@shipfox/api-auth-dto 15.0.0 → 18.0.0

package/.turbo/turbo-build.log

@@ -1,2 +1,2 @@
 $ shipfox-swc
-Successfully compiled: 10 files with swc (282.31ms)
+Successfully compiled: 10 files with swc (340.4ms)

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # @shipfox/api-auth-dto
 
+## 18.0.0
+
+### Minor Changes
+
+- fff528a: Adds lifecycle capability negotiation for runner job claims and records the selected local isolation timeout.
+
+## 17.0.0
+
+### Minor Changes
+
+- 5ae8b3d: Adds `sessionResponseSchema` and `SessionResponseDto`, the adopted-session mint and renewal response contract carrying the optional `impersonator_id`.
+- 918d84a: Adds the impersonation mint command and admin route: `POST /admin/auth/users/:user_id/impersonate` mints a short-lived, marked, audited impersonated session for an active, verified, non-administrator user, gated behind the opt-in `AUTH_IMPERSONATION_ENABLED` flag (defaults to `false`). The response DTO `impersonateResponseSchema` carries `token`, `expires_at`, `server_time`, `impersonator_id`, and the target user.
+
 ## 15.0.0
 
 ### Patch Changes

package/dist/inter-module.d.ts

@@ -10,6 +10,7 @@ export declare const authInterModuleContract: import("@shipfox/inter-module").In
                 scope: z.ZodLiteral<"workspace">;
                 labels: z.ZodArray<z.ZodString>;
                 maxClaims: z.ZodNullable<z.ZodNumber>;
+                lifecycleCapabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
             }, z.core.$strip>;
             output: z.ZodObject<{
                 token: z.ZodString;

package/dist/inter-module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"inter-module.d.ts","sourceRoot":"","sources":["../src/inter-module.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4B,KAAK,iBAAiB,EAAC,MAAM,uBAAuB,CAAC;AACxF,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAYtB,eAAO,MAAM,uBAAuB;;;QAGhC,sBAAsB;YACpB,KAAK;;;;;;;YACL,MAAM;;;;QAER,iBAAiB;YACf,KAAK;;;;;;;;;;;;YACL,MAAM;;;;QAER,mBAAmB;YACjB,KAAK;;;YACL,MAAM;;;;;;;;QAER,gBAAgB;YACd,KAAK;;;;;;;;YAIL,MAAM;;;;;;;YACN,MAAM;gBACJ,qBAAqB;;;;;;;;;;EAI3B,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,iBAAiB,CAAC,OAAO,uBAAuB,CAAC,CAAC"}
+{"version":3,"file":"inter-module.d.ts","sourceRoot":"","sources":["../src/inter-module.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4B,KAAK,iBAAiB,EAAC,MAAM,uBAAuB,CAAC;AACxF,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAYtB,eAAO,MAAM,uBAAuB;;;QAGhC,sBAAsB;YACpB,KAAK;;;;;;;;YACL,MAAM;;;;QAER,iBAAiB;YACf,KAAK;;;;;;;;;;;;YACL,MAAM;;;;QAER,mBAAmB;YACjB,KAAK;;;YACL,MAAM;;;;;;;;QAER,gBAAgB;YACd,KAAK;;;;;;;;YAIL,MAAM;;;;;;;YACN,MAAM;gBACJ,qBAAqB;;;;;;;;;;EAI3B,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,iBAAiB,CAAC,OAAO,uBAAuB,CAAC,CAAC"}

package/dist/schemas/admin.d.ts

@@ -116,6 +116,10 @@ export declare const suspendAdministratorUserBodySchema: z.ZodObject<{
     reason: z.ZodString;
 }, z.core.$strip>;
 export type SuspendAdministratorUserBodyDto = z.infer<typeof suspendAdministratorUserBodySchema>;
+export declare const impersonateUserBodySchema: z.ZodObject<{
+    reason: z.ZodString;
+}, z.core.$strip>;
+export type ImpersonateUserBodyDto = z.infer<typeof impersonateUserBodySchema>;
 export declare const reactivateAdministratorUserBodySchema: z.ZodDefault<z.ZodObject<{
     reason: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>>;

package/dist/schemas/admin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../src/schemas/admin.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAGtB,eAAO,MAAM,eAAe;;;;EAA8D,CAAC;AAE3F,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,SAAS,CAE9D;AAaD,eAAO,MAAM,mBAAmB;;;;;;;;;;;iBAO9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,6BAA6B;;iBAExC,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEvF,eAAO,MAAM,iCAAiC;;;;;;;;;;;iBAAsB,CAAC;AAErE,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE/F,eAAO,MAAM,yBAAyB;;;;;iBAEpC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE/E,eAAO,MAAM,wBAAwB;;;;;;;;iBAInC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE7E,eAAO,MAAM,4BAA4B;;;;;;;;;;;iBAAsB,CAAC;AAEhE,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAErF,eAAO,MAAM,0BAA0B;;iBAErC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAEjF,eAAO,MAAM,8BAA8B;;;;;;;;;;;iBAAsB,CAAC;AAElE,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEzF,eAAO,MAAM,+BAA+B;;;;;;;;;iBAK1C,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAE3F,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;iBAIzC,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAIzF,eAAO,MAAM,kCAAkC;;iBAE7C,CAAC;AAEH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAEjG,eAAO,MAAM,qCAAqC;;kBAIpC,CAAC;AAEf,MAAM,MAAM,kCAAkC,GAAG,CAAC,CAAC,KAAK,CACtD,OAAO,qCAAqC,CAC7C,CAAC;AAEF,eAAO,MAAM,yCAAyC;;kBAIxC,CAAC;AAEf,MAAM,MAAM,sCAAsC,GAAG,CAAC,CAAC,KAAK,CAC1D,OAAO,yCAAyC,CACjD,CAAC;AAEF,eAAO,MAAM,uCAAuC;;;;;;;;;;;;;;;;;iBAElD,CAAC;AAEH,MAAM,MAAM,oCAAoC,GAAG,CAAC,CAAC,KAAK,CACxD,OAAO,uCAAuC,CAC/C,CAAC;AAEF,eAAO,MAAM,6CAA6C;;;;;;;;;;;;;;;;;;iBAGtD,CAAC;AAEL,MAAM,MAAM,0CAA0C,GAAG,CAAC,CAAC,KAAK,CAC9D,OAAO,6CAA6C,CACrD,CAAC;AAEF,eAAO,MAAM,kCAAkC;;;;iBAiB3C,CAAC;AAEL,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAEjG,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;iBAM1C,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAE3F,eAAO,MAAM,0BAA0B;;;iBAGrC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAEjF,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;iBAGxC,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC"}
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../src/schemas/admin.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAGtB,eAAO,MAAM,eAAe;;;;EAA8D,CAAC;AAE3F,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,SAAS,CAE9D;AAaD,eAAO,MAAM,mBAAmB;;;;;;;;;;;iBAO9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,6BAA6B;;iBAExC,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEvF,eAAO,MAAM,iCAAiC;;;;;;;;;;;iBAAsB,CAAC;AAErE,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE/F,eAAO,MAAM,yBAAyB;;;;;iBAEpC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE/E,eAAO,MAAM,wBAAwB;;;;;;;;iBAInC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE7E,eAAO,MAAM,4BAA4B;;;;;;;;;;;iBAAsB,CAAC;AAEhE,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAErF,eAAO,MAAM,0BAA0B;;iBAErC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAEjF,eAAO,MAAM,8BAA8B;;;;;;;;;;;iBAAsB,CAAC;AAElE,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEzF,eAAO,MAAM,+BAA+B;;;;;;;;;iBAK1C,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAE3F,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;iBAIzC,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAIzF,eAAO,MAAM,kCAAkC;;iBAE7C,CAAC;AAEH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAEjG,eAAO,MAAM,yBAAyB;;iBAEpC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE/E,eAAO,MAAM,qCAAqC;;kBAIpC,CAAC;AAEf,MAAM,MAAM,kCAAkC,GAAG,CAAC,CAAC,KAAK,CACtD,OAAO,qCAAqC,CAC7C,CAAC;AAEF,eAAO,MAAM,yCAAyC;;kBAIxC,CAAC;AAEf,MAAM,MAAM,sCAAsC,GAAG,CAAC,CAAC,KAAK,CAC1D,OAAO,yCAAyC,CACjD,CAAC;AAEF,eAAO,MAAM,uCAAuC;;;;;;;;;;;;;;;;;iBAElD,CAAC;AAEH,MAAM,MAAM,oCAAoC,GAAG,CAAC,CAAC,KAAK,CACxD,OAAO,uCAAuC,CAC/C,CAAC;AAEF,eAAO,MAAM,6CAA6C;;;;;;;;;;;;;;;;;;iBAGtD,CAAC;AAEL,MAAM,MAAM,0CAA0C,GAAG,CAAC,CAAC,KAAK,CAC9D,OAAO,6CAA6C,CACrD,CAAC;AAEF,eAAO,MAAM,kCAAkC;;;;iBAiB3C,CAAC;AAEL,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAEjG,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;iBAM1C,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAE3F,eAAO,MAAM,0BAA0B;;;iBAGrC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAEjF,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;iBAGxC,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC"}

package/dist/schemas/admin.js

@@ -58,6 +58,9 @@ const correlationIdSchema = z.string().min(1).max(255);
 export const suspendAdministratorUserBodySchema = z.object({
     reason: reasonSchema
 });
+export const impersonateUserBodySchema = z.object({
+    reason: reasonSchema
+});
 export const reactivateAdministratorUserBodySchema = z.object({
     reason: reasonSchema.optional()
 }).default({});

