@kernhq/module-hr 0.1.0

package/dist/contract/models.js

@@ -0,0 +1,381 @@
+import { Timestamp, WorkspaceId } from '@kernhq/contracts';
+import { z } from 'zod';
+/** Lowercase, 2-32 characters. Names the API prefix, the Postgres schema `mod_hr` and every event. */
+export const MODULE_ID = 'hr';
+/** A calendar date with no time and no zone: `2026-08-24`. */
+export const IsoDate = z.iso.date();
+/**
+ * An IANA zone name, never an offset.
+ *
+ * `+03:00` is a fact about one instant; `Europe/Istanbul` is a fact about a place, and only the
+ * second survives a daylight-saving transition. Everything in this module that has to turn a wall
+ * clock into an instant reads one of these.
+ */
+export const TimeZone = z.string().min(1).max(64);
+/** ISO 3166-1 alpha-2, upper case: `TR`, `NL`, `DE`. */
+export const CountryCode = z
+    .string()
+    .length(2)
+    .regex(/^[A-Z]{2}$/);
+/** ISO 3166-2 subdivision, without the country prefix: `34` for Istanbul, `BY` for Bavaria. */
+export const RegionCode = z.string().min(1).max(8);
+/** `09:00` — a wall clock reading, meaningless until a date and a zone are supplied. */
+export const WallClock = z.string().regex(/^([01]\d|2[0-3]):[0-5]\d$/);
+const ws = { workspaceId: WorkspaceId };
+// =====================================================================================
+// people
+// =====================================================================================
+export const PersonStatus = z.enum(['onboarding', 'active', 'on_leave', 'offboarding', 'terminated']);
+export const Person = z.object({
+    id: z.uuid(),
+    ...ws,
+    /**
+     * The Kern account, when there is one.
+     *
+     * Nullable on purpose. Plenty of employees never sign in — factory floor, drivers, seasonal staff
+     * — and a directory that can only hold people with logins is not a directory. It also means HR can
+     * be populated before anyone is invited.
+     */
+    userId: z.uuid().nullable(),
+    employeeNo: z.string().min(1).max(32).nullable(),
+    displayName: z.string().min(1).max(160),
+    workEmail: z.email().max(254).nullable(),
+    personalEmail: z.email().max(254).nullable(),
+    phone: z.string().max(32).nullable(),
+    photoFileId: z.uuid().nullable(),
+    status: PersonStatus,
+    hiredOn: IsoDate.nullable(),
+    terminatedOn: IsoDate.nullable(),
+    /** Overrides the primary office's zone for somebody who genuinely works elsewhere. */
+    timezone: TimeZone.nullable(),
+    custom: z.record(z.string(), z.unknown()),
+    createdAt: Timestamp,
+    updatedAt: Timestamp,
+});
+/**
+ * The fields that need a second permission.
+ *
+ * A separate shape, not optional fields on `Person`, because optional fields get returned by
+ * accident. Somebody with `hr.person.view` can read the directory; reading a national identity
+ * number takes `hr.person.view_sensitive`, and the two never travel in the same object.
+ */
+export const PersonSensitive = z.object({
+    personId: z.uuid(),
+    ...ws,
+    nationalId: z.string().max(64).nullable(),
+    birthDate: IsoDate.nullable(),
+    iban: z.string().max(48).nullable(),
+    emergencyContact: z
+        .object({
+        name: z.string().max(160),
+        relationship: z.string().max(64).optional(),
+        phone: z.string().max(32),
+    })
+        .nullable(),
+});
+// =====================================================================================
+// employment — effective-dated
+// =====================================================================================
+export const EmploymentType = z.enum([
+    'full_time',
+    'part_time',
+    'contract',
+    'intern',
+    'temporary',
+    'freelance',
+]);
+/**
+ * One row per period a person's job was a given shape. Never updated in place.
+ *
+ * Titles, managers, departments and hours all change, and a system that overwrites them cannot
+ * answer "who did she report to in March", which is the question a leave approval from March needs.
+ * A change closes the current row (`effectiveTo`) and opens a new one; `effectiveTo === null` is the
+ * present. The database refuses overlaps.
+ *
+ * **Office is deliberately not here.** People change desks and change jobs on different days, and
+ * folding the two together forces a fake promotion every time somebody relocates. See
+ * `OfficeAssignment`.
+ */
+export const Employment = z.object({
+    id: z.uuid(),
+    ...ws,
+    personId: z.uuid(),
+    effectiveFrom: IsoDate,
+    effectiveTo: IsoDate.nullable(),
+    orgUnitId: z.uuid().nullable(),
+    positionId: z.uuid().nullable(),
+    legalEntityId: z.uuid().nullable(),
+    costCenterId: z.uuid().nullable(),
+    managerPersonId: z.uuid().nullable(),
+    employmentType: EmploymentType,
+    /** 1.0 is full time; 0.5 is a half-time contract. Drives proration everywhere. */
+    fte: z.number().min(0).max(1),
+    contractHoursWeek: z.number().min(0).max(168).nullable(),
+    reason: z.string().max(200).nullable(),
+    createdAt: Timestamp,
+});
+// =====================================================================================
+// org structure
+// =====================================================================================
+export const OrgUnit = z.object({
+    id: z.uuid(),
+    ...ws,
+    parentId: z.uuid().nullable(),
+    /** Materialised ltree path, e.g. `root.engineering.platform`. Read-only: `org.units.move` sets it. */
+    path: z.string().max(512),
+    name: z.string().min(1).max(160),
+    code: z.string().max(32).nullable(),
+    headPersonId: z.uuid().nullable(),
+    archivedAt: Timestamp.nullable(),
+});
+export const Position = z.object({
+    id: z.uuid(),
+    ...ws,
+    title: z.string().min(1).max(160),
+    code: z.string().max(32).nullable(),
+    jobFamily: z.string().max(64).nullable(),
+    level: z.string().max(32).nullable(),
+    archivedAt: Timestamp.nullable(),
+});
+// =====================================================================================
+// offices — the unit of inheritance
+// =====================================================================================
+export const OfficeKind = z.enum([
+    'head_office',
+    'branch',
+    'site',
+    'warehouse',
+    'store',
+    /** Where remote people belong. Carries a country, a zone and a calendar like anywhere else. */
+    'remote',
+]);
+/**
+ * A place the company operates, and the thing a person inherits from.
