@go-mondo/identity-sdk 0.0.2-beta.1 → 0.0.2-beta.13

package/dist/esm/authorization/permissions/resources.js

@@ -1,5 +1,5 @@
 import { deleteItemWithAuthorization, getItemWithAuthorization, insertItemWithAuthorization, updateItemWithAuthorization, } from '../../common/resources/operations.js';
-import { addPaginationToURL, parseEgressSchema, } from '../../common/resources/utils.js';
+import { addPaginationToURL } from '../../common/resources/utils.js';
 import { PaginationCollectionSchema, } from '../../common/schema/collection.js';
 import { InsertPermissionPayloadSchema, PermissionSchema, UpdatePermissionPayloadSchema, } from './schema.js';
 const PATH = '/v1/authorization/permissions';
@@ -32,17 +32,17 @@ export class PermissionResources {
 }
 export async function listPermissions(instance, pagination) {
     const url = addPaginationToURL(new URL(PermissionResources.buildPath(), instance.config.host), pagination);
-    return parseEgressSchema(PaginationCollectionSchema(PermissionSchema)(await getItemWithAuthorization(url, instance.authorizer)));
+    return PaginationCollectionSchema(PermissionSchema).parse(await getItemWithAuthorization(url, instance.authorizer));
 }
 export async function getPermission(instance, id) {
-    return parseEgressSchema(PermissionSchema(await getItemWithAuthorization(new URL(PermissionResources.buildPath(id), instance.config.host), instance.authorizer)));
+    return PermissionSchema.parse(await getItemWithAuthorization(new URL(PermissionResources.buildPath(id), instance.config.host), instance.authorizer));
 }
 export async function insertPermission(instance, item) {
-    return parseEgressSchema(PermissionSchema(await insertItemWithAuthorization(new URL(PermissionResources.buildPath(), instance.config.host), instance.authorizer, parseEgressSchema(InsertPermissionPayloadSchema.onUndeclaredKey('delete')(item)))));
+    return PermissionSchema.parse(await insertItemWithAuthorization(new URL(PermissionResources.buildPath(), instance.config.host), instance.authorizer, InsertPermissionPayloadSchema.parse(item)));
 }
 export async function updatePermission(instance, id, item) {
-    return parseEgressSchema(PermissionSchema(await updateItemWithAuthorization(new URL(PermissionResources.buildPath(id), instance.config.host), instance.authorizer, parseEgressSchema(UpdatePermissionPayloadSchema.onUndeclaredKey('delete')(item)))));
+    return PermissionSchema.parse(await updateItemWithAuthorization(new URL(PermissionResources.buildPath(id), instance.config.host), instance.authorizer, UpdatePermissionPayloadSchema.parse(item)));
 }
 export async function deletePermission(instance, id) {
-    await deleteItemWithAuthorization(new URL(PermissionResources.buildPath(id), instance.config.host), instance.authorizer);
+    return PermissionSchema.parse(await deleteItemWithAuthorization(new URL(PermissionResources.buildPath(id), instance.config.host), instance.authorizer));
 }

