@tinyrack/tinyauth-server 0.0.7

package/dist/lib/config/account-deletion.d.ts

@@ -0,0 +1,11 @@
+import z from 'zod';
+export declare const ACCOUNT_DELETION_CONFIG_DEFAULT: {
+    readonly enabled: false;
+    readonly retention: "30d";
+};
+export declare const AccountDeletionConfigSchema: z.ZodDefault<z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodPipe<z.ZodUnion<readonly [z.ZodBoolean, z.ZodString]>, z.ZodTransform<boolean, string | boolean>>>;
+    retention: z.ZodDefault<z.ZodString>;
+}, z.z.core.$strict>>;
+export type AccountDeletionConfig = z.infer<typeof AccountDeletionConfigSchema>;
+//# sourceMappingURL=account-deletion.d.ts.map

package/dist/lib/config/account-deletion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-deletion.d.ts","sourceRoot":"","sources":["../../../src/lib/config/account-deletion.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAC;AAIpB,eAAO,MAAM,+BAA+B;;;CAGlC,CAAC;AAEX,eAAO,MAAM,2BAA2B;;;qBAaM,CAAC;AAE/C,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC"}

package/dist/lib/config/account-deletion.js

@@ -0,0 +1,16 @@
+import z from 'zod';
+import { zz } from "../../schemas/provider.js";
+import { DurationString } from "../duration.js";
+export const ACCOUNT_DELETION_CONFIG_DEFAULT = {
+    enabled: false,
+    retention: '30d',
+};
+export const AccountDeletionConfigSchema = z
+    .object({
+    enabled: zz.COERCE_BOOLEAN.default(ACCOUNT_DELETION_CONFIG_DEFAULT.enabled).describe('Whether users can request account deletion.'),
+    retention: DurationString.default(ACCOUNT_DELETION_CONFIG_DEFAULT.retention).describe('Grace period before permanently deleting a user account after request.'),
+})
+    .strict()
+    .default(ACCOUNT_DELETION_CONFIG_DEFAULT)
+    .describe('Account deletion configuration.');
+//# sourceMappingURL=account-deletion.js.map

package/dist/lib/config/account-deletion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-deletion.js","sourceRoot":"","sources":["../../../src/lib/config/account-deletion.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAC;AACpB,OAAO,EAAE,EAAE,EAAE,MAAM,2BAA2B,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,OAAO,EAAE,KAAK;IACd,SAAS,EAAE,KAAK;CACR,CAAC;AAEX,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAChC,+BAA+B,CAAC,OAAO,CACxC,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IACzD,SAAS,EAAE,cAAc,CAAC,OAAO,CAC/B,+BAA+B,CAAC,SAAS,CAC1C,CAAC,QAAQ,CACR,wEAAwE,CACzE;CACF,CAAC;KACD,MAAM,EAAE;KACR,OAAO,CAAC,+BAA+B,CAAC;KACxC,QAAQ,CAAC,iCAAiC,CAAC,CAAC"}

