@shipfox/api-auth-dto 9.0.2 → 9.3.0

package/.turbo/turbo-build.log

@@ -1,2 +1,2 @@
 $ shipfox-swc
-Successfully compiled: 9 files with swc (78.46ms)
+Successfully compiled: 10 files with swc (304ms)

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # @shipfox/api-auth-dto
 
+## 9.3.0
+
+### Minor Changes
+
+- 10cf63c: Add first-owner bootstrap and administrator grant management routes.
+
+## 9.2.0
+
+### Minor Changes
+
+- 456c884: Add Auth-owned local administrator grants and server-side role evaluation.
+
+### Patch Changes
+
+- Updated dependencies [36d8338]
+  - @shipfox/api-common-dto@9.2.0
+
 ## 9.0.2
 
 ### Patch Changes

package/dist/inter-module.d.ts

@@ -32,6 +32,44 @@ export declare const authInterModuleContract: import("@shipfox/inter-module").In
                 token: z.ZodString;
             }, z.core.$strip>;
         };
+        readonly getCurrentAdminRole: {
+            readonly input: z.ZodObject<{
+                userId: z.ZodString;
+            }, z.core.$strip>;
+            readonly output: z.ZodObject<{
+                role: z.ZodNullable<z.ZodEnum<{
+                    "admin-observer": "admin-observer";
+                    "admin-operator": "admin-operator";
+                    "admin-owner": "admin-owner";
+                }>>;
+            }, z.core.$strip>;
+        };
+        readonly requireAdminRole: {
+            readonly input: z.ZodObject<{
+                userId: z.ZodString;
+                minimumRole: z.ZodEnum<{
+                    "admin-observer": "admin-observer";
+                    "admin-operator": "admin-operator";
+                    "admin-owner": "admin-owner";
+                }>;
+            }, z.core.$strip>;
+            readonly output: z.ZodObject<{
+                role: z.ZodEnum<{
+                    "admin-observer": "admin-observer";
+                    "admin-operator": "admin-operator";
+                    "admin-owner": "admin-owner";
+                }>;
+            }, z.core.$strip>;
+            readonly errors: {
+                readonly 'admin-role-required': z.ZodObject<{
+                    requiredRole: z.ZodEnum<{
+                        "admin-observer": "admin-observer";
+                        "admin-operator": "admin-operator";
+                        "admin-owner": "admin-owner";
+                    }>;
+                }, z.core.$strip>;
+            };
+        };
     };
 }>;
 export type AuthInterModuleClient = InterModuleClient<typeof authInterModuleContract>;

package/dist/inter-module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"inter-module.d.ts","sourceRoot":"","sources":["../src/inter-module.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4B,KAAK,iBAAiB,EAAC,MAAM,uBAAuB,CAAC;AACxF,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAWtB,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAYlC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,iBAAiB,CAAC,OAAO,uBAAuB,CAAC,CAAC"}
+{"version":3,"file":"inter-module.d.ts","sourceRoot":"","sources":["../src/inter-module.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4B,KAAK,iBAAiB,EAAC,MAAM,uBAAuB,CAAC;AACxF,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAYtB,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0BlC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,iBAAiB,CAAC,OAAO,uBAAuB,CAAC,CAAC"}

package/dist/inter-module.js

@@ -1,5 +1,6 @@
 import { defineInterModuleContract } from '@shipfox/inter-module';
 import { z } from 'zod';
+import { adminRoleSchema } from './schemas/admin.js';
 import { jobLeaseTokenClaimsSchema } from './schemas/job-lease-token.js';
 import { runnerSessionTokenClaimsSchema } from './schemas/runner-session-token.js';
 const runnerSessionClaimsSchema = runnerSessionTokenClaimsSchema.omit({
@@ -26,6 +27,28 @@ export const authInterModuleContract = defineInterModuleContract({
             output: z.object({
                 token: z.string().min(1)
             })
+        },
+        getCurrentAdminRole: {
+            input: z.object({
+                userId: z.string().uuid()
+            }),
+            output: z.object({
+                role: adminRoleSchema.nullable()
+            })
+        },
+        requireAdminRole: {
+            input: z.object({
+                userId: z.string().uuid(),
+                minimumRole: adminRoleSchema
+            }),
+            output: z.object({
+                role: adminRoleSchema
+            }),
+            errors: {
+                'admin-role-required': z.object({
+                    requiredRole: adminRoleSchema
+                })
+            }
         }
     }
 });

package/dist/inter-module.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/inter-module.ts"],"sourcesContent":["import {defineInterModuleContract, type InterModuleClient} from '@shipfox/inter-module';\nimport {z} from 'zod';\nimport {jobLeaseTokenClaimsSchema} from './schemas/job-lease-token.js';\nimport {runnerSessionTokenClaimsSchema} from './schemas/runner-session-token.js';\n\nconst runnerSessionClaimsSchema = runnerSessionTokenClaimsSchema.omit({\n  aud: true,\n  iat: true,\n  exp: true,\n});\nconst jobLeaseClaimsSchema = jobLeaseTokenClaimsSchema.omit({aud: true, iat: true, exp: true});\n\nexport const authInterModuleContract = defineInterModuleContract({\n  module: 'auth',\n  methods: {\n    mintRunnerSessionToken: {\n      input: runnerSessionClaimsSchema,\n      output: z.object({token: z.string().min(1)}),\n    },\n    mintJobLeaseToken: {\n      input: jobLeaseClaimsSchema,\n      output: z.object({token: z.string().min(1)}),\n    },\n  },\n});\n\nexport type AuthInterModuleClient = InterModuleClient<typeof authInterModuleContract>;\n"],"names":["defineInterModuleContract","z","jobLeaseTokenClaimsSchema","runnerSessionTokenClaimsSchema","runnerSessionClaimsSchema","omit","aud","iat","exp","jobLeaseClaimsSchema","authInterModuleContract","module","methods","mintRunnerSessionToken","input","output","object","token","string","min","mintJobLeaseToken"],"mappings":"AAAA,SAAQA,yBAAyB,QAA+B,wBAAwB;AACxF,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,yBAAyB,QAAO,+BAA+B;AACvE,SAAQC,8BAA8B,QAAO,oCAAoC;AAEjF,MAAMC,4BAA4BD,+BAA+BE,IAAI,CAAC;IACpEC,KAAK;IACLC,KAAK;IACLC,KAAK;AACP;AACA,MAAMC,uBAAuBP,0BAA0BG,IAAI,CAAC;IAACC,KAAK;IAAMC,KAAK;IAAMC,KAAK;AAAI;AAE5F,OAAO,MAAME,0BAA0BV,0BAA0B;IAC/DW,QAAQ;IACRC,SAAS;QACPC,wBAAwB;YACtBC,OAAOV;YACPW,QAAQd,EAAEe,MAAM,CAAC;gBAACC,OAAOhB,EAAEiB,MAAM,GAAGC,GAAG,CAAC;YAAE;QAC5C;QACAC,mBAAmB;YACjBN,OAAOL;YACPM,QAAQd,EAAEe,MAAM,CAAC;gBAACC,OAAOhB,EAAEiB,MAAM,GAAGC,GAAG,CAAC;YAAE;QAC5C;IACF;AACF,GAAG"}
+{"version":3,"sources":["../src/inter-module.ts"],"sourcesContent":["import {defineInterModuleContract, type InterModuleClient} from '@shipfox/inter-module';\nimport {z} from 'zod';\nimport {adminRoleSchema} from './schemas/admin.js';\nimport {jobLeaseTokenClaimsSchema} from './schemas/job-lease-token.js';\nimport {runnerSessionTokenClaimsSchema} from './schemas/runner-session-token.js';\n\nconst runnerSessionClaimsSchema = runnerSessionTokenClaimsSchema.omit({\n  aud: true,\n  iat: true,\n  exp: true,\n});\nconst jobLeaseClaimsSchema = jobLeaseTokenClaimsSchema.omit({aud: true, iat: true, exp: true});\n\nexport const authInterModuleContract = defineInterModuleContract({\n  module: 'auth',\n  methods: {\n    mintRunnerSessionToken: {\n      input: runnerSessionClaimsSchema,\n      output: z.object({token: z.string().min(1)}),\n    },\n    mintJobLeaseToken: {\n      input: jobLeaseClaimsSchema,\n      output: z.object({token: z.string().min(1)}),\n    },\n    getCurrentAdminRole: {\n      input: z.object({userId: z.string().uuid()}),\n      output: z.object({role: adminRoleSchema.nullable()}),\n    },\n    requireAdminRole: {\n      input: z.object({\n        userId: z.string().uuid(),\n        minimumRole: adminRoleSchema,\n      }),\n      output: z.object({role: adminRoleSchema}),\n      errors: {\n        'admin-role-required': z.object({requiredRole: adminRoleSchema}),\n      },\n    },\n  },\n});\n\nexport type AuthInterModuleClient = InterModuleClient<typeof authInterModuleContract>;\n"],"names":["defineInterModuleContract","z","adminRoleSchema","jobLeaseTokenClaimsSchema","runnerSessionTokenClaimsSchema","runnerSessionClaimsSchema","omit","aud","iat","exp","jobLeaseClaimsSchema","authInterModuleContract","module","methods","mintRunnerSessionToken","input","output","object","token","string","min","mintJobLeaseToken","getCurrentAdminRole","userId","uuid","role","nullable","requireAdminRole","minimumRole","errors","requiredRole"],"mappings":"AAAA,SAAQA,yBAAyB,QAA+B,wBAAwB;AACxF,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,eAAe,QAAO,qBAAqB;AACnD,SAAQC,yBAAyB,QAAO,+BAA+B;AACvE,SAAQC,8BAA8B,QAAO,oCAAoC;AAEjF,MAAMC,4BAA4BD,+BAA+BE,IAAI,CAAC;IACpEC,KAAK;IACLC,KAAK;IACLC,KAAK;AACP;AACA,MAAMC,uBAAuBP,0BAA0BG,IAAI,CAAC;IAACC,KAAK;IAAMC,KAAK;IAAMC,KAAK;AAAI;AAE5F,OAAO,MAAME,0BAA0BX,0BAA0B;IAC/DY,QAAQ;IACRC,SAAS;QACPC,wBAAwB;YACtBC,OAAOV;YACPW,QAAQf,EAAEgB,MAAM,CAAC;gBAACC,OAAOjB,EAAEkB,MAAM,GAAGC,GAAG,CAAC;YAAE;QAC5C;QACAC,mBAAmB;YACjBN,OAAOL;YACPM,QAAQf,EAAEgB,MAAM,CAAC;gBAACC,OAAOjB,EAAEkB,MAAM,GAAGC,GAAG,CAAC;YAAE;QAC5C;QACAE,qBAAqB;YACnBP,OAAOd,EAAEgB,MAAM,CAAC;gBAACM,QAAQtB,EAAEkB,MAAM,GAAGK,IAAI;YAAE;YAC1CR,QAAQf,EAAEgB,MAAM,CAAC;gBAACQ,MAAMvB,gBAAgBwB,QAAQ;YAAE;QACpD;QACAC,kBAAkB;YAChBZ,OAAOd,EAAEgB,MAAM,CAAC;gBACdM,QAAQtB,EAAEkB,MAAM,GAAGK,IAAI;gBACvBI,aAAa1B;YACf;YACAc,QAAQf,EAAEgB,MAAM,CAAC;gBAACQ,MAAMvB;YAAe;YACvC2B,QAAQ;gBACN,uBAAuB5B,EAAEgB,MAAM,CAAC;oBAACa,cAAc5B;gBAAe;YAChE;QACF;IACF;AACF,GAAG"}