package/dist/esm/authorization/permissions/schema.d.ts

@@ -1,104 +1,107 @@
+import { z } from 'zod';
 export declare const PermissionStatus: {
     readonly ENABLED: "enabled";
     readonly DISABLED: "disabled";
 };
 export type AnyPermissionStatus = (typeof PermissionStatus)[keyof typeof PermissionStatus];
-export declare const PermissionIdSchema: import("arktype/internal/methods/string.ts").StringType<string, {}>;
-export declare const PermissionIdPropertySchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    id: string;
-}, {}>;
-export type PermissionIdProperty = typeof PermissionIdPropertySchema.inferOut;
-export declare const PermissionAssociationsSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    apps?: string[] | undefined;
-    roles?: string[] | undefined;
-}, {}>;
-export type PermissionAssociations = typeof PermissionAssociationsSchema.inferOut;
-export declare const PermissionSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    id: string;
-    name: string;
-    status: "enabled" | "disabled";
-    description?: string | undefined;
-    apps?: {
-        ids?: string[] | undefined;
-        count?: number | undefined;
-    } | undefined;
-    roles?: {
-        ids?: string[] | undefined;
-        count?: number | undefined;
-    } | undefined;
-    createdAt: Date | ((In: string) => import("arktype/internal/attributes.ts").To<Date>);
-    updatedAt: Date | ((In: string) => import("arktype/internal/attributes.ts").To<Date>);
-    deletedAt?: Date | ((In: string) => import("arktype/internal/attributes.ts").To<Date>) | undefined;
-    deactivatedAt?: Date | ((In: string) => import("arktype/internal/attributes.ts").To<Date>) | undefined;
-    metadata: (In: import("arktype/internal/attributes.ts").Default<unknown, Map<string, string | number | boolean>>) => import("arktype/internal/attributes.ts").Out<Map<string, string | number | boolean> | Map<string, any>>;
-}, {}>;
-export type PermissionProperties = typeof PermissionSchema.inferIn;
-export type Permission = typeof PermissionSchema.inferOut;
-export declare const PermissionPayloadSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    id: string;
-    name: string;
-    status: "enabled" | "disabled";
-    description?: string | undefined;
-    apps?: {
-        ids?: string[] | undefined;
-        count?: number | undefined;
-    } | undefined;
-    roles?: {
-        ids?: string[] | undefined;
-        count?: number | undefined;
-    } | undefined;
-    createdAt: (In: string | Date) => import("arktype/internal/attributes.ts").Out<string>;
-    updatedAt: (In: string | Date) => import("arktype/internal/attributes.ts").Out<string>;
-    deletedAt?: ((In: string | Date | undefined) => import("arktype/internal/attributes.ts").Out<string | undefined>) | undefined;
-    deactivatedAt?: ((In: string | Date | undefined) => import("arktype/internal/attributes.ts").Out<string | undefined>) | undefined;
-    metadata?: ((In: {
-        [x: string]: string | number | boolean;
-    } | Map<string, string | number | boolean> | null | undefined) => import("arktype/internal/attributes.ts").Out<{
-        [x: string]: string | number | boolean;
-    } | undefined>) | undefined;
-}, {}>;
-export type PermissionPayload = typeof PermissionPayloadSchema.inferOut;
+export declare const PermissionIdPropertySchema: z.ZodObject<{
+    id: z.ZodString;
+}, z.core.$strip>;
+export type PermissionIdProperty = z.output<typeof PermissionIdPropertySchema>;
+export declare const PermissionAssociationsSchema: z.ZodObject<{
+    apps: z.ZodOptional<z.ZodUnion<[z.ZodUndefined, z.ZodArray<z.ZodString>]>>;
+    roles: z.ZodOptional<z.ZodUnion<readonly [z.ZodUndefined, z.ZodArray<z.ZodString>]>>;
+}, z.core.$strip>;
+export type PermissionAssociations = z.output<typeof PermissionAssociationsSchema>;
+export declare const PermissionSchema: z.ZodObject<{
+    metadata: z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Map<string, string | number | boolean>, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>;
+    apps: z.ZodOptional<z.ZodObject<{
+        ids: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        count: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    roles: z.ZodOptional<z.ZodObject<{
+        ids: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        count: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    createdAt: z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>;
+    updatedAt: z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>;
+    deletedAt: z.ZodOptional<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>>;
+    deactivatedAt: z.ZodOptional<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>>;
