tokentracker-cli 0.2.23

package/node_modules/@insforge/shared-schemas/dist/auth-api.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-api.schema.d.ts","sourceRoot":"","sources":["../src/auth-api.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAiBxB;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;EAG3B,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;EAIlC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;EAGrC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,+BAA+B;;;;;;;;;EAA6B,CAAC;AAE1E,eAAO,MAAM,iCAAiC;;;;;;EAE5C,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;GAItB,CAAC;AAEd;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;;;EAEnC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,0BAA0B;;;;;;EAErC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,kCAAkC;;;;;;EAE7C,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;EAOjC,CAAC;AAEL;;GAEG;AACH,eAAO,MAAM,mCAAmC;;;;;;EAE9C,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,uCAAuC;;;;;;;;;EAGlD,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;EAGrC,CAAC;AAMH;;;GAGG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAMnC,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKtC,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKpC,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAIvC,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,wCAAwC;;;;;;;;;EAGnD,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,2BAA2B;;;;;;EAEtC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAA2B,CAAC;AAEzE;;GAEG;AACH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAE1C,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;EAGnC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAOlC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;EAGpC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,yBAAyB;;;;;;EAEpC,CAAC;AAMH;;GAEG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;EAQvC,CAAC;AAEL;;GAEG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;EAU/B,CAAC;AAEb;;GAEG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGzC,CAAC;AAMH;;GAEG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAM9B,CAAC;AAEb;;GAEG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAmB,CAAC;AAE5D;;;GAGG;AACH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQ5C,CAAC;AAMH;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;EAKlC,CAAC;AAOH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AACxF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AACpF,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAC9F,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAChG,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CACrD,OAAO,uCAAuC,CAC/C,CAAC;AACF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAG9E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,kCAAkC,GAAG,CAAC,CAAC,KAAK,CACtD,OAAO,wCAAwC,CAChD,CAAC;AACF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAC1F,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AACxF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE5F,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC"}

package/node_modules/@insforge/shared-schemas/dist/auth-api.schema.js

@@ -0,0 +1,277 @@
+import { z } from 'zod';
+import { emailSchema, passwordSchema, nameSchema, userIdSchema, userSchema, profileSchema, oAuthConfigSchema, oAuthProvidersSchema, authConfigSchema, } from './auth.schema';
+// ============================================================================
+// Common schemas
+// ============================================================================
+/**
+ * Pagination parameters shared across list endpoints
+ */
+export const paginationSchema = z.object({
+    limit: z.string().optional(),
+    offset: z.string().optional(),
+});
+/**
+ * POST /api/auth/users - Create user
+ */
+export const createUserRequestSchema = z.object({
+    email: emailSchema,
+    password: passwordSchema,
+    name: nameSchema.optional(),
+});
+/**
+ * POST /api/auth/sessions - Create session
+ */
+export const createSessionRequestSchema = z.object({
+    email: emailSchema,
+    password: passwordSchema,
+});
+/**
+ * POST /api/auth/admin/sessions - Create admin session
+ */
+export const createAdminSessionRequestSchema = createSessionRequestSchema;
+export const exchangeAdminSessionRequestSchema = z.object({
+    code: z.string(),
+});
+/**
+ * GET /api/auth/users - List users (query parameters)
+ */
+export const listUsersRequestSchema = paginationSchema
