@vibesdotdev/auth 0.0.0-stage → 1.0.0-rc.3

package/dist/schemas/flows/forms.js

@@ -0,0 +1,133 @@
+import * as z from 'zod/v4';
+import { userSchema } from '@vibesdotdev/account/schemas';
+import { apiScopes } from "../auth/common.js";
+export const loginSchema = z.object({
+    email: z.email('Please enter a valid email address'),
+    password: z.string().min(1, { message: 'Password is required' }),
+    rememberMe: z.boolean()
+});
+export const forgotPasswordSchema = z.object({
+    email: z.email('Please enter a valid email address')
+});
+export const registerSchema = z
+    .object({
+    email: z.email('Please enter a valid email address'),
+    name: z.string().nullable().default(null),
+    password: z
+        .string()
+        .min(8, { message: 'Password must be at least 8 characters' })
+        .regex(/[A-Z]/, { message: 'Password must contain at least one uppercase letter' })
+        .regex(/[a-z]/, { message: 'Password must contain at least one lowercase letter' })
+        .regex(/[0-9]/, { message: 'Password must contain at least one number' }),
+    confirmPassword: z.string(),
+    acceptTerms: z.boolean().refine((val) => val === true, {
+        message: 'You must accept the terms and conditions'
+    })
+})
+    .refine((data) => data.password === data.confirmPassword, {
+    message: "Passwords don't match",
+    path: ['confirmPassword']
+});
+export const updateUserSchema = userSchema
+    .pick({
+    name: true,
+    image: true
+})
+    .partial();
+export const resetPasswordSchema = z
+    .object({
+    token: z.string().min(1, { message: 'Reset token is required' }),
+    password: z
+        .string()
+        .min(8, { message: 'Password must be at least 8 characters' })
+        .regex(/[A-Z]/, { message: 'Password must contain at least one uppercase letter' })
+        .regex(/[a-z]/, { message: 'Password must contain at least one lowercase letter' })
+        .regex(/[0-9]/, { message: 'Password must contain at least one number' }),
+    confirmPassword: z.string()
+})
+    .refine((data) => data.password === data.confirmPassword, {
+    message: "Passwords don't match",
+    path: ['confirmPassword']
+});
+// New schemas for API key generation
+export const generateApiKeySchema = z.object({
+    name: z.string().min(1, { message: 'Name is required' }),
+    description: z.string().optional(),
+    scopes: z.array(z.string()).min(1, { message: 'At least one scope is required' }),
+    expiresInDays: z.number().int().min(0).max(365).optional(),
+    applicationId: z.string().optional(),
+    ipRestrictions: z.array(z.string()).optional()
+});
+// Schema for authorizing external applications
+export const authorizeExternalAppSchema = z.object({
+    applicationId: z.string().min(1, { message: 'Application ID is required' }),
+    state: z.string().min(1, { message: 'State parameter is required' }),
+    redirectUri: z.url({ message: 'Valid redirect URI is required' }),
+    scopes: z.array(z.string()).min(1, { message: 'At least one scope is required' }),
+    allowAccess: z.boolean().default(false)
+});
+// Schema for CLI auth (simplified direct API key generation)
+export const cliAuthSchema = z.object({
+    state: z.string().min(1, { message: 'State parameter is required' }),
+    callback: z.url({ message: 'Valid callback URL is required' })
+});
+// MFA setup schema - for TOTP setup verification
+export const mfaSetupSchema = z.object({
+    totpCode: z
+        .string()
+        .length(6, { message: 'Code must be 6 digits' })
+        .regex(/^\d+$/, { message: 'Code must contain only numbers' }),
+    password: z.string().min(1, { message: 'Password is required to enable MFA' })
+});
+// MFA verification schema - for login verification
+export const mfaVerificationSchema = z.object({
+    code: z
+        .string()
+        .min(6, { message: 'Code must be at least 6 digits' })
+        .max(8, { message: 'Code must be at most 8 digits' }),
+    trustDevice: z.boolean().default(false)
+});
+// MFA disable schema
+export const mfaDisableSchema = z.object({
+    password: z.string().min(1, { message: 'Password is required to disable MFA' }),
+    confirmDisable: z.boolean().refine((val) => val === true, {
+        message: 'You must confirm disabling MFA'
+    })
+});
+// Recovery code usage schema
+export const recoveryCodeSchema = z.object({
+    recoveryCode: z.string().min(8, { message: 'Recovery code must be at least 8 characters' })
+});
+// Recovery code regeneration schema
+export const regenerateRecoveryCodesSchema = z.object({
+    password: z.string().min(1, { message: 'Password is required to regenerate recovery codes' })
+});
+/**
+ * Change password schema — validates a password change request.
+ * Requires the current password for verification plus the new password
+ * confirmed twice, matching the conventions used by resetPasswordSchema.
+ */
+export const changePasswordSchema = z
+    .object({
+    currentPassword: z.string().min(1, { message: 'Current password is required' }),
+    newPassword: z
+        .string()
+        .min(8, { message: 'Password must be at least 8 characters' })
+        .regex(/[A-Z]/, { message: 'Password must contain at least one uppercase letter' })
+        .regex(/[a-z]/, { message: 'Password must contain at least one lowercase letter' })
+        .regex(/[0-9]/, { message: 'Password must contain at least one number' }),
+    confirmPassword: z.string()
+})
+    .refine((data) => data.newPassword === data.confirmPassword, {
+    message: "Passwords don't match",
+    path: ['confirmPassword']
+});
+// Helper to get all available scopes for forms
+export const availableScopes = Object.entries(apiScopes).map(([key, value]) => ({
+    id: value,
+    label: key
+        .split('_')
+        .map((word) => word.charAt(0) + word.slice(1).toLowerCase())
+        .join(' ')
+}));
+//# sourceMappingURL=forms.js.map

