@esb-market-contracts/admin-backend 1.4.8 → 1.4.10

package/api.d.ts

@@ -17,28 +17,28 @@ declare const authRouter: import("hono/hono-base").HonoBase<{}, {
 		};
 	};
 } & {
-	"/iam/authentication/update": {
+	"/iam/authentication/logout": {
 		$post: {
 			input: {};
 			output: import("@kalutskii/foundation").APIError | import("@kalutskii/foundation").APISuccess<{
-				accessToken: string;
+				[x: string]: never;
 			}>;
 			outputFormat: "json";
 			status: 200;
 		};
 	};
 } & {
-	"/iam/authentication/logout": {
+	"/iam/authentication/refresh": {
 		$post: {
 			input: {};
 			output: import("@kalutskii/foundation").APIError | import("@kalutskii/foundation").APISuccess<{
-				[x: string]: never;
+				accessToken: string;
 			}>;
 			outputFormat: "json";
 			status: 200;
 		};
 	};
-}, "/iam/authentication", "/iam/authentication/logout">;
+}, "/iam/authentication", "/iam/authentication/refresh">;
 export type AuthRouter = typeof authRouter;
 
 export {};

package/enums.d.ts

@@ -1,15 +1,15 @@
 // Generated by dts-bundle-generator v9.5.1
 
-declare const PBACPermissionItems: readonly [
+declare const pbacPermissionsArray: readonly [
 	"employee.create",
 	"employee.read",
 	"employee.update"
 ];
-export declare const PBACPermissions: {
+export declare const pbacPermissions: {
 	"EMPLOYEE.CREATE": "employee.create";
 	"EMPLOYEE.READ": "employee.read";
 	"EMPLOYEE.UPDATE": "employee.update";
 };
-export type PBACPermission = (typeof PBACPermissionItems)[number];
+export type PBACPermission = (typeof pbacPermissionsArray)[number];
 
 export {};

package/enums.js

@@ -4,8 +4,8 @@ function createStringEnumRecord(values) {
 }
 
 // src/app/domain/(iam)/employees-permissions/employees-permissions.enums.ts
-var PBACPermissionItems = ["employee.create", "employee.read", "employee.update"];
-var PBACPermissions = createStringEnumRecord(PBACPermissionItems);
+var pbacPermissionsArray = ["employee.create", "employee.read", "employee.update"];
+var pbacPermissions = createStringEnumRecord(pbacPermissionsArray);
 export {
-  PBACPermissions
+  pbacPermissions
 };

package/index.d.ts

@@ -1,5 +1,4 @@
 export type * from './api';
 export type * from './enums';
-export type * from './schemas';
-export * from './enums';
-export * from './schemas';
+export type * from './types';
+export * from './enums';

package/index.js

@@ -1,2 +1 @@
-export * from './enums.js';
-export * from './schemas.js';
+export * from './enums.js';

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@esb-market-contracts/admin-backend",
   "description": "Shared TypeScript contract definitions for admin-backend.",
-  "version": "1.4.8",
+  "version": "1.4.10",
   "private": false,
   "type": "module",
   "sideEffects": false,
@@ -12,8 +12,8 @@
     "api.js",
     "enums.d.ts",
     "enums.js",
-    "schemas.d.ts",
-    "schemas.js"
+    "types.d.ts",
+    "types.js"
   ],
   "exports": {
     ".": {
@@ -28,9 +28,9 @@
       "types": "./enums.d.ts",
       "default": "./enums.js"
     },
-    "./schemas": {
-      "types": "./schemas.d.ts",
-      "default": "./schemas.js"
+    "./types": {
+      "types": "./types.d.ts",
+      "default": "./types.js"
     }
   },
   "types": "./index.d.ts"

package/{schemas.d.ts → types.d.ts}

@@ -6,8 +6,7 @@ declare const authorizeRequestSchema: z.ZodObject<{
 	email: z.ZodEmail;
 	password: z.ZodString;
 }, z.core.$strip>;
-/** Schema for the payload of an access token. */
-export declare const accessTokenPayloadSchema: z.ZodObject<{
+declare const accessTokenPayloadSchema: z.ZodObject<{
 	employee: z.ZodObject<{
 		id: z.ZodInt;
 		email: z.ZodString;