+    .extend({
+    search: z.string().optional(),
+})
+    .optional();
+/**
+ * DELETE /api/auth/users - Delete users (batch)
+ */
+export const deleteUsersRequestSchema = z.object({
+    userIds: z.array(userIdSchema).min(1, 'At least one user ID is required'),
+});
+/**
+ * PATCH /api/auth/profiles/current - Update current user's profile
+ */
+export const updateProfileRequestSchema = z.object({
+    profile: z.record(z.unknown()),
+});
+/**
+ * POST /api/auth/email/send-verification - Send verification email (code or link based on config)
+ */
+export const sendVerificationEmailRequestSchema = z.object({
+    email: emailSchema,
+});
+/**
+ * POST /api/auth/email/verify - Verify email with OTP
+ * Uses verifyEmailMethod from auth config to determine verification type:
+ * - 'code': expects email + 6-digit numeric code
+ * - 'link': expects 64-char hex token only
+ */
+export const verifyEmailRequestSchema = z
+    .object({
+    email: emailSchema.optional(),
+    otp: z.string().min(1),
+})
+    .refine((data) => data.email || data.otp, {
+    message: 'Either email or otp must be provided',
+});
+/**
+ * POST /api/auth/email/send-reset-password - Send reset password email (code or link based on config)
+ */
+export const sendResetPasswordEmailRequestSchema = z.object({
+    email: emailSchema,
+});
+/**
+ * POST /api/auth/email/exchange-reset-password-token - Exchange reset password code for reset token
+ * Used in two-step password reset flow (code method only): exchange code for token, then reset password with token
+ */
+export const exchangeResetPasswordTokenRequestSchema = z.object({
+    email: emailSchema,
+    code: z.string().min(1),
+});
+/**
+ * POST /api/auth/email/reset-password - Reset password with token
+ * Token can be:
+ * - Magic link token (from send-reset-password endpoint when method is 'link')
+ * - Reset token (from exchange-reset-password-token endpoint after code verification)
+ * Both use RESET_PASSWORD purpose and are verified the same way
+ */
+export const resetPasswordRequestSchema = z.object({
+    newPassword: passwordSchema,
+    otp: z.string().min(1, 'OTP/token is required'),
+});
+// ============================================================================
+// Response schemas
+// ============================================================================
+/**
+ * Response for POST /api/auth/users
+ * Includes optional redirectTo URL when user is successfully registered and email verification is not required
+ */
+export const createUserResponseSchema = z.object({
+    user: userSchema.optional(),
+    accessToken: z.string().nullable(),
+    requireEmailVerification: z.boolean().optional(),
+    redirectTo: z.string().url().optional(),
+    csrfToken: z.string().nullable().optional(),
+});
+/**
+ * Response for POST /api/auth/sessions
+ * Includes user and access token, plus optional redirectTo URL for frontend navigation
+ */
+export const createSessionResponseSchema = z.object({
+    user: userSchema,
+    accessToken: z.string(),
+    redirectTo: z.string().url().optional(),
+    csrfToken: z.string().nullable().optional(),
+});
+/**
+ * Response for POST /api/auth/email/verify
+ * Includes user and access token, plus optional redirectTo URL for frontend navigation
+ */
+export const verifyEmailResponseSchema = z.object({
+    user: userSchema,
+    accessToken: z.string(),
+    redirectTo: z.string().url().optional(),
+    csrfToken: z.string().nullable().optional(),
+});
+/**
+ * Response for POST /api/auth/refresh
+ * Returns new access token and CSRF token after token refresh
+ */
+export const refreshSessionResponseSchema = z.object({
+    accessToken: z.string(),
+    user: userSchema,
+    csrfToken: z.string(),
+});
+/**
+ * Response for POST /api/auth/email/exchange-reset-password-token
+ * Returns reset token that can be used to reset password
+ */
+export const exchangeResetPasswordTokenResponseSchema = z.object({
+    token: z.string(),
+    expiresAt: z.string().datetime(),
+});
+/**
+ * Response for POST /api/auth/email/reset-password
+ * Includes success message
+ */
+export const resetPasswordResponseSchema = z.object({
+    message: z.string(),
+});
+/**
+ * Response for POST /api/auth/admin/sessions
+ */
+export const createAdminSessionResponseSchema = createUserResponseSchema;
+/**
+ * Response for GET /api/auth/sessions/current
+ */
+export const getCurrentSessionResponseSchema = z.object({
