@seamless-auth/types 0.1.3 → 0.3.0

package/dist/schemas/user/schema.js

@@ -1,11 +1,11 @@
 import { z } from 'zod';
 import { IsoDate } from '../../shared.js';
-export const RoleSchema = z.string().regex(/^(?!.*[_/\\\s])[A-Za-z0-9-]{1,31}$/);
+import { RoleNameSchema } from '../role/schema.js';
 export const UserSchema = z.object({
     id: z.uuid(),
     email: z.email(),
     phone: z.string(),
-    roles: z.array(RoleSchema).default([]),
+    roles: z.array(RoleNameSchema).default([]),
     revoked: z.boolean().default(false),
     emailVerified: z.boolean().default(false),
     phoneVerified: z.boolean().default(false),
@@ -14,18 +14,45 @@ export const UserSchema = z.object({
     createdAt: IsoDate,
     updatedAt: IsoDate.nullable().optional(),
 });
+/**
+ * The user as it crosses the wire. Looser than {@link UserSchema}: the id is an
+ * opaque string rather than a UUID, phone is nullable for email-only accounts,
+ * and the verification flags are absent on endpoints that do not expose them.
+ */
+export const ApiUserSchema = z
+    .object({
+    id: z.string(),
+    email: z.email(),
+    phone: z.string().nullable(),
+    roles: z.array(RoleNameSchema).default([]),
+    revoked: z.boolean().optional(),
+    emailVerified: z.boolean().optional(),
+    phoneVerified: z.boolean().optional(),
+    verified: z.boolean().optional(),
+    lastLogin: IsoDate.nullable().optional(),
+    createdAt: IsoDate.optional(),
+    updatedAt: IsoDate.optional(),
+})
+    .strict();
 export const CreateUserSchema = z.object({
     email: z.email(),
-    phone: z.string(),
-    roles: z.array(RoleSchema).min(1),
+    phone: z.string().min(5).nullish(),
+    roles: z.array(RoleNameSchema).min(1),
 });
 export const UpdateUserSchema = z
     .object({
     email: z.email().optional(),
-    phone: z.string().min(5).optional(),
+    phone: z.string().min(5).nullish(),
     emailVerified: z.boolean().optional(),
     phoneVerified: z.boolean().optional(),
-    roles: z.array(RoleSchema).min(1).optional(),
+    roles: z.array(RoleNameSchema).min(1).optional(),
 })
     .strict();
+export const UserResponseSchema = z.object({
+    user: ApiUserSchema,
+});
+export const UsersListResponseSchema = z.object({
+    users: z.array(ApiUserSchema),
+    total: z.number(),
+});
 //# sourceMappingURL=schema.js.map

package/dist/schemas/user/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/schemas/user/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE1C,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;AAEjF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACtC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACzC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACzC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACpC,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACxC,SAAS,EAAE,OAAO;IAClB,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAClC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACrC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACrC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC7C,CAAC;KACD,MAAM,EAAE,CAAC"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/schemas/user/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACzC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACzC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACpC,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACxC,SAAS,EAAE,OAAO;IAClB,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC;AAIH;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACrC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACrC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACxC,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC7B,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE;IAClC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACtC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE;IAClC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACrC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACrC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,aAAa;CACpB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC"}

