@esb-market-contracts/admin-backend 1.3.1 → 1.4.1

package/api.d.ts

@@ -1,36 +1,22 @@
 // Generated by dts-bundle-generator v9.5.1
 
-declare const authRouter: import("hono/hono-base").HonoBase<import("hono/types").BlankEnv, {
-	"/iam/authentication/session": {
-		$get: {
+declare const authRouter: import("hono/hono-base").HonoBase<{}, {
+	"/iam/authentication/authorize": {
+		$post: {
 			input: {};
 			output: import("@kalutskii/foundation").APIError | import("@kalutskii/foundation").APISuccess<{
-				session: {
-					expiresAt: string;
-					user: {
-						id: number;
-						email: string;
-						fullName: string;
-						status: "active" | "inactive" | "suspended";
-						lastLoginAt: string | null;
-					};
-				};
+				[x: string]: never;
 			}>;
 			outputFormat: "json";
 			status: 200;
 		};
 	};
 } & {
-	"/iam/authentication/login": {
+	"/iam/authentication/refresh": {
 		$post: {
-			input: {
-				json: {
-					email: string;
-					password: string;
-				};
-			};
+			input: {};
 			output: import("@kalutskii/foundation").APIError | import("@kalutskii/foundation").APISuccess<{
-				[x: string]: never;
+				accessToken: string;
 			}>;
 			outputFormat: "json";
 			status: 200;
@@ -49,71 +35,5 @@ declare const authRouter: import("hono/hono-base").HonoBase<import("hono/types")
 	};
 }, "/iam/authentication", "/iam/authentication/logout">;
 export type AuthRouter = typeof authRouter;
-declare const employeesRouter: import("hono/hono-base").HonoBase<import("hono/types").BlankEnv, {
-	"/iam/employees/table-metadata": {
-		$get: {
-			input: {};
-			output: import("@kalutskii/foundation").APIError | import("@kalutskii/foundation").APISuccess<{
-				filters: {
-					statuses: {
-						label: string;
-						value: string;
-					}[];
-					roles: {
-						label: string;
-						value: string;
-					}[];
-				};
-				sorting: {
-					fields: {
-						label: string;
-						value: string;
-					}[];
-					default: {
-						field: string;
-						direction: "desc" | "asc";
-					};
-				};
-				pagination: {
-					defaultLimit: number;
-					availableLimits: number[];
-				};
-			}>;
-			outputFormat: "json";
-			status: 200;
-		};
-	};
-} & {
-	"/iam/employees": {
-		$get: {
-			input: {};
-			output: import("@kalutskii/foundation").APIError | import("@kalutskii/foundation").APISuccess<{
-				items: {
-					id: number;
-					email: string;
-					fullName: string;
-					status: "active" | "inactive" | "suspended";
-					lastLoginAt: string | null;
-					updatedAt: string;
-					createdAt: string;
-					roles: {
-						id: number;
-						name: string;
-						code: string;
-					}[];
-				}[];
-				meta: {
-					page: number;
-					limit: number;
-					total: number;
-					totalPages: number;
-				};
-			}>;
-			outputFormat: "json";
-			status: 200;
-		};
-	};
-}, "/iam/employees", "/iam/employees">;
-export type EmployeesRouter = typeof employeesRouter;
 
 export {};

package/enums.d.ts

@@ -1,10 +1,9 @@
 // Generated by dts-bundle-generator v9.5.1
 
-export declare const PBACPermissionsRecord: {
-	"ORDERS.CREATE": "orders.create";
-	"ORDERS.READ": "orders.read";
-	"ORDERS.UPDATE": "orders.update";
-	"ORDERS.DELETE": "orders.delete";
+export declare const PBACPermissions: {
+	"EMPLOYEE.CREATE": "employee.create";
+	"EMPLOYEE.READ": "employee.read";
+	"EMPLOYEE.UPDATE": "employee.update";
 };
 
 export {};

package/enums.js

@@ -1,12 +1,11 @@
-// @bun
-// src/utilities/enum.utils.ts
-function createStringEnumObject(values) {
+// src/utilities/enums.utilities.ts
+function createStringEnumRecord(values) {
   return Object.fromEntries(values.map((value) => [value.toUpperCase(), value]));
 }
 
