@contractspec/lib.identity-rbac 3.7.17 → 3.7.18

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (43) hide show
  1. package/dist/browser/contracts/index.js +1 -1045
  2. package/dist/browser/contracts/organization.js +1 -655
  3. package/dist/browser/contracts/rbac.js +1 -599
  4. package/dist/browser/contracts/user.js +1 -235
  5. package/dist/browser/entities/index.js +1 -464
  6. package/dist/browser/entities/organization.js +1 -150
  7. package/dist/browser/entities/rbac.js +1 -124
  8. package/dist/browser/entities/user.js +1 -168
  9. package/dist/browser/events.js +1 -374
  10. package/dist/browser/identity-rbac.capability.js +1 -31
  11. package/dist/browser/identity-rbac.feature.js +1 -67
  12. package/dist/browser/index.js +1 -2099
  13. package/dist/browser/policies/engine.js +1 -154
  14. package/dist/browser/policies/index.js +1 -154
  15. package/dist/contracts/index.js +1 -1045
  16. package/dist/contracts/organization.js +1 -655
  17. package/dist/contracts/rbac.js +1 -599
  18. package/dist/contracts/user.js +1 -235
  19. package/dist/entities/index.js +1 -464
  20. package/dist/entities/organization.js +1 -150
  21. package/dist/entities/rbac.js +1 -124
  22. package/dist/entities/user.js +1 -168
  23. package/dist/events.js +1 -374
  24. package/dist/identity-rbac.capability.js +1 -31
  25. package/dist/identity-rbac.feature.js +1 -67
  26. package/dist/index.js +1 -2099
  27. package/dist/node/contracts/index.js +1 -1045
  28. package/dist/node/contracts/organization.js +1 -655
  29. package/dist/node/contracts/rbac.js +1 -599
  30. package/dist/node/contracts/user.js +1 -235
  31. package/dist/node/entities/index.js +1 -464
  32. package/dist/node/entities/organization.js +1 -150
  33. package/dist/node/entities/rbac.js +1 -124
  34. package/dist/node/entities/user.js +1 -168
  35. package/dist/node/events.js +1 -374
  36. package/dist/node/identity-rbac.capability.js +1 -31
  37. package/dist/node/identity-rbac.feature.js +1 -67
  38. package/dist/node/index.js +1 -2099
  39. package/dist/node/policies/engine.js +1 -154
  40. package/dist/node/policies/index.js +1 -154
  41. package/dist/policies/engine.js +1 -154
  42. package/dist/policies/index.js +1 -154
  43. package/package.json +5 -5
package/dist/events.js CHANGED
@@ -1,375 +1,2 @@
1
1
  // @bun
2
- // src/events.ts
3
- import { defineEvent } from "@contractspec/lib.contracts-spec";
4
- import { ScalarTypeEnum, SchemaModel } from "@contractspec/lib.schema";
5
- var UserCreatedPayload = new SchemaModel({
6
- name: "UserCreatedPayload",
7
- description: "Payload for user created event",
8
- fields: {
9
- userId: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
10
- email: { type: ScalarTypeEnum.EmailAddress(), isOptional: false },
11
- name: { type: ScalarTypeEnum.String_unsecure(), isOptional: true },
12
- createdAt: { type: ScalarTypeEnum.DateTime(), isOptional: false }
13
- }
14
- });
15
- var UserUpdatedPayload = new SchemaModel({
16
- name: "UserUpdatedPayload",
17
- description: "Payload for user updated event",
18
- fields: {
19
- userId: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
20
- updatedFields: {
21
- type: ScalarTypeEnum.String_unsecure(),
22
- isOptional: false,
23
- isArray: true
24
- },
25
- updatedAt: { type: ScalarTypeEnum.DateTime(), isOptional: false }
26
- }
27
- });
28
- var UserDeletedPayload = new SchemaModel({
29
- name: "UserDeletedPayload",
30
- description: "Payload for user deleted event",
31
- fields: {
32
- userId: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
33
- email: { type: ScalarTypeEnum.EmailAddress(), isOptional: false },
34
- deletedAt: { type: ScalarTypeEnum.DateTime(), isOptional: false }
35
- }
36
- });
37
- var UserEmailVerifiedPayload = new SchemaModel({
38
- name: "UserEmailVerifiedPayload",
39
- description: "Payload for user email verified event",
40
- fields: {
41