+ *
+ * One workspace, many offices: a head office in Istanbul, a branch in Amsterdam, two sites in the
+ * same city, and the remote people. Each carries what differs by geography — country, timezone,
+ * working week, holidays — so "which days am I off" has a local answer without a workspace per
+ * country.
+ *
+ * A workspace always has exactly one office even when the `offices` capability is off; it is created
+ * from the workspace country and never shown. That is what lets the capability be a *reveal* rather
+ * than a migration, and it is why nothing in this module has a "no office" branch.
+ */
+export const Office = z.object({
+    id: z.uuid(),
+    ...ws,
+    name: z.string().min(1).max(160),
+    code: z.string().max(32).nullable(),
+    kind: OfficeKind,
+    /** A campus with buildings. This is geography, *not* the org chart — see `OrgUnit`. */
+    parentOfficeId: z.uuid().nullable(),
+    legalEntityId: z.uuid().nullable(),
+    country: CountryCode,
+    region: RegionCode.nullable(),
+    city: z.string().max(120).nullable(),
+    timezone: TimeZone,
+    calendarId: z.uuid().nullable(),
+    address: z
+        .object({
+        line1: z.string().max(200).optional(),
+        line2: z.string().max(200).optional(),
+        postalCode: z.string().max(32).optional(),
+    })
+        .nullable(),
+    /** Exactly one office per workspace carries this. Where a new person lands with no assignment. */
+    isDefault: z.boolean(),
+    headPersonId: z.uuid().nullable(),
+    archivedAt: Timestamp.nullable(),
+    createdAt: Timestamp,
+});
+/**
+ * Who works where, over time.
+ *
+ * A person may hold several of these at once — somebody splitting the week between two sites — but
+ * **exactly one is primary at any date, and only the primary decides.** Non-primary offices grant
+ * presence: the person appears in that office's directory, its local HR can see them, and later its
+ * geofence will accept their punch. They never decide which holidays apply, which policy applies, or
+ * which timezone the person's day is attributed in.
+ *
+ * Any other rule turns "how many days off do I have" into a question with two answers, which is not
+ * a thing an employee or an auditor will accept.
+ */
+export const OfficeAssignment = z.object({
+    id: z.uuid(),
+    ...ws,
+    personId: z.uuid(),
+    officeId: z.uuid(),
+    isPrimary: z.boolean(),
+    effectiveFrom: IsoDate,
+    effectiveTo: IsoDate.nullable(),
+    reason: z.string().max(200).nullable(),
+    createdAt: Timestamp,
+});
+/**
+ * Who actually employs somebody.
+ *
+ * Distinct from the office: two Turkish offices can share one entity, and one office can host two.
+ * It exists because payroll is filed per legal employer, never per workspace — so a group with a
+ * Dutch B.V. and a Turkish A.Ş. closes two different payrolls out of one Kern workspace.
+ */
+export const LegalEntity = z.object({
+    id: z.uuid(),
+    ...ws,
+    name: z.string().min(1).max(200),
+    registrationNo: z.string().max(64).nullable(),
+    taxNo: z.string().max(64).nullable(),
+    country: CountryCode,
+    /** ISO 4217. */
+    currency: z.string().length(3).nullable(),
+    archivedAt: Timestamp.nullable(),
+});
+export const CostCenter = z.object({
+    id: z.uuid(),
+    ...ws,
+    code: z.string().min(1).max(32),
+    name: z.string().min(1).max(160),
+    officeId: z.uuid().nullable(),
+    orgUnitId: z.uuid().nullable(),
+    legalEntityId: z.uuid().nullable(),
+    archivedAt: Timestamp.nullable(),
+});
+// =====================================================================================
+// custom fields and documents
+// =====================================================================================
+export const FieldType = z.enum(['text', 'number', 'date', 'select', 'multi_select', 'boolean', 'url']);
+export const CustomFieldDef = z.object({
+    id: z.uuid(),
+    ...ws,
+    key: z
+        .string()
+        .min(1)
+        .max(48)
+        .regex(/^[a-z][a-z0-9_]*$/),
+    name: z.string().min(1).max(120),
+    type: FieldType,
+    options: z.array(z.object({ value: z.string(), label: z.string() })).nullable(),
+    required: z.boolean(),
+    /** Needs `hr.person.view_sensitive`, like a national identity number. */
+    sensitive: z.boolean(),
+    section: z.enum(['profile', 'employment', 'other']),
+    order: z.number().int(),
+    archivedAt: Timestamp.nullable(),
+});
+export const PersonDocument = z.object({
+    id: z.uuid(),
+    ...ws,
+    personId: z.uuid(),
+    fileId: z.uuid(),
+    name: z.string().min(1).max(200),
+    kind: z.string().max(48),
+    issuedOn: IsoDate.nullable(),
+    expiresOn: IsoDate.nullable(),
+    uploadedBy: z.uuid().nullable(),
+    createdAt: Timestamp,
+});
+// =====================================================================================
+// calendars
+// =====================