@voyantjs/db 0.1.0

package/dist/schema/iam/identity_profiles.js

@@ -0,0 +1,215 @@
+import { boolean, index, integer, jsonb, text, timestamp } from "drizzle-orm/pg-core";
+import { z } from "zod";
+import { iamSchema } from "../0_schemas.js";
+import { typeIdManual, typeIdSchema } from "../../lib/index.js";
+/**
+ * Seating preference enum for flights
+ */
+export const seatingPreferences = iamSchema.enum("seating_preference", [
+    "aisle",
+    "window",
+    "middle",
+    "no_preference",
+]);
+/**
+ * KMS Encrypted Envelope schema
+ * All toxic PII is encrypted with GCP KMS before storage.
+ * Format: { enc: "base64-encoded-ciphertext" }
+ */
+export const kmsEnvelopeSchema = z
+    .object({
+    enc: z.string().min(1, "Encrypted value is required"),
+})
+    .nullable();
+/**
+ * Travel document types (plaintext structure before encryption)
+ */
+export const travelDocumentSchema = z.object({
+    type: z.enum(["passport", "national_id", "visa", "drivers_license", "other"]),
+    number: z.string(),
+    issuingCountry: z.string(),
+    nationality: z.string().optional(),
+    expiryDate: z.string(), // ISO date string
+    issueDate: z.string().optional(),
+});
+/**
+ * Loyalty program (plaintext structure before encryption)
+ */
+export const loyaltyProgramSchema = z.object({
+    program: z.string(),
+    number: z.string(),
+    tier: z.string().optional(),
+});
+/**
+ * Personal insurance policy (plaintext structure before encryption)
+ * For global/annual policies owned by the user
+ */
+export const personalInsurancePolicySchema = z.object({
+    providerId: z.string(), // Reference to insurance.providers in db-marketplace
+    providerName: z.string(), // Cached name for display without cross-DB lookup
+    policyNumber: z.string(),
+    type: z.enum(["annual_travel", "medical", "trip_cancellation", "comprehensive", "other"]),
+    coverageAmount: z.number().optional(),
+    currency: z.string().optional(),
+    startDate: z.string(), // ISO date string
+    endDate: z.string(), // ISO date string
+    notes: z.string().optional(),
+});
+/**
+ * Layer 1: The Global Profile (Identity Profiles)
+ *
+ * This is the user's "Backpack" - their Voyant Pass containing:
+ * - Basic profile info (plain text - searchable)
+ * - App preferences (plain text - low risk)
+ * - Travel preferences (split: non-sensitive plain, sensitive encrypted)
+ * - Documents (encrypted - toxic PII)
+ *
+ * Location: db-main in user's home region (EU or US)
+ * Relation: 1:1 with db-control.identities
+ *
+ * ENCRYPTION STRATEGY ("Toxic Waste Rule"):
+ * - documentsEncrypted: MUST ENCRYPT - passport numbers, IDs
+ * - accessibilityEncrypted: MUST ENCRYPT - medical/health info (GDPR Special Category)
+ * - dietaryEncrypted: ENCRYPT - reveals religion/health
+ * - loyaltyEncrypted: OPTIONAL ENCRYPT - fraud vector but lower risk
+ */
+export const identityProfilesTable = iamSchema
+    .table("identity_profiles", {
+    // Must match identities.id from db-control (TypeID with "user" prefix)
+    id: typeIdManual(),
+    // ============================================
+    // PLAIN TEXT FIELDS (searchable, TDE protected)
+    // ============================================
+    // Basic profile
+    firstName: text("first_name"),
+    lastName: text("last_name"),
+    avatarUrl: text("avatar_url"),
+    // App preferences (low risk)
+    locale: text("locale").notNull().default("en"),
+    timezone: text("timezone"),
+    uiPrefs: jsonb("ui_prefs").$type().default({}),
+    // Non-sensitive travel preferences
+    seatingPreference: seatingPreferences("seating_preference"),
+    // ============================================
+    // ENCRYPTED FIELDS (KMS "people" key, home region)
+    // Format: { enc: "base64-ciphertext" }
+    // ============================================
+    /**
+     * Travel documents - MUST ENCRYPT
+     * Contains: Array of passports, visas, IDs with numbers/expiry
+     * Plaintext type: TravelDocument[]
+     */
+    documentsEncrypted: jsonb("documents_encrypted").$type(),
+    /**
+     * Accessibility requirements - MUST ENCRYPT
+     * Contains: wheelchair, hearing aids, medical conditions
+     * GDPR Special Category data
+     * Plaintext type: string[]
+     */
+    accessibilityEncrypted: jsonb("accessibility_encrypted").$type(),
+    /**
+     * Dietary requirements - ENCRYPT
+     * Contains: allergies, religious restrictions (halal/kosher/vegan)
+     * Reveals health or religious info
+     * Plaintext type: string[]
+     */
+    dietaryEncrypted: jsonb("dietary_encrypted").$type(),