package/types.js

@@ -0,0 +1 @@
+export {};

package/schemas.js

@@ -1,243 +0,0 @@
-// src/app/flows/authentication/authentication.schemas.ts
-import { z as z5 } from "zod";
-
-// src/app/domain/(iam)/employees/employees.audit.ts
-import { z } from "zod";
-var employeesAuditEvents = {
-  "employee.created": z.object({ targetEmployeeId: z.number() }),
-  "employee.suspended": z.object({ targetEmployeeId: z.number() }),
-  "employee.activated": z.object({ targetEmployeeId: z.number() }),
-  "employee.passwordReset": z.object({ targetEmployeeId: z.number() })
-};
-
-// src/app/domain/(iam)/employees/employees.drizzle.ts
-import { sql } from "drizzle-orm";
-import { check, pgTable, serial, text, timestamp } from "drizzle-orm/pg-core";
-
-// src/app/domain/(iam)/employees/employees.enums.ts
-import { pgEnum } from "drizzle-orm/pg-core";
-
-// src/utilities/enums.utilities.ts
-function createStringEnumRecord(values) {
-  return Object.fromEntries(values.map((value) => [value.toUpperCase(), value]));
-}
-
-// src/app/domain/(iam)/employees/employees.enums.ts
-var employeeStatuses = ["active", "suspended"];
-var employeeStatusesRecord = createStringEnumRecord(employeeStatuses);
-var employeeStatusPGEnum = pgEnum("employee_status", employeeStatuses);
-
-// src/app/domain/(iam)/employees/employees.drizzle.ts
-var employeesTable = pgTable("employees", {
-  id: serial("id").primaryKey(),
-  email: text("email").notNull().unique(),
-  fullName: text("full_name").notNull(),
-  status: employeeStatusPGEnum("status").notNull().default("active"),
-  passwordDigest: text("password_digest").notNull(),
-  updatedAt: timestamp("updated_at").$onUpdateFn(() => /* @__PURE__ */ new Date()),
-  createdAt: timestamp("created_at").notNull().defaultNow()
-}, (table) => [
-  // Database-level email field format validation using a regex pattern.
-  check("employees_email_check", sql`${table.email} ~* '^[A-Z0-9._%+-]+@[A-Z0-9.-]+\\.[A-Z]{2,}$'`)
-]);
-
-// src/drizzle/drizzle.database.ts
-import { drizzle } from "drizzle-orm/postgres-js";
-
-// src/app/domain/(iam)/audit-logs/audit-logs.relations.ts
-import { defineRelationsPart } from "drizzle-orm";
-
-// src/app/domain/(iam)/audit-logs/audit-logs.drizzle.ts
-import { sql as sql2 } from "drizzle-orm";
-import { check as check2, index, integer, jsonb, pgTable as pgTable2, serial as serial2, text as text2, timestamp as timestamp2 } from "drizzle-orm/pg-core";
-var auditLogsTable = pgTable2("audit_logs", {
-  id: serial2("id").primaryKey(),
-  actorEmployeeId: integer("actor_employee_id").references(() => employeesTable.id, {
-    onDelete: "set null"
-  }),
-  event: text2("event").notNull().$type(),
-  payload: jsonb("payload"),
-  createdAt: timestamp2("created_at").notNull().defaultNow()
-}, (table) => [
-  // Ensure event is not empty and payload is a valid JSON object.
-  check2("audit_event_check", sql2`${table.event} != ''`),
-  check2("audit_payload_check", sql2`jsonb_typeof(${table.payload}) = 'object'`),
-  // Indexes for efficient querying by employeeId and event type.
-  index("audit_logs_actor_employee_id_idx").on(table.actorEmployeeId),
-  index("audit_logs_event_idx").on(table.event),
-  index("audit_logs_created_at_idx").on(table.createdAt)
-]);
-
-// src/app/domain/(iam)/audit-logs/audit-logs.relations.ts
-var auditLogsRelationsPart = defineRelationsPart({ auditLogsTable, employeesTable }, (r) => ({
-  auditLogsTable: {
