@vibesdotdev/auth 0.0.0-stage → 1.0.0-rc.3

package/dist/features/email/schemas/forms.js

@@ -0,0 +1,62 @@
+import * as z from 'zod/v4';
+// Email verification request schema
+export const emailVerificationRequestSchema = z.object({
+    email: z.email('Valid email address is required'),
+    redirectUrl: z.url('Valid redirect URL is required').optional()
+});
+// Password reset request schema
+export const passwordResetRequestSchema = z.object({
+    email: z.email('Valid email address is required'),
+    redirectUrl: z.url('Valid redirect URL is required').optional()
+});
+// Email verification token validation schema
+export const emailVerificationTokenSchema = z.object({
+    token: z.string().min(1, 'Verification token is required'),
+    email: z.email('Valid email address is required').optional()
+});
+// Password reset token validation schema
+export const passwordResetTokenSchema = z.object({
+    token: z.string().min(1, 'Reset token is required'),
+    email: z.email('Valid email address is required').optional(),
+    newPassword: z.string().min(8, 'Password must be at least 8 characters').optional()
+});
+// Email template form schema (for admin/testing)
+export const emailTemplateFormSchema = z.object({
+    templateType: z.enum(['verification', 'password-reset', 'welcome', 'login-notification']),
+    recipient: z.email('Valid recipient email is required'),
+    context: z.object({
+        displayName: z.string().optional(),
+        url: z.url().optional(),
+        token: z.string().optional(),
+        expiresAt: z.iso.datetime().optional()
+    }),
+    subject: z.string().min(1, 'Subject is required'),
+    previewText: z.string().optional()
+});
+// Bulk email send schema (for admin operations)
+export const bulkEmailSendSchema = z.object({
+    recipients: z
+        .array(z.email())
+        .min(1, 'At least one recipient is required')
+        .max(100, 'Maximum 100 recipients allowed'),
+    templateType: z.enum(['verification', 'password-reset', 'welcome', 'login-notification']),
+    subject: z.string().min(1, 'Subject is required'),
+    context: z.record(z.string(), z.unknown()).optional(),
+    scheduleAt: z.iso.datetime().optional()
+});
+// Email preferences schema
+export const emailPreferencesSchema = z.object({
+    marketing: z.boolean().default(true),
+    security: z.boolean().default(true),
+    product: z.boolean().default(true),
+    system: z.boolean().default(true)
+});
+// Email bounce handling schema
+export const emailBounceSchema = z.object({
+    email: z.email(),
+    bounceType: z.enum(['hard', 'soft']),
+    reason: z.string(),
+    timestamp: z.iso.datetime(),
+    messageId: z.string().optional()
+});
+//# sourceMappingURL=forms.js.map

package/dist/features/email/schemas/forms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forms.js","sourceRoot":"","sources":["../../../../src/features/email/schemas/forms.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,oCAAoC;AACpC,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,iCAAiC,CAAC;IACjD,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC,QAAQ,EAAE;CAC/D,CAAC,CAAC;AAGH,gCAAgC;AAChC,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,iCAAiC,CAAC;IACjD,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC,QAAQ,EAAE;CAC/D,CAAC,CAAC;AAGH,6CAA6C;AAC7C,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,gCAAgC,CAAC;IAC1D,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC,QAAQ,EAAE;CAC5D,CAAC,CAAC;AAGH,yCAAyC;AACzC,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC;IACnD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC,QAAQ,EAAE;IAC5D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,wCAAwC,CAAC,CAAC,QAAQ,EAAE;CACnF,CAAC,CAAC;AAGH,iDAAiD;AACjD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,gBAAgB,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAC;IACzF,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,mCAAmC,CAAC;IACvD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACvB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KACtC,CAAC;IACF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,qBAAqB,CAAC;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAGH,gDAAgD;AAChD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,UAAU,EAAE,CAAC;SACX,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;SAChB,GAAG,CAAC,CAAC,EAAE,oCAAoC,CAAC;SAC5C,GAAG,CAAC,GAAG,EAAE,gCAAgC,CAAC;IAC5C,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,gBAAgB,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAC;IACzF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,qBAAqB,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrD,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAGH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACpC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACjC,CAAC,CAAC;AAGH,+BAA+B;AAC/B,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;IAChB,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC"}