package/dist/schemas/admin.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/schemas/admin.ts"],"sourcesContent":["import {emailSchema} from '@shipfox/api-common-dto';\nimport {z} from 'zod';\nimport {userStatusSchema} from './user.js';\n\nexport const adminRoleSchema = z.enum(['admin-observer', 'admin-operator', 'admin-owner']);\n\nexport type AdminRole = z.infer<typeof adminRoleSchema>;\n\nexport function isAdminRole(value: unknown): value is AdminRole {\n  return adminRoleSchema.safeParse(value).success;\n}\n\nconst timestampSchema = z.string().datetime();\nconst identifierEmailSchema = z.string().email();\nconst CONTROL_OR_FORMAT_CHARACTER_RE = /[\\p{Cc}\\p{Cf}]/u;\nconst reasonSchema = z\n  .string()\n  .min(1)\n  .max(512)\n  .refine((value) => !CONTROL_OR_FORMAT_CHARACTER_RE.test(value), {\n    message: 'must not contain control or format characters',\n  });\n\nexport const adminGrantDtoSchema = z.object({\n  id: z.string().uuid(),\n  user_id: z.string().uuid(),\n  role: adminRoleSchema,\n  revoked_at: timestampSchema.nullable(),\n  created_at: timestampSchema,\n  updated_at: timestampSchema,\n});\n\nexport type AdminGrantDto = z.infer<typeof adminGrantDtoSchema>;\n\nexport const bootstrapAdminOwnerBodySchema = z.object({\n  bootstrap_token: z.string().min(1).max(512),\n});\n\nexport type BootstrapAdminOwnerBodyDto = z.infer<typeof bootstrapAdminOwnerBodySchema>;\n\nexport const bootstrapAdminOwnerResponseSchema = adminGrantDtoSchema;\n\nexport type BootstrapAdminOwnerResponseDto = z.infer<typeof bootstrapAdminOwnerResponseSchema>;\n\nexport const adminBootstrapStateSchema = z.object({\n  state: z.enum(['available', 'closed']),\n});\n\nexport type AdminBootstrapStateDto = z.infer<typeof adminBootstrapStateSchema>;\n\nexport const grantAdminRoleBodySchema = z.object({\n  user_id: z.string().uuid(),\n  role: adminRoleSchema,\n  reason: reasonSchema,\n});\n\nexport type GrantAdminRoleBodyDto = z.infer<typeof grantAdminRoleBodySchema>;\n\nexport const grantAdminRoleResponseSchema = adminGrantDtoSchema;\n\nexport type GrantAdminRoleResponseDto = z.infer<typeof grantAdminRoleResponseSchema>;\n\nexport const revokeAdminGrantBodySchema = z.object({\n  reason: reasonSchema,\n});\n\nexport type RevokeAdminGrantBodyDto = z.infer<typeof revokeAdminGrantBodySchema>;\n\nexport const revokeAdminGrantResponseSchema = adminGrantDtoSchema;\n\nexport type RevokeAdminGrantResponseDto = z.infer<typeof revokeAdminGrantResponseSchema>;\n\nexport const administratorUserIdentitySchema = z.object({\n  id: z.string().uuid(),\n  email: identifierEmailSchema,\n  name: z.string().nullable(),\n  status: userStatusSchema,\n});\n\nexport type AdministratorUserIdentityDto = z.infer<typeof administratorUserIdentitySchema>;\n\nexport const administratorUserSummarySchema = administratorUserIdentitySchema.extend({\n  email_verified_at: timestampSchema.nullable(),\n  created_at: timestampSchema,\n  admin_role: adminRoleSchema.nullable(),\n});\n\nexport type AdministratorUserSummaryDto = z.infer<typeof administratorUserSummarySchema>;\n\nconst correlationIdSchema = z.string().min(1).max(255);\n\nexport const suspendAdministratorUserBodySchema = z.object({\n  reason: reasonSchema,\n});\n\nexport type SuspendAdministratorUserBodyDto = z.infer<typeof suspendAdministratorUserBodySchema>;\n\nexport const reactivateAdministratorUserBodySchema = z\n  .object({\n    reason: reasonSchema.optional(),\n  })\n  .default({});\n\nexport type ReactivateAdministratorUserBodyDto = z.infer<\n  typeof reactivateAdministratorUserBodySchema\n>;\n\nexport const revokeAdministratorUserSessionsBodySchema = z\n  .object({\n    reason: reasonSchema.optional(),\n  })\n  .default({});\n\nexport type RevokeAdministratorUserSessionsBodyDto = z.infer<\n  typeof revokeAdministratorUserSessionsBodySchema\n>;\n\nexport const administratorUserMutationResponseSchema = administratorUserSummarySchema.extend({\n  correlation_id: correlationIdSchema,\n});\n\nexport type AdministratorUserMutationResponseDto = z.infer<\n  typeof administratorUserMutationResponseSchema\n>;\n\nexport const revokeAdministratorUserSessionsResponseSchema =\n  administratorUserMutationResponseSchema.extend({\n    sessions_revoked: z.number().int().nonnegative(),\n  });\n\nexport type RevokeAdministratorUserSessionsResponseDto = z.infer<\n  typeof revokeAdministratorUserSessionsResponseSchema\n>;\n\nexport const administratorUserLookupQuerySchema = z\n  .object({\n    id: z.string().uuid().optional(),\n    user_id: z.string().uuid().optional(),\n    email: emailSchema.optional(),\n  })\n  .superRefine((value, context) => {\n    const identifiers = [value.id, value.user_id, value.email].filter(\n      (identifier) => identifier !== undefined,\n    );\n    if (identifiers.length !== 1) {\n      context.addIssue({\n        code: 'custom',\n        message: 'provide exactly one of id, user_id, or email',\n        path: [],\n      });\n    }\n  });\n\nexport type AdministratorUserLookupQueryDto = z.infer<typeof administratorUserLookupQuerySchema>;\n\nexport const administratorGrantSummarySchema = z.object({\n  grant_id: z.string().uuid(),\n  role: adminRoleSchema,\n  created_at: timestampSchema,\n  revoked_at: timestampSchema.nullable(),\n  user: administratorUserIdentitySchema,\n});\n\nexport type AdministratorGrantSummaryDto = z.infer<typeof administratorGrantSummarySchema>;\n\nexport const listAdminGrantsQuerySchema = z.object({\n  limit: z.coerce.number().int().min(1).max(100).default(50),\n  cursor: z.string().optional(),\n});\n\nexport type ListAdminGrantsQueryDto = z.infer<typeof listAdminGrantsQuerySchema>;\n\nexport const listAdminGrantsResponseSchema = z.object({\n  grants: z.array(administratorGrantSummarySchema),\n  next_cursor: z.string().nullable(),\n});\n\nexport type ListAdminGrantsResponseDto = z.infer<typeof listAdminGrantsResponseSchema>;\n"],"names":["emailSchema","z","userStatusSchema","adminRoleSchema","enum","isAdminRole","value","safeParse","success","timestampSchema","string","datetime","identifierEmailSchema","email","CONTROL_OR_FORMAT_CHARACTER_RE","reasonSchema","min","max","refine","test","message","adminGrantDtoSchema","object","id","uuid","user_id","role","revoked_at","nullable","created_at","updated_at","bootstrapAdminOwnerBodySchema","bootstrap_token","bootstrapAdminOwnerResponseSchema","adminBootstrapStateSchema","state","grantAdminRoleBodySchema","reason","grantAdminRoleResponseSchema","revokeAdminGrantBodySchema","revokeAdminGrantResponseSchema","administratorUserIdentitySchema","name","status","administratorUserSummarySchema","extend","email_verified_at","admin_role","correlationIdSchema","suspendAdministratorUserBodySchema","reactivateAdministratorUserBodySchema","optional","default","revokeAdministratorUserSessionsBodySchema","administratorUserMutationResponseSchema","correlation_id","revokeAdministratorUserSessionsResponseSchema","sessions_revoked","number","int","nonnegative","administratorUserLookupQuerySchema","superRefine","context","identifiers","filter","identifier","undefined","length","addIssue","code","path","administratorGrantSummarySchema","grant_id","user","listAdminGrantsQuerySchema","limit","coerce","cursor","listAdminGrantsResponseSchema","grants","array","next_cursor"],"mappings":"AAAA,SAAQA,WAAW,QAAO,0BAA0B;AACpD,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,gBAAgB,QAAO,YAAY;AAE3C,OAAO,MAAMC,kBAAkBF,EAAEG,IAAI,CAAC;IAAC;IAAkB;IAAkB;CAAc,EAAE;AAI3F,OAAO,SAASC,YAAYC,KAAc;IACxC,OAAOH,gBAAgBI,SAAS,CAACD,OAAOE,OAAO;AACjD;AAEA,MAAMC,kBAAkBR,EAAES,MAAM,GAAGC,QAAQ;AAC3C,MAAMC,wBAAwBX,EAAES,MAAM,GAAGG,KAAK;AAC9C,MAAMC,iCAAiC;AACvC,MAAMC,eAAed,EAClBS,MAAM,GACNM,GAAG,CAAC,GACJC,GAAG,CAAC,KACJC,MAAM,CAAC,CAACZ,QAAU,CAACQ,+BAA+BK,IAAI,CAACb,QAAQ;IAC9Dc,SAAS;AACX;AAEF,OAAO,MAAMC,sBAAsBpB,EAAEqB,MAAM,CAAC;IAC1CC,IAAItB,EAAES,MAAM,GAAGc,IAAI;IACnBC,SAASxB,EAAES,MAAM,GAAGc,IAAI;IACxBE,MAAMvB;IACNwB,YAAYlB,gBAAgBmB,QAAQ;IACpCC,YAAYpB;IACZqB,YAAYrB;AACd,GAAG;AAIH,OAAO,MAAMsB,gCAAgC9B,EAAEqB,MAAM,CAAC;IACpDU,iBAAiB/B,EAAES,MAAM,GAAGM,GAAG,CAAC,GAAGC,GAAG,CAAC;AACzC,GAAG;AAIH,OAAO,MAAMgB,oCAAoCZ,oBAAoB;AAIrE,OAAO,MAAMa,4BAA4BjC,EAAEqB,MAAM,CAAC;IAChDa,OAAOlC,EAAEG,IAAI,CAAC;QAAC;QAAa;KAAS;AACvC,GAAG;AAIH,OAAO,MAAMgC,2BAA2BnC,EAAEqB,MAAM,CAAC;IAC/CG,SAASxB,EAAES,MAAM,GAAGc,IAAI;IACxBE,MAAMvB;IACNkC,QAAQtB;AACV,GAAG;AAIH,OAAO,MAAMuB,+BAA+BjB,oBAAoB;AAIhE,OAAO,MAAMkB,6BAA6BtC,EAAEqB,MAAM,CAAC;IACjDe,QAAQtB;AACV,GAAG;AAIH,OAAO,MAAMyB,iCAAiCnB,oBAAoB;AAIlE,OAAO,MAAMoB,kCAAkCxC,EAAEqB,MAAM,CAAC;IACtDC,IAAItB,EAAES,MAAM,GAAGc,IAAI;IACnBX,OAAOD;IACP8B,MAAMzC,EAAES,MAAM,GAAGkB,QAAQ;IACzBe,QAAQzC;AACV,GAAG;AAIH,OAAO,MAAM0C,iCAAiCH,gCAAgCI,MAAM,CAAC;IACnFC,mBAAmBrC,gBAAgBmB,QAAQ;IAC3CC,YAAYpB;IACZsC,YAAY5C,gBAAgByB,QAAQ;AACtC,GAAG;AAIH,MAAMoB,sBAAsB/C,EAAES,MAAM,GAAGM,GAAG,CAAC,GAAGC,GAAG,CAAC;AAElD,OAAO,MAAMgC,qCAAqChD,EAAEqB,MAAM,CAAC;IACzDe,QAAQtB;AACV,GAAG;AAIH,OAAO,MAAMmC,wCAAwCjD,EAClDqB,MAAM,CAAC;IACNe,QAAQtB,aAAaoC,QAAQ;AAC/B,GACCC,OAAO,CAAC,CAAC,GAAG;AAMf,OAAO,MAAMC,4CAA4CpD,EACtDqB,MAAM,CAAC;IACNe,QAAQtB,aAAaoC,QAAQ;AAC/B,GACCC,OAAO,CAAC,CAAC,GAAG;AAMf,OAAO,MAAME,0CAA0CV,+BAA+BC,MAAM,CAAC;IAC3FU,gBAAgBP;AAClB,GAAG;AAMH,OAAO,MAAMQ,gDACXF,wCAAwCT,MAAM,CAAC;IAC7CY,kBAAkBxD,EAAEyD,MAAM,GAAGC,GAAG,GAAGC,WAAW;AAChD,GAAG;AAML,OAAO,MAAMC,qCAAqC5D,EAC/CqB,MAAM,CAAC;IACNC,IAAItB,EAAES,MAAM,GAAGc,IAAI,GAAG2B,QAAQ;IAC9B1B,SAASxB,EAAES,MAAM,GAAGc,IAAI,GAAG2B,QAAQ;IACnCtC,OAAOb,YAAYmD,QAAQ;AAC7B,GACCW,WAAW,CAAC,CAACxD,OAAOyD;IACnB,MAAMC,cAAc;QAAC1D,MAAMiB,EAAE;QAAEjB,MAAMmB,OAAO;QAAEnB,MAAMO,KAAK;KAAC,CAACoD,MAAM,CAC/D,CAACC,aAAeA,eAAeC;IAEjC,IAAIH,YAAYI,MAAM,KAAK,GAAG;QAC5BL,QAAQM,QAAQ,CAAC;YACfC,MAAM;YACNlD,SAAS;YACTmD,MAAM,EAAE;QACV;IACF;AACF,GAAG;AAIL,OAAO,MAAMC,kCAAkCvE,EAAEqB,MAAM,CAAC;IACtDmD,UAAUxE,EAAES,MAAM,GAAGc,IAAI;IACzBE,MAAMvB;IACN0B,YAAYpB;IACZkB,YAAYlB,gBAAgBmB,QAAQ;IACpC8C,MAAMjC;AACR,GAAG;AAIH,OAAO,MAAMkC,6BAA6B1E,EAAEqB,MAAM,CAAC;IACjDsD,OAAO3E,EAAE4E,MAAM,CAACnB,MAAM,GAAGC,GAAG,GAAG3C,GAAG,CAAC,GAAGC,GAAG,CAAC,KAAKmC,OAAO,CAAC;IACvD0B,QAAQ7E,EAAES,MAAM,GAAGyC,QAAQ;AAC7B,GAAG;AAIH,OAAO,MAAM4B,gCAAgC9E,EAAEqB,MAAM,CAAC;IACpD0D,QAAQ/E,EAAEgF,KAAK,CAACT;IAChBU,aAAajF,EAAES,MAAM,GAAGkB,QAAQ;AAClC,GAAG"}
+{"version":3,"sources":["../../src/schemas/admin.ts"],"sourcesContent":["import {emailSchema} from '@shipfox/api-common-dto';\nimport {z} from 'zod';\nimport {userStatusSchema} from './user.js';\n\nexport const adminRoleSchema = z.enum(['admin-observer', 'admin-operator', 'admin-owner']);\n\nexport type AdminRole = z.infer<typeof adminRoleSchema>;\n\nexport function isAdminRole(value: unknown): value is AdminRole {\n  return adminRoleSchema.safeParse(value).success;\n}\n\nconst timestampSchema = z.string().datetime();\nconst identifierEmailSchema = z.string().email();\nconst CONTROL_OR_FORMAT_CHARACTER_RE = /[\\p{Cc}\\p{Cf}]/u;\nconst reasonSchema = z\n  .string()\n  .min(1)\n  .max(512)\n  .refine((value) => !CONTROL_OR_FORMAT_CHARACTER_RE.test(value), {\n    message: 'must not contain control or format characters',\n  });\n\nexport const adminGrantDtoSchema = z.object({\n  id: z.string().uuid(),\n  user_id: z.string().uuid(),\n  role: adminRoleSchema,\n  revoked_at: timestampSchema.nullable(),\n  created_at: timestampSchema,\n  updated_at: timestampSchema,\n});\n\nexport type AdminGrantDto = z.infer<typeof adminGrantDtoSchema>;\n\nexport const bootstrapAdminOwnerBodySchema = z.object({\n  bootstrap_token: z.string().min(1).max(512),\n});\n\nexport type BootstrapAdminOwnerBodyDto = z.infer<typeof bootstrapAdminOwnerBodySchema>;\n\nexport const bootstrapAdminOwnerResponseSchema = adminGrantDtoSchema;\n\nexport type BootstrapAdminOwnerResponseDto = z.infer<typeof bootstrapAdminOwnerResponseSchema>;\n\nexport const adminBootstrapStateSchema = z.object({\n  state: z.enum(['available', 'closed']),\n});\n\nexport type AdminBootstrapStateDto = z.infer<typeof adminBootstrapStateSchema>;\n\nexport const grantAdminRoleBodySchema = z.object({\n  user_id: z.string().uuid(),\n  role: adminRoleSchema,\n  reason: reasonSchema,\n});\n\nexport type GrantAdminRoleBodyDto = z.infer<typeof grantAdminRoleBodySchema>;\n\nexport const grantAdminRoleResponseSchema = adminGrantDtoSchema;\n\nexport type GrantAdminRoleResponseDto = z.infer<typeof grantAdminRoleResponseSchema>;\n\nexport const revokeAdminGrantBodySchema = z.object({\n  reason: reasonSchema,\n});\n\nexport type RevokeAdminGrantBodyDto = z.infer<typeof revokeAdminGrantBodySchema>;\n\nexport const revokeAdminGrantResponseSchema = adminGrantDtoSchema;\n\nexport type RevokeAdminGrantResponseDto = z.infer<typeof revokeAdminGrantResponseSchema>;\n\nexport const administratorUserIdentitySchema = z.object({\n  id: z.string().uuid(),\n  email: identifierEmailSchema,\n  name: z.string().nullable(),\n  status: userStatusSchema,\n});\n\nexport type AdministratorUserIdentityDto = z.infer<typeof administratorUserIdentitySchema>;\n\nexport const administratorUserSummarySchema = administratorUserIdentitySchema.extend({\n  email_verified_at: timestampSchema.nullable(),\n  created_at: timestampSchema,\n  admin_role: adminRoleSchema.nullable(),\n});\n\nexport type AdministratorUserSummaryDto = z.infer<typeof administratorUserSummarySchema>;\n\nconst correlationIdSchema = z.string().min(1).max(255);\n\nexport const suspendAdministratorUserBodySchema = z.object({\n  reason: reasonSchema,\n});\n\nexport type SuspendAdministratorUserBodyDto = z.infer<typeof suspendAdministratorUserBodySchema>;\n\nexport const impersonateUserBodySchema = z.object({\n  reason: reasonSchema,\n});\n\nexport type ImpersonateUserBodyDto = z.infer<typeof impersonateUserBodySchema>;\n\nexport const reactivateAdministratorUserBodySchema = z\n  .object({\n    reason: reasonSchema.optional(),\n  })\n  .default({});\n\nexport type ReactivateAdministratorUserBodyDto = z.infer<\n  typeof reactivateAdministratorUserBodySchema\n>;\n\nexport const revokeAdministratorUserSessionsBodySchema = z\n  .object({\n    reason: reasonSchema.optional(),\n  })\n  .default({});\n\nexport type RevokeAdministratorUserSessionsBodyDto = z.infer<\n  typeof revokeAdministratorUserSessionsBodySchema\n>;\n\nexport const administratorUserMutationResponseSchema = administratorUserSummarySchema.extend({\n  correlation_id: correlationIdSchema,\n});\n\nexport type AdministratorUserMutationResponseDto = z.infer<\n  typeof administratorUserMutationResponseSchema\n>;\n\nexport const revokeAdministratorUserSessionsResponseSchema =\n  administratorUserMutationResponseSchema.extend({\n    sessions_revoked: z.number().int().nonnegative(),\n  });\n\nexport type RevokeAdministratorUserSessionsResponseDto = z.infer<\n  typeof revokeAdministratorUserSessionsResponseSchema\n>;\n\nexport const administratorUserLookupQuerySchema = z\n  .object({\n    id: z.string().uuid().optional(),\n    user_id: z.string().uuid().optional(),\n    email: emailSchema.optional(),\n  })\n  .superRefine((value, context) => {\n    const identifiers = [value.id, value.user_id, value.email].filter(\n      (identifier) => identifier !== undefined,\n    );\n    if (identifiers.length !== 1) {\n      context.addIssue({\n        code: 'custom',\n        message: 'provide exactly one of id, user_id, or email',\n        path: [],\n      });\n    }\n  });\n\nexport type AdministratorUserLookupQueryDto = z.infer<typeof administratorUserLookupQuerySchema>;\n\nexport const administratorGrantSummarySchema = z.object({\n  grant_id: z.string().uuid(),\n  role: adminRoleSchema,\n  created_at: timestampSchema,\n  revoked_at: timestampSchema.nullable(),\n  user: administratorUserIdentitySchema,\n});\n\nexport type AdministratorGrantSummaryDto = z.infer<typeof administratorGrantSummarySchema>;\n\nexport const listAdminGrantsQuerySchema = z.object({\n  limit: z.coerce.number().int().min(1).max(100).default(50),\n  cursor: z.string().optional(),\n});\n\nexport type ListAdminGrantsQueryDto = z.infer<typeof listAdminGrantsQuerySchema>;\n\nexport const listAdminGrantsResponseSchema = z.object({\n  grants: z.array(administratorGrantSummarySchema),\n  next_cursor: z.string().nullable(),\n});\n\nexport type ListAdminGrantsResponseDto = z.infer<typeof listAdminGrantsResponseSchema>;\n"],"names":["emailSchema","z","userStatusSchema","adminRoleSchema","enum","isAdminRole","value","safeParse","success","timestampSchema","string","datetime","identifierEmailSchema","email","CONTROL_OR_FORMAT_CHARACTER_RE","reasonSchema","min","max","refine","test","message","adminGrantDtoSchema","object","id","uuid","user_id","role","revoked_at","nullable","created_at","updated_at","bootstrapAdminOwnerBodySchema","bootstrap_token","bootstrapAdminOwnerResponseSchema","adminBootstrapStateSchema","state","grantAdminRoleBodySchema","reason","grantAdminRoleResponseSchema","revokeAdminGrantBodySchema","revokeAdminGrantResponseSchema","administratorUserIdentitySchema","name","status","administratorUserSummarySchema","extend","email_verified_at","admin_role","correlationIdSchema","suspendAdministratorUserBodySchema","impersonateUserBodySchema","reactivateAdministratorUserBodySchema","optional","default","revokeAdministratorUserSessionsBodySchema","administratorUserMutationResponseSchema","correlation_id","revokeAdministratorUserSessionsResponseSchema","sessions_revoked","number","int","nonnegative","administratorUserLookupQuerySchema","superRefine","context","identifiers","filter","identifier","undefined","length","addIssue","code","path","administratorGrantSummarySchema","grant_id","user","listAdminGrantsQuerySchema","limit","coerce","cursor","listAdminGrantsResponseSchema","grants","array","next_cursor"],"mappings":"AAAA,SAAQA,WAAW,QAAO,0BAA0B;AACpD,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,gBAAgB,QAAO,YAAY;AAE3C,OAAO,MAAMC,kBAAkBF,EAAEG,IAAI,CAAC;IAAC;IAAkB;IAAkB;CAAc,EAAE;AAI3F,OAAO,SAASC,YAAYC,KAAc;IACxC,OAAOH,gBAAgBI,SAAS,CAACD,OAAOE,OAAO;AACjD;AAEA,MAAMC,kBAAkBR,EAAES,MAAM,GAAGC,QAAQ;AAC3C,MAAMC,wBAAwBX,EAAES,MAAM,GAAGG,KAAK;AAC9C,MAAMC,iCAAiC;AACvC,MAAMC,eAAed,EAClBS,MAAM,GACNM,GAAG,CAAC,GACJC,GAAG,CAAC,KACJC,MAAM,CAAC,CAACZ,QAAU,CAACQ,+BAA+BK,IAAI,CAACb,QAAQ;IAC9Dc,SAAS;AACX;AAEF,OAAO,MAAMC,sBAAsBpB,EAAEqB,MAAM,CAAC;IAC1CC,IAAItB,EAAES,MAAM,GAAGc,IAAI;IACnBC,SAASxB,EAAES,MAAM,GAAGc,IAAI;IACxBE,MAAMvB;IACNwB,YAAYlB,gBAAgBmB,QAAQ;IACpCC,YAAYpB;IACZqB,YAAYrB;AACd,GAAG;AAIH,OAAO,MAAMsB,gCAAgC9B,EAAEqB,MAAM,CAAC;IACpDU,iBAAiB/B,EAAES,MAAM,GAAGM,GAAG,CAAC,GAAGC,GAAG,CAAC;AACzC,GAAG;AAIH,OAAO,MAAMgB,oCAAoCZ,oBAAoB;AAIrE,OAAO,MAAMa,4BAA4BjC,EAAEqB,MAAM,CAAC;IAChDa,OAAOlC,EAAEG,IAAI,CAAC;QAAC;QAAa;KAAS;AACvC,GAAG;AAIH,OAAO,MAAMgC,2BAA2BnC,EAAEqB,MAAM,CAAC;IAC/CG,SAASxB,EAAES,MAAM,GAAGc,IAAI;IACxBE,MAAMvB;IACNkC,QAAQtB;AACV,GAAG;AAIH,OAAO,MAAMuB,+BAA+BjB,oBAAoB;AAIhE,OAAO,MAAMkB,6BAA6BtC,EAAEqB,MAAM,CAAC;IACjDe,QAAQtB;AACV,GAAG;AAIH,OAAO,MAAMyB,iCAAiCnB,oBAAoB;AAIlE,OAAO,MAAMoB,kCAAkCxC,EAAEqB,MAAM,CAAC;IACtDC,IAAItB,EAAES,MAAM,GAAGc,IAAI;IACnBX,OAAOD;IACP8B,MAAMzC,EAAES,MAAM,GAAGkB,QAAQ;IACzBe,QAAQzC;AACV,GAAG;AAIH,OAAO,MAAM0C,iCAAiCH,gCAAgCI,MAAM,CAAC;IACnFC,mBAAmBrC,gBAAgBmB,QAAQ;IAC3CC,YAAYpB;IACZsC,YAAY5C,gBAAgByB,QAAQ;AACtC,GAAG;AAIH,MAAMoB,sBAAsB/C,EAAES,MAAM,GAAGM,GAAG,CAAC,GAAGC,GAAG,CAAC;AAElD,OAAO,MAAMgC,qCAAqChD,EAAEqB,MAAM,CAAC;IACzDe,QAAQtB;AACV,GAAG;AAIH,OAAO,MAAMmC,4BAA4BjD,EAAEqB,MAAM,CAAC;IAChDe,QAAQtB;AACV,GAAG;AAIH,OAAO,MAAMoC,wCAAwClD,EAClDqB,MAAM,CAAC;IACNe,QAAQtB,aAAaqC,QAAQ;AAC/B,GACCC,OAAO,CAAC,CAAC,GAAG;AAMf,OAAO,MAAMC,4CAA4CrD,EACtDqB,MAAM,CAAC;IACNe,QAAQtB,aAAaqC,QAAQ;AAC/B,GACCC,OAAO,CAAC,CAAC,GAAG;AAMf,OAAO,MAAME,0CAA0CX,+BAA+BC,MAAM,CAAC;IAC3FW,gBAAgBR;AAClB,GAAG;AAMH,OAAO,MAAMS,gDACXF,wCAAwCV,MAAM,CAAC;IAC7Ca,kBAAkBzD,EAAE0D,MAAM,GAAGC,GAAG,GAAGC,WAAW;AAChD,GAAG;AAML,OAAO,MAAMC,qCAAqC7D,EAC/CqB,MAAM,CAAC;IACNC,IAAItB,EAAES,MAAM,GAAGc,IAAI,GAAG4B,QAAQ;IAC9B3B,SAASxB,EAAES,MAAM,GAAGc,IAAI,GAAG4B,QAAQ;IACnCvC,OAAOb,YAAYoD,QAAQ;AAC7B,GACCW,WAAW,CAAC,CAACzD,OAAO0D;IACnB,MAAMC,cAAc;QAAC3D,MAAMiB,EAAE;QAAEjB,MAAMmB,OAAO;QAAEnB,MAAMO,KAAK;KAAC,CAACqD,MAAM,CAC/D,CAACC,aAAeA,eAAeC;IAEjC,IAAIH,YAAYI,MAAM,KAAK,GAAG;QAC5BL,QAAQM,QAAQ,CAAC;YACfC,MAAM;YACNnD,SAAS;YACToD,MAAM,EAAE;QACV;IACF;AACF,GAAG;AAIL,OAAO,MAAMC,kCAAkCxE,EAAEqB,MAAM,CAAC;IACtDoD,UAAUzE,EAAES,MAAM,GAAGc,IAAI;IACzBE,MAAMvB;IACN0B,YAAYpB;IACZkB,YAAYlB,gBAAgBmB,QAAQ;IACpC+C,MAAMlC;AACR,GAAG;AAIH,OAAO,MAAMmC,6BAA6B3E,EAAEqB,MAAM,CAAC;IACjDuD,OAAO5E,EAAE6E,MAAM,CAACnB,MAAM,GAAGC,GAAG,GAAG5C,GAAG,CAAC,GAAGC,GAAG,CAAC,KAAKoC,OAAO,CAAC;IACvD0B,QAAQ9E,EAAES,MAAM,GAAG0C,QAAQ;AAC7B,GAAG;AAIH,OAAO,MAAM4B,gCAAgC/E,EAAEqB,MAAM,CAAC;IACpD2D,QAAQhF,EAAEiF,KAAK,CAACT;IAChBU,aAAalF,EAAES,MAAM,GAAGkB,QAAQ;AAClC,GAAG"}

