@etohq/rbac 1.5.1-alpha.4

package/LICENSE

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2021 Etohq
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/index.d.ts

@@ -0,0 +1,63 @@
+import { RbacModuleService } from "./services";
+declare const _default: import("@etohq/types").ModuleExports<typeof RbacModuleService> & {
+    linkable: {
+        readonly rbacRole: {
+            id: {
+                serviceName: "rbac";
+                field: "rbacRole";
+                linkable: "rbac_role_id";
+                primaryKey: "id";
+            };
+            toJSON: () => {
+                serviceName: "rbac";
+                field: "rbacRole";
+                linkable: "rbac_role_id";
+                primaryKey: "id";
+            };
+        };
+        readonly rbacPolicy: {
+            id: {
+                serviceName: "rbac";
+                field: "rbacPolicy";
+                linkable: "rbac_policy_id";
+                primaryKey: "id";
+            };
+            toJSON: () => {
+                serviceName: "rbac";
+                field: "rbacPolicy";
+                linkable: "rbac_policy_id";
+                primaryKey: "id";
+            };
+        };
+        readonly rbacRoleParent: {
+            id: {
+                serviceName: "rbac";
+                field: "rbacRoleParent";
+                linkable: "rbac_role_parent_id";
+                primaryKey: "id";
+            };
+            toJSON: () => {
+                serviceName: "rbac";
+                field: "rbacRoleParent";
+                linkable: "rbac_role_parent_id";
+                primaryKey: "id";
+            };
+        };
+        readonly rbacRolePolicy: {
+            id: {
+                serviceName: "rbac";
+                field: "rbacRolePolicy";
+                linkable: "rbac_role_policy_id";
+                primaryKey: "id";
+            };
+            toJSON: () => {
+                serviceName: "rbac";
+                field: "rbacRolePolicy";
+                linkable: "rbac_role_policy_id";
+                primaryKey: "id";
+            };
+        };
+    };
+};
+export default _default;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAG7C,wBAGE"}

package/dist/index.js

@@ -0,0 +1,13 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const utils_1 = require("@etohq/framework/utils");
+const _services_1 = require("./services");
+const initial_data_1 = __importDefault(require("./loaders/initial-data"));
+exports.default = (0, utils_1.Module)(utils_1.Modules.RBAC, {
+    service: _services_1.RbacModuleService,
+    loaders: [initial_data_1.default],
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;AAAA,kDAAwD;AACxD,yCAA6C;AAC7C,0EAAsD;AAEtD,kBAAe,IAAA,cAAM,EAAC,eAAO,CAAC,IAAI,EAAE;IAClC,OAAO,EAAE,6BAAiB;IAC1B,OAAO,EAAE,CAAC,sBAAiB,CAAC;CAC7B,CAAC,CAAA"}

package/dist/loaders/initial-data.d.ts

@@ -0,0 +1,4 @@
+import { LoaderOptions, ModulesSdkTypes } from "@etohq/framework/types";
+declare const _default: ({ container, options, }: LoaderOptions<ModulesSdkTypes.ModuleServiceInitializeOptions | ModulesSdkTypes.ModuleServiceInitializeCustomDataLayerOptions>) => Promise<void>;
+export default _default;
+//# sourceMappingURL=initial-data.d.ts.map

package/dist/loaders/initial-data.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"initial-data.d.ts","sourceRoot":"","sources":["../../src/loaders/initial-data.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,aAAa,EACb,eAAe,EAChB,MAAM,wBAAwB,CAAA;yBAGT,yBAGnB,aAAa,CACZ,eAAe,CAAC,8BAA8B,GAC9C,eAAe,CAAC,6CAA6C,CAChE,KAAG,OAAO,CAAC,IAAI,CAAC;AANjB,wBA8CC"}

package/dist/loaders/initial-data.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = async ({ container, options, }) => {
+    const rbacRoleService = container.resolve("rbacRoleService");
+    const rbacPolicyService = container.resolve("rbacPolicyService");
+    const rbacRolePolicyService = container.resolve("rbacRolePolicyService");
+    // Create super admin role
+    const role = await rbacRoleService.upsert({
+        id: "role_super_admin",
+        name: "Super Admin",
+        description: "Super admin role with full access to all resources and operations",
+    });
+    const policy = await rbacPolicyService.upsert({
+        id: "rpol_super_admin",
+        key: "*:*",
+        resource: "*",
+        operation: "*",
+        name: "Super Admin",
+        description: "Super admin policy with full access to all resources and operations",
+    });
+    await rbacRolePolicyService.upsert({
+        id: "rlpl_super_admin",
+        role_id: role.id,
+        policy_id: policy.id,
+    });
+};
+//# sourceMappingURL=initial-data.js.map

package/dist/loaders/initial-data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"initial-data.js","sourceRoot":"","sources":["../../src/loaders/initial-data.ts"],"names":[],"mappings":";;AAOA,kBAAe,KAAK,EAAE,EACpB,SAAS,EACT,OAAO,GAIR,EAAiB,EAAE;IAClB,MAAM,eAAe,GAAG,SAAS,CAAC,OAAO,CACvC,iBAAiB,CACuD,CAAA;IAE1E,MAAM,iBAAiB,GAAG,SAAS,CAAC,OAAO,CACzC,mBAAmB,CAGpB,CAAA;IAED,MAAM,qBAAqB,GAAG,SAAS,CAAC,OAAO,CAC7C,uBAAuB,CAGxB,CAAA;IAED,0BAA0B;IAC1B,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC;QACxC,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,aAAa;QACnB,WAAW,EACT,mEAAmE;KACtE,CAAC,CAAA;IAEF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC;QAC5C,EAAE,EAAE,kBAAkB;QACtB,GAAG,EAAE,KAAK;QACV,QAAQ,EAAE,GAAG;QACb,SAAS,EAAE,GAAG;QACd,IAAI,EAAE,aAAa;QACnB,WAAW,EACT,qEAAqE;KACxE,CAAC,CAAA;IAEF,MAAM,qBAAqB,CAAC,MAAM,CAAC;QACjC,EAAE,EAAE,kBAAkB;QACtB,OAAO,EAAE,IAAI,CAAC,EAAE;QAChB,SAAS,EAAE,MAAM,CAAC,EAAE;KACrB,CAAC,CAAA;AACJ,CAAC,CAAA"}

