@contember/bindx 0.1.0

package/dist/roles/RoleSchemaRegistry.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Runtime registry for role-based schemas.
+ *
+ * Manages multiple schema registries (one per role) and provides
+ * utilities for role-aware field access and query building.
+ */
+import { SchemaRegistry } from '../schema/SchemaRegistry.js';
+import type { RoleSchemaDefinitions } from './types.js';
+/**
+ * Registry that manages multiple schemas, one for each role.
+ *
+ * @typeParam TRoleSchemas - Map of role names to their model types
+ *
+ * @example
+ * ```typescript
+ * interface RoleSchemas {
+ *   public: { Article: PublicArticle; Author: PublicAuthor }
+ *   editor: { Article: EditorArticle; Author: EditorAuthor }
+ *   admin: { Article: AdminArticle; Author: AdminAuthor }
+ * }
+ *
+ * const registry = new RoleSchemaRegistry<RoleSchemas>({
+ *   public: publicSchemaDefinition,
+ *   editor: editorSchemaDefinition,
+ *   admin: adminSchemaDefinition,
+ * })
+ * ```
+ */
+export declare class RoleSchemaRegistry<TRoleSchemas extends {
+    [K in keyof TRoleSchemas]: {
+        [E: string]: object;
+    };
+}> {
+    private readonly registries;
+    private readonly roleNames;
+    constructor(schemas: RoleSchemaDefinitions<TRoleSchemas>);
+    /**
+     * Gets all registered role names.
+     */
+    getRoleNames(): readonly (keyof TRoleSchemas)[];
+    /**
+     * Gets the SchemaRegistry for a specific role.
+     */
+    getSchemaForRole<TRole extends keyof TRoleSchemas>(role: TRole): SchemaRegistry;
+    /**
+     * Checks if a role exists in the registry.
+     */
+    hasRole(role: keyof TRoleSchemas): boolean;
+    /**
+     * Gets field names available for an entity across ALL specified roles (intersection).
+     *
+     * @param roles - Roles to check
+     * @param entityName - Entity to get fields for
+     * @returns Array of field names available in ALL specified roles
+     */
+    getFieldsForRoles(roles: readonly (keyof TRoleSchemas)[], entityName: string): string[];
+    /**
+     * Gets entity names available across ALL specified roles (intersection).
+     *
+     * @param roles - Roles to check
+     * @returns Array of entity names available in ALL specified roles
+     */
+    getEntityNamesForRoles(roles: readonly (keyof TRoleSchemas)[]): string[];
+    /**
+     * Checks if a field is accessible for all specified roles.
+     */
+    isFieldAccessible(roles: readonly (keyof TRoleSchemas)[], entityName: string, fieldName: string): boolean;
+    /**
+     * Checks if an entity is accessible for all specified roles.
+     */
+    isEntityAccessible(roles: readonly (keyof TRoleSchemas)[], entityName: string): boolean;
+    /**
+     * Validates all registered schemas.
+     */
+    validate(): void;
+}
+//# sourceMappingURL=RoleSchemaRegistry.d.ts.map

package/dist/roles/RoleSchemaRegistry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RoleSchemaRegistry.d.ts","sourceRoot":"","sources":["../../src/roles/RoleSchemaRegistry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAE5D,OAAO,KAAK,EAAE,qBAAqB,EAAa,MAAM,YAAY,CAAA;AAElE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,kBAAkB,CAAC,YAAY,SAAS;KAAG,CAAC,IAAI,MAAM,YAAY,GAAG;QAAE,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE;CAAE;IAC1G,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyC;IACpE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiC;gBAE/C,OAAO,EAAE,qBAAqB,CAAC,YAAY,CAAC;IAUxD;;OAEG;IACH,YAAY,IAAI,SAAS,CAAC,MAAM,YAAY,CAAC,EAAE;IAI/C;;OAEG;IACH,gBAAgB,CAAC,KAAK,SAAS,MAAM,YAAY,EAAE,IAAI,EAAE,KAAK,GAAG,cAAc;IAQ/E;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,YAAY,GAAG,OAAO;IAI1C;;;;;;OAMG;IACH,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,YAAY,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE;IA6BvF;;;;;OAKG;IACH,sBAAsB,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,YAAY,CAAC,EAAE,GAAG,MAAM,EAAE;IA6BxE;;OAEG;IACH,iBAAiB,CAChB,KAAK,EAAE,SAAS,CAAC,MAAM,YAAY,CAAC,EAAE,EACtC,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GACf,OAAO;IAgBV;;OAEG;IACH,kBAAkB,CACjB,KAAK,EAAE,SAAS,CAAC,MAAM,YAAY,CAAC,EAAE,EACtC,UAAU,EAAE,MAAM,GAChB,OAAO;IAWV;;OAEG;IACH,QAAQ,IAAI,IAAI;CAWhB"}

