@vibesdotdev/auth 0.0.0-stage → 1.0.0-rc.3

package/dist/schemas/agents.js

@@ -0,0 +1,164 @@
+/**
+ * Agent identity schemas — relocated from users.
+ *
+ * These schemas define agent authentication identity, scoped API keys,
+ * and agent profiles. The live storage and validation live in apps/auth-web;
+ * these schemas are the contract.
+ */
+import * as z from 'zod/v4';
+/**
+ * Agent identity kind values
+ */
+export const userKindValues = ['human', 'agent'];
+export const userKindSchema = z.enum(userKindValues);
+/**
+ * Authentication scopes for agent API keys
+ */
+export const authScopeValues = [
+    'chat:send',
+    'chat:read',
+    'knowledge:read',
+    'knowledge:write',
+    'session:join',
+    'session:create',
+    'forum:post',
+    'forum:react',
+    'presence:update',
+    'presentations:request',
+    'presentations:review',
+    'forge:read',
+    'forge:write',
+    'forge:review',
+    'forge:merge'
+];
+export const authScopeSchema = z.enum(authScopeValues);
+/**
+ * Agent profile — agent-specific fields attached to a user record
+ */
+export const agentProfileSchema = z.object({
+    userId: z.string(),
+    modelProvider: z.string(),
+    modelId: z.string(),
+    systemPrompt: z.string().optional(),
+    capabilities: z.array(z.string()).default([]),
+    maxTokensPerRequest: z.number().int().positive().default(4096),
+    ownerUserId: z.string(),
+    createdAt: z.coerce.date(),
+    updatedAt: z.coerce.date()
+});
+/**
+ * Agent identity with resolved profile
+ */
+export const agentIdentitySchema = z.object({
+    id: z.string(),
+    name: z.string(),
+    kind: z.literal('agent'),
+    modelProvider: z.string(),
+    modelId: z.string(),
+    capabilities: z.array(z.string()),
+    ownerUserId: z.string(),
+    status: z.enum(['active', 'suspended', 'dormant'])
+});
+/**
+ * Scoped API key for agent authentication
+ */
+export const scopedApiKeySchema = z.object({
+    id: z.string(),
+    keyHash: z.string(),
+    userId: z.string(),
+    scopes: z.array(authScopeSchema),
+    projectId: z.string().optional(),
+    expiresAt: z.coerce.date().nullable().optional(),
+    ipWhitelist: z.array(z.string()).optional(),
+    dailyQuota: z.number().int().positive().optional(),
+    usageToday: z.number().int().nonnegative().default(0),
+    lastUsedAt: z.coerce.date().optional(),
+    createdAt: z.coerce.date(),
+    revokedAt: z.coerce.date().optional().nullable()
+});
+/**
+ * Create agent key input
+ */
+export const createAgentKeyInputSchema = z.object({
+    agentUserId: z.string(),
+    scopes: z.array(authScopeSchema).min(1),
+    projectId: z.string().optional(),
+    expiresAt: z.coerce.date().optional(),
+    ipWhitelist: z.array(z.string()).optional(),
+    dailyQuota: z.number().int().positive().optional()
+});
+/**
+ * Human-owner request for creating a durable agent identity.
+ *
+ * Credential issuance is intentionally separate so an identity can receive
+ * multiple independently scoped, independently revocable keys.
+ */
+export const createAgentIdentityInputSchema = z
+    .object({
+    name: z.string().trim().min(1).max(100),
+    modelProvider: z.string().trim().min(1).max(100),
+    modelId: z.string().trim().min(1).max(200),
+    systemPrompt: z.string().max(20_000).optional(),
+    capabilities: z.array(z.string().trim().min(1).max(100)).max(50).optional(),
+    maxTokensPerRequest: z.number().int().positive().max(1_000_000).optional()
+})
+    .strict();
+/** Metadata-only credential shape. Hashes and plaintext keys never belong here. */
+export const agentCredentialMetadataSchema = z
+    .object({
+    id: z.string().min(1),
+    scopes: z.array(authScopeSchema),
+    projectId: z.string().nullable(),
+    expiresAt: z.coerce.date().nullable(),
+    usageToday: z.number().int().nonnegative(),
+    lastUsedAt: z.coerce.date().nullable(),
+    createdAt: z.coerce.date()
+})
+    .strict();
+export const ownedAgentCredentialSummarySchema = z
+    .object({
+    id: z.string().min(1),
+    name: z.string().min(1),
+    modelProvider: z.string().min(1),
+    modelId: z.string().min(1),
+    capabilities: z.array(z.string()),
+    credentials: z.array(agentCredentialMetadataSchema)
+})
+    .strict();
+export const ownedAgentCredentialsResponseSchema = z
+    .object({ agents: z.array(ownedAgentCredentialSummarySchema) })
+    .strict();
+/**
+ * Server-verified agent principal carried by an agent credential.
+ *
+ * `agentId` is the authenticated machine identity. `owner` is the personal
+ * tenancy boundary that identity may act inside. Organization-owned agent
+ * credentials are intentionally absent until Auth persists and verifies a
+ * dedicated organization grant.
+ */
+export const agentPrincipalOwnerSchema = z
+    .object({ type: z.literal('user'), id: z.string().min(1) })
+    .strict();
+export const authenticatedAgentPrincipalSchema = z
+    .object({
+    kind: z.literal('agent'),
+    agentId: z.string().min(1),
+    owner: agentPrincipalOwnerSchema,
+    keyId: z.string().min(1),
+    scopes: z.array(authScopeSchema)
+})
+    .strict();
+export const issueAgentCredentialInputSchema = z
+    .object({
+    agentId: z.string().min(1),
+    scopes: z.array(authScopeSchema).min(1),
+    expiresAt: z.coerce.date().optional()
+})
+    .strict();
+export const issuedAgentCredentialSchema = z
+    .object({
+    key: z.string().min(1),
+    principal: authenticatedAgentPrincipalSchema
+})
+    .strict();
+//# sourceMappingURL=agents.js.map