package/dist/schemas/admin.d.ts

@@ -0,0 +1,93 @@
+import { z } from 'zod';
+export declare const adminRoleSchema: z.ZodEnum<{
+    "admin-observer": "admin-observer";
+    "admin-operator": "admin-operator";
+    "admin-owner": "admin-owner";
+}>;
+export type AdminRole = z.infer<typeof adminRoleSchema>;
+export declare const adminGrantDtoSchema: z.ZodObject<{
+    id: z.ZodString;
+    user_id: z.ZodString;
+    role: z.ZodEnum<{
+        "admin-observer": "admin-observer";
+        "admin-operator": "admin-operator";
+        "admin-owner": "admin-owner";
+    }>;
+    revoked_at: z.ZodNullable<z.ZodString>;
+    created_at: z.ZodString;
+    updated_at: z.ZodString;
+}, z.core.$strip>;
+export type AdminGrantDto = z.infer<typeof adminGrantDtoSchema>;
+export declare const listAdminGrantsResponseSchema: z.ZodObject<{
+    grants: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        user_id: z.ZodString;
+        role: z.ZodEnum<{
+            "admin-observer": "admin-observer";
+            "admin-operator": "admin-operator";
+            "admin-owner": "admin-owner";
+        }>;
+        revoked_at: z.ZodNullable<z.ZodString>;
+        created_at: z.ZodString;
+        updated_at: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type ListAdminGrantsResponseDto = z.infer<typeof listAdminGrantsResponseSchema>;
+export declare const bootstrapAdminOwnerBodySchema: z.ZodObject<{
+    bootstrap_token: z.ZodString;
+}, z.core.$strip>;
+export type BootstrapAdminOwnerBodyDto = z.infer<typeof bootstrapAdminOwnerBodySchema>;
+export declare const bootstrapAdminOwnerResponseSchema: z.ZodObject<{
+    id: z.ZodString;
+    user_id: z.ZodString;
+    role: z.ZodEnum<{
+        "admin-observer": "admin-observer";
+        "admin-operator": "admin-operator";
+        "admin-owner": "admin-owner";
+    }>;
+    revoked_at: z.ZodNullable<z.ZodString>;
+    created_at: z.ZodString;
+    updated_at: z.ZodString;
+}, z.core.$strip>;
+export type BootstrapAdminOwnerResponseDto = z.infer<typeof bootstrapAdminOwnerResponseSchema>;
+export declare const grantAdminRoleBodySchema: z.ZodObject<{
+    user_id: z.ZodString;
+    role: z.ZodEnum<{
+        "admin-observer": "admin-observer";
+        "admin-operator": "admin-operator";
+        "admin-owner": "admin-owner";
+    }>;
+    reason: z.ZodString;
+}, z.core.$strip>;
+export type GrantAdminRoleBodyDto = z.infer<typeof grantAdminRoleBodySchema>;
+export declare const grantAdminRoleResponseSchema: z.ZodObject<{
+    id: z.ZodString;
+    user_id: z.ZodString;
+    role: z.ZodEnum<{
+        "admin-observer": "admin-observer";
+        "admin-operator": "admin-operator";
+        "admin-owner": "admin-owner";
+    }>;
+    revoked_at: z.ZodNullable<z.ZodString>;
+    created_at: z.ZodString;
+    updated_at: z.ZodString;
+}, z.core.$strip>;
+export type GrantAdminRoleResponseDto = z.infer<typeof grantAdminRoleResponseSchema>;
+export declare const revokeAdminGrantBodySchema: z.ZodObject<{
+    reason: z.ZodString;
+}, z.core.$strip>;
+export type RevokeAdminGrantBodyDto = z.infer<typeof revokeAdminGrantBodySchema>;
+export declare const revokeAdminGrantResponseSchema: z.ZodObject<{
+    id: z.ZodString;
+    user_id: z.ZodString;
+    role: z.ZodEnum<{
+        "admin-observer": "admin-observer";
+        "admin-operator": "admin-operator";
+        "admin-owner": "admin-owner";
+    }>;
+    revoked_at: z.ZodNullable<z.ZodString>;
+    created_at: z.ZodString;
+    updated_at: z.ZodString;
+}, z.core.$strip>;
+export type RevokeAdminGrantResponseDto = z.infer<typeof revokeAdminGrantResponseSchema>;
+//# sourceMappingURL=admin.d.ts.map

package/dist/schemas/admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../src/schemas/admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAEtB,eAAO,MAAM,eAAe;;;;EAA8D,CAAC;AAE3F,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAYxD,eAAO,MAAM,mBAAmB;;;;;;;;;;;iBAO9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;iBAExC,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEvF,eAAO,MAAM,6BAA6B;;iBAExC,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEvF,eAAO,MAAM,iCAAiC;;;;;;;;;;;iBAAsB,CAAC;AAErE,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE/F,eAAO,MAAM,wBAAwB;;;;;;;;iBAInC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE7E,eAAO,MAAM,4BAA4B;;;;;;;;;;;iBAAsB,CAAC;AAEhE,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAErF,eAAO,MAAM,0BAA0B;;iBAErC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAEjF,eAAO,MAAM,8BAA8B;;;;;;;;;;;iBAAsB,CAAC;AAElE,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC"}

package/dist/schemas/admin.js

@@ -0,0 +1,38 @@
+import { z } from 'zod';
+export const adminRoleSchema = z.enum([
+    'admin-observer',
+    'admin-operator',
+    'admin-owner'
+]);
+const timestampSchema = z.string().datetime();
+const CONTROL_OR_FORMAT_CHARACTER_RE = /[\p{Cc}\p{Cf}]/u;
+const reasonSchema = z.string().min(1).max(512).refine((value)=>!CONTROL_OR_FORMAT_CHARACTER_RE.test(value), {
+    message: 'must not contain control or format characters'
+});
+export const adminGrantDtoSchema = z.object({
+    id: z.string().uuid(),
+    user_id: z.string().uuid(),
+    role: adminRoleSchema,
+    revoked_at: timestampSchema.nullable(),
+    created_at: timestampSchema,
+    updated_at: timestampSchema
+});
+export const listAdminGrantsResponseSchema = z.object({
+    grants: z.array(adminGrantDtoSchema)
+});
+export const bootstrapAdminOwnerBodySchema = z.object({
+    bootstrap_token: z.string().min(1).max(512)
+});
+export const bootstrapAdminOwnerResponseSchema = adminGrantDtoSchema;
+export const grantAdminRoleBodySchema = z.object({
+    user_id: z.string().uuid(),
+    role: adminRoleSchema,
+    reason: reasonSchema
+});
+export const grantAdminRoleResponseSchema = adminGrantDtoSchema;
+export const revokeAdminGrantBodySchema = z.object({
+    reason: reasonSchema
+});
+export const revokeAdminGrantResponseSchema = adminGrantDtoSchema;
+
+//# sourceMappingURL=admin.js.map