- userId: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
42
- email: { type: ScalarTypeEnum.EmailAddress(), isOptional: false },
43
- verifiedAt: { type: ScalarTypeEnum.DateTime(), isOptional: false }
44
- }
45
- });
46
- var OrgCreatedPayload = new SchemaModel({
47
- name: "OrgCreatedPayload",
48
- description: "Payload for org created event",
49
- fields: {
50
- orgId: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
51
- name: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
52
- slug: { type: ScalarTypeEnum.String_unsecure(), isOptional: true },
53
- createdBy: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
54
- createdAt: { type: ScalarTypeEnum.DateTime(), isOptional: false }
55
- }
56
- });
57
- var OrgUpdatedPayload = new SchemaModel({
58
- name: "OrgUpdatedPayload",
59
- description: "Payload for org updated event",
60
- fields: {
61
- orgId: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
62
- updatedFields: {
63
- type: ScalarTypeEnum.String_unsecure(),
64
- isOptional: false,
65
- isArray: true
66
- },
67
- updatedBy: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
68
- updatedAt: { type: ScalarTypeEnum.DateTime(), isOptional: false }
69
- }
70
- });
71
- var OrgDeletedPayload = new SchemaModel({
72
- name: "OrgDeletedPayload",
73
- description: "Payload for org deleted event",
74
- fields: {
75
- orgId: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
76
- name: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
77
- deletedBy: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
78
- deletedAt: { type: ScalarTypeEnum.DateTime(), isOptional: false }
79
- }
80
- });
81
- var OrgMemberAddedPayload = new SchemaModel({
82
- name: "OrgMemberAddedPayload",
83
- description: "Payload for member added event",
84
- fields: {
85
- orgId: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
86
- userId: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
87
- role: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
88
- invitedBy: { type: ScalarTypeEnum.String_unsecure(), isOptional: true },
89
- joinedAt: { type: ScalarTypeEnum.DateTime(), isOptional: false }
90
- }
91
- });
92
- var OrgMemberRemovedPayload = new SchemaModel({
93
- name: "OrgMemberRemovedPayload",
94
- description: "Payload for member removed event",
95
- fields: {
96
- orgId: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
97
- userId: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
98
- removedBy: { type: ScalarTypeEnum.String_unsecure(), isOptional: true },
99
- reason: { type: ScalarTypeEnum.String_unsecure(), isOptional: true },
100
- removedAt: { type: ScalarTypeEnum.DateTime(), isOptional: false }
101
- }
102
- });
103
- var OrgMemberRoleChangedPayload = new SchemaModel({
104
- name: "OrgMemberRoleChangedPayload",
105
- description: "Payload for member role changed event",
106
- fields: {
107
- orgId: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
108
- userId: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
109
- previousRole: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
110
- newRole: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
111
- changedBy: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
112
- changedAt: { type: ScalarTypeEnum.DateTime(), isOptional: false }
113
- }
114
- });
115
- var OrgInviteSentPayload = new SchemaModel({
116
- name: "OrgInviteSentPayload",
117
- description: "Payload for invite sent event",
118
- fields: {
119
- invitationId: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
120
- orgId: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
121
- email: { type: ScalarTypeEnum.EmailAddress(), isOptional: false },
122
- role: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
123
- invitedBy: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
124
- expiresAt: { type: ScalarTypeEnum.DateTime(), isOptional: true },
125
- sentAt: { type: ScalarTypeEnum.DateTime(), isOptional: false }
126
