: z.ZodString;
184
+ name: z.ZodString;
185
+ client_type: z.ZodEnum<{
186
+ confidential: "confidential";
187
+ public: "public";
188
+ }>;
189
+ application_type: z.ZodEnum<{
190
+ native: "native";
191
+ spa: "spa";
192
+ web: "web";
193
+ }>;
194
+ status: z.ZodEnum<{
195
+ active: "active";
196
+ inactive: "inactive";
197
+ }>;
198
+ grant_types: z.ZodArray<z.ZodEnum<{
199
+ authorization_code: "authorization_code";
200
+ client_credentials: "client_credentials";
201
+ refresh_token: "refresh_token";
202
+ }>>;
203
+ response_types: z.ZodArray<z.ZodLiteral<"code">>;
204
+ scope: z.ZodString;
205
+ login_methods: z.ZodNullable<z.ZodArray<z.ZodEnum<{
206
+ magic_link: "magic_link";
207
+ password: "password";
208
+ }>>>;
209
+ token_endpoint_auth_method: z.ZodEnum<{
210
+ client_secret_basic: "client_secret_basic";
211
+ client_secret_post: "client_secret_post";
212
+ none: "none";
213
+ }>;
214
+ redirect_uris: z.ZodArray<z.ZodString>;
215
+ post_logout_redirect_uris: z.ZodArray<z.ZodString>;
216
+ allowed_origins: z.ZodArray<z.ZodString>;
217
+ require_pkce: z.ZodBoolean;
218
+ require_consent: z.ZodBoolean;
219
+ }, z.core.$strict>>;
220
+ }, z.core.$strict>;
221
+ /** Strict export-manifest request schema. */
222
+ export declare const exportManifestRequestSchema: z.ZodObject<{
223
+ scope: z.ZodDiscriminatedUnion<[z.ZodObject<{
224
+ kind: z.ZodLiteral<"organization">;
225
+ organization_slug: z.ZodString;
226
+ }, z.core.$strict>, z.ZodObject<{
227
+ kind: z.ZodLiteral<"environment">;
228
+ }, z.core.$strict>], "kind">;
229
+ categories: z.ZodArray<z.ZodEnum<{
230
+ applications_authorization: "applications_authorization";
231
+ oidc_clients: "oidc_clients";
232
+ organizations: "organizations";
233
+ users_assignments: "users_assignments";
234
+ }>>;
235
+ application_selection: z.ZodObject<{
236
+ all_applications: z.ZodBoolean;
237
+ application_slugs: z.ZodArray<z.ZodString>;
238
+ }, z.core.$strict>;
239
+ }, z.core.$strict>;
240
+ /** Strict preview/apply request schema. */
241
+ export declare const importManifestRequestSchema: z.ZodObject<{
242
+ manifest: z.ZodObject<{
243
+ version: z.ZodLiteral<"1.0">;
244
+ exported_at: z.ZodString;
245
+ scope: z.ZodDiscriminatedUnion<[z.ZodObject<{
246
+ kind: z.ZodLiteral<"organization">;
247
+ organization_slug: z.ZodString;
248
+ }, z.core.$strict>, z.ZodObject<{
249
+ kind: z.ZodLiteral<"environment">;
250
+ }, z.core.$strict>], "kind">;
251
+ categories: z.ZodArray<z.ZodEnum<{
252
+ applications_authorization: "applications_authorization";
253
+ oidc_clients: "oidc_clients";
254
+ organizations: "organizations";
255
+ users_assignments: "users_assignments";
256
+ }>>;
257
+ application_selection: z.ZodObject<{
258
+ all_applications: z.ZodBoolean;
259
+ application_slugs: z.ZodArray<z.ZodString>;
260
+ }, z.core.$strict>;
261
+ organizations: z.ZodArray<z.ZodObject<{
262
+ slug: z.ZodString;
263
+ name: z.ZodString;
264
+ status: z.ZodEnum<{
265
+ active: "active";
266
+ suspended: "suspended";
267
+ }>;
268
+ default_locale: z.ZodString;
269
+ default_login_methods: z.ZodArray<z.ZodEnum<{
270
+ magic_link: "magic_link";
271
+ password: "password";
272
+ }>>;
273
+ two_factor_policy: z.ZodEnum<{
274
+ optional: "optional";
275
+ required_any: "required_any";
276
+ required_email: "required_email";
277
+ required_totp: "required_totp";
278
+ }>;
279
+ branding: z.ZodObject<{
280
+ logo_url: z.ZodNullable<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
281
+ favicon_url: z.ZodNullable<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
282
+ primary_color: z.ZodNullable<z.ZodString>;
283
+ company_name: z.ZodNullable<z.ZodString>;
284
+ custom_css: z.ZodNullable<z.ZodString>;
285
+ logo_asset: z.ZodNullable<z.ZodPipe<z.ZodObject<{
286
+ media_type: z.ZodString;
287
+ content_base64: z.ZodString;
288
+ }, z.core.$strict>, z.ZodTransform<{
289
+ media_type: string;
290
+ content_base64: string;
291
+ }, {
292
+ media_type: string;
293
+ content_base64: string;
294
+ }>>>;
295
+ favicon_asset: z.ZodNullable<z.ZodPipe<z.ZodObject<{
296
+ media_type: z.ZodString;
297
+ content_base64: z.ZodString;
298
+ }, z.core.$strict>, z.ZodTransform<{
299
+ media_type: string;
300
+ content_base64: string;
301
+ }, {
302
+ media_type: string;
303
+ content_base64: string;
304
+ }>>>;
305
+ }, z.core.$strict>;
306
+ }, z.core.$strict>>;
307
+ applications: z.ZodArray<z.ZodObject<{
308
+ slug: z.ZodString;
309
+ name: z.ZodString;
310
+ description: z.ZodNullable<z.ZodString>;
311
+ status: z.ZodEnum<{
312
+ active: "active";
313
+ inactive: "inactive";
314
+ }>;
315
+ }, z.core.$strict>>;
316
+ application_modules: z.ZodArray<z.ZodObject<{
317
+ application_slug: z.ZodString;
318
+ slug: z.ZodString;
319
+ name: z.ZodString;
320
+ description: z.ZodNullable<z.ZodString>;
321
+ status: z.ZodEnum<{
322
+ active: "active";
323
+ inactive: "inactive";
324
+ }>;
325
+ }, z.core.$strict>>;
326
+ roles: z.ZodArray<z.ZodObject<{
327
+ application_slug: z.ZodString;
328
+ slug: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
329
+ name: z.ZodString;
330
+ description: z.ZodNullable<z.ZodString>;
331
+ }, z.core.$strict>>;
332
+ permissions: z.ZodArray<z.ZodObject<{
333
+ application_slug: z.ZodString;
334
+ slug: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
335
+ module_slug: z.ZodNullable<z.ZodString>;
336
+ name: z.ZodString;
337
+ description: z.ZodNullable<z.ZodString>;
338
+ }, z.core.$strict>>;
339
+ claim_definitions: z.ZodArray<z.ZodObject<{
340
+ application_slug: z.ZodString;
341
+ claim_name: z.ZodString;
342
+ claim_type: z.ZodEnum<{
343
+ boolean: "boolean";
344
+ json: "json";
345
+ number: "number";
346
+ string: "string";
347
+ }>;
348
+ description: z.ZodNullable<z.ZodString>;
349
+ include_in_id_token: z.ZodBoolean;
350
+ include_in_access_token: z.ZodBoolean;
351
+ include_in_userinfo: z.ZodBoolean;
352
+ }, z.core.$strict>>;
353
+ role_permission_mappings: z.ZodArray<z.ZodObject<{
354
+ application_slug: z.ZodString;