+    name: z.ZodString;
+    status: z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>;
+    description: z.ZodOptional<z.ZodString>;
+    id: z.ZodString;
+}, z.core.$strip>;
+export type PermissionProperties = z.input<typeof PermissionSchema>;
+export type Permission = z.output<typeof PermissionSchema>;
+export declare const PermissionPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    apps: z.ZodOptional<z.ZodObject<{
+        ids: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        count: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    roles: z.ZodOptional<z.ZodObject<{
+        ids: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        count: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    createdAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+    updatedAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+    deletedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    deactivatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    name: z.ZodString;
+    status: z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>;
+    description: z.ZodOptional<z.ZodString>;
+    id: z.ZodString;
+}, z.core.$strip>;
+export type PermissionPayload = z.output<typeof PermissionPayloadSchema>;
 /**
  * Insert
  */
-export declare const InsertPermissionPayloadSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    id: import("arktype/internal/attributes.ts").Default<string, string>;
-    name: string;
-    status: import("arktype/internal/attributes.ts").Default<"enabled" | "disabled", "enabled">;
-    description?: string | undefined;
-    apps?: string[] | undefined;
-    roles?: string[] | undefined;
-    metadata?: ((In: {
-        [x: string]: string | number | boolean;
-    } | Map<string, string | number | boolean> | null | undefined) => import("arktype/internal/attributes.ts").Out<{
-        [x: string]: string | number | boolean;
-    } | null>) | undefined;
-}, {}>;
-export type InsertPermissionInput = typeof InsertPermissionPayloadSchema.inferIn;
-export type InsertPermissionPayload = typeof InsertPermissionPayloadSchema.inferOut;
+export declare const InsertPermissionPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | null | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    apps: z.ZodOptional<z.ZodUnion<[z.ZodUndefined, z.ZodArray<z.ZodString>]>>;
+    roles: z.ZodOptional<z.ZodUnion<readonly [z.ZodUndefined, z.ZodArray<z.ZodString>]>>;
+    id: z.ZodDefault<z.ZodString>;
+    name: z.ZodString;
+    status: z.ZodDefault<z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>>;
+    description: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type InsertPermissionInput = z.input<typeof InsertPermissionPayloadSchema>;
+export type InsertPermissionPayload = z.output<typeof InsertPermissionPayloadSchema>;
 /**
  * Update
  */
-export declare const UpdatePermissionPayloadSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    name?: string | undefined;
-    status?: "enabled" | "disabled" | undefined;
-    description?: string | undefined;
-    metadata?: ((In: {
-        [x: string]: string | number | boolean;
-    } | Map<string, string | number | boolean> | null | undefined) => import("arktype/internal/attributes.ts").Out<{
-        [x: string]: string | number | boolean;
-    } | null>) | undefined;
-}, {}>;
-export type UpdatePermissionInput = typeof UpdatePermissionPayloadSchema.inferIn;
-export type UpdatePermissionPayload = typeof UpdatePermissionPayloadSchema.inferOut;
+export declare const UpdatePermissionPayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | null | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    name: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>>;
+    description: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type UpdatePermissionInput = z.input<typeof UpdatePermissionPayloadSchema>;
+export type UpdatePermissionPayload = z.output<typeof UpdatePermissionPayloadSchema>;
 /**
  * Association
  */
-export declare const PermissionAssociationReferenceSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    id: string;
-    name: string;
-    status: "enabled" | "disabled";
-    model: "Permission";
-}, {}>;
-export type PermissionAssociationReference = typeof PermissionAssociationReferenceSchema.inferOut;
+export declare const PermissionAssociationReferenceSchema: z.ZodObject<{
+    name: z.ZodString;
+    status: z.ZodDefault<z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>>;
+    model: z.ZodLiteral<"Permission">;
+    id: z.ZodString;
+}, z.core.$strip>;
+export type PermissionAssociationReference = z.output<typeof PermissionAssociationReferenceSchema>;
 //# sourceMappingURL=schema.d.ts.map

