@go-mondo/identity-sdk 0.0.1 → 0.0.2-beta.12

package/dist/cjs/authorization/permissions/resources.js

@@ -0,0 +1,57 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PermissionResources = void 0;
+exports.listPermissions = listPermissions;
+exports.getPermission = getPermission;
+exports.insertPermission = insertPermission;
+exports.updatePermission = updatePermission;
+exports.deletePermission = deletePermission;
+const operations_js_1 = require("../../common/resources/operations.js");
+const utils_js_1 = require("../../common/resources/utils.js");
+const collection_js_1 = require("../../common/schema/collection.js");
+const schema_js_1 = require("./schema.js");
+const PATH = '/v1/authorization/permissions';
+class PermissionResources {
+    instance;
+    constructor(instance) {
+        this.instance = instance;
+    }
+    static buildPath(id) {
+        if (id?.startsWith(PATH)) {
+            return id;
+        }
+        return [PATH, id].filter(Boolean).join('/');
+    }
+    listItems(pagination) {
+        return listPermissions(this.instance, pagination);
+    }
+    getItem(id) {
+        return getPermission(this.instance, id);
+    }
+    insertItem(item) {
+        return insertPermission(this.instance, item);
+    }
+    updateItem(id, item) {
+        return updatePermission(this.instance, id, item);
+    }
+    deleteItem(id) {
+        return deletePermission(this.instance, id);
+    }
+}
+exports.PermissionResources = PermissionResources;
+async function listPermissions(instance, pagination) {
+    const url = (0, utils_js_1.addPaginationToURL)(new URL(PermissionResources.buildPath(), instance.config.host), pagination);
+    return (0, utils_js_1.parseEgressSchema)((0, collection_js_1.PaginationCollectionSchema)(schema_js_1.PermissionSchema)(await (0, operations_js_1.getItemWithAuthorization)(url, instance.authorizer)));
+}
+async function getPermission(instance, id) {
+    return (0, utils_js_1.parseEgressSchema)((0, schema_js_1.PermissionSchema)(await (0, operations_js_1.getItemWithAuthorization)(new URL(PermissionResources.buildPath(id), instance.config.host), instance.authorizer)));
+}
+async function insertPermission(instance, item) {
+    return (0, utils_js_1.parseEgressSchema)((0, schema_js_1.PermissionSchema)(await (0, operations_js_1.insertItemWithAuthorization)(new URL(PermissionResources.buildPath(), instance.config.host), instance.authorizer, (0, utils_js_1.parseEgressSchema)(schema_js_1.InsertPermissionPayloadSchema.onUndeclaredKey('delete')(item)))));
+}
+async function updatePermission(instance, id, item) {
+    return (0, utils_js_1.parseEgressSchema)((0, schema_js_1.PermissionSchema)(await (0, operations_js_1.updateItemWithAuthorization)(new URL(PermissionResources.buildPath(id), instance.config.host), instance.authorizer, (0, utils_js_1.parseEgressSchema)(schema_js_1.UpdatePermissionPayloadSchema.onUndeclaredKey('delete')(item)))));
+}
+async function deletePermission(instance, id) {
+    return (0, utils_js_1.parseEgressSchema)((0, schema_js_1.PermissionSchema)(await (0, operations_js_1.deleteItemWithAuthorization)(new URL(PermissionResources.buildPath(id), instance.config.host), instance.authorizer)));
+}

