@voyant-travel/auth 0.139.0 → 0.140.0

package/dist/storefront-admin-contracts.d.ts

@@ -0,0 +1,218 @@
+/**
+ * Storefront admin API contracts (provider-neutral, pure zod).
+ *
+ * These mirror the DTOs on {@link storefrontRuntimePort} without importing the
+ * DB schema, so the admin React client can validate responses and request
+ * bodies without pulling server-only modules into the browser bundle. The
+ * literal unions are kept in lockstep with the persisted schema; the runtime
+ * adapter re-normalizes every write, so these are the transport contract only.
+ */
+import { z } from "zod";
+export declare const storefrontHostingKindSchema: z.ZodEnum<{
+    external: "external";
+    cloud_site: "cloud_site";
+}>;
+export declare const storefrontApiKeyKindSchema: z.ZodEnum<{
+    secret: "secret";
+    publishable: "publishable";
+}>;
+export declare const storefrontSocialProviderSchema: z.ZodEnum<{
+    apple: "apple";
+    facebook: "facebook";
+    google: "google";
+}>;
+export declare const storefrontCustomerAuthMethodsSchema: z.ZodObject<{
+    emailCode: z.ZodBoolean;
+    emailPassword: z.ZodBoolean;
+    google: z.ZodBoolean;
+    facebook: z.ZodBoolean;
+    apple: z.ZodBoolean;
+}, z.core.$strict>;
+export declare const storefrontCustomerAccountPolicySchema: z.ZodObject<{
+    allowedKinds: z.ZodArray<z.ZodEnum<{
+        personal: "personal";
+        business: "business";
+    }>>;
+    personalSignup: z.ZodEnum<{
+        open: "open";
+        disabled: "disabled";
+    }>;
+    businessOnboarding: z.ZodEnum<{
+        open: "open";
+        disabled: "disabled";
+        request: "request";
+        "invite-only": "invite-only";
+    }>;
+}, z.core.$strict>;
+export declare const storefrontSchema: z.ZodObject<{
+    id: z.ZodString;
+    organizationId: z.ZodString;
+    name: z.ZodString;
+    slug: z.ZodString;
+    hostingKind: z.ZodEnum<{
+        external: "external";
+        cloud_site: "cloud_site";
+    }>;
+    siteId: z.ZodNullable<z.ZodString>;
+    allowedOrigins: z.ZodArray<z.ZodString>;
+    methods: z.ZodObject<{
+        emailCode: z.ZodBoolean;
+        emailPassword: z.ZodBoolean;
+        google: z.ZodBoolean;
+        facebook: z.ZodBoolean;
+        apple: z.ZodBoolean;
+    }, z.core.$strict>;
+    accountPolicy: z.ZodObject<{
+        allowedKinds: z.ZodArray<z.ZodEnum<{
+            personal: "personal";
+            business: "business";
+        }>>;
+        personalSignup: z.ZodEnum<{
+            open: "open";
+            disabled: "disabled";
+        }>;
+        businessOnboarding: z.ZodEnum<{
+            open: "open";
+            disabled: "disabled";
+            request: "request";
+            "invite-only": "invite-only";
+        }>;
+    }, z.core.$strict>;
+    hostOnlyCookies: z.ZodBoolean;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strict>;
+export declare const storefrontApiKeySchema: z.ZodObject<{
+    id: z.ZodString;
+    storefrontId: z.ZodString;
+    kind: z.ZodEnum<{
+        secret: "secret";
+        publishable: "publishable";
+    }>;
+    tokenPreview: z.ZodString;
+    name: z.ZodNullable<z.ZodString>;
+    lastUsedAt: z.ZodNullable<z.ZodString>;
+    revokedAt: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodString;
+}, z.core.$strict>;
+/** Issuance/rotation payload: the plaintext token is present exactly once. */
+export declare const issuedStorefrontApiKeySchema: z.ZodObject<{
+    id: z.ZodString;
+    storefrontId: z.ZodString;
+    kind: z.ZodEnum<{
+        secret: "secret";
+        publishable: "publishable";
+    }>;
+    tokenPreview: z.ZodString;
+    name: z.ZodNullable<z.ZodString>;
+    lastUsedAt: z.ZodNullable<z.ZodString>;
+    revokedAt: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodString;
+    token: z.ZodString;
+}, z.core.$strict>;
+export declare const storefrontProviderCredentialStatusSchema: z.ZodObject<{
+    provider: z.ZodEnum<{
+        apple: "apple";
+        facebook: "facebook";
+        google: "google";
+    }>;
+    configured: z.ZodBoolean;
+    updatedAt: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+/**
+ * Operator-facing capability signal. `businessAccounts` reflects whether the
+ * deployment wires the customer business-account onboarding runtime; the
+ * business buyer-account controls are disabled when it is false.
