@go-mondo/identity-sdk 0.0.2-beta.7 → 0.0.2-beta.71

package/dist/esm/authorization/permissions/schema.test.js

@@ -0,0 +1,207 @@
+import { describe, expect, test } from 'vitest';
+import { generateAppId } from '../../app/utils.js';
+import { PermissionIdSchema, generatePermissionId, generateRoleId, } from '../schema.js';
+import { InsertPermissionPayloadSchema, PermissionAssociationReferenceSchema, PermissionAssociationsSchema, PermissionIdPropertySchema, PermissionSchema, PermissionStatus, UpdatePermissionPayloadSchema, } from './schema.js';
+describe('Authorization Permissions - Schema', () => {
+    describe('PermissionStatus constants', () => {
+        test('should have correct status values', () => {
+            expect(PermissionStatus.ENABLED).toBe('enabled');
+            expect(PermissionStatus.DISABLED).toBe('disabled');
+        });
+    });
+    describe('PermissionIdSchema', () => {
+        test('should accept valid string ID', () => {
+            expect(PermissionIdSchema.safeParse(generatePermissionId()).success).toBe(true);
+        });
+        test('should reject non-string values', () => {
+            expect(PermissionIdSchema.safeParse(123).success).toBe(false);
+            expect(PermissionIdSchema.safeParse(null).success).toBe(false);
+        });
+    });
+    describe('PermissionIdPropertySchema', () => {
+        test('should accept valid id property', () => {
+            const payload = { id: generatePermissionId() };
+            const result = PermissionIdPropertySchema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.data).toEqual({ id: payload.id });
+        });
+        test('should reject missing id', () => {
+            const result = PermissionIdPropertySchema.safeParse({});
+            expect(result.success).toBe(false);
+        });
+    });
+    describe('PermissionAssociationsSchema', () => {
+        const payload = {
+            apps: [generateAppId(), generateAppId()],
+            roles: [generateRoleId(), generateRoleId()],
+        };
+        test('should accept valid associations', () => {
+            const result = PermissionAssociationsSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.data).toEqual({
+                apps: payload.apps,
+                roles: payload.roles,
+            });
+        });
+        test('should accept optional associations', () => {
+            const result = PermissionAssociationsSchema.safeParse({});
+            // Parse succeeds for valid data
+            expect(result.data).toEqual({});
+        });
+        test('should accept undefined associations', () => {
+            const result = PermissionAssociationsSchema.safeParse({
+                apps: undefined,
+                roles: [generateRoleId()],
+            });
+            // Parse succeeds for valid data
+        });
+        test('should reject non-array associations', () => {
+            const result = PermissionAssociationsSchema.safeParse({
+                apps: 'not-an-array',
+            });
+            expect(result.success).toBe(false);
+        });
+    });
+    describe('PermissionSchema', () => {
+        test('should accept complete permission object', () => {
+            const permission = {
+                id: generatePermissionId(),
+                name: 'read:users',
+                status: 'enabled',
+                description: 'Read user data',
+                apps: { ids: [generateAppId()], count: 1 },
+                roles: { ids: [generateRoleId()], count: 1 },
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                metadata: { key: 'value' },
+            };
+            const result = PermissionSchema.safeParse(permission);
+            // Parse succeeds for valid data
+        });
+        test('should accept minimal permission object', () => {
+            const permission = {
+                id: generatePermissionId(),
+                name: 'read:users',
+                status: 'enabled',
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                metadata: {},
+            };
+            const result = PermissionSchema.safeParse(permission);
+            // Parse succeeds for valid data
+        });
+        test('should reject invalid status', () => {
+            const permission = {
+                id: generatePermissionId(),
+                name: 'read:users',
+                status: 'invalid',
+                createdAt: new Date(),
+                updatedAt: new Date(),
+                metadata: {},
+            };
+            const result = PermissionSchema.safeParse(permission);
