alepha 0.23.0 → 0.24.0

package/dist/api/users/index.browser.js

@@ -1,28 +1,28 @@
-import { $module, t } from "alepha";
+import { $module, z } from "alepha";
 import { $entity, db, sql } from "alepha/orm";
 //#region ../../src/api/users/entities/users.ts
 const DEFAULT_USER_REALM_NAME = "default";
 const users = $entity({
 	name: "users",
-	schema: t.object({
-		id: db.primaryKey(t.uuid()),
+	schema: z.object({
+		id: db.primaryKey(z.uuid()),
 		version: db.version(),
 		createdAt: db.createdAt(),
 		updatedAt: db.updatedAt(),
-		realm: db.default(t.text(), DEFAULT_USER_REALM_NAME),
-		username: t.optional(t.shortText({
+		realm: db.default(z.text(), DEFAULT_USER_REALM_NAME),
+		username: z.shortText({
 			minLength: 3,
 			maxLength: 30
-		})),
-		email: t.optional(t.string({ format: "email" })),
-		phoneNumber: t.optional(t.e164()),
-		roles: db.default(t.array(t.string()), []),
-		firstName: t.optional(t.string()),
-		lastName: t.optional(t.string()),
-		picture: t.optional(t.string()),
-		enabled: db.default(t.boolean(), true),
-		emailVerified: db.default(t.boolean(), false),
-		lastLoginAt: t.optional(t.datetime()),
+		}).optional(),
+		email: z.string().meta({ format: "email" }).optional(),
+		phoneNumber: z.e164().optional(),
+		roles: db.default(z.array(z.string()), []),
+		firstName: z.string().optional(),
+		lastName: z.string().optional(),
+		picture: z.string().optional(),
+		enabled: db.default(z.boolean(), true),
+		emailVerified: db.default(z.boolean(), false),
+		lastLoginAt: z.datetime().optional(),
 		organizationId: db.organization()
 	}),
 	indexes: [
@@ -45,16 +45,16 @@ const users = $entity({
 //#region ../../src/api/users/entities/identities.ts
 const identities = $entity({
 	name: "identities",
-	schema: t.object({
-		id: db.primaryKey(t.uuid()),
+	schema: z.object({
+		id: db.primaryKey(z.uuid()),
 		version: db.version(),
 		createdAt: db.createdAt(),
 		updatedAt: db.updatedAt(),
-		userId: db.ref(t.uuid(), () => users.cols.id),
-		password: t.optional(t.text()),
-		provider: t.text(),
-		providerUserId: t.optional(t.text()),
-		providerData: t.optional(t.json())
+		userId: db.ref(z.uuid(), () => users.cols.id),
+		password: z.text().optional(),
+		provider: z.text(),
+		providerUserId: z.text().optional(),
+		providerData: z.json().optional()
 	}),
 	indexes: [
 		"userId",
@@ -70,13 +70,13 @@ const identities = $entity({
 //#region ../../src/api/users/entities/sessions.ts
 const sessions = $entity({
 	name: "sessions",
-	schema: t.object({
-		id: db.primaryKey(t.uuid()),
+	schema: z.object({
+		id: db.primaryKey(z.uuid()),
 		version: db.version(),
 		createdAt: db.createdAt(),
 		updatedAt: db.updatedAt(),
-		refreshToken: t.uuid(),
-		userId: db.ref(t.uuid(), () => users.cols.id),
+		refreshToken: z.uuid(),
+		userId: db.ref(z.uuid(), () => users.cols.id),
 		/**
 		* OAuth client this session was minted for, when it was created via the
 		* OAuth 2.1 authorization flow — the `client_id` of an `oauth_clients`
@@ -84,30 +84,30 @@ const sessions = $entity({
 		* key: `sessions` is a core entity and must not depend on the optional
 		* OAuth module's table; the join to `oauth_clients` is done at query time.
 		*/
-		clientId: t.optional(t.text({ maxLength: 64 })),
-		expiresAt: t.datetime(),
+		clientId: z.text({ maxLength: 64 }).optional(),
+		expiresAt: z.datetime(),
 		/**
 		* Last time the session was used to refresh an access token.