package/dist/cjs/authorization/permissions/schema.d.ts

@@ -0,0 +1,103 @@
+export declare const PermissionStatus: {
+    readonly ENABLED: "enabled";
+    readonly DISABLED: "disabled";
+};
+export type AnyPermissionStatus = (typeof PermissionStatus)[keyof typeof PermissionStatus];
+export declare const PermissionIdPropertySchema: import("arktype/out/methods/object.js").ObjectType<{
+    id: string;
+}, {}>;
+export type PermissionIdProperty = typeof PermissionIdPropertySchema.inferOut;
+export declare const PermissionAssociationsSchema: import("arktype/out/methods/object.js").ObjectType<{
+    apps?: string[] | undefined;
+    roles?: string[] | undefined;
+}, {}>;
+export type PermissionAssociations = typeof PermissionAssociationsSchema.inferOut;
+export declare const PermissionSchema: import("arktype/out/methods/object.js").ObjectType<{
+    id: string;
+    name: string;
+    status: "enabled" | "disabled";
+    description?: string | undefined;
+    createdAt: Date | ((In: string) => import("arktype/out/attributes.js").To<Date>);
+    updatedAt: Date | ((In: string) => import("arktype/out/attributes.js").To<Date>);
+    apps?: {
+        ids?: string[] | undefined;
+        count?: number | undefined;
+    } | undefined;
+    roles?: {
+        ids?: string[] | undefined;
+        count?: number | undefined;
+    } | undefined;
+    deletedAt?: Date | ((In: string) => import("arktype/out/attributes.js").To<Date>) | undefined;
+    deactivatedAt?: Date | ((In: string) => import("arktype/out/attributes.js").To<Date>) | undefined;
+    metadata: (In: import("arktype/out/attributes.js").Default<unknown, Map<string, string | number | boolean>>) => import("arktype").Out<Map<string, string | number | boolean>>;
+}, {}>;
+export type PermissionProperties = typeof PermissionSchema.inferIn;
+export type Permission = typeof PermissionSchema.inferOut;
+export declare const PermissionPayloadSchema: import("arktype/out/methods/object.js").ObjectType<{
+    id: string;
+    name: string;
+    status: "enabled" | "disabled";
+    description?: string | undefined;
+    createdAt: (In: string | Date) => import("arktype").Out<string>;
+    updatedAt: (In: string | Date) => import("arktype").Out<string>;
+    apps?: {
+        ids?: string[] | undefined;
+        count?: number | undefined;
+    } | undefined;
+    roles?: {
+        ids?: string[] | undefined;
+        count?: number | undefined;
+    } | undefined;
+    deletedAt?: ((In: string | Date | undefined) => import("arktype").Out<string | undefined>) | undefined;
+    deactivatedAt?: ((In: string | Date | undefined) => import("arktype").Out<string | undefined>) | undefined;
+    metadata?: ((In: {
+        [x: string]: string | number | boolean;
+    } | Map<string, string | number | boolean> | null | undefined) => import("arktype").Out<{
+        [x: string]: string | number | boolean;
+    } | undefined>) | undefined;
+}, {}>;
+export type PermissionPayload = typeof PermissionPayloadSchema.inferOut;
+/**
+ * Insert
+ */
+export declare const InsertPermissionPayloadSchema: import("arktype/out/methods/object.js").ObjectType<{
+    id: import("arktype/out/attributes.js").Default<string, string>;
+    name: string;
+    status: import("arktype/out/attributes.js").Default<"enabled" | "disabled", "enabled">;
+    description?: string | undefined;
+    apps?: string[] | undefined;
+    roles?: string[] | undefined;
+    metadata?: ((In: {
+        [x: string]: string | number | boolean;
+    } | Map<string, string | number | boolean> | null | undefined) => import("arktype").Out<{
+        [x: string]: string | number | boolean;
+    } | null>) | undefined;
+}, {}>;
+export type InsertPermissionInput = typeof InsertPermissionPayloadSchema.inferIn;
+export type InsertPermissionPayload = typeof InsertPermissionPayloadSchema.inferOut;
+/**
+ * Update
+ */
+export declare const UpdatePermissionPayloadSchema: import("arktype/out/methods/object.js").ObjectType<{
+    name?: string | undefined;
+    status?: "enabled" | "disabled" | undefined;
+    description?: string | undefined;
+    metadata?: ((In: {
+        [x: string]: string | number | boolean;
+    } | Map<string, string | number | boolean> | null | undefined) => import("arktype").Out<{
+        [x: string]: string | number | boolean;
+    } | null>) | undefined;
+}, {}>;
+export type UpdatePermissionInput = typeof UpdatePermissionPayloadSchema.inferIn;
+export type UpdatePermissionPayload = typeof UpdatePermissionPayloadSchema.inferOut;
+/**
+ * Association
+ */
+export declare const PermissionAssociationReferenceSchema: import("arktype/out/methods/object.js").ObjectType<{
+    id: string;
+    name: string;
+    status: import("arktype/out/attributes.js").Default<"enabled" | "disabled", "disabled">;
+    model: "Permission";
+}, {}>;
+export type PermissionAssociationReference = typeof PermissionAssociationReferenceSchema.inferOut;
+//# sourceMappingURL=schema.d.ts.map