+    user: userSchema,
+});
+/**
+ * Response for GET /api/auth/profiles/:userId - Get user profile
+ */
+export const getProfileResponseSchema = z.object({
+    id: userIdSchema,
+    profile: profileSchema.nullable(),
+});
+/**
+ * Response for GET /api/auth/users
+ */
+export const listUsersResponseSchema = z.object({
+    data: z.array(userSchema),
+    pagination: z.object({
+        offset: z.number(),
+        limit: z.number(),
+        total: z.number(),
+    }),
+});
+/**
+ * Response for DELETE /api/auth/users
+ */
+export const deleteUsersResponseSchema = z.object({
+    message: z.string(),
+    deletedCount: z.number().int().nonnegative(),
+});
+/**
+ * Response for GET /api/auth/v1/google-auth and GET /api/auth/v1/github-auth
+ */
+export const getOauthUrlResponseSchema = z.object({
+    authUrl: z.string().url(),
+});
+// ============================================================================
+// OAuth Configuration Management schemas
+// ============================================================================
+/**
+ * POST /api/auth/oauth/configs - Create OAuth configuration
+ */
+export const createOAuthConfigRequestSchema = oAuthConfigSchema
+    .omit({
+    id: true,
+    createdAt: true,
+    updatedAt: true,
+})
+    .extend({
+    clientSecret: z.string().optional(),
+});
+/**
+ * PUT /api/auth/oauth/configs/:provider - Update OAuth configuration
+ */
+export const updateOAuthConfigRequestSchema = oAuthConfigSchema
+    .omit({
+    id: true,
+    provider: true,
+    createdAt: true,
+    updatedAt: true,
+})
+    .extend({
+    clientSecret: z.string().optional(),
+})
+    .partial();
+/**
+ * Response for GET /api/auth/oauth/configs
+ */
+export const listOAuthConfigsResponseSchema = z.object({
+    data: z.array(oAuthConfigSchema),
+    count: z.number(),
+});
+// ============================================================================
+// Authentication Configuration schemas
+// ============================================================================
+/**
+ * PUT /api/auth/config - Update authentication configuration
+ */
+export const updateAuthConfigRequestSchema = authConfigSchema
+    .omit({
+    id: true,
+    createdAt: true,
+    updatedAt: true,
+})
+    .partial();
+/**
+ * Response for GET /api/auth/config
+ */
+export const getAuthConfigResponseSchema = authConfigSchema;
+/**
+ * Response for GET /api/auth/public-config - Unified public auth configuration endpoint
+ * Combines OAuth providers and email auth configuration
+ */
+export const getPublicAuthConfigResponseSchema = z.object({
+    oAuthProviders: z.array(oAuthProvidersSchema),
+    ...authConfigSchema.omit({
+        id: true,
+        updatedAt: true,
+        createdAt: true,
+        signInRedirectTo: true,
+    }).shape,
+});
+// ============================================================================
+// Error response schema
+// ============================================================================
+/**
+ * Standard error response format for auth endpoints
+ */
+export const authErrorResponseSchema = z.object({
+    error: z.string(),
+    message: z.string(),
+    statusCode: z.number().int(),
+    nextActions: z.string().optional(),
+});
+//# sourceMappingURL=auth-api.schema.js.map

package/node_modules/@insforge/shared-schemas/dist/auth-api.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-api.schema.js","sourceRoot":"","sources":["../src/auth-api.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,WAAW,EACX,cAAc,EACd,UAAU,EACV,YAAY,EACZ,UAAU,EACV,aAAa,EACb,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AAEvB,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,KAAK,EAAE,WAAW;IAClB,QAAQ,EAAE,cAAc;IACxB,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,KAAK,EAAE,WAAW;IAClB,QAAQ,EAAE,cAAc;CACzB,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,0BAA0B,CAAC;AAE1E,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CACjB,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,gBAAgB;KACnD,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC;KACD,QAAQ,EAAE,CAAC;AAEd;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,kCAAkC,CAAC;CAC1E,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;CAC/B,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,KAAK,EAAE,WAAW;CACnB,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE;IAC7B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACvB,CAAC;KACD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE;IACxC,OAAO,EAAE,sCAAsC;CAChD,CAAC,CAAC;AAEL;;GAEG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,KAAK,EAAE,WAAW;CACnB,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9D,KAAK,EAAE,WAAW;IAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACxB,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,WAAW,EAAE,cAAc;IAC3B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC;CAChD,CAAC,CAAC;AAEH,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,wBAAwB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,IAAI,EAAE,UAAU;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,IAAI,EAAE,UAAU;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,IAAI,EAAE,UAAU;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,wBAAwB,CAAC;AAEzE;;GAEG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,IAAI,EAAE,UAAU;CACjB,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,EAAE,EAAE,YAAY;IAChB,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;IACzB,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;CACH,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CAC7C,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CAC1B,CAAC,CAAC;AAEH,+EAA+E;AAC/E,yCAAyC;AACzC,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,iBAAiB;KAC5D,IAAI,CAAC;IACJ,EAAE,EAAE,IAAI;IACR,SAAS,EAAE,IAAI;IACf,SAAS,EAAE,IAAI;CAChB,CAAC;KACD,MAAM,CAAC;IACN,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAEL;;GAEG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,iBAAiB;KAC5D,IAAI,CAAC;IACJ,EAAE,EAAE,IAAI;IACR,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,IAAI;IACf,SAAS,EAAE,IAAI;CAChB,CAAC;KACD,MAAM,CAAC;IACN,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC;KACD,OAAO,EAAE,CAAC;AAEb;;GAEG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC;AAEH,+EAA+E;AAC/E,uCAAuC;AACvC,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,gBAAgB;KAC1D,IAAI,CAAC;IACJ,EAAE,EAAE,IAAI;IACR,SAAS,EAAE,IAAI;IACf,SAAS,EAAE,IAAI;CAChB,CAAC;KACD,OAAO,EAAE,CAAC;AAEb;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,gBAAgB,CAAC;AAE5D;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;IAC7C,GAAG,gBAAgB,CAAC,IAAI,CAAC;QACvB,EAAE,EAAE,IAAI;QACR,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,IAAI;QACf,gBAAgB,EAAE,IAAI;KACvB,CAAC,CAAC,KAAK;CACT,CAAC,CAAC;AAEH,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC"}

package/node_modules/@insforge/shared-schemas/dist/auth.schema.d.ts

@@ -0,0 +1,187 @@
+import { z } from 'zod';
+/**
+ * Core auth entity schemas (PostgreSQL structure)
+ * These define the fundamental auth data models
+ */
+export declare const userIdSchema: z.ZodString;
+export declare const emailSchema: z.ZodString;
+export declare const passwordSchema: z.ZodString;
+export declare const nameSchema: z.ZodString;
+export declare const roleSchema: z.ZodEnum<["anon", "authenticated", "project_admin"]>;
+export declare const verificationMethodSchema: z.ZodEnum<["code", "link"]>;
+/**
+ * User profile schema with default fields and passthrough for custom fields
+ * Note: Using snake_case for fields as they are stored directly in PostgreSQL JSONB
+ */
+export declare const profileSchema: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    avatar_url: z.ZodOptional<z.ZodString>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    name: z.ZodOptional<z.ZodString>;
+    avatar_url: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    name: z.ZodOptional<z.ZodString>;
+    avatar_url: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">>;
+/**
+ * User entity schema - represents the auth.users table in PostgreSQL
+ */
+export declare const userSchema: z.ZodObject<{
+    id: z.ZodString;
+    email: z.ZodString;
+    emailVerified: z.ZodBoolean;
+    providers: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+    profile: z.ZodNullable<z.ZodObject<{
+        name: z.ZodOptional<z.ZodString>;
+        avatar_url: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        name: z.ZodOptional<z.ZodString>;
+        avatar_url: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        name: z.ZodOptional<z.ZodString>;
+        avatar_url: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    metadata: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    createdAt: string;
+    metadata: Record<string, unknown> | null;
+    email: string;
+    emailVerified: boolean;
+    updatedAt: string;
+    profile: z.objectOutputType<{