-// src/app/domain/(iam)/permissions/permissions.enums.ts
-var PBACPermissions = ["orders.create", "orders.read", "orders.update", "orders.delete"];
-var PBACPermissionsRecord = createStringEnumObject(PBACPermissions);
+// src/app/domain/(iam)/employees-permissions/employees-permissions.enums.ts
+var PBACPermissionItems = ["employee.create", "employee.read", "employee.update"];
+var PBACPermissions = createStringEnumRecord(PBACPermissionItems);
 export {
-  PBACPermissionsRecord
+  PBACPermissions
 };

package/index.d.ts

@@ -1,4 +1,5 @@
 export type * from './api';
-export type * from './types';
 export type * from './enums';
-export * from './enums';
+export type * from './schemas';
+export * from './enums';
+export * from './schemas';

package/index.js

@@ -1 +1,2 @@
-export * from './enums.js';
+export * from './enums.js';
+export * from './schemas.js';

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@esb-market-contracts/admin-backend",
   "description": "Shared TypeScript contract definitions for admin-backend.",
-  "version": "1.3.1",
+  "version": "1.4.1",
   "private": false,
   "type": "module",
   "sideEffects": false,
@@ -10,10 +10,10 @@
     "index.js",
     "api.d.ts",
     "api.js",
-    "types.d.ts",
-    "types.js",
     "enums.d.ts",
-    "enums.js"
+    "enums.js",
+    "schemas.d.ts",
+    "schemas.js"
   ],
   "exports": {
     ".": {
@@ -24,13 +24,13 @@
       "types": "./api.d.ts",
       "default": "./api.js"
     },
-    "./types": {
-      "types": "./types.d.ts",
-      "default": "./types.js"
-    },
     "./enums": {
       "types": "./enums.d.ts",
       "default": "./enums.js"
+    },
+    "./schemas": {
+      "types": "./schemas.d.ts",
+      "default": "./schemas.js"
     }
   },
   "types": "./index.d.ts"

package/schemas.d.ts

@@ -0,0 +1,23 @@
+// Generated by dts-bundle-generator v9.5.1
+
+import { z } from 'zod';
+
+/** Schema for the payload of an authentication token. */
+export declare const authPayloadSchema: z.ZodObject<{
+	employee: z.ZodObject<{
+		id: z.ZodInt;
+		email: z.ZodString;
+		fullName: z.ZodString;
+	}, {
+		out: {};
+		in: {};
+	}>;
+	permissions: z.ZodArray<z.ZodEnum<{
+		"employee.create": "employee.create";
+		"employee.read": "employee.read";
+		"employee.update": "employee.update";
+	}>>;
+}, z.core.$strip>;
+export type AuthPayload = z.infer<typeof authPayloadSchema>;
+
+export {};