+    /**
+     * Loyalty programs - OPTIONAL ENCRYPT
+     * Contains: frequent flyer numbers, hotel programs
+     * Fraud vector but lower risk than documents
+     * Plaintext type: LoyaltyProgramData[]
+     */
+    loyaltyEncrypted: jsonb("loyalty_encrypted").$type(),
+    /**
+     * Personal insurance policies - ENCRYPT
+     * Contains: annual travel insurance, medical insurance
+     * Global policies owned by the user (not organization-specific)
+     * Plaintext type: PersonalInsurancePolicy[]
+     */
+    insuranceEncrypted: jsonb("insurance_encrypted").$type(),
+    // ============================================
+    // ONBOARDING & USER STATE
+    // ============================================
+    onboardingComplete: boolean("onboarding_complete").notNull().default(false),
+    onboardingStep: integer("onboarding_step").notNull().default(0),
+    termsAcceptedAt: timestamp("terms_accepted_at", { withTimezone: true }),
+    // Notification preferences (email, push, whatsapp defaults)
+    notificationDefaults: jsonb("notification_defaults").$type().default({}),
+    // ============================================
+    // CONSENT & AUDIT
+    // ============================================
+    marketingConsent: boolean("marketing_consent").notNull().default(false),
+    marketingConsentAt: timestamp("marketing_consent_at", { withTimezone: true }),
+    lastActiveAt: timestamp("last_active_at", { withTimezone: true }),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow(),
+}, (t) => [
+    // Fast lookup by name for search
+    index("idx_identity_profiles_name").on(t.firstName, t.lastName),
+])
+    .enableRLS();
+const identityProfileCoreSchema = z.object({
+    id: typeIdSchema("identities"),
+    firstName: z.string().max(200).optional().nullable(),
+    lastName: z.string().max(200).optional().nullable(),
+    avatarUrl: z.string().url().optional().nullable(),
+    locale: z.string().max(10).default("en"),
+    timezone: z.string().max(64).optional().nullable(),
+    uiPrefs: z.record(z.string(), z.unknown()).optional().nullable(),
+    seatingPreference: z.enum(["aisle", "window", "middle", "no_preference"]).optional().nullable(),
+    documentsEncrypted: kmsEnvelopeSchema.optional(),
+    accessibilityEncrypted: kmsEnvelopeSchema.optional(),
+    dietaryEncrypted: kmsEnvelopeSchema.optional(),
+    loyaltyEncrypted: kmsEnvelopeSchema.optional(),
+    insuranceEncrypted: kmsEnvelopeSchema.optional(),
+    // Onboarding state
+    onboardingComplete: z.boolean().default(false),
+    onboardingStep: z.number().int().default(0),
+    termsAcceptedAt: z.date().optional().nullable(),
+    // Notification preferences
+    notificationDefaults: z.record(z.string(), z.unknown()).optional().nullable(),
+    // Consent
+    marketingConsent: z.boolean().default(false),
+    marketingConsentAt: z.date().optional().nullable(),
+    lastActiveAt: z.date().optional().nullable(),
+});
+export const identityProfileInsertSchema = identityProfileCoreSchema;
+export const identityProfileUpdateSchema = identityProfileCoreSchema.partial().omit({ id: true });
+export const identityProfileSelectSchema = identityProfileCoreSchema.extend({
+    createdAt: z.date(),
+    updatedAt: z.date(),
+});
+/**
+ * Decrypted identity profile - used after KMS decryption
+ * This is what the application layer works with
+ */
+export const decryptedIdentityProfileSchema = z.object({
+    id: typeIdSchema("identities"),
+    firstName: z.string().nullable(),
+    lastName: z.string().nullable(),
+    avatarUrl: z.string().nullable(),
+    locale: z.string(),
+    timezone: z.string().nullable(),
+    uiPrefs: z.record(z.string(), z.unknown()).nullable(),
+    seatingPreference: z.string().nullable(),
+    // Decrypted fields
+    documents: z.array(travelDocumentSchema).nullable(),
+    accessibility: z.array(z.string()).nullable(),
+    dietary: z.array(z.string()).nullable(),
+    loyalty: z.array(loyaltyProgramSchema).nullable(),
+    insurance: z.array(personalInsurancePolicySchema).nullable(),
+    // Onboarding state
+    onboardingComplete: z.boolean(),
+    onboardingStep: z.number(),
+    termsAcceptedAt: z.date().nullable(),
+    // Notification preferences
+    notificationDefaults: z.record(z.string(), z.unknown()).nullable(),
+    // Consent & audit
+    marketingConsent: z.boolean(),
+    marketingConsentAt: z.date().nullable(),
+    lastActiveAt: z.date().nullable(),
+    createdAt: z.date(),
+    updatedAt: z.date(),
+});
+//# sourceMappingURL=identity_profiles.js.map

