@selleragent/api-contract 0.8.0 → 0.9.0

package/dist/auth.d.ts

@@ -0,0 +1,457 @@
+import { z } from 'zod';
+export declare const operatorRoleSchema: z.ZodEnum<{
+    workspace_admin: "workspace_admin";
+    operator: "operator";
+    observer: "observer";
+}>;
+export declare const operatorAccountStatusSchema: z.ZodEnum<{
+    active: "active";
+    disabled: "disabled";
+}>;
+export declare const workspaceMembershipStatusSchema: z.ZodEnum<{
+    active: "active";
+    revoked: "revoked";
+}>;
+export declare const authSessionSourceSchema: z.ZodEnum<{
+    magic_link: "magic_link";
+    scenario_token: "scenario_token";
+}>;
+export declare const operatorRecordSchema: z.ZodObject<{
+    operatorId: z.ZodString;
+    email: z.ZodString;
+    displayName: z.ZodNullable<z.ZodString>;
+    supabaseUserId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    status: z.ZodEnum<{
+        active: "active";
+        disabled: "disabled";
+    }>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strip>;
+export declare const workspaceMembershipSchema: z.ZodObject<{
+    membershipId: z.ZodString;
+    operatorId: z.ZodString;
+    workspaceId: z.ZodString;
+    workspaceSlug: z.ZodString;
+    workspaceName: z.ZodString;
+    role: z.ZodEnum<{
+        workspace_admin: "workspace_admin";
+        operator: "operator";
+        observer: "observer";
+    }>;
+    status: z.ZodEnum<{
+        active: "active";
+        revoked: "revoked";
+    }>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strip>;
+export declare const authSessionSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    sessionToken: z.ZodOptional<z.ZodString>;
+    source: z.ZodEnum<{
+        magic_link: "magic_link";
+        scenario_token: "scenario_token";
+    }>;
+    issuedAt: z.ZodString;
+    expiresAt: z.ZodString;
+}, z.core.$strip>;
+export declare const operatorAccessContextSchema: z.ZodObject<{
+    authenticated: z.ZodBoolean;
+    environment: z.ZodString;
+    operator: z.ZodNullable<z.ZodObject<{
+        operatorId: z.ZodString;
+        email: z.ZodString;
+        displayName: z.ZodNullable<z.ZodString>;
+        supabaseUserId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        status: z.ZodEnum<{
+            active: "active";
+            disabled: "disabled";
+        }>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>>;
+    memberships: z.ZodArray<z.ZodObject<{
+        membershipId: z.ZodString;
+        operatorId: z.ZodString;
+        workspaceId: z.ZodString;
+        workspaceSlug: z.ZodString;
+        workspaceName: z.ZodString;
+        role: z.ZodEnum<{
+            workspace_admin: "workspace_admin";
+            operator: "operator";
+            observer: "observer";
+        }>;
+        status: z.ZodEnum<{
+            active: "active";
+            revoked: "revoked";
+        }>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>>;
+    session: z.ZodNullable<z.ZodObject<{
+        sessionId: z.ZodString;
+        sessionToken: z.ZodOptional<z.ZodString>;
+        source: z.ZodEnum<{
+            magic_link: "magic_link";
+            scenario_token: "scenario_token";
+        }>;
+        issuedAt: z.ZodString;
+        expiresAt: z.ZodString;
+    }, z.core.$strip>>;
+    currentWorkspaceId: z.ZodNullable<z.ZodString>;
+    currentWorkspaceSlug: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+export declare const authEnsureOperatorRequestSchema: z.ZodObject<{
+    email: z.ZodString;
+    displayName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    workspaceSlug: z.ZodOptional<z.ZodString>;
+    workspaceName: z.ZodOptional<z.ZodString>;
+    role: z.ZodOptional<z.ZodEnum<{
+        workspace_admin: "workspace_admin";
+        operator: "operator";
+        observer: "observer";
+    }>>;