+            expect(result.success).toBe(false);
+        });
+        test('should reject missing required fields', () => {
+            const permission = {
+                id: generatePermissionId(),
+                name: 'read:users',
+            };
+            const result = PermissionSchema.safeParse(permission);
+            expect(result.success).toBe(false);
+        });
+    });
+    describe('InsertPermissionPayloadSchema', () => {
+        test('should accept complete insert payload', () => {
+            const payload = {
+                id: generatePermissionId(),
+                name: 'read:users',
+                status: 'enabled',
+                description: 'Read user data',
+                apps: [generateAppId()],
+                roles: [generateRoleId()],
+                metadata: { key: 'value' },
+            };
+            const result = InsertPermissionPayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+        });
+        test('should accept minimal insert payload', () => {
+            const payload = {
+                name: 'read:users',
+            };
+            const result = InsertPermissionPayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.data?.status).toBe('enabled'); // default value
+        });
+        test('should reject missing name', () => {
+            const result = InsertPermissionPayloadSchema.safeParse({});
+            expect(result.success).toBe(false);
+        });
+    });
+    describe('UpdatePermissionPayloadSchema', () => {
+        test('should accept all optional fields', () => {
+            const payload = {
+                name: 'updated:permission',
+                status: 'disabled',
+                description: 'Updated description',
+                metadata: { updated: true },
+            };
+            const result = UpdatePermissionPayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.data).toEqual(payload);
+        });
+        test('should accept empty update payload', () => {
+            const result = UpdatePermissionPayloadSchema.safeParse({});
+            // Parse succeeds for valid data
+            expect(result.data).toEqual({});
+        });
+        test('should accept partial updates', () => {
+            const payload = { name: 'new:name' };
+            const result = UpdatePermissionPayloadSchema.safeParse(payload);
+            // Parse succeeds for valid data
+            expect(result.data).toEqual(payload);
+        });
+        test('should reject invalid status', () => {
+            const payload = { status: 'invalid-status' };
+            const result = UpdatePermissionPayloadSchema.safeParse(payload);
+            expect(result.success).toBe(false);
+        });
+    });
+    describe('PermissionAssociationReferenceSchema', () => {
+        test('should accept complete association reference', () => {
+            const reference = {
+                id: generatePermissionId(),
+                name: 'read:users',
+                status: 'enabled',
+                model: 'Permission',
+            };
+            const result = PermissionAssociationReferenceSchema.safeParse(reference);
+            // Parse succeeds for valid data
+            expect(result.data).toEqual(reference);
+        });
+        test('should use default status when not provided', () => {
+            const reference = {
+                id: generatePermissionId(),
+                name: 'read:users',
+                model: 'Permission',
+            };
+            const result = PermissionAssociationReferenceSchema.safeParse(reference);
+            // Parse succeeds for valid data
+            expect(result.data?.status).toBe('disabled'); // default value
+        });
+        test('should reject missing required fields', () => {
+            const reference = { id: generatePermissionId() };
+            const result = PermissionAssociationReferenceSchema.safeParse(reference);
+            expect(result.success).toBe(false);
+        });
+        test('should reject invalid model value', () => {
+            const reference = {
+                id: generatePermissionId(),
+                name: 'read:users',
+                model: 'InvalidModel',
+            };
+            const result = PermissionAssociationReferenceSchema.safeParse(reference);
+            expect(result.success).toBe(false);
+        });
+    });
+});