package/schemas.js

@@ -0,0 +1,243 @@
+// src/app/flows/authentication/authentication.schemas.ts
+import { z as z5 } from "zod";
+
+// src/app/domain/(iam)/employees/employees.audit.ts
+import { z } from "zod";
+var employeesAuditEvents = {
+  "employee.created": z.object({ targetEmployeeId: z.number() }),
+  "employee.suspended": z.object({ targetEmployeeId: z.number() }),
+  "employee.activated": z.object({ targetEmployeeId: z.number() }),
+  "employee.passwordReset": z.object({ targetEmployeeId: z.number() })
+};
+
+// src/app/domain/(iam)/employees/employees.drizzle.ts
+import { sql } from "drizzle-orm";
+import { check, pgTable, serial, text, timestamp } from "drizzle-orm/pg-core";
+
+// src/app/domain/(iam)/employees/employees.enums.ts
+import { pgEnum } from "drizzle-orm/pg-core";
+
+// src/utilities/enums.utilities.ts
+function createStringEnumRecord(values) {
+  return Object.fromEntries(values.map((value) => [value.toUpperCase(), value]));
+}
+
+// src/app/domain/(iam)/employees/employees.enums.ts
+var employeeStatuses = ["active", "suspended"];
+var employeeStatusesRecord = createStringEnumRecord(employeeStatuses);
+var employeeStatusPGEnum = pgEnum("employee_status", employeeStatuses);
+
+// src/app/domain/(iam)/employees/employees.drizzle.ts
+var employeesTable = pgTable("employees", {
+  id: serial("id").primaryKey(),
+  email: text("email").notNull().unique(),
+  fullName: text("full_name").notNull(),
+  status: employeeStatusPGEnum("status").notNull().default("active"),
+  passwordDigest: text("password_digest").notNull(),
+  updatedAt: timestamp("updated_at").$onUpdateFn(() => /* @__PURE__ */ new Date()),
+  createdAt: timestamp("created_at").notNull().defaultNow()
+}, (table) => [
+  // Database-level email field format validation using a regex pattern.
+  check("employees_email_check", sql`${table.email} ~* '^[A-Z0-9._%+-]+@[A-Z0-9.-]+\\.[A-Z]{2,}$'`)
+]);
+
+// src/drizzle/drizzle.database.ts
+import { drizzle } from "drizzle-orm/postgres-js";
+
+// src/app/domain/(iam)/audit-logs/audit-logs.relations.ts
+import { defineRelationsPart } from "drizzle-orm";
+
+// src/app/domain/(iam)/audit-logs/audit-logs.drizzle.ts
+import { sql as sql2 } from "drizzle-orm";
+import { check as check2, index, integer, jsonb, pgTable as pgTable2, serial as serial2, text as text2, timestamp as timestamp2 } from "drizzle-orm/pg-core";
+var auditLogsTable = pgTable2("audit_logs", {
+  id: serial2("id").primaryKey(),
+  actorEmployeeId: integer("actor_employee_id").references(() => employeesTable.id, {
+    onDelete: "set null"
+  }),
+  event: text2("event").notNull().$type(),
+  payload: jsonb("payload"),
+  createdAt: timestamp2("created_at").notNull().defaultNow()
+}, (table) => [
+  // Ensure event is not empty and payload is a valid JSON object.
+  check2("audit_event_check", sql2`${table.event} != ''`),
+  check2("audit_payload_check", sql2`jsonb_typeof(${table.payload}) = 'object'`),
+  // Indexes for efficient querying by employeeId and event type.
+  index("audit_logs_actor_employee_id_idx").on(table.actorEmployeeId),
+  index("audit_logs_event_idx").on(table.event),
+  index("audit_logs_created_at_idx").on(table.createdAt)
+]);
+
+// src/app/domain/(iam)/audit-logs/audit-logs.relations.ts
+var auditLogsRelationsPart = defineRelationsPart({ auditLogsTable, employeesTable }, (r) => ({
+  auditLogsTable: {
