@echovisionlab/geul-proto 0.1.0

package/gen/api/policy/v1/access_pb.ts

@@ -0,0 +1,105 @@
+// @generated by protoc-gen-es v2.14.0 with parameter "target=ts,import_extension=ts"
+// @generated from file api/policy/v1/access.proto (package api.policy.v1, syntax proto3)
+import type {
+  GenEnum,
+  GenExtension,
+  GenFile,
+  GenMessage,
+} from "@bufbuild/protobuf/codegenv2";
+import {
+  enumDesc,
+  extDesc,
+  fileDesc,
+  messageDesc,
+} from "@bufbuild/protobuf/codegenv2";
+import type { MethodOptions } from "@bufbuild/protobuf/wkt";
+import { file_google_protobuf_descriptor } from "@bufbuild/protobuf/wkt";
+import type { Message } from "@bufbuild/protobuf";
+
+/**
+ * Describes the file api/policy/v1/access.proto.
+ */
+export const file_api_policy_v1_access: GenFile =
+  /*@__PURE__*/
+  fileDesc(
+    "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",
+    [file_google_protobuf_descriptor],
+  );
+
+/**
+ * AccessPolicy defines gateway-level policy metadata for an RPC.
+ *
+ * @generated from message api.policy.v1.AccessPolicy
+ */
+export type AccessPolicy = Message<"api.policy.v1.AccessPolicy"> & {
+  /**
+   * @generated from field: api.policy.v1.AuthorizationRole role = 1;
+   */
+  role: AuthorizationRole;
+
+  /**
+   * @generated from field: string resource = 2;
+   */
+  resource: string;
+
+  /**
+   * @generated from field: string action = 3;
+   */
+  action: string;
+};
+
+/**
+ * Describes the message api.policy.v1.AccessPolicy.
+ * Use `create(AccessPolicySchema)` to create a new message.
+ */
+export const AccessPolicySchema: GenMessage<AccessPolicy> =
+  /*@__PURE__*/
+  messageDesc(file_api_policy_v1_access, 0);
+
+/**
+ * AuthorizationRole is the single site-wide authorization vocabulary used by
+ * account projections, manage access policies, and the gateway. Protobuf JSON
+ * uses these enum identifiers verbatim.
+ *
+ * @generated from enum api.policy.v1.AuthorizationRole
+ */
+export enum AuthorizationRole {
+  /**
+   * @generated from enum value: UNSPECIFIED = 0;
+   */
+  UNSPECIFIED = 0,
+
+  /**
+   * @generated from enum value: ANON = 1;
+   */
+  ANON = 1,
+
+  /**
+   * @generated from enum value: USER = 2;
+   */
+  USER = 2,
+
+  /**
+   * @generated from enum value: AUTHOR = 3;
+   */
+  AUTHOR = 3,
+
+  /**
+   * @generated from enum value: ADMIN = 4;
+   */
+  ADMIN = 4,
+}
+
+/**
+ * Describes the enum api.policy.v1.AuthorizationRole.
+ */
+export const AuthorizationRoleSchema: GenEnum<AuthorizationRole> =
+  /*@__PURE__*/
+  enumDesc(file_api_policy_v1_access, 0);
+
+/**
+ * @generated from extension: api.policy.v1.AccessPolicy access = 51001;
+ */
+export const access: GenExtension<MethodOptions, AccessPolicy> =
+  /*@__PURE__*/
+  extDesc(file_api_policy_v1_access, 0);

