@voyant-travel/db 0.108.0

package/dist/schema/iam/index.js

@@ -0,0 +1,8 @@
+export * from "./apikey.js";
+export * from "./auth.js";
+export * from "./cloud_auth.js";
+export * from "./invitations.js";
+export * from "./kms.js";
+export * from "./roles.js";
+export * from "./user_profiles.js";
+//# sourceMappingURL=index.js.map

package/dist/schema/iam/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/schema/iam/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,iBAAiB,CAAA;AAC/B,cAAc,kBAAkB,CAAA;AAChC,cAAc,UAAU,CAAA;AACxB,cAAc,YAAY,CAAA;AAC1B,cAAc,oBAAoB,CAAA"}

package/dist/schema/iam/invitations.d.ts

@@ -0,0 +1,173 @@
+/**
+ * Admin-issued user invitations.
+ *
+ * Single-tenant sign-up is disabled at the Better Auth layer; new staff users
+ * only enter the system by redeeming an invitation issued by an existing
+ * admin. The raw token lives only in the invite email/link; we store its
+ * SHA-256 hash so a DB leak can't grant access.
+ */
+export declare const userInvitationsTable: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "user_invitations";
+    schema: undefined;
+    columns: {
+        id: import("drizzle-orm/pg-core").PgColumn<{
+            name: string;
+            tableName: "user_invitations";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: true;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        email: import("drizzle-orm/pg-core").PgColumn<{
+            name: "email";
+            tableName: "user_invitations";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        tokenHash: import("drizzle-orm/pg-core").PgColumn<{
+            name: "token_hash";
+            tableName: "user_invitations";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        expiresAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "expires_at";
+            tableName: "user_invitations";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdBy: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_by";
+            tableName: "user_invitations";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        redeemedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "redeemed_at";
+            tableName: "user_invitations";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        redeemedByUserId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "redeemed_by_user_id";
+            tableName: "user_invitations";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        metadata: import("drizzle-orm/pg-core").PgColumn<{
+            name: "metadata";
+            tableName: "user_invitations";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: Record<string, unknown>;
+            driverParam: unknown;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: Record<string, unknown>;
+        }>;
+        createdAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_at";
+            tableName: "user_invitations";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "pg";
+}>;
+export type SelectUserInvitation = typeof userInvitationsTable.$inferSelect;
+export type InsertUserInvitation = typeof userInvitationsTable.$inferInsert;
+//# sourceMappingURL=invitations.d.ts.map

package/dist/schema/iam/invitations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitations.d.ts","sourceRoot":"","sources":["../../../src/schema/iam/invitations.ts"],"names":[],"mappings":"AAIA;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmBhC,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,YAAY,CAAA;AAC3E,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,YAAY,CAAA"}

package/dist/schema/iam/invitations.js

@@ -0,0 +1,27 @@
+import { index, jsonb, pgTable, text, timestamp, uniqueIndex } from "drizzle-orm/pg-core";
+import { typeId } from "../../lib/typeid-column.js";
+/**
+ * Admin-issued user invitations.
+ *
+ * Single-tenant sign-up is disabled at the Better Auth layer; new staff users
+ * only enter the system by redeeming an invitation issued by an existing
+ * admin. The raw token lives only in the invite email/link; we store its
+ * SHA-256 hash so a DB leak can't grant access.
+ */
+export const userInvitationsTable = pgTable("user_invitations", {
+    id: typeId("user_invitations"),
+    email: text("email").notNull(),
+    tokenHash: text("token_hash").notNull(),
+    expiresAt: timestamp("expires_at", { withTimezone: true }).notNull(),
+    createdBy: text("created_by").notNull(),
+    redeemedAt: timestamp("redeemed_at", { withTimezone: true }),
+    redeemedByUserId: text("redeemed_by_user_id"),
+    metadata: jsonb("metadata").$type(),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+}, (t) => [
+    uniqueIndex("uidx_user_invitations_token_hash").on(t.tokenHash),
+    index("idx_user_invitations_email").on(t.email),
+    index("idx_user_invitations_redeemed_at").on(t.redeemedAt),
+    index("idx_user_invitations_expires_at").on(t.expiresAt),
+]);
+//# sourceMappingURL=invitations.js.map

package/dist/schema/iam/invitations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitations.js","sourceRoot":"","sources":["../../../src/schema/iam/invitations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAEzF,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAA;AAEnD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CACzC,kBAAkB,EAClB;IACE,EAAE,EAAE,MAAM,CAAC,kBAAkB,CAAC;IAC9B,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IAC9B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;IACpE,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,UAAU,EAAE,SAAS,CAAC,aAAa,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC5D,gBAAgB,EAAE,IAAI,CAAC,qBAAqB,CAAC;IAC7C,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,EAA2B;IAC5D,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;CAClF,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,WAAW,CAAC,kCAAkC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,KAAK,CAAC,4BAA4B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/C,KAAK,CAAC,kCAAkC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;IAC1D,KAAK,CAAC,iCAAiC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;CACzD,CACF,CAAA"}

