vr-commons 1.0.189 → 1.0.190

package/dist/utils/index.d.ts

@@ -13,4 +13,5 @@ export { DPP_OperationsUtil } from "./admin/admin.devicePayments.utils";
 export { formatDeviceSession, formatEventLog, formatEventLogs, buildEventLogWhereClause, buildSearchConditions, buildUserSearchConditions, } from "./admin/admin.eventLogs.utils";
 export { logDebug, logError, logInfo, logSystem, logWarning, } from "./admin/admin.systemLogs.utils";
 export { generateOTP, getOTPExpiry, getVerificationMethod, sendEmail, sendSMS, sendVerificationCode, detectContactType, validateContactValue, } from "./users/users.verification.utils";
+export { ACCOUNT_RECOVERY_OTP_LENGTH, ACCOUNT_RECOVERY_OTP_TTL_MINUTES, ACCOUNT_RECOVERY_MAX_OTP_ATTEMPTS, generateAccountRecoveryOTP, hashAccountRecoveryOTP, verifyAccountRecoveryOTP, getAccountRecoveryOTPExpiry, } from "./users/users.accountRecovery.utils";
 export { PendingRegistration, VerificationMethod, ConfirmResponse, UploadResult, StockChangeResult, DeviceResetResult, DeviceResetOptions, } from "./shared/shared.types";

package/dist/utils/index.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.stockUtil = exports.hierarchicalView = exports.validateHierarchy = exports.isSuperiorOrEqual = exports.isSuperior = exports.isSubordinateOrEqual = exports.isSubordinate = exports.isRankEqual = exports.getUserLevel = exports.suspensionUtil = exports.banUtil = exports.hasHigherAuthority = exports.getModeratableRoles = exports.canModerateUser = exports.canModerate = exports.softDeleteUser = exports.hashPassword = exports.validatePassword = exports.validateUniqueFields = exports.generateJacketId = exports.getSortOrder = exports.generateEventSearchConditions = exports.generateUserSearchConditions = exports.findSecurityClearanceByRole = exports.getUsersByRole = exports.getUserById = exports.isAccountAccessible = exports.canModifyAccount = exports.hasAllPermissions = exports.hasAnyPermission = exports.hasPermission = exports.hasRole = exports.formatUserListResponse = exports.formatUserProfile = exports.sendErrorResponse = exports.sendSuccessResponse = exports.logEvent = exports.formatTimeRemaining = exports.getTokenTimeRemaining = exports.generateToken = exports.shouldRefreshToken = exports.verifyToken = exports.generateRiderToken = exports.generatePassengerToken = exports.generateAdminToken = exports.checkSuspensionStatus = exports.checkIsUserBannedOrSuspended = exports.checkBanStatus = exports.hasActiveDependencies = exports.checkAccountDependencies = void 0;
-exports.validateContactValue = exports.detectContactType = exports.sendVerificationCode = exports.sendSMS = exports.sendEmail = exports.getVerificationMethod = exports.getOTPExpiry = exports.generateOTP = exports.logWarning = exports.logSystem = exports.logInfo = exports.logError = exports.logDebug = exports.buildUserSearchConditions = exports.buildSearchConditions = exports.buildEventLogWhereClause = exports.formatEventLogs = exports.formatEventLog = exports.formatDeviceSession = exports.DPP_OperationsUtil = exports.cloudinaryUtil = void 0;