 		* Used by realm `refreshToken.expirationIdle` to invalidate idle sessions.
 		* `null` on existing rows pre-migration — falls back to `createdAt`.
 		*/
-		lastUsedAt: t.optional(t.datetime()),
-		ip: t.optional(t.text()),
+		lastUsedAt: z.datetime().optional(),
+		ip: z.text().optional(),
 		/**
 		* ISO 3166-1 alpha-2 country code derived from the request geo headers
 		* (`cf-ipcountry` on Cloudflare, CDN equivalents elsewhere) at login time.
 		* `null` on pre-migration rows and where geo isn't available.
 		*/
-		country: t.optional(t.text({ maxLength: 2 })),
-		userAgent: t.optional(t.object({
-			os: t.text(),
-			browser: t.text(),
-			device: t.enum([
+		country: z.text({ maxLength: 2 }).optional(),
+		userAgent: z.object({
+			os: z.text(),
+			browser: z.text(),
+			device: z.enum([
 				"MOBILE",
 				"DESKTOP",
 				"TABLET"
 			])
-		}))
+		}).optional()
 	}),
 	indexes: [
 		"userId",
@@ -120,44 +120,21 @@ const sessions = $entity({
 });
 //#endregion
 //#region ../../src/api/users/schemas/registerSchema.ts
-const registerSchema = t.object({
-	username: t.string({
-		minLength: 3,
-		maxLength: 20,
-		pattern: /^[a-zA-Z0-9_]+$/,
-		description: "Username for the new account"
-	}),
-	email: t.email({ description: "Email address for the new account" }),
-	password: t.string({
-		minLength: 8,
-		description: "Password for the new account"
-	}),
-	confirmPassword: t.string({
-		minLength: 8,
-		description: "Confirmation of the password"
-	}),
-	firstName: t.optional(t.string({
-		maxLength: 100,
-		description: "User's first name"
-	})),
-	lastName: t.optional(t.string({
-		maxLength: 100,
-		description: "User's last name"
-	}))
+const registerSchema = z.object({
+	username: z.string().min(3).max(20).regex(/^[a-zA-Z0-9_]+$/).describe("Username for the new account"),
+	email: z.email().describe("Email address for the new account"),
+	password: z.string().min(8).describe("Password for the new account"),
+	confirmPassword: z.string().min(8).describe("Confirmation of the password"),
+	firstName: z.string().max(100).describe("User's first name").optional(),
+	lastName: z.string().max(100).describe("User's last name").optional()
 });
 //#endregion
 //#region ../../src/api/users/schemas/resetPasswordSchema.ts
-const resetPasswordRequestSchema = t.object({ email: t.email({ description: "Email address to send password reset link" }) });
-const resetPasswordSchema = t.object({
-	token: t.string({ description: "Password reset token from email" }),
-	password: t.string({
-		minLength: 8,
-		description: "New password"
-	}),
-	confirmPassword: t.string({
-		minLength: 8,
-		description: "Confirmation of the new password"
-	})
+const resetPasswordRequestSchema = z.object({ email: z.email().describe("Email address to send password reset link") });
+const resetPasswordSchema = z.object({
+	token: z.string().describe("Password reset token from email"),
+	password: z.string().min(8).describe("New password"),
+	confirmPassword: z.string().min(8).describe("Confirmation of the new password")
 });
 //#endregion
 //#region ../../src/api/users/index.browser.ts