+        name: z.ZodOptional<z.ZodString>;
+        avatar_url: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough"> | null;
+    providers?: string[] | undefined;
+}, {
+    id: string;
+    createdAt: string;
+    metadata: Record<string, unknown> | null;
+    email: string;
+    emailVerified: boolean;
+    updatedAt: string;
+    profile: z.objectInputType<{
+        name: z.ZodOptional<z.ZodString>;
+        avatar_url: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough"> | null;
+    providers?: string[] | undefined;
+}>;
+/**
+ * OAuth state for redirect handling
+ */
+export declare const oAuthProvidersSchema: z.ZodEnum<["google", "github", "discord", "linkedin", "facebook", "instagram", "tiktok", "apple", "x", "spotify", "microsoft"]>;
+export declare const oAuthStateSchema: z.ZodObject<{
+    provider: z.ZodEnum<["google", "github", "discord", "linkedin", "facebook", "instagram", "tiktok", "apple", "x", "spotify", "microsoft"]>;
+    redirectUri: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    provider: "google" | "github" | "discord" | "linkedin" | "facebook" | "instagram" | "tiktok" | "apple" | "x" | "spotify" | "microsoft";
+    redirectUri?: string | undefined;
+}, {
+    provider: "google" | "github" | "discord" | "linkedin" | "facebook" | "instagram" | "tiktok" | "apple" | "x" | "spotify" | "microsoft";
+    redirectUri?: string | undefined;
+}>;
+export declare const oAuthConfigSchema: z.ZodObject<{
+    id: z.ZodString;
+    provider: z.ZodEnum<["google", "github", "discord", "linkedin", "facebook", "instagram", "tiktok", "apple", "x", "spotify", "microsoft"]>;
+    clientId: z.ZodOptional<z.ZodString>;
+    scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    redirectUri: z.ZodOptional<z.ZodString>;
+    useSharedKey: z.ZodBoolean;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    provider: "google" | "github" | "discord" | "linkedin" | "facebook" | "instagram" | "tiktok" | "apple" | "x" | "spotify" | "microsoft";
+    id: string;
+    createdAt: string;
+    updatedAt: string;
+    useSharedKey: boolean;
+    redirectUri?: string | undefined;
+    clientId?: string | undefined;
+    scopes?: string[] | undefined;
+}, {
+    provider: "google" | "github" | "discord" | "linkedin" | "facebook" | "instagram" | "tiktok" | "apple" | "x" | "spotify" | "microsoft";
+    id: string;
+    createdAt: string;
+    updatedAt: string;
+    useSharedKey: boolean;
+    redirectUri?: string | undefined;
+    clientId?: string | undefined;
+    scopes?: string[] | undefined;
+}>;
+export declare const authConfigSchema: z.ZodObject<{
+    id: z.ZodString;
+    requireEmailVerification: z.ZodBoolean;
+    passwordMinLength: z.ZodNumber;
+    requireNumber: z.ZodBoolean;
+    requireLowercase: z.ZodBoolean;
+    requireUppercase: z.ZodBoolean;
+    requireSpecialChar: z.ZodBoolean;
+    verifyEmailMethod: z.ZodEnum<["code", "link"]>;
+    resetPasswordMethod: z.ZodEnum<["code", "link"]>;
+    signInRedirectTo: z.ZodEffects<z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodLiteral<"">, z.ZodNull]>>, string | null | undefined, string | null | undefined>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    createdAt: string;
+    updatedAt: string;
+    requireEmailVerification: boolean;
+    passwordMinLength: number;
+    requireNumber: boolean;
+    requireLowercase: boolean;
+    requireUppercase: boolean;
+    requireSpecialChar: boolean;
+    verifyEmailMethod: "code" | "link";
+    resetPasswordMethod: "code" | "link";
+    signInRedirectTo?: string | null | undefined;
+}, {
+    id: string;
+    createdAt: string;
+    updatedAt: string;
+    requireEmailVerification: boolean;
+    passwordMinLength: number;
+    requireNumber: boolean;
+    requireLowercase: boolean;
+    requireUppercase: boolean;
+    requireSpecialChar: boolean;
+    verifyEmailMethod: "code" | "link";
+    resetPasswordMethod: "code" | "link";
+    signInRedirectTo?: string | null | undefined;
+}>;
+/**
+ * JWT token payload schema
+ */
+export declare const tokenPayloadSchema: z.ZodObject<{
+    sub: z.ZodString;
+    email: z.ZodString;
+    role: z.ZodEnum<["anon", "authenticated", "project_admin"]>;
+    iat: z.ZodOptional<z.ZodNumber>;
+    exp: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    role: "anon" | "authenticated" | "project_admin";
+    email: string;
+    sub: string;
+    iat?: number | undefined;
