@baseplate-dev/plugin-auth 0.6.3 → 0.6.5

package/dist/web/assets/plugin-definition-BQN6LXOW.js

@@ -0,0 +1,304 @@
+import { L as LOCAL_AUTH_MODELS } from './model-names-DrcaRxt1.js';
+import { importShared } from './__federation_fn_import-DybuDj1g.js';
+
+function createLocalAuthPartialDefinition(authFeatureName, accountsFeatureName) {
+  return {
+    models: [
+      {
+        name: LOCAL_AUTH_MODELS.user,
+        featureRef: accountsFeatureName,
+        model: {
+          fields: [
+            {
+              name: "id",
+              type: "uuid",
+              options: { defaultGeneration: "uuidv7" }
+            },
+            {
+              name: "name",
+              type: "string",
+              isOptional: true
+            },
+            {
+              name: "email",
+              type: "string"
+            },
+            {
+              name: "emailVerified",
+              type: "boolean",
+              options: { default: "false" }
+            },
+            {
+              name: "updatedAt",
+              type: "dateTime",
+              options: { defaultToNow: true, updatedAt: true }
+            },
+            {
+              name: "createdAt",
+              type: "dateTime",
+              options: { defaultToNow: true }
+            }
+          ],
+          primaryKeyFieldRefs: ["id"],
+          uniqueConstraints: [
+            {
+              fields: [{ fieldRef: "email" }]
+            }
+          ]
+        },
+        graphql: {
+          objectType: {
+            enabled: true,
+            fields: [
+              { ref: "id" },
+              {
+                ref: "email",
+                globalRoles: ["admin"],
+                instanceRoles: ["self"]
+              }
+            ]
+          }
+        },
+        authorizer: {
+          roles: [
+            {
+              name: "self",
+              expression: "model.id === userId"
+            }
+          ]
+        }
+      },
+      {
+        name: LOCAL_AUTH_MODELS.userAccount,
+        featureRef: accountsFeatureName,
+        model: {
+          fields: [
+            {
+              name: "id",
+              type: "uuid",
+              options: { defaultGeneration: "uuidv7" }
+            },
+            {
+              name: "userId",
+              type: "uuid"
+            },
+            {
+              name: "accountId",
+              type: "string"
+            },
+            {
+              name: "providerId",
+              type: "string"
+            },
+            {
+              name: "password",
+              type: "string",
+              isOptional: true
+            },
+            {
+              name: "createdAt",
+              type: "dateTime",
+              options: { defaultToNow: true }
+            },
+            {
+              name: "updatedAt",
+              type: "dateTime",
+              options: { defaultToNow: true, updatedAt: true }
+            }
+          ],
+          primaryKeyFieldRefs: ["id"],
+          uniqueConstraints: [
+            {
+              fields: [{ fieldRef: "accountId" }, { fieldRef: "providerId" }]
+            }
+          ],
+          relations: [
+            {
+              name: "user",
+              references: [{ localRef: "userId", foreignRef: "id" }],
+              modelRef: LOCAL_AUTH_MODELS.user,
+              foreignRelationName: "accounts",
+              onDelete: "Cascade",
+              onUpdate: "Restrict"
+            }
+          ]
+        }
+      },
+      {
+        name: LOCAL_AUTH_MODELS.userRole,
+        featureRef: accountsFeatureName,
+        model: {
+          fields: [
+            {
+              name: "userId",
+              type: "uuid"
+            },
+            {
+              name: "role",
+              type: "string"
+            },
+            {
+              name: "updatedAt",
+              type: "dateTime",
+              options: { defaultToNow: true, updatedAt: true }
+            },
+            {
+              name: "createdAt",
+              type: "dateTime",
+              options: { defaultToNow: true }
+            }
+          ],
+          primaryKeyFieldRefs: ["userId", "role"],
+          relations: [
+            {
+              name: "user",
+              references: [{ localRef: "userId", foreignRef: "id" }],
+              modelRef: LOCAL_AUTH_MODELS.user,
+              foreignRelationName: "roles",
+              onDelete: "Cascade",
+              onUpdate: "Restrict"
+            }
+          ]
+        }
+      },
+      {
+        name: LOCAL_AUTH_MODELS.userSession,
+        featureRef: accountsFeatureName,
+        model: {
+          fields: [
+            {
+              name: "id",
+              type: "uuid",
+              options: { defaultGeneration: "uuidv7" }
+            },
+            {
+              name: "userId",
+              type: "uuid"
+            },
+            {
+              name: "token",
+              type: "string"
+            },
+            {
+              name: "expiresAt",
+              type: "dateTime"
+            },
+            {
+              name: "renewedAt",
+              type: "dateTime",
+              options: { defaultToNow: true }
+            },
+            {
+              name: "createdAt",
+              type: "dateTime",
+              options: { defaultToNow: true }
+            },
+            {
+              name: "updatedAt",
+              type: "dateTime",
+              options: { defaultToNow: true, updatedAt: true }
+            }
+          ],
+          primaryKeyFieldRefs: ["id"],
+          uniqueConstraints: [
+            {
+              fields: [{ fieldRef: "token" }]
+            }
+          ],
+          relations: [
+            {
+              name: "user",
+              references: [{ localRef: "userId", foreignRef: "id" }],
+              modelRef: LOCAL_AUTH_MODELS.user,
+              foreignRelationName: "sessions",
+              onDelete: "Cascade",
+              onUpdate: "Restrict"
+            }
+          ]
+        }
+      },
+      {
+        name: LOCAL_AUTH_MODELS.authVerification,
+        featureRef: authFeatureName,
+        model: {
+          fields: [
+            {
+              name: "id",
+              type: "uuid",
+              options: { defaultGeneration: "uuidv4" }
+            },
+            {
+              name: "type",
+              type: "string"
+            },
+            {
+              name: "identifier",
+              type: "string"
+            },
+            {
+              name: "value",
+              type: "string"
+            },
+            {
+              name: "userId",
+              type: "uuid",
+              isOptional: true
+            },
+            {
+              name: "metadata",
+              type: "json",
+              isOptional: true
+            },
+            {
+              name: "expiresAt",
+              type: "dateTime"
+            },
+            {
+              name: "createdAt",
+              type: "dateTime",
+              options: { defaultToNow: true }
+            }
+          ],
+          primaryKeyFieldRefs: ["id"],
+          uniqueConstraints: [
+            {
+              fields: [{ fieldRef: "type" }, { fieldRef: "identifier" }]
+            }
+          ],
+          relations: [
+            {
+              name: "user",
+              references: [{ localRef: "userId", foreignRef: "id" }],
+              modelRef: LOCAL_AUTH_MODELS.user,
+              foreignRelationName: "authVerifications",
+              onDelete: "Cascade",
+              onUpdate: "Restrict"
+            }
+          ]
+        }
+      }
+    ]
+  };
+}
+
+const {authRoleEntityType,definitionSchema} = await importShared('@baseplate-dev/project-builder-lib');
+
+const {z} = await importShared('zod');
+
+const createLocalAuthPluginDefinitionSchema = definitionSchema(
+  (ctx) => z.object({
+    additionalUserAdminRoles: ctx.withDefault(
+      z.array(
+        ctx.withRef({
+          type: authRoleEntityType,
+          onDelete: "DELETE"
+        })
+      ),
+      []
+    ),
+    requireNameOnRegistration: z.boolean().default(false)
+  })
+);
+
+export { createLocalAuthPartialDefinition as a, createLocalAuthPluginDefinitionSchema as c };
+//# sourceMappingURL=plugin-definition-BQN6LXOW.js.map