package/dist/schemas/auth.d.ts

@@ -87,6 +87,63 @@ export declare const loginResponseSchema: z.ZodObject<{
     }>>>;
 }, z.core.$strip>;
 export type LoginResponseDto = z.infer<typeof loginResponseSchema>;
+/**
+ * A session response for an externally minted (adopted) session, which may
+ * carry the optional impersonation mark. The cookie-based login and refresh
+ * responses never set it. The impersonation mint route emits its own
+ * `impersonateResponseSchema`; client shells map that shape into this one.
+ */
+export declare const sessionResponseSchema: z.ZodObject<{
+    token: z.ZodString;
+    user: z.ZodObject<{
+        id: z.ZodString;
+        email: z.ZodString;
+        name: z.ZodNullable<z.ZodString>;
+        email_verified_at: z.ZodNullable<z.ZodString>;
+        status: z.ZodEnum<{
+            active: "active";
+            deleted: "deleted";
+            suspended: "suspended";
+        }>;
+        created_at: z.ZodString;
+        updated_at: z.ZodString;
+    }, z.core.$strip>;
+    admin_role: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+        "admin-observer": "admin-observer";
+        "admin-operator": "admin-operator";
+        "admin-owner": "admin-owner";
+    }>>>;
+    impersonator_id: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type SessionResponseDto = z.infer<typeof sessionResponseSchema>;
+/**
+ * The impersonation mint, replay, and renewal response. Mirrors
+ * `loginResponseSchema` with deliberate deviations: no refresh cookie is set,
+ * no `admin_role` exists (the target can hold none), and `expires_at`,
+ * `server_time`, and `impersonator_id` are explicit so the client never
+ * decodes the JWT. `server_time` is the issuer's clock at response time; the
+ * client anchors countdown and Extend availability on it.
+ */
+export declare const impersonateResponseSchema: z.ZodObject<{
+    token: z.ZodString;
+    expires_at: z.ZodString;
+    server_time: z.ZodString;
+    impersonator_id: z.ZodString;
+    user: z.ZodObject<{
+        id: z.ZodString;
+        email: z.ZodString;
+        name: z.ZodNullable<z.ZodString>;
+        email_verified_at: z.ZodNullable<z.ZodString>;
+        status: z.ZodEnum<{
+            active: "active";
+            deleted: "deleted";
+            suspended: "suspended";
+        }>;
+        created_at: z.ZodString;
+        updated_at: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type ImpersonateResponseDto = z.infer<typeof impersonateResponseSchema>;
 export declare const refreshResponseSchema: z.ZodObject<{
     token: z.ZodString;
     user: z.ZodObject<{
@@ -128,6 +185,7 @@ export declare const meResponseSchema: z.ZodObject<{
         "admin-operator": "admin-operator";
         "admin-owner": "admin-owner";
     }>>>;
+    impersonator_id: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type MeResponseDto = z.infer<typeof meResponseSchema>;
 export declare const logoutBodySchema: z.ZodObject<{}, z.core.$strip>;