package/dist/schemas/flows/forms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forms.js","sourceRoot":"","sources":["../../../src/schemas/flows/forms.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,oCAAoC,CAAC;IACpD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;IAChE,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;CACvB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,oCAAoC,CAAC;CACpD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC7B,MAAM,CAAC;IACP,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,oCAAoC,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACzC,QAAQ,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;SAC7D,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;SAClF,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;SAClF,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;IAC1E,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,EAAE;QACtD,OAAO,EAAE,0CAA0C;KACnD,CAAC;CACF,CAAC;KACD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,eAAe,EAAE;IACzD,OAAO,EAAE,uBAAuB;IAChC,IAAI,EAAE,CAAC,iBAAiB,CAAC;CACzB,CAAC,CAAC;AAEJ,MAAM,CAAC,MAAM,gBAAgB,GAAG,UAAU;KACxC,IAAI,CAAC;IACL,IAAI,EAAE,IAAI;IACV,KAAK,EAAE,IAAI;CACX,CAAC;KACD,OAAO,EAAE,CAAC;AAOZ,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KAClC,MAAM,CAAC;IACP,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;IAChE,QAAQ,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;SAC7D,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;SAClF,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;SAClF,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;IAC1E,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;CAC3B,CAAC;KACD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,eAAe,EAAE;IACzD,OAAO,EAAE,uBAAuB;IAChC,IAAI,EAAE,CAAC,iBAAiB,CAAC;CACzB,CAAC,CAAC;AAIJ,qCAAqC;AACrC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IACxD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;IACjF,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC1D,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAEH,+CAA+C;AAC/C,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;IAC3E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;IACpE,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;IACjE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;IACjF,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACvC,CAAC,CAAC;AAEH,6DAA6D;AAC7D,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;IACpE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;CAC9D,CAAC,CAAC;AAOH,iDAAiD;AACjD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,QAAQ,EAAE,CAAC;SACT,MAAM,EAAE;SACR,MAAM,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC;SAC/C,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;IAC/D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;CAC9E,CAAC,CAAC;AAEH,mDAAmD;AACnD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;SACrD,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC;IACtD,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACvC,CAAC,CAAC;AAEH,qBAAqB;AACrB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;IAC/E,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,EAAE;QACzD,OAAO,EAAE,gCAAgC;KACzC,CAAC;CACF,CAAC,CAAC;AAEH,6BAA6B;AAC7B,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC;CAC3F,CAAC,CAAC;AAEH,oCAAoC;AACpC,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,mDAAmD,EAAE,CAAC;CAC7F,CAAC,CAAC;AASH;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KACnC,MAAM,CAAC;IACP,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;IAC/E,WAAW,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;SAC7D,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;SAClF,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;SAClF,KAAK,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;IAC1E,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;CAC3B,CAAC;KACD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,eAAe,EAAE;IAC5D,OAAO,EAAE,uBAAuB;IAChC,IAAI,EAAE,CAAC,iBAAiB,CAAC;CACzB,CAAC,CAAC;AAIJ,+CAA+C;AAC/C,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/E,EAAE,EAAE,KAAK;IACT,KAAK,EAAE,GAAG;SACR,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;SAC3D,IAAI,CAAC,GAAG,CAAC;CACX,CAAC,CAAC,CAAC"}

package/dist/schemas/flows/phone.d.ts

@@ -0,0 +1,84 @@
+import * as z from 'zod/v4';
+export declare const phoneNumberSchema: z.ZodString;
+export declare const phoneInputSchema: z.ZodObject<{
+    phoneNumber: z.ZodString;
+    countryCode: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type PhoneInput = z.infer<typeof phoneInputSchema>;
+export declare const otpCodeSchema: z.ZodString;
+export declare const phoneAuthRequestSchema: z.ZodObject<{
+    phoneNumber: z.ZodString;
+}, z.core.$strip>;
+export type PhoneAuthRequest = z.infer<typeof phoneAuthRequestSchema>;
+export declare const otpVerificationSchema: z.ZodObject<{
+    phoneNumber: z.ZodString;
+    otpCode: z.ZodString;
+}, z.core.$strip>;
+export type OtpVerification = z.infer<typeof otpVerificationSchema>;
+export declare const resendOtpSchema: z.ZodObject<{
+    phoneNumber: z.ZodString;
+}, z.core.$strip>;
+export type ResendOtp = z.infer<typeof resendOtpSchema>;
+export declare const phoneVerificationSchema: z.ZodObject<{
+    id: z.ZodUUID;
+    phoneNumber: z.ZodString;
+    otpCode: z.ZodString;
+    attempts: z.ZodNumber;
+    maxAttempts: z.ZodNumber;
+    expiresAt: z.ZodDate;
+    isVerified: z.ZodDefault<z.ZodBoolean>;
+    createdAt: z.ZodDate;
+    updatedAt: z.ZodDate;
+}, z.core.$strip>;
+export type PhoneVerification = z.infer<typeof phoneVerificationSchema>;
+export declare const smsRateLimitSchema: z.ZodObject<{
+    id: z.ZodUUID;
+    phoneNumber: z.ZodString;
+    attempts: z.ZodNumber;
+    windowStart: z.ZodDate;
+    windowEnd: z.ZodDate;
+    isBlocked: z.ZodDefault<z.ZodBoolean>;
+    createdAt: z.ZodDate;
+    updatedAt: z.ZodDate;
+}, z.core.$strip>;
+export type SmsRateLimit = z.infer<typeof smsRateLimitSchema>;
+export declare const phoneAuthStateSchema: z.ZodObject<{
+    step: z.ZodEnum<{
+        error: "error";
+        success: "success";
+        phone_input: "phone_input";
+        otp_verification: "otp_verification";
+    }>;
+    phoneNumber: z.ZodNullable<z.ZodString>;
+    isLoading: z.ZodDefault<z.ZodBoolean>;
+    error: z.ZodNullable<z.ZodString>;
+    attemptsRemaining: z.ZodOptional<z.ZodNumber>;
+    canResend: z.ZodDefault<z.ZodBoolean>;
+    resendCooldown: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+export type PhoneAuthState = z.infer<typeof phoneAuthStateSchema>;
+export declare const userWithPhoneSchema: z.ZodObject<{
+    id: z.ZodUUID;
+    email: z.ZodEmail;
+    displayName: z.ZodNullable<z.ZodString>;
+    avatarUrl: z.ZodNullable<z.ZodString>;
+    phoneNumber: z.ZodNullable<z.ZodString>;
+    phoneNumberVerified: z.ZodDefault<z.ZodBoolean>;
+    phoneNumberVerifiedAt: z.ZodNullable<z.ZodDate>;
+}, z.core.$strip>;
+export type UserWithPhone = z.infer<typeof userWithPhoneSchema>;
+export declare const phoneMagicLinkResponseSchema: z.ZodObject<{
+    success: z.ZodBoolean;
+    message: z.ZodOptional<z.ZodString>;
+    error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type PhoneMagicLinkResponse = z.infer<typeof phoneMagicLinkResponseSchema>;
+export declare const PHONE_AUTH_CONFIG: {
+    readonly OTP_LENGTH: 6;
+    readonly OTP_EXPIRY_MINUTES: 5;
+    readonly MAX_ATTEMPTS: 3;
+    readonly RATE_LIMIT_WINDOW_MINUTES: 60;
+    readonly MAX_SMS_PER_WINDOW: 5;
+    readonly RESEND_COOLDOWN_SECONDS: 60;
+};
+//# sourceMappingURL=phone.d.ts.map