package/dist/web/assets/plugin-definition-BQN6LXOW.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-definition-BQN6LXOW.js","sources":["../../../src/local-auth/core/schema/models.ts","../../../src/local-auth/core/schema/plugin-definition.ts"],"sourcesContent":["import type { PartialProjectDefinitionInput } from '@baseplate-dev/project-builder-lib';\n\nimport { LOCAL_AUTH_MODELS } from '#src/local-auth/constants/model-names.js';\n\nexport function createLocalAuthPartialDefinition(\n  authFeatureName: string,\n  accountsFeatureName: string,\n): PartialProjectDefinitionInput {\n  return {\n    models: [\n      {\n        name: LOCAL_AUTH_MODELS.user,\n        featureRef: accountsFeatureName,\n        model: {\n          fields: [\n            {\n              name: 'id',\n              type: 'uuid',\n              options: { defaultGeneration: 'uuidv7' },\n            },\n            {\n              name: 'name',\n              type: 'string',\n              isOptional: true,\n            },\n            {\n              name: 'email',\n              type: 'string',\n            },\n            {\n              name: 'emailVerified',\n              type: 'boolean',\n              options: { default: 'false' },\n            },\n            {\n              name: 'updatedAt',\n              type: 'dateTime',\n              options: { defaultToNow: true, updatedAt: true },\n            },\n            {\n              name: 'createdAt',\n              type: 'dateTime',\n              options: { defaultToNow: true },\n            },\n          ],\n          primaryKeyFieldRefs: ['id'],\n          uniqueConstraints: [\n            {\n              fields: [{ fieldRef: 'email' }],\n            },\n          ],\n        },\n        graphql: {\n          objectType: {\n            enabled: true,\n            fields: [\n              { ref: 'id' },\n              {\n                ref: 'email',\n                globalRoles: ['admin'],\n                instanceRoles: ['self'],\n              },\n            ],\n          },\n        },\n        authorizer: {\n          roles: [\n            {\n              name: 'self',\n              expression: 'model.id === userId',\n            },\n          ],\n        },\n      },\n      {\n        name: LOCAL_AUTH_MODELS.userAccount,\n        featureRef: accountsFeatureName,\n        model: {\n          fields: [\n            {\n              name: 'id',\n              type: 'uuid',\n              options: { defaultGeneration: 'uuidv7' },\n            },\n            {\n              name: 'userId',\n              type: 'uuid',\n            },\n            {\n              name: 'accountId',\n              type: 'string',\n            },\n            {\n              name: 'providerId',\n              type: 'string',\n            },\n            {\n              name: 'password',\n              type: 'string',\n              isOptional: true,\n            },\n            {\n              name: 'createdAt',\n              type: 'dateTime',\n              options: { defaultToNow: true },\n            },\n            {\n              name: 'updatedAt',\n              type: 'dateTime',\n              options: { defaultToNow: true, updatedAt: true },\n            },\n          ],\n          primaryKeyFieldRefs: ['id'],\n          uniqueConstraints: [\n            {\n              fields: [{ fieldRef: 'accountId' }, { fieldRef: 'providerId' }],\n            },\n          ],\n          relations: [\n            {\n              name: 'user',\n              references: [{ localRef: 'userId', foreignRef: 'id' }],\n              modelRef: LOCAL_AUTH_MODELS.user,\n              foreignRelationName: 'accounts',\n              onDelete: 'Cascade',\n              onUpdate: 'Restrict',\n            },\n          ],\n        },\n      },\n      {\n        name: LOCAL_AUTH_MODELS.userRole,\n        featureRef: accountsFeatureName,\n        model: {\n          fields: [\n            {\n              name: 'userId',\n              type: 'uuid',\n            },\n            {\n              name: 'role',\n              type: 'string',\n            },\n            {\n              name: 'updatedAt',\n              type: 'dateTime',\n              options: { defaultToNow: true, updatedAt: true },\n            },\n            {\n              name: 'createdAt',\n              type: 'dateTime',\n              options: { defaultToNow: true },\n            },\n          ],\n          primaryKeyFieldRefs: ['userId', 'role'],\n          relations: [\n            {\n              name: 'user',\n              references: [{ localRef: 'userId', foreignRef: 'id' }],\n              modelRef: LOCAL_AUTH_MODELS.user,\n              foreignRelationName: 'roles',\n              onDelete: 'Cascade',\n              onUpdate: 'Restrict',\n            },\n          ],\n        },\n      },\n      {\n        name: LOCAL_AUTH_MODELS.userSession,\n        featureRef: accountsFeatureName,\n        model: {\n          