+exports.getAccountRecoveryOTPExpiry = exports.verifyAccountRecoveryOTP = exports.hashAccountRecoveryOTP = exports.generateAccountRecoveryOTP = exports.ACCOUNT_RECOVERY_MAX_OTP_ATTEMPTS = exports.ACCOUNT_RECOVERY_OTP_TTL_MINUTES = exports.ACCOUNT_RECOVERY_OTP_LENGTH = exports.validateContactValue = exports.detectContactType = exports.sendVerificationCode = exports.sendSMS = exports.sendEmail = exports.getVerificationMethod = exports.getOTPExpiry = exports.generateOTP = exports.logWarning = exports.logSystem = exports.logInfo = exports.logError = exports.logDebug = exports.buildUserSearchConditions = exports.buildSearchConditions = exports.buildEventLogWhereClause = exports.formatEventLogs = exports.formatEventLog = exports.formatDeviceSession = exports.DPP_OperationsUtil = exports.cloudinaryUtil = void 0;
 var shared_accounts_utils_1 = require("./shared/shared.accounts.utils");
 Object.defineProperty(exports, "checkAccountDependencies", { enumerable: true, get: function () { return shared_accounts_utils_1.checkAccountDependencies; } });
 Object.defineProperty(exports, "hasActiveDependencies", { enumerable: true, get: function () { return shared_accounts_utils_1.hasActiveDependencies; } });
@@ -88,3 +88,11 @@ Object.defineProperty(exports, "sendSMS", { enumerable: true, get: function () {
 Object.defineProperty(exports, "sendVerificationCode", { enumerable: true, get: function () { return users_verification_utils_1.sendVerificationCode; } });
 Object.defineProperty(exports, "detectContactType", { enumerable: true, get: function () { return users_verification_utils_1.detectContactType; } });
 Object.defineProperty(exports, "validateContactValue", { enumerable: true, get: function () { return users_verification_utils_1.validateContactValue; } });
+var users_accountRecovery_utils_1 = require("./users/users.accountRecovery.utils");
+Object.defineProperty(exports, "ACCOUNT_RECOVERY_OTP_LENGTH", { enumerable: true, get: function () { return users_accountRecovery_utils_1.ACCOUNT_RECOVERY_OTP_LENGTH; } });
+Object.defineProperty(exports, "ACCOUNT_RECOVERY_OTP_TTL_MINUTES", { enumerable: true, get: function () { return users_accountRecovery_utils_1.ACCOUNT_RECOVERY_OTP_TTL_MINUTES; } });
+Object.defineProperty(exports, "ACCOUNT_RECOVERY_MAX_OTP_ATTEMPTS", { enumerable: true, get: function () { return users_accountRecovery_utils_1.ACCOUNT_RECOVERY_MAX_OTP_ATTEMPTS; } });
+Object.defineProperty(exports, "generateAccountRecoveryOTP", { enumerable: true, get: function () { return users_accountRecovery_utils_1.generateAccountRecoveryOTP; } });
+Object.defineProperty(exports, "hashAccountRecoveryOTP", { enumerable: true, get: function () { return users_accountRecovery_utils_1.hashAccountRecoveryOTP; } });
+Object.defineProperty(exports, "verifyAccountRecoveryOTP", { enumerable: true, get: function () { return users_accountRecovery_utils_1.verifyAccountRecoveryOTP; } });
+Object.defineProperty(exports, "getAccountRecoveryOTPExpiry", { enumerable: true, get: function () { return users_accountRecovery_utils_1.getAccountRecoveryOTPExpiry; } });

