@seamless-auth/types 0.1.2 → 0.2.0

package/dist/schemas/me/schema.d.ts

@@ -0,0 +1,104 @@
+import { z } from 'zod';
+/**
+ * The caller's own user record. `lastLogin` is null until the first login, and
+ * `activeOrganizationId` is null when the access token carries no org context.
+ */
+export declare const MeUserSchema: z.ZodObject<{
+    id: z.ZodString;
+    email: z.ZodEmail;
+    phone: z.ZodNullable<z.ZodString>;
+    roles: z.ZodArray<z.ZodString>;
+    lastLogin: z.ZodOptional<z.ZodNullable<z.ZodPipe<z.ZodCoercedDate<unknown>, z.ZodTransform<string, Date>>>>;
+    activeOrganizationId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+export type MeUser = z.infer<typeof MeUserSchema>;
+/** @deprecated Use {@link MeUser}. */
+export type SeamlessUser = MeUser;
+export declare const MeResponseSchema: z.ZodObject<{
+    user: z.ZodObject<{
+        id: z.ZodString;
+        email: z.ZodEmail;
+        phone: z.ZodNullable<z.ZodString>;
+        roles: z.ZodArray<z.ZodString>;
+        lastLogin: z.ZodOptional<z.ZodNullable<z.ZodPipe<z.ZodCoercedDate<unknown>, z.ZodTransform<string, Date>>>>;
+        activeOrganizationId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>;
+    credentials: z.ZodArray<z.ZodObject<{
+        platform: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        id: z.ZodString;
+        browser: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        createdAt: z.ZodPipe<z.ZodCoercedDate<unknown>, z.ZodTransform<string, Date>>;
+        counter: z.ZodNumber;
+        transports: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            ble: "ble";
+            hybrid: "hybrid";
+            internal: "internal";
+            nfc: "nfc";
+            usb: "usb";
+            cable: "cable";
+            "smart-card": "smart-card";
+        }>>>;
+        deviceType: z.ZodOptional<z.ZodEnum<{
+            singleDevice: "singleDevice";
+            multiDevice: "multiDevice";
+        }>>;
+        friendlyName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        lastUsedAt: z.ZodOptional<z.ZodNullable<z.ZodPipe<z.ZodCoercedDate<unknown>, z.ZodTransform<string, Date>>>>;
+        deviceInfo: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        backedup: z.ZodBoolean;
+        backedUp: z.ZodBoolean;
+        prfCapable: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    organizations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        slug: z.ZodString;
+        createdByUserId: z.ZodNullable<z.ZodString>;
+        metadata: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        createdAt: z.ZodPipe<z.ZodCoercedDate<unknown>, z.ZodTransform<string, Date>>;
+        updatedAt: z.ZodPipe<z.ZodCoercedDate<unknown>, z.ZodTransform<string, Date>>;
+        membership: z.ZodOptional<z.ZodObject<{
+            id: z.ZodString;
+            organizationId: z.ZodString;
+            userId: z.ZodString;
+            roles: z.ZodArray<z.ZodString>;
+            scopes: z.ZodArray<z.ZodString>;
+            createdAt: z.ZodPipe<z.ZodCoercedDate<unknown>, z.ZodTransform<string, Date>>;
+            updatedAt: z.ZodPipe<z.ZodCoercedDate<unknown>, z.ZodTransform<string, Date>>;
+            user: z.ZodOptional<z.ZodObject<{
+                id: z.ZodString;
+                email: z.ZodEmail;
+                phone: z.ZodNullable<z.ZodString>;
+                roles: z.ZodArray<z.ZodString>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        memberCount: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>>;
+    activeOrganization: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        slug: z.ZodString;
+        createdByUserId: z.ZodNullable<z.ZodString>;
+        metadata: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        createdAt: z.ZodPipe<z.ZodCoercedDate<unknown>, z.ZodTransform<string, Date>>;
+        updatedAt: z.ZodPipe<z.ZodCoercedDate<unknown>, z.ZodTransform<string, Date>>;
+        membership: z.ZodOptional<z.ZodObject<{
+            id: z.ZodString;
+            organizationId: z.ZodString;
+            userId: z.ZodString;
+            roles: z.ZodArray<z.ZodString>;
+            scopes: z.ZodArray<z.ZodString>;
+            createdAt: z.ZodPipe<z.ZodCoercedDate<unknown>, z.ZodTransform<string, Date>>;
+            updatedAt: z.ZodPipe<z.ZodCoercedDate<unknown>, z.ZodTransform<string, Date>>;
+            user: z.ZodOptional<z.ZodObject<{
+                id: z.ZodString;
+                email: z.ZodEmail;
+                phone: z.ZodNullable<z.ZodString>;
+                roles: z.ZodArray<z.ZodString>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        memberCount: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type MeResponse = z.infer<typeof MeResponseSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/schemas/me/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/schemas/me/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;;GAGG;AACH,eAAO,MAAM,YAAY;;;;;;;iBAOvB,CAAC;AAEH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAElD,sCAAsC;AACtC,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC;AAElC,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAK3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}