+ */
+export declare const storefrontAdminCapabilitiesSchema: z.ZodObject<{
+    businessAccounts: z.ZodBoolean;
+    manageProviders: z.ZodBoolean;
+}, z.core.$strict>;
+export declare const createStorefrontInputSchema: z.ZodObject<{
+    name: z.ZodString;
+    slug: z.ZodString;
+    hostingKind: z.ZodEnum<{
+        external: "external";
+        cloud_site: "cloud_site";
+    }>;
+    siteId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    allowedOrigins: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    methods: z.ZodObject<{
+        emailCode: z.ZodBoolean;
+        emailPassword: z.ZodBoolean;
+        google: z.ZodBoolean;
+        facebook: z.ZodBoolean;
+        apple: z.ZodBoolean;
+    }, z.core.$strict>;
+    accountPolicy: z.ZodOptional<z.ZodObject<{
+        allowedKinds: z.ZodArray<z.ZodEnum<{
+            personal: "personal";
+            business: "business";
+        }>>;
+        personalSignup: z.ZodEnum<{
+            open: "open";
+            disabled: "disabled";
+        }>;
+        businessOnboarding: z.ZodEnum<{
+            open: "open";
+            disabled: "disabled";
+            request: "request";
+            "invite-only": "invite-only";
+        }>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const updateStorefrontInputSchema: z.ZodObject<{
+    name: z.ZodString;
+}, z.core.$strict>;
+export declare const setStorefrontAllowedOriginsInputSchema: z.ZodObject<{
+    origins: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export declare const issueStorefrontApiKeyInputSchema: z.ZodObject<{
+    kind: z.ZodEnum<{
+        secret: "secret";
+        publishable: "publishable";
+    }>;
+    name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strict>;
+export declare const updateStorefrontAccountPolicyInputSchema: z.ZodObject<{
+    allowedKinds: z.ZodArray<z.ZodEnum<{
+        personal: "personal";
+        business: "business";
+    }>>;
+    personalSignup: z.ZodEnum<{
+        open: "open";
+        disabled: "disabled";
+    }>;
+    businessOnboarding: z.ZodEnum<{
+        open: "open";
+        disabled: "disabled";
+        request: "request";
+        "invite-only": "invite-only";
+    }>;
+}, z.core.$strict>;
+export declare const updateStorefrontMethodsInputSchema: z.ZodObject<{
+    emailCode: z.ZodBoolean;
+    emailPassword: z.ZodBoolean;
+    google: z.ZodBoolean;
+    facebook: z.ZodBoolean;
+    apple: z.ZodBoolean;
+}, z.core.$strict>;
+export declare const putStorefrontProviderCredentialInputSchema: z.ZodObject<{
+    clientId: z.ZodString;
+    clientSecret: z.ZodString;
+}, z.core.$strict>;
+export type StorefrontHostingKind = z.infer<typeof storefrontHostingKindSchema>;
+export type StorefrontApiKeyKind = z.infer<typeof storefrontApiKeyKindSchema>;
+export type StorefrontSocialProvider = z.infer<typeof storefrontSocialProviderSchema>;
+export type StorefrontCustomerAuthMethods = z.infer<typeof storefrontCustomerAuthMethodsSchema>;
+export type StorefrontCustomerAccountPolicy = z.infer<typeof storefrontCustomerAccountPolicySchema>;
+export type StorefrontDto = z.infer<typeof storefrontSchema>;
+export type StorefrontApiKeyDto = z.infer<typeof storefrontApiKeySchema>;
+export type IssuedStorefrontApiKeyDto = z.infer<typeof issuedStorefrontApiKeySchema>;
+export type StorefrontProviderCredentialStatusDto = z.infer<typeof storefrontProviderCredentialStatusSchema>;