package/dist/migrations/Migration20251219163509.d.ts

@@ -0,0 +1,5 @@
+import { Migration } from "@mikro-orm/migrations";
+export declare class Migration20251219163509 extends Migration {
+    up(): Promise<void>;
+}
+//# sourceMappingURL=Migration20251219163509.d.ts.map

package/dist/migrations/Migration20251219163509.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Migration20251219163509.d.ts","sourceRoot":"","sources":["../../src/migrations/Migration20251219163509.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAEjD,qBAAa,uBAAwB,SAAQ,SAAS;IAC9C,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC;CAiC1B"}

package/dist/migrations/Migration20251219163509.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Migration20251219163509 = void 0;
+const migrations_1 = require("@mikro-orm/migrations");
+class Migration20251219163509 extends migrations_1.Migration {
+    async up() {
+        this.addSql(`alter table if exists "rbac_role_policy" drop constraint if exists "rbac_role_policy_role_id_policy_id_unique";`);
+        this.addSql(`alter table if exists "rbac_role_parent" drop constraint if exists "rbac_role_parent_role_id_parent_id_unique";`);
+        this.addSql(`alter table if exists "rbac_role" drop constraint if exists "rbac_role_name_unique";`);
+        this.addSql(`alter table if exists "rbac_policy" drop constraint if exists "rbac_policy_key_unique";`);
+        this.addSql(`create table if not exists "rbac_policy" ("id" text not null, "key" text not null, "resource" text not null, "operation" text not null, "name" text null, "description" text null, "metadata" jsonb null, "created_at" timestamptz not null default now(), "updated_at" timestamptz not null default now(), "deleted_at" timestamptz null, constraint "rbac_policy_pkey" primary key ("id"));`);
+        this.addSql(`CREATE INDEX IF NOT EXISTS "IDX_rbac_policy_deleted_at" ON "rbac_policy" ("deleted_at") WHERE deleted_at IS NULL;`);
+        this.addSql(`CREATE UNIQUE INDEX IF NOT EXISTS "IDX_rbac_policy_key_unique" ON "rbac_policy" ("key") WHERE deleted_at IS NULL;`);
+        this.addSql(`CREATE INDEX IF NOT EXISTS "IDX_rbac_policy_resource" ON "rbac_policy" ("resource") WHERE deleted_at IS NULL;`);
+        this.addSql(`CREATE INDEX IF NOT EXISTS "IDX_rbac_policy_operation" ON "rbac_policy" ("operation") WHERE deleted_at IS NULL;`);
+        this.addSql(`create table if not exists "rbac_role" ("id" text not null, "name" text not null, "description" text null, "metadata" jsonb null, "created_at" timestamptz not null default now(), "updated_at" timestamptz not null default now(), "deleted_at" timestamptz null, constraint "rbac_role_pkey" primary key ("id"));`);
+        this.addSql(`CREATE INDEX IF NOT EXISTS "IDX_rbac_role_deleted_at" ON "rbac_role" ("deleted_at") WHERE deleted_at IS NULL;`);
+        this.addSql(`CREATE UNIQUE INDEX IF NOT EXISTS "IDX_rbac_role_name_unique" ON "rbac_role" ("name") WHERE deleted_at IS NULL;`);
+        this.addSql(`create table if not exists "rbac_role_parent" ("id" text not null, "role_id" text not null, "parent_id" text not null, "metadata" jsonb null, "created_at" timestamptz not null default now(), "updated_at" timestamptz not null default now(), "deleted_at" timestamptz null, constraint "rbac_role_parent_pkey" primary key ("id"));`);
+        this.addSql(`CREATE INDEX IF NOT EXISTS "IDX_rbac_role_parent_role_id" ON "rbac_role_parent" ("role_id") WHERE deleted_at IS NULL;`);
+        this.addSql(`CREATE INDEX IF NOT EXISTS "IDX_rbac_role_parent_parent_id" ON "rbac_role_parent" ("parent_id") WHERE deleted_at IS NULL;`);
+        this.addSql(`CREATE INDEX IF NOT EXISTS "IDX_rbac_role_parent_deleted_at" ON "rbac_role_parent" ("deleted_at") WHERE deleted_at IS NULL;`);
+        this.addSql(`CREATE UNIQUE INDEX IF NOT EXISTS "IDX_rbac_role_parent_role_id_parent_id_unique" ON "rbac_role_parent" ("role_id", "parent_id") WHERE deleted_at IS NULL;`);
+        this.addSql(`create table if not exists "rbac_role_policy" ("id" text not null, "role_id" text not null, "policy_id" text not null, "metadata" jsonb null, "created_at" timestamptz not null default now(), "updated_at" timestamptz not null default now(), "deleted_at" timestamptz null, constraint "rbac_role_policy_pkey" primary key ("id"));`);
+        this.addSql(`CREATE INDEX IF NOT EXISTS "IDX_rbac_role_policy_role_id" ON "rbac_role_policy" ("role_id") WHERE deleted_at IS NULL;`);
+        this.addSql(`CREATE INDEX IF NOT EXISTS "IDX_rbac_role_policy_policy_id" ON "rbac_role_policy" ("policy_id") WHERE deleted_at IS NULL;`);
+        this.addSql(`CREATE INDEX IF NOT EXISTS "IDX_rbac_role_policy_deleted_at" ON "rbac_role_policy" ("deleted_at") WHERE deleted_at IS NULL;`);
+        this.addSql(`CREATE UNIQUE INDEX IF NOT EXISTS "IDX_rbac_role_policy_role_id_policy_id_unique" ON "rbac_role_policy" ("role_id", "policy_id") WHERE deleted_at IS NULL;`);
+        this.addSql(`alter table if exists "rbac_role_parent" add constraint "rbac_role_parent_role_id_foreign" foreign key ("role_id") references "rbac_role" ("id") on update cascade;`);
+        this.addSql(`alter table if exists "rbac_role_parent" add constraint "rbac_role_parent_parent_id_foreign" foreign key ("parent_id") references "rbac_role" ("id") on update cascade;`);
+        this.addSql(`alter table if exists "rbac_role_policy" add constraint "rbac_role_policy_role_id_foreign" foreign key ("role_id") references "rbac_role" ("id") on update cascade;`);
+        this.addSql(`alter table if exists "rbac_role_policy" add constraint "rbac_role_policy_policy_id_foreign" foreign key ("policy_id") references "rbac_policy" ("id") on update cascade;`);
+    }
+}
+exports.Migration20251219163509 = Migration20251219163509;
+//# sourceMappingURL=Migration20251219163509.js.map