package/dist/utils/users/users.accountRecovery.utils.d.ts

@@ -0,0 +1,13 @@
+export declare const ACCOUNT_RECOVERY_OTP_LENGTH = 4;
+export declare const ACCOUNT_RECOVERY_OTP_TTL_MINUTES = 10;
+export declare const ACCOUNT_RECOVERY_MAX_OTP_ATTEMPTS = 5;
+/** Generate a zero-padded, cryptographically random account recovery code. */
+export declare function generateAccountRecoveryOTP(): string;
+/**
+ * Create an HMAC verifier so a database read alone does not reveal the OTP.
+ * The same high-entropy secret must be configured in vr-admin-be and vr-users-be.
+ */
+export declare function hashAccountRecoveryOTP(otp: string, secret: string): string;
+/** Compare an entered code with its stored HMAC verifier in constant time. */
+export declare function verifyAccountRecoveryOTP(otp: string, expectedHash: string, secret: string): boolean;
+export declare function getAccountRecoveryOTPExpiry(now?: Date): Date;

package/dist/utils/users/users.accountRecovery.utils.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ACCOUNT_RECOVERY_MAX_OTP_ATTEMPTS = exports.ACCOUNT_RECOVERY_OTP_TTL_MINUTES = exports.ACCOUNT_RECOVERY_OTP_LENGTH = void 0;
+exports.generateAccountRecoveryOTP = generateAccountRecoveryOTP;
+exports.hashAccountRecoveryOTP = hashAccountRecoveryOTP;
+exports.verifyAccountRecoveryOTP = verifyAccountRecoveryOTP;
+exports.getAccountRecoveryOTPExpiry = getAccountRecoveryOTPExpiry;
+const crypto_1 = require("crypto");
+exports.ACCOUNT_RECOVERY_OTP_LENGTH = 4;
+exports.ACCOUNT_RECOVERY_OTP_TTL_MINUTES = 10;
+exports.ACCOUNT_RECOVERY_MAX_OTP_ATTEMPTS = 5;
+const ACCOUNT_RECOVERY_OTP_REGEX = /^\d{4}$/;
+const MIN_SECRET_BYTES = 32;
+function assertAccountRecoverySecret(secret) {
+    if (Buffer.byteLength(secret, "utf8") < MIN_SECRET_BYTES) {
+        throw new Error(`ACCOUNT_RECOVERY_OTP_SECRET must be at least ${MIN_SECRET_BYTES} bytes.`);
+    }
+}
+/** Generate a zero-padded, cryptographically random account recovery code. */
+function generateAccountRecoveryOTP() {
+    const upperBound = 10 ** exports.ACCOUNT_RECOVERY_OTP_LENGTH;
+    return (0, crypto_1.randomInt)(0, upperBound).toString().padStart(exports.ACCOUNT_RECOVERY_OTP_LENGTH, "0");
+}
+/**
+ * Create an HMAC verifier so a database read alone does not reveal the OTP.
+ * The same high-entropy secret must be configured in vr-admin-be and vr-users-be.
+ */
+function hashAccountRecoveryOTP(otp, secret) {
+    if (!ACCOUNT_RECOVERY_OTP_REGEX.test(otp)) {
+        throw new Error("Account recovery OTP must be exactly 4 digits.");
+    }
+    assertAccountRecoverySecret(secret);
+    return (0, crypto_1.createHmac)("sha256", secret).update(otp, "utf8").digest("hex");
+}
+/** Compare an entered code with its stored HMAC verifier in constant time. */
+function verifyAccountRecoveryOTP(otp, expectedHash, secret) {
+    if (!ACCOUNT_RECOVERY_OTP_REGEX.test(otp) || !/^[a-f0-9]{64}$/i.test(expectedHash)) {
+        return false;
+    }
+    assertAccountRecoverySecret(secret);
+    try {
+        const actual = Buffer.from(hashAccountRecoveryOTP(otp, secret), "hex");
+        const expected = Buffer.from(expectedHash, "hex");
+        return actual.length === expected.length && (0, crypto_1.timingSafeEqual)(actual, expected);
+    }
+    catch {
+        return false;
+    }
+}
+function getAccountRecoveryOTPExpiry(now = new Date()) {
+    return new Date(now.getTime() + exports.ACCOUNT_RECOVERY_OTP_TTL_MINUTES * 60 * 1000);
+}

package/dist/validations/index.d.ts

@@ -7,6 +7,7 @@ export { createAppSpecsSchema, updateAppSpecsSchema, listAppSpecsSchema, getActi
 export { updateProfileSchema, requestPhoneChangeSchema, verifyPhoneChangeSchema, deleteAccountSchema, strongPasswordRegex, changePasswordSchema, riderPasswordSchema, registerRiderSchema, } from "./shared/shared.account.validations";
 export { listUserPaymentPlansSchema, getUserPaymentPlanSchema, } from "./users/users.devicePaymentPlans.validations";
 export { unlockDeviceSchema, extendSessionSchema, serialRegex, } from "./users/users.devices.validations";
+export { requestRiderAccountRecoverySchema, completeRiderAccountRecoverySchema, RequestRiderAccountRecoverySchema, CompleteRiderAccountRecoverySchema, } from "./users/users.accountRecovery.validations";
 export { payInstallmentSchema, getInstallmentByIdSchema, getInstallmentsSchema, } from "./admin/admin.installments.validations";
 export { updateAdminSchema, updateRiderSchema, deleteUserSchema, getUserSchema, getUsersSchema, hireAdminSchema, promoteAdminSchema, demoteAdminSchema, fireEmployeeSchema, upgradeToRiderSchema, resetPasswordSchema, } from "./admin/admin.users.validations";
 export { createProductSchema, updateProductSchema, getProductSchema, getProductsSchema, deactivateProductSchema, activateProductSchema, deleteProductSchema, updateStockSchema, } from "./admin/admin.products.validations";

