@schemavaults/auth-common 0.25.0 → 0.26.1

package/dist/oidc/token-endpoint-extensions.js

@@ -0,0 +1,69 @@
+/**
+ * Token-endpoint request/response parameters used by the SchemaVaults
+ * SDKs on top of the standard OIDC token endpoint (`/api/oidc/token`).
+ *
+ * The platform's SDK clients need two things a plain OIDC relying party
+ * does not:
+ *
+ *   1. Access tokens for arbitrary registered API servers (the platform's
+ *      authorization model is audience-based). This uses the STANDARD
+ *      RFC 8707 `resource` parameter: the token endpoint mints the
+ *      response's `access_token` for that audience instead of the
+ *      reserved `oidc-userinfo` audience. Exactly one `resource` per
+ *      token request (the platform issues one encrypted access token per
+ *      audience, so it "only supports issuing an access token with a
+ *      single audience" in RFC 8707 §2 terms).
+ *
+ *   2. Refresh tokens kept out of JavaScript for browser clients. This
+ *      is a platform extension: the `refresh_token_delivery` request
+ *      parameter asks the endpoint to set the refresh token as an
+ *      HTTP-only cookie (scoped to the client app, on the auth server's
+ *      domain) and OMIT `refresh_token` from the JSON body. RFC 6749
+ *      §5.1 makes `refresh_token` OPTIONAL in the response, so
+ *      spec-compliant client libraries (e.g. `openid-client`) accept
+ *      such responses unchanged. The response always carries the
+ *      extension field `refresh_token_expires_in` (seconds) so the client
+ *      can track the session lifetime either way.
+ *
+ * Relying parties that send neither parameter get the plain OIDC
+ * behavior (userinfo-audience access token, refresh token inlined).
+ */
+import { z } from "zod";
+/** RFC 8707 Resource Indicators request parameter name. */
+export const OIDC_TOKEN_RESOURCE_PARAM = "resource";
+/** Platform extension: how the refresh token is delivered to the client. */
+export const OIDC_TOKEN_REFRESH_TOKEN_DELIVERY_PARAM = "refresh_token_delivery";
+export const OIDC_REFRESH_TOKEN_DELIVERY_MODES = [
+    /** RFC 6749 §5.1 default: `refresh_token` inlined in the JSON body. */
+    "inline",
+    /**
+     * Refresh token set as an HTTP-only cookie (`refresh_token_<client_id>`
+     * plus the JS-readable `refresh_token_expiry_<client_id>` marker) and
+     * omitted from the JSON body.
+     */
+    "http_only_cookie",
+];
+export const oidcRefreshTokenDeliveryModeSchema = z.enum(OIDC_REFRESH_TOKEN_DELIVERY_MODES);
+export const DEFAULT_OIDC_REFRESH_TOKEN_DELIVERY_MODE = "inline";
+/**
+ * Platform extension response field: seconds until the (possibly
+ * cookie-delivered) refresh token expires. Named after the widely used
+ * non-standard field of the same name (GitHub, Keycloak's
+ * `refresh_expires_in`, ...).
+ */
+export const OIDC_TOKEN_REFRESH_TOKEN_EXPIRES_IN_FIELD = "refresh_token_expires_in";
+/**
+ * Shape of the extension fields the SDK reads off a token response.
+ * `refresh_token_expires_in` is emitted by the auth server on every
+ * successful response whose grant issued a refresh token.
+ */
+export const oidcTokenResponseExtensionsSchema = z
+    .object({
+    [OIDC_TOKEN_REFRESH_TOKEN_EXPIRES_IN_FIELD]: z
+        .number()
+        .int()
+        .positive()
+        .optional(),
+})
+    .loose();
+//# sourceMappingURL=token-endpoint-extensions.js.map

package/dist/oidc/token-endpoint-extensions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-endpoint-extensions.js","sourceRoot":"","sources":["../../src/oidc/token-endpoint-extensions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,2DAA2D;AAC3D,MAAM,CAAC,MAAM,yBAAyB,GAAG,UAAmB,CAAC;AAE7D,4EAA4E;AAC5E,MAAM,CAAC,MAAM,uCAAuC,GAClD,wBAAiC,CAAC;AAEpC,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,uEAAuE;IACvE,QAAQ;IACR;;;;OAIG;IACH,kBAAkB;CACV,CAAC;AAEX,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,IAAI,CACtD,iCAAiC,CAClC,CAAC;AAMF,MAAM,CAAC,MAAM,wCAAwC,GACnD,QAAwD,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yCAAyC,GACpD,0BAAmC,CAAC;AAEtC;;;;GAIG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC;KAC/C,MAAM,CAAC;IACN,CAAC,yCAAyC,CAAC,EAAE,CAAC;SAC3C,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,EAAE;CACd,CAAC;KACD,KAAK,EAAE,CAAC"}