package/dist/features/email/schemas/index.d.ts

@@ -0,0 +1,10 @@
+export { emailTemplateTypeSchema, emailDataSchema, emailRateLimitSchema, emailTemplateContextSchema, emailConfigSchema, emailSendResultSchema } from './common.ts';
+export type { EmailTemplateType, EmailData, EmailRateLimit, EmailSendResult } from './common.ts';
+export { emailTemplateDataSchema, emailQueueJobSchema, emailStatsSchema, emailProviderSchema, emailServiceConfigSchema } from './common.ts';
+export type { EmailTemplateData, EmailQueueJob, EmailStats, EmailProvider, EmailServiceConfig } from './common.ts';
+export { emailVerificationRequestSchema, passwordResetRequestSchema, emailVerificationTokenSchema, passwordResetTokenSchema, emailTemplateFormSchema, bulkEmailSendSchema, emailPreferencesSchema, emailBounceSchema } from './forms.ts';
+export type { EmailVerificationRequest, PasswordResetRequest, EmailVerificationToken, PasswordResetToken, EmailTemplateForm, BulkEmailSend, EmailPreferences, EmailBounce } from './forms.ts';
+export type { EmailData as EmailDataType } from './types.ts';
+export { TransportOptionsSchema, EmailProviderModeSchema, ResolvedSmtpConfigSchema, ResolvedTransportOptionsSchema } from './transport.ts';
+export type { TransportOptions, EmailProviderMode, ResolvedSmtpConfig, ResolvedTransportOptions } from './transport.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/features/email/schemas/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/features/email/schemas/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,uBAAuB,EACvB,eAAe,EACf,oBAAoB,EACpB,0BAA0B,EAC1B,iBAAiB,EACjB,qBAAqB,EACrB,MAAM,aAAa,CAAC;AACrB,YAAY,EACX,iBAAiB,EACjB,SAAS,EACT,cAAc,EACd,eAAe,EACf,MAAM,aAAa,CAAC;AACrB,OAAO,EACN,uBAAuB,EACvB,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,EACnB,wBAAwB,EACxB,MAAM,aAAa,CAAC;AACrB,YAAY,EACX,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,aAAa,EACb,kBAAkB,EAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EACN,8BAA8B,EAC9B,0BAA0B,EAC1B,4BAA4B,EAC5B,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,EACjB,MAAM,YAAY,CAAC;AACpB,YAAY,EACX,wBAAwB,EACxB,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,EAClB,iBAAiB,EACjB,aAAa,EACb,gBAAgB,EAChB,WAAW,EACX,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,EACN,sBAAsB,EACtB,uBAAuB,EACvB,wBAAwB,EACxB,8BAA8B,EAC9B,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACX,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,wBAAwB,EACxB,MAAM,gBAAgB,CAAC"}

package/dist/features/email/schemas/index.js

@@ -0,0 +1,5 @@
+export { emailTemplateTypeSchema, emailDataSchema, emailRateLimitSchema, emailTemplateContextSchema, emailConfigSchema, emailSendResultSchema } from "./common.js";
+export { emailTemplateDataSchema, emailQueueJobSchema, emailStatsSchema, emailProviderSchema, emailServiceConfigSchema } from "./common.js";
+export { emailVerificationRequestSchema, passwordResetRequestSchema, emailVerificationTokenSchema, passwordResetTokenSchema, emailTemplateFormSchema, bulkEmailSendSchema, emailPreferencesSchema, emailBounceSchema } from "./forms.js";
+export { TransportOptionsSchema, EmailProviderModeSchema, ResolvedSmtpConfigSchema, ResolvedTransportOptionsSchema } from "./transport.js";
+//# sourceMappingURL=index.js.map

package/dist/features/email/schemas/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/features/email/schemas/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,uBAAuB,EACvB,eAAe,EACf,oBAAoB,EACpB,0BAA0B,EAC1B,iBAAiB,EACjB,qBAAqB,EACrB,MAAM,aAAa,CAAC;AAOrB,OAAO,EACN,uBAAuB,EACvB,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,EACnB,wBAAwB,EACxB,MAAM,aAAa,CAAC;AAQrB,OAAO,EACN,8BAA8B,EAC9B,0BAA0B,EAC1B,4BAA4B,EAC5B,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,EACjB,MAAM,YAAY,CAAC;AAYpB,OAAO,EACN,sBAAsB,EACtB,uBAAuB,EACvB,wBAAwB,EACxB,8BAA8B,EAC9B,MAAM,gBAAgB,CAAC"}