package/dist/schemas/agents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.js","sourceRoot":"","sources":["../../src/schemas/agents.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,OAAO,CAAU,CAAC;AAC1D,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AAGrD;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC9B,WAAW;IACX,WAAW;IACX,gBAAgB;IAChB,iBAAiB;IACjB,cAAc;IACd,gBAAgB;IAChB,YAAY;IACZ,aAAa;IACb,iBAAiB;IACjB,uBAAuB;IACvB,sBAAsB;IACtB,YAAY;IACZ,aAAa;IACb,cAAc;IACd,aAAa;CACJ,CAAC;AAEX,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;AAGvD;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7C,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;CAC1B,CAAC,CAAC;AAGH;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;CAClD,CAAC,CAAC;AAGH;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAChD,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACtC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAChD,CAAC,CAAC;AAGH;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACrC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC;AAGH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC;KAC7C,MAAM,CAAC;IACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC1C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;IAC/C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3E,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;CAC1E,CAAC;KACD,MAAM,EAAE,CAAC;AAGX,mFAAmF;AACnF,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC;KAC5C,MAAM,CAAC;IACP,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACtC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;CAC1B,CAAC;KACD,MAAM,EAAE,CAAC;AAGX,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC;KAChD,MAAM,CAAC;IACP,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC;CACnD,CAAC;KACD,MAAM,EAAE,CAAC;AAGX,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC;KAClD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,iCAAiC,CAAC,EAAE,CAAC;KAC9D,MAAM,EAAE,CAAC;AAGX;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACxC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,MAAM,EAAE,CAAC;AAEX,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC;KAChD,MAAM,CAAC;IACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,KAAK,EAAE,yBAAyB;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;CAChC,CAAC;KACD,MAAM,EAAE,CAAC;AAEX,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC;KAC9C,MAAM,CAAC;IACP,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,MAAM,EAAE,CAAC;AAEX,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KAC1C,MAAM,CAAC;IACP,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,SAAS,EAAE,iCAAiC;CAC5C,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/schemas/api/api-keys.d.ts

