@stackframe/stack-shared 2.8.8 → 2.8.10

package/dist/config/schema.d.ts

@@ -1,14 +1,15 @@
-import * as yup from "yup";
-import { DeepMerge } from "../utils/objects";
-import { PrettifyType } from "../utils/types";
-import { NormalizesTo } from "./format";
-export declare const configLevels: readonly ["project", "branch", "environment", "organization"];
-export type ConfigLevel = typeof configLevels[number];
+import * as yup from 'yup';
+import { DeepMerge } from '../utils/objects.js';
+import { PrettifyType } from '../utils/types.js';
+import { NormalizesTo } from './format.js';
+
+declare const configLevels: readonly ["project", "branch", "environment", "organization"];
+type ConfigLevel = typeof configLevels[number];
 /**
  * All fields that can be overridden at this level.
  */
-export declare const projectConfigSchema: yup.ObjectSchema<{}, yup.AnyObject, {}, "">;
-export declare const branchConfigSchema: yup.ObjectSchema<{} & {
+declare const projectConfigSchema: yup.ObjectSchema<{}, yup.AnyObject, {}, "">;
+declare const branchConfigSchema: yup.ObjectSchema<{} & {
     rbac: {
         permissions?: Record<string, {
             description?: string | undefined;
@@ -51,7 +52,7 @@ export declare const branchConfigSchema: yup.ObjectSchema<{} & {
         oauth?: {
             accountMergeStrategy?: "link_method" | "raise_error" | "allow_duplicates" | undefined;
             providers?: Record<string, {
-                type?: "apple" | "x" | "google" | "github" | "microsoft" | "spotify" | "facebook" | "discord" | "gitlab" | "bitbucket" | "linkedin" | undefined;
+                type?: "google" | "github" | "microsoft" | "spotify" | "facebook" | "discord" | "gitlab" | "bitbucket" | "linkedin" | "apple" | "x" | undefined;
                 allowSignIn?: boolean | undefined;
                 allowConnectedAccounts?: boolean | undefined;
             }> | undefined;
@@ -101,7 +102,7 @@ export declare const branchConfigSchema: yup.ObjectSchema<{} & {
     };
     emails: {};
 }, "">;
-export declare const environmentConfigSchema: yup.ObjectSchema<{
+declare const environmentConfigSchema: yup.ObjectSchema<{
     rbac: {
         permissions?: Record<string, {
             description?: string | undefined;
@@ -149,7 +150,7 @@ export declare const environmentConfigSchema: yup.ObjectSchema<{
         oauth?: {
             accountMergeStrategy?: "link_method" | "raise_error" | "allow_duplicates" | undefined;
             providers?: Record<string, {
-                type?: "apple" | "x" | "google" | "github" | "microsoft" | "spotify" | "facebook" | "discord" | "gitlab" | "bitbucket" | "linkedin" | undefined;
+                type?: "google" | "github" | "microsoft" | "spotify" | "facebook" | "discord" | "gitlab" | "bitbucket" | "linkedin" | "apple" | "x" | undefined;
                 allowSignIn?: boolean | undefined;
                 allowConnectedAccounts?: boolean | undefined;
             }> | undefined;
@@ -158,13 +159,13 @@ export declare const environmentConfigSchema: yup.ObjectSchema<{
         oauth?: (Omit<{
             accountMergeStrategy?: "link_method" | "raise_error" | "allow_duplicates" | undefined;
             providers?: Record<string, {
-                type?: "apple" | "x" | "google" | "github" | "microsoft" | "spotify" | "facebook" | "discord" | "gitlab" | "bitbucket" | "linkedin" | undefined;
+                type?: "google" | "github" | "microsoft" | "spotify" | "facebook" | "discord" | "gitlab" | "bitbucket" | "linkedin" | "apple" | "x" | undefined;
                 allowSignIn?: boolean | undefined;
                 allowConnectedAccounts?: boolean | undefined;
             }> | undefined;
         }, never> & {
             providers?: Record<string, {
-                type?: "apple" | "x" | "google" | "github" | "microsoft" | "spotify" | "facebook" | "discord" | "gitlab" | "bitbucket" | "linkedin" | undefined;
+                type?: "google" | "github" | "microsoft" | "spotify" | "facebook" | "discord" | "gitlab" | "bitbucket" | "linkedin" | "apple" | "x" | undefined;
                 clientId?: string | undefined;
                 clientSecret?: string | undefined;