- }
127
- });
128
- var OrgInviteAcceptedPayload = new SchemaModel({
129
- name: "OrgInviteAcceptedPayload",
130
- description: "Payload for invite accepted event",
131
- fields: {
132
- invitationId: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
133
- orgId: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
134
- userId: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
135
- acceptedAt: { type: ScalarTypeEnum.DateTime(), isOptional: false }
136
- }
137
- });
138
- var OrgInviteDeclinedPayload = new SchemaModel({
139
- name: "OrgInviteDeclinedPayload",
140
- description: "Payload for invite declined event",
141
- fields: {
142
- invitationId: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
143
- orgId: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
144
- declinedAt: { type: ScalarTypeEnum.DateTime(), isOptional: false }
145
- }
146
- });
147
- var RoleAssignedPayload = new SchemaModel({
148
- name: "RoleAssignedPayload",
149
- description: "Payload for role assigned event",
150
- fields: {
151
- bindingId: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
152
- roleId: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
153
- roleName: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
154
- targetType: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
155
- targetId: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
156
- assignedBy: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
157
- expiresAt: { type: ScalarTypeEnum.DateTime(), isOptional: true },
158
- assignedAt: { type: ScalarTypeEnum.DateTime(), isOptional: false }
159
- }
160
- });
161
- var RoleRevokedPayload = new SchemaModel({
162
- name: "RoleRevokedPayload",
163
- description: "Payload for role revoked event",
164
- fields: {
165
- bindingId: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
166
- roleId: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
167
- roleName: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
168
- targetType: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
169
- targetId: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
170
- revokedBy: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
171
- revokedAt: { type: ScalarTypeEnum.DateTime(), isOptional: false }
172
- }
173
- });
174
- var UserCreatedEvent = defineEvent({
175
- meta: {
176
- key: "user.created",
177
- version: "1.0.0",
178
- description: "A new user has been created.",
179
- stability: "stable",
180
- owners: ["@platform.identity-rbac"],
181
- tags: ["user", "created", "identity"]
182
- },
183
- payload: UserCreatedPayload
184
- });
185
- var UserUpdatedEvent = defineEvent({
186
- meta: {
187
- key: "user.updated",
188
- version: "1.0.0",
189
- description: "A user profile has been updated.",
190
- stability: "stable",
191
- owners: ["@platform.identity-rbac"],
192
- tags: ["user", "updated", "identity"]
193
- },
194
- payload: UserUpdatedPayload
195
- });
196
- var UserDeletedEvent = defineEvent({
197
- meta: {
198
- key: "user.deleted",
199
- version: "1.0.0",
200
- description: "A user account has been deleted.",
201
- stability: "stable",
202
- owners: ["@platform.identity-rbac"],
203
- tags: ["user", "deleted", "identity"]
204
- },
205
- pii: ["email"],
206
- payload: UserDeletedPayload
207
- });
208
- var UserEmailVerifiedEvent = defineEvent({
209
- meta: {
210
- key: "user.email_verified",
211
- version: "1.0.0",
212
- description: "A user has verified their email address.",
213
- stability: "stable",
214
- owners: ["@platform.identity-rbac"],
215
- tags: ["user", "verified", "identity"]
216
- },
217
- payload: UserEmailVerifiedPayload
218
- });
219
- var OrgCreatedEvent = defineEvent({
220
- meta: {
221
- key: "org.created",
222
- version: "1.0.0",
223
- description: "A new organization has been created.",
224
- stability: "stable",
225
- owners: ["@platform.identity-rbac"],
226
- tags: ["org", "created", "identity"]
227
