@voyant-travel/db 0.108.0

package/dist/schema/iam/user_profiles.d.ts

@@ -0,0 +1,442 @@
+import { z } from "zod";
+/**
+ * Seating preference enum for flights
+ */
+export declare const seatingPreferences: import("drizzle-orm/pg-core").PgEnum<["aisle", "window", "middle", "no_preference"]>;
+/**
+ * User Profiles
+ *
+ * The user's app profile containing:
+ * - Basic profile info (plain text - searchable)
+ * - App preferences (plain text - low risk)
+ * - Non-sensitive travel preferences (seatingPreference)
+ * - Admin flags (isSuperAdmin, isSupportUser)
+ *
+ * PK is `authUser.id` (Better Auth user ID) — NOT a TypeID.
+ * 1:1 with Better Auth's `user` table.
+ *
+ * Toxic-PII (passport numbers, dietary, accessibility, loyalty,
+ * insurance) lives on `crm.people` — that table is the canonical store
+ * for facts about a human, regardless of whether they ever log in.
+ * Auth-having storefront customers join `auth.user` → `people` via
+ * `(people.source = 'auth.user' AND people.sourceRef = userId)`.
+ */
+export declare const userProfilesTable: Omit<import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "user_profiles";
+    schema: undefined;
+    columns: {
+        id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "id";
+            tableName: "user_profiles";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        firstName: import("drizzle-orm/pg-core").PgColumn<{
+            name: "first_name";
+            tableName: "user_profiles";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        lastName: import("drizzle-orm/pg-core").PgColumn<{
+            name: "last_name";
+            tableName: "user_profiles";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        avatarUrl: import("drizzle-orm/pg-core").PgColumn<{
+            name: "avatar_url";
+            tableName: "user_profiles";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        locale: import("drizzle-orm/pg-core").PgColumn<{
+            name: "locale";
+            tableName: "user_profiles";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        timezone: import("drizzle-orm/pg-core").PgColumn<{
+            name: "timezone";
+            tableName: "user_profiles";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        uiPrefs: import("drizzle-orm/pg-core").PgColumn<{
+            name: "ui_prefs";
+            tableName: "user_profiles";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: Record<string, unknown>;
+            driverParam: unknown;
+            notNull: false;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: Record<string, unknown>;
+        }>;
+        seatingPreference: import("drizzle-orm/pg-core").PgColumn<{
+            name: "seating_preference";
+            tableName: "user_profiles";
+            dataType: "string";
+            columnType: "PgEnumColumn";
+            data: "aisle" | "window" | "middle" | "no_preference";
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: ["aisle", "window", "middle", "no_preference"];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        isSuperAdmin: import("drizzle-orm/pg-core").PgColumn<{
+            name: "is_super_admin";
+            tableName: "user_profiles";
+            dataType: "boolean";
+            columnType: "PgBoolean";
+            data: boolean;
+            driverParam: boolean;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        isSupportUser: import("drizzle-orm/pg-core").PgColumn<{
+            name: "is_support_user";
+            tableName: "user_profiles";
+            dataType: "boolean";
+            columnType: "PgBoolean";
+            data: boolean;
+            driverParam: boolean;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        termsAcceptedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "terms_accepted_at";
+            tableName: "user_profiles";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        notificationDefaults: import("drizzle-orm/pg-core").PgColumn<{
+            name: "notification_defaults";
+            tableName: "user_profiles";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: Record<string, unknown>;
+            driverParam: unknown;
+            notNull: false;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: Record<string, unknown>;
+        }>;
+        marketingConsent: import("drizzle-orm/pg-core").PgColumn<{
+            name: "marketing_consent";
+            tableName: "user_profiles";
+            dataType: "boolean";
+            columnType: "PgBoolean";
+            data: boolean;
+            driverParam: boolean;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        marketingConsentAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "marketing_consent_at";
+            tableName: "user_profiles";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        marketingConsentSource: import("drizzle-orm/pg-core").PgColumn<{
+            name: "marketing_consent_source";
+            tableName: "user_profiles";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        lastActiveAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "last_active_at";
+            tableName: "user_profiles";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_at";
+            tableName: "user_profiles";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        updatedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "updated_at";