@@ -0,0 +1,74 @@
+import * as z from 'zod/v4';
+export declare const apiKeyScopeSchema: z.ZodString;
+export type ApiKeyScope = z.infer<typeof apiKeyScopeSchema>;
+export declare const CreateApiKeyInputSchema: z.ZodObject<{
+    userId: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    scopes: z.ZodArray<z.ZodString>;
+    applicationId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    expiresInDays: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+}, z.core.$strip>;
+export type CreateApiKeyInput = z.infer<typeof CreateApiKeyInputSchema>;
+export declare const CreatedApiKeySchema: z.ZodObject<{
+    plaintext: z.ZodString;
+    record: z.ZodObject<{
+        id: z.ZodString;
+        userId: z.ZodString;
+        scopes: z.ZodArray<z.ZodString>;
+        expiresAt: z.ZodNullable<z.ZodDate>;
+        name: z.ZodNullable<z.ZodString>;
+        description: z.ZodNullable<z.ZodString>;
+        applicationId: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type CreatedApiKey = z.infer<typeof CreatedApiKeySchema>;
+export declare const ApiKeyValidationResultSchema: z.ZodObject<{
+    apiKey: z.ZodNullable<z.ZodObject<{
+        id: z.ZodString;
+        userId: z.ZodString;
+        scopes: z.ZodArray<z.ZodString>;
+        expiresAt: z.ZodNullable<z.ZodDate>;
+    }, z.core.$strip>>;
+    user: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+}, z.core.$strip>;
+export type ApiKeyValidationResult = z.infer<typeof ApiKeyValidationResultSchema>;
+export declare const ApiKeyValidationResponseSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    valid: z.ZodLiteral<false>;
+}, z.core.$strict>, z.ZodObject<{
+    valid: z.ZodLiteral<true>;
+    userId: z.ZodString;
+    scopes: z.ZodArray<z.ZodString>;
+    keyId: z.ZodString;
+    principal: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"user">;
+        userId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"agent">;
+        agentId: z.ZodString;
+        owner: z.ZodObject<{
+            type: z.ZodLiteral<"user">;
+            id: z.ZodString;
+        }, z.core.$strict>;
+        keyId: z.ZodString;
+        scopes: z.ZodArray<z.ZodEnum<{
+            "chat:send": "chat:send";
+            "chat:read": "chat:read";
+            "knowledge:read": "knowledge:read";
+            "knowledge:write": "knowledge:write";
+            "session:join": "session:join";
+            "session:create": "session:create";
+            "forum:post": "forum:post";
+            "forum:react": "forum:react";
+            "presence:update": "presence:update";
+            "presentations:request": "presentations:request";
+            "presentations:review": "presentations:review";
+            "forge:read": "forge:read";
+            "forge:write": "forge:write";
+            "forge:review": "forge:review";
+            "forge:merge": "forge:merge";
+        }>>;
+    }, z.core.$strict>], "kind">>;
+}, z.core.$strict>], "valid">;
+export type ApiKeyValidationResponse = z.infer<typeof ApiKeyValidationResponseSchema>;
+//# sourceMappingURL=api-keys.d.ts.map

package/dist/schemas/api/api-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../../../src/schemas/api/api-keys.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,eAAO,MAAM,iBAAiB,aAAoB,CAAC;AACnD,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,uBAAuB;;;;;;;iBAOlC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,mBAAmB;;;;;;;;;;;iBAW9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,4BAA4B;;;;;;;;iBAWvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAmCzC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC"}