package/dist/schemas/me/schema.js

@@ -0,0 +1,24 @@
+import { z } from 'zod';
+import { IsoDate } from '../../shared.js';
+import { CredentialResponseSchema } from '../credential/schema.js';
+import { OrganizationSchema } from '../organization/schema.js';
+import { RoleNameSchema } from '../role/schema.js';
+/**
+ * The caller's own user record. `lastLogin` is null until the first login, and
+ * `activeOrganizationId` is null when the access token carries no org context.
+ */
+export const MeUserSchema = z.object({
+    id: z.string(),
+    email: z.email(),
+    phone: z.string().nullable(),
+    roles: z.array(RoleNameSchema),
+    lastLogin: IsoDate.nullable().optional(),
+    activeOrganizationId: z.string().nullable().optional(),
+});
+export const MeResponseSchema = z.object({
+    user: MeUserSchema,
+    credentials: z.array(CredentialResponseSchema),
+    organizations: z.array(OrganizationSchema).optional(),
+    activeOrganization: OrganizationSchema.nullable().optional(),
+});
+//# sourceMappingURL=schema.js.map

package/dist/schemas/me/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/schemas/me/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;IAC9B,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACxC,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC;AAOH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,YAAY;IAClB,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC;IAC9C,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE;IACrD,kBAAkB,EAAE,kBAAkB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC7D,CAAC,CAAC"}

