@vibesdotdev/auth 0.0.0-stage → 1.0.0-rc.3

package/dist/schemas/admin/responses.js

@@ -0,0 +1,189 @@
+/**
+ * What the auth admin HTTP API answers, as schemas. Each one is held to the
+ * hand-written type of the same name with `satisfies`, so a drift in either is
+ * a compile error, and `createAuthAdminClient` reads every answer through them.
+ */
+import * as z from 'zod/v4';
+import { authAdminUserStatusValues } from "../../server/schemas/admin-directory.js";
+const userStatus = z.enum(authAdminUserStatusValues);
+const nullableText = z.string().nullable();
+export const securityStatsSchema = z.object({
+    users: z.object({ total: z.number() }),
+    sessions: z.object({ active: z.number(), total: z.number() }),
+    apiKeys: z.object({ active: z.number(), total: z.number() })
+});
+const paginationSchema = z.object({
+    page: z.number(),
+    perPage: z.number(),
+    total: z.number(),
+    totalPages: z.number()
+});
+const sessionRecordSchema = z.object({
+    id: z.string(),
+    userId: z.string(),
+    userEmail: nullableText,
+    userName: nullableText,
+    ipAddress: nullableText,
+    userAgent: nullableText,
+    activeOrganizationId: nullableText,
+    activeTeamId: nullableText,
+    twoFactorVerified: z.boolean(),
+    status: z.enum(['active', 'expired']),
+    createdAt: z.string(),
+    updatedAt: z.string(),
+    expiresAt: z.string()
+});
+export const securitySessionsPageSchema = z.object({
+    sessions: z.array(sessionRecordSchema),
+    pagination: paginationSchema
+});
+const apiKeyRecordSchema = z.object({
+    id: z.string(),
+    userId: z.string(),
+    userEmail: nullableText,
+    userName: nullableText,
+    name: z.string(),
+    description: nullableText,
+    prefix: nullableText,
+    scopes: z.array(z.string()),
+    enabled: z.boolean(),
+    isRevoked: z.boolean(),
+    status: z.enum(['active', 'revoked', 'expired', 'disabled']),
+    requestCount: z.number(),
+    remaining: z.number().nullable(),
+    lastRequest: nullableText,
+    lastUsedAt: nullableText,
+    createdAt: z.string(),
+    updatedAt: z.string(),
+    expiresAt: nullableText
+});
+export const securityApiKeysPageSchema = z.object({
+    apiKeys: z.array(apiKeyRecordSchema),
+    pagination: paginationSchema
+});
+const cohortBucketSchema = z.object({
+    cohortKey: z.string(),
+    cohortStart: z.string(),
+    cohortEnd: z.string(),
+    signedUpCount: z.number(),
+    members: z.array(z.object({ id: z.string(), createdAt: z.string() }))
+});
+export const userCohortsPageSchema = z.object({
+    cohorts: z.array(cohortBucketSchema),
+    interval: z.enum(['week', 'month']),
+    rangeStart: nullableText,
+    rangeEnd: nullableText
+});
+const userListItemSchema = z.object({
+    id: z.string(),
+    // Wallet, phone and X identities can exist without an email.