package/dist/schema/iam/identity_profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity_profiles.js","sourceRoot":"","sources":["../../../src/schema/iam/identity_profiles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AACrF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACxC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAEtD;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAAC,IAAI,CAAC,oBAAoB,EAAE;IACrE,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,eAAe;CAChB,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,6BAA6B,CAAC;CACtD,CAAC;KACD,QAAQ,EAAE,CAAA;AAIb;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,kBAAkB;IAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAA;AAIF;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAA;AAIF;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,qDAAqD;IAC7E,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,kDAAkD;IAC5E,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,SAAS,EAAE,mBAAmB,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;IACzF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,kBAAkB;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,kBAAkB;IACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAA;AAIF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,SAAS;KAC3C,KAAK,CACJ,mBAAmB,EACnB;IACE,uEAAuE;IACvE,EAAE,EAAE,YAAY,EAAE;IAElB,+CAA+C;IAC/C,gDAAgD;IAChD,+CAA+C;IAE/C,gBAAgB;IAChB,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;IAC3B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAE7B,6BAA6B;IAC7B,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9C,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC;IAC1B,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,EAA2B,CAAC,OAAO,CAAC,EAAE,CAAC;IAEvE,mCAAmC;IACnC,iBAAiB,EAAE,kBAAkB,CAAC,oBAAoB,CAAC;IAE3D,+CAA+C;IAC/C,mDAAmD;IACnD,uCAAuC;IACvC,+CAA+C;IAE/C;;;;OAIG;IACH,kBAAkB,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAC,KAAK,EAAe;IAErE;;;;;OAKG;IACH,sBAAsB,EAAE,KAAK,CAAC,yBAAyB,CAAC,CAAC,KAAK,EAAe;IAE7E;;;;;OAKG;IACH,gBAAgB,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC,KAAK,EAAe;IAEjE;;;;;OAKG;IACH,gBAAgB,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC,KAAK,EAAe;IAEjE;;;;;OAKG;IACH,kBAAkB,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAC,KAAK,EAAe;IAErE,+CAA+C;IAC/C,0BAA0B;IAC1B,+CAA+C;IAE/C,kBAAkB,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC3E,cAAc,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/D,eAAe,EAAE,SAAS,CAAC,mBAAmB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAEvE,4DAA4D;IAC5D,oBAAoB,EAAE,KAAK,CAAC,uBAAuB,CAAC,CAAC,KAAK,EAA2B,CAAC,OAAO,CAAC,EAAE,CAAC;IAEjG,+CAA+C;IAC/C,kBAAkB;IAClB,+CAA+C;IAE/C,gBAAgB,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvE,kBAAkB,EAAE,SAAS,CAAC,sBAAsB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAE7E,YAAY,EAAE,SAAS,CAAC,gBAAgB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACjE,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACjF,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;CAClF,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,iCAAiC;IACjC,KAAK,CAAC,4BAA4B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC;CAChE,CACF;KACA,SAAS,EAAE,CAAA;AAKd,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,EAAE,EAAE,YAAY,CAAC,YAAY,CAAC;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACnD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACxC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAChE,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC/F,kBAAkB,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IAChD,sBAAsB,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACpD,gBAAgB,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IAC9C,gBAAgB,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IAC9C,kBAAkB,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IAChD,mBAAmB;IACnB,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC9C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3C,eAAe,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC/C,2BAA2B;IAC3B,oBAAoB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7E,UAAU;IACV,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC5C,kBAAkB,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClD,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG,yBAAyB,CAAA;AACpE,MAAM,CAAC,MAAM,2BAA2B,GAAG,yBAAyB,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;AACjG,MAAM,CAAC,MAAM,2BAA2B,GAAG,yBAAyB,CAAC,MAAM,CAAC;IAC1E,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;CACpB,CAAC,CAAA;AAMF;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,EAAE,EAAE,YAAY,CAAC,YAAY,CAAC;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,mBAAmB;IACnB,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACnD,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACvC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACjD,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,QAAQ,EAAE;IAC5D,mBAAmB;IACnB,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC/B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,eAAe,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACpC,2BAA2B;IAC3B,oBAAoB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAClE,kBAAkB;IAClB,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC7B,kBAAkB,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACvC,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;CACpB,CAAC,CAAA"}