+    bootstrapSecret: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+export declare const authEnsureOperatorResponseSchema: z.ZodObject<{
+    operator: z.ZodObject<{
+        operatorId: z.ZodString;
+        email: z.ZodString;
+        displayName: z.ZodNullable<z.ZodString>;
+        supabaseUserId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        status: z.ZodEnum<{
+            active: "active";
+            disabled: "disabled";
+        }>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>;
+    memberships: z.ZodArray<z.ZodObject<{
+        membershipId: z.ZodString;
+        operatorId: z.ZodString;
+        workspaceId: z.ZodString;
+        workspaceSlug: z.ZodString;
+        workspaceName: z.ZodString;
+        role: z.ZodEnum<{
+            workspace_admin: "workspace_admin";
+            operator: "operator";
+            observer: "observer";
+        }>;
+        status: z.ZodEnum<{
+            active: "active";
+            revoked: "revoked";
+        }>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>>;
+    created: z.ZodBoolean;
+}, z.core.$strip>;
+export declare const authRequestMagicLinkRequestSchema: z.ZodObject<{
+    email: z.ZodString;
+    redirectTo: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+export declare const authRequestMagicLinkResponseSchema: z.ZodObject<{
+    accepted: z.ZodBoolean;
+    email: z.ZodString;
+}, z.core.$strip>;
+export declare const authIssueScenarioTokenRequestSchema: z.ZodObject<{
+    email: z.ZodString;
+    displayName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    workspaceSlug: z.ZodOptional<z.ZodString>;
+    workspaceName: z.ZodOptional<z.ZodString>;
+    role: z.ZodOptional<z.ZodEnum<{
+        workspace_admin: "workspace_admin";
+        operator: "operator";
+        observer: "observer";
+    }>>;
+    expiresInMinutes: z.ZodOptional<z.ZodNumber>;
+    bootstrapSecret: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+export declare const authIssueScenarioTokenResponseSchema: z.ZodObject<{
+    token: z.ZodString;
+    expiresAt: z.ZodString;
+    operator: z.ZodObject<{
+        operatorId: z.ZodString;
+        email: z.ZodString;
+        displayName: z.ZodNullable<z.ZodString>;
+        supabaseUserId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        status: z.ZodEnum<{
+            active: "active";
+            disabled: "disabled";
+        }>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>;
+    memberships: z.ZodArray<z.ZodObject<{
+        membershipId: z.ZodString;
+        operatorId: z.ZodString;
+        workspaceId: z.ZodString;
+        workspaceSlug: z.ZodString;
+        workspaceName: z.ZodString;
+        role: z.ZodEnum<{
+            workspace_admin: "workspace_admin";
+            operator: "operator";
+            observer: "observer";
+        }>;
+        status: z.ZodEnum<{
+            active: "active";
+            revoked: "revoked";
+        }>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const authGetSessionRequestSchema: z.ZodObject<{
+    sessionToken: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+export declare const authGetSessionResponseSchema: z.ZodObject<{
+    accessContext: z.ZodObject<{
+        authenticated: z.ZodBoolean;
+        environment: z.ZodString;
+        operator: z.ZodNullable<z.ZodObject<{
+            operatorId: z.ZodString;
+            email: z.ZodString;
+            displayName: z.ZodNullable<z.ZodString>;
+            supabaseUserId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            status: z.ZodEnum<{
+                active: "active";
+                disabled: "disabled";
+            }>;
+            createdAt: z.ZodString;
+            updatedAt: z.ZodString;
+        }, z.core.$strip>>;