package/dist/validations/index.js

@@ -15,8 +15,8 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.activateAppSpecsSchema = exports.getAppSpecsByNameSchema = exports.getActiveAppSpecsSchema = exports.listAppSpecsSchema = exports.updateAppSpecsSchema = exports.createAppSpecsSchema = exports.exportBansSchema = exports.createSuspensionSchema = exports.createBanSchema = exports.extendSuspensionSchema = exports.revokeSuspensionSchema = exports.revokeBanSchema = exports.reviewAppealSchema = exports.listSuspensionsSchema = exports.listPendingAppealsSchema = exports.listBansSchema = exports.getUserBansSchema = exports.getUserSuspensionsSchema = exports.getSuspensionSchema = exports.getUserRestrictionsSchema = exports.getBanSchema = exports.submitSuspensionAppealSchema = exports.submitBanAppealSchema = exports.deactivateAccountSchema = exports.createRiderSchema = exports.updateRiderProfileSchema = exports.updatePassengerProfileSchema = exports.passengerSignupSchema = exports.viewProfileSchema = exports.getAllUsersSchema = exports.updateUserProfileSchema = exports.getUserByIdSchema = exports.createUserSchema = exports.googleLoginSchema = exports.completePassengerProfileSchema = exports.checkRiderAccountSchema = exports.setRiderPasswordSchema = exports.riderPasswordRegex = exports.passwordRegex = exports.emailRegex = exports.phoneRegex = exports.requestOtpSchema = exports.resendOtpSchema = exports.verifyOtpSchema = exports.registerSchema = exports.refreshTokenSchema = exports.userLoginSchema = exports.forgotPasswordSchema = exports.riderLoginSchema = exports.validate = void 0;
-exports.enableDevicesSchema = exports.disableDevicesSchema = exports.permanentDeleteDevicesByPairsSchema = exports.makeDevicesPermanentSchema = exports.deleteDevicesByPairsSchema = exports.unlockDevicesSchema = exports.lockDevicesSchema = exports.createDevicePairsSchema = exports.checkAvailabilitySchema = exports.deletePricingSchema = exports.getPricingsSchema = exports.getPricingSchema = exports.updatePricingSchema = exports.createPricingSchema = exports.updateStockSchema = exports.deleteProductSchema = exports.activateProductSchema = exports.deactivateProductSchema = exports.getProductsSchema = exports.getProductSchema = exports.updateProductSchema = exports.createProductSchema = exports.resetPasswordSchema = exports.upgradeToRiderSchema = exports.fireEmployeeSchema = exports.demoteAdminSchema = exports.promoteAdminSchema = exports.hireAdminSchema = exports.getUsersSchema = exports.getUserSchema = exports.deleteUserSchema = exports.updateRiderSchema = exports.updateAdminSchema = exports.getInstallmentsSchema = exports.getInstallmentByIdSchema = exports.payInstallmentSchema = exports.serialRegex = exports.extendSessionSchema = exports.unlockDeviceSchema = exports.getUserPaymentPlanSchema = exports.listUserPaymentPlansSchema = exports.registerRiderSchema = exports.riderPasswordSchema = exports.changePasswordSchema = exports.strongPasswordRegex = exports.deleteAccountSchema = exports.verifyPhoneChangeSchema = exports.requestPhoneChangeSchema = exports.updateProfileSchema = exports.getAppSpecsSchema = void 0;
-exports.getEventLogSchema = exports.listEventLogsSchema = exports.replacePlanDevicesSchema = exports.deletePlanSchema = exports.recordPaymentSchema = exports.listPlansSchema = exports.getUserPlansSchema = exports.getPlanSchema = exports.getDevicePlanSchema = exports.limitedUpdateSchema = exports.createPlanSchema = exports.customDeviceResetSchema = exports.triggerDeviceResetSchema = exports.getDevicesSchema = exports.getDeviceSchema = void 0;