package/dist/esm/authorization/permissions/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/authorization/permissions/schema.ts"],"names":[],"mappings":"AAeA,eAAO,MAAM,gBAAgB;;;CAGnB,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAC7B,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,OAAO,gBAAgB,CAAC,CAAC;AAE3D,eAAO,MAAM,kBAAkB,qEAAc,CAAC;AAE9C,eAAO,MAAM,0BAA0B;;MAErC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,OAAO,0BAA0B,CAAC,QAAQ,CAAC;AAS9E,eAAO,MAAM,4BAA4B;;;MAGvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAChC,OAAO,4BAA4B,CAAC,QAAQ,CAAC;AAU/C,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;MAKI,CAAC;AAClC,MAAM,MAAM,oBAAoB,GAAG,OAAO,gBAAgB,CAAC,OAAO,CAAC;AACnE,MAAM,MAAM,UAAU,GAAG,OAAO,gBAAgB,CAAC,QAAQ,CAAC;AAE1D,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;MAKC,CAAC;AACtC,MAAM,MAAM,iBAAiB,GAAG,OAAO,uBAAuB,CAAC,QAAQ,CAAC;AAExE;;GAEG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;MAOC,CAAC;AAC5C,MAAM,MAAM,qBAAqB,GAC/B,OAAO,6BAA6B,CAAC,OAAO,CAAC;AAC/C,MAAM,MAAM,uBAAuB,GACjC,OAAO,6BAA6B,CAAC,QAAQ,CAAC;AAEhD;;GAEG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;MAIC,CAAC;AAC5C,MAAM,MAAM,qBAAqB,GAC/B,OAAO,6BAA6B,CAAC,OAAO,CAAC;AAC/C,MAAM,MAAM,uBAAuB,GACjC,OAAO,6BAA6B,CAAC,QAAQ,CAAC;AAEhD;;GAEG;AACH,eAAO,MAAM,oCAAoC;;;;;MAG7C,CAAC;AACL,MAAM,MAAM,8BAA8B,GACxC,OAAO,oCAAoC,CAAC,QAAQ,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/authorization/permissions/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAoBxB,eAAO,MAAM,gBAAgB;;;CAGnB,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAC7B,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,OAAO,gBAAgB,CAAC,CAAC;AAE3D,eAAO,MAAM,0BAA0B;;iBAErC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAO/E,eAAO,MAAM,4BAA4B;;;iBAGvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAC3C,OAAO,4BAA4B,CACpC,CAAC;AASF,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;iBAS3B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AACpE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE3D,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;iBASlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEzE;;GAEG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;;iBAOxC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CACzC,OAAO,6BAA6B,CACrC,CAAC;AACF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAC5C,OAAO,6BAA6B,CACrC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;iBAKxC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CACzC,OAAO,6BAA6B,CACrC,CAAC;AACF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAC5C,OAAO,6BAA6B,CACrC,CAAC;AAEF;;GAEG;AAEH,eAAO,MAAM,oCAAoC;;;;;;;;iBAK/C,CAAC;AACH,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CACnD,OAAO,oCAAoC,CAC5C,CAAC"}