package/gen/api/policy/v1/spicedb/artist.ts

@@ -0,0 +1,101 @@
+// Code generated by scripts/generated/generate-spicedb-catalog.mjs.
+// DO NOT EDIT.
+//
+// Domain: artist — Artist ownership, management, hierarchy, and share links
+
+import {
+  accountIdentityRelationshipSubject,
+  createCan,
+  createRelationshipMutation,
+  createRelationshipSnapshotPlan,
+  createResource,
+  createResourceLookup,
+  platformRelationshipSubject,
+  RelationshipOperation,
+  resourceRelationshipSubject,
+} from "./internal.ts";
+import type {
+  Actor,
+  Can,
+  RelationshipMutation,
+  RelationshipSnapshotPlan,
+  Resource,
+  ResourceLookup,
+} from "./internal.ts";
+
+export const Artist = Object.freeze({
+  Resource: (id: string): Resource => createResource("artist", id),
+  LookupManage: (): ResourceLookup => createResourceLookup("artist", "manage"),
+  Edit: (id: string): Can => createCan("artist", id, "edit", "edit"),
+  View: (id: string): Can => createCan("artist", id, "view", "view"),
+  Delete: (id: string): Can => createCan("artist", id, "delete", "delete"),
+  Publish: (id: string): Can => createCan("artist", id, "publish", "publish"),
+  Manage: (id: string): Can => createCan("artist", id, "manage", "manage"),
+  ManageParticipants: (id: string): Can =>
+    createCan("artist", id, "manage_participants", "manage_participants"),
+  ManageShareLinks: (id: string): Can =>
+    createCan("artist", id, "manage_share_links", "manage_share_links"),
+  RemoveOwner: (id: string): Can =>
+    createCan("artist", id, "remove_owner", "platform_admin"),
+  Create: (): Can =>
+    createCan("platform", "global", "artist.create", "is_admin"),
+  List: (): Can => createCan("platform", "global", "artist.list", "is_admin"),
+  Snapshot: (id: string): RelationshipSnapshotPlan =>
+    createRelationshipSnapshotPlan("artist", id, "platform_admin", "parent"),
+  TouchPolicy: (id: string): RelationshipMutation =>
+    createRelationshipMutation(
+      createResource("artist", id),
+      "policy",
+      platformRelationshipSubject(),
+      RelationshipOperation.Touch,
+    ),
+  DeletePolicy: (id: string): RelationshipMutation =>
+    createRelationshipMutation(
+      createResource("artist", id),
+      "policy",
+      platformRelationshipSubject(),
+      RelationshipOperation.Delete,
+    ),
+  TouchOwner: (id: string, actor: Actor): RelationshipMutation =>
+    createRelationshipMutation(
+      createResource("artist", id),
+      "owner",
+      accountIdentityRelationshipSubject(actor),
+      RelationshipOperation.Touch,
+    ),
+  DeleteOwner: (id: string, actor: Actor): RelationshipMutation =>
+    createRelationshipMutation(
+      createResource("artist", id),
+      "owner",
+      accountIdentityRelationshipSubject(actor),
+      RelationshipOperation.Delete,
+    ),
+  TouchManager: (id: string, actor: Actor): RelationshipMutation =>
+    createRelationshipMutation(
+      createResource("artist", id),
+      "manager",
+      accountIdentityRelationshipSubject(actor),
+      RelationshipOperation.Touch,
+    ),
+  DeleteManager: (id: string, actor: Actor): RelationshipMutation =>
+    createRelationshipMutation(
+      createResource("artist", id),
+      "manager",
+      accountIdentityRelationshipSubject(actor),
+      RelationshipOperation.Delete,
+    ),
+  TouchParent: (id: string, parentId: string): RelationshipMutation =>
+    createRelationshipMutation(
+      createResource("artist", id),
+      "parent",
+      resourceRelationshipSubject("artist", parentId, ""),
+      RelationshipOperation.Touch,
+    ),
+  DeleteParent: (id: string, parentId: string): RelationshipMutation =>
+    createRelationshipMutation(
+      createResource("artist", id),
+      "parent",
+      resourceRelationshipSubject("artist", parentId, ""),
+      RelationshipOperation.Delete,
+    ),
+});

