@headless-lms/core 0.4.0 → 0.6.0

package/dist/types/schemas/organizations.d.ts

@@ -1,31 +1,110 @@
 import { z } from "zod";
 //#region src/types/schemas/organizations.d.ts
-declare const roleSchema: z.ZodEnum<{
-  owner: "owner";
-  admin: "admin";
-  instructor: "instructor";
-  moderator: "moderator";
-  student: "student";
+declare const levelSchema: z.ZodUnion<readonly [z.ZodLiteral<"org">, z.ZodLazy<z.ZodEnum<{
+  event: "event";
+  course: "course";
+  download: "download";
+  community: "community";
+}>>]>;
+type Level = z.infer<typeof levelSchema>;
+declare const PERMISSION_KEYS: readonly ["organizations:read", "organizations:write", "api_keys:read", "api_keys:write", "api_keys:delete", "notification_categories:read", "notification_categories:write", "integrations:read", "integrations:write", "integrations:delete", "analytics:read", "people:read", "people:write", "people:delete", "roles:read", "roles:write", "roles:delete", "access:read", "access:write", "bundles:read", "bundles:write", "bundles:delete", "media:read", "media:write", "media:delete", "courses:read", "courses:write", "courses:delete", "courses:moderate", "progress:read", "downloads:read", "downloads:write", "downloads:delete", "communities:read", "communities:write", "communities:delete", "communities:moderate", "events:read", "events:write", "events:delete", "automations:read", "automations:write", "automations:delete"];
+declare const permissionSchema: z.ZodEnum<{
+  "organizations:read": "organizations:read";
+  "organizations:write": "organizations:write";
+  "api_keys:read": "api_keys:read";
+  "api_keys:write": "api_keys:write";
+  "api_keys:delete": "api_keys:delete";
+  "notification_categories:read": "notification_categories:read";
+  "notification_categories:write": "notification_categories:write";
+  "integrations:read": "integrations:read";
+  "integrations:write": "integrations:write";
+  "integrations:delete": "integrations:delete";
+  "analytics:read": "analytics:read";
+  "people:read": "people:read";
+  "people:write": "people:write";
+  "people:delete": "people:delete";
+  "roles:read": "roles:read";
+  "roles:write": "roles:write";
+  "roles:delete": "roles:delete";
+  "access:read": "access:read";
+  "access:write": "access:write";
+  "bundles:read": "bundles:read";
+  "bundles:write": "bundles:write";
+  "bundles:delete": "bundles:delete";
+  "media:read": "media:read";
+  "media:write": "media:write";
+  "media:delete": "media:delete";
+  "courses:read": "courses:read";
+  "courses:write": "courses:write";
+  "courses:delete": "courses:delete";
+  "courses:moderate": "courses:moderate";
+  "progress:read": "progress:read";
+  "downloads:read": "downloads:read";
+  "downloads:write": "downloads:write";
+  "downloads:delete": "downloads:delete";
+  "communities:read": "communities:read";
+  "communities:write": "communities:write";
+  "communities:delete": "communities:delete";
+  "communities:moderate": "communities:moderate";
+  "events:read": "events:read";
+  "events:write": "events:write";
+  "events:delete": "events:delete";
+  "automations:read": "automations:read";
+  "automations:write": "automations:write";
+  "automations:delete": "automations:delete";
 }>;
-type Role = z.infer<typeof roleSchema>;
+type Permission = z.infer<typeof permissionSchema>;
+declare const roleKeySchema: z.ZodString;
+type RoleKey = z.infer<typeof roleKeySchema>;
+declare const orgRoleRowSchema: z.ZodObject<{
+  id: z.ZodString;
+  orgId: z.ZodString;
+  key: z.ZodString;
+  name: z.ZodNullable<z.ZodString>;
+  description: z.ZodNullable<z.ZodString>;
+  base: z.ZodString;
+  levels: z.ZodNullable<z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"org">, z.ZodLazy<z.ZodEnum<{
+    event: "event";
+    course: "course";
+    download: "download";
+    community: "community";
+  }>>]>>>;
+  permissions: z.ZodRecord<z.ZodString, z.ZodBoolean>;
+  team: z.ZodNullable<z.ZodBoolean>;
+  createdAt: z.ZodCoercedDate<unknown>;
+  updatedAt: z.ZodCoercedDate<unknown>;
+}, z.core.$strict>;
+type OrgRoleRow = z.output<typeof orgRoleRowSchema>;
+declare const roleAssignmentSchema: z.ZodObject<{
+  id: z.ZodString;
+  orgId: z.ZodString;
+  orgUserId: z.ZodString;
+  roleKey: z.ZodString;
+  contentId: z.ZodNullable<z.ZodString>;
+  contentType: z.ZodNullable<z.ZodLazy<z.ZodEnum<{
+    event: "event";
+    course: "course";
+    download: "download";
+    community: "community";
+  }>>>;
+  assignedBy: z.ZodString;
+  createdAt: z.ZodCoercedDate<unknown>;
+}, z.core.$strict>;
+type RoleAssignment = z.output<typeof roleAssignmentSchema>;
 declare const orgUserStatusSchema: z.ZodEnum<{
   active: "active";
   invited: "invited";
 }>;
 type OrgUserStatus = z.infer<typeof orgUserStatusSchema>;
-declare const inviteRoleSchema: z.ZodEnum<{
-  admin: "admin";
-  instructor: "instructor";
-  moderator: "moderator";
-  student: "student";
-}>;
-type InviteRole = z.infer<typeof inviteRoleSchema>;
+declare const organizationMetadataSchema: z.ZodRecord<z.ZodString, z.ZodString>;
+type OrganizationMetadata = z.output<typeof organizationMetadataSchema>;
 declare const organizationSchema: z.ZodObject<{
   id: z.ZodString;
   externalId: z.ZodNullable<z.ZodString>;
   name: z.ZodString;
   slug: z.ZodString;
   ownerId: z.ZodString;
+  metadata: z.ZodRecord<z.ZodString, z.ZodString>;
   createdAt: z.ZodCoercedDate<unknown>;
   updatedAt: z.ZodCoercedDate<unknown>;
 }, z.core.$strict>;
@@ -35,13 +114,6 @@ declare const orgUserSchema: z.ZodObject<{
   id: z.ZodString;
   orgId: z.ZodString;
   userId: z.ZodString;
-  role: z.ZodEnum<{
-    owner: "owner";
-    admin: "admin";
-    instructor: "instructor";
-    moderator: "moderator";
-    student: "student";
-  }>;
   status: z.ZodEnum<{
     active: "active";
     invited: "invited";
@@ -63,17 +135,12 @@ declare const inviteSchema: z.ZodObject<{
   id: z.ZodString;
   orgId: z.ZodString;
   email: z.ZodEmail;
-  role: z.ZodEnum<{
-    admin: "admin";
-    instructor: "instructor";
-    moderator: "moderator";
-    student: "student";
-  }>;
+  roleKey: z.ZodString;
   status: z.ZodEnum<{
     pending: "pending";
+    canceled: "canceled";
     accepted: "accepted";
     rejected: "rejected";
-    canceled: "canceled";
   }>;
   invitedBy: z.ZodString;
   tokenHash: z.ZodNullable<z.ZodString>;
@@ -92,25 +159,11 @@ type NewOrganizationInput = z.infer<typeof newOrganizationInputSchema>;
 declare const addOrgUserInputSchema: z.ZodObject<{
   orgId: z.ZodString;
   userId: z.ZodString;
-  role: z.ZodEnum<{
-    owner: "owner";
-    admin: "admin";
-    instructor: "instructor";
-    moderator: "moderator";
-    student: "student";
-  }>;
 }, z.core.$strict>;
 type AddOrgUserInput = z.infer<typeof addOrgUserInputSchema>;
 declare const createOrgUserInputSchema: z.ZodObject<{
   orgId: z.ZodString;
   userId: z.ZodString;
-  role: z.ZodEnum<{
-    owner: "owner";
-    admin: "admin";
-    instructor: "instructor";
-    moderator: "moderator";
-    student: "student";
-  }>;
   status: z.ZodOptional<z.ZodEnum<{
     active: "active";
     invited: "invited";
@@ -118,13 +171,6 @@ declare const createOrgUserInputSchema: z.ZodObject<{
 }, z.core.$strict>;
 type CreateOrgUserInput = z.infer<typeof createOrgUserInputSchema>;
 declare const updateOrgUserInputSchema: z.ZodObject<{
-  role: z.ZodOptional<z.ZodEnum<{
-    owner: "owner";
-    admin: "admin";
-    instructor: "instructor";
-    moderator: "moderator";
-    student: "student";
-  }>>;
   status: z.ZodOptional<z.ZodEnum<{
     active: "active";
     invited: "invited";
@@ -132,26 +178,19 @@ declare const updateOrgUserInputSchema: z.ZodObject<{
 }, z.core.$strict>;
 type UpdateOrgUserInput = z.infer<typeof updateOrgUserInputSchema>;
 declare const createInviteInputSchema: z.ZodObject<{
-  orgId: z.ZodString;
   email: z.ZodEmail;
-  role: z.ZodEnum<{
-    admin: "admin";
-    instructor: "instructor";
-    moderator: "moderator";
-    student: "student";
-  }>;
-  inviterUserId: z.ZodString;
+  roleKey: z.ZodDefault<z.ZodString>;
   firstName: z.ZodOptional<z.ZodString>;
   lastName: z.ZodOptional<z.ZodString>;
   sendEmail: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strict>;
-type CreateInviteInput = z.infer<typeof createInviteInputSchema>;
+type CreateInviteInput = z.input<typeof createInviteInputSchema>;
 declare const acceptInviteInputSchema: z.ZodObject<{
   token: z.ZodString;
-  userId: z.ZodString;
+  authUserId: z.ZodString;
   email: z.ZodEmail;
 }, z.core.$strict>;
 type AcceptInviteInput = z.infer<typeof acceptInviteInputSchema>;
 //#endregion
-export { AcceptInviteInput, AddOrgUserInput, CreateInviteInput, CreateOrgUserInput, Invite, InviteInput, InviteRole, NewOrganizationInput, OrgUser, OrgUserInput, OrgUserProfile, OrgUserStatus, Organization, OrganizationInput, Role, UpdateOrgUserInput, acceptInviteInputSchema, addOrgUserInputSchema, createInviteInputSchema, createOrgUserInputSchema, inviteRoleSchema, inviteSchema, newOrganizationInputSchema, orgUserProfileSchema, orgUserSchema, orgUserStatusSchema, organizationSchema, roleSchema, updateOrgUserInputSchema };
+export { AcceptInviteInput, AddOrgUserInput, CreateInviteInput, CreateOrgUserInput, Invite, InviteInput, Level, NewOrganizationInput, OrgRoleRow, OrgUser, OrgUserInput, OrgUserProfile, OrgUserStatus, Organization, OrganizationInput, OrganizationMetadata, PERMISSION_KEYS, Permission, RoleAssignment, RoleKey, UpdateOrgUserInput, acceptInviteInputSchema, addOrgUserInputSchema, createInviteInputSchema, createOrgUserInputSchema, inviteSchema, levelSchema, newOrganizationInputSchema, orgRoleRowSchema, orgUserProfileSchema, orgUserSchema, orgUserStatusSchema, organizationMetadataSchema, organizationSchema, permissionSchema, roleAssignmentSchema, roleKeySchema, updateOrgUserInputSchema };
 //# sourceMappingURL=organizations.d.ts.map