package/dist/roles/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Role-based schema module for Bindx.
+ *
+ * Provides type-safe role-aware entity access with schema narrowing.
+ *
+ * @packageDocumentation
+ */
+export type { UnionToIntersection, RoleSchemaMap, RoleNames, IntersectRoleSchemas, IntersectSchemaEntities, PickCommonProperties, EntityForRoles, SchemaForRole, EntityNamesForRoles, RoleSchemaDefinitions, RoleBindxConfig, RolesAreSubset, RequireRoleSubset, AssertRoleCompatibility, SingleSchemaRoles, IsSingleSchema, AllRoles, DefaultRole, } from './types.js';
+export { isValidRole, DEFAULT_ROLE } from './types.js';
+export { RoleSchemaRegistry } from './RoleSchemaRegistry.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/roles/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/roles/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,YAAY,EACX,mBAAmB,EACnB,aAAa,EACb,SAAS,EACT,oBAAoB,EACpB,uBAAuB,EACvB,oBAAoB,EACpB,cAAc,EACd,aAAa,EACb,mBAAmB,EACnB,qBAAqB,EACrB,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,uBAAuB,EACvB,iBAAiB,EACjB,cAAc,EACd,QAAQ,EACR,WAAW,GACX,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAEtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA"}

package/dist/roles/types.d.ts

@@ -0,0 +1,242 @@
+/**
+ * Role-based schema types for Bindx.
+ *
+ * Provides type-safe role-aware entity access with schema narrowing
+ * based on user roles.
+ */
+import type { SchemaDefinition, EntitySchemaDef } from '../schema/types.js';
+/**
+ * Converts a union type to an intersection type.
+ *
+ * @example
+ * ```typescript
+ * type Union = { a: string } | { b: number }
+ * type Intersection = UnionToIntersection<Union>
+ * // Result: { a: string } & { b: number }
+ * ```
+ */
+export type UnionToIntersection<U> = (U extends unknown ? (k: U) => void : never) extends (k: infer I) => void ? I : never;
+/**
+ * Extracts keys that exist in ALL members of a union type.
+ * Uses distributive conditional to check each union member.
+ *
+ * @example
+ * ```typescript
+ * type A = { id: string; title: string; content: string }
+ * type B = { id: string; title: string; notes: string }
+ * type Common = KeysInAll<A | B>
+ * // Result: 'id' | 'title'
+ * ```
+ */
+type KeysInAll<T, K = keyof T> = T extends unknown ? K extends keyof T ? K : never : never;
+/**
+ * Picks only the common properties from a union of object types.
+ * Returns an object with only keys that exist in ALL union members.
+ * Property values are unions of the original types.
+ *
+ * @example
+ * ```typescript
+ * type A = { id: string; title: string; content: string }
+ * type B = { id: string; title: string; notes: string }
+ * type Common = PickCommonProperties<A | B>
+ * // Result: { id: string; title: string }
+ * ```
+ */
+export type PickCommonProperties<T> = {
+    [K in KeysInAll<T>]: T extends {
+        readonly [P in K]: infer V;
+    } ? V : never;
+};
+/**
+ * Applies PickCommonProperties to each entity in a schema union.
+ * For a union of schemas, extracts only common entity names and their common properties.
+ *
+ * @example
+ * ```typescript
+ * type SchemaA = { Article: { id: string; title: string }; Author: { id: string } }
+ * type SchemaB = { Article: { id: string; content: string }; Author: { id: string } }
+ * type Common = IntersectSchemaEntities<SchemaA | SchemaB>
+ * // Result: { Article: { id: string }; Author: { id: string } }
+ * ```
+ */
+export type IntersectSchemaEntities<TSchemaUnion> = {
+    [K in KeysInAll<TSchemaUnion>]: PickCommonProperties<TSchemaUnion extends {
+        readonly [P in K]: infer V;
+    } ? V : never>;
+};
+/**
+ * Base constraint for role schema maps.
+ * Uses a mapped type to allow interfaces without index signatures.
+ */
+export type RoleSchemasConstraint = {
+    [role: string]: {
+        [entity: string]: object;
+    };
+};
+/**
+ * Mapping of role names to their respective schema types.
+ *
+ * @example
+ * ```typescript
+ * interface MyRoleSchemas {
+ *   public: PublicSchema
+ *   editor: EditorSchema
+ *   admin: AdminSchema
+ * }
+ * ```
+ */
+export type RoleSchemaMap<TRoleSchemas> = {
+    [K in keyof TRoleSchemas]: TRoleSchemas[K];
+};
+/**
+ * Extracts all role names from a role schema map.
+ */
+export type RoleNames<TRoleSchemas> = keyof TRoleSchemas & string;
+/**
+ * Intersects schemas from multiple roles.
+ * Used when multiple roles are specified - returns fields accessible to ALL roles.
+ *
+ * This performs a TRUE property intersection: only properties that exist in ALL
+ * role schemas are accessible. This is different from TypeScript's & operator
+ * which creates a type with ALL properties from all schemas.
+ *
+ * @example
+ * ```typescript
+ * interface EditorSchema { Article: { id: string; title: string; content: string } }
+ * interface ReviewerSchema { Article: { id: string; title: string; status: string } }
+ *
+ * type Combined = IntersectRoleSchemas<{ editor: EditorSchema; reviewer: ReviewerSchema }, ['editor', 'reviewer']>
+ * // Result: { Article: { id: string; title: string } } (only common properties)
+ * ```
+ */
+export type IntersectRoleSchemas<TRoleSchemas, TRoles extends readonly (keyof TRoleSchemas)[]> = IntersectSchemaEntities<TRoleSchemas[TRoles[number]]>;
+/**
+ * Gets the entity type for specific roles.
+ *
+ * @typeParam TRoleSchemas - Map of role names to their schemas
