@schemavaults/auth-common 0.24.0 → 0.25.1

package/dist/audience-schema.d.ts

@@ -16,7 +16,7 @@ export interface AudienceSchemaOverrides {
      */
     auth_server_app_id?: string;
 }
-export declare function createAudienceSchema(z: typeof zod, environment?: SchemaVaultsAppEnvironment, overrides?: AudienceSchemaOverrides): zod.ZodUnion<[zod.ZodEffects<zod.ZodString, string, string>, zod.ZodEffects<zod.ZodEffects<zod.ZodEffects<zod.ZodString, string, string>, string, string>, string, string>]>;
+export declare function createAudienceSchema(z: typeof zod, environment?: SchemaVaultsAppEnvironment, overrides?: AudienceSchemaOverrides): zod.ZodUnion<readonly [zod.ZodURL & zod.ZodType<string, string, zod.core.$ZodTypeInternals<string, string>>, zod.ZodString]>;
 /**
  * A list of token audiences. The list may be empty: at the token endpoints
  * an empty audience list means the grant mints no access tokens —
@@ -24,4 +24,4 @@ export declare function createAudienceSchema(z: typeof zod, environment?: Schema
  * configured with no default token audiences complete a login. Call sites
  * that require at least one audience must enforce non-emptiness themselves.
  */
-export declare function createAudienceListSchema(z: typeof zod, environment?: SchemaVaultsAppEnvironment, overrides?: AudienceSchemaOverrides): zod.ZodArray<zod.ZodUnion<[zod.ZodEffects<zod.ZodString, string, string>, zod.ZodEffects<zod.ZodEffects<zod.ZodEffects<zod.ZodString, string, string>, string, string>, string, string>]>, "many">;
+export declare function createAudienceListSchema(z: typeof zod, environment?: SchemaVaultsAppEnvironment, overrides?: AudienceSchemaOverrides): zod.ZodArray<zod.ZodUnion<readonly [zod.ZodURL & zod.ZodType<string, string, zod.core.$ZodTypeInternals<string, string>>, zod.ZodString]>>;

package/dist/audience-schema.js

@@ -3,7 +3,6 @@ export function createAudienceSchema(z, environment = getAppEnvironment(), overr
     const auth_server_url = overrides?.auth_server_url ?? getAuthServerUrl(environment);
     const auth_server_app_id = overrides?.auth_server_app_id ?? getAuthServerAppId();
     const authServerUrlSchema = z
-        .string()
         .url()
         .refine((url) => url === auth_server_url)
         .describe("Allow the auth-server URL configured for the current server!");

package/dist/audience-schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"audience-schema.js","sourceRoot":"","sources":["../src/audience-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,GAEjB,MAAM,+BAA+B,CAAC;AA0BvC,MAAM,UAAU,oBAAoB,CAClC,CAAa,EACb,cAA0C,iBAAiB,EAAE,EAC7D,SAAmC;IAEnC,MAAM,eAAe,GACnB,SAAS,EAAE,eAAe,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC9D,MAAM,kBAAkB,GACtB,SAAS,EAAE,kBAAkB,IAAI,kBAAkB,EAAE,CAAC;IAExD,MAAM,mBAAmB,GAAG,CAAC;SAC1B,MAAM,EAAE;SACR,GAAG,EAAE;SACL,MAAM,CAAC,CAAC,GAAG,EAAiC,EAAE,CAAC,GAAG,KAAK,eAAe,CAAC;SACvE,QAAQ,CAAC,8DAA8D,CAAC,CAAC;IAE5E,MAAM,oCAAoC,GAAG,iBAAiB;SAC3D,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE;QACb,OAAO,EAAE,KAAK,kBAAkB,CAAC;IACnC,CAAC,EAAE,iBAAiB,kBAAkB,qGAAqG,CAAC;SAC3I,QAAQ,CACP,4CAA4C,kBAAkB,iBAAiB,CAChF,CAAC;IAEJ,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,mBAAmB,EAAE,oCAAoC,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,yBAAyB,GAAG,EAA4B,CAAC;AAE/D;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,CAAa,EACb,cAA0C,iBAAiB,EAAE,EAC7D,SAAmC;IAEnC,OAAO,oBAAoB,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC;SACnD,KAAK,EAAE;SACP,GAAG,CACF,yBAAyB,EACzB,2CAA2C,yBAAyB,uBAAuB,CAC5F,CAAC;AACN,CAAC"}
+{"version":3,"file":"audience-schema.js","sourceRoot":"","sources":["../src/audience-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,GAEjB,MAAM,+BAA+B,CAAC;AA0BvC,MAAM,UAAU,oBAAoB,CAClC,CAAa,EACb,cAA0C,iBAAiB,EAAE,EAC7D,SAAmC;IAEnC,MAAM,eAAe,GACnB,SAAS,EAAE,eAAe,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC9D,MAAM,kBAAkB,GACtB,SAAS,EAAE,kBAAkB,IAAI,kBAAkB,EAAE,CAAC;IAExD,MAAM,mBAAmB,GAAG,CAAC;SAC1B,GAAG,EAAE;SACL,MAAM,CAAC,CAAC,GAAG,EAAiC,EAAE,CAAC,GAAG,KAAK,eAAe,CAAC;SACvE,QAAQ,CAAC,8DAA8D,CAAC,CAAC;IAE5E,MAAM,oCAAoC,GAAG,iBAAiB;SAC3D,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE;QACb,OAAO,EAAE,KAAK,kBAAkB,CAAC;IACnC,CAAC,EAAE,iBAAiB,kBAAkB,qGAAqG,CAAC;SAC3I,QAAQ,CACP,4CAA4C,kBAAkB,iBAAiB,CAChF,CAAC;IAEJ,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,mBAAmB,EAAE,oCAAoC,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,yBAAyB,GAAG,EAA4B,CAAC;AAE/D;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,CAAa,EACb,cAA0C,iBAAiB,EAAE,EAC7D,SAAmC;IAEnC,OAAO,oBAAoB,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC;SACnD,KAAK,EAAE;SACP,GAAG,CACF,yBAAyB,EACzB,2CAA2C,yBAAyB,uBAAuB,CAC5F,CAAC;AACN,CAAC"}

