@fragno-dev/backoffice-api 0.0.0-stage → 0.0.0

package/dist/v0/account.d.ts

@@ -0,0 +1,171 @@
+import { z } from "zod";
+//#region src/v0/account.d.ts
+/** The signed-in user's own profile; it never describes another user. */
+declare const accountProfileSchema: z.ZodLazy<z.ZodObject<{
+  userId: z.ZodString;
+  name: z.ZodString;
+  email: z.ZodString;
+  emailVerified: z.ZodBoolean;
+  systemRole: z.ZodEnum<{
+    admin: "admin";
+    user: "user";
+  }>;
+}, z.core.$strict>>;
+type AccountProfile = z.output<typeof accountProfileSchema>;
+/** A pending invitation addressed to the signed-in user's email. */
+declare const accountInvitationRecordSchema: z.ZodLazy<z.ZodObject<{
+  invitationId: z.ZodString;
+  organization: z.ZodLazy<z.ZodObject<{
+    organizationId: z.ZodString;
+    name: z.ZodString;
+    slug: z.ZodString;
+    createdAt: z.ZodISODateTime;
+  }, z.core.$strict>>;
+  roles: z.ZodArray<z.ZodString>;
+  expiresAt: z.ZodISODateTime;
+}, z.core.$strict>>;
+type AccountInvitationRecord = z.output<typeof accountInvitationRecordSchema>;
+/** User-facing authorizations contain no access tokens, refresh tokens, or client secrets. */
+declare const oauthConsentPageSchema: z.ZodLazy<z.ZodObject<{
+  consents: z.ZodArray<z.ZodObject<{
+    id: z.ZodString;
+    clientId: z.ZodString;
+    clientName: z.ZodString;
+    scopes: z.ZodArray<z.ZodString>;
+    resources: z.ZodArray<z.ZodString>;
+    requestedUserInfoClaims: z.ZodArray<z.ZodString>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+  }, z.core.$strip>>;
+  nextCursor: z.ZodNullable<z.ZodString>;
+  hasNextPage: z.ZodBoolean;
+}, z.core.$strip>>;
+type OAuthConsentPage = z.output<typeof oauthConsentPageSchema>;
+/** Account operations act on the calling user only; no operation can target another account. */
+declare const accountOperations: {
+  "account.me": {
+    description: string;
+    permissions: {
+      readonly namespace: "account";
+      readonly permission: "read";
+    }[];
+    input: z.ZodVoid;
+    output: z.ZodLazy<z.ZodObject<{
+      userId: z.ZodString;
+      name: z.ZodString;
+      email: z.ZodString;
+      emailVerified: z.ZodBoolean;
+      systemRole: z.ZodEnum<{
+        admin: "admin";
+        user: "user";
+      }>;
+    }, z.core.$strict>>;
+  };
+  "account.profile.update": {
+    description: string;
+    permissions: {
+      readonly namespace: "account";
+      readonly permission: "manage";
+    }[];
+    input: z.ZodLazy<z.ZodObject<{
+      name: z.ZodString;
+    }, z.core.$strict>>;
+    output: z.ZodLazy<z.ZodObject<{
+      userId: z.ZodString;
+      name: z.ZodString;
+      email: z.ZodString;
+      emailVerified: z.ZodBoolean;
+      systemRole: z.ZodEnum<{
+        admin: "admin";
+        user: "user";
+      }>;
+    }, z.core.$strict>>;
+  };
+  "account.orgs.list": {
+    description: string;
+    permissions: {
+      readonly namespace: "account";
+      readonly permission: "read";
+    }[];
+    input: z.ZodVoid;
+    output: z.ZodLazy<z.ZodObject<{
+      organizations: z.ZodArray<z.ZodLazy<z.ZodObject<{
+        organization: z.ZodLazy<z.ZodObject<{
+          organizationId: z.ZodString;
+          name: z.ZodString;
+          slug: z.ZodString;
+          createdAt: z.ZodISODateTime;
+        }, z.core.$strict>>;
+        roles: z.ZodArray<z.ZodString>;
+      }, z.core.$strict>>>;
+    }, z.core.$strict>>;
+  };
+  "account.invitations.list": {
+    description: string;
+    permissions: {
+      readonly namespace: "account";
+      readonly permission: "read";
+    }[];
+    input: z.ZodVoid;
+    output: z.ZodLazy<z.ZodObject<{
+      invitations: z.ZodArray<z.ZodLazy<z.ZodObject<{
+        invitationId: z.ZodString;
+        organization: z.ZodLazy<z.ZodObject<{
+          organizationId: z.ZodString;
+          name: z.ZodString;