package/dist/types/schemas/organizations.js

@@ -1,26 +1,87 @@
 import { emailSchema, idSchema } from "./shared.js";
+import { contentTypeSchema } from "./content.js";
 import { z } from "zod";
 //#region src/types/schemas/organizations.ts
-const roleSchema = z.enum([
-	"owner",
-	"admin",
-	"instructor",
-	"moderator",
-	"student"
-]);
+const levelSchema = z.union([z.literal("org"), z.lazy(() => contentTypeSchema)]);
+const PERMISSION_KEYS = [
+	"organizations:read",
+	"organizations:write",
+	"api_keys:read",
+	"api_keys:write",
+	"api_keys:delete",
+	"notification_categories:read",
+	"notification_categories:write",
+	"integrations:read",
+	"integrations:write",
+	"integrations:delete",
+	"analytics:read",
+	"people:read",
+	"people:write",
+	"people:delete",
+	"roles:read",
+	"roles:write",
+	"roles:delete",
+	"access:read",
+	"access:write",
+	"bundles:read",
+	"bundles:write",
+	"bundles:delete",
+	"media:read",
+	"media:write",
+	"media:delete",
+	"courses:read",
+	"courses:write",
+	"courses:delete",
+	"courses:moderate",
+	"progress:read",
+	"downloads:read",
+	"downloads:write",
+	"downloads:delete",
+	"communities:read",
+	"communities:write",
+	"communities:delete",
+	"communities:moderate",
+	"events:read",
+	"events:write",
+	"events:delete",
+	"automations:read",
+	"automations:write",
+	"automations:delete"
+];
+const permissionSchema = z.enum(PERMISSION_KEYS);
+const roleKeySchema = z.string().trim().min(1).max(64).regex(/^[a-z][a-zA-Z0-9_]*$/, "A role key starts with a lowercase letter and holds letters, digits and underscores");
+const orgRoleRowSchema = z.object({
+	id: idSchema,
+	orgId: idSchema,
+	key: z.string(),
+	name: z.string().nullable(),
+	description: z.string().nullable(),
+	base: z.string(),
+	levels: z.array(levelSchema).nullable(),
+	permissions: z.record(z.string(), z.boolean()),
+	team: z.boolean().nullable(),
+	createdAt: z.coerce.date(),
+	updatedAt: z.coerce.date()
+}).strict();
+const roleAssignmentSchema = z.object({
+	id: idSchema,
+	orgId: idSchema,
+	orgUserId: idSchema,
+	roleKey: z.string(),
+	contentId: idSchema.nullable(),
+	contentType: z.lazy(() => contentTypeSchema).nullable(),
+	assignedBy: z.string(),
+	createdAt: z.coerce.date()
+}).strict();
 const orgUserStatusSchema = z.enum(["invited", "active"]);
-const inviteRoleSchema = z.enum([
-	"admin",
-	"instructor",
-	"moderator",
-	"student"
-]);
+const organizationMetadataSchema = z.record(z.string(), z.string());
 const organizationSchema = z.object({
 	id: idSchema,
 	externalId: idSchema.nullable(),
 	name: z.string(),
 	slug: z.string(),
 	ownerId: idSchema,
+	metadata: organizationMetadataSchema,
 	createdAt: z.coerce.date(),
 	updatedAt: z.coerce.date()
 }).strict();
@@ -28,7 +89,6 @@ const orgUserSchema = z.object({
 	id: idSchema,
 	orgId: idSchema,
 	userId: idSchema,
-	role: roleSchema,
 	status: orgUserStatusSchema,
 	createdAt: z.coerce.date(),
 	updatedAt: z.coerce.date()
@@ -44,7 +104,7 @@ const inviteSchema = z.object({
 	id: idSchema,
 	orgId: idSchema,
 	email: emailSchema,
-	role: inviteRoleSchema,
+	roleKey: z.string(),
 	status: z.enum([
 		"pending",
 		"accepted",
@@ -64,34 +124,27 @@ const newOrganizationInputSchema = z.object({
 }).strict();
 const addOrgUserInputSchema = z.object({
 	orgId: idSchema,
-	userId: idSchema,
-	role: roleSchema
+	userId: idSchema
 }).strict();
 const createOrgUserInputSchema = z.object({
 	orgId: idSchema,
 	userId: idSchema,
-	role: roleSchema,
-	status: orgUserStatusSchema.optional()
-}).strict();
-const updateOrgUserInputSchema = z.object({
-	role: roleSchema.optional(),
 	status: orgUserStatusSchema.optional()
 }).strict();
+const updateOrgUserInputSchema = z.object({ status: orgUserStatusSchema.optional() }).strict();
 const createInviteInputSchema = z.object({
-	orgId: idSchema,
 	email: emailSchema,
-	role: inviteRoleSchema,
-	inviterUserId: idSchema,
+	roleKey: roleKeySchema.default("member"),
 	firstName: z.string().optional(),
 	lastName: z.string().optional(),
 	sendEmail: z.boolean().optional()
 }).strict();
 const acceptInviteInputSchema = z.object({
 	token: z.string().trim().min(1),
-	userId: idSchema,
+	authUserId: idSchema,
 	email: emailSchema
 }).strict();
 //#endregion
-export { acceptInviteInputSchema, addOrgUserInputSchema, createInviteInputSchema, createOrgUserInputSchema, inviteRoleSchema, inviteSchema, newOrganizationInputSchema, orgUserProfileSchema, orgUserSchema, orgUserStatusSchema, organizationSchema, roleSchema, updateOrgUserInputSchema };
+export { PERMISSION_KEYS, acceptInviteInputSchema, addOrgUserInputSchema, createInviteInputSchema, createOrgUserInputSchema, inviteSchema, levelSchema, newOrganizationInputSchema, orgRoleRowSchema, orgUserProfileSchema, orgUserSchema, orgUserStatusSchema, organizationMetadataSchema, organizationSchema, permissionSchema, roleAssignmentSchema, roleKeySchema, updateOrgUserInputSchema };
 