package/dist/schemas/messaging/schema.d.ts

@@ -0,0 +1,73 @@
+import { z } from 'zod';
+export declare const MessagingChannelSchema: z.ZodEnum<{
+    email: "email";
+    sms: "sms";
+}>;
+export type MessagingChannel = z.infer<typeof MessagingChannelSchema>;
+export declare const DeliveryResultSchema: z.ZodObject<{
+    accepted: z.ZodBoolean;
+    provider: z.ZodString;
+    channel: z.ZodEnum<{
+        email: "email";
+        sms: "sms";
+    }>;
+    messageId: z.ZodOptional<z.ZodString>;
+    raw: z.ZodOptional<z.ZodUnknown>;
+}, z.core.$strip>;
+export type DeliveryResult = z.infer<typeof DeliveryResultSchema>;
+export declare const EmailMessageSchema: z.ZodObject<{
+    to: z.ZodString;
+    from: z.ZodOptional<z.ZodString>;
+    subject: z.ZodString;
+    text: z.ZodString;
+    html: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type EmailMessage = z.infer<typeof EmailMessageSchema>;
+export declare const SmsMessageSchema: z.ZodObject<{
+    to: z.ZodString;
+    from: z.ZodOptional<z.ZodString>;
+    body: z.ZodString;
+}, z.core.$strip>;
+export type SmsMessage = z.infer<typeof SmsMessageSchema>;
+export declare const SendOtpEmailInputSchema: z.ZodObject<{
+    to: z.ZodString;
+    token: z.ZodString;
+    from: z.ZodOptional<z.ZodString>;
+    subject: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type SendOtpEmailInput = z.infer<typeof SendOtpEmailInputSchema>;
+export declare const SendOtpSmsInputSchema: z.ZodObject<{
+    to: z.ZodString;
+    token: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
+    from: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type SendOtpSmsInput = z.infer<typeof SendOtpSmsInputSchema>;
+export declare const SendMagicLinkEmailInputSchema: z.ZodObject<{
+    to: z.ZodString;
+    magicLinkUrl: z.ZodString;
+    token: z.ZodOptional<z.ZodString>;
+    from: z.ZodOptional<z.ZodString>;
+    subject: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type SendMagicLinkEmailInput = z.infer<typeof SendMagicLinkEmailInputSchema>;
+/**
+ * What the auth API tells a self-hosted server to deliver. The API never sends
+ * the message itself when the adopter owns delivery, so this is the contract
+ * between the two.
+ */
+export declare const AuthDeliverySchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"otp_email">;
+    to: z.ZodString;
+    token: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"otp_sms">;
+    to: z.ZodString;
+    token: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
+}, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"magic_link_email">;
+    to: z.ZodString;
+    token: z.ZodOptional<z.ZodString>;
+    magicLinkUrl: z.ZodString;
+}, z.core.$strip>], "kind">;
+export type AuthDeliveryInstruction = z.infer<typeof AuthDeliverySchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/schemas/messaging/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/schemas/messaging/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,sBAAsB;;;EAA2B,CAAC;AAE/D,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,oBAAoB;;;;;;;;;iBAM/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,kBAAkB;;;;;;iBAM7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,gBAAgB;;;;iBAI3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,uBAAuB;;;;;iBAKlC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,qBAAqB;;;;iBAIhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,6BAA6B;;;;;;iBAMxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF;;;;GAIG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;2BAiB7B,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/schemas/messaging/schema.js

@@ -0,0 +1,63 @@
+import { z } from 'zod';
+export const MessagingChannelSchema = z.enum(['email', 'sms']);
+export const DeliveryResultSchema = z.object({
+    accepted: z.boolean(),
+    provider: z.string(),
+    channel: MessagingChannelSchema,
+    messageId: z.string().optional(),
+    raw: z.unknown().optional(),
+});
+export const EmailMessageSchema = z.object({
+    to: z.string(),
+    from: z.string().optional(),
+    subject: z.string(),
+    text: z.string(),
+    html: z.string().optional(),
+});
+export const SmsMessageSchema = z.object({
+    to: z.string(),
+    from: z.string().optional(),
+    body: z.string(),
+});
+export const SendOtpEmailInputSchema = z.object({
+    to: z.string(),
+    token: z.string(),
+    from: z.string().optional(),
+    subject: z.string().optional(),
+});
+export const SendOtpSmsInputSchema = z.object({
+    to: z.string(),
+    token: z.union([z.string(), z.number()]),
+    from: z.string().optional(),
+});
+export const SendMagicLinkEmailInputSchema = z.object({
+    to: z.string(),
+    magicLinkUrl: z.string(),
+    token: z.string().optional(),
+    from: z.string().optional(),
+    subject: z.string().optional(),
+});
+/**
+ * What the auth API tells a self-hosted server to deliver. The API never sends
+ * the message itself when the adopter owns delivery, so this is the contract
+ * between the two.
+ */
+export const AuthDeliverySchema = z.discriminatedUnion('kind', [
+    z.object({
+        kind: z.literal('otp_email'),
+        to: z.string(),
+        token: z.string(),
+    }),
+    z.object({
+        kind: z.literal('otp_sms'),
+        to: z.string(),
+        token: z.union([z.string(), z.number()]),
+    }),
+    z.object({
+        kind: z.literal('magic_link_email'),
+        to: z.string(),
+        token: z.string().optional(),
+        magicLinkUrl: z.string(),
+    }),
+]);
+//# sourceMappingURL=schema.js.map

package/dist/schemas/messaging/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/schemas/messaging/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AAI/D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,OAAO,EAAE,sBAAsB;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CACjB,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAIH;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC7D,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAC5B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC1B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;KACzC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;QACnC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;KACzB,CAAC;CACH,CAAC,CAAC"}