package/dist/schemas/flows/phone.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"phone.d.ts","sourceRoot":"","sources":["../../../src/schemas/flows/phone.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAK5B,eAAO,MAAM,iBAAiB,aAII,CAAC;AAGnC,eAAO,MAAM,gBAAgB;;;iBAG3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAG1D,eAAO,MAAM,aAAa,aAG6B,CAAC;AAGxD,eAAO,MAAM,sBAAsB;;iBAEjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAGtE,eAAO,MAAM,qBAAqB;;;iBAGhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAGpE,eAAO,MAAM,eAAe;;iBAE1B,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAGxD,eAAO,MAAM,uBAAuB;;;;;;;;;;iBAUlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAGxE,eAAO,MAAM,kBAAkB;;;;;;;;;iBAS7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAG9D,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;iBAQ/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAGlE,eAAO,MAAM,mBAAmB;;;;;;;;iBAQ9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAGhE,eAAO,MAAM,4BAA4B;;;;iBAIvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAGlF,eAAO,MAAM,iBAAiB;;;;;;;CAOpB,CAAC"}

package/dist/schemas/flows/phone.js

@@ -0,0 +1,90 @@
+import * as z from 'zod/v4';
+// Phone number validation - E.164 format
+const phoneNumberRegex = /^\+[1-9]\d{1,14}$/;
+export const phoneNumberSchema = z
+    .string()
+    .regex(phoneNumberRegex, 'Phone number must be in E.164 format (e.g., +1234567890)')
+    .min(8, 'Phone number too short')
+    .max(16, 'Phone number too long');
+// Raw phone input (before formatting)
+export const phoneInputSchema = z.object({
+    phoneNumber: z.string().min(1, 'Phone number is required'),
+    countryCode: z.string().length(2, 'Country code must be 2 characters').optional()
+});
+// OTP code validation
+export const otpCodeSchema = z
+    .string()
+    .length(6, 'OTP code must be 6 digits')
+    .regex(/^\d{6}$/, 'OTP code must contain only digits');
+// Phone auth request schema
+export const phoneAuthRequestSchema = z.object({
+    phoneNumber: phoneNumberSchema
+});
+// OTP verification schema
+export const otpVerificationSchema = z.object({
+    phoneNumber: phoneNumberSchema,
+    otpCode: otpCodeSchema
+});
+// Resend OTP schema
+export const resendOtpSchema = z.object({
+    phoneNumber: phoneNumberSchema
+});
+// Phone verification record schema
+export const phoneVerificationSchema = z.object({
+    id: z.uuid(),
+    phoneNumber: phoneNumberSchema,
+    otpCode: z.string(),
+    attempts: z.number().min(0),
+    maxAttempts: z.number().min(1),
+    expiresAt: z.date(),
+    isVerified: z.boolean().default(false),
+    createdAt: z.date(),
+    updatedAt: z.date()
+});
+// SMS rate limit record schema
+export const smsRateLimitSchema = z.object({
+    id: z.uuid(),
+    phoneNumber: phoneNumberSchema,
+    attempts: z.number().min(0),
+    windowStart: z.date(),
+    windowEnd: z.date(),
+    isBlocked: z.boolean().default(false),
+    createdAt: z.date(),
+    updatedAt: z.date()
+});
+// Phone auth state for UI
+export const phoneAuthStateSchema = z.object({
+    step: z.enum(['phone_input', 'otp_verification', 'success', 'error']),
+    phoneNumber: phoneNumberSchema.nullable(),
+    isLoading: z.boolean().default(false),
+    error: z.string().nullable(),
+    attemptsRemaining: z.number().min(0).optional(),
+    canResend: z.boolean().default(false),
+    resendCooldown: z.number().min(0).default(0)
+});
+// User with phone details
+export const userWithPhoneSchema = z.object({
+    id: z.uuid(),
+    email: z.email(),
+    displayName: z.string().nullable(),
+    avatarUrl: z.string().nullable(),
+    phoneNumber: phoneNumberSchema.nullable(),
+    phoneNumberVerified: z.boolean().default(false),
+    phoneNumberVerifiedAt: z.date().nullable()
+});
+// Phone magic link response schema
+export const phoneMagicLinkResponseSchema = z.object({
+    success: z.boolean(),
+    message: z.string().optional(),
+    error: z.string().optional()
+});
+// Constants
+export const PHONE_AUTH_CONFIG = {
+    OTP_LENGTH: 6,
+    OTP_EXPIRY_MINUTES: 5,
+    MAX_ATTEMPTS: 3,
+    RATE_LIMIT_WINDOW_MINUTES: 60,
+    MAX_SMS_PER_WINDOW: 5,
+    RESEND_COOLDOWN_SECONDS: 60
+};
+//# sourceMappingURL=phone.js.map

