@temboplus/afloat 0.1.77-beta.8 → 0.1.78

package/script/npm/src/src/features/admin/schemas.d.ts

@@ -0,0 +1,146 @@
+import { z } from "zod";
+/**
+ * Type definition for password schema using Zod.
+ * This is used as a TypeScript type helper for the actual schema implementation.
+ */
+type _PasswordType = z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, string, string>;
+/**
+ * Type definition for role schema using Zod.
+ * This is used as a TypeScript type helper for the actual schema implementation.
+ */
+type _RoleType = z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    access: z.ZodArray<z.ZodString>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}>;
+/**
+ * Type definition for managed user schema using Zod.
+ * This is used as a TypeScript type helper for the actual schema implementation.
+ */
+type _ManagedUserType = z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    identity: z.ZodString;
+    type: z.ZodString;
+    profileId: z.ZodString;
+    roleId: z.ZodString;
+    resetPassword: z.ZodBoolean;
+    isActive: z.ZodBoolean;
+    isArchived: z.ZodBoolean;
+    role: z.ZodOptional<z.ZodType<Role>>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}>;
+/**
+ * Type definition for create user request schema using Zod.
+ * This is used as a TypeScript type helper for the actual schema implementation.
+ */
+type _CreateUserRequestType = z.ZodObject<{
+    name: z.ZodString;
+    identity: z.ZodString;
+    password: z.ZodOptional<_PasswordType>;
+    roleId: z.ZodOptional<z.ZodString>;
+    resetPassword: z.ZodOptional<z.ZodBoolean>;
+}>;
+/**
+ * Type definition for update user request schema using Zod.
+ * This is used as a TypeScript type helper for the actual schema implementation.
+ */
+type _UpdateUserRequestType = z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    roleId: z.ZodOptional<z.ZodString>;
+    password: z.ZodOptional<_PasswordType>;
+    resetPassword: z.ZodOptional<z.ZodBoolean>;
+    isActive: z.ZodOptional<z.ZodBoolean>;
+}>;
+/**
+ * Type definition for reset password request schema using Zod.
+ * This is used as a TypeScript type helper for the actual schema implementation.
+ */
+type _ResetPasswordRequestType = z.ZodObject<{
+    newPassword: z.ZodOptional<_PasswordType>;
+    sendNotification: z.ZodOptional<z.ZodBoolean>;
+}>;
+/**
+ * Type definition for create user response schema using Zod.
+ * This is used as a TypeScript type helper for the actual schema implementation.
+ */
+type _CreateUserResponseType = z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    identity: z.ZodString;
+    type: z.ZodString;
+    profileId: z.ZodString;
+    roleId: z.ZodString;
+    isActive: z.ZodBoolean;
+    isArchived: z.ZodBoolean;
+    createdAt: z.ZodString;
+}>;
+/**
+ * Type definition for managed user query parameters schema using Zod.
+ * This is used as a TypeScript type helper for the actual schema implementation.
+ */
+type _ManagedUserQueryParamsType = z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    identity: z.ZodOptional<z.ZodString>;
+    type: z.ZodOptional<z.ZodString>;
+    profileId: z.ZodOptional<z.ZodString>;
+    roleId: z.ZodOptional<z.ZodString>;
+    resetPassword: z.ZodOptional<z.ZodNumber>;
+    isActive: z.ZodOptional<z.ZodNumber>;
+    isArchived: z.ZodOptional<z.ZodNumber>;
+    createdAt: z.ZodOptional<z.ZodString>;
+    updatedAt: z.ZodOptional<z.ZodString>;
+    eager: z.ZodOptional<z.ZodString>;
+}>;
+/**
+ * Collection of user management schemas for export.
+ * Provides access to all user and role validation schemas.
+ */
+export declare const UserManagementSchemas: {
+    role: _RoleType;
+    managedUser: _ManagedUserType;
+    managedUserQueryParams: _ManagedUserQueryParamsType;
+    createUserRequest: _CreateUserRequestType;
+    updateUserRequest: _UpdateUserRequestType;
+    resetPasswordRequest: _ResetPasswordRequestType;
+    createUserResponse: _CreateUserResponseType;
+    password: _PasswordType;
+};
+/**
+ * TypeScript type for a validated role object.
+ * Use this type for role instances that have been validated against the schema.
+ */
+type Role = z.infer<typeof UserManagementSchemas.role>;
+/**
+ * TypeScript type for a create user request object.
+ * Use this type for user creation requests that have been validated against the schema.
+ */
+export type CreateUserRequest = z.infer<typeof UserManagementSchemas.createUserRequest>;
+/**
+ * TypeScript type for an update user request object.
+ * Use this type for user update requests that have been validated against the schema.
+ */
+export type UpdateUserRequest = z.infer<typeof UserManagementSchemas.updateUserRequest>;
+/**
+ * TypeScript type for a reset password request object.
+ * Use this type for password reset requests that have been validated against the schema.
+ */
+export type ResetPasswordRequest = z.infer<typeof UserManagementSchemas.resetPasswordRequest>;
+/**
+ * TypeScript type for a create user response object.
+ * Use this type for user creation responses that have been validated against the schema.
+ */
+export type CreateUserResponse = z.infer<typeof UserManagementSchemas.createUserResponse>;
+/**
+ * TypeScript type for managed user query parameters.
+ * Use this type for query parameter objects that have been validated against the schema.
+ * All fields are optional to allow flexible filtering and searching.
+ */
+export type ManagedUserQueryParams = z.infer<typeof UserManagementSchemas.managedUserQueryParams>;
+export {};
+//# sourceMappingURL=schemas.d.ts.map