package/dist/schemas/metrics/schema.d.ts

@@ -0,0 +1,86 @@
+import { z } from 'zod';
+export declare const MetricsIntervalSchema: z.ZodEnum<{
+    day: "day";
+    hour: "hour";
+}>;
+export type MetricsInterval = z.infer<typeof MetricsIntervalSchema>;
+export declare const MetricsQuerySchema: z.ZodObject<{
+    userId: z.ZodOptional<z.ZodString>;
+    from: z.ZodOptional<z.ZodString>;
+    to: z.ZodOptional<z.ZodString>;
+    interval: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+        day: "day";
+        hour: "hour";
+    }>>>;
+}, z.core.$strip>;
+export type MetricsQuery = z.infer<typeof MetricsQuerySchema>;
+export declare const AuthEventSummaryItemSchema: z.ZodObject<{
+    type: z.ZodString;
+    count: z.ZodNumber;
+}, z.core.$strip>;
+export declare const AuthEventSummaryResponseSchema: z.ZodObject<{
+    summary: z.ZodArray<z.ZodObject<{
+        type: z.ZodString;
+        count: z.ZodNumber;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const AuthEventTimeseriesPointSchema: z.ZodObject<{
+    bucket: z.ZodString;
+    success: z.ZodNumber;
+    failed: z.ZodNumber;
+}, z.core.$strip>;
+export type AuthEventTimeseriesPoint = z.infer<typeof AuthEventTimeseriesPointSchema>;
+export declare const AuthEventTimeseriesResponseSchema: z.ZodObject<{
+    timeseries: z.ZodArray<z.ZodObject<{
+        bucket: z.ZodString;
+        success: z.ZodNumber;
+        failed: z.ZodNumber;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const LoginStatsResponseSchema: z.ZodObject<{
+    success: z.ZodNumber;
+    failed: z.ZodNumber;
+    successRate: z.ZodNumber;
+}, z.core.$strip>;
+/**
+ * Anomaly rows come straight out of the event store, where a partially written
+ * event is still worth surfacing, so every field is optional here.
+ */
+export declare const PartialAuthEventSchema: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    user_id: z.ZodOptional<z.ZodOptional<z.ZodNullable<z.ZodString>>>;
+    type: z.ZodOptional<z.ZodString>;
+    ip_address: z.ZodOptional<z.ZodOptional<z.ZodNullable<z.ZodString>>>;
+    user_agent: z.ZodOptional<z.ZodOptional<z.ZodNullable<z.ZodString>>>;
+    metadata: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    created_at: z.ZodOptional<z.ZodPipe<z.ZodCoercedDate<unknown>, z.ZodTransform<string, Date>>>;
+    updated_at: z.ZodOptional<z.ZodPipe<z.ZodCoercedDate<unknown>, z.ZodTransform<string, Date>>>;
+}, z.core.$strip>;
+export type PartialAuthEvent = z.infer<typeof PartialAuthEventSchema>;
+export declare const SecurityAnomaliesResponseSchema: z.ZodObject<{
+    suspiciousEvents: z.ZodArray<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        user_id: z.ZodOptional<z.ZodOptional<z.ZodNullable<z.ZodString>>>;
+        type: z.ZodOptional<z.ZodString>;
+        ip_address: z.ZodOptional<z.ZodOptional<z.ZodNullable<z.ZodString>>>;
+        user_agent: z.ZodOptional<z.ZodOptional<z.ZodNullable<z.ZodString>>>;
+        metadata: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+        created_at: z.ZodOptional<z.ZodPipe<z.ZodCoercedDate<unknown>, z.ZodTransform<string, Date>>>;
+        updated_at: z.ZodOptional<z.ZodPipe<z.ZodCoercedDate<unknown>, z.ZodTransform<string, Date>>>;
+    }, z.core.$strip>>;
+    total: z.ZodNumber;
+}, z.core.$strip>;
+export type SecurityAnomaliesResponse = z.infer<typeof SecurityAnomaliesResponseSchema>;
+export declare const DashboardMetricsResponseSchema: z.ZodObject<{
+    totalUsers: z.ZodNumber;
+    activeSessions: z.ZodNumber;
+    newUsers24h: z.ZodNumber;
+    loginSuccess24h: z.ZodNumber;
+    loginFailed24h: z.ZodNumber;
+    successRate24h: z.ZodNumber;
+    otpUsage24h: z.ZodNumber;
+    passkeyUsage24h: z.ZodNumber;
+    databaseSize: z.ZodNumber;
+}, z.core.$strip>;
+export type DashboardMetricsResponse = z.infer<typeof DashboardMetricsResponseSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/schemas/metrics/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/schemas/metrics/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,eAAO,MAAM,qBAAqB;;;EAA0B,CAAC;AAE7D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,kBAAkB;;;;;;;;iBAuC3B,CAAC;AAEL,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,0BAA0B;;;iBAGrC,CAAC;AAEH,eAAO,MAAM,8BAA8B;;;;;iBAEzC,CAAC;AAEH,eAAO,MAAM,8BAA8B;;;;iBAIzC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,eAAO,MAAM,iCAAiC;;;;;;iBAE5C,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;iBAInC,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;iBAA4B,CAAC;AAEhE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,+BAA+B;;;;;;;;;;;;iBAG1C,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF,eAAO,MAAM,8BAA8B;;;;;;;;;;iBAUzC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC"}