package/dist/schemas/api/api-keys.js

@@ -0,0 +1,70 @@
+import * as z from 'zod/v4';
+import { authenticatedAgentPrincipalSchema } from "../agents.js";
+export const apiKeyScopeSchema = z.string().min(1);
+export const CreateApiKeyInputSchema = z.object({
+    userId: z.string(),
+    name: z.string(),
+    description: z.string().nullable().optional(),
+    scopes: z.array(z.string()),
+    applicationId: z.string().nullable().optional(),
+    expiresInDays: z.number().nullable().optional()
+});
+export const CreatedApiKeySchema = z.object({
+    plaintext: z.string(),
+    record: z.object({
+        id: z.string(),
+        userId: z.string(),
+        scopes: z.array(z.string()),
+        expiresAt: z.date().nullable(),
+        name: z.string().nullable(),
+        description: z.string().nullable(),
+        applicationId: z.string().nullable()
+    })
+});
+export const ApiKeyValidationResultSchema = z.object({
+    apiKey: z
+        .object({
+        id: z.string(),
+        userId: z.string(),
+        scopes: z.array(z.string()),
+        expiresAt: z.date().nullable()
+    })
+        .nullable(),
+    /** The validated user's public fields: scalars only (dates are ISO strings). */
+    user: z.record(z.string(), z.union([z.string(), z.number(), z.boolean(), z.null()])).nullable()
+});
+export const ApiKeyValidationResponseSchema = z.discriminatedUnion('valid', [
+    z.object({ valid: z.literal(false) }).strict(),
+    z
+        .object({
+        valid: z.literal(true),
+        userId: z.string().min(1),
+        scopes: z.array(z.string()),
+        keyId: z.string().min(1),
+        principal: z
+            .discriminatedUnion('kind', [
+            z.object({ kind: z.literal('user'), userId: z.string().min(1) }).strict(),
+            authenticatedAgentPrincipalSchema
+        ])
+            .optional()
+    })
+        .strict()
+        .superRefine((response, context) => {
+        if (response.principal?.kind === 'user' && response.principal.userId !== response.userId) {
+            context.addIssue({
+                code: 'custom',
+                path: ['principal', 'userId'],
+                message: 'user principal must match the validated user'
+            });
+        }
+        if (response.principal?.kind === 'agent' &&
+            response.principal.owner.id !== response.userId) {
+            context.addIssue({
+                code: 'custom',
+                path: ['principal', 'owner', 'id'],
+                message: 'personal agent owner must match the validated user'
+            });
+        }
+    })
+]);
+//# sourceMappingURL=api-keys.js.map

package/dist/schemas/api/api-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.js","sourceRoot":"","sources":["../../../src/schemas/api/api-keys.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,iCAAiC,EAAE,MAAM,cAAc,CAAC;AAEjE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAGnD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC/C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC/C,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC3B,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;QAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACpC,CAAC;CACF,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,MAAM,EAAE,CAAC;SACP,MAAM,CAAC;QACP,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC3B,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC;SACD,QAAQ,EAAE;IACZ,gFAAgF;IAChF,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC/F,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,kBAAkB,CAAC,OAAO,EAAE;IAC3E,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IAC9C,CAAC;SACC,MAAM,CAAC;QACP,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACtB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,SAAS,EAAE,CAAC;aACV,kBAAkB,CAAC,MAAM,EAAE;YAC3B,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;YACzE,iCAAiC;SACjC,CAAC;aACD,QAAQ,EAAE;KACZ,CAAC;SACD,MAAM,EAAE;SACR,WAAW,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;QAClC,IAAI,QAAQ,CAAC,SAAS,EAAE,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC1F,OAAO,CAAC,QAAQ,CAAC;gBAChB,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC;gBAC7B,OAAO,EAAE,8CAA8C;aACvD,CAAC,CAAC;QACJ,CAAC;QACD,IACC,QAAQ,CAAC,SAAS,EAAE,IAAI,KAAK,OAAO;YACpC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,MAAM,EAC9C,CAAC;YACF,OAAO,CAAC,QAAQ,CAAC;gBAChB,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC;gBAClC,OAAO,EAAE,oDAAoD;aAC7D,CAAC,CAAC;QACJ,CAAC;IACF,CAAC,CAAC;CACH,CAAC,CAAC"}