package/dist/esm/authorization/roles/resources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../../../src/authorization/roles/resources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAWpE,OAAO,EACL,KAAK,oBAAoB,EAE1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EACL,KAAK,eAAe,EAEpB,KAAK,IAAI,EAET,KAAK,eAAe,EAErB,MAAM,aAAa,CAAC;AAIrB,qBAAa,aAAa;IACL,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,aAAa;IAE3D,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM;IAQ9B,SAAS,CACd,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAI/B,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlC,UAAU,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhD,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAI5D,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG7C;AAED,wBAAsB,SAAS,CAC7B,QAAQ,EAAE,aAAa,EACvB,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAWrC;AAED,wBAAsB,OAAO,CAC3B,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,aAAa,EACvB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,IAAI,CAAC,CAYf;AAED,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,IAAI,CAAC,CAYf;AAED,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,IAAI,CAAC,CASf"}
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../../../src/authorization/roles/resources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAQpE,OAAO,EACL,KAAK,oBAAoB,EAE1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EACL,KAAK,eAAe,EAEpB,KAAK,IAAI,EAET,KAAK,eAAe,EAErB,MAAM,aAAa,CAAC;AAIrB,qBAAa,aAAa;IACL,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,aAAa;IAE3D,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM;IAQ9B,SAAS,CACd,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAI/B,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlC,UAAU,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhD,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAI5D,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG7C;AAED,wBAAsB,SAAS,CAC7B,QAAQ,EAAE,aAAa,EACvB,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAQrC;AAED,wBAAsB,OAAO,CAC3B,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,IAAI,CAAC,CAOf;AAED,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,aAAa,EACvB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,IAAI,CAAC,CAQf;AAED,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,IAAI,CAAC,CAQf;AAED,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,aAAa,EACvB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,IAAI,CAAC,CAOf"}

package/dist/esm/authorization/roles/resources.js

@@ -1,5 +1,5 @@
-import { deleteItemWithAuthorization, getItemWithAuthorization, insertItemWithAuthorization, updateItemWithAuthorization, } from '../../common/resources/operations.js';
-import { addPaginationToURL, parseEgressSchema, } from '../../common/resources/utils.js';
+import { deleteItemWithAuthorization, getItemWithAuthorization, patchItemWithAuthorization, postItemWithAuthorization, } from '../../common/resources/operations.js';
+import { addPaginationToURL } from '../../common/resources/utils.js';
 import { PaginationCollectionSchema, } from '../../common/schema/collection.js';
 import { InsertRolePayloadSchema, RoleSchema, UpdateRolePayloadSchema, } from './schema.js';
 const PATH = '/v1/authorization/roles';
@@ -32,17 +32,17 @@ export class RoleResources {
 }
 export async function listRoles(instance, pagination) {
     const url = addPaginationToURL(new URL(RoleResources.buildPath(), instance.config.host), pagination);
-    return parseEgressSchema(PaginationCollectionSchema(RoleSchema)(await getItemWithAuthorization(url, instance.authorizer)));
+    return PaginationCollectionSchema(RoleSchema).parse(await getItemWithAuthorization(url, instance.authorizer));
 }
 export async function getRole(instance, id) {
-    return parseEgressSchema(RoleSchema(await getItemWithAuthorization(new URL(RoleResources.buildPath(id), instance.config.host), instance.authorizer)));
+    return RoleSchema.parse(await getItemWithAuthorization(new URL(RoleResources.buildPath(id), instance.config.host), instance.authorizer));
 }
 export async function insertRole(instance, item) {
-    return parseEgressSchema(RoleSchema(await insertItemWithAuthorization(new URL(RoleResources.buildPath(), instance.config.host), instance.authorizer, parseEgressSchema(InsertRolePayloadSchema.onUndeclaredKey('delete')(item)))));
+    return RoleSchema.parse(await postItemWithAuthorization(new URL(RoleResources.buildPath(), instance.config.host), instance.authorizer, InsertRolePayloadSchema.parse(item)));
 }
 export async function updateRole(instance, id, item) {
-    return parseEgressSchema(RoleSchema(await updateItemWithAuthorization(new URL(RoleResources.buildPath(id), instance.config.host), instance.authorizer, parseEgressSchema(UpdateRolePayloadSchema.onUndeclaredKey('delete')(item)))));
