@voyant-travel/auth 0.124.2 → 0.125.0

package/openapi/admin/team.json

@@ -0,0 +1,171 @@
+{
+  "openapi": "3.1.0",
+  "info": {
+    "title": "Voyant Auth Team Admin API",
+    "version": "1.0.0"
+  },
+  "paths": {
+    "/v1/admin/team/members": {
+      "get": {
+        "operationId": "listTeamMembers",
+        "summary": "List team members",
+        "tags": ["Team"],
+        "x-voyant-api-id": "@voyant-travel/auth#team.api.admin",
+        "responses": {
+          "200": { "description": "The deployment team members." },
+          "401": { "description": "The caller is not authenticated." },
+          "404": { "description": "Cloud team management is unavailable." }
+        }
+      }
+    },
+    "/v1/admin/team/roles": {
+      "get": {
+        "operationId": "listTeamRoles",
+        "summary": "List team roles",
+        "tags": ["Team"],
+        "x-voyant-api-id": "@voyant-travel/auth#team.api.admin",
+        "responses": {
+          "200": { "description": "The available team roles." },
+          "401": { "description": "The caller is not authenticated." },
+          "404": { "description": "Cloud team management is unavailable." }
+        }
+      }
+    },
+    "/v1/admin/team/invitations": {
+      "get": {
+        "operationId": "listTeamInvitations",
+        "summary": "List team invitations",
+        "tags": ["Team"],
+        "x-voyant-api-id": "@voyant-travel/auth#team.api.admin",
+        "responses": {
+          "200": { "description": "The outstanding team invitations." },
+          "401": { "description": "The caller is not authenticated." }
+        }
+      },
+      "post": {
+        "operationId": "createTeamInvitation",
+        "summary": "Invite a team member",
+        "tags": ["Team"],
+        "x-voyant-api-id": "@voyant-travel/auth#team.api.admin",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "required": ["email"],
+                "properties": {
+                  "email": { "type": "string", "format": "email" },
+                  "roleSlug": {
+                    "type": ["string", "null"],
+                    "minLength": 1,
+                    "maxLength": 120
+                  },
+                  "expiresInDays": {
+                    "type": "integer",
+                    "minimum": 1,
+                    "maximum": 30
+                  }
+                }
+              }
+            }
+          }
+        },
+        "responses": {
+          "201": { "description": "The created team invitation." },
+          "401": { "description": "The caller is not authenticated." }
+        }
+      }
+    },
+    "/v1/admin/team/invitations/{invitationId}": {
+      "delete": {
+        "operationId": "revokeTeamInvitation",
+        "summary": "Revoke a team invitation",
+        "tags": ["Team"],
+        "x-voyant-api-id": "@voyant-travel/auth#team.api.admin",
+        "parameters": [
+          {
+            "name": "invitationId",
+            "in": "path",
+            "required": true,
+            "schema": { "type": "string" }
+          }
+        ],
+        "responses": {
+          "204": { "description": "The invitation was revoked." },
+          "401": { "description": "The caller is not authenticated." }
+        }
+      }
+    },
+    "/v1/admin/team/members/{membershipId}/access": {
+      "put": {
+        "operationId": "setTeamMemberAccess",
+        "summary": "Set team member access",
+        "tags": ["Team"],
+        "x-voyant-api-id": "@voyant-travel/auth#team.api.admin",
+        "parameters": [
+          {
+            "name": "membershipId",
+            "in": "path",
+            "required": true,
+            "schema": { "type": "string" }
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "required": ["hasAccess"],
+                "properties": { "hasAccess": { "type": "boolean" } }
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": { "description": "The updated team member." },
+          "401": { "description": "The caller is not authenticated." }
+        }
+      }
+    },
+    "/v1/admin/team/members/{membershipId}/permissions": {
+      "put": {
+        "operationId": "setTeamMemberPermissions",
+        "summary": "Set team member permissions",
+        "tags": ["Team"],
+        "x-voyant-api-id": "@voyant-travel/auth#team.api.admin",
+        "parameters": [
+          {
+            "name": "membershipId",
+            "in": "path",
+            "required": true,
+            "schema": { "type": "string" }
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "required": ["permissions"],
+                "properties": {
+                  "permissions": {
+                    "type": "array",
+                    "maxItems": 200,
+                    "items": { "type": "string", "minLength": 1, "maxLength": 120 }
+                  }
+                }
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": { "description": "The updated team member." },
+          "401": { "description": "The caller is not authenticated." }
+        }
+      }
+    }
+  }
+}