package/dist/features/email/schemas/templates.d.ts

@@ -0,0 +1,40 @@
+import type { Snippet } from 'svelte';
+export interface BaseEmailProps {
+    previewText?: string;
+    children?: Snippet;
+}
+export interface VerificationEmailProps {
+    name?: string;
+    url?: string;
+    expiresInMinutes?: number;
+}
+export interface WelcomeEmailProps {
+    name?: string;
+    url?: string;
+}
+export interface PasswordResetEmailProps {
+    name: string;
+    url: string;
+    expiresInMinutes?: number;
+}
+export interface AccountApprovedEmailProps {
+    name?: string;
+    url?: string;
+}
+export interface ReferralQualifiedEmailProps {
+    name?: string;
+    referredName?: string | null;
+    referredEmail: string;
+    qualifiedCount?: number;
+    threshold?: number;
+    url?: string;
+}
+export interface OrganizationInvitationEmailProps {
+    name?: string;
+    url?: string;
+    organizationName?: string;
+    inviterName?: string;
+    role?: string;
+    expiresInMinutes?: number;
+}
+//# sourceMappingURL=templates.d.ts.map

package/dist/features/email/schemas/templates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../../../src/features/email/schemas/templates.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEtC,MAAM,WAAW,cAAc;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,uBAAuB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,yBAAyB;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,2BAA2B;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,gCAAgC;IAChD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC1B"}

package/dist/features/email/schemas/templates.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=templates.js.map

package/dist/features/email/schemas/templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../../../src/features/email/schemas/templates.ts"],"names":[],"mappings":""}

package/dist/features/email/schemas/transport.d.ts

@@ -0,0 +1,83 @@
+import * as z from 'zod/v4';
+export declare const TransportOptionsSchema: z.ZodObject<{
+    host: z.ZodString;
+    port: z.ZodNumber;
+    secure: z.ZodBoolean;
+    auth: z.ZodObject<{
+        user: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            source: z.ZodLiteral<"secret">;
+            key: z.ZodString;
+            store: z.ZodOptional<z.ZodString>;
+            operation: z.ZodOptional<z.ZodCustom<object, object>>;
+        }, z.core.$strict>], "source">;
+        pass: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            source: z.ZodLiteral<"secret">;
+            key: z.ZodString;
+            store: z.ZodOptional<z.ZodString>;
+            operation: z.ZodOptional<z.ZodCustom<object, object>>;
+        }, z.core.$strict>], "source">;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type TransportOptions = z.infer<typeof TransportOptionsSchema>;
+export declare const EmailProviderModeSchema: z.ZodEnum<{
+    console: "console";
+    smtp: "smtp";
+    "proton-smtp": "proton-smtp";
+    resend: "resend";
+    "cloudflare-email": "cloudflare-email";
+}>;
+export type EmailProviderMode = z.infer<typeof EmailProviderModeSchema>;
+export declare const ResolvedSmtpConfigSchema: z.ZodObject<{
+    host: z.ZodString;
+    port: z.ZodNumber;
+    secure: z.ZodBoolean;
+    user: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        source: z.ZodLiteral<"secret">;
+        key: z.ZodString;
+        store: z.ZodOptional<z.ZodString>;
+        operation: z.ZodOptional<z.ZodCustom<object, object>>;
+    }, z.core.$strict>], "source">;
+    pass: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        source: z.ZodLiteral<"secret">;
+        key: z.ZodString;
+        store: z.ZodOptional<z.ZodString>;
+        operation: z.ZodOptional<z.ZodCustom<object, object>>;
+    }, z.core.$strict>], "source">;
+    from: z.ZodString;
+}, z.core.$strip>;
+export type ResolvedSmtpConfig = z.infer<typeof ResolvedSmtpConfigSchema>;
+export declare const ResolvedTransportOptionsSchema: z.ZodUnion<readonly [z.ZodObject<{
+    provider: z.ZodEnum<{
+        console: "console";
+        resend: "resend";
+        "cloudflare-email": "cloudflare-email";
+    }>;
+    from: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    provider: z.ZodEnum<{
+        smtp: "smtp";
+        "proton-smtp": "proton-smtp";
+    }>;
+    from: z.ZodString;
+    options: z.ZodObject<{
+        host: z.ZodString;
+        port: z.ZodNumber;
+        secure: z.ZodBoolean;
+        auth: z.ZodObject<{
+            user: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                source: z.ZodLiteral<"secret">;
+                key: z.ZodString;
+                store: z.ZodOptional<z.ZodString>;
+                operation: z.ZodOptional<z.ZodCustom<object, object>>;
+            }, z.core.$strict>], "source">;
+            pass: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                source: z.ZodLiteral<"secret">;
+                key: z.ZodString;
+                store: z.ZodOptional<z.ZodString>;
+                operation: z.ZodOptional<z.ZodCustom<object, object>>;
+            }, z.core.$strict>], "source">;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+}, z.core.$strip>]>;
+export type ResolvedTransportOptions = z.infer<typeof ResolvedTransportOptionsSchema>;
+//# sourceMappingURL=transport.d.ts.map

