@stackframe/stack-shared 2.8.56 → 2.8.59

package/dist/schema-fields.d.mts

@@ -73,7 +73,28 @@ declare const dayIntervalOrNeverSchema: yup.MixedSchema<"never" | DayInterval, y
 /**
  * This schema is useful for fields where the user can specify the ID, such as price IDs. It is particularly common
  * for IDs in the config schema.
+ *
+ * Valid IDs:
+ * - Must contain only letters, numbers, underscores, and hyphens
+ * - Must not start with a hyphen
+ * - Maximum length of 63 characters
+ */
+declare const USER_SPECIFIED_ID_PATTERN: RegExp;
+declare const USER_SPECIFIED_ID_MAX_LENGTH = 63;
+/**
+ * Checks if the given string is a valid user-specified ID.
+ */
+declare function isValidUserSpecifiedId(id: string): boolean;
+/**
+ * Gets the error message for an invalid user-specified ID.
+ */
+declare function getUserSpecifiedIdErrorMessage(idName: `${string}Id`): string;
+/**
+ * Sanitizes user input to create a valid user-specified ID.
+ * Converts to lowercase and replaces invalid characters with hyphens.
+ * Strips leading hyphens.
  */
+declare function sanitizeUserSpecifiedId(input: string): string;
 declare const userSpecifiedIdSchema: (idName: `${string}Id`) => yup.StringSchema<string | undefined, yup.AnyObject, undefined, "">;
 declare const moneyAmountSchema: (currency: Currency) => yup.StringSchema<string | undefined, yup.AnyObject, undefined, "">;
 /**
@@ -172,7 +193,7 @@ declare const priceOrIncludeByDefaultSchema: yup.MixedSchema<"include-by-default
 }> | undefined, yup.AnyObject, undefined, "">;
 declare const productSchema: yup.ObjectSchema<{
     displayName: string | undefined;
-    catalogId: string | undefined;
+    productLineId: string | undefined;
     isAddOnTo: false | Record<string, true> | undefined;
     customerType: "user" | "team" | "custom";
     freeTrial: DayInterval | undefined;
@@ -197,7 +218,7 @@ declare const productSchema: yup.ObjectSchema<{
     }>;
 }, yup.AnyObject, {
     displayName: undefined;
-    catalogId: undefined;
+    productLineId: undefined;
     isAddOnTo: undefined;
     customerType: undefined;
     freeTrial: undefined;
@@ -211,7 +232,7 @@ declare const productClientReadOnlyMetadataSchema: yup.MixedSchema<{} | null, yu
 declare const productServerMetadataSchema: yup.MixedSchema<{} | null, yup.AnyObject, undefined, "">;
 declare const productSchemaWithMetadata: yup.ObjectSchema<{
     displayName: string | undefined;
-    catalogId: string | undefined;
+    productLineId: string | undefined;
     isAddOnTo: false | Record<string, true> | undefined;
     customerType: "user" | "team" | "custom";
     freeTrial: DayInterval | undefined;
@@ -240,7 +261,7 @@ declare const productSchemaWithMetadata: yup.ObjectSchema<{
     serverMetadata: {} | null | undefined;
 }, yup.AnyObject, {
     displayName: undefined;
-    catalogId: undefined;
+    productLineId: undefined;
     isAddOnTo: undefined;
     customerType: undefined;
     freeTrial: undefined;
@@ -322,9 +343,12 @@ declare const userHasPasswordSchema: yup.BooleanSchema<boolean | undefined, yup.