+ * @typeParam TRoles - Tuple of role names to intersect
+ * @typeParam TEntityName - Name of the entity to extract
+ */
+export type EntityForRoles<TRoleSchemas, TRoles extends readonly (keyof TRoleSchemas)[], TEntityName extends string> = TEntityName extends keyof IntersectRoleSchemas<TRoleSchemas, TRoles> ? IntersectRoleSchemas<TRoleSchemas, TRoles>[TEntityName] : never;
+/**
+ * Gets the schema type for a specific role.
+ */
+export type SchemaForRole<TRoleSchemas, TRole extends keyof TRoleSchemas> = TRoleSchemas[TRole];
+/**
+ * Extracts all entity names that exist in ALL specified roles.
+ */
+export type EntityNamesForRoles<TRoleSchemas, TRoles extends readonly (keyof TRoleSchemas)[]> = keyof IntersectRoleSchemas<TRoleSchemas, TRoles> & string;
+/**
+ * Maps role names to their schema definitions (runtime structure).
+ */
+export type RoleSchemaDefinitions<TRoleSchemas> = {
+    [K in keyof TRoleSchemas]: TRoleSchemas[K] extends {
+        [E: string]: object;
+    } ? SchemaDefinition<TRoleSchemas[K]> : never;
+};
+/**
+ * Configuration for role-aware bindx.
+ */
+export interface RoleBindxConfig<TRoleSchemas> {
+    /**
+     * Schema definitions for each role.
+     */
+    readonly schemas: RoleSchemaDefinitions<TRoleSchemas>;
+    /**
+     * Function to check if the current user has a specific role.
+     * Used at runtime to determine which branches to render.
+     */
+    readonly hasRole: (role: keyof TRoleSchemas) => boolean;
+    /**
+     * Current roles of the user.
+     * Used for query building - determines which fields to fetch.
+     */
+    readonly currentRoles: readonly (keyof TRoleSchemas)[];
+}
+/**
+ * Check if TRequired roles are a subset of TAvailable roles.
+ * Returns true if every role in TRequired exists in TAvailable.
+ *
+ * @example
+ * ```typescript
+ * type Test1 = RolesAreSubset<['admin'], ['editor', 'admin']> // true
+ * type Test2 = RolesAreSubset<['admin'], ['editor']> // false
+ * type Test3 = RolesAreSubset<[], ['editor']> // true (empty is subset of all)
+ * ```
+ */
+export type RolesAreSubset<TRequired extends readonly string[], TAvailable extends readonly string[]> = TRequired extends readonly [] ? true : TRequired extends readonly [infer First extends string, ...infer Rest extends string[]] ? First extends TAvailable[number] ? RolesAreSubset<Rest, TAvailable> : false : boolean;
+/**
+ * Enforces that TRequired roles must be a subset of TAvailable roles.
+ * Returns TRequired if valid, never if not.
+ *
+ * @example
+ * ```typescript
+ * type Valid = RequireRoleSubset<['admin'], ['editor', 'admin']> // ['admin']
+ * type Invalid = RequireRoleSubset<['admin'], ['editor']> // never
+ * ```
+ */
+export type RequireRoleSubset<TRequired extends readonly string[], TAvailable extends readonly string[]> = RolesAreSubset<TRequired, TAvailable> extends true ? TRequired : never;
+/**
+ * Asserts that TComponentRoles are compatible with TAvailableRoles.
+ * Used for type-level validation when using role-aware components.
+ *
+ * When component requires ['admin'] and scope has ['editor', 'admin']:
+ * - ['admin'] ⊆ ['editor', 'admin'] = true (compatible)
+ *
+ * When component requires ['admin'] and scope has ['editor']:
+ * - ['admin'] ⊆ ['editor'] = false (incompatible)
+ */
+export type AssertRoleCompatibility<TComponentRoles extends readonly string[], TAvailableRoles extends readonly string[]> = RolesAreSubset<TComponentRoles, TAvailableRoles> extends true ? TComponentRoles : ['Error: Component requires roles', TComponentRoles, 'but available roles are', TAvailableRoles];
+/**
+ * Type predicate to check if a value is a valid role.
+ */
+export declare function isValidRole<TRoleSchemas>(roleSchemas: TRoleSchemas, role: unknown): role is keyof TRoleSchemas;
+export type { SchemaDefinition, EntitySchemaDef };
+/**
+ * Wraps a single schema as a role schema map with a default role.
+ * This allows single-schema usage to be a special case of role-aware bindx.
+ *
+ * @example
+ * ```typescript
+ * type Models = { Article: ArticleType; Author: AuthorType }
+ *
+ * // Single schema becomes:
+ * type RoleSchemas = SingleSchemaRoles<Models>
+ * // = { _default: { Article: ArticleType; Author: AuthorType } }
+ *
+ * // IntersectRoleSchemas<RoleSchemas, ['_default']> = Models
+ * ```
+ */
+export type SingleSchemaRoles<TModels extends Record<string, object>> = {
+    _default: TModels;
+};
+/**
+ * Check if TRoleSchemas represents a single-schema case.
+ * Returns true if the only key is '_default'.
+ *
+ * @example
+ * ```typescript
+ * type Test1 = IsSingleSchema<{ _default: Models }> // true
+ * type Test2 = IsSingleSchema<{ admin: AdminModels; public: PublicModels }> // false
+ * ```
+ */
+export type IsSingleSchema<TRoleSchemas> = keyof TRoleSchemas extends '_default' ? '_default' extends keyof TRoleSchemas ? true : false : false;
+/**
+ * Gets all role names from a role schema map as a readonly array type.
+ *
+ * @example
+ * ```typescript
+ * type Roles = AllRoles<{ admin: AdminModels; public: PublicModels }>
+ * // = readonly ('admin' | 'public')[]
+ * ```
+ */
+export type AllRoles<TRoleSchemas> = readonly (keyof TRoleSchemas & string)[];
+/**
+ * Default role name for single-schema case.
+ */
+export declare const DEFAULT_ROLE: "_default";
+/**
+ * Type for the default role name.
+ */
+export type DefaultRole = typeof DEFAULT_ROLE;
+//# sourceMappingURL=types.d.ts.map