+            tableName: "user_profiles";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "pg";
+}>, "enableRLS">;
+export type InsertUserProfile = typeof userProfilesTable.$inferInsert;
+export type SelectUserProfile = typeof userProfilesTable.$inferSelect;
+export declare const userProfileInsertSchema: z.ZodObject<{
+    id: z.ZodString;
+    firstName: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+    lastName: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+    avatarUrl: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+    locale: z.ZodDefault<z.ZodString>;
+    timezone: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+    uiPrefs: z.ZodNullable<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    seatingPreference: z.ZodNullable<z.ZodOptional<z.ZodEnum<{
+        aisle: "aisle";
+        window: "window";
+        middle: "middle";
+        no_preference: "no_preference";
+    }>>>;
+    isSuperAdmin: z.ZodDefault<z.ZodBoolean>;
+    isSupportUser: z.ZodDefault<z.ZodBoolean>;
+    termsAcceptedAt: z.ZodNullable<z.ZodOptional<z.ZodDate>>;
+    notificationDefaults: z.ZodNullable<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    marketingConsent: z.ZodDefault<z.ZodBoolean>;
+    marketingConsentAt: z.ZodNullable<z.ZodOptional<z.ZodDate>>;
+    marketingConsentSource: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+    lastActiveAt: z.ZodNullable<z.ZodOptional<z.ZodDate>>;
+}, z.core.$strip>;
+export declare const userProfileUpdateSchema: z.ZodObject<{
+    locale: z.ZodOptional<z.ZodDefault<z.ZodString>>;
+    timezone: z.ZodOptional<z.ZodNullable<z.ZodOptional<z.ZodString>>>;
+    firstName: z.ZodOptional<z.ZodNullable<z.ZodOptional<z.ZodString>>>;
+    lastName: z.ZodOptional<z.ZodNullable<z.ZodOptional<z.ZodString>>>;
+    avatarUrl: z.ZodOptional<z.ZodNullable<z.ZodOptional<z.ZodString>>>;
+    uiPrefs: z.ZodOptional<z.ZodNullable<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>>;
+    seatingPreference: z.ZodOptional<z.ZodNullable<z.ZodOptional<z.ZodEnum<{
+        aisle: "aisle";
+        window: "window";
+        middle: "middle";
+        no_preference: "no_preference";
+    }>>>>;
+    isSuperAdmin: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+    isSupportUser: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+    termsAcceptedAt: z.ZodOptional<z.ZodNullable<z.ZodOptional<z.ZodDate>>>;
+    notificationDefaults: z.ZodOptional<z.ZodNullable<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>>;
+    marketingConsent: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+    marketingConsentAt: z.ZodOptional<z.ZodNullable<z.ZodOptional<z.ZodDate>>>;
+    marketingConsentSource: z.ZodOptional<z.ZodNullable<z.ZodOptional<z.ZodString>>>;
+    lastActiveAt: z.ZodOptional<z.ZodNullable<z.ZodOptional<z.ZodDate>>>;
+}, z.core.$strip>;
+export declare const userProfileSelectSchema: z.ZodObject<{
+    id: z.ZodString;
+    firstName: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+    lastName: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+    avatarUrl: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+    locale: z.ZodDefault<z.ZodString>;
+    timezone: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+    uiPrefs: z.ZodNullable<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    seatingPreference: z.ZodNullable<z.ZodOptional<z.ZodEnum<{
+        aisle: "aisle";
+        window: "window";
+        middle: "middle";
+        no_preference: "no_preference";
+    }>>>;
+    isSuperAdmin: z.ZodDefault<z.ZodBoolean>;
+    isSupportUser: z.ZodDefault<z.ZodBoolean>;
+    termsAcceptedAt: z.ZodNullable<z.ZodOptional<z.ZodDate>>;
+    notificationDefaults: z.ZodNullable<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    marketingConsent: z.ZodDefault<z.ZodBoolean>;
+    marketingConsentAt: z.ZodNullable<z.ZodOptional<z.ZodDate>>;
+    marketingConsentSource: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+    lastActiveAt: z.ZodNullable<z.ZodOptional<z.ZodDate>>;
+    createdAt: z.ZodDate;
+    updatedAt: z.ZodDate;
+}, z.core.$strip>;
+export type UserProfile = z.infer<typeof userProfileSelectSchema>;
+export type NewUserProfile = z.infer<typeof userProfileInsertSchema>;
+export type UpdateUserProfile = z.infer<typeof userProfileUpdateSchema>;
+/**
+ * Decrypted user profile shape — toxic-PII fields (documents, dietary,
+ * accessibility, loyalty, insurance) now live on `crm.people` and are
+ * decrypted by the CRM service rather than user_profiles.
+ */
+export declare const decryptedUserProfileSchema: z.ZodObject<{
+    id: z.ZodString;
+    firstName: z.ZodNullable<z.ZodString>;
+    lastName: z.ZodNullable<z.ZodString>;
+    avatarUrl: z.ZodNullable<z.ZodString>;
+    locale: z.ZodString;
+    timezone: z.ZodNullable<z.ZodString>;
+    uiPrefs: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    seatingPreference: z.ZodNullable<z.ZodString>;
+    isSuperAdmin: z.ZodBoolean;
+    isSupportUser: z.ZodBoolean;
+    termsAcceptedAt: z.ZodNullable<z.ZodDate>;
+    notificationDefaults: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    marketingConsent: z.ZodBoolean;
+    marketingConsentAt: z.ZodNullable<z.ZodDate>;
+    marketingConsentSource: z.ZodNullable<z.ZodString>;
+    lastActiveAt: z.ZodNullable<z.ZodDate>;
+    createdAt: z.ZodDate;
+    updatedAt: z.ZodDate;
+}, z.core.$strip>;
+export type DecryptedUserProfile = z.infer<typeof decryptedUserProfileSchema>;
+//# sourceMappingURL=user_profiles.d.ts.map