                 allowSignIn?: boolean | undefined;
@@ -201,7 +202,7 @@ export declare const environmentConfigSchema: yup.ObjectSchema<{
         oauth?: {
             accountMergeStrategy?: "link_method" | "raise_error" | "allow_duplicates" | undefined;
             providers?: Record<string, {
-                type?: "apple" | "x" | "google" | "github" | "microsoft" | "spotify" | "facebook" | "discord" | "gitlab" | "bitbucket" | "linkedin" | undefined;
+                type?: "google" | "github" | "microsoft" | "spotify" | "facebook" | "discord" | "gitlab" | "bitbucket" | "linkedin" | "apple" | "x" | undefined;
                 allowSignIn?: boolean | undefined;
                 allowConnectedAccounts?: boolean | undefined;
             }> | undefined;
@@ -210,13 +211,13 @@ export declare const environmentConfigSchema: yup.ObjectSchema<{
         oauth?: (Omit<{
             accountMergeStrategy?: "link_method" | "raise_error" | "allow_duplicates" | undefined;
             providers?: Record<string, {
-                type?: "apple" | "x" | "google" | "github" | "microsoft" | "spotify" | "facebook" | "discord" | "gitlab" | "bitbucket" | "linkedin" | undefined;
+                type?: "google" | "github" | "microsoft" | "spotify" | "facebook" | "discord" | "gitlab" | "bitbucket" | "linkedin" | "apple" | "x" | undefined;
                 allowSignIn?: boolean | undefined;
                 allowConnectedAccounts?: boolean | undefined;
             }> | undefined;
         }, never> & {
             providers?: Record<string, {
-                type?: "apple" | "x" | "google" | "github" | "microsoft" | "spotify" | "facebook" | "discord" | "gitlab" | "bitbucket" | "linkedin" | undefined;
+                type?: "google" | "github" | "microsoft" | "spotify" | "facebook" | "discord" | "gitlab" | "bitbucket" | "linkedin" | "apple" | "x" | undefined;
                 clientId?: string | undefined;
                 clientSecret?: string | undefined;
                 allowSignIn?: boolean | undefined;
@@ -398,7 +399,7 @@ export declare const environmentConfigSchema: yup.ObjectSchema<{
         emails: {};
     };
 }, "">;
-export declare const organizationConfigSchema: yup.ObjectSchema<{
+declare const organizationConfigSchema: yup.ObjectSchema<{
     rbac: {
         permissions?: Record<string, {
             description?: string | undefined;
@@ -446,7 +447,7 @@ export declare const organizationConfigSchema: yup.ObjectSchema<{
         oauth?: {
             accountMergeStrategy?: "link_method" | "raise_error" | "allow_duplicates" | undefined;
             providers?: Record<string, {
-                type?: "apple" | "x" | "google" | "github" | "microsoft" | "spotify" | "facebook" | "discord" | "gitlab" | "bitbucket" | "linkedin" | undefined;
+                type?: "google" | "github" | "microsoft" | "spotify" | "facebook" | "discord" | "gitlab" | "bitbucket" | "linkedin" | "apple" | "x" | undefined;
                 allowSignIn?: boolean | undefined;
                 allowConnectedAccounts?: boolean | undefined;
             }> | undefined;
@@ -455,13 +456,13 @@ export declare const organizationConfigSchema: yup.ObjectSchema<{
         oauth?: (Omit<{
             accountMergeStrategy?: "link_method" | "raise_error" | "allow_duplicates" | undefined;
             providers?: Record<string, {
-                type?: "apple" | "x" | "google" | "github" | "microsoft" | "spotify" | "facebook" | "discord" | "gitlab" | "bitbucket" | "linkedin" | undefined;
+                type?: "google" | "github" | "microsoft" | "spotify" | "facebook" | "discord" | "gitlab" | "bitbucket" | "linkedin" | "apple" | "x" | undefined;
                 allowSignIn?: boolean | undefined;
                 allowConnectedAccounts?: boolean | undefined;
             }> | undefined;
         }, never> & {
             providers?: Record<string, {
-                type?: "apple" | "x" | "google" | "github" | "microsoft" | "spotify" | "facebook" | "discord" | "gitlab" | "bitbucket" | "linkedin" | undefined;
+                type?: "google" | "github" | "microsoft" | "spotify" | "facebook" | "discord" | "gitlab" | "bitbucket" | "linkedin" | "apple" | "x" | undefined;