package/script/npm/src/src/features/admin/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../../../../../src/src/features/admin/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,KAAK,aAAa,GAAG,CAAC,CAAC,UAAU,CAC/B,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EACvE,MAAM,EACN,MAAM,CACP,CAAC;AAuDF;;;GAGG;AACH,KAAK,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;IAC3B,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC;IAClB,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC;IACvB,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC;CACxB,CAAC,CAAC;AAEH;;;GAGG;AACH,KAAK,gBAAgB,GAAG,CAAC,CAAC,SAAS,CAAC;IAClC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC;IAClB,QAAQ,EAAE,CAAC,CAAC,SAAS,CAAC;IACtB,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC;IAClB,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC;IACvB,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC;IACpB,aAAa,EAAE,CAAC,CAAC,UAAU,CAAC;IAC5B,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC;IACvB,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC;IACzB,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC;IACvB,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC;CACxB,CAAC,CAAC;AAEH;;;GAGG;AACH,KAAK,sBAAsB,GAAG,CAAC,CAAC,SAAS,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC;IAClB,QAAQ,EAAE,CAAC,CAAC,SAAS,CAAC;IACtB,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACnC,aAAa,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;CAC5C,CAAC,CAAC;AAEH;;;GAGG;AACH,KAAK,sBAAsB,GAAG,CAAC,CAAC,SAAS,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACjC,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACnC,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;IACvC,aAAa,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC3C,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;CACvC,CAAC,CAAC;AAEH;;;GAGG;AACH,KAAK,yBAAyB,GAAG,CAAC,CAAC,SAAS,CAAC;IAC3C,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;IAC1C,gBAAgB,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;CAC/C,CAAC,CAAC;AAEH;;;GAGG;AACH,KAAK,uBAAuB,GAAG,CAAC,CAAC,SAAS,CAAC;IACzC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC;IAClB,QAAQ,EAAE,CAAC,CAAC,SAAS,CAAC;IACtB,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC;IAClB,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC;IACvB,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC;IACpB,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC;IACvB,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC;IACzB,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC;CACxB,CAAC,CAAC;AAIH;;;GAGG;AACH,KAAK,2BAA2B,GAAG,CAAC,CAAC,SAAS,CAAC;IAC7C,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACjC,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACnC,aAAa,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC1C,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACrC,UAAU,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACvC,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACtC,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAEtC,KAAK,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;CACnC,CAAC,CAAC;AAmKH;;;GAGG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;CASjC,CAAC;AAIF;;;GAGG;AACH,KAAK,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC;AAEvD;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CACrC,OAAO,qBAAqB,CAAC,iBAAiB,CAC/C,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CACrC,OAAO,qBAAqB,CAAC,iBAAiB,CAC/C,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CACxC,OAAO,qBAAqB,CAAC,oBAAoB,CAClD,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CACtC,OAAO,qBAAqB,CAAC,kBAAkB,CAChD,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAC1C,OAAO,qBAAqB,CAAC,sBAAsB,CACpD,CAAC"}