 //# sourceMappingURL=organizations.js.map

package/dist/types/schemas/organizations.js.map

@@ -1 +1 @@
-{"version":3,"file":"organizations.js","names":[],"sources":["../../../src/types/schemas/organizations.ts"],"sourcesContent":["import { z } from 'zod';\nimport { idSchema, emailSchema } from './shared.js';\n\nexport const roleSchema = z.enum(['owner', 'admin', 'instructor', 'moderator', 'student']);\nexport type Role = z.infer<typeof roleSchema>;\n\nexport const orgUserStatusSchema = z.enum(['invited', 'active']);\nexport type OrgUserStatus = z.infer<typeof orgUserStatusSchema>;\n\nexport const inviteRoleSchema = z.enum(['admin', 'instructor', 'moderator', 'student']);\nexport type InviteRole = z.infer<typeof inviteRoleSchema>;\n\nexport const organizationSchema = z\n  .object({\n    id: idSchema,\n    externalId: idSchema.nullable(),\n    name: z.string(),\n    slug: z.string(),\n    ownerId: idSchema,\n    createdAt: z.coerce.date(),\n    updatedAt: z.coerce.date(),\n  })\n  .strict();\nexport type Organization = z.output<typeof organizationSchema>;\nexport type OrganizationInput = z.input<typeof organizationSchema>;\n\nexport const orgUserSchema = z\n  .object({\n    id: idSchema,\n    orgId: idSchema,\n    userId: idSchema,\n    role: roleSchema,\n    status: orgUserStatusSchema,\n    createdAt: z.coerce.date(),\n    updatedAt: z.coerce.date(),\n  })\n  .strict();\nexport type OrgUser = z.output<typeof orgUserSchema>;\nexport type OrgUserInput = z.input<typeof orgUserSchema>;\n\nexport const orgUserProfileSchema = z\n  .object({\n    id: idSchema,\n    firstName: z.string().nullable(),\n    lastName: z.string().nullable(),\n    email: emailSchema,\n    image: z.string().nullable(),\n  })\n  .strict();\nexport type OrgUserProfile = z.infer<typeof orgUserProfileSchema>;\n\nexport const inviteSchema = z\n  .object({\n    id: idSchema,\n    orgId: idSchema,\n    email: emailSchema,\n    role: inviteRoleSchema,\n    status: z.enum(['pending', 'accepted', 'rejected', 'canceled']),\n    invitedBy: idSchema,\n    tokenHash: z.string().nullable(),\n    expiresAt: z.coerce.date().nullable(),\n    createdAt: z.coerce.date(),\n    updatedAt: z.coerce.date(),\n  })\n  .strict();\nexport type Invite = z.output<typeof inviteSchema>;\nexport type InviteInput = z.input<typeof inviteSchema>;\n\nexport const newOrganizationInputSchema = z\n  .object({\n    name: z.string(),\n    slug: z.string(),\n    logo: z.string().optional(),\n  })\n  .strict();\nexport type NewOrganizationInput = z.infer<typeof newOrganizationInputSchema>;\n\nexport const addOrgUserInputSchema = z\n  .object({\n    orgId: idSchema,\n    userId: idSchema,\n    role: roleSchema,\n  })\n  .strict();\nexport type AddOrgUserInput = z.infer<typeof addOrgUserInputSchema>;\n\nexport const createOrgUserInputSchema = z\n  .object({\n    orgId: idSchema,\n    userId: idSchema,\n    role: roleSchema,\n    status: orgUserStatusSchema.optional(),\n  })\n  .strict();\nexport type CreateOrgUserInput = z.infer<typeof createOrgUserInputSchema>;\n\nexport const updateOrgUserInputSchema = z\n  .object({\n    role: roleSchema.optional(),\n    status: orgUserStatusSchema.optional(),\n  })\n  .strict();\nexport type UpdateOrgUserInput = z.infer<typeof updateOrgUserInputSchema>;\n\nexport const createInviteInputSchema = z\n  .object({\n    orgId: idSchema,\n    email: emailSchema,\n    role: inviteRoleSchema,\n    inviterUserId: idSchema,\n    firstName: z.string().optional(),\n    lastName: z.string().optional(),\n    sendEmail: z.boolean().optional(),\n  })\n  .strict();\nexport type CreateInviteInput = z.infer<typeof createInviteInputSchema>;\n\nexport const acceptInviteInputSchema = z\n  .object({\n    token: z.string().trim().min(1),\n    userId: idSchema,\n    email: emailSchema,\n  })\n  .strict();\nexport type AcceptInviteInput = z.infer<typeof acceptInviteInputSchema>;\n"],"mappings":";;;AAGA,MAAa,aAAa,EAAE,KAAK;CAAC;CAAS;CAAS;CAAc;CAAa;AAAS,CAAC;AAGzF,MAAa,sBAAsB,EAAE,KAAK,CAAC,WAAW,QAAQ,CAAC;AAG/D,MAAa,mBAAmB,EAAE,KAAK;CAAC;CAAS;CAAc;CAAa;AAAS,CAAC;AAGtF,MAAa,qBAAqB,EAC/B,OAAO;CACN,IAAI;CACJ,YAAY,SAAS,SAAS;CAC9B,MAAM,EAAE,OAAO;CACf,MAAM,EAAE,OAAO;CACf,SAAS;CACT,WAAW,EAAE,OAAO,KAAK;CACzB,WAAW,EAAE,OAAO,KAAK;AAC3B,CAAC,CAAC,CACD,OAAO;AAIV,MAAa,gBAAgB,EAC1B,OAAO;CACN,IAAI;CACJ,OAAO;CACP,QAAQ;CACR,MAAM;CACN,QAAQ;CACR,WAAW,EAAE,OAAO,KAAK;CACzB,WAAW,EAAE,OAAO,KAAK;AAC3B,CAAC,CAAC,CACD,OAAO;AAIV,MAAa,uBAAuB,EACjC,OAAO;CACN,IAAI;CACJ,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,OAAO;CACP,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;AAC7B,CAAC,CAAC,CACD,OAAO;AAGV,MAAa,eAAe,EACzB,OAAO;CACN,IAAI;CACJ,OAAO;CACP,OAAO;CACP,MAAM;CACN,QAAQ,EAAE,KAAK;EAAC;EAAW;EAAY;EAAY;CAAU,CAAC;CAC9D,WAAW;CACX,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