+    email: nullableText,
+    name: nullableText,
+    image: nullableText,
+    isSuperuser: z.boolean(),
+    staff: z.boolean(),
+    status: userStatus,
+    queuePosition: z.number().nullable(),
+    queueJoinedAt: nullableText,
+    createdAt: z.string(),
+    updatedAt: z.string()
+});
+export const usersPageSchema = z.object({
+    users: z.array(userListItemSchema),
+    pagination: paginationSchema
+});
+const userRecordSchema = userListItemSchema.extend({
+    displayName: nullableText,
+    slug: nullableText,
+    emailVerified: z.boolean(),
+    twoFactorEnabled: z.boolean(),
+    phoneNumber: nullableText,
+    phoneNumberVerified: z.boolean(),
+    phoneNumberVerifiedAt: nullableText,
+    deletedAt: nullableText,
+    stripeCustomerId: nullableText,
+    statusChangedAt: nullableText,
+    statusChangedBy: nullableText,
+    statusReason: nullableText
+});
+export const userDetailSchema = z.object({
+    user: userRecordSchema,
+    profile: z.object({ userId: z.string(), bio: nullableText, updatedAt: z.string() }).nullable(),
+    referrals: z
+        .object({
+        code: nullableText,
+        totalReferrals: z.number(),
+        qualifiedReferrals: z.number(),
+        rewardedReferrals: z.number(),
+        pendingReferrals: z.number(),
+        inboundReferrerId: nullableText,
+        inboundReferrerEmail: nullableText,
+        inboundStatus: z.enum(['pending', 'qualified', 'rewarded', 'invalidated']).nullable()
+    })
+        .optional()
+});
+const operatorUserSchema = z.object({
+    id: z.string(),
+    email: z.string(),
+    name: nullableText,
+    isSuperuser: z.boolean(),
+    stripeCustomerId: nullableText,
+    createdAt: z.string(),
+    updatedAt: z.string()
+});
+export const createUserResultSchema = z.object({
+    success: z.boolean(),
+    status: z.enum(['created', 'existing']),
+    created: z.boolean(),
+    roleSynced: z.boolean(),
+    user: operatorUserSchema
+});
+export const successSchema = z.object({ success: z.boolean() });
+export const revokedSchema = z.object({ success: z.boolean(), revoked: z.number() });
+export const setStatusResultSchema = z.object({
+    success: z.boolean(),
+    status: z.enum(['updated', 'unchanged', 'missing']),
+    previousStatus: userStatus.nullable(),
+    nextStatus: userStatus
+});
+export const bulkSetStatusResultSchema = z.object({
+    success: z.boolean(),
+    nextStatus: userStatus,
+    summary: z.object({ updated: z.number(), unchanged: z.number(), missing: z.number(), errors: z.number() }),
+    results: z.array(z.object({
+        userId: z.string(),
+        status: z.enum(['updated', 'unchanged', 'missing', 'error']),
+        previousStatus: nullableText.optional(),
+        error: z.string().optional()
+    }))
+});
+const roleRecordSchema = z.object({
+    id: z.string(),
+    name: z.string(),
+    description: nullableText,
+    projectId: nullableText,
+    isSystemRole: z.boolean(),
+    createdAt: z.number(),
+    updatedAt: z.number()
+});
+const permissionRecordSchema = z.object({
+    id: z.string(),
+    name: z.string(),
+    resource: z.string(),
+    action: z.string(),
+    description: nullableText,
+    isSystemPermission: z.boolean(),
+    createdAt: z.number()
+});
+const rolePermissionRecordSchema = z.object({
+    id: z.string(),
+    roleId: z.string(),
+    permissionId: z.string(),
+    grantedAt: z.number()
+});
+export const rolesResponseSchema = z.object({ roles: z.array(roleRecordSchema) });
+export const permissionsResponseSchema = z.object({ permissions: z.array(permissionRecordSchema) });
+export const rolePermissionsResponseSchema = z.object({ rolePermissions: z.array(rolePermissionRecordSchema) });
+export const roleResponseSchema = z.object({ role: roleRecordSchema });
+export const permissionResponseSchema = z.object({ permission: permissionRecordSchema });
+//# sourceMappingURL=responses.js.map

package/dist/schemas/admin/responses.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"responses.js","sourceRoot":"","sources":["../../../src/schemas/admin/responses.