package/dist/esm/authorization/permissions/schema.js

@@ -1,63 +1,76 @@
-import { type } from 'arktype';
+import { z } from 'zod';
+import { AppIdAssociationsSchema } from '../../app/schema.js';
 import { OptionalDatePayloadSchema, OptionalDateSchema, RequiredDatePayloadSchema, RequiredDateSchema, } from '../../common/index.js';
 import { AggregateSchema } from '../../common/schema/aggregate.js';
-import { MetadataMapPropertySchema, MetadataPayloadPropertySchema, UpsertMetadataPayloadPropertySchema, } from '../../common/schema/metadata.js';
-import { generatePermissionId } from '../utils.js';
+import { MetadataMapPropertySchema, MetadataPayloadPropertySchema, UpsertMetadataPropertyPayloadSchema, } from '../../common/schema/metadata.js';
+import { PermissionIdSchema, RoleIdAssociationsSchema, generatePermissionId, } from '../schema.js';
 export const PermissionStatus = {
     ENABLED: 'enabled',
     DISABLED: 'disabled',
 };
-export const PermissionIdSchema = type.string;
-export const PermissionIdPropertySchema = type({
+export const PermissionIdPropertySchema = z.object({
     id: PermissionIdSchema,
 });
-const PermissionStatusSchema = type.enumerated(PermissionStatus.ENABLED, PermissionStatus.DISABLED);
-const AssociationSchema = type('string[] | undefined');
-export const PermissionAssociationsSchema = type({
-    apps: AssociationSchema.optional(),
-    roles: AssociationSchema.optional(),
+const PermissionStatusSchema = z.enum([
+    PermissionStatus.ENABLED,
+    PermissionStatus.DISABLED,
+]);
+export const PermissionAssociationsSchema = z.object({
+    apps: AppIdAssociationsSchema.optional(),
+    roles: RoleIdAssociationsSchema.optional(),
 });
-const BaseSchema = PermissionIdPropertySchema.and({
-    name: type('string'),
+const BaseSchema = z.object({
+    ...PermissionIdPropertySchema.shape,
+    name: z.string(),
     status: PermissionStatusSchema,
-    description: type('string').optional(),
+    description: z.string().optional(),
+});
+export const PermissionSchema = z.object({
+    ...BaseSchema.shape,
     apps: AggregateSchema.optional(),
     roles: AggregateSchema.optional(),
-});
-export const PermissionSchema = BaseSchema.and({
     createdAt: RequiredDateSchema,
     updatedAt: RequiredDateSchema,
-    'deletedAt?': OptionalDateSchema,
-    'deactivatedAt?': OptionalDateSchema,
-}).and(MetadataMapPropertySchema);
-export const PermissionPayloadSchema = BaseSchema.and({
+    deletedAt: OptionalDateSchema.optional(),
+    deactivatedAt: OptionalDateSchema.optional(),
+    ...MetadataMapPropertySchema.shape,
+});
+export const PermissionPayloadSchema = z.object({
+    ...BaseSchema.shape,
+    apps: AggregateSchema.optional(),
+    roles: AggregateSchema.optional(),
     createdAt: RequiredDatePayloadSchema,
     updatedAt: RequiredDatePayloadSchema,
-    'deletedAt?': OptionalDatePayloadSchema,
-    'deactivatedAt?': OptionalDatePayloadSchema,
-}).and(MetadataPayloadPropertySchema);
+    deletedAt: OptionalDatePayloadSchema.optional(),
+    deactivatedAt: OptionalDatePayloadSchema.optional(),
+    ...MetadataPayloadPropertySchema.shape,
+});
 /**
  * Insert
  */
-export const InsertPermissionPayloadSchema = type({
+export const InsertPermissionPayloadSchema = z.object({
     id: PermissionIdSchema.default(() => generatePermissionId()),
-    name: type('string'),
+    name: z.string(),
     status: PermissionStatusSchema.default(PermissionStatus.ENABLED),
-    description: type('string').optional(),
-})
-    .and(PermissionAssociationsSchema)
-    .and(UpsertMetadataPayloadPropertySchema);
+    description: z.string().optional(),
+    ...PermissionAssociationsSchema.shape,
+    ...UpsertMetadataPropertyPayloadSchema.shape,
+});
 /**
  * Update
  */
-export const UpdatePermissionPayloadSchema = type({
-    name: type('string').optional(),
+export const UpdatePermissionPayloadSchema = z.object({
+    name: z.string().optional(),
     status: PermissionStatusSchema.optional(),
-    description: type('string').optional(),
-}).and(UpsertMetadataPayloadPropertySchema);
+    description: z.string().optional(),
+    ...UpsertMetadataPropertyPayloadSchema.shape,
+});
 /**
  * Association
  */
-export const PermissionAssociationReferenceSchema = PermissionPayloadSchema.pick('id', 'name', 'status').and({
-    model: "'Permission'",
+export const PermissionAssociationReferenceSchema = z.object({
+    ...PermissionIdPropertySchema.shape,
+    name: z.string(),
+    status: PermissionStatusSchema.default('disabled'),
+    model: z.literal('Permission'),
 });

