@strimz/shared-types 0.1.0

package/dist/api-keys.d.cts

@@ -0,0 +1,155 @@
+import { z } from 'zod';
+
+/**
+ * API keys.
+ *
+ * A merchant has independent test and live keys. The full secret is shown
+ * exactly once at creation; the backend stores only a hash and a display prefix.
+ */
+
+declare const apiKeyKindSchema: z.ZodEnum<["secret", "publishable"]>;
+type ApiKeyKind = z.infer<typeof apiKeyKindSchema>;
+/**
+ * Underscore-separated to match the Prisma `ApiKeyScope` enum (Prisma
+ * does not allow `:` in enum values). The DB and the wire format use the
+ * same form so there is no boundary translation.
+ */
+declare const apiKeyScopeSchema: z.ZodEnum<["sessions_read", "sessions_write", "subscriptions_read", "subscriptions_write", "refunds_read", "refunds_write", "transactions_read", "webhooks_read", "webhooks_write", "invoices_read", "invoices_write", "storefronts_read", "storefronts_write", "agents_read", "agents_write", "relay_read", "relay_write"]>;
+type ApiKeyScope = z.infer<typeof apiKeyScopeSchema>;
+declare const apiKeySchema: z.ZodObject<{
+    id: z.ZodString;
+    merchantId: z.ZodString;
+    name: z.ZodString;
+    kind: z.ZodEnum<["secret", "publishable"]>;
+    mode: z.ZodEnum<["test", "live"]>;
+    prefix: z.ZodString;
+    lastFour: z.ZodString;
+    scopes: z.ZodArray<z.ZodEnum<["sessions_read", "sessions_write", "subscriptions_read", "subscriptions_write", "refunds_read", "refunds_write", "transactions_read", "webhooks_read", "webhooks_write", "invoices_read", "invoices_write", "storefronts_read", "storefronts_write", "agents_read", "agents_write", "relay_read", "relay_write"]>, "atleastone">;
+    createdAt: z.ZodString;
+    lastUsedAt: z.ZodNullable<z.ZodString>;
+    revokedAt: z.ZodNullable<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    merchantId: string;
+    name: string;
+    kind: "secret" | "publishable";
+    mode: "test" | "live";
+    prefix: string;
+    lastFour: string;
+    scopes: ["sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write", ...("sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write")[]];
+    createdAt: string;
+    lastUsedAt: string | null;
+    revokedAt: string | null;
+}, {
+    id: string;
+    merchantId: string;
+    name: string;
+    kind: "secret" | "publishable";
+    mode: "test" | "live";
+    prefix: string;
+    lastFour: string;
+    scopes: ["sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write", ...("sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write")[]];
+    createdAt: string;
+    lastUsedAt: string | null;
+    revokedAt: string | null;
+}>;
+type ApiKey = z.infer<typeof apiKeySchema>;
+declare const createApiKeyInputSchema: z.ZodObject<{
+    name: z.ZodString;
+    kind: z.ZodEnum<["secret", "publishable"]>;
+    mode: z.ZodEnum<["test", "live"]>;
+    scopes: z.ZodArray<z.ZodEnum<["sessions_read", "sessions_write", "subscriptions_read", "subscriptions_write", "refunds_read", "refunds_write", "transactions_read", "webhooks_read", "webhooks_write", "invoices_read", "invoices_write", "storefronts_read", "storefronts_write", "agents_read", "agents_write", "relay_read", "relay_write"]>, "atleastone">;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    kind: "secret" | "publishable";
+    mode: "test" | "live";
+    scopes: ["sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write", ...("sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write")[]];
+}, {
+    name: string;
+    kind: "secret" | "publishable";
+    mode: "test" | "live";
+    scopes: ["sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write", ...("sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write")[]];
+}>;
+type CreateApiKeyInput = z.infer<typeof createApiKeyInputSchema>;
+declare const createApiKeyOutputSchema: z.ZodObject<{
+    apiKey: z.ZodObject<{
+        id: z.ZodString;
+        merchantId: z.ZodString;
+        name: z.ZodString;
+        kind: z.ZodEnum<["secret", "publishable"]>;
+        mode: z.ZodEnum<["test", "live"]>;
+        prefix: z.ZodString;
+        lastFour: z.ZodString;
+        scopes: z.ZodArray<z.ZodEnum<["sessions_read", "sessions_write", "subscriptions_read", "subscriptions_write", "refunds_read", "refunds_write", "transactions_read", "webhooks_read", "webhooks_write", "invoices_read", "invoices_write", "storefronts_read", "storefronts_write", "agents_read", "agents_write", "relay_read", "relay_write"]>, "atleastone">;
+        createdAt: z.ZodString;
+        lastUsedAt: z.ZodNullable<z.ZodString>;
+        revokedAt: z.ZodNullable<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
+        merchantId: string;
+        name: string;
+        kind: "secret" | "publishable";
+        mode: "test" | "live";
+        prefix: string;
+        lastFour: string;
+        scopes: ["sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write", ...("sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write")[]];
+        createdAt: string;
+        lastUsedAt: string | null;
+        revokedAt: string | null;
+    }, {
+        id: string;
+        merchantId: string;
+        name: string;
+        kind: "secret" | "publishable";
+        mode: "test" | "live";
+        prefix: string;
+        lastFour: string;
+        scopes: ["sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write", ...("sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write")[]];
+        createdAt: string;
+        lastUsedAt: string | null;
+        revokedAt: string | null;
+    }>;
+    /** Full plaintext key — shown exactly once. */
+    secret: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    secret: string;
+    apiKey: {
+        id: string;
+        merchantId: string;
+        name: string;
+        kind: "secret" | "publishable";
+        mode: "test" | "live";
+        prefix: string;
+        lastFour: string;
+        scopes: ["sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write", ...("sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write")[]];
+        createdAt: string;
+        lastUsedAt: string | null;
+        revokedAt: string | null;
+    };
+}, {
+    secret: string;
+    apiKey: {
+        id: string;
+        merchantId: string;
+        name: string;
+        kind: "secret" | "publishable";
+        mode: "test" | "live";
+        prefix: string;
+        lastFour: string;
+        scopes: ["sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write", ...("sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write")[]];
+        createdAt: string;
+        lastUsedAt: string | null;
+        revokedAt: string | null;
+    };
+}>;
+type CreateApiKeyOutput = z.infer<typeof createApiKeyOutputSchema>;
+declare const rotateApiKeyInputSchema: z.ZodObject<{
+    id: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+}, {
+    id: string;
+}>;
+type RotateApiKeyInput = z.infer<typeof rotateApiKeyInputSchema>;
+
+export { type ApiKey, type ApiKeyKind, type ApiKeyScope, type CreateApiKeyInput, type CreateApiKeyOutput, type RotateApiKeyInput, apiKeyKindSchema, apiKeySchema, apiKeyScopeSchema, createApiKeyInputSchema, createApiKeyOutputSchema, rotateApiKeyInputSchema };

package/dist/api-keys.d.ts

@@ -0,0 +1,155 @@
+import { z } from 'zod';
+
+/**
+ * API keys.