+    return RoleSchema.parse(await patchItemWithAuthorization(new URL(RoleResources.buildPath(id), instance.config.host), instance.authorizer, UpdateRolePayloadSchema.parse(item)));
 }
 export async function deleteRole(instance, id) {
-    return parseEgressSchema(RoleSchema(await deleteItemWithAuthorization(new URL(RoleResources.buildPath(id), instance.config.host), instance.authorizer)));
+    return RoleSchema.parse(await deleteItemWithAuthorization(new URL(RoleResources.buildPath(id), instance.config.host), instance.authorizer));
 }

package/dist/esm/authorization/roles/schema.d.ts

@@ -1,113 +1,117 @@
+import * as z from 'zod/v4';
 export declare const RoleStatus: {
     readonly ENABLED: "enabled";
     readonly DISABLED: "disabled";
 };
 export type AnyRoleStatus = (typeof RoleStatus)[keyof typeof RoleStatus];
-export declare const RoleIdPropertySchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    id: string;
-}, {}>;
-export type RoleIdProperty = typeof RoleIdPropertySchema.inferOut;
-export declare const RoleAssociationsSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    apps?: string[] | undefined;
-    permissions?: string[] | undefined;
-    users?: string[] | undefined;
-}, {}>;
-export type RoleAssociations = typeof RoleAssociationsSchema.inferOut;
-export declare const RoleSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    id: string;
-    name: string;
-    status: "enabled" | "disabled";
-    description?: string | undefined;
-    apps?: {
-        ids?: string[] | undefined;
-        count?: number | undefined;
-    } | undefined;
-    users?: {
-        ids?: string[] | undefined;
-        count?: number | undefined;
-    } | undefined;
-    permissions?: {
-        ids?: string[] | undefined;
-        count?: number | undefined;
-    } | undefined;
-    createdAt: Date | ((In: string) => import("arktype/internal/attributes.ts").To<Date>);
-    updatedAt: Date | ((In: string) => import("arktype/internal/attributes.ts").To<Date>);
-    deletedAt?: Date | ((In: string) => import("arktype/internal/attributes.ts").To<Date>) | undefined;
-    deactivatedAt?: Date | ((In: string) => import("arktype/internal/attributes.ts").To<Date>) | undefined;
-    metadata: (In: import("arktype/internal/attributes.ts").Default<unknown, Map<string, string | number | boolean>>) => import("arktype").Out<Map<string, string | number | boolean> | Map<string, any>>;
-}, {}>;
-export type RoleProperties = typeof RoleSchema.inferIn;
-export type Role = typeof RoleSchema.inferOut;
-export declare const RolePayloadSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    id: string;
-    name: string;
-    status: "enabled" | "disabled";
-    description?: string | undefined;
-    apps?: {
-        ids?: string[] | undefined;
-        count?: number | undefined;
-    } | undefined;
-    users?: {
-        ids?: string[] | undefined;
-        count?: number | undefined;
-    } | undefined;
-    permissions?: {
-        ids?: string[] | undefined;
-        count?: number | undefined;
-    } | undefined;
-    createdAt: (In: string | Date) => import("arktype").Out<string>;
-    updatedAt: (In: string | Date) => import("arktype").Out<string>;
-    deletedAt?: ((In: string | Date | undefined) => import("arktype").Out<string | undefined>) | undefined;
-    deactivatedAt?: ((In: string | Date | undefined) => import("arktype").Out<string | undefined>) | undefined;
-    metadata?: ((In: {
-        [x: string]: string | number | boolean;
-    } | Map<string, string | number | boolean> | null | undefined) => import("arktype").Out<{
-        [x: string]: string | number | boolean;
-    } | undefined>) | undefined;
-}, {}>;
-export type RolePayload = typeof RolePayloadSchema.inferOut;
+export declare const RoleIdPropertySchema: z.ZodObject<{
+    id: z.ZodString;
+}, z.core.$strip>;
+export type RoleIdProperty = z.output<typeof RoleIdPropertySchema>;
+export declare const RoleAssociationsSchema: z.ZodObject<{
+    apps: z.ZodOptional<z.ZodUnion<[z.ZodUndefined, z.ZodArray<z.ZodString>]>>;
+    permissions: z.ZodOptional<z.ZodUnion<readonly [z.ZodUndefined, z.ZodArray<z.ZodString>]>>;
+    users: z.ZodOptional<z.ZodUnion<readonly [z.ZodUndefined, z.ZodArray<z.ZodString>]>>;
+}, z.core.$strip>;
+export type RoleAssociations = z.output<typeof RoleAssociationsSchema>;
+export declare const RoleSchema: z.ZodObject<{
+    metadata: z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Map<string, string | number | boolean>, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>;