package/script/npm/src/src/features/admin/schemas.js

@@ -0,0 +1,209 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserManagementSchemas = void 0;
+const zod_1 = require("zod");
+// ====================== Custom Schema Definitions ====================== //
+/**
+ * Custom password schema that enforces strong password requirements.
+ * Password must contain:
+ * - At least 8 characters
+ * - At least one uppercase letter
+ * - At least one lowercase letter
+ * - At least one number
+ * - At least one special character (!@#$%^&*()_+-=[]{}|;:,.<>?)
+ * - No common passwords or sequential patterns
+ */
+const passwordSchema = zod_1.z
+    .string()
+    .min(8, "Password must be at least 8 characters long")
+    .max(128, "Password must not exceed 128 characters")
+    .regex(/[A-Z]/, "Password must contain at least one uppercase letter")
+    .regex(/[a-z]/, "Password must contain at least one lowercase letter")
+    .regex(/[0-9]/, "Password must contain at least one number")
+    .regex(/[!@#$%^&*()_+\-=\[\]{}|;:,.<>?]/, "Password must contain at least one special character (!@#$%^&*()_+-=[]{}|;:,.<>?)")
+    .refine((password) => {
+    // Check for common weak patterns
+    const weakPatterns = [
+        /(.)\1{2,}/, // Three or more consecutive identical characters
+        /123456|654321|abcdef|qwerty|password|admin|user/i, // Common passwords
+        /^[0-9]+$/, // Only numbers
+        /^[a-zA-Z]+$/, // Only letters
+    ];
+    return !weakPatterns.some((pattern) => pattern.test(password));
+}, "Password contains weak patterns. Avoid repeated characters, common words, or simple sequences")
+    .refine((password) => {
+    // Check for sequential characters (e.g., "abcd", "1234")
+    const hasSequential = /(?:abc|bcd|cde|def|efg|fgh|ghi|hij|ijk|jkl|klm|lmn|mno|nop|opq|pqr|qrs|rst|stu|tuv|uvw|vwx|wxy|xyz|012|123|234|345|456|567|678|789)/i
+        .test(password);
+    return !hasSequential;
+}, "Password should not contain sequential characters")
+    .refine((password) => {
+    // Check for keyboard patterns (e.g., "qwer", "asdf")
+    const keyboardPatterns = /(?:qwer|wert|erty|rtyu|tyui|yuio|uiop|asdf|sdfg|dfgh|fghj|ghjk|hjkl|zxcv|xcvb|cvbn|vbnm)/i;
+    return !keyboardPatterns.test(password);
+}, "Password should not contain keyboard patterns");
+// ====================== Schema Definitions ====================== //
+/**
+ * Schema definition for a role.
+ * Represents a user role with permissions in the system.
+ *
+ * @property {string} id - Unique identifier for the role
+ * @property {string} name - Display name of the role
+ * @property {string} description - Optional description of the role
+ * @property {string[]} access - Array of permission strings
+ * @property {string} createdAt - ISO datetime string of role creation
+ * @property {string} updatedAt - ISO datetime string of last role update
+ */
+const roleSchema = zod_1.z.object({
+    id: zod_1.z.string().min(1),
+    name: zod_1.z.string().min(1, "Role name is required"),
+    description: zod_1.z.string().optional(),
+    access: zod_1.z.array(zod_1.z.string()),
+    createdAt: zod_1.z.string().datetime("Invalid creation timestamp"),
+    updatedAt: zod_1.z.string().datetime("Invalid update timestamp"),
+});
+/**
+ * Schema definition for a managed user account.
+ * Represents a user account from the admin management perspective.
+ *