+ *
+ * A merchant has independent test and live keys. The full secret is shown
+ * exactly once at creation; the backend stores only a hash and a display prefix.
+ */
+
+declare const apiKeyKindSchema: z.ZodEnum<["secret", "publishable"]>;
+type ApiKeyKind = z.infer<typeof apiKeyKindSchema>;
+/**
+ * Underscore-separated to match the Prisma `ApiKeyScope` enum (Prisma
+ * does not allow `:` in enum values). The DB and the wire format use the
+ * same form so there is no boundary translation.
+ */
+declare const apiKeyScopeSchema: z.ZodEnum<["sessions_read", "sessions_write", "subscriptions_read", "subscriptions_write", "refunds_read", "refunds_write", "transactions_read", "webhooks_read", "webhooks_write", "invoices_read", "invoices_write", "storefronts_read", "storefronts_write", "agents_read", "agents_write", "relay_read", "relay_write"]>;
+type ApiKeyScope = z.infer<typeof apiKeyScopeSchema>;
+declare const apiKeySchema: z.ZodObject<{
+    id: z.ZodString;
+    merchantId: z.ZodString;
+    name: z.ZodString;
+    kind: z.ZodEnum<["secret", "publishable"]>;
+    mode: z.ZodEnum<["test", "live"]>;
+    prefix: z.ZodString;
+    lastFour: z.ZodString;
+    scopes: z.ZodArray<z.ZodEnum<["sessions_read", "sessions_write", "subscriptions_read", "subscriptions_write", "refunds_read", "refunds_write", "transactions_read", "webhooks_read", "webhooks_write", "invoices_read", "invoices_write", "storefronts_read", "storefronts_write", "agents_read", "agents_write", "relay_read", "relay_write"]>, "atleastone">;
+    createdAt: z.ZodString;
+    lastUsedAt: z.ZodNullable<z.ZodString>;
+    revokedAt: z.ZodNullable<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    merchantId: string;
+    name: string;
+    kind: "secret" | "publishable";
+    mode: "test" | "live";
+    prefix: string;
+    lastFour: string;
+    scopes: ["sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write", ...("sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write")[]];
+    createdAt: string;
+    lastUsedAt: string | null;
+    revokedAt: string | null;
+}, {
+    id: string;
+    merchantId: string;
+    name: string;
+    kind: "secret" | "publishable";
+    mode: "test" | "live";
+    prefix: string;
+    lastFour: string;
+    scopes: ["sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write", ...("sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write")[]];
+    createdAt: string;
+    lastUsedAt: string | null;
+    revokedAt: string | null;
+}>;
+type ApiKey = z.infer<typeof apiKeySchema>;
+declare const createApiKeyInputSchema: z.ZodObject<{
+    name: z.ZodString;
+    kind: z.ZodEnum<["secret", "publishable"]>;
+    mode: z.ZodEnum<["test", "live"]>;
+    scopes: z.ZodArray<z.ZodEnum<["sessions_read", "sessions_write", "subscriptions_read", "subscriptions_write", "refunds_read", "refunds_write", "transactions_read", "webhooks_read", "webhooks_write", "invoices_read", "invoices_write", "storefronts_read", "storefronts_write", "agents_read", "agents_write", "relay_read", "relay_write"]>, "atleastone">;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    kind: "secret" | "publishable";
+    mode: "test" | "live";
+    scopes: ["sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write", ...("sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write")[]];
+}, {
+    name: string;
+    kind: "secret" | "publishable";
+    mode: "test" | "live";
+    scopes: ["sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write", ...("sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write")[]];
+}>;
+type CreateApiKeyInput = z.infer<typeof createApiKeyInputSchema>;
+declare const createApiKeyOutputSchema: z.ZodObject<{
+    apiKey: z.ZodObject<{
+        id: z.ZodString;
+        merchantId: z.ZodString;
+        name: z.ZodString;
+        kind: z.ZodEnum<["secret", "publishable"]>;
+        mode: z.ZodEnum<["test", "live"]>;
+        prefix: z.ZodString;
+        lastFour: z.ZodString;
+        scopes: z.ZodArray<z.ZodEnum<["sessions_read", "sessions_write", "subscriptions_read", "subscriptions_write", "refunds_read", "refunds_write", "transactions_read", "webhooks_read", "webhooks_write", "invoices_read", "invoices_write", "storefronts_read", "storefronts_write", "agents_read", "agents_write", "relay_read", "relay_write"]>, "atleastone">;
+        createdAt: z.ZodString;
+        lastUsedAt: z.ZodNullable<z.ZodString>;
+        revokedAt: z.ZodNullable<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
+        merchantId: string;
+        name: string;
+        kind: "secret" | "publishable";
+        mode: "test" | "live";
+        prefix: string;
+        lastFour: string;
+        scopes: ["sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write", ...("sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write")[]];
+        createdAt: string;
+        lastUsedAt: string | null;
+        revokedAt: string | null;
+    }, {
+        id: string;
+        merchantId: string;
+        name: string;
+        kind: "secret" | "publishable";
+        mode: "test" | "live";
+        prefix: string;