package/dist/schemas/webauthn/schema.d.ts

@@ -0,0 +1,61 @@
+import { z } from 'zod';
+/**
+ * PRF salts are validated for length and encoding by the server, which owns the
+ * rule. This schema only asserts the wire shape so both sides agree on it.
+ */
+export declare const WebAuthnPrfRequestSchema: z.ZodObject<{
+    salt: z.ZodString;
+    secondSalt: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type WebAuthnPrfRequest = z.infer<typeof WebAuthnPrfRequestSchema>;
+export declare const WebAuthnRegisterStartQuerySchema: z.ZodObject<{
+    requestPrf: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodOptional<z.ZodBoolean>>;
+    requirePrf: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodOptional<z.ZodBoolean>>;
+}, z.core.$strip>;
+export declare const WebAuthnAssertionStartSchema: z.ZodDefault<z.ZodObject<{
+    credentialId: z.ZodOptional<z.ZodString>;
+    prf: z.ZodOptional<z.ZodObject<{
+        salt: z.ZodString;
+        secondSalt: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>>;
+export declare const WebAuthnCredentialMetadataSchema: z.ZodObject<{
+    friendlyName: z.ZodOptional<z.ZodString>;
+    platform: z.ZodOptional<z.ZodString>;
+    browser: z.ZodOptional<z.ZodString>;
+    deviceInfo: z.ZodOptional<z.ZodString>;
+    prfCapable: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export type WebAuthnCredentialMetadata = z.infer<typeof WebAuthnCredentialMetadataSchema>;
+export declare const WebAuthnRegisterFinishSchema: z.ZodObject<{
+    attestationResponse: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    metadata: z.ZodOptional<z.ZodObject<{
+        friendlyName: z.ZodOptional<z.ZodString>;
+        platform: z.ZodOptional<z.ZodString>;
+        browser: z.ZodOptional<z.ZodString>;
+        deviceInfo: z.ZodOptional<z.ZodString>;
+        prfCapable: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const WebAuthnLoginFinishSchema: z.ZodObject<{
+    assertionResponse: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$strip>;
+/**
+ * The credential creation and request options are passed through to the browser
+ * verbatim, so they are not narrowed here.
+ */
+export declare const WebAuthnChallengeSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+export declare const WebAuthnTokenSuccessSchema: z.ZodObject<{
+    message: z.ZodString;
+    token: z.ZodOptional<z.ZodString>;
+    refreshToken: z.ZodOptional<z.ZodString>;
+    refreshTokenHash: z.ZodOptional<z.ZodString>;
+    sub: z.ZodOptional<z.ZodString>;
+    roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    email: z.ZodOptional<z.ZodString>;
+    phone: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    ttl: z.ZodOptional<z.ZodNumber>;
+    refreshTtl: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export type WebAuthnTokenSuccessResponse = z.infer<typeof WebAuthnTokenSuccessSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/schemas/webauthn/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/schemas/webauthn/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB;;;GAGG;AACH,eAAO,MAAM,wBAAwB;;;iBAGnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,gCAAgC;;;iBAG3C,CAAC;AAEH,eAAO,MAAM,4BAA4B;;;;;;kBAK3B,CAAC;AAEf,eAAO,MAAM,gCAAgC;;;;;;iBAM3C,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE1F,eAAO,MAAM,4BAA4B;;;;;;;;;iBAGvC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;iBAEpC,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,uBAAuB,wCAAoC,CAAC;AAEzE,eAAO,MAAM,0BAA0B;;;;;;;;;;;iBAarC,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC"}

package/dist/schemas/webauthn/schema.js

@@ -0,0 +1,58 @@
+import { z } from 'zod';
+const BooleanQuerySchema = z.preprocess((value) => {
+    if (value === 'true')
+        return true;
+    if (value === 'false')
+        return false;
+    return value;
+}, z.boolean().optional());
+/**
+ * PRF salts are validated for length and encoding by the server, which owns the
+ * rule. This schema only asserts the wire shape so both sides agree on it.
+ */
+export const WebAuthnPrfRequestSchema = z.object({
+    salt: z.string(),
+    secondSalt: z.string().optional(),
+});
+export const WebAuthnRegisterStartQuerySchema = z.object({
+    requestPrf: BooleanQuerySchema,
+    requirePrf: BooleanQuerySchema,
+});
+export const WebAuthnAssertionStartSchema = z
+    .object({
+    credentialId: z.string().optional(),
+    prf: WebAuthnPrfRequestSchema.optional(),
+})
+    .default({});
+export const WebAuthnCredentialMetadataSchema = z.object({
+    friendlyName: z.string().optional(),
+    platform: z.string().optional(),
+    browser: z.string().optional(),
+    deviceInfo: z.string().optional(),
+    prfCapable: z.boolean().optional(),
+});
+export const WebAuthnRegisterFinishSchema = z.object({
+    attestationResponse: z.record(z.string(), z.unknown()),
+    metadata: WebAuthnCredentialMetadataSchema.optional(),
+});
+export const WebAuthnLoginFinishSchema = z.object({
+    assertionResponse: z.record(z.string(), z.unknown()),
+});
+/**
+ * The credential creation and request options are passed through to the browser
+ * verbatim, so they are not narrowed here.
+ */
+export const WebAuthnChallengeSchema = z.record(z.string(), z.unknown());
+export const WebAuthnTokenSuccessSchema = z.object({
+    message: z.string(),
+    token: z.string().optional(),
+    refreshToken: z.string().optional(),
+    refreshTokenHash: z.string().optional(),
+    sub: z.string().optional(),
+    roles: z.array(z.string()).optional(),
+    email: z.string().optional(),
+    phone: z.string().nullable().optional(),
+    ttl: z.number().optional(),
+    refreshTtl: z.number().optional(),
+});
+//# sourceMappingURL=schema.js.map