package/dist/auth_acquire_tokens_grant_types.d.ts

@@ -3,49 +3,19 @@ import { type AudienceSchemaOverrides } from "./audience-schema";
 import { SchemaVaultsAppEnvironment } from "@schemavaults/app-definitions";
 export declare const grant_types: readonly ["authorization_code", "refresh_token"];
 export declare function createAuthorizationCodePOSTBodySchema(z: typeof zod, environment?: SchemaVaultsAppEnvironment, overrides?: AudienceSchemaOverrides): zod.ZodObject<{
-    code: zod.ZodString;
-    challenge_time: zod.ZodNumber;
-    code_verifier: zod.ZodEffects<zod.ZodString, string, string>;
-    audience: zod.ZodUnion<[zod.ZodUnion<[zod.ZodEffects<zod.ZodString, string, string>, zod.ZodEffects<zod.ZodEffects<zod.ZodEffects<zod.ZodString, string, string>, string, string>, string, string>]>, zod.ZodArray<zod.ZodUnion<[zod.ZodEffects<zod.ZodString, string, string>, zod.ZodEffects<zod.ZodEffects<zod.ZodEffects<zod.ZodString, string, string>, string, string>, string, string>]>, "many">]>;
-    client_app_id: zod.ZodEffects<zod.ZodEffects<zod.ZodString, string, string>, string, string>;
+    audience: zod.ZodNonOptional<zod.ZodUnion<readonly [zod.ZodUnion<readonly [zod.ZodURL & zod.ZodType<string, string, zod.core.$ZodTypeInternals<string, string>>, zod.ZodString]>, zod.ZodArray<zod.ZodUnion<readonly [zod.ZodURL & zod.ZodType<string, string, zod.core.$ZodTypeInternals<string, string>>, zod.ZodString]>>]>>;
+    client_app_id: zod.ZodNonOptional<zod.ZodString>;
     client_secret: zod.ZodOptional<zod.ZodString>;
-    grant_type: zod.ZodLiteral<"authorization_code">;
-    redirect_uri: zod.ZodOptional<zod.ZodNullable<zod.ZodString>>;
-}, "strict", zod.ZodTypeAny, {
-    code: string;
-    challenge_time: number;
-    code_verifier: string;
-    audience: string | string[];
-    client_app_id: string;
-    grant_type: "authorization_code";
-    client_secret?: string | undefined;
-    redirect_uri?: string | null | undefined;
-}, {
-    code: string;
-    challenge_time: number;
-    code_verifier: string;
-    audience: string | string[];
-    client_app_id: string;
-    grant_type: "authorization_code";
-    client_secret?: string | undefined;
-    redirect_uri?: string | null | undefined;
-}>;
+    grant_type: zod.ZodNonOptional<zod.ZodLiteral<"authorization_code">>;
+    code: zod.ZodNonOptional<zod.ZodString>;
+    code_verifier: zod.ZodNonOptional<zod.ZodString>;
+    challenge_time: zod.ZodNonOptional<zod.ZodNumber>;
+    redirect_uri: zod.ZodOptional<zod.ZodNullable<zod.ZodURL>>;
+}, zod.core.$strict>;
 export declare function createRefreshTokenPOSTBodySchema(z: typeof zod, environment?: SchemaVaultsAppEnvironment, overrides?: AudienceSchemaOverrides): zod.ZodObject<{
-    audience: zod.ZodUnion<[zod.ZodUnion<[zod.ZodEffects<zod.ZodString, string, string>, zod.ZodEffects<zod.ZodEffects<zod.ZodEffects<zod.ZodString, string, string>, string, string>, string, string>]>, zod.ZodArray<zod.ZodUnion<[zod.ZodEffects<zod.ZodString, string, string>, zod.ZodEffects<zod.ZodEffects<zod.ZodEffects<zod.ZodString, string, string>, string, string>, string, string>]>, "many">]>;
-    client_app_id: zod.ZodEffects<zod.ZodEffects<zod.ZodString, string, string>, string, string>;
+    audience: zod.ZodNonOptional<zod.ZodUnion<readonly [zod.ZodUnion<readonly [zod.ZodURL & zod.ZodType<string, string, zod.core.$ZodTypeInternals<string, string>>, zod.ZodString]>, zod.ZodArray<zod.ZodUnion<readonly [zod.ZodURL & zod.ZodType<string, string, zod.core.$ZodTypeInternals<string, string>>, zod.ZodString]>>]>>;
+    client_app_id: zod.ZodNonOptional<zod.ZodString>;
     client_secret: zod.ZodOptional<zod.ZodString>;
-    grant_type: zod.ZodLiteral<"refresh_token">;
+    grant_type: zod.ZodNonOptional<zod.ZodLiteral<"refresh_token">>;
     replaceRefreshToo: zod.ZodOptional<zod.ZodBoolean>;
-}, "strict", zod.ZodTypeAny, {
-    audience: string | string[];
-    client_app_id: string;
-    grant_type: "refresh_token";
-    client_secret?: string | undefined;
-    replaceRefreshToo?: boolean | undefined;
-}, {
-    audience: string | string[];
-    client_app_id: string;
-    grant_type: "refresh_token";
-    client_secret?: string | undefined;
-    replaceRefreshToo?: boolean | undefined;
-}>;
+}, zod.core.$strict>;