+          slug: z.ZodString;
+          createdAt: z.ZodISODateTime;
+        }, z.core.$strict>>;
+        roles: z.ZodArray<z.ZodString>;
+        expiresAt: z.ZodISODateTime;
+      }, z.core.$strict>>>;
+    }, z.core.$strict>>;
+  };
+  "account.invitations.accept": {
+    description: string;
+    permissions: {
+      readonly namespace: "account";
+      readonly permission: "manage";
+    }[];
+    input: z.ZodLazy<z.ZodObject<{
+      invitationId: z.ZodString;
+    }, z.core.$strict>>;
+    output: z.ZodLazy<z.ZodObject<{
+      organization: z.ZodLazy<z.ZodObject<{
+        organizationId: z.ZodString;
+        name: z.ZodString;
+        slug: z.ZodString;
+        createdAt: z.ZodISODateTime;
+      }, z.core.$strict>>;
+      roles: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>>;
+  };
+  "account.applications.list": {
+    description: string;
+    permissions: {
+      readonly namespace: "account";
+      readonly permission: "read";
+    }[];
+    input: z.ZodLazy<z.ZodObject<{
+      pageSize: z.ZodDefault<z.ZodNumber>;
+      cursor: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strict>>;
+    output: z.ZodLazy<z.ZodObject<{
+      consents: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        clientId: z.ZodString;
+        clientName: z.ZodString;
+        scopes: z.ZodArray<z.ZodString>;
+        resources: z.ZodArray<z.ZodString>;
+        requestedUserInfoClaims: z.ZodArray<z.ZodString>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+      }, z.core.$strip>>;
+      nextCursor: z.ZodNullable<z.ZodString>;
+      hasNextPage: z.ZodBoolean;
+    }, z.core.$strip>>;
+  };
+};
+//#endregion
+export { AccountInvitationRecord, AccountProfile, OAuthConsentPage, accountOperations, oauthConsentPageSchema };
+//# sourceMappingURL=account.d.ts.map

package/dist/v0/account.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account.d.ts","names":[],"sources":["../../src/v0/account.ts"],"mappings":";;;cAQM,sBAAoB,EAAA,QAAA,EAAA;;;;;;;;;;KAWd,iBAAiB,EAAE,cAAc;;cAGvC,+BAA6B,EAAA,QAAA,EAAA;;;;;;;;;;;KAUvB,0BAA0B,EAAE,cAAc;;cAGzC,wBAAsB,EAAA,QAAA,EAAA;;;;;;;;;;;;;;KAoBvB,mBAAmB,EAAE,cAAc;;cAGlC"}

package/dist/v0/account.js

@@ -0,0 +1,78 @@
+import { directoryPageInputSchema } from "./shared/pagination.js";
+import { BACKOFFICE_PERMISSION } from "./shared/permissions.js";
+import { organizationMembershipRecordSchema, organizationRecordSchema } from "./organization.js";
+import { z } from "zod";
+//#region src/v0/account.ts
+/** The signed-in user's own profile; it never describes another user. */
+const accountProfileSchema = z.lazy(() => z.strictObject({
+	userId: z.string().min(1),
+	name: z.string(),
+	email: z.string().min(1),
+	emailVerified: z.boolean(),
+	systemRole: z.enum(["user", "admin"])
+})).meta({ id: "AccountProfile" });
+/** A pending invitation addressed to the signed-in user's email. */
+const accountInvitationRecordSchema = z.lazy(() => z.strictObject({
+	invitationId: z.string().min(1),
+	organization: organizationRecordSchema,
+	roles: z.array(z.string().min(1)).min(1),
+	expiresAt: z.iso.datetime()
+})).meta({ id: "AccountInvitationRecord" });
+/** User-facing authorizations contain no access tokens, refresh tokens, or client secrets. */
+const oauthConsentPageSchema = z.lazy(() => z.object({
+	consents: z.array(z.object({
+		id: z.string(),
+		clientId: z.string(),
+		clientName: z.string(),
+		scopes: z.array(z.string()),
+		resources: z.array(z.string()),
+		requestedUserInfoClaims: z.array(z.string()),
+		createdAt: z.string(),
+		updatedAt: z.string()
+	})),
+	nextCursor: z.string().nullable(),
+	hasNextPage: z.boolean()
+})).meta({ id: "OAuthConsentPage" });
+/** Account operations act on the calling user only; no operation can target another account. */
+const accountOperations = {
+	"account.me": {