package/dist/schemas/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/schemas/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,WAAW,EAAC,MAAM,yBAAyB,CAAC;AACvE,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAItB,eAAO,MAAM,cAAc,aAA8B,CAAC;AAC1D,OAAO,EAAC,WAAW,EAAC,CAAC;AAErB,eAAO,MAAM,iBAAiB;;iBAE5B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE/D,eAAO,MAAM,0BAA0B;;;;iBAErC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAEjF,eAAO,MAAM,gBAAgB;;;;;iBAK3B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE7D,eAAO,MAAM,uBAAuB;;;iBAGlC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE3E,eAAO,MAAM,sBAAsB;;;;iBAIjC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEzE,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAW/B,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAErE,eAAO,MAAM,eAAe;;;iBAG1B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE3D,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;iBAI9B,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEnE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;iBAAsB,CAAC;AAEzD,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEvE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;iBAG3B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE7D,eAAO,MAAM,gBAAgB,gCAAe,CAAC;AAE7C,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE7D,eAAO,MAAM,wBAAwB;;;iBAGnC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE7E,eAAO,MAAM,8BAA8B;;iBAEzC,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEzF,eAAO,MAAM,8BAA8B;;;iBAGzC,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEzF,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;iBAAsB,CAAC;AAEtE,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAEjG,eAAO,MAAM,4BAA4B;;;;iBAIvC,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAErF,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;iBAAsB,CAAC;AAEpE,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE7F,eAAO,MAAM,2BAA2B;;;iBAGtC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEnF,eAAO,MAAM,+BAA+B;;iBAE1C,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/schemas/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,WAAW,EAAC,MAAM,yBAAyB,CAAC;AACvE,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAItB,eAAO,MAAM,cAAc,aAA8B,CAAC;AAC1D,OAAO,EAAC,WAAW,EAAC,CAAC;AAErB,eAAO,MAAM,iBAAiB;;iBAE5B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE/D,eAAO,MAAM,0BAA0B;;;;iBAErC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAEjF,eAAO,MAAM,gBAAgB;;;;;iBAK3B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE7D,eAAO,MAAM,uBAAuB;;;iBAGlC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE3E,eAAO,MAAM,sBAAsB;;;;iBAIjC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEzE,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAW/B,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAErE,eAAO,MAAM,eAAe;;;iBAG1B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE3D,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;iBAI9B,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEnE;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;iBAEhC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEvE;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;iBAMpC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE/E,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;iBAAsB,CAAC;AAEzD,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEvE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;iBAI3B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE7D,eAAO,MAAM,gBAAgB,gCAAe,CAAC;AAE7C,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE7D,eAAO,MAAM,wBAAwB;;;iBAGnC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE7E,eAAO,MAAM,8BAA8B;;iBAEzC,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEzF,eAAO,MAAM,8BAA8B;;;iBAGzC,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEzF,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;iBAAsB,CAAC;AAEtE,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAEjG,eAAO,MAAM,4BAA4B;;;;iBAIvC,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAErF,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;iBAAsB,CAAC;AAEpE,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE7F,eAAO,MAAM,2BAA2B;;;iBAGtC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEnF,eAAO,MAAM,+BAA+B;;iBAE1C,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC"}

package/dist/schemas/auth.js

@@ -44,10 +44,33 @@ export const loginResponseSchema = z.object({
     user: userDtoSchema,
     admin_role: adminRoleSchema.nullable().optional()
 });
+/**
+ * A session response for an externally minted (adopted) session, which may
+ * carry the optional impersonation mark. The cookie-based login and refresh
+ * responses never set it. The impersonation mint route emits its own
+ * `impersonateResponseSchema`; client shells map that shape into this one.
+ */ export const sessionResponseSchema = loginResponseSchema.extend({
+    impersonator_id: z.string().uuid().optional()
+});
+/**
+ * The impersonation mint, replay, and renewal response. Mirrors
+ * `loginResponseSchema` with deliberate deviations: no refresh cookie is set,
+ * no `admin_role` exists (the target can hold none), and `expires_at`,
+ * `server_time`, and `impersonator_id` are explicit so the client never
+ * decodes the JWT. `server_time` is the issuer's clock at response time; the
+ * client anchors countdown and Extend availability on it.
+ */ export const impersonateResponseSchema = z.object({
+    token: z.string(),
+    expires_at: z.string().datetime(),
+    server_time: z.string().datetime(),
+    impersonator_id: z.string().uuid(),
+    user: userDtoSchema
+});
 export const refreshResponseSchema = loginResponseSchema;
 export const meResponseSchema = z.object({
     user: userDtoSchema,
-    admin_role: adminRoleSchema.nullable().optional()
+    admin_role: adminRoleSchema.nullable().optional(),
+    impersonator_id: z.string().uuid().optional()
 });
 export const logoutBodySchema = z.object({});
 export const changePasswordBodySchema = z.object({