package/dist/cjs/authorization/permissions/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/authorization/permissions/schema.ts"],"names":[],"mappings":"AAoBA,eAAO,MAAM,gBAAgB;;;CAGnB,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAC7B,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,OAAO,gBAAgB,CAAC,CAAC;AAE3D,eAAO,MAAM,0BAA0B;;MAErC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,OAAO,0BAA0B,CAAC,QAAQ,CAAC;AAO9E,eAAO,MAAM,4BAA4B;;;MAGvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAChC,OAAO,4BAA4B,CAAC,QAAQ,CAAC;AAQ/C,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;MAOI,CAAC;AAClC,MAAM,MAAM,oBAAoB,GAAG,OAAO,gBAAgB,CAAC,OAAO,CAAC;AACnE,MAAM,MAAM,UAAU,GAAG,OAAO,gBAAgB,CAAC,QAAQ,CAAC;AAE1D,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;MAOC,CAAC;AACtC,MAAM,MAAM,iBAAiB,GAAG,OAAO,uBAAuB,CAAC,QAAQ,CAAC;AAExE;;GAEG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;MAOC,CAAC;AAC5C,MAAM,MAAM,qBAAqB,GAC/B,OAAO,6BAA6B,CAAC,OAAO,CAAC;AAC/C,MAAM,MAAM,uBAAuB,GACjC,OAAO,6BAA6B,CAAC,QAAQ,CAAC;AAEhD;;GAEG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;MAIC,CAAC;AAC5C,MAAM,MAAM,qBAAqB,GAC/B,OAAO,6BAA6B,CAAC,OAAO,CAAC;AAC/C,MAAM,MAAM,uBAAuB,GACjC,OAAO,6BAA6B,CAAC,QAAQ,CAAC;AAEhD;;GAEG;AAEH,eAAO,MAAM,oCAAoC;;;;;MAK7C,CAAC;AACL,MAAM,MAAM,8BAA8B,GACxC,OAAO,oCAAoC,CAAC,QAAQ,CAAC"}

package/dist/cjs/authorization/permissions/schema.js

@@ -0,0 +1,69 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PermissionAssociationReferenceSchema = exports.UpdatePermissionPayloadSchema = exports.InsertPermissionPayloadSchema = exports.PermissionPayloadSchema = exports.PermissionSchema = exports.PermissionAssociationsSchema = exports.PermissionIdPropertySchema = exports.PermissionStatus = void 0;
+const arktype_1 = require("arktype");
+const schema_js_1 = require("../../app/schema.js");
+const index_js_1 = require("../../common/index.js");
+const aggregate_js_1 = require("../../common/schema/aggregate.js");
+const metadata_js_1 = require("../../common/schema/metadata.js");
+const schema_js_2 = require("../schema.js");
+exports.PermissionStatus = {
+    ENABLED: 'enabled',
+    DISABLED: 'disabled',
+};
+exports.PermissionIdPropertySchema = (0, arktype_1.type)({
+    id: schema_js_2.PermissionIdSchema,
+});
+const PermissionStatusSchema = arktype_1.type.enumerated(exports.PermissionStatus.ENABLED, exports.PermissionStatus.DISABLED);
+exports.PermissionAssociationsSchema = (0, arktype_1.type)({
+    apps: schema_js_1.AppIdAssociationsSchema.optional(),
+    roles: schema_js_2.RoleIdAssociationsSchema.optional(),
+});
+const BaseSchema = exports.PermissionIdPropertySchema.and({
+    name: (0, arktype_1.type)('string'),
+    status: PermissionStatusSchema,
+    description: (0, arktype_1.type)('string').optional(),
+});
+exports.PermissionSchema = BaseSchema.and({
+    apps: aggregate_js_1.AggregateSchema.optional(),
+    roles: aggregate_js_1.AggregateSchema.optional(),
+    createdAt: index_js_1.RequiredDateSchema,
+    updatedAt: index_js_1.RequiredDateSchema,
+    'deletedAt?': index_js_1.OptionalDateSchema,
+    'deactivatedAt?': index_js_1.OptionalDateSchema,
+}).and(metadata_js_1.MetadataMapPropertySchema);
+exports.PermissionPayloadSchema = BaseSchema.and({
+    apps: aggregate_js_1.AggregateSchema.optional(),
+    roles: aggregate_js_1.AggregateSchema.optional(),
+    createdAt: index_js_1.RequiredDatePayloadSchema,
+    updatedAt: index_js_1.RequiredDatePayloadSchema,
+    'deletedAt?': index_js_1.OptionalDatePayloadSchema,
+    'deactivatedAt?': index_js_1.OptionalDatePayloadSchema,
+}).and(metadata_js_1.MetadataPayloadPropertySchema);
+/**
+ * Insert
+ */
+exports.InsertPermissionPayloadSchema = (0, arktype_1.type)({
+    id: schema_js_2.PermissionIdSchema.default(() => (0, schema_js_2.generatePermissionId)()),
+    name: (0, arktype_1.type)('string'),
+    status: PermissionStatusSchema.default(exports.PermissionStatus.ENABLED),
+    description: (0, arktype_1.type)('string').optional(),
+})
+    .and(exports.PermissionAssociationsSchema)
+    .and(metadata_js_1.UpsertMetadataPropertyPayloadSchema);
+/**
+ * Update
+ */
+exports.UpdatePermissionPayloadSchema = (0, arktype_1.type)({
+    name: (0, arktype_1.type)('string').optional(),
+    status: PermissionStatusSchema.optional(),
+    description: (0, arktype_1.type)('string').optional(),
+}).and(metadata_js_1.UpsertMetadataPropertyPayloadSchema);
+/**
+ * Association
+ */
+exports.PermissionAssociationReferenceSchema = exports.PermissionIdPropertySchema.and({
+    name: (0, arktype_1.type)('string'),
+    status: PermissionStatusSchema.default('disabled'),
+    model: "'Permission'",
+});