package/dist/schemas/admin.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/schemas/admin.ts"],"sourcesContent":["import {z} from 'zod';\n\nexport const adminRoleSchema = z.enum(['admin-observer', 'admin-operator', 'admin-owner']);\n\nexport type AdminRole = z.infer<typeof adminRoleSchema>;\n\nconst timestampSchema = z.string().datetime();\nconst CONTROL_OR_FORMAT_CHARACTER_RE = /[\\p{Cc}\\p{Cf}]/u;\nconst reasonSchema = z\n  .string()\n  .min(1)\n  .max(512)\n  .refine((value) => !CONTROL_OR_FORMAT_CHARACTER_RE.test(value), {\n    message: 'must not contain control or format characters',\n  });\n\nexport const adminGrantDtoSchema = z.object({\n  id: z.string().uuid(),\n  user_id: z.string().uuid(),\n  role: adminRoleSchema,\n  revoked_at: timestampSchema.nullable(),\n  created_at: timestampSchema,\n  updated_at: timestampSchema,\n});\n\nexport type AdminGrantDto = z.infer<typeof adminGrantDtoSchema>;\n\nexport const listAdminGrantsResponseSchema = z.object({\n  grants: z.array(adminGrantDtoSchema),\n});\n\nexport type ListAdminGrantsResponseDto = z.infer<typeof listAdminGrantsResponseSchema>;\n\nexport const bootstrapAdminOwnerBodySchema = z.object({\n  bootstrap_token: z.string().min(1).max(512),\n});\n\nexport type BootstrapAdminOwnerBodyDto = z.infer<typeof bootstrapAdminOwnerBodySchema>;\n\nexport const bootstrapAdminOwnerResponseSchema = adminGrantDtoSchema;\n\nexport type BootstrapAdminOwnerResponseDto = z.infer<typeof bootstrapAdminOwnerResponseSchema>;\n\nexport const grantAdminRoleBodySchema = z.object({\n  user_id: z.string().uuid(),\n  role: adminRoleSchema,\n  reason: reasonSchema,\n});\n\nexport type GrantAdminRoleBodyDto = z.infer<typeof grantAdminRoleBodySchema>;\n\nexport const grantAdminRoleResponseSchema = adminGrantDtoSchema;\n\nexport type GrantAdminRoleResponseDto = z.infer<typeof grantAdminRoleResponseSchema>;\n\nexport const revokeAdminGrantBodySchema = z.object({\n  reason: reasonSchema,\n});\n\nexport type RevokeAdminGrantBodyDto = z.infer<typeof revokeAdminGrantBodySchema>;\n\nexport const revokeAdminGrantResponseSchema = adminGrantDtoSchema;\n\nexport type RevokeAdminGrantResponseDto = z.infer<typeof revokeAdminGrantResponseSchema>;\n"],"names":["z","adminRoleSchema","enum","timestampSchema","string","datetime","CONTROL_OR_FORMAT_CHARACTER_RE","reasonSchema","min","max","refine","value","test","message","adminGrantDtoSchema","object","id","uuid","user_id","role","revoked_at","nullable","created_at","updated_at","listAdminGrantsResponseSchema","grants","array","bootstrapAdminOwnerBodySchema","bootstrap_token","bootstrapAdminOwnerResponseSchema","grantAdminRoleBodySchema","reason","grantAdminRoleResponseSchema","revokeAdminGrantBodySchema","revokeAdminGrantResponseSchema"],"mappings":"AAAA,SAAQA,CAAC,QAAO,MAAM;AAEtB,OAAO,MAAMC,kBAAkBD,EAAEE,IAAI,CAAC;IAAC;IAAkB;IAAkB;CAAc,EAAE;AAI3F,MAAMC,kBAAkBH,EAAEI,MAAM,GAAGC,QAAQ;AAC3C,MAAMC,iCAAiC;AACvC,MAAMC,eAAeP,EAClBI,MAAM,GACNI,GAAG,CAAC,GACJC,GAAG,CAAC,KACJC,MAAM,CAAC,CAACC,QAAU,CAACL,+BAA+BM,IAAI,CAACD,QAAQ;IAC9DE,SAAS;AACX;AAEF,OAAO,MAAMC,sBAAsBd,EAAEe,MAAM,CAAC;IAC1CC,IAAIhB,EAAEI,MAAM,GAAGa,IAAI;IACnBC,SAASlB,EAAEI,MAAM,GAAGa,IAAI;IACxBE,MAAMlB;IACNmB,YAAYjB,gBAAgBkB,QAAQ;IACpCC,YAAYnB;IACZoB,YAAYpB;AACd,GAAG;AAIH,OAAO,MAAMqB,gCAAgCxB,EAAEe,MAAM,CAAC;IACpDU,QAAQzB,EAAE0B,KAAK,CAACZ;AAClB,GAAG;AAIH,OAAO,MAAMa,gCAAgC3B,EAAEe,MAAM,CAAC;IACpDa,iBAAiB5B,EAAEI,MAAM,GAAGI,GAAG,CAAC,GAAGC,GAAG,CAAC;AACzC,GAAG;AAIH,OAAO,MAAMoB,oCAAoCf,oBAAoB;AAIrE,OAAO,MAAMgB,2BAA2B9B,EAAEe,MAAM,CAAC;IAC/CG,SAASlB,EAAEI,MAAM,GAAGa,IAAI;IACxBE,MAAMlB;IACN8B,QAAQxB;AACV,GAAG;AAIH,OAAO,MAAMyB,+BAA+BlB,oBAAoB;AAIhE,OAAO,MAAMmB,6BAA6BjC,EAAEe,MAAM,CAAC;IACjDgB,QAAQxB;AACV,GAAG;AAIH,OAAO,MAAM2B,iCAAiCpB,oBAAoB"}

package/dist/schemas/auth.d.ts

@@ -80,6 +80,11 @@ export declare const loginResponseSchema: z.ZodObject<{
         created_at: z.ZodString;
         updated_at: z.ZodString;
     }, z.core.$strip>;
+    admin_role: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+        "admin-observer": "admin-observer";
+        "admin-operator": "admin-operator";
+        "admin-owner": "admin-owner";
+    }>>>;
 }, z.core.$strip>;
 export type LoginResponseDto = z.infer<typeof loginResponseSchema>;
 export declare const refreshResponseSchema: z.ZodObject<{
@@ -97,6 +102,11 @@ export declare const refreshResponseSchema: z.ZodObject<{
         created_at: z.ZodString;
         updated_at: z.ZodString;
     }, z.core.$strip>;
+    admin_role: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+        "admin-observer": "admin-observer";
+        "admin-operator": "admin-operator";
+        "admin-owner": "admin-owner";
+    }>>>;
 }, z.core.$strip>;
 export type RefreshResponseDto = z.infer<typeof refreshResponseSchema>;
 export declare const meResponseSchema: z.ZodObject<{
@@ -113,6 +123,11 @@ export declare const meResponseSchema: z.ZodObject<{
         created_at: z.ZodString;
         updated_at: z.ZodString;
     }, z.core.$strip>;
+    admin_role: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+        "admin-observer": "admin-observer";
+        "admin-operator": "admin-operator";
+        "admin-owner": "admin-owner";
+    }>>>;
 }, z.core.$strip>;
 export type MeResponseDto = z.infer<typeof meResponseSchema>;
 export declare const logoutBodySchema: z.ZodObject<{}, z.core.$strip>;
@@ -146,6 +161,11 @@ export declare const passwordResetConfirmResponseSchema: z.ZodObject<{
         created_at: z.ZodString;
         updated_at: z.ZodString;
     }, z.core.$strip>;
+    admin_role: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+        "admin-observer": "admin-observer";
+        "admin-operator": "admin-operator";
+        "admin-owner": "admin-owner";
+    }>>>;
 }, z.core.$strip>;
 export type PasswordResetConfirmResponseDto = z.infer<typeof passwordResetConfirmResponseSchema>;
 export declare const verifyEmailConfirmBodySchema: z.ZodObject<{
@@ -169,6 +189,11 @@ export declare const verifyEmailConfirmResponseSchema: z.ZodObject<{
         created_at: z.ZodString;
         updated_at: z.ZodString;
     }, z.core.$strip>;
+    admin_role: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+        "admin-observer": "admin-observer";
+        "admin-operator": "admin-operator";
+        "admin-owner": "admin-owner";
+    }>>>;
 }, z.core.$strip>;
 export type VerifyEmailConfirmResponseDto = z.infer<typeof verifyEmailConfirmResponseSchema>;
 export declare const verifyEmailResendBodySchema: z.ZodObject<{