package/dist/schemas/flows/phone.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phone.js","sourceRoot":"","sources":["../../../src/schemas/flows/phone.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,yCAAyC;AACzC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAE7C,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAChC,MAAM,EAAE;KACR,KAAK,CAAC,gBAAgB,EAAE,0DAA0D,CAAC;KACnF,GAAG,CAAC,CAAC,EAAE,wBAAwB,CAAC;KAChC,GAAG,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAC;AAEnC,sCAAsC;AACtC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC;IAC1D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,mCAAmC,CAAC,CAAC,QAAQ,EAAE;CACjF,CAAC,CAAC;AAGH,sBAAsB;AACtB,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,EAAE,2BAA2B,CAAC;KACtC,KAAK,CAAC,SAAS,EAAE,mCAAmC,CAAC,CAAC;AAExD,4BAA4B;AAC5B,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,WAAW,EAAE,iBAAiB;CAC9B,CAAC,CAAC;AAGH,0BAA0B;AAC1B,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,WAAW,EAAE,iBAAiB;IAC9B,OAAO,EAAE,aAAa;CACtB,CAAC,CAAC;AAGH,oBAAoB;AACpB,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,WAAW,EAAE,iBAAiB;CAC9B,CAAC,CAAC;AAGH,mCAAmC;AACnC,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,WAAW,EAAE,iBAAiB;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;IACnB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACtC,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;CACnB,CAAC,CAAC;AAGH,+BAA+B;AAC/B,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,WAAW,EAAE,iBAAiB;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACrC,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;CACnB,CAAC,CAAC;AAGH,0BAA0B;AAC1B,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,kBAAkB,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACrE,WAAW,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACzC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACrC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;CAC5C,CAAC,CAAC;AAGH,0BAA0B;AAC1B,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,WAAW,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACzC,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC/C,qBAAqB,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAGH,mCAAmC;AACnC,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAGH,YAAY;AACZ,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAChC,UAAU,EAAE,CAAC;IACb,kBAAkB,EAAE,CAAC;IACrB,YAAY,EAAE,CAAC;IACf,yBAAyB,EAAE,EAAE;IAC7B,kBAAkB,EAAE,CAAC;IACrB,uBAAuB,EAAE,EAAE;CAClB,CAAC"}

package/dist/schemas/identity.d.ts

@@ -0,0 +1,14 @@
+import * as z from 'zod/v4';
+/** The selected environment and principal carried by the `auth/identity` context. */
+export declare const authIdentitySchema: z.ZodObject<{
+    userId: z.ZodNullable<z.ZodString>;
+    environment: z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+        apiUrl: z.ZodString;
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, z.core.$strip>;
+    isAuthenticated: z.ZodBoolean;
+}, z.core.$strip>;
+export type AuthIdentity = z.output<typeof authIdentitySchema>;
+//# sourceMappingURL=identity.d.ts.map

package/dist/schemas/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/schemas/identity.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,qFAAqF;AACrF,eAAO,MAAM,kBAAkB;;;;;;;;;iBAS7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/schemas/identity.js

@@ -0,0 +1,13 @@
+import * as z from 'zod/v4';
+/** The selected environment and principal carried by the `auth/identity` context. */
+export const authIdentitySchema = z.object({
+    userId: z.string().min(1).nullable(),
+    environment: z.object({
+        id: z.string().min(1),
+        name: z.string().optional(),
+        apiUrl: z.string().min(1),
+        headers: z.record(z.string(), z.string())
+    }),
+    isAuthenticated: z.boolean()
+});
+//# sourceMappingURL=identity.js.map

package/dist/schemas/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/schemas/identity.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,qFAAqF;AACrF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;KACzC,CAAC;IACF,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;CAC5B,CAAC,CAAC"}