package/dist/schema/iam/user_profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user_profiles.d.ts","sourceRoot":"","sources":["../../../src/schema/iam/user_profiles.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB;;GAEG;AACH,eAAO,MAAM,kBAAkB,sFAK7B,CAAA;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA4DjB,CAAA;AAEb,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,YAAY,CAAA;AACrE,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,YAAY,CAAA;AAqBrE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;iBAAwB,CAAA;AAC5D,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;iBAAqD,CAAA;AACzF,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;iBAGlC,CAAA;AAEF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAA;AACjE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAA;AACpE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAA;AAEvE;;;;GAIG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;iBAmBrC,CAAA;AAEF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAA"}

package/dist/schema/iam/user_profiles.js

@@ -0,0 +1,125 @@
+import { boolean, index, jsonb, pgEnum, pgTable, text, timestamp } from "drizzle-orm/pg-core";
+import { z } from "zod";
+import { authUser } from "./auth.js";
+/**
+ * Seating preference enum for flights
+ */
+export const seatingPreferences = pgEnum("seating_preference", [
+    "aisle",
+    "window",
+    "middle",
+    "no_preference",
+]);
+/**
+ * User Profiles
+ *
+ * The user's app profile containing:
+ * - Basic profile info (plain text - searchable)
+ * - App preferences (plain text - low risk)
+ * - Non-sensitive travel preferences (seatingPreference)
+ * - Admin flags (isSuperAdmin, isSupportUser)
+ *
+ * PK is `authUser.id` (Better Auth user ID) — NOT a TypeID.
+ * 1:1 with Better Auth's `user` table.
+ *
+ * Toxic-PII (passport numbers, dietary, accessibility, loyalty,
+ * insurance) lives on `crm.people` — that table is the canonical store
+ * for facts about a human, regardless of whether they ever log in.
+ * Auth-having storefront customers join `auth.user` → `people` via
+ * `(people.source = 'auth.user' AND people.sourceRef = userId)`.
+ */
+export const userProfilesTable = pgTable("user_profiles", {
+    // PK = Better Auth user.id (text, not TypeID)
+    id: text("id")
+        .primaryKey()
+        .references(() => authUser.id, { onDelete: "cascade" }),
+    // ============================================
+    // PLAIN TEXT FIELDS (searchable, TDE protected)
+    // ============================================
+    // Basic profile
+    firstName: text("first_name"),
+    lastName: text("last_name"),
+    avatarUrl: text("avatar_url"),
+    // App preferences (low risk)
+    locale: text("locale").notNull().default("en"),
+    timezone: text("timezone"),
+    uiPrefs: jsonb("ui_prefs").$type().default({}),
+    // Non-sensitive travel preferences
+    seatingPreference: seatingPreferences("seating_preference"),
+    // ============================================
+    // ADMIN FLAGS (moved from identities)
+    // ============================================
+    /** Platform-level admin flag */
+    isSuperAdmin: boolean("is_super_admin").notNull().default(false),
+    /** Support user flag - don't count towards seat limits */