package/dist/roles/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/roles/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAM3E;;;;;;;;;GASG;AACH,MAAM,MAAM,mBAAmB,CAAC,CAAC,IAChC,CAAC,CAAC,SAAS,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,IAAI,GACtE,CAAC,GACD,KAAK,CAAA;AAET;;;;;;;;;;;GAWG;AACH,KAAK,SAAS,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,OAAO,GAC/C,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,GAC7B,KAAK,CAAA;AAER;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,oBAAoB,CAAC,CAAC,IAAI;KACpC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS;QAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;KAAE,GAAG,CAAC,GAAG,KAAK;CACzE,CAAA;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,uBAAuB,CAAC,YAAY,IAAI;KAClD,CAAC,IAAI,SAAS,CAAC,YAAY,CAAC,GAAG,oBAAoB,CACnD,YAAY,SAAS;QAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;KAAE,GAAG,CAAC,GAAG,KAAK,CAC/D;CACD,CAAA;AAMD;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAAG;IACnC,CAAC,IAAI,EAAE,MAAM,GAAG;QAAE,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAA;CAC5C,CAAA;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,aAAa,CAAC,YAAY,IAAI;KACxC,CAAC,IAAI,MAAM,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC;CAC1C,CAAA;AAED;;GAEG;AACH,MAAM,MAAM,SAAS,CAAC,YAAY,IAAI,MAAM,YAAY,GAAG,MAAM,CAAA;AAEjE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,oBAAoB,CAC/B,YAAY,EACZ,MAAM,SAAS,SAAS,CAAC,MAAM,YAAY,CAAC,EAAE,IAC3C,uBAAuB,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;AAEzD;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,CACzB,YAAY,EACZ,MAAM,SAAS,SAAS,CAAC,MAAM,YAAY,CAAC,EAAE,EAC9C,WAAW,SAAS,MAAM,IACvB,WAAW,SAAS,MAAM,oBAAoB,CAAC,YAAY,EAAE,MAAM,CAAC,GACrE,oBAAoB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,WAAW,CAAC,GACvD,KAAK,CAAA;AAER;;GAEG;AACH,MAAM,MAAM,aAAa,CAAC,YAAY,EAAE,KAAK,SAAS,MAAM,YAAY,IACvE,YAAY,CAAC,KAAK,CAAC,CAAA;AAEpB;;GAEG;AACH,MAAM,MAAM,mBAAmB,CAC9B,YAAY,EACZ,MAAM,SAAS,SAAS,CAAC,MAAM,YAAY,CAAC,EAAE,IAC3C,MAAM,oBAAoB,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,MAAM,CAAA;AAM7D;;GAEG;AACH,MAAM,MAAM,qBAAqB,CAAC,YAAY,IAAI;KAChD,CAAC,IAAI,MAAM,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC,SAAS;QAAE,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,GACvE,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GACjC,KAAK;CACR,CAAA;AAED;;GAEG;AACH,MAAM,WAAW,eAAe,CAAC,YAAY;IAC5C;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC,YAAY,CAAC,CAAA;IAErD;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,YAAY,KAAK,OAAO,CAAA;IAEvD;;;OAGG;IACH,QAAQ,CAAC,YAAY,EAAE,SAAS,CAAC,MAAM,YAAY,CAAC,EAAE,CAAA;CACtD;AAMD;;;;;;;;;;GAUG;AACH,MAAM,MAAM,cAAc,CACzB,SAAS,SAAS,SAAS,MAAM,EAAE,EACnC,UAAU,SAAS,SAAS,MAAM,EAAE,IACjC,SAAS,SAAS,SAAS,EAAE,GAC9B,IAAI,GACJ,SAAS,SAAS,SAAS,CAAC,MAAM,KAAK,SAAS,MAAM,EAAE,GAAG,MAAM,IAAI,SAAS,MAAM,EAAE,CAAC,GACtF,KAAK,SAAS,UAAU,CAAC,MAAM,CAAC,GAC/B,cAAc,CAAC,IAAI,EAAE,UAAU,CAAC,GAChC,KAAK,GACN,OAAO,CAAA;AAEX;;;;;;;;;GASG;AACH,MAAM,MAAM,iBAAiB,CAC5B,SAAS,SAAS,SAAS,MAAM,EAAE,EACnC,UAAU,SAAS,SAAS,MAAM,EAAE,IACjC,cAAc,CAAC,SAAS,EAAE,UAAU,CAAC,SAAS,IAAI,GAAG,SAAS,GAAG,KAAK,CAAA;AAE1E;;;;;;;;;GASG;AACH,MAAM,MAAM,uBAAuB,CAClC,eAAe,SAAS,SAAS,MAAM,EAAE,EACzC,eAAe,SAAS,SAAS,MAAM,EAAE,IACtC,cAAc,CAAC,eAAe,EAAE,eAAe,CAAC,SAAS,IAAI,GAC9D,eAAe,GACf,CAAC,iCAAiC,EAAE,eAAe,EAAE,yBAAyB,EAAE,eAAe,CAAC,CAAA;AAMnG;;GAEG;AACH,wBAAgB,WAAW,CAAC,YAAY,EACvC,WAAW,EAAE,YAAY,EACzB,IAAI,EAAE,OAAO,GACX,IAAI,IAAI,MAAM,YAAY,CAE5B;AAMD,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,CAAA;AAMjD;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,iBAAiB,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI;IACvE,QAAQ,EAAE,OAAO,CAAA;CACjB,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,cAAc,CAAC,YAAY,IACtC,MAAM,YAAY,SAAS,UAAU,GAClC,UAAU,SAAS,MAAM,YAAY,GACpC,IAAI,GACJ,KAAK,GACN,KAAK,CAAA;AAET;;;;;;;;GAQG;AACH,MAAM,MAAM,QAAQ,CAAC,YAAY,IAAI,SAAS,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAA;AAE7E;;GAEG;AACH,eAAO,MAAM,YAAY,EAAG,UAAmB,CAAA;AAE/C;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,OAAO,YAAY,CAAA"}