+    exp?: number | undefined;
+}, {
+    role: "anon" | "authenticated" | "project_admin";
+    email: string;
+    sub: string;
+    iat?: number | undefined;
+    exp?: number | undefined;
+}>;
+export type UserIdSchema = z.infer<typeof userIdSchema>;
+export type EmailSchema = z.infer<typeof emailSchema>;
+export type PasswordSchema = z.infer<typeof passwordSchema>;
+export type RoleSchema = z.infer<typeof roleSchema>;
+export type VerificationMethodSchema = z.infer<typeof verificationMethodSchema>;
+export type ProfileSchema = z.infer<typeof profileSchema>;
+export type UserSchema = z.infer<typeof userSchema>;
+export type TokenPayloadSchema = z.infer<typeof tokenPayloadSchema>;
+export type OAuthConfigSchema = z.infer<typeof oAuthConfigSchema>;
+export type OAuthProvidersSchema = z.infer<typeof oAuthProvidersSchema>;
+export type AuthConfigSchema = z.infer<typeof authConfigSchema>;
+//# sourceMappingURL=auth.schema.d.ts.map

package/node_modules/@insforge/shared-schemas/dist/auth.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.schema.d.ts","sourceRoot":"","sources":["../src/auth.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AAMH,eAAO,MAAM,YAAY,aAA4C,CAAC;AAEtE,eAAO,MAAM,WAAW,aAAgE,CAAC;AAEzF,eAAO,MAAM,cAAc,aAAa,CAAC;AAEzC,eAAO,MAAM,UAAU,aAId,CAAC;AAEV,eAAO,MAAM,UAAU,uDAAqD,CAAC;AAE7E,eAAO,MAAM,wBAAwB,6BAA2B,CAAC;AAEjE;;;GAGG;AACH,eAAO,MAAM,aAAa;;;;;;;;;gCAMV,CAAC;AAMjB;;GAEG;AACH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EASrB,CAAC;AAEH;;GAEG;AAEH,eAAO,MAAM,oBAAoB,iIAY/B,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;;;;;;EAG3B,CAAC;AAGH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAS5B,CAAC;AAGH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgB3B,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;EAM7B,CAAC;AAMH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AACxD,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AACtD,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAC5D,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AACpD,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAChF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAC1D,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AACpD,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACpE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAClE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AACxE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}

package/node_modules/@insforge/shared-schemas/dist/auth.schema.js

@@ -0,0 +1,105 @@
+import { z } from 'zod';
+/**
+ * Core auth entity schemas (PostgreSQL structure)
+ * These define the fundamental auth data models
+ */
+// ============================================================================
+// Base field schemas
+// ============================================================================
+export const userIdSchema = z.string().uuid('Invalid user ID format');
+export const emailSchema = z.string().email('Invalid email format').toLowerCase().trim();
+export const passwordSchema = z.string();
+export const nameSchema = z
+    .string()
+    .min(1, 'Name is required')
+    .max(100, 'Name must be less than 100 characters')
+    .trim();
+export const roleSchema = z.enum(['anon', 'authenticated', 'project_admin']);
+export const verificationMethodSchema = z.enum(['code', 'link']);
+/**
+ * User profile schema with default fields and passthrough for custom fields
+ * Note: Using snake_case for fields as they are stored directly in PostgreSQL JSONB
+ */
+export const profileSchema = z
+    .object({
+    name: z.string().optional(),
+    // eslint-disable-next-line @typescript-eslint/naming-convention
+    avatar_url: z.string().url().optional(),
+})
+    .passthrough();
+// ============================================================================
+// Core entity schemas
+// ============================================================================
+/**
+ * User entity schema - represents the auth.users table in PostgreSQL
+ */
+export const userSchema = z.object({
+    id: userIdSchema,
+    email: emailSchema,
+    emailVerified: z.boolean(),
+    providers: z.array(z.string()).optional(),
+    createdAt: z.string(), // PostgreSQL timestamp
+    updatedAt: z.string(), // PostgreSQL timestamp
+    profile: profileSchema.nullable(), // User profile data (name, avatar_url, bio, etc.)
+    metadata: z.record(z.unknown()).nullable(), // System metadata (device ID, login IP, etc.)