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAuBpF,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;AACrD,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;AAE3C,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACtC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC7D,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CAC5D,CAAoC,CAAC;AAEtC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAkD,CAAC;AAEpD,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,SAAS,EAAE,YAAY;IACvB,QAAQ,EAAE,YAAY;IACtB,SAAS,EAAE,YAAY;IACvB,SAAS,EAAE,YAAY;IACvB,oBAAoB,EAAE,YAAY;IAClC,YAAY,EAAE,YAAY;IAC1B,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC9B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAqD,CAAC;AAEvD,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;IACtC,UAAU,EAAE,gBAAgB;CAC5B,CAAoD,CAAC;AAEtD,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,SAAS,EAAE,YAAY;IACvB,QAAQ,EAAE,YAAY;IACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,YAAY;IACzB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAC5D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,WAAW,EAAE,YAAY;IACzB,UAAU,EAAE,YAAY;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,YAAY;CACvB,CAAoD,CAAC;AAEtD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACpC,UAAU,EAAE,gBAAgB;CAC5B,CAAmD,CAAC;AAErD,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;CACrE,CAAgD,CAAC;AAElD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACpC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,UAAU,EAAE,YAAY;IACxB,QAAQ,EAAE,YAAY;CACtB,CAA+C,CAAC;AAEjD,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,6DAA6D;IAC7D,KAAK,EAAE,YAAY;IACnB,IAAI,EAAE,YAAY;IAClB,KAAK,EAAE,YAAY;IACnB,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IACxB,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;IAClB,MAAM,EAAE,UAAU;IAClB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,aAAa,EAAE,YAAY;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAA4C,CAAC;AAE9C,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;IAClC,UAAU,EAAE,gBAAgB;CAC5B,CAAyC,CAAC;AAE3C,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,MAAM,CAAC;IAClD,WAAW,EAAE,YAAY;IACzB,IAAI,EAAE,YAAY;IAClB,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE;IAC1B,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC7B,WAAW,EAAE,YAAY;IACzB,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE;IAChC,qBAAqB,EAAE,YAAY;IACnC,SAAS,EAAE,YAAY;IACvB,gBAAgB,EAAE,YAAY;IAC9B,eAAe,EAAE,YAAY;IAC7B,eAAe,EAAE,YAAY;IAC7B,YAAY,EAAE,YAAY;CAC1B,CAA0C,CAAC;AAE5C,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,gBAAgB;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9F,SAAS,EAAE,CAAC;SACV,MAAM,CAAC;QACP,IAAI,EAAE,YAAY;QAClB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;QAC1B,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE;QAC9B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE;QAC7B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;QAC5B,iBAAiB,EAAE,YAAY;QAC/B,oBAAoB,EAAE,YAAY;QAClC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE;KACrF,CAAC;SACD,QAAQ,EAAE;CACZ,CAA0C,CAAC;AAE5C,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,YAAY;IAClB,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IACxB,gBAAgB,EAAE,YAAY;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAkD,CAAC;AAEpD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;IACvB,IAAI,EAAE,kBAAkB;CACxB,CAAgD,CAAC;AAElD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAEhE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAErF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IACnD,cAAc,EAAE,UAAU,CAAC,QAAQ,EAAE;IACrC,UAAU,EAAE,UAAU;CACtB,CAA+C,CAAC;AAEjD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,UAAU,EAAE,UAAU;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC1G,OAAO,EAAE,CAAC,CAAC,KAAK,CACf,CAAC,CAAC,MAAM,CAAC;QACR,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAC5D,cAAc,EAAE,YAAY,CAAC,QAAQ,EAAE;QACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC5B,CAAC,CACF;CACD,CAAmD,CAAC;AAErD,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,YAAY;IACzB,SAAS,EAAE,YAAY;IACvB,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;IACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAiC,CAAC;AAEnC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,WAAW,EAAE,YAAY;IACzB,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAuC,CAAC;AAEzC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAA2C,CAAC;AAE7C,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;AAClF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;AACpG,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;AAChH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;AACvE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,sBAAsB,EAAE,CAAC,CAAC"}

package/dist/schemas/agents.d.ts

@@ -0,0 +1,337 @@
+/**
+ * Agent identity schemas — relocated from users.
+ *
+ * These schemas define agent authentication identity, scoped API keys,
+ * and agent profiles. The live storage and validation live in apps/auth-web;
+ * these schemas are the contract.
+ */
+import * as z from 'zod/v4';
+/**
+ * Agent identity kind values
+ */
+export declare const userKindValues: readonly ["human", "agent"];
+export declare const userKindSchema: z.ZodEnum<{
+    agent: "agent";
+    human: "human";
+}>;
+export type UserKind = z.infer<typeof userKindSchema>;
+/**
+ * Authentication scopes for agent API keys
+ */