+export type StorefrontAdminCapabilitiesDto = z.infer<typeof storefrontAdminCapabilitiesSchema>;
+export type CreateStorefrontInput = z.infer<typeof createStorefrontInputSchema>;
+export type UpdateStorefrontInput = z.infer<typeof updateStorefrontInputSchema>;
+export type SetStorefrontAllowedOriginsInput = z.infer<typeof setStorefrontAllowedOriginsInputSchema>;
+export type IssueStorefrontApiKeyInput = z.infer<typeof issueStorefrontApiKeyInputSchema>;
+export type PutStorefrontProviderCredentialInput = z.infer<typeof putStorefrontProviderCredentialInputSchema>;

package/dist/storefront-admin-contracts.js

@@ -0,0 +1,111 @@
+/**
+ * Storefront admin API contracts (provider-neutral, pure zod).
+ *
+ * These mirror the DTOs on {@link storefrontRuntimePort} without importing the
+ * DB schema, so the admin React client can validate responses and request
+ * bodies without pulling server-only modules into the browser bundle. The
+ * literal unions are kept in lockstep with the persisted schema; the runtime
+ * adapter re-normalizes every write, so these are the transport contract only.
+ */
+import { z } from "zod";
+export const storefrontHostingKindSchema = z.enum(["cloud_site", "external"]);
+export const storefrontApiKeyKindSchema = z.enum(["publishable", "secret"]);
+export const storefrontSocialProviderSchema = z.enum(["google", "facebook", "apple"]);
+export const storefrontCustomerAuthMethodsSchema = z
+    .object({
+    emailCode: z.boolean(),
+    emailPassword: z.boolean(),
+    google: z.boolean(),
+    facebook: z.boolean(),
+    apple: z.boolean(),
+})
+    .strict();
+export const storefrontCustomerAccountPolicySchema = z
+    .object({
+    allowedKinds: z.array(z.enum(["personal", "business"])).min(1),
+    personalSignup: z.enum(["open", "disabled"]),
+    businessOnboarding: z.enum(["disabled", "open", "request", "invite-only"]),
+})
+    .strict();
+export const storefrontSchema = z
+    .object({
+    id: z.string(),
+    organizationId: z.string(),
+    name: z.string(),
+    slug: z.string(),
+    hostingKind: storefrontHostingKindSchema,
+    siteId: z.string().nullable(),
+    allowedOrigins: z.array(z.string()),
+    methods: storefrontCustomerAuthMethodsSchema,
+    accountPolicy: storefrontCustomerAccountPolicySchema,
+    hostOnlyCookies: z.boolean(),
+    createdAt: z.string(),
+    updatedAt: z.string(),
+})
+    .strict();
+export const storefrontApiKeySchema = z
+    .object({
+    id: z.string(),
+    storefrontId: z.string(),
+    kind: storefrontApiKeyKindSchema,
+    tokenPreview: z.string(),
+    name: z.string().nullable(),
+    lastUsedAt: z.string().nullable(),
+    revokedAt: z.string().nullable(),
+    createdAt: z.string(),
+})
+    .strict();
+/** Issuance/rotation payload: the plaintext token is present exactly once. */
+export const issuedStorefrontApiKeySchema = storefrontApiKeySchema
+    .extend({ token: z.string() })
+    .strict();
+export const storefrontProviderCredentialStatusSchema = z
+    .object({
+    provider: storefrontSocialProviderSchema,
+    configured: z.boolean(),
+    updatedAt: z.string().nullable(),
+})
+    .strict();
+/**
+ * Operator-facing capability signal. `businessAccounts` reflects whether the
+ * deployment wires the customer business-account onboarding runtime; the
+ * business buyer-account controls are disabled when it is false.