package/dist/auth_acquire_tokens_grant_types.js

@@ -36,7 +36,7 @@ export function createAuthorizationCodePOSTBodySchema(z, environment = getAppEnv
         // presenting URI B even when both share an allowlisted origin.
         // Null/absent is reserved for the auth server's own account flow,
         // which has no third-party callback.
-        redirect_uri: z.string().url().nullable().optional(),
+        redirect_uri: z.url().nullable().optional(),
     })
         .required({
         grant_type: true,

package/dist/auth_acquire_tokens_grant_types.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth_acquire_tokens_grant_types.js","sourceRoot":"","sources":["../src/auth_acquire_tokens_grant_types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAEL,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,WAAW,EACX,iBAAiB,GAElB,MAAM,+BAA+B,CAAC;AAEvC,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,oBAAoB;IACpB,eAAe;CACqB,CAAC;AAEvC,SAAS,6BAA6B,CACpC,CAAa,EACb,cAA0C,iBAAiB,EAAE,EAC7D,SAAmC;IAEnC,OAAO,CAAC,CAAC,MAAM,CAAC;QACd,wEAAwE;QACxE,mEAAmE;QACnE,uEAAuE;QACvE,oCAAoC;QACpC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC;YAChB,oBAAoB,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC;YAC/C,wBAAwB,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC;SACpD,CAAC;QACF,aAAa,EAAE,WAAW;QAC1B,oEAAoE;QACpE,wDAAwD;QACxD,wDAAwD;QACxD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KACrD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,qCAAqC,CACnD,CAAa,EACb,cAA0C,iBAAiB,EAAE,EAC7D,SAAmC;IAEnC,OAAO,6BAA6B,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC;SAC5D,MAAM,CAAC;QACN,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;QAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE;QAC9C,aAAa,EAAE,oBAAoB,CAAC,mBAAmB;QACvD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;QACxC,8DAA8D;QAC9D,mEAAmE;QACnE,iEAAiE;QACjE,6DAA6D;QAC7D,+DAA+D;QAC/D,kEAAkE;QAClE,qCAAqC;QACrC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KACrD,CAAC;SACD,QAAQ,CAAC;QACR,UAAU,EAAE,IAAI;QAChB,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,IAAI;QACnB,IAAI,EAAE,IAAI;QACV,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,IAAI;KACrB,CAAC;SACD,MAAM,EAAE,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,CAAa,EACb,cAA0C,iBAAiB,EAAE,EAC7D,SAAmC;IAEnC,OAAO,6BAA6B,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC;SAC5D,MAAM,CAAC;QACN,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;QACtC,mEAAmE;QACnE,gEAAgE;QAChE,oEAAoE;QACpE,uBAAuB;QACvB,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAC1C,CAAC;SACD,QAAQ,CAAC;QACR,UAAU,EAAE,IAAI;QAChB,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,IAAI;KACpB,CAAC;SACD,MAAM,EAAE,CAAC;AACd,CAAC"}
+{"version":3,"file":"auth_acquire_tokens_grant_types.js","sourceRoot":"","sources":["../src/auth_acquire_tokens_grant_types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAEL,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,WAAW,EACX,iBAAiB,GAElB,MAAM,+BAA+B,CAAC;AAEvC,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,oBAAoB;IACpB,eAAe;CACqB,CAAC;AAEvC,SAAS,6BAA6B,CACpC,CAAa,EACb,cAA0C,iBAAiB,EAAE,EAC7D,SAAmC;IAEnC,OAAO,CAAC,CAAC,MAAM,CAAC;QACd,wEAAwE;QACxE,mEAAmE;QACnE,uEAAuE;QACvE,oCAAoC;QACpC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC;YAChB,oBAAoB,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC;YAC/C,wBAAwB,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC;SACpD,CAAC;QACF,aAAa,EAAE,WAAW;QAC1B,oEAAoE;QACpE,wDAAwD;QACxD,wDAAwD;QACxD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KACrD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,qCAAqC,CACnD,CAAa,EACb,cAA0C,iBAAiB,EAAE,EAC7D,SAAmC;IAEnC,OAAO,6BAA6B,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC;SAC5D,MAAM,CAAC;QACN,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;QAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE;QAC9C,aAAa,EAAE,oBAAoB,CAAC,mBAAmB;QACvD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;QACxC,8DAA8D;QAC9D,mEAAmE;QACnE,iEAAiE;QACjE,6DAA6D;QAC7D,+DAA+D;QAC/D,kEAAkE;QAClE,qCAAqC;QACrC,YAAY,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KAC5C,CAAC;SACD,QAAQ,CAAC;QACR,UAAU,EAAE,IAAI;QAChB,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,IAAI;QACnB,IAAI,EAAE,IAAI;QACV,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,IAAI;KACrB,CAAC;SACD,MAAM,EAAE,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,CAAa,EACb,cAA0C,iBAAiB,EAAE,EAC7D,SAAmC;IAEnC,OAAO,6BAA6B,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC;SAC5D,MAAM,CAAC;QACN,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;QACtC,mEAAmE;QACnE,gEAAgE;QAChE,oEAAoE;QACpE,uBAAuB;QACvB,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAC1C,CAAC;SACD,QAAQ,CAAC;QACR,UAAU,EAAE,IAAI;QAChB,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,IAAI;KACpB,CAAC;SACD,MAAM,EAAE,CAAC;AACd,CAAC"}