                 clientId?: string | undefined;
                 clientSecret?: string | undefined;
                 allowSignIn?: boolean | undefined;
@@ -635,10 +636,10 @@ export declare const organizationConfigSchema: yup.ObjectSchema<{
         emails: {};
     };
 }, "">;
-export declare const projectConfigDefaults: {};
-export declare const branchConfigDefaults: {};
-export declare const environmentConfigDefaults: {};
-export declare const organizationConfigDefaults: {
+declare const projectConfigDefaults: {};
+declare const branchConfigDefaults: {};
+declare const environmentConfigDefaults: {};
+declare const organizationConfigDefaults: {
     rbac: {
         permissions: (key: string) => {};
         defaultPermissions: {
@@ -691,31 +692,33 @@ export declare const organizationConfigDefaults: {
         };
     };
 };
-export type DeepReplaceAllowFunctionsForObjects<T> = T extends object ? {
+type DeepReplaceAllowFunctionsForObjects<T> = T extends object ? {
     [K in keyof T]: DeepReplaceAllowFunctionsForObjects<T[K]>;
 } | ((arg: keyof T) => DeepReplaceAllowFunctionsForObjects<T[keyof T]>) : T;
-export type DeepReplaceFunctionsWithObjects<T> = T extends (arg: infer K extends string) => infer R ? DeepReplaceFunctionsWithObjects<Record<K, R>> : (T extends object ? {
+type DeepReplaceFunctionsWithObjects<T> = T extends (arg: infer K extends string) => infer R ? DeepReplaceFunctionsWithObjects<Record<K, R>> : (T extends object ? {
     [K in keyof T]: DeepReplaceFunctionsWithObjects<T[K]>;
 } : T);
-export type ApplyDefaults<D extends object | ((key: string) => unknown), C extends object> = DeepMerge<DeepReplaceFunctionsWithObjects<D>, C>;
-export declare function applyDefaults<D extends object | ((key: string) => unknown), C extends object>(defaults: D, config: C): ApplyDefaults<D, C>;
-export type ProjectConfigNormalizedOverride = yup.InferType<typeof projectConfigSchema>;
-export type BranchConfigNormalizedOverride = yup.InferType<typeof branchConfigSchema>;
-export type EnvironmentConfigNormalizedOverride = yup.InferType<typeof environmentConfigSchema>;
-export type OrganizationConfigNormalizedOverride = yup.InferType<typeof organizationConfigSchema>;
-export type ProjectConfigStrippedNormalizedOverride = Omit<ProjectConfigNormalizedOverride, keyof BranchConfigNormalizedOverride | keyof EnvironmentConfigNormalizedOverride | keyof OrganizationConfigNormalizedOverride>;
-export type BranchConfigStrippedNormalizedOverride = Omit<BranchConfigNormalizedOverride, keyof EnvironmentConfigNormalizedOverride | keyof OrganizationConfigNormalizedOverride>;
-export type EnvironmentConfigStrippedNormalizedOverride = Omit<EnvironmentConfigNormalizedOverride, keyof OrganizationConfigNormalizedOverride>;
-export type OrganizationConfigStrippedNormalizedOverride = OrganizationConfigNormalizedOverride;
-export type ProjectConfigOverride = NormalizesTo<ProjectConfigNormalizedOverride>;
-export type BranchConfigOverride = NormalizesTo<BranchConfigNormalizedOverride>;
-export type EnvironmentConfigOverride = NormalizesTo<EnvironmentConfigNormalizedOverride>;
-export type OrganizationConfigOverride = NormalizesTo<OrganizationConfigNormalizedOverride>;
-export type ProjectIncompleteConfig = ProjectConfigNormalizedOverride;
-export type BranchIncompleteConfig = ProjectIncompleteConfig & BranchConfigNormalizedOverride;
-export type EnvironmentIncompleteConfig = BranchIncompleteConfig & EnvironmentConfigNormalizedOverride;
-export type OrganizationIncompleteConfig = EnvironmentIncompleteConfig & OrganizationConfigNormalizedOverride;
-export type ProjectRenderedConfig = PrettifyType<ApplyDefaults<typeof projectConfigDefaults, ProjectConfigStrippedNormalizedOverride>>;
-export type BranchRenderedConfig = PrettifyType<ProjectRenderedConfig & ApplyDefaults<typeof branchConfigDefaults, BranchConfigStrippedNormalizedOverride>>;
-export type EnvironmentRenderedConfig = PrettifyType<BranchRenderedConfig & ApplyDefaults<typeof environmentConfigDefaults, EnvironmentConfigStrippedNormalizedOverride>>;