+        memberships: z.ZodArray<z.ZodObject<{
+            membershipId: z.ZodString;
+            operatorId: z.ZodString;
+            workspaceId: z.ZodString;
+            workspaceSlug: z.ZodString;
+            workspaceName: z.ZodString;
+            role: z.ZodEnum<{
+                workspace_admin: "workspace_admin";
+                operator: "operator";
+                observer: "observer";
+            }>;
+            status: z.ZodEnum<{
+                active: "active";
+                revoked: "revoked";
+            }>;
+            createdAt: z.ZodString;
+            updatedAt: z.ZodString;
+        }, z.core.$strip>>;
+        session: z.ZodNullable<z.ZodObject<{
+            sessionId: z.ZodString;
+            sessionToken: z.ZodOptional<z.ZodString>;
+            source: z.ZodEnum<{
+                magic_link: "magic_link";
+                scenario_token: "scenario_token";
+            }>;
+            issuedAt: z.ZodString;
+            expiresAt: z.ZodString;
+        }, z.core.$strip>>;
+        currentWorkspaceId: z.ZodNullable<z.ZodString>;
+        currentWorkspaceSlug: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export declare const authExchangeScenarioTokenRequestSchema: z.ZodObject<{
+    token: z.ZodString;
+    nextPath: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+export declare const authExchangeScenarioTokenResponseSchema: z.ZodObject<{
+    accessContext: z.ZodObject<{
+        authenticated: z.ZodBoolean;
+        environment: z.ZodString;
+        operator: z.ZodNullable<z.ZodObject<{
+            operatorId: z.ZodString;
+            email: z.ZodString;
+            displayName: z.ZodNullable<z.ZodString>;
+            supabaseUserId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            status: z.ZodEnum<{
+                active: "active";
+                disabled: "disabled";
+            }>;
+            createdAt: z.ZodString;
+            updatedAt: z.ZodString;
+        }, z.core.$strip>>;
+        memberships: z.ZodArray<z.ZodObject<{
+            membershipId: z.ZodString;
+            operatorId: z.ZodString;
+            workspaceId: z.ZodString;
+            workspaceSlug: z.ZodString;
+            workspaceName: z.ZodString;
+            role: z.ZodEnum<{
+                workspace_admin: "workspace_admin";
+                operator: "operator";
+                observer: "observer";
+            }>;
+            status: z.ZodEnum<{
+                active: "active";
+                revoked: "revoked";
+            }>;
+            createdAt: z.ZodString;
+            updatedAt: z.ZodString;
+        }, z.core.$strip>>;
+        session: z.ZodNullable<z.ZodObject<{
+            sessionId: z.ZodString;
+            sessionToken: z.ZodOptional<z.ZodString>;
+            source: z.ZodEnum<{
+                magic_link: "magic_link";
+                scenario_token: "scenario_token";
+            }>;
+            issuedAt: z.ZodString;
+            expiresAt: z.ZodString;
+        }, z.core.$strip>>;
+        currentWorkspaceId: z.ZodNullable<z.ZodString>;
+        currentWorkspaceSlug: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>;
+    nextPath: z.ZodNullable<z.ZodString>;
+    sessionToken: z.ZodString;
+}, z.core.$strip>;
+export declare const authCompleteMagicLinkRequestSchema: z.ZodObject<{
+    tokenHash: z.ZodString;
+    type: z.ZodString;
+    nextPath: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+export declare const authCompleteMagicLinkResponseSchema: z.ZodObject<{
+    accessContext: z.ZodObject<{
+        authenticated: z.ZodBoolean;
+        environment: z.ZodString;
+        operator: z.ZodNullable<z.ZodObject<{
+            operatorId: z.ZodString;
+            email: z.ZodString;
+            displayName: z.ZodNullable<z.ZodString>;