- },
228
- payload: OrgCreatedPayload
229
- });
230
- var OrgUpdatedEvent = defineEvent({
231
- meta: {
232
- key: "org.updated",
233
- version: "1.0.0",
234
- description: "An organization has been updated.",
235
- stability: "stable",
236
- owners: ["@platform.identity-rbac"],
237
- tags: ["org", "updated", "identity"]
238
- },
239
- payload: OrgUpdatedPayload
240
- });
241
- var OrgDeletedEvent = defineEvent({
242
- meta: {
243
- key: "org.deleted",
244
- version: "1.0.0",
245
- description: "An organization has been deleted.",
246
- stability: "stable",
247
- owners: ["@platform.identity-rbac"],
248
- tags: ["org", "deleted", "identity"]
249
- },
250
- payload: OrgDeletedPayload
251
- });
252
- var OrgMemberAddedEvent = defineEvent({
253
- meta: {
254
- key: "org.member.added",
255
- version: "1.0.0",
256
- description: "A user has joined an organization.",
257
- stability: "stable",
258
- owners: ["@platform.identity-rbac"],
259
- tags: ["org", "member", "added", "identity"]
260
- },
261
- payload: OrgMemberAddedPayload
262
- });
263
- var OrgMemberRemovedEvent = defineEvent({
264
- meta: {
265
- key: "org.member.removed",
266
- version: "1.0.0",
267
- description: "A user has left or been removed from an organization.",
268
- stability: "stable",
269
- owners: ["@platform.identity-rbac"],
270
- tags: ["org", "member", "removed", "identity"]
271
- },
272
- payload: OrgMemberRemovedPayload
273
- });
274
- var OrgMemberRoleChangedEvent = defineEvent({
275
- meta: {
276
- key: "org.member.role_changed",
277
- version: "1.0.0",
278
- description: "A member's role in an organization has changed.",
279
- stability: "stable",
280
- owners: ["@platform.identity-rbac"],
281
- tags: ["org", "member", "role", "changed", "identity"]
282
- },
283
- payload: OrgMemberRoleChangedPayload
284
- });
285
- var OrgInviteSentEvent = defineEvent({
286
- meta: {
287
- key: "org.invite.sent",
288
- version: "1.0.0",
289
- description: "An invitation to join an organization has been sent.",
290
- stability: "stable",
291
- owners: ["@platform.identity-rbac"],
292
- tags: ["org", "invite", "sent", "identity"]
293
- },
294
- pii: ["email"],
295
- payload: OrgInviteSentPayload
296
- });
297
- var OrgInviteAcceptedEvent = defineEvent({
298
- meta: {
299
- key: "org.invite.accepted",
300
- version: "1.0.0",
301
- description: "An invitation has been accepted.",
302
- stability: "stable",
303
- owners: ["@platform.identity-rbac"],
304
- tags: ["org", "invite", "accepted", "identity"]
305
- },
306
- payload: OrgInviteAcceptedPayload
307
- });
308
- var OrgInviteDeclinedEvent = defineEvent({
309
- meta: {
310
- key: "org.invite.declined",
311
- version: "1.0.0",
312
- description: "An invitation has been declined.",
313
- stability: "stable",
314
- owners: ["@platform.identity-rbac"],
315
- tags: ["org", "invite", "declined", "identity"]
316
- },
317
- payload: OrgInviteDeclinedPayload
318
- });
319
- var RoleAssignedEvent = defineEvent({
320
- meta: {
321
- key: "role.assigned",
322
- version: "1.0.0",
323
- description: "A role has been assigned.",
324
- stability: "stable",
325
- owners: ["@platform.identity-rbac"],
326
- tags: ["role", "assigned", "identity"]
327
- },
328
- payload: RoleAssignedPayload
329
- });
330
- var RoleRevokedEvent = defineEvent({
331
- meta: {
332
- key: "role.revoked",
333
- version: "1.0.0",
334
- description: "A role has been revoked.",
335
- stability: "stable",
336
- owners: ["@platform.identity-rbac"],
337
- tags: ["role", "revoked", "identity"]
338
- },
339
- payload: RoleRevokedPayload
340
- });
341
- var IdentityRbacEvents = {
342
- UserCreatedEvent,
343
- UserUpdatedEvent,
344
- UserDeletedEvent,
345
- UserEmailVerifiedEvent,
346
- OrgCreatedEvent,
347
- OrgUpdatedEvent,
348
- OrgDeletedEvent,
349
- OrgMemberAddedEvent,
350
- OrgMemberRemovedEvent,
351
- OrgMemberRoleChangedEvent,
352
- OrgInviteSentEvent,
353
- OrgInviteAcceptedEvent,