-export type OrganizationRenderedConfig = PrettifyType<EnvironmentRenderedConfig & ApplyDefaults<typeof organizationConfigDefaults, OrganizationConfigStrippedNormalizedOverride>>;
+type ApplyDefaults<D extends object | ((key: string) => unknown), C extends object> = DeepMerge<DeepReplaceFunctionsWithObjects<D>, C>;
+declare function applyDefaults<D extends object | ((key: string) => unknown), C extends object>(defaults: D, config: C): ApplyDefaults<D, C>;
+type ProjectConfigNormalizedOverride = yup.InferType<typeof projectConfigSchema>;
+type BranchConfigNormalizedOverride = yup.InferType<typeof branchConfigSchema>;
+type EnvironmentConfigNormalizedOverride = yup.InferType<typeof environmentConfigSchema>;
+type OrganizationConfigNormalizedOverride = yup.InferType<typeof organizationConfigSchema>;
+type ProjectConfigStrippedNormalizedOverride = Omit<ProjectConfigNormalizedOverride, keyof BranchConfigNormalizedOverride | keyof EnvironmentConfigNormalizedOverride | keyof OrganizationConfigNormalizedOverride>;
+type BranchConfigStrippedNormalizedOverride = Omit<BranchConfigNormalizedOverride, keyof EnvironmentConfigNormalizedOverride | keyof OrganizationConfigNormalizedOverride>;
+type EnvironmentConfigStrippedNormalizedOverride = Omit<EnvironmentConfigNormalizedOverride, keyof OrganizationConfigNormalizedOverride>;
+type OrganizationConfigStrippedNormalizedOverride = OrganizationConfigNormalizedOverride;
+type ProjectConfigOverride = NormalizesTo<ProjectConfigNormalizedOverride>;
+type BranchConfigOverride = NormalizesTo<BranchConfigNormalizedOverride>;
+type EnvironmentConfigOverride = NormalizesTo<EnvironmentConfigNormalizedOverride>;
+type OrganizationConfigOverride = NormalizesTo<OrganizationConfigNormalizedOverride>;
+type ProjectIncompleteConfig = ProjectConfigNormalizedOverride;
+type BranchIncompleteConfig = ProjectIncompleteConfig & BranchConfigNormalizedOverride;
+type EnvironmentIncompleteConfig = BranchIncompleteConfig & EnvironmentConfigNormalizedOverride;
+type OrganizationIncompleteConfig = EnvironmentIncompleteConfig & OrganizationConfigNormalizedOverride;
+type ProjectRenderedConfig = PrettifyType<ApplyDefaults<typeof projectConfigDefaults, ProjectConfigStrippedNormalizedOverride>>;
+type BranchRenderedConfig = PrettifyType<ProjectRenderedConfig & ApplyDefaults<typeof branchConfigDefaults, BranchConfigStrippedNormalizedOverride>>;
+type EnvironmentRenderedConfig = PrettifyType<BranchRenderedConfig & ApplyDefaults<typeof environmentConfigDefaults, EnvironmentConfigStrippedNormalizedOverride>>;
+type OrganizationRenderedConfig = PrettifyType<EnvironmentRenderedConfig & ApplyDefaults<typeof organizationConfigDefaults, OrganizationConfigStrippedNormalizedOverride>>;
+
+export { type ApplyDefaults, type BranchConfigNormalizedOverride, type BranchConfigOverride, type BranchConfigStrippedNormalizedOverride, type BranchIncompleteConfig, type BranchRenderedConfig, type ConfigLevel, type DeepReplaceAllowFunctionsForObjects, type DeepReplaceFunctionsWithObjects, type EnvironmentConfigNormalizedOverride, type EnvironmentConfigOverride, type EnvironmentConfigStrippedNormalizedOverride, type EnvironmentIncompleteConfig, type EnvironmentRenderedConfig, type OrganizationConfigNormalizedOverride, type OrganizationConfigOverride, type OrganizationConfigStrippedNormalizedOverride, type OrganizationIncompleteConfig, type OrganizationRenderedConfig, type ProjectConfigNormalizedOverride, type ProjectConfigOverride, type ProjectConfigStrippedNormalizedOverride, type ProjectIncompleteConfig, type ProjectRenderedConfig, applyDefaults, branchConfigDefaults, branchConfigSchema, configLevels, environmentConfigDefaults, environmentConfigSchema, organizationConfigDefaults, organizationConfigSchema, projectConfigDefaults, projectConfigSchema };

package/dist/config/schema.js

@@ -1,185 +1,243 @@
-import * as schemaFields from "../schema-fields";
-import { yupBoolean, yupObject, yupRecord, yupString } from "../schema-fields";
-import { allProviders } from "../utils/oauth";
-import { get, has, isObjectLike, set } from "../utils/objects";
-// NOTE: The validation schemas in here are all schematic validators, not sanity-check validators.