+    deactivatedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    deletedAt: z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>;
+    updatedAt: z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>;
+    createdAt: z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>;
+    name: z.ZodString;
+    status: z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>;
+    description: z.ZodOptional<z.ZodString>;
+    apps: z.ZodOptional<z.ZodObject<{
+        ids: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        count: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    users: z.ZodOptional<z.ZodObject<{
+        ids: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        count: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    permissions: z.ZodOptional<z.ZodObject<{
+        ids: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        count: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    id: z.ZodString;
+}, z.core.$strip>;
+export type RoleProperties = z.input<typeof RoleSchema>;
+export type Role = z.output<typeof RoleSchema>;
+export declare const RolePayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    deactivatedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    deletedAt: z.ZodOptional<z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>>, z.ZodTransform<string | undefined, Date | undefined>>>;
+    updatedAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+    createdAt: z.ZodPipe<z.ZodUnion<readonly [z.ZodDate, z.ZodPipe<z.ZodString, z.ZodTransform<Date, string>>]>, z.ZodTransform<string, Date>>;
+    name: z.ZodString;
+    status: z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>;
+    description: z.ZodOptional<z.ZodString>;
+    apps: z.ZodOptional<z.ZodObject<{
+        ids: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        count: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    users: z.ZodOptional<z.ZodObject<{
+        ids: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        count: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    permissions: z.ZodOptional<z.ZodObject<{
+        ids: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        count: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    id: z.ZodString;
+}, z.core.$strip>;
+export type RolePayload = z.output<typeof RolePayloadSchema>;
 /**
  * Insert
  */
-export declare const InsertRolePayloadSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    id: import("arktype/internal/attributes.ts").Default<string, string>;
-    name: string;
-    status: import("arktype/internal/attributes.ts").Default<"enabled" | "disabled", "enabled">;
-    description?: string | undefined;
-    apps?: string[] | undefined;
-    permissions?: string[] | undefined;
-    users?: string[] | undefined;
-    metadata?: ((In: {
-        [x: string]: string | number | boolean;
-    } | Map<string, string | number | boolean> | null | undefined) => import("arktype").Out<{
-        [x: string]: string | number | boolean;
-    } | undefined>) | undefined;
-}, {}>;
-export type InsertRoleInput = typeof InsertRolePayloadSchema.inferIn;
-export type InsertRolePayload = typeof InsertRolePayloadSchema.inferOut;
+export declare const InsertRolePayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | null | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    apps: z.ZodOptional<z.ZodUnion<[z.ZodUndefined, z.ZodArray<z.ZodString>]>>;
+    permissions: z.ZodOptional<z.ZodUnion<readonly [z.ZodUndefined, z.ZodArray<z.ZodString>]>>;
+    users: z.ZodOptional<z.ZodUnion<readonly [z.ZodUndefined, z.ZodArray<z.ZodString>]>>;
+    id: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+    status: z.ZodDefault<z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>>;
+    description: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type InsertRoleInput = z.input<typeof InsertRolePayloadSchema>;
+export type InsertRolePayload = z.output<typeof InsertRolePayloadSchema>;
 /**
  * Update
  */
-export declare const UpdateRolePayloadSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    name?: string | undefined;
-    status?: "enabled" | "disabled" | undefined;
-    description?: string | undefined;
-    metadata?: ((In: {
-        [x: string]: string | number | boolean;
-    } | Map<string, string | number | boolean> | null | undefined) => import("arktype").Out<{
-        [x: string]: string | number | boolean;
-    } | undefined>) | undefined;
-}, {}>;
-export type UpdateRoleInput = typeof UpdateRolePayloadSchema.inferIn;