package/dist/schema/iam/index.d.ts

@@ -0,0 +1,6 @@
+export * from "./apikey.js";
+export * from "./auth.js";
+export * from "./kms.js";
+export * from "./roles.js";
+export * from "./user_profiles.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/schema/iam/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/schema/iam/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAA;AACxB,cAAc,QAAQ,CAAA;AACtB,cAAc,OAAO,CAAA;AACrB,cAAc,SAAS,CAAA;AACvB,cAAc,iBAAiB,CAAA"}

package/dist/schema/iam/index.js

@@ -0,0 +1,6 @@
+export * from "./apikey.js";
+export * from "./auth.js";
+export * from "./kms.js";
+export * from "./roles.js";
+export * from "./user_profiles.js";
+//# sourceMappingURL=index.js.map

package/dist/schema/iam/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/schema/iam/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAA;AACxB,cAAc,QAAQ,CAAA;AACtB,cAAc,OAAO,CAAA;AACrB,cAAc,SAAS,CAAA;AACvB,cAAc,iBAAiB,CAAA"}

package/dist/schema/iam/kms.d.ts

@@ -0,0 +1,60 @@
+import { z } from "zod";
+/**
+ * KMS Encrypted Envelope schema
+ * All toxic PII is encrypted with GCP KMS before storage.
+ * Format: { enc: "base64-encoded-ciphertext" }
+ */
+export declare const kmsEnvelopeSchema: z.ZodNullable<z.ZodObject<{
+    enc: z.ZodString;
+}, z.core.$strip>>;
+export type KmsEnvelope = z.infer<typeof kmsEnvelopeSchema>;
+/**
+ * Travel document types (plaintext structure before encryption)
+ */
+export declare const travelDocumentSchema: z.ZodObject<{
+    type: z.ZodEnum<{
+        other: "other";
+        passport: "passport";
+        national_id: "national_id";
+        visa: "visa";
+        drivers_license: "drivers_license";
+    }>;
+    number: z.ZodString;
+    issuingCountry: z.ZodString;
+    nationality: z.ZodOptional<z.ZodString>;
+    expiryDate: z.ZodString;
+    issueDate: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type TravelDocument = z.infer<typeof travelDocumentSchema>;
+/**
+ * Loyalty program (plaintext structure before encryption)
+ */
+export declare const loyaltyProgramSchema: z.ZodObject<{
+    program: z.ZodString;
+    number: z.ZodString;
+    tier: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type LoyaltyProgramData = z.infer<typeof loyaltyProgramSchema>;
+/**
+ * Personal insurance policy (plaintext structure before encryption)
+ * For global/annual policies owned by the user
+ */
+export declare const personalInsurancePolicySchema: z.ZodObject<{
+    providerId: z.ZodString;
+    providerName: z.ZodString;
+    policyNumber: z.ZodString;
+    type: z.ZodEnum<{
+        other: "other";
+        annual_travel: "annual_travel";
+        medical: "medical";
+        trip_cancellation: "trip_cancellation";
+        comprehensive: "comprehensive";
+    }>;
+    coverageAmount: z.ZodOptional<z.ZodNumber>;
+    currency: z.ZodOptional<z.ZodString>;
+    startDate: z.ZodString;
+    endDate: z.ZodString;
+    notes: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type PersonalInsurancePolicy = z.infer<typeof personalInsurancePolicySchema>;
+//# sourceMappingURL=kms.d.ts.map