package/dist/migrations/Migration20251219163509.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Migration20251219163509.js","sourceRoot":"","sources":["../../src/migrations/Migration20251219163509.ts"],"names":[],"mappings":";;;AAAA,sDAAiD;AAEjD,MAAa,uBAAwB,SAAQ,sBAAS;IACpD,KAAK,CAAC,EAAE;QACN,IAAI,CAAC,MAAM,CAAC,iHAAiH,CAAC,CAAA;QAC9H,IAAI,CAAC,MAAM,CAAC,iHAAiH,CAAC,CAAA;QAC9H,IAAI,CAAC,MAAM,CAAC,sFAAsF,CAAC,CAAA;QACnG,IAAI,CAAC,MAAM,CAAC,yFAAyF,CAAC,CAAA;QACtG,IAAI,CAAC,MAAM,CAAC,+XAA+X,CAAC,CAAA;QAC5Y,IAAI,CAAC,MAAM,CAAC,mHAAmH,CAAC,CAAA;QAChI,IAAI,CAAC,MAAM,CAAC,mHAAmH,CAAC,CAAA;QAChI,IAAI,CAAC,MAAM,CAAC,+GAA+G,CAAC,CAAA;QAC5H,IAAI,CAAC,MAAM,CAAC,iHAAiH,CAAC,CAAA;QAE9H,IAAI,CAAC,MAAM,CAAC,qTAAqT,CAAC,CAAA;QAClU,IAAI,CAAC,MAAM,CAAC,+GAA+G,CAAC,CAAA;QAC5H,IAAI,CAAC,MAAM,CAAC,iHAAiH,CAAC,CAAA;QAE9H,IAAI,CAAC,MAAM,CAAC,wUAAwU,CAAC,CAAA;QACrV,IAAI,CAAC,MAAM,CAAC,uHAAuH,CAAC,CAAA;QACpI,IAAI,CAAC,MAAM,CAAC,2HAA2H,CAAC,CAAA;QACxI,IAAI,CAAC,MAAM,CAAC,6HAA6H,CAAC,CAAA;QAC1I,IAAI,CAAC,MAAM,CAAC,4JAA4J,CAAC,CAAA;QAEzK,IAAI,CAAC,MAAM,CAAC,wUAAwU,CAAC,CAAA;QACrV,IAAI,CAAC,MAAM,CAAC,uHAAuH,CAAC,CAAA;QACpI,IAAI,CAAC,MAAM,CAAC,2HAA2H,CAAC,CAAA;QACxI,IAAI,CAAC,MAAM,CAAC,6HAA6H,CAAC,CAAA;QAC1I,IAAI,CAAC,MAAM,CAAC,4JAA4J,CAAC,CAAA;QAEzK,IAAI,CAAC,MAAM,CAAC,qKAAqK,CAAC,CAAA;QAClL,IAAI,CAAC,MAAM,CAAC,yKAAyK,CAAC,CAAA;QAEtL,IAAI,CAAC,MAAM,CAAC,qKAAqK,CAAC,CAAA;QAClL,IAAI,CAAC,MAAM,CAAC,2KAA2K,CAAC,CAAA;IAC1L,CAAC;CACF;AAlCD,0DAkCC"}

package/dist/models/index.d.ts

@@ -0,0 +1,5 @@
+export { default as RbacPolicy } from "./rbac-policy";
+export { default as RbacRole } from "./rbac-role";
+export { default as RbacRoleParent } from "./rbac-role-parent";
+export { default as RbacRolePolicy } from "./rbac-role-policy";
+//# sourceMappingURL=index.d.ts.map

package/dist/models/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/models/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,eAAe,CAAA;AACrD,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,oBAAoB,CAAA"}

package/dist/models/index.js

@@ -0,0 +1,15 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RbacRolePolicy = exports.RbacRoleParent = exports.RbacRole = exports.RbacPolicy = void 0;
+var rbac_policy_1 = require("./rbac-policy");
+Object.defineProperty(exports, "RbacPolicy", { enumerable: true, get: function () { return __importDefault(rbac_policy_1).default; } });
+var rbac_role_1 = require("./rbac-role");
+Object.defineProperty(exports, "RbacRole", { enumerable: true, get: function () { return __importDefault(rbac_role_1).default; } });
+var rbac_role_parent_1 = require("./rbac-role-parent");
+Object.defineProperty(exports, "RbacRoleParent", { enumerable: true, get: function () { return __importDefault(rbac_role_parent_1).default; } });
+var rbac_role_policy_1 = require("./rbac-role-policy");
+Object.defineProperty(exports, "RbacRolePolicy", { enumerable: true, get: function () { return __importDefault(rbac_role_policy_1).default; } });
+//# sourceMappingURL=index.js.map