+ */
+export const storefrontAdminCapabilitiesSchema = z
+    .object({
+    businessAccounts: z.boolean(),
+    manageProviders: z.boolean(),
+})
+    .strict();
+export const createStorefrontInputSchema = z
+    .object({
+    name: z.string().trim().min(1).max(200),
+    slug: z.string().trim().min(1).max(120),
+    hostingKind: storefrontHostingKindSchema,
+    siteId: z.string().trim().min(1).nullable().optional(),
+    allowedOrigins: z.array(z.string().trim().min(1)).default([]),
+    methods: storefrontCustomerAuthMethodsSchema,
+    accountPolicy: storefrontCustomerAccountPolicySchema.optional(),
+})
+    .strict();
+export const updateStorefrontInputSchema = z
+    .object({ name: z.string().trim().min(1).max(200) })
+    .strict();
+export const setStorefrontAllowedOriginsInputSchema = z
+    .object({ origins: z.array(z.string().trim().min(1)) })
+    .strict();
+export const issueStorefrontApiKeyInputSchema = z
+    .object({
+    kind: storefrontApiKeyKindSchema,
+    name: z.string().trim().min(1).max(200).nullable().optional(),
+})
+    .strict();
+export const updateStorefrontAccountPolicyInputSchema = storefrontCustomerAccountPolicySchema;
+export const updateStorefrontMethodsInputSchema = storefrontCustomerAuthMethodsSchema;
+export const putStorefrontProviderCredentialInputSchema = z
+    .object({
+    clientId: z.string().trim().min(1).max(16_384),
+    clientSecret: z.string().trim().min(1).max(16_384),
+})
+    .strict();
+//# sourceMappingURL=storefront-admin-contracts.js.map

package/dist/storefront-admin-contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storefront-admin-contracts.js","sourceRoot":"","sources":["../src/storefront-admin-contracts.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAA;AAC7E,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAA;AAC3E,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;AAErF,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC;KACjD,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE;IAC1B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;CACnB,CAAC;KACD,MAAM,EAAE,CAAA;AAEX,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC;KACnD,MAAM,CAAC;IACN,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9D,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC5C,kBAAkB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;CAC3E,CAAC;KACD,MAAM,EAAE,CAAA;AAEX,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,2BAA2B;IACxC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACnC,OAAO,EAAE,mCAAmC;IAC5C,aAAa,EAAE,qCAAqC;IACpD,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC;KACD,MAAM,EAAE,CAAA;AAEX,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,IAAI,EAAE,0BAA0B;IAChC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC;KACD,MAAM,EAAE,CAAA;AAEX,8EAA8E;AAC9E,MAAM,CAAC,MAAM,4BAA4B,GAAG,sBAAsB;KAC/D,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;KAC7B,MAAM,EAAE,CAAA;AAEX,MAAM,CAAC,MAAM,wCAAwC,GAAG,CAAC;KACtD,MAAM,CAAC;IACN,QAAQ,EAAE,8BAA8B;IACxC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;IACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC;KACD,MAAM,EAAE,CAAA;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC;KAC/C,MAAM,CAAC;IACN,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC7B,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;CAC7B,CAAC;KACD,MAAM,EAAE,CAAA;AAEX,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,WAAW,EAAE,2BAA2B;IACxC