package/dist/authenticate_result.d.ts

@@ -1,17 +1,12 @@
 import { z } from "zod";
 export declare const availableMfaFactorSchema: z.ZodObject<{
-    factor_id: z.ZodString;
-    factor_type: z.ZodEnum<["totp", "webauthn"]>;
+    factor_id: z.ZodGUID;
+    factor_type: z.ZodEnum<{
+        totp: "totp";
+        webauthn: "webauthn";
+    }>;
     last_used_at: z.ZodNullable<z.ZodNumber>;
-}, "strict", z.ZodTypeAny, {
-    factor_id: string;
-    factor_type: "totp" | "webauthn";
-    last_used_at: number | null;
-}, {
-    factor_id: string;
-    factor_type: "totp" | "webauthn";
-    last_used_at: number | null;
-}>;
+}, z.core.$strict>;
 export type AvailableMfaFactor = z.infer<typeof availableMfaFactorSchema>;
 export declare function collapseWebauthnFactors(factors: AvailableMfaFactor[]): AvailableMfaFactor[];
 export declare const authenticatedAuthenticateResultSchema: z.ZodObject<{
@@ -19,174 +14,64 @@ export declare const authenticatedAuthenticateResultSchema: z.ZodObject<{
     success: z.ZodBoolean;
     message: z.ZodString;
     authorization_code: z.ZodString;
-}, "strict", z.ZodTypeAny, {
-    message: string;
-    authorization_code: string;
-    kind: "authenticated";
-    success: boolean;
-}, {
-    message: string;
-    authorization_code: string;
-    kind: "authenticated";
-    success: boolean;
-}>;
+}, z.core.$strict>;
 export type AuthenticatedAuthenticateResult = z.infer<typeof authenticatedAuthenticateResultSchema>;
 export declare const mfaRequiredAuthenticateResultSchema: z.ZodObject<{
     kind: z.ZodLiteral<"mfa_required">;
     success: z.ZodBoolean;
     message: z.ZodString;
-    challenge_id: z.ZodString;
+    challenge_id: z.ZodGUID;
     expires_at: z.ZodNumber;
     available_factors: z.ZodArray<z.ZodObject<{
-        factor_id: z.ZodString;
-        factor_type: z.ZodEnum<["totp", "webauthn"]>;
+        factor_id: z.ZodGUID;
+        factor_type: z.ZodEnum<{
+            totp: "totp";
+            webauthn: "webauthn";
+        }>;
         last_used_at: z.ZodNullable<z.ZodNumber>;
-    }, "strict", z.ZodTypeAny, {
-        factor_id: string;
-        factor_type: "totp" | "webauthn";
-        last_used_at: number | null;
-    }, {
-        factor_id: string;
-        factor_type: "totp" | "webauthn";
-        last_used_at: number | null;
-    }>, "many">;
+    }, z.core.$strict>>;
     recovery_codes_available: z.ZodBoolean;
-}, "strict", z.ZodTypeAny, {
-    message: string;
-    expires_at: number;
-    kind: "mfa_required";
-    success: boolean;
-    challenge_id: string;
-    available_factors: {
-        factor_id: string;
-        factor_type: "totp" | "webauthn";
-        last_used_at: number | null;
-    }[];
-    recovery_codes_available: boolean;
-}, {
-    message: string;
-    expires_at: number;
-    kind: "mfa_required";
-    success: boolean;
-    challenge_id: string;
-    available_factors: {
-        factor_id: string;
-        factor_type: "totp" | "webauthn";
-        last_used_at: number | null;
-    }[];
-    recovery_codes_available: boolean;
-}>;
+}, z.core.$strict>;
 export type MfaRequiredAuthenticateResult = z.infer<typeof mfaRequiredAuthenticateResultSchema>;
 export declare const authenticateFailureResultSchema: z.ZodObject<{
     kind: z.ZodLiteral<"failure">;
     success: z.ZodBoolean;
     message: z.ZodString;
-}, "strict", z.ZodTypeAny, {
-    message: string;
-    kind: "failure";
-    success: boolean;
-}, {
-    message: string;
-    kind: "failure";
-    success: boolean;
-}>;
+}, z.core.$strict>;
 export type AuthenticateFailureResult = z.infer<typeof authenticateFailureResultSchema>;
 export declare const challengeExpiredAuthenticateResultSchema: z.ZodObject<{
     kind: z.ZodLiteral<"challenge_expired">;
     success: z.ZodBoolean;
     message: z.ZodString;
-}, "strict", z.ZodTypeAny, {
-    message: string;
-    kind: "challenge_expired";
-    success: boolean;
-}, {
-    message: string;
-    kind: "challenge_expired";
-    success: boolean;
-}>;
+}, z.core.$strict>;
 export type ChallengeExpiredAuthenticateResult = z.infer<typeof challengeExpiredAuthenticateResultSchema>;
-export declare const authenticateResultSchema: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+export declare const authenticateResultSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     kind: z.ZodLiteral<"authenticated">;
     success: z.ZodBoolean;
     message: z.ZodString;
     authorization_code: z.ZodString;
-}, "strict", z.ZodTypeAny, {
-    message: string;
-    authorization_code: string;
-    kind: "authenticated";
-    success: boolean;
-}, {
-    message: string;
-    authorization_code: string;
-    kind: "authenticated";
-    success: boolean;
-}>, z.ZodObject<{
+}, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"mfa_required">;
     success: z.ZodBoolean;
     message: z.ZodString;
-    challenge_id: z.ZodString;
+    challenge_id: z.ZodGUID;
     expires_at: z.ZodNumber;
     available_factors: z.ZodArray<z.ZodObject<{
-        factor_id: z.ZodString;
-        factor_type: z.ZodEnum<["totp", "webauthn"]>;
+        factor_id: z.ZodGUID;
+        factor_type: z.ZodEnum<{
+            totp: "totp";
+            webauthn: "webauthn";
+        }>;
         last_used_at: z.ZodNullable<z.ZodNumber>;
-    }, "strict", z.ZodTypeAny, {
-        factor_id: string;
-        factor_type: "totp" | "webauthn";
-        last_used_at: number | null;
-    }, {
-        factor_id: string;
-        factor_type: "totp" | "webauthn";
-        last_used_at: number | null;
-    }>, "many">;
+    }, z.core.$strict>>;
     recovery_codes_available: z.ZodBoolean;
-}, "strict", z.ZodTypeAny, {
-    message: string;
-    expires_at: number;
-    kind: "mfa_required";
-    success: boolean;
-    challenge_id: string;
-    available_factors: {
-        factor_id: string;
-        factor_type: "totp" | "webauthn";
-        last_used_at: number | null;
-    }[];
-    recovery_codes_available: boolean;
-}, {
-    message: string;
-    expires_at: number;
-    kind: "mfa_required";
-    success: boolean;
-    challenge_id: string;
-    available_factors: {
-        factor_id: string;
-        factor_type: "totp" | "webauthn";
-        last_used_at: number | null;
-    }[];
-    recovery_codes_available: boolean;
-}>, z.ZodObject<{
+}, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"failure">;
     success: z.ZodBoolean;
     message: z.ZodString;
-}, "strict", z.ZodTypeAny, {
-    message: string;
-    kind: "failure";
-    success: boolean;
-}, {
-    message: string;
-    kind: "failure";
-    success: boolean;
-}>, z.ZodObject<{
+}, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"challenge_expired">;
     success: z.ZodBoolean;
     message: z.ZodString;
-}, "strict", z.ZodTypeAny, {
-    message: string;
-    kind: "challenge_expired";
-    success: boolean;
-}, {
-    message: string;
-    kind: "challenge_expired";
-    success: boolean;
-}>]>;
+}, z.core.$strict>], "kind">;
 export type AuthenticateResult = z.infer<typeof authenticateResultSchema>;