package/dist/schemas/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/schemas/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,WAAW,EAAC,MAAM,yBAAyB,CAAC;AACvE,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAGtB,eAAO,MAAM,cAAc,aAA8B,CAAC;AAC1D,OAAO,EAAC,WAAW,EAAC,CAAC;AAErB,eAAO,MAAM,iBAAiB;;iBAE5B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE/D,eAAO,MAAM,0BAA0B;;;;iBAErC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAEjF,eAAO,MAAM,gBAAgB;;;;;iBAK3B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE7D,eAAO,MAAM,uBAAuB;;;iBAGlC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE3E,eAAO,MAAM,sBAAsB;;;;iBAIjC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEzE,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAW/B,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAErE,eAAO,MAAM,eAAe;;;iBAG1B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE3D,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;iBAG9B,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEnE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;iBAAsB,CAAC;AAEzD,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEvE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;iBAE3B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE7D,eAAO,MAAM,gBAAgB,gCAAe,CAAC;AAE7C,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE7D,eAAO,MAAM,wBAAwB;;;iBAGnC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE7E,eAAO,MAAM,8BAA8B;;iBAEzC,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEzF,eAAO,MAAM,8BAA8B;;;iBAGzC,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEzF,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;iBAAsB,CAAC;AAEtE,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAEjG,eAAO,MAAM,4BAA4B;;;;iBAIvC,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAErF,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;iBAAsB,CAAC;AAEpE,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE7F,eAAO,MAAM,2BAA2B;;;iBAGtC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEnF,eAAO,MAAM,+BAA+B;;iBAE1C,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/schemas/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,WAAW,EAAC,MAAM,yBAAyB,CAAC;AACvE,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAItB,eAAO,MAAM,cAAc,aAA8B,CAAC;AAC1D,OAAO,EAAC,WAAW,EAAC,CAAC;AAErB,eAAO,MAAM,iBAAiB;;iBAE5B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE/D,eAAO,MAAM,0BAA0B;;;;iBAErC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAEjF,eAAO,MAAM,gBAAgB;;;;;iBAK3B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE7D,eAAO,MAAM,uBAAuB;;;iBAGlC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE3E,eAAO,MAAM,sBAAsB;;;;iBAIjC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEzE,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAW/B,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAErE,eAAO,MAAM,eAAe;;;iBAG1B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE3D,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;iBAI9B,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEnE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;iBAAsB,CAAC;AAEzD,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEvE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;iBAG3B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE7D,eAAO,MAAM,gBAAgB,gCAAe,CAAC;AAE7C,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE7D,eAAO,MAAM,wBAAwB;;;iBAGnC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE7E,eAAO,MAAM,8BAA8B;;iBAEzC,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEzF,eAAO,MAAM,8BAA8B;;;iBAGzC,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEzF,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;iBAAsB,CAAC;AAEtE,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAEjG,eAAO,MAAM,4BAA4B;;;;iBAIvC,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAErF,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;iBAAsB,CAAC;AAEpE,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE7F,eAAO,MAAM,2BAA2B;;;iBAGtC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEnF,eAAO,MAAM,+BAA+B;;iBAE1C,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC"}

package/dist/schemas/auth.js

@@ -1,5 +1,6 @@
 import { displayNameSchema, emailSchema } from '@shipfox/api-common-dto';
 import { z } from 'zod';
+import { adminRoleSchema } from './admin.js';
 import { userDtoSchema } from './user.js';
 export const passwordSchema = z.string().min(12).max(128);
 export { emailSchema };
@@ -40,11 +41,13 @@ export const loginBodySchema = z.object({
 });
 export const loginResponseSchema = z.object({
     token: z.string(),
-    user: userDtoSchema
+    user: userDtoSchema,
+    admin_role: adminRoleSchema.nullable().optional()
 });
 export const refreshResponseSchema = loginResponseSchema;
 export const meResponseSchema = z.object({
-    user: userDtoSchema
+    user: userDtoSchema,
+    admin_role: adminRoleSchema.nullable().optional()
 });
 export const logoutBodySchema = z.object({});
 export const changePasswordBodySchema = z.object({