-// For more info, see ./README.md
-export const configLevels = ['project', 'branch', 'environment', 'organization'];
-const permissionRegex = /^\$?[a-z0-9_:]+$/;
-/**
- * All fields that can be overridden at this level.
- */
-export const projectConfigSchema = yupObject({});
-// --- NEW RBAC Schema ---
-const branchRbacDefaultPermissions = yupRecord(yupString().optional().matches(permissionRegex), yupBoolean().isTrue().optional()).optional();
-const branchRbacSchema = yupObject({
-    permissions: yupRecord(yupString().optional().matches(permissionRegex), yupObject({
-        description: yupString().optional(),
-        scope: yupString().oneOf(['team', 'project']).optional(),
-        containedPermissionIds: yupRecord(yupString().optional().matches(permissionRegex), yupBoolean().isTrue().optional()).optional(),
-    }).optional()).optional(),
-    defaultPermissions: yupObject({
-        teamCreator: branchRbacDefaultPermissions,
-        teamMember: branchRbacDefaultPermissions,
-        signUp: branchRbacDefaultPermissions,
-    }).optional(),
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/config/schema.ts
+var schema_exports = {};
+__export(schema_exports, {
+  applyDefaults: () => applyDefaults,
+  branchConfigDefaults: () => branchConfigDefaults,
+  branchConfigSchema: () => branchConfigSchema,
+  configLevels: () => configLevels,
+  environmentConfigDefaults: () => environmentConfigDefaults,
+  environmentConfigSchema: () => environmentConfigSchema,
+  organizationConfigDefaults: () => organizationConfigDefaults,
+  organizationConfigSchema: () => organizationConfigSchema,
+  projectConfigDefaults: () => projectConfigDefaults,
+  projectConfigSchema: () => projectConfigSchema
+});
+module.exports = __toCommonJS(schema_exports);
+var schemaFields = __toESM(require("../schema-fields"), 1);
+var import_schema_fields = require("../schema-fields");
+var import_oauth = require("../utils/oauth");
+var import_objects = require("../utils/objects");
+var configLevels = ["project", "branch", "environment", "organization"];
+var permissionRegex = /^\$?[a-z0-9_:]+$/;
+var projectConfigSchema = (0, import_schema_fields.yupObject)({});
+var branchRbacDefaultPermissions = (0, import_schema_fields.yupRecord)(
+  (0, import_schema_fields.yupString)().optional().matches(permissionRegex),
+  (0, import_schema_fields.yupBoolean)().isTrue().optional()
+).optional();
+var branchRbacSchema = (0, import_schema_fields.yupObject)({
+  permissions: (0, import_schema_fields.yupRecord)(
+    (0, import_schema_fields.yupString)().optional().matches(permissionRegex),
+    (0, import_schema_fields.yupObject)({
+      description: (0, import_schema_fields.yupString)().optional(),
+      scope: (0, import_schema_fields.yupString)().oneOf(["team", "project"]).optional(),
+      containedPermissionIds: (0, import_schema_fields.yupRecord)(
+        (0, import_schema_fields.yupString)().optional().matches(permissionRegex),
+        (0, import_schema_fields.yupBoolean)().isTrue().optional()
+      ).optional()
+    }).optional()
+  ).optional(),
+  defaultPermissions: (0, import_schema_fields.yupObject)({
+    teamCreator: branchRbacDefaultPermissions,
+    teamMember: branchRbacDefaultPermissions,
+    signUp: branchRbacDefaultPermissions
+  }).optional()
 }).optional();
-// --- END NEW RBAC Schema ---
-// --- NEW API Keys Schema ---
-const branchApiKeysSchema = yupObject({
-    enabled: yupObject({
-        team: yupBoolean().optional(),
-        user: yupBoolean().optional(),
-    }).optional(),
+var branchApiKeysSchema = (0, import_schema_fields.yupObject)({
+  enabled: (0, import_schema_fields.yupObject)({
+    team: (0, import_schema_fields.yupBoolean)().optional(),
+    user: (0, import_schema_fields.yupBoolean)().optional()
+  }).optional()
 }).optional();
-// --- END NEW API Keys Schema ---
-const branchAuthSchema = yupObject({
-    allowSignUp: yupBoolean().optional(),
-    password: yupObject({
-        allowSignIn: yupBoolean().optional(),
-    }).optional(),
-    otp: yupObject({