package/dist/organizations/invite_member_form.d.ts

@@ -2,27 +2,14 @@ import { z } from "zod";
 import { type OrganizationID } from "./organization_id";
 export declare const inviteMemberInputModes: readonly ["email", "uid"];
 export type InviteMemberInputMode = (typeof inviteMemberInputModes)[number];
-export declare const inviteMemberFormSchema: z.ZodEffects<z.ZodObject<{
-    organization_id: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
-    input_mode: z.ZodEnum<["email", "uid"]>;
-    identifier: z.ZodUnion<[z.ZodString, z.ZodString]>;
-}, "strict", z.ZodTypeAny, {
-    organization_id: string;
-    input_mode: "uid" | "email";
-    identifier: string;
-}, {
-    organization_id: string;
-    input_mode: "uid" | "email";
-    identifier: string;
-}>, {
-    organization_id: string;
-    input_mode: "uid" | "email";
-    identifier: string;
-}, {
-    organization_id: string;
-    input_mode: "uid" | "email";
-    identifier: string;
-}>;
+export declare const inviteMemberFormSchema: z.ZodObject<{
+    organization_id: z.ZodNonOptional<z.ZodString>;
+    input_mode: z.ZodNonOptional<z.ZodEnum<{
+        uid: "uid";
+        email: "email";
+    }>>;
+    identifier: z.ZodNonOptional<z.ZodUnion<readonly [z.ZodGUID, z.ZodEmail]>>;
+}, z.core.$strict>;
 export type InviteMemberFormValues = z.infer<typeof inviteMemberFormSchema>;
 export interface InviteMemberSubmitData {
     organization_id: OrganizationID;

package/dist/organizations/invite_member_form.js

@@ -5,7 +5,7 @@ export const inviteMemberFormSchema = z
     .object({
     organization_id: organizationIdSchema,
     input_mode: z.enum(inviteMemberInputModes),
-    identifier: z.union([z.string().uuid(), z.string().email()]),
+    identifier: z.union([z.guid(), z.email()]),
 })
     .required({
     organization_id: true,
@@ -15,18 +15,18 @@ export const inviteMemberFormSchema = z
     .strict()
     .superRefine((data, ctx) => {
     if (data.input_mode === "uid") {
-        if (!z.string().uuid().safeParse(data.identifier).success) {
+        if (!z.guid().safeParse(data.identifier).success) {
             ctx.addIssue({
-                code: z.ZodIssueCode.custom,
+                code: "custom",
                 message: "Must be a valid UUID",
                 path: ["identifier"],
             });
         }
     }
     else if (data.input_mode === "email") {
-        if (!z.string().email().safeParse(data.identifier).success) {
+        if (!z.email().safeParse(data.identifier).success) {
             ctx.addIssue({
-                code: z.ZodIssueCode.custom,
+                code: "custom",
                 message: "Must be a valid email address",
                 path: ["identifier"],
             });