package/dist/api/users/index.browser.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.browser.js","names":[],"sources":["../../../src/api/users/entities/users.ts","../../../src/api/users/entities/identities.ts","../../../src/api/users/entities/sessions.ts","../../../src/api/users/schemas/registerSchema.ts","../../../src/api/users/schemas/resetPasswordSchema.ts","../../../src/api/users/index.browser.ts"],"sourcesContent":["import { type Static, t } from \"alepha\";\nimport { $entity, db, sql } from \"alepha/orm\";\n\nexport const DEFAULT_USER_REALM_NAME = \"default\";\n\nexport const users = $entity({\n  name: \"users\",\n  schema: t.object({\n    id: db.primaryKey(t.uuid()),\n    version: db.version(),\n    createdAt: db.createdAt(),\n    updatedAt: db.updatedAt(),\n\n    realm: db.default(t.text(), DEFAULT_USER_REALM_NAME),\n\n    username: t.optional(\n      t.shortText({\n        minLength: 3,\n        maxLength: 30,\n        // pattern is handled at the realm settings level\n      }),\n    ),\n\n    email: t.optional(t.string({ format: \"email\" })),\n\n    phoneNumber: t.optional(t.e164()),\n\n    roles: db.default(t.array(t.string()), []),\n    firstName: t.optional(t.string()),\n    lastName: t.optional(t.string()),\n    picture: t.optional(t.string()),\n    enabled: db.default(t.boolean(), true),\n\n    emailVerified: db.default(t.boolean(), false),\n\n    lastLoginAt: t.optional(t.datetime()),\n\n    organizationId: db.organization(),\n  }),\n  indexes: [\n    {\n      expressions: (self) => [self.realm, sql`LOWER(${self.username})`],\n      unique: true,\n      name: \"users_realm_username_lower_idx\",\n    },\n    { columns: [\"realm\", \"email\"], unique: true },\n    { columns: [\"realm\", \"phoneNumber\"], unique: true },\n  ],\n});\n\nexport type UserEntity = Static<typeof users.schema>;\n","import { type Static, t } from \"alepha\";\nimport { $entity, db } from \"alepha/orm\";\nimport { users } from \"./users.ts\";\n\nexport const identities = $entity({\n  name: \"identities\",\n  schema: t.object({\n    id: db.primaryKey(t.uuid()),\n    version: db.version(),\n    createdAt: db.createdAt(),\n    updatedAt: db.updatedAt(),\n    userId: db.ref(t.uuid(), () => users.cols.id),\n    password: t.optional(t.text()),\n    provider: t.text(),\n    providerUserId: t.optional(t.text()),\n    providerData: t.optional(t.json()),\n  }),\n  indexes: [\n    \"userId\",\n    \"provider\",\n    { columns: [\"userId\", \"provider\"] },\n    { columns: [\"provider\", \"providerUserId\"], unique: true },\n  ],\n});\n\nexport type IdentityEntity = Static<typeof identities.schema>;\n","import { type Static, t } from \"alepha\";\nimport { $entity, db } from \"alepha/orm\";\nimport { users } from \"./users.ts\";\n\nexport const sessions = $entity({\n  name: \"sessions\",\n  schema: t.object({\n    id: db.primaryKey(t.uuid()),\n    version: db.version(),\n    createdAt: db.createdAt(),\n    updatedAt: db.updatedAt(),\n    refreshToken: t.uuid(),\n    userId: db.ref(t.uuid(), () => users.cols.id),\n    /**\n     * OAuth client this session was minted for, when it was created via the\n     * OAuth 2.1 authorization flow — the `client_id` of an `oauth_clients`\n     * row. Null for first-party logins. Deliberately NOT a DB-level foreign\n     * key: `sessions` is a core entity and must not depend on the optional\n     * OAuth module's table; the join to `oauth_clients` is done at query time.