-        allowSignIn: yupBoolean().optional(),
-    }).optional(),
-    passkey: yupObject({
-        allowSignIn: yupBoolean().optional(),
-    }).optional(),
-    oauth: yupObject({
-        accountMergeStrategy: yupString().oneOf(['link_method', 'raise_error', 'allow_duplicates']).optional(),
-        providers: yupRecord(yupString().optional().matches(permissionRegex), yupObject({
-            type: yupString().oneOf(allProviders).optional(),
-            allowSignIn: yupBoolean().optional(),
-            allowConnectedAccounts: yupBoolean().optional(),
-        }).defined()).optional(),
-    }).optional(),
+var branchAuthSchema = (0, import_schema_fields.yupObject)({
+  allowSignUp: (0, import_schema_fields.yupBoolean)().optional(),
+  password: (0, import_schema_fields.yupObject)({
+    allowSignIn: (0, import_schema_fields.yupBoolean)().optional()
+  }).optional(),
+  otp: (0, import_schema_fields.yupObject)({
+    allowSignIn: (0, import_schema_fields.yupBoolean)().optional()
+  }).optional(),
+  passkey: (0, import_schema_fields.yupObject)({
+    allowSignIn: (0, import_schema_fields.yupBoolean)().optional()
+  }).optional(),
+  oauth: (0, import_schema_fields.yupObject)({
+    accountMergeStrategy: (0, import_schema_fields.yupString)().oneOf(["link_method", "raise_error", "allow_duplicates"]).optional(),
+    providers: (0, import_schema_fields.yupRecord)(
+      (0, import_schema_fields.yupString)().optional().matches(permissionRegex),
+      (0, import_schema_fields.yupObject)({
+        type: (0, import_schema_fields.yupString)().oneOf(import_oauth.allProviders).optional(),
+        allowSignIn: (0, import_schema_fields.yupBoolean)().optional(),
+        allowConnectedAccounts: (0, import_schema_fields.yupBoolean)().optional()
+      }).defined()
+    ).optional()
+  }).optional()
 }).optional();
-const branchDomain = yupObject({
-    allowLocalhost: yupBoolean().optional(),
+var branchDomain = (0, import_schema_fields.yupObject)({
+  allowLocalhost: (0, import_schema_fields.yupBoolean)().optional()
 }).optional();
-export const branchConfigSchema = projectConfigSchema.concat(yupObject({
-    rbac: branchRbacSchema,
-    teams: yupObject({
-        createPersonalTeamOnSignUp: yupBoolean().optional(),
-        allowClientTeamCreation: yupBoolean().optional(),
-    }).optional(),
-    users: yupObject({
-        allowClientUserDeletion: yupBoolean().optional(),
-    }).optional(),
-    apiKeys: branchApiKeysSchema,
-    domains: branchDomain,
-    auth: branchAuthSchema,
-    emails: yupObject({}),
+var branchConfigSchema = projectConfigSchema.concat((0, import_schema_fields.yupObject)({
+  rbac: branchRbacSchema,
+  teams: (0, import_schema_fields.yupObject)({
+    createPersonalTeamOnSignUp: (0, import_schema_fields.yupBoolean)().optional(),
+    allowClientTeamCreation: (0, import_schema_fields.yupBoolean)().optional()
+  }).optional(),
+  users: (0, import_schema_fields.yupObject)({
+    allowClientUserDeletion: (0, import_schema_fields.yupBoolean)().optional()
+  }).optional(),
+  apiKeys: branchApiKeysSchema,
+  domains: branchDomain,
+  auth: branchAuthSchema,
+  emails: (0, import_schema_fields.yupObject)({})
 }));
-export const environmentConfigSchema = branchConfigSchema.concat(yupObject({
-    auth: branchConfigSchema.getNested("auth").concat(yupObject({
-        oauth: branchConfigSchema.getNested("auth").getNested("oauth").concat(yupObject({
-            providers: yupRecord(yupString().optional().matches(permissionRegex), yupObject({
-                type: yupString().oneOf(allProviders).optional(),
-                isShared: yupBoolean().optional(),
-                clientId: schemaFields.oauthClientIdSchema.optional(),
-                clientSecret: schemaFields.oauthClientSecretSchema.optional(),
-                facebookConfigId: schemaFields.oauthFacebookConfigIdSchema.optional(),
-                microsoftTenantId: schemaFields.oauthMicrosoftTenantIdSchema.optional(),
-                allowSignIn: yupBoolean().optional(),
-                allowConnectedAccounts: yupBoolean().optional(),