package/dist/schema/ContemberSchema.d.ts

@@ -0,0 +1,98 @@
+/**
+ * Types matching the Contember API schema introspection format.
+ * These types are compatible with binding-common's Schema.
+ */
+export type SchemaColumnType = 'Bool' | 'Date' | 'DateTime' | 'Double' | 'Enum' | 'Integer' | 'String' | 'Uuid' | 'Json' | string;
+export interface SchemaColumn {
+    __typename: '_Column';
+    name: string;
+    nullable: boolean;
+    type: SchemaColumnType;
+    enumName: string | null;
+    defaultValue: string | number | boolean | null;
+}
+export interface SchemaRelationOrderBy {
+    path: string[];
+    direction: 'asc' | 'desc';
+}
+interface BaseRelation {
+    __typename: '_Relation';
+    name: string;
+    nullable: boolean | null;
+    onDelete: 'restrict' | 'cascade' | 'setNull' | null;
+    orderBy: SchemaRelationOrderBy[] | null;
+    orphanRemoval: boolean | null;
+    targetEntity: string;
+    type: 'OneHasOne' | 'OneHasMany' | 'ManyHasOne' | 'ManyHasMany';
+}
+export interface OwningRelation extends BaseRelation {
+    side: 'owning';
+    inversedBy: string | null;
+    ownedBy?: never;
+}
+export interface InverseRelation extends BaseRelation {
+    side: 'inverse';
+    ownedBy: string;
+    inversedBy?: never;
+}
+export type SchemaRelation = OwningRelation | InverseRelation;
+export type SchemaField = SchemaColumn | SchemaRelation;
+export interface SchemaEntity {
+    name: string;
+    customPrimaryAllowed: boolean;
+    fields: Map<string, SchemaField>;
+    unique: {
+        fields: Set<string>;
+    }[];
+}
+export interface SchemaEnum {
+    name: string;
+    values: string[];
+}
+/**
+ * Processed schema store with Maps for efficient lookup.
+ * This is the format used internally after loading from API.
+ */
+export interface ContemberSchemaStore {
+    entities: Map<string, SchemaEntity>;
+    enums: Map<string, Set<string>>;
+}
+/**
+ * Raw schema format as returned by the Contember API.
+ */
+export interface RawContemberSchema {
+    enums: {
+        name: string;
+        values: string[];
+    }[];
+    entities: {
+        name: string;
+        customPrimaryAllowed: boolean;
+        fields: (SchemaColumn | (Omit<SchemaRelation, 'side'> & {
+            side: 'owning' | 'inverse';
+            ownedBy?: string;
+            inversedBy?: string | null;
+        }))[];
+        unique: {
+            fields: string[];
+        }[];
+    }[];
+}
+/**
+ * Schema class compatible with binding-common's Schema.
+ * Can be used directly or created from API response.
+ */
+export declare class ContemberSchema {
+    private readonly store;
+    constructor(store: ContemberSchemaStore);
+    getEntity(entityName: string): SchemaEntity | undefined;
+    getEntityNames(): string[];
+    getEntityField(entityName: string, fieldName: string): SchemaField | undefined;
+    getEnumValues(enumName: string): string[] | undefined;
+    /**
+     * Creates a ContemberSchema from raw API response.
+     */
+    static fromRaw(raw: RawContemberSchema): ContemberSchema;
+}
+export {};
+//# sourceMappingURL=ContemberSchema.d.ts.map