 declare const userPasswordMutationSchema: yup.StringSchema<string | null | undefined, yup.AnyObject, undefined, "">;
 declare const userPasswordHashMutationSchema: yup.StringSchema<string | undefined, yup.AnyObject, undefined, "">;
 declare const userTotpSecretMutationSchema: yup.StringSchema<string | null | undefined, yup.AnyObject, undefined, "">;
+declare const restrictedReasonTypes: readonly ["anonymous", "email_not_verified"];
+type RestrictedReasonType = typeof restrictedReasonTypes[number];
 declare const accessTokenPayloadSchema: yup.ObjectSchema<{
     sub: string;
     exp: number | undefined;
+    iat: number;
     iss: string;
     aud: string;
     project_id: string;
@@ -336,9 +360,14 @@ declare const accessTokenPayloadSchema: yup.ObjectSchema<{
     email_verified: boolean;
     selected_team_id: string | null;
     is_anonymous: boolean;
+    is_restricted: boolean;
+    restricted_reason: {
+        type: "anonymous" | "email_not_verified";
+    } | null;
 }, yup.AnyObject, {
     sub: undefined;
     exp: undefined;
+    iat: undefined;
     iss: undefined;
     aud: undefined;
     project_id: undefined;
@@ -350,6 +379,10 @@ declare const accessTokenPayloadSchema: yup.ObjectSchema<{
     email_verified: undefined;
     selected_team_id: undefined;
     is_anonymous: undefined;
+    is_restricted: undefined;
+    restricted_reason: {
+        type: undefined;
+    };
 }, "">;
 declare const signInEmailSchema: yup.StringSchema<string | undefined, yup.AnyObject, undefined, "">;
 declare const emailOtpSignInCallbackUrlSchema: yup.StringSchema<string | undefined, yup.AnyObject, undefined, "">;
@@ -402,4 +435,4 @@ declare const neonAuthorizationHeaderSchema: yup.StringSchema<string | undefined
 declare function yupDefinedWhen<S extends yup.AnyObject>(schema: S, triggers: Record<string, any>): S;
 declare function yupDefinedAndNonEmptyWhen<S extends yup.StringSchema>(schema: S, triggers: Record<string, any>): S;
 
-export { ReplaceFieldWithOwnUserId, StackAdaptSentinel, accessTokenPayloadSchema, accessTokenResponseSchema, adaptSchema, adminAuthTypeSchema, base64Schema, basicAuthorizationHeaderSchema, clientOrHigherAuthTypeSchema, contactChannelIdSchema, contactChannelIsPrimarySchema, contactChannelIsVerifiedSchema, contactChannelTypeSchema, contactChannelUsedForAuthSchema, contactChannelValueSchema, containedPermissionIdsSchema, customPermissionDefinitionIdSchema, customerTypeSchema, dayIntervalOrNeverSchema, dayIntervalSchema, emailHostSchema, emailOtpSignInCallbackUrlSchema, emailPasswordSchema, emailPortSchema, emailSchema, emailSenderEmailSchema, emailSenderNameSchema, emailTemplateListSchema, emailThemeListSchema, emailThemeSchema, emailTypeSchema, emailUsernameSchema, emailVerificationCallbackUrlSchema, ensureObjectSchema, handlerPathSchema, inlineProductSchema, intervalOrNeverSchema, intervalSchema, jsonSchema, jsonStringOrEmptySchema, jsonStringSchema, moneyAmountSchema, neonAuthorizationHeaderSchema, oauthAccountMergeStrategySchema, oauthClientIdSchema, oauthClientSecretSchema, oauthEnabledSchema, oauthFacebookConfigIdSchema, oauthIdSchema, oauthMicrosoftTenantIdSchema, oauthProviderAccountIdSchema, oauthProviderAllowConnectedAccountsSchema, oauthProviderAllowSignInSchema, oauthProviderEmailSchema, oauthProviderIdSchema, oauthProviderProviderConfigIdSchema, oauthProviderTypeSchema, oauthTypeSchema, passwordSchema, permissionDefinitionIdSchema, priceOrIncludeByDefaultSchema, primaryEmailAuthEnabledSchema, primaryEmailSchema, primaryEmailVerifiedSchema, productClientMetadataSchema, productClientReadOnlyMetadataSchema, productPriceSchema, productSchema, productSchemaWithMetadata, productServerMetadataSchema, profileImageUrlSchema, projectAllowLocalhostSchema, projectBranchIdSchema, projectClientTeamCreationEnabledSchema, projectClientUserDeletionEnabledSchema, projectConfigIdSchema, projectCreateTeamOnSignUpSchema, projectCreatedAtMillisSchema, projectCredentialEnabledSchema, projectDescriptionSchema, projectDisplayNameSchema, projectIdSchema, projectIsProductionModeSchema, projectLogoDarkModeUrlSchema, projectLogoFullDarkModeUrlSchema, projectLogoFullUrlSchema, projectLogoUrlSchema, projectMagicLinkEnabledSchema, projectPasskeyEnabledSchema, projectSignUpEnabledSchema, refreshTokenResponseSchema, selectedTeamIdSchema, serverOrHigherAuthTypeSchema, signInEmailSchema, signInResponseSchema, signedUpAtMillisSchema, strictEmailSchema, teamClientMetadataSchema, teamClientReadOnlyMetadataSchema, teamCreatedAtMillisSchema, teamCreatorUserIdSchema, teamDisplayNameSchema, teamIdSchema, teamInvitationCallbackUrlSchema, teamInvitationEmailSchema, teamMemberDisplayNameSchema, teamMemberProfileImageUrlSchema, teamPermissionDescriptionSchema, teamProfileImageUrlSchema, teamServerMetadataSchema, teamSystemPermissions, templateThemeIdSchema, urlSchema, userClientMetadataSchema, userClientReadOnlyMetadataSchema, userDisplayNameSchema, userHasPasswordSchema, userIdOrMeSchema, userIdSchema, userLastActiveAtMillisSchema, userOAuthProviderSchema, userOtpAuthEnabledMutationSchema, userOtpAuthEnabledSchema, userPasskeyAuthEnabledSchema, userPasswordHashMutationSchema, userPasswordMutationSchema, userServerMetadataSchema, userSpecifiedIdSchema, userTotpSecretMutationSchema, wildcardProtocolAndDomainSchema, wildcardUrlSchema, yupArray, yupBoolean, yupDate, yupDefinedAndNonEmptyWhen, yupDefinedWhen, yupMixed, yupNever, yupNumber, yupObject, yupObjectWithAutoDefault, yupRecord, yupString, yupTuple, yupUnion, yupValidate };
+export { ReplaceFieldWithOwnUserId, type RestrictedReasonType, StackAdaptSentinel, USER_SPECIFIED_ID_MAX_LENGTH, USER_SPECIFIED_ID_PATTERN, accessTokenPayloadSchema, accessTokenResponseSchema, adaptSchema, adminAuthTypeSchema, base64Schema, basicAuthorizationHeaderSchema, clientOrHigherAuthTypeSchema, contactChannelIdSchema, contactChannelIsPrimarySchema, contactChannelIsVerifiedSchema, contactChannelTypeSchema, contactChannelUsedForAuthSchema, contactChannelValueSchema, containedPermissionIdsSchema, customPermissionDefinitionIdSchema, customerTypeSchema, dayIntervalOrNeverSchema, dayIntervalSchema, emailHostSchema, emailOtpSignInCallbackUrlSchema, emailPasswordSchema, emailPortSchema, emailSchema, emailSenderEmailSchema, emailSenderNameSchema, emailTemplateListSchema, emailThemeListSchema, emailThemeSchema, emailTypeSchema, emailUsernameSchema, emailVerificationCallbackUrlSchema, ensureObjectSchema, getUserSpecifiedIdErrorMessage, handlerPathSchema, inlineProductSchema, intervalOrNeverSchema, intervalSchema, isValidUserSpecifiedId, jsonSchema, jsonStringOrEmptySchema, jsonStringSchema, moneyAmountSchema, neonAuthorizationHeaderSchema, oauthAccountMergeStrategySchema, oauthClientIdSchema, oauthClientSecretSchema, oauthEnabledSchema, oauthFacebookConfigIdSchema, oauthIdSchema, oauthMicrosoftTenantIdSchema, oauthProviderAccountIdSchema, oauthProviderAllowConnectedAccountsSchema, oauthProviderAllowSignInSchema, oauthProviderEmailSchema, oauthProviderIdSchema, oauthProviderProviderConfigIdSchema, oauthProviderTypeSchema, oauthTypeSchema, passwordSchema, permissionDefinitionIdSchema, priceOrIncludeByDefaultSchema, primaryEmailAuthEnabledSchema, primaryEmailSchema, primaryEmailVerifiedSchema, productClientMetadataSchema, productClientReadOnlyMetadataSchema, productPriceSchema, productSchema, productSchemaWithMetadata, productServerMetadataSchema, profileImageUrlSchema, projectAllowLocalhostSchema, projectBranchIdSchema, projectClientTeamCreationEnabledSchema, projectClientUserDeletionEnabledSchema, projectConfigIdSchema, projectCreateTeamOnSignUpSchema, projectCreatedAtMillisSchema, projectCredentialEnabledSchema, projectDescriptionSchema, projectDisplayNameSchema, projectIdSchema, projectIsProductionModeSchema, projectLogoDarkModeUrlSchema, projectLogoFullDarkModeUrlSchema, projectLogoFullUrlSchema, projectLogoUrlSchema, projectMagicLinkEnabledSchema, projectPasskeyEnabledSchema, projectSignUpEnabledSchema, refreshTokenResponseSchema, restrictedReasonTypes, sanitizeUserSpecifiedId, selectedTeamIdSchema, serverOrHigherAuthTypeSchema, signInEmailSchema, signInResponseSchema, signedUpAtMillisSchema, strictEmailSchema, teamClientMetadataSchema, teamClientReadOnlyMetadataSchema, teamCreatedAtMillisSchema, teamCreatorUserIdSchema, teamDisplayNameSchema, teamIdSchema, teamInvitationCallbackUrlSchema, teamInvitationEmailSchema, teamMemberDisplayNameSchema, teamMemberProfileImageUrlSchema, teamPermissionDescriptionSchema, teamProfileImageUrlSchema, teamServerMetadataSchema, teamSystemPermissions, templateThemeIdSchema, urlSchema, userClientMetadataSchema, userClientReadOnlyMetadataSchema, userDisplayNameSchema, userHasPasswordSchema, userIdOrMeSchema, userIdSchema, userLastActiveAtMillisSchema, userOAuthProviderSchema, userOtpAuthEnabledMutationSchema, userOtpAuthEnabledSchema, userPasskeyAuthEnabledSchema, userPasswordHashMutationSchema, userPasswordMutationSchema, userServerMetadataSchema, userSpecifiedIdSchema, userTotpSecretMutationSchema, wildcardProtocolAndDomainSchema, wildcardUrlSchema, yupArray, yupBoolean, yupDate, yupDefinedAndNonEmptyWhen, yupDefinedWhen, yupMixed, yupNever, yupNumber, yupObject, yupObjectWithAutoDefault, yupRecord, yupString, yupTuple, yupUnion, yupValidate };

package/dist/schema-fields.d.ts

@@ -73,7 +73,28 @@ declare const dayIntervalOrNeverSchema: yup.MixedSchema<"never" | DayInterval, y
 /**
  * This schema is useful for fields where the user can specify the ID, such as price IDs. It is particularly common
  * for IDs in the config schema.