package/dist/schemas/api/client.d.ts

@@ -0,0 +1,220 @@
+import * as z from 'zod/v4';
+import { type ApiKeyValidationResult, type CreateApiKeyInput, type CreatedApiKey } from './api-keys.ts';
+export declare const authClientIdSchema: z.ZodEnum<{
+    system: "system";
+    account: "account";
+    mcp: "mcp";
+    auth: "auth";
+    platform: "platform";
+    desktop: "desktop";
+    app: "app";
+    docs: "docs";
+    hq: "hq";
+    ai: "ai";
+    chat: "chat";
+    casework: "casework";
+    knowledge: "knowledge";
+    dossier: "dossier";
+    creative: "creative";
+    workbench: "workbench";
+    runnable: "runnable";
+    forge: "forge";
+}>;
+export type AuthClientId = z.infer<typeof authClientIdSchema>;
+export declare const authGatewayAudienceSchema: z.ZodEnum<{
+    internal: "internal";
+    public: "public";
+}>;
+export type AuthGatewayAudience = z.infer<typeof authGatewayAudienceSchema>;
+export declare const authGatewayClientSchema: z.ZodObject<{
+    id: z.ZodEnum<{
+        system: "system";
+        account: "account";
+        mcp: "mcp";
+        auth: "auth";
+        platform: "platform";
+        desktop: "desktop";
+        app: "app";
+        docs: "docs";
+        hq: "hq";
+        ai: "ai";
+        chat: "chat";
+        casework: "casework";
+        knowledge: "knowledge";
+        dossier: "dossier";
+        creative: "creative";
+        workbench: "workbench";
+        runnable: "runnable";
+        forge: "forge";
+    }>;
+    name: z.ZodString;
+    origin: z.ZodString;
+    callbackPath: z.ZodDefault<z.ZodString>;
+    logoutPath: z.ZodDefault<z.ZodString>;
+    scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    audience: z.ZodDefault<z.ZodEnum<{
+        internal: "internal";
+        public: "public";
+    }>>;
+}, z.core.$strip>;
+export type AuthGatewayClient = z.infer<typeof authGatewayClientSchema>;
+export declare const authGatewaySchema: z.ZodObject<{
+    issuer: z.ZodString;
+    authOrigin: z.ZodString;
+    cookieDomain: z.ZodString;
+    clients: z.ZodArray<z.ZodObject<{
+        id: z.ZodEnum<{
+            system: "system";
+            account: "account";
+            mcp: "mcp";
+            auth: "auth";
+            platform: "platform";
+            desktop: "desktop";
+            app: "app";
+            docs: "docs";
+            hq: "hq";
+            ai: "ai";
+            chat: "chat";
+            casework: "casework";
+            knowledge: "knowledge";
+            dossier: "dossier";
+            creative: "creative";
+            workbench: "workbench";
+            runnable: "runnable";
+            forge: "forge";
+        }>;
+        name: z.ZodString;
+        origin: z.ZodString;
+        callbackPath: z.ZodDefault<z.ZodString>;
+        logoutPath: z.ZodDefault<z.ZodString>;
+        scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        audience: z.ZodDefault<z.ZodEnum<{
+            internal: "internal";
+            public: "public";
+        }>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type AuthGateway = z.infer<typeof authGatewaySchema>;
+export declare const authSessionUserSchema: z.ZodObject<{
+    id: z.ZodString;
+    email: z.ZodString;
+    name: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+export type AuthSessionUser = z.infer<typeof authSessionUserSchema>;
+export declare const authSessionSchema: z.ZodObject<{
+    id: z.ZodString;
+    userId: z.ZodString;
+    expiresAt: z.ZodString;
+}, z.core.$strip>;
+export type AuthSession = z.infer<typeof authSessionSchema>;
+export declare const authSessionStateSchema: z.ZodObject<{
+    authenticated: z.ZodBoolean;
+    jwt: z.ZodOptional<z.ZodString>;
+    user: z.ZodNullable<z.ZodObject<{
+        id: z.ZodString;
+        email: z.ZodString;