package/dist/schemas/auth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/schemas/auth.ts"],"sourcesContent":["import {displayNameSchema, emailSchema} from '@shipfox/api-common-dto';\nimport {z} from 'zod';\nimport {adminRoleSchema} from './admin.js';\nimport {userDtoSchema} from './user.js';\n\nexport const passwordSchema = z.string().min(12).max(128);\nexport {emailSchema};\n\nexport const loginMethodSchema = z.object({\n  id: z.string().min(1).max(128),\n});\n\nexport type LoginMethodDto = z.infer<typeof loginMethodSchema>;\n\nexport const loginMethodsResponseSchema = z.object({\n  login_methods: z.array(loginMethodSchema),\n});\n\nexport type LoginMethodsResponseDto = z.infer<typeof loginMethodsResponseSchema>;\n\nexport const signupBodySchema = z.object({\n  email: emailSchema,\n  password: passwordSchema,\n  name: displayNameSchema,\n  invitation_token: z.string().min(1).max(256).optional(),\n});\n\nexport type SignupBodyDto = z.infer<typeof signupBodySchema>;\n\nexport const signupAcceptErrorSchema = z.object({\n  code: z.string(),\n  message: z.string(),\n});\n\nexport type SignupAcceptErrorDto = z.infer<typeof signupAcceptErrorSchema>;\n\nexport const signupMembershipSchema = z.object({\n  id: z.string().uuid(),\n  user_id: z.string().uuid(),\n  workspace_id: z.string().uuid(),\n});\n\nexport type SignupMembershipDto = z.infer<typeof signupMembershipSchema>;\n\nexport const signupResponseSchema = z.object({\n  user: userDtoSchema,\n  email_challenge: z\n    .object({\n      id: z.string().uuid(),\n      next_resend_available_at: z.string().datetime(),\n    })\n    .optional(),\n  token: z.string().optional(),\n  membership: signupMembershipSchema.nullable().optional(),\n  accept_error: signupAcceptErrorSchema.optional(),\n});\n\nexport type SignupResponseDto = z.infer<typeof signupResponseSchema>;\n\nexport const loginBodySchema = z.object({\n  email: emailSchema,\n  password: z.string().min(1).max(128),\n});\n\nexport type LoginBodyDto = z.infer<typeof loginBodySchema>;\n\nexport const loginResponseSchema = z.object({\n  token: z.string(),\n  user: userDtoSchema,\n  admin_role: adminRoleSchema.nullable().optional(),\n});\n\nexport type LoginResponseDto = z.infer<typeof loginResponseSchema>;\n\nexport const refreshResponseSchema = loginResponseSchema;\n\nexport type RefreshResponseDto = z.infer<typeof refreshResponseSchema>;\n\nexport const meResponseSchema = z.object({\n  user: userDtoSchema,\n  admin_role: adminRoleSchema.nullable().optional(),\n});\n\nexport type MeResponseDto = z.infer<typeof meResponseSchema>;\n\nexport const logoutBodySchema = z.object({});\n\nexport type LogoutBodyDto = z.infer<typeof logoutBodySchema>;\n\nexport const changePasswordBodySchema = z.object({\n  current_password: z.string().min(1).max(128),\n  new_password: passwordSchema,\n});\n\nexport type ChangePasswordBodyDto = z.infer<typeof changePasswordBodySchema>;\n\nexport const passwordResetRequestBodySchema = z.object({\n  email: emailSchema,\n});\n\nexport type PasswordResetRequestBodyDto = z.infer<typeof passwordResetRequestBodySchema>;\n\nexport const passwordResetConfirmBodySchema = z.object({\n  token: z.string().min(1),\n  new_password: passwordSchema,\n});\n\nexport type PasswordResetConfirmBodyDto = z.infer<typeof passwordResetConfirmBodySchema>;\n\nexport const passwordResetConfirmResponseSchema = loginResponseSchema;\n\nexport type PasswordResetConfirmResponseDto = z.infer<typeof passwordResetConfirmResponseSchema>;\n\nexport const verifyEmailConfirmBodySchema = z.object({\n  email: emailSchema,\n  challenge_id: z.string().uuid(),\n  code: z.string().regex(/^\\d{8}$/u),\n});\n\nexport type VerifyEmailConfirmBodyDto = z.infer<typeof verifyEmailConfirmBodySchema>;\n\nexport const verifyEmailConfirmResponseSchema = loginResponseSchema;\n\nexport type VerifyEmailConfirmResponseDto = z.infer<typeof verifyEmailConfirmResponseSchema>;\n\nexport const verifyEmailResendBodySchema = z.object({\n  email: emailSchema,\n  challenge_id: z.string().uuid(),\n});\n\nexport type VerifyEmailResendBodyDto = z.infer<typeof verifyEmailResendBodySchema>;\n\nexport const verifyEmailResendResponseSchema = z.object({\n  next_resend_available_at: z.string().datetime(),\n});\n\nexport type VerifyEmailResendResponseDto = z.infer<typeof verifyEmailResendResponseSchema>;\n"],"names":["displayNameSchema","emailSchema","z","adminRoleSchema","userDtoSchema","passwordSchema","string","min","max","loginMethodSchema","object","id","loginMethodsResponseSchema","login_methods","array","signupBodySchema","email","password","name","invitation_token","optional","signupAcceptErrorSchema","code","message","signupMembershipSchema","uuid","user_id","workspace_id","signupResponseSchema","user","email_challenge","next_resend_available_at","datetime","token","membership","nullable","accept_error","loginBodySchema","loginResponseSchema","admin_role","refreshResponseSchema","meResponseSchema","logoutBodySchema","changePasswordBodySchema","current_password","new_password","passwordResetRequestBodySchema","passwordResetConfirmBodySchema","passwordResetConfirmResponseSchema","verifyEmailConfirmBodySchema","challenge_id","regex","verifyEmailConfirmResponseSchema","verifyEmailResendBodySchema","verifyEmailResendResponseSchema"],"mappings":"AAAA,SAAQA,iBAAiB,EAAEC,WAAW,QAAO,0BAA0B;AACvE,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,eAAe,QAAO,aAAa;AAC3C,SAAQC,aAAa,QAAO,YAAY;AAExC,OAAO,MAAMC,iBAAiBH,EAAEI,MAAM,GAAGC,GAAG,CAAC,IAAIC,GAAG,CAAC,KAAK;AAC1D,SAAQP,WAAW,GAAE;AAErB,OAAO,MAAMQ,oBAAoBP,EAAEQ,MAAM,CAAC;IACxCC,IAAIT,EAAEI,MAAM,GAAGC,GAAG,CAAC,GAAGC,GAAG,CAAC;AAC5B,GAAG;AAIH,OAAO,MAAMI,6BAA6BV,EAAEQ,MAAM,CAAC;IACjDG,eAAeX,EAAEY,KAAK,CAACL;AACzB,GAAG;AAIH,OAAO,MAAMM,mBAAmBb,EAAEQ,MAAM,CAAC;IACvCM,OAAOf;IACPgB,UAAUZ;IACVa,MAAMlB;IACNmB,kBAAkBjB,EAAEI,MAAM,GAAGC,GAAG,CAAC,GAAGC,GAAG,CAAC,KAAKY,QAAQ;AACvD,GAAG;AAIH,OAAO,MAAMC,0BAA0BnB,EAAEQ,MAAM,CAAC;IAC9CY,MAAMpB,EAAEI,MAAM;IACdiB,SAASrB,EAAEI,MAAM;AACnB,GAAG;AAIH,OAAO,MAAMkB,yBAAyBtB,EAAEQ,MAAM,CAAC;IAC7CC,IAAIT,EAAEI,MAAM,GAAGmB,IAAI;IACnBC,SAASxB,EAAEI,MAAM,GAAGmB,IAAI;IACxBE,cAAczB,EAAEI,MAAM,GAAGmB,IAAI;AAC/B,GAAG;AAIH,OAAO,MAAMG,uBAAuB1B,EAAEQ,MAAM,CAAC;IAC3CmB,MAAMzB;IACN0B,iBAAiB5B,EACdQ,MAAM,CAAC;QACNC,IAAIT,EAAEI,MAAM,GAAGmB,IAAI;QACnBM,0BAA0B7B,EAAEI,MAAM,GAAG0B,QAAQ;IAC/C,GACCZ,QAAQ;IACXa,OAAO/B,EAAEI,MAAM,GAAGc,QAAQ;IAC1Bc,YAAYV,uBAAuBW,QAAQ,GAAGf,QAAQ;IACtDgB,cAAcf,wBAAwBD,QAAQ;AAChD,GAAG;AAIH,OAAO,MAAMiB,kBAAkBnC,EAAEQ,MAAM,CAAC;IACtCM,OAAOf;IACPgB,UAAUf,EAAEI,MAAM,GAAGC,GAAG,CAAC,GAAGC,GAAG,CAAC;AAClC,GAAG;AAIH,OAAO,MAAM8B,sBAAsBpC,EAAEQ,MAAM,CAAC;IAC1CuB,OAAO/B,EAAEI,MAAM;IACfuB,MAAMzB;IACNmC,YAAYpC,gBAAgBgC,QAAQ,GAAGf,QAAQ;AACjD,GAAG;AAIH,OAAO,MAAMoB,wBAAwBF,oBAAoB;AAIzD,OAAO,MAAMG,mBAAmBvC,EAAEQ,MAAM,CAAC;IACvCmB,MAAMzB;IACNmC,YAAYpC,gBAAgBgC,QAAQ,GAAGf,QAAQ;AACjD,GAAG;AAIH,OAAO,MAAMsB,mBAAmBxC,EAAEQ,MAAM,CAAC,CAAC,GAAG;AAI7C,OAAO,MAAMiC,2BAA2BzC,EAAEQ,MAAM,CAAC;IAC/CkC,kBAAkB1C,EAAEI,MAAM,GAAGC,GAAG,CAAC,GAAGC,GAAG,CAAC;IACxCqC,cAAcxC;AAChB,GAAG;AAIH,OAAO,MAAMyC,iCAAiC5C,EAAEQ,MAAM,CAAC;IACrDM,OAAOf;AACT,GAAG;AAIH,OAAO,MAAM8C,iCAAiC7C,EAAEQ,MAAM,CAAC;IACrDuB,OAAO/B,EAAEI,MAAM,GAAGC,GAAG,CAAC;IACtBsC,cAAcxC;AAChB,GAAG;AAIH,OAAO,MAAM2C,qCAAqCV,oBAAoB;AAItE,OAAO,MAAMW,+BAA+B/C,EAAEQ,MAAM,CAAC;IACnDM,OAAOf;IACPiD,cAAchD,EAAEI,MAAM,GAAGmB,IAAI;IAC7BH,MAAMpB,EAAEI,MAAM,GAAG6C,KAAK,CAAC;AACzB,GAAG;AAIH,OAAO,MAAMC,mCAAmCd,oBAAoB;AAIpE,OAAO,MAAMe,8BAA8BnD,EAAEQ,MAAM,CAAC;IAClDM,OAAOf;IACPiD,cAAchD,EAAEI,MAAM,GAAGmB,IAAI;AAC/B,GAAG;AAIH,OAAO,MAAM6B,kCAAkCpD,EAAEQ,MAAM,CAAC;IACtDqB,0BAA0B7B,EAAEI,MAAM,GAAG0B,QAAQ;AAC/C,GAAG"}
+{"version":3,"sources":["../../src/schemas/auth.ts"],"sourcesContent":["import {displayNameSchema, emailSchema} from '@shipfox/api-common-dto';\nimport {z} from 'zod';\nimport {adminRoleSchema} from './admin.js';\nimport {userDtoSchema} from './user.js';\n\nexport const passwordSchema = z.string().min(12).max(128);\nexport {emailSchema};\n\nexport const loginMethodSchema = z.object({\n  id: z.string().min(1).max(128),\n});\n\nexport type LoginMethodDto = z.infer<typeof loginMethodSchema>;\n\nexport const loginMethodsResponseSchema = z.object({\n  login_methods: z.array(loginMethodSchema),\n});\n\nexport type LoginMethodsResponseDto = z.infer<typeof loginMethodsResponseSchema>;\n\nexport const signupBodySchema = z.object({\n  email: emailSchema,\n  password: passwordSchema,\n  name: displayNameSchema,\n  invitation_token: z.string().min(1).max(256).optional(),\n});\n\nexport type SignupBodyDto = z.infer<typeof signupBodySchema>;\n\nexport const signupAcceptErrorSchema = z.object({\n  code: z.string(),\n  message: z.string(),\n});\n\nexport type SignupAcceptErrorDto = z.infer<typeof signupAcceptErrorSchema>;\n\nexport const signupMembershipSchema = z.object({\n  id: z.string().uuid(),\n  user_id: z.string().uuid(),\n  workspace_id: z.string().uuid(),\n});\n\nexport type SignupMembershipDto = z.infer<typeof signupMembershipSchema>;\n\nexport const signupResponseSchema = z.object({\n  user: userDtoSchema,\n  email_challenge: z\n    .object({\n      id: z.string().uuid(),\n      next_resend_available_at: z.string().datetime(),\n    })\n    .optional(),\n  token: z.string().optional(),\n  membership: signupMembershipSchema.nullable().optional(),\n  accept_error: signupAcceptErrorSchema.optional(),\n});\n\nexport type SignupResponseDto = z.infer<typeof signupResponseSchema>;\n\nexport const loginBodySchema = z.object({\n  email: emailSchema,\n  password: z.string().min(1).max(128),\n});\n\nexport type LoginBodyDto = z.infer<typeof loginBodySchema>;\n\nexport const loginResponseSchema = z.object({\n  token: z.string(),\n  user: userDtoSchema,\n  admin_role: adminRoleSchema.nullable().optional(),\n});\n\nexport type LoginResponseDto = z.infer<typeof loginResponseSchema>;\n\n/**\n * A session response for an externally minted (adopted) session, which may\n * carry the optional impersonation mark. The cookie-based login and refresh\n * responses never set it. The impersonation mint route emits its own\n * `impersonateResponseSchema`; client shells map that shape into this one.\n */\nexport const sessionResponseSchema = loginResponseSchema.extend({\n  impersonator_id: z.string().uuid().optional(),\n});\n\nexport type SessionResponseDto = z.infer<typeof sessionResponseSchema>;\n\n/**\n * The impersonation mint, replay, and renewal response. Mirrors\n * `loginResponseSchema` with deliberate deviations: no refresh cookie is set,\n * no `admin_role` exists (the target can hold none), and `expires_at`,\n * `server_time`, and `impersonator_id` are explicit so the client never\n * decodes the JWT. `server_time` is the issuer's clock at response time; the\n * client anchors countdown and Extend availability on it.\n */\nexport const impersonateResponseSchema = z.object({\n  token: z.string(),\n  expires_at: z.string().datetime(),\n  server_time: z.string().datetime(),\n  impersonator_id: z.string().uuid(),\n  user: userDtoSchema,\n});\n\nexport type ImpersonateResponseDto = z.infer<typeof impersonateResponseSchema>;\n\nexport const refreshResponseSchema = loginResponseSchema;\n\nexport type RefreshResponseDto = z.infer<typeof refreshResponseSchema>;\n\nexport const meResponseSchema = z.object({\n  user: userDtoSchema,\n  admin_role: adminRoleSchema.nullable().optional(),\n  impersonator_id: z.string().uuid().optional(),\n});\n\nexport type MeResponseDto = z.infer<typeof meResponseSchema>;\n\nexport const logoutBodySchema = z.object({});\n\nexport type LogoutBodyDto = z.infer<typeof logoutBodySchema>;\n\nexport const changePasswordBodySchema = z.object({\n  current_password: z.string().min(1).max(128),\n  new_password: passwordSchema,\n});\n\nexport type ChangePasswordBodyDto = z.infer<typeof changePasswordBodySchema>;\n\nexport const passwordResetRequestBodySchema = z.object({\n  email: emailSchema,\n});\n\nexport type PasswordResetRequestBodyDto = z.infer<typeof passwordResetRequestBodySchema>;\n\nexport const passwordResetConfirmBodySchema = z.object({\n  token: z.string().min(1),\n  new_password: passwordSchema,\n});\n\nexport type PasswordResetConfirmBodyDto = z.infer<typeof passwordResetConfirmBodySchema>;\n\nexport const passwordResetConfirmResponseSchema = loginResponseSchema;\n\nexport type PasswordResetConfirmResponseDto = z.infer<typeof passwordResetConfirmResponseSchema>;\n\nexport const verifyEmailConfirmBodySchema = z.object({\n  email: emailSchema,\n  challenge_id: z.string().uuid(),\n  code: z.string().regex(/^\\d{8}$/u),\n});\n\nexport type VerifyEmailConfirmBodyDto = z.infer<typeof verifyEmailConfirmBodySchema>;\n\nexport const verifyEmailConfirmResponseSchema = loginResponseSchema;\n\nexport type VerifyEmailConfirmResponseDto = z.infer<typeof verifyEmailConfirmResponseSchema>;\n\nexport const verifyEmailResendBodySchema = z.object({\n  email: emailSchema,\n  challenge_id: z.string().uuid(),\n});\n\nexport type VerifyEmailResendBodyDto = z.infer<typeof verifyEmailResendBodySchema>;\n\nexport const verifyEmailResendResponseSchema = z.object({\n  next_resend_available_at: z.string().datetime(),\n});\n\nexport type VerifyEmailResendResponseDto = z.infer<typeof verifyEmailResendResponseSchema>;\n"],"names":["displayNameSchema","emailSchema","z","adminRoleSchema","userDtoSchema","passwordSchema","string","min","max","loginMethodSchema","object","id","loginMethodsResponseSchema","login_methods","array","signupBodySchema","email","password","name","invitation_token","optional","signupAcceptErrorSchema","code","message","signupMembershipSchema","uuid","user_id","workspace_id","signupResponseSchema","user","email_challenge","next_resend_available_at","datetime","token","membership","nullable","accept_error","loginBodySchema","loginResponseSchema","admin_role","sessionResponseSchema","extend","impersonator_id","impersonateResponseSchema","expires_at","server_time","refreshResponseSchema","meResponseSchema","logoutBodySchema","changePasswordBodySchema","current_password","new_password","passwordResetRequestBodySchema","passwordResetConfirmBodySchema","passwordResetConfirmResponseSchema","verifyEmailConfirmBodySchema","challenge_id","regex","verifyEmailConfirmResponseSchema","verifyEmailResendBodySchema","verifyEmailResendResponseSchema"],"mappings":"AAAA,SAAQA,iBAAiB,EAAEC,WAAW,QAAO,0BAA0B;AACvE,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,eAAe,QAAO,aAAa;AAC3C,SAAQC,aAAa,QAAO,YAAY;AAExC,OAAO,MAAMC,iBAAiBH,EAAEI,MAAM,GAAGC,GAAG,CAAC,IAAIC,GAAG,CAAC,KAAK;AAC1D,SAAQP,WAAW,GAAE;AAErB,OAAO,MAAMQ,oBAAoBP,EAAEQ,MAAM,CAAC;IACxCC,IAAIT,EAAEI,MAAM,GAAGC,GAAG,CAAC,GAAGC,GAAG,CAAC;AAC5B,GAAG;AAIH,OAAO,MAAMI,6BAA6BV,EAAEQ,MAAM,CAAC;IACjDG,eAAeX,EAAEY,KAAK,CAACL;AACzB,GAAG;AAIH,OAAO,MAAMM,mBAAmBb,EAAEQ,MAAM,CAAC;IACvCM,OAAOf;IACPgB,UAAUZ;IACVa,MAAMlB;IACNmB,kBAAkBjB,EAAEI,MAAM,GAAGC,GAAG,CAAC,GAAGC,GAAG,CAAC,KAAKY,QAAQ;AACvD,GAAG;AAIH,OAAO,MAAMC,0BAA0BnB,EAAEQ,MAAM,CAAC;IAC9CY,MAAMpB,EAAEI,MAAM;IACdiB,SAASrB,EAAEI,MAAM;AACnB,GAAG;AAIH,OAAO,MAAMkB,yBAAyBtB,EAAEQ,MAAM,CAAC;IAC7CC,IAAIT,EAAEI,MAAM,GAAGmB,IAAI;IACnBC,SAASxB,EAAEI,MAAM,GAAGmB,IAAI;IACxBE,cAAczB,EAAEI,MAAM,GAAGmB,IAAI;AAC/B,GAAG;AAIH,OAAO,MAAMG,uBAAuB1B,EAAEQ,MAAM,CAAC;IAC3CmB,MAAMzB;IACN0B,iBAAiB5B,EACdQ,MAAM,CAAC;QACNC,IAAIT,EAAEI,MAAM,GAAGmB,IAAI;QACnBM,0BAA0B7B,EAAEI,MAAM,GAAG0B,QAAQ;IAC/C,GACCZ,QAAQ;IACXa,OAAO/B,EAAEI,MAAM,GAAGc,QAAQ;IAC1Bc,YAAYV,uBAAuBW,QAAQ,GAAGf,QAAQ;IACtDgB,cAAcf,wBAAwBD,QAAQ;AAChD,GAAG;AAIH,OAAO,MAAMiB,kBAAkBnC,EAAEQ,MAAM,CAAC;IACtCM,OAAOf;IACPgB,UAAUf,EAAEI,MAAM,GAAGC,GAAG,CAAC,GAAGC,GAAG,CAAC;AAClC,GAAG;AAIH,OAAO,MAAM8B,sBAAsBpC,EAAEQ,MAAM,CAAC;IAC1CuB,OAAO/B,EAAEI,MAAM;IACfuB,MAAMzB;IACNmC,YAAYpC,gBAAgBgC,QAAQ,GAAGf,QAAQ;AACjD,GAAG;AAIH;;;;;CAKC,GACD,OAAO,MAAMoB,wBAAwBF,oBAAoBG,MAAM,CAAC;IAC9DC,iBAAiBxC,EAAEI,MAAM,GAAGmB,IAAI,GAAGL,QAAQ;AAC7C,GAAG;AAIH;;;;;;;CAOC,GACD,OAAO,MAAMuB,4BAA4BzC,EAAEQ,MAAM,CAAC;IAChDuB,OAAO/B,EAAEI,MAAM;IACfsC,YAAY1C,EAAEI,MAAM,GAAG0B,QAAQ;IAC/Ba,aAAa3C,EAAEI,MAAM,GAAG0B,QAAQ;IAChCU,iBAAiBxC,EAAEI,MAAM,GAAGmB,IAAI;IAChCI,MAAMzB;AACR,GAAG;AAIH,OAAO,MAAM0C,wBAAwBR,oBAAoB;AAIzD,OAAO,MAAMS,mBAAmB7C,EAAEQ,MAAM,CAAC;IACvCmB,MAAMzB;IACNmC,YAAYpC,gBAAgBgC,QAAQ,GAAGf,QAAQ;IAC/CsB,iBAAiBxC,EAAEI,MAAM,GAAGmB,IAAI,GAAGL,QAAQ;AAC7C,GAAG;AAIH,OAAO,MAAM4B,mBAAmB9C,EAAEQ,MAAM,CAAC,CAAC,GAAG;AAI7C,OAAO,MAAMuC,2BAA2B/C,EAAEQ,MAAM,CAAC;IAC/CwC,kBAAkBhD,EAAEI,MAAM,GAAGC,GAAG,CAAC,GAAGC,GAAG,CAAC;IACxC2C,cAAc9C;AAChB,GAAG;AAIH,OAAO,MAAM+C,iCAAiClD,EAAEQ,MAAM,CAAC;IACrDM,OAAOf;AACT,GAAG;AAIH,OAAO,MAAMoD,iCAAiCnD,EAAEQ,MAAM,CAAC;IACrDuB,OAAO/B,EAAEI,MAAM,GAAGC,GAAG,CAAC;IACtB4C,cAAc9C;AAChB,GAAG;AAIH,OAAO,MAAMiD,qCAAqChB,oBAAoB;AAItE,OAAO,MAAMiB,+BAA+BrD,EAAEQ,MAAM,CAAC;IACnDM,OAAOf;IACPuD,cAActD,EAAEI,MAAM,GAAGmB,IAAI;IAC7BH,MAAMpB,EAAEI,MAAM,GAAGmD,KAAK,CAAC;AACzB,GAAG;AAIH,OAAO,MAAMC,mCAAmCpB,oBAAoB;AAIpE,OAAO,MAAMqB,8BAA8BzD,EAAEQ,MAAM,CAAC;IAClDM,OAAOf;IACPuD,cAActD,EAAEI,MAAM,GAAGmB,IAAI;AAC/B,GAAG;AAIH,OAAO,MAAMmC,kCAAkC1D,EAAEQ,MAAM,CAAC;IACtDqB,0BAA0B7B,EAAEI,MAAM,GAAG0B,QAAQ;AAC/C,GAAG"}