package/dist/schema/ContemberSchema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ContemberSchema.d.ts","sourceRoot":"","sources":["../../src/schema/ContemberSchema.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAA;AAEjI,MAAM,WAAW,YAAY;IAC5B,UAAU,EAAE,SAAS,CAAA;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,OAAO,CAAA;IACjB,IAAI,EAAE,gBAAgB,CAAA;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAA;CAC9C;AAED,MAAM,WAAW,qBAAqB;IACrC,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,SAAS,EAAE,KAAK,GAAG,MAAM,CAAA;CACzB;AAED,UAAU,YAAY;IACrB,UAAU,EAAE,WAAW,CAAA;IACvB,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAA;IACxB,QAAQ,EAAE,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,IAAI,CAAA;IACnD,OAAO,EAAE,qBAAqB,EAAE,GAAG,IAAI,CAAA;IACvC,aAAa,EAAE,OAAO,GAAG,IAAI,CAAA;IAC7B,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,WAAW,GAAG,YAAY,GAAG,YAAY,GAAG,aAAa,CAAA;CAC/D;AAED,MAAM,WAAW,cAAe,SAAQ,YAAY;IACnD,IAAI,EAAE,QAAQ,CAAA;IACd,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,OAAO,CAAC,EAAE,KAAK,CAAA;CACf;AAED,MAAM,WAAW,eAAgB,SAAQ,YAAY;IACpD,IAAI,EAAE,SAAS,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,KAAK,CAAA;CAClB;AAED,MAAM,MAAM,cAAc,GAAG,cAAc,GAAG,eAAe,CAAA;AAE7D,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG,cAAc,CAAA;AAEvD,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,oBAAoB,EAAE,OAAO,CAAA;IAC7B,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IAChC,MAAM,EAAE;QAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;KAAE,EAAE,CAAA;CACjC;AAED,MAAM,WAAW,UAAU;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,EAAE,CAAA;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACpC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;IACnC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IAClC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,CAAA;IAC3C,QAAQ,EAAE;QACT,IAAI,EAAE,MAAM,CAAA;QACZ,oBAAoB,EAAE,OAAO,CAAA;QAC7B,MAAM,EAAE,CAAC,YAAY,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG;YAAE,IAAI,EAAE,QAAQ,GAAG,SAAS,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAC;YAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC,CAAC,EAAE,CAAA;QACxI,MAAM,EAAE;YAAE,MAAM,EAAE,MAAM,EAAE,CAAA;SAAE,EAAE,CAAA;KAC9B,EAAE,CAAA;CACH;AAED;;;GAGG;AACH,qBAAa,eAAe;IACf,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,oBAAoB;IAExD,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS;IAIvD,cAAc,IAAI,MAAM,EAAE;IAI1B,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAI9E,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS;IAKrD;;OAEG;IACH,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,kBAAkB,GAAG,eAAe;CAsBxD"}

package/dist/schema/SchemaLoader.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Loads schema from Contember Content API via GraphQL introspection.
+ */
+import { ContemberSchema } from './ContemberSchema.js';
+export interface SchemaLoaderClient {
+    execute<T>(query: string, options?: unknown): Promise<T>;
+    apiUrl?: string;
+}
+/**
+ * Loads and caches schema from Contember Content API.
+ * Instance-level cache avoids cross-tenant collisions and test pollution.
+ */
+export declare class SchemaLoader {
+    private readonly cache;
+    /**
+     * Loads schema from the API, with caching per API URL.
+     */
+    loadSchema(client: SchemaLoaderClient, options?: unknown): Promise<ContemberSchema>;
+    /**
+     * Clears the schema cache.
+     */
+    clearCache(): void;
+    /**
+     * Clears cache for a specific API URL.
+     */
+    clearCacheFor(apiUrl: string): void;
+}
+//# sourceMappingURL=SchemaLoader.d.ts.map

package/dist/schema/SchemaLoader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SchemaLoader.d.ts","sourceRoot":"","sources":["../../src/schema/SchemaLoader.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,eAAe,EAA2B,MAAM,sBAAsB,CAAA;AAE/E,MAAM,WAAW,kBAAkB;IAClC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IACxD,MAAM,CAAC,EAAE,MAAM,CAAA;CACf;AAwCD;;;GAGG;AACH,qBAAa,YAAY;IACxB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA8C;IAEpE;;OAEG;IACG,UAAU,CACf,MAAM,EAAE,kBAAkB,EAC1B,OAAO,CAAC,EAAE,OAAO,GACf,OAAO,CAAC,eAAe,CAAC;IAiB3B;;OAEG;IACH,UAAU,IAAI,IAAI;IAIlB;;OAEG;IACH,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;CAGnC"}