+        name: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>;
+    session: z.ZodNullable<z.ZodObject<{
+        id: z.ZodString;
+        userId: z.ZodString;
+        expiresAt: z.ZodString;
+    }, z.core.$strip>>;
+    gateway: z.ZodObject<{
+        cookieDomain: z.ZodString;
+        authOrigin: z.ZodString;
+        issuer: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type AuthSessionState = z.infer<typeof authSessionStateSchema>;
+export declare const apiKeyScopeSchema: z.ZodEnum<{
+    "chat:read": "chat:read";
+    "knowledge:read": "knowledge:read";
+    "profile:read": "profile:read";
+    "agents:read": "agents:read";
+    "agents:run": "agents:run";
+    "knowledge:create": "knowledge:create";
+    "knowledge:update": "knowledge:update";
+    "knowledge:delete": "knowledge:delete";
+    "chat:write": "chat:write";
+    "project:read": "project:read";
+    "project:write": "project:write";
+    "admin:all": "admin:all";
+}>;
+export type ApiKeyScope = z.infer<typeof apiKeyScopeSchema>;
+export declare const createApiKeyInputSchema: z.ZodObject<{
+    userId: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    scopes: z.ZodArray<z.ZodString>;
+    applicationId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    expiresInDays: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+}, z.core.$strip>;
+export declare const createdApiKeySchema: z.ZodObject<{
+    plaintext: z.ZodString;
+    record: z.ZodObject<{
+        id: z.ZodString;
+        userId: z.ZodString;
+        scopes: z.ZodArray<z.ZodString>;
+        expiresAt: z.ZodNullable<z.ZodDate>;
+        name: z.ZodNullable<z.ZodString>;
+        description: z.ZodNullable<z.ZodString>;
+        applicationId: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export declare const apiKeyValidationResultSchema: z.ZodObject<{
+    apiKey: z.ZodNullable<z.ZodObject<{
+        id: z.ZodString;
+        userId: z.ZodString;
+        scopes: z.ZodArray<z.ZodString>;
+        expiresAt: z.ZodNullable<z.ZodDate>;
+    }, z.core.$strip>>;
+    user: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+}, z.core.$strip>;
+export declare const gatewayClientDefinitionSchema: z.ZodObject<{
+    id: z.ZodEnum<{
+        system: "system";
+        account: "account";
+        mcp: "mcp";
+        auth: "auth";
+        platform: "platform";
+        desktop: "desktop";
+        app: "app";
+        docs: "docs";
+        hq: "hq";
+        ai: "ai";
+        chat: "chat";
+        casework: "casework";
+        knowledge: "knowledge";
+        dossier: "dossier";
+        creative: "creative";
+        workbench: "workbench";
+        runnable: "runnable";
+        forge: "forge";
+    }>;
+    name: z.ZodString;
+    subdomain: z.ZodString;
+    callbackPath: z.ZodOptional<z.ZodString>;
+    logoutPath: z.ZodOptional<z.ZodString>;
+    scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    audience: z.ZodOptional<z.ZodEnum<{
+        internal: "internal";
+        public: "public";
+    }>>;
+}, z.core.$strip>;
+export type GatewayClientDefinition = z.infer<typeof gatewayClientDefinitionSchema>;
+export declare const authClientConfigSchema: z.ZodObject<{
+    authOrigin: z.ZodString;
+    clientId: z.ZodString;
+    clientOrigin: z.ZodString;
+    callbackPath: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type AuthClientConfig = z.infer<typeof authClientConfigSchema> & {
+    clientId: AuthClientId | (string & {});
+};
+export declare const authRedirectOptionsSchema: z.ZodObject<{
+    redirectTo: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type AuthRedirectOptions = z.infer<typeof authRedirectOptionsSchema>;
+export type { CreateApiKeyInput, CreatedApiKey, ApiKeyValidationResult };
+//# sourceMappingURL=client.d.ts.map