+        lastFour: string;
+        scopes: ["sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write", ...("sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write")[]];
+        createdAt: string;
+        lastUsedAt: string | null;
+        revokedAt: string | null;
+    }>;
+    /** Full plaintext key — shown exactly once. */
+    secret: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    secret: string;
+    apiKey: {
+        id: string;
+        merchantId: string;
+        name: string;
+        kind: "secret" | "publishable";
+        mode: "test" | "live";
+        prefix: string;
+        lastFour: string;
+        scopes: ["sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write", ...("sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write")[]];
+        createdAt: string;
+        lastUsedAt: string | null;
+        revokedAt: string | null;
+    };
+}, {
+    secret: string;
+    apiKey: {
+        id: string;
+        merchantId: string;
+        name: string;
+        kind: "secret" | "publishable";
+        mode: "test" | "live";
+        prefix: string;
+        lastFour: string;
+        scopes: ["sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write", ...("sessions_read" | "sessions_write" | "subscriptions_read" | "subscriptions_write" | "refunds_read" | "refunds_write" | "transactions_read" | "webhooks_read" | "webhooks_write" | "invoices_read" | "invoices_write" | "storefronts_read" | "storefronts_write" | "agents_read" | "agents_write" | "relay_read" | "relay_write")[]];
+        createdAt: string;
+        lastUsedAt: string | null;
+        revokedAt: string | null;
+    };
+}>;
+type CreateApiKeyOutput = z.infer<typeof createApiKeyOutputSchema>;
+declare const rotateApiKeyInputSchema: z.ZodObject<{
+    id: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+}, {
+    id: string;
+}>;
+type RotateApiKeyInput = z.infer<typeof rotateApiKeyInputSchema>;
+
+export { type ApiKey, type ApiKeyKind, type ApiKeyScope, type CreateApiKeyInput, type CreateApiKeyOutput, type RotateApiKeyInput, apiKeyKindSchema, apiKeySchema, apiKeyScopeSchema, createApiKeyInputSchema, createApiKeyOutputSchema, rotateApiKeyInputSchema };

package/dist/api-keys.js

@@ -0,0 +1,84 @@
+import { z } from 'zod';
+
+// src/api-keys.ts
+var idSchema = z.string().min(1).max(64).regex(/^[a-zA-Z0-9_-]+$/, "id must be URL-safe");
+z.string().regex(/^0x[a-fA-F0-9]{40}$/, "must be a 0x-prefixed 40-character hex EVM address").transform((v) => v.toLowerCase());
+z.string().regex(/^0x[a-fA-F0-9]{64}$/, "must be a 0x-prefixed 64-character hex EVM transaction hash");
+z.string().email().trim().toLowerCase().max(320);
+z.string().url().refine((v) => v.startsWith("https://"), {
+  message: "must be an https:// URL"
+});
+z.string().url();
+z.string().regex(/^[0-9]+$/, "must be a non-negative integer string (base-10)").refine((v) => BigInt(v) >= 0n, "must be >= 0");
+z.number().int().min(0).max(Number.MAX_SAFE_INTEGER);
+var isoTimestampSchema = z.string().datetime({ offset: true, message: "must be an ISO-8601 timestamp" });
+z.string().length(2).regex(/^[A-Z]{2}$/, "must be an ISO-3166 alpha-2 country code");
+z.object({
+  limit: z.number().int().min(1).max(100).default(25),
+  cursor: z.string().min(1).max(200).nullish()
+});
+z.record(
+  z.string().min(1).max(40),
+  z.union([z.string().max(500), z.number(), z.boolean(), z.null()])
+).refine((m) => Object.keys(m).length <= 50, "at most 50 metadata keys").default({});
+var modeSchema = z.enum(["test", "live"]);
+z.enum(["USDC", "EURC"]);
+z.enum(["USDC", "EURC", "USYC"]);
+z.enum(["free", "growth", "business", "enterprise"]);
+z.enum(["testnet", "mainnet"]);
+
+// src/api-keys.ts
+var apiKeyKindSchema = z.enum(["secret", "publishable"]);
+var apiKeyScopeSchema = z.enum([
+  "sessions_read",
+  "sessions_write",
+  "subscriptions_read",
+  "subscriptions_write",
+  "refunds_read",
+  "refunds_write",
+  "transactions_read",
+  "webhooks_read",
+  "webhooks_write",
+  "invoices_read",
+  "invoices_write",
+  "storefronts_read",
+  "storefronts_write",
+  "agents_read",
+  "agents_write",
+  // Meta-tx relayer — submitting payer-signed EIP-3009 / EIP-2612
+  // authorizations on the merchant's behalf. Granted to keys used by
+  // hosted checkout and merchants embedding the SDK.
+  "relay_read",
+  "relay_write"
+]);
+var apiKeySchema = z.object({
+  id: idSchema,
+  merchantId: idSchema,
+  name: z.string().min(1).max(60),
+  kind: apiKeyKindSchema,
+  mode: modeSchema,
+  prefix: z.string().min(8).max(24),
+  lastFour: z.string().length(4),
+  scopes: z.array(apiKeyScopeSchema).nonempty(),
+  createdAt: isoTimestampSchema,
+  lastUsedAt: isoTimestampSchema.nullable(),
+  revokedAt: isoTimestampSchema.nullable()
+});
+var createApiKeyInputSchema = z.object({
+  name: z.string().min(1).max(60),
+  kind: apiKeyKindSchema,
+  mode: modeSchema,
+  scopes: z.array(apiKeyScopeSchema).nonempty()
+});
+var createApiKeyOutputSchema = z.object({
+  apiKey: apiKeySchema,
+  /** Full plaintext key — shown exactly once. */
+  secret: z.string()
+});
+var rotateApiKeyInputSchema = z.object({