package/dist/features/email/schemas/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../../../src/features/email/schemas/transport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;iBAQjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,uBAAuB;;;;;;EAMlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;iBAOnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAUzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC"}

package/dist/features/email/schemas/transport.js

@@ -0,0 +1,38 @@
+import * as z from 'zod/v4';
+import { CredentialReferenceSchema } from '@vibesdotdev/kernel/credentials';
+export const TransportOptionsSchema = z.object({
+    host: z.string(),
+    port: z.number().int(),
+    secure: z.boolean(),
+    auth: z.object({
+        user: CredentialReferenceSchema,
+        pass: CredentialReferenceSchema
+    })
+});
+export const EmailProviderModeSchema = z.enum([
+    'console',
+    'smtp',
+    'proton-smtp',
+    'resend',
+    'cloudflare-email'
+]);
+export const ResolvedSmtpConfigSchema = z.object({
+    host: z.string(),
+    port: z.number().int(),
+    secure: z.boolean(),
+    user: CredentialReferenceSchema,
+    pass: CredentialReferenceSchema,
+    from: z.string()
+});
+export const ResolvedTransportOptionsSchema = z.union([
+    z.object({
+        provider: z.enum(['console', 'resend', 'cloudflare-email']),
+        from: z.string().optional()
+    }),
+    z.object({
+        provider: z.enum(['smtp', 'proton-smtp']),
+        from: z.string(),
+        options: TransportOptionsSchema
+    })
+]);
+//# sourceMappingURL=transport.js.map

package/dist/features/email/schemas/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../../../src/features/email/schemas/transport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAE5E,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACtB,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,IAAI,EAAE,yBAAyB;QAC/B,IAAI,EAAE,yBAAyB;KAC/B,CAAC;CACF,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC7C,SAAS;IACT,MAAM;IACN,aAAa;IACb,QAAQ;IACR,kBAAkB;CAClB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACtB,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,IAAI,EAAE,yBAAyB;IAC/B,IAAI,EAAE,yBAAyB;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CAChB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC;IACrD,CAAC,CAAC,MAAM,CAAC;QACR,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QAC3D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC3B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACR,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACzC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,OAAO,EAAE,sBAAsB;KAC/B,CAAC;CACF,CAAC,CAAC"}

package/dist/features/email/schemas/types.d.ts

@@ -0,0 +1,2 @@
+export type { EmailTemplateType, EmailData, EmailRateLimit, EmailSendResult } from './common.ts';
+//# sourceMappingURL=types.d.ts.map

package/dist/features/email/schemas/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/features/email/schemas/types.ts"],"names":[],"mappings":"AACA,YAAY,EAAE,iBAAiB,EAAE,SAAS,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC"}

package/dist/features/email/schemas/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/features/email/schemas/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/features/email/schemas/types.ts"],"names":[],"mappings":""}