+    employee: r.one.employeesTable({
+      from: r.auditLogsTable.actorEmployeeId,
+      to: r.employeesTable.id
+    })
+  }
+}));
+
+// src/app/domain/(iam)/employees-permissions/employees-permissions.relations.ts
+import { defineRelationsPart as defineRelationsPart2 } from "drizzle-orm";
+
+// src/app/domain/(iam)/employees-permissions/employees-permissions.drizzle.ts
+import { integer as integer2, pgTable as pgTable3, serial as serial3, text as text3, unique } from "drizzle-orm/pg-core";
+var employeesPermissionsTable = pgTable3("employees_permissions", {
+  id: serial3("id").primaryKey(),
+  permission: text3("permission").notNull().$type(),
+  employeeId: integer2("employee_id").notNull().references(() => employeesTable.id, { onDelete: "cascade" })
+}, (table) => [
+  // Unique constraint on (employeeId, permission) to prevent duplicate permissions for the same employee.
+  unique("employees_permissions_employee_id_permission_unique").on(table.employeeId, table.permission)
+]);
+
+// src/app/domain/(iam)/employees-permissions/employees-permissions.relations.ts
+var employeesPermissionsRelationsPart = defineRelationsPart2({ employeesPermissionsTable, employeesTable }, (r) => ({
+  employeesPermissionsTable: {
+    employee: r.one.employeesTable({
+      from: r.employeesPermissionsTable.employeeId,
+      to: r.employeesTable.id
+    })
+  }
+}));
+
+// src/app/domain/(iam)/employees/employees.relations.ts
+import { defineRelationsPart as defineRelationsPart3 } from "drizzle-orm";
+
+// src/app/domain/(iam)/employees-permissions/employees-permissions.audit.ts
+import { z as z2 } from "zod";
+
+// src/app/domain/(iam)/employees-permissions/employees-permissions.enums.ts
+var PBACPermissionItems = ["employee.create", "employee.read", "employee.update"];
+var PBACPermissions = createStringEnumRecord(PBACPermissionItems);
+
+// src/app/domain/(iam)/employees-permissions/employees-permissions.audit.ts
+var employeesPermissionsAuditEvents = {
+  "permissions.updated": z2.object({
+    targetEmployeeId: z2.number(),
+    newPermissions: z2.array(z2.enum(PBACPermissionItems))
+  })
+};
+
+// src/app/domain/(iam)/sessions/sessions.audit.ts
+import { z as z3 } from "zod";
+var sessionsAuditEvents = {
+  "session.created": z3.object({ userAgent: z3.string().optional() }),
+  "session.revoked": z3.object({
+    targetSessionId: z3.number(),
+    actorEmployeeId: z3.number().optional()
+    // Required only if the actor is not the owner of the session.
+  })
+};
+
+// src/app/domain/(iam)/sessions/sessions.drizzle.ts
+import { index as index2, integer as integer3, pgTable as pgTable4, serial as serial4, text as text4, timestamp as timestamp3 } from "drizzle-orm/pg-core";
+var sessionsTable = pgTable4("sessions", {
+  id: serial4("id").primaryKey(),
+  refreshTokenDigest: text4("refresh_token_digest").notNull().unique(),
+  employeeId: integer3("employee_id").notNull().references(() => employeesTable.id, { onDelete: "cascade" }),
+  createdAt: timestamp3("created_at").notNull().defaultNow(),
+  expiresAt: timestamp3("expires_at").notNull(),
+  revokedAt: timestamp3("revoked_at")
+}, (table) => [
+  // Indexes for efficient querying by employeeId and expiration time.
+  index2("sessions_employee_id_idx").on(table.employeeId),
+  index2("sessions_expires_at_idx").on(table.expiresAt)
+]);
+
+// src/app/domain/(iam)/sessions/sessions.schemas.ts