package/dist/lib/config/auth.d.ts

@@ -0,0 +1,109 @@
+import z from 'zod';
+/**
+ * Two-factor configuration for password authentication.
+ * Determines if users must enroll a second factor after registration.
+ */
+declare const PasswordTwoFactorConfigSchema: z.ZodDefault<z.ZodObject<{
+    enrollment_required: z.ZodDefault<z.ZodPipe<z.ZodUnion<readonly [z.ZodBoolean, z.ZodString]>, z.ZodTransform<boolean, string | boolean>>>;
+}, z.z.core.$strict>>;
+export type PasswordTwoFactorConfig = z.infer<typeof PasswordTwoFactorConfigSchema>;
+export declare const PASSWORD_POLICY_CONFIG_DEFAULT: {
+    min_length: 12;
+    max_length: 256;
+};
+export declare const PasswordPolicyConfigSchema: z.ZodDefault<z.ZodObject<{
+    min_length: z.ZodDefault<z.z.ZodCoercedNumber<unknown>>;
+    max_length: z.ZodDefault<z.z.ZodCoercedNumber<unknown>>;
+}, z.z.core.$strip>>;
+export type PasswordPolicyConfig = z.infer<typeof PasswordPolicyConfigSchema>;
+export declare const PASSWORD_AUTH_CONFIG_DEFAULT: {
+    enabled: boolean;
+    two_factor: {
+        enrollment_required: boolean;
+    };
+    totp: {
+        enabled: boolean;
+        issuer: string;
+    };
+    policy: {
+        min_length: 12;
+        max_length: 256;
+    };
+};
+/**
+ * Password authentication configuration (fixed type).
+ */
+export declare const PasswordAuthConfigSchema: z.ZodDefault<z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodPipe<z.ZodUnion<readonly [z.ZodBoolean, z.ZodString]>, z.ZodTransform<boolean, string | boolean>>>;
+    two_factor: z.ZodDefault<z.ZodObject<{
+        enrollment_required: z.ZodDefault<z.ZodPipe<z.ZodUnion<readonly [z.ZodBoolean, z.ZodString]>, z.ZodTransform<boolean, string | boolean>>>;
+    }, z.z.core.$strict>>;
+    totp: z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodPipe<z.ZodUnion<readonly [z.ZodBoolean, z.ZodString]>, z.ZodTransform<boolean, string | boolean>>>;
+        issuer: z.ZodDefault<z.ZodString>;
+    }, z.z.core.$strict>>;
+    policy: z.ZodDefault<z.ZodObject<{
+        min_length: z.ZodDefault<z.z.ZodCoercedNumber<unknown>>;
+        max_length: z.ZodDefault<z.z.ZodCoercedNumber<unknown>>;
+    }, z.z.core.$strip>>;
+}, z.z.core.$strict>>;
+export type PasswordAuthConfig = z.infer<typeof PasswordAuthConfigSchema>;
+export declare const PASSKEY_AUTH_CONFIG_DEFAULT: {
+    enabled: boolean;
+};
+/**
+ * Passkey (WebAuthn) authentication configuration (fixed type).
+ */
+export declare const PasskeyAuthConfigSchema: z.ZodDefault<z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodPipe<z.ZodUnion<readonly [z.ZodBoolean, z.ZodString]>, z.ZodTransform<boolean, string | boolean>>>;
+    rp_id: z.ZodOptional<z.ZodString>;
+    origins: z.ZodOptional<z.ZodArray<z.ZodURL>>;
+}, z.z.core.$strict>>;
+export type PasskeyAuthConfig = z.infer<typeof PasskeyAuthConfigSchema>;
+export declare const AUTH_CONFIG_DEFAULT: {
+    password: {
+        enabled: boolean;
+        two_factor: {
+            enrollment_required: boolean;
+        };
+        totp: {
+            enabled: boolean;
+            issuer: string;
+        };
+        policy: {
+            min_length: 12;
+            max_length: 256;
+        };
+    };
+    passkey: {
+        enabled: boolean;
+    };
+};
+/**
+ * Authentication methods configuration (fixed structure).
+ * Contains password and passkey authentication settings.
+ */
+export declare const AuthConfigSchema: z.ZodDefault<z.ZodObject<{
+    password: z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodPipe<z.ZodUnion<readonly [z.ZodBoolean, z.ZodString]>, z.ZodTransform<boolean, string | boolean>>>;
+        two_factor: z.ZodDefault<z.ZodObject<{
+            enrollment_required: z.ZodDefault<z.ZodPipe<z.ZodUnion<readonly [z.ZodBoolean, z.ZodString]>, z.ZodTransform<boolean, string | boolean>>>;
+        }, z.z.core.$strict>>;
+        totp: z.ZodDefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodPipe<z.ZodUnion<readonly [z.ZodBoolean, z.ZodString]>, z.ZodTransform<boolean, string | boolean>>>;
+            issuer: z.ZodDefault<z.ZodString>;
+        }, z.z.core.$strict>>;
+        policy: z.ZodDefault<z.ZodObject<{
+            min_length: z.ZodDefault<z.z.ZodCoercedNumber<unknown>>;
+            max_length: z.ZodDefault<z.z.ZodCoercedNumber<unknown>>;
+        }, z.z.core.$strip>>;
+    }, z.z.core.$strict>>;
+    passkey: z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodPipe<z.ZodUnion<readonly [z.ZodBoolean, z.ZodString]>, z.ZodTransform<boolean, string | boolean>>>;
+        rp_id: z.ZodOptional<z.ZodString>;
+        origins: z.ZodOptional<z.ZodArray<z.ZodURL>>;
+    }, z.z.core.$strict>>;
+}, z.z.core.$strict>>;
+export type AuthConfig = z.infer<typeof AuthConfigSchema>;
+export {};
+//# sourceMappingURL=auth.d.ts.map

