feat(auth): добавить вход по passkey

Альтернатива паролю на портале; SSO приложений без изменений.

Co-authored-by: Cursor <[email protected]>

packages/shared/src/contracts/auth.ts

@@ -400,11 +400,42 @@ export const adminUserSchema = z.object({
   permissions: z.array(z.string()),
   last_login_at: z.string().nullable(),
   last_login_ip: z.string().nullable(),
+  passkey_count: z.number().int().nonnegative().default(0),
   created_at: z.string(),
   updated_at: z.string(),
 })
 export type AdminUser = z.infer<typeof adminUserSchema>
 
+export const passkeyCredentialSchema = z.object({
+  id: z.string(),
+  name: z.string(),
+  created_at: z.string(),
+  last_used_at: z.string().nullable(),
+  device_type: z.string().nullable(),
+})
+export type PasskeyCredential = z.infer<typeof passkeyCredentialSchema>
+
+export const webauthnOptionsResponseSchema = z.object({
+  challenge_id: z.string(),
+  options: z.record(z.string(), z.unknown()),
+})
+export type WebauthnOptionsResponse = z.infer<
+  typeof webauthnOptionsResponseSchema
+>
+
+export const webauthnVerifyRequestSchema = z.object({
+  challenge_id: z.string().min(1),
+  response: z.unknown(),
+  return_to: z.string().url().optional(),
+  name: z.string().min(1).max(80).optional(),
+})
+export type WebauthnVerifyRequest = z.infer<typeof webauthnVerifyRequestSchema>
+
+export const patchPasskeyRequestSchema = z.object({
+  name: z.string().min(1).max(80),
+})
+export type PatchPasskeyRequest = z.infer<typeof patchPasskeyRequestSchema>
+
 export const adminSessionSchema = z.object({
   id: z.string(),
   user_id: z.string(),