+import { createInsertSchema, createSelectSchema } from "drizzle-orm/zod";
+var sessionSchema = createSelectSchema(sessionsTable);
+var sessionInsertSchema = createInsertSchema(sessionsTable);
+
+// src/app/domain/(iam)/sessions/sessions.repository.ts
+import { eq } from "drizzle-orm";
+
+// src/app/domain/(iam)/audit-logs/audit-logs.registry.ts
+var auditEventsRegistry = {
+  ...employeesPermissionsAuditEvents,
+  ...employeesAuditEvents,
+  ...sessionsAuditEvents
+};
+
+// src/app/domain/(iam)/employees/employees.relations.ts
+var employeesRelationsPart = defineRelationsPart3({ employeesTable, employeesPermissionsTable, auditLogsTable, sessionsTable }, (r) => ({
+  employeesTable: {
+    sessions: r.many.sessionsTable({
+      from: r.employeesTable.id,
+      to: r.sessionsTable.employeeId
+    }),
+    auditLogs: r.many.auditLogsTable({
+      from: r.employeesTable.id,
+      to: r.auditLogsTable.actorEmployeeId
+    }),
+    permissions: r.many.employeesPermissionsTable({
+      from: r.employeesTable.id,
+      to: r.employeesPermissionsTable.employeeId
+    })
+  }
+}));
+
+// src/app/domain/(iam)/sessions/sessions.relations.ts
+import { defineRelationsPart as defineRelationsPart4 } from "drizzle-orm";
+var sessionsRelationsPart = defineRelationsPart4({ sessionsTable, employeesTable }, (r) => ({
+  sessionsTable: {
+    employee: r.one.employeesTable({
+      from: r.sessionsTable.employeeId,
+      to: r.employeesTable.id
+    })
+  }
+}));
+
+// src/app/domain/domain.registry.ts
+var domainRelationsRegistry = {
+  ...auditLogsRelationsPart,
+  ...employeesRelationsPart,
+  ...employeesPermissionsRelationsPart,
+  ...sessionsRelationsPart
+};
+
+// src/internal/env.config.ts
+import { createEnv } from "@t3-oss/env-core";
+import { z as z4 } from "zod";
+var env = createEnv({
+  server: {
+    // Database settings for Drizzle ORM
+    DRIZZLE_DB_URL: z4.url().min(8).max(256),
+    DRIZZLE_MIGRATIONS_FOLDER: z4.string().min(1).max(256),
+    // Bun server settings
+    BUN_SERVER_PORT: z4.coerce.number().int().positive().min(1).max(65535),
+    BUN_SERVER_HOST: z4.string().min(1).max(64).optional().default("0.0.0.0"),
+    // Ecosystem variables
+    ESB_MARKET_SPACE_JWT_SECRET: z4.string().min(16).max(256),
+    // Peripheral settings, usually not required in the environment
+    DEFAULT_TIMEZONE: z4.string().min(4).max(256).optional().default("Asia/Tbilisi"),
+    NODE_ENV: z4.enum(["development", "production", "test"]).optional().default("development")
+  },
+  runtimeEnv: process.env,
+  emptyStringAsUndefined: true
+});
+
+// src/drizzle/drizzle.database.ts
+var db = drizzle(env.DRIZZLE_DB_URL, { relations: domainRelationsRegistry });
+
+// src/app/domain/(iam)/employees/employees.schemas.ts
+import { createSelectSchema as createSelectSchema2 } from "drizzle-orm/zod";
+var employeeSchema = createSelectSchema2(employeesTable);
+
+// src/app/domain/(iam)/employees/employees.exceptions.ts
+import { HTTPException } from "hono/http-exception";
+
+// src/app/flows/authentication/authentication.schemas.ts
+var authorizeRequestSchema = z5.object({
+  email: z5.email().min(8).max(128),
+  password: z5.string().min(8).max(128)
+});
+var authPayloadSchema = z5.object({
+  employee: employeeSchema.pick({ id: true, email: true, fullName: true }),
+  permissions: z5.array(z5.enum(PBACPermissionItems))
+});
+export {
+  authPayloadSchema
+};