package/dist/authenticate_result.js

@@ -2,7 +2,7 @@ import { z } from "zod";
 import { mfaFactorTypeSchema } from "./mfa/mfa-factor-type";
 export const availableMfaFactorSchema = z
     .object({
-    factor_id: z.string().uuid(),
+    factor_id: z.guid(),
     factor_type: mfaFactorTypeSchema,
     last_used_at: z.number().int().positive().nullable(),
 })
@@ -51,7 +51,7 @@ export const mfaRequiredAuthenticateResultSchema = z
     kind: z.literal("mfa_required"),
     success: z.boolean(),
     message: z.string(),
-    challenge_id: z.string().uuid(),
+    challenge_id: z.guid(),
     expires_at: z.number().int().positive(),
     available_factors: z.array(availableMfaFactorSchema),
     recovery_codes_available: z.boolean(),

package/dist/authenticate_result.js.map

@@ -1 +1 @@
-{"version":3,"file":"authenticate_result.js","sourceRoot":"","sources":["../src/authenticate_result.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC5B,WAAW,EAAE,mBAAmB;IAChC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACrD,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,wEAAwE;AACxE,8EAA8E;AAC9E,uCAAuC;AACvC,EAAE;AACF,wEAAwE;AACxE,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAC7E,sEAAsE;AACtE,6EAA6E;AAC7E,uEAAuE;AACvE,EAAE;AACF,wEAAwE;AACxE,6EAA6E;AAC7E,wEAAwE;AACxE,oEAAoE;AACpE,MAAM,UAAU,uBAAuB,CACrC,OAA6B;IAE7B,MAAM,SAAS,GAAyB,EAAE,CAAC;IAC3C,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YACtC,IAAI,YAAY;gBAAE,SAAS;YAC3B,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC;KACnD,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,kBAAkB,EAAE,CAAC;SAClB,MAAM,EAAE;SACR,GAAG,CAAC,EAAE,EAAE,wDAAwD,CAAC;CACrE,CAAC;KACD,MAAM,EAAE,CAAC;AAMZ,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC;KACjD,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IAC/B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvC,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC;IACpD,wBAAwB,EAAE,CAAC,CAAC,OAAO,EAAE;CACtC,CAAC;KACD,MAAM,EAAE,CAAC;AAMZ,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC;KAC7C,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC;KACD,MAAM,EAAE,CAAC;AAMZ,uEAAuE;AACvE,0EAA0E;AAC1E,uEAAuE;AACvE,2EAA2E;AAC3E,2DAA2D;AAC3D,MAAM,CAAC,MAAM,wCAAwC,GAAG,CAAC;KACtD,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACpC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC;KACD,MAAM,EAAE,CAAC;AAMZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACnE,qCAAqC;IACrC,mCAAmC;IACnC,+BAA+B;IAC/B,wCAAwC;CACzC,CAAC,CAAC"}
+{"version":3,"file":"authenticate_result.js","sourceRoot":"","sources":["../src/authenticate_result.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;IACnB,WAAW,EAAE,mBAAmB;IAChC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACrD,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,wEAAwE;AACxE,8EAA8E;AAC9E,uCAAuC;AACvC,EAAE;AACF,wEAAwE;AACxE,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAC7E,sEAAsE;AACtE,6EAA6E;AAC7E,uEAAuE;AACvE,EAAE;AACF,wEAAwE;AACxE,6EAA6E;AAC7E,wEAAwE;AACxE,oEAAoE;AACpE,MAAM,UAAU,uBAAuB,CACrC,OAA6B;IAE7B,MAAM,SAAS,GAAyB,EAAE,CAAC;IAC3C,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YACtC,IAAI,YAAY;gBAAE,SAAS;YAC3B,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC;KACnD,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,kBAAkB,EAAE,CAAC;SAClB,MAAM,EAAE;SACR,GAAG,CAAC,EAAE,EAAE,wDAAwD,CAAC;CACrE,CAAC;KACD,MAAM,EAAE,CAAC;AAMZ,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC;KACjD,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IAC/B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvC,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC;IACpD,wBAAwB,EAAE,CAAC,CAAC,OAAO,EAAE;CACtC,CAAC;KACD,MAAM,EAAE,CAAC;AAMZ,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC;KAC7C,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC;KACD,MAAM,EAAE,CAAC;AAMZ,uEAAuE;AACvE,0EAA0E;AAC1E,uEAAuE;AACvE,2EAA2E;AAC3E,2DAA2D;AAC3D,MAAM,CAAC,MAAM,wCAAwC,GAAG,CAAC;KACtD,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACpC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC;KACD,MAAM,EAAE,CAAC;AAMZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACnE,qCAAqC;IACrC,mCAAmC;IACnC,+BAA+B;IAC/B,wCAAwC;CACzC,CAAC,CAAC"}