package/dist/features/email/send.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Auth-feature email send helper.
+ *
+ * Auth historically owned its own transport selection (`./provider.ts`,
+ * `./env.schema.ts`'s SMTP/Proton blocks) and the actual send classes lived
+ * in `apps/auth-web/src/lib/server/email/`. With the unified email
+ * substrate ([`email`](../../../../email/SPEC.md)) landing, all
+ * transport selection moves to the substrate: auth's send-functions
+ * pre-render their template (Svelte components stay in auth-web), then
+ * call `sendAuthEmail` which forwards through `getVibesEmailClient(runtime)`.
+ *
+ * The return shape matches auth's existing `EmailSendResult` so callers
+ * (and the response shape on auth-web routes that surface send-failures)
+ * don't need to change.
+ */
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+import type { EmailSendResult } from './schemas/common.ts';
+export interface SendAuthEmailInput {
+    to: string;
+    subject: string;
+    html?: string;
+    text?: string;
+    /**
+     * Template id surfaced into `email.send-log` so admin lookups can filter
+     * by auth-flow type (verification / password-reset / invitation, ...).
+     */
+    templateId?: string;
+    /**
+     * Optional idempotency key — recommended for verification + reset flows
+     * where the user might double-click "resend". The substrate's
+     * `email.send-log` unique index on `idempotencyKey` makes the second
+     * call a no-op.
+     */
+    idempotencyKey?: string;
+    /**
+     * Optional override for the `from` address. When absent, the routed
+     * email integration's `defaultFrom` config wins.
+     */
+    from?: string;
+}
+/**
+ * Send a pre-rendered email through the canonical email substrate.
+ *
+ * Auth's send-function wrappers (`sendEmailVerification`, …) render their
+ * Svelte template, then call this. Failures are translated into the
+ * substrate-agnostic `EmailSendResult` shape used across auth code — a
+ * throw never bubbles out of here.
+ */
+export declare function sendAuthEmail(input: SendAuthEmailInput, runtime: RuntimeRef): Promise<EmailSendResult>;
+//# sourceMappingURL=send.d.ts.map

package/dist/features/email/send.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"send.d.ts","sourceRoot":"","sources":["../../../src/features/email/send.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAExE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,MAAM,WAAW,kBAAkB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CAAC,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,eAAe,CAAC,CAwC5G"}

package/dist/features/email/send.js

@@ -0,0 +1,73 @@
+/**
+ * Auth-feature email send helper.
+ *
+ * Auth historically owned its own transport selection (`./provider.ts`,
+ * `./env.schema.ts`'s SMTP/Proton blocks) and the actual send classes lived
+ * in `apps/auth-web/src/lib/server/email/`. With the unified email
+ * substrate ([`email`](../../../../email/SPEC.md)) landing, all
+ * transport selection moves to the substrate: auth's send-functions
+ * pre-render their template (Svelte components stay in auth-web), then
+ * call `sendAuthEmail` which forwards through `getVibesEmailClient(runtime)`.
+ *
+ * The return shape matches auth's existing `EmailSendResult` so callers
+ * (and the response shape on auth-web routes that surface send-failures)
+ * don't need to change.
+ */
+import { getLogger } from '@vibesdotdev/logging';
+import { getVibesEmailClient } from '@vibesdotdev/email';
+import { valueFreeFailure } from '@vibesdotdev/kernel';
+import { attempt, failureLabel } from "../utils/attempt.js";
+/**
+ * Send a pre-rendered email through the canonical email substrate.
+ *
+ * Auth's send-function wrappers (`sendEmailVerification`, …) render their
+ * Svelte template, then call this. Failures are translated into the
+ * substrate-agnostic `EmailSendResult` shape used across auth code — a
+ * throw never bubbles out of here.
+ */
+export async function sendAuthEmail(input, runtime) {
+    const logger = getLogger('auth.email.send', runtime);
+    if (!input.html && !input.text) {
+        return {
+            success: false,
+            error: 'sendAuthEmail requires at least one of `html` or `text`.',
+            rateLimited: false
+        };
+    }
+    const sent = await attempt(async () => {
+        const client = await getVibesEmailClient(runtime);
+        const sendInput = {
+            to: input.to,
+            subject: input.subject,
+            tags: input.templateId ? ['auth', input.templateId] : ['auth']
+        };
+        if (input.html)
+            sendInput.html = input.html;
+        if (input.text)
+            sendInput.text = input.text;
+        if (input.from)
+            sendInput.from = input.from;
+        if (input.idempotencyKey)
+            sendInput.idempotencyKey = input.idempotencyKey;
+        return client.send(sendInput);
+    });
+    if (sent.ok) {
+        return {
+            success: true,
+            messageId: sent.value.messageId,
+            rateLimited: false
+        };
+    }
+    // The recipient address and the failure's own text stay out of the log and the result.
+    const rateLimited = valueFreeFailure(sent.failure).code === 'RATE_LIMITED';
+    logger.warn('Auth email send failed', {
+        templateId: input.templateId,
+        failure: failureLabel(sent.failure)
+    });
+    return {
+        success: false,
+        error: rateLimited ? 'Too many emails were sent. Try again shortly.' : 'The email could not be sent.',
+        rateLimited
+    };
+}
+//# sourceMappingURL=send.js.map