package/dist/schemas/webauthn/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/schemas/webauthn/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,kBAAkB,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE;IAChD,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,KAAK,CAAC;AACf,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;AAE3B;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,UAAU,EAAE,kBAAkB;IAC9B,UAAU,EAAE,kBAAkB;CAC/B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC;KAC1C,MAAM,CAAC;IACN,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,GAAG,EAAE,wBAAwB,CAAC,QAAQ,EAAE;CACzC,CAAC;KACD,OAAO,CAAC,EAAE,CAAC,CAAC;AAEf,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,mBAAmB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACtD,QAAQ,EAAE,gCAAgC,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;CACrD,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAEzE,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEvC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAEvC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC"}

package/package.json

@@ -1,18 +1,31 @@
 {
   "name": "@seamless-auth/types",
-  "version": "0.1.3",
+  "version": "0.3.0",
   "description": "Shared TypeScript types and Zod schemas for SeamlessAuth.",
   "author": "Fells Code, LLC",
-  "license": "AGPL-3.0",
+  "license": "AGPL-3.0-only",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "exports": {
-    ".": "./dist/index.js"
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./role": {
+      "types": "./dist/schemas/role/schema.d.ts",
+      "import": "./dist/schemas/role/schema.js"
+    },
+    "./role/matching": {
+      "types": "./dist/schemas/role/matching.d.ts",
+      "import": "./dist/schemas/role/matching.js"
+    }
   },
+  "sideEffects": false,
   "files": [
     "dist",
     "README.md",
+    "CHANGELOG.md",
     "LICENSE"
   ],
   "repository": {
@@ -33,7 +46,7 @@
     "seamless-auth"
   ],
   "scripts": {
-    "build": "tsc",
+    "build": "npm run clean && tsc",
     "dev": "tsc --watch",
     "clean": "rm -rf dist",
     "typecheck": "tsc --noEmit",
@@ -44,22 +57,32 @@
     "prepare": "husky",
     "prepublishOnly": "npm run build",
     "test": "vitest run",
-    "test:watch": "vitest"
+    "test:watch": "vitest",
+    "coverage": "vitest run --coverage",
+    "changeset": "changeset",
+    "version-packages": "changeset version",
+    "release:stable": "npm run build && changeset publish",
+    "check-npm-build": "npm pack --dry-run"
   },
   "lint-staged": {
     "*.ts": [
       "eslint --fix",
       "prettier --write"
+    ],
+    "*.{json,md,yml,yaml}": [
+      "prettier --write"
     ]
   },
   "dependencies": {
     "zod": "^4.3.6"
   },
   "devDependencies": {
+    "@changesets/cli": "^2.31.1",
     "@commitlint/cli": "^20.5.0",
     "@commitlint/config-conventional": "^20.5.0",
     "@typescript-eslint/eslint-plugin": "^8.57.2",
     "@typescript-eslint/parser": "^8.57.2",
+    "@vitest/coverage-v8": "^4.1.10",
     "eslint": "^10.1.0",
     "eslint-config-prettier": "^10.1.8",
     "husky": "^9.1.7",
@@ -69,9 +92,11 @@
     "vitest": "^4.1.1"
   },
   "engines": {
-    "node": ">=20"
+    "node": ">=24 <25"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "registry": "https://registry.npmjs.org/",
+    "provenance": true
   }
 }