+export declare const authScopeValues: readonly ["chat:send", "chat:read", "knowledge:read", "knowledge:write", "session:join", "session:create", "forum:post", "forum:react", "presence:update", "presentations:request", "presentations:review", "forge:read", "forge:write", "forge:review", "forge:merge"];
+export declare const authScopeSchema: z.ZodEnum<{
+    "chat:send": "chat:send";
+    "chat:read": "chat:read";
+    "knowledge:read": "knowledge:read";
+    "knowledge:write": "knowledge:write";
+    "session:join": "session:join";
+    "session:create": "session:create";
+    "forum:post": "forum:post";
+    "forum:react": "forum:react";
+    "presence:update": "presence:update";
+    "presentations:request": "presentations:request";
+    "presentations:review": "presentations:review";
+    "forge:read": "forge:read";
+    "forge:write": "forge:write";
+    "forge:review": "forge:review";
+    "forge:merge": "forge:merge";
+}>;
+export type AuthScope = z.infer<typeof authScopeSchema>;
+/**
+ * Agent profile — agent-specific fields attached to a user record
+ */
+export declare const agentProfileSchema: z.ZodObject<{
+    userId: z.ZodString;
+    modelProvider: z.ZodString;
+    modelId: z.ZodString;
+    systemPrompt: z.ZodOptional<z.ZodString>;
+    capabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    maxTokensPerRequest: z.ZodDefault<z.ZodNumber>;
+    ownerUserId: z.ZodString;
+    createdAt: z.ZodCoercedDate<unknown>;
+    updatedAt: z.ZodCoercedDate<unknown>;
+}, z.core.$strip>;
+export type AgentProfile = z.infer<typeof agentProfileSchema>;
+/**
+ * Agent identity with resolved profile
+ */
+export declare const agentIdentitySchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    kind: z.ZodLiteral<"agent">;
+    modelProvider: z.ZodString;
+    modelId: z.ZodString;
+    capabilities: z.ZodArray<z.ZodString>;
+    ownerUserId: z.ZodString;
+    status: z.ZodEnum<{
+        active: "active";
+        suspended: "suspended";
+        dormant: "dormant";
+    }>;
+}, z.core.$strip>;
+export type AgentIdentity = z.infer<typeof agentIdentitySchema>;
+/**
+ * Scoped API key for agent authentication
+ */
+export declare const scopedApiKeySchema: z.ZodObject<{
+    id: z.ZodString;
+    keyHash: z.ZodString;
+    userId: z.ZodString;
+    scopes: z.ZodArray<z.ZodEnum<{
+        "chat:send": "chat:send";
+        "chat:read": "chat:read";
+        "knowledge:read": "knowledge:read";
+        "knowledge:write": "knowledge:write";
+        "session:join": "session:join";
+        "session:create": "session:create";
+        "forum:post": "forum:post";
+        "forum:react": "forum:react";
+        "presence:update": "presence:update";
+        "presentations:request": "presentations:request";
+        "presentations:review": "presentations:review";
+        "forge:read": "forge:read";
+        "forge:write": "forge:write";
+        "forge:review": "forge:review";
+        "forge:merge": "forge:merge";
+    }>>;
+    projectId: z.ZodOptional<z.ZodString>;
+    expiresAt: z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>;
+    ipWhitelist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    dailyQuota: z.ZodOptional<z.ZodNumber>;
+    usageToday: z.ZodDefault<z.ZodNumber>;
+    lastUsedAt: z.ZodOptional<z.ZodCoercedDate<unknown>>;
+    createdAt: z.ZodCoercedDate<unknown>;
+    revokedAt: z.ZodNullable<z.ZodOptional<z.ZodCoercedDate<unknown>>>;
+}, z.core.$strip>;
+export type ScopedApiKey = z.infer<typeof scopedApiKeySchema>;
+/**
+ * Create agent key input
+ */
+export declare const createAgentKeyInputSchema: z.ZodObject<{
+    agentUserId: z.ZodString;
+    scopes: z.ZodArray<z.ZodEnum<{
+        "chat:send": "chat:send";
+        "chat:read": "chat:read";
+        "knowledge:read": "knowledge:read";
+        "knowledge:write": "knowledge:write";
+        "session:join": "session:join";
+        "session:create": "session:create";
+        "forum:post": "forum:post";
+        "forum:react": "forum:react";
+        "presence:update": "presence:update";
+        "presentations:request": "presentations:request";
+        "presentations:review": "presentations:review";
+        "forge:read": "forge:read";
+        "forge:write": "forge:write";
+        "forge:review": "forge:review";
+        "forge:merge": "forge:merge";
+    }>>;
+    projectId: z.ZodOptional<z.ZodString>;
+    expiresAt: z.ZodOptional<z.ZodCoercedDate<unknown>>;
+    ipWhitelist: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    dailyQuota: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export type CreateAgentKeyInput = z.infer<typeof createAgentKeyInputSchema>;
+/**
+ * Human-owner request for creating a durable agent identity.
+ *
+ * Credential issuance is intentionally separate so an identity can receive
+ * multiple independently scoped, independently revocable keys.