package/dist/features/email/send.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"send.js","sourceRoot":"","sources":["../../../src/features/email/send.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAuB,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAmB,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AA2B5D;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAyB,EAAE,OAAmB;IACjF,MAAM,MAAM,GAAG,SAAS,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAChC,OAAO;YACN,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,0DAA0D;YACjE,WAAW,EAAE,KAAK;SAClB,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,IAAI,EAAE;QACrC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,SAAS,GAAmB;YACjC,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;SAC9D,CAAC;QACF,IAAI,KAAK,CAAC,IAAI;YAAE,SAAS,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QAC5C,IAAI,KAAK,CAAC,IAAI;YAAE,SAAS,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QAC5C,IAAI,KAAK,CAAC,IAAI;YAAE,SAAS,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QAC5C,IAAI,KAAK,CAAC,cAAc;YAAE,SAAS,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;QAC1E,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,OAAO;YACN,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS;YAC/B,WAAW,EAAE,KAAK;SAClB,CAAC;IACH,CAAC;IACD,uFAAuF;IACvF,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC;IAC3E,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;QACrC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;KACnC,CAAC,CAAC;IACH,OAAO;QACN,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,+CAA+C,CAAC,CAAC,CAAC,8BAA8B;QACrG,WAAW;KACX,CAAC;AACH,CAAC"}

package/dist/features/oauth/schemas/common.d.ts

@@ -0,0 +1,75 @@
+import * as z from 'zod/v4';
+export declare const oauthProviderSchema: z.ZodEnum<{
+    github: "github";
+    google: "google";
+    discord: "discord";
+    microsoft: "microsoft";
+    twitter: "twitter";
+}>;
+export type OAuthProvider = z.infer<typeof oauthProviderSchema>;
+export declare const oauthAccountSchema: z.ZodObject<{
+    provider: z.ZodEnum<{
+        github: "github";
+        google: "google";
+        discord: "discord";
+        microsoft: "microsoft";
+        twitter: "twitter";
+    }>;
+    providerId: z.ZodString;
+    email: z.ZodOptional<z.ZodEmail>;
+    name: z.ZodOptional<z.ZodString>;
+    avatarUrl: z.ZodOptional<z.ZodURL>;
+    accessToken: z.ZodOptional<z.ZodString>;
+    refreshToken: z.ZodOptional<z.ZodString>;
+    expiresAt: z.ZodOptional<z.ZodDate>;
+}, z.core.$strip>;
+export type OAuthAccount = z.infer<typeof oauthAccountSchema>;
+export declare const oauthCallbackSchema: z.ZodObject<{
+    code: z.ZodString;
+    state: z.ZodOptional<z.ZodString>;
+    error: z.ZodOptional<z.ZodString>;
+    error_description: z.ZodOptional<z.ZodString>;
+    error_uri: z.ZodOptional<z.ZodURL>;
+}, z.core.$strip>;
+export type OAuthCallback = z.infer<typeof oauthCallbackSchema>;
+export declare const oauthStateSchema: z.ZodObject<{
+    redirect: z.ZodOptional<z.ZodString>;
+    params: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    cliState: z.ZodOptional<z.ZodString>;
+    cliCallback: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type OAuthState = z.infer<typeof oauthStateSchema>;
+export declare const oauthProviderConfigSchema: z.ZodObject<{
+    clientId: z.ZodString;
+    clientSecret: z.ZodString;
+    redirectUri: z.ZodOptional<z.ZodURL>;
+    scope: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export type OAuthProviderConfig = z.infer<typeof oauthProviderConfigSchema>;
+export declare const oauthSignInSchema: z.ZodObject<{
+    provider: z.ZodEnum<{
+        github: "github";
+        google: "google";
+        discord: "discord";
+        microsoft: "microsoft";
+        twitter: "twitter";
+    }>;
+    redirectTo: z.ZodOptional<z.ZodString>;
+    state: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type OAuthSignInRequest = z.infer<typeof oauthSignInSchema>;
+export declare const oauthProviderSettingsSchema: z.ZodObject<{
+    provider: z.ZodEnum<{
+        github: "github";
+        google: "google";
+        discord: "discord";
+        microsoft: "microsoft";
+        twitter: "twitter";
+    }>;
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    clientId: z.ZodString;
+    clientSecret: z.ZodString;
+    additionalScopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export type OAuthProviderSettings = z.infer<typeof oauthProviderSettingsSchema>;
+//# sourceMappingURL=common.d.ts.map