+ * @property {string} id - Unique identifier for the user account
+ * @property {string} name - Full name of the user
+ * @property {string} identity - User's email address or phone number
+ * @property {string} type - Type of user account
+ * @property {string} profileId - ID of the associated profile
+ * @property {string} roleId - ID of the assigned role
+ * @property {boolean} resetPassword - Whether user must reset password on next login
+ * @property {boolean} isActive - Whether the account is currently active
+ * @property {Role} role - Full role object with permissions
+ * @property {string} createdAt - ISO datetime string of account creation
+ * @property {string} updatedAt - ISO datetime string of last account update
+ */
+const managedUserSchema = zod_1.z.object({
+    id: zod_1.z.string().min(1),
+    name: zod_1.z.string().min(1, "User name is required"),
+    identity: zod_1.z.string().email("Invalid email address"),
+    type: zod_1.z.string().min(1, "User type is required"),
+    profileId: zod_1.z.string().min(1, "Profile ID is required"),
+    roleId: zod_1.z.string().min(1, "Role ID is required"),
+    resetPassword: zod_1.z.boolean(),
+    isActive: zod_1.z.boolean(),
+    isArchived: zod_1.z.boolean(),
+    role: roleSchema.optional(),
+    createdAt: zod_1.z.string().datetime("Invalid creation timestamp"),
+    updatedAt: zod_1.z.string().datetime("Invalid update timestamp"),
+});
+/**
+ * Schema definition for managed user query parameters.
+ * Contains all primitive fields from ManagedUserData for filtering/searching users.
+ * Excludes complex object fields like 'role' which are not suitable for query parameters.
+ *
+ * @property {string} id - Optional filter by user ID
+ * @property {string} name - Optional filter by user name (partial match)
+ * @property {string} identity - Optional filter by user identity (email/phone)
+ * @property {string} type - Optional filter by user type
+ * @property {string} profileId - Optional filter by profile ID
+ * @property {string} roleId - Optional filter by role ID
+ * @property {number} resetPassword - Optional filter by password reset requirement
+ * @property {number} isActive - Optional filter by account active status
+ * @property {number} isArchived - Optional filter by account archived status
+ * @property {string} createdAt - Optional filter by creation date (ISO datetime)
+ * @property {string} updatedAt - Optional filter by last update date (ISO datetime)
+ */
+const managedUserQueryParamsSchema = zod_1.z.object({
+    id: zod_1.z.string().min(1).optional(),
+    name: zod_1.z.string().min(1).optional(),
+    identity: zod_1.z.string().email("Invalid email address").optional(),
+    type: zod_1.z.string().min(1).optional(),
+    profileId: zod_1.z.string().min(1).optional(),
+    roleId: zod_1.z.string().min(1).optional(),
+    resetPassword: zod_1.z.number().optional(),
+    isActive: zod_1.z.number().optional(),
+    isArchived: zod_1.z.number().optional(),
+    createdAt: zod_1.z.string().datetime("Invalid creation timestamp").optional(),
+    updatedAt: zod_1.z.string().datetime("Invalid update timestamp").optional(),
+    eager: zod_1.z.string().optional(),
+});
+/**
+ * Schema definition for creating a new user account.
+ * Defines the required and optional fields for user creation.
+ *
+ * @property {string} name - Full name of the user
+ * @property {string} identity - User's email address