package/dist/authorize-client-application-form-type.d.ts

@@ -1,9 +1,5 @@
 import { z } from "zod";
 export declare const authorizeClientApplicationFormType: z.ZodObject<{
-    app_id: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
-}, "strict", z.ZodTypeAny, {
-    app_id: string;
-}, {
-    app_id: string;
-}>;
+    app_id: z.ZodNonOptional<z.ZodString>;
+}, z.core.$strict>;
 export default authorizeClientApplicationFormType;

package/dist/credentials/email_credentials.d.ts

@@ -1,12 +1,6 @@
 import { z } from 'zod';
 export declare const emailCredentialsSchema: z.ZodObject<{
-    email: z.ZodString;
-    password: z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, string, string>, string, string>;
-}, "strict", z.ZodTypeAny, {
-    email: string;
-    password: string;
-}, {
-    email: string;
-    password: string;
-}>;
+    email: z.ZodNonOptional<z.ZodPipe<z.ZodString, z.ZodEmail>>;
+    password: z.ZodNonOptional<z.ZodString>;
+}, z.core.$strict>;
 export type EmailCredentials = z.infer<typeof emailCredentialsSchema>;

package/dist/credentials/normalize-email.d.ts

@@ -11,5 +11,5 @@ export declare function normalizeEmail(email: string): string;
  * Email schema that normalizes (trims + lowercases) at parse time, so any
  * payload validated with it carries the canonical form of the address.
  */
-export declare const normalizedEmailSchema: z.ZodString;
+export declare const normalizedEmailSchema: z.ZodPipe<z.ZodString, z.ZodEmail>;
 export default normalizeEmail;

package/dist/credentials/normalize-email.js

@@ -13,6 +13,10 @@ export function normalizeEmail(email) {
  * Email schema that normalizes (trims + lowercases) at parse time, so any
  * payload validated with it carries the canonical form of the address.
  */
-export const normalizedEmailSchema = z.string().trim().toLowerCase().email();
+export const normalizedEmailSchema = z
+    .string()
+    .trim()
+    .toLowerCase()
+    .pipe(z.email());
 export default normalizeEmail;
 //# sourceMappingURL=normalize-email.js.map

package/dist/credentials/normalize-email.js.map

@@ -1 +1 @@
-{"version":3,"file":"normalize-email.js","sourceRoot":"","sources":["../../src/credentials/normalize-email.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,CAAC;AAE7E,eAAe,cAAc,CAAC"}
+{"version":3,"file":"normalize-email.js","sourceRoot":"","sources":["../../src/credentials/normalize-email.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,EAAE;KACR,IAAI,EAAE;KACN,WAAW,EAAE;KACb,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAEnB,eAAe,cAAc,CAAC"}

package/dist/credentials/password_requirements.d.ts

@@ -1,2 +1,2 @@
 import { z } from "zod";
-export declare const passwordSchema: z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, string, string>, string, string>;
+export declare const passwordSchema: z.ZodString;

package/dist/credentials/register_credentials.d.ts

@@ -1,28 +1,8 @@
 import { z } from 'zod';
-export declare const emailRegistrationCredentialsSchema: z.ZodEffects<z.ZodObject<{
-    email: z.ZodString;
-    invite_code: z.ZodString;
-    password: z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, string, string>, string, string>;
-    confirm: z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, string, string>, string, string>;
-}, "strict", z.ZodTypeAny, {
-    email: string;
-    invite_code: string;
-    password: string;
-    confirm: string;
-}, {
-    email: string;
-    invite_code: string;
-    password: string;
-    confirm: string;
-}>, {
-    email: string;
-    invite_code: string;
-    password: string;
-    confirm: string;
-}, {
-    email: string;
-    invite_code: string;
-    password: string;
-    confirm: string;
-}>;
+export declare const emailRegistrationCredentialsSchema: z.ZodObject<{
+    email: z.ZodNonOptional<z.ZodPipe<z.ZodString, z.ZodEmail>>;
+    password: z.ZodNonOptional<z.ZodString>;
+    confirm: z.ZodNonOptional<z.ZodString>;
+    invite_code: z.ZodNonOptional<z.ZodString>;
+}, z.core.$strict>;
 export type EmailRegistrationCredentials = z.infer<typeof emailRegistrationCredentialsSchema>;