-    employee: r.one.employeesTable({
-      from: r.auditLogsTable.actorEmployeeId,
-      to: r.employeesTable.id
-    })
-  }
-}));
-
-// src/app/domain/(iam)/employees-permissions/employees-permissions.relations.ts
-import { defineRelationsPart as defineRelationsPart2 } from "drizzle-orm";
-
-// src/app/domain/(iam)/employees-permissions/employees-permissions.drizzle.ts
-import { integer as integer2, pgTable as pgTable3, serial as serial3, text as text3, unique } from "drizzle-orm/pg-core";
-var employeesPermissionsTable = pgTable3("employees_permissions", {
-  id: serial3("id").primaryKey(),
-  permission: text3("permission").notNull().$type(),
-  employeeId: integer2("employee_id").notNull().references(() => employeesTable.id, { onDelete: "cascade" })
-}, (table) => [
-  // Unique constraint on (employeeId, permission) to prevent duplicate permissions for the same employee.
-  unique("employees_permissions_employee_id_permission_unique").on(table.employeeId, table.permission)
-]);
-
-// src/app/domain/(iam)/employees-permissions/employees-permissions.relations.ts
-var employeesPermissionsRelationsPart = defineRelationsPart2({ employeesPermissionsTable, employeesTable }, (r) => ({
-  employeesPermissionsTable: {
-    employee: r.one.employeesTable({
-      from: r.employeesPermissionsTable.employeeId,
-      to: r.employeesTable.id
-    })
-  }
-}));
-
-// src/app/domain/(iam)/employees/employees.relations.ts
-import { defineRelationsPart as defineRelationsPart3 } from "drizzle-orm";
-
-// src/app/domain/(iam)/employees-permissions/employees-permissions.audit.ts
-import { z as z2 } from "zod";
-
-// src/app/domain/(iam)/employees-permissions/employees-permissions.enums.ts
-var PBACPermissionItems = ["employee.create", "employee.read", "employee.update"];
-var PBACPermissions = createStringEnumRecord(PBACPermissionItems);
-
-// src/app/domain/(iam)/employees-permissions/employees-permissions.audit.ts
-var employeesPermissionsAuditEvents = {
-  "permissions.updated": z2.object({
-    targetEmployeeId: z2.number(),
-    newPermissions: z2.array(z2.enum(PBACPermissionItems))
-  })
-};
-
-// src/app/domain/(iam)/sessions/sessions.audit.ts
-import { z as z3 } from "zod";
-var sessionsAuditEvents = {
-  "session.created": z3.object({ userAgent: z3.string().optional() }),
-  "session.revoked": z3.object({
-    targetSessionId: z3.number(),
-    actorEmployeeId: z3.number().optional()
-    // Required only if the actor is not the owner of the session.
-  })
-};
-
-// src/app/domain/(iam)/sessions/sessions.drizzle.ts
-import { index as index2, integer as integer3, pgTable as pgTable4, serial as serial4, text as text4, timestamp as timestamp3 } from "drizzle-orm/pg-core";
-var sessionsTable = pgTable4("sessions", {
-  id: serial4("id").primaryKey(),
-  refreshTokenDigest: text4("refresh_token_digest").notNull().unique(),
-  employeeId: integer3("employee_id").notNull().references(() => employeesTable.id, { onDelete: "cascade" }),
-  createdAt: timestamp3("created_at").notNull().defaultNow(),
-  expiresAt: timestamp3("expires_at").notNull(),
-  revokedAt: timestamp3("revoked_at")
-}, (table) => [
-  // Indexes for efficient querying by employeeId and expiration time.
-  index2("sessions_employee_id_idx").on(table.employeeId),
-  index2("sessions_expires_at_idx").on(table.expiresAt)
-]);
-
-// src/app/domain/(iam)/sessions/sessions.schemas.ts