package/dist/schema/SchemaRegistry.d.ts

@@ -0,0 +1,95 @@
+import type { ContemberSchema } from './ContemberSchema.js';
+import type { EntitySchemaDef, FieldDef, RelationType, SchemaDefinition } from './types.js';
+/**
+ * Runtime registry for entity schemas.
+ * Provides lookups for entity definitions, relation targets, and field types.
+ */
+export declare class SchemaRegistry<TModels extends Record<string, object> = Record<string, object>> {
+    private readonly entityDefs;
+    constructor(definition: SchemaDefinition<TModels>);
+    /**
+     * Creates a SchemaRegistry from a ContemberSchema (loaded from API or injected).
+     * This is the preferred way to create a SchemaRegistry at runtime.
+     */
+    static fromContemberSchema(schema: ContemberSchema): SchemaRegistry;
+    /**
+     * Gets the entity names defined in the schema
+     */
+    getEntityNames(): string[];
+    /**
+     * Checks if an entity type exists in the schema
+     */
+    hasEntity(entityType: string): boolean;
+    /**
+     * Gets the schema definition for an entity type
+     */
+    getEntityDef(entityType: string): EntitySchemaDef | undefined;
+    /**
+     * Gets the field definition for a specific field on an entity
+     */
+    getFieldDef(entityType: string, fieldName: string): FieldDef | undefined;
+    /**
+     * Gets the enum values for an enum field.
+     * Returns undefined if the field is not an enum or doesn't exist.
+     */
+    getEnumValues(entityType: string, fieldName: string): readonly string[] | undefined;
+    /**
+     * Gets the enum name for an enum field.
+     * Returns undefined if the field is not an enum or doesn't exist.
+     */
+    getEnumName(entityType: string, fieldName: string): string | undefined;
+    /**
+     * Gets the column type for a scalar field (e.g. 'String', 'Integer', 'Date').
+     * Returns undefined if the field is not a scalar or doesn't exist.
+     */
+    getColumnType(entityType: string, fieldName: string): string | undefined;
+    /**
+     * Gets the target entity type for a relation field.
+     * Returns undefined if the field is not a relation or doesn't exist.
+     */
+    getRelationTarget(entityType: string, fieldName: string): string | undefined;
+    /**
+     * Gets the relation type for a field (hasOne or hasMany).
+     * Returns undefined if the field is not a relation.
+     */
+    getRelationType(entityType: string, fieldName: string): RelationType | undefined;
+    /**
+     * Checks if a field is a relation (hasOne or hasMany)
+     */
+    isRelation(entityType: string, fieldName: string): boolean;
+    /**
+     * Checks if a field is a has-one relation
+     */
+    isHasOne(entityType: string, fieldName: string): boolean;
+    /**
+     * Checks if a field is a has-many relation
+     */
+    isHasMany(entityType: string, fieldName: string): boolean;
+    /**
+     * Checks if a field is a scalar (non-relation) field
+     */
+    isScalar(entityType: string, fieldName: string): boolean;
+    /**
+     * Gets the inverse field name for a relation.
+     * Returns undefined if no inverse is defined.
+     */
+    getInverseField(entityType: string, fieldName: string): string | undefined;
+    /**
+     * Gets all scalar field names for an entity
+     */
+    getScalarFields(entityType: string): string[];
+    /**
+     * Gets all relation field names for an entity
+     */
+    getRelationFields(entityType: string): string[];
+    /**
+     * Gets all field names for an entity
+     */
+    getAllFields(entityType: string): string[];
+    /**
+     * Validates that all relation targets exist in the schema.
+     * Throws an error if any target is missing.
+     */
+    validate(): void;
+}
+//# sourceMappingURL=SchemaRegistry.d.ts.map

package/dist/schema/SchemaRegistry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SchemaRegistry.d.ts","sourceRoot":"","sources":["../../src/schema/SchemaRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,KAAK,EACX,eAAe,EACf,QAAQ,EAGR,YAAY,EACZ,gBAAgB,EAChB,MAAM,YAAY,CAAA;AAEnB;;;GAGG;AACH,qBAAa,cAAc,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAC1F,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA8B;gBAE7C,UAAU,EAAE,gBAAgB,CAAC,OAAO,CAAC;IAQjD;;;OAGG;IACH,MAAM,CAAC,mBAAmB,CAAC,MAAM,EAAE,eAAe,GAAG,cAAc;IAoCnE;;OAEG;IACH,cAAc,IAAI,MAAM,EAAE;IAI1B;;OAEG;IACH,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAItC;;OAEG;IACH,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAI7D;;OAEG;IACH,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS;IAMxE;;;OAGG;IACH,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS;IAMnF;;;OAGG;IACH,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAMtE;;;OAGG;IACH,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAMxE;;;OAGG;IACH,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAW5E;;;OAGG;IACH,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS;IAWhF;;OAEG;IACH,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO;IAI1D;;OAEG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO;IAIxD;;OAEG;IACH,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO;IAIzD;;OAEG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO;IAKxD;;;OAGG;IACH,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAQ1E;;OAEG;IACH,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE;IAS7C;;OAEG;IACH,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE;IAS/C;;OAEG;IACH,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE;IAO1C;;;OAGG;IACH,QAAQ,IAAI,IAAI;CAchB"}