package/dist/lib/config/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/lib/config/auth.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAC;AAWpB;;;GAGG;AACH,QAAA,MAAM,6BAA6B;;qBAa0B,CAAC;AAE9D,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,6BAA6B,CACrC,CAAC;AAEF,eAAO,MAAM,8BAA8B;;;CAG1C,CAAC;AAEF,eAAO,MAAM,0BAA0B;;;oBA0BnC,CAAC;AAEL,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAO9E,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;CAKxC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;qBA4BgB,CAAC;AAEtD,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAc1E,eAAO,MAAM,2BAA2B;;CAEvC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;qBA6B2B,CAAC;AAEhE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;CAG/B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;qBAwBuB,CAAC;AAErD,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}

package/dist/lib/config/auth.js

@@ -0,0 +1,155 @@
+import z from 'zod';
+import { zz } from "../../schemas/provider.js";
+import { PASSWORD_POLICY_MAX_LENGTH, PASSWORD_POLICY_MIN_LENGTH, } from "../password-policy.js";
+const PASSWORD_TWO_FACTOR_CONFIG_DEFAULT = {
+    enrollment_required: false,
+};
+/**
+ * Two-factor configuration for password authentication.
+ * Determines if users must enroll a second factor after registration.
+ */
+const PasswordTwoFactorConfigSchema = z
+    .object({
+    /**
+     * Whether password users must enroll a second factor.
+     */
+    enrollment_required: zz.COERCE_BOOLEAN.default(PASSWORD_TWO_FACTOR_CONFIG_DEFAULT.enrollment_required).describe('Whether password users must enroll a second factor after registration.'),
+})
+    .strict()
+    .default(PASSWORD_TWO_FACTOR_CONFIG_DEFAULT)
+    .describe('Two-factor authentication enrollment settings.');
+export const PASSWORD_POLICY_CONFIG_DEFAULT = {
+    min_length: PASSWORD_POLICY_MIN_LENGTH,
+    max_length: PASSWORD_POLICY_MAX_LENGTH,
+};
+export const PasswordPolicyConfigSchema = z
+    .object({
+    min_length: z.coerce
+        .number()
+        .int()
+        .min(1)
+        .max(PASSWORD_POLICY_MAX_LENGTH)
+        .default(PASSWORD_POLICY_CONFIG_DEFAULT.min_length)
+        .describe('Minimum password length.'),
+    max_length: z.coerce
+        .number()
+        .int()
+        .max(PASSWORD_POLICY_MAX_LENGTH)
+        .default(PASSWORD_POLICY_CONFIG_DEFAULT.max_length)
+        .describe('Maximum password length.'),
+})
+    .default(PASSWORD_POLICY_CONFIG_DEFAULT)
+    .describe('Password policy settings.')
+    .superRefine((value, ctx) => {
+    if (value.min_length > value.max_length) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['max_length'],
+            message: 'max_length must be greater than or equal to min_length',
+        });
+    }
+});
+const PASSWORD_AUTH_TOTP_CONFIG_DEFAULT = {
+    enabled: false,
+    issuer: 'Tinyrack',
+};
+export const PASSWORD_AUTH_CONFIG_DEFAULT = {
+    enabled: true,
+    two_factor: PASSWORD_TWO_FACTOR_CONFIG_DEFAULT,
+    totp: PASSWORD_AUTH_TOTP_CONFIG_DEFAULT,
+    policy: PASSWORD_POLICY_CONFIG_DEFAULT,
+};
+/**
+ * Password authentication configuration (fixed type).
+ */
+export const PasswordAuthConfigSchema = z
+    .object({
+    enabled: zz.COERCE_BOOLEAN.default(PASSWORD_AUTH_CONFIG_DEFAULT.enabled).describe('Whether password-based authentication is enabled.'),
+    /**
+     * Controls whether users must enroll a second factor after registration.