package/dist/schemas/index.d.ts

@@ -0,0 +1,27 @@
+export { authIdentitySchema } from './identity.ts';
+export type { AuthIdentity } from './identity.ts';
+export type { Session, AuthKey, AuthAttempt, ApiKey, ExternalApplication, AuthToken, TotpSecret, RecoveryCode, DatabaseUserAttributes, ApiScope, ApiKeyWithApplication, SessionWithUser, AuthState, ValidatedSessionContext } from './auth/types.ts';
+export { apiScopes } from './auth/types.ts';
+export type { BetterAuthUser, BetterAuthSession } from './auth/better-auth.ts';
+export { authCapabilitySchema, authCapabilitiesSchema } from './auth/capabilities.ts';
+export type { AuthCapability, AuthCapabilities } from './auth/capabilities.ts';
+export type { AuthAdminClient, AuthAdminClientOptions, AuthAdminCreateUserInput, AuthAdminCreateUserResult, AuthAdminSecurityApiKeyRecord, AuthAdminSecurityApiKeyStatus, AuthAdminSecurityApiKeysPage, AuthAdminSecurityPagination, AuthAdminSecuritySessionRecord, AuthAdminSecuritySessionStatus, AuthAdminSecuritySessionsPage, AuthAdminUserDetail, AuthAdminUserListItem, AuthAdminOperatorUserRecord, AuthAdminUserProfileRecord, AuthAdminUserRecord, AuthAdminUserRoleFilter, AuthAdminUsersPage, PermissionRecord, RolePermissionRecord, RoleRecord, SecurityStats } from './admin/index.ts';
+export { CreateApiKeyInputSchema, CreatedApiKeySchema, ApiKeyValidationResultSchema, ApiKeyValidationResponseSchema } from './api/api-keys.ts';
+export type { CreateApiKeyInput, CreatedApiKey, ApiKeyValidationResult, ApiKeyValidationResponse } from './api/api-keys.ts';
+export { AuthProviderDescriptorSchema, AuthProviderTypeSchema, ApiAuthConfigSchema, DbAuthConfigSchema, AuthContextSchema } from './provider.ts';
+export type { AuthProviderDescriptor, AuthProviderType, ApiAuthConfig, DbAuthConfig, AuthContext, AuthProviderImplementation } from './provider.ts';
+export { userKindValues, userKindSchema, authScopeValues, authScopeSchema, agentProfileSchema, agentIdentitySchema, scopedApiKeySchema, createAgentKeyInputSchema, createAgentIdentityInputSchema, agentCredentialMetadataSchema, ownedAgentCredentialSummarySchema, ownedAgentCredentialsResponseSchema, agentPrincipalOwnerSchema, authenticatedAgentPrincipalSchema, issueAgentCredentialInputSchema, issuedAgentCredentialSchema } from './agents.ts';
+export type { UserKind, AuthScope, AgentProfile, AgentIdentity, ScopedApiKey, CreateAgentKeyInput, CreateAgentIdentityInput, AgentCredentialMetadata, OwnedAgentCredentialSummary, OwnedAgentCredentialsResponse, AgentPrincipalOwner, AuthenticatedAgentPrincipal, IssueAgentCredentialInput, IssuedAgentCredential } from './agents.ts';
+export { authSecretReferenceSchema, credentialTypeSchema, credentialInfoSchema, setCredentialsInputSchema, authCredentialsUserSchema, authCredentialsTokenSchema, authCredentialsSchema } from './credentials.ts';
+export type { AuthSecretReference, CredentialType, CredentialInfo, SetCredentialsInput, AuthCredentialsUser, AuthCredentialsToken, AuthCredentials } from './credentials.ts';
+export { loginSchema, registerSchema, updateUserSchema, forgotPasswordSchema, resetPasswordSchema, changePasswordSchema, generateApiKeySchema, authorizeExternalAppSchema, cliAuthSchema, mfaSetupSchema, mfaVerificationSchema, mfaDisableSchema, recoveryCodeSchema, regenerateRecoveryCodesSchema, availableScopes } from './flows/forms.ts';
+export type { LoginInput, RegisterInput, UpdateUserInput, ForgotPasswordInput, ResetPasswordInput, ChangePasswordInput, GenerateApiKeyInput, AuthorizeExternalAppInput, CliAuthInput, MfaSetupInput, MfaVerificationInput, MfaDisableInput, RecoveryCodeInput, RegenerateRecoveryCodesInput } from './flows/forms.ts';
+export { loginUIStateSchema, registerUIStateSchema, passwordResetUIStateSchema, twoFactorUIStateSchema, mfaSetupUIStateSchema, mfaVerificationUIStateSchema, mfaSettingsUIStateSchema, apiKeyUIStateSchema, authModalStateSchema, externalAppAuthStateSchema, authGuardStateSchema, profileAuthSectionStateSchema } from './ui.ts';
+export type { LoginUIState, RegisterUIState, PasswordResetUIState, TwoFactorUIState, MfaSetupUIState, MfaVerificationUIState, MfaSettingsUIState, ApiKeyUIState, AuthModalState, ExternalAppAuthState, AuthGuardState, ProfileAuthSectionState, LoginFormProps, OAuthButtonsProps, AuthGuardProps } from './ui.ts';
+export { supportedProvidersSchema, linkedProviderSchema, linkedProvidersResponseSchema, linkProviderRequestSchema, linkProviderResponseSchema, unlinkProviderRequestSchema, unlinkProviderResponseSchema, unlinkSafetyCheckResponseSchema } from './account-linking.ts';
+export type { LinkedProvider, LinkedProvidersResponse, LinkProviderRequest, LinkProviderResponse, UnlinkProviderRequest, UnlinkProviderResponse, UnlinkSafetyCheckResponse, SupportedProvider } from './account-linking.ts';
+export * from './mobile-auth.ts';
+export * from './authority-state.ts';
+export { credentialEnvironmentSchema, resolveAppJwtOptionsSchema, resolveFreshAppJwtOptionsSchema } from './app-jwt.ts';
+export type { ResolveAppJwtOptions, ResolveFreshAppJwtInput } from './app-jwt.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/schemas/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/schemas/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,YAAY,EACX,OAAO,EACP,OAAO,EACP,WAAW,EACX,MAAM,EACN,mBAAmB,EACnB,SAAS,EACT,UAAU,EACV,YAAY,EACZ,sBAAsB,EACtB,QAAQ,EACR,qBAAqB,EACrB,eAAe,EACf,SAAS,EACT,uBAAuB,EACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACtF,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/E,YAAY,EACX,eAAe,EACf,sBAAsB,EACtB,wBAAwB,EACxB,yBAAyB,EACzB,6BAA6B,EAC7B,6BAA6B,EAC7B,4BAA4B,EAC5B,2BAA2B,EAC3B,8BAA8B,EAC9B,8BAA8B,EAC9B,6BAA6B,EAC7B,mBAAmB,EACnB,qBAAqB,EACrB,2BAA2B,EAC3B,0BAA0B,EAC1B,mBAAmB,EACnB,uBAAuB,EACvB,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,UAAU,EACV,aAAa,EACb,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,uBAAuB,EACvB,mBAAmB,EACnB,4BAA4B,EAC5B,8BAA8B,EAC9B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACX,iBAAiB,EACjB,aAAa,EACb,sBAAsB,EACtB,wBAAwB,EACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACN,4BAA4B,EAC5B,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,MAAM,eAAe,CAAC;AACvB,YAAY,EACX,sBAAsB,EACtB,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,WAAW,EACX,0BAA0B,EAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACN,cAAc,EACd,cAAc,EACd,eAAe,EACf,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,yBAAyB,EACzB,8BAA8B,EAC9B,6BAA6B,EAC7B,iCAAiC,EACjC,mCAAmC,EACnC,yBAAyB,EACzB,iCAAiC,EACjC,+BAA+B,EAC/B,2BAA2B,EAC3B,MAAM,aAAa,CAAC;AACrB,YAAY,EACX,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,mBAAmB,EACnB,wBAAwB,EACxB,uBAAuB,EACvB,2BAA2B,EAC3B,6BAA6B,EAC7B,mBAAmB,EACnB,2BAA2B,EAC3B,yBAAyB,EACzB,qBAAqB,EACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EACN,yBAAyB,EACzB,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,EACzB,yBAAyB,EACzB,0BAA0B,EAC1B,qBAAqB,EACrB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACX,mBAAmB,EACnB,cAAc,EACd,cAAc,EACd,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,eAAe,EACf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,WAAW,EACX,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,0BAA0B,EAC1B,aAAa,EACb,cAAc,EACd,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,6BAA6B,EAC7B,eAAe,EACf,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACX,UAAU,EACV,aAAa,EACb,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,yBAAyB,EACzB,YAAY,EACZ,aAAa,EACb,oBAAoB,EACpB,eAAe,EACf,iBAAiB,EACjB,4BAA4B,EAC5B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,kBAAkB,EAClB,qBAAqB,EACrB,0BAA0B,EAC1B,sBAAsB,EACtB,qBAAqB,EACrB,4BAA4B,EAC5B,wBAAwB,EACxB,mBAAmB,EACnB,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EACpB,6BAA6B,EAC7B,MAAM,SAAS,CAAC;AACjB,YAAY,EACX,YAAY,EACZ,eAAe,EACf,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,EACf,sBAAsB,EACtB,kBAAkB,EAClB,aAAa,EACb,cAAc,EACd,oBAAoB,EACpB,cAAc,EACd,uBAAuB,EACvB,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,MAAM,SAAS,CAAC;AACjB,OAAO,EACN,wBAAwB,EACxB,oBAAoB,EACpB,6BAA6B,EAC7B,yBAAyB,EACzB,0BAA0B,EAC1B,2BAA2B,EAC3B,4BAA4B,EAC5B,+BAA+B,EAC/B,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACX,cAAc,EACd,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,yBAAyB,EACzB,iBAAiB,EACjB,MAAM,sBAAsB,CAAC;AAE9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AAErC,OAAO,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,+BAA+B,EAAE,MAAM,cAAc,CAAC;AACxH,YAAY,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC"}