354
- OrgInviteDeclinedEvent,
355
- RoleAssignedEvent,
356
- RoleRevokedEvent
357
- };
358
- export {
359
- UserUpdatedEvent,
360
- UserEmailVerifiedEvent,
361
- UserDeletedEvent,
362
- UserCreatedEvent,
363
- RoleRevokedEvent,
364
- RoleAssignedEvent,
365
- OrgUpdatedEvent,
366
- OrgMemberRoleChangedEvent,
367
- OrgMemberRemovedEvent,
368
- OrgMemberAddedEvent,
369
- OrgInviteSentEvent,
370
- OrgInviteDeclinedEvent,
371
- OrgInviteAcceptedEvent,
372
- OrgDeletedEvent,
373
- OrgCreatedEvent,
374
- IdentityRbacEvents
375
- };
2
+ import{defineEvent as q}from"@contractspec/lib.contracts-spec";import{ScalarTypeEnum as j,SchemaModel as w}from"@contractspec/lib.schema";var x=new w({name:"UserCreatedPayload",description:"Payload for user created event",fields:{userId:{type:j.String_unsecure(),isOptional:!1},email:{type:j.EmailAddress(),isOptional:!1},name:{type:j.String_unsecure(),isOptional:!0},createdAt:{type:j.DateTime(),isOptional:!1}}}),z=new w({name:"UserUpdatedPayload",description:"Payload for user updated event",fields:{userId:{type:j.String_unsecure(),isOptional:!1},updatedFields:{type:j.String_unsecure(),isOptional:!1,isArray:!0},updatedAt:{type:j.DateTime(),isOptional:!1}}}),B=new w({name:"UserDeletedPayload",description:"Payload for user deleted event",fields:{userId:{type:j.String_unsecure(),isOptional:!1},email:{type:j.EmailAddress(),isOptional:!1},deletedAt:{type:j.DateTime(),isOptional:!1}}}),F=new w({name:"UserEmailVerifiedPayload",description:"Payload for user email verified event",fields:{userId:{type:j.String_unsecure(),isOptional:!1},email:{type:j.EmailAddress(),isOptional:!1},verifiedAt:{type:j.DateTime(),isOptional:!1}}}),G=new w({name:"OrgCreatedPayload",description:"Payload for org created event",fields:{orgId:{type:j.String_unsecure(),isOptional:!1},name:{type:j.String_unsecure(),isOptional:!1},slug:{type:j.String_unsecure(),isOptional:!0},createdBy:{type:j.String_unsecure(),isOptional:!1},createdAt:{type:j.DateTime(),isOptional:!1}}}),H=new w({name:"OrgUpdatedPayload",description:"Payload for org updated event",fields:{orgId:{type:j.String_unsecure(),isOptional:!1},updatedFields:{type:j.String_unsecure(),isOptional:!1,isArray:!0},updatedBy:{type:j.String_unsecure(),isOptional:!1},updatedAt:{type:j.DateTime(),isOptional:!1}}}),J=new w({name:"OrgDeletedPayload",description:"Payload for org deleted event",fields:{orgId:{type:j.String_unsecure(),isOptional:!1},name:{type:j.String_unsecure(),isOptional:!1},deletedBy:{type:j.String_unsecure(),isOptional:!1},deletedAt:{type:j.DateTime(),isOptional:!1}}}),K=new w({name:"OrgMemberAddedPayload",description:"Payload for member added event",fields:{orgId:{type:j.String_unsecure(),isOptional:!1},userId:{type:j.String_unsecure(),isOptional:!1},role:{type:j.String_unsecure(),isOptional:!1},invitedBy:{type:j.String_unsecure(),isOptional:!0},joinedAt:{type:j.DateTime(),isOptional:!1}}}),L=new w({name:"OrgMemberRemovedPayload",description:"Payload for member removed event",fields:{orgId:{type:j.String_unsecure(),isOptional:!1},userId:{type:j.String_unsecure(),isOptional:!1},removedBy:{type:j.String_unsecure(),isOptional:!0},reason:{type:j.String_unsecure(),isOptional:!0},removedAt:{type:j.DateTime(),isOptional:!1}}}),N=new w({name:"OrgMemberRoleChangedPayload",description:"Payload for member role changed event",fields:{orgId:{type:j.String_unsecure(),isOptional:!1},userId:{type:j.String_unsecure(),isOptional:!1},previousRole:{type:j.String_unsecure(),isOptional:!1},newRole:{type:j.String_unsecure(),isOptional:!1},changedBy:{type:j.String_unsecure(),isOptional:!1},changedAt:{type:j.DateTime(),isOptional:!1}}}),Q=new w({name:"OrgInviteSentPayload",description:"Payload for invite sent event",fields:{invitationId:{type:j.String_unsecure(),isOptional:!1},orgId:{type:j.String_unsecure(),isOptional:!1},email:{type:j.EmailAddress(),isOptional:!1},role:{type:j.String_unsecure(),isOptional:!1},invitedBy:{type:j.String_unsecure(),isOptional:!1},expiresAt:{type:j.DateTime(),isOptional:!0},sentAt:{type:j.DateTime(),isOptional:!1}}}),W=new