\n     */\n    clientId: t.optional(t.text({ maxLength: 64 })),\n    expiresAt: t.datetime(),\n    /**\n     * Last time the session was used to refresh an access token.\n     * Used by realm `refreshToken.expirationIdle` to invalidate idle sessions.\n     * `null` on existing rows pre-migration — falls back to `createdAt`.\n     */\n    lastUsedAt: t.optional(t.datetime()),\n    ip: t.optional(t.text()),\n    /**\n     * ISO 3166-1 alpha-2 country code derived from the request geo headers\n     * (`cf-ipcountry` on Cloudflare, CDN equivalents elsewhere) at login time.\n     * `null` on pre-migration rows and where geo isn't available.\n     */\n    country: t.optional(t.text({ maxLength: 2 })),\n    userAgent: t.optional(\n      t.object({\n        os: t.text(),\n        browser: t.text(),\n        device: t.enum([\"MOBILE\", \"DESKTOP\", \"TABLET\"]),\n      }),\n    ),\n  }),\n  indexes: [\"userId\", \"expiresAt\", { column: \"refreshToken\", unique: true }],\n});\n\nexport type SessionEntity = Static<typeof sessions.schema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const registerSchema = t.object({\n  username: t.string({\n    minLength: 3,\n    maxLength: 20,\n    pattern: /^[a-zA-Z0-9_]+$/,\n    description: \"Username for the new account\",\n  }),\n  email: t.email({\n    description: \"Email address for the new account\",\n  }),\n  password: t.string({\n    minLength: 8,\n    description: \"Password for the new account\",\n  }),\n  confirmPassword: t.string({\n    minLength: 8,\n    description: \"Confirmation of the password\",\n  }),\n  firstName: t.optional(\n    t.string({\n      maxLength: 100,\n      description: \"User's first name\",\n    }),\n  ),\n  lastName: t.optional(\n    t.string({\n      maxLength: 100,\n      description: \"User's last name\",\n    }),\n  ),\n});\n\nexport type RegisterInput = Static<typeof registerSchema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const resetPasswordRequestSchema = t.object({\n  email: t.email({\n    description: \"Email address to send password reset link\",\n  }),\n});\n\nexport const resetPasswordSchema = t.object({\n  token: t.string({\n    description: \"Password reset token from email\",\n  }),\n  password: t.string({\n    minLength: 8,\n    description: \"New password\",\n  }),\n  confirmPassword: t.string({\n    minLength: 8,\n    description: \"Confirmation of the new password\",\n  }),\n});\n\nexport type ResetPasswordRequest = Static<typeof resetPasswordRequestSchema>;\nexport type ResetPasswordInput = Static<typeof resetPasswordSchema>;\n","import { $module } from \"alepha\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./entities/identities.ts\";\nexport * from \"./entities/sessions.ts\";\nexport * from \"./entities/users.ts\";\nexport * from \"./schemas/registerSchema.ts\";\nexport * from \"./schemas/resetPasswordSchema.