+     */
+    two_factor: PasswordTwoFactorConfigSchema,
+    totp: z
+        .object({
+        enabled: zz.COERCE_BOOLEAN.default(PASSWORD_AUTH_TOTP_CONFIG_DEFAULT.enabled).describe('Whether TOTP-based two-factor authentication is enabled.'),
+        issuer: z
+            .string()
+            .default(PASSWORD_AUTH_TOTP_CONFIG_DEFAULT.issuer)
+            .describe('Issuer name displayed in authenticator apps for TOTP enrollment.'),
+    })
+        .strict()
+        .default(PASSWORD_AUTH_TOTP_CONFIG_DEFAULT)
+        .describe('TOTP (Time-based One-Time Password) configuration.'),
+    policy: PasswordPolicyConfigSchema,
+})
+    .strict()
+    .default(PASSWORD_AUTH_CONFIG_DEFAULT)
+    .describe('Password authentication configuration.');
+/**
+ * Domain regex for WebAuthn rpId validation.
+ * Allows:
+ * - localhost (for development)
+ * - Valid domain names (e.g., example.com, auth.example.com)
+ * Rejects:
+ * - URLs with protocol (http://, https://)
+ * - Domains with port (:8080)
+ */
+const rpIdDomainRegex = /^(?!.*:\/\/)(?!.*:\d)(localhost|[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?(\.[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?)+)$/;
+export const PASSKEY_AUTH_CONFIG_DEFAULT = {
+    enabled: false,
+};
+/**
+ * Passkey (WebAuthn) authentication configuration (fixed type).
+ */
+export const PasskeyAuthConfigSchema = z
+    .object({
+    enabled: zz.COERCE_BOOLEAN.default(PASSKEY_AUTH_CONFIG_DEFAULT.enabled).describe('Whether passkey (WebAuthn) authentication is enabled.'),
+    /**
+     * WebAuthn Relying Party ID (domain only, no protocol or port).
+     * Must be current domain or a registrable parent domain.
+     * If not specified, extracted from server.public_origin hostname.
+     * Use parent domain to share passkeys across subdomains.
+     * Example: "example.com" or "localhost"
+     */
+    rp_id: z
+        .string()
+        .regex(rpIdDomainRegex, 'rp_id must be a valid domain without protocol or port ' +
+        '(e.g., "example.com" or "localhost")')
+        .optional(),
+    /**
+     * Allowed origins for WebAuthn verification.
+     * If not specified, uses server.public_origin.
+     * Example: ["https://auth.example.com", "https://app.example.com"]
+     */
+    origins: z.array(z.url()).optional(),
+})
+    .strict()
+    .default(PASSKEY_AUTH_CONFIG_DEFAULT)
+    .describe('Passkey (WebAuthn) authentication configuration.');
+export const AUTH_CONFIG_DEFAULT = {
+    password: PASSWORD_AUTH_CONFIG_DEFAULT,
+    passkey: PASSKEY_AUTH_CONFIG_DEFAULT,
+};
+/**
+ * Authentication methods configuration (fixed structure).
+ * Contains password and passkey authentication settings.
+ */
+export const AuthConfigSchema = z
+    .object({
+    password: PasswordAuthConfigSchema.describe('Password authentication settings.'),
+    passkey: PasskeyAuthConfigSchema.describe('Passkey (WebAuthn) authentication settings.'),
+})
+    .strict()
+    .superRefine((val, ctx) => {
+    if (val.password.two_factor.enrollment_required &&
+        !val.password.totp.enabled &&
+        !val.passkey.enabled) {
+        ctx.addIssue({
+            code: 'custom',
+            message: 'two_factor.enrollment_required is true but no 2FA method (totp or passkey) is enabled',
+        });
+    }
+})
+    .default(AUTH_CONFIG_DEFAULT)
+    .describe('Authentication methods configuration.');
+//# sourceMappingURL=auth.js.map