package/dist/organizations/invite_member_form.js.map

@@ -1 +1 @@
-{"version":3,"file":"invite_member_form.js","sourceRoot":"","sources":["../../src/organizations/invite_member_form.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAuB,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAE9E,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,OAAO,EAAE,KAAK,CAAU,CAAC;AAGhE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,eAAe,EAAE,oBAAoB;IACrC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC;IAC1C,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;CAC7D,CAAC;KACD,QAAQ,CAAC;IACR,eAAe,EAAE,IAAI;IACrB,UAAU,EAAE,IAAI;IAChB,UAAU,EAAE,IAAI;CACjB,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,IAAI,EAAE,GAAoB,EAAE,EAAE;IAC1C,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1D,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,sBAAsB;gBAC/B,IAAI,EAAE,CAAC,YAAY,CAAC;aACrB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IAAI,IAAI,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;QACvC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;YAC3D,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,+BAA+B;gBACxC,IAAI,EAAE,CAAC,YAAY,CAAC;aACrB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC"}
+{"version":3,"file":"invite_member_form.js","sourceRoot":"","sources":["../../src/organizations/invite_member_form.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAuB,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAE9E,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,OAAO,EAAE,KAAK,CAAU,CAAC;AAGhE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,eAAe,EAAE,oBAAoB;IACrC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC;IAC1C,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;CAC3C,CAAC;KACD,QAAQ,CAAC;IACR,eAAe,EAAE,IAAI;IACrB,UAAU,EAAE,IAAI;IAChB,UAAU,EAAE,IAAI;CACjB,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,IAAI,EAAE,GAAoB,EAAE,EAAE;IAC1C,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;YACjD,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,sBAAsB;gBAC/B,IAAI,EAAE,CAAC,YAAY,CAAC;aACrB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IAAI,IAAI,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;QACvC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;YAClD,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,+BAA+B;gBACxC,IAAI,EAAE,CAAC,YAAY,CAAC;aACrB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/organizations/organization-membership-role-type.d.ts

@@ -1,5 +1,5 @@
 import { z } from "zod";
 export declare const organizationMembershipRoleTypes: readonly ["owner", "admin", "member"];
 export type OrganizationMembershipRoleType = (typeof organizationMembershipRoleTypes)[number];
-export declare const organizationMembershipRoleTypeSchema: z.ZodEffects<z.ZodString, "admin" | "owner" | "member", string>;
+export declare const organizationMembershipRoleTypeSchema: z.ZodString & z.ZodType<"admin" | "owner" | "member", string, z.core.$ZodTypeInternals<"admin" | "owner" | "member", string>>;
 export declare function isValidOrganizationMembershipRoleType(role: string): role is OrganizationMembershipRoleType;

package/dist/organizations/organization_definition.d.ts

@@ -1,18 +1,8 @@
 import { z } from "zod";
 export declare const organizationDefinitionSchema: z.ZodObject<{
-    created_at: z.ZodNumber;
-    organization_id: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
-    name: z.ZodString;
-    created_by: z.ZodNullable<z.ZodOptional<z.ZodString>>;
-}, "strict", z.ZodTypeAny, {
-    created_at: number;
-    organization_id: string;
-    name: string;
-    created_by?: string | null | undefined;
-}, {
-    created_at: number;
-    organization_id: string;
-    name: string;
-    created_by?: string | null | undefined;
-}>;
+    organization_id: z.ZodNonOptional<z.ZodString>;
+    name: z.ZodNonOptional<z.ZodString>;
+    created_at: z.ZodNonOptional<z.ZodNumber>;
+    created_by: z.ZodNullable<z.ZodOptional<z.ZodGUID>>;
+}, z.core.$strict>;
 export type OrganizationDefinition = z.infer<typeof organizationDefinitionSchema>;

package/dist/organizations/organization_definition.js

@@ -6,7 +6,7 @@ export const organizationDefinitionSchema = z
     organization_id: organizationIdSchema,
     name: organizationNameSchema,
     created_at: z.number().positive(),
-    created_by: z.string().uuid().optional().nullable(),
+    created_by: z.guid().optional().nullable(),
 })
     .required({
     organization_id: true,

package/dist/organizations/organization_definition.js.map

@@ -1 +1 @@
-{"version":3,"file":"organization_definition.js","sourceRoot":"","sources":["../../src/organizations/organization_definition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAE7D,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC;KAC1C,MAAM,CAAC;IACN,eAAe,EAAE,oBAAoB;IACrC,IAAI,EAAE,sBAAsB;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACpD,CAAC;KACD,QAAQ,CAAC;IACR,eAAe,EAAE,IAAI;IACrB,IAAI,EAAE,IAAI;IACV,UAAU,EAAE,IAAI;CACjB,CAAC;KACD,MAAM,EAAE,CAAC"}
+{"version":3,"file":"organization_definition.js","sourceRoot":"","sources":["../../src/organizations/organization_definition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAE7D,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC;KAC1C,MAAM,CAAC;IACN,eAAe,EAAE,oBAAoB;IACrC,IAAI,EAAE,sBAAsB;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,QAAQ,CAAC;IACR,eAAe,EAAE,IAAI;IACrB,IAAI,EAAE,IAAI;IACV,UAAU,EAAE,IAAI;CACjB,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/organizations/organization_invitation.d.ts

