@dofe/sso-contracts 0.1.2

package/dist/api/internal-app-rbac.contract.d.ts

@@ -0,0 +1,570 @@
+import { z } from 'zod';
+export declare const internalAppRbacContract: {
+    listPermissions: {
+        summary: "获取所有可用权限（内部服务）";
+        method: "GET";
+        path: "/internal/permissions";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodArray<z.ZodObject<{
+                    id: z.ZodString;
+                    resource: z.ZodString;
+                    action: z.ZodString;
+                    description: z.ZodNullable<z.ZodString>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>;
+        };
+    };
+    listRoles: {
+        summary: "获取租户自定义角色列表（内部服务）";
+        query: z.ZodObject<{
+            tenantId: z.ZodString;
+        }, z.core.$strip>;
+        method: "GET";
+        path: "/internal/roles";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodArray<z.ZodObject<{
+                    id: z.ZodString;
+                    name: z.ZodString;
+                    description: z.ZodNullable<z.ZodString>;
+                    tenantId: z.ZodNullable<z.ZodString>;
+                    isSystem: z.ZodBoolean;
+                    permissions: z.ZodArray<z.ZodObject<{
+                        id: z.ZodString;
+                        resource: z.ZodString;
+                        action: z.ZodString;
+                        description: z.ZodNullable<z.ZodString>;
+                    }, z.core.$strip>>;
+                    createdAt: z.ZodString;
+                    updatedAt: z.ZodString;
+                }, z.core.$strip>>;
+            }, z.core.$strip>;
+        };
+    };
+    createRole: {
+        summary: "创建自定义角色（内部服务）";
+        method: "POST";
+        body: z.ZodObject<{
+            name: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            permissionIds: z.ZodArray<z.ZodString>;
+            tenantId: z.ZodString;
+        }, z.core.$strip>;
+        path: "/internal/roles";
+        responses: {
+            201: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    id: z.ZodString;
+                    name: z.ZodString;
+                    description: z.ZodNullable<z.ZodString>;
+                    tenantId: z.ZodNullable<z.ZodString>;
+                    isSystem: z.ZodBoolean;
+                    permissions: z.ZodArray<z.ZodObject<{
+                        id: z.ZodString;
+                        resource: z.ZodString;
+                        action: z.ZodString;
+                        description: z.ZodNullable<z.ZodString>;
+                    }, z.core.$strip>>;
+                    createdAt: z.ZodString;
+                    updatedAt: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+    getRole: {
+        summary: "获取角色详情（内部服务）";
+        pathParams: z.ZodObject<{
+            id: z.ZodString;
+        }, z.core.$strip>;
+        method: "GET";
+        path: "/internal/roles/:id";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    id: z.ZodString;
+                    name: z.ZodString;
+                    description: z.ZodNullable<z.ZodString>;
+                    tenantId: z.ZodNullable<z.ZodString>;
+                    isSystem: z.ZodBoolean;
+                    permissions: z.ZodArray<z.ZodObject<{
+                        id: z.ZodString;
+                        resource: z.ZodString;
+                        action: z.ZodString;
+                        description: z.ZodNullable<z.ZodString>;
+                    }, z.core.$strip>>;
+                    createdAt: z.ZodString;
+                    updatedAt: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+    updateRole: {
+        summary: "更新自定义角色（内部服务）";
+        pathParams: z.ZodObject<{
+            id: z.ZodString;
+        }, z.core.$strip>;
+        method: "PUT";
+        body: z.ZodObject<{
+            name: z.ZodOptional<z.ZodString>;
+            description: z.ZodOptional<z.ZodString>;
+            permissionIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>;
+        path: "/internal/roles/:id";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    id: z.ZodString;
+                    name: z.ZodString;
+                    description: z.ZodNullable<z.ZodString>;
+                    tenantId: z.ZodNullable<z.ZodString>;
+                    isSystem: z.ZodBoolean;
+                    permissions: z.ZodArray<z.ZodObject<{
+                        id: z.ZodString;
+                        resource: z.ZodString;
+                        action: z.ZodString;
+                        description: z.ZodNullable<z.ZodString>;
+                    }, z.core.$strip>>;
+                    createdAt: z.ZodString;
+                    updatedAt: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+    deleteRole: {