package/dist/esm/authorization/permissions/schema.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=schema.test.d.ts.map

package/dist/esm/authorization/permissions/schema.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.test.d.ts","sourceRoot":"","sources":["../../../../src/authorization/permissions/schema.test.ts"],"names":[],"mappings":""}

package/dist/esm/authorization/permissions/schema.test.js

@@ -0,0 +1,213 @@
+import { describe, expect, test } from 'vitest';
+import { generateAppId } from '../../app/utils.js';
+import { PermissionIdSchema, generatePermissionId, generateRoleId, } from '../schema.js';
+import { InsertPermissionPayloadSchema, PermissionAssociationReferenceSchema, PermissionAssociationsSchema, PermissionIdPropertySchema, PermissionSchema, PermissionStatus, UpdatePermissionPayloadSchema, } from './schema.js';
+describe('Authorization Permissions - Schema', () => {
+    describe('PermissionStatus constants', () => {
+        test('should have correct status values', () => {
+            expect(PermissionStatus.ENABLED).toBe('enabled');
+            expect(PermissionStatus.DISABLED).toBe('disabled');
+        });
+    });
+    describe('PermissionIdSchema', () => {
+        test('should accept valid string ID', () => {
+            expect(PermissionIdSchema.safeParse(generatePermissionId()).success).toBe(true);
+        });
+        test('should reject non-string values', () => {
+            expect(PermissionIdSchema.safeParse(123).success).toBe(false);
+            expect(PermissionIdSchema.safeParse(null).success).toBe(false);
+        });
+    });
+    describe('PermissionIdPropertySchema', () => {
+        test('should accept valid id property', () => {
+            const payload = { id: generatePermissionId() };
+            const result = PermissionIdPropertySchema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.data).toEqual({ id: payload.id });
+        });
+        test('should reject missing id', () => {
+            const result = PermissionIdPropertySchema.safeParse({});
+            expect(result.success).toBe(false);
+        });
+    });
+    describe('PermissionAssociationsSchema', () => {
+        const payload = {
+            apps: [generateAppId(), generateAppId()],
+            roles: [generateRoleId(), generateRoleId()],
+        };
+        test('should accept valid associations', () => {
+            const result = PermissionAssociationsSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.data).toEqual({
+                apps: payload.apps,
+                roles: payload.roles,
+            });
+        });
+        test('should accept optional associations', () => {
+            const result = PermissionAssociationsSchema.safeParse({});
+            // Parse succeeds for valid data
+            expect(result.data).toEqual({});
+        });
+        test('should accept undefined associations', () => {
+            const result = PermissionAssociationsSchema.safeParse({
+                apps: undefined,
+                roles: [generateRoleId()],
+            });
+            // Parse succeeds for valid data
+        });
+        test('should reject non-array associations', () => {
+            const result = PermissionAssociationsSchema.safeParse({
+                apps: 'not-an-array',
+            });
+            expect(result.success).toBe(false);
+        });
+    });
+    describe('PermissionSchema', () => {
+        test('should accept complete permission object', () => {
+            const permission = {
+                id: generatePermissionId(),
+                name: 'read:users',
+                status: 'enabled',
+                description: 'Read user data',
+                apps: { ids: [generateAppId()], count: 1 },
+                roles: { ids: [generateRoleId()], count: 1 },
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                metadata: { key: 'value' },
+            };
+            const result = PermissionSchema.safeParse(permission);
+            // Parse succeeds for valid data
+        });
+        test('should accept minimal permission object', () => {
+            const permission = {
+                id: generatePermissionId(),
+                name: 'read:users',
+                status: 'enabled',
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                metadata: {},
+            };
+            const result = PermissionSchema.safeParse(permission);
+            // Parse succeeds for valid data
+        });
+        test('should reject invalid status', () => {
+            const permission = {
+                id: generatePermissionId(),
+                name: 'read:users',
+                status: 'invalid',
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                metadata: {},
+            };
+            const result = PermissionSchema.safeParse(permission);
+            expect(result.success).toBe(false);
+        });
+        test('should reject missing required fields', () => {
+            const permission = {
+                id: generatePermissionId(),
+                name: 'read:users',
+            };
+            const result = PermissionSchema.safeParse(permission);
+            expect(result.success).toBe(false);
+        });
+    });
+    describe('InsertPermissionPayloadSchema', () => {
+        test('should accept complete insert payload', () => {
+            const payload = {
+                id: generatePermissionId(),
+                name: 'read:users',
+                status: 'enabled',
+                description: 'Read user data',
+                apps: [generateAppId()],
+                roles: [generateRoleId()],
+                metadata: { key: 'value' },
+            };
+            const result = InsertPermissionPayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+        });
+        test('should accept minimal insert payload', () => {
+            const payload = {
+                name: 'read:users',
+            };
+            const result = InsertPermissionPayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.data?.status).toBe('enabled'); // default value
+        });
+        test('should generate default ID when not provided', () => {
+            const payload = { name: 'read:users' };
+            const result = InsertPermissionPayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.data?.id).toMatch(/^per_/);
+        });
+        test('should reject missing name', () => {
+            const result = InsertPermissionPayloadSchema.safeParse({});
+            expect(result.success).toBe(false);
+        });
+    });
+    describe('UpdatePermissionPayloadSchema', () => {
+        test('should accept all optional fields', () => {
+            const payload = {
+                name: 'updated:permission',
+                status: 'disabled',
+                description: 'Updated description',
+                metadata: { updated: true },
+            };
+            const result = UpdatePermissionPayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.data).toEqual(payload);
+        });
+        test('should accept empty update payload', () => {
+            const result = UpdatePermissionPayloadSchema.safeParse({});
+            // Parse succeeds for valid data
+            expect(result.data).toEqual({});
+        });
+        test('should accept partial updates', () => {
+            const payload = { name: 'new:name' };
+            const result = UpdatePermissionPayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.data).toEqual(payload);
+        });
+        test('should reject invalid status', () => {
+            const payload = { status: 'invalid-status' };
+            const result = UpdatePermissionPayloadSchema.safeParse(payload);
+            expect(result.success).toBe(false);
+        });
+    });
+    describe('PermissionAssociationReferenceSchema', () => {
+        test('should accept complete association reference', () => {
+            const reference = {
+                id: generatePermissionId(),
+                name: 'read:users',
+                status: 'enabled',
+                model: 'Permission',
+            };
+            const result = PermissionAssociationReferenceSchema.safeParse(reference);
+            // Parse succeeds for valid data
+            expect(result.data).toEqual(reference);
+        });
+        test('should use default status when not provided', () => {
+            const reference = {
+                id: generatePermissionId(),
+                name: 'read:users',
+                model: 'Permission',
+            };
+            const result = PermissionAssociationReferenceSchema.safeParse(reference);
+            // Parse succeeds for valid data
+            expect(result.data?.status).toBe('disabled'); // default value
+        });
+        test('should reject missing required fields', () => {
+            const reference = { id: generatePermissionId() };
+            const result = PermissionAssociationReferenceSchema.safeParse(reference);
+            expect(result.success).toBe(false);
+        });
+        test('should reject invalid model value', () => {
+            const reference = {
+                id: generatePermissionId(),
+                name: 'read:users',
+                model: 'InvalidModel',
+            };
+            const result = PermissionAssociationReferenceSchema.safeParse(reference);
+            expect(result.success).toBe(false);
+        });
+    });
+});