@@ -2,7 +2,13 @@ import { z } from "zod";
 import { type OrganizationID } from "./organization_id";
 export declare const organizationInvitationStatusTypes: readonly ["pending", "accepted", "declined", "revoked", "expired"];
 export type OrganizationInvitationStatus = (typeof organizationInvitationStatusTypes)[number];
-export declare const organizationInvitationStatusSchema: z.ZodEnum<["pending", "accepted", "declined", "revoked", "expired"]>;
+export declare const organizationInvitationStatusSchema: z.ZodEnum<{
+    pending: "pending";
+    accepted: "accepted";
+    declined: "declined";
+    revoked: "revoked";
+    expired: "expired";
+}>;
 /**
  * Organization invitation as returned by the API for display in the UI.
  * Includes display fields like organization_name and inviter_email.
@@ -49,39 +55,21 @@ export interface OrganizationInvitationWithUserData {
     responded_at?: number | null;
 }
 export declare const organizationInvitationSchema: z.ZodObject<{
-    invitation_id: z.ZodString;
-    organization_id: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
+    invitation_id: z.ZodGUID;
+    organization_id: z.ZodString;
     organization_name: z.ZodOptional<z.ZodString>;
-    inviter_uid: z.ZodString;
-    inviter_email: z.ZodOptional<z.ZodString>;
-    invitee_uid: z.ZodString;
-    invitee_email: z.ZodOptional<z.ZodString>;
-    status: z.ZodEnum<["pending", "accepted", "declined", "revoked", "expired"]>;
+    inviter_uid: z.ZodGUID;
+    inviter_email: z.ZodOptional<z.ZodEmail>;
+    invitee_uid: z.ZodGUID;
+    invitee_email: z.ZodOptional<z.ZodEmail>;
+    status: z.ZodEnum<{
+        pending: "pending";
+        accepted: "accepted";
+        declined: "declined";
+        revoked: "revoked";
+        expired: "expired";
+    }>;
     created_at: z.ZodNumber;
     expires_at: z.ZodNumber;
     responded_at: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
-}, "strip", z.ZodTypeAny, {
-    status: "pending" | "accepted" | "declined" | "revoked" | "expired";
-    expires_at: number;
-    created_at: number;
-    organization_id: string;
-    invitation_id: string;
-    inviter_uid: string;
-    invitee_uid: string;
-    organization_name?: string | undefined;
-    inviter_email?: string | undefined;
-    invitee_email?: string | undefined;
-    responded_at?: number | null | undefined;
-}, {
-    status: "pending" | "accepted" | "declined" | "revoked" | "expired";
-    expires_at: number;
-    created_at: number;
-    organization_id: string;
-    invitation_id: string;
-    inviter_uid: string;
-    invitee_uid: string;
-    organization_name?: string | undefined;
-    inviter_email?: string | undefined;
-    invitee_email?: string | undefined;
-    responded_at?: number | null | undefined;
-}>;
+}, z.core.$strip>;

package/dist/organizations/organization_invitation.js

@@ -9,13 +9,13 @@ export const organizationInvitationStatusTypes = [
 ];
 export const organizationInvitationStatusSchema = z.enum(organizationInvitationStatusTypes);
 export const organizationInvitationSchema = z.object({
-    invitation_id: z.string().uuid(),
+    invitation_id: z.guid(),
     organization_id: organizationIdSchema,
     organization_name: z.string().optional(),
-    inviter_uid: z.string().uuid(),
-    inviter_email: z.string().email().optional(),
-    invitee_uid: z.string().uuid(),
-    invitee_email: z.string().email().optional(),
+    inviter_uid: z.guid(),
+    inviter_email: z.email().optional(),
+    invitee_uid: z.guid(),
+    invitee_email: z.email().optional(),
     status: organizationInvitationStatusSchema,
     created_at: z.number().positive(),
     expires_at: z.number().positive(),