package/dist/cjs/authorization/permissions/schema.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=schema.test.d.ts.map

package/dist/cjs/authorization/permissions/schema.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.test.d.ts","sourceRoot":"","sources":["../../../../src/authorization/permissions/schema.test.ts"],"names":[],"mappings":""}

package/dist/cjs/authorization/permissions/schema.test.js

@@ -0,0 +1,217 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const arktype_1 = require("arktype");
+const vitest_1 = require("vitest");
+const utils_js_1 = require("../../app/utils.js");
+const schema_js_1 = require("../schema.js");
+const schema_js_2 = require("./schema.js");
+(0, vitest_1.describe)('Authorization Permissions - Schema', () => {
+    (0, vitest_1.describe)('PermissionStatus constants', () => {
+        (0, vitest_1.test)('should have correct status values', () => {
+            (0, vitest_1.expect)(schema_js_2.PermissionStatus.ENABLED).toBe('enabled');
+            (0, vitest_1.expect)(schema_js_2.PermissionStatus.DISABLED).toBe('disabled');
+        });
+    });
+    (0, vitest_1.describe)('PermissionIdSchema', () => {
+        (0, vitest_1.test)('should accept valid string ID', () => {
+            const result = (0, schema_js_1.PermissionIdSchema)((0, schema_js_1.generatePermissionId)());
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+        });
+        (0, vitest_1.test)('should reject non-string values', () => {
+            (0, vitest_1.expect)((0, schema_js_1.PermissionIdSchema)(123)).toBeInstanceOf(arktype_1.type.errors);
+            (0, vitest_1.expect)((0, schema_js_1.PermissionIdSchema)(null)).toBeInstanceOf(arktype_1.type.errors);
+        });
+    });
+    (0, vitest_1.describe)('PermissionIdPropertySchema', () => {
+        (0, vitest_1.test)('should accept valid id property', () => {
+            const payload = { id: (0, schema_js_1.generatePermissionId)() };
+            const result = (0, schema_js_2.PermissionIdPropertySchema)(payload);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            (0, vitest_1.expect)(result).toEqual({ id: payload.id });
+        });
+        (0, vitest_1.test)('should reject missing id', () => {
+            const result = (0, schema_js_2.PermissionIdPropertySchema)({});
+            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+        });
+    });
+    (0, vitest_1.describe)('PermissionAssociationsSchema', () => {
+        const payload = {
+            apps: [(0, utils_js_1.generateAppId)(), (0, utils_js_1.generateAppId)()],
+            roles: [(0, schema_js_1.generateRoleId)(), (0, schema_js_1.generateRoleId)()],
+        };
+        (0, vitest_1.test)('should accept valid associations', () => {
+            const result = (0, schema_js_2.PermissionAssociationsSchema)(payload);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            (0, vitest_1.expect)(result).toEqual({
+                apps: payload.apps,
+                roles: payload.roles,
+            });
+        });
+        (0, vitest_1.test)('should accept optional associations', () => {
+            const result = (0, schema_js_2.PermissionAssociationsSchema)({});
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            (0, vitest_1.expect)(result).toEqual({});
+        });
+        (0, vitest_1.test)('should accept undefined associations', () => {
+            const result = (0, schema_js_2.PermissionAssociationsSchema)({
+                apps: undefined,
+                roles: [(0, schema_js_1.generateRoleId)()],
+            });
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+        });
+        (0, vitest_1.test)('should reject non-array associations', () => {
+            const result = (0, schema_js_2.PermissionAssociationsSchema)({
+                apps: 'not-an-array',
+            });
+            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+        });
+    });
+    (0, vitest_1.describe)('PermissionSchema', () => {
+        (0, vitest_1.test)('should accept complete permission object', () => {
+            const permission = {
+                id: (0, schema_js_1.generatePermissionId)(),
+                name: 'read:users',
+                status: 'enabled',
+                description: 'Read user data',
+                apps: { ids: [(0, utils_js_1.generateAppId)()], count: 1 },
+                roles: { ids: [(0, schema_js_1.generateRoleId)()], count: 1 },
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                metadata: { key: 'value' },
+            };
+            const result = (0, schema_js_2.PermissionSchema)(permission);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+        });
+        (0, vitest_1.test)('should accept minimal permission object', () => {
+            const permission = {
+                id: (0, schema_js_1.generatePermissionId)(),
+                name: 'read:users',
+                status: 'enabled',
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                metadata: {},
+            };
+            const result = (0, schema_js_2.PermissionSchema)(permission);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+        });
+        (0, vitest_1.test)('should reject invalid status', () => {
+            const permission = {
+                id: (0, schema_js_1.generatePermissionId)(),
+                name: 'read:users',
+                status: 'invalid',
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                metadata: {},
+            };
+            const result = (0, schema_js_2.PermissionSchema)(permission);