package/dist/models/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/models/index.ts"],"names":[],"mappings":";;;;;;AAAA,6CAAqD;AAA5C,0HAAA,OAAO,OAAc;AAC9B,yCAAiD;AAAxC,sHAAA,OAAO,OAAY;AAC5B,uDAA8D;AAArD,mIAAA,OAAO,OAAkB;AAClC,uDAA8D;AAArD,mIAAA,OAAO,OAAkB"}

package/dist/models/rbac-policy.d.ts

@@ -0,0 +1,11 @@
+declare const RbacPolicy: import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder<{
+    id: import("@etohq/framework/utils").PrimaryKeyModifier<string, import("@etohq/framework/utils").IdProperty>;
+    key: import("@etohq/framework/utils").TextProperty;
+    resource: import("@etohq/framework/utils").TextProperty;
+    operation: import("@etohq/framework/utils").TextProperty;
+    name: import("@etohq/framework/utils").NullableModifier<string, import("@etohq/framework/utils").TextProperty>;
+    description: import("@etohq/framework/utils").NullableModifier<string, import("@etohq/framework/utils").TextProperty>;
+    metadata: import("@etohq/framework/utils").NullableModifier<Record<string, unknown>, import("@etohq/framework/utils").JSONProperty>;
+}>, "rbac_policy">;
+export default RbacPolicy;
+//# sourceMappingURL=rbac-policy.d.ts.map

package/dist/models/rbac-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac-policy.d.ts","sourceRoot":"","sources":["../../src/models/rbac-policy.ts"],"names":[],"mappings":"AAEA,QAAA,MAAM,UAAU;;;;;;;;kBAwBZ,CAAA;AAEJ,eAAe,UAAU,CAAA"}

package/dist/models/rbac-policy.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const utils_1 = require("@etohq/framework/utils");
+const RbacPolicy = utils_1.model
+    .define("rbac_policy", {
+    id: utils_1.model.id({ prefix: "rpol" }).primaryKey(),
+    key: utils_1.model.text().searchable(),
+    resource: utils_1.model.text().searchable(),
+    operation: utils_1.model.text().searchable(),
+    name: utils_1.model.text().searchable().nullable(),
+    description: utils_1.model.text().nullable(),
+    metadata: utils_1.model.json().nullable(),
+})
+    .indexes([
+    {
+        on: ["key"],
+        unique: true,
+        where: "deleted_at IS NULL",
+    },
+    {
+        on: ["resource"],
+        where: "deleted_at IS NULL",
+    },
+    {
+        on: ["operation"],
+        where: "deleted_at IS NULL",
+    },
+]);
+exports.default = RbacPolicy;
+//# sourceMappingURL=rbac-policy.js.map

package/dist/models/rbac-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac-policy.js","sourceRoot":"","sources":["../../src/models/rbac-policy.ts"],"names":[],"mappings":";;AAAA,kDAA8C;AAE9C,MAAM,UAAU,GAAG,aAAK;KACrB,MAAM,CAAC,aAAa,EAAE;IACrB,EAAE,EAAE,aAAK,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE;IAC7C,GAAG,EAAE,aAAK,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE;IAC9B,QAAQ,EAAE,aAAK,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE;IACnC,SAAS,EAAE,aAAK,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE;IACpC,IAAI,EAAE,aAAK,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE;IAC1C,WAAW,EAAE,aAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACpC,QAAQ,EAAE,aAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC;KACD,OAAO,CAAC;IACP;QACE,EAAE,EAAE,CAAC,KAAK,CAAC;QACX,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,oBAAoB;KAC5B;IACD;QACE,EAAE,EAAE,CAAC,UAAU,CAAC;QAChB,KAAK,EAAE,oBAAoB;KAC5B;IACD;QACE,EAAE,EAAE,CAAC,WAAW,CAAC;QACjB,KAAK,EAAE,oBAAoB;KAC5B;CACF,CAAC,CAAA;AAEJ,kBAAe,UAAU,CAAA"}