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtD,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7D,OAAO,EAAE,mCAAmC;IAC5C,aAAa,EAAE,qCAAqC,CAAC,QAAQ,EAAE;CAChE,CAAC;KACD,MAAM,EAAE,CAAA;AAEX,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;KACnD,MAAM,EAAE,CAAA;AAEX,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC;KACpD,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,MAAM,EAAE,CAAA;AAEX,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC;KAC9C,MAAM,CAAC;IACN,IAAI,EAAE,0BAA0B;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC9D,CAAC;KACD,MAAM,EAAE,CAAA;AAEX,MAAM,CAAC,MAAM,wCAAwC,GAAG,qCAAqC,CAAA;AAC7F,MAAM,CAAC,MAAM,kCAAkC,GAAG,mCAAmC,CAAA;AAErF,MAAM,CAAC,MAAM,0CAA0C,GAAG,CAAC;KACxD,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;IAC9C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;CACnD,CAAC;KACD,MAAM,EAAE,CAAA","sourcesContent":["/**\n * Storefront admin API contracts (provider-neutral, pure zod).\n *\n * These mirror the DTOs on {@link storefrontRuntimePort} without importing the\n * DB schema, so the admin React client can validate responses and request\n * bodies without pulling server-only modules into the browser bundle. The\n * literal unions are kept in lockstep with the persisted schema; the runtime\n * adapter re-normalizes every write, so these are the transport contract only.\n */\nimport { z } from \"zod\"\n\nexport const storefrontHostingKindSchema = z.enum([\"cloud_site\", \"external\"])\nexport const storefrontApiKeyKindSchema = z.enum([\"publishable\", \"secret\"])\nexport const storefrontSocialProviderSchema = z.enum([\"google\", \"facebook\", \"apple\"])\n\nexport const storefrontCustomerAuthMethodsSchema = z\n  .object({\n    emailCode: z.boolean(),\n    emailPassword: z.boolean(),\n    google: z.boolean(),\n    facebook: z.boolean(),\n    apple: z.boolean(),\n  })\n  .strict()\n\nexport const storefrontCustomerAccountPolicySchema = z\n  .object({\n    allowedKinds: z.array(z.enum([\"personal\", \"business\"])).min(1),\n    personalSignup: z.enum([\"open\", \"disabled\"]),\n    businessOnboarding: z.enum([\"disabled\", \"open\", \"request\", \"invite-only\"]),\n  })\n  .strict()\n\nexport const storefrontSchema = z\n  .object({\n    id: z.string(),\n    organizationId: z.string(),\n    name: z.string(),\n    slug: z.string(),\n    hostingKind: storefrontHostingKindSchema,\n    siteId: z.string().nullable(),\n    allowedOrigins: z.array(z.string()),\n    methods: storefrontCustomerAuthMethodsSchema,\n    accountPolicy: storefrontCustomerAccountPolicySchema,\n    hostOnlyCookies: z.boolean(),\n    createdAt: z.string(),\n    updatedAt: z.string(),\n  })\n  .strict()\n\nexport const storefrontApiKeySchema = z\n  .object({\n    id: z.string(),\n    storefrontId: z.string(),\n    kind: storefrontApiKeyKindSchema,\n    tokenPreview: z.string(),\n    name: z.string().nullable(),\n    lastUsedAt: z.string().nullable(),\n    revokedAt: z.string().nullable(),\n    createdAt: z.string(),\n  })\n  .strict()\n\n/** Issuance/rotation payload: the plaintext token is present exactly once. */\nexport const issuedStorefrontApiKeySchema = storefrontApiKeySchema\n  .extend({ token: z.string() })\n  .strict()\n\nexport const storefrontProviderCredentialStatusSchema = z\n  .object({\n    provider: storefrontSocialProviderSchema,\n    configured: z.boolean(),\n    updatedAt: z.string().nullable(),\n  })\n  .strict()\n\n/**\n * Operator-facing capability signal. `businessAccounts` reflects whether the\n * deployment wires the customer business-account onboarding runtime; the\n * business buyer-account controls are disabled when it is false.