fields: [\n            {\n              name: 'id',\n              type: 'uuid',\n              options: { defaultGeneration: 'uuidv7' },\n            },\n            {\n              name: 'userId',\n              type: 'uuid',\n            },\n            {\n              name: 'token',\n              type: 'string',\n            },\n            {\n              name: 'expiresAt',\n              type: 'dateTime',\n            },\n            {\n              name: 'renewedAt',\n              type: 'dateTime',\n              options: { defaultToNow: true },\n            },\n            {\n              name: 'createdAt',\n              type: 'dateTime',\n              options: { defaultToNow: true },\n            },\n            {\n              name: 'updatedAt',\n              type: 'dateTime',\n              options: { defaultToNow: true, updatedAt: true },\n            },\n          ],\n          primaryKeyFieldRefs: ['id'],\n          uniqueConstraints: [\n            {\n              fields: [{ fieldRef: 'token' }],\n            },\n          ],\n          relations: [\n            {\n              name: 'user',\n              references: [{ localRef: 'userId', foreignRef: 'id' }],\n              modelRef: LOCAL_AUTH_MODELS.user,\n              foreignRelationName: 'sessions',\n              onDelete: 'Cascade',\n              onUpdate: 'Restrict',\n            },\n          ],\n        },\n      },\n      {\n        name: LOCAL_AUTH_MODELS.authVerification,\n        featureRef: authFeatureName,\n        model: {\n          fields: [\n            {\n              name: 'id',\n              type: 'uuid',\n              options: { defaultGeneration: 'uuidv4' },\n            },\n            {\n              name: 'type',\n              type: 'string',\n            },\n            {\n              name: 'identifier',\n              type: 'string',\n            },\n            {\n              name: 'value',\n              type: 'string',\n            },\n            {\n              name: 'userId',\n              type: 'uuid',\n              isOptional: true,\n            },\n            {\n              name: 'metadata',\n              type: 'json',\n              isOptional: true,\n            },\n            {\n              name: 'expiresAt',\n              type: 'dateTime',\n            },\n            {\n              name: 'createdAt',\n              type: 'dateTime',\n              options: { defaultToNow: true },\n            },\n          ],\n          primaryKeyFieldRefs: ['id'],\n          uniqueConstraints: [\n            {\n              fields: [{ fieldRef: 'type' }, { fieldRef: 'identifier' }],\n            },\n          ],\n          relations: [\n            {\n              name: 'user',\n              references: [{ localRef: 'userId', foreignRef: 'id' }],\n              modelRef: LOCAL_AUTH_MODELS.user,\n              foreignRelationName: 'authVerifications',\n              onDelete: 'Cascade',\n              onUpdate: 'Restrict',\n            },\n          ],\n        },\n      },\n    ],\n  };\n}\n","import type { def } from '@baseplate-dev/project-builder-lib';\n\nimport {\n  authRoleEntityType,\n  definitionSchema,\n} from '@baseplate-dev/project-builder-lib';\nimport { z } from 'zod';\n\nexport const createLocalAuthPluginDefinitionSchema = definitionSchema((ctx) =>\n  z.object({\n    additionalUserAdminRoles: ctx.withDefault(\n      z.array(\n        ctx.withRef({\n          type: authRoleEntityType,\n          onDelete: 'DELETE',\n        }),\n      ),\n      [],\n    ),\n    requireNameOnRegistration: z.boolean().default(false),\n  }),\n);\n\nexport type LocalAuthPluginDefinition = def.InferOutput<\n  typeof createLocalAuthPluginDefinitionSchema\n>;\n\nexport type LocalAuthPluginDefinitionInput = def.InferInput<\n  typeof createLocalAuthPluginDefinitionSchema\n>;\n"],"names":[],"mappings":";;;AAIO,SAAS,gCAAA,CACd,iBACA,mBAAA,EAC+B;AAC/B,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ;AAAA,MACN;AAAA,QACE,MAAM,iBAAA,CAAkB,IAAA;AAAA,QACxB,UAAA,EAAY,mBAAA;AAAA,QACZ,KAAA,EAAO;AAAA,UACL,MAAA,EAAQ;AAAA,YACN;AAAA,cACE,IAAA,EAAM,IAAA;AAAA,cACN,IAAA,EAAM,MAAA;AAAA,cACN,OAAA,EAAS,EAAE,iBAAA,EAAmB,QAAA;AAAS,aACzC;AAAA,YACA;AAAA,cACE,IAAA,EAAM,MAAA;AAAA,cACN,IAAA,EAAM,QAAA;AAAA,cACN,UAAA,EAAY;AAAA,aACd;AAAA,YACA;AAAA,cACE,IAAA,EAAM,OAAA;AAAA,cACN,IAAA,EAAM;AAAA,aACR;AAAA,YACA;AAAA,cACE,IAAA,EAAM,eAAA;AAAA,cACN,IAAA,EAAM,SAAA;AAAA,cACN,OAAA,EAAS,EAAE,OAAA,EAAS,OAAA;AAAQ,aAC9B;AAAA,YACA;AAAA,cACE,IAAA,EAAM,WAAA;AAAA,cACN,IAAA,EAAM,UAAA;AAAA,cACN,OAAA,EAAS,EAAE,YAAA,EAAc,IAAA,EAAM,WAAW,IAAA;AAAK,aACjD;AAAA,YACA;AAAA,cACE,IAAA,EAAM,WAAA;AAAA,cACN,IAAA,EAAM,UAAA;AAAA,cACN,OAAA,EAAS,EAAE,YAAA,EAAc,IAAA;AAAK;AAChC,WACF;AAAA,UACA,mBAAA,EAAqB,CAAC,IAAI,CAAA;AAAA,UAC1B,iBAAA,EAAmB;AAAA,YACjB;AAAA,cACE,MAAA,EAAQ,CAAC,EAAE,QAAA,EAAU,SAAS;AAAA;AAChC;AACF,SACF;AAAA,QACA,OAAA,EAAS;AAAA,UACP,UAAA,EAAY;AAAA,YACV,OAAA,EAAS,IAAA;AAAA,YACT,MAAA,EAAQ;AAAA,cACN,EAAE,KAAK,IAAA,EAAK;AAAA,cACZ;AAAA,gBACE,GAAA,EAAK,OAAA;AAAA,gBACL,WAAA,EAAa,CAAC,OAAO,CAAA;AAAA,gBACrB,aAAA,EAAe,CAAC,MAAM;AAAA;AACxB;AACF;AACF,SACF;AAAA,QACA,UAAA,EAAY;AAAA,UACV,KAAA,EAAO;AAAA,YACL;AAAA,cACE,IAAA,EAAM,MAAA;AAAA,cACN,UAAA,EAAY;AAAA;AACd;AACF;AACF,OACF;AAAA,MACA;AAAA,QACE,MAAM,iBAAA,CAAkB,WAAA;AAAA,QACxB,UAAA,EAAY,mBAAA;AAAA,QACZ,KAAA,EAAO;AAAA,UACL,MAAA,EAAQ;AAAA,YACN;AAAA,cACE,IAAA,EAAM,IAAA;AAAA,cACN,IAAA,EAAM,MAAA;AAAA,cACN,OAAA,EAAS,EAAE,iBAAA,EAAmB,QAAA;AAAS,aACzC;AAAA,YACA;AAAA,cACE,IAAA,EAAM,QAAA;AAAA,cACN,IAAA,EAAM;AAAA,aACR;AAAA,YACA;AAAA,cACE,IAAA,EAAM,WAAA;AAAA,cACN,IAAA,EAAM;AAAA,aACR;AAAA,YACA;AAAA,cACE,IAAA,EAAM,YAAA;AAAA,cACN,IAAA,EAAM;AAAA,aACR;AAAA,YACA;AAAA,cACE,IAAA,EAAM,UAAA;AAAA,cACN,IAAA,EAAM,QAAA;AAAA,cACN,UAAA,EAAY;AAAA,aACd;AAAA,YACA;AAAA,cACE,IAAA,EAAM,WAAA;AAAA,cACN,IAAA,EAAM,UAAA;AAAA,cACN,OAAA,EAAS,EAAE,YAAA,EAAc,IAAA;AAAK,aAChC;AAAA,YACA;AAAA,cACE,IAAA,EAAM,WAAA;AAAA,cACN,IAAA,EAAM,UAAA;AAAA,cACN,OAAA,EAAS,EAAE,YAAA,EAAc,IAAA,EAAM,WAAW,IAAA;AAAK;AACjD,WACF;AAAA,UACA,mBAAA,EAAqB,CAAC,IAAI,CAAA;AAAA,UAC1B,iBAAA,EAAmB;AAAA,YACjB;AAAA,cACE,MAAA,EAAQ,CAAC,EAAE,QAAA,EAAU,aAAY,EAAG,EAAE,QAAA,EAAU,YAAA,EAAc;AAAA;AAChE,WACF;AAAA,UACA,SAAA,EAAW;AAAA,YACT;AAAA,cACE,IAAA,EAAM,MAAA;AAAA,cACN,YAAY,CAAC,EAAE,UAAU,QAAA,EAAU,UAAA,EAAY,MAAM,CAAA;AAAA,cACrD,UAAU,iBAAA,CAAkB,IAAA;AAAA,cAC5B,mBAAA,EAAqB,UAAA;AAAA,cACrB,QAAA,EAAU,SAAA;AAAA,cACV,QAAA,EAAU;AAAA;AACZ;AACF;AACF,OACF;AAAA,MACA;AAAA,QACE,MAAM,iBAAA,CAAkB,QAAA;AAAA,QACxB,UAAA,EAAY,mBAAA;AAAA,QACZ,KAAA,EAAO;AAAA,UACL,MAAA,EAAQ;AAAA,YACN;AAAA,cACE,IAAA,EAAM,QAAA;AAAA,cACN,IAAA,EAAM;AAAA,aACR;AAAA,YACA;AAAA,cACE,IAAA,EAAM,MAAA;AAAA,cACN,IAAA,EAAM;AAAA,aACR;AAAA,YACA;AAAA,cACE,IAAA,EAAM,WAAA;AAAA,cACN,IAAA,EAAM,UAAA;AAAA,cACN,OAAA,EAAS,EAAE,YAAA,EAAc,IAAA,EAAM,WAAW,IAAA;AAAK,aACjD;AAAA,YACA;AAAA,cACE,IAAA,EAAM,WAAA;AAAA,cACN,IAAA,EAAM,UAAA;AAAA,cACN,OAAA,EAAS,EAAE,YAAA,EAAc,IAAA;AAAK;AAChC,WACF;AAAA,UACA,mBAAA,EAAqB,CAAC,QAAA,EAAU,MAAM,CAAA;AAAA,UACtC,SAAA,EAAW;AAAA,YACT;AAAA,cACE,IAAA,EAAM,MAAA;AAAA,cACN,YAAY,CAAC,EAAE,UAAU,QAAA,EAAU,UAAA,EAAY,MAAM,CAAA;AAAA,cACrD,UAAU,iBAAA,CAAkB,IAAA;AAAA,cAC5B,mBAAA,EAAqB,OAAA;AAAA,cACrB,QAAA,EAAU,SAAA;AAAA,cACV,QAAA,EAAU;AAAA;AACZ;AACF;AACF,OACF;AAAA,MACA;AAAA,QACE,MAAM,iBAAA,CAAkB,WAAA;AAAA,QACxB,UAAA,EAAY,mBAAA;AAAA,QACZ,KAAA,EAAO;AAAA,UACL,MAAA,EAAQ;AAAA,YACN;AAAA,cACE,IAAA,EAAM,IAAA;AAAA,cACN,IAAA,EAAM,MAAA;AAAA,cACN,OAAA,EAAS,EAAE,iBAAA,EAAmB,QAAA;AAAS,aACzC;AAAA,YACA;AAAA,cACE,IAAA,EAAM,QAAA;AAAA,cACN,IAAA,EAAM;AAAA,aACR;AAAA,YACA;AAAA,cACE,IAAA,EAAM,OAAA;AAAA,cACN,IAAA,EAAM;AAAA,aACR;AAAA,YACA;AAAA,cACE,IAAA,EAAM,WAAA;AAAA,cACN,IAAA,EAAM;AAAA,aACR;AAAA,YACA;AAAA,cACE,IAAA,EAAM,WAAA;AAAA,cACN,IAAA,EAAM,UAAA;AAAA,cACN,OAAA,EAAS,EAAE,YAAA,EAAc,IAAA;AAAK,aAChC;AAAA,YACA;AAAA,cACE,IAAA,EAAM,WAAA;AAAA,cACN,IAAA,EAAM,UAAA;AAAA,cACN,OAAA,EAAS,EAAE,YAAA,EAAc,IAAA;AAAK,aAChC;AAAA,YACA;AAAA,cACE,IAAA,EAAM,WAAA;AAAA,cACN,IAAA,EAAM,UAAA;AAAA,cACN,OAAA,EAAS,EAAE,YAAA,EAAc,IAAA,EAAM,WAAW,IAAA;AAAK;AACjD,WACF;AAAA,UACA,mBAAA,EAAqB,CAAC,IAAI,CAAA;AAAA,UAC1B,iBAAA,EAAmB;AAAA,YACjB;AAAA,cACE,MAAA,EAAQ,CAAC,EAAE,QAAA,EAAU,SAAS;AAAA;AAChC,WACF;AAAA,UACA,SAAA,EAAW;AAAA,YACT;AAAA,cACE,IAAA,EAAM,MAAA;AAAA,cACN,YAAY,CAAC,EAAE,UAAU,QAAA,EAAU,UAAA,EAAY,MAAM,CAAA;AAAA,cACrD,UAAU,iBAAA,CAAkB,IAAA;AAAA,cAC5B,mBAAA,EAAqB,UAAA;AAAA,cACrB,QAAA,EAAU,SAAA;AAAA,cACV,QAAA,EAAU;AAAA;AACZ;AACF;AACF,OACF;AAAA,MACA;AAAA,QACE,MAAM,iBAAA,CAAkB,gBAAA;AAAA,QACxB,UAAA,EAAY,eAAA;AAAA,QACZ,KAAA,EAAO;AAAA,UACL,MAAA,EAAQ;AAAA,YACN;AAAA,cACE,IAAA,EAAM,IAAA;AAAA,cACN,IAAA,EAAM,MAAA;AAAA,cACN,OAAA,EAAS,EAAE,iBAAA,EAAmB,QAAA;AAAS,aACzC;AAAA,YACA;AAAA,cACE,IAAA,EAAM,MAAA;AAAA,cACN,IAAA,EAAM;AAAA,aACR;AAAA,YACA;AAAA,cACE,IAAA,EAAM,YAAA;AAAA,cACN,IAAA,EAAM;AAAA,aACR;AAAA,YACA;AAAA,cACE,IAAA,EAAM,OAAA;AAAA,cACN,IAAA,EAAM;AAAA,aACR;AAAA,YACA;AAAA,cACE,IAAA,EAAM,QAAA;AAAA,cACN,IAAA,EAAM,MAAA;AAAA,cACN,UAAA,EAAY;AAAA,aACd;AAAA,YACA;AAAA,cACE,IAAA,EAAM,UAAA;AAAA,cACN,IAAA,EAAM,MAAA;AAAA,cACN,UAAA,EAAY;AAAA,aACd;AAAA,YACA;AAAA,cACE,IAAA,EAAM,WAAA;AAAA,cACN,IAAA,EAAM;AAAA,aACR;AAAA,YACA;AAAA,cACE,IAAA,EAAM,WAAA;AAAA,cACN,IAAA,EAAM,UAAA;AAAA,cACN,OAAA,EAAS,EAAE,YAAA,EAAc,IAAA;AAAK;AAChC,WACF;AAAA,UACA,mBAAA,EAAqB,CAAC,IAAI,CAAA;AAAA,UAC1B,iBAAA,EAAmB;AAAA,YACjB;AAAA,cACE,MAAA,EAAQ,CAAC,EAAE,QAAA,EAAU,QAAO,EAAG,EAAE,QAAA,EAAU,YAAA,EAAc;AAAA;AAC3D,WACF;AAAA,UACA,SAAA,EAAW;AAAA,YACT;AAAA,cACE,IAAA,EAAM,MAAA;AAAA,cACN,YAAY,CAAC,EAAE,UAAU,QAAA,EAAU,UAAA,EAAY,MAAM,CAAA;AAAA,cACrD,UAAU,iBAAA,CAAkB,IAAA;AAAA,cAC5B,mBAAA,EAAqB,mBAAA;AAAA,cACrB,QAAA,EAAU,SAAA;AAAA,cACV,QAAA,EAAU;AAAA;AACZ;AACF;AACF;AACF;AACF,GACF;AACF;;AC3RA,MAAA,CAAA,kBAAA,CAAA,gBAAA,CAAA,GAAA,MAAA,YAAA,CAAA,oCAAA,CAAA;;AAIA,MAAA,CAAA,CAAA,CAAA,GAAA,MAAA,YAAA,CAAA,KAAA,CAAA;;AAEO,MAAM,qCAAA,GAAwC,gBAAA;AAAA,EAAiB,CAAC,GAAA,KACrE,CAAA,CAAE,MAAA,CAAO;AAAA,IACP,0BAA0B,GAAA,CAAI,WAAA;AAAA,MAC5B,CAAA,CAAE,KAAA;AAAA,QACA,IAAI,OAAA,CAAQ;AAAA,UACV,IAAA,EAAM,kBAAA;AAAA,UACN,QAAA,EAAU;AAAA,SACX;AAAA,OACH;AAAA,MACA;AAAC,KACH;AAAA,IACA,yBAAA,EAA2B,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAQ,KAAK;AAAA,GACrD;AACH;;;;"}