package/openapi/storefront/invitations.json

@@ -0,0 +1,87 @@
+{
+  "openapi": "3.1.0",
+  "info": {
+    "title": "Voyant Auth Invitations Public API",
+    "version": "1.0.0"
+  },
+  "paths": {
+    "/v1/public/invitations/{token}": {
+      "get": {
+        "operationId": "inspectAuthInvitation",
+        "summary": "Inspect a user invitation",
+        "tags": ["Auth invitations"],
+        "x-voyant-api-id": "@voyant-travel/auth#invitations.api.public",
+        "parameters": [
+          {
+            "name": "token",
+            "in": "path",
+            "required": true,
+            "schema": { "type": "string" }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "The invitation is valid."
+          },
+          "404": {
+            "description": "The invitation was not found."
+          },
+          "410": {
+            "description": "The invitation is expired or redeemed."
+          }
+        }
+      }
+    },
+    "/v1/public/invitations/{token}/redeem": {
+      "post": {
+        "operationId": "redeemAuthInvitation",
+        "summary": "Redeem a user invitation",
+        "tags": ["Auth invitations"],
+        "x-voyant-api-id": "@voyant-travel/auth#invitations.api.public",
+        "parameters": [
+          {
+            "name": "token",
+            "in": "path",
+            "required": true,
+            "schema": { "type": "string" }
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "required": ["name", "password"],
+                "properties": {
+                  "name": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 200
+                  },
+                  "password": {
+                    "type": "string",
+                    "minLength": 8,
+                    "maxLength": 128,
+                    "writeOnly": true
+                  }
+                }
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "The newly created user."
+          },
+          "409": {
+            "description": "A user already exists for the invitation email."
+          },
+          "410": {
+            "description": "The invitation is invalid, expired, or redeemed."
+          }
+        }
+      }
+    }
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voyant-travel/auth",
-  "version": "0.124.2",
+  "version": "0.125.0",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -32,6 +32,11 @@
       "import": "./dist/backend.js",
       "default": "./dist/backend.js"
     },
+    "./operator-node-runtime": {
+      "types": "./dist/operator-node-runtime.d.ts",
+      "import": "./dist/operator-node-runtime.js",
+      "default": "./dist/operator-node-runtime.js"
+    },
     "./cloud-broker": {
       "types": "./dist/cloud-broker.d.ts",
       "import": "./dist/cloud-broker.js",
@@ -51,27 +56,79 @@
       "types": "./dist/permissions.d.ts",
       "import": "./dist/permissions.js",
       "default": "./dist/permissions.js"
+    },
+    "./identity-access-runtime-port": {
+      "types": "./dist/identity-access-runtime-port.d.ts",
+      "import": "./dist/identity-access-runtime-port.js",
+      "default": "./dist/identity-access-runtime-port.js"
+    },
+    "./identity-access-graph-runtime": {
+      "types": "./dist/identity-access-graph-runtime.d.ts",
+      "import": "./dist/identity-access-graph-runtime.js",
+      "default": "./dist/identity-access-graph-runtime.js"
+    },
+    "./runtime-contributor": {
+      "types": "./dist/runtime-contributor.d.ts",
+      "import": "./dist/runtime-contributor.js",
+      "default": "./dist/runtime-contributor.js"
+    },
+    "./openapi/admin/invitations": "./openapi/admin/invitations.json",
+    "./openapi/admin/team": "./openapi/admin/team.json",
+    "./openapi/storefront/invitations": "./openapi/storefront/invitations.json",
+    "./voyant": {
+      "types": "./dist/voyant.d.ts",
+      "import": "./dist/voyant.js",
+      "default": "./dist/voyant.js"
     }
   },
   "publishConfig": {
     "access": "public"
   },
   "files": [
-    "dist"
+    "dist",
+    "openapi"
   ],
   "dependencies": {
     "@better-auth/api-key": "1.6.23",
+    "@hono/zod-openapi": "^1.4.0",
     "better-auth": "1.6.23",
     "drizzle-orm": "^0.45.2",
-    "@voyant-travel/db": "^0.112.0",
-    "@voyant-travel/types": "^0.107.3",
-    "@voyant-travel/utils": "^0.106.0"
+    "hono": "^4.12.27",
+    "zod": "^4.4.3",
+    "@voyant-travel/core": "^0.118.0",
+    "@voyant-travel/db": "^0.112.2",
+    "@voyant-travel/hono": "^0.125.0",
+    "@voyant-travel/types": "^0.108.0",
+    "@voyant-travel/utils": "^0.106.1"
   },
   "devDependencies": {
     "@types/node": "^25.5.2",
     "typescript": "^6.0.3",
     "@voyant-travel/voyant-typescript-config": "^0.1.0"
   },
+  "voyant": {
+    "schemaVersion": "voyant.package.v1",
+    "kind": "module",
+    "manifest": "./voyant",
+    "runtime": {
+      "entry": "./runtime-contributor",
+      "export": "createAuthRuntimePortContribution"
+    },
+    "compatibleWith": {
+      "framework": ">=0.26.0",
+      "targets": [
+        "node"
+      ],
+      "modes": [
+        "local",
+        "managed-cloud",
+        "self-hosted"
+      ]
+    },
+    "requiresSchemas": [
+      "@voyant-travel/db"
+    ]
+  },
   "scripts": {
     "build": "tsc -p tsconfig.build.json",
     "clean": "rm -rf dist tsconfig.tsbuildinfo",