+            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+        });
+        (0, vitest_1.test)('should reject missing required fields', () => {
+            const permission = {
+                id: (0, schema_js_1.generatePermissionId)(),
+                name: 'read:users',
+            };
+            const result = (0, schema_js_2.PermissionSchema)(permission);
+            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+        });
+    });
+    (0, vitest_1.describe)('InsertPermissionPayloadSchema', () => {
+        (0, vitest_1.test)('should accept complete insert payload', () => {
+            const payload = {
+                id: (0, schema_js_1.generatePermissionId)(),
+                name: 'read:users',
+                status: 'enabled',
+                description: 'Read user data',
+                apps: [(0, utils_js_1.generateAppId)()],
+                roles: [(0, schema_js_1.generateRoleId)()],
+                metadata: { key: 'value' },
+            };
+            const result = (0, schema_js_2.InsertPermissionPayloadSchema)(payload);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+        });
+        (0, vitest_1.test)('should accept minimal insert payload', () => {
+            const payload = {
+                name: 'read:users',
+            };
+            const result = (0, schema_js_2.InsertPermissionPayloadSchema)(payload);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            (0, vitest_1.expect)(result.status).toBe('enabled'); // default value
+        });
+        (0, vitest_1.test)('should generate default ID when not provided', () => {
+            const payload = { name: 'read:users' };
+            const result = (0, schema_js_2.InsertPermissionPayloadSchema)(payload);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            (0, vitest_1.expect)(result.id).toMatch(/^per_/);
+        });
+        (0, vitest_1.test)('should reject missing name', () => {
+            const result = (0, schema_js_2.InsertPermissionPayloadSchema)({});
+            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+        });
+    });
+    (0, vitest_1.describe)('UpdatePermissionPayloadSchema', () => {
+        (0, vitest_1.test)('should accept all optional fields', () => {
+            const payload = {
+                name: 'updated:permission',
+                status: 'disabled',
+                description: 'Updated description',
+                metadata: { updated: true },
+            };
+            const result = (0, schema_js_2.UpdatePermissionPayloadSchema)(payload);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            (0, vitest_1.expect)(result).toEqual(payload);
+        });
+        (0, vitest_1.test)('should accept empty update payload', () => {
+            const result = (0, schema_js_2.UpdatePermissionPayloadSchema)({});
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            (0, vitest_1.expect)(result).toEqual({});
+        });
+        (0, vitest_1.test)('should accept partial updates', () => {
+            const payload = { name: 'new:name' };
+            const result = (0, schema_js_2.UpdatePermissionPayloadSchema)(payload);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            (0, vitest_1.expect)(result).toEqual(payload);
+        });
+        (0, vitest_1.test)('should reject invalid status', () => {
+            const payload = { status: 'invalid-status' };
+            const result = (0, schema_js_2.UpdatePermissionPayloadSchema)(payload);
+            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+        });
+    });
+    (0, vitest_1.describe)('PermissionAssociationReferenceSchema', () => {
+        (0, vitest_1.test)('should accept complete association reference', () => {
+            const reference = {
+                id: (0, schema_js_1.generatePermissionId)(),
+                name: 'read:users',
+                status: 'enabled',
+                model: 'Permission',
+            };
+            const result = (0, schema_js_2.PermissionAssociationReferenceSchema)(reference);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            (0, vitest_1.expect)(result).toEqual(reference);
+        });
+        (0, vitest_1.test)('should use default status when not provided', () => {
+            const reference = {
+                id: (0, schema_js_1.generatePermissionId)(),
+                name: 'read:users',
+                model: 'Permission',
+            };
+            const result = (0, schema_js_2.PermissionAssociationReferenceSchema)(reference);
+            (0, vitest_1.expect)(result).not.toBeInstanceOf(arktype_1.type.errors);
+            (0, vitest_1.expect)(result.status).toBe('disabled'); // default value
+        });
+        (0, vitest_1.test)('should reject missing required fields', () => {
+            const reference = { id: (0, schema_js_1.generatePermissionId)() };
+            const result = (0, schema_js_2.PermissionAssociationReferenceSchema)(reference);
+            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+        });
+        (0, vitest_1.test)('should reject invalid model value', () => {
+            const reference = {
+                id: (0, schema_js_1.generatePermissionId)(),
+                name: 'read:users',
+                model: 'InvalidModel',
+            };
+            const result = (0, schema_js_2.PermissionAssociationReferenceSchema)(reference);
+            (0, vitest_1.expect)(result).toBeInstanceOf(arktype_1.type.errors);
+        });
+    });
+});