+  id: idSchema
+});
+
+export { apiKeyKindSchema, apiKeySchema, apiKeyScopeSchema, createApiKeyInputSchema, createApiKeyOutputSchema, rotateApiKeyInputSchema };
+//# sourceMappingURL=api-keys.js.map
+//# sourceMappingURL=api-keys.js.map

package/dist/api-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/common.ts","../src/api-keys.ts"],"names":["z"],"mappings":";;;AAQO,IAAM,QAAA,GAAW,CAAA,CACrB,MAAA,EAAO,CACP,GAAA,CAAI,CAAC,CAAA,CACL,GAAA,CAAI,EAAE,CAAA,CACN,KAAA,CAAM,kBAAA,EAAoB,qBAAqB,CAAA;AAGlB,CAAA,CAC7B,MAAA,EAAO,CACP,KAAA,CAAM,qBAAA,EAAuB,oDAAoD,CAAA,CACjF,SAAA,CAAU,CAAC,CAAA,KAAM,CAAA,CAAE,aAAa;AAGJ,CAAA,CAC5B,MAAA,EAAO,CACP,KAAA,CAAM,uBAAuB,6DAA6D;AAGlE,CAAA,CAAE,MAAA,EAAO,CAAE,KAAA,EAAM,CAAE,IAAA,EAAK,CAAE,WAAA,EAAY,CAAE,GAAA,CAAI,GAAG;AAG5C,CAAA,CAC3B,MAAA,EAAO,CACP,GAAA,EAAI,CACJ,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,UAAA,CAAW,UAAU,CAAA,EAAG;AAAA,EACvC,OAAA,EAAS;AACX,CAAC;AAG0B,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA;AAOP,CAAA,CAC9B,MAAA,EAAO,CACP,MAAM,UAAA,EAAY,iDAAiD,CAAA,CACnE,MAAA,CAAO,CAAC,CAAA,KAAM,MAAA,CAAO,CAAC,CAAA,IAAK,IAAI,cAAc;AAGtB,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,EAAI,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,MAAA,CAAO,gBAAgB;AAGtE,IAAM,kBAAA,GAAqB,CAAA,CAC/B,MAAA,EAAO,CACP,QAAA,CAAS,EAAE,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAS,+BAAA,EAAiC,CAAA;AAGrC,EAC9B,MAAA,EAAO,CACP,OAAO,CAAC,CAAA,CACR,KAAA,CAAM,YAAA,EAAc,0CAA0C;AAG5B,EAAE,MAAA,CAAO;AAAA,EAC5C,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,EAAI,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA,CAAE,QAAQ,EAAE,CAAA;AAAA,EAClD,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA,CAAE,OAAA;AACrC,CAAC;AAY6B,CAAA,CAC3B,MAAA;AAAA,EACC,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,EAAE,CAAA;AAAA,EACxB,EAAE,KAAA,CAAM,CAAC,EAAE,MAAA,EAAO,CAAE,IAAI,GAAG,CAAA,EAAG,CAAA,CAAE,MAAA,IAAU,CAAA,CAAE,OAAA,IAAW,CAAA,CAAE,IAAA,EAAM,CAAC;AAClE,CAAA,CACC,MAAA,CAAO,CAAC,CAAA,KAAM,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,CAAE,MAAA,IAAU,EAAA,EAAI,0BAA0B,CAAA,CACrE,OAAA,CAAQ,EAAE;AAGN,IAAM,aAAa,CAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,MAAM,CAAC,CAAA;AAIZ,CAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,MAAM,CAAC;AAI3B,CAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,MAAA,EAAQ,MAAM,CAAC;AAI9B,EAAE,IAAA,CAAK,CAAC,QAAQ,QAAA,EAAU,UAAA,EAAY,YAAY,CAAC;AAIjD,CAAA,CAAE,IAAA,CAAK,CAAC,SAAA,EAAW,SAAS,CAAC;;;AC9F1D,IAAM,mBAAmBA,CAAAA,CAAE,IAAA,CAAK,CAAC,QAAA,EAAU,aAAa,CAAC;AAQzD,IAAM,iBAAA,GAAoBA,EAAE,IAAA,CAAK;AAAA,EACtC,eAAA;AAAA,EACA,gBAAA;AAAA,EACA,oBAAA;AAAA,EACA,qBAAA;AAAA,EACA,cAAA;AAAA,EACA,eAAA;AAAA,EACA,mBAAA;AAAA,EACA,eAAA;AAAA,EACA,gBAAA;AAAA,EACA,eAAA;AAAA,EACA,gBAAA;AAAA,EACA,kBAAA;AAAA,EACA,mBAAA;AAAA,EACA,aAAA;AAAA,EACA,cAAA;AAAA;AAAA;AAAA;AAAA,EAIA,YAAA;AAAA,EACA;AACF,CAAC;AAGM,IAAM,YAAA,GAAeA,EAAE,MAAA,CAAO;AAAA,EACnC,EAAA,EAAI,QAAA;AAAA,EACJ,UAAA,EAAY,QAAA;AAAA,EACZ,IAAA,EAAMA,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,EAAE,CAAA;AAAA,EAC9B,IAAA,EAAM,gBAAA;AAAA,EACN,IAAA,EAAM,UAAA;AAAA,EACN,MAAA,EAAQA,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,EAAE,CAAA;AAAA,EAChC,QAAA,EAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,OAAO,CAAC,CAAA;AAAA,EAC7B,MAAA,EAAQA,CAAAA,CAAE,KAAA,CAAM,iBAAiB,EAAE,QAAA,EAAS;AAAA,EAC5C,SAAA,EAAW,kBAAA;AAAA,EACX,UAAA,EAAY,mBAAmB,QAAA,EAAS;AAAA,EACxC,SAAA,EAAW,mBAAmB,QAAA;AAChC,CAAC;AAKM,IAAM,uBAAA,GAA0BA,EAAE,MAAA,CAAO;AAAA,EAC9C,IAAA,EAAMA,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,EAAE,CAAA;AAAA,EAC9B,IAAA,EAAM,gBAAA;AAAA,EACN,IAAA,EAAM,UAAA;AAAA,EACN,MAAA,EAAQA,CAAAA,CAAE,KAAA,CAAM,iBAAiB,EAAE,QAAA;AACrC,CAAC;AAGM,IAAM,wBAAA,GAA2BA,EAAE,MAAA,CAAO;AAAA,EAC/C,MAAA,EAAQ,YAAA;AAAA;AAAA,EAER,MAAA,EAAQA,EAAE,MAAA;AACZ,CAAC;AAGM,IAAM,uBAAA,GAA0BA,EAAE,MAAA,CAAO;AAAA,EAC9C,EAAA,EAAI;AACN,CAAC","file":"api-keys.js","sourcesContent":["/**\n * Primitive schemas shared across every entity.\n * Every higher-level schema builds on these so validation is consistent.\n */\n\nimport { z } from 'zod'\n\n/** CUID2 or UUID-style opaque identifier. */\nexport const idSchema = z\n  .string()\n  .min(1)\n  .max(64)\n  .regex(/^[a-zA-Z0-9_-]+$/, 'id must be URL-safe')\n\n/** EVM address. Hex-encoded, 0x-prefixed, 20 bytes. Normalised to lowercase. */\nexport const evmAddressSchema = z\n  .string()\n  .regex(/^0x[a-fA-F0-9]{40}$/, 'must be a 0x-prefixed 40-character hex EVM address')\n  .transform((v) => v.toLowerCase())\n\n/** EVM transaction hash. 32-byte hex. */\nexport const evmTxHashSchema = z\n  .string()\n  .regex(/^0x[a-fA-F0-9]{64}$/, 'must be a 0x-prefixed 64-character hex EVM transaction hash')\n\n/** Email address, trimmed and lower-cased. */\nexport const emailSchema = z.string().email().trim().toLowerCase().max(320)\n\n/** HTTPS URL. No http:// allowed outside dev. */\nexport const httpsUrlSchema = z\n  .string()\n  .url()\n  .refine((v) => v.startsWith('https://'), {\n    message: 'must be an https:// URL',\n  })\n\n/** URL permitting http and https (dev + prod). */\nexport const httpUrlSchema = z.string().url()\n\n/**\n * Amount expressed in the token's smallest unit, serialised as a string to\n * preserve precision beyond `Number.MAX_SAFE_INTEGER`. For USDC (6 decimals),\n * 1 USDC is the string \"1000000\".