package/dist/schemas/metrics/schema.js

@@ -0,0 +1,79 @@
+import { z } from 'zod';
+import { AuthEventSchema } from '../authEvent/schema.js';
+const MAX_METRICS_WINDOW_MS = 1000 * 60 * 60 * 24 * 366; // ~1 year
+export const MetricsIntervalSchema = z.enum(['hour', 'day']);
+export const MetricsQuerySchema = z
+    .object({
+    userId: z.string().optional(),
+    from: z.string().optional(),
+    to: z.string().optional(),
+    interval: MetricsIntervalSchema.optional().default('hour'),
+})
+    .superRefine((data, ctx) => {
+    const fromDate = data.from ? new Date(data.from) : undefined;
+    const toDate = data.to ? new Date(data.to) : undefined;
+    const fromValid = fromDate !== undefined && !Number.isNaN(fromDate.getTime());
+    const toValid = toDate !== undefined && !Number.isNaN(toDate.getTime());
+    if (data.from !== undefined && !fromValid) {
+        ctx.addIssue({ code: 'custom', path: ['from'], message: 'Invalid from date' });
+    }
+    if (data.to !== undefined && !toValid) {
+        ctx.addIssue({ code: 'custom', path: ['to'], message: 'Invalid to date' });
+    }
+    if (!fromValid || !toValid || !fromDate || !toDate) {
+        return;
+    }
+    if (fromDate.getTime() > toDate.getTime()) {
+        ctx.addIssue({ code: 'custom', path: ['to'], message: 'from must be on or before to' });
+        return;
+    }
+    // Unbounded windows let a single request scan the whole event table.
+    if (toDate.getTime() - fromDate.getTime() > MAX_METRICS_WINDOW_MS) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['to'],
+            message: 'time range exceeds the maximum window',
+        });
+    }
+});
+export const AuthEventSummaryItemSchema = z.object({
+    type: z.string(),
+    count: z.number(),
+});
+export const AuthEventSummaryResponseSchema = z.object({
+    summary: z.array(AuthEventSummaryItemSchema),
+});
+export const AuthEventTimeseriesPointSchema = z.object({
+    bucket: z.string(),
+    success: z.number(),
+    failed: z.number(),
+});
+export const AuthEventTimeseriesResponseSchema = z.object({
+    timeseries: z.array(AuthEventTimeseriesPointSchema),
+});
+export const LoginStatsResponseSchema = z.object({
+    success: z.number(),
+    failed: z.number(),
+    successRate: z.number(),
+});
+/**
+ * Anomaly rows come straight out of the event store, where a partially written
+ * event is still worth surfacing, so every field is optional here.
+ */
+export const PartialAuthEventSchema = AuthEventSchema.partial();
+export const SecurityAnomaliesResponseSchema = z.object({
+    suspiciousEvents: z.array(PartialAuthEventSchema),
+    total: z.number().int().nonnegative(),
+});
+export const DashboardMetricsResponseSchema = z.object({
+    totalUsers: z.number(),
+    activeSessions: z.number(),
+    newUsers24h: z.number(),
+    loginSuccess24h: z.number(),
+    loginFailed24h: z.number(),
+    successRate24h: z.number(),
+    otpUsage24h: z.number(),
+    passkeyUsage24h: z.number(),
+    databaseSize: z.number(),
+});
+//# sourceMappingURL=schema.js.map