package/dist/esm/authorization/roles/resources.d.ts

@@ -10,11 +10,11 @@ export declare class RoleResources {
     getItem(id: string): Promise<Role>;
     insertItem(item: InsertRoleInput): Promise<Role>;
     updateItem(id: string, item: UpdateRoleInput): Promise<Role>;
-    deleteItem(id: string): Promise<void>;
+    deleteItem(id: string): Promise<Role>;
 }
 export declare function listRoles(instance: MondoIdentity, pagination?: Pagination): Promise<PaginationCollection<Role>>;
 export declare function getRole(instance: MondoIdentity, id: string): Promise<Role>;
 export declare function insertRole(instance: MondoIdentity, item: InsertRoleInput): Promise<Role>;
 export declare function updateRole(instance: MondoIdentity, id: string, item: UpdateRoleInput): Promise<Role>;
-export declare function deleteRole(instance: MondoIdentity, id: string): Promise<void>;
+export declare function deleteRole(instance: MondoIdentity, id: string): Promise<Role>;
 //# sourceMappingURL=resources.d.ts.map

package/dist/esm/authorization/roles/resources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../../../src/authorization/roles/resources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAWpE,OAAO,EACL,KAAK,oBAAoB,EAE1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EACL,KAAK,eAAe,EAEpB,KAAK,IAAI,EAET,KAAK,eAAe,EAErB,MAAM,aAAa,CAAC;AAIrB,qBAAa,aAAa;IACL,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,aAAa;IAE3D,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM;IAQ9B,SAAS,CACd,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAI/B,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlC,UAAU,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhD,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAI5D,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG7C;AAED,wBAAsB,SAAS,CAC7B,QAAQ,EAAE,aAAa,EACvB,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAWrC;AAED,wBAAsB,OAAO,CAC3B,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,aAAa,EACvB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,IAAI,CAAC,CAYf;AAED,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,IAAI,CAAC,CAYf;AAED,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,IAAI,CAAC,CAKf"}
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../../../src/authorization/roles/resources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAQpE,OAAO,EACL,KAAK,oBAAoB,EAE1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EACL,KAAK,eAAe,EAEpB,KAAK,IAAI,EAET,KAAK,eAAe,EAErB,MAAM,aAAa,CAAC;AAIrB,qBAAa,aAAa;IACL,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,aAAa;IAE3D,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM;IAQ9B,SAAS,CACd,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAI/B,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlC,UAAU,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhD,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAI5D,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG7C;AAED,wBAAsB,SAAS,CAC7B,QAAQ,EAAE,aAAa,EACvB,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAQrC;AAED,wBAAsB,OAAO,CAC3B,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,IAAI,CAAC,CAOf;AAED,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,aAAa,EACvB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,IAAI,CAAC,CAQf;AAED,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,IAAI,CAAC,CAQf;AAED,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,IAAI,CAAC,CAOf"}