\n */\nexport const tokenAmountSchema = z\n  .string()\n  .regex(/^[0-9]+$/, 'must be a non-negative integer string (base-10)')\n  .refine((v) => BigInt(v) >= 0n, 'must be >= 0')\n\n/** Unsigned integer up to 2^53 - 1; validated and returned as number. */\nexport const uintSchema = z.number().int().min(0).max(Number.MAX_SAFE_INTEGER)\n\n/** ISO-8601 timestamp string (`.toISOString()`-compatible). */\nexport const isoTimestampSchema = z\n  .string()\n  .datetime({ offset: true, message: 'must be an ISO-8601 timestamp' })\n\n/** Two-letter ISO-3166 country code. */\nexport const countryCodeSchema = z\n  .string()\n  .length(2)\n  .regex(/^[A-Z]{2}$/, 'must be an ISO-3166 alpha-2 country code')\n\n/** Pagination inputs used by every list endpoint. */\nexport const paginationInputSchema = z.object({\n  limit: z.number().int().min(1).max(100).default(25),\n  cursor: z.string().min(1).max(200).nullish(),\n})\nexport type PaginationInput = z.infer<typeof paginationInputSchema>\n\n/** Pagination envelope used by every list response. */\nexport const makePaginatedSchema = <T extends z.ZodTypeAny>(item: T) =>\n  z.object({\n    data: z.array(item),\n    nextCursor: z.string().nullable(),\n    hasMore: z.boolean(),\n  })\n\n/** Free-form metadata bag the API round-trips for merchants. */\nexport const metadataSchema = z\n  .record(\n    z.string().min(1).max(40),\n    z.union([z.string().max(500), z.number(), z.boolean(), z.null()]),\n  )\n  .refine((m) => Object.keys(m).length <= 50, 'at most 50 metadata keys')\n  .default({})\n\n/** Environment mode carried on every mode-scoped resource. */\nexport const modeSchema = z.enum(['test', 'live'])\nexport type Mode = z.infer<typeof modeSchema>\n\n/** Payment token enum — mirrors `@strimz/shared-config`. */\nexport const paymentCurrencySchema = z.enum(['USDC', 'EURC'])\nexport type PaymentCurrency = z.infer<typeof paymentCurrencySchema>\n\n/** Every display-level currency (payment + treasury). */\nexport const tokenSymbolSchema = z.enum(['USDC', 'EURC', 'USYC'])\nexport type TokenSymbol = z.infer<typeof tokenSymbolSchema>\n\n/** Merchant tier enum — mirrors `@strimz/shared-config`. */\nexport const merchantTierSchema = z.enum(['free', 'growth', 'business', 'enterprise'])\nexport type MerchantTier = z.infer<typeof merchantTierSchema>\n\n/** Arc environment enum. */\nexport const arcEnvironmentSchema = z.enum(['testnet', 'mainnet'])\nexport type ArcEnvironment = z.infer<typeof arcEnvironmentSchema>\n\nexport type Id = z.infer<typeof idSchema>\nexport type EvmAddress = z.infer<typeof evmAddressSchema>\nexport type EvmTxHash = z.infer<typeof evmTxHashSchema>\nexport type TokenAmount = z.infer<typeof tokenAmountSchema>\nexport type IsoTimestamp = z.infer<typeof isoTimestampSchema>\nexport type Metadata = z.infer<typeof metadataSchema>\n","/**\n * API keys.\n *\n * A merchant has independent test and live keys. The full secret is shown\n * exactly once at creation; the backend stores only a hash and a display prefix.\n */\n\nimport { z } from 'zod'\nimport { idSchema, isoTimestampSchema, modeSchema } from './common.js'\n\nexport const apiKeyKindSchema = z.enum(['secret', 'publishable'])\nexport type ApiKeyKind = z.infer<typeof apiKeyKindSchema>\n\n/**\n * Underscore-separated to match the Prisma `ApiKeyScope` enum (Prisma\n * does not allow `:` in enum values). The DB and the wire format use the\n * same form so there is no boundary translation.\n */\nexport const apiKeyScopeSchema = z.enum([\n  'sessions_read',\n  'sessions_write',\n  'subscriptions_read',\n  'subscriptions_write',\n  'refunds_read',\n  'refunds_write',\n  'transactions_read',\n  'webhooks_read',\n  'webhooks_write',\n  'invoices_read',\n  'invoices_write',\n  'storefronts_read',\n  'storefronts_write',\n  'agents_read',\n  'agents_write',\n  // Meta-tx relayer — submitting payer-signed EIP-3009 / EIP-2612\n  // authorizations on the merchant's behalf. Granted to keys used by\n  // hosted checkout and merchants embedding the SDK.\n  'relay_read',\n  'relay_write',\n])\nexport type ApiKeyScope = z.infer<typeof apiKeyScopeSchema>\n\nexport const apiKeySchema = z.object({\n  id: idSchema,\n  merchantId: idSchema,\n  name: z.string().min(1).max(60),\n  kind: apiKeyKindSchema,\n  mode: modeSchema,\n  prefix: z.string().min(8).max(24),\n  lastFour: z.string().length(4),\n  scopes: z.array(apiKeyScopeSchema).nonempty(),\n  createdAt: isoTimestampSchema,\n  lastUsedAt: isoTimestampSchema.nullable(),\n  revokedAt: isoTimestampSchema.nullable(),\n})\nexport type ApiKey = z.infer<typeof apiKeySchema>\n\n// ---------- DTOs ----------\n\nexport const createApiKeyInputSchema = z.object({\n  name: z.string().min(1).max(60),\n  kind: apiKeyKindSchema,\n  mode: modeSchema,\n  scopes: z.array(apiKeyScopeSchema).nonempty(),\n})\nexport type CreateApiKeyInput = z.infer<typeof createApiKeyInputSchema>\n\nexport const createApiKeyOutputSchema = z.object({\n  apiKey: apiKeySchema,\n  /** Full plaintext key — shown exactly once. */\n  secret: z.string(),\n})\nexport type CreateApiKeyOutput = z.infer<typeof createApiKeyOutputSchema>\n\nexport const rotateApiKeyInputSchema = z.object({\n  id: idSchema,\n})\nexport type RotateApiKeyInput = z.infer<typeof rotateApiKeyInputSchema>\n"]}