+            supabaseUserId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            status: z.ZodEnum<{
+                active: "active";
+                disabled: "disabled";
+            }>;
+            createdAt: z.ZodString;
+            updatedAt: z.ZodString;
+        }, z.core.$strip>>;
+        memberships: z.ZodArray<z.ZodObject<{
+            membershipId: z.ZodString;
+            operatorId: z.ZodString;
+            workspaceId: z.ZodString;
+            workspaceSlug: z.ZodString;
+            workspaceName: z.ZodString;
+            role: z.ZodEnum<{
+                workspace_admin: "workspace_admin";
+                operator: "operator";
+                observer: "observer";
+            }>;
+            status: z.ZodEnum<{
+                active: "active";
+                revoked: "revoked";
+            }>;
+            createdAt: z.ZodString;
+            updatedAt: z.ZodString;
+        }, z.core.$strip>>;
+        session: z.ZodNullable<z.ZodObject<{
+            sessionId: z.ZodString;
+            sessionToken: z.ZodOptional<z.ZodString>;
+            source: z.ZodEnum<{
+                magic_link: "magic_link";
+                scenario_token: "scenario_token";
+            }>;
+            issuedAt: z.ZodString;
+            expiresAt: z.ZodString;
+        }, z.core.$strip>>;
+        currentWorkspaceId: z.ZodNullable<z.ZodString>;
+        currentWorkspaceSlug: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>;
+    nextPath: z.ZodNullable<z.ZodString>;
+    sessionToken: z.ZodString;
+}, z.core.$strip>;
+export declare const authCheckAccessRequestSchema: z.ZodObject<{
+    sessionToken: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    workspaceId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    workspaceSlug: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    requiredRole: z.ZodEnum<{
+        workspace_admin: "workspace_admin";
+        operator: "operator";
+        observer: "observer";
+    }>;
+}, z.core.$strip>;
+export declare const authCheckAccessResponseSchema: z.ZodObject<{
+    allowed: z.ZodBoolean;
+    accessContext: z.ZodObject<{
+        authenticated: z.ZodBoolean;
+        environment: z.ZodString;
+        operator: z.ZodNullable<z.ZodObject<{
+            operatorId: z.ZodString;
+            email: z.ZodString;
+            displayName: z.ZodNullable<z.ZodString>;
+            supabaseUserId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            status: z.ZodEnum<{
+                active: "active";
+                disabled: "disabled";
+            }>;
+            createdAt: z.ZodString;
+            updatedAt: z.ZodString;
+        }, z.core.$strip>>;
+        memberships: z.ZodArray<z.ZodObject<{
+            membershipId: z.ZodString;
+            operatorId: z.ZodString;
+            workspaceId: z.ZodString;
+            workspaceSlug: z.ZodString;
+            workspaceName: z.ZodString;
+            role: z.ZodEnum<{
+                workspace_admin: "workspace_admin";
+                operator: "operator";
+                observer: "observer";
+            }>;
+            status: z.ZodEnum<{
+                active: "active";
+                revoked: "revoked";
+            }>;
+            createdAt: z.ZodString;
+            updatedAt: z.ZodString;
+        }, z.core.$strip>>;
+        session: z.ZodNullable<z.ZodObject<{
+            sessionId: z.ZodString;
+            sessionToken: z.ZodOptional<z.ZodString>;
+            source: z.ZodEnum<{
+                magic_link: "magic_link";
+                scenario_token: "scenario_token";
+            }>;
+            issuedAt: z.ZodString;
+            expiresAt: z.ZodString;
+        }, z.core.$strip>>;
+        currentWorkspaceId: z.ZodNullable<z.ZodString>;