,WAAW,EAAE,OAAO,KAAK,CAAC,CAAC,SAAS;CACpC,WAAW,EAAE,OAAO,KAAK;CACzB,WAAW,EAAE,OAAO,KAAK;AAC3B,CAAC,CAAC,CACD,OAAO;AAIV,MAAa,6BAA6B,EACvC,OAAO;CACN,MAAM,EAAE,OAAO;CACf,MAAM,EAAE,OAAO;CACf,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;AAC5B,CAAC,CAAC,CACD,OAAO;AAGV,MAAa,wBAAwB,EAClC,OAAO;CACN,OAAO;CACP,QAAQ;CACR,MAAM;AACR,CAAC,CAAC,CACD,OAAO;AAGV,MAAa,2BAA2B,EACrC,OAAO;CACN,OAAO;CACP,QAAQ;CACR,MAAM;CACN,QAAQ,oBAAoB,SAAS;AACvC,CAAC,CAAC,CACD,OAAO;AAGV,MAAa,2BAA2B,EACrC,OAAO;CACN,MAAM,WAAW,SAAS;CAC1B,QAAQ,oBAAoB,SAAS;AACvC,CAAC,CAAC,CACD,OAAO;AAGV,MAAa,0BAA0B,EACpC,OAAO;CACN,OAAO;CACP,OAAO;CACP,MAAM;CACN,eAAe;CACf,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,WAAW,EAAE,QAAQ,CAAC,CAAC,SAAS;AAClC,CAAC,CAAC,CACD,OAAO;AAGV,MAAa,0BAA0B,EACpC,OAAO;CACN,OAAO,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;CAC9B,QAAQ;CACR,OAAO;AACT,CAAC,CAAC,CACD,OAAO"}
+{"version":3,"file":"organizations.js","names":[],"sources":["../../../src/types/schemas/organizations.ts"],"sourcesContent":["import { z } from 'zod';\nimport { idSchema, emailSchema } from './shared.js';\nimport { contentTypeSchema } from './content.js';\n\nexport const levelSchema = z.union([z.literal('org'), z.lazy(() => contentTypeSchema)]);\nexport type Level = z.infer<typeof levelSchema>;\n\nexport const PERMISSION_KEYS = [\n  'organizations:read',\n  'organizations:write',\n  'api_keys:read',\n  'api_keys:write',\n  'api_keys:delete',\n  'notification_categories:read',\n  'notification_categories:write',\n  'integrations:read',\n  'integrations:write',\n  'integrations:delete',\n  'analytics:read',\n  'people:read',\n  'people:write',\n  'people:delete',\n  'roles:read',\n  'roles:write',\n  'roles:delete',\n  'access:read',\n  'access:write',\n  'bundles:read',\n  'bundles:write',\n  'bundles:delete',\n  'media:read',\n  'media:write',\n  'media:delete',\n  'courses:read',\n  'courses:write',\n  'courses:delete',\n  'courses:moderate',\n  'progress:read',\n  'downloads:read',\n  'downloads:write',\n  'downloads:delete',\n  'communities:read',\n  'communities:write',\n  'communities:delete',\n  'communities:moderate',\n  'events:read',\n  'events:write',\n  'events:delete',\n  'automations:read',\n  'automations:write',\n  'automations:delete',\n] as const;\n\nexport const permissionSchema = z.enum(PERMISSION_KEYS);\nexport type Permission = z.infer<typeof permissionSchema>;\n\nexport const roleKeySchema = z\n  .string()\n  .trim()\n  .min(1)\n  .max(64)\n  .regex(\n    /^[a-z][a-zA-Z0-9_]*$/,\n    'A role key starts with a lowercase letter and holds letters, digits and underscores',\n  );\nexport type RoleKey = z.infer<typeof roleKeySchema>;\n\nexport const orgRoleRowSchema = z\n  .object({\n    id: idSchema,\n    orgId: idSchema,\n    key: z.string(),\n    name: z.string().nullable(),\n    description: z.string().nullable(),\n    base: z.string(),\n    levels: z.array(levelSchema).nullable(),\n    permissions: z.record(z.string(), z.boolean()),\n    team: z.boolean().nullable(),\n    createdAt: z.coerce.date(),\n    updatedAt: z.coerce.date(),\n  })\n  .strict();\nexport type OrgRoleRow = z.output<typeof orgRoleRowSchema>;\n\nexport const roleAssignmentSchema = z\n  .object({\n    id: idSchema,\n    orgId: idSchema,\n    orgUserId: idSchema,\n    roleKey: z.string(),\n    contentId: idSchema.nullable(),\n    contentType: z.lazy(() => contentTypeSchema).nullable(),\n    assignedBy: z.string(),\n    createdAt: z.coerce.date(),\n  })\n  .strict();\nexport type RoleAssignment = z.output<typeof roleAssignmentSchema>;\n\nexport const orgUserStatusSchema = z.enum(['invited', 'active']);\nexport type OrgUserStatus = z.infer<typeof orgUserStatusSchema>;\n\nexport const organizationMetadataSchema = z.record(z.string(), z.string());\nexport type OrganizationMetadata = z.output<typeof organizationMetadataSchema>;\n\nexport const organizationSchema = z\n  .object({\n    id: idSchema,\n    externalId: idSchema.nullable(),\n    name: z.string(),\n    slug: z.string(),\n    ownerId: idSchema,\n    metadata: organizationMetadataSchema,\n    createdAt: z.coerce.date(),\n    updatedAt: z.coerce.date(),\n  })\n  .strict();\nexport type Organization = z.output<typeof organizationSchema>;\nexport type OrganizationInput = z.input<typeof organizationSchema>;\n\nexport const orgUserSchema = z\n  .object({\n    id: idSchema,\n    orgId: idSchema,\n    userId: idSchema,\n    status: orgUserStatusSchema,\n    createdAt: z.coerce.date(),\n    updatedAt: z.coerce.date(),\n  })\n  .strict();\nexport type OrgUser = z.output<typeof orgUserSchema>;\nexport type OrgUserInput = z.input<typeof orgUserSchema>;\n\nexport const orgUserProfileSchema = z\n  .object({\n    id: idSchema,\n    firstName: z.string().nullable(),\n    lastName: z.string().nullable(),\n    email: emailSchema,\n    image: z.string().nullable(),\n  })\n  .strict();\nexport type OrgUserProfile = z.infer<typeof orgUserProfileSchema>;\n\nexport const inviteSchema = z\n  .object({\n    id: idSchema,\n    orgId: idSchema,\n    email: emailSchema,\n    roleKey: z.string(),\n    status: z.enum(['pending', 'accepted', 'rejected', 'canceled']),\n    invitedBy: idSchema,\n    tokenHash: z.string().nullable(),\n    expiresAt: z.coerce.date().nullable(),\n    createdAt: z.coerce.date(),\n    updatedAt: z.coerce.date(),\n  })\n  .strict();\nexport type Invite = z.output<typeof inviteSchema>;\nexport type InviteInput = z.input<typeof inviteSchema>;\n\nexport const newOrganizationInputSchema = z\n  .object({\n    name: z.string(),\n    slug: z.string(),\n    logo: z.string().optional(),\n  })\n  .strict();\nexport type NewOrganizationInput = z.infer<typeof newOrganizationInputSchema>;\n\nexport const addOrgUserInputSchema = z\n  .object({\n    orgId: idSchema,\n    userId: idSchema,\n  })\n  .strict();\nexport type AddOrgUserInput = z.infer<typeof addOrgUserInputSchema>;\n\nexport const createOrgUserInputSchema = z\n  .object({\n    orgId: idSchema,\n    userId: idSchema,\n    status: orgUserStatusSchema.optional(),\n  })\n  .strict();\nexport type CreateOrgUserInput = z.infer<typeof createOrgUserInputSchema>;\n\nexport const updateOrgUserInputSchema = z\n  .object({\n    status: orgUserStatusSchema.optional(),\n  })\n  .strict();\nexport type UpdateOrgUserInput = z.infer<typeof updateOrgUserInputSchema>;\n\nexport const createInviteInputSchema = z\n  .object({\n    email: emailSchema,\n    roleKey: roleKeySchema.default('member'),\n    firstName: z.string().optional(),\n    lastName: z.string().optional(),\n    sendEmail: z.boolean().optional(),\n  })\n  .strict();\nexport type CreateInviteInput = z.input<typeof createInviteInputSchema>;\n\nexport const acceptInviteInputSchema = z\n  .object({\n    token: z.string().trim().min(1),\n    authUserId: idSchema,\n    email: emailSchema,\n  })\n  .strict();\nexport type AcceptInviteInput = z.infer<typeof acceptInviteInputSchema>;\n"],"mappings":";;;;AAIA,MAAa,cAAc,EAAE,MAAM,CAAC,EAAE,QAAQ,KAAK,GAAG,EAAE,WAAW,iBAAiB,CAAC,CAAC;AAGtF,MAAa,kBAAkB;CAC7B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,MAAa,mBAAmB,EAAE,KAAK,eAAe;AAGtD,MAAa,gBAAgB,EAC1B,OAAO,CAAC,CACR,KAAK,CAAC,CACN,IAAI,CAAC,CAAC,CACN,IAAI,EAAE,CAAC,CACP,MACC,wBACA,qFACF;AAGF,MAAa,mBAAmB,EAC7B,OAAO;CACN,IAAI;CACJ,OAAO;CACP,KAAK,EAAE,OAAO;CACd,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;CAC1B,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;CACjC,MAAM,EAAE,OAAO;CACf,QAAQ,EAAE,MAAM,WAAW,CAAC,CAAC,SAAS;CACtC,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;CAC7C,MAAM,EAAE,QAAQ,CAAC,CAAC,SAAS;CAC3B,WAAW,EAAE,OAAO,KAAK;CACzB,WAAW,EAAE,OAAO,KAAK;AAC3B,CAAC,CAAC,CACD,OAAO;AAGV,MAAa,uBAAuB,EACjC,OAAO;CACN,IAAI;CACJ,OAAO;CACP,WAAW;CACX,SAAS,EAAE,OAAO;CAClB,WAAW,SAAS,SAAS;CAC7B,aAAa,EAAE,WAAW,iBAAiB,CAAC,CAAC,SAAS;CACtD,YAAY,EAAE,OAAO;CACrB,WAAW,EAAE,OAAO,KAAK;AAC3B,CAAC,CAAC,CACD,OAAO;AAGV,MAAa,sBAAsB,EAAE,KAAK,CAAC,WAAW,QAAQ,CAAC;AAG/D,MAAa,6BAA6B,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC;AAGzE,MAAa,qBAAqB,EAC/B,OAAO;CACN,IAAI;CACJ,YAAY,SAAS,SAAS;CAC9B,MAAM,EAAE,OAAO;CACf,MAAM,EAAE,OAAO;CACf,SAAS;CACT,UAAU;CACV,WAAW,EAAE,OAAO,KAAK;CACzB,WAAW,EAAE,OAAO,KAAK;AAC3B,CAAC,CAAC,CACD,OAAO;AAIV,MAAa,gBAAgB,EAC1B,OAAO;CACN,IAAI;CACJ,OAAO;CACP,QAAQ;CACR,QAAQ;CACR,WAAW,EAAE,OAAO,KAAK;CACzB,WAAW,EAAE,OAAO,KAAK;AAC3B,CAAC,CAAC,CACD,OAAO;AAIV,MAAa,uBAAuB,EACjC,OAAO;CACN,IAAI;CACJ,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,OAAO;CACP,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;AAC7B,CAAC,CAAC,CACD,OAAO;AAGV,MAAa,eAAe,EACzB,OAAO;CACN,IAAI;CACJ,OAAO;CACP,OAAO;CACP,SAAS,EAAE,OAAO;CAClB,QAAQ,EAAE,KAAK;EAAC;EAAW;EAAY;EAAY;CAAU,CAAC;CAC9D,WAAW;CACX,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,WAAW,EAAE,OAAO,KAAK,CAAC,CAAC,SAAS;CACpC,WAAW,EAAE,OAAO,KAAK;CACzB,WAAW,EAAE,OAAO,KAAK;AAC3B,CAAC,CAAC,CACD,OAAO;AAIV,MAAa,6BAA6B,EACvC,OAAO;CACN,MAAM,EAAE,OAAO;CACf,MAAM,EAAE,OAAO;CACf,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;AAC5B,CAAC,CAAC,CACD,OAAO;AAGV,MAAa,wBAAwB,EAClC,OAAO;CACN,OAAO;CACP,QAAQ;AACV,CAAC,CAAC,CACD,OAAO;AAGV,MAAa,2BAA2B,EACrC,OAAO;CACN,OAAO;CACP,QAAQ;CACR,QAAQ,oBAAoB,SAAS;AACvC,CAAC,CAAC,CACD,OAAO;AAGV,MAAa,2BAA2B,EACrC,OAAO,EACN,QAAQ,oBAAoB,SAAS,EACvC,CAAC,CAAC,CACD,OAAO;AAGV,MAAa,0BAA0B,EACpC,OAAO;CACN,OAAO;CACP,SAAS,cAAc,QAAQ,QAAQ;CACvC,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,WAAW,EAAE,QAAQ,CAAC,CAAC,SAAS;AAClC,CAAC,CAAC,CACD,OAAO;AAGV,MAAa,0BAA0B,EACpC,OAAO;CACN,OAAO,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;CAC9B,YAAY;CACZ,OAAO;AACT,CAAC,CAAC,CACD,OAAO"}