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 export { ERROR_MESSAGE_CATALOG, isValidErrorId, } from "./auth-error-message-catalog";
 export type { SchemaVaultsAuthErrorId } from "./auth-error-message-catalog";
 export { AppAlreadyConnectedToApiServerError, isAppAlreadyConnectedToApiServerError, } from "./app-to-api-connection-errors";
-export { userDataSchema, type UserData } from "./user_data";
+export { userDataSchema, type UserData, USERNAME_MIN_LENGTH, USERNAME_MAX_LENGTH, MAX_USER_NAME_PART_LENGTH, USERNAME_REGEX, usernameFormatSchema, userNamePartSchema, userDisplayNameSchema, userProfileNamesSchema, updateUserProfileRequestSchema, userProfileResponseSchema, type Username, type UserProfileNames, type UpdateUserProfileRequest, type UserProfileResponse, } from "./user_data";
 export * from "./credentials";
 export type * from "./credentials";
 export * from "./token-data";

package/dist/index.js

@@ -1,6 +1,6 @@
 export { ERROR_MESSAGE_CATALOG, isValidErrorId, } from "./auth-error-message-catalog";
 export { AppAlreadyConnectedToApiServerError, isAppAlreadyConnectedToApiServerError, } from "./app-to-api-connection-errors";
-export { userDataSchema } from "./user_data";
+export { userDataSchema, USERNAME_MIN_LENGTH, USERNAME_MAX_LENGTH, MAX_USER_NAME_PART_LENGTH, USERNAME_REGEX, usernameFormatSchema, userNamePartSchema, userDisplayNameSchema, userProfileNamesSchema, updateUserProfileRequestSchema, userProfileResponseSchema, } from "./user_data";
 export * from "./credentials";
 // Shapes of tokens
 export * from "./token-data";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,cAAc,GACf,MAAM,8BAA8B,CAAC;AAGtC,OAAO,EACL,mCAAmC,EACnC,qCAAqC,GACtC,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,cAAc,EAAiB,MAAM,aAAa,CAAC;AAE5D,cAAc,eAAe,CAAC;AAG9B,mBAAmB;AACnB,cAAc,cAAc,CAAC;AAM7B,cAAc,cAAc,CAAC;AAG7B,cAAc,QAAQ,CAAC;AAGvB,cAAc,QAAQ,CAAC;AAGvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,OAAO,EACL,wBAAwB,EACxB,qCAAqC,EACrC,mCAAmC,EACnC,+BAA+B,EAC/B,wCAAwC,EACxC,wBAAwB,EACxB,uBAAuB,GAOxB,MAAM,uBAAuB,CAAC;AAE/B,cAAc,OAAO,CAAC;AACtB,OAAO,EACL,+BAA+B,EAE/B,6CAA6C,GAE9C,MAAM,yBAAyB,CAAC;AAEjC,cAAc,mCAAmC,CAAC;AAGlD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAE5D,OAAO,EACL,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,yBAAyB,EACzB,4BAA4B,EAC5B,gBAAgB,EAChB,gCAAgC,EAChC,yCAAyC,EACzC,kCAAkC,EAClC,2CAA2C,EAC3C,0BAA0B,EAC1B,8BAA8B,EAC9B,8BAA8B,EAC9B,sBAAsB,EACtB,sBAAsB,EACtB,iCAAiC,EACjC,kCAAkC,EAClC,4BAA4B,EAC5B,+BAA+B,EAC/B,oCAAoC,EACpC,qCAAqC,EACrC,uCAAuC,EACvC,wCAAwC,GACzC,MAAM,iBAAiB,CAAC;AAezB,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,OAAO,EACL,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,wCAAwC,EAAE,MAAM,4CAA4C,CAAC;AAEtG,OAAO,EAAE,kCAAkC,EAAE,MAAM,0CAA0C,CAAC;AAE9F,OAAO,EACL,uBAAuB,EACvB,6BAA6B,EAC7B,4BAA4B,EAC5B,wBAAwB,GACzB,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,OAAO,EACL,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAE/C,OAAO,EAAE,gCAAgC,EAAE,MAAM,UAAU,CAAC;AAE5D,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,gBAAgB,EAChB,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,qCAAqC,EACrC,gCAAgC,GACjC,MAAM,mCAAmC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,cAAc,GACf,MAAM,8BAA8B,CAAC;AAGtC,OAAO,EACL,mCAAmC,EACnC,qCAAqC,GACtC,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,cAAc,EAEd,mBAAmB,EACnB,mBAAmB,EACnB,yBAAyB,EACzB,cAAc,EACd,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACtB,8BAA8B,EAC9B,yBAAyB,GAK1B,MAAM,aAAa,CAAC;AAErB,cAAc,eAAe,CAAC;AAG9B,mBAAmB;AACnB,cAAc,cAAc,CAAC;AAM7B,cAAc,cAAc,CAAC;AAG7B,cAAc,QAAQ,CAAC;AAGvB,cAAc,QAAQ,CAAC;AAGvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,OAAO,EACL,wBAAwB,EACxB,qCAAqC,EACrC,mCAAmC,EACnC,+BAA+B,EAC/B,wCAAwC,EACxC,wBAAwB,EACxB,uBAAuB,GAOxB,MAAM,uBAAuB,CAAC;AAE/B,cAAc,OAAO,CAAC;AACtB,OAAO,EACL,+BAA+B,EAE/B,6CAA6C,GAE9C,MAAM,yBAAyB,CAAC;AAEjC,cAAc,mCAAmC,CAAC;AAGlD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAE5D,OAAO,EACL,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,yBAAyB,EACzB,4BAA4B,EAC5B,gBAAgB,EAChB,gCAAgC,EAChC,yCAAyC,EACzC,kCAAkC,EAClC,2CAA2C,EAC3C,0BAA0B,EAC1B,8BAA8B,EAC9B,8BAA8B,EAC9B,sBAAsB,EACtB,sBAAsB,EACtB,iCAAiC,EACjC,kCAAkC,EAClC,4BAA4B,EAC5B,+BAA+B,EAC/B,oCAAoC,EACpC,qCAAqC,EACrC,uCAAuC,EACvC,wCAAwC,GACzC,MAAM,iBAAiB,CAAC;AAezB,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,OAAO,EACL,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,wCAAwC,EAAE,MAAM,4CAA4C,CAAC;AAEtG,OAAO,EAAE,kCAAkC,EAAE,MAAM,0CAA0C,CAAC;AAE9F,OAAO,EACL,uBAAuB,EACvB,6BAA6B,EAC7B,4BAA4B,EAC5B,wBAAwB,GACzB,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,OAAO,EACL,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAE/C,OAAO,EAAE,gCAAgC,EAAE,MAAM,UAAU,CAAC;AAE5D,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,gBAAgB,EAChB,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,qCAAqC,EACrC,gCAAgC,GACjC,MAAM,mCAAmC,CAAC"}