package/dist/schemas/index.js

@@ -0,0 +1,14 @@
+export { authIdentitySchema } from "./identity.js";
+export { apiScopes } from "./auth/types.js";
+export { authCapabilitySchema, authCapabilitiesSchema } from "./auth/capabilities.js";
+export { CreateApiKeyInputSchema, CreatedApiKeySchema, ApiKeyValidationResultSchema, ApiKeyValidationResponseSchema } from "./api/api-keys.js";
+export { AuthProviderDescriptorSchema, AuthProviderTypeSchema, ApiAuthConfigSchema, DbAuthConfigSchema, AuthContextSchema } from "./provider.js";
+export { userKindValues, userKindSchema, authScopeValues, authScopeSchema, agentProfileSchema, agentIdentitySchema, scopedApiKeySchema, createAgentKeyInputSchema, createAgentIdentityInputSchema, agentCredentialMetadataSchema, ownedAgentCredentialSummarySchema, ownedAgentCredentialsResponseSchema, agentPrincipalOwnerSchema, authenticatedAgentPrincipalSchema, issueAgentCredentialInputSchema, issuedAgentCredentialSchema } from "./agents.js";
+export { authSecretReferenceSchema, credentialTypeSchema, credentialInfoSchema, setCredentialsInputSchema, authCredentialsUserSchema, authCredentialsTokenSchema, authCredentialsSchema } from "./credentials.js";
+export { loginSchema, registerSchema, updateUserSchema, forgotPasswordSchema, resetPasswordSchema, changePasswordSchema, generateApiKeySchema, authorizeExternalAppSchema, cliAuthSchema, mfaSetupSchema, mfaVerificationSchema, mfaDisableSchema, recoveryCodeSchema, regenerateRecoveryCodesSchema, availableScopes } from "./flows/forms.js";
+export { loginUIStateSchema, registerUIStateSchema, passwordResetUIStateSchema, twoFactorUIStateSchema, mfaSetupUIStateSchema, mfaVerificationUIStateSchema, mfaSettingsUIStateSchema, apiKeyUIStateSchema, authModalStateSchema, externalAppAuthStateSchema, authGuardStateSchema, profileAuthSectionStateSchema } from "./ui.js";
+export { supportedProvidersSchema, linkedProviderSchema, linkedProvidersResponseSchema, linkProviderRequestSchema, linkProviderResponseSchema, unlinkProviderRequestSchema, unlinkProviderResponseSchema, unlinkSafetyCheckResponseSchema } from "./account-linking.js";
+export * from "./mobile-auth.js";
+export * from "./authority-state.js";
+export { credentialEnvironmentSchema, resolveAppJwtOptionsSchema, resolveFreshAppJwtOptionsSchema } from "./app-jwt.js";
+//# sourceMappingURL=index.js.map

package/dist/schemas/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/schemas/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAkBnD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AA0BtF,OAAO,EACN,uBAAuB,EACvB,mBAAmB,EACnB,4BAA4B,EAC5B,8BAA8B,EAC9B,MAAM,mBAAmB,CAAC;AAO3B,OAAO,EACN,4BAA4B,EAC5B,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,MAAM,eAAe,CAAC;AASvB,OAAO,EACN,cAAc,EACd,cAAc,EACd,eAAe,EACf,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,yBAAyB,EACzB,8BAA8B,EAC9B,6BAA6B,EAC7B,iCAAiC,EACjC,mCAAmC,EACnC,yBAAyB,EACzB,iCAAiC,EACjC,+BAA+B,EAC/B,2BAA2B,EAC3B,MAAM,aAAa,CAAC;AAiBrB,OAAO,EACN,yBAAyB,EACzB,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,EACzB,yBAAyB,EACzB,0BAA0B,EAC1B,qBAAqB,EACrB,MAAM,kBAAkB,CAAC;AAU1B,OAAO,EACN,WAAW,EACX,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,0BAA0B,EAC1B,aAAa,EACb,cAAc,EACd,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,6BAA6B,EAC7B,eAAe,EACf,MAAM,kBAAkB,CAAC;AAiB1B,OAAO,EACN,kBAAkB,EAClB,qBAAqB,EACrB,0BAA0B,EAC1B,sBAAsB,EACtB,qBAAqB,EACrB,4BAA4B,EAC5B,wBAAwB,EACxB,mBAAmB,EACnB,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EACpB,6BAA6B,EAC7B,MAAM,SAAS,CAAC;AAkBjB,OAAO,EACN,wBAAwB,EACxB,oBAAoB,EACpB,6BAA6B,EAC7B,yBAAyB,EACzB,0BAA0B,EAC1B,2BAA2B,EAC3B,4BAA4B,EAC5B,+BAA+B,EAC/B,MAAM,sBAAsB,CAAC;AAY9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AAErC,OAAO,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,+BAA+B,EAAE,MAAM,cAAc,CAAC"}