package/dist/types/schemas/progress.d.ts

@@ -2,9 +2,9 @@ import { JsonValue } from "../shared.js";
 import { z } from "zod";
 //#region src/types/schemas/progress.d.ts
 declare const progressTargetTypeSchema: z.ZodEnum<{
+  course: "course";
   activity: "activity";
   module: "module";
-  course: "course";
 }>;
 type ProgressTargetType = z.infer<typeof progressTargetTypeSchema>;
 declare const progressRecordSchema: z.ZodObject<{
@@ -12,9 +12,9 @@ declare const progressRecordSchema: z.ZodObject<{
   orgId: z.ZodString;
   orgUserId: z.ZodString;
   targetType: z.ZodEnum<{
+    course: "course";
     activity: "activity";
     module: "module";
-    course: "course";
   }>;
   targetId: z.ZodString;
   startedAt: z.ZodCoercedDate<unknown>;
@@ -28,9 +28,9 @@ type ProgressRecordInput = z.input<typeof progressRecordSchema>;
 declare const progressTargetSchema: z.ZodObject<{
   orgUserId: z.ZodString;
   targetType: z.ZodEnum<{
+    course: "course";
     activity: "activity";
     module: "module";
-    course: "course";
   }>;
   targetId: z.ZodString;
 }, z.core.$strict>;
@@ -41,7 +41,6 @@ declare const progressReportItemSchema: z.ZodObject<{
 }, z.core.$catchall<z.ZodType<JsonValue, unknown, z.core.$ZodTypeInternals<JsonValue, unknown>>>>;
 type ProgressReportItem = z.infer<typeof progressReportItemSchema>;
 declare const reportProgressInputSchema: z.ZodObject<{
-  orgUserId: z.ZodString;
   activityId: z.ZodString;
   reports: z.ZodArray<z.ZodObject<{
     asset: z.ZodOptional<z.ZodString>;

package/dist/types/schemas/progress.js

@@ -28,7 +28,6 @@ const progressReportItemSchema = z.object({
 	completed: z.boolean().optional()
 }).catchall(jsonValueSchema);
 const reportProgressInputSchema = z.object({
-	orgUserId: idSchema,
 	activityId: idSchema,
 	reports: z.array(progressReportItemSchema)
 }).strict();

package/dist/types/schemas/progress.js.map

@@ -1 +1 @@
-{"version":3,"file":"progress.js","names":[],"sources":["../../../src/types/schemas/progress.ts"],"sourcesContent":["import { z } from 'zod';\nimport { idSchema, jsonValueSchema } from './shared.js';\n\nexport const progressTargetTypeSchema = z.enum(['activity', 'module', 'course']);\nexport type ProgressTargetType = z.infer<typeof progressTargetTypeSchema>;\n\nexport const progressRecordSchema = z\n  .object({\n    id: idSchema,\n    orgId: idSchema,\n    orgUserId: idSchema,\n    targetType: progressTargetTypeSchema,\n    targetId: idSchema,\n    startedAt: z.coerce.date(),\n    position: jsonValueSchema.nullable(),\n    completedAt: z.coerce.date().nullable(),\n    createdAt: z.coerce.date(),\n    updatedAt: z.coerce.date(),\n  })\n  .strict();\nexport type ProgressRecord = z.output<typeof progressRecordSchema>;\nexport type ProgressRecordInput = z.input<typeof progressRecordSchema>;\n\nexport const progressTargetSchema = z\n  .object({\n    orgUserId: idSchema,\n    targetType: progressTargetTypeSchema,\n    targetId: idSchema,\n  })\n  .strict();\nexport type ProgressTarget = z.infer<typeof progressTargetSchema>;\n\nexport const progressReportItemSchema = z\n  .object({\n    asset: z.string().optional(),\n    completed: z.boolean().optional(),\n  })\n  .catchall(jsonValueSchema);\nexport type ProgressReportItem = z.infer<typeof progressReportItemSchema>;\n\nexport const reportProgressInputSchema = z\n  .object({\n    orgUserId: idSchema,\n    activityId: idSchema,\n    reports: z.array(progressReportItemSchema),\n  })\n  .strict();\nexport type ReportProgressInput = z.infer<typeof reportProgressInputSchema>;\n"],"mappings":";;;AAGA,MAAa,2BAA2B,EAAE,KAAK;CAAC;CAAY;CAAU;AAAQ,CAAC;AAG/E,MAAa,uBAAuB,EACjC,OAAO;CACN,IAAI;CACJ,OAAO;CACP,WAAW;CACX,YAAY;CACZ,UAAU;CACV,WAAW,EAAE,OAAO,KAAK;CACzB,UAAU,gBAAgB,SAAS;CACnC,aAAa,EAAE,OAAO,KAAK,CAAC,CAAC,SAAS;CACtC,WAAW,EAAE,OAAO,KAAK;CACzB,WAAW,EAAE,OAAO,KAAK;AAC3B,CAAC,CAAC,CACD,OAAO;AAIV,MAAa,uBAAuB,EACjC,OAAO;CACN,WAAW;CACX,YAAY;CACZ,UAAU;AACZ,CAAC,CAAC,CACD,OAAO;AAGV,MAAa,2BAA2B,EACrC,OAAO;CACN,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;CAC3B,WAAW,EAAE,QAAQ,CAAC,CAAC,SAAS;AAClC,CAAC,CAAC,CACD,SAAS,eAAe;AAG3B,MAAa,4BAA4B,EACtC,OAAO;CACN,WAAW;CACX,YAAY;CACZ,SAAS,EAAE,MAAM,wBAAwB;AAC3C,CAAC,CAAC,CACD,OAAO"}
+{"version":3,"file":"progress.js","names":[],"sources":["../../../src/types/schemas/progress.ts"],"sourcesContent":["import { z } from 'zod';\nimport { idSchema, jsonValueSchema } from './shared.js';\n\nexport const progressTargetTypeSchema = z.enum(['activity', 'module', 'course']);\nexport type ProgressTargetType = z.infer<typeof progressTargetTypeSchema>;\n\nexport const progressRecordSchema = z\n  .object({\n    id: idSchema,\n    orgId: idSchema,\n    orgUserId: idSchema,\n    targetType: progressTargetTypeSchema,\n    targetId: idSchema,\n    startedAt: z.coerce.date(),\n    position: jsonValueSchema.nullable(),\n    completedAt: z.coerce.date().nullable(),\n    createdAt: z.coerce.date(),\n    updatedAt: z.coerce.date(),\n  })\n  .strict();\nexport type ProgressRecord = z.output<typeof progressRecordSchema>;\nexport type ProgressRecordInput = z.input<typeof progressRecordSchema>;\n\nexport const progressTargetSchema = z\n  .object({\n    orgUserId: idSchema,\n    targetType: progressTargetTypeSchema,\n    targetId: idSchema,\n  })\n  .strict();\nexport type ProgressTarget = z.infer<typeof progressTargetSchema>;\n\nexport const progressReportItemSchema = z\n  .object({\n    asset: z.string().optional(),\n    completed: z.boolean().optional(),\n  })\n  .catchall(jsonValueSchema);\nexport type ProgressReportItem = z.infer<typeof progressReportItemSchema>;\n\nexport const reportProgressInputSchema = z\n  .object({\n    activityId: idSchema,\n    reports: z.array(progressReportItemSchema),\n  })\n  .strict();\nexport type ReportProgressInput = z.infer<typeof reportProgressInputSchema>;\n"],"mappings":";;;AAGA,MAAa,2BAA2B,EAAE,KAAK;CAAC;CAAY;CAAU;AAAQ,CAAC;AAG/E,MAAa,uBAAuB,EACjC,OAAO;CACN,IAAI;CACJ,OAAO;CACP,WAAW;CACX,YAAY;CACZ,UAAU;CACV,WAAW,EAAE,OAAO,KAAK;CACzB,UAAU,gBAAgB,SAAS;CACnC,aAAa,EAAE,OAAO,KAAK,CAAC,CAAC,SAAS;CACtC,WAAW,EAAE,OAAO,KAAK;CACzB,WAAW,EAAE,OAAO,KAAK;AAC3B,CAAC,CAAC,CACD,OAAO;AAIV,MAAa,uBAAuB,EACjC,OAAO;CACN,WAAW;CACX,YAAY;CACZ,UAAU;AACZ,CAAC,CAAC,CACD,OAAO;AAGV,MAAa,2BAA2B,EACrC,OAAO;CACN,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;CAC3B,WAAW,EAAE,QAAQ,CAAC,CAAC,SAAS;AAClC,CAAC,CAAC,CACD,SAAS,eAAe;AAG3B,MAAa,4BAA4B,EACtC,OAAO;CACN,YAAY;CACZ,SAAS,EAAE,MAAM,wBAAwB;AAC3C,CAAC,CAAC,CACD,OAAO"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@headless-lms/core",
-  "version": "0.4.0",
+  "version": "0.6.0",
   "type": "module",
   "sideEffects": false,
   "exports": {