+        summary: "删除自定义角色（内部服务）";
+        pathParams: z.ZodObject<{
+            id: z.ZodString;
+        }, z.core.$strip>;
+        method: "DELETE";
+        body: z.ZodObject<{}, z.core.$strict>;
+        path: "/internal/roles/:id";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    success: z.ZodBoolean;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+    listMemberAssignments: {
+        summary: "获取成员角色分配列表（内部服务）";
+        query: z.ZodObject<{
+            tenantId: z.ZodString;
+            userId: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        method: "GET";
+        path: "/internal/member-role-assignments";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodArray<z.ZodObject<{
+                    id: z.ZodString;
+                    tenantId: z.ZodString;
+                    userId: z.ZodString;
+                    roleId: z.ZodString;
+                    role: z.ZodObject<{
+                        id: z.ZodString;
+                        name: z.ZodString;
+                        description: z.ZodNullable<z.ZodString>;
+                        tenantId: z.ZodNullable<z.ZodString>;
+                        isSystem: z.ZodBoolean;
+                        permissions: z.ZodArray<z.ZodObject<{
+                            id: z.ZodString;
+                            resource: z.ZodString;
+                            action: z.ZodString;
+                            description: z.ZodNullable<z.ZodString>;
+                        }, z.core.$strip>>;
+                        createdAt: z.ZodString;
+                        updatedAt: z.ZodString;
+                    }, z.core.$strip>;
+                    assignedBy: z.ZodString;
+                    assignedAt: z.ZodString;
+                }, z.core.$strip>>;
+            }, z.core.$strip>;
+        };
+    };
+    assignRole: {
+        summary: "为成员分配角色（内部服务）";
+        method: "POST";
+        body: z.ZodObject<{
+            tenantId: z.ZodString;
+            userId: z.ZodString;
+            roleId: z.ZodString;
+            assignedBy: z.ZodString;
+        }, z.core.$strip>;
+        path: "/internal/member-role-assignments";
+        responses: {
+            201: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    id: z.ZodString;
+                    tenantId: z.ZodString;
+                    userId: z.ZodString;
+                    roleId: z.ZodString;
+                    role: z.ZodObject<{
+                        id: z.ZodString;
+                        name: z.ZodString;
+                        description: z.ZodNullable<z.ZodString>;
+                        tenantId: z.ZodNullable<z.ZodString>;
+                        isSystem: z.ZodBoolean;
+                        permissions: z.ZodArray<z.ZodObject<{
+                            id: z.ZodString;
+                            resource: z.ZodString;
+                            action: z.ZodString;
+                            description: z.ZodNullable<z.ZodString>;
+                        }, z.core.$strip>>;
+                        createdAt: z.ZodString;
+                        updatedAt: z.ZodString;
+                    }, z.core.$strip>;
+                    assignedBy: z.ZodString;
+                    assignedAt: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+    removeRole: {
+        summary: "移除成员角色分配（内部服务）";
+        pathParams: z.ZodObject<{
+            assignmentId: z.ZodString;
+        }, z.core.$strip>;
+        method: "DELETE";
+        body: z.ZodObject<{}, z.core.$strict>;
+        path: "/internal/member-role-assignments/:assignmentId";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    success: z.ZodBoolean;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+    getUserPermissions: {
+        summary: "获取用户有效权限（内部服务）";
+        pathParams: z.ZodObject<{
+            userId: z.ZodString;
+        }, z.core.$strip>;
+        query: z.ZodObject<{
+            tenantId: z.ZodString;
+        }, z.core.$strip>;
+        method: "GET";
+        path: "/internal/users/:userId/permissions";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    userId: z.ZodString;
+                    tenantId: z.ZodString;
+                    permissions: z.ZodArray<z.ZodObject<{
+                        id: z.ZodString;
+                        resource: z.ZodString;
+                        action: z.ZodString;
+                        description: z.ZodNullable<z.ZodString>;
+                    }, z.core.$strip>>;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+};
+export declare const internalAppRbacContractVersioned: import("@dofe/infra-contracts-base/base").VersionedContract<{
+    listPermissions: {