package/types.d.ts

@@ -1,143 +0,0 @@
-// Generated by dts-bundle-generator v9.5.1
-
-import { SerializeDates } from '@kalutskii/foundation';
-import { z } from 'zod';
-
-declare const AuthLoginSchema: z.ZodObject<{
-	email: z.ZodEmail;
-	password: z.ZodString;
-}, z.core.$strict>;
-export type AuthLogin = z.infer<typeof AuthLoginSchema>;
-declare const AuthSessionSchema: z.ZodObject<{
-	expiresAt: z.ZodDate;
-	user: z.ZodObject<{
-		id: z.ZodInt;
-		email: z.ZodString;
-		fullName: z.ZodString;
-		status: z.ZodEnum<{
-			active: "active";
-			inactive: "inactive";
-			suspended: "suspended";
-		}>;
-		lastLoginAt: z.ZodNullable<z.ZodDate>;
-	}, {
-		out: {};
-		in: {};
-	}>;
-}, {
-	out: {};
-	in: {};
-}>;
-export type AuthSession = z.infer<typeof AuthSessionSchema>;
-export type AuthLoginRequest = AuthLogin;
-export type AuthSessionRequest = Record<string, never>;
-export type AuthSessionResponse = SerializeDates<AuthSession>;
-export type AuthClientSession = AuthSession;
-export type AuthLogoutRequest = Record<string, never>;
-export type AuthLogoutResponse = Record<string, never>;
-declare const EmployeeSchema: z.ZodObject<{
-	id: z.ZodInt;
-	email: z.ZodString;
-	fullName: z.ZodString;
-	status: z.ZodEnum<{
-		active: "active";
-		inactive: "inactive";
-		suspended: "suspended";
-	}>;
-	lastLoginAt: z.ZodNullable<z.ZodDate>;
-	updatedAt: z.ZodDate;
-	createdAt: z.ZodDate;
-	roles: z.ZodArray<z.ZodObject<{
-		id: z.ZodInt;
-		name: z.ZodString;
-		code: z.ZodString;
-	}, {
-		out: {};
-		in: {};
-	}>>;
-}, {
-	out: {};
-	in: {};
-}>;
-export type Employee = z.infer<typeof EmployeeSchema>;
-declare const EmployeeListResultSchema: z.ZodObject<{
-	items: z.ZodArray<z.ZodObject<{
-		id: z.ZodInt;
-		email: z.ZodString;
-		fullName: z.ZodString;
-		status: z.ZodEnum<{
-			active: "active";
-			inactive: "inactive";
-			suspended: "suspended";
-		}>;
-		lastLoginAt: z.ZodNullable<z.ZodDate>;
-		updatedAt: z.ZodDate;
-		createdAt: z.ZodDate;
-		roles: z.ZodArray<z.ZodObject<{
-			id: z.ZodInt;
-			name: z.ZodString;
-			code: z.ZodString;
-		}, {
-			out: {};
-			in: {};
-		}>>;
-	}, {
-		out: {};
-		in: {};
-	}>>;
-	meta: z.ZodObject<{
-		page: z.ZodNumber;
-		limit: z.ZodNumber;
-		total: z.ZodNumber;
-		totalPages: z.ZodNumber;
-	}, z.core.$strip>;
-}, z.core.$strip>;
-export type EmployeeListResult = z.infer<typeof EmployeeListResultSchema>;
-declare const EmployeesQuerySchema: z.ZodObject<{
-	page: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
-	limit: z.ZodDefault<z.ZodCoercedNumber<unknown> & z.ZodType<100 | 10 | 20 | 50, unknown, z.core.$ZodTypeInternals<100 | 10 | 20 | 50, unknown>>>;
-	sort: z.ZodOptional<z.ZodString>;
-	status: z.ZodOptional<z.ZodArray<z.ZodEnum<{
-		active: "active";
-		inactive: "inactive";
-		suspended: "suspended";
-	}>>>;
-	role: z.ZodOptional<z.ZodArray<z.ZodString>>;
-	search: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
-export type EmployeesQuery = z.infer<typeof EmployeesQuerySchema>;
-declare const EmployeesTableMetadataSchema: z.ZodObject<{
-	filters: z.ZodObject<{
-		statuses: z.ZodArray<z.ZodObject<{
-			label: z.ZodString;
-			value: z.ZodString;
-		}, z.core.$strip>>;
-		roles: z.ZodArray<z.ZodObject<{
-			label: z.ZodString;
-			value: z.ZodString;
-		}, z.core.$strip>>;
-	}, z.core.$strip>;
-	sorting: z.ZodObject<{
-		fields: z.ZodArray<z.ZodObject<{
-			label: z.ZodString;
-			value: z.ZodString;
-		}, z.core.$strip>>;
-		default: z.ZodObject<{
-			field: z.ZodString;
-			direction: z.ZodEnum<{
-				asc: "asc";
-				desc: "desc";
-			}>;
-		}, z.core.$strip>;
-	}, z.core.$strip>;
-	pagination: z.ZodObject<{
-		defaultLimit: z.ZodNumber;
-		availableLimits: z.ZodArray<z.ZodNumber>;
-	}, z.core.$strip>;
-}, z.core.$strip>;
-export type EmployeesTableMetadata = z.infer<typeof EmployeesTableMetadataSchema>;
-export type EmployeesListRequest = EmployeesQuery;
-export type EmployeesListResponse = SerializeDates<EmployeeListResult>;
-export type EmployeesTableMetadataResponse = EmployeesTableMetadata;
-
-export {};

package/types.js

@@ -1 +0,0 @@
-export {};