package/dist/lib/config/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/lib/config/auth.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAC;AACpB,OAAO,EAAE,EAAE,EAAE,MAAM,2BAA2B,CAAC;AAC/C,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAE/B,MAAM,kCAAkC,GAAG;IACzC,mBAAmB,EAAE,KAAK;CAC3B,CAAC;AAEF;;;GAGG;AACH,MAAM,6BAA6B,GAAG,CAAC;KACpC,MAAM,CAAC;IACN;;OAEG;IACH,mBAAmB,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAC5C,kCAAkC,CAAC,mBAAmB,CACvD,CAAC,QAAQ,CACR,wEAAwE,CACzE;CACF,CAAC;KACD,MAAM,EAAE;KACR,OAAO,CAAC,kCAAkC,CAAC;KAC3C,QAAQ,CAAC,gDAAgD,CAAC,CAAC;AAM9D,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,UAAU,EAAE,0BAA0B;IACtC,UAAU,EAAE,0BAA0B;CACvC,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,MAAM;SACjB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,0BAA0B,CAAC;SAC/B,OAAO,CAAC,8BAA8B,CAAC,UAAU,CAAC;SAClD,QAAQ,CAAC,0BAA0B,CAAC;IACvC,UAAU,EAAE,CAAC,CAAC,MAAM;SACjB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,0BAA0B,CAAC;SAC/B,OAAO,CAAC,8BAA8B,CAAC,UAAU,CAAC;SAClD,QAAQ,CAAC,0BAA0B,CAAC;CACxC,CAAC;KACD,OAAO,CAAC,8BAA8B,CAAC;KACvC,QAAQ,CAAC,2BAA2B,CAAC;KACrC,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,IAAI,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;QACxC,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,YAAY,CAAC;YACpB,OAAO,EAAE,wDAAwD;SAClE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAIL,MAAM,iCAAiC,GAAG;IACxC,OAAO,EAAE,KAAK;IACd,MAAM,EAAE,UAAU;CACnB,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,OAAO,EAAE,IAAI;IACb,UAAU,EAAE,kCAAkC;IAC9C,IAAI,EAAE,iCAAiC;IACvC,MAAM,EAAE,8BAA8B;CACvC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAChC,4BAA4B,CAAC,OAAO,CACrC,CAAC,QAAQ,CAAC,mDAAmD,CAAC;IAC/D;;OAEG;IACH,UAAU,EAAE,6BAA6B;IACzC,IAAI,EAAE,CAAC;SACJ,MAAM,CAAC;QACN,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAChC,iCAAiC,CAAC,OAAO,CAC1C,CAAC,QAAQ,CAAC,0DAA0D,CAAC;QACtE,MAAM,EAAE,CAAC;aACN,MAAM,EAAE;aACR,OAAO,CAAC,iCAAiC,CAAC,MAAM,CAAC;aACjD,QAAQ,CACP,kEAAkE,CACnE;KACJ,CAAC;SACD,MAAM,EAAE;SACR,OAAO,CAAC,iCAAiC,CAAC;SAC1C,QAAQ,CAAC,oDAAoD,CAAC;IACjE,MAAM,EAAE,0BAA0B;CACnC,CAAC;KACD,MAAM,EAAE;KACR,OAAO,CAAC,4BAA4B,CAAC;KACrC,QAAQ,CAAC,wCAAwC,CAAC,CAAC;AAItD;;;;;;;;GAQG;AACH,MAAM,eAAe,GACnB,qHAAqH,CAAC;AAExH,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,OAAO,EAAE,KAAK;CACf,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAChC,2BAA2B,CAAC,OAAO,CACpC,CAAC,QAAQ,CAAC,uDAAuD,CAAC;IACnE;;;;;;OAMG;IACH,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,KAAK,CACJ,eAAe,EACf,wDAAwD;QACtD,sCAAsC,CACzC;SACA,QAAQ,EAAE;IACb;;;;OAIG;IACH,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,MAAM,EAAE;KACR,OAAO,CAAC,2BAA2B,CAAC;KACpC,QAAQ,CAAC,kDAAkD,CAAC,CAAC;AAIhE,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,QAAQ,EAAE,4BAA4B;IACtC,OAAO,EAAE,2BAA2B;CACrC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,QAAQ,EAAE,wBAAwB,CAAC,QAAQ,CACzC,mCAAmC,CACpC;IACD,OAAO,EAAE,uBAAuB,CAAC,QAAQ,CACvC,6CAA6C,CAC9C;CACF,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IACxB,IACE,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,mBAAmB;QAC3C,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO;QAC1B,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EACpB,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,OAAO,EACL,uFAAuF;SAC1F,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC;KACD,OAAO,CAAC,mBAAmB,CAAC;KAC5B,QAAQ,CAAC,uCAAuC,CAAC,CAAC"}