package/dist/schemas/metrics/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/schemas/metrics/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,UAAU;AAEnE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAI7D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,QAAQ,EAAE,qBAAqB,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;CAC3D,CAAC;KACD,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEvD,MAAM,SAAS,GAAG,QAAQ,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAExE,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;QAC1C,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,IAAI,CAAC,EAAE,KAAK,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC;QACtC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QACnD,OAAO;IACT,CAAC;IAED,IAAI,QAAQ,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1C,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,CAAC;QACxF,OAAO;IACT,CAAC;IAED,qEAAqE;IACrE,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,qBAAqB,EAAE,CAAC;QAClE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,uCAAuC;SACjD,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAIL,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC;CAC7C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;CACnB,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC;CACpD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;CACxB,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,eAAe,CAAC,OAAO,EAAE,CAAC;AAIhE,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC;IACjD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CACtC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;CACzB,CAAC,CAAC"}

package/dist/schemas/oauth/schema.d.ts

@@ -0,0 +1,68 @@
+import { z } from 'zod';
+export declare const OAuthProviderParamSchema: z.ZodObject<{
+    providerId: z.ZodString;
+}, z.core.$strip>;
+/** A provider as an unauthenticated client may see it: no client or secret material. */
+export declare const PublicOAuthProviderSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    scopes: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type PublicOAuthProvider = z.infer<typeof PublicOAuthProviderSchema>;
+export declare const OAuthProvidersResponseSchema: z.ZodObject<{
+    providers: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        scopes: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const StartOAuthLoginRequestSchema: z.ZodObject<{
+    redirectUri: z.ZodOptional<z.ZodURL>;
+    returnTo: z.ZodOptional<z.ZodURL>;
+}, z.core.$strip>;
+export type StartOAuthLoginRequest = z.infer<typeof StartOAuthLoginRequestSchema>;
+export declare const StartOAuthLoginResponseSchema: z.ZodObject<{
+    provider: z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        scopes: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>;
+    state: z.ZodString;
+    authorizationUrl: z.ZodURL;
+}, z.core.$strip>;
+export type StartOAuthLoginResponse = z.infer<typeof StartOAuthLoginResponseSchema>;
+export declare const FinishOAuthLoginRequestSchema: z.ZodObject<{
+    code: z.ZodString;
+    state: z.ZodString;
+}, z.core.$strip>;
+export type FinishOAuthLoginRequest = z.infer<typeof FinishOAuthLoginRequestSchema>;
+export declare const OAuthLoginSuccessResponseSchema: z.ZodObject<{
+    sub: z.ZodOptional<z.ZodString>;
+    message: z.ZodString;
+    email: z.ZodOptional<z.ZodString>;
+    phone: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    token: z.ZodOptional<z.ZodString>;
+    ttl: z.ZodOptional<z.ZodNumber>;
+    refreshToken: z.ZodOptional<z.ZodString>;
+    organizationId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    refreshTtl: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const OAUTH_ERROR_CODES: readonly ["oauth_missing_email", "oauth_email_not_verified", "oauth_missing_subject"];
+export declare const OAuthErrorCodeSchema: z.ZodEnum<{
+    oauth_missing_email: "oauth_missing_email";
+    oauth_email_not_verified: "oauth_email_not_verified";
+    oauth_missing_subject: "oauth_missing_subject";
+}>;
+export type OAuthErrorCode = z.infer<typeof OAuthErrorCodeSchema>;
+export declare const OAuthLoginErrorResponseSchema: z.ZodObject<{
+    message: z.ZodOptional<z.ZodString>;
+    error: z.ZodString;
+    code: z.ZodOptional<z.ZodEnum<{
+        oauth_missing_email: "oauth_missing_email";
+        oauth_email_not_verified: "oauth_email_not_verified";
+        oauth_missing_subject: "oauth_missing_subject";
+    }>>;
+}, z.core.$strip>;
+export type OAuthLoginErrorResponse = z.infer<typeof OAuthLoginErrorResponseSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/schemas/oauth/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/schemas/oauth/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,wBAAwB;;iBAEnC,CAAC;AAEH,wFAAwF;AACxF,eAAO,MAAM,yBAAyB;;;;iBAIpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,4BAA4B;;;;;;iBAEvC,CAAC;AAEH,eAAO,MAAM,4BAA4B;;;iBAGvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,eAAO,MAAM,6BAA6B;;;;;;;;iBAIxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,6BAA6B;;;iBAGxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,+BAA+B;;;;;;;;;;;iBAE1C,CAAC;AAEH,eAAO,MAAM,iBAAiB,uFAIpB,CAAC;AAEX,eAAO,MAAM,oBAAoB;;;;EAA4B,CAAC;AAE9D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,6BAA6B;;;;;;;;iBAIxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC"}