package/dist/schemas/index.d.ts

@@ -1,6 +1,6 @@
 export { AUTH_PASSWORD_RESET_SEND_REQUESTED, AUTH_USER_SIGNED_UP, type AuthEventMap, type AuthPasswordResetSendRequestedEvent, type AuthUserSignedUpEvent, authEventSchemas, authPasswordResetSendRequestedSchema, authUserSignedUpSchema, } from '../events.js';
-export { type AdminBootstrapStateDto, type AdminGrantDto, type AdministratorGrantSummaryDto, type AdministratorUserIdentityDto, type AdministratorUserLookupQueryDto, type AdministratorUserMutationResponseDto, type AdministratorUserSummaryDto, type AdminRole, adminBootstrapStateSchema, adminGrantDtoSchema, administratorGrantSummarySchema, administratorUserIdentitySchema, administratorUserLookupQuerySchema, administratorUserMutationResponseSchema, administratorUserSummarySchema, adminRoleSchema, type BootstrapAdminOwnerBodyDto, type BootstrapAdminOwnerResponseDto, bootstrapAdminOwnerBodySchema, bootstrapAdminOwnerResponseSchema, type GrantAdminRoleBodyDto, type GrantAdminRoleResponseDto, grantAdminRoleBodySchema, grantAdminRoleResponseSchema, isAdminRole, type ListAdminGrantsQueryDto, type ListAdminGrantsResponseDto, listAdminGrantsQuerySchema, listAdminGrantsResponseSchema, type ReactivateAdministratorUserBodyDto, type RevokeAdminGrantBodyDto, type RevokeAdminGrantResponseDto, type RevokeAdministratorUserSessionsBodyDto, type RevokeAdministratorUserSessionsResponseDto, reactivateAdministratorUserBodySchema, revokeAdminGrantBodySchema, revokeAdminGrantResponseSchema, revokeAdministratorUserSessionsBodySchema, revokeAdministratorUserSessionsResponseSchema, type SuspendAdministratorUserBodyDto, suspendAdministratorUserBodySchema, } from './admin.js';
-export { type ChangePasswordBodyDto, changePasswordBodySchema, emailSchema, type LoginBodyDto, type LoginMethodDto, type LoginMethodsResponseDto, type LoginResponseDto, type LogoutBodyDto, loginBodySchema, loginMethodSchema, loginMethodsResponseSchema, loginResponseSchema, logoutBodySchema, type MeResponseDto, meResponseSchema, type PasswordResetConfirmBodyDto, type PasswordResetConfirmResponseDto, type PasswordResetRequestBodyDto, passwordResetConfirmBodySchema, passwordResetConfirmResponseSchema, passwordResetRequestBodySchema, passwordSchema, type RefreshResponseDto, refreshResponseSchema, type SignupAcceptErrorDto, type SignupBodyDto, type SignupMembershipDto, type SignupResponseDto, signupAcceptErrorSchema, signupBodySchema, signupMembershipSchema, signupResponseSchema, type VerifyEmailConfirmBodyDto, type VerifyEmailConfirmResponseDto, type VerifyEmailResendBodyDto, type VerifyEmailResendResponseDto, verifyEmailConfirmBodySchema, verifyEmailConfirmResponseSchema, verifyEmailResendBodySchema, verifyEmailResendResponseSchema, } from './auth.js';
+export { type AdminBootstrapStateDto, type AdminGrantDto, type AdministratorGrantSummaryDto, type AdministratorUserIdentityDto, type AdministratorUserLookupQueryDto, type AdministratorUserMutationResponseDto, type AdministratorUserSummaryDto, type AdminRole, adminBootstrapStateSchema, adminGrantDtoSchema, administratorGrantSummarySchema, administratorUserIdentitySchema, administratorUserLookupQuerySchema, administratorUserMutationResponseSchema, administratorUserSummarySchema, adminRoleSchema, type BootstrapAdminOwnerBodyDto, type BootstrapAdminOwnerResponseDto, bootstrapAdminOwnerBodySchema, bootstrapAdminOwnerResponseSchema, type GrantAdminRoleBodyDto, type GrantAdminRoleResponseDto, grantAdminRoleBodySchema, grantAdminRoleResponseSchema, type ImpersonateUserBodyDto, impersonateUserBodySchema, isAdminRole, type ListAdminGrantsQueryDto, type ListAdminGrantsResponseDto, listAdminGrantsQuerySchema, listAdminGrantsResponseSchema, type ReactivateAdministratorUserBodyDto, type RevokeAdminGrantBodyDto, type RevokeAdminGrantResponseDto, type RevokeAdministratorUserSessionsBodyDto, type RevokeAdministratorUserSessionsResponseDto, reactivateAdministratorUserBodySchema, revokeAdminGrantBodySchema, revokeAdminGrantResponseSchema, revokeAdministratorUserSessionsBodySchema, revokeAdministratorUserSessionsResponseSchema, type SuspendAdministratorUserBodyDto, suspendAdministratorUserBodySchema, } from './admin.js';
+export { type ChangePasswordBodyDto, changePasswordBodySchema, emailSchema, type ImpersonateResponseDto, impersonateResponseSchema, type LoginBodyDto, type LoginMethodDto, type LoginMethodsResponseDto, type LoginResponseDto, type LogoutBodyDto, loginBodySchema, loginMethodSchema, loginMethodsResponseSchema, loginResponseSchema, logoutBodySchema, type MeResponseDto, meResponseSchema, type PasswordResetConfirmBodyDto, type PasswordResetConfirmResponseDto, type PasswordResetRequestBodyDto, passwordResetConfirmBodySchema, passwordResetConfirmResponseSchema, passwordResetRequestBodySchema, passwordSchema, type RefreshResponseDto, refreshResponseSchema, type SessionResponseDto, type SignupAcceptErrorDto, type SignupBodyDto, type SignupMembershipDto, type SignupResponseDto, sessionResponseSchema, signupAcceptErrorSchema, signupBodySchema, signupMembershipSchema, signupResponseSchema, type VerifyEmailConfirmBodyDto, type VerifyEmailConfirmResponseDto, type VerifyEmailResendBodyDto, type VerifyEmailResendResponseDto, verifyEmailConfirmBodySchema, verifyEmailConfirmResponseSchema, verifyEmailResendBodySchema, verifyEmailResendResponseSchema, } from './auth.js';
 export { type E2eCreateSessionBodyDto, type E2eCreateSessionResponseDto, type E2eCreateUserBodyDto, type E2eCreateUserResponseDto, type E2eSessionDto, e2eCreateSessionBodySchema, e2eCreateSessionResponseSchema, e2eCreateUserBodySchema, e2eCreateUserResponseSchema, } from './e2e.js';
 export { JOB_LEASE_TOKEN_AUDIENCE, type JobLeaseTokenClaims, jobLeaseTokenClaimsSchema, } from './job-lease-token.js';
 export { RUNNER_SESSION_TOKEN_AUDIENCE, type RunnerSessionTokenClaims, runnerSessionTokenClaimsSchema, } from './runner-session-token.js';

package/dist/schemas/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/schemas/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kCAAkC,EAClC,mBAAmB,EACnB,KAAK,YAAY,EACjB,KAAK,mCAAmC,EACxC,KAAK,qBAAqB,EAC1B,gBAAgB,EAChB,oCAAoC,EACpC,sBAAsB,GACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,KAAK,4BAA4B,EACjC,KAAK,4BAA4B,EACjC,KAAK,+BAA+B,EACpC,KAAK,oCAAoC,EACzC,KAAK,2BAA2B,EAChC,KAAK,SAAS,EACd,yBAAyB,EACzB,mBAAmB,EACnB,+BAA+B,EAC/B,+BAA+B,EAC/B,kCAAkC,EAClC,uCAAuC,EACvC,8BAA8B,EAC9B,eAAe,EACf,KAAK,0BAA0B,EAC/B,KAAK,8BAA8B,EACnC,6BAA6B,EAC7B,iCAAiC,EACjC,KAAK,qBAAqB,EAC1B,KAAK,yBAAyB,EAC9B,wBAAwB,EACxB,4BAA4B,EAC5B,WAAW,EACX,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAC/B,0BAA0B,EAC1B,6BAA6B,EAC7B,KAAK,kCAAkC,EACvC,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,EAChC,KAAK,sCAAsC,EAC3C,KAAK,0CAA0C,EAC/C,qCAAqC,EACrC,0BAA0B,EAC1B,8BAA8B,EAC9B,yCAAyC,EACzC,6CAA6C,EAC7C,KAAK,+BAA+B,EACpC,kCAAkC,GACnC,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,KAAK,qBAAqB,EAC1B,wBAAwB,EACxB,WAAW,EACX,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,eAAe,EACf,iBAAiB,EACjB,0BAA0B,EAC1B,mBAAmB,EACnB,gBAAgB,EAChB,KAAK,aAAa,EAClB,gBAAgB,EAChB,KAAK,2BAA2B,EAChC,KAAK,+BAA+B,EACpC,KAAK,2BAA2B,EAChC,8BAA8B,EAC9B,kCAAkC,EAClC,8BAA8B,EAC9B,cAAc,EACd,KAAK,kBAAkB,EACvB,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,uBAAuB,EACvB,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,KAAK,yBAAyB,EAC9B,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,EAC7B,KAAK,4BAA4B,EACjC,4BAA4B,EAC5B,gCAAgC,EAChC,2BAA2B,EAC3B,+BAA+B,GAChC,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,EAChC,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,aAAa,EAClB,0BAA0B,EAC1B,8BAA8B,EAC9B,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,wBAAwB,EACxB,KAAK,mBAAmB,EACxB,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,6BAA6B,EAC7B,KAAK,wBAAwB,EAC7B,8BAA8B,GAC/B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAC,KAAK,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAC,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/schemas/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kCAAkC,EAClC,mBAAmB,EACnB,KAAK,YAAY,EACjB,KAAK,mCAAmC,EACxC,KAAK,qBAAqB,EAC1B,gBAAgB,EAChB,oCAAoC,EACpC,sBAAsB,GACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,KAAK,4BAA4B,EACjC,KAAK,4BAA4B,EACjC,KAAK,+BAA+B,EACpC,KAAK,oCAAoC,EACzC,KAAK,2BAA2B,EAChC,KAAK,SAAS,EACd,yBAAyB,EACzB,mBAAmB,EACnB,+BAA+B,EAC/B,+BAA+B,EAC/B,kCAAkC,EAClC,uCAAuC,EACvC,8BAA8B,EAC9B,eAAe,EACf,KAAK,0BAA0B,EAC/B,KAAK,8BAA8B,EACnC,6BAA6B,EAC7B,iCAAiC,EACjC,KAAK,qBAAqB,EAC1B,KAAK,yBAAyB,EAC9B,wBAAwB,EACxB,4BAA4B,EAC5B,KAAK,sBAAsB,EAC3B,yBAAyB,EACzB,WAAW,EACX,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAC/B,0BAA0B,EAC1B,6BAA6B,EAC7B,KAAK,kCAAkC,EACvC,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,EAChC,KAAK,sCAAsC,EAC3C,KAAK,0CAA0C,EAC/C,qCAAqC,EACrC,0BAA0B,EAC1B,8BAA8B,EAC9B,yCAAyC,EACzC,6CAA6C,EAC7C,KAAK,+BAA+B,EACpC,kCAAkC,GACnC,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,KAAK,qBAAqB,EAC1B,wBAAwB,EACxB,WAAW,EACX,KAAK,sBAAsB,EAC3B,yBAAyB,EACzB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,eAAe,EACf,iBAAiB,EACjB,0BAA0B,EAC1B,mBAAmB,EACnB,gBAAgB,EAChB,KAAK,aAAa,EAClB,gBAAgB,EAChB,KAAK,2BAA2B,EAChC,KAAK,+BAA+B,EACpC,KAAK,2BAA2B,EAChC,8BAA8B,EAC9B,kCAAkC,EAClC,8BAA8B,EAC9B,cAAc,EACd,KAAK,kBAAkB,EACvB,qBAAqB,EACrB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,qBAAqB,EACrB,uBAAuB,EACvB,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,KAAK,yBAAyB,EAC9B,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,EAC7B,KAAK,4BAA4B,EACjC,4BAA4B,EAC5B,gCAAgC,EAChC,2BAA2B,EAC3B,+BAA+B,GAChC,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,EAChC,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,aAAa,EAClB,0BAA0B,EAC1B,8BAA8B,EAC9B,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,wBAAwB,EACxB,KAAK,mBAAmB,EACxB,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,6BAA6B,EAC7B,KAAK,wBAAwB,EAC7B,8BAA8B,GAC/B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAC,KAAK,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAC,MAAM,WAAW,CAAC"}