package/dist/common.cjs

@@ -0,0 +1,56 @@
+'use strict';
+
+var zod = require('zod');
+
+// src/common.ts
+var idSchema = zod.z.string().min(1).max(64).regex(/^[a-zA-Z0-9_-]+$/, "id must be URL-safe");
+var evmAddressSchema = zod.z.string().regex(/^0x[a-fA-F0-9]{40}$/, "must be a 0x-prefixed 40-character hex EVM address").transform((v) => v.toLowerCase());
+var evmTxHashSchema = zod.z.string().regex(/^0x[a-fA-F0-9]{64}$/, "must be a 0x-prefixed 64-character hex EVM transaction hash");
+var emailSchema = zod.z.string().email().trim().toLowerCase().max(320);
+var httpsUrlSchema = zod.z.string().url().refine((v) => v.startsWith("https://"), {
+  message: "must be an https:// URL"
+});
+var httpUrlSchema = zod.z.string().url();
+var tokenAmountSchema = zod.z.string().regex(/^[0-9]+$/, "must be a non-negative integer string (base-10)").refine((v) => BigInt(v) >= 0n, "must be >= 0");
+var uintSchema = zod.z.number().int().min(0).max(Number.MAX_SAFE_INTEGER);
+var isoTimestampSchema = zod.z.string().datetime({ offset: true, message: "must be an ISO-8601 timestamp" });
+var countryCodeSchema = zod.z.string().length(2).regex(/^[A-Z]{2}$/, "must be an ISO-3166 alpha-2 country code");
+var paginationInputSchema = zod.z.object({
+  limit: zod.z.number().int().min(1).max(100).default(25),
+  cursor: zod.z.string().min(1).max(200).nullish()
+});
+var makePaginatedSchema = (item) => zod.z.object({
+  data: zod.z.array(item),
+  nextCursor: zod.z.string().nullable(),
+  hasMore: zod.z.boolean()
+});
+var metadataSchema = zod.z.record(
+  zod.z.string().min(1).max(40),
+  zod.z.union([zod.z.string().max(500), zod.z.number(), zod.z.boolean(), zod.z.null()])
+).refine((m) => Object.keys(m).length <= 50, "at most 50 metadata keys").default({});
+var modeSchema = zod.z.enum(["test", "live"]);
+var paymentCurrencySchema = zod.z.enum(["USDC", "EURC"]);
+var tokenSymbolSchema = zod.z.enum(["USDC", "EURC", "USYC"]);
+var merchantTierSchema = zod.z.enum(["free", "growth", "business", "enterprise"]);
+var arcEnvironmentSchema = zod.z.enum(["testnet", "mainnet"]);
+
+exports.arcEnvironmentSchema = arcEnvironmentSchema;
+exports.countryCodeSchema = countryCodeSchema;
+exports.emailSchema = emailSchema;
+exports.evmAddressSchema = evmAddressSchema;
+exports.evmTxHashSchema = evmTxHashSchema;
+exports.httpUrlSchema = httpUrlSchema;
+exports.httpsUrlSchema = httpsUrlSchema;
+exports.idSchema = idSchema;
+exports.isoTimestampSchema = isoTimestampSchema;
+exports.makePaginatedSchema = makePaginatedSchema;
+exports.merchantTierSchema = merchantTierSchema;
+exports.metadataSchema = metadataSchema;
+exports.modeSchema = modeSchema;
+exports.paginationInputSchema = paginationInputSchema;
+exports.paymentCurrencySchema = paymentCurrencySchema;
+exports.tokenAmountSchema = tokenAmountSchema;
+exports.tokenSymbolSchema = tokenSymbolSchema;
+exports.uintSchema = uintSchema;
+//# sourceMappingURL=common.cjs.map
+//# sourceMappingURL=common.cjs.map

package/dist/common.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/common.ts"],"names":["z"],"mappings":";;;;;AAQO,IAAM,QAAA,GAAWA,KAAA,CACrB,MAAA,EAAO,CACP,GAAA,CAAI,CAAC,CAAA,CACL,GAAA,CAAI,EAAE,CAAA,CACN,KAAA,CAAM,kBAAA,EAAoB,qBAAqB;AAG3C,IAAM,gBAAA,GAAmBA,KAAA,CAC7B,MAAA,EAAO,CACP,KAAA,CAAM,qBAAA,EAAuB,oDAAoD,CAAA,CACjF,SAAA,CAAU,CAAC,CAAA,KAAM,CAAA,CAAE,aAAa;AAG5B,IAAM,kBAAkBA,KAAA,CAC5B,MAAA,EAAO,CACP,KAAA,CAAM,uBAAuB,6DAA6D;AAGtF,IAAM,WAAA,GAAcA,KAAA,CAAE,MAAA,EAAO,CAAE,KAAA,EAAM,CAAE,IAAA,EAAK,CAAE,WAAA,EAAY,CAAE,GAAA,CAAI,GAAG;AAGnE,IAAM,cAAA,GAAiBA,KAAA,CAC3B,MAAA,EAAO,CACP,GAAA,EAAI,CACJ,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,UAAA,CAAW,UAAU,CAAA,EAAG;AAAA,EACvC,OAAA,EAAS;AACX,CAAC;AAGI,IAAM,aAAA,GAAgBA,KAAA,CAAE,MAAA,EAAO,CAAE,GAAA;AAOjC,IAAM,iBAAA,GAAoBA,KAAA,CAC9B,MAAA,EAAO,CACP,MAAM,UAAA,EAAY,iDAAiD,CAAA,CACnE,MAAA,CAAO,CAAC,CAAA,KAAM,MAAA,CAAO,CAAC,CAAA,IAAK,IAAI,cAAc;AAGzC,IAAM,UAAA,GAAaA,KAAA,CAAE,MAAA,EAAO,CAAE,GAAA,EAAI,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,MAAA,CAAO,gBAAgB;AAGtE,IAAM,kBAAA,GAAqBA,KAAA,CAC/B,MAAA,EAAO,CACP,QAAA,CAAS,EAAE,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAS,+BAAA,EAAiC;AAG/D,IAAM,iBAAA,GAAoBA,MAC9B,MAAA,EAAO,CACP,OAAO,CAAC,CAAA,CACR,KAAA,CAAM,YAAA,EAAc,0CAA0C;AAG1D,IAAM,qBAAA,GAAwBA,MAAE,MAAA,CAAO;AAAA,EAC5C,KAAA,EAAOA,KAAA,CAAE,MAAA,EAAO,CAAE,GAAA,EAAI,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA,CAAE,QAAQ,EAAE,CAAA;AAAA,EAClD,MAAA,EAAQA,KAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA,CAAE,OAAA;AACrC,CAAC;AAIM,IAAM,mBAAA,GAAsB,CAAyB,IAAA,KAC1DA,KAAA,CAAE,MAAA,CAAO;AAAA,EACP,IAAA,EAAMA,KAAA,CAAE,KAAA,CAAM,IAAI,CAAA;AAAA,EAClB,UAAA,EAAYA,KAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAChC,OAAA,EAASA,MAAE,OAAA;AACb,CAAC;AAGI,IAAM,iBAAiBA,KAAA,CAC3B,MAAA;AAAA,EACCA,MAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