package/dist/web/assets/{plugin-definition-KEpaSB6p.js → plugin-definition-Cg8Gij5x.js}

@@ -1,4 +1,4 @@
-import { importShared } from './__federation_fn_import-3DENgil8.js';
+import { importShared } from './__federation_fn_import-DybuDj1g.js';
 
 const PLACEHOLDER_AUTH_MODELS = {
   user: "User"
@@ -13,4 +13,4 @@ const createPlaceholderAuthPluginDefinitionSchema = definitionSchema(
 );
 
 export { PLACEHOLDER_AUTH_MODELS as P, createPlaceholderAuthPluginDefinitionSchema as c };
-//# sourceMappingURL=plugin-definition-KEpaSB6p.js.map
+//# sourceMappingURL=plugin-definition-Cg8Gij5x.js.map

package/dist/web/assets/{plugin-definition-KEpaSB6p.js.map → plugin-definition-Cg8Gij5x.js.map}

@@ -1 +1 @@
-{"version":3,"file":"plugin-definition-KEpaSB6p.js","sources":["../../../src/placeholder-auth/constants/model-names.ts","../../../src/placeholder-auth/core/schema/plugin-definition.ts"],"sourcesContent":["export const PLACEHOLDER_AUTH_MODELS = {\n  user: 'User',\n} as const;\n","import type { def } from '@baseplate-dev/project-builder-lib';\n\nimport { definitionSchema } from '@baseplate-dev/project-builder-lib';\nimport { z } from 'zod';\n\nexport const createPlaceholderAuthPluginDefinitionSchema = definitionSchema(\n  () => z.object({}),\n);\n\nexport type PlaceholderAuthPluginDefinitionInput = def.InferInput<\n  typeof createPlaceholderAuthPluginDefinitionSchema\n>;\n"],"names":[],"mappings":";;AAAO,MAAM,uBAAA,GAA0B;AAAA,EACrC,IAAA,EAAM;AACR;;ACAA,MAAA,CAAA,gBAAA,CAAA,GAAA,MAAA,YAAA,CAAA,oCAAA,CAAA;;AACA,MAAA,CAAA,CAAA,CAAA,GAAA,MAAA,YAAA,CAAA,KAAA,CAAA;;AAEO,MAAM,2CAAA,GAA8C,gBAAA;AAAA,EACzD,MAAM,CAAA,CAAE,MAAA,CAAO,EAAE;AACnB;;;;"}
+{"version":3,"file":"plugin-definition-Cg8Gij5x.js","sources":["../../../src/placeholder-auth/constants/model-names.ts","../../../src/placeholder-auth/core/schema/plugin-definition.ts"],"sourcesContent":["export const PLACEHOLDER_AUTH_MODELS = {\n  user: 'User',\n} as const;\n","import type { def } from '@baseplate-dev/project-builder-lib';\n\nimport { definitionSchema } from '@baseplate-dev/project-builder-lib';\nimport { z } from 'zod';\n\nexport const createPlaceholderAuthPluginDefinitionSchema = definitionSchema(\n  () => z.object({}),\n);\n\nexport type PlaceholderAuthPluginDefinitionInput = def.InferInput<\n  typeof createPlaceholderAuthPluginDefinitionSchema\n>;\n"],"names":[],"mappings":";;AAAO,MAAM,uBAAA,GAA0B;AAAA,EACrC,IAAA,EAAM;AACR;;ACAA,MAAA,CAAA,gBAAA,CAAA,GAAA,MAAA,YAAA,CAAA,oCAAA,CAAA;;AACA,MAAA,CAAA,CAAA,CAAA,GAAA,MAAA,YAAA,CAAA,KAAA,CAAA;;AAEO,MAAM,2CAAA,GAA8C,gBAAA;AAAA,EACzD,MAAM,CAAA,CAAE,MAAA,CAAO,EAAE;AACnB;;;;"}

package/dist/web/assets/{plugin-definition-B86WQ7Ni.js → plugin-definition-ChoxTjiw.js}

@@ -1,4 +1,4 @@
-import { importShared } from './__federation_fn_import-3DENgil8.js';
+import { importShared } from './__federation_fn_import-DybuDj1g.js';
 
 const {authRoleEntityType: authRoleEntityType$1} = await importShared('@baseplate-dev/project-builder-lib');
 