package/dist/lib/config/branding.d.ts

@@ -0,0 +1,134 @@
+import z from 'zod';
+export declare const AppThemeSchema: z.ZodEnum<{
+    light: "light";
+    dark: "dark";
+    cupcake: "cupcake";
+    bumblebee: "bumblebee";
+    emerald: "emerald";
+    corporate: "corporate";
+    synthwave: "synthwave";
+    retro: "retro";
+    cyberpunk: "cyberpunk";
+    valentine: "valentine";
+    halloween: "halloween";
+    garden: "garden";
+    forest: "forest";
+    aqua: "aqua";
+    lofi: "lofi";
+    pastel: "pastel";
+    fantasy: "fantasy";
+    wireframe: "wireframe";
+    black: "black";
+    luxury: "luxury";
+    dracula: "dracula";
+    cmyk: "cmyk";
+    autumn: "autumn";
+    business: "business";
+    acid: "acid";
+    lemonade: "lemonade";
+    night: "night";
+    coffee: "coffee";
+    winter: "winter";
+    dim: "dim";
+    nord: "nord";
+    sunset: "sunset";
+    caramellatte: "caramellatte";
+    abyss: "abyss";
+    silk: "silk";
+}>;
+export type AppTheme = z.infer<typeof AppThemeSchema>;
+export declare const BRANDING_CONFIG_DEFAULT: {
+    readonly light_theme: "light";
+    readonly dark_theme: "dark";
+    readonly theme_mode: "system";
+    readonly background_url: "https://images.unsplash.com/photo-1508163223045-1880bc36e222?ixlib=rb-4.1.0&auto=format&fit=crop&q=80&w=2071";
+    readonly title: Record<string, string>;
+    readonly subtitle: Record<string, string>;
+};
+export declare const BrandingConfigSchema: z.ZodDefault<z.ZodObject<{
+    light_theme: z.ZodDefault<z.ZodEnum<{
+        light: "light";
+        dark: "dark";
+        cupcake: "cupcake";
+        bumblebee: "bumblebee";
+        emerald: "emerald";
+        corporate: "corporate";
+        synthwave: "synthwave";
+        retro: "retro";
+        cyberpunk: "cyberpunk";
+        valentine: "valentine";
+        halloween: "halloween";
+        garden: "garden";
+        forest: "forest";
+        aqua: "aqua";
+        lofi: "lofi";
+        pastel: "pastel";
+        fantasy: "fantasy";
+        wireframe: "wireframe";
+        black: "black";
+        luxury: "luxury";
+        dracula: "dracula";
+        cmyk: "cmyk";
+        autumn: "autumn";
+        business: "business";
+        acid: "acid";
+        lemonade: "lemonade";
+        night: "night";
+        coffee: "coffee";
+        winter: "winter";
+        dim: "dim";
+        nord: "nord";
+        sunset: "sunset";
+        caramellatte: "caramellatte";
+        abyss: "abyss";
+        silk: "silk";
+    }>>;
+    dark_theme: z.ZodDefault<z.ZodEnum<{
+        light: "light";
+        dark: "dark";
+        cupcake: "cupcake";
+        bumblebee: "bumblebee";
+        emerald: "emerald";
+        corporate: "corporate";
+        synthwave: "synthwave";
+        retro: "retro";
+        cyberpunk: "cyberpunk";
+        valentine: "valentine";
+        halloween: "halloween";
+        garden: "garden";
+        forest: "forest";
+        aqua: "aqua";
+        lofi: "lofi";
+        pastel: "pastel";
+        fantasy: "fantasy";
+        wireframe: "wireframe";
+        black: "black";
+        luxury: "luxury";
+        dracula: "dracula";
+        cmyk: "cmyk";
+        autumn: "autumn";
+        business: "business";
+        acid: "acid";
+        lemonade: "lemonade";
+        night: "night";
+        coffee: "coffee";
+        winter: "winter";
+        dim: "dim";
+        nord: "nord";
+        sunset: "sunset";
+        caramellatte: "caramellatte";
+        abyss: "abyss";
+        silk: "silk";
+    }>>;
+    theme_mode: z.ZodDefault<z.ZodEnum<{
+        light: "light";
+        dark: "dark";
+        system: "system";
+    }>>;
+    background_url: z.ZodDefault<z.ZodURL>;
+    icon_url: z.ZodOptional<z.ZodURL>;
+    title: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    subtitle: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.z.core.$strict>>;
+export type BrandingConfig = z.infer<typeof BrandingConfigSchema>;
+//# sourceMappingURL=branding.d.ts.map

package/dist/lib/config/branding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"branding.d.ts","sourceRoot":"","sources":["../../../src/lib/config/branding.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAC;AAEpB,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoCzB,CAAC;AAEH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,eAAO,MAAM,uBAAuB;;;;;oBAU7B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;uBAKtB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;CACnB,CAAC;AAEX,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBA+B8B,CAAC;AAEhE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}