w({name:"OrgInviteAcceptedPayload",description:"Payload for invite accepted event",fields:{invitationId:{type:j.String_unsecure(),isOptional:!1},orgId:{type:j.String_unsecure(),isOptional:!1},userId:{type:j.String_unsecure(),isOptional:!1},acceptedAt:{type:j.DateTime(),isOptional:!1}}}),X=new w({name:"OrgInviteDeclinedPayload",description:"Payload for invite declined event",fields:{invitationId:{type:j.String_unsecure(),isOptional:!1},orgId:{type:j.String_unsecure(),isOptional:!1},declinedAt:{type:j.DateTime(),isOptional:!1}}}),Y=new w({name:"RoleAssignedPayload",description:"Payload for role assigned event",fields:{bindingId:{type:j.String_unsecure(),isOptional:!1},roleId:{type:j.String_unsecure(),isOptional:!1},roleName:{type:j.String_unsecure(),isOptional:!1},targetType:{type:j.String_unsecure(),isOptional:!1},targetId:{type:j.String_unsecure(),isOptional:!1},assignedBy:{type:j.String_unsecure(),isOptional:!1},expiresAt:{type:j.DateTime(),isOptional:!0},assignedAt:{type:j.DateTime(),isOptional:!1}}}),Z=new w({name:"RoleRevokedPayload",description:"Payload for role revoked event",fields:{bindingId:{type:j.String_unsecure(),isOptional:!1},roleId:{type:j.String_unsecure(),isOptional:!1},roleName:{type:j.String_unsecure(),isOptional:!1},targetType:{type:j.String_unsecure(),isOptional:!1},targetId:{type:j.String_unsecure(),isOptional:!1},revokedBy:{type:j.String_unsecure(),isOptional:!1},revokedAt:{type:j.DateTime(),isOptional:!1}}}),_=q({meta:{key:"user.created",version:"1.0.0",description:"A new user has been created.",stability:"stable",owners:["@platform.identity-rbac"],tags:["user","created","identity"]},payload:x}),$=q({meta:{key:"user.updated",version:"1.0.0",description:"A user profile has been updated.",stability:"stable",owners:["@platform.identity-rbac"],tags:["user","updated","identity"]},payload:z}),k=q({meta:{key:"user.deleted",version:"1.0.0",description:"A user account has been deleted.",stability:"stable",owners:["@platform.identity-rbac"],tags:["user","deleted","identity"]},pii:["email"],payload:B}),V=q({meta:{key:"user.email_verified",version:"1.0.0",description:"A user has verified their email address.",stability:"stable",owners:["@platform.identity-rbac"],tags:["user","verified","identity"]},payload:F}),A=q({meta:{key:"org.created",version:"1.0.0",description:"A new organization has been created.",stability:"stable",owners:["@platform.identity-rbac"],tags:["org","created","identity"]},payload:G}),C=q({meta:{key:"org.updated",version:"1.0.0",description:"An organization has been updated.",stability:"stable",owners:["@platform.identity-rbac"],tags:["org","updated","identity"]},payload:H}),D=q({meta:{key:"org.deleted",version:"1.0.0",description:"An organization has been deleted.",stability:"stable",owners:["@platform.identity-rbac"],tags:["org","deleted","identity"]},payload:J}),I=q({meta:{key:"org.member.added",version:"1.0.0",description:"A user has joined an organization.",stability:"stable",owners:["@platform.identity-rbac"],tags:["org","member","added","identity"]},payload:K}),b=q({meta:{key:"org.member.removed",version:"1.0.0",description:"A user has left or been removed from an organization.",stability:"stable",owners:["@platform.identity-rbac"],tags:["org","member","removed","identity"]},payload:L}),R=q({meta:{key:"org.member.role_changed",version:"1.0.0",description:"A member's role in an organization has changed.",stability:"stable",owners:["@platform.identity-rbac"],tags:["org","member","role","changed","identity"]},payload:N}),U=q({meta:{key:"org.invite.sent",version:"1.0.0",description:"An invitation to join an organization has been sent.",stability:"stable",owners:["@platform.identity-rbac"],tags:["org","invite","sent","identity"]},pii:["email"],payload:Q}),P=q({meta:{key:"org.invite.accepted",version:"1.0.0",description:"An