@@ -6,17 +6,26 @@ const AUTH_DEFAULT_ROLES = [
   {
     name: "public",
     comment: "All users (including unauthenticated and authenticated users)",
-    builtIn: true
+    builtIn: true,
+    autoAssigned: true
   },
   {
     name: "user",
     comment: "All authenticated users",
-    builtIn: true
+    builtIn: true,
+    autoAssigned: true
   },
   {
     name: "system",
     comment: "System processes without a user context, e.g. background jobs",
-    builtIn: true
+    builtIn: true,
+    autoAssigned: true
+  },
+  {
+    name: "admin",
+    comment: "Administrator with full access",
+    builtIn: true,
+    autoAssigned: false
   }
 ];
 function createDefaultAuthRoles() {
@@ -35,7 +44,8 @@ const createAuthRoleSchema = definitionSchema$1(
       id: z$1.string(),
       name: z$1.string().min(1),
       comment: z$1.string().min(1),
-      builtIn: z$1.boolean().default(false)
+      builtIn: z$1.boolean().default(false),
+      autoAssigned: z$1.boolean().default(false)
     }),
     { type: authRoleEntityType }
   )
@@ -71,9 +81,13 @@ const createAuthPluginDefinitionSchema = definitionSchema(
       type: featureEntityType,
       onDelete: "RESTRICT"
     }),
+    accountsFeatureRef: ctx.withRef({
+      type: featureEntityType,
+      onDelete: "RESTRICT"
+    }),
     roles: createAuthRolesSchema(ctx)
   })
 );
 
 export { createAuthPluginDefinitionSchema as a, createDefaultAuthRoles as b, createAuthRoleSchema as c };
-//# sourceMappingURL=plugin-definition-B86WQ7Ni.js.map
+//# sourceMappingURL=plugin-definition-ChoxTjiw.js.map

package/dist/web/assets/plugin-definition-ChoxTjiw.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-definition-ChoxTjiw.js","sources":["../../../src/auth/core/schema/roles/constants.ts","../../../src/auth/core/schema/roles/schema.ts","../../../src/auth/core/schema/plugin-definition.ts"],"sourcesContent":["import { authRoleEntityType } from '@baseplate-dev/project-builder-lib';\n\nimport type { AuthRoleDefinition } from './schema.js';\n\nexport const AUTH_DEFAULT_ROLES: Omit<AuthRoleDefinition, 'id'>[] = [\n  {\n    name: 'public',\n    comment: 'All users (including unauthenticated and authenticated users)',\n    builtIn: true,\n    autoAssigned: true,\n  },\n  {\n    name: 'user',\n    comment: 'All authenticated users',\n    builtIn: true,\n    autoAssigned: true,\n  },\n  {\n    name: 'system',\n    comment: 'System processes without a user context, e.g. background jobs',\n    builtIn: true,\n    autoAssigned: true,\n  },\n  {\n    name: 'admin',\n    comment: 'Administrator with full access',\n    builtIn: true,\n    autoAssigned: false,\n  },\n];\n\nexport function createDefaultAuthRoles(): AuthRoleDefinition[] {\n  return AUTH_DEFAULT_ROLES.map((role) => ({\n    ...role,\n    id: authRoleEntityType.generateNewId(),\n  }));\n}\n","import type { def } from '@baseplate-dev/project-builder-lib';\n\nimport {\n  authRoleEntityType,\n  definitionSchema,\n} from '@baseplate-dev/project-builder-lib';\nimport { z } from 'zod';\n\nimport { AUTH_DEFAULT_ROLES } from './constants.js';\n\nexport const createAuthRoleSchema = definitionSchema((ctx) =>\n  ctx.withEnt(\n    z.object({\n      id: z.string(),\n      name: z.string().min(1),\n      comment: z.string().min(1),\n      builtIn: z.boolean().default(false),\n      autoAssigned: z.boolean().default(false),\n    }),\n    { type: authRoleEntityType },\n  ),\n);\n\n/**\n * Defines the schema for a role.\n */\nexport type AuthRoleDefinition = def.InferOutput<typeof createAuthRoleSchema>;\n\nexport type AuthRoleInput = def.InferInput<typeof createAuthRoleSchema>;\n\n/**\n * Defines the schema for an array of roles ensuring that there are no duplicate\n * role names and that the built-in roles are included.\n */\nexport const createAuthRolesSchema = definitionSchema((ctx) =>\n  z\n    .array(createAuthRoleSchema(ctx))\n    .superRefine((roles, ctx) => {\n      const dup = roles\n        .map((r) => r.name)\n        .filter((v, i, a) => a.indexOf(v) !== i);\n      if (dup.length > 0) {\n        ctx.addIssue({\n          code: 'custom',\n          message: `Duplicate role name(s): ${dup.join(', ')}`,\n        });\n      }\n    })\n    .superRefine((roles, ctx) => {\n      for (const defaultRole of AUTH_DEFAULT_ROLES) {\n        if (!roles.some((r) => r.name === defaultRole.name && r.builtIn)) {\n          ctx.addIssue({\n            code: 'custom',\n            message: `Missing built-in role: ${defaultRole.name}`,\n          });\n        }\n      }\n    }),\n);\n","import type { def } from '@baseplate-dev/project-builder-lib';\n\nimport {\n  definitionSchema,\n  featureEntityType,\n} from '@baseplate-dev/project-builder-lib';\nimport { z } from 'zod';\n\nimport { createAuthRolesSchema } from './roles/index.js';\n\nexport const createAuthPluginDefinitionSchema = definitionSchema((ctx) =>\n  z.object({\n    implementationPluginKey: z\n      .string()\n      .min(1, 'Auth implementation plugin must be selected'),\n    authFeatureRef: ctx.withRef({\n      type: featureEntityType,\n      onDelete: 'RESTRICT',\n    }),\n    accountsFeatureRef: ctx.withRef({\n      type: featureEntityType,\n      onDelete: 'RESTRICT',\n    }),\n    roles: createAuthRolesSchema(ctx),\n  }),\n);\n\nexport type AuthPluginDefinition = def.InferOutput<\n  typeof createAuthPluginDefinitionSchema\n>;\n\nexport type AuthPluginDefinitionInput = def.InferInput<\n  typeof createAuthPluginDefinitionSchema\n>;\n"],"names":["authRoleEntityType","definitionSchema","z","ctx"],"mappings":";;AAAA,MAAA,qBAAAA,oBAAA,CAAA,GAAA,MAAA,YAAA,CAAA,oCAAA,CAAA;;AAIO,MAAM,kBAAA,GAAuD;AAAA,EAClE;AAAA,IACE,IAAA,EAAM,QAAA;AAAA,IACN,OAAA,EAAS,+DAAA;AAAA,IACT,OAAA,EAAS,IAAA;AAAA,IACT,YAAA,EAAc;AAAA,GAChB;AAAA,EACA;AAAA,IACE,IAAA,EAAM,MAAA;AAAA,IACN,OAAA,EAAS,yBAAA;AAAA,IACT,OAAA,EAAS,IAAA;AAAA,IACT,YAAA,EAAc;AAAA,GAChB;AAAA,EACA;AAAA,IACE,IAAA,EAAM,QAAA;AAAA,IACN,OAAA,EAAS,+DAAA;AAAA,IACT,OAAA,EAAS,IAAA;AAAA,IACT,YAAA,EAAc;AAAA,GAChB;AAAA,EACA;AAAA,IACE,IAAA,EAAM,OAAA;AAAA,IACN,OAAA,EAAS,gCAAA;AAAA,IACT,OAAA,EAAS,IAAA;AAAA,IACT,YAAA,EAAc;AAAA;AAElB,CAAA;AAEO,SAAS,sBAAA,GAA+C;AAC7D,EAAA,OAAO,kBAAA,CAAmB,GAAA,CAAI,CAAC,IAAA,MAAU;AAAA,IACvC,GAAG,IAAA;AAAA,IACH,EAAA,EAAIA,qBAAmB,aAAA;AAAc,GACvC,CAAE,CAAA;AACJ;;AClCA,MAAA,CAAA,kBAAA,mBAAAC,kBAAA,CAAA,GAAA,MAAA,YAAA,CAAA,oCAAA,CAAA;;AAIA,MAAA,IAAAC,GAAA,CAAA,GAAA,MAAA,YAAA,CAAA,KAAA,CAAA;AAIO,MAAM,oBAAA,GAAuBD,kBAAA;AAAA,EAAiB,CAAC,QACpD,GAAA,CAAI,OAAA;AAAA,IACFC,IAAE,MAAA,CAAO;AAAA,MACP,EAAA,EAAIA,IAAE,MAAA,EAAO;AAAA,MACb,IAAA,EAAMA,GAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,MACtB,OAAA,EAASA,GAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,MACzB,OAAA,EAASA,GAAA,CAAE,OAAA,EAAQ,CAAE,QAAQ,KAAK,CAAA;AAAA,MAClC,YAAA,EAAcA,GAAA,CAAE,OAAA,EAAQ,CAAE,QAAQ,KAAK;AAAA,KACxC,CAAA;AAAA,IACD,EAAE,MAAM,kBAAA;AAAmB;AAE/B;AAaO,MAAM,qBAAA,GAAwBD,kBAAA;AAAA,EAAiB,CAAC,GAAA,KACrDC,GAAA,CACG,KAAA,CAAM,oBAAA,CAAqB,GAAG,CAAC,CAAA,CAC/B,WAAA,CAAY,CAAC,KAAA,EAAOC,IAAAA,KAAQ;AAC3B,IAAA,MAAM,MAAM,KAAA,CACT,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,IAAI,CAAA,CACjB,MAAA,CAAO,CAAC,GAAG,CAAA,EAAG,CAAA,KAAM,EAAE,OAAA,CAAQ,CAAC,MAAM,CAAC,CAAA;AACzC,IAAA,IAAI,GAAA,CAAI,SAAS,CAAA,EAAG;AAClB,MAAAA,KAAI,QAAA,CAAS;AAAA,QACX,IAAA,EAAM,QAAA;AAAA,QACN,OAAA,EAAS,CAAA,wBAAA,EAA2B,GAAA,CAAI,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,OACnD,CAAA;AAAA,IACH;AAAA,EACF,CAAC,CAAA,CACA,WAAA,CAAY,CAAC,OAAOA,IAAAA,KAAQ;AAC3B,IAAA,KAAA,MAAW,eAAe,kBAAA,EAAoB;AAC5C,MAAA,IAAI,CAAC,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,KAAS,WAAA,CAAY,IAAA,IAAQ,CAAA,CAAE,OAAO,CAAA,EAAG;AAChE,QAAAA,KAAI,QAAA,CAAS;AAAA,UACX,IAAA,EAAM,QAAA;AAAA,UACN,OAAA,EAAS,CAAA,uBAAA,EAA0B,WAAA,CAAY,IAAI,CAAA;AAAA,SACpD,CAAA;AAAA,MACH;AAAA,IACF;AAAA,EACF,CAAC;AACL,CAAA;;ACxDA,MAAA,CAAA,gBAAA,CAAA,iBAAA,CAAA,GAAA,MAAA,YAAA,CAAA,oCAAA,CAAA;;AAIA,MAAA,CAAA,CAAA,CAAA,GAAA,MAAA,YAAA,CAAA,KAAA,CAAA;AAIO,MAAM,gCAAA,GAAmC,gBAAA;AAAA,EAAiB,CAAC,GAAA,KAChE,CAAA,CAAE,MAAA,CAAO;AAAA,IACP,yBAAyB,CAAA,CACtB,MAAA,EAAO,CACP,GAAA,CAAI,GAAG,6CAA6C,CAAA;AAAA,IACvD,cAAA,EAAgB,IAAI,OAAA,CAAQ;AAAA,MAC1B,IAAA,EAAM,iBAAA;AAAA,MACN,QAAA,EAAU;AAAA,KACX,CAAA;AAAA,IACD,kBAAA,EAAoB,IAAI,OAAA,CAAQ;AAAA,MAC9B,IAAA,EAAM,iBAAA;AAAA,MACN,QAAA,EAAU;AAAA,KACX,CAAA;AAAA,IACD,KAAA,EAAO,sBAAsB,GAAG;AAAA,GACjC;AACH;;;;"}