+ *
+ * Valid IDs:
+ * - Must contain only letters, numbers, underscores, and hyphens
+ * - Must not start with a hyphen
+ * - Maximum length of 63 characters
+ */
+declare const USER_SPECIFIED_ID_PATTERN: RegExp;
+declare const USER_SPECIFIED_ID_MAX_LENGTH = 63;
+/**
+ * Checks if the given string is a valid user-specified ID.
+ */
+declare function isValidUserSpecifiedId(id: string): boolean;
+/**
+ * Gets the error message for an invalid user-specified ID.
+ */
+declare function getUserSpecifiedIdErrorMessage(idName: `${string}Id`): string;
+/**
+ * Sanitizes user input to create a valid user-specified ID.
+ * Converts to lowercase and replaces invalid characters with hyphens.
+ * Strips leading hyphens.
  */
+declare function sanitizeUserSpecifiedId(input: string): string;
 declare const userSpecifiedIdSchema: (idName: `${string}Id`) => yup.StringSchema<string | undefined, yup.AnyObject, undefined, "">;
 declare const moneyAmountSchema: (currency: Currency) => yup.StringSchema<string | undefined, yup.AnyObject, undefined, "">;
 /**
@@ -172,7 +193,7 @@ declare const priceOrIncludeByDefaultSchema: yup.MixedSchema<"include-by-default
 }> | undefined, yup.AnyObject, undefined, "">;
 declare const productSchema: yup.ObjectSchema<{
     displayName: string | undefined;
-    catalogId: string | undefined;
+    productLineId: string | undefined;
     isAddOnTo: false | Record<string, true> | undefined;
     customerType: "user" | "team" | "custom";
     freeTrial: DayInterval | undefined;
@@ -197,7 +218,7 @@ declare const productSchema: yup.ObjectSchema<{
     }>;
 }, yup.AnyObject, {
     displayName: undefined;
-    catalogId: undefined;
+    productLineId: undefined;
     isAddOnTo: undefined;
     customerType: undefined;
     freeTrial: undefined;
@@ -211,7 +232,7 @@ declare const productClientReadOnlyMetadataSchema: yup.MixedSchema<{} | null, yu
 declare const productServerMetadataSchema: yup.MixedSchema<{} | null, yup.AnyObject, undefined, "">;
 declare const productSchemaWithMetadata: yup.ObjectSchema<{
     displayName: string | undefined;
-    catalogId: string | undefined;
+    productLineId: string | undefined;
     isAddOnTo: false | Record<string, true> | undefined;
     customerType: "user" | "team" | "custom";
     freeTrial: DayInterval | undefined;
@@ -240,7 +261,7 @@ declare const productSchemaWithMetadata: yup.ObjectSchema<{
     serverMetadata: {} | null | undefined;
 }, yup.AnyObject, {
     displayName: undefined;
-    catalogId: undefined;
+    productLineId: undefined;
     isAddOnTo: undefined;
     customerType: undefined;
     freeTrial: undefined;
@@ -322,9 +343,12 @@ declare const userHasPasswordSchema: yup.BooleanSchema<boolean | undefined, yup.