-import { createInsertSchema, createSelectSchema } from "drizzle-orm/zod";
-var sessionSchema = createSelectSchema(sessionsTable);
-var sessionInsertSchema = createInsertSchema(sessionsTable);
-
-// src/app/domain/(iam)/sessions/sessions.repository.ts
-import { eq } from "drizzle-orm";
-
-// src/app/domain/(iam)/audit-logs/audit-logs.registry.ts
-var auditEventsRegistry = {
-  ...employeesPermissionsAuditEvents,
-  ...employeesAuditEvents,
-  ...sessionsAuditEvents
-};
-
-// src/app/domain/(iam)/employees/employees.relations.ts
-var employeesRelationsPart = defineRelationsPart3({ employeesTable, employeesPermissionsTable, auditLogsTable, sessionsTable }, (r) => ({
-  employeesTable: {
-    sessions: r.many.sessionsTable({
-      from: r.employeesTable.id,
-      to: r.sessionsTable.employeeId
-    }),
-    auditLogs: r.many.auditLogsTable({
-      from: r.employeesTable.id,
-      to: r.auditLogsTable.actorEmployeeId
-    }),
-    permissions: r.many.employeesPermissionsTable({
-      from: r.employeesTable.id,
-      to: r.employeesPermissionsTable.employeeId
-    })
-  }
-}));
-
-// src/app/domain/(iam)/sessions/sessions.relations.ts
-import { defineRelationsPart as defineRelationsPart4 } from "drizzle-orm";
-var sessionsRelationsPart = defineRelationsPart4({ sessionsTable, employeesTable }, (r) => ({
-  sessionsTable: {
-    employee: r.one.employeesTable({
-      from: r.sessionsTable.employeeId,
-      to: r.employeesTable.id
-    })
-  }
-}));
-
-// src/app/domain/domain.registry.ts
-var domainRelationsRegistry = {
-  ...auditLogsRelationsPart,
-  ...employeesRelationsPart,
-  ...employeesPermissionsRelationsPart,
-  ...sessionsRelationsPart
-};
-
-// src/internal/env.config.ts
-import { createEnv } from "@t3-oss/env-core";
-import { z as z4 } from "zod";
-var env = createEnv({
-  server: {
-    // Database settings for Drizzle ORM
-    DRIZZLE_DB_URL: z4.url().min(8).max(256),
-    DRIZZLE_MIGRATIONS_FOLDER: z4.string().min(1).max(256),
-    // Bun server settings
-    BUN_SERVER_PORT: z4.coerce.number().int().positive().min(1).max(65535),
-    BUN_SERVER_HOST: z4.string().min(1).max(64).optional().default("0.0.0.0"),
-    // Ecosystem variables
-    ESB_MARKET_SPACE_JWT_SECRET: z4.string().min(16).max(256),
-    // Peripheral settings, usually not required in the environment
-    DEFAULT_TIMEZONE: z4.string().min(4).max(256).optional().default("Asia/Tbilisi"),
-    NODE_ENV: z4.enum(["development", "production", "test"]).optional().default("development")
-  },
-  runtimeEnv: process.env,
-  emptyStringAsUndefined: true
-});
-
-// src/drizzle/drizzle.database.ts
-var db = drizzle(env.DRIZZLE_DB_URL, { relations: domainRelationsRegistry });
-
-// src/app/domain/(iam)/employees/employees.schemas.ts
-import { createSelectSchema as createSelectSchema2 } from "drizzle-orm/zod";
-var employeeSchema = createSelectSchema2(employeesTable);
-
-// src/app/domain/(iam)/employees/employees.exceptions.ts
-import { HTTPException } from "hono/http-exception";
-
-// src/app/flows/authentication/authentication.schemas.ts
-var authorizeRequestSchema = z5.object({
-  email: z5.email().min(8).max(128),
-  password: z5.string().min(8).max(128)
-});
-var accessTokenPayloadSchema = z5.object({
-  employee: employeeSchema.pick({ id: true, email: true, fullName: true }),
-  permissions: z5.array(z5.enum(PBACPermissionItems))
-});
-export {
-  accessTokenPayloadSchema
-};