+ */
+export declare const createAgentIdentityInputSchema: z.ZodObject<{
+    name: z.ZodString;
+    modelProvider: z.ZodString;
+    modelId: z.ZodString;
+    systemPrompt: z.ZodOptional<z.ZodString>;
+    capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    maxTokensPerRequest: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+export type CreateAgentIdentityInput = z.infer<typeof createAgentIdentityInputSchema>;
+/** Metadata-only credential shape. Hashes and plaintext keys never belong here. */
+export declare const agentCredentialMetadataSchema: z.ZodObject<{
+    id: z.ZodString;
+    scopes: z.ZodArray<z.ZodEnum<{
+        "chat:send": "chat:send";
+        "chat:read": "chat:read";
+        "knowledge:read": "knowledge:read";
+        "knowledge:write": "knowledge:write";
+        "session:join": "session:join";
+        "session:create": "session:create";
+        "forum:post": "forum:post";
+        "forum:react": "forum:react";
+        "presence:update": "presence:update";
+        "presentations:request": "presentations:request";
+        "presentations:review": "presentations:review";
+        "forge:read": "forge:read";
+        "forge:write": "forge:write";
+        "forge:review": "forge:review";
+        "forge:merge": "forge:merge";
+    }>>;
+    projectId: z.ZodNullable<z.ZodString>;
+    expiresAt: z.ZodNullable<z.ZodCoercedDate<unknown>>;
+    usageToday: z.ZodNumber;
+    lastUsedAt: z.ZodNullable<z.ZodCoercedDate<unknown>>;
+    createdAt: z.ZodCoercedDate<unknown>;
+}, z.core.$strict>;
+export type AgentCredentialMetadata = z.infer<typeof agentCredentialMetadataSchema>;
+export declare const ownedAgentCredentialSummarySchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    modelProvider: z.ZodString;
+    modelId: z.ZodString;
+    capabilities: z.ZodArray<z.ZodString>;
+    credentials: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        scopes: z.ZodArray<z.ZodEnum<{
+            "chat:send": "chat:send";
+            "chat:read": "chat:read";
+            "knowledge:read": "knowledge:read";
+            "knowledge:write": "knowledge:write";
+            "session:join": "session:join";
+            "session:create": "session:create";
+            "forum:post": "forum:post";
+            "forum:react": "forum:react";
+            "presence:update": "presence:update";
+            "presentations:request": "presentations:request";
+            "presentations:review": "presentations:review";
+            "forge:read": "forge:read";
+            "forge:write": "forge:write";
+            "forge:review": "forge:review";
+            "forge:merge": "forge:merge";
+        }>>;
+        projectId: z.ZodNullable<z.ZodString>;
+        expiresAt: z.ZodNullable<z.ZodCoercedDate<unknown>>;
+        usageToday: z.ZodNumber;
+        lastUsedAt: z.ZodNullable<z.ZodCoercedDate<unknown>>;
+        createdAt: z.ZodCoercedDate<unknown>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type OwnedAgentCredentialSummary = z.infer<typeof ownedAgentCredentialSummarySchema>;
+export declare const ownedAgentCredentialsResponseSchema: z.ZodObject<{
+    agents: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        modelProvider: z.ZodString;
+        modelId: z.ZodString;
+        capabilities: z.ZodArray<z.ZodString>;
+        credentials: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            scopes: z.ZodArray<z.ZodEnum<{
+                "chat:send": "chat:send";
+                "chat:read": "chat:read";
+                "knowledge:read": "knowledge:read";
+                "knowledge:write": "knowledge:write";
+                "session:join": "session:join";
+                "session:create": "session:create";
+                "forum:post": "forum:post";
+                "forum:react": "forum:react";
+                "presence:update": "presence:update";
+                "presentations:request": "presentations:request";
+                "presentations:review": "presentations:review";
+                "forge:read": "forge:read";
+                "forge:write": "forge:write";
+                "forge:review": "forge:review";
+                "forge:merge": "forge:merge";
+            }>>;
+            projectId: z.ZodNullable<z.ZodString>;
+            expiresAt: z.ZodNullable<z.ZodCoercedDate<unknown>>;
+            usageToday: z.ZodNumber;
+            lastUsedAt: z.ZodNullable<z.ZodCoercedDate<unknown>>;
+            createdAt: z.ZodCoercedDate<unknown>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type OwnedAgentCredentialsResponse = z.infer<typeof ownedAgentCredentialsResponseSchema>;
+/**
+ * Server-verified agent principal carried by an agent credential.
+ *
+ * `agentId` is the authenticated machine identity. `owner` is the personal
+ * tenancy boundary that identity may act inside. Organization-owned agent
+ * credentials are intentionally absent until Auth persists and verifies a
+ * dedicated organization grant.