,EAAE,CAAA;AAAA,EACxBA,MAAE,KAAA,CAAM,CAACA,MAAE,MAAA,EAAO,CAAE,IAAI,GAAG,CAAA,EAAGA,KAAA,CAAE,MAAA,IAAUA,KAAA,CAAE,OAAA,IAAWA,KAAA,CAAE,IAAA,EAAM,CAAC;AAClE,CAAA,CACC,MAAA,CAAO,CAAC,CAAA,KAAM,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,CAAE,MAAA,IAAU,EAAA,EAAI,0BAA0B,CAAA,CACrE,OAAA,CAAQ,EAAE;AAGN,IAAM,aAAaA,KAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,MAAM,CAAC;AAI1C,IAAM,wBAAwBA,KAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,MAAM,CAAC;AAIrD,IAAM,oBAAoBA,KAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,MAAA,EAAQ,MAAM,CAAC;AAIzD,IAAM,kBAAA,GAAqBA,MAAE,IAAA,CAAK,CAAC,QAAQ,QAAA,EAAU,UAAA,EAAY,YAAY,CAAC;AAI9E,IAAM,uBAAuBA,KAAA,CAAE,IAAA,CAAK,CAAC,SAAA,EAAW,SAAS,CAAC","file":"common.cjs","sourcesContent":["/**\n * Primitive schemas shared across every entity.\n * Every higher-level schema builds on these so validation is consistent.\n */\n\nimport { z } from 'zod'\n\n/** CUID2 or UUID-style opaque identifier. */\nexport const idSchema = z\n  .string()\n  .min(1)\n  .max(64)\n  .regex(/^[a-zA-Z0-9_-]+$/, 'id must be URL-safe')\n\n/** EVM address. Hex-encoded, 0x-prefixed, 20 bytes. Normalised to lowercase. */\nexport const evmAddressSchema = z\n  .string()\n  .regex(/^0x[a-fA-F0-9]{40}$/, 'must be a 0x-prefixed 40-character hex EVM address')\n  .transform((v) => v.toLowerCase())\n\n/** EVM transaction hash. 32-byte hex. */\nexport const evmTxHashSchema = z\n  .string()\n  .regex(/^0x[a-fA-F0-9]{64}$/, 'must be a 0x-prefixed 64-character hex EVM transaction hash')\n\n/** Email address, trimmed and lower-cased. */\nexport const emailSchema = z.string().email().trim().toLowerCase().max(320)\n\n/** HTTPS URL. No http:// allowed outside dev. */\nexport const httpsUrlSchema = z\n  .string()\n  .url()\n  .refine((v) => v.startsWith('https://'), {\n    message: 'must be an https:// URL',\n  })\n\n/** URL permitting http and https (dev + prod). */\nexport const httpUrlSchema = z.string().url()\n\n/**\n * Amount expressed in the token's smallest unit, serialised as a string to\n * preserve precision beyond `Number.MAX_SAFE_INTEGER`. For USDC (6 decimals),\n * 1 USDC is the string \"1000000\".\n */\nexport const tokenAmountSchema = z\n  .string()\n  .regex(/^[0-9]+$/, 'must be a non-negative integer string (base-10)')\n  .refine((v) => BigInt(v) >= 0n, 'must be >= 0')\n\n/** Unsigned integer up to 2^53 - 1; validated and returned as number. */\nexport const uintSchema = z.number().int().min(0).max(Number.MAX_SAFE_INTEGER)\n\n/** ISO-8601 timestamp string (`.toISOString()`-compatible). */\nexport const isoTimestampSchema = z\n  .string()\n  .datetime({ offset: true, message: 'must be an ISO-8601 timestamp' })\n\n/** Two-letter ISO-3166 country code. */\nexport const countryCodeSchema = z\n  .string()\n  .length(2)\n  .regex(/^[A-Z]{2}$/, 'must be an ISO-3166 alpha-2 country code')\n\n/** Pagination inputs used by every list endpoint. */\nexport const paginationInputSchema = z.object({\n  limit: z.number().int().min(1).max(100).default(25),\n  cursor: z.string().min(1).max(200).nullish(),\n})\nexport type PaginationInput = z.infer<typeof paginationInputSchema>\n\n/** Pagination envelope used by every list response. */\nexport const makePaginatedSchema = <T extends z.ZodTypeAny>(item: T) =>\n  z.object({\n    data: z.array(item),\n    nextCursor: z.string().nullable(),\n    hasMore: z.boolean(),\n  })\n\n/** Free-form metadata bag the API round-trips for merchants. */\nexport const metadataSchema = z\n  .record(\n    z.string().min(1).max(40),\n    z.union([z.string().max(500), z.number(), z.boolean(), z.null()]),\n  )\n  .refine((m) => Object.keys(m).length <= 50, 'at most 50 metadata keys')\n  .default({})\n\n/** Environment mode carried on every mode-scoped resource. */\nexport const modeSchema = z.enum(['test', 'live'])\nexport type Mode = z.infer<typeof modeSchema>\n\n/** Payment token enum — mirrors `@strimz/shared-config`. */\nexport const paymentCurrencySchema = z.enum(['USDC', 'EURC'])\nexport type PaymentCurrency = z.infer<typeof paymentCurrencySchema>\n\n/** Every display-level currency (payment + treasury). */\nexport const tokenSymbolSchema = z.enum(['USDC', 'EURC', 'USYC'])\nexport type TokenSymbol = z.infer<typeof tokenSymbolSchema>\n\n/** Merchant tier enum — mirrors `@strimz/shared-config`. */\nexport const merchantTierSchema = z.enum(['free', 'growth', 'business', 'enterprise'])\nexport type MerchantTier = z.infer<typeof merchantTierSchema>\n\n/** Arc environment enum. */\nexport const arcEnvironmentSchema = z.enum(['testnet', 'mainnet'])\nexport type ArcEnvironment = z.infer<typeof arcEnvironmentSchema>\n\nexport type Id = z.infer<typeof idSchema>\nexport type EvmAddress = z.infer<typeof evmAddressSchema>\nexport type EvmTxHash = z.infer<typeof evmTxHashSchema>\nexport type TokenAmount = z.infer<typeof tokenAmountSchema>\nexport type IsoTimestamp = z.infer<typeof isoTimestampSchema>\nexport type Metadata = z.infer<typeof metadataSchema>\n"]}

package/dist/common.d.cts

@@ -0,0 +1,82 @@
+import { z } from 'zod';
+
+/**
+ * Primitive schemas shared across every entity.