-export type UpdateRolePayload = typeof UpdateRolePayloadSchema.inferOut;
+export declare const UpdateRolePayloadSchema: z.ZodObject<{
+    metadata: z.ZodOptional<z.ZodPipe<z.ZodUnion<readonly [z.ZodUndefined, z.ZodNull, z.ZodCustom<Map<string, string | number | boolean>, Map<string, string | number | boolean>>, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>]>, z.ZodTransform<Record<string, string | number | boolean> | null | undefined, Record<string, string | number | boolean> | Map<string, string | number | boolean> | null | undefined>>>;
+    name: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>>;
+    description: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type UpdateRoleInput = z.input<typeof UpdateRolePayloadSchema>;
+export type UpdateRolePayload = z.output<typeof UpdateRolePayloadSchema>;
 /**
  * Association
  */
-export declare const RoleAssociationReferenceSchema: import("arktype/internal/methods/object.ts").ObjectType<{
-    id: string;
-    name: string;
-    status: "enabled" | "disabled";
-    model: "Role";
-}, {}>;
-export type RoleAssociationReference = typeof RoleAssociationReferenceSchema.inferOut;
+export declare const RoleAssociationReferenceSchema: z.ZodObject<{
+    name: z.ZodString;
+    status: z.ZodDefault<z.ZodEnum<{
+        enabled: "enabled";
+        disabled: "disabled";
+    }>>;
+    model: z.ZodLiteral<"Role">;
+    id: z.ZodString;
+}, z.core.$strip>;
+export type RoleAssociationReference = z.output<typeof RoleAssociationReferenceSchema>;
 //# sourceMappingURL=schema.d.ts.map

package/dist/esm/authorization/roles/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/authorization/roles/schema.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,UAAU;;;CAGb,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,OAAO,UAAU,CAAC,CAAC;AAIzE,eAAO,MAAM,oBAAoB;;MAE/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,OAAO,oBAAoB,CAAC,QAAQ,CAAC;AAMlE,eAAO,MAAM,sBAAsB;;;;MAIjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,OAAO,sBAAsB,CAAC,QAAQ,CAAC;AAWtE,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;MAOU,CAAC;AAClC,MAAM,MAAM,cAAc,GAAG,OAAO,UAAU,CAAC,OAAO,CAAC;AACvD,MAAM,MAAM,IAAI,GAAG,OAAO,UAAU,CAAC,QAAQ,CAAC;AAE9C,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;MAOO,CAAC;AACtC,MAAM,MAAM,WAAW,GAAG,OAAO,iBAAiB,CAAC,QAAQ,CAAC;AAE5D;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;MAOC,CAAC;AACtC,MAAM,MAAM,eAAe,GAAG,OAAO,uBAAuB,CAAC,OAAO,CAAC;AACrE,MAAM,MAAM,iBAAiB,GAAG,OAAO,uBAAuB,CAAC,QAAQ,CAAC;AAExE;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;MAIC,CAAC;AACtC,MAAM,MAAM,eAAe,GAAG,OAAO,uBAAuB,CAAC,OAAO,CAAC;AACrE,MAAM,MAAM,iBAAiB,GAAG,OAAO,uBAAuB,CAAC,QAAQ,CAAC;AAExE;;GAEG;AACH,eAAO,MAAM,8BAA8B;;;;;MAMzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAClC,OAAO,8BAA8B,CAAC,QAAQ,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/authorization/roles/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAqB5B,eAAO,MAAM,UAAU;;;CAGb,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,OAAO,UAAU,CAAC,CAAC;AAEzE,eAAO,MAAM,oBAAoB;;iBAE/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAInE,eAAO,MAAM,sBAAsB;;;;iBAIjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAYvE,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;iBAOrB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AACxD,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,UAAU,CAAC,CAAC;AAE/C,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;iBAO5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE7D;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;iBAOlC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACtE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEzE;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;iBAKlC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACtE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEzE;;GAEG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;iBAKzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAC7C,OAAO,8BAA8B,CACtC,CAAC"}

package/dist/esm/authorization/roles/schema.js

@@ -1,69 +1,74 @@
-import { type } from 'arktype';
-import { OptionalDatePayloadSchema, OptionalDateSchema, RequiredDatePayloadSchema, RequiredDateSchema, } from '../../common/index.js';
+import * as z from 'zod/v4';
+import { AppIdAssociationsSchema } from '../../app/schema.js';
 import { AggregateSchema } from '../../common/schema/aggregate.js';
-import { MetadataMapPropertySchema, MetadataPayloadPropertySchema, } from '../../common/schema/metadata.js';
-import { generateRoleId } from '../utils.js';