package/dist/schemas/mobile-auth.d.ts

@@ -0,0 +1,58 @@
+import * as z from 'zod/v4';
+export declare const mobileAuthClientSchema: z.ZodObject<{
+    name: z.ZodString;
+    platform: z.ZodEnum<{
+        ios: "ios";
+        android: "android";
+    }>;
+    redirectUris: z.ZodArray<z.ZodURL>;
+    scopes: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export declare const mobileAuthConfigSchema: z.ZodObject<{
+    clients: z.ZodRecord<z.ZodString, z.ZodObject<{
+        name: z.ZodString;
+        platform: z.ZodEnum<{
+            ios: "ios";
+            android: "android";
+        }>;
+        redirectUris: z.ZodArray<z.ZodURL>;
+        scopes: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type MobileAuthConfig = z.infer<typeof mobileAuthConfigSchema>;
+export declare const mobileAuthClientIdSchema: z.ZodString;
+export type MobileAuthClientId = z.infer<typeof mobileAuthClientIdSchema>;
+export declare const pkceChallengeSchema: z.ZodObject<{
+    codeVerifier: z.ZodString;
+    codeChallenge: z.ZodString;
+    codeChallengeMethod: z.ZodLiteral<"S256">;
+}, z.core.$strip>;
+export type PkceChallenge = z.infer<typeof pkceChallengeSchema>;
+export declare const buildMobileAuthorizeUrlOptionsSchema: z.ZodObject<{
+    authOrigin: z.ZodURL;
+    clientId: z.ZodString;
+    redirectUri: z.ZodString;
+    codeChallenge: z.ZodString;
+    state: z.ZodString;
+    scopes: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+}, z.core.$strip>;
+export type BuildMobileAuthorizeUrlOptions = z.infer<typeof buildMobileAuthorizeUrlOptionsSchema>;
+export declare const mobileTokenResponseSchema: z.ZodObject<{
+    accessToken: z.ZodString;
+    tokenType: z.ZodString;
+    expiresIn: z.ZodOptional<z.ZodNumber>;
+    refreshToken: z.ZodOptional<z.ZodString>;
+    idToken: z.ZodOptional<z.ZodString>;
+    scope: z.ZodOptional<z.ZodString>;
+}, z.core.$loose>;
+export type MobileAuthTokenResponse = z.infer<typeof mobileTokenResponseSchema>;
+export declare const exchangeMobileAuthorizationCodeOptionsSchema: z.ZodObject<{
+    authOrigin: z.ZodURL;
+    clientId: z.ZodString;
+    redirectUri: z.ZodString;
+    code: z.ZodString;
+    codeVerifier: z.ZodString;
+    fetcher: z.ZodOptional<z.ZodCustom<typeof fetch, typeof fetch>>;
+}, z.core.$strip>;
+export type ExchangeMobileAuthorizationCodeOptions = z.infer<typeof exchangeMobileAuthorizationCodeOptionsSchema>;
+//# sourceMappingURL=mobile-auth.d.ts.map

package/dist/schemas/mobile-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mobile-auth.d.ts","sourceRoot":"","sources":["../../src/schemas/mobile-auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,eAAO,MAAM,sBAAsB;;;;;;;;kBAGxB,CAAC;AACZ,eAAO,MAAM,sBAAsB;;;;;;;;;;kBAExB,CAAC;AACZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,eAAO,MAAM,wBAAwB,aAAoB,CAAC;AAC1D,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,mBAAmB;;;;iBAE9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,eAAO,MAAM,oCAAoC;;;;;;;iBAG/C,CAAC;AACH,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAClG,eAAO,MAAM,yBAAyB;;;;;;;iBAIpC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAChF,eAAO,MAAM,4CAA4C;;;;;;;iBAE+E,CAAC;AACzI,MAAM,MAAM,sCAAsC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4CAA4C,CAAC,CAAC"}

package/dist/schemas/mobile-auth.js

@@ -0,0 +1,25 @@
+import * as z from 'zod/v4';
+export const mobileAuthClientSchema = z.object({
+    name: z.string().min(1), platform: z.enum(['ios', 'android']),
+    redirectUris: z.array(z.url()).min(1), scopes: z.array(z.string().min(1))
+}).strict();
+export const mobileAuthConfigSchema = z.object({
+    clients: z.record(z.string().min(1), mobileAuthClientSchema)
+}).strict();
+export const mobileAuthClientIdSchema = z.string().min(1);
+export const pkceChallengeSchema = z.object({
+    codeVerifier: z.string(), codeChallenge: z.string(), codeChallengeMethod: z.literal('S256')
+});
+export const buildMobileAuthorizeUrlOptionsSchema = z.object({
+    authOrigin: z.url(), clientId: z.string(), redirectUri: z.string(),
+    codeChallenge: z.string(), state: z.string(), scopes: z.array(z.string()).readonly().optional()
+});
+export const mobileTokenResponseSchema = z.looseObject({
+    accessToken: z.string().min(1), tokenType: z.string().min(1),
+    expiresIn: z.number().optional(), refreshToken: z.string().optional(),
+    idToken: z.string().optional(), scope: z.string().optional()
+});
+export const exchangeMobileAuthorizationCodeOptionsSchema = buildMobileAuthorizeUrlOptionsSchema
+    .pick({ authOrigin: true, clientId: true, redirectUri: true })
+    .extend({ code: z.string(), codeVerifier: z.string(), fetcher: z.custom(value => value instanceof Function).optional() });
+//# sourceMappingURL=mobile-auth.js.map

package/dist/schemas/mobile-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mobile-auth.js","sourceRoot":"","sources":["../../src/schemas/mobile-auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC7D,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CACzE,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,sBAAsB,CAAC;CAC5D,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAG1D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CAC3F,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5D,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IAClE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC/F,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,WAAW,CAAC;IACtD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4CAA4C,GAAG,oCAAoC;KAC9F,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;KAC7D,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAe,KAAK,CAAC,EAAE,CAAC,KAAK,YAAY,QAAQ,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC"}