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport const AlephaApiUsers = $module({\n  name: \"alepha.api.users\",\n  services: [],\n});\n"],"mappings":";;;AAGA,MAAa,0BAA0B;AAEvC,MAAa,QAAQ,QAAQ;CAC3B,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,IAAI,GAAG,WAAW,EAAE,KAAK,CAAC;EAC1B,SAAS,GAAG,QAAQ;EACpB,WAAW,GAAG,UAAU;EACxB,WAAW,GAAG,UAAU;EAExB,OAAO,GAAG,QAAQ,EAAE,KAAK,GAAG,uBAAuB;EAEnD,UAAU,EAAE,SACV,EAAE,UAAU;GACV,WAAW;GACX,WAAW;EAEb,CAAC,CACH;EAEA,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,QAAQ,CAAC,CAAC;EAE/C,aAAa,EAAE,SAAS,EAAE,KAAK,CAAC;EAEhC,OAAO,GAAG,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;EACzC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC;EAChC,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC;EAC/B,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC;EAC9B,SAAS,GAAG,QAAQ,EAAE,QAAQ,GAAG,IAAI;EAErC,eAAe,GAAG,QAAQ,EAAE,QAAQ,GAAG,KAAK;EAE5C,aAAa,EAAE,SAAS,EAAE,SAAS,CAAC;EAEpC,gBAAgB,GAAG,aAAa;CAClC,CAAC;CACD,SAAS;EACP;GACE,cAAc,SAAS,CAAC,KAAK,OAAO,GAAG,SAAS,KAAK,SAAS,EAAE;GAChE,QAAQ;GACR,MAAM;EACR;EACA;GAAE,SAAS,CAAC,SAAS,OAAO;GAAG,QAAQ;EAAK;EAC5C;GAAE,SAAS,CAAC,SAAS,aAAa;GAAG,QAAQ;EAAK;CACpD;AACF,CAAC;;;AC5CD,MAAa,aAAa,QAAQ;CAChC,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,IAAI,GAAG,WAAW,EAAE,KAAK,CAAC;EAC1B,SAAS,GAAG,QAAQ;EACpB,WAAW,GAAG,UAAU;EACxB,WAAW,GAAG,UAAU;EACxB,QAAQ,GAAG,IAAI,EAAE,KAAK,SAAS,MAAM,KAAK,EAAE;EAC5C,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC;EAC7B,UAAU,EAAE,KAAK;EACjB,gBAAgB,EAAE,SAAS,EAAE,KAAK,CAAC;EACnC,cAAc,EAAE,SAAS,EAAE,KAAK,CAAC;CACnC,CAAC;CACD,SAAS;EACP;EACA;EACA,EAAE,SAAS,CAAC,UAAU,UAAU,EAAE;EAClC;GAAE,SAAS,CAAC,YAAY,gBAAgB;GAAG,QAAQ;EAAK;CAC1D;AACF,CAAC;;;ACnBD,MAAa,WAAW,QAAQ;CAC9B,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,IAAI,GAAG,WAAW,EAAE,KAAK,CAAC;EAC1B,SAAS,GAAG,QAAQ;EACpB,WAAW,GAAG,UAAU;EACxB,WAAW,GAAG,UAAU;EACxB,cAAc,EAAE,KAAK;EACrB,QAAQ,GAAG,IAAI,EAAE,KAAK,SAAS,MAAM,KAAK,EAAE;;;;;;;;EAQ5C,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,GAAG,CAAC,CAAC;EAC9C,WAAW,EAAE,SAAS;;;;;;EAMtB,YAAY,EAAE,SAAS,EAAE,SAAS,CAAC;EACnC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC;;;;;;EAMvB,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;EAC5C,WAAW,EAAE,SACX,EAAE,OAAO;GACP,IAAI,EAAE,KAAK;GACX,SAAS,EAAE,KAAK;GAChB,QAAQ,EAAE,KAAK;IAAC;IAAU;IAAW;GAAQ,CAAC;EAChD,CAAC,CACH;CACF,CAAC;CACD,SAAS;EAAC;EAAU;EAAa;GAAE,QAAQ;GAAgB,QAAQ;EAAK;CAAC;AAC3E,CAAC;;;ACzCD,MAAa,iBAAiB,EAAE,OAAO;CACrC,UAAU,EAAE,OAAO;EACjB,WAAW;EACX,WAAW;EACX,SAAS;EACT,aAAa;CACf,CAAC;CACD,OAAO,EAAE,MAAM,EACb,aAAa,oCACf,CAAC;CACD,UAAU,EAAE,OAAO;EACjB,WAAW;EACX,aAAa;CACf,CAAC;CACD,iBAAiB,EAAE,OAAO;EACxB,WAAW;EACX,aAAa;CACf,CAAC;CACD,WAAW,EAAE,SACX,EAAE,OAAO;EACP,WAAW;EACX,aAAa;CACf,CAAC,CACH;CACA,UAAU,EAAE,SACV,EAAE,OAAO;EACP,WAAW;EACX,aAAa;CACf,CAAC,CACH;AACF,CAAC;;;AC9BD,MAAa,6BAA6B,EAAE,OAAO,EACjD,OAAO,EAAE,MAAM,EACb,aAAa,4CACf,CAAC,EACH,CAAC;AAED,MAAa,sBAAsB,EAAE,OAAO;CAC1C,OAAO,EAAE,OAAO,EACd,aAAa,kCACf,CAAC;CACD,UAAU,EAAE,OAAO;EACjB,WAAW;EACX,aAAa;CACf,CAAC;CACD,iBAAiB,EAAE,OAAO;EACxB,WAAW;EACX,aAAa;CACf,CAAC;AACH,CAAC;;;ACTD,MAAa,iBAAiB,QAAQ;CACpC,MAAM;CACN,UAAU,CAAC;AACb,CAAC"}