\n */\nexport const storefrontAdminCapabilitiesSchema = z\n  .object({\n    businessAccounts: z.boolean(),\n    manageProviders: z.boolean(),\n  })\n  .strict()\n\nexport const createStorefrontInputSchema = z\n  .object({\n    name: z.string().trim().min(1).max(200),\n    slug: z.string().trim().min(1).max(120),\n    hostingKind: storefrontHostingKindSchema,\n    siteId: z.string().trim().min(1).nullable().optional(),\n    allowedOrigins: z.array(z.string().trim().min(1)).default([]),\n    methods: storefrontCustomerAuthMethodsSchema,\n    accountPolicy: storefrontCustomerAccountPolicySchema.optional(),\n  })\n  .strict()\n\nexport const updateStorefrontInputSchema = z\n  .object({ name: z.string().trim().min(1).max(200) })\n  .strict()\n\nexport const setStorefrontAllowedOriginsInputSchema = z\n  .object({ origins: z.array(z.string().trim().min(1)) })\n  .strict()\n\nexport const issueStorefrontApiKeyInputSchema = z\n  .object({\n    kind: storefrontApiKeyKindSchema,\n    name: z.string().trim().min(1).max(200).nullable().optional(),\n  })\n  .strict()\n\nexport const updateStorefrontAccountPolicyInputSchema = storefrontCustomerAccountPolicySchema\nexport const updateStorefrontMethodsInputSchema = storefrontCustomerAuthMethodsSchema\n\nexport const putStorefrontProviderCredentialInputSchema = z\n  .object({\n    clientId: z.string().trim().min(1).max(16_384),\n    clientSecret: z.string().trim().min(1).max(16_384),\n  })\n  .strict()\n\nexport type StorefrontHostingKind = z.infer<typeof storefrontHostingKindSchema>\nexport type StorefrontApiKeyKind = z.infer<typeof storefrontApiKeyKindSchema>\nexport type StorefrontSocialProvider = z.infer<typeof storefrontSocialProviderSchema>\nexport type StorefrontCustomerAuthMethods = z.infer<typeof storefrontCustomerAuthMethodsSchema>\nexport type StorefrontCustomerAccountPolicy = z.infer<typeof storefrontCustomerAccountPolicySchema>\nexport type StorefrontDto = z.infer<typeof storefrontSchema>\nexport type StorefrontApiKeyDto = z.infer<typeof storefrontApiKeySchema>\nexport type IssuedStorefrontApiKeyDto = z.infer<typeof issuedStorefrontApiKeySchema>\nexport type StorefrontProviderCredentialStatusDto = z.infer<\n  typeof storefrontProviderCredentialStatusSchema\n>\nexport type StorefrontAdminCapabilitiesDto = z.infer<typeof storefrontAdminCapabilitiesSchema>\nexport type CreateStorefrontInput = z.infer<typeof createStorefrontInputSchema>\nexport type UpdateStorefrontInput = z.infer<typeof updateStorefrontInputSchema>\nexport type SetStorefrontAllowedOriginsInput = z.infer<\n  typeof setStorefrontAllowedOriginsInputSchema\n>\nexport type IssueStorefrontApiKeyInput = z.infer<typeof issueStorefrontApiKeyInputSchema>\nexport type PutStorefrontProviderCredentialInput = z.infer<\n  typeof putStorefrontProviderCredentialInputSchema\n>\n"]}

package/dist/storefront-graph-runtime.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Selected-graph runtime for the storefront admin surface. The business
+ * buyer-account capability is derived from whether the deployment also wires
+ * the customer business-account onboarding runtime, so the admin UI can gate
+ * the org-account controls on a real runtime signal rather than a static flag.