+exports.permanentDeleteDevicesByPairsSchema = exports.makeDevicesPermanentSchema = exports.deleteDevicesByPairsSchema = exports.unlockDevicesSchema = exports.lockDevicesSchema = exports.createDevicePairsSchema = exports.checkAvailabilitySchema = exports.deletePricingSchema = exports.getPricingsSchema = exports.getPricingSchema = exports.updatePricingSchema = exports.createPricingSchema = exports.updateStockSchema = exports.deleteProductSchema = exports.activateProductSchema = exports.deactivateProductSchema = exports.getProductsSchema = exports.getProductSchema = exports.updateProductSchema = exports.createProductSchema = exports.resetPasswordSchema = exports.upgradeToRiderSchema = exports.fireEmployeeSchema = exports.demoteAdminSchema = exports.promoteAdminSchema = exports.hireAdminSchema = exports.getUsersSchema = exports.getUserSchema = exports.deleteUserSchema = exports.updateRiderSchema = exports.updateAdminSchema = exports.getInstallmentsSchema = exports.getInstallmentByIdSchema = exports.payInstallmentSchema = exports.completeRiderAccountRecoverySchema = exports.requestRiderAccountRecoverySchema = exports.serialRegex = exports.extendSessionSchema = exports.unlockDeviceSchema = exports.getUserPaymentPlanSchema = exports.listUserPaymentPlansSchema = exports.registerRiderSchema = exports.riderPasswordSchema = exports.changePasswordSchema = exports.strongPasswordRegex = exports.deleteAccountSchema = exports.verifyPhoneChangeSchema = exports.requestPhoneChangeSchema = exports.updateProfileSchema = exports.getAppSpecsSchema = void 0;
+exports.getEventLogSchema = exports.listEventLogsSchema = exports.replacePlanDevicesSchema = exports.deletePlanSchema = exports.recordPaymentSchema = exports.listPlansSchema = exports.getUserPlansSchema = exports.getPlanSchema = exports.getDevicePlanSchema = exports.limitedUpdateSchema = exports.createPlanSchema = exports.customDeviceResetSchema = exports.triggerDeviceResetSchema = exports.getDevicesSchema = exports.getDeviceSchema = exports.enableDevicesSchema = exports.disableDevicesSchema = void 0;
 __exportStar(require("../constants/regex.constants"), exports);
 var shared_validate_validations_1 = require("./shared/shared.validate.validations");
 Object.defineProperty(exports, "validate", { enumerable: true, get: function () { return shared_validate_validations_1.validate; } });
@@ -90,6 +90,9 @@ var users_devices_validations_1 = require("./users/users.devices.validations");
 Object.defineProperty(exports, "unlockDeviceSchema", { enumerable: true, get: function () { return users_devices_validations_1.unlockDeviceSchema; } });
 Object.defineProperty(exports, "extendSessionSchema", { enumerable: true, get: function () { return users_devices_validations_1.extendSessionSchema; } });
 Object.defineProperty(exports, "serialRegex", { enumerable: true, get: function () { return users_devices_validations_1.serialRegex; } });
+var users_accountRecovery_validations_1 = require("./users/users.accountRecovery.validations");
+Object.defineProperty(exports, "requestRiderAccountRecoverySchema", { enumerable: true, get: function () { return users_accountRecovery_validations_1.requestRiderAccountRecoverySchema; } });
+Object.defineProperty(exports, "completeRiderAccountRecoverySchema", { enumerable: true, get: function () { return users_accountRecovery_validations_1.completeRiderAccountRecoverySchema; } });
 var admin_installments_validations_1 = require("./admin/admin.installments.validations");
 Object.defineProperty(exports, "payInstallmentSchema", { enumerable: true, get: function () { return admin_installments_validations_1.payInstallmentSchema; } });
 Object.defineProperty(exports, "getInstallmentByIdSchema", { enumerable: true, get: function () { return admin_installments_validations_1.getInstallmentByIdSchema; } });