+ * @property {string} password - Initial password for the account
+ * @property {string} roleId - Optional role ID (defaults to system default)
+ * @property {boolean} resetPassword - Optional flag to force password reset (defaults to true)
+ */
+const createUserRequestSchema = zod_1.z.object({
+    name: zod_1.z.string().min(1, "User name is required"),
+    identity: zod_1.z.string().email("Valid email address is required"),
+    password: passwordSchema.optional(),
+    roleId: zod_1.z.string().optional(),
+    resetPassword: zod_1.z.boolean().optional(),
+});
+/**
+ * Schema definition for updating a user account.
+ * All fields are optional for partial updates.
+ *
+ * @property {string} name - Optional updated name
+ * @property {string} roleId - Optional updated role ID
+ * @property {string} password - Optional new password
+ * @property {boolean} resetPassword - Optional flag to force password reset
+ * @property {boolean} isActive - Optional account activation status
+ */
+const updateUserRequestSchema = zod_1.z.object({
+    name: zod_1.z.string().min(1, "User name cannot be empty").optional(),
+    roleId: zod_1.z.string().min(1, "Role ID cannot be empty").optional(),
+    password: passwordSchema.optional(),
+    resetPassword: zod_1.z.boolean().optional(),
+    isActive: zod_1.z.boolean().optional(),
+});
+/**
+ * Schema definition for resetting a user's password.
+ * Both fields are optional with system defaults.
+ *
+ * @property {string} newPassword - Optional new password (random generated if not provided)
+ * @property {boolean} sendNotification - Optional flag to send notification to user
+ */
+const resetPasswordRequestSchema = zod_1.z.object({
+    newPassword: passwordSchema.optional(),
+    sendNotification: zod_1.z.boolean().optional(),
+});
+/**
+ * Schema definition for the response when creating a user.
+ * Returns basic user information without sensitive data.
+ *
+ * @property {string} id - Unique identifier for the created user
+ * @property {string} name - Full name of the user
+ * @property {string} identity - User's email address
+ * @property {string} type - Type of user account
+ * @property {string} profileId - ID of the associated profile
+ * @property {string} roleId - ID of the assigned role
+ * @property {boolean} isActive - Whether the account is active
+ * @property {string} createdAt - ISO datetime string of account creation
+ */
+const createUserResponseSchema = zod_1.z.object({
+    id: zod_1.z.string(),
+    name: zod_1.z.string(),
+    identity: zod_1.z.string(),
+    type: zod_1.z.string(),
+    profileId: zod_1.z.string(),
+    roleId: zod_1.z.string(),
+    isActive: zod_1.z.boolean(),
+    isArchived: zod_1.z.boolean(),
+    createdAt: zod_1.z.string().datetime(),
+});
+// ====================== Schema Collections ====================== //
+/**
+ * Collection of user management schemas for export.
+ * Provides access to all user and role validation schemas.
+ */
+exports.UserManagementSchemas = {
+    role: roleSchema,
+    managedUser: managedUserSchema,
+    managedUserQueryParams: managedUserQueryParamsSchema,
+    createUserRequest: createUserRequestSchema,
+    updateUserRequest: updateUserRequestSchema,
+    resetPasswordRequest: resetPasswordRequestSchema,
+    createUserResponse: createUserResponseSchema,
+    password: passwordSchema, // Export password schema for reuse
+};