package/dist/schemas/auth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/schemas/auth.ts"],"sourcesContent":["import {displayNameSchema, emailSchema} from '@shipfox/api-common-dto';\nimport {z} from 'zod';\nimport {userDtoSchema} from './user.js';\n\nexport const passwordSchema = z.string().min(12).max(128);\nexport {emailSchema};\n\nexport const loginMethodSchema = z.object({\n  id: z.string().min(1).max(128),\n});\n\nexport type LoginMethodDto = z.infer<typeof loginMethodSchema>;\n\nexport const loginMethodsResponseSchema = z.object({\n  login_methods: z.array(loginMethodSchema),\n});\n\nexport type LoginMethodsResponseDto = z.infer<typeof loginMethodsResponseSchema>;\n\nexport const signupBodySchema = z.object({\n  email: emailSchema,\n  password: passwordSchema,\n  name: displayNameSchema,\n  invitation_token: z.string().min(1).max(256).optional(),\n});\n\nexport type SignupBodyDto = z.infer<typeof signupBodySchema>;\n\nexport const signupAcceptErrorSchema = z.object({\n  code: z.string(),\n  message: z.string(),\n});\n\nexport type SignupAcceptErrorDto = z.infer<typeof signupAcceptErrorSchema>;\n\nexport const signupMembershipSchema = z.object({\n  id: z.string().uuid(),\n  user_id: z.string().uuid(),\n  workspace_id: z.string().uuid(),\n});\n\nexport type SignupMembershipDto = z.infer<typeof signupMembershipSchema>;\n\nexport const signupResponseSchema = z.object({\n  user: userDtoSchema,\n  email_challenge: z\n    .object({\n      id: z.string().uuid(),\n      next_resend_available_at: z.string().datetime(),\n    })\n    .optional(),\n  token: z.string().optional(),\n  membership: signupMembershipSchema.nullable().optional(),\n  accept_error: signupAcceptErrorSchema.optional(),\n});\n\nexport type SignupResponseDto = z.infer<typeof signupResponseSchema>;\n\nexport const loginBodySchema = z.object({\n  email: emailSchema,\n  password: z.string().min(1).max(128),\n});\n\nexport type LoginBodyDto = z.infer<typeof loginBodySchema>;\n\nexport const loginResponseSchema = z.object({\n  token: z.string(),\n  user: userDtoSchema,\n});\n\nexport type LoginResponseDto = z.infer<typeof loginResponseSchema>;\n\nexport const refreshResponseSchema = loginResponseSchema;\n\nexport type RefreshResponseDto = z.infer<typeof refreshResponseSchema>;\n\nexport const meResponseSchema = z.object({\n  user: userDtoSchema,\n});\n\nexport type MeResponseDto = z.infer<typeof meResponseSchema>;\n\nexport const logoutBodySchema = z.object({});\n\nexport type LogoutBodyDto = z.infer<typeof logoutBodySchema>;\n\nexport const changePasswordBodySchema = z.object({\n  current_password: z.string().min(1).max(128),\n  new_password: passwordSchema,\n});\n\nexport type ChangePasswordBodyDto = z.infer<typeof changePasswordBodySchema>;\n\nexport const passwordResetRequestBodySchema = z.object({\n  email: emailSchema,\n});\n\nexport type PasswordResetRequestBodyDto = z.infer<typeof passwordResetRequestBodySchema>;\n\nexport const passwordResetConfirmBodySchema = z.object({\n  token: z.string().min(1),\n  new_password: passwordSchema,\n});\n\nexport type PasswordResetConfirmBodyDto = z.infer<typeof passwordResetConfirmBodySchema>;\n\nexport const passwordResetConfirmResponseSchema = loginResponseSchema;\n\nexport type PasswordResetConfirmResponseDto = z.infer<typeof passwordResetConfirmResponseSchema>;\n\nexport const verifyEmailConfirmBodySchema = z.object({\n  email: emailSchema,\n  challenge_id: z.string().uuid(),\n  code: z.string().regex(/^\\d{8}$/u),\n});\n\nexport type VerifyEmailConfirmBodyDto = z.infer<typeof verifyEmailConfirmBodySchema>;\n\nexport const verifyEmailConfirmResponseSchema = loginResponseSchema;\n\nexport type VerifyEmailConfirmResponseDto = z.infer<typeof verifyEmailConfirmResponseSchema>;\n\nexport const verifyEmailResendBodySchema = z.object({\n  email: emailSchema,\n  challenge_id: z.string().uuid(),\n});\n\nexport type VerifyEmailResendBodyDto = z.infer<typeof verifyEmailResendBodySchema>;\n\nexport const verifyEmailResendResponseSchema = z.object({\n  next_resend_available_at: z.string().datetime(),\n});\n\nexport type VerifyEmailResendResponseDto = z.infer<typeof verifyEmailResendResponseSchema>;\n"],"names":["displayNameSchema","emailSchema","z","userDtoSchema","passwordSchema","string","min","max","loginMethodSchema","object","id","loginMethodsResponseSchema","login_methods","array","signupBodySchema","email","password","name","invitation_token","optional","signupAcceptErrorSchema","code","message","signupMembershipSchema","uuid","user_id","workspace_id","signupResponseSchema","user","email_challenge","next_resend_available_at","datetime","token","membership","nullable","accept_error","loginBodySchema","loginResponseSchema","refreshResponseSchema","meResponseSchema","logoutBodySchema","changePasswordBodySchema","current_password","new_password","passwordResetRequestBodySchema","passwordResetConfirmBodySchema","passwordResetConfirmResponseSchema","verifyEmailConfirmBodySchema","challenge_id","regex","verifyEmailConfirmResponseSchema","verifyEmailResendBodySchema","verifyEmailResendResponseSchema"],"mappings":"AAAA,SAAQA,iBAAiB,EAAEC,WAAW,QAAO,0BAA0B;AACvE,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,aAAa,QAAO,YAAY;AAExC,OAAO,MAAMC,iBAAiBF,EAAEG,MAAM,GAAGC,GAAG,CAAC,IAAIC,GAAG,CAAC,KAAK;AAC1D,SAAQN,WAAW,GAAE;AAErB,OAAO,MAAMO,oBAAoBN,EAAEO,MAAM,CAAC;IACxCC,IAAIR,EAAEG,MAAM,GAAGC,GAAG,CAAC,GAAGC,GAAG,CAAC;AAC5B,GAAG;AAIH,OAAO,MAAMI,6BAA6BT,EAAEO,MAAM,CAAC;IACjDG,eAAeV,EAAEW,KAAK,CAACL;AACzB,GAAG;AAIH,OAAO,MAAMM,mBAAmBZ,EAAEO,MAAM,CAAC;IACvCM,OAAOd;IACPe,UAAUZ;IACVa,MAAMjB;IACNkB,kBAAkBhB,EAAEG,MAAM,GAAGC,GAAG,CAAC,GAAGC,GAAG,CAAC,KAAKY,QAAQ;AACvD,GAAG;AAIH,OAAO,MAAMC,0BAA0BlB,EAAEO,MAAM,CAAC;IAC9CY,MAAMnB,EAAEG,MAAM;IACdiB,SAASpB,EAAEG,MAAM;AACnB,GAAG;AAIH,OAAO,MAAMkB,yBAAyBrB,EAAEO,MAAM,CAAC;IAC7CC,IAAIR,EAAEG,MAAM,GAAGmB,IAAI;IACnBC,SAASvB,EAAEG,MAAM,GAAGmB,IAAI;IACxBE,cAAcxB,EAAEG,MAAM,GAAGmB,IAAI;AAC/B,GAAG;AAIH,OAAO,MAAMG,uBAAuBzB,EAAEO,MAAM,CAAC;IAC3CmB,MAAMzB;IACN0B,iBAAiB3B,EACdO,MAAM,CAAC;QACNC,IAAIR,EAAEG,MAAM,GAAGmB,IAAI;QACnBM,0BAA0B5B,EAAEG,MAAM,GAAG0B,QAAQ;IAC/C,GACCZ,QAAQ;IACXa,OAAO9B,EAAEG,MAAM,GAAGc,QAAQ;IAC1Bc,YAAYV,uBAAuBW,QAAQ,GAAGf,QAAQ;IACtDgB,cAAcf,wBAAwBD,QAAQ;AAChD,GAAG;AAIH,OAAO,MAAMiB,kBAAkBlC,EAAEO,MAAM,CAAC;IACtCM,OAAOd;IACPe,UAAUd,EAAEG,MAAM,GAAGC,GAAG,CAAC,GAAGC,GAAG,CAAC;AAClC,GAAG;AAIH,OAAO,MAAM8B,sBAAsBnC,EAAEO,MAAM,CAAC;IAC1CuB,OAAO9B,EAAEG,MAAM;IACfuB,MAAMzB;AACR,GAAG;AAIH,OAAO,MAAMmC,wBAAwBD,oBAAoB;AAIzD,OAAO,MAAME,mBAAmBrC,EAAEO,MAAM,CAAC;IACvCmB,MAAMzB;AACR,GAAG;AAIH,OAAO,MAAMqC,mBAAmBtC,EAAEO,MAAM,CAAC,CAAC,GAAG;AAI7C,OAAO,MAAMgC,2BAA2BvC,EAAEO,MAAM,CAAC;IAC/CiC,kBAAkBxC,EAAEG,MAAM,GAAGC,GAAG,CAAC,GAAGC,GAAG,CAAC;IACxCoC,cAAcvC;AAChB,GAAG;AAIH,OAAO,MAAMwC,iCAAiC1C,EAAEO,MAAM,CAAC;IACrDM,OAAOd;AACT,GAAG;AAIH,OAAO,MAAM4C,iCAAiC3C,EAAEO,MAAM,CAAC;IACrDuB,OAAO9B,EAAEG,MAAM,GAAGC,GAAG,CAAC;IACtBqC,cAAcvC;AAChB,GAAG;AAIH,OAAO,MAAM0C,qCAAqCT,oBAAoB;AAItE,OAAO,MAAMU,+BAA+B7C,EAAEO,MAAM,CAAC;IACnDM,OAAOd;IACP+C,cAAc9C,EAAEG,MAAM,GAAGmB,IAAI;IAC7BH,MAAMnB,EAAEG,MAAM,GAAG4C,KAAK,CAAC;AACzB,GAAG;AAIH,OAAO,MAAMC,mCAAmCb,oBAAoB;AAIpE,OAAO,MAAMc,8BAA8BjD,EAAEO,MAAM,CAAC;IAClDM,OAAOd;IACP+C,cAAc9C,EAAEG,MAAM,GAAGmB,IAAI;AAC/B,GAAG;AAIH,OAAO,MAAM4B,kCAAkClD,EAAEO,MAAM,CAAC;IACtDqB,0BAA0B5B,EAAEG,MAAM,GAAG0B,QAAQ;AAC/C,GAAG"}
+{"version":3,"sources":["../../src/schemas/auth.ts"],"sourcesContent":["import {displayNameSchema, emailSchema} from '@shipfox/api-common-dto';\nimport {z} from 'zod';\nimport {adminRoleSchema} from './admin.js';\nimport {userDtoSchema} from './user.js';\n\nexport const passwordSchema = z.string().min(12).max(128);\nexport {emailSchema};\n\nexport const loginMethodSchema = z.object({\n  id: z.string().min(1).max(128),\n});\n\nexport type LoginMethodDto = z.infer<typeof loginMethodSchema>;\n\nexport const loginMethodsResponseSchema = z.object({\n  login_methods: z.array(loginMethodSchema),\n});\n\nexport type LoginMethodsResponseDto = z.infer<typeof loginMethodsResponseSchema>;\n\nexport const signupBodySchema = z.object({\n  email: emailSchema,\n  password: passwordSchema,\n  name: displayNameSchema,\n  invitation_token: z.string().min(1).max(256).optional(),\n});\n\nexport type SignupBodyDto = z.infer<typeof signupBodySchema>;\n\nexport const signupAcceptErrorSchema = z.object({\n  code: z.string(),\n  message: z.string(),\n});\n\nexport type SignupAcceptErrorDto = z.infer<typeof signupAcceptErrorSchema>;\n\nexport const signupMembershipSchema = z.object({\n  id: z.string().uuid(),\n  user_id: z.string().uuid(),\n  workspace_id: z.string().uuid(),\n});\n\nexport type SignupMembershipDto = z.infer<typeof signupMembershipSchema>;\n\nexport const signupResponseSchema = z.object({\n  user: userDtoSchema,\n  email_challenge: z\n    .object({\n      id: z.string().uuid(),\n      next_resend_available_at: z.string().datetime(),\n    })\n    .optional(),\n  token: z.string().optional(),\n  membership: signupMembershipSchema.nullable().optional(),\n  accept_error: signupAcceptErrorSchema.optional(),\n});\n\nexport type SignupResponseDto = z.infer<typeof signupResponseSchema>;\n\nexport const loginBodySchema = z.object({\n  email: emailSchema,\n  password: z.string().min(1).max(128),\n});\n\nexport type LoginBodyDto = z.infer<typeof loginBodySchema>;\n\nexport const loginResponseSchema = z.object({\n  token: z.string(),\n  user: userDtoSchema,\n  admin_role: adminRoleSchema.nullable().optional(),\n});\n\nexport type LoginResponseDto = z.infer<typeof loginResponseSchema>;\n\nexport const refreshResponseSchema = loginResponseSchema;\n\nexport type RefreshResponseDto = z.infer<typeof refreshResponseSchema>;\n\nexport const meResponseSchema = z.object({\n  user: userDtoSchema,\n  admin_role: adminRoleSchema.nullable().optional(),\n});\n\nexport type MeResponseDto = z.infer<typeof meResponseSchema>;\n\nexport const logoutBodySchema = z.object({});\n\nexport type LogoutBodyDto = z.infer<typeof logoutBodySchema>;\n\nexport const changePasswordBodySchema = z.object({\n  current_password: z.string().min(1).max(128),\n  new_password: passwordSchema,\n});\n\nexport type ChangePasswordBodyDto = z.infer<typeof changePasswordBodySchema>;\n\nexport const passwordResetRequestBodySchema = z.object({\n  email: emailSchema,\n});\n\nexport type PasswordResetRequestBodyDto = z.infer<typeof passwordResetRequestBodySchema>;\n\nexport const passwordResetConfirmBodySchema = z.object({\n  token: z.string().min(1),\n  new_password: passwordSchema,\n});\n\nexport type PasswordResetConfirmBodyDto = z.infer<typeof passwordResetConfirmBodySchema>;\n\nexport const passwordResetConfirmResponseSchema = loginResponseSchema;\n\nexport type PasswordResetConfirmResponseDto = z.infer<typeof passwordResetConfirmResponseSchema>;\n\nexport const verifyEmailConfirmBodySchema = z.object({\n  email: emailSchema,\n  challenge_id: z.string().uuid(),\n  code: z.string().regex(/^\\d{8}$/u),\n});\n\nexport type VerifyEmailConfirmBodyDto = z.infer<typeof verifyEmailConfirmBodySchema>;\n\nexport const verifyEmailConfirmResponseSchema = loginResponseSchema;\n\nexport type VerifyEmailConfirmResponseDto = z.infer<typeof verifyEmailConfirmResponseSchema>;\n\nexport const verifyEmailResendBodySchema = z.object({\n  email: emailSchema,\n  challenge_id: z.string().uuid(),\n});\n\nexport type VerifyEmailResendBodyDto = z.infer<typeof verifyEmailResendBodySchema>;\n\nexport const verifyEmailResendResponseSchema = z.object({\n  next_resend_available_at: z.string().datetime(),\n});\n\nexport type VerifyEmailResendResponseDto = z.infer<typeof verifyEmailResendResponseSchema>;\n"],"names":["displayNameSchema","emailSchema","z","adminRoleSchema","userDtoSchema","passwordSchema","string","min","max","loginMethodSchema","object","id","loginMethodsResponseSchema","login_methods","array","signupBodySchema","email","password","name","invitation_token","optional","signupAcceptErrorSchema","code","message","signupMembershipSchema","uuid","user_id","workspace_id","signupResponseSchema","user","email_challenge","next_resend_available_at","datetime","token","membership","nullable","accept_error","loginBodySchema","loginResponseSchema","admin_role","refreshResponseSchema","meResponseSchema","logoutBodySchema","changePasswordBodySchema","current_password","new_password","passwordResetRequestBodySchema","passwordResetConfirmBodySchema","passwordResetConfirmResponseSchema","verifyEmailConfirmBodySchema","challenge_id","regex","verifyEmailConfirmResponseSchema","verifyEmailResendBodySchema","verifyEmailResendResponseSchema"],"mappings":"AAAA,SAAQA,iBAAiB,EAAEC,WAAW,QAAO,0BAA0B;AACvE,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,eAAe,QAAO,aAAa;AAC3C,SAAQC,aAAa,QAAO,YAAY;AAExC,OAAO,MAAMC,iBAAiBH,EAAEI,MAAM,GAAGC,GAAG,CAAC,IAAIC,GAAG,CAAC,KAAK;AAC1D,SAAQP,WAAW,GAAE;AAErB,OAAO,MAAMQ,oBAAoBP,EAAEQ,MAAM,CAAC;IACxCC,IAAIT,EAAEI,MAAM,GAAGC,GAAG,CAAC,GAAGC,GAAG,CAAC;AAC5B,GAAG;AAIH,OAAO,MAAMI,6BAA6BV,EAAEQ,MAAM,CAAC;IACjDG,eAAeX,EAAEY,KAAK,CAACL;AACzB,GAAG;AAIH,OAAO,MAAMM,mBAAmBb,EAAEQ,MAAM,CAAC;IACvCM,OAAOf;IACPgB,UAAUZ;IACVa,MAAMlB;IACNmB,kBAAkBjB,EAAEI,MAAM,GAAGC,GAAG,CAAC,GAAGC,GAAG,CAAC,KAAKY,QAAQ;AACvD,GAAG;AAIH,OAAO,MAAMC,0BAA0BnB,EAAEQ,MAAM,CAAC;IAC9CY,MAAMpB,EAAEI,MAAM;IACdiB,SAASrB,EAAEI,MAAM;AACnB,GAAG;AAIH,OAAO,MAAMkB,yBAAyBtB,EAAEQ,MAAM,CAAC;IAC7CC,IAAIT,EAAEI,MAAM,GAAGmB,IAAI;IACnBC,SAASxB,EAAEI,MAAM,GAAGmB,IAAI;IACxBE,cAAczB,EAAEI,MAAM,GAAGmB,IAAI;AAC/B,GAAG;AAIH,OAAO,MAAMG,uBAAuB1B,EAAEQ,MAAM,CAAC;IAC3CmB,MAAMzB;IACN0B,iBAAiB5B,EACdQ,MAAM,CAAC;QACNC,IAAIT,EAAEI,MAAM,GAAGmB,IAAI;QACnBM,0BAA0B7B,EAAEI,MAAM,GAAG0B,QAAQ;IAC/C,GACCZ,QAAQ;IACXa,OAAO/B,EAAEI,MAAM,GAAGc,QAAQ;IAC1Bc,YAAYV,uBAAuBW,QAAQ,GAAGf,QAAQ;IACtDgB,cAAcf,wBAAwBD,QAAQ;AAChD,GAAG;AAIH,OAAO,MAAMiB,kBAAkBnC,EAAEQ,MAAM,CAAC;IACtCM,OAAOf;IACPgB,UAAUf,EAAEI,MAAM,GAAGC,GAAG,CAAC,GAAGC,GAAG,CAAC;AAClC,GAAG;AAIH,OAAO,MAAM8B,sBAAsBpC,EAAEQ,MAAM,CAAC;IAC1CuB,OAAO/B,EAAEI,MAAM;IACfuB,MAAMzB;IACNmC,YAAYpC,gBAAgBgC,QAAQ,GAAGf,QAAQ;AACjD,GAAG;AAIH,OAAO,MAAMoB,wBAAwBF,oBAAoB;AAIzD,OAAO,MAAMG,mBAAmBvC,EAAEQ,MAAM,CAAC;IACvCmB,MAAMzB;IACNmC,YAAYpC,gBAAgBgC,QAAQ,GAAGf,QAAQ;AACjD,GAAG;AAIH,OAAO,MAAMsB,mBAAmBxC,EAAEQ,MAAM,CAAC,CAAC,GAAG;AAI7C,OAAO,MAAMiC,2BAA2BzC,EAAEQ,MAAM,CAAC;IAC/CkC,kBAAkB1C,EAAEI,MAAM,GAAGC,GAAG,CAAC,GAAGC,GAAG,CAAC;IACxCqC,cAAcxC;AAChB,GAAG;AAIH,OAAO,MAAMyC,iCAAiC5C,EAAEQ,MAAM,CAAC;IACrDM,OAAOf;AACT,GAAG;AAIH,OAAO,MAAM8C,iCAAiC7C,EAAEQ,MAAM,CAAC;IACrDuB,OAAO/B,EAAEI,MAAM,GAAGC,GAAG,CAAC;IACtBsC,cAAcxC;AAChB,GAAG;AAIH,OAAO,MAAM2C,qCAAqCV,oBAAoB;AAItE,OAAO,MAAMW,+BAA+B/C,EAAEQ,MAAM,CAAC;IACnDM,OAAOf;IACPiD,cAAchD,EAAEI,MAAM,GAAGmB,IAAI;IAC7BH,MAAMpB,EAAEI,MAAM,GAAG6C,KAAK,CAAC;AACzB,GAAG;AAIH,OAAO,MAAMC,mCAAmCd,oBAAoB;AAIpE,OAAO,MAAMe,8BAA8BnD,EAAEQ,MAAM,CAAC;IAClDM,OAAOf;IACPiD,cAAchD,EAAEI,MAAM,GAAGmB,IAAI;AAC/B,GAAG;AAIH,OAAO,MAAM6B,kCAAkCpD,EAAEQ,MAAM,CAAC;IACtDqB,0BAA0B7B,EAAEI,MAAM,GAAG0B,QAAQ;AAC/C,GAAG"}