+ */
+export declare const createStorefrontVoyantRuntime: import("@voyant-travel/core/project").VoyantGraphRuntimeFactory<{
+    module: {
+        name: string;
+    };
+    adminRoutes: import("@hono/zod-openapi").OpenAPIHono<{
+        Bindings: Record<string, unknown>;
+        Variables: {
+            userId?: string;
+            organizationId?: string | null;
+            scopes?: string[] | null;
+            db: import("@voyant-travel/hono").VoyantDb;
+        };
+    }, {}, "/">;
+}>;

package/dist/storefront-graph-runtime.js

@@ -0,0 +1,17 @@
+import { defineGraphRuntimeFactory } from "@voyant-travel/core/project";
+import { customerBusinessAccountOnboardingRuntimePort } from "./customer-business-onboarding-runtime-port.js";
+import { createStorefrontAdminRoutes } from "./storefront-routes.js";
+import { storefrontRuntimePort } from "./storefront-runtime-port.js";
+/**
+ * Selected-graph runtime for the storefront admin surface. The business
+ * buyer-account capability is derived from whether the deployment also wires
+ * the customer business-account onboarding runtime, so the admin UI can gate
+ * the org-account controls on a real runtime signal rather than a static flag.
+ */
+export const createStorefrontVoyantRuntime = defineGraphRuntimeFactory(async ({ getPort, hasPort }) => ({
+    module: { name: "storefronts" },
+    adminRoutes: createStorefrontAdminRoutes(await getPort(storefrontRuntimePort), {
+        businessAccounts: hasPort(customerBusinessAccountOnboardingRuntimePort),
+    }),
+}));
+//# sourceMappingURL=storefront-graph-runtime.js.map

package/dist/storefront-graph-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storefront-graph-runtime.js","sourceRoot":"","sources":["../src/storefront-graph-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAA;AAEvE,OAAO,EAAE,4CAA4C,EAAE,MAAM,gDAAgD,CAAA;AAC7G,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAA;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAA;AAEpE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,yBAAyB,CACpE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/B,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;IAC/B,WAAW,EAAE,2BAA2B,CAAC,MAAM,OAAO,CAAC,qBAAqB,CAAC,EAAE;QAC7E,gBAAgB,EAAE,OAAO,CAAC,4CAA4C,CAAC;KACxE,CAAC;CACH,CAAC,CACH,CAAA","sourcesContent":["import { defineGraphRuntimeFactory } from \"@voyant-travel/core/project\"\n\nimport { customerBusinessAccountOnboardingRuntimePort } from \"./customer-business-onboarding-runtime-port.js\"\nimport { createStorefrontAdminRoutes } from \"./storefront-routes.js\"\nimport { storefrontRuntimePort } from \"./storefront-runtime-port.js\"\n\n/**\n * Selected-graph runtime for the storefront admin surface. The business\n * buyer-account capability is derived from whether the deployment also wires\n * the customer business-account onboarding runtime, so the admin UI can gate\n * the org-account controls on a real runtime signal rather than a static flag.\n */\nexport const createStorefrontVoyantRuntime = defineGraphRuntimeFactory(\n  async ({ getPort, hasPort }) => ({\n    module: { name: \"storefronts\" },\n    adminRoutes: createStorefrontAdminRoutes(await getPort(storefrontRuntimePort), {\n      businessAccounts: hasPort(customerBusinessAccountOnboardingRuntimePort),\n    }),\n  }),\n)\n"]}

package/dist/storefront-routes.d.ts

@@ -0,0 +1,18 @@
+import { OpenAPIHono } from "@hono/zod-openapi";
+import { type VoyantDb } from "@voyant-travel/hono";
+import type { StorefrontRuntimeProvider } from "./storefront-runtime-port.js";
+type StorefrontEnv = {
+    Bindings: Record<string, unknown>;
+    Variables: {
+        userId?: string;
+        organizationId?: string | null;
+        scopes?: string[] | null;
+        db: VoyantDb;
+    };
+};
+export interface StorefrontAdminRouteOptions {
+    /** Whether the deployment supports business (organization) buyer accounts. */
+    businessAccounts: boolean;
+}
+export declare function createStorefrontAdminRoutes(runtime: StorefrontRuntimeProvider, options: StorefrontAdminRouteOptions): OpenAPIHono<StorefrontEnv, {}, "/">;
+export {};