package/script/npm/src/src/features/auth/access/contract.d.ts

@@ -0,0 +1,14 @@
+import { z } from "zod";
+/**
+ * Auth API contract
+ */
+export declare const accessContract: {
+    getAccessList: {
+        method: "GET";
+        path: "/access";
+        responses: {
+            200: z.ZodArray<z.ZodString, "many">;
+        };
+    };
+};
+//# sourceMappingURL=contract.d.ts.map

package/script/npm/src/src/features/auth/access/contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../../../../../../src/src/features/auth/access/contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;;;;CAQzB,CAAC"}

package/script/npm/src/src/features/auth/access/contract.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.accessContract = void 0;
+const zod_1 = require("zod");
+const core_1 = require("@ts-rest/core");
+/**
+ * Auth API contract
+ */
+exports.accessContract = (0, core_1.initContract)().router({
+    getAccessList: {
+        method: "GET",
+        path: "/access",
+        responses: {
+            200: zod_1.z.string().array(),
+        },
+    },
+});

package/script/npm/src/src/features/auth/access/repository.d.ts

@@ -0,0 +1,11 @@
+import { Profile } from "../../../models/index.js";
+import { TokenRequiredRepository } from "../../../shared/token_required_repository.js";
+import { accessContract } from "./contract.js";
+export declare class AccessRepository extends TokenRequiredRepository<typeof accessContract> {
+    /**
+     * Initializes an instance of ProfileRepository.
+     */
+    constructor();
+    getCurrentProfile(token: string): Promise<Profile>;
+}
+//# sourceMappingURL=repository.d.ts.map

package/script/npm/src/src/features/auth/access/repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../../src/src/features/auth/access/repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAEnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AACvF,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,qBAAa,gBACX,SAAQ,uBAAuB,CAAC,OAAO,cAAc,CAAC;IACtD;;OAEG;;IAKG,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAazD"}

package/script/npm/src/src/features/auth/access/repository.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AccessRepository = void 0;
+const index_js_1 = require("../../../models/index.js");
+const api_error_js_1 = require("../../../errors/api_error.js");
+const token_required_repository_js_1 = require("../../../shared/token_required_repository.js");
+const contract_js_1 = require("./contract.js");
+class AccessRepository extends token_required_repository_js_1.TokenRequiredRepository {
+    /**
+     * Initializes an instance of ProfileRepository.
+     */
+    constructor() {
+        super("auth", contract_js_1.accessContract, "");
+    }
+    async getCurrentProfile(token) {
+        this.setToken(token);
+        const result = await this.client.getAccessList();
+        if (result.status === 200) {
+            const profile = index_js_1.Profile.from(result.body);
+            if (profile)
+                return profile;
+        }
+        throw new api_error_js_1.APIError({
+            message: "An error occurred while trying to get the current access list",
+            statusCode: 502,
+        });
+    }
+}
+exports.AccessRepository = AccessRepository;

package/script/npm/src/src/features/auth/contract.d.ts

@@ -0,0 +1,112 @@
+import { z } from "zod";
+/**
+ * Auth API contract
+ */
+export declare const authContract: {
+    logIn: {
+        method: "POST";
+        body: z.ZodObject<{
+            type: z.ZodDefault<z.ZodString>;
+            identity: z.ZodString;
+            password: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            type: string;
+            identity: string;
+            password: string;
+        }, {
+            identity: string;
+            password: string;
+            type?: string | undefined;
+        }>;
+        path: "/login";
+        responses: {
+            201: z.ZodObject<{
+                profile: z.ZodObject<{
+                    id: z.ZodString;
+                    firstName: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+                    lastName: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+                    displayName: z.ZodString;
+                    phone: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+                    accountNo: z.ZodString;
+                    email: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+                }, z.UnknownKeysParam, z.ZodTypeAny, {
+                    id: string;
+                    displayName: string;
+                    accountNo: string;
+                    firstName?: string | null | undefined;
+                    lastName?: string | null | undefined;
+                    phone?: string | null | undefined;
+                    email?: string | null | undefined;
+                }, {
+                    id: string;
+                    displayName: string;
+                    accountNo: string;
+                    firstName?: string | null | undefined;
+                    lastName?: string | null | undefined;
+                    phone?: string | null | undefined;
+                    email?: string | null | undefined;
+                }>;
+                token: z.ZodString;
+                access: z.ZodArray<z.ZodString, "many">;
+                resetPassword: z.ZodBoolean;
+            }, "strip", z.ZodTypeAny, {
+                resetPassword: boolean;
+                profile: {
+                    id: string;
+                    displayName: string;
+                    accountNo: string;
+                    firstName?: string | null | undefined;
+                    lastName?: string | null | undefined;
+                    phone?: string | null | undefined;
+                    email?: string | null | undefined;
+                };
+                token: string;
+                access: string[];
+            }, {
+                resetPassword: boolean;
+                profile: {
+                    id: string;
+                    displayName: string;
+                    accountNo: string;
+                    firstName?: string | null | undefined;
+                    lastName?: string | null | undefined;
+                    phone?: string | null | undefined;
+                    email?: string | null | undefined;
+                };
+                token: string;
+                access: string[];
+            }>;
+            400: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
+        };
+    };
+    access: {
+        method: "GET";
+        path: "/access";
+        headers: z.ZodObject<{
+            token: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            token: string;
+        }, {
+            token: string;
+        }>;
+        responses: {
+            200: z.ZodArray<z.ZodString, "many">;
+        };
+    };
+    resetPassword: {
+        method: "PUT";
+        body: z.ZodObject<{
+            currentPassword: z.ZodString;
+            newPassword: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            currentPassword: string;
+            newPassword: string;
+        }, {
+            currentPassword: string;
+            newPassword: string;
+        }>;
+        path: "/password";
+        responses: {};
+    };
+};
+//# sourceMappingURL=contract.d.ts.map