package/dist/models/rbac-role-inheritance.d.ts

@@ -0,0 +1,58 @@
+declare const RbacRoleInheritance: import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder<{
+    id: import("@etohq/framework/utils").PrimaryKeyModifier<string, import("@etohq/framework/utils").IdProperty>;
+    role: import("@etohq/framework/utils").BelongsTo<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder<{
+        id: import("@etohq/framework/utils").PrimaryKeyModifier<string, import("@etohq/framework/utils").IdProperty>;
+        name: import("@etohq/framework/utils").TextProperty;
+        description: import("@etohq/framework/utils").NullableModifier<string, import("@etohq/framework/utils").TextProperty>;
+        metadata: import("@etohq/framework/utils").NullableModifier<Record<string, unknown>, import("@etohq/framework/utils").JSONProperty>;
+        policies: import("@etohq/framework/utils").HasMany<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder<{
+            id: import("@etohq/framework/utils").PrimaryKeyModifier<string, import("@etohq/framework/utils").IdProperty>;
+            role: import("@etohq/framework/utils").BelongsTo<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder</*elided*/ any>, "rbac_role">, undefined>;
+            policy: import("@etohq/framework/utils").BelongsTo<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder<{
+                id: import("@etohq/framework/utils").PrimaryKeyModifier<string, import("@etohq/framework/utils").IdProperty>;
+                key: import("@etohq/framework/utils").TextProperty;
+                resource: import("@etohq/framework/utils").TextProperty;
+                operation: import("@etohq/framework/utils").TextProperty;
+                name: import("@etohq/framework/utils").NullableModifier<string, import("@etohq/framework/utils").TextProperty>;
+                description: import("@etohq/framework/utils").NullableModifier<string, import("@etohq/framework/utils").TextProperty>;
+                metadata: import("@etohq/framework/utils").NullableModifier<Record<string, unknown>, import("@etohq/framework/utils").JSONProperty>;
+            }>, "rbac_policy">, undefined>;
+            metadata: import("@etohq/framework/utils").NullableModifier<Record<string, unknown>, import("@etohq/framework/utils").JSONProperty>;
+        }>, "rbac_role_policy">>;
+        parents: import("@etohq/framework/utils").HasMany<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder<{
+            id: import("@etohq/framework/utils").PrimaryKeyModifier<string, import("@etohq/framework/utils").IdProperty>;
+            role: import("@etohq/framework/utils").BelongsTo<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder</*elided*/ any>, "rbac_role">, undefined>;
+            parent: import("@etohq/framework/utils").BelongsTo<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder</*elided*/ any>, "rbac_role">, undefined>;
+            metadata: import("@etohq/framework/utils").NullableModifier<Record<string, unknown>, import("@etohq/framework/utils").JSONProperty>;
+        }>, "rbac_role_parent">>;
+    }>, "rbac_role">, undefined>;
+    inherited_role: import("@etohq/framework/utils").BelongsTo<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder<{
+        id: import("@etohq/framework/utils").PrimaryKeyModifier<string, import("@etohq/framework/utils").IdProperty>;
+        name: import("@etohq/framework/utils").TextProperty;
+        description: import("@etohq/framework/utils").NullableModifier<string, import("@etohq/framework/utils").TextProperty>;
+        metadata: import("@etohq/framework/utils").NullableModifier<Record<string, unknown>, import("@etohq/framework/utils").JSONProperty>;
+        policies: import("@etohq/framework/utils").HasMany<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder<{
+            id: import("@etohq/framework/utils").PrimaryKeyModifier<string, import("@etohq/framework/utils").IdProperty>;
+            role: import("@etohq/framework/utils").BelongsTo<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder</*elided*/ any>, "rbac_role">, undefined>;
+            policy: import("@etohq/framework/utils").BelongsTo<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder<{
+                id: import("@etohq/framework/utils").PrimaryKeyModifier<string, import("@etohq/framework/utils").IdProperty>;
+                key: import("@etohq/framework/utils").TextProperty;
+                resource: import("@etohq/framework/utils").TextProperty;
+                operation: import("@etohq/framework/utils").TextProperty;
+                name: import("@etohq/framework/utils").NullableModifier<string, import("@etohq/framework/utils").TextProperty>;
+                description: import("@etohq/framework/utils").NullableModifier<string, import("@etohq/framework/utils").TextProperty>;
+                metadata: import("@etohq/framework/utils").NullableModifier<Record<string, unknown>, import("@etohq/framework/utils").JSONProperty>;
+            }>, "rbac_policy">, undefined>;
+            metadata: import("@etohq/framework/utils").NullableModifier<Record<string, unknown>, import("@etohq/framework/utils").JSONProperty>;
+        }>, "rbac_role_policy">>;
+        parents: import("@etohq/framework/utils").HasMany<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder<{
+            id: import("@etohq/framework/utils").PrimaryKeyModifier<string, import("@etohq/framework/utils").IdProperty>;
+            role: import("@etohq/framework/utils").BelongsTo<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder</*elided*/ any>, "rbac_role">, undefined>;
+            parent: import("@etohq/framework/utils").BelongsTo<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder</*elided*/ any>, "rbac_role">, undefined>;
+            metadata: import("@etohq/framework/utils").NullableModifier<Record<string, unknown>, import("@etohq/framework/utils").JSONProperty>;
+        }>, "rbac_role_parent">>;
+    }>, "rbac_role">, undefined>;
+    metadata: import("@etohq/framework/utils").NullableModifier<Record<string, unknown>, import("@etohq/framework/utils").JSONProperty>;
+}>, "rbac_role_inheritance">;
+export default RbacRoleInheritance;
+//# sourceMappingURL=rbac-role-inheritance.d.ts.map

package/dist/models/rbac-role-inheritance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac-role-inheritance.d.ts","sourceRoot":"","sources":["../../src/models/rbac-role-inheritance.ts"],"names":[],"mappings":"AAGA,QAAA,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BAuBrB,CAAA;AAEJ,eAAe,mBAAmB,CAAA"}

package/dist/models/rbac-role-inheritance.js

@@ -0,0 +1,33 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const utils_1 = require("@etohq/framework/utils");
+const rbac_role_1 = __importDefault(require("./rbac-role"));
+const RbacRoleInheritance = utils_1.model
+    .define("rbac_role_inheritance", {
+    id: utils_1.model.id({ prefix: "rlin" }).primaryKey(),
+    role: utils_1.model.belongsTo(() => rbac_role_1.default, { mappedBy: "inherited_roles" }),
+    inherited_role: utils_1.model.belongsTo(() => rbac_role_1.default, {
+        mappedBy: "inheritedBy",
+    }),
+    metadata: utils_1.model.json().nullable(),
+})
+    .indexes([
+    {
+        on: ["role_id"],
+        where: "deleted_at IS NULL",
+    },
+    {
+        on: ["inherited_role_id"],
+        where: "deleted_at IS NULL",
+    },
+    {
+        on: ["role_id", "inherited_role_id"],
+        unique: true,
+        where: "deleted_at IS NULL",
+    },
+]);
+exports.default = RbacRoleInheritance;
+//# sourceMappingURL=rbac-role-inheritance.js.map