package/dist/features/oauth/schemas/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../../../src/features/oauth/schemas/common.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,eAAO,MAAM,mBAAmB;;;;;;EAAkE,CAAC;AACnG,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAGhE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;iBAS7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAG9D,eAAO,MAAM,mBAAmB;;;;;;iBAM9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAGhE,eAAO,MAAM,gBAAgB;;;;;iBAK3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAG1D,eAAO,MAAM,yBAAyB;;;;;iBAKpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAG5E,eAAO,MAAM,iBAAiB;;;;;;;;;;iBAI5B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAGnE,eAAO,MAAM,2BAA2B;;;;;;;;;;;;iBAMtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC"}

package/dist/features/oauth/schemas/common.js

@@ -0,0 +1,51 @@
+import * as z from 'zod/v4';
+// OAuth provider enum - PRIMARY SOURCE OF TRUTH
+export const oauthProviderSchema = z.enum(['github', 'google', 'discord', 'microsoft', 'twitter']);
+// OAuth account information schema - SHARED BASE SCHEMA
+export const oauthAccountSchema = z.object({
+    provider: oauthProviderSchema,
+    providerId: z.string().min(1, 'Provider ID is required'),
+    email: z.email().optional(),
+    name: z.string().optional(),
+    avatarUrl: z.url().optional(),
+    accessToken: z.string().optional(),
+    refreshToken: z.string().optional(),
+    expiresAt: z.date().optional()
+});
+// OAuth callback parameters schema - SHARED BASE SCHEMA
+export const oauthCallbackSchema = z.object({
+    code: z.string().min(1, 'Authorization code is required'),
+    state: z.string().optional(),
+    error: z.string().optional(),
+    error_description: z.string().optional(),
+    error_uri: z.url().optional()
+});
+// OAuth state parameters schema - SHARED BASE SCHEMA
+export const oauthStateSchema = z.object({
+    redirect: z.string().optional(),
+    params: z.record(z.string(), z.string()).optional(),
+    cliState: z.string().optional(),
+    cliCallback: z.string().optional()
+});
+// Provider configuration schema - SHARED BASE SCHEMA
+export const oauthProviderConfigSchema = z.object({
+    clientId: z.string().min(1, 'Client ID is required'),
+    clientSecret: z.string().min(1, 'Client Secret is required'),
+    redirectUri: z.url().optional(),
+    scope: z.array(z.string()).optional()
+});
+// OAuth sign-in request schema - SHARED BASE SCHEMA
+export const oauthSignInSchema = z.object({
+    provider: oauthProviderSchema,
+    redirectTo: z.string().optional(),
+    state: z.string().optional()
+});
+// OAuth provider settings schema - SHARED BASE SCHEMA
+export const oauthProviderSettingsSchema = z.object({
+    provider: oauthProviderSchema,
+    enabled: z.boolean().default(true),
+    clientId: z.string().min(1, 'Client ID is required'),
+    clientSecret: z.string().min(1, 'Client Secret is required'),
+    additionalScopes: z.array(z.string()).optional()
+});
+//# sourceMappingURL=common.js.map

package/dist/features/oauth/schemas/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../../../src/features/oauth/schemas/common.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,gDAAgD;AAChD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;AAGnG,wDAAwD;AACxD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,QAAQ,EAAE,mBAAmB;IAC7B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC;IACxD,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC7B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAGH,wDAAwD;AACxD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,gCAAgC,CAAC;IACzD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAGH,qDAAqD;AACrD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAGH,qDAAqD;AACrD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC;IACpD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,2BAA2B,CAAC;IAC5D,WAAW,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAGH,oDAAoD;AACpD,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,QAAQ,EAAE,mBAAmB;IAC7B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAGH,sDAAsD;AACtD,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,QAAQ,EAAE,mBAAmB;IAC7B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC;IACpD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,2BAA2B,CAAC;IAC5D,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAChD,CAAC,CAAC"}