-            })).optional(),
-        }).optional()),
-    })),
-    emails: branchConfigSchema.getNested("emails").concat(yupObject({
-        server: yupObject({
-            isShared: yupBoolean().optional(),
-            host: schemaFields.emailHostSchema.optional().nonEmpty(),
-            port: schemaFields.emailPortSchema.optional(),
-            username: schemaFields.emailUsernameSchema.optional().nonEmpty(),
-            password: schemaFields.emailPasswordSchema.optional().nonEmpty(),
-            senderName: schemaFields.emailSenderNameSchema.optional().nonEmpty(),
-            senderEmail: schemaFields.emailSenderEmailSchema.optional().nonEmpty(),
-        }),
-    }).optional()),
-    domains: branchConfigSchema.getNested("domains").concat(yupObject({
-        trustedDomains: yupRecord(yupString().uuid().optional(), yupObject({
-            baseUrl: schemaFields.urlSchema.optional(),
-            handlerPath: schemaFields.handlerPathSchema.optional(),
-        })).optional(),
-    })),
+var environmentConfigSchema = branchConfigSchema.concat((0, import_schema_fields.yupObject)({
+  auth: branchConfigSchema.getNested("auth").concat((0, import_schema_fields.yupObject)({
+    oauth: branchConfigSchema.getNested("auth").getNested("oauth").concat((0, import_schema_fields.yupObject)({
+      providers: (0, import_schema_fields.yupRecord)(
+        (0, import_schema_fields.yupString)().optional().matches(permissionRegex),
+        (0, import_schema_fields.yupObject)({
+          type: (0, import_schema_fields.yupString)().oneOf(import_oauth.allProviders).optional(),
+          isShared: (0, import_schema_fields.yupBoolean)().optional(),
+          clientId: schemaFields.oauthClientIdSchema.optional(),
+          clientSecret: schemaFields.oauthClientSecretSchema.optional(),
+          facebookConfigId: schemaFields.oauthFacebookConfigIdSchema.optional(),
+          microsoftTenantId: schemaFields.oauthMicrosoftTenantIdSchema.optional(),
+          allowSignIn: (0, import_schema_fields.yupBoolean)().optional(),
+          allowConnectedAccounts: (0, import_schema_fields.yupBoolean)().optional()
+        })
+      ).optional()
+    }).optional())
+  })),
+  emails: branchConfigSchema.getNested("emails").concat((0, import_schema_fields.yupObject)({
+    server: (0, import_schema_fields.yupObject)({
+      isShared: (0, import_schema_fields.yupBoolean)().optional(),
+      host: schemaFields.emailHostSchema.optional().nonEmpty(),
+      port: schemaFields.emailPortSchema.optional(),
+      username: schemaFields.emailUsernameSchema.optional().nonEmpty(),
+      password: schemaFields.emailPasswordSchema.optional().nonEmpty(),
+      senderName: schemaFields.emailSenderNameSchema.optional().nonEmpty(),
+      senderEmail: schemaFields.emailSenderEmailSchema.optional().nonEmpty()
+    })
+  }).optional()),
+  domains: branchConfigSchema.getNested("domains").concat((0, import_schema_fields.yupObject)({
+    trustedDomains: (0, import_schema_fields.yupRecord)(
+      (0, import_schema_fields.yupString)().uuid().optional(),
+      (0, import_schema_fields.yupObject)({
+        baseUrl: schemaFields.urlSchema.optional(),
+        handlerPath: schemaFields.handlerPathSchema.optional()
+      })
+    ).optional()
+  }))
 }));
-export const organizationConfigSchema = environmentConfigSchema.concat(yupObject({}));
-// Defaults
-// these are objects that are merged together to form the rendered config (see ./README.md)
-// Wherever an object could be used as a value, a function can instead be used to generate the default values on a per-key basis
-export const projectConfigDefaults = {};
-export const branchConfigDefaults = {};
-export const environmentConfigDefaults = {};
-export const organizationConfigDefaults = {
-    rbac: {
-        permissions: (key) => ({}),
-        defaultPermissions: {
-            teamCreator: {},
-            teamMember: {},
-            signUp: {},
-        },
-    },
-    apiKeys: {
-        enabled: {
-            team: false,
-            user: false,