355
+ role_slug: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
356
+ permission_slugs: z.ZodArray<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
357
+ }, z.core.$strict>>;
358
+ users: z.ZodArray<z.ZodObject<{
359
+ given_name: z.ZodNullable<z.ZodString>;
360
+ family_name: z.ZodNullable<z.ZodString>;
361
+ middle_name: z.ZodNullable<z.ZodString>;
362
+ nickname: z.ZodNullable<z.ZodString>;
363
+ preferred_username: z.ZodNullable<z.ZodString>;
364
+ profile_url: z.ZodNullable<z.ZodString>;
365
+ picture_url: z.ZodNullable<z.ZodString>;
366
+ website_url: z.ZodNullable<z.ZodString>;
367
+ gender: z.ZodNullable<z.ZodString>;
368
+ birthdate: z.ZodNullable<z.ZodString>;
369
+ zoneinfo: z.ZodNullable<z.ZodString>;
370
+ locale: z.ZodNullable<z.ZodString>;
371
+ phone_number: z.ZodNullable<z.ZodString>;
372
+ phone_number_verified: z.ZodBoolean;
373
+ address_street: z.ZodNullable<z.ZodString>;
374
+ address_locality: z.ZodNullable<z.ZodString>;
375
+ address_region: z.ZodNullable<z.ZodString>;
376
+ address_postal_code: z.ZodNullable<z.ZodString>;
377
+ address_country: z.ZodNullable<z.ZodString>;
378
+ organization_slug: z.ZodString;
379
+ email: z.ZodPreprocess<z.ZodString>;
380
+ email_verified: z.ZodBoolean;
381
+ status: z.ZodEnum<{
382
+ active: "active";
383
+ inactive: "inactive";
384
+ }>;
385
+ }, z.core.$strict>>;
386
+ user_role_assignments: z.ZodArray<z.ZodObject<{
387
+ organization_slug: z.ZodString;
388
+ email: z.ZodPreprocess<z.ZodString>;
389
+ application_slug: z.ZodString;
390
+ role_slug: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
391
+ }, z.core.$strict>>;
392
+ user_claim_values: z.ZodArray<z.ZodObject<{
393
+ organization_slug: z.ZodString;
394
+ email: z.ZodPreprocess<z.ZodString>;
395
+ application_slug: z.ZodString;
396
+ claim_name: z.ZodString;
397
+ value: z.ZodJSONSchema;
398
+ }, z.core.$strict>>;
399
+ clients: z.ZodArray<z.ZodObject<{
400
+ client_id: z.ZodString;
401
+ organization_slug: z.ZodString;
402
+ application_slug: z.ZodString;
403
+ name: z.ZodString;
404
+ client_type: z.ZodEnum<{
405
+ confidential: "confidential";
406
+ public: "public";
407
+ }>;
408
+ application_type: z.ZodEnum<{
409
+ native: "native";
410
+ spa: "spa";
411
+ web: "web";
412
+ }>;
413
+ status: z.ZodEnum<{
414
+ active: "active";
415
+ inactive: "inactive";
416
+ }>;
417
+ grant_types: z.ZodArray<z.ZodEnum<{
418
+ authorization_code: "authorization_code";
419
+ client_credentials: "client_credentials";
420
+ refresh_token: "refresh_token";
421
+ }>>;
422
+ response_types: z.ZodArray<z.ZodLiteral<"code">>;
423
+ scope: z.ZodString;
424
+ login_methods: z.ZodNullable<z.ZodArray<z.ZodEnum<{
425
+ magic_link: "magic_link";
426
+ password: "password";
427
+ }>>>;
428
+ token_endpoint_auth_method: z.ZodEnum<{
429
+ client_secret_basic: "client_secret_basic";
430
+ client_secret_post: "client_secret_post";
431
+ none: "none";
432
+ }>;
433
+ redirect_uris: z.ZodArray<z.ZodString>;
434
+ post_logout_redirect_uris: z.ZodArray<z.ZodString>;