package/dist/schemas/oauth/schema.js

@@ -0,0 +1,43 @@
+import { z } from 'zod';
+import { RefreshSuccessResponseSchema } from '../auth/auth.schema.js';
+import { OAuthProviderIdSchema } from '../systemConfig/schema.js';
+export const OAuthProviderParamSchema = z.object({
+    providerId: OAuthProviderIdSchema,
+});
+/** A provider as an unauthenticated client may see it: no client or secret material. */
+export const PublicOAuthProviderSchema = z.object({
+    id: z.string(),
+    name: z.string(),
+    scopes: z.array(z.string()),
+});
+export const OAuthProvidersResponseSchema = z.object({
+    providers: z.array(PublicOAuthProviderSchema),
+});
+export const StartOAuthLoginRequestSchema = z.object({
+    redirectUri: z.url().optional(),
+    returnTo: z.url().optional(),
+});
+export const StartOAuthLoginResponseSchema = z.object({
+    provider: PublicOAuthProviderSchema,
+    state: z.string(),
+    authorizationUrl: z.url(),
+});
+export const FinishOAuthLoginRequestSchema = z.object({
+    code: z.string().trim().min(1),
+    state: z.string().trim().min(1),
+});
+export const OAuthLoginSuccessResponseSchema = RefreshSuccessResponseSchema.omit({
+    sessionId: true,
+});
+export const OAUTH_ERROR_CODES = [
+    'oauth_missing_email',
+    'oauth_email_not_verified',
+    'oauth_missing_subject',
+];
+export const OAuthErrorCodeSchema = z.enum(OAUTH_ERROR_CODES);
+export const OAuthLoginErrorResponseSchema = z.object({
+    message: z.string().optional(),
+    error: z.string(),
+    code: OAuthErrorCodeSchema.optional(),
+});
+//# sourceMappingURL=schema.js.map

package/dist/schemas/oauth/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/schemas/oauth/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAElE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,UAAU,EAAE,qBAAqB;CAClC,CAAC,CAAC;AAEH,wFAAwF;AACxF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC5B,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC;CAC9C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,WAAW,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,QAAQ,EAAE,yBAAyB;IACnC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,gBAAgB,EAAE,CAAC,CAAC,GAAG,EAAE;CAC1B,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAChC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,+BAA+B,GAAG,4BAA4B,CAAC,IAAI,CAAC;IAC/E,SAAS,EAAE,IAAI;CAChB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,qBAAqB;IACrB,0BAA0B;IAC1B,uBAAuB;CACf,CAAC;AAEX,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;AAI9D,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC"}