package/dist/organizations/organization_invitation.js.map

@@ -1 +1 @@
-{"version":3,"file":"organization_invitation.js","sourceRoot":"","sources":["../../src/organizations/organization_invitation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAuB,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAE9E,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,SAAS;IACT,UAAU;IACV,UAAU;IACV,SAAS;IACT,SAAS;CACD,CAAC;AAKX,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;AAkD5F,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAChC,eAAe,EAAE,oBAAoB;IACrC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC9B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAC5C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC9B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAC5C,MAAM,EAAE,kCAAkC;IAC1C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC1D,CAAC,CAAC"}
+{"version":3,"file":"organization_invitation.js","sourceRoot":"","sources":["../../src/organizations/organization_invitation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAuB,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAE9E,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,SAAS;IACT,UAAU;IACV,UAAU;IACV,SAAS;IACT,SAAS;CACD,CAAC;AAKX,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;AAkD5F,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE;IACvB,eAAe,EAAE,oBAAoB;IACrC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE;IACrB,aAAa,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IACnC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE;IACrB,aAAa,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IACnC,MAAM,EAAE,kCAAkC;IAC1C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC1D,CAAC,CAAC"}

package/dist/organizations/organization_membership_role_details.d.ts

@@ -23,22 +23,10 @@ export interface OrganizationMembershipRoleDetails {
     joined_at: number;
 }
 export declare const organizationMembershipRoleDetailsSchema: z.ZodObject<{
-    created_at: z.ZodNumber;
-    organization_id: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
-    organization_name: z.ZodString;
-    joined_at: z.ZodNumber;
-    role: z.ZodType<"admin" | "owner" | "member", z.ZodTypeDef, "admin" | "owner" | "member">;
-}, "strict", z.ZodTypeAny, {
-    created_at: number;
-    organization_id: string;
-    organization_name: string;
-    joined_at: number;
-    role: "admin" | "owner" | "member";
-}, {
-    created_at: number;
-    organization_id: string;
-    organization_name: string;
-    joined_at: number;
-    role: "admin" | "owner" | "member";
-}>;
+    organization_id: z.ZodNonOptional<z.ZodString>;
+    organization_name: z.ZodNonOptional<z.ZodString>;
+    role: z.ZodNonOptional<z.ZodType<"admin" | "owner" | "member", unknown, z.core.$ZodTypeInternals<"admin" | "owner" | "member", unknown>>>;
+    created_at: z.ZodNonOptional<z.ZodNumber>;
+    joined_at: z.ZodNonOptional<z.ZodNumber>;
+}, z.core.$strict>;
 export declare function isValidOrganizationMembershipRoleDetails(value: unknown): value is OrganizationMembershipRoleDetails;

package/dist/pagination.d.ts

@@ -4,12 +4,6 @@ export declare const DEFAULT_PAGINATION_PAGE_INDEX: 0;
 export declare const paginationOptionsSchema: z.ZodObject<{
     page_index: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
     page_size: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
-}, "strict", z.ZodTypeAny, {
-    page_index?: number | undefined;
-    page_size?: number | undefined;
-}, {
-    page_index?: number | undefined;
-    page_size?: number | undefined;
-}>;
+}, z.core.$strict>;
 export type PaginationOptions = z.infer<typeof paginationOptionsSchema>;
 export declare function isValidPaginationOptions(val: unknown): val is PaginationOptions;

package/dist/pkce/code_challenge.d.ts

@@ -9,21 +9,13 @@ export interface CreateCodeChallengeInputOptions {
     sha256: (code_verifier: string) => Promise<string>;
 }
 export declare function create_code_challenge(verifier_opts: CreateCodeChallengeInputOptions): Promise<CodeChallengeWithDetails>;
-export declare const codeChallengeSchema: z.ZodEffects<z.ZodString, string, string>;
+export declare const codeChallengeSchema: z.ZodString;
 export type CodeChallenge = z.infer<typeof codeChallengeSchema>;
 export declare const codeChallengeWithDetailsSchema: z.ZodObject<{
-    code_challenge: z.ZodEffects<z.ZodString, string, string>;
-    code_challenge_method: z.ZodLiteral<"S256">;
-    challenge_time: z.ZodNumber;
-}, "strict", z.ZodTypeAny, {
-    challenge_time: number;
-    code_challenge: string;
-    code_challenge_method: "S256";
-}, {
-    challenge_time: number;
-    code_challenge: string;
-    code_challenge_method: "S256";
-}>;
+    code_challenge: z.ZodNonOptional<z.ZodString>;
+    code_challenge_method: z.ZodNonOptional<z.ZodLiteral<"S256">>;
+    challenge_time: z.ZodNonOptional<z.ZodNumber>;
+}, z.core.$strict>;
 export type CodeChallengeWithDetails = {
     code_challenge: CodeChallenge;
     code_challenge_method: typeof code_challenge_method;