 declare const userPasswordMutationSchema: yup.StringSchema<string | null | undefined, yup.AnyObject, undefined, "">;
 declare const userPasswordHashMutationSchema: yup.StringSchema<string | undefined, yup.AnyObject, undefined, "">;
 declare const userTotpSecretMutationSchema: yup.StringSchema<string | null | undefined, yup.AnyObject, undefined, "">;
+declare const restrictedReasonTypes: readonly ["anonymous", "email_not_verified"];
+type RestrictedReasonType = typeof restrictedReasonTypes[number];
 declare const accessTokenPayloadSchema: yup.ObjectSchema<{
     sub: string;
     exp: number | undefined;
+    iat: number;
     iss: string;
     aud: string;
     project_id: string;
@@ -336,9 +360,14 @@ declare const accessTokenPayloadSchema: yup.ObjectSchema<{
     email_verified: boolean;
     selected_team_id: string | null;
     is_anonymous: boolean;
+    is_restricted: boolean;
+    restricted_reason: {
+        type: "anonymous" | "email_not_verified";
+    } | null;
 }, yup.AnyObject, {
     sub: undefined;
     exp: undefined;
+    iat: undefined;
     iss: undefined;
     aud: undefined;
     project_id: undefined;
@@ -350,6 +379,10 @@ declare const accessTokenPayloadSchema: yup.ObjectSchema<{
     email_verified: undefined;
     selected_team_id: undefined;
     is_anonymous: undefined;
+    is_restricted: undefined;
+    restricted_reason: {
+        type: undefined;
+    };
 }, "">;
 declare const signInEmailSchema: yup.StringSchema<string | undefined, yup.AnyObject, undefined, "">;
 declare const emailOtpSignInCallbackUrlSchema: yup.StringSchema<string | undefined, yup.AnyObject, undefined, "">;
@@ -402,4 +435,4 @@ declare const neonAuthorizationHeaderSchema: yup.StringSchema<string | undefined
 declare function yupDefinedWhen<S extends yup.AnyObject>(schema: S, triggers: Record<string, any>): S;
 declare function yupDefinedAndNonEmptyWhen<S extends yup.StringSchema>(schema: S, triggers: Record<string, any>): S;
 
-export { ReplaceFieldWithOwnUserId, StackAdaptSentinel, accessTokenPayloadSchema, accessTokenResponseSchema, adaptSchema, adminAuthTypeSchema, base64Schema, basicAuthorizationHeaderSchema, clientOrHigherAuthTypeSchema, contactChannelIdSchema, contactChannelIsPrimarySchema, contactChannelIsVerifiedSchema, contactChannelTypeSchema, contactChannelUsedForAuthSchema, contactChannelValueSchema, containedPermissionIdsSchema, customPermissionDefinitionIdSchema, customerTypeSchema, dayIntervalOrNeverSchema, dayIntervalSchema, emailHostSchema, emailOtpSignInCallbackUrlSchema, emailPasswordSchema, emailPortSchema, emailSchema, emailSenderEmailSchema, emailSenderNameSchema, emailTemplateListSchema, emailThemeListSchema, emailThemeSchema, emailTypeSchema, emailUsernameSchema, emailVerificationCallbackUrlSchema, ensureObjectSchema, handlerPathSchema, inlineProductSchema, intervalOrNeverSchema, intervalSchema, jsonSchema, jsonStringOrEmptySchema, jsonStringSchema, moneyAmountSchema, neonAuthorizationHeaderSchema, oauthAccountMergeStrategySchema, oauthClientIdSchema, oauthClientSecretSchema, oauthEnabledSchema, oauthFacebookConfigIdSchema, oauthIdSchema, oauthMicrosoftTenantIdSchema, oauthProviderAccountIdSchema, oauthProviderAllowConnectedAccountsSchema, oauthProviderAllowSignInSchema, oauthProviderEmailSchema, oauthProviderIdSchema, oauthProviderProviderConfigIdSchema, oauthProviderTypeSchema, oauthTypeSchema, passwordSchema, permissionDefinitionIdSchema, priceOrIncludeByDefaultSchema, primaryEmailAuthEnabledSchema, primaryEmailSchema, primaryEmailVerifiedSchema, productClientMetadataSchema, productClientReadOnlyMetadataSchema, productPriceSchema, productSchema, productSchemaWithMetadata, productServerMetadataSchema, profileImageUrlSchema, projectAllowLocalhostSchema, projectBranchIdSchema, projectClientTeamCreationEnabledSchema, projectClientUserDeletionEnabledSchema, projectConfigIdSchema, projectCreateTeamOnSignUpSchema, projectCreatedAtMillisSchema, projectCredentialEnabledSchema, projectDescriptionSchema, projectDisplayNameSchema, projectIdSchema, projectIsProductionModeSchema, projectLogoDarkModeUrlSchema, projectLogoFullDarkModeUrlSchema, projectLogoFullUrlSchema, projectLogoUrlSchema, projectMagicLinkEnabledSchema, projectPasskeyEnabledSchema, projectSignUpEnabledSchema, refreshTokenResponseSchema, selectedTeamIdSchema, serverOrHigherAuthTypeSchema, signInEmailSchema, signInResponseSchema, signedUpAtMillisSchema, strictEmailSchema, teamClientMetadataSchema, teamClientReadOnlyMetadataSchema, teamCreatedAtMillisSchema, teamCreatorUserIdSchema, teamDisplayNameSchema, teamIdSchema, teamInvitationCallbackUrlSchema, teamInvitationEmailSchema, teamMemberDisplayNameSchema, teamMemberProfileImageUrlSchema, teamPermissionDescriptionSchema, teamProfileImageUrlSchema, teamServerMetadataSchema, teamSystemPermissions, templateThemeIdSchema, urlSchema, userClientMetadataSchema, userClientReadOnlyMetadataSchema, userDisplayNameSchema, userHasPasswordSchema, userIdOrMeSchema, userIdSchema, userLastActiveAtMillisSchema, userOAuthProviderSchema, userOtpAuthEnabledMutationSchema, userOtpAuthEnabledSchema, userPasskeyAuthEnabledSchema, userPasswordHashMutationSchema, userPasswordMutationSchema, userServerMetadataSchema, userSpecifiedIdSchema, userTotpSecretMutationSchema, wildcardProtocolAndDomainSchema, wildcardUrlSchema, yupArray, yupBoolean, yupDate, yupDefinedAndNonEmptyWhen, yupDefinedWhen, yupMixed, yupNever, yupNumber, yupObject, yupObjectWithAutoDefault, yupRecord, yupString, yupTuple, yupUnion, yupValidate };
+export { ReplaceFieldWithOwnUserId, type RestrictedReasonType, StackAdaptSentinel, USER_SPECIFIED_ID_MAX_LENGTH, USER_SPECIFIED_ID_PATTERN, accessTokenPayloadSchema, accessTokenResponseSchema, adaptSchema, adminAuthTypeSchema, base64Schema, basicAuthorizationHeaderSchema, clientOrHigherAuthTypeSchema, contactChannelIdSchema, contactChannelIsPrimarySchema, contactChannelIsVerifiedSchema, contactChannelTypeSchema, contactChannelUsedForAuthSchema, contactChannelValueSchema, containedPermissionIdsSchema, customPermissionDefinitionIdSchema, customerTypeSchema, dayIntervalOrNeverSchema, dayIntervalSchema, emailHostSchema, emailOtpSignInCallbackUrlSchema, emailPasswordSchema, emailPortSchema, emailSchema, emailSenderEmailSchema, emailSenderNameSchema, emailTemplateListSchema, emailThemeListSchema, emailThemeSchema, emailTypeSchema, emailUsernameSchema, emailVerificationCallbackUrlSchema, ensureObjectSchema, getUserSpecifiedIdErrorMessage, handlerPathSchema, inlineProductSchema, intervalOrNeverSchema, intervalSchema, isValidUserSpecifiedId, jsonSchema, jsonStringOrEmptySchema, jsonStringSchema, moneyAmountSchema, neonAuthorizationHeaderSchema, oauthAccountMergeStrategySchema, oauthClientIdSchema, oauthClientSecretSchema, oauthEnabledSchema, oauthFacebookConfigIdSchema, oauthIdSchema, oauthMicrosoftTenantIdSchema, oauthProviderAccountIdSchema, oauthProviderAllowConnectedAccountsSchema, oauthProviderAllowSignInSchema, oauthProviderEmailSchema, oauthProviderIdSchema, oauthProviderProviderConfigIdSchema, oauthProviderTypeSchema, oauthTypeSchema, passwordSchema, permissionDefinitionIdSchema, priceOrIncludeByDefaultSchema, primaryEmailAuthEnabledSchema, primaryEmailSchema, primaryEmailVerifiedSchema, productClientMetadataSchema, productClientReadOnlyMetadataSchema, productPriceSchema, productSchema, productSchemaWithMetadata, productServerMetadataSchema, profileImageUrlSchema, projectAllowLocalhostSchema, projectBranchIdSchema, projectClientTeamCreationEnabledSchema, projectClientUserDeletionEnabledSchema, projectConfigIdSchema, projectCreateTeamOnSignUpSchema, projectCreatedAtMillisSchema, projectCredentialEnabledSchema, projectDescriptionSchema, projectDisplayNameSchema, projectIdSchema, projectIsProductionModeSchema, projectLogoDarkModeUrlSchema, projectLogoFullDarkModeUrlSchema, projectLogoFullUrlSchema, projectLogoUrlSchema, projectMagicLinkEnabledSchema, projectPasskeyEnabledSchema, projectSignUpEnabledSchema, refreshTokenResponseSchema, restrictedReasonTypes, sanitizeUserSpecifiedId, selectedTeamIdSchema, serverOrHigherAuthTypeSchema, signInEmailSchema, signInResponseSchema, signedUpAtMillisSchema, strictEmailSchema, teamClientMetadataSchema, teamClientReadOnlyMetadataSchema, teamCreatedAtMillisSchema, teamCreatorUserIdSchema, teamDisplayNameSchema, teamIdSchema, teamInvitationCallbackUrlSchema, teamInvitationEmailSchema, teamMemberDisplayNameSchema, teamMemberProfileImageUrlSchema, teamPermissionDescriptionSchema, teamProfileImageUrlSchema, teamServerMetadataSchema, teamSystemPermissions, templateThemeIdSchema, urlSchema, userClientMetadataSchema, userClientReadOnlyMetadataSchema, userDisplayNameSchema, userHasPasswordSchema, userIdOrMeSchema, userIdSchema, userLastActiveAtMillisSchema, userOAuthProviderSchema, userOtpAuthEnabledMutationSchema, userOtpAuthEnabledSchema, userPasskeyAuthEnabledSchema, userPasswordHashMutationSchema, userPasswordMutationSchema, userServerMetadataSchema, userSpecifiedIdSchema, userTotpSecretMutationSchema, wildcardProtocolAndDomainSchema, wildcardUrlSchema, yupArray, yupBoolean, yupDate, yupDefinedAndNonEmptyWhen, yupDefinedWhen, yupMixed, yupNever, yupNumber, yupObject, yupObjectWithAutoDefault, yupRecord, yupString, yupTuple, yupUnion, yupValidate };

package/dist/schema-fields.js

@@ -31,6 +31,8 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var schema_fields_exports = {};
 __export(schema_fields_exports, {
   ReplaceFieldWithOwnUserId: () => ReplaceFieldWithOwnUserId,
+  USER_SPECIFIED_ID_MAX_LENGTH: () => USER_SPECIFIED_ID_MAX_LENGTH,
+  USER_SPECIFIED_ID_PATTERN: () => USER_SPECIFIED_ID_PATTERN,
   accessTokenPayloadSchema: () => accessTokenPayloadSchema,
   accessTokenResponseSchema: () => accessTokenResponseSchema,
   adaptSchema: () => adaptSchema,
@@ -63,10 +65,12 @@ __export(schema_fields_exports, {
   emailUsernameSchema: () => emailUsernameSchema,
   emailVerificationCallbackUrlSchema: () => emailVerificationCallbackUrlSchema,
   ensureObjectSchema: () => ensureObjectSchema,
+  getUserSpecifiedIdErrorMessage: () => getUserSpecifiedIdErrorMessage,
   handlerPathSchema: () => handlerPathSchema,
   inlineProductSchema: () => inlineProductSchema,
   intervalOrNeverSchema: () => intervalOrNeverSchema,
   intervalSchema: () => intervalSchema,
+  isValidUserSpecifiedId: () => isValidUserSpecifiedId,
   jsonSchema: () => jsonSchema,
   jsonStringOrEmptySchema: () => jsonStringOrEmptySchema,
   jsonStringSchema: () => jsonStringSchema,
@@ -120,6 +124,8 @@ __export(schema_fields_exports, {
   projectPasskeyEnabledSchema: () => projectPasskeyEnabledSchema,
   projectSignUpEnabledSchema: () => projectSignUpEnabledSchema,
   refreshTokenResponseSchema: () => refreshTokenResponseSchema,
+  restrictedReasonTypes: () => restrictedReasonTypes,
+  sanitizeUserSpecifiedId: () => sanitizeUserSpecifiedId,
   selectedTeamIdSchema: () => selectedTeamIdSchema,
   serverOrHigherAuthTypeSchema: () => serverOrHigherAuthTypeSchema,
   signInEmailSchema: () => signInEmailSchema,
@@ -478,7 +484,19 @@ var intervalSchema = yupTuple([yupNumber().min(0).integer().defined(), yupString
 var dayIntervalSchema = yupTuple([yupNumber().min(0).integer().defined(), yupString().oneOf(["day", "week", "month", "year"]).defined()]);
 var intervalOrNeverSchema = yupUnion(intervalSchema.defined(), yupString().oneOf(["never"]).defined());
 var dayIntervalOrNeverSchema = yupUnion(dayIntervalSchema.defined(), yupString().oneOf(["never"]).defined());
-var userSpecifiedIdSchema = (idName) => yupString().max(63).matches(/^[a-zA-Z0-9_][a-zA-Z0-9_-]*$/, `${idName} must contain only letters, numbers, underscores, and hyphens, and not start with a hyphen`);
+var USER_SPECIFIED_ID_PATTERN = /^[a-zA-Z0-9_][a-zA-Z0-9_-]*$/;
+var USER_SPECIFIED_ID_MAX_LENGTH = 63;
+function isValidUserSpecifiedId(id) {
+  return id.length > 0 && id.length <= USER_SPECIFIED_ID_MAX_LENGTH && USER_SPECIFIED_ID_PATTERN.test(id);
+}
+function getUserSpecifiedIdErrorMessage(idName) {
+  return `${idName} must contain only letters, numbers, underscores, and hyphens, and not start with a hyphen`;
+}
+function sanitizeUserSpecifiedId(input) {
+  const sanitized = input.replace(/\s+/g, "-").replace(/[^a-zA-Z0-9_-]/g, "");
+  return sanitized.replace(/^-+/, "");
+}
+var userSpecifiedIdSchema = (idName) => yupString().max(USER_SPECIFIED_ID_MAX_LENGTH).matches(USER_SPECIFIED_ID_PATTERN, getUserSpecifiedIdErrorMessage(idName));