package/dist/schemas/e2e.d.ts

@@ -44,6 +44,11 @@ export declare const e2eCreateSessionResponseSchema: z.ZodObject<{
         created_at: z.ZodString;
         updated_at: z.ZodString;
     }, z.core.$strip>;
+    admin_role: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+        "admin-observer": "admin-observer";
+        "admin-operator": "admin-operator";
+        "admin-owner": "admin-owner";
+    }>>>;
 }, z.core.$strip>;
 export type E2eCreateSessionResponseDto = z.infer<typeof e2eCreateSessionResponseSchema>;
 export type E2eSessionDto = E2eCreateSessionResponseDto & {

package/dist/schemas/e2e.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"e2e.d.ts","sourceRoot":"","sources":["../../src/schemas/e2e.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAItB,eAAO,MAAM,uBAAuB;;;;;iBAKlC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE3E,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;iBAItC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEnF,eAAO,MAAM,0BAA0B;;;iBAOnC,CAAC;AAEL,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAEjF,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;iBAAsB,CAAC;AAElE,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEzF,MAAM,MAAM,aAAa,GAAG,2BAA2B,GAAG;IACxD,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC"}
+{"version":3,"file":"e2e.d.ts","sourceRoot":"","sources":["../../src/schemas/e2e.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAItB,eAAO,MAAM,uBAAuB;;;;;iBAKlC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE3E,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;iBAItC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEnF,eAAO,MAAM,0BAA0B;;;iBAOnC,CAAC;AAEL,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAEjF,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;iBAAsB,CAAC;AAElE,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEzF,MAAM,MAAM,aAAa,GAAG,2BAA2B,GAAG;IACxD,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC"}

package/dist/schemas/index.d.ts

@@ -1,4 +1,5 @@
 export { AUTH_PASSWORD_RESET_SEND_REQUESTED, AUTH_USER_SIGNED_UP, type AuthEventMap, type AuthPasswordResetSendRequestedEvent, type AuthUserSignedUpEvent, authEventSchemas, authPasswordResetSendRequestedSchema, authUserSignedUpSchema, } from '../events.js';
+export { type AdminGrantDto, type AdminRole, adminGrantDtoSchema, adminRoleSchema, type BootstrapAdminOwnerBodyDto, type BootstrapAdminOwnerResponseDto, bootstrapAdminOwnerBodySchema, bootstrapAdminOwnerResponseSchema, type GrantAdminRoleBodyDto, type GrantAdminRoleResponseDto, grantAdminRoleBodySchema, grantAdminRoleResponseSchema, type ListAdminGrantsResponseDto, listAdminGrantsResponseSchema, type RevokeAdminGrantBodyDto, type RevokeAdminGrantResponseDto, revokeAdminGrantBodySchema, revokeAdminGrantResponseSchema, } from './admin.js';
 export { type ChangePasswordBodyDto, changePasswordBodySchema, emailSchema, type LoginBodyDto, type LoginMethodDto, type LoginMethodsResponseDto, type LoginResponseDto, type LogoutBodyDto, loginBodySchema, loginMethodSchema, loginMethodsResponseSchema, loginResponseSchema, logoutBodySchema, type MeResponseDto, meResponseSchema, type PasswordResetConfirmBodyDto, type PasswordResetConfirmResponseDto, type PasswordResetRequestBodyDto, passwordResetConfirmBodySchema, passwordResetConfirmResponseSchema, passwordResetRequestBodySchema, passwordSchema, type RefreshResponseDto, refreshResponseSchema, type SignupAcceptErrorDto, type SignupBodyDto, type SignupMembershipDto, type SignupResponseDto, signupAcceptErrorSchema, signupBodySchema, signupMembershipSchema, signupResponseSchema, type VerifyEmailConfirmBodyDto, type VerifyEmailConfirmResponseDto, type VerifyEmailResendBodyDto, type VerifyEmailResendResponseDto, verifyEmailConfirmBodySchema, verifyEmailConfirmResponseSchema, verifyEmailResendBodySchema, verifyEmailResendResponseSchema, } from './auth.js';
 export { type E2eCreateSessionBodyDto, type E2eCreateSessionResponseDto, type E2eCreateUserBodyDto, type E2eCreateUserResponseDto, type E2eSessionDto, e2eCreateSessionBodySchema, e2eCreateSessionResponseSchema, e2eCreateUserBodySchema, e2eCreateUserResponseSchema, } from './e2e.js';
 export { JOB_LEASE_TOKEN_AUDIENCE, type JobLeaseTokenClaims, jobLeaseTokenClaimsSchema, } from './job-lease-token.js';