+{"version":3,"file":"index.browser.js","names":[],"sources":["../../../src/api/users/entities/users.ts","../../../src/api/users/entities/identities.ts","../../../src/api/users/entities/sessions.ts","../../../src/api/users/schemas/registerSchema.ts","../../../src/api/users/schemas/resetPasswordSchema.ts","../../../src/api/users/index.browser.ts"],"sourcesContent":["import { type Static, z } from \"alepha\";\nimport { $entity, db, sql } from \"alepha/orm\";\n\nexport const DEFAULT_USER_REALM_NAME = \"default\";\n\nexport const users = $entity({\n  name: \"users\",\n  schema: z.object({\n    id: db.primaryKey(z.uuid()),\n    version: db.version(),\n    createdAt: db.createdAt(),\n    updatedAt: db.updatedAt(),\n\n    realm: db.default(z.text(), DEFAULT_USER_REALM_NAME),\n\n    username: z\n      .shortText({\n        minLength: 3,\n        maxLength: 30,\n        // pattern is handled at the realm settings level\n      })\n      .optional(),\n\n    email: z.string().meta({ format: \"email\" }).optional(),\n\n    phoneNumber: z.e164().optional(),\n\n    roles: db.default(z.array(z.string()), []),\n    firstName: z.string().optional(),\n    lastName: z.string().optional(),\n    picture: z.string().optional(),\n    enabled: db.default(z.boolean(), true),\n\n    emailVerified: db.default(z.boolean(), false),\n\n    lastLoginAt: z.datetime().optional(),\n\n    organizationId: db.organization(),\n  }),\n  indexes: [\n    {\n      expressions: (self) => [self.realm, sql`LOWER(${self.username})`],\n      unique: true,\n      name: \"users_realm_username_lower_idx\",\n    },\n    { columns: [\"realm\", \"email\"], unique: true },\n    { columns: [\"realm\", \"phoneNumber\"], unique: true },\n  ],\n});\n\nexport type UserEntity = Static<typeof users.schema>;\n","import { type Static, z } from \"alepha\";\nimport { $entity, db } from \"alepha/orm\";\nimport { users } from \"./users.ts\";\n\nexport const identities = $entity({\n  name: \"identities\",\n  schema: z.object({\n    id: db.primaryKey(z.uuid()),\n    version: db.version(),\n    createdAt: db.createdAt(),\n    updatedAt: db.updatedAt(),\n    userId: db.ref(z.uuid(), () => users.cols.id),\n    password: z.text().optional(),\n    provider: z.text(),\n    providerUserId: z.text().optional(),\n    providerData: z.json().optional(),\n  }),\n  indexes: [\n    \"userId\",\n    \"provider\",\n    { columns: [\"userId\", \"provider\"] },\n    { columns: [\"provider\", \"providerUserId\"], unique: true },\n  ],\n});\n\nexport type IdentityEntity = Static<typeof identities.schema>;\n","import { type Static, z } from \"alepha\";\nimport { $entity, db } from \"alepha/orm\";\nimport { users } from \"./users.ts\";\n\nexport const sessions = $entity({\n  name: \"sessions\",\n  schema: z.object({\n    id: db.primaryKey(z.uuid()),\n    version: db.version(),\n    createdAt: db.createdAt(),\n    updatedAt: db.updatedAt(),\n    refreshToken: z.uuid(),\n    userId: db.ref(z.uuid(), () => users.cols.id),\n    /**\n     * OAuth client this session was minted for, when it was created via the\n     * OAuth 2.1 authorization flow — the `client_id` of an `oauth_clients`\n     * row. Null for first-party logins. Deliberately NOT a DB-level foreign\n     * key: `sessions` is a core entity and must not depend on the optional\n     * OAuth module's table; the join to `oauth_clients` is done at query time.