+        currentWorkspaceSlug: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>;
+    workspaceId: z.ZodNullable<z.ZodString>;
+    workspaceSlug: z.ZodNullable<z.ZodString>;
+    requiredRole: z.ZodEnum<{
+        workspace_admin: "workspace_admin";
+        operator: "operator";
+        observer: "observer";
+    }>;
+}, z.core.$strip>;
+export declare const authLogoutResponseSchema: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+}, z.core.$strip>;
+export type OperatorRole = z.infer<typeof operatorRoleSchema>;
+export type OperatorAccountStatus = z.infer<typeof operatorAccountStatusSchema>;
+export type WorkspaceMembershipStatus = z.infer<typeof workspaceMembershipStatusSchema>;
+export type OperatorRecord = z.infer<typeof operatorRecordSchema>;
+export type WorkspaceMembership = z.infer<typeof workspaceMembershipSchema>;
+export type AuthSessionSource = z.infer<typeof authSessionSourceSchema>;
+export type AuthSession = z.infer<typeof authSessionSchema>;
+export type OperatorAccessContext = z.infer<typeof operatorAccessContextSchema>;
+export type AuthEnsureOperatorInput = z.infer<typeof authEnsureOperatorRequestSchema>;
+export type AuthEnsureOperatorOutput = z.infer<typeof authEnsureOperatorResponseSchema>;
+export type AuthRequestMagicLinkInput = z.infer<typeof authRequestMagicLinkRequestSchema>;
+export type AuthRequestMagicLinkOutput = z.infer<typeof authRequestMagicLinkResponseSchema>;
+export type AuthIssueScenarioTokenInput = z.infer<typeof authIssueScenarioTokenRequestSchema>;
+export type AuthIssueScenarioTokenOutput = z.infer<typeof authIssueScenarioTokenResponseSchema>;
+export type AuthGetSessionInput = z.infer<typeof authGetSessionRequestSchema>;
+export type AuthGetSessionOutput = z.infer<typeof authGetSessionResponseSchema>;
+export type AuthExchangeScenarioTokenInput = z.infer<typeof authExchangeScenarioTokenRequestSchema>;
+export type AuthExchangeScenarioTokenOutput = z.infer<typeof authExchangeScenarioTokenResponseSchema>;
+export type AuthCompleteMagicLinkInput = z.infer<typeof authCompleteMagicLinkRequestSchema>;
+export type AuthCompleteMagicLinkOutput = z.infer<typeof authCompleteMagicLinkResponseSchema>;
+export type AuthCheckAccessInput = z.infer<typeof authCheckAccessRequestSchema>;
+export type AuthCheckAccessOutput = z.infer<typeof authCheckAccessResponseSchema>;
+export type AuthLogoutOutput = z.infer<typeof authLogoutResponseSchema>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,kBAAkB;;;;EAAsD,CAAC;AACtF,eAAO,MAAM,2BAA2B;;;EAAiC,CAAC;AAC1E,eAAO,MAAM,+BAA+B;;;EAAgC,CAAC;AAC7E,eAAO,MAAM,uBAAuB;;;EAA2C,CAAC;AAEhF,eAAO,MAAM,oBAAoB;;;;;;;;;;;iBAQ/B,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;iBAUpC,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;;;iBAM5B,CAAC;AAEH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAQtC,CAAC;AAEH,eAAO,MAAM,+BAA+B;;;;;;;;;;;iBAO1C,CAAC;AAEH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAI3C,CAAC;AAEH,eAAO,MAAM,iCAAiC;;;iBAG5C,CAAC;AAEH,eAAO,MAAM,kCAAkC;;;iBAG7C,CAAC;AAEH,eAAO,MAAM,mCAAmC;;;;;;;;;;;;iBAQ9C,CAAC;AAEH,eAAO,MAAM,oCAAoC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAK/C,CAAC;AAEH,eAAO,MAAM,2BAA2B;;iBAEtC,CAAC;AAEH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAEvC,CAAC;AAEH,eAAO,MAAM,sCAAsC;;;iBAGjD,CAAC;AAEH,eAAO,MAAM,uCAAuC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAIlD,CAAC;AAEH,eAAO,MAAM,kCAAkC;;;;iBAI7C,CAAC;AAEH,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAI9C,CAAC;AAEH,eAAO,MAAM,4BAA4B;;;;;;;;;iBAKvC,CAAC;AAEH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAMxC,CAAC;AAEH,eAAO,MAAM,wBAAwB;;iBAEnC,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AACxF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AACtF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AACxF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAC1F,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAC5F,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAC9F,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAChG,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAC9E,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAChF,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAClD,OAAO,sCAAsC,CAC9C,CAAC;AACF,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CACnD,OAAO,uCAAuC,CAC/C,CAAC;AACF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAC5F,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAC9F,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAChF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAClF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}

package/dist/auth.js

@@ -0,0 +1,122 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authLogoutResponseSchema = exports.authCheckAccessResponseSchema = exports.authCheckAccessRequestSchema = exports.authCompleteMagicLinkResponseSchema = exports.authCompleteMagicLinkRequestSchema = exports.authExchangeScenarioTokenResponseSchema = exports.authExchangeScenarioTokenRequestSchema = exports.authGetSessionResponseSchema = exports.authGetSessionRequestSchema = exports.authIssueScenarioTokenResponseSchema = exports.authIssueScenarioTokenRequestSchema = exports.authRequestMagicLinkResponseSchema = exports.authRequestMagicLinkRequestSchema = exports.authEnsureOperatorResponseSchema = exports.authEnsureOperatorRequestSchema = exports.operatorAccessContextSchema = exports.authSessionSchema = exports.workspaceMembershipSchema = exports.operatorRecordSchema = exports.authSessionSourceSchema = exports.workspaceMembershipStatusSchema = exports.operatorAccountStatusSchema = exports.operatorRoleSchema = void 0;
+const zod_1 = require("zod");
+exports.operatorRoleSchema = zod_1.z.enum(['workspace_admin', 'operator', 'observer']);
+exports.operatorAccountStatusSchema = zod_1.z.enum(['active', 'disabled']);
+exports.workspaceMembershipStatusSchema = zod_1.z.enum(['active', 'revoked']);
+exports.authSessionSourceSchema = zod_1.z.enum(['magic_link', 'scenario_token']);
+exports.operatorRecordSchema = zod_1.z.object({
+    operatorId: zod_1.z.string().uuid(),
+    email: zod_1.z.string().email(),
+    displayName: zod_1.z.string().nullable(),
+    supabaseUserId: zod_1.z.string().min(1).nullable().default(null),
+    status: exports.operatorAccountStatusSchema,
+    createdAt: zod_1.z.string(),
+    updatedAt: zod_1.z.string()
+});
+exports.workspaceMembershipSchema = zod_1.z.object({
+    membershipId: zod_1.z.string().uuid(),
+    operatorId: zod_1.z.string().uuid(),
+    workspaceId: zod_1.z.string().uuid(),
+    workspaceSlug: zod_1.z.string().min(1),
+    workspaceName: zod_1.z.string().min(1),
+    role: exports.operatorRoleSchema,
+    status: exports.workspaceMembershipStatusSchema,
+    createdAt: zod_1.z.string(),
+    updatedAt: zod_1.z.string()
+});
+exports.authSessionSchema = zod_1.z.object({
+    sessionId: zod_1.z.string().uuid(),
+    sessionToken: zod_1.z.string().min(1).optional(),
+    source: exports.authSessionSourceSchema,
+    issuedAt: zod_1.z.string(),
+    expiresAt: zod_1.z.string()
+});
+exports.operatorAccessContextSchema = zod_1.z.object({
+    authenticated: zod_1.z.boolean(),
+    environment: zod_1.z.string(),
+    operator: exports.operatorRecordSchema.nullable(),
+    memberships: zod_1.z.array(exports.workspaceMembershipSchema),
+    session: exports.authSessionSchema.nullable(),
+    currentWorkspaceId: zod_1.z.string().uuid().nullable(),
+    currentWorkspaceSlug: zod_1.z.string().min(1).nullable().default(null)
+});
+exports.authEnsureOperatorRequestSchema = zod_1.z.object({
+    email: zod_1.z.string().email(),
+    displayName: zod_1.z.string().nullable().optional(),