+});
+/**
+ * OAuth state for redirect handling
+ */
+export const oAuthProvidersSchema = z.enum([
+    'google',
+    'github',
+    'discord',
+    'linkedin',
+    'facebook',
+    'instagram',
+    'tiktok',
+    'apple',
+    'x',
+    'spotify',
+    'microsoft',
+]);
+export const oAuthStateSchema = z.object({
+    provider: oAuthProvidersSchema,
+    redirectUri: z.string().url().optional(),
+});
+// OAuth provider configuration schema
+export const oAuthConfigSchema = z.object({
+    id: z.string().uuid(),
+    provider: oAuthProvidersSchema,
+    clientId: z.string().optional(),
+    scopes: z.array(z.string()).optional(),
+    redirectUri: z.string().optional(),
+    useSharedKey: z.boolean(),
+    createdAt: z.string(), // PostgreSQL timestamp
+    updatedAt: z.string(), // PostgreSQL timestamp
+});
+// Email authentication configuration schema
+export const authConfigSchema = z.object({
+    id: z.string().uuid(),
+    requireEmailVerification: z.boolean(),
+    passwordMinLength: z.number().min(4).max(128),
+    requireNumber: z.boolean(),
+    requireLowercase: z.boolean(),
+    requireUppercase: z.boolean(),
+    requireSpecialChar: z.boolean(),
+    verifyEmailMethod: verificationMethodSchema,
+    resetPasswordMethod: verificationMethodSchema,
+    signInRedirectTo: z
+        .union([z.string().url(), z.literal(''), z.null()])
+        .optional()
+        .transform((val) => (val === '' ? null : val)),
+    createdAt: z.string(), // PostgreSQL timestamp
+    updatedAt: z.string(), // PostgreSQL timestamp
+});
+/**
+ * JWT token payload schema
+ */
+export const tokenPayloadSchema = z.object({
+    sub: userIdSchema, // Subject (user ID)
+    email: emailSchema,
+    role: roleSchema,
+    iat: z.number().optional(), // Issued at
+    exp: z.number().optional(), // Expiration
+});
+//# sourceMappingURL=auth.schema.js.map

package/node_modules/@insforge/shared-schemas/dist/auth.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.schema.js","sourceRoot":"","sources":["../src/auth.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AAEH,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;AAEtE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;AAEzF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;AAEzC,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC;KACxB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC;KAC1B,GAAG,CAAC,GAAG,EAAE,uCAAuC,CAAC;KACjD,IAAI,EAAE,CAAC;AAEV,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC,CAAC;AAE7E,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEjE;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,gEAAgE;IAChE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,WAAW,EAAE,CAAC;AAEjB,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,YAAY;IAChB,KAAK,EAAE,WAAW;IAClB,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE;IAC1B,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,uBAAuB;IAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,uBAAuB;IAC9C,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE,EAAE,kDAAkD;IACrF,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,8CAA8C;CAC3F,CAAC,CAAC;AAEH;;GAEG;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC;IACzC,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,UAAU;IACV,UAAU;IACV,WAAW;IACX,QAAQ;IACR,OAAO;IACP,GAAG;IACH,SAAS;IACT,WAAW;CACZ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,oBAAoB;IAC9B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC;AAEH,sCAAsC;AACtC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACrB,QAAQ,EAAE,oBAAoB;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;IACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,uBAAuB;IAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,uBAAuB;CAC/C,CAAC,CAAC;AAEH,4CAA4C;AAC5C,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACrB,wBAAwB,EAAE,CAAC,CAAC,OAAO,EAAE;IACrC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC7C,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE;IAC1B,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC7B,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC7B,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC/B,iBAAiB,EAAE,wBAAwB;IAC3C,mBAAmB,EAAE,wBAAwB;IAC7C,gBAAgB,EAAE,CAAC;SAChB,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;SAClD,QAAQ,EAAE;SACV,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAChD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,uBAAuB;IAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,uBAAuB;CAC/C,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,GAAG,EAAE,YAAY,EAAE,oBAAoB;IACvC,KAAK,EAAE,WAAW;IAClB,IAAI,EAAE,UAAU;IAChB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,YAAY;IACxC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,aAAa;CAC1C,CAAC,CAAC"}