package/dist/cjs/authorization/roles/resources.d.ts

@@ -0,0 +1,20 @@
+import type { MondoIdentity } from '../../common/resources/init.js';
+import { type PaginationCollection } from '../../common/schema/collection.js';
+import type { Pagination } from '../../common/schema/pagination.js';
+import { type InsertRoleInput, type Role, type UpdateRoleInput } from './schema.js';
+export declare class RoleResources {
+    private readonly instance;
+    constructor(instance: MondoIdentity);
+    static buildPath(id?: string): string;
+    listItems(pagination?: Pagination): Promise<PaginationCollection<Role>>;
+    getItem(id: string): Promise<Role>;
+    insertItem(item: InsertRoleInput): Promise<Role>;
+    updateItem(id: string, item: UpdateRoleInput): Promise<Role>;
+    deleteItem(id: string): Promise<Role>;
+}
+export declare function listRoles(instance: MondoIdentity, pagination?: Pagination): Promise<PaginationCollection<Role>>;
+export declare function getRole(instance: MondoIdentity, id: string): Promise<Role>;
+export declare function insertRole(instance: MondoIdentity, item: InsertRoleInput): Promise<Role>;
+export declare function updateRole(instance: MondoIdentity, id: string, item: UpdateRoleInput): Promise<Role>;
+export declare function deleteRole(instance: MondoIdentity, id: string): Promise<Role>;
+//# sourceMappingURL=resources.d.ts.map

package/dist/cjs/authorization/roles/resources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../../../src/authorization/roles/resources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAWpE,OAAO,EACL,KAAK,oBAAoB,EAE1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EACL,KAAK,eAAe,EAEpB,KAAK,IAAI,EAET,KAAK,eAAe,EAErB,MAAM,aAAa,CAAC;AAIrB,qBAAa,aAAa;IACL,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,aAAa;IAE3D,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM;IAQ9B,SAAS,CACd,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAI/B,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlC,UAAU,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhD,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAI5D,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG7C;AAED,wBAAsB,SAAS,CAC7B,QAAQ,EAAE,aAAa,EACvB,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAWrC;AAED,wBAAsB,OAAO,CAC3B,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,aAAa,EACvB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,IAAI,CAAC,CAYf;AAED,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,IAAI,CAAC,CAYf;AAED,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,IAAI,CAAC,CASf"}