+        summary: "获取所有可用权限（内部服务）";
+        method: "GET";
+        path: "/internal/permissions";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodArray<z.ZodObject<{
+                    id: z.ZodString;
+                    resource: z.ZodString;
+                    action: z.ZodString;
+                    description: z.ZodNullable<z.ZodString>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>;
+        };
+    };
+    listRoles: {
+        summary: "获取租户自定义角色列表（内部服务）";
+        query: z.ZodObject<{
+            tenantId: z.ZodString;
+        }, z.core.$strip>;
+        method: "GET";
+        path: "/internal/roles";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodArray<z.ZodObject<{
+                    id: z.ZodString;
+                    name: z.ZodString;
+                    description: z.ZodNullable<z.ZodString>;
+                    tenantId: z.ZodNullable<z.ZodString>;
+                    isSystem: z.ZodBoolean;
+                    permissions: z.ZodArray<z.ZodObject<{
+                        id: z.ZodString;
+                        resource: z.ZodString;
+                        action: z.ZodString;
+                        description: z.ZodNullable<z.ZodString>;
+                    }, z.core.$strip>>;
+                    createdAt: z.ZodString;
+                    updatedAt: z.ZodString;
+                }, z.core.$strip>>;
+            }, z.core.$strip>;
+        };
+    };
+    createRole: {
+        summary: "创建自定义角色（内部服务）";
+        method: "POST";
+        body: z.ZodObject<{
+            name: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            permissionIds: z.ZodArray<z.ZodString>;
+            tenantId: z.ZodString;
+        }, z.core.$strip>;
+        path: "/internal/roles";
+        responses: {
+            201: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    id: z.ZodString;
+                    name: z.ZodString;
+                    description: z.ZodNullable<z.ZodString>;
+                    tenantId: z.ZodNullable<z.ZodString>;
+                    isSystem: z.ZodBoolean;
+                    permissions: z.ZodArray<z.ZodObject<{
+                        id: z.ZodString;
+                        resource: z.ZodString;
+                        action: z.ZodString;
+                        description: z.ZodNullable<z.ZodString>;
+                    }, z.core.$strip>>;
+                    createdAt: z.ZodString;
+                    updatedAt: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+    getRole: {
+        summary: "获取角色详情（内部服务）";
+        pathParams: z.ZodObject<{
+            id: z.ZodString;
+        }, z.core.$strip>;
+        method: "GET";
+        path: "/internal/roles/:id";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    id: z.ZodString;
+                    name: z.ZodString;
+                    description: z.ZodNullable<z.ZodString>;
+                    tenantId: z.ZodNullable<z.ZodString>;
+                    isSystem: z.ZodBoolean;
+                    permissions: z.ZodArray<z.ZodObject<{
+                        id: z.ZodString;
+                        resource: z.ZodString;
+                        action: z.ZodString;
+                        description: z.ZodNullable<z.ZodString>;
+                    }, z.core.$strip>>;
+                    createdAt: z.ZodString;
+                    updatedAt: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+    updateRole: {
+        summary: "更新自定义角色（内部服务）";
+        pathParams: z.ZodObject<{
+            id: z.ZodString;
+        }, z.core.$strip>;
+        method: "PUT";
+        body: z.ZodObject<{
+            name: z.ZodOptional<z.ZodString>;
+            description: z.ZodOptional<z.ZodString>;
+            permissionIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>;
+        path: "/internal/roles/:id";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    id: z.ZodString;
+                    name: z.ZodString;
+                    description: z.ZodNullable<z.ZodString>;
+                    tenantId: z.ZodNullable<z.ZodString>;
+                    isSystem: z.ZodBoolean;
+                    permissions: z.ZodArray<z.ZodObject<{
+                        id: z.ZodString;
+                        resource: z.ZodString;
+                        action: z.ZodString;
+                        description: z.ZodNullable<z.ZodString>;
+                    }, z.core.$strip>>;
+                    createdAt: z.ZodString;
+                    updatedAt: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+    deleteRole: {
+        summary: "删除自定义角色（内部服务）";
+        pathParams: z.ZodObject<{
+            id: z.ZodString;
+        }, z.core.$strip>;
+        method: "DELETE";