package/dist/lib/config/branding.js

@@ -0,0 +1,83 @@
+import z from 'zod';
+export const AppThemeSchema = z.enum([
+    'light',
+    'dark',
+    'cupcake',
+    'bumblebee',
+    'emerald',
+    'corporate',
+    'synthwave',
+    'retro',
+    'cyberpunk',
+    'valentine',
+    'halloween',
+    'garden',
+    'forest',
+    'aqua',
+    'lofi',
+    'pastel',
+    'fantasy',
+    'wireframe',
+    'black',
+    'luxury',
+    'dracula',
+    'cmyk',
+    'autumn',
+    'business',
+    'acid',
+    'lemonade',
+    'night',
+    'coffee',
+    'winter',
+    'dim',
+    'nord',
+    'sunset',
+    'caramellatte',
+    'abyss',
+    'silk',
+]);
+export const BRANDING_CONFIG_DEFAULT = {
+    light_theme: 'light',
+    dark_theme: 'dark',
+    theme_mode: 'system',
+    background_url: 'https://images.unsplash.com/photo-1508163223045-1880bc36e222?ixlib=rb-4.1.0&auto=format&fit=crop&q=80&w=2071',
+    title: {
+        ko: 'Tinyauth',
+        en: 'Tinyauth',
+        ja: 'Tinyauth',
+    },
+    subtitle: {
+        ko: '가볍고 빠른 인증 솔루션',
+        en: 'Lightweight identity provider for your apps',
+        ja: '軽量でシンプルな認証ソリューション',
+    },
+};
+export const BrandingConfigSchema = z
+    .object({
+    light_theme: AppThemeSchema.default(BRANDING_CONFIG_DEFAULT.light_theme).describe('DaisyUI theme used in light mode.'),
+    dark_theme: AppThemeSchema.default(BRANDING_CONFIG_DEFAULT.dark_theme).describe('DaisyUI theme used in dark mode.'),
+    theme_mode: z
+        .enum(['light', 'dark', 'system'])
+        .default(BRANDING_CONFIG_DEFAULT.theme_mode)
+        .describe('Theme mode. "system" follows the user\'s OS preference.'),
+    background_url: z
+        .url()
+        .default(BRANDING_CONFIG_DEFAULT.background_url)
+        .describe('Background image URL for the login page.'),
+    icon_url: z
+        .url()
+        .optional()
+        .describe('Logo icon URL displayed on the login page.'),
+    title: z
+        .record(z.string(), z.string())
+        .default(BRANDING_CONFIG_DEFAULT.title)
+        .describe('Localized title text keyed by language code.'),
+    subtitle: z
+        .record(z.string(), z.string())
+        .default(BRANDING_CONFIG_DEFAULT.subtitle)
+        .describe('Localized subtitle text keyed by language code.'),
+})
+    .strict()
+    .default(BRANDING_CONFIG_DEFAULT)
+    .describe('Branding and visual customization configuration.');
+//# sourceMappingURL=branding.js.map

package/dist/lib/config/branding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"branding.js","sourceRoot":"","sources":["../../../src/lib/config/branding.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAC;AAEpB,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC;IACnC,OAAO;IACP,MAAM;IACN,SAAS;IACT,WAAW;IACX,SAAS;IACT,WAAW;IACX,WAAW;IACX,OAAO;IACP,WAAW;IACX,WAAW;IACX,WAAW;IACX,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,MAAM;IACN,QAAQ;IACR,SAAS;IACT,WAAW;IACX,OAAO;IACP,QAAQ;IACR,SAAS;IACT,MAAM;IACN,QAAQ;IACR,UAAU;IACV,MAAM;IACN,UAAU;IACV,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,KAAK;IACL,MAAM;IACN,QAAQ;IACR,cAAc;IACd,OAAO;IACP,MAAM;CACP,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,WAAW,EAAE,OAAO;IACpB,UAAU,EAAE,MAAM;IAClB,UAAU,EAAE,QAAQ;IACpB,cAAc,EACZ,8GAA8G;IAChH,KAAK,EAAE;QACL,EAAE,EAAE,UAAU;QACd,EAAE,EAAE,UAAU;QACd,EAAE,EAAE,UAAU;KACW;IAC3B,QAAQ,EAAE;QACR,EAAE,EAAE,eAAe;QACnB,EAAE,EAAE,6CAA6C;QACjD,EAAE,EAAE,mBAAmB;KACE;CACnB,CAAC;AAEX,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,WAAW,EAAE,cAAc,CAAC,OAAO,CACjC,uBAAuB,CAAC,WAAW,CACpC,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IAC/C,UAAU,EAAE,cAAc,CAAC,OAAO,CAChC,uBAAuB,CAAC,UAAU,CACnC,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAC9C,UAAU,EAAE,CAAC;SACV,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;SACjC,OAAO,CAAC,uBAAuB,CAAC,UAAU,CAAC;SAC3C,QAAQ,CAAC,yDAAyD,CAAC;IACtE,cAAc,EAAE,CAAC;SACd,GAAG,EAAE;SACL,OAAO,CAAC,uBAAuB,CAAC,cAAc,CAAC;SAC/C,QAAQ,CAAC,0CAA0C,CAAC;IACvD,QAAQ,EAAE,CAAC;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CAAC,4CAA4C,CAAC;IACzD,KAAK,EAAE,CAAC;SACL,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;SAC9B,OAAO,CAAC,uBAAuB,CAAC,KAAK,CAAC;SACtC,QAAQ,CAAC,8CAA8C,CAAC;IAC3D,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;SAC9B,OAAO,CAAC,uBAAuB,CAAC,QAAQ,CAAC;SACzC,QAAQ,CAAC,iDAAiD,CAAC;CAC/D,CAAC;KACD,MAAM,EAAE;KACR,OAAO,CAAC,uBAAuB,CAAC;KAChC,QAAQ,CAAC,kDAAkD,CAAC,CAAC"}