\n     */\n    clientId: z.text({ maxLength: 64 }).optional(),\n    expiresAt: z.datetime(),\n    /**\n     * Last time the session was used to refresh an access token.\n     * Used by realm `refreshToken.expirationIdle` to invalidate idle sessions.\n     * `null` on existing rows pre-migration — falls back to `createdAt`.\n     */\n    lastUsedAt: z.datetime().optional(),\n    ip: z.text().optional(),\n    /**\n     * ISO 3166-1 alpha-2 country code derived from the request geo headers\n     * (`cf-ipcountry` on Cloudflare, CDN equivalents elsewhere) at login time.\n     * `null` on pre-migration rows and where geo isn't available.\n     */\n    country: z.text({ maxLength: 2 }).optional(),\n    userAgent: z\n      .object({\n        os: z.text(),\n        browser: z.text(),\n        device: z.enum([\"MOBILE\", \"DESKTOP\", \"TABLET\"]),\n      })\n      .optional(),\n  }),\n  indexes: [\"userId\", \"expiresAt\", { column: \"refreshToken\", unique: true }],\n});\n\nexport type SessionEntity = Static<typeof sessions.schema>;\n","import type { Static } from \"alepha\";\nimport { z } from \"alepha\";\n\nexport const registerSchema = z.object({\n  username: z\n    .string()\n    .min(3)\n    .max(20)\n    .regex(/^[a-zA-Z0-9_]+$/)\n    .describe(\"Username for the new account\"),\n  email: z.email().describe(\"Email address for the new account\"),\n  password: z.string().min(8).describe(\"Password for the new account\"),\n  confirmPassword: z.string().min(8).describe(\"Confirmation of the password\"),\n  firstName: z.string().max(100).describe(\"User's first name\").optional(),\n  lastName: z.string().max(100).describe(\"User's last name\").optional(),\n});\n\nexport type RegisterInput = Static<typeof registerSchema>;\n","import type { Static } from \"alepha\";\nimport { z } from \"alepha\";\n\nexport const resetPasswordRequestSchema = z.object({\n  email: z.email().describe(\"Email address to send password reset link\"),\n});\n\nexport const resetPasswordSchema = z.object({\n  token: z.string().describe(\"Password reset token from email\"),\n  password: z.string().min(8).describe(\"New password\"),\n  confirmPassword: z\n    .string()\n    .min(8)\n    .describe(\"Confirmation of the new password\"),\n});\n\nexport type ResetPasswordRequest = Static<typeof resetPasswordRequestSchema>;\nexport type ResetPasswordInput = Static<typeof resetPasswordSchema>;\n","import { $module } from \"alepha\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./entities/identities.ts\";\nexport * from \"./entities/sessions.ts\";\nexport * from \"./entities/users.ts\";\nexport * from \"./schemas/registerSchema.ts\";\nexport * from \"./schemas/resetPasswordSchema.