package/dist/organizations/access-scopes.d.ts

@@ -1,19 +0,0 @@
-import { Role } from "../types/schemas/organizations.js";
-import { Permission } from "./roles.js";
-//#region src/organizations/access-scopes.d.ts
-declare const ACCESS_SCOPES: readonly ["courses:read", "courses:write", "courses:delete", "downloads:read", "downloads:write", "downloads:delete", "bundles:read", "bundles:write", "bundles:delete", "media:read", "students:read", "students:invite", "access:read", "access:write", "analytics:read", "automations:read", "automations:write", "automations:delete", "comments:read", "comments:moderate", "communities:read", "communities:write", "communities:delete", "community_members:read", "community_members:write", "community_moderation:read", "community_moderation:write"];
-type AccessScope = (typeof ACCESS_SCOPES)[number];
-declare const SCOPE_PERMISSION: Record<AccessScope, Permission | null>;
-type ScopeOption = {
-  scope: AccessScope;
-  allowed: boolean;
-};
-declare function isAccessScope(value: string): value is AccessScope;
-declare function isDeleteScope(scope: AccessScope): boolean;
-declare function roleHoldsScope(role: Role, scope: AccessScope): boolean;
-declare function scopesForRole(role: Role): AccessScope[];
-declare function scopeOptions(role: Role): ScopeOption[];
-declare function assertRoleHoldsScopes(role: Role, scopes: readonly AccessScope[]): void;
-//#endregion
-export { ACCESS_SCOPES, AccessScope, SCOPE_PERMISSION, ScopeOption, assertRoleHoldsScopes, isAccessScope, isDeleteScope, roleHoldsScope, scopeOptions, scopesForRole };
-//# sourceMappingURL=access-scopes.d.ts.map

package/dist/organizations/access-scopes.js

@@ -1,89 +0,0 @@
-import { ForbiddenError } from "../shared/errors.js";
-import { capability, isStaffRole } from "./roles.js";
-//#region src/organizations/access-scopes.ts
-const ACCESS_SCOPES = [
-	"courses:read",
-	"courses:write",
-	"courses:delete",
-	"downloads:read",
-	"downloads:write",
-	"downloads:delete",
-	"bundles:read",
-	"bundles:write",
-	"bundles:delete",
-	"media:read",
-	"students:read",
-	"students:invite",
-	"access:read",
-	"access:write",
-	"analytics:read",
-	"automations:read",
-	"automations:write",
-	"automations:delete",
-	"comments:read",
-	"comments:moderate",
-	"communities:read",
-	"communities:write",
-	"communities:delete",
-	"community_members:read",
-	"community_members:write",
-	"community_moderation:read",
-	"community_moderation:write"
-];
-const SCOPE_PERMISSION = {
-	"courses:read": null,
-	"courses:write": "create_course",
-	"courses:delete": "create_course",
-	"downloads:read": null,
-	"downloads:write": "create_course",
-	"downloads:delete": "create_course",
-	"bundles:read": null,
-	"bundles:write": "create_course",
-	"bundles:delete": "create_course",
-	"media:read": null,
-	"students:read": "view_student_progress",
-	"students:invite": "manage_users",
-	"access:read": "view_student_progress",
-	"access:write": "manage_users",
-	"analytics:read": "view_student_progress",
-	"automations:read": null,
-	"automations:write": "manage_org_settings",
-	"automations:delete": "manage_org_settings",
-	"comments:read": null,
-	"comments:moderate": "edit_assigned_course",
-	"communities:read": null,
-	"communities:write": "create_course",
-	"communities:delete": "create_course",
-	"community_members:read": null,
-	"community_members:write": "moderate",
-	"community_moderation:read": null,
-	"community_moderation:write": "moderate"
-};
-function isAccessScope(value) {
-	return ACCESS_SCOPES.includes(value);
-}
-function isDeleteScope(scope) {
-	return scope.endsWith(":delete");
-}
-function roleHoldsScope(role, scope) {
-	if (!isStaffRole(role)) return false;
-	const permission = SCOPE_PERMISSION[scope];
-	return permission === null || capability(role, permission) === true;
-}
-function scopesForRole(role) {
-	return ACCESS_SCOPES.filter((scope) => roleHoldsScope(role, scope));
-}
-function scopeOptions(role) {
-	return ACCESS_SCOPES.map((scope) => ({
-		scope,
-		allowed: roleHoldsScope(role, scope)
-	}));
-}
-function assertRoleHoldsScopes(role, scopes) {
-	const missing = scopes.filter((scope) => !roleHoldsScope(role, scope));
-	if (missing.length > 0) throw new ForbiddenError(`Your role cannot grant ${missing.join(", ")}`);
-}
-//#endregion
-export { ACCESS_SCOPES, SCOPE_PERMISSION, assertRoleHoldsScopes, isAccessScope, isDeleteScope, roleHoldsScope, scopeOptions, scopesForRole };
-
-//# sourceMappingURL=access-scopes.js.map