+		description: "Read your own Backoffice account profile.",
+		permissions: [BACKOFFICE_PERMISSION.account.read],
+		input: z.void(),
+		output: accountProfileSchema
+	},
+	"account.profile.update": {
+		description: "Change the display name on your own Backoffice account.",
+		permissions: [BACKOFFICE_PERMISSION.account.manage],
+		input: z.lazy(() => z.strictObject({ name: z.string().trim().min(1) })),
+		output: accountProfileSchema
+	},
+	"account.orgs.list": {
+		description: "List the organizations you belong to and your roles in each.",
+		permissions: [BACKOFFICE_PERMISSION.account.read],
+		input: z.void(),
+		output: z.lazy(() => z.strictObject({ organizations: z.array(organizationMembershipRecordSchema) }))
+	},
+	"account.invitations.list": {
+		description: "List pending, unexpired organization invitations addressed to your email.",
+		permissions: [BACKOFFICE_PERMISSION.account.read],
+		input: z.void(),
+		output: z.lazy(() => z.strictObject({ invitations: z.array(accountInvitationRecordSchema) }))
+	},
+	"account.invitations.accept": {
+		description: "Accept a pending organization invitation addressed to your email.",
+		permissions: [BACKOFFICE_PERMISSION.account.manage],
+		input: z.lazy(() => z.strictObject({ invitationId: z.string().trim().min(1) })),
+		output: organizationMembershipRecordSchema
+	},
+	"account.applications.list": {
+		description: "List OAuth applications you have authorized and their granted scopes, using cursor pagination. Never exposes tokens.",
+		permissions: [BACKOFFICE_PERMISSION.account.read],
+		input: directoryPageInputSchema,
+		output: oauthConsentPageSchema
+	}
+};
+//#endregion
+export { accountOperations, oauthConsentPageSchema };
+
+//# sourceMappingURL=account.js.map

package/dist/v0/account.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account.js","names":[],"sources":["../../src/v0/account.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport type { BackofficeApiOperation } from \"../api\";\nimport { organizationMembershipRecordSchema, organizationRecordSchema } from \"./organization\";\nimport { directoryPageInputSchema } from \"./shared/pagination\";\nimport { BACKOFFICE_PERMISSION } from \"./shared/permissions\";\n\n/** The signed-in user's own profile; it never describes another user. */\nconst accountProfileSchema = z\n  .lazy(() =>\n    z.strictObject({\n      userId: z.string().min(1),\n      name: z.string(),\n      email: z.string().min(1),\n      emailVerified: z.boolean(),\n      systemRole: z.enum([\"user\", \"admin\"]),\n    }),\n  )\n  .meta({ id: \"AccountProfile\" });\nexport type AccountProfile = z.output<typeof accountProfileSchema>;\n\n/** A pending invitation addressed to the signed-in user's email. */\nconst accountInvitationRecordSchema = z\n  .lazy(() =>\n    z.strictObject({\n      invitationId: z.string().min(1),\n      organization: organizationRecordSchema,\n      roles: z.array(z.string().min(1)).min(1),\n      expiresAt: z.iso.datetime(),\n    }),\n  )\n  .meta({ id: \"AccountInvitationRecord\" });\nexport type AccountInvitationRecord = z.output<typeof accountInvitationRecordSchema>;\n\n/** User-facing authorizations contain no access tokens, refresh tokens, or client secrets. */\nexport const oauthConsentPageSchema = z\n  .lazy(() =>\n    z.object({\n      consents: z.array(\n        z.object({\n          id: z.string(),\n          clientId: z.string(),\n          clientName: z.string(),\n          scopes: z.array(z.string()),\n          resources: z.array(z.string()),\n          requestedUserInfoClaims: z.array(z.string()),\n          createdAt: z.string(),\n          updatedAt: z.string(),\n        }),\n      ),\n      nextCursor: z.string().nullable(),\n      hasNextPage: z.boolean(),\n    }),\n  )\n  .meta({ id: \"OAuthConsentPage\" });\nexport type OAuthConsentPage = z.output<typeof oauthConsentPageSchema>;\n\n/** Account operations act on the calling user only; no operation can target another account. */\nexport const accountOperations = {\n  \"account.me\": {\n    description: \"Read your own Backoffice account profile.