package/dist/invite-code/invite-code-definition.d.ts

@@ -1,21 +1,9 @@
 import { z } from "zod";
 export declare const inviteCodeDefinitionSchema: z.ZodObject<{
-    created_at: z.ZodNumber;
-    invite_code: z.ZodString;
-    created_by: z.ZodOptional<z.ZodString>;
-    max_uses: z.ZodNumber;
+    invite_code: z.ZodNonOptional<z.ZodString>;
+    created_at: z.ZodNonOptional<z.ZodNumber>;
+    max_uses: z.ZodNonOptional<z.ZodNumber>;
     description: z.ZodOptional<z.ZodString>;
-}, "strict", z.ZodTypeAny, {
-    created_at: number;
-    invite_code: string;
-    max_uses: number;
-    created_by?: string | undefined;
-    description?: string | undefined;
-}, {
-    created_at: number;
-    invite_code: string;
-    max_uses: number;
-    created_by?: string | undefined;
-    description?: string | undefined;
-}>;
+    created_by: z.ZodOptional<z.ZodGUID>;
+}, z.core.$strict>;
 export type InviteCodeDefinition = z.infer<typeof inviteCodeDefinitionSchema>;

package/dist/invite-code/invite-code-definition.js

@@ -7,7 +7,7 @@ export const inviteCodeDefinitionSchema = z
     created_at: z.number().nonnegative(),
     max_uses: z.number().int().positive(),
     description: z.string().max(MAX_DESCRIPTION_LENGTH).optional(),
-    created_by: z.string().uuid().optional(),
+    created_by: z.guid().optional(),
 })
     .required({
     invite_code: true,

package/dist/invite-code/invite-code-definition.js.map

@@ -1 +1 @@
-{"version":3,"file":"invite-code-definition.js","sourceRoot":"","sources":["../../src/invite-code/invite-code-definition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,MAAM,sBAAsB,GAAW,GAAG,CAAC;AAE3C,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,WAAW,EAAE,sBAAsB;IACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE;IAC9D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CACzC,CAAC;KACD,QAAQ,CAAC;IACR,WAAW,EAAE,IAAI;IACjB,UAAU,EAAE,IAAI;IAChB,QAAQ,EAAE,IAAI;CACf,CAAC;KACD,MAAM,EAAE,CAAC"}
+{"version":3,"file":"invite-code-definition.js","sourceRoot":"","sources":["../../src/invite-code/invite-code-definition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,MAAM,sBAAsB,GAAW,GAAG,CAAC;AAE3C,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,WAAW,EAAE,sBAAsB;IACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE;IAC9D,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC;KACD,QAAQ,CAAC;IACR,WAAW,EAAE,IAAI;IACjB,UAAU,EAAE,IAAI;IAChB,QAAQ,EAAE,IAAI;CACf,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/mfa/mfa-challenge.d.ts

@@ -1,12 +1,6 @@
 import { z } from "zod";
 export declare const mfaChallengeSchema: z.ZodObject<{
-    challenge_id: z.ZodString;
+    challenge_id: z.ZodGUID;
     expires_at: z.ZodNumber;
-}, "strict", z.ZodTypeAny, {
-    expires_at: number;
-    challenge_id: string;
-}, {
-    expires_at: number;
-    challenge_id: string;
-}>;
+}, z.core.$strict>;
 export type MfaChallengeDescriptor = z.infer<typeof mfaChallengeSchema>;

package/dist/mfa/mfa-challenge.js

@@ -1,7 +1,7 @@
 import { z } from "zod";
 export const mfaChallengeSchema = z
     .object({
-    challenge_id: z.string().uuid(),
+    challenge_id: z.guid(),
     expires_at: z.number().int().positive(),
 })
     .strict();

package/dist/mfa/mfa-challenge.js.map

@@ -1 +1 @@
-{"version":3,"file":"mfa-challenge.js","sourceRoot":"","sources":["../../src/mfa/mfa-challenge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,MAAM,EAAE,CAAC"}
+{"version":3,"file":"mfa-challenge.js","sourceRoot":"","sources":["../../src/mfa/mfa-challenge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/mfa/mfa-factor-type.d.ts

@@ -1,5 +1,8 @@
 import { z } from "zod";
 export declare const mfaFactorTypes: readonly ["totp", "webauthn"];
-export declare const mfaFactorTypeSchema: z.ZodEnum<["totp", "webauthn"]>;
+export declare const mfaFactorTypeSchema: z.ZodEnum<{
+    totp: "totp";
+    webauthn: "webauthn";
+}>;
 export type MfaFactorType = z.infer<typeof mfaFactorTypeSchema>;
 export declare function isValidMfaFactorType(value: unknown): value is MfaFactorType;