invitation has been accepted.",stability:"stable",owners:["@platform.identity-rbac"],tags:["org","invite","accepted","identity"]},payload:W}),f=q({meta:{key:"org.invite.declined",version:"1.0.0",description:"An invitation has been declined.",stability:"stable",owners:["@platform.identity-rbac"],tags:["org","invite","declined","identity"]},payload:X}),s=q({meta:{key:"role.assigned",version:"1.0.0",description:"A role has been assigned.",stability:"stable",owners:["@platform.identity-rbac"],tags:["role","assigned","identity"]},payload:Y}),h=q({meta:{key:"role.revoked",version:"1.0.0",description:"A role has been revoked.",stability:"stable",owners:["@platform.identity-rbac"],tags:["role","revoked","identity"]},payload:Z}),g={UserCreatedEvent:_,UserUpdatedEvent:$,UserDeletedEvent:k,UserEmailVerifiedEvent:V,OrgCreatedEvent:A,OrgUpdatedEvent:C,OrgDeletedEvent:D,OrgMemberAddedEvent:I,OrgMemberRemovedEvent:b,OrgMemberRoleChangedEvent:R,OrgInviteSentEvent:U,OrgInviteAcceptedEvent:P,OrgInviteDeclinedEvent:f,RoleAssignedEvent:s,RoleRevokedEvent:h};export{$ as UserUpdatedEvent,V as UserEmailVerifiedEvent,k as UserDeletedEvent,_ as UserCreatedEvent,h as RoleRevokedEvent,s as RoleAssignedEvent,C as OrgUpdatedEvent,R as OrgMemberRoleChangedEvent,b as OrgMemberRemovedEvent,I as OrgMemberAddedEvent,U as OrgInviteSentEvent,f as OrgInviteDeclinedEvent,P as OrgInviteAcceptedEvent,D as OrgDeletedEvent,A as OrgCreatedEvent,g as IdentityRbacEvents};
@@ -1,32 +1,2 @@
1
1
  // @bun
2
- // src/identity-rbac.capability.ts
3
- import {
4
- defineCapability,
5
- StabilityEnum
6
- } from "@contractspec/lib.contracts-spec";
7
- var IdentityCapability = defineCapability({
8
- meta: {
9
- key: "identity",
10
- version: "1.0.0",
11
- kind: "api",
12
- stability: StabilityEnum.Experimental,
13
- description: "User identity and authentication",
14
- owners: ["@platform.core"],
15
- tags: ["identity", "auth"]
16
- }
17
- });
18
- var RbacCapability = defineCapability({
19
- meta: {
20
- key: "rbac",
21
- version: "1.0.0",
22
- kind: "api",
23
- stability: StabilityEnum.Experimental,
24
- description: "Role-based access control",
25
- owners: ["@platform.core"],
26
- tags: ["rbac", "permissions", "auth"]
27
- }
28
- });
29
- export {
30
- RbacCapability,
31
- IdentityCapability
32
- };
2
+ import{defineCapability as g,StabilityEnum as h}from"@contractspec/lib.contracts-spec";var k=g({meta:{key:"identity",version:"1.0.0",kind:"api",stability:h.Experimental,description:"User identity and authentication",owners:["@platform.core"],tags:["identity","auth"]}}),q=g({meta:{key:"rbac",version:"1.0.0",kind:"api",stability:h.Experimental,description:"Role-based access control",owners:["@platform.core"],tags:["rbac","permissions","auth"]}});export{q as RbacCapability,k as IdentityCapability};
@@ -1,68 +1,2 @@
1
1
  // @bun
2
- // src/identity-rbac.feature.ts
3
- import { defineFeature } from "@contractspec/lib.contracts-spec";
4
- var IdentityRbacFeature = defineFeature({
5
- meta: {
6
- key: "identity-rbac",
7
- version: "1.0.0",
8
- title: "Identity & RBAC",
9
- description: "User identity, organization management, and role-based access control",
10
- domain: "platform",
11
- owners: ["@platform.identity-rbac"],
12
- tags: ["identity", "rbac", "users", "organizations", "permissions"],
13
- stability: "stable"
14
- },
15
- operations: [
16
- { key: "identity.user.create", version: "1.0.0" },
17
- { key: "identity.user.update", version: "1.0.0" },
18
- { key: "identity.user.delete", version: "1.0.0" },
19
- { key: "identity.user.me", version: "1.0.0" },
20
- { key: "identity.user.list", version: "1.0.0" },
21
- { key: "identity.org.create", version: "1.0.0" },
22
- { key: "identity.org.update", version: "1.0.0" },
23
- { key: "identity.org.get", version: "1.0.0" },
24
- { key: "identity.org.list", version: "1.0.0" },
25