\",\n    permissions: [BACKOFFICE_PERMISSION.account.read],\n    input: z.void(),\n    output: accountProfileSchema,\n  },\n  \"account.profile.update\": {\n    description: \"Change the display name on your own Backoffice account.\",\n    permissions: [BACKOFFICE_PERMISSION.account.manage],\n    input: z.lazy(() => z.strictObject({ name: z.string().trim().min(1) })),\n    output: accountProfileSchema,\n  },\n  \"account.orgs.list\": {\n    description: \"List the organizations you belong to and your roles in each.\",\n    permissions: [BACKOFFICE_PERMISSION.account.read],\n    input: z.void(),\n    output: z.lazy(() =>\n      z.strictObject({ organizations: z.array(organizationMembershipRecordSchema) }),\n    ),\n  },\n  \"account.invitations.list\": {\n    description: \"List pending, unexpired organization invitations addressed to your email.\",\n    permissions: [BACKOFFICE_PERMISSION.account.read],\n    input: z.void(),\n    output: z.lazy(() => z.strictObject({ invitations: z.array(accountInvitationRecordSchema) })),\n  },\n  \"account.invitations.accept\": {\n    description: \"Accept a pending organization invitation addressed to your email.\",\n    permissions: [BACKOFFICE_PERMISSION.account.manage],\n    input: z.lazy(() => z.strictObject({ invitationId: z.string().trim().min(1) })),\n    output: organizationMembershipRecordSchema,\n  },\n  \"account.applications.list\": {\n    description:\n      \"List OAuth applications you have authorized and their granted scopes, using cursor pagination. Never exposes tokens.\",\n    permissions: [BACKOFFICE_PERMISSION.account.read],\n    input: directoryPageInputSchema,\n    output: oauthConsentPageSchema,\n  },\n} satisfies Record<string, BackofficeApiOperation>;\n"],"mappings":";;;;;;AAQA,MAAM,uBAAuB,EAC1B,WACC,EAAE,aAAa;CACb,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACxB,MAAM,EAAE,OAAO;CACf,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACvB,eAAe,EAAE,QAAQ;CACzB,YAAY,EAAE,KAAK,CAAC,QAAQ,OAAO,CAAC;AACtC,CAAC,CACH,CAAC,CACA,KAAK,EAAE,IAAI,iBAAiB,CAAC;;AAIhC,MAAM,gCAAgC,EACnC,WACC,EAAE,aAAa;CACb,cAAc,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CAC9B,cAAc;CACd,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;CACvC,WAAW,EAAE,IAAI,SAAS;AAC5B,CAAC,CACH,CAAC,CACA,KAAK,EAAE,IAAI,0BAA0B,CAAC;;AAIzC,MAAa,yBAAyB,EACnC,WACC,EAAE,OAAO;CACP,UAAU,EAAE,MACV,EAAE,OAAO;EACP,IAAI,EAAE,OAAO;EACb,UAAU,EAAE,OAAO;EACnB,YAAY,EAAE,OAAO;EACrB,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC;EAC1B,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC;EAC7B,yBAAyB,EAAE,MAAM,EAAE,OAAO,CAAC;EAC3C,WAAW,EAAE,OAAO;EACpB,WAAW,EAAE,OAAO;CACtB,CAAC,CACH;CACA,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,aAAa,EAAE,QAAQ;AACzB,CAAC,CACH,CAAC,CACA,KAAK,EAAE,IAAI,mBAAmB,CAAC;;AAIlC,MAAa,oBAAoB;CAC/B,cAAc;EACZ,aAAa;EACb,aAAa,CAAC,sBAAsB,QAAQ,IAAI;EAChD,OAAO,EAAE,KAAK;EACd,QAAQ;CACV;CACA,0BAA0B;EACxB,aAAa;EACb,aAAa,CAAC,sBAAsB,QAAQ,MAAM;EAClD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;EACtE,QAAQ;CACV;CACA,qBAAqB;EACnB,aAAa;EACb,aAAa,CAAC,sBAAsB,QAAQ,IAAI;EAChD,OAAO,EAAE,KAAK;EACd,QAAQ,EAAE,WACR,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,kCAAkC,EAAE,CAAC,CAC/E;CACF;CACA,4BAA4B;EAC1B,aAAa;EACb,aAAa,CAAC,sBAAsB,QAAQ,IAAI;EAChD,OAAO,EAAE,KAAK;EACd,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,6BAA6B,EAAE,CAAC,CAAC;CAC9F;CACA,8BAA8B;EAC5B,aAAa;EACb,aAAa,CAAC,sBAAsB,QAAQ,MAAM;EAClD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;EAC9E,QAAQ;CACV;CACA,6BAA6B;EAC3B,aACE;EACF,aAAa,CAAC,sBAAsB,QAAQ,IAAI;EAChD,OAAO;EACP,QAAQ;CACV;AACF"}