package/dist/web/assets/{__federation_expose_better-authCoreWeb-CXHL-Ghf.js → plugin-definition-D9-5sSEf.js}

@@ -1,21 +1,18 @@
-import { importShared } from './__federation_fn_import-3DENgil8.js';
-import { j as jsxRuntimeExports } from './jsx-runtime-XI9uIe3W.js';
-import { a, A as AuthConfigTabs } from './styles-CpKtlIgU.js';
-import { g as getAuthPluginDefinition } from './get-auth-plugin-definition-DHcbFujw.js';
-import { B as BETTER_AUTH_MODELS, c as createBetterAuthPluginDefinitionSchema } from './plugin-definition-CEQb6mWV.js';
+import { B as BETTER_AUTH_MODELS } from './model-names-D7UT0B8x.js';
+import { importShared } from './__federation_fn_import-DybuDj1g.js';
 
-function createBetterAuthPartialDefinition(authFeatureName) {
+function createBetterAuthPartialDefinition(authFeatureName, accountsFeatureName) {
   return {
     models: [
       {
         name: BETTER_AUTH_MODELS.user,
-        featureRef: authFeatureName,
+        featureRef: accountsFeatureName,
         model: {
           fields: [
             {
               name: "id",
               type: "uuid",
-              options: { genUuid: true }
+              options: { defaultGeneration: "uuidv7" }
             },
             {
               name: "name",
@@ -58,19 +55,34 @@ function createBetterAuthPartialDefinition(authFeatureName) {
         graphql: {
           objectType: {
             enabled: true,
-            fields: [{ ref: "id" }, { ref: "email" }]
+            fields: [
+              { ref: "id" },
+              {
+                ref: "email",
+                globalRoles: ["admin"],
+                instanceRoles: ["self"]
+              }
+            ]
           }
+        },
+        authorizer: {
+          roles: [
+            {
+              name: "self",
+              expression: "model.id === userId"
+            }
+          ]
         }
       },
       {
         name: BETTER_AUTH_MODELS.session,
-        featureRef: authFeatureName,
+        featureRef: accountsFeatureName,
         model: {
           fields: [
             {
               name: "id",
               type: "uuid",
-              options: { genUuid: true }
+              options: { defaultGeneration: "uuidv7" }
             },
             {
               name: "expiresAt",
@@ -125,13 +137,13 @@ function createBetterAuthPartialDefinition(authFeatureName) {
       },
       {
         name: BETTER_AUTH_MODELS.account,
-        featureRef: authFeatureName,
+        featureRef: accountsFeatureName,
         model: {
           fields: [
             {
               name: "id",
               type: "uuid",
-              options: { genUuid: true }
+              options: { defaultGeneration: "uuidv7" }
             },
             {
               name: "accountId",
@@ -212,7 +224,7 @@ function createBetterAuthPartialDefinition(authFeatureName) {
             {
               name: "id",
               type: "uuid",
-              options: { genUuid: true }
+              options: { defaultGeneration: "uuidv4" }
             },
             {
               name: "identifier",
@@ -242,7 +254,7 @@ function createBetterAuthPartialDefinition(authFeatureName) {
       },
       {
         name: BETTER_AUTH_MODELS.userRole,
-        featureRef: authFeatureName,
+        featureRef: accountsFeatureName,
         model: {
           fields: [
             {
@@ -281,122 +293,23 @@ function createBetterAuthPartialDefinition(authFeatureName) {
   };
 }
 