+ */
+export declare const agentPrincipalOwnerSchema: z.ZodObject<{
+    type: z.ZodLiteral<"user">;
+    id: z.ZodString;
+}, z.core.$strict>;
+export declare const authenticatedAgentPrincipalSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"agent">;
+    agentId: z.ZodString;
+    owner: z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        id: z.ZodString;
+    }, z.core.$strict>;
+    keyId: z.ZodString;
+    scopes: z.ZodArray<z.ZodEnum<{
+        "chat:send": "chat:send";
+        "chat:read": "chat:read";
+        "knowledge:read": "knowledge:read";
+        "knowledge:write": "knowledge:write";
+        "session:join": "session:join";
+        "session:create": "session:create";
+        "forum:post": "forum:post";
+        "forum:react": "forum:react";
+        "presence:update": "presence:update";
+        "presentations:request": "presentations:request";
+        "presentations:review": "presentations:review";
+        "forge:read": "forge:read";
+        "forge:write": "forge:write";
+        "forge:review": "forge:review";
+        "forge:merge": "forge:merge";
+    }>>;
+}, z.core.$strict>;
+export declare const issueAgentCredentialInputSchema: z.ZodObject<{
+    agentId: z.ZodString;
+    scopes: z.ZodArray<z.ZodEnum<{
+        "chat:send": "chat:send";
+        "chat:read": "chat:read";
+        "knowledge:read": "knowledge:read";
+        "knowledge:write": "knowledge:write";
+        "session:join": "session:join";
+        "session:create": "session:create";
+        "forum:post": "forum:post";
+        "forum:react": "forum:react";
+        "presence:update": "presence:update";
+        "presentations:request": "presentations:request";
+        "presentations:review": "presentations:review";
+        "forge:read": "forge:read";
+        "forge:write": "forge:write";
+        "forge:review": "forge:review";
+        "forge:merge": "forge:merge";
+    }>>;
+    expiresAt: z.ZodOptional<z.ZodCoercedDate<unknown>>;
+}, z.core.$strict>;
+export declare const issuedAgentCredentialSchema: z.ZodObject<{
+    key: z.ZodString;
+    principal: z.ZodObject<{
+        kind: z.ZodLiteral<"agent">;
+        agentId: z.ZodString;
+        owner: z.ZodObject<{
+            type: z.ZodLiteral<"user">;
+            id: z.ZodString;
+        }, z.core.$strict>;
+        keyId: z.ZodString;
+        scopes: z.ZodArray<z.ZodEnum<{
+            "chat:send": "chat:send";
+            "chat:read": "chat:read";
+            "knowledge:read": "knowledge:read";
+            "knowledge:write": "knowledge:write";
+            "session:join": "session:join";
+            "session:create": "session:create";
+            "forum:post": "forum:post";
+            "forum:react": "forum:react";
+            "presence:update": "presence:update";
+            "presentations:request": "presentations:request";
+            "presentations:review": "presentations:review";
+            "forge:read": "forge:read";
+            "forge:write": "forge:write";
+            "forge:review": "forge:review";
+            "forge:merge": "forge:merge";
+        }>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type AgentPrincipalOwner = z.infer<typeof agentPrincipalOwnerSchema>;
+export type AuthenticatedAgentPrincipal = z.infer<typeof authenticatedAgentPrincipalSchema>;
+export type IssueAgentCredentialInput = z.infer<typeof issueAgentCredentialInputSchema>;
+export type IssuedAgentCredential = z.infer<typeof issuedAgentCredentialSchema>;
+//# sourceMappingURL=agents.d.ts.map

package/dist/schemas/agents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../src/schemas/agents.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B;;GAEG;AACH,eAAO,MAAM,cAAc,6BAA8B,CAAC;AAC1D,eAAO,MAAM,cAAc;;;EAAyB,CAAC;AACrD,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD;;GAEG;AACH,eAAO,MAAM,eAAe,yQAgBlB,CAAC;AAEX,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;EAA0B,CAAC;AACvD,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;iBAU7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;iBAS9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAa7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;GAEG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;iBAOpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B;;;;;;;kBASjC,CAAC;AACX,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,mFAAmF;AACnF,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;kBAUhC,CAAC;AACX,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBASpC,CAAC;AACX,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE5F,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAEtC,CAAC;AACX,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEhG;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB;;;kBAE5B,CAAC;AAEX,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;kBAQpC,CAAC;AAEX,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;kBAMlC,CAAC;AAEX,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAK9B,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAC5F,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AACxF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC"}