+    isSupportUser: boolean("is_support_user").notNull().default(false),
+    // ============================================
+    // USER STATE
+    // ============================================
+    termsAcceptedAt: timestamp("terms_accepted_at", { withTimezone: true }),
+    notificationDefaults: jsonb("notification_defaults")
+        .$type()
+        .default({}),
+    // ============================================
+    // CONSENT & AUDIT
+    // ============================================
+    marketingConsent: boolean("marketing_consent").notNull().default(false),
+    marketingConsentAt: timestamp("marketing_consent_at", { withTimezone: true }),
+    marketingConsentSource: text("marketing_consent_source"),
+    lastActiveAt: timestamp("last_active_at", { withTimezone: true }),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow(),
+}, (t) => [
+    // Fast lookup by name for search
+    index("idx_user_profiles_name").on(t.firstName, t.lastName),
+]).enableRLS();
+const userProfileCoreSchema = z.object({
+    id: z.string().min(1),
+    firstName: z.string().max(200).optional().nullable(),
+    lastName: z.string().max(200).optional().nullable(),
+    avatarUrl: z.string().url().optional().nullable(),
+    locale: z.string().max(10).default("en"),
+    timezone: z.string().max(64).optional().nullable(),
+    uiPrefs: z.record(z.string(), z.unknown()).optional().nullable(),
+    seatingPreference: z.enum(["aisle", "window", "middle", "no_preference"]).optional().nullable(),
+    isSuperAdmin: z.boolean().default(false),
+    isSupportUser: z.boolean().default(false),
+    termsAcceptedAt: z.date().optional().nullable(),
+    notificationDefaults: z.record(z.string(), z.unknown()).optional().nullable(),
+    marketingConsent: z.boolean().default(false),
+    marketingConsentAt: z.date().optional().nullable(),
+    marketingConsentSource: z.string().max(255).optional().nullable(),
+    lastActiveAt: z.date().optional().nullable(),
+});
+export const userProfileInsertSchema = userProfileCoreSchema;
+export const userProfileUpdateSchema = userProfileCoreSchema.partial().omit({ id: true });
+export const userProfileSelectSchema = userProfileCoreSchema.extend({
+    createdAt: z.date(),
+    updatedAt: z.date(),
+});
+/**
+ * Decrypted user profile shape — toxic-PII fields (documents, dietary,
+ * accessibility, loyalty, insurance) now live on `crm.people` and are
+ * decrypted by the CRM service rather than user_profiles.
+ */
+export const decryptedUserProfileSchema = z.object({
+    id: z.string(),
+    firstName: z.string().nullable(),
+    lastName: z.string().nullable(),
+    avatarUrl: z.string().nullable(),
+    locale: z.string(),
+    timezone: z.string().nullable(),
+    uiPrefs: z.record(z.string(), z.unknown()).nullable(),
+    seatingPreference: z.string().nullable(),
+    isSuperAdmin: z.boolean(),
+    isSupportUser: z.boolean(),
+    termsAcceptedAt: z.date().nullable(),
+    notificationDefaults: z.record(z.string(), z.unknown()).nullable(),
+    marketingConsent: z.boolean(),
+    marketingConsentAt: z.date().nullable(),
+    marketingConsentSource: z.string().nullable(),
+    lastActiveAt: z.date().nullable(),
+    createdAt: z.date(),
+    updatedAt: z.date(),
+});
+//# sourceMappingURL=user_profiles.js.map