package/dist/cjs/authorization/roles/resources.js

@@ -0,0 +1,57 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RoleResources = void 0;
+exports.listRoles = listRoles;
+exports.getRole = getRole;
+exports.insertRole = insertRole;
+exports.updateRole = updateRole;
+exports.deleteRole = deleteRole;
+const operations_js_1 = require("../../common/resources/operations.js");
+const utils_js_1 = require("../../common/resources/utils.js");
+const collection_js_1 = require("../../common/schema/collection.js");
+const schema_js_1 = require("./schema.js");
+const PATH = '/v1/authorization/roles';
+class RoleResources {
+    instance;
+    constructor(instance) {
+        this.instance = instance;
+    }
+    static buildPath(id) {
+        if (id?.startsWith(PATH)) {
+            return id;
+        }
+        return [PATH, id].filter(Boolean).join('/');
+    }
+    listItems(pagination) {
+        return listRoles(this.instance, pagination);
+    }
+    getItem(id) {
+        return getRole(this.instance, id);
+    }
+    insertItem(item) {
+        return insertRole(this.instance, item);
+    }
+    updateItem(id, item) {
+        return updateRole(this.instance, id, item);
+    }
+    deleteItem(id) {
+        return deleteRole(this.instance, id);
+    }
+}
+exports.RoleResources = RoleResources;
+async function listRoles(instance, pagination) {
+    const url = (0, utils_js_1.addPaginationToURL)(new URL(RoleResources.buildPath(), instance.config.host), pagination);
+    return (0, utils_js_1.parseEgressSchema)((0, collection_js_1.PaginationCollectionSchema)(schema_js_1.RoleSchema)(await (0, operations_js_1.getItemWithAuthorization)(url, instance.authorizer)));
+}
+async function getRole(instance, id) {
+    return (0, utils_js_1.parseEgressSchema)((0, schema_js_1.RoleSchema)(await (0, operations_js_1.getItemWithAuthorization)(new URL(RoleResources.buildPath(id), instance.config.host), instance.authorizer)));
+}
+async function insertRole(instance, item) {
+    return (0, utils_js_1.parseEgressSchema)((0, schema_js_1.RoleSchema)(await (0, operations_js_1.insertItemWithAuthorization)(new URL(RoleResources.buildPath(), instance.config.host), instance.authorizer, (0, utils_js_1.parseEgressSchema)(schema_js_1.InsertRolePayloadSchema.onUndeclaredKey('delete')(item)))));
+}
+async function updateRole(instance, id, item) {
+    return (0, utils_js_1.parseEgressSchema)((0, schema_js_1.RoleSchema)(await (0, operations_js_1.updateItemWithAuthorization)(new URL(RoleResources.buildPath(id), instance.config.host), instance.authorizer, (0, utils_js_1.parseEgressSchema)(schema_js_1.UpdateRolePayloadSchema.onUndeclaredKey('delete')(item)))));
+}
+async function deleteRole(instance, id) {
+    return (0, utils_js_1.parseEgressSchema)((0, schema_js_1.RoleSchema)(await (0, operations_js_1.deleteItemWithAuthorization)(new URL(RoleResources.buildPath(id), instance.config.host), instance.authorizer)));
+}