package/dist/lib/config/cleanup.d.ts

@@ -0,0 +1,59 @@
+import z from 'zod';
+/**
+ * Default cleanup configuration
+ */
+export declare const CLEANUP_CONFIG_DEFAULT: {
+    revoked_tokens: {
+        enabled: boolean;
+        retention: string;
+    };
+    oauth_codes: {
+        enabled: boolean;
+        consumed_retention: string;
+    };
+    email_verifications: {
+        enabled: boolean;
+        retention: string;
+    };
+    password_resets: {
+        enabled: boolean;
+        retention: string;
+    };
+    pending_oauth_registrations: {
+        enabled: boolean;
+        retention: string;
+    };
+};
+/**
+ * Cleanup configuration
+ *
+ * Controls the cleanup behavior for various entities.
+ * Run `tinyauth cleanup` to execute all enabled cleanup tasks.
+ *
+ * For Kubernetes deployments, create a CronJob that runs:
+ * `tinyauth cleanup` on a regular schedule (e.g., daily at 2 AM).
+ */
+export declare const CleanupConfigSchema: z.ZodDefault<z.ZodObject<{
+    revoked_tokens: z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodPipe<z.ZodUnion<readonly [z.ZodBoolean, z.ZodString]>, z.ZodPipe<z.ZodUnion<readonly [z.ZodBoolean, z.ZodString]>, z.ZodTransform<boolean, string | boolean>>>>;
+        retention: z.ZodDefault<z.ZodString>;
+    }, z.z.core.$strip>>;
+    oauth_codes: z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodPipe<z.ZodUnion<readonly [z.ZodBoolean, z.ZodString]>, z.ZodPipe<z.ZodUnion<readonly [z.ZodBoolean, z.ZodString]>, z.ZodTransform<boolean, string | boolean>>>>;
+        consumed_retention: z.ZodDefault<z.ZodString>;
+    }, z.z.core.$strip>>;
+    email_verifications: z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodPipe<z.ZodUnion<readonly [z.ZodBoolean, z.ZodString]>, z.ZodPipe<z.ZodUnion<readonly [z.ZodBoolean, z.ZodString]>, z.ZodTransform<boolean, string | boolean>>>>;
+        retention: z.ZodDefault<z.ZodString>;
+    }, z.z.core.$strip>>;
+    password_resets: z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodPipe<z.ZodUnion<readonly [z.ZodBoolean, z.ZodString]>, z.ZodPipe<z.ZodUnion<readonly [z.ZodBoolean, z.ZodString]>, z.ZodTransform<boolean, string | boolean>>>>;
+        retention: z.ZodDefault<z.ZodString>;
+    }, z.z.core.$strip>>;
+    pending_oauth_registrations: z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodPipe<z.ZodUnion<readonly [z.ZodBoolean, z.ZodString]>, z.ZodPipe<z.ZodUnion<readonly [z.ZodBoolean, z.ZodString]>, z.ZodTransform<boolean, string | boolean>>>>;
+        retention: z.ZodDefault<z.ZodString>;
+    }, z.z.core.$strip>>;
+}, z.z.core.$strict>>;
+export type CleanupConfig = z.infer<typeof CleanupConfigSchema>;
+//# sourceMappingURL=cleanup.d.ts.map

package/dist/lib/config/cleanup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanup.d.ts","sourceRoot":"","sources":["../../../src/lib/config/cleanup.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAC;AAuHpB;;GAEG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;CAOlC,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;qBAqB0B,CAAC;AAE3D,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}