package/dist/pkce/code_verifier.d.ts

@@ -6,22 +6,12 @@ export interface CreateCodeVerifierInputOptions {
     debug?: boolean;
 }
 export declare function create_code_verifier({ challenge_time, generateRandomCodeVerifier, debug, }: CreateCodeVerifierInputOptions): CodeVerifierWithDetails;
-export declare const codeVerifierSchema: z.ZodEffects<z.ZodString, string, string>;
+export declare const codeVerifierSchema: z.ZodString;
 export type CodeVerifier = z.infer<typeof codeVerifierSchema>;
 export declare const codeVerifierWithDetailsSchema: z.ZodObject<{
-    challenge_time: z.ZodNumber;
-    code_verifier: z.ZodEffects<z.ZodString, string, string>;
-    expires_at: z.ZodNumber;
-    max_age: z.ZodNumber;
-}, "strict", z.ZodTypeAny, {
-    challenge_time: number;
-    code_verifier: string;
-    expires_at: number;
-    max_age: number;
-}, {
-    challenge_time: number;
-    code_verifier: string;
-    expires_at: number;
-    max_age: number;
-}>;
+    code_verifier: z.ZodNonOptional<z.ZodString>;
+    challenge_time: z.ZodNonOptional<z.ZodNumber>;
+    expires_at: z.ZodNonOptional<z.ZodNumber>;
+    max_age: z.ZodNonOptional<z.ZodNumber>;
+}, z.core.$strict>;
 export type CodeVerifierWithDetails = z.infer<typeof codeVerifierWithDetailsSchema>;

package/dist/pkce/pkce.d.ts

@@ -29,37 +29,19 @@ export declare class PKCE_ProofKeyManager {
     getCodeChallenge(): Promise<CodeChallengeWithDetails>;
     get challenge_time(): number;
     get expiry_time(): number;
-    static get codeVerifierSchema(): import("zod").ZodEffects<import("zod").ZodString, string, string>;
+    static get codeVerifierSchema(): import("zod").ZodString;
     static get codeVerifierWithDetailsSchema(): import("zod").ZodObject<{
-        challenge_time: import("zod").ZodNumber;
-        code_verifier: import("zod").ZodEffects<import("zod").ZodString, string, string>;
-        expires_at: import("zod").ZodNumber;
-        max_age: import("zod").ZodNumber;
-    }, "strict", import("zod").ZodTypeAny, {
-        challenge_time: number;
-        code_verifier: string;
-        expires_at: number;
-        max_age: number;
-    }, {
-        challenge_time: number;
-        code_verifier: string;
-        expires_at: number;
-        max_age: number;
-    }>;
-    static get codeChallengeSchema(): import("zod").ZodEffects<import("zod").ZodString, string, string>;
+        code_verifier: import("zod").ZodNonOptional<import("zod").ZodString>;
+        challenge_time: import("zod").ZodNonOptional<import("zod").ZodNumber>;
+        expires_at: import("zod").ZodNonOptional<import("zod").ZodNumber>;
+        max_age: import("zod").ZodNonOptional<import("zod").ZodNumber>;
+    }, import("zod/v4/core").$strict>;
+    static get codeChallengeSchema(): import("zod").ZodString;
     static get codeChallengeWithOptionsSchema(): import("zod").ZodObject<{
-        code_challenge: import("zod").ZodEffects<import("zod").ZodString, string, string>;
-        code_challenge_method: import("zod").ZodLiteral<"S256">;
-        challenge_time: import("zod").ZodNumber;
-    }, "strict", import("zod").ZodTypeAny, {
-        challenge_time: number;
-        code_challenge: string;
-        code_challenge_method: "S256";
-    }, {
-        challenge_time: number;
-        code_challenge: string;
-        code_challenge_method: "S256";
-    }>;
+        code_challenge: import("zod").ZodNonOptional<import("zod").ZodString>;
+        code_challenge_method: import("zod").ZodNonOptional<import("zod").ZodLiteral<"S256">>;
+        challenge_time: import("zod").ZodNonOptional<import("zod").ZodNumber>;
+    }, import("zod/v4/core").$strict>;
     static get max_age(): number;
     static get codeChallengeMethod(): typeof code_challenge_method;
     static isValidCodeVerifierFormat(maybe_code_verifier: unknown): maybe_code_verifier is CodeVerifierWithDetails;