package/dist/cjs/authorization/roles/schema.d.ts

@@ -0,0 +1,113 @@
+export declare const RoleStatus: {
+    readonly ENABLED: "enabled";
+    readonly DISABLED: "disabled";
+};
+export type AnyRoleStatus = (typeof RoleStatus)[keyof typeof RoleStatus];
+export declare const RoleIdPropertySchema: import("arktype/out/methods/object.js").ObjectType<{
+    id: string;
+}, {}>;
+export type RoleIdProperty = typeof RoleIdPropertySchema.inferOut;
+export declare const RoleAssociationsSchema: import("arktype/out/methods/object.js").ObjectType<{
+    apps?: string[] | undefined;
+    permissions?: string[] | undefined;
+    users?: string[] | undefined;
+}, {}>;
+export type RoleAssociations = typeof RoleAssociationsSchema.inferOut;
+export declare const RoleSchema: import("arktype/out/methods/object.js").ObjectType<{
+    id: string;
+    name: string;
+    status: "enabled" | "disabled";
+    description?: string | undefined;
+    apps?: {
+        ids?: string[] | undefined;
+        count?: number | undefined;
+    } | undefined;
+    users?: {
+        ids?: string[] | undefined;
+        count?: number | undefined;
+    } | undefined;
+    permissions?: {
+        ids?: string[] | undefined;
+        count?: number | undefined;
+    } | undefined;
+    createdAt: Date | ((In: string) => import("arktype/out/attributes.js").To<Date>);
+    updatedAt: Date | ((In: string) => import("arktype/out/attributes.js").To<Date>);
+    deletedAt?: Date | ((In: string) => import("arktype/out/attributes.js").To<Date>) | undefined;
+    deactivatedAt?: Date | ((In: string) => import("arktype/out/attributes.js").To<Date>) | undefined;
+    metadata: (In: import("arktype/out/attributes.js").Default<unknown, Map<string, string | number | boolean>>) => import("arktype").Out<Map<string, string | number | boolean>>;
+}, {}>;
+export type RoleProperties = typeof RoleSchema.inferIn;
+export type Role = typeof RoleSchema.inferOut;
+export declare const RolePayloadSchema: import("arktype/out/methods/object.js").ObjectType<{
+    id: string;
+    name: string;
+    status: "enabled" | "disabled";
+    description?: string | undefined;
+    apps?: {
+        ids?: string[] | undefined;
+        count?: number | undefined;
+    } | undefined;
+    users?: {
+        ids?: string[] | undefined;
+        count?: number | undefined;
+    } | undefined;
+    permissions?: {
+        ids?: string[] | undefined;
+        count?: number | undefined;
+    } | undefined;
+    createdAt: (In: string | Date) => import("arktype").Out<string>;
+    updatedAt: (In: string | Date) => import("arktype").Out<string>;
+    deletedAt?: ((In: string | Date | undefined) => import("arktype").Out<string | undefined>) | undefined;
+    deactivatedAt?: ((In: string | Date | undefined) => import("arktype").Out<string | undefined>) | undefined;
+    metadata?: ((In: {
+        [x: string]: string | number | boolean;
+    } | Map<string, string | number | boolean> | null | undefined) => import("arktype").Out<{
+        [x: string]: string | number | boolean;
+    } | undefined>) | undefined;
+}, {}>;
+export type RolePayload = typeof RolePayloadSchema.inferOut;
+/**
+ * Insert
+ */
+export declare const InsertRolePayloadSchema: import("arktype/out/methods/object.js").ObjectType<{
+    id: import("arktype/out/attributes.js").Default<string, string>;
+    name: string;
+    status: import("arktype/out/attributes.js").Default<"enabled" | "disabled", "enabled">;
+    description?: string | undefined;
+    apps?: string[] | undefined;
+    permissions?: string[] | undefined;
+    users?: string[] | undefined;
+    metadata?: ((In: {
+        [x: string]: string | number | boolean;
+    } | Map<string, string | number | boolean> | null | undefined) => import("arktype").Out<{
+        [x: string]: string | number | boolean;
+    } | null>) | undefined;
+}, {}>;
+export type InsertRoleInput = typeof InsertRolePayloadSchema.inferIn;
+export type InsertRolePayload = typeof InsertRolePayloadSchema.inferOut;
+/**
+ * Update
+ */
+export declare const UpdateRolePayloadSchema: import("arktype/out/methods/object.js").ObjectType<{
+    name?: string | undefined;
+    status?: "enabled" | "disabled" | undefined;
+    description?: string | undefined;
+    metadata?: ((In: {
+        [x: string]: string | number | boolean;
+    } | Map<string, string | number | boolean> | null | undefined) => import("arktype").Out<{
+        [x: string]: string | number | boolean;
+    } | null>) | undefined;
+}, {}>;
+export type UpdateRoleInput = typeof UpdateRolePayloadSchema.inferIn;
+export type UpdateRolePayload = typeof UpdateRolePayloadSchema.inferOut;
+/**
+ * Association
+ */
+export declare const RoleAssociationReferenceSchema: import("arktype/out/methods/object.js").ObjectType<{
+    id: string;
+    name: string;
+    status: import("arktype/out/attributes.js").Default<"enabled" | "disabled", "disabled">;
+    model: "Role";
+}, {}>;
+export type RoleAssociationReference = typeof RoleAssociationReferenceSchema.inferOut;
+//# sourceMappingURL=schema.d.ts.map