package/script/npm/src/src/features/auth/contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../../../../../src/src/features/auth/contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;GAEG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoCvB,CAAC"}

package/script/npm/src/src/features/auth/contract.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authContract = void 0;
+const zod_1 = require("zod");
+const core_1 = require("@ts-rest/core");
+const index_js_1 = require("../../models/index.js");
+/**
+ * Auth API contract
+ */
+exports.authContract = (0, core_1.initContract)().router({
+    logIn: {
+        method: "POST",
+        path: "/login",
+        body: zod_1.z.object({
+            type: zod_1.z.string().default("password"),
+            identity: zod_1.z.string().email(),
+            password: zod_1.z.string(),
+        }),
+        responses: {
+            201: zod_1.z.object({
+                profile: index_js_1.Profile.schema,
+                token: zod_1.z.string(),
+                access: zod_1.z.array(zod_1.z.string()),
+                resetPassword: zod_1.z.boolean(),
+            }),
+            400: zod_1.z.object({}),
+        },
+    },
+    access: {
+        method: "GET",
+        path: "/access",
+        headers: zod_1.z.object({ token: zod_1.z.string() }),
+        responses: {
+            200: zod_1.z.string().array(),
+        },
+    },
+    resetPassword: {
+        method: "PUT",
+        path: "/password",
+        body: zod_1.z.object({
+            currentPassword: zod_1.z.string(),
+            newPassword: zod_1.z.string(),
+        }),
+        responses: {},
+    },
+});

package/script/npm/src/src/features/auth/identity/contract.d.ts

@@ -0,0 +1,23 @@
+import { z } from "zod";
+/**
+ * Identity API contract
+ */
+export declare const identityContract: {
+    getUserCredentials: {
+        method: "GET";
+        path: "/me";
+        responses: {
+            200: z.ZodObject<{
+                name: z.ZodString;
+                identity: z.ZodString;
+            }, "strip", z.ZodTypeAny, {
+                name: string;
+                identity: string;
+            }, {
+                name: string;
+                identity: string;
+            }>;
+        };
+    };
+};
+//# sourceMappingURL=contract.d.ts.map

package/script/npm/src/src/features/auth/identity/contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../../../../../../src/src/features/auth/identity/contract.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;CAW3B,CAAC"}

package/script/npm/src/src/features/auth/identity/contract.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.identityContract = void 0;
+const core_1 = require("@ts-rest/core");
+const zod_1 = require("zod");
+/**
+ * Identity API contract
+ */
+exports.identityContract = (0, core_1.initContract)().router({
+    getUserCredentials: {
+        method: "GET",
+        path: "/me",
+        responses: {
+            200: zod_1.z.object({
+                name: zod_1.z.string(),
+                identity: zod_1.z.string(),
+            }),
+        },
+    },
+});