435
+ allowed_origins: z.ZodArray<z.ZodString>;
436
+ require_pkce: z.ZodBoolean;
437
+ require_consent: z.ZodBoolean;
438
+ }, z.core.$strict>>;
439
+ }, z.core.$strict>;
440
+ mode: z.ZodEnum<{
441
+ "dry-run": "dry-run";
442
+ "keep-existing": "keep-existing";
443
+ "update-existing": "update-existing";
444
+ }>;
445
+ }, z.core.$strict>;
446
+ /** Result entity names in dependency order. */
447
+ export declare const portabilityEntityTypeSchema: z.ZodEnum<{
448
+ application_modules: "application_modules";
449
+ applications: "applications";
450
+ claim_definitions: "claim_definitions";
451
+ clients: "clients";
452
+ organizations: "organizations";
453
+ permissions: "permissions";
454
+ role_permission_mappings: "role_permission_mappings";
455
+ roles: "roles";
456
+ user_claim_values: "user_claim_values";
457
+ user_role_assignments: "user_role_assignments";
458
+ users: "users";
459
+ }>;
460
+ /** Strict safe portability preview/apply result schema. */
461
+ export declare const portabilityResultSchema: z.ZodObject<{
462
+ mode: z.ZodEnum<{
463
+ "dry-run": "dry-run";
464
+ "keep-existing": "keep-existing";
465
+ "update-existing": "update-existing";
466
+ }>;
467
+ summary: z.ZodObject<{
468
+ organizations: z.ZodObject<{
469
+ created: z.ZodNumber;
470
+ updated: z.ZodNumber;
471
+ skipped: z.ZodNumber;
472
+ rejected: z.ZodNumber;
473
+ }, z.core.$strict>;
474
+ applications: z.ZodObject<{
475
+ created: z.ZodNumber;
476
+ updated: z.ZodNumber;
477
+ skipped: z.ZodNumber;
478
+ rejected: z.ZodNumber;
479
+ }, z.core.$strict>;
480
+ application_modules: z.ZodObject<{
481
+ created: z.ZodNumber;
482
+ updated: z.ZodNumber;
483
+ skipped: z.ZodNumber;
484
+ rejected: z.ZodNumber;
485
+ }, z.core.$strict>;
486
+ roles: z.ZodObject<{
487
+ created: z.ZodNumber;
488
+ updated: z.ZodNumber;
489
+ skipped: z.ZodNumber;
490
+ rejected: z.ZodNumber;
491
+ }, z.core.$strict>;
492
+ permissions: z.ZodObject<{
493
+ created: z.ZodNumber;
494
+ updated: z.ZodNumber;
495
+ skipped: z.ZodNumber;
496
+ rejected: z.ZodNumber;
497
+ }, z.core.$strict>;
498
+ claim_definitions: z.ZodObject<{
499
+ created: z.ZodNumber;
500
+ updated: z.ZodNumber;
501
+ skipped: z.ZodNumber;
502
+ rejected: z.ZodNumber;
503
+ }, z.core.$strict>;
504
+ role_permission_mappings: z.ZodObject<{
505
+ created: z.ZodNumber;
506
+ updated: z.ZodNumber;
507
+ skipped: z.ZodNumber;
508
+ rejected: z.ZodNumber;
509
+ }, z.core.$strict>;
510
+ users: z.ZodObject<{
511
+ created: z.ZodNumber;
512
+ updated: z.ZodNumber;
513
+ skipped: z.ZodNumber;
514
+ rejected: z.ZodNumber;
515
+ }, z.core.$strict>;
516
+ user_role_assignments: z.ZodObject<{
517
+ created: z.ZodNumber;
518
+ updated: z.ZodNumber;
519
+ skipped: z.ZodNumber;
520
+ rejected: z.ZodNumber;
521
+ }, z.core.$strict>;
522
+ user_claim_values: z.ZodObject<{
523
+ created: z.ZodNumber;
524
+ updated: z.ZodNumber;
525
+ skipped: z.ZodNumber;
526
+ rejected: z.ZodNumber;
527
+ }, z.core.$strict>;
528