package/dist/organizations/access-scopes.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"access-scopes.js","names":[],"sources":["../../src/organizations/access-scopes.ts"],"sourcesContent":["import { ForbiddenError } from '../shared/errors.js';\nimport { capability, isStaffRole, type Permission, type Role } from './roles.js';\n\nexport const ACCESS_SCOPES = [\n  'courses:read',\n  'courses:write',\n  'courses:delete',\n  'downloads:read',\n  'downloads:write',\n  'downloads:delete',\n  'bundles:read',\n  'bundles:write',\n  'bundles:delete',\n  'media:read',\n  'students:read',\n  'students:invite',\n  'access:read',\n  'access:write',\n  'analytics:read',\n  'automations:read',\n  'automations:write',\n  'automations:delete',\n  'comments:read',\n  'comments:moderate',\n  'communities:read',\n  'communities:write',\n  'communities:delete',\n  'community_members:read',\n  'community_members:write',\n  'community_moderation:read',\n  'community_moderation:write',\n] as const;\n\nexport type AccessScope = (typeof ACCESS_SCOPES)[number];\n\nexport const SCOPE_PERMISSION: Record<AccessScope, Permission | null> = {\n  'courses:read': null,\n  'courses:write': 'create_course',\n  'courses:delete': 'create_course',\n  'downloads:read': null,\n  'downloads:write': 'create_course',\n  'downloads:delete': 'create_course',\n  'bundles:read': null,\n  'bundles:write': 'create_course',\n  'bundles:delete': 'create_course',\n  'media:read': null,\n  'students:read': 'view_student_progress',\n  'students:invite': 'manage_users',\n  'access:read': 'view_student_progress',\n  'access:write': 'manage_users',\n  'analytics:read': 'view_student_progress',\n  'automations:read': null,\n  'automations:write': 'manage_org_settings',\n  'automations:delete': 'manage_org_settings',\n  'comments:read': null,\n  'comments:moderate': 'edit_assigned_course',\n  'communities:read': null,\n  'communities:write': 'create_course',\n  'communities:delete': 'create_course',\n  'community_members:read': null,\n  'community_members:write': 'moderate',\n  'community_moderation:read': null,\n  'community_moderation:write': 'moderate',\n};\n\nexport type ScopeOption = { scope: AccessScope; allowed: boolean };\n\nexport function isAccessScope(value: string): value is AccessScope {\n  return (ACCESS_SCOPES as readonly string[]).includes(value);\n}\n\nexport function isDeleteScope(scope: AccessScope): boolean {\n  return scope.endsWith(':delete');\n}\n\nexport function roleHoldsScope(role: Role, scope: AccessScope): boolean {\n  if (!isStaffRole(role)) {\n    return false;\n  }\n  const permission = SCOPE_PERMISSION[scope];\n  return permission === null || capability(role, permission) === true;\n}\n\nexport function scopesForRole(role: Role): AccessScope[] {\n  return ACCESS_SCOPES.filter((scope) => roleHoldsScope(role, scope));\n}\n\nexport function scopeOptions(role: Role): ScopeOption[] {\n  return ACCESS_SCOPES.map((scope) => ({ scope, allowed: roleHoldsScope(role, scope) }));\n}\n\nexport function assertRoleHoldsScopes(role: Role, scopes: readonly AccessScope[]): void {\n  const missing = scopes.filter((scope) => !roleHoldsScope(role, scope));\n  if (missing.length > 0) {\n    throw new ForbiddenError(`Your role cannot grant ${missing.join(', ')}`);\n  }\n}\n"],"mappings":";;;AAGA,MAAa,gBAAgB;CAC3B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAIA,MAAa,mBAA2D;CACtE,gBAAgB;CAChB,iBAAiB;CACjB,kBAAkB;CAClB,kBAAkB;CAClB,mBAAmB;CACnB,oBAAoB;CACpB,gBAAgB;CAChB,iBAAiB;CACjB,kBAAkB;CAClB,cAAc;CACd,iBAAiB;CACjB,mBAAmB;CACnB,eAAe;CACf,gBAAgB;CAChB,kBAAkB;CAClB,oBAAoB;CACpB,qBAAqB;CACrB,sBAAsB;CACtB,iBAAiB;CACjB,qBAAqB;CACrB,oBAAoB;CACpB,qBAAqB;CACrB,sBAAsB;CACtB,0BAA0B;CAC1B,2BAA2B;CAC3B,6BAA6B;CAC7B,8BAA8B;AAChC;AAIA,SAAgB,cAAc,OAAqC;CACjE,OAAQ,cAAoC,SAAS,KAAK;AAC5D;AAEA,SAAgB,cAAc,OAA6B;CACzD,OAAO,MAAM,SAAS,SAAS;AACjC;AAEA,SAAgB,eAAe,MAAY,OAA6B;CACtE,IAAI,CAAC,YAAY,IAAI,GACnB,OAAO;CAET,MAAM,aAAa,iBAAiB;CACpC,OAAO,eAAe,QAAQ,WAAW,MAAM,UAAU,MAAM;AACjE;AAEA,SAAgB,cAAc,MAA2B;CACvD,OAAO,cAAc,QAAQ,UAAU,eAAe,MAAM,KAAK,CAAC;AACpE;AAEA,SAAgB,aAAa,MAA2B;CACtD,OAAO,cAAc,KAAK,WAAW;EAAE;EAAO,SAAS,eAAe,MAAM,KAAK;CAAE,EAAE;AACvF;AAEA,SAAgB,sBAAsB,MAAY,QAAsC;CACtF,MAAM,UAAU,OAAO,QAAQ,UAAU,CAAC,eAAe,MAAM,KAAK,CAAC;CACrE,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,eAAe,0BAA0B,QAAQ,KAAK,IAAI,GAAG;AAE3E"}

package/dist/organizations/roles.d.ts

@@ -1,19 +0,0 @@
-import { Role } from "../types/schemas/organizations.js";
-import "../types/index.js";
-//#region src/organizations/roles.d.ts
-declare const ROLES: readonly ["owner", "admin", "instructor", "moderator", "student"];
-type StaffRole = 'owner' | 'admin' | 'instructor';
-declare const STAFF_ROLES: readonly ["owner", "admin", "instructor"];
-type TeamRole = Exclude<Role, 'student'>;
-declare function isRole(value: string): value is Role;
-declare function isStaffRole(value: string): value is StaffRole;
-declare function parseRole(value: string): Role;
-type Permission = 'manage_billing' | 'manage_org_settings' | 'manage_users' | 'create_course' | 'edit_assigned_course' | 'view_student_progress' | 'moderate' | 'consume_content';
-type Capability = true | 'assigned' | 'enrolled';
-declare function capability(role: Role, permission: Permission): Capability | false;
-declare function canModerate(role: Role): boolean;
-declare function normalizeRole(raw: string): Role;
-declare const STUDENT_ROLE = "student";
-//#endregion
-export { Capability, Permission, ROLES, type Role, STAFF_ROLES, STUDENT_ROLE, StaffRole, TeamRole, canModerate, capability, isRole, isStaffRole, normalizeRole, parseRole };
-//# sourceMappingURL=roles.d.ts.map