+    workspaceSlug: zod_1.z.string().min(1).optional(),
+    workspaceName: zod_1.z.string().min(1).optional(),
+    role: exports.operatorRoleSchema.optional(),
+    bootstrapSecret: zod_1.z.string().min(1).nullable().optional()
+});
+exports.authEnsureOperatorResponseSchema = zod_1.z.object({
+    operator: exports.operatorRecordSchema,
+    memberships: zod_1.z.array(exports.workspaceMembershipSchema),
+    created: zod_1.z.boolean()
+});
+exports.authRequestMagicLinkRequestSchema = zod_1.z.object({
+    email: zod_1.z.string().email(),
+    redirectTo: zod_1.z.string().url().nullable().optional()
+});
+exports.authRequestMagicLinkResponseSchema = zod_1.z.object({
+    accepted: zod_1.z.boolean(),
+    email: zod_1.z.string().email()
+});
+exports.authIssueScenarioTokenRequestSchema = zod_1.z.object({
+    email: zod_1.z.string().email(),
+    displayName: zod_1.z.string().nullable().optional(),
+    workspaceSlug: zod_1.z.string().min(1).optional(),
+    workspaceName: zod_1.z.string().min(1).optional(),
+    role: exports.operatorRoleSchema.optional(),
+    expiresInMinutes: zod_1.z.number().int().min(1).max(120).optional(),
+    bootstrapSecret: zod_1.z.string().min(1).nullable().optional()
+});
+exports.authIssueScenarioTokenResponseSchema = zod_1.z.object({
+    token: zod_1.z.string().min(1),
+    expiresAt: zod_1.z.string(),
+    operator: exports.operatorRecordSchema,
+    memberships: zod_1.z.array(exports.workspaceMembershipSchema)
+});
+exports.authGetSessionRequestSchema = zod_1.z.object({
+    sessionToken: zod_1.z.string().min(1).nullable().optional()
+});
+exports.authGetSessionResponseSchema = zod_1.z.object({
+    accessContext: exports.operatorAccessContextSchema
+});
+exports.authExchangeScenarioTokenRequestSchema = zod_1.z.object({
+    token: zod_1.z.string().min(1),
+    nextPath: zod_1.z.string().nullable().optional()
+});
+exports.authExchangeScenarioTokenResponseSchema = zod_1.z.object({
+    accessContext: exports.operatorAccessContextSchema,
+    nextPath: zod_1.z.string().nullable(),
+    sessionToken: zod_1.z.string().min(1)
+});
+exports.authCompleteMagicLinkRequestSchema = zod_1.z.object({
+    tokenHash: zod_1.z.string().min(1),
+    type: zod_1.z.string().min(1),
+    nextPath: zod_1.z.string().nullable().optional()
+});
+exports.authCompleteMagicLinkResponseSchema = zod_1.z.object({
+    accessContext: exports.operatorAccessContextSchema,
+    nextPath: zod_1.z.string().nullable(),
+    sessionToken: zod_1.z.string().min(1)
+});
+exports.authCheckAccessRequestSchema = zod_1.z.object({
+    sessionToken: zod_1.z.string().min(1).nullable().optional(),
+    workspaceId: zod_1.z.string().uuid().nullable().optional(),
+    workspaceSlug: zod_1.z.string().min(1).nullable().optional(),
+    requiredRole: exports.operatorRoleSchema
+});
+exports.authCheckAccessResponseSchema = zod_1.z.object({
+    allowed: zod_1.z.boolean(),
+    accessContext: exports.operatorAccessContextSchema,
+    workspaceId: zod_1.z.string().uuid().nullable(),
+    workspaceSlug: zod_1.z.string().min(1).nullable(),
+    requiredRole: exports.operatorRoleSchema
+});
+exports.authLogoutResponseSchema = zod_1.z.object({
+    ok: zod_1.z.literal(true)
+});