package/dist/schema/iam/user_profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user_profiles.js","sourceRoot":"","sources":["../../../src/schema/iam/user_profiles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC7F,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAEpC;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,oBAAoB,EAAE;IAC7D,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,eAAe;CAChB,CAAC,CAAA;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CACtC,eAAe,EACf;IACE,8CAA8C;IAC9C,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC;SACX,UAAU,EAAE;SACZ,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAEzD,+CAA+C;IAC/C,gDAAgD;IAChD,+CAA+C;IAE/C,gBAAgB;IAChB,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;IAC3B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAE7B,6BAA6B;IAC7B,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9C,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC;IAC1B,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,EAA2B,CAAC,OAAO,CAAC,EAAE,CAAC;IAEvE,mCAAmC;IACnC,iBAAiB,EAAE,kBAAkB,CAAC,oBAAoB,CAAC;IAE3D,+CAA+C;IAC/C,sCAAsC;IACtC,+CAA+C;IAE/C,gCAAgC;IAChC,YAAY,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAEhE,0DAA0D;IAC1D,aAAa,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAElE,+CAA+C;IAC/C,aAAa;IACb,+CAA+C;IAE/C,eAAe,EAAE,SAAS,CAAC,mBAAmB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACvE,oBAAoB,EAAE,KAAK,CAAC,uBAAuB,CAAC;SACjD,KAAK,EAA2B;SAChC,OAAO,CAAC,EAAE,CAAC;IAEd,+CAA+C;IAC/C,kBAAkB;IAClB,+CAA+C;IAE/C,gBAAgB,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvE,kBAAkB,EAAE,SAAS,CAAC,sBAAsB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC7E,sBAAsB,EAAE,IAAI,CAAC,0BAA0B,CAAC;IAExD,YAAY,EAAE,SAAS,CAAC,gBAAgB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACjE,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACjF,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;CAClF,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,iCAAiC;IACjC,KAAK,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC;CAC5D,CACF,CAAC,SAAS,EAAE,CAAA;AAKb,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACnD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACxC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAChE,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC/F,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACxC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACzC,eAAe,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC/C,oBAAoB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7E,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC5C,kBAAkB,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClD,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjE,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAAA;AAC5D,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;AACzF,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAAC,MAAM,CAAC;IAClE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;CACpB,CAAC,CAAA;AAMF;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;IACzB,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE;IAC1B,eAAe,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACpC,oBAAoB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAClE,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC7B,kBAAkB,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACvC,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7C,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;CACpB,CAAC,CAAA"}

package/dist/schema/index.d.ts

@@ -0,0 +1,5 @@
+export * from "./00_ensure_schemas.js";
+export * from "./aggregate-snapshots.js";
+export * from "./iam/index.js";
+export * from "./infra/index.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/schema/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/schema/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAA;AACtC,cAAc,0BAA0B,CAAA;AACxC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA"}

package/dist/schema/index.js

@@ -0,0 +1,5 @@
+export * from "./00_ensure_schemas.js";
+export * from "./aggregate-snapshots.js";
+export * from "./iam/index.js";
+export * from "./infra/index.js";
+//# sourceMappingURL=index.js.map

package/dist/schema/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/schema/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAA;AACtC,cAAc,0BAA0B,CAAA;AACxC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA"}