package/dist/schemas/mobile.config.descriptor.d.ts

@@ -0,0 +1,10 @@
+import type { ConfigManifestDescriptor } from '@vibesdotdev/config/schemas/config-manifest-descriptor';
+export declare const MOBILE_AUTH_CLIENTS: Record<string, {
+    name: string;
+    platform: "ios" | "android";
+    redirectUris: string[];
+    scopes: string[];
+}>;
+declare const descriptor: ConfigManifestDescriptor;
+export default descriptor;
+//# sourceMappingURL=mobile.config.descriptor.d.ts.map

package/dist/schemas/mobile.config.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mobile.config.descriptor.d.ts","sourceRoot":"","sources":["../../src/schemas/mobile.config.descriptor.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wDAAwD,CAAC;AAqDvG,eAAO,MAAM,mBAAmB;;;;;EAAwE,CAAC;AAEzG,QAAA,MAAM,UAAU,EAAE,wBAOjB,CAAC;AACF,eAAe,UAAU,CAAC"}

package/dist/schemas/mobile.config.descriptor.js

@@ -0,0 +1,61 @@
+import * as z from 'zod/v4';
+import { mobileAuthConfigSchema, mobileAuthClientSchema } from "./mobile-auth.js";
+const mobileAuthDefaults = {
+    'vibes-mobile-ios': {
+        name: 'Vibes Mobile (iOS)',
+        platform: 'ios',
+        redirectUris: [
+            'dev.vibes.app://auth/callback',
+            'https://vibes.dev/auth/mobile-callback'
+        ],
+        scopes: [
+            'profile:read',
+            'agents:read',
+            'agents:run',
+            'knowledge:read',
+            'knowledge:create',
+            'knowledge:update',
+            'knowledge:delete',
+            'chat:read',
+            'chat:write',
+            'project:read',
+            'project:write',
+            'notifications:read',
+            'notifications:write'
+        ]
+    },
+    'vibes-mobile-android': {
+        name: 'Vibes Mobile (Android)',
+        platform: 'android',
+        redirectUris: [
+            'dev.vibes.app://auth/callback',
+            'https://vibes.dev/auth/mobile-callback'
+        ],
+        scopes: [
+            'profile:read',
+            'agents:read',
+            'agents:run',
+            'knowledge:read',
+            'knowledge:create',
+            'knowledge:update',
+            'knowledge:delete',
+            'chat:read',
+            'chat:write',
+            'project:read',
+            'project:write',
+            'notifications:read',
+            'notifications:write'
+        ]
+    }
+};
+export const MOBILE_AUTH_CLIENTS = mobileAuthConfigSchema.parse({ clients: mobileAuthDefaults }).clients;
+const descriptor = {
+    kind: 'config/manifest', id: 'auth.mobile', name: 'Mobile Authentication',
+    description: 'Registered native mobile clients, redirect URIs and default scopes.',
+    namespace: 'auth.mobile', schema: mobileAuthConfigSchema,
+    allowedAdapters: ['config/vibes'], defaultAdapter: 'config/vibes', storedLayer: 'none',
+    scope: 'global', version: 1, tier: 'system', category: 'auth',
+    internal: false, customTables: false, fields: { clients: { ui: { label: 'Mobile Clients' }, defaults: { base: MOBILE_AUTH_CLIENTS } } }, enabled: true
+};
+export default descriptor;
+//# sourceMappingURL=mobile.config.descriptor.js.map

package/dist/schemas/mobile.config.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mobile.config.descriptor.js","sourceRoot":"","sources":["../../src/schemas/mobile.config.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAElF,MAAM,kBAAkB,GAAG;IAC1B,kBAAkB,EAAE;QACnB,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,KAAK;QACf,YAAY,EAAE;YACb,+BAA+B;YAC/B,wCAAwC;SACxC;QACD,MAAM,EAAE;YACP,cAAc;YACd,aAAa;YACb,YAAY;YACZ,gBAAgB;YAChB,kBAAkB;YAClB,kBAAkB;YAClB,kBAAkB;YAClB,WAAW;YACX,YAAY;YACZ,cAAc;YACd,eAAe;YACf,oBAAoB;YACpB,qBAAqB;SACrB;KACD;IACD,sBAAsB,EAAE;QACvB,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,SAAS;QACnB,YAAY,EAAE;YACb,+BAA+B;YAC/B,wCAAwC;SACxC;QACD,MAAM,EAAE;YACP,cAAc;YACd,aAAa;YACb,YAAY;YACZ,gBAAgB;YAChB,kBAAkB;YAClB,kBAAkB;YAClB,kBAAkB;YAClB,WAAW;YACX,YAAY;YACZ,cAAc;YACd,eAAe;YACf,oBAAoB;YACpB,qBAAqB;SACrB;KACD;CACgE,CAAC;AAGnE,MAAM,CAAC,MAAM,mBAAmB,GAAG,sBAAsB,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC,OAAO,CAAC;AAEzG,MAAM,UAAU,GAA6B;IAC5C,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,uBAAuB;IACzE,WAAW,EAAE,qEAAqE;IAClF,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,sBAAsB;IACxD,eAAe,EAAE,CAAC,cAAc,CAAC,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM;IACtF,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM;IAC7D,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI;CACtJ,CAAC;AACF,eAAe,UAAU,CAAC"}

package/dist/schemas/provider.d.ts

@@ -0,0 +1,3 @@
+export { AuthProviderTypeSchema, ApiAuthConfigSchema, DbAuthConfigSchema, AuthProviderDescriptorSchema, AuthContextSchema } from './api/provider.ts';
+export type { AuthProviderType, ApiAuthConfig, DbAuthConfig, AuthProviderDescriptor, AuthContext, AuthProviderImplementation } from './api/provider.ts';
+//# sourceMappingURL=provider.d.ts.map

package/dist/schemas/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../src/schemas/provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,4BAA4B,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACrJ,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,YAAY,EAAE,sBAAsB,EAAE,WAAW,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/schemas/provider.js

@@ -0,0 +1,2 @@
+export { AuthProviderTypeSchema, ApiAuthConfigSchema, DbAuthConfigSchema, AuthProviderDescriptorSchema, AuthContextSchema } from "./api/provider.js";
+//# sourceMappingURL=provider.js.map

package/dist/schemas/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../src/schemas/provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,4BAA4B,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC"}