+ clients: z.ZodObject<{
529
+ created: z.ZodNumber;
530
+ updated: z.ZodNumber;
531
+ skipped: z.ZodNumber;
532
+ rejected: z.ZodNumber;
533
+ }, z.core.$strict>;
534
+ }, z.core.$strict>;
535
+ items: z.ZodArray<z.ZodObject<{
536
+ entity_type: z.ZodEnum<{
537
+ application_modules: "application_modules";
538
+ applications: "applications";
539
+ claim_definitions: "claim_definitions";
540
+ clients: "clients";
541
+ organizations: "organizations";
542
+ permissions: "permissions";
543
+ role_permission_mappings: "role_permission_mappings";
544
+ roles: "roles";
545
+ user_claim_values: "user_claim_values";
546
+ user_role_assignments: "user_role_assignments";
547
+ users: "users";
548
+ }>;
549
+ action: z.ZodEnum<{
550
+ created: "created";
551
+ rejected: "rejected";
552
+ skipped: "skipped";
553
+ updated: "updated";
554
+ }>;
555
+ natural_key: z.ZodRecord<z.ZodString, z.ZodString>;
556
+ credential_will_be_generated: z.ZodOptional<z.ZodBoolean>;
557
+ }, z.core.$strict>>;
558
+ errors: z.ZodArray<z.ZodObject<{
559
+ entity_type: z.ZodEnum<{
560
+ application_modules: "application_modules";
561
+ applications: "applications";
562
+ claim_definitions: "claim_definitions";
563
+ clients: "clients";
564
+ organizations: "organizations";
565
+ permissions: "permissions";
566
+ role_permission_mappings: "role_permission_mappings";
567
+ roles: "roles";
568
+ user_claim_values: "user_claim_values";
569
+ user_role_assignments: "user_role_assignments";
570
+ users: "users";
571
+ }>;
572
+ natural_key: z.ZodRecord<z.ZodString, z.ZodString>;
573
+ code: z.ZodEnum<{
574
+ ambiguous_dependency: "ambiguous_dependency";
575
+ client_id_collision: "client_id_collision";
576
+ control_plane_record: "control_plane_record";
577
+ cross_scope_reference: "cross_scope_reference";
578
+ duplicate_natural_key: "duplicate_natural_key";
579
+ incompatible_record: "incompatible_record";
580
+ invalid_record: "invalid_record";
581
+ missing_dependency: "missing_dependency";
582
+ }>;
583
+ }, z.core.$strict>>;
584
+ credentials: z.ZodOptional<z.ZodArray<z.ZodObject<{
585
+ client_id: z.ZodString;
586
+ label: z.ZodString;
587
+ secret: z.ZodString;
588
+ expires_at: z.ZodString;
589
+ }, z.core.$strict>>>;
590
+ }, z.core.$strict>;
591
+ //# sourceMappingURL=schema.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/portability/schema.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAE1E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA4FxB,+DAA+D;AAC/D,eAAO,MAAM,yBAAyB;;;;;EAKpC,CAAC;AAEH,yDAAyD;AACzD,eAAO,MAAM,sBAAsB;;;;;4BAGjC,CAAC;AAEH,2EAA2E;AAC3E,eAAO,MAAM,qCAAqC;;;kBAKvC,CAAC;AAqRZ,mDAAmD;AACnD,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAelC,CAAC;AAEL,6CAA6C;AAC7C,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;kBAOI,CAAC;AAE7C,2CAA2C;AAC3C,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAK7B,CAAC;AAEZ,+CAA+C;AAC/C,eAAO,MAAM,2BAA2B;;;;;;;;;;;;EAYtC,CAAC;AA6EH,2DAA2D;AAC3D,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA0ChC,CAAC"}