+import { CreatedAtPropertyPayloadSchema, CreatedAtPropertySchema, DeactivatedAtPropertyPayloadSchema, DeactivatedAtPropertySchema, DeletedAtPropertyPayloadSchema, DeletedAtPropertySchema, UpdatedAtPropertyPayloadSchema, UpdatedAtPropertySchema, } from '../../common/schema/dates.js';
+import { MetadataMapPropertySchema, MetadataPayloadPropertySchema, UpsertMetadataPropertyPayloadSchema, } from '../../common/schema/metadata.js';
+import { UserIdAssociationsSchema } from '../../customer/schema.js';
+import { PermissionIdAssociationsSchema, RoleIdSchema } from '../schema.js';
 export const RoleStatus = {
     ENABLED: 'enabled',
     DISABLED: 'disabled',
 };
-const RoleIdSchema = type.string;
-export const RoleIdPropertySchema = type({
+export const RoleIdPropertySchema = z.object({
     id: RoleIdSchema,
 });
-const StatusSchema = type.enumerated(RoleStatus.ENABLED, RoleStatus.DISABLED);
-const AssociationSchema = type('string[] | undefined');
-export const RoleAssociationsSchema = type({
-    apps: AssociationSchema.optional(),
-    permissions: AssociationSchema.optional(),
-    users: AssociationSchema.optional(),
+const StatusSchema = z.enum([RoleStatus.ENABLED, RoleStatus.DISABLED]);
+export const RoleAssociationsSchema = z.object({
+    apps: AppIdAssociationsSchema.optional(),
+    permissions: PermissionIdAssociationsSchema.optional(),
+    users: UserIdAssociationsSchema.optional(),
 });
-const BaseSchema = RoleIdPropertySchema.and({
-    name: type('string'),
+const BaseSchema = z.object({
+    ...RoleIdPropertySchema.shape,
+    name: z.string(),
     status: StatusSchema,
-    description: type('string').optional(),
+    description: z.string().optional(),
     apps: AggregateSchema.optional(),
     users: AggregateSchema.optional(),
     permissions: AggregateSchema.optional(),
 });
-export const RoleSchema = BaseSchema.and({
-    createdAt: RequiredDateSchema,
-    updatedAt: RequiredDateSchema,
-    'deletedAt?': OptionalDateSchema,
-    'deactivatedAt?': OptionalDateSchema,
-})
-    .and(RoleIdPropertySchema)
-    .and(MetadataMapPropertySchema);
-export const RolePayloadSchema = BaseSchema.and({
-    createdAt: RequiredDatePayloadSchema,
-    updatedAt: RequiredDatePayloadSchema,
-    'deletedAt?': OptionalDatePayloadSchema,
-    'deactivatedAt?': OptionalDatePayloadSchema,
-})
-    .and(RoleIdPropertySchema)
-    .and(MetadataPayloadPropertySchema);
+export const RoleSchema = z.object({
+    ...BaseSchema.shape,
+    ...CreatedAtPropertySchema.shape,
+    ...UpdatedAtPropertySchema.shape,
+    ...DeletedAtPropertySchema.shape,
+    ...DeactivatedAtPropertySchema.shape,
+    ...MetadataMapPropertySchema.shape,
+});
+export const RolePayloadSchema = z.object({
+    ...BaseSchema.shape,
+    ...CreatedAtPropertyPayloadSchema.shape,
+    ...UpdatedAtPropertyPayloadSchema.shape,
+    ...DeletedAtPropertyPayloadSchema.shape,
+    ...DeactivatedAtPropertyPayloadSchema.shape,
+    ...MetadataPayloadPropertySchema.shape,
+});
 /**
  * Insert
  */
-export const InsertRolePayloadSchema = type({
-    id: RoleIdSchema.default(() => generateRoleId()),
-    name: type('string'),
+export const InsertRolePayloadSchema = z.object({
+    id: RoleIdSchema.optional(),
+    name: z.string(),
     status: StatusSchema.default(RoleStatus.ENABLED),
-    description: type('string').optional(),
-})
-    .and(RoleAssociationsSchema)
-    .and(MetadataPayloadPropertySchema);
+    description: z.string().optional(),
+    ...RoleAssociationsSchema.shape,
+    ...UpsertMetadataPropertyPayloadSchema.shape,
+});
 /**
  * Update
  */
-export const UpdateRolePayloadSchema = type({
-    name: type('string').optional(),
+export const UpdateRolePayloadSchema = z.object({
+    name: z.string().optional(),
     status: StatusSchema.optional(),
-    description: type('string').optional(),
-}).and(MetadataPayloadPropertySchema);
+    description: z.string().optional(),
+    ...UpsertMetadataPropertyPayloadSchema.shape,
+});
 /**
  * Association
  */
-export const RoleAssociationReferenceSchema = RolePayloadSchema.pick('id', 'name', 'status').and({
-    model: "'Role'",
+export const RoleAssociationReferenceSchema = z.object({
+    ...RoleIdPropertySchema.shape,
+    name: z.string(),
+    status: StatusSchema.default('disabled'),
+    model: z.literal('Role'),
 });

package/dist/esm/authorization/roles/schema.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=schema.test.d.ts.map

package/dist/esm/authorization/roles/schema.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.test.d.ts","sourceRoot":"","sources":["../../../../src/authorization/roles/schema.test.ts"],"names":[],"mappings":""}