package/dist/schema/iam/kms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kms.d.ts","sourceRoot":"","sources":["../../../src/schema/iam/kms.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB;;;;GAIG;AACH,eAAO,MAAM,iBAAiB;;kBAIjB,CAAA;AAEb,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAE3D;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;iBAO/B,CAAA;AAEF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEjE;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;iBAI/B,CAAA;AAEF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAErE;;;GAGG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;iBAUxC,CAAA;AAEF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAA"}

package/dist/schema/iam/kms.js

@@ -0,0 +1,46 @@
+import { z } from "zod";
+/**
+ * KMS Encrypted Envelope schema
+ * All toxic PII is encrypted with GCP KMS before storage.
+ * Format: { enc: "base64-encoded-ciphertext" }
+ */
+export const kmsEnvelopeSchema = z
+    .object({
+    enc: z.string().min(1, "Encrypted value is required"),
+})
+    .nullable();
+/**
+ * Travel document types (plaintext structure before encryption)
+ */
+export const travelDocumentSchema = z.object({
+    type: z.enum(["passport", "national_id", "visa", "drivers_license", "other"]),
+    number: z.string(),
+    issuingCountry: z.string(),
+    nationality: z.string().optional(),
+    expiryDate: z.string(), // ISO date string
+    issueDate: z.string().optional(),
+});
+/**
+ * Loyalty program (plaintext structure before encryption)
+ */
+export const loyaltyProgramSchema = z.object({
+    program: z.string(),
+    number: z.string(),
+    tier: z.string().optional(),
+});
+/**
+ * Personal insurance policy (plaintext structure before encryption)
+ * For global/annual policies owned by the user
+ */
+export const personalInsurancePolicySchema = z.object({
+    providerId: z.string(), // Reference to insurance.providers in db-marketplace
+    providerName: z.string(), // Cached name for display without cross-DB lookup
+    policyNumber: z.string(),
+    type: z.enum(["annual_travel", "medical", "trip_cancellation", "comprehensive", "other"]),
+    coverageAmount: z.number().optional(),
+    currency: z.string().optional(),
+    startDate: z.string(), // ISO date string
+    endDate: z.string(), // ISO date string
+    notes: z.string().optional(),
+});
+//# sourceMappingURL=kms.js.map

package/dist/schema/iam/kms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kms.js","sourceRoot":"","sources":["../../../src/schema/iam/kms.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,6BAA6B,CAAC;CACtD,CAAC;KACD,QAAQ,EAAE,CAAA;AAIb;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,kBAAkB;IAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAA;AAIF;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAA;AAIF;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,qDAAqD;IAC7E,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,kDAAkD;IAC5E,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,SAAS,EAAE,mBAAmB,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;IACzF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,kBAAkB;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,kBAAkB;IACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAA"}