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport const AlephaApiUsers = $module({\n  name: \"alepha.api.users\",\n  services: [],\n});\n"],"mappings":";;;AAGA,MAAa,0BAA0B;AAEvC,MAAa,QAAQ,QAAQ;CAC3B,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,IAAI,GAAG,WAAW,EAAE,KAAK,CAAC;EAC1B,SAAS,GAAG,QAAQ;EACpB,WAAW,GAAG,UAAU;EACxB,WAAW,GAAG,UAAU;EAExB,OAAO,GAAG,QAAQ,EAAE,KAAK,GAAG,uBAAuB;EAEnD,UAAU,EACP,UAAU;GACT,WAAW;GACX,WAAW;EAEb,CAAC,CAAC,CACD,SAAS;EAEZ,OAAO,EAAE,OAAO,CAAC,CAAC,KAAK,EAAE,QAAQ,QAAQ,CAAC,CAAC,CAAC,SAAS;EAErD,aAAa,EAAE,KAAK,CAAC,CAAC,SAAS;EAE/B,OAAO,GAAG,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;EACzC,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;EAC/B,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;EAC9B,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;EAC7B,SAAS,GAAG,QAAQ,EAAE,QAAQ,GAAG,IAAI;EAErC,eAAe,GAAG,QAAQ,EAAE,QAAQ,GAAG,KAAK;EAE5C,aAAa,EAAE,SAAS,CAAC,CAAC,SAAS;EAEnC,gBAAgB,GAAG,aAAa;CAClC,CAAC;CACD,SAAS;EACP;GACE,cAAc,SAAS,CAAC,KAAK,OAAO,GAAG,SAAS,KAAK,SAAS,EAAE;GAChE,QAAQ;GACR,MAAM;EACR;EACA;GAAE,SAAS,CAAC,SAAS,OAAO;GAAG,QAAQ;EAAK;EAC5C;GAAE,SAAS,CAAC,SAAS,aAAa;GAAG,QAAQ;EAAK;CACpD;AACF,CAAC;;;AC5CD,MAAa,aAAa,QAAQ;CAChC,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,IAAI,GAAG,WAAW,EAAE,KAAK,CAAC;EAC1B,SAAS,GAAG,QAAQ;EACpB,WAAW,GAAG,UAAU;EACxB,WAAW,GAAG,UAAU;EACxB,QAAQ,GAAG,IAAI,EAAE,KAAK,SAAS,MAAM,KAAK,EAAE;EAC5C,UAAU,EAAE,KAAK,CAAC,CAAC,SAAS;EAC5B,UAAU,EAAE,KAAK;EACjB,gBAAgB,EAAE,KAAK,CAAC,CAAC,SAAS;EAClC,cAAc,EAAE,KAAK,CAAC,CAAC,SAAS;CAClC,CAAC;CACD,SAAS;EACP;EACA;EACA,EAAE,SAAS,CAAC,UAAU,UAAU,EAAE;EAClC;GAAE,SAAS,CAAC,YAAY,gBAAgB;GAAG,QAAQ;EAAK;CAC1D;AACF,CAAC;;;ACnBD,MAAa,WAAW,QAAQ;CAC9B,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,IAAI,GAAG,WAAW,EAAE,KAAK,CAAC;EAC1B,SAAS,GAAG,QAAQ;EACpB,WAAW,GAAG,UAAU;EACxB,WAAW,GAAG,UAAU;EACxB,cAAc,EAAE,KAAK;EACrB,QAAQ,GAAG,IAAI,EAAE,KAAK,SAAS,MAAM,KAAK,EAAE;;;;;;;;EAQ5C,UAAU,EAAE,KAAK,EAAE,WAAW,GAAG,CAAC,CAAC,CAAC,SAAS;EAC7C,WAAW,EAAE,SAAS;;;;;;EAMtB,YAAY,EAAE,SAAS,CAAC,CAAC,SAAS;EAClC,IAAI,EAAE,KAAK,CAAC,CAAC,SAAS;;;;;;EAMtB,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS;EAC3C,WAAW,EACR,OAAO;GACN,IAAI,EAAE,KAAK;GACX,SAAS,EAAE,KAAK;GAChB,QAAQ,EAAE,KAAK;IAAC;IAAU;IAAW;GAAQ,CAAC;EAChD,CAAC,CAAC,CACD,SAAS;CACd,CAAC;CACD,SAAS;EAAC;EAAU;EAAa;GAAE,QAAQ;GAAgB,QAAQ;EAAK;CAAC;AAC3E,CAAC;;;ACzCD,MAAa,iBAAiB,EAAE,OAAO;CACrC,UAAU,EACP,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,IAAI,EAAE,CAAC,CACP,MAAM,iBAAiB,CAAC,CACxB,SAAS,8BAA8B;CAC1C,OAAO,EAAE,MAAM,CAAC,CAAC,SAAS,mCAAmC;CAC7D,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,8BAA8B;CACnE,iBAAiB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,8BAA8B;CAC1E,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS,mBAAmB,CAAC,CAAC,SAAS;CACtE,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS,kBAAkB,CAAC,CAAC,SAAS;AACtE,CAAC;;;ACZD,MAAa,6BAA6B,EAAE,OAAO,EACjD,OAAO,EAAE,MAAM,CAAC,CAAC,SAAS,2CAA2C,EACvE,CAAC;AAED,MAAa,sBAAsB,EAAE,OAAO;CAC1C,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS,iCAAiC;CAC5D,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,cAAc;CACnD,iBAAiB,EACd,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,SAAS,kCAAkC;AAChD,CAAC;;;ACFD,MAAa,iBAAiB,QAAQ;CACpC,MAAM;CACN,UAAU,CAAC;AACb,CAAC"}