package/gen/api/policy/v1/spicedb/audience.ts

@@ -0,0 +1,64 @@
+// Code generated by scripts/generated/generate-spicedb-catalog.mjs.
+// DO NOT EDIT.
+//
+// Domain: audience — Audience Segment resource policy
+
+import {
+  accountIdentityRelationshipSubject,
+  createCan,
+  createRelationshipMutation,
+  createRelationshipSnapshotPlan,
+  createResource,
+  platformRelationshipSubject,
+  RelationshipOperation,
+  resourceRelationshipSubject,
+} from "./internal.ts";
+import type {
+  Actor,
+  Can,
+  RelationshipMutation,
+  RelationshipSnapshotPlan,
+  Resource,
+} from "./internal.ts";
+
+export const AudienceSegment = Object.freeze({
+  Resource: (id: string): Resource => createResource("audience_segment", id),
+  View: (id: string): Can => createCan("audience_segment", id, "view", "view"),
+  Edit: (id: string): Can => createCan("audience_segment", id, "edit", "edit"),
+  Delete: (id: string): Can =>
+    createCan("audience_segment", id, "delete", "delete"),
+  Manage: (id: string): Can =>
+    createCan("audience_segment", id, "manage", "manage"),
+  Create: (): Can =>
+    createCan("platform", "global", "audience_segment.create", "is_admin"),
+  List: (): Can =>
+    createCan("platform", "global", "audience_segment.list", "is_admin"),
+  ListAuthenticatedAccess: (): Can =>
+    createCan(
+      "platform",
+      "global",
+      "audience_segment.list_authenticated_access",
+      "is_author",
+    ),
+  Snapshot: (id: string): RelationshipSnapshotPlan =>
+    createRelationshipSnapshotPlan(
+      "audience_segment",
+      id,
+      "platform_admin",
+      "",
+    ),
+  TouchPolicy: (id: string): RelationshipMutation =>
+    createRelationshipMutation(
+      createResource("audience_segment", id),
+      "policy",
+      platformRelationshipSubject(),
+      RelationshipOperation.Touch,
+    ),
+  DeletePolicy: (id: string): RelationshipMutation =>
+    createRelationshipMutation(
+      createResource("audience_segment", id),
+      "policy",
+      platformRelationshipSubject(),
+      RelationshipOperation.Delete,
+    ),
+});

package/gen/api/policy/v1/spicedb/campaign.ts

@@ -0,0 +1,49 @@
+// Code generated by scripts/generated/generate-spicedb-catalog.mjs.
+// DO NOT EDIT.
+//
+// Domain: campaign — Campaign resource policy
+
+import {
+  accountIdentityRelationshipSubject,
+  createCan,
+  createRelationshipMutation,
+  createRelationshipSnapshotPlan,
+  createResource,
+  platformRelationshipSubject,
+  RelationshipOperation,
+  resourceRelationshipSubject,
+} from "./internal.ts";
+import type {
+  Actor,
+  Can,
+  RelationshipMutation,
+  RelationshipSnapshotPlan,
+  Resource,
+} from "./internal.ts";
+
+export const Campaign = Object.freeze({
+  Resource: (id: string): Resource => createResource("campaign", id),
+  View: (id: string): Can => createCan("campaign", id, "view", "view"),
+  Edit: (id: string): Can => createCan("campaign", id, "edit", "edit"),
+  Delete: (id: string): Can => createCan("campaign", id, "delete", "delete"),
+  Manage: (id: string): Can => createCan("campaign", id, "manage", "manage"),
+  Create: (): Can =>
+    createCan("platform", "global", "campaign.create", "is_admin"),
+  List: (): Can => createCan("platform", "global", "campaign.list", "is_admin"),
+  Snapshot: (id: string): RelationshipSnapshotPlan =>
+    createRelationshipSnapshotPlan("campaign", id, "platform_admin", ""),
+  TouchPolicy: (id: string): RelationshipMutation =>
+    createRelationshipMutation(
+      createResource("campaign", id),
+      "policy",
+      platformRelationshipSubject(),
+      RelationshipOperation.Touch,
+    ),
+  DeletePolicy: (id: string): RelationshipMutation =>
+    createRelationshipMutation(
+      createResource("campaign", id),
+      "policy",
+      platformRelationshipSubject(),
+      RelationshipOperation.Delete,
+    ),
+});