package/dist/schemas/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/schemas/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kCAAkC,EAClC,mBAAmB,EACnB,KAAK,YAAY,EACjB,KAAK,mCAAmC,EACxC,KAAK,qBAAqB,EAC1B,gBAAgB,EAChB,oCAAoC,EACpC,sBAAsB,GACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,KAAK,qBAAqB,EAC1B,wBAAwB,EACxB,WAAW,EACX,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,eAAe,EACf,iBAAiB,EACjB,0BAA0B,EAC1B,mBAAmB,EACnB,gBAAgB,EAChB,KAAK,aAAa,EAClB,gBAAgB,EAChB,KAAK,2BAA2B,EAChC,KAAK,+BAA+B,EACpC,KAAK,2BAA2B,EAChC,8BAA8B,EAC9B,kCAAkC,EAClC,8BAA8B,EAC9B,cAAc,EACd,KAAK,kBAAkB,EACvB,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,uBAAuB,EACvB,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,KAAK,yBAAyB,EAC9B,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,EAC7B,KAAK,4BAA4B,EACjC,4BAA4B,EAC5B,gCAAgC,EAChC,2BAA2B,EAC3B,+BAA+B,GAChC,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,EAChC,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,aAAa,EAClB,0BAA0B,EAC1B,8BAA8B,EAC9B,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,wBAAwB,EACxB,KAAK,mBAAmB,EACxB,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,6BAA6B,EAC7B,KAAK,wBAAwB,EAC7B,8BAA8B,GAC/B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAC,KAAK,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAC,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/schemas/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kCAAkC,EAClC,mBAAmB,EACnB,KAAK,YAAY,EACjB,KAAK,mCAAmC,EACxC,KAAK,qBAAqB,EAC1B,gBAAgB,EAChB,oCAAoC,EACpC,sBAAsB,GACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,SAAS,EACd,mBAAmB,EACnB,eAAe,EACf,KAAK,0BAA0B,EAC/B,KAAK,8BAA8B,EACnC,6BAA6B,EAC7B,iCAAiC,EACjC,KAAK,qBAAqB,EAC1B,KAAK,yBAAyB,EAC9B,wBAAwB,EACxB,4BAA4B,EAC5B,KAAK,0BAA0B,EAC/B,6BAA6B,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,EAChC,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,KAAK,qBAAqB,EAC1B,wBAAwB,EACxB,WAAW,EACX,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,eAAe,EACf,iBAAiB,EACjB,0BAA0B,EAC1B,mBAAmB,EACnB,gBAAgB,EAChB,KAAK,aAAa,EAClB,gBAAgB,EAChB,KAAK,2BAA2B,EAChC,KAAK,+BAA+B,EACpC,KAAK,2BAA2B,EAChC,8BAA8B,EAC9B,kCAAkC,EAClC,8BAA8B,EAC9B,cAAc,EACd,KAAK,kBAAkB,EACvB,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,uBAAuB,EACvB,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,KAAK,yBAAyB,EAC9B,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,EAC7B,KAAK,4BAA4B,EACjC,4BAA4B,EAC5B,gCAAgC,EAChC,2BAA2B,EAC3B,+BAA+B,GAChC,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,EAChC,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,aAAa,EAClB,0BAA0B,EAC1B,8BAA8B,EAC9B,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,wBAAwB,EACxB,KAAK,mBAAmB,EACxB,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,6BAA6B,EAC7B,KAAK,wBAAwB,EAC7B,8BAA8B,GAC/B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAC,KAAK,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAC,MAAM,WAAW,CAAC"}

package/dist/schemas/index.js

@@ -1,4 +1,5 @@
 export { AUTH_PASSWORD_RESET_SEND_REQUESTED, AUTH_USER_SIGNED_UP, authEventSchemas, authPasswordResetSendRequestedSchema, authUserSignedUpSchema } from '../events.js';
+export { adminGrantDtoSchema, adminRoleSchema, bootstrapAdminOwnerBodySchema, bootstrapAdminOwnerResponseSchema, grantAdminRoleBodySchema, grantAdminRoleResponseSchema, listAdminGrantsResponseSchema, revokeAdminGrantBodySchema, revokeAdminGrantResponseSchema } from './admin.js';
 export { changePasswordBodySchema, emailSchema, loginBodySchema, loginMethodSchema, loginMethodsResponseSchema, loginResponseSchema, logoutBodySchema, meResponseSchema, passwordResetConfirmBodySchema, passwordResetConfirmResponseSchema, passwordResetRequestBodySchema, passwordSchema, refreshResponseSchema, signupAcceptErrorSchema, signupBodySchema, signupMembershipSchema, signupResponseSchema, verifyEmailConfirmBodySchema, verifyEmailConfirmResponseSchema, verifyEmailResendBodySchema, verifyEmailResendResponseSchema } from './auth.js';
 export { e2eCreateSessionBodySchema, e2eCreateSessionResponseSchema, e2eCreateUserBodySchema, e2eCreateUserResponseSchema } from './e2e.js';
 export { JOB_LEASE_TOKEN_AUDIENCE, jobLeaseTokenClaimsSchema } from './job-lease-token.js';