package/dist/validations/users/users.accountRecovery.validations.d.ts

@@ -0,0 +1,98 @@
+import { z } from "zod";
+export declare const requestRiderAccountRecoverySchema: z.ZodObject<{
+    body: z.ZodEffects<z.ZodObject<{
+        phoneNumber: z.ZodString;
+        plateNumber: z.ZodString;
+        birthDate: z.ZodNumber;
+        birthMonth: z.ZodNumber;
+        birthYear: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        plateNumber: string;
+        birthDate: number;
+        birthMonth: number;
+        birthYear: number;
+        phoneNumber: string;
+    }, {
+        plateNumber: string;
+        birthDate: number;
+        birthMonth: number;
+        birthYear: number;
+        phoneNumber: string;
+    }>, {
+        plateNumber: string;
+        birthDate: number;
+        birthMonth: number;
+        birthYear: number;
+        phoneNumber: string;
+    }, {
+        plateNumber: string;
+        birthDate: number;
+        birthMonth: number;
+        birthYear: number;
+        phoneNumber: string;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    body: {
+        plateNumber: string;
+        birthDate: number;
+        birthMonth: number;
+        birthYear: number;
+        phoneNumber: string;
+    };
+}, {
+    body: {
+        plateNumber: string;
+        birthDate: number;
+        birthMonth: number;
+        birthYear: number;
+        phoneNumber: string;
+    };
+}>;
+export declare const completeRiderAccountRecoverySchema: z.ZodEffects<z.ZodObject<{
+    body: z.ZodObject<{
+        phoneNumber: z.ZodString;
+        recoveryCode: z.ZodString;
+        newPassword: z.ZodEffects<z.ZodDefault<z.ZodEffects<z.ZodString, string, string>>, string, string | undefined>;
+        confirmNewPassword: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        newPassword: string;
+        phoneNumber: string;
+        recoveryCode: string;
+        confirmNewPassword: string;
+    }, {
+        phoneNumber: string;
+        recoveryCode: string;
+        confirmNewPassword: string;
+        newPassword?: string | undefined;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    body: {
+        newPassword: string;
+        phoneNumber: string;
+        recoveryCode: string;
+        confirmNewPassword: string;
+    };
+}, {
+    body: {
+        phoneNumber: string;
+        recoveryCode: string;
+        confirmNewPassword: string;
+        newPassword?: string | undefined;
+    };
+}>, {
+    body: {
+        newPassword: string;
+        phoneNumber: string;
+        recoveryCode: string;
+        confirmNewPassword: string;
+    };
+}, {
+    body: {
+        phoneNumber: string;
+        recoveryCode: string;
+        confirmNewPassword: string;
+        newPassword?: string | undefined;
+    };
+}>;
+export type RequestRiderAccountRecoverySchema = z.infer<typeof requestRiderAccountRecoverySchema>;
+export type CompleteRiderAccountRecoverySchema = z.infer<typeof completeRiderAccountRecoverySchema>;

package/dist/validations/users/users.accountRecovery.validations.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.completeRiderAccountRecoverySchema = exports.requestRiderAccountRecoverySchema = void 0;
+const zod_1 = require("zod");
+const regex_constants_1 = require("../../constants/regex.constants");
+const shared_account_validations_1 = require("../shared/shared.account.validations");
+const birthDateFields = {
+    birthDate: zod_1.z.number().int().min(1).max(31),
+    birthMonth: zod_1.z.number().int().min(1).max(12),
+    birthYear: zod_1.z.number().int().min(1900).max(new Date().getFullYear()),
+};
+exports.requestRiderAccountRecoverySchema = zod_1.z
+    .object({
+    body: zod_1.z
+        .object({
+        ...birthDateFields,
+        phoneNumber: zod_1.z.string().regex(regex_constants_1.PHONE_NUMBER_REGEX, "Enter a valid Rwandan phone number"),
+        plateNumber: zod_1.z.string().trim().regex(regex_constants_1.RWANDA_PLATE_NUMBER_REGEX, "Enter a valid plate number"),
+    })
+        .refine(({ birthDate, birthMonth, birthYear }) => birthDate <= new Date(birthYear, birthMonth, 0).getDate(), { message: "Enter a valid date of birth", path: ["birthDate"] }),
+});
+const recoveryCodeSchema = zod_1.z
+    .string()
+    .length(4, "Recovery code must be 4 digits")
+    .regex(regex_constants_1.FOUR_DIGIT_PIN_REGEX, "Recovery code must contain only digits");
+const newRiderPINSchema = shared_account_validations_1.riderPasswordSchema.refine((pin) => pin !== "1234", {
+    message: "Choose a PIN different from the temporary PIN",
+});
+exports.completeRiderAccountRecoverySchema = zod_1.z
+    .object({
+    body: zod_1.z.object({
+        phoneNumber: zod_1.z.string().regex(regex_constants_1.PHONE_NUMBER_REGEX, "Enter a valid Rwandan phone number"),
+        recoveryCode: recoveryCodeSchema,
+        newPassword: newRiderPINSchema,
+        confirmNewPassword: zod_1.z.string().length(4).regex(regex_constants_1.FOUR_DIGIT_PIN_REGEX),
+    }),
+})
+    .refine((data) => data.body.newPassword === data.body.confirmNewPassword, {
+    message: "PINs do not match",
+    path: ["body", "confirmNewPassword"],
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vr-commons",
-  "version": "1.0.189",
+  "version": "1.0.190",
   "description": "Shared functions package",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",