package/gen/api/policy/v1/spicedb/core.ts

@@ -0,0 +1,196 @@
+// Code generated by scripts/generated/generate-spicedb-catalog.mjs.
+// DO NOT EDIT.
+// Shared account-identity, delegation, role, and platform authorization core.
+
+import {
+  accountIdentityRelationshipSubject,
+  createActor,
+  createCan,
+  createDecision,
+  createDelegation,
+  createRelationshipMutation,
+  createResource,
+  createSubjectLookup,
+  createRole,
+  DelegationKind,
+  RelationshipOperation,
+  resourceRelationshipSubject,
+} from "./internal.ts";
+import type {
+  Actor,
+  AuthorizationDecision,
+  Can,
+  Delegation,
+  RelationshipMutation,
+  RelationshipSnapshotPlan,
+  Resource,
+  RoleID,
+  SubjectLookup,
+} from "./internal.ts";
+
+export const spiceDbCatalogFingerprint =
+  "b1c92baf58538b463ae2a94d9b26c3c7e920b22bf92ca71841196b017592a2fe" as const;
+
+export type {
+  Actor,
+  Action,
+  AuthorizationDecision,
+  Can,
+  Delegation,
+  RelationshipMutation,
+  RelationshipSnapshotPlan,
+  Resource,
+  ResourceLookup,
+  RoleID,
+  SubjectLookup,
+} from "./internal.ts";
+export { DelegationKind, RelationshipOperation } from "./internal.ts";
+
+export const NewAccountIdentityActor = createActor;
+
+export function DirectSession(sessionId: string): Delegation {
+  return createDelegation(DelegationKind.DirectSession, { sessionId });
+}
+
+function mcpDelegation(
+  kind: typeof DelegationKind.MCPOAuth,
+  delegationId: string,
+  delegationDisplayName: string,
+): Delegation {
+  return createDelegation(kind, {
+    delegationId,
+    delegationDisplayName,
+  });
+}
+
+export function MCPOAuth(
+  delegationId: string,
+  delegationDisplayName: string,
+): Delegation {
+  return mcpDelegation(
+    DelegationKind.MCPOAuth,
+    delegationId,
+    delegationDisplayName,
+  );
+}
+
+// NewAuthorizationDecision creates an immutable descriptor and performs no I/O.
+export const NewAuthorizationDecision = createDecision;
+
+export const Role = Object.freeze({
+  Admin: (): RoleID => createRole("admin"),
+  Author: (): RoleID => createRole("author"),
+  User: (): RoleID => createRole("user"),
+  Parse: (value: string): RoleID | undefined => {
+    switch (value) {
+      case "admin":
+        return Role.Admin();
+      case "author":
+        return Role.Author();
+      case "user":
+        return Role.User();
+      default:
+        return undefined;
+    }
+  },
+  TouchMember: (role: RoleID, actor: Actor): RelationshipMutation =>
+    createRelationshipMutation(
+      createResource("role", role.id),
+      "member",
+      accountIdentityRelationshipSubject(actor),
+      RelationshipOperation.Touch,
+    ),
+  DeleteMember: (role: RoleID, actor: Actor): RelationshipMutation =>
+    createRelationshipMutation(
+      createResource("role", role.id),
+      "member",
+      accountIdentityRelationshipSubject(actor),
+      RelationshipOperation.Delete,
+    ),
+  TouchAuthorIncludesAdmin: (): RelationshipMutation =>
+    createRelationshipMutation(
+      createResource("role", Role.Author().id),
+      "member",
+      resourceRelationshipSubject("role", Role.Admin().id, "member"),