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAEX,QAAA,kBAAkB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;AACzE,QAAA,2BAA2B,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;AAC7D,QAAA,+BAA+B,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAChE,QAAA,uBAAuB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAEnE,QAAA,oBAAoB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3C,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC7B,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC1D,MAAM,EAAE,mCAA2B;IACnC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAEU,QAAA,yBAAyB,GAAG,OAAC,CAAC,MAAM,CAAC;IAChD,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC/B,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC7B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC9B,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,IAAI,EAAE,0BAAkB;IACxB,MAAM,EAAE,uCAA+B;IACvC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAEU,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC5B,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,MAAM,EAAE,+BAAuB;IAC/B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;IACpB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAEU,QAAA,2BAA2B,GAAG,OAAC,CAAC,MAAM,CAAC;IAClD,aAAa,EAAE,OAAC,CAAC,OAAO,EAAE;IAC1B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE;IACvB,QAAQ,EAAE,4BAAoB,CAAC,QAAQ,EAAE;IACzC,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,iCAAyB,CAAC;IAC/C,OAAO,EAAE,yBAAiB,CAAC,QAAQ,EAAE;IACrC,kBAAkB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAChD,oBAAoB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACjE,CAAC,CAAC;AAEU,QAAA,+BAA+B,GAAG,OAAC,CAAC,MAAM,CAAC;IACtD,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3C,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3C,IAAI,EAAE,0BAAkB,CAAC,QAAQ,EAAE;IACnC,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACzD,CAAC,CAAC;AAEU,QAAA,gCAAgC,GAAG,OAAC,CAAC,MAAM,CAAC;IACvD,QAAQ,EAAE,4BAAoB;IAC9B,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,iCAAyB,CAAC;IAC/C,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAEU,QAAA,iCAAiC,GAAG,OAAC,CAAC,MAAM,CAAC;IACxD,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC;AAEU,QAAA,kCAAkC,GAAG,OAAC,CAAC,MAAM,CAAC;IACzD,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE;IACrB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;CAC1B,CAAC,CAAC;AAEU,QAAA,mCAAmC,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1D,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3C,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3C,IAAI,EAAE,0BAAkB,CAAC,QAAQ,EAAE;IACnC,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC7D,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACzD,CAAC,CAAC;AAEU,QAAA,oCAAoC,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3D,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;IACrB,QAAQ,EAAE,4BAAoB;IAC9B,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,iCAAyB,CAAC;CAChD,CAAC,CAAC;AAEU,QAAA,2BAA2B,GAAG,OAAC,CAAC,MAAM,CAAC;IAClD,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAC;AAEU,QAAA,4BAA4B,GAAG,OAAC,CAAC,MAAM,CAAC;IACnD,aAAa,EAAE,mCAA2B;CAC3C,CAAC,CAAC;AAEU,QAAA,sCAAsC,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7D,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC;AAEU,QAAA,uCAAuC,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9D,aAAa,EAAE,mCAA2B;IAC1C,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAChC,CAAC,CAAC;AAEU,QAAA,kCAAkC,GAAG,OAAC,CAAC,MAAM,CAAC;IACzD,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC;AAEU,QAAA,mCAAmC,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1D,aAAa,EAAE,mCAA2B;IAC1C,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAChC,CAAC,CAAC;AAEU,QAAA,4BAA4B,GAAG,OAAC,CAAC,MAAM,CAAC;IACnD,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACrD,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpD,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtD,YAAY,EAAE,0BAAkB;CACjC,CAAC,CAAC;AAEU,QAAA,6BAA6B,GAAG,OAAC,CAAC,MAAM,CAAC;IACpD,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;IACpB,aAAa,EAAE,mCAA2B;IAC1C,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACzC,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3C,YAAY,EAAE,0BAAkB;CACjC,CAAC,CAAC;AAEU,QAAA,wBAAwB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC/C,EAAE,EAAE,OAAC,CAAC,OAAO,CAAC,IAAI,CAAC;CACpB,CAAC,CAAC"}