 var moneyAmountSchema = (currency) => yupString().test("money-amount", "Invalid money amount", (value, context) => {
   if (value == null) return true;
   const regex = /^([0-9]+)(\.([0-9]+))?$/;
@@ -575,7 +593,7 @@ var priceOrIncludeByDefaultSchema = yupUnion(
 );
 var productSchema = yupObject({
   displayName: yupString(),
-  catalogId: userSpecifiedIdSchema("catalogId").optional().meta({ openapiField: { description: "The ID of the catalog this product belongs to. Within a catalog, all products are mutually exclusive unless they are an add-on to another product in the catalog.", exampleValue: "catalog-id" } }),
+  productLineId: userSpecifiedIdSchema("productLineId").optional().meta({ openapiField: { description: "The ID of the product line this product belongs to. Within a product line, all products are mutually exclusive unless they are an add-on to another product in the product line.", exampleValue: "product-line-id" } }),
   isAddOnTo: yupUnion(
     yupBoolean().isFalse(),
     yupRecord(
@@ -672,9 +690,11 @@ var userHasPasswordSchema = yupBoolean().meta({ openapiField: { hidden: true, de
 var userPasswordMutationSchema = passwordSchema.nullable().meta({ openapiField: { description: "Sets the user's password. Doing so revokes all current sessions.", exampleValue: "my-new-password" } }).max(70);
 var userPasswordHashMutationSchema = yupString().nonEmpty().meta({ openapiField: { description: "If `password` is not given, sets the user's password hash to the given string in Modular Crypt Format (ex.: `$2a$10$VIhIOofSMqGdGlL4wzE//e.77dAQGqNtF/1dT7bqCrVtQuInWy2qi`). Doing so revokes all current sessions." } });
 var userTotpSecretMutationSchema = base64Schema.nullable().meta({ openapiField: { description: "Enables 2FA and sets a TOTP secret for the user. Set to null to disable 2FA.", exampleValue: "dG90cC1zZWNyZXQ=" } });
+var restrictedReasonTypes = ["anonymous", "email_not_verified"];
 var accessTokenPayloadSchema = yupObject({
   sub: yupString().defined(),
   exp: yupNumber().optional(),
+  iat: yupNumber().defined(),
   iss: yupString().defined(),
   aud: yupString().defined(),
   project_id: yupString().defined(),
@@ -685,7 +705,11 @@ var accessTokenPayloadSchema = yupObject({
   email: yupString().defined().nullable(),
   email_verified: yupBoolean().defined(),
   selected_team_id: yupString().defined().nullable(),
-  is_anonymous: yupBoolean().defined()
+  is_anonymous: yupBoolean().defined(),
+  is_restricted: yupBoolean().defined(),
+  restricted_reason: yupObject({
+    type: yupString().oneOf(restrictedReasonTypes).defined()
+  }).defined().nullable()
 });
 var signInEmailSchema = strictEmailSchema(void 0).meta({ openapiField: { description: "The email to sign in with.", exampleValue: "johndoe@example.com" } });
 var emailOtpSignInCallbackUrlSchema = urlSchema.meta({ openapiField: { description: "The base callback URL to construct the magic link from. A query parameter `code` with the verification code will be appended to it. The page should then make a request to the `/auth/otp/sign-in` endpoint.", exampleValue: "https://example.com/handler/magic-link-callback" } });
@@ -775,6 +799,8 @@ function yupDefinedAndNonEmptyWhen(schema, triggers) {
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   ReplaceFieldWithOwnUserId,
+  USER_SPECIFIED_ID_MAX_LENGTH,
+  USER_SPECIFIED_ID_PATTERN,
   accessTokenPayloadSchema,
   accessTokenResponseSchema,
   adaptSchema,
@@ -807,10 +833,12 @@ function yupDefinedAndNonEmptyWhen(schema, triggers) {
   emailUsernameSchema,
   emailVerificationCallbackUrlSchema,
   ensureObjectSchema,
+  getUserSpecifiedIdErrorMessage,
   handlerPathSchema,
   inlineProductSchema,
   intervalOrNeverSchema,
   intervalSchema,
+  isValidUserSpecifiedId,
   jsonSchema,
   jsonStringOrEmptySchema,
   jsonStringSchema,
@@ -864,6 +892,8 @@ function yupDefinedAndNonEmptyWhen(schema, triggers) {
   projectPasskeyEnabledSchema,
   projectSignUpEnabledSchema,
   refreshTokenResponseSchema,
+  restrictedReasonTypes,
+  sanitizeUserSpecifiedId,
   selectedTeamIdSchema,
   serverOrHigherAuthTypeSchema,
   signInEmailSchema,