+      RelationshipOperation.Touch,
+    ),
+  DeleteAuthorIncludesAdmin: (): RelationshipMutation =>
+    createRelationshipMutation(
+      createResource("role", Role.Author().id),
+      "member",
+      resourceRelationshipSubject("role", Role.Admin().id, "member"),
+      RelationshipOperation.Delete,
+    ),
+  TouchUserIncludesAuthor: (): RelationshipMutation =>
+    createRelationshipMutation(
+      createResource("role", Role.User().id),
+      "member",
+      resourceRelationshipSubject("role", Role.Author().id, "member"),
+      RelationshipOperation.Touch,
+    ),
+  DeleteUserIncludesAuthor: (): RelationshipMutation =>
+    createRelationshipMutation(
+      createResource("role", Role.User().id),
+      "member",
+      resourceRelationshipSubject("role", Role.Author().id, "member"),
+      RelationshipOperation.Delete,
+    ),
+});
+
+const platformResource: Resource = createResource("platform", "global");
+
+export const Platform = Object.freeze({
+  Resource: (): Resource => platformResource,
+  IsAdmin: (): Can => createCan("platform", "global", "is_admin", "is_admin"),
+  IsAuthor: (): Can =>
+    createCan("platform", "global", "is_author", "is_author"),
+  IsUser: (): Can => createCan("platform", "global", "is_user", "is_user"),
+  LookupAdminSubjects: (): SubjectLookup =>
+    createSubjectLookup("platform", "global", "is_admin", "account_identity"),
+  LookupAuthorSubjects: (): SubjectLookup =>
+    createSubjectLookup("platform", "global", "is_author", "account_identity"),
+  LookupUserSubjects: (): SubjectLookup =>
+    createSubjectLookup("platform", "global", "is_user", "account_identity"),
+  TouchAdminRole: (): RelationshipMutation =>
+    createRelationshipMutation(
+      platformResource,
+      "admin",
+      resourceRelationshipSubject("role", Role.Admin().id, "member"),
+      RelationshipOperation.Touch,
+    ),
+  DeleteAdminRole: (): RelationshipMutation =>
+    createRelationshipMutation(
+      platformResource,
+      "admin",
+      resourceRelationshipSubject("role", Role.Admin().id, "member"),
+      RelationshipOperation.Delete,
+    ),
+  TouchAuthorRole: (): RelationshipMutation =>
+    createRelationshipMutation(
+      platformResource,
+      "author",
+      resourceRelationshipSubject("role", Role.Author().id, "member"),
+      RelationshipOperation.Touch,
+    ),
+  DeleteAuthorRole: (): RelationshipMutation =>
+    createRelationshipMutation(
+      platformResource,
+      "author",
+      resourceRelationshipSubject("role", Role.Author().id, "member"),
+      RelationshipOperation.Delete,
+    ),
+  TouchUserRole: (): RelationshipMutation =>
+    createRelationshipMutation(
+      platformResource,
+      "user",
+      resourceRelationshipSubject("role", Role.User().id, "member"),
+      RelationshipOperation.Touch,
+    ),
+  DeleteUserRole: (): RelationshipMutation =>
+    createRelationshipMutation(
+      platformResource,
+      "user",
+      resourceRelationshipSubject("role", Role.User().id, "member"),
+      RelationshipOperation.Delete,
+    ),
+});