-        },
-    },
-    teams: {
-        createPersonalTeamOnSignUp: false,
-        allowClientTeamCreation: false,
-    },
-    users: {
-        allowClientUserDeletion: false,
-    },
-    domains: {
-        allowLocalhost: false,
-        trustedDomains: (key) => ({
-            handlerPath: '/handler',
-        }),
+var organizationConfigSchema = environmentConfigSchema.concat((0, import_schema_fields.yupObject)({}));
+var projectConfigDefaults = {};
+var branchConfigDefaults = {};
+var environmentConfigDefaults = {};
+var organizationConfigDefaults = {
+  rbac: {
+    permissions: (key) => ({}),
+    defaultPermissions: {
+      teamCreator: {},
+      teamMember: {},
+      signUp: {}
+    }
+  },
+  apiKeys: {
+    enabled: {
+      team: false,
+      user: false
+    }
+  },
+  teams: {
+    createPersonalTeamOnSignUp: false,
+    allowClientTeamCreation: false
+  },
+  users: {
+    allowClientUserDeletion: false
+  },
+  domains: {
+    allowLocalhost: false,
+    trustedDomains: (key) => ({
+      handlerPath: "/handler"
+    })
+  },
+  auth: {
+    allowSignUp: true,
+    password: {
+      allowSignIn: false
     },
-    auth: {
-        allowSignUp: true,
-        password: {
-            allowSignIn: false,
-        },
-        otp: {
-            allowSignIn: false,
-        },
-        passkey: {
-            allowSignIn: false,
-        },
-        oauth: {
-            accountMergeStrategy: 'link_method',
-            providers: (key) => ({
-                allowSignIn: false,
-                allowConnectedAccounts: false,
-            }),
-        },
+    otp: {
+      allowSignIn: false
     },
-    emails: {
-        server: {
-            isShared: true,
-        },
+    passkey: {
+      allowSignIn: false
     },
+    oauth: {
+      accountMergeStrategy: "link_method",
+      providers: (key) => ({
+        allowSignIn: false,
+        allowConnectedAccounts: false
+      })
+    }
+  },
+  emails: {
+    server: {
+      isShared: true
+    }
+  }
 };
-export function applyDefaults(defaults, config) {
-    const res = { ...typeof defaults === 'function' ? {} : defaults };
-    for (const [key, mergeValue] of Object.entries(config)) {
-        const baseValue = typeof defaults === 'function' ? defaults(key) : (has(defaults, key) ? get(defaults, key) : undefined);
-        if (baseValue !== undefined) {
-            if (isObjectLike(baseValue) && isObjectLike(mergeValue)) {
-                set(res, key, applyDefaults(baseValue, mergeValue));
-                continue;
-            }
-        }
-        set(res, key, mergeValue);
+function applyDefaults(defaults, config) {
+  const res = { ...typeof defaults === "function" ? {} : defaults };
+  for (const [key, mergeValue] of Object.entries(config)) {
+    const baseValue = typeof defaults === "function" ? defaults(key) : (0, import_objects.has)(defaults, key) ? (0, import_objects.get)(defaults, key) : void 0;
+    if (baseValue !== void 0) {
+      if ((0, import_objects.isObjectLike)(baseValue) && (0, import_objects.isObjectLike)(mergeValue)) {
+        (0, import_objects.set)(res, key, applyDefaults(baseValue, mergeValue));
+        continue;
+      }
     }
-    return res;
+    (0, import_objects.set)(res, key, mergeValue);
+  }
+  return res;
 }
-import.meta.vitest?.test("applyDefaults", ({ expect }) => {
-    expect(applyDefaults({ a: 1 }, { a: 2 })).toEqual({ a: 2 });
-    expect(applyDefaults({ a: { b: 1 } }, { a: { c: 2 } })).toEqual({ a: { b: 1, c: 2 } });
-    expect(applyDefaults((key) => ({ b: key }), { a: {} })).toEqual({ a: { b: "a" } });
-    expect(applyDefaults({ a: (key) => ({ b: key }) }, { a: { c: { d: 1 } } })).toEqual({ a: { c: { b: "c", d: 1 } } });
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  applyDefaults,
+  branchConfigDefaults,
+  branchConfigSchema,
+  configLevels,
+  environmentConfigDefaults,
+  environmentConfigSchema,
+  organizationConfigDefaults,
+  organizationConfigSchema,
+  projectConfigDefaults,
+  projectConfigSchema
 });
+//# sourceMappingURL=schema.js.map