+        body: z.ZodObject<{}, z.core.$strict>;
+        path: "/internal/roles/:id";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    success: z.ZodBoolean;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+    listMemberAssignments: {
+        summary: "获取成员角色分配列表（内部服务）";
+        query: z.ZodObject<{
+            tenantId: z.ZodString;
+            userId: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        method: "GET";
+        path: "/internal/member-role-assignments";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodArray<z.ZodObject<{
+                    id: z.ZodString;
+                    tenantId: z.ZodString;
+                    userId: z.ZodString;
+                    roleId: z.ZodString;
+                    role: z.ZodObject<{
+                        id: z.ZodString;
+                        name: z.ZodString;
+                        description: z.ZodNullable<z.ZodString>;
+                        tenantId: z.ZodNullable<z.ZodString>;
+                        isSystem: z.ZodBoolean;
+                        permissions: z.ZodArray<z.ZodObject<{
+                            id: z.ZodString;
+                            resource: z.ZodString;
+                            action: z.ZodString;
+                            description: z.ZodNullable<z.ZodString>;
+                        }, z.core.$strip>>;
+                        createdAt: z.ZodString;
+                        updatedAt: z.ZodString;
+                    }, z.core.$strip>;
+                    assignedBy: z.ZodString;
+                    assignedAt: z.ZodString;
+                }, z.core.$strip>>;
+            }, z.core.$strip>;
+        };
+    };
+    assignRole: {
+        summary: "为成员分配角色（内部服务）";
+        method: "POST";
+        body: z.ZodObject<{
+            tenantId: z.ZodString;
+            userId: z.ZodString;
+            roleId: z.ZodString;
+            assignedBy: z.ZodString;
+        }, z.core.$strip>;
+        path: "/internal/member-role-assignments";
+        responses: {
+            201: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    id: z.ZodString;
+                    tenantId: z.ZodString;
+                    userId: z.ZodString;
+                    roleId: z.ZodString;
+                    role: z.ZodObject<{
+                        id: z.ZodString;
+                        name: z.ZodString;
+                        description: z.ZodNullable<z.ZodString>;
+                        tenantId: z.ZodNullable<z.ZodString>;
+                        isSystem: z.ZodBoolean;
+                        permissions: z.ZodArray<z.ZodObject<{
+                            id: z.ZodString;
+                            resource: z.ZodString;
+                            action: z.ZodString;
+                            description: z.ZodNullable<z.ZodString>;
+                        }, z.core.$strip>>;
+                        createdAt: z.ZodString;
+                        updatedAt: z.ZodString;
+                    }, z.core.$strip>;
+                    assignedBy: z.ZodString;
+                    assignedAt: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+    removeRole: {
+        summary: "移除成员角色分配（内部服务）";
+        pathParams: z.ZodObject<{
+            assignmentId: z.ZodString;
+        }, z.core.$strip>;
+        method: "DELETE";
+        body: z.ZodObject<{}, z.core.$strict>;
+        path: "/internal/member-role-assignments/:assignmentId";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    success: z.ZodBoolean;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+    getUserPermissions: {
+        summary: "获取用户有效权限（内部服务）";
+        pathParams: z.ZodObject<{
+            userId: z.ZodString;
+        }, z.core.$strip>;
+        query: z.ZodObject<{
+            tenantId: z.ZodString;
+        }, z.core.$strip>;
+        method: "GET";
+        path: "/internal/users/:userId/permissions";
+        responses: {
+            200: z.ZodObject<{
+                code: z.ZodNumber;
+                msg: z.ZodString;
+                data: z.ZodObject<{
+                    userId: z.ZodString;
+                    tenantId: z.ZodString;
+                    permissions: z.ZodArray<z.ZodObject<{
+                        id: z.ZodString;
+                        resource: z.ZodString;
+                        action: z.ZodString;
+                        description: z.ZodNullable<z.ZodString>;
+                    }, z.core.$strip>>;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+}>;
+//# sourceMappingURL=internal-app-rbac.contract.d.ts.map