package/dist/schemas/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/schemas/index.ts"],"sourcesContent":["export {\n  AUTH_PASSWORD_RESET_SEND_REQUESTED,\n  AUTH_USER_SIGNED_UP,\n  type AuthEventMap,\n  type AuthPasswordResetSendRequestedEvent,\n  type AuthUserSignedUpEvent,\n  authEventSchemas,\n  authPasswordResetSendRequestedSchema,\n  authUserSignedUpSchema,\n} from '../events.js';\nexport {\n  type ChangePasswordBodyDto,\n  changePasswordBodySchema,\n  emailSchema,\n  type LoginBodyDto,\n  type LoginMethodDto,\n  type LoginMethodsResponseDto,\n  type LoginResponseDto,\n  type LogoutBodyDto,\n  loginBodySchema,\n  loginMethodSchema,\n  loginMethodsResponseSchema,\n  loginResponseSchema,\n  logoutBodySchema,\n  type MeResponseDto,\n  meResponseSchema,\n  type PasswordResetConfirmBodyDto,\n  type PasswordResetConfirmResponseDto,\n  type PasswordResetRequestBodyDto,\n  passwordResetConfirmBodySchema,\n  passwordResetConfirmResponseSchema,\n  passwordResetRequestBodySchema,\n  passwordSchema,\n  type RefreshResponseDto,\n  refreshResponseSchema,\n  type SignupAcceptErrorDto,\n  type SignupBodyDto,\n  type SignupMembershipDto,\n  type SignupResponseDto,\n  signupAcceptErrorSchema,\n  signupBodySchema,\n  signupMembershipSchema,\n  signupResponseSchema,\n  type VerifyEmailConfirmBodyDto,\n  type VerifyEmailConfirmResponseDto,\n  type VerifyEmailResendBodyDto,\n  type VerifyEmailResendResponseDto,\n  verifyEmailConfirmBodySchema,\n  verifyEmailConfirmResponseSchema,\n  verifyEmailResendBodySchema,\n  verifyEmailResendResponseSchema,\n} from './auth.js';\nexport {\n  type E2eCreateSessionBodyDto,\n  type E2eCreateSessionResponseDto,\n  type E2eCreateUserBodyDto,\n  type E2eCreateUserResponseDto,\n  type E2eSessionDto,\n  e2eCreateSessionBodySchema,\n  e2eCreateSessionResponseSchema,\n  e2eCreateUserBodySchema,\n  e2eCreateUserResponseSchema,\n} from './e2e.js';\nexport {\n  JOB_LEASE_TOKEN_AUDIENCE,\n  type JobLeaseTokenClaims,\n  jobLeaseTokenClaimsSchema,\n} from './job-lease-token.js';\nexport {\n  RUNNER_SESSION_TOKEN_AUDIENCE,\n  type RunnerSessionTokenClaims,\n  runnerSessionTokenClaimsSchema,\n} from './runner-session-token.js';\nexport {type UserDto, userDtoSchema, userStatusSchema} from './user.js';\n"],"names":["AUTH_PASSWORD_RESET_SEND_REQUESTED","AUTH_USER_SIGNED_UP","authEventSchemas","authPasswordResetSendRequestedSchema","authUserSignedUpSchema","changePasswordBodySchema","emailSchema","loginBodySchema","loginMethodSchema","loginMethodsResponseSchema","loginResponseSchema","logoutBodySchema","meResponseSchema","passwordResetConfirmBodySchema","passwordResetConfirmResponseSchema","passwordResetRequestBodySchema","passwordSchema","refreshResponseSchema","signupAcceptErrorSchema","signupBodySchema","signupMembershipSchema","signupResponseSchema","verifyEmailConfirmBodySchema","verifyEmailConfirmResponseSchema","verifyEmailResendBodySchema","verifyEmailResendResponseSchema","e2eCreateSessionBodySchema","e2eCreateSessionResponseSchema","e2eCreateUserBodySchema","e2eCreateUserResponseSchema","JOB_LEASE_TOKEN_AUDIENCE","jobLeaseTokenClaimsSchema","RUNNER_SESSION_TOKEN_AUDIENCE","runnerSessionTokenClaimsSchema","userDtoSchema","userStatusSchema"],"mappings":"AAAA,SACEA,kCAAkC,EAClCC,mBAAmB,EAInBC,gBAAgB,EAChBC,oCAAoC,EACpCC,sBAAsB,QACjB,eAAe;AACtB,SAEEC,wBAAwB,EACxBC,WAAW,EAMXC,eAAe,EACfC,iBAAiB,EACjBC,0BAA0B,EAC1BC,mBAAmB,EACnBC,gBAAgB,EAEhBC,gBAAgB,EAIhBC,8BAA8B,EAC9BC,kCAAkC,EAClCC,8BAA8B,EAC9BC,cAAc,EAEdC,qBAAqB,EAKrBC,uBAAuB,EACvBC,gBAAgB,EAChBC,sBAAsB,EACtBC,oBAAoB,EAKpBC,4BAA4B,EAC5BC,gCAAgC,EAChCC,2BAA2B,EAC3BC,+BAA+B,QAC1B,YAAY;AACnB,SAMEC,0BAA0B,EAC1BC,8BAA8B,EAC9BC,uBAAuB,EACvBC,2BAA2B,QACtB,WAAW;AAClB,SACEC,wBAAwB,EAExBC,yBAAyB,QACpB,uBAAuB;AAC9B,SACEC,6BAA6B,EAE7BC,8BAA8B,QACzB,4BAA4B;AACnC,SAAsBC,aAAa,EAAEC,gBAAgB,QAAO,YAAY"}
+{"version":3,"sources":["../../src/schemas/index.ts"],"sourcesContent":["export {\n  AUTH_PASSWORD_RESET_SEND_REQUESTED,\n  AUTH_USER_SIGNED_UP,\n  type AuthEventMap,\n  type AuthPasswordResetSendRequestedEvent,\n  type AuthUserSignedUpEvent,\n  authEventSchemas,\n  authPasswordResetSendRequestedSchema,\n  authUserSignedUpSchema,\n} from '../events.js';\nexport {\n  type AdminGrantDto,\n  type AdminRole,\n  adminGrantDtoSchema,\n  adminRoleSchema,\n  type BootstrapAdminOwnerBodyDto,\n  type BootstrapAdminOwnerResponseDto,\n  bootstrapAdminOwnerBodySchema,\n  bootstrapAdminOwnerResponseSchema,\n  type GrantAdminRoleBodyDto,\n  type GrantAdminRoleResponseDto,\n  grantAdminRoleBodySchema,\n  grantAdminRoleResponseSchema,\n  type ListAdminGrantsResponseDto,\n  listAdminGrantsResponseSchema,\n  type RevokeAdminGrantBodyDto,\n  type RevokeAdminGrantResponseDto,\n  revokeAdminGrantBodySchema,\n  revokeAdminGrantResponseSchema,\n} from './admin.js';\nexport {\n  type ChangePasswordBodyDto,\n  changePasswordBodySchema,\n  emailSchema,\n  type LoginBodyDto,\n  type LoginMethodDto,\n  type LoginMethodsResponseDto,\n  type LoginResponseDto,\n  type LogoutBodyDto,\n  loginBodySchema,\n  loginMethodSchema,\n  loginMethodsResponseSchema,\n  loginResponseSchema,\n  logoutBodySchema,\n  type MeResponseDto,\n  meResponseSchema,\n  type PasswordResetConfirmBodyDto,\n  type PasswordResetConfirmResponseDto,\n  type PasswordResetRequestBodyDto,\n  passwordResetConfirmBodySchema,\n  passwordResetConfirmResponseSchema,\n  passwordResetRequestBodySchema,\n  passwordSchema,\n  type RefreshResponseDto,\n  refreshResponseSchema,\n  type SignupAcceptErrorDto,\n  type SignupBodyDto,\n  type SignupMembershipDto,\n  type SignupResponseDto,\n  signupAcceptErrorSchema,\n  signupBodySchema,\n  signupMembershipSchema,\n  signupResponseSchema,\n  type VerifyEmailConfirmBodyDto,\n  type VerifyEmailConfirmResponseDto,\n  type VerifyEmailResendBodyDto,\n  type VerifyEmailResendResponseDto,\n  verifyEmailConfirmBodySchema,\n  verifyEmailConfirmResponseSchema,\n  verifyEmailResendBodySchema,\n  verifyEmailResendResponseSchema,\n} from './auth.js';\nexport {\n  type E2eCreateSessionBodyDto,\n  type E2eCreateSessionResponseDto,\n  type E2eCreateUserBodyDto,\n  type E2eCreateUserResponseDto,\n  type E2eSessionDto,\n  e2eCreateSessionBodySchema,\n  e2eCreateSessionResponseSchema,\n  e2eCreateUserBodySchema,\n  e2eCreateUserResponseSchema,\n} from './e2e.js';\nexport {\n  JOB_LEASE_TOKEN_AUDIENCE,\n  type JobLeaseTokenClaims,\n  jobLeaseTokenClaimsSchema,\n} from './job-lease-token.js';\nexport {\n  RUNNER_SESSION_TOKEN_AUDIENCE,\n  type RunnerSessionTokenClaims,\n  runnerSessionTokenClaimsSchema,\n} from './runner-session-token.js';\nexport {type UserDto, userDtoSchema, userStatusSchema} from './user.js';\n"],"names":["AUTH_PASSWORD_RESET_SEND_REQUESTED","AUTH_USER_SIGNED_UP","authEventSchemas","authPasswordResetSendRequestedSchema","authUserSignedUpSchema","adminGrantDtoSchema","adminRoleSchema","bootstrapAdminOwnerBodySchema","bootstrapAdminOwnerResponseSchema","grantAdminRoleBodySchema","grantAdminRoleResponseSchema","listAdminGrantsResponseSchema","revokeAdminGrantBodySchema","revokeAdminGrantResponseSchema","changePasswordBodySchema","emailSchema","loginBodySchema","loginMethodSchema","loginMethodsResponseSchema","loginResponseSchema","logoutBodySchema","meResponseSchema","passwordResetConfirmBodySchema","passwordResetConfirmResponseSchema","passwordResetRequestBodySchema","passwordSchema","refreshResponseSchema","signupAcceptErrorSchema","signupBodySchema","signupMembershipSchema","signupResponseSchema","verifyEmailConfirmBodySchema","verifyEmailConfirmResponseSchema","verifyEmailResendBodySchema","verifyEmailResendResponseSchema","e2eCreateSessionBodySchema","e2eCreateSessionResponseSchema","e2eCreateUserBodySchema","e2eCreateUserResponseSchema","JOB_LEASE_TOKEN_AUDIENCE","jobLeaseTokenClaimsSchema","RUNNER_SESSION_TOKEN_AUDIENCE","runnerSessionTokenClaimsSchema","userDtoSchema","userStatusSchema"],"mappings":"AAAA,SACEA,kCAAkC,EAClCC,mBAAmB,EAInBC,gBAAgB,EAChBC,oCAAoC,EACpCC,sBAAsB,QACjB,eAAe;AACtB,SAGEC,mBAAmB,EACnBC,eAAe,EAGfC,6BAA6B,EAC7BC,iCAAiC,EAGjCC,wBAAwB,EACxBC,4BAA4B,EAE5BC,6BAA6B,EAG7BC,0BAA0B,EAC1BC,8BAA8B,QACzB,aAAa;AACpB,SAEEC,wBAAwB,EACxBC,WAAW,EAMXC,eAAe,EACfC,iBAAiB,EACjBC,0BAA0B,EAC1BC,mBAAmB,EACnBC,gBAAgB,EAEhBC,gBAAgB,EAIhBC,8BAA8B,EAC9BC,kCAAkC,EAClCC,8BAA8B,EAC9BC,cAAc,EAEdC,qBAAqB,EAKrBC,uBAAuB,EACvBC,gBAAgB,EAChBC,sBAAsB,EACtBC,oBAAoB,EAKpBC,4BAA4B,EAC5BC,gCAAgC,EAChCC,2BAA2B,EAC3BC,+BAA+B,QAC1B,YAAY;AACnB,SAMEC,0BAA0B,EAC1BC,8BAA8B,EAC9BC,uBAAuB,EACvBC,2BAA2B,QACtB,WAAW;AAClB,SACEC,wBAAwB,EAExBC,yBAAyB,QACpB,uBAAuB;AAC9B,SACEC,6BAA6B,EAE7BC,8BAA8B,QACzB,4BAA4B;AACnC,SAAsBC,aAAa,EAAEC,gBAAgB,QAAO,YAAY"}