package/dist/models/rbac-role-inheritance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac-role-inheritance.js","sourceRoot":"","sources":["../../src/models/rbac-role-inheritance.ts"],"names":[],"mappings":";;;;;AAAA,kDAA8C;AAC9C,4DAAkC;AAElC,MAAM,mBAAmB,GAAG,aAAK;KAC9B,MAAM,CAAC,uBAAuB,EAAE;IAC/B,EAAE,EAAE,aAAK,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE;IAC7C,IAAI,EAAE,aAAK,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,mBAAQ,EAAE,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IACtE,cAAc,EAAE,aAAK,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,mBAAQ,EAAE;QAC9C,QAAQ,EAAE,aAAa;KACxB,CAAC;IACF,QAAQ,EAAE,aAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC;KACD,OAAO,CAAC;IACP;QACE,EAAE,EAAE,CAAC,SAAS,CAAC;QACf,KAAK,EAAE,oBAAoB;KAC5B;IACD;QACE,EAAE,EAAE,CAAC,mBAAmB,CAAC;QACzB,KAAK,EAAE,oBAAoB;KAC5B;IACD;QACE,EAAE,EAAE,CAAC,SAAS,EAAE,mBAAmB,CAAC;QACpC,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,oBAAoB;KAC5B;CACF,CAAC,CAAA;AAEJ,kBAAe,mBAAmB,CAAA"}

package/dist/models/rbac-role-parent.d.ts

@@ -0,0 +1,48 @@
+declare const RbacRoleParent: import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder<{
+    id: import("@etohq/framework/utils").PrimaryKeyModifier<string, import("@etohq/framework/utils").IdProperty>;
+    role: import("@etohq/framework/utils").BelongsTo<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder<{
+        id: import("@etohq/framework/utils").PrimaryKeyModifier<string, import("@etohq/framework/utils").IdProperty>;
+        name: import("@etohq/framework/utils").TextProperty;
+        description: import("@etohq/framework/utils").NullableModifier<string, import("@etohq/framework/utils").TextProperty>;
+        metadata: import("@etohq/framework/utils").NullableModifier<Record<string, unknown>, import("@etohq/framework/utils").JSONProperty>;
+        policies: import("@etohq/framework/utils").HasMany<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder<{
+            id: import("@etohq/framework/utils").PrimaryKeyModifier<string, import("@etohq/framework/utils").IdProperty>;
+            role: import("@etohq/framework/utils").BelongsTo<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder</*elided*/ any>, "rbac_role">, undefined>;
+            policy: import("@etohq/framework/utils").BelongsTo<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder<{
+                id: import("@etohq/framework/utils").PrimaryKeyModifier<string, import("@etohq/framework/utils").IdProperty>;
+                key: import("@etohq/framework/utils").TextProperty;
+                resource: import("@etohq/framework/utils").TextProperty;
+                operation: import("@etohq/framework/utils").TextProperty;
+                name: import("@etohq/framework/utils").NullableModifier<string, import("@etohq/framework/utils").TextProperty>;
+                description: import("@etohq/framework/utils").NullableModifier<string, import("@etohq/framework/utils").TextProperty>;
+                metadata: import("@etohq/framework/utils").NullableModifier<Record<string, unknown>, import("@etohq/framework/utils").JSONProperty>;
+            }>, "rbac_policy">, undefined>;
+            metadata: import("@etohq/framework/utils").NullableModifier<Record<string, unknown>, import("@etohq/framework/utils").JSONProperty>;
+        }>, "rbac_role_policy">>;
+        parents: import("@etohq/framework/utils").HasMany<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder</*elided*/ any>, "rbac_role_parent">>;
+    }>, "rbac_role">, undefined>;
+    parent: import("@etohq/framework/utils").BelongsTo<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder<{
+        id: import("@etohq/framework/utils").PrimaryKeyModifier<string, import("@etohq/framework/utils").IdProperty>;
+        name: import("@etohq/framework/utils").TextProperty;
+        description: import("@etohq/framework/utils").NullableModifier<string, import("@etohq/framework/utils").TextProperty>;
+        metadata: import("@etohq/framework/utils").NullableModifier<Record<string, unknown>, import("@etohq/framework/utils").JSONProperty>;
+        policies: import("@etohq/framework/utils").HasMany<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder<{
+            id: import("@etohq/framework/utils").PrimaryKeyModifier<string, import("@etohq/framework/utils").IdProperty>;
+            role: import("@etohq/framework/utils").BelongsTo<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder</*elided*/ any>, "rbac_role">, undefined>;
+            policy: import("@etohq/framework/utils").BelongsTo<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder<{
+                id: import("@etohq/framework/utils").PrimaryKeyModifier<string, import("@etohq/framework/utils").IdProperty>;
+                key: import("@etohq/framework/utils").TextProperty;
+                resource: import("@etohq/framework/utils").TextProperty;
+                operation: import("@etohq/framework/utils").TextProperty;
+                name: import("@etohq/framework/utils").NullableModifier<string, import("@etohq/framework/utils").TextProperty>;
+                description: import("@etohq/framework/utils").NullableModifier<string, import("@etohq/framework/utils").TextProperty>;
+                metadata: import("@etohq/framework/utils").NullableModifier<Record<string, unknown>, import("@etohq/framework/utils").JSONProperty>;
+            }>, "rbac_policy">, undefined>;
+            metadata: import("@etohq/framework/utils").NullableModifier<Record<string, unknown>, import("@etohq/framework/utils").JSONProperty>;
+        }>, "rbac_role_policy">>;
+        parents: import("@etohq/framework/utils").HasMany<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder</*elided*/ any>, "rbac_role_parent">>;
+    }>, "rbac_role">, undefined>;
+    metadata: import("@etohq/framework/utils").NullableModifier<Record<string, unknown>, import("@etohq/framework/utils").JSONProperty>;
+}>, "rbac_role_parent">;
+export default RbacRoleParent;
+//# sourceMappingURL=rbac-role-parent.d.ts.map