+ * Every higher-level schema builds on these so validation is consistent.
+ */
+
+/** CUID2 or UUID-style opaque identifier. */
+declare const idSchema: z.ZodString;
+/** EVM address. Hex-encoded, 0x-prefixed, 20 bytes. Normalised to lowercase. */
+declare const evmAddressSchema: z.ZodEffects<z.ZodString, string, string>;
+/** EVM transaction hash. 32-byte hex. */
+declare const evmTxHashSchema: z.ZodString;
+/** Email address, trimmed and lower-cased. */
+declare const emailSchema: z.ZodString;
+/** HTTPS URL. No http:// allowed outside dev. */
+declare const httpsUrlSchema: z.ZodEffects<z.ZodString, string, string>;
+/** URL permitting http and https (dev + prod). */
+declare const httpUrlSchema: z.ZodString;
+/**
+ * Amount expressed in the token's smallest unit, serialised as a string to
+ * preserve precision beyond `Number.MAX_SAFE_INTEGER`. For USDC (6 decimals),
+ * 1 USDC is the string "1000000".
+ */
+declare const tokenAmountSchema: z.ZodEffects<z.ZodString, string, string>;
+/** Unsigned integer up to 2^53 - 1; validated and returned as number. */
+declare const uintSchema: z.ZodNumber;
+/** ISO-8601 timestamp string (`.toISOString()`-compatible). */
+declare const isoTimestampSchema: z.ZodString;
+/** Two-letter ISO-3166 country code. */
+declare const countryCodeSchema: z.ZodString;
+/** Pagination inputs used by every list endpoint. */
+declare const paginationInputSchema: z.ZodObject<{
+    limit: z.ZodDefault<z.ZodNumber>;
+    cursor: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, "strip", z.ZodTypeAny, {
+    limit: number;
+    cursor?: string | null | undefined;
+}, {
+    limit?: number | undefined;
+    cursor?: string | null | undefined;
+}>;
+type PaginationInput = z.infer<typeof paginationInputSchema>;
+/** Pagination envelope used by every list response. */
+declare const makePaginatedSchema: <T extends z.ZodTypeAny>(item: T) => z.ZodObject<{
+    data: z.ZodArray<T, "many">;
+    nextCursor: z.ZodNullable<z.ZodString>;
+    hasMore: z.ZodBoolean;
+}, "strip", z.ZodTypeAny, {
+    data: T["_output"][];
+    nextCursor: string | null;
+    hasMore: boolean;
+}, {
+    data: T["_input"][];
+    nextCursor: string | null;
+    hasMore: boolean;
+}>;
+/** Free-form metadata bag the API round-trips for merchants. */
+declare const metadataSchema: z.ZodDefault<z.ZodEffects<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>, Record<string, string | number | boolean | null>, Record<string, string | number | boolean | null>>>;
+/** Environment mode carried on every mode-scoped resource. */
+declare const modeSchema: z.ZodEnum<["test", "live"]>;
+type Mode = z.infer<typeof modeSchema>;
+/** Payment token enum — mirrors `@strimz/shared-config`. */
+declare const paymentCurrencySchema: z.ZodEnum<["USDC", "EURC"]>;
+type PaymentCurrency = z.infer<typeof paymentCurrencySchema>;
+/** Every display-level currency (payment + treasury). */
+declare const tokenSymbolSchema: z.ZodEnum<["USDC", "EURC", "USYC"]>;
+type TokenSymbol = z.infer<typeof tokenSymbolSchema>;
+/** Merchant tier enum — mirrors `@strimz/shared-config`. */
+declare const merchantTierSchema: z.ZodEnum<["free", "growth", "business", "enterprise"]>;
+type MerchantTier = z.infer<typeof merchantTierSchema>;
+/** Arc environment enum. */
+declare const arcEnvironmentSchema: z.ZodEnum<["testnet", "mainnet"]>;
+type ArcEnvironment = z.infer<typeof arcEnvironmentSchema>;
+type Id = z.infer<typeof idSchema>;
+type EvmAddress = z.infer<typeof evmAddressSchema>;
+type EvmTxHash = z.infer<typeof evmTxHashSchema>;
+type TokenAmount = z.infer<typeof tokenAmountSchema>;
+type IsoTimestamp = z.infer<typeof isoTimestampSchema>;
+type Metadata = z.infer<typeof metadataSchema>;
+
+export { type ArcEnvironment, type EvmAddress, type EvmTxHash, type Id, type IsoTimestamp, type MerchantTier, type Metadata, type Mode, type PaginationInput, type PaymentCurrency, type TokenAmount, type TokenSymbol, arcEnvironmentSchema, countryCodeSchema, emailSchema, evmAddressSchema, evmTxHashSchema, httpUrlSchema, httpsUrlSchema, idSchema, isoTimestampSchema, makePaginatedSchema, merchantTierSchema, metadataSchema, modeSchema, paginationInputSchema, paymentCurrencySchema, tokenAmountSchema, tokenSymbolSchema, uintSchema };