package/dist/schema/iam/kms.d.ts

@@ -0,0 +1,53 @@
+import { z } from "zod";
+export { type KmsEnvelope, kmsEnvelopeSchema } from "@voyant-travel/schema-kit/kms";
+/**
+ * Travel document types (plaintext structure before encryption)
+ */
+export declare const travelDocumentSchema: z.ZodObject<{
+    type: z.ZodEnum<{
+        passport: "passport";
+        national_id: "national_id";
+        visa: "visa";
+        drivers_license: "drivers_license";
+        other: "other";
+    }>;
+    number: z.ZodString;
+    issuingAuthority: z.ZodOptional<z.ZodString>;
+    issuingCountry: z.ZodString;
+    nationality: z.ZodOptional<z.ZodString>;
+    expiryDate: z.ZodString;
+    issueDate: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type TravelDocument = z.infer<typeof travelDocumentSchema>;
+/**
+ * Loyalty program (plaintext structure before encryption)
+ */
+export declare const loyaltyProgramSchema: z.ZodObject<{
+    program: z.ZodString;
+    number: z.ZodString;
+    tier: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type LoyaltyProgramData = z.infer<typeof loyaltyProgramSchema>;
+/**
+ * Personal insurance policy (plaintext structure before encryption)
+ * For global/annual policies owned by the user
+ */
+export declare const personalInsurancePolicySchema: z.ZodObject<{
+    providerId: z.ZodString;
+    providerName: z.ZodString;
+    policyNumber: z.ZodString;
+    type: z.ZodEnum<{
+        other: "other";
+        annual_travel: "annual_travel";
+        medical: "medical";
+        trip_cancellation: "trip_cancellation";
+        comprehensive: "comprehensive";
+    }>;
+    coverageAmount: z.ZodOptional<z.ZodNumber>;
+    currency: z.ZodOptional<z.ZodString>;
+    startDate: z.ZodString;
+    endDate: z.ZodString;
+    notes: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type PersonalInsurancePolicy = z.infer<typeof personalInsurancePolicySchema>;
+//# sourceMappingURL=kms.d.ts.map

package/dist/schema/iam/kms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kms.d.ts","sourceRoot":"","sources":["../../../src/schema/iam/kms.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB,OAAO,EAAE,KAAK,WAAW,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAA;AAEnF;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;iBAQ/B,CAAA;AAEF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEjE;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;iBAI/B,CAAA;AAEF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAErE;;;GAGG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;iBAUxC,CAAA;AAEF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAA"}

package/dist/schema/iam/kms.js

@@ -0,0 +1,40 @@
+import { z } from "zod";
+// `kmsEnvelopeSchema` now lives in @voyant-travel/schema-kit (pure). Re-exported here
+// to keep the @voyant-travel/db/schema/iam/kms import path stable.
+export { kmsEnvelopeSchema } from "@voyant-travel/schema-kit/kms";
+/**
+ * Travel document types (plaintext structure before encryption)
+ */
+export const travelDocumentSchema = z.object({
+    type: z.enum(["passport", "national_id", "visa", "drivers_license", "other"]),
+    number: z.string(),
+    issuingAuthority: z.string().optional(),
+    issuingCountry: z.string(),
+    nationality: z.string().optional(),
+    expiryDate: z.string(), // ISO date string
+    issueDate: z.string().optional(),
+});
+/**
+ * Loyalty program (plaintext structure before encryption)
+ */
+export const loyaltyProgramSchema = z.object({
+    program: z.string(),
+    number: z.string(),
+    tier: z.string().optional(),
+});
+/**
+ * Personal insurance policy (plaintext structure before encryption)
+ * For global/annual policies owned by the user
+ */
+export const personalInsurancePolicySchema = z.object({
+    providerId: z.string(), // Reference to insurance.providers in db-marketplace
+    providerName: z.string(), // Cached name for display without cross-DB lookup
+    policyNumber: z.string(),
+    type: z.enum(["annual_travel", "medical", "trip_cancellation", "comprehensive", "other"]),
+    coverageAmount: z.number().optional(),
+    currency: z.string().optional(),
+    startDate: z.string(), // ISO date string
+    endDate: z.string(), // ISO date string
+    notes: z.string().optional(),
+});
+//# sourceMappingURL=kms.js.map

package/dist/schema/iam/kms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kms.js","sourceRoot":"","sources":["../../../src/schema/iam/kms.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,sFAAsF;AACtF,mEAAmE;AACnE,OAAO,EAAoB,iBAAiB,EAAE,MAAM,+BAA+B,CAAA;AAEnF;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,kBAAkB;IAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAA;AAIF;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAA;AAIF;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,qDAAqD;IAC7E,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,kDAAkD;IAC5E,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,SAAS,EAAE,mBAAmB,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;IACzF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,kBAAkB;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,kBAAkB;IACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAA"}

package/dist/schema/iam/roles.d.ts

@@ -0,0 +1,12 @@
+import { z } from "zod";
+export declare const roles: import("drizzle-orm/pg-core").PgEnum<["super-admin", "admin", "editor", "viewer", "member", "guest"]>;
+export declare const rolesSchema: z.ZodEnum<{
+    member: "member";
+    "super-admin": "super-admin";
+    admin: "admin";
+    editor: "editor";
+    viewer: "viewer";
+    guest: "guest";
+}>;
+export type Role = z.infer<typeof rolesSchema>;
+//# sourceMappingURL=roles.d.ts.map

package/dist/schema/iam/roles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roles.d.ts","sourceRoot":"","sources":["../../../src/schema/iam/roles.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,eAAO,MAAM,KAAK,uGAOhB,CAAA;AAEF,eAAO,MAAM,WAAW;;;;;;;EAA2B,CAAA;AACnD,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAA"}

package/dist/schema/iam/roles.js

@@ -0,0 +1,12 @@
+import { pgEnum } from "drizzle-orm/pg-core";
+import { z } from "zod";
+export const roles = pgEnum("roles", [
+    "super-admin",
+    "admin",
+    "editor",
+    "viewer",
+    "member",
+    "guest",
+]);
+export const rolesSchema = z.enum(roles.enumValues);
+//# sourceMappingURL=roles.js.map

package/dist/schema/iam/roles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roles.js","sourceRoot":"","sources":["../../../src/schema/iam/roles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAC5C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,MAAM,CAAC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,EAAE;IACnC,aAAa;IACb,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,OAAO;CACR,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA"}