package/dist/api/internal-app-rbac.contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal-app-rbac.contract.d.ts","sourceRoot":"","sources":["../../src/api/internal-app-rbac.contract.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAgBxB,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyHnC,CAAC;AAEF,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAG3C,CAAC"}

package/dist/api/internal-app-rbac.contract.js

@@ -0,0 +1,123 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.internalAppRbacContractVersioned = exports.internalAppRbacContract = void 0;
+/**
+ * Internal App RBAC API Contract
+ * Service-to-service endpoints for application-level RBAC
+ */
+const core_1 = require("@ts-rest/core");
+const zod_1 = require("zod");
+const app_rbac_schema_1 = require("../schemas/app-rbac.schema");
+const base_1 = require("../base");
+const c = (0, core_1.initContract)();
+exports.internalAppRbacContract = c.router({
+    // ── Permissions ──
+    listPermissions: {
+        method: 'GET',
+        path: '/permissions',
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(app_rbac_schema_1.AppPermissionListResponseSchema),
+        },
+        summary: '获取所有可用权限（内部服务）',
+    },
+    // ── Custom Roles ──
+    listRoles: {
+        method: 'GET',
+        path: '/roles',
+        query: zod_1.z.object({ tenantId: zod_1.z.string().uuid() }),
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(app_rbac_schema_1.AppCustomRoleListResponseSchema),
+        },
+        summary: '获取租户自定义角色列表（内部服务）',
+    },
+    createRole: {
+        method: 'POST',
+        path: '/roles',
+        body: app_rbac_schema_1.CreateAppCustomRoleSchema.extend({ tenantId: zod_1.z.string().uuid() }),
+        responses: {
+            201: (0, base_1.ApiResponseSchema)(app_rbac_schema_1.AppCustomRoleResponseSchema),
+        },
+        summary: '创建自定义角色（内部服务）',
+    },
+    getRole: {
+        method: 'GET',
+        path: '/roles/:id',
+        pathParams: zod_1.z.object({ id: zod_1.z.string().uuid() }),
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(app_rbac_schema_1.AppCustomRoleResponseSchema),
+        },
+        summary: '获取角色详情（内部服务）',
+    },
+    updateRole: {
+        method: 'PUT',
+        path: '/roles/:id',
+        pathParams: zod_1.z.object({ id: zod_1.z.string().uuid() }),
+        body: app_rbac_schema_1.UpdateAppCustomRoleSchema,
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(app_rbac_schema_1.AppCustomRoleResponseSchema),
+        },
+        summary: '更新自定义角色（内部服务）',
+    },
+    deleteRole: {
+        method: 'DELETE',
+        path: '/roles/:id',
+        pathParams: zod_1.z.object({ id: zod_1.z.string().uuid() }),
+        body: zod_1.z.object({}).strict(),
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(base_1.SuccessResponseSchema),
+        },
+        summary: '删除自定义角色（内部服务）',
+    },
+    // ── Member Role Assignments ──
+    listMemberAssignments: {
+        method: 'GET',
+        path: '/member-role-assignments',
+        query: zod_1.z.object({ tenantId: zod_1.z.string().uuid(), userId: zod_1.z.string().uuid().optional() }),
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(app_rbac_schema_1.AppMemberRoleAssignmentListResponseSchema),
+        },
+        summary: '获取成员角色分配列表（内部服务）',
+    },
+    assignRole: {
+        method: 'POST',
+        path: '/member-role-assignments',
+        body: zod_1.z.object({
+            tenantId: zod_1.z.string().uuid(),
+            userId: zod_1.z.string().uuid(),
+            roleId: zod_1.z.string().uuid(),
+            assignedBy: zod_1.z.string().uuid(),
+        }),
+        responses: {
+            201: (0, base_1.ApiResponseSchema)(app_rbac_schema_1.AppMemberRoleAssignmentResponseSchema),
+        },
+        summary: '为成员分配角色（内部服务）',
+    },
+    removeRole: {
+        method: 'DELETE',
+        path: '/member-role-assignments/:assignmentId',
+        pathParams: zod_1.z.object({ assignmentId: zod_1.z.string().uuid() }),
+        body: zod_1.z.object({}).strict(),
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(base_1.SuccessResponseSchema),
+        },
+        summary: '移除成员角色分配（内部服务）',
+    },
+    // ── User Effective Permissions ──
+    getUserPermissions: {
+        method: 'GET',
+        path: '/users/:userId/permissions',
+        pathParams: zod_1.z.object({ userId: zod_1.z.string().uuid() }),
+        query: zod_1.z.object({ tenantId: zod_1.z.string().uuid() }),
+        responses: {
+            200: (0, base_1.ApiResponseSchema)(app_rbac_schema_1.UserPermissionsResponseSchema),
+        },
+        summary: '获取用户有效权限（内部服务）',
+    },
+}, {
+    pathPrefix: '/internal',
+});
+exports.internalAppRbacContractVersioned = (0, base_1.withVersion)(exports.internalAppRbacContract, {
+    version: base_1.API_VERSION.V1,
+    pathPrefix: '/internal',
+});
+//# sourceMappingURL=internal-app-rbac.contract.js.map