@grantjs/schema 1.17.0 → 1.18.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@grantjs/schema",
-  "version": "1.17.0",
+  "version": "1.18.0",
   "license": "MIT",
   "repository": {
     "type": "git",

package/src/events/event-catalog.ts

@@ -83,6 +83,17 @@ const INTEGRATIONS_OWNERS: EventCatalogEntry = {
   audienceRule: { primitives: ['owners'], excludeActor: true },
 };
 
+/**
+ * An event that exists for webhook consumers only: delivered transactionally to
+ * subscriptions, never turned into a notification. The empty audience is what
+ * keeps the notification generator from creating rows for it.
+ */
+const webhookOnly = (category: EventCategory): EventCatalogEntry => ({
+  category,
+  deliveryClass: 'transactional',
+  audienceRule: { primitives: [] },
+});
+
 export const EVENT_TYPES = [
   // IAM mutations (Phase 1 slice)
   'role.created',
@@ -135,6 +146,17 @@ export const EVENT_TYPES = [
   // CDM / project sync job summaries (entity events suppressed during import)
   'project_sync.completed',
   'project_sync.failed',
+  // Webhook-only lifecycle events (no notification): users, project users, API keys, tags
+  'user.created',
+  'user.updated',
+  'user.deleted',
+  'project.user_updated',
+  'api_key.deleted',
+  'tag.created',
+  'tag.updated',
+  'tag.deleted',
+  'tag.linked',
+  'tag.unlinked',
 ] as const;
 
 export type EventType = (typeof EVENT_TYPES)[number];
@@ -200,6 +222,16 @@ export const EVENT_CATALOG: Readonly<Record<EventType, EventCatalogEntry>> = {
   'user.password_changed': SECURITY_SUBJECT,
   'project_sync.completed': INTEGRATIONS_OWNERS,
   'project_sync.failed': INTEGRATIONS_OWNERS,
+  'user.created': webhookOnly('membership'),
+  'user.updated': webhookOnly('membership'),
+  'user.deleted': webhookOnly('membership'),
+  'project.user_updated': webhookOnly('membership'),
+  'api_key.deleted': webhookOnly('security'),
+  'tag.created': webhookOnly('iam'),
+  'tag.updated': webhookOnly('iam'),
+  'tag.deleted': webhookOnly('iam'),
+  'tag.linked': webhookOnly('iam'),
+  'tag.unlinked': webhookOnly('iam'),
 };
 
 export function getEventCatalogEntry(type: EventType): EventCatalogEntry {

package/src/events/event-envelope.ts

@@ -33,6 +33,13 @@ export interface DomainEventInput {
   aggregate?: EventAggregateRef;
   data: EventData;
   occurredAt?: Date;
+  /**
+   * Projects this event is relevant to beyond the one named by its scope. The
+   * publisher adds the projects an entity-bound aggregate is linked to; a caller
+   * passes it only to capture the links before a write that destroys them (a
+   * delete). Never part of the external envelope.
+   */
+  projectIds?: string[];
 }
 
 /**
@@ -51,6 +58,11 @@ export interface DomainEvent {
   aggregate?: EventAggregateRef;
   data: EventData;
   occurredAt: Date;
+  /**
+   * Projects the event is relevant to in addition to the project its scope names
+   * (webhook fan-out, ADR 0012). Internal: not carried by the webhook envelope.
+   */
+  projectIds?: string[];
 }
 
 /**
@@ -68,6 +80,14 @@ export interface CloudEventEnvelope {
   grantsequence: string;
   grantscope: { tenant: string; id: string };
   grantactor?: { userId: string } | null;
+  /**
+   * The user the event is about, when it has one (`user.role_revoked`,
+   * `project.user_removed`, `organization.invitation_sent`, ...). `null` when
+   * the event has no subject user. Needed because the internal `before`
+   * snapshot is dropped from external `data`, so revoke/remove events would
+   * otherwise not say whose access changed.
+   */
+  grantsubjectuser?: { userId: string } | null;
   grantcategory: EventCategory;
   data: EventData;
 }