package/dist/schemas/index.js

@@ -1,6 +1,6 @@
 export { AUTH_PASSWORD_RESET_SEND_REQUESTED, AUTH_USER_SIGNED_UP, authEventSchemas, authPasswordResetSendRequestedSchema, authUserSignedUpSchema } from '../events.js';
-export { adminBootstrapStateSchema, adminGrantDtoSchema, administratorGrantSummarySchema, administratorUserIdentitySchema, administratorUserLookupQuerySchema, administratorUserMutationResponseSchema, administratorUserSummarySchema, adminRoleSchema, bootstrapAdminOwnerBodySchema, bootstrapAdminOwnerResponseSchema, grantAdminRoleBodySchema, grantAdminRoleResponseSchema, isAdminRole, listAdminGrantsQuerySchema, listAdminGrantsResponseSchema, reactivateAdministratorUserBodySchema, revokeAdminGrantBodySchema, revokeAdminGrantResponseSchema, revokeAdministratorUserSessionsBodySchema, revokeAdministratorUserSessionsResponseSchema, suspendAdministratorUserBodySchema } from './admin.js';
-export { changePasswordBodySchema, emailSchema, loginBodySchema, loginMethodSchema, loginMethodsResponseSchema, loginResponseSchema, logoutBodySchema, meResponseSchema, passwordResetConfirmBodySchema, passwordResetConfirmResponseSchema, passwordResetRequestBodySchema, passwordSchema, refreshResponseSchema, signupAcceptErrorSchema, signupBodySchema, signupMembershipSchema, signupResponseSchema, verifyEmailConfirmBodySchema, verifyEmailConfirmResponseSchema, verifyEmailResendBodySchema, verifyEmailResendResponseSchema } from './auth.js';
+export { adminBootstrapStateSchema, adminGrantDtoSchema, administratorGrantSummarySchema, administratorUserIdentitySchema, administratorUserLookupQuerySchema, administratorUserMutationResponseSchema, administratorUserSummarySchema, adminRoleSchema, bootstrapAdminOwnerBodySchema, bootstrapAdminOwnerResponseSchema, grantAdminRoleBodySchema, grantAdminRoleResponseSchema, impersonateUserBodySchema, isAdminRole, listAdminGrantsQuerySchema, listAdminGrantsResponseSchema, reactivateAdministratorUserBodySchema, revokeAdminGrantBodySchema, revokeAdminGrantResponseSchema, revokeAdministratorUserSessionsBodySchema, revokeAdministratorUserSessionsResponseSchema, suspendAdministratorUserBodySchema } from './admin.js';
+export { changePasswordBodySchema, emailSchema, impersonateResponseSchema, loginBodySchema, loginMethodSchema, loginMethodsResponseSchema, loginResponseSchema, logoutBodySchema, meResponseSchema, passwordResetConfirmBodySchema, passwordResetConfirmResponseSchema, passwordResetRequestBodySchema, passwordSchema, refreshResponseSchema, sessionResponseSchema, signupAcceptErrorSchema, signupBodySchema, signupMembershipSchema, signupResponseSchema, verifyEmailConfirmBodySchema, verifyEmailConfirmResponseSchema, verifyEmailResendBodySchema, verifyEmailResendResponseSchema } from './auth.js';
 export { e2eCreateSessionBodySchema, e2eCreateSessionResponseSchema, e2eCreateUserBodySchema, e2eCreateUserResponseSchema } from './e2e.js';
 export { JOB_LEASE_TOKEN_AUDIENCE, jobLeaseTokenClaimsSchema } from './job-lease-token.js';
 export { RUNNER_SESSION_TOKEN_AUDIENCE, runnerSessionTokenClaimsSchema } from './runner-session-token.js';

package/dist/schemas/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/schemas/index.ts"],"sourcesContent":["export {\n  AUTH_PASSWORD_RESET_SEND_REQUESTED,\n  AUTH_USER_SIGNED_UP,\n  type AuthEventMap,\n  type AuthPasswordResetSendRequestedEvent,\n  type AuthUserSignedUpEvent,\n  authEventSchemas,\n  authPasswordResetSendRequestedSchema,\n  authUserSignedUpSchema,\n} from '../events.js';\nexport {\n  type AdminBootstrapStateDto,\n  type AdminGrantDto,\n  type AdministratorGrantSummaryDto,\n  type AdministratorUserIdentityDto,\n  type AdministratorUserLookupQueryDto,\n  type AdministratorUserMutationResponseDto,\n  type AdministratorUserSummaryDto,\n  type AdminRole,\n  adminBootstrapStateSchema,\n  adminGrantDtoSchema,\n  administratorGrantSummarySchema,\n  administratorUserIdentitySchema,\n  administratorUserLookupQuerySchema,\n  administratorUserMutationResponseSchema,\n  administratorUserSummarySchema,\n  adminRoleSchema,\n  type BootstrapAdminOwnerBodyDto,\n  type BootstrapAdminOwnerResponseDto,\n  bootstrapAdminOwnerBodySchema,\n  bootstrapAdminOwnerResponseSchema,\n  type GrantAdminRoleBodyDto,\n  type GrantAdminRoleResponseDto,\n  grantAdminRoleBodySchema,\n  grantAdminRoleResponseSchema,\n  isAdminRole,\n  type ListAdminGrantsQueryDto,\n  type ListAdminGrantsResponseDto,\n  listAdminGrantsQuerySchema,\n  listAdminGrantsResponseSchema,\n  type ReactivateAdministratorUserBodyDto,\n  type RevokeAdminGrantBodyDto,\n  type RevokeAdminGrantResponseDto,\n  type RevokeAdministratorUserSessionsBodyDto,\n  type RevokeAdministratorUserSessionsResponseDto,\n  reactivateAdministratorUserBodySchema,\n  revokeAdminGrantBodySchema,\n  revokeAdminGrantResponseSchema,\n  revokeAdministratorUserSessionsBodySchema,\n  revokeAdministratorUserSessionsResponseSchema,\n  type SuspendAdministratorUserBodyDto,\n  suspendAdministratorUserBodySchema,\n} from './admin.js';\nexport {\n  type ChangePasswordBodyDto,\n  changePasswordBodySchema,\n  emailSchema,\n  type LoginBodyDto,\n  type LoginMethodDto,\n  type LoginMethodsResponseDto,\n  type LoginResponseDto,\n  type LogoutBodyDto,\n  loginBodySchema,\n  loginMethodSchema,\n  loginMethodsResponseSchema,\n  loginResponseSchema,\n  logoutBodySchema,\n  type MeResponseDto,\n  meResponseSchema,\n  type PasswordResetConfirmBodyDto,\n  type PasswordResetConfirmResponseDto,\n  type PasswordResetRequestBodyDto,\n  passwordResetConfirmBodySchema,\n  passwordResetConfirmResponseSchema,\n  passwordResetRequestBodySchema,\n  passwordSchema,\n  type RefreshResponseDto,\n  refreshResponseSchema,\n  type SignupAcceptErrorDto,\n  type SignupBodyDto,\n  type SignupMembershipDto,\n  type SignupResponseDto,\n  signupAcceptErrorSchema,\n  signupBodySchema,\n  signupMembershipSchema,\n  signupResponseSchema,\n  type VerifyEmailConfirmBodyDto,\n  type VerifyEmailConfirmResponseDto,\n  type VerifyEmailResendBodyDto,\n  type VerifyEmailResendResponseDto,\n  verifyEmailConfirmBodySchema,\n  verifyEmailConfirmResponseSchema,\n  verifyEmailResendBodySchema,\n  verifyEmailResendResponseSchema,\n} from './auth.js';\nexport {\n  type E2eCreateSessionBodyDto,\n  type E2eCreateSessionResponseDto,\n  type E2eCreateUserBodyDto,\n  type E2eCreateUserResponseDto,\n  type E2eSessionDto,\n  e2eCreateSessionBodySchema,\n  e2eCreateSessionResponseSchema,\n  e2eCreateUserBodySchema,\n  e2eCreateUserResponseSchema,\n} from './e2e.js';\nexport {\n  JOB_LEASE_TOKEN_AUDIENCE,\n  type JobLeaseTokenClaims,\n  jobLeaseTokenClaimsSchema,\n} from './job-lease-token.js';\nexport {\n  RUNNER_SESSION_TOKEN_AUDIENCE,\n  type RunnerSessionTokenClaims,\n  runnerSessionTokenClaimsSchema,\n} from './runner-session-token.js';\nexport {type UserDto, userDtoSchema, userStatusSchema} from './user.js';\n"],"names":["AUTH_PASSWORD_RESET_SEND_REQUESTED","AUTH_USER_SIGNED_UP","authEventSchemas","authPasswordResetSendRequestedSchema","authUserSignedUpSchema","adminBootstrapStateSchema","adminGrantDtoSchema","administratorGrantSummarySchema","administratorUserIdentitySchema","administratorUserLookupQuerySchema","administratorUserMutationResponseSchema","administratorUserSummarySchema","adminRoleSchema","bootstrapAdminOwnerBodySchema","bootstrapAdminOwnerResponseSchema","grantAdminRoleBodySchema","grantAdminRoleResponseSchema","isAdminRole","listAdminGrantsQuerySchema","listAdminGrantsResponseSchema","reactivateAdministratorUserBodySchema","revokeAdminGrantBodySchema","revokeAdminGrantResponseSchema","revokeAdministratorUserSessionsBodySchema","revokeAdministratorUserSessionsResponseSchema","suspendAdministratorUserBodySchema","changePasswordBodySchema","emailSchema","loginBodySchema","loginMethodSchema","loginMethodsResponseSchema","loginResponseSchema","logoutBodySchema","meResponseSchema","passwordResetConfirmBodySchema","passwordResetConfirmResponseSchema","passwordResetRequestBodySchema","passwordSchema","refreshResponseSchema","signupAcceptErrorSchema","signupBodySchema","signupMembershipSchema","signupResponseSchema","verifyEmailConfirmBodySchema","verifyEmailConfirmResponseSchema","verifyEmailResendBodySchema","verifyEmailResendResponseSchema","e2eCreateSessionBodySchema","e2eCreateSessionResponseSchema","e2eCreateUserBodySchema","e2eCreateUserResponseSchema","JOB_LEASE_TOKEN_AUDIENCE","jobLeaseTokenClaimsSchema","RUNNER_SESSION_TOKEN_AUDIENCE","runnerSessionTokenClaimsSchema","userDtoSchema","userStatusSchema"],"mappings":"AAAA,SACEA,kCAAkC,EAClCC,mBAAmB,EAInBC,gBAAgB,EAChBC,oCAAoC,EACpCC,sBAAsB,QACjB,eAAe;AACtB,SASEC,yBAAyB,EACzBC,mBAAmB,EACnBC,+BAA+B,EAC/BC,+BAA+B,EAC/BC,kCAAkC,EAClCC,uCAAuC,EACvCC,8BAA8B,EAC9BC,eAAe,EAGfC,6BAA6B,EAC7BC,iCAAiC,EAGjCC,wBAAwB,EACxBC,4BAA4B,EAC5BC,WAAW,EAGXC,0BAA0B,EAC1BC,6BAA6B,EAM7BC,qCAAqC,EACrCC,0BAA0B,EAC1BC,8BAA8B,EAC9BC,yCAAyC,EACzCC,6CAA6C,EAE7CC,kCAAkC,QAC7B,aAAa;AACpB,SAEEC,wBAAwB,EACxBC,WAAW,EAMXC,eAAe,EACfC,iBAAiB,EACjBC,0BAA0B,EAC1BC,mBAAmB,EACnBC,gBAAgB,EAEhBC,gBAAgB,EAIhBC,8BAA8B,EAC9BC,kCAAkC,EAClCC,8BAA8B,EAC9BC,cAAc,EAEdC,qBAAqB,EAKrBC,uBAAuB,EACvBC,gBAAgB,EAChBC,sBAAsB,EACtBC,oBAAoB,EAKpBC,4BAA4B,EAC5BC,gCAAgC,EAChCC,2BAA2B,EAC3BC,+BAA+B,QAC1B,YAAY;AACnB,SAMEC,0BAA0B,EAC1BC,8BAA8B,EAC9BC,uBAAuB,EACvBC,2BAA2B,QACtB,WAAW;AAClB,SACEC,wBAAwB,EAExBC,yBAAyB,QACpB,uBAAuB;AAC9B,SACEC,6BAA6B,EAE7BC,8BAA8B,QACzB,4BAA4B;AACnC,SAAsBC,aAAa,EAAEC,gBAAgB,QAAO,YAAY"}
+{"version":3,"sources":["../../src/schemas/index.ts"],"sourcesContent":["export {\n  AUTH_PASSWORD_RESET_SEND_REQUESTED,\n  AUTH_USER_SIGNED_UP,\n  type AuthEventMap,\n  type AuthPasswordResetSendRequestedEvent,\n  type AuthUserSignedUpEvent,\n  authEventSchemas,\n  authPasswordResetSendRequestedSchema,\n  authUserSignedUpSchema,\n} from '../events.js';\nexport {\n  type AdminBootstrapStateDto,\n  type AdminGrantDto,\n  type AdministratorGrantSummaryDto,\n  type AdministratorUserIdentityDto,\n  type AdministratorUserLookupQueryDto,\n  type AdministratorUserMutationResponseDto,\n  type AdministratorUserSummaryDto,\n  type AdminRole,\n  adminBootstrapStateSchema,\n  adminGrantDtoSchema,\n  administratorGrantSummarySchema,\n  administratorUserIdentitySchema,\n  administratorUserLookupQuerySchema,\n  administratorUserMutationResponseSchema,\n  administratorUserSummarySchema,\n  adminRoleSchema,\n  type BootstrapAdminOwnerBodyDto,\n  type BootstrapAdminOwnerResponseDto,\n  bootstrapAdminOwnerBodySchema,\n  bootstrapAdminOwnerResponseSchema,\n  type GrantAdminRoleBodyDto,\n  type GrantAdminRoleResponseDto,\n  grantAdminRoleBodySchema,\n  grantAdminRoleResponseSchema,\n  type ImpersonateUserBodyDto,\n  impersonateUserBodySchema,\n  isAdminRole,\n  type ListAdminGrantsQueryDto,\n  type ListAdminGrantsResponseDto,\n  listAdminGrantsQuerySchema,\n  listAdminGrantsResponseSchema,\n  type ReactivateAdministratorUserBodyDto,\n  type RevokeAdminGrantBodyDto,\n  type RevokeAdminGrantResponseDto,\n  type RevokeAdministratorUserSessionsBodyDto,\n  type RevokeAdministratorUserSessionsResponseDto,\n  reactivateAdministratorUserBodySchema,\n  revokeAdminGrantBodySchema,\n  revokeAdminGrantResponseSchema,\n  revokeAdministratorUserSessionsBodySchema,\n  revokeAdministratorUserSessionsResponseSchema,\n  type SuspendAdministratorUserBodyDto,\n  suspendAdministratorUserBodySchema,\n} from './admin.js';\nexport {\n  type ChangePasswordBodyDto,\n  changePasswordBodySchema,\n  emailSchema,\n  type ImpersonateResponseDto,\n  impersonateResponseSchema,\n  type LoginBodyDto,\n  type LoginMethodDto,\n  type LoginMethodsResponseDto,\n  type LoginResponseDto,\n  type LogoutBodyDto,\n  loginBodySchema,\n  loginMethodSchema,\n  loginMethodsResponseSchema,\n  loginResponseSchema,\n  logoutBodySchema,\n  type MeResponseDto,\n  meResponseSchema,\n  type PasswordResetConfirmBodyDto,\n  type PasswordResetConfirmResponseDto,\n  type PasswordResetRequestBodyDto,\n  passwordResetConfirmBodySchema,\n  passwordResetConfirmResponseSchema,\n  passwordResetRequestBodySchema,\n  passwordSchema,\n  type RefreshResponseDto,\n  refreshResponseSchema,\n  type SessionResponseDto,\n  type SignupAcceptErrorDto,\n  type SignupBodyDto,\n  type SignupMembershipDto,\n  type SignupResponseDto,\n  sessionResponseSchema,\n  signupAcceptErrorSchema,\n  signupBodySchema,\n  signupMembershipSchema,\n  signupResponseSchema,\n  type VerifyEmailConfirmBodyDto,\n  type VerifyEmailConfirmResponseDto,\n  type VerifyEmailResendBodyDto,\n  type VerifyEmailResendResponseDto,\n  verifyEmailConfirmBodySchema,\n  verifyEmailConfirmResponseSchema,\n  verifyEmailResendBodySchema,\n  verifyEmailResendResponseSchema,\n} from './auth.js';\nexport {\n  type E2eCreateSessionBodyDto,\n  type E2eCreateSessionResponseDto,\n  type E2eCreateUserBodyDto,\n  type E2eCreateUserResponseDto,\n  type E2eSessionDto,\n  e2eCreateSessionBodySchema,\n  e2eCreateSessionResponseSchema,\n  e2eCreateUserBodySchema,\n  e2eCreateUserResponseSchema,\n} from './e2e.js';\nexport {\n  JOB_LEASE_TOKEN_AUDIENCE,\n  type JobLeaseTokenClaims,\n  jobLeaseTokenClaimsSchema,\n} from './job-lease-token.js';\nexport {\n  RUNNER_SESSION_TOKEN_AUDIENCE,\n  type RunnerSessionTokenClaims,\n  runnerSessionTokenClaimsSchema,\n} from './runner-session-token.js';\nexport {type UserDto, userDtoSchema, userStatusSchema} from './user.js';\n"],"names":["AUTH_PASSWORD_RESET_SEND_REQUESTED","AUTH_USER_SIGNED_UP","authEventSchemas","authPasswordResetSendRequestedSchema","authUserSignedUpSchema","adminBootstrapStateSchema","adminGrantDtoSchema","administratorGrantSummarySchema","administratorUserIdentitySchema","administratorUserLookupQuerySchema","administratorUserMutationResponseSchema","administratorUserSummarySchema","adminRoleSchema","bootstrapAdminOwnerBodySchema","bootstrapAdminOwnerResponseSchema","grantAdminRoleBodySchema","grantAdminRoleResponseSchema","impersonateUserBodySchema","isAdminRole","listAdminGrantsQuerySchema","listAdminGrantsResponseSchema","reactivateAdministratorUserBodySchema","revokeAdminGrantBodySchema","revokeAdminGrantResponseSchema","revokeAdministratorUserSessionsBodySchema","revokeAdministratorUserSessionsResponseSchema","suspendAdministratorUserBodySchema","changePasswordBodySchema","emailSchema","impersonateResponseSchema","loginBodySchema","loginMethodSchema","loginMethodsResponseSchema","loginResponseSchema","logoutBodySchema","meResponseSchema","passwordResetConfirmBodySchema","passwordResetConfirmResponseSchema","passwordResetRequestBodySchema","passwordSchema","refreshResponseSchema","sessionResponseSchema","signupAcceptErrorSchema","signupBodySchema","signupMembershipSchema","signupResponseSchema","verifyEmailConfirmBodySchema","verifyEmailConfirmResponseSchema","verifyEmailResendBodySchema","verifyEmailResendResponseSchema","e2eCreateSessionBodySchema","e2eCreateSessionResponseSchema","e2eCreateUserBodySchema","e2eCreateUserResponseSchema","JOB_LEASE_TOKEN_AUDIENCE","jobLeaseTokenClaimsSchema","RUNNER_SESSION_TOKEN_AUDIENCE","runnerSessionTokenClaimsSchema","userDtoSchema","userStatusSchema"],"mappings":"AAAA,SACEA,kCAAkC,EAClCC,mBAAmB,EAInBC,gBAAgB,EAChBC,oCAAoC,EACpCC,sBAAsB,QACjB,eAAe;AACtB,SASEC,yBAAyB,EACzBC,mBAAmB,EACnBC,+BAA+B,EAC/BC,+BAA+B,EAC/BC,kCAAkC,EAClCC,uCAAuC,EACvCC,8BAA8B,EAC9BC,eAAe,EAGfC,6BAA6B,EAC7BC,iCAAiC,EAGjCC,wBAAwB,EACxBC,4BAA4B,EAE5BC,yBAAyB,EACzBC,WAAW,EAGXC,0BAA0B,EAC1BC,6BAA6B,EAM7BC,qCAAqC,EACrCC,0BAA0B,EAC1BC,8BAA8B,EAC9BC,yCAAyC,EACzCC,6CAA6C,EAE7CC,kCAAkC,QAC7B,aAAa;AACpB,SAEEC,wBAAwB,EACxBC,WAAW,EAEXC,yBAAyB,EAMzBC,eAAe,EACfC,iBAAiB,EACjBC,0BAA0B,EAC1BC,mBAAmB,EACnBC,gBAAgB,EAEhBC,gBAAgB,EAIhBC,8BAA8B,EAC9BC,kCAAkC,EAClCC,8BAA8B,EAC9BC,cAAc,EAEdC,qBAAqB,EAMrBC,qBAAqB,EACrBC,uBAAuB,EACvBC,gBAAgB,EAChBC,sBAAsB,EACtBC,oBAAoB,EAKpBC,4BAA4B,EAC5BC,gCAAgC,EAChCC,2BAA2B,EAC3BC,+BAA+B,QAC1B,YAAY;AACnB,SAMEC,0BAA0B,EAC1BC,8BAA8B,EAC9BC,uBAAuB,EACvBC,2BAA2B,QACtB,WAAW;AAClB,SACEC,wBAAwB,EAExBC,yBAAyB,QACpB,uBAAuB;AAC9B,SACEC,6BAA6B,EAE7BC,8BAA8B,QACzB,4BAA4B;AACnC,SAAsBC,aAAa,EAAEC,gBAAgB,QAAO,YAAY"}