-const {applyMergedDefinition,diffDefinition,PluginUtils} = await importShared('@baseplate-dev/project-builder-lib');
+const {authRoleEntityType,definitionSchema} = await importShared('@baseplate-dev/project-builder-lib');
 
-const {DefinitionDiffAlert,useBlockUnsavedChangesNavigate,useDefinitionSchema,useProjectDefinition,useResettableForm} = await importShared('@baseplate-dev/project-builder-lib/web');
+const {z} = await importShared('zod');
 
-const {FormActionBar,SectionList,SectionListSection,SectionListSectionContent,SectionListSectionDescription,SectionListSectionHeader,SectionListSectionTitle} = await importShared('@baseplate-dev/ui-components');
-const {useMemo} = await importShared('react');
-function BetterAuthDefinitionEditor({
-  definition: pluginMetadata,
-  metadata,
-  onSave
-}) {
-  const { definition, definitionContainer, saveDefinitionWithFeedback } = useProjectDefinition();
-  const betterAuthPluginDefinitionSchema = useDefinitionSchema(
-    createBetterAuthPluginDefinitionSchema
-  );
-  const defaultValues = useMemo(() => {
-    if (pluginMetadata?.config) {
-      return pluginMetadata.config;
-    }
-    return {};
-  }, [pluginMetadata?.config]);
-  const form = useResettableForm({
-    resolver: a(betterAuthPluginDefinitionSchema),
-    defaultValues
-  });
-  const { control, reset, handleSubmit } = form;
-  const authDefinition = getAuthPluginDefinition(definition);
-  const authFeature = definition.features.find(
-    (f) => f.id === authDefinition.authFeatureRef
-  );
-  if (!authFeature) {
-    throw new Error(
-      `Auth feature not found for ref: ${authDefinition.authFeatureRef}`
-    );
-  }
-  const partialDef = useMemo(
-    () => createBetterAuthPartialDefinition(authFeature.name),
-    [authFeature.name]
-  );
-  const diff = useMemo(
-    () => diffDefinition(
-      definitionContainer.schema,
-      definitionContainer.definition,
-      partialDef
-    ),
-    [definitionContainer, partialDef]
-  );
-  const onSubmit = handleSubmit(
-    (data) => saveDefinitionWithFeedback(
-      (draftConfig) => {
-        const updatedData = {
-          ...data
-        };
-        applyMergedDefinition(definitionContainer, partialDef)(draftConfig);
-        PluginUtils.setPluginConfig(
-          draftConfig,
-          metadata,
-          updatedData,
-          definitionContainer
-        );
-      },
-      {
-        successMessage: "Successfully saved Better Auth plugin!",
-        onSuccess: () => {
-          onSave();
-        }
-      }
-    )
-  );
-  useBlockUnsavedChangesNavigate({ control, reset, onSubmit });
-  return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "auth:relative auth:flex auth:h-full auth:flex-1 auth:flex-col auth:gap-4 auth:overflow-hidden", children: [
-    /* @__PURE__ */ jsxRuntimeExports.jsx(AuthConfigTabs, {}),
-    /* @__PURE__ */ jsxRuntimeExports.jsx(
-      "div",
-      {
-        className: "auth:mb-[--action-bar-height] auth:flex auth:flex-1 auth:overflow-y-auto",
-        style: {
-          "--action-bar-height": "52px"
-        },
-        children: /* @__PURE__ */ jsxRuntimeExports.jsxs("form", { onSubmit, className: "auth:max-w-6xl auth:flex-1", children: [
-          /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "auth:pb-16", children: /* @__PURE__ */ jsxRuntimeExports.jsx(SectionList, { children: /* @__PURE__ */ jsxRuntimeExports.jsxs(SectionListSection, { children: [
-            /* @__PURE__ */ jsxRuntimeExports.jsxs(SectionListSectionHeader, { children: [
-              /* @__PURE__ */ jsxRuntimeExports.jsx(SectionListSectionTitle, { children: "Better Auth Configuration" }),
-              /* @__PURE__ */ jsxRuntimeExports.jsx(SectionListSectionDescription, { children: "The plugin will automatically configure the models it needs." })
-            ] }),
-            /* @__PURE__ */ jsxRuntimeExports.jsx(SectionListSectionContent, { className: "auth:space-y-6", children: /* @__PURE__ */ jsxRuntimeExports.jsx(
-              DefinitionDiffAlert,
-              {
-                diff,
-                upToDateMessage: "All required models are already configured correctly. No changes needed."
-              }
-            ) })
-          ] }) }) }),
-          /* @__PURE__ */ jsxRuntimeExports.jsx(
-            FormActionBar,
-            {
-              form,
-              allowSaveWithoutDirty: !pluginMetadata || diff.hasChanges
-            }
-          )
-        ] })
-      }
+const createBetterAuthPluginDefinitionSchema = definitionSchema(
+  (ctx) => z.object({
+    additionalUserAdminRoles: ctx.withDefault(
+      z.array(
+        ctx.withRef({
+          type: authRoleEntityType,
+          onDelete: "DELETE"
+        })
+      ),
+      []
     )
-  ] });
-}
-
-const {createPluginModule,webConfigSpec} = await importShared('@baseplate-dev/project-builder-lib');
-const web = createPluginModule({
-  name: "web",
-  dependencies: {
-    webConfig: webConfigSpec
-  },
-  initialize: ({ webConfig }, { pluginKey }) => {
-    webConfig.components.set(pluginKey, BetterAuthDefinitionEditor);
-  }
-});
+  })
+);
 
-export { web as default };
-//# sourceMappingURL=__federation_expose_better-authCoreWeb-CXHL-Ghf.js.map
+export { createBetterAuthPartialDefinition as a, createBetterAuthPluginDefinitionSchema as c };
+//# sourceMappingURL=plugin-definition-D9-5sSEf.js.map