package/dist/schemas/api/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/schemas/api/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAIN,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,MAAM,eAAe,CAAC;AAEvB,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;EAmB7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,yBAAyB;;;EAAiC,CAAC;AACxE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAQlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAK5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,qBAAqB;;;;iBAIhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,iBAAiB;;;;iBAI5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;iBAUjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;EAa5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,uBAAuB;;;;;;;iBAA0B,CAAC;AAC/D,eAAO,MAAM,mBAAmB;;;;;;;;;;;iBAAsB,CAAC;AACvD,eAAO,MAAM,4BAA4B;;;;;;;;iBAA+B,CAAC;AAEzE,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAQxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,sBAAsB;;;;;iBAKjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,GAAG;IACvE,QAAQ,EAAE,YAAY,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;CACvC,CAAC;AAEF,eAAO,MAAM,yBAAyB;;iBAEpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,sBAAsB,EAAE,CAAC"}

package/dist/schemas/api/client.js

@@ -0,0 +1,95 @@
+import * as z from 'zod/v4';
+import { ApiKeyValidationResultSchema, CreateApiKeyInputSchema, CreatedApiKeySchema } from "./api-keys.js";
+export const authClientIdSchema = z.enum([
+    'auth',
+    'account',
+    'app',
+    'hq',
+    'ai',
+    'chat',
+    'casework',
+    'knowledge',
+    'dossier',
+    'creative',
+    'workbench',
+    'runnable',
+    'platform',
+    'system',
+    'docs',
+    'desktop',
+    'mcp',
+    'forge'
+]);
+export const authGatewayAudienceSchema = z.enum(['public', 'internal']);
+export const authGatewayClientSchema = z.object({
+    id: authClientIdSchema,
+    name: z.string().min(1),
+    origin: z.string().url(),
+    callbackPath: z.string().min(1).default('/auth/callback'),
+    logoutPath: z.string().min(1).default('/'),
+    scopes: z.array(z.string()).default([]),
+    audience: authGatewayAudienceSchema.default('public')
+});
+export const authGatewaySchema = z.object({
+    issuer: z.string().url(),
+    authOrigin: z.string().url(),
+    cookieDomain: z.string().min(1),
+    clients: z.array(authGatewayClientSchema).min(1)
+});
+export const authSessionUserSchema = z.object({
+    id: z.string().min(1),
+    email: z.string().email(),
+    name: z.string().nullable().default(null)
+});
+export const authSessionSchema = z.object({
+    id: z.string().min(1),
+    userId: z.string().min(1),
+    expiresAt: z.string().datetime()
+});
+export const authSessionStateSchema = z.object({
+    authenticated: z.boolean(),
+    jwt: z.string().min(1).optional(),
+    user: authSessionUserSchema.nullable(),
+    session: authSessionSchema.nullable(),
+    gateway: authGatewaySchema.pick({
+        issuer: true,
+        authOrigin: true,
+        cookieDomain: true
+    })
+});
+export const apiKeyScopeSchema = z.enum([
+    'profile:read',
+    'agents:read',
+    'agents:run',
+    'knowledge:read',
+    'knowledge:create',
+    'knowledge:update',
+    'knowledge:delete',
+    'chat:read',
+    'chat:write',
+    'project:read',
+    'project:write',
+    'admin:all'
+]);
+export const createApiKeyInputSchema = CreateApiKeyInputSchema;
+export const createdApiKeySchema = CreatedApiKeySchema;
+export const apiKeyValidationResultSchema = ApiKeyValidationResultSchema;
+export const gatewayClientDefinitionSchema = z.object({
+    id: authClientIdSchema,
+    name: z.string(),
+    subdomain: z.string(),
+    callbackPath: z.string().optional(),
+    logoutPath: z.string().optional(),
+    scopes: z.array(z.string()).optional(),
+    audience: authGatewayAudienceSchema.optional()
+});
+export const authClientConfigSchema = z.object({
+    authOrigin: z.string().url(),
+    clientId: z.string(),
+    clientOrigin: z.string().url(),
+    callbackPath: z.string().optional()
+});
+export const authRedirectOptionsSchema = z.object({
+    redirectTo: z.string().optional()
+});
+//# sourceMappingURL=client.js.map

package/dist/schemas/api/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/schemas/api/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EACN,4BAA4B,EAC5B,uBAAuB,EACvB,mBAAmB,EAInB,MAAM,eAAe,CAAC;AAEvB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC;IACxC,MAAM;IACN,SAAS;IACT,KAAK;IACL,IAAI;IACJ,IAAI;IACJ,MAAM;IACN,UAAU;IACV,WAAW;IACX,SAAS;IACT,UAAU;IACV,WAAW;IACX,UAAU;IACV,UAAU;IACV,QAAQ;IACR,MAAM;IACN,SAAS;IACT,KAAK;IACL,OAAO;CACP,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;AAGxE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACxB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACzD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IAC1C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACvC,QAAQ,EAAE,yBAAyB,CAAC,OAAO,CAAC,QAAQ,CAAC;CACrD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACxB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC5B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAChD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACzC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE;IAC1B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjC,IAAI,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IACtC,OAAO,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACrC,OAAO,EAAE,iBAAiB,CAAC,IAAI,CAAC;QAC/B,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,IAAI;QAChB,YAAY,EAAE,IAAI;KAClB,CAAC;CACF,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC;IACvC,cAAc;IACd,aAAa;IACb,YAAY;IACZ,gBAAgB;IAChB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,WAAW;IACX,YAAY;IACZ,cAAc;IACd,eAAe;IACf,WAAW;CACX,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,uBAAuB,GAAG,uBAAuB,CAAC;AAC/D,MAAM,CAAC,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AACvD,MAAM,CAAC,MAAM,4BAA4B,GAAG,4BAA4B,CAAC;AAEzE,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,QAAQ,EAAE,yBAAyB,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC9B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAKH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC"}