package/dist/models/rbac-role-parent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac-role-parent.d.ts","sourceRoot":"","sources":["../../src/models/rbac-role-parent.ts"],"names":[],"mappings":"AAGA,QAAA,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAqBhB,CAAA;AAEJ,eAAe,cAAc,CAAA"}

package/dist/models/rbac-role-parent.js

@@ -0,0 +1,31 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const utils_1 = require("@etohq/framework/utils");
+const rbac_role_1 = __importDefault(require("./rbac-role"));
+const RbacRoleParent = utils_1.model
+    .define("rbac_role_parent", {
+    id: utils_1.model.id({ prefix: "rlin" }).primaryKey(),
+    role: utils_1.model.belongsTo(() => rbac_role_1.default, { mappedBy: "parents" }),
+    parent: utils_1.model.belongsTo(() => rbac_role_1.default),
+    metadata: utils_1.model.json().nullable(),
+})
+    .indexes([
+    {
+        on: ["role_id"],
+        where: "deleted_at IS NULL",
+    },
+    {
+        on: ["parent_id"],
+        where: "deleted_at IS NULL",
+    },
+    {
+        on: ["role_id", "parent_id"],
+        unique: true,
+        where: "deleted_at IS NULL",
+    },
+]);
+exports.default = RbacRoleParent;
+//# sourceMappingURL=rbac-role-parent.js.map

package/dist/models/rbac-role-parent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac-role-parent.js","sourceRoot":"","sources":["../../src/models/rbac-role-parent.ts"],"names":[],"mappings":";;;;;AAAA,kDAA8C;AAC9C,4DAAkC;AAElC,MAAM,cAAc,GAAG,aAAK;KACzB,MAAM,CAAC,kBAAkB,EAAE;IAC1B,EAAE,EAAE,aAAK,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE;IAC7C,IAAI,EAAE,aAAK,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,mBAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC9D,MAAM,EAAE,aAAK,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,mBAAQ,CAAC;IACvC,QAAQ,EAAE,aAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC;KACD,OAAO,CAAC;IACP;QACE,EAAE,EAAE,CAAC,SAAS,CAAC;QACf,KAAK,EAAE,oBAAoB;KAC5B;IACD;QACE,EAAE,EAAE,CAAC,WAAW,CAAC;QACjB,KAAK,EAAE,oBAAoB;KAC5B;IACD;QACE,EAAE,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC;QAC5B,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,oBAAoB;KAC5B;CACF,CAAC,CAAA;AAEJ,kBAAe,cAAc,CAAA"}

package/dist/models/rbac-role-policy.d.ts

@@ -0,0 +1,28 @@
+declare const RbacRolePolicy: import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder<{
+    id: import("@etohq/framework/utils").PrimaryKeyModifier<string, import("@etohq/framework/utils").IdProperty>;
+    role: import("@etohq/framework/utils").BelongsTo<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder<{
+        id: import("@etohq/framework/utils").PrimaryKeyModifier<string, import("@etohq/framework/utils").IdProperty>;
+        name: import("@etohq/framework/utils").TextProperty;
+        description: import("@etohq/framework/utils").NullableModifier<string, import("@etohq/framework/utils").TextProperty>;
+        metadata: import("@etohq/framework/utils").NullableModifier<Record<string, unknown>, import("@etohq/framework/utils").JSONProperty>;
+        policies: import("@etohq/framework/utils").HasMany<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder</*elided*/ any>, "rbac_role_policy">>;
+        parents: import("@etohq/framework/utils").HasMany<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder<{
+            id: import("@etohq/framework/utils").PrimaryKeyModifier<string, import("@etohq/framework/utils").IdProperty>;
+            role: import("@etohq/framework/utils").BelongsTo<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder</*elided*/ any>, "rbac_role">, undefined>;
+            parent: import("@etohq/framework/utils").BelongsTo<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder</*elided*/ any>, "rbac_role">, undefined>;
+            metadata: import("@etohq/framework/utils").NullableModifier<Record<string, unknown>, import("@etohq/framework/utils").JSONProperty>;
+        }>, "rbac_role_parent">>;
+    }>, "rbac_role">, undefined>;
+    policy: import("@etohq/framework/utils").BelongsTo<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder<{
+        id: import("@etohq/framework/utils").PrimaryKeyModifier<string, import("@etohq/framework/utils").IdProperty>;
+        key: import("@etohq/framework/utils").TextProperty;
+        resource: import("@etohq/framework/utils").TextProperty;
+        operation: import("@etohq/framework/utils").TextProperty;
+        name: import("@etohq/framework/utils").NullableModifier<string, import("@etohq/framework/utils").TextProperty>;
+        description: import("@etohq/framework/utils").NullableModifier<string, import("@etohq/framework/utils").TextProperty>;
+        metadata: import("@etohq/framework/utils").NullableModifier<Record<string, unknown>, import("@etohq/framework/utils").JSONProperty>;
+    }>, "rbac_policy">, undefined>;
+    metadata: import("@etohq/framework/utils").NullableModifier<Record<string, unknown>, import("@etohq/framework/utils").JSONProperty>;
+}>, "rbac_role_policy">;
+export default RbacRolePolicy;
+//# sourceMappingURL=rbac-role-policy.d.ts.map