package/dist/features/oauth/schemas/forms.d.ts

@@ -0,0 +1,29 @@
+import * as z from 'zod/v4';
+export declare const oauthSignInFormSchema: z.ZodObject<{
+    provider: z.ZodEnum<{
+        github: "github";
+        google: "google";
+        discord: "discord";
+        microsoft: "microsoft";
+        twitter: "twitter";
+    }>;
+    state: z.ZodOptional<z.ZodString>;
+    redirectTo: z.ZodUnion<[z.ZodOptional<z.ZodURL>, z.ZodLiteral<"">]>;
+}, z.core.$strip>;
+export type OAuthSignInForm = z.infer<typeof oauthSignInFormSchema>;
+export declare const oauthProviderSettingsFormSchema: z.ZodObject<{
+    provider: z.ZodEnum<{
+        github: "github";
+        google: "google";
+        discord: "discord";
+        microsoft: "microsoft";
+        twitter: "twitter";
+    }>;
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    clientId: z.ZodString;
+    clientSecret: z.ZodString;
+    additionalScopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export type OAuthProviderSettingsForm = z.infer<typeof oauthProviderSettingsFormSchema>;
+export { oauthProviderSchema, oauthSignInSchema, oauthProviderSettingsSchema } from './common.ts';
+//# sourceMappingURL=forms.d.ts.map

package/dist/features/oauth/schemas/forms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forms.d.ts","sourceRoot":"","sources":["../../../../src/features/oauth/schemas/forms.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAI5B,eAAO,MAAM,qBAAqB;;;;;;;;;;iBAGhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAGpE,eAAO,MAAM,+BAA+B;;;;;;;;;;;;iBAK1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAGxF,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC"}

package/dist/features/oauth/schemas/forms.js

@@ -0,0 +1,17 @@
+import * as z from 'zod/v4';
+import { oauthSignInSchema, oauthProviderSettingsSchema } from "./common.js";
+// Form validation schema for OAuth sign-in (extends common schema with form-specific validation)
+export const oauthSignInFormSchema = oauthSignInSchema.extend({
+    // Add form-specific validation if needed
+    redirectTo: z.url().optional().or(z.literal(''))
+});
+// Admin form schema for OAuth provider settings (extends common schema with form-specific validation)
+export const oauthProviderSettingsFormSchema = oauthProviderSettingsSchema.extend({
+    // Add form-specific validation rules
+    clientId: z.string().min(1, 'Client ID is required').max(255, 'Client ID too long'),
+    clientSecret: z.string().min(1, 'Client Secret is required').max(255, 'Client Secret too long'),
+    additionalScopes: z.array(z.string().min(1)).max(20, 'Too many scopes').optional()
+});
+// Re-export commonly used schemas for form components
+export { oauthProviderSchema, oauthSignInSchema, oauthProviderSettingsSchema } from "./common.js";
+//# sourceMappingURL=forms.js.map

package/dist/features/oauth/schemas/forms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forms.js","sourceRoot":"","sources":["../../../../src/features/oauth/schemas/forms.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAE7E,iGAAiG;AACjG,MAAM,CAAC,MAAM,qBAAqB,GAAG,iBAAiB,CAAC,MAAM,CAAC;IAC7D,yCAAyC;IACzC,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;CAChD,CAAC,CAAC;AAGH,sGAAsG;AACtG,MAAM,CAAC,MAAM,+BAA+B,GAAG,2BAA2B,CAAC,MAAM,CAAC;IACjF,qCAAqC;IACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,oBAAoB,CAAC;IACnF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,2BAA2B,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,wBAAwB,CAAC;IAC/F,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC,QAAQ,EAAE;CAClF,CAAC,CAAC;AAGH,sDAAsD;AACtD,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC"}

package/dist/features/oauth/schemas/index.d.ts

@@ -0,0 +1,7 @@
+export type { OAuthProvider, OAuthAccount, OAuthCallback, OAuthState, OAuthProviderConfig, OAuthSignInRequest, OAuthProviderSettings } from './types.ts';
+export { oauthProviderSchema, oauthAccountSchema, oauthCallbackSchema, oauthStateSchema, oauthProviderConfigSchema, oauthSignInSchema, oauthProviderSettingsSchema } from './common.ts';
+export { oauthSignInFormSchema, oauthProviderSettingsFormSchema } from './forms.ts';
+export type { OAuthSignInForm, OAuthProviderSettingsForm } from './forms.ts';
+export { oauthProviderDisplaySchema } from './ui.ts';
+export type { OAuthProviderDisplay, OAuthButtonState, OAuthFlowUIState } from './ui.ts';
+//# sourceMappingURL=index.d.ts.map