package/gen/api/policy/v1/spicedb/email_authoring.ts

@@ -0,0 +1,91 @@
+// Code generated by scripts/generated/generate-spicedb-catalog.mjs.
+// DO NOT EDIT.
+//
+// Domain: email_authoring — Email Template and Email Layout authoring policy
+
+import {
+  accountIdentityRelationshipSubject,
+  createCan,
+  createRelationshipMutation,
+  createRelationshipSnapshotPlan,
+  createResource,
+  platformRelationshipSubject,
+  RelationshipOperation,
+  resourceRelationshipSubject,
+} from "./internal.ts";
+import type {
+  Actor,
+  Can,
+  RelationshipMutation,
+  RelationshipSnapshotPlan,
+  Resource,
+} from "./internal.ts";
+
+export const EmailTemplate = Object.freeze({
+  Resource: (id: string): Resource => createResource("email_template", id),
+  View: (id: string): Can => createCan("email_template", id, "view", "view"),
+  Edit: (id: string): Can => createCan("email_template", id, "edit", "edit"),
+  Delete: (id: string): Can =>
+    createCan("email_template", id, "delete", "delete"),
+  Manage: (id: string): Can =>
+    createCan("email_template", id, "manage", "manage"),
+  Create: (): Can =>
+    createCan("platform", "global", "email_template.create", "is_admin"),
+  List: (): Can =>
+    createCan("platform", "global", "email_template.list", "is_admin"),
+  Snapshot: (id: string): RelationshipSnapshotPlan =>
+    createRelationshipSnapshotPlan("email_template", id, "platform_admin", ""),
+  TouchPolicy: (id: string): RelationshipMutation =>
+    createRelationshipMutation(
+      createResource("email_template", id),
+      "policy",
+      platformRelationshipSubject(),
+      RelationshipOperation.Touch,
+    ),
+  DeletePolicy: (id: string): RelationshipMutation =>
+    createRelationshipMutation(
+      createResource("email_template", id),
+      "policy",
+      platformRelationshipSubject(),
+      RelationshipOperation.Delete,
+    ),
+});
+
+export const EmailLayout = Object.freeze({
+  Resource: (id: string): Resource => createResource("email_layout", id),
+  View: (id: string): Can => createCan("email_layout", id, "view", "view"),
+  Edit: (id: string): Can => createCan("email_layout", id, "edit", "edit"),
+  Delete: (id: string): Can =>
+    createCan("email_layout", id, "delete", "delete"),
+  Manage: (id: string): Can =>
+    createCan("email_layout", id, "manage", "manage"),
+  Create: (): Can =>
+    createCan("platform", "global", "email_layout.create", "is_admin"),
+  List: (): Can =>
+    createCan("platform", "global", "email_layout.list", "is_admin"),
+  PreviewContent: (): Can =>
+    createCan("platform", "global", "email_layout.preview_content", "is_admin"),
+  Snapshot: (id: string): RelationshipSnapshotPlan =>
+    createRelationshipSnapshotPlan("email_layout", id, "platform_admin", ""),
+  TouchPolicy: (id: string): RelationshipMutation =>
+    createRelationshipMutation(
+      createResource("email_layout", id),
+      "policy",
+      platformRelationshipSubject(),
+      RelationshipOperation.Touch,
+    ),
+  DeletePolicy: (id: string): RelationshipMutation =>
+    createRelationshipMutation(
+      createResource("email_layout", id),
+      "policy",
+      platformRelationshipSubject(),
+      RelationshipOperation.Delete,
+    ),
+});
+
+export const EmailEventMapping = Object.freeze({
+  Resource: (id: string): Resource => createResource("email_event_mapping", id),
+
+  Update: (): Can =>
+    createCan("platform", "global", "email_event_mapping.update", "is_admin"),
+});

package/gen/api/policy/v1/spicedb/email_delivery.ts

@@ -0,0 +1,44 @@
+// Code generated by scripts/generated/generate-spicedb-catalog.mjs.
+// DO NOT EDIT.
+//
+// Domain: email_delivery — Mail Adapter and email suppression management policy
+
+import {
+  accountIdentityRelationshipSubject,
+  createCan,
+  createRelationshipMutation,
+  createRelationshipSnapshotPlan,
+  createResource,
+  platformRelationshipSubject,
+  RelationshipOperation,
+  resourceRelationshipSubject,
+} from "./internal.ts";
+import type {
+  Actor,
+  Can,
+  RelationshipMutation,
+  RelationshipSnapshotPlan,
+  Resource,
+} from "./internal.ts";
+
+export const MailAdapter = Object.freeze({
+  Resource: (id: string): Resource => createResource("mail_adapter", id),
+
+  List: (): Can =>
+    createCan("platform", "global", "mail_adapter.list", "is_admin"),
+  Create: (): Can =>
+    createCan("platform", "global", "mail_adapter.create", "is_admin"),
+  Update: (): Can =>
+    createCan("platform", "global", "mail_adapter.update", "is_admin"),
+  Delete: (): Can =>
+    createCan("platform", "global", "mail_adapter.delete", "is_admin"),
+  Test: (): Can =>
+    createCan("platform", "global", "mail_adapter.test", "is_admin"),
+});
+
+export const EmailSuppression = Object.freeze({
+  Resource: (id: string): Resource => createResource("email_suppression", id),
+
+  Release: (): Can =>
+    createCan("platform", "global", "email_suppression.release", "is_admin"),
+});