- { key: "identity.org.invite", version: "1.0.0" },
26
- { key: "identity.org.invite.accept", version: "1.0.0" },
27
- { key: "identity.org.member.remove", version: "1.0.0" },
28
- { key: "identity.org.members.list", version: "1.0.0" },
29
- { key: "identity.rbac.role.create", version: "1.0.0" },
30
- { key: "identity.rbac.role.update", version: "1.0.0" },
31
- { key: "identity.rbac.role.delete", version: "1.0.0" },
32
- { key: "identity.rbac.role.list", version: "1.0.0" },
33
- { key: "identity.rbac.assign", version: "1.0.0" },
34
- { key: "identity.rbac.revoke", version: "1.0.0" },
35
- { key: "identity.rbac.check", version: "1.0.0" },
36
- { key: "identity.rbac.permissions", version: "1.0.0" }
37
- ],
38
- events: [
39
- { key: "user.created", version: "1.0.0" },
40
- { key: "user.updated", version: "1.0.0" },
41
- { key: "user.deleted", version: "1.0.0" },
42
- { key: "user.email_verified", version: "1.0.0" },
43
- { key: "org.created", version: "1.0.0" },
44
- { key: "org.updated", version: "1.0.0" },
45
- { key: "org.deleted", version: "1.0.0" },
46
- { key: "org.member.added", version: "1.0.0" },
47
- { key: "org.member.removed", version: "1.0.0" },
48
- { key: "org.member.role_changed", version: "1.0.0" },
49
- { key: "org.invite.sent", version: "1.0.0" },
50
- { key: "org.invite.accepted", version: "1.0.0" },
51
- { key: "org.invite.declined", version: "1.0.0" },
52
- { key: "role.assigned", version: "1.0.0" },
53
- { key: "role.revoked", version: "1.0.0" }
54
- ],
55
- presentations: [],
56
- opToPresentation: [],
57
- presentationsTargets: [],
58
- capabilities: {
59
- provides: [
60
- { key: "identity", version: "1.0.0" },
61
- { key: "rbac", version: "1.0.0" }
62
- ],
63
- requires: []
64
- }
65
- });
66
- export {
67
- IdentityRbacFeature
68
- };
2
+ import{defineFeature as g}from"@contractspec/lib.contracts-spec";var j=g({meta:{key:"identity-rbac",version:"1.0.0",title:"Identity & RBAC",description:"User identity, organization management, and role-based access control",domain:"platform",owners:["@platform.identity-rbac"],tags:["identity","rbac","users","organizations","permissions"],stability:"stable"},operations:[{key:"identity.user.create",version:"1.0.0"},{key:"identity.user.update",version:"1.0.0"},{key:"identity.user.delete",version:"1.0.0"},{key:"identity.user.me",version:"1.0.0"},{key:"identity.user.list",version:"1.0.0"},{key:"identity.org.create",version:"1.0.0"},{key:"identity.org.update",version:"1.0.0"},{key:"identity.org.get",version:"1.0.0"},{key:"identity.org.list",version:"1.0.0"},{key:"identity.org.invite",version:"1.0.0"},{key:"identity.org.invite.accept",version:"1.0.0"},{key:"identity.org.member.remove",version:"1.0.0"},{key:"identity.org.members.list",version:"1.0.0"},{key:"identity.rbac.role.create",version:"1.0.0"},{key:"identity.rbac.role.update",version:"1.0.0"},{key:"identity.rbac.role.delete",version:"1.0.0"},{key:"identity.rbac.role.list",version:"1.0.0"},{key:"identity.rbac.assign",version:"1.0.0"},{key:"identity.rbac.revoke",version:"1.0.0"},{key:"identity.rbac.check",version:"1.0.0"},{key:"identity.rbac.permissions",version:"1.0.0"}],events:[{key:"user.created",version:"1.0.0"},{key:"user.updated",version:"1.0.0"},{key:"user.deleted",version:"1.0.0"},{key:"user.email_verified",version:"1.0.0"},{key:"org.created",version:"1.0.0"},{key:"org.updated",version:"1.0.0"},{key:"org.deleted",version:"1.0.0"},{key:"org.member.added",version:"1.0.0"},{key:"org.member.removed",version:"1.0.0"},{key:"org.member.role_changed",version:"1.0.0"},{key:"org.invite.sent",version:"1.0.0"},{key:"org.invite.accepted",version:"1.0.0"},{key:"org.invite.declined",version:"1.0.0"},{key:"role.assigned",version:"1.0.0"},{key:"role.revoked",version:"1.0.0"}],presentations:[],opToPresentation:[],presentationsTargets:[],capabilities:{provides:[{key:"identity",version:"1.0.0"},{key:"rbac",version:"1.0.0"}],requires:[]}});export{j as IdentityRbacFeature};