package/dist/schemas/runner-session-token.d.ts

@@ -11,6 +11,7 @@ export declare const runnerSessionTokenClaimsSchema: z.ZodObject<{
     scope: z.ZodLiteral<"workspace">;
     labels: z.ZodArray<z.ZodString>;
     maxClaims: z.ZodNullable<z.ZodNumber>;
+    lifecycleCapabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
     aud: z.ZodLiteral<"runner-session">;
     iat: z.ZodNumber;
     exp: z.ZodNumber;

package/dist/schemas/runner-session-token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runner-session-token.d.ts","sourceRoot":"","sources":["../../src/schemas/runner-session-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAEtB;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,mBAAmB,CAAC;AAE9D,eAAO,MAAM,8BAA8B;;;;;;;;;iBASzC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC"}
+{"version":3,"file":"runner-session-token.d.ts","sourceRoot":"","sources":["../../src/schemas/runner-session-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAEtB;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,mBAAmB,CAAC;AAE9D,eAAO,MAAM,8BAA8B;;;;;;;;;;iBAUzC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC"}

package/dist/schemas/runner-session-token.js

@@ -10,6 +10,7 @@ export const runnerSessionTokenClaimsSchema = z.object({
     scope: z.literal('workspace'),
     labels: z.array(z.string()).min(1),
     maxClaims: z.number().int().positive().nullable(),
+    lifecycleCapabilities: z.array(z.string()).max(8).optional(),
     aud: z.literal(RUNNER_SESSION_TOKEN_AUDIENCE),
     iat: z.number().int(),
     exp: z.number().int()

package/dist/schemas/runner-session-token.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/schemas/runner-session-token.ts"],"sourcesContent":["import {z} from 'zod';\n\n/**\n * Audience claim binding a token to runner-session data-plane auth. Distinct from\n * job lease tokens (separate secret) so session tokens and per-job capabilities\n * stay non-interchangeable.\n */\nexport const RUNNER_SESSION_TOKEN_AUDIENCE = 'runner-session';\n\nexport const runnerSessionTokenClaimsSchema = z.object({\n  runnerSessionId: z.string().uuid(),\n  workspaceId: z.string().uuid(),\n  scope: z.literal('workspace'),\n  labels: z.array(z.string()).min(1),\n  maxClaims: z.number().int().positive().nullable(),\n  aud: z.literal(RUNNER_SESSION_TOKEN_AUDIENCE),\n  iat: z.number().int(),\n  exp: z.number().int(),\n});\n\nexport type RunnerSessionTokenClaims = z.infer<typeof runnerSessionTokenClaimsSchema>;\n"],"names":["z","RUNNER_SESSION_TOKEN_AUDIENCE","runnerSessionTokenClaimsSchema","object","runnerSessionId","string","uuid","workspaceId","scope","literal","labels","array","min","maxClaims","number","int","positive","nullable","aud","iat","exp"],"mappings":"AAAA,SAAQA,CAAC,QAAO,MAAM;AAEtB;;;;CAIC,GACD,OAAO,MAAMC,gCAAgC,iBAAiB;AAE9D,OAAO,MAAMC,iCAAiCF,EAAEG,MAAM,CAAC;IACrDC,iBAAiBJ,EAAEK,MAAM,GAAGC,IAAI;IAChCC,aAAaP,EAAEK,MAAM,GAAGC,IAAI;IAC5BE,OAAOR,EAAES,OAAO,CAAC;IACjBC,QAAQV,EAAEW,KAAK,CAACX,EAAEK,MAAM,IAAIO,GAAG,CAAC;IAChCC,WAAWb,EAAEc,MAAM,GAAGC,GAAG,GAAGC,QAAQ,GAAGC,QAAQ;IAC/CC,KAAKlB,EAAES,OAAO,CAACR;IACfkB,KAAKnB,EAAEc,MAAM,GAAGC,GAAG;IACnBK,KAAKpB,EAAEc,MAAM,GAAGC,GAAG;AACrB,GAAG"}
+{"version":3,"sources":["../../src/schemas/runner-session-token.ts"],"sourcesContent":["import {z} from 'zod';\n\n/**\n * Audience claim binding a token to runner-session data-plane auth. Distinct from\n * job lease tokens (separate secret) so session tokens and per-job capabilities\n * stay non-interchangeable.\n */\nexport const RUNNER_SESSION_TOKEN_AUDIENCE = 'runner-session';\n\nexport const runnerSessionTokenClaimsSchema = z.object({\n  runnerSessionId: z.string().uuid(),\n  workspaceId: z.string().uuid(),\n  scope: z.literal('workspace'),\n  labels: z.array(z.string()).min(1),\n  maxClaims: z.number().int().positive().nullable(),\n  lifecycleCapabilities: z.array(z.string()).max(8).optional(),\n  aud: z.literal(RUNNER_SESSION_TOKEN_AUDIENCE),\n  iat: z.number().int(),\n  exp: z.number().int(),\n});\n\nexport type RunnerSessionTokenClaims = z.infer<typeof runnerSessionTokenClaimsSchema>;\n"],"names":["z","RUNNER_SESSION_TOKEN_AUDIENCE","runnerSessionTokenClaimsSchema","object","runnerSessionId","string","uuid","workspaceId","scope","literal","labels","array","min","maxClaims","number","int","positive","nullable","lifecycleCapabilities","max","optional","aud","iat","exp"],"mappings":"AAAA,SAAQA,CAAC,QAAO,MAAM;AAEtB;;;;CAIC,GACD,OAAO,MAAMC,gCAAgC,iBAAiB;AAE9D,OAAO,MAAMC,iCAAiCF,EAAEG,MAAM,CAAC;IACrDC,iBAAiBJ,EAAEK,MAAM,GAAGC,IAAI;IAChCC,aAAaP,EAAEK,MAAM,GAAGC,IAAI;IAC5BE,OAAOR,EAAES,OAAO,CAAC;IACjBC,QAAQV,EAAEW,KAAK,CAACX,EAAEK,MAAM,IAAIO,GAAG,CAAC;IAChCC,WAAWb,EAAEc,MAAM,GAAGC,GAAG,GAAGC,QAAQ,GAAGC,QAAQ;IAC/CC,uBAAuBlB,EAAEW,KAAK,CAACX,EAAEK,MAAM,IAAIc,GAAG,CAAC,GAAGC,QAAQ;IAC1DC,KAAKrB,EAAES,OAAO,CAACR;IACfqB,KAAKtB,EAAEc,MAAM,GAAGC,GAAG;IACnBQ,KAAKvB,EAAEc,MAAM,GAAGC,GAAG;AACrB,GAAG"}