package/dist/schema/index.d.ts

@@ -0,0 +1,6 @@
+export { type RelationType, type ScalarFieldDef, type HasOneRelationDef, type HasManyRelationDef, type FieldDef, type EntitySchemaDef, type SchemaDefinition, type InferModel, type InferEntityNames, type EntityDef, type InferEntityDef, scalar, enumScalar, type EnumFieldDef, hasOne, hasMany, defineSchema, entityDef, roleEntityDef, } from './types.js';
+export { type UnionToIntersection, type RoleNames, type CommonEntity, type EntityForRoles, type ResolveEntity, type SingleRoleMap, type DefaultRole, DEFAULT_ROLE, } from './roles.js';
+export { SchemaRegistry } from './SchemaRegistry.js';
+export { type SchemaColumnType, type SchemaColumn, type SchemaRelationOrderBy, type OwningRelation, type InverseRelation, type SchemaRelation, type SchemaField, type SchemaEntity, type SchemaEnum, type ContemberSchemaStore, type RawContemberSchema, ContemberSchema, } from './ContemberSchema.js';
+export { SchemaLoader, type SchemaLoaderClient } from './SchemaLoader.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/schema/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/schema/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,QAAQ,EACb,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,MAAM,EACN,UAAU,EACV,KAAK,YAAY,EACjB,MAAM,EACN,OAAO,EACP,YAAY,EACZ,SAAS,EACT,aAAa,GACb,MAAM,YAAY,CAAA;AAEnB,OAAO,EACN,KAAK,mBAAmB,EACxB,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,YAAY,GACZ,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEpD,OAAO,EACN,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,eAAe,GACf,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EAAE,YAAY,EAAE,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAA"}

package/dist/schema/roles.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Role-aware type utilities for bindx.
+ *
+ * The role system allows per-role field access control at the type level.
+ * Default (no role) = narrowest scope (fields ALL roles can access).
+ * Specifying roles = expanding scope (union of capabilities for those roles).
+ */
+/**
+ * Converts a union type to an intersection type.
+ * Used to merge field sets from multiple roles.
+ *
+ * @example
+ * UnionToIntersection<{ a: 1 } | { b: 2 }> = { a: 1 } & { b: 2 }
+ */
+export type UnionToIntersection<U> = (U extends unknown ? (x: U) => void : never) extends (x: infer I) => void ? I : never;
+/**
+ * Extracts all role names from a role map.
+ */
+export type RoleNames<TRoleMap extends Record<string, object>> = keyof TRoleMap & string;
+/**
+ * Default entity type — the narrowest scope.
+ * Returns a union of all role entity types, so only common fields are accessible via keyof.
+ *
+ * @example
+ * CommonEntity<{ admin: { id: string; secret: string }; public: { id: string } }>
+ * // = { id: string; secret: string } | { id: string }
+ * // Only `id` is accessible (common to all roles)
+ */
+export type CommonEntity<TRoleMap extends Record<string, object>> = TRoleMap[keyof TRoleMap];
+/**
+ * Entity type for specific roles — expanded scope.
+ * Returns an intersection of the specified roles' entity types,
+ * giving access to all fields from any of those roles.
+ *
+ * @example
+ * EntityForRoles<{ admin: { id: string; secret: string }; editor: { id: string; notes: string } }, 'admin'>
+ * // = { id: string; secret: string }
+ *
+ * EntityForRoles<{ admin: { id: string; secret: string }; editor: { id: string; notes: string } }, 'admin' | 'editor'>
+ * // = { id: string; secret: string } & { id: string; notes: string }
+ * // = { id: string; secret: string; notes: string }
+ */
+export type EntityForRoles<TRoleMap extends Record<string, object>, TRoles extends keyof TRoleMap> = UnionToIntersection<TRoleMap[TRoles]> & object;
+/**
+ * Resolves the entity type based on whether roles are specified.
+ * - No roles (TRoles = never): returns CommonEntity (narrowest)
+ * - With roles: returns EntityForRoles (expanded)
+ */
+export type ResolveEntity<TRoleMap extends Record<string, object>, TRoles extends string> = [TRoles] extends [never] ? CommonEntity<TRoleMap> : EntityForRoles<TRoleMap, TRoles & keyof TRoleMap>;
+/**
+ * Sentinel role name used when no ACL roles are defined.
+ * entityDef<Article>('Article') wraps as { _default: Article }.
+ */
+export declare const DEFAULT_ROLE: "_default";
+export type DefaultRole = typeof DEFAULT_ROLE;
+/**
+ * Wraps a single entity type as a single-role map with the _default role.
+ */
+export type SingleRoleMap<TEntity extends object> = {
+    readonly [K in DefaultRole]: TEntity;
+};
+//# sourceMappingURL=roles.d.ts.map