package/dist/models/rbac-role-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac-role-policy.d.ts","sourceRoot":"","sources":["../../src/models/rbac-role-policy.ts"],"names":[],"mappings":"AAIA,QAAA,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;uBAqBhB,CAAA;AAEJ,eAAe,cAAc,CAAA"}

package/dist/models/rbac-role-policy.js

@@ -0,0 +1,32 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const utils_1 = require("@etohq/framework/utils");
+const rbac_policy_1 = __importDefault(require("./rbac-policy"));
+const rbac_role_1 = __importDefault(require("./rbac-role"));
+const RbacRolePolicy = utils_1.model
+    .define("rbac_role_policy", {
+    id: utils_1.model.id({ prefix: "rlpl" }).primaryKey(),
+    role: utils_1.model.belongsTo(() => rbac_role_1.default),
+    policy: utils_1.model.belongsTo(() => rbac_policy_1.default),
+    metadata: utils_1.model.json().nullable(),
+})
+    .indexes([
+    {
+        on: ["role_id"],
+        where: "deleted_at IS NULL",
+    },
+    {
+        on: ["policy_id"],
+        where: "deleted_at IS NULL",
+    },
+    {
+        on: ["role_id", "policy_id"],
+        unique: true,
+        where: "deleted_at IS NULL",
+    },
+]);
+exports.default = RbacRolePolicy;
+//# sourceMappingURL=rbac-role-policy.js.map

package/dist/models/rbac-role-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac-role-policy.js","sourceRoot":"","sources":["../../src/models/rbac-role-policy.ts"],"names":[],"mappings":";;;;;AAAA,kDAA8C;AAC9C,gEAAsC;AACtC,4DAAkC;AAElC,MAAM,cAAc,GAAG,aAAK;KACzB,MAAM,CAAC,kBAAkB,EAAE;IAC1B,EAAE,EAAE,aAAK,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE;IAC7C,IAAI,EAAE,aAAK,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,mBAAQ,CAAC;IACrC,MAAM,EAAE,aAAK,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,qBAAU,CAAC;IACzC,QAAQ,EAAE,aAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC;KACD,OAAO,CAAC;IACP;QACE,EAAE,EAAE,CAAC,SAAS,CAAC;QACf,KAAK,EAAE,oBAAoB;KAC5B;IACD;QACE,EAAE,EAAE,CAAC,WAAW,CAAC;QACjB,KAAK,EAAE,oBAAoB;KAC5B;IACD;QACE,EAAE,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC;QAC5B,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,oBAAoB;KAC5B;CACF,CAAC,CAAA;AAEJ,kBAAe,cAAc,CAAA"}

package/dist/models/rbac-role.d.ts

@@ -0,0 +1,28 @@
+declare const RbacRole: import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder<{
+    id: import("@etohq/framework/utils").PrimaryKeyModifier<string, import("@etohq/framework/utils").IdProperty>;
+    name: import("@etohq/framework/utils").TextProperty;
+    description: import("@etohq/framework/utils").NullableModifier<string, import("@etohq/framework/utils").TextProperty>;
+    metadata: import("@etohq/framework/utils").NullableModifier<Record<string, unknown>, import("@etohq/framework/utils").JSONProperty>;
+    policies: import("@etohq/framework/utils").HasMany<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder<{
+        id: import("@etohq/framework/utils").PrimaryKeyModifier<string, import("@etohq/framework/utils").IdProperty>;
+        role: import("@etohq/framework/utils").BelongsTo<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder</*elided*/ any>, "rbac_role">, undefined>;
+        policy: import("@etohq/framework/utils").BelongsTo<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder<{
+            id: import("@etohq/framework/utils").PrimaryKeyModifier<string, import("@etohq/framework/utils").IdProperty>;
+            key: import("@etohq/framework/utils").TextProperty;
+            resource: import("@etohq/framework/utils").TextProperty;
+            operation: import("@etohq/framework/utils").TextProperty;
+            name: import("@etohq/framework/utils").NullableModifier<string, import("@etohq/framework/utils").TextProperty>;
+            description: import("@etohq/framework/utils").NullableModifier<string, import("@etohq/framework/utils").TextProperty>;
+            metadata: import("@etohq/framework/utils").NullableModifier<Record<string, unknown>, import("@etohq/framework/utils").JSONProperty>;
+        }>, "rbac_policy">, undefined>;
+        metadata: import("@etohq/framework/utils").NullableModifier<Record<string, unknown>, import("@etohq/framework/utils").JSONProperty>;
+    }>, "rbac_role_policy">>;
+    parents: import("@etohq/framework/utils").HasMany<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder<{
+        id: import("@etohq/framework/utils").PrimaryKeyModifier<string, import("@etohq/framework/utils").IdProperty>;
+        role: import("@etohq/framework/utils").BelongsTo<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder</*elided*/ any>, "rbac_role">, undefined>;
+        parent: import("@etohq/framework/utils").BelongsTo<() => import("@etohq/framework/utils").DmlEntity<import("@etohq/framework/utils").DMLEntitySchemaBuilder</*elided*/ any>, "rbac_role">, undefined>;
+        metadata: import("@etohq/framework/utils").NullableModifier<Record<string, unknown>, import("@etohq/framework/utils").JSONProperty>;
+    }>, "rbac_role_parent">>;
+}>, "rbac_role">;
+export default RbacRole;
+//# sourceMappingURL=rbac-role.d.ts.map

package/dist/models/rbac-role.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac-role.d.ts","sourceRoot":"","sources":["../../src/models/rbac-role.ts"],"names":[],"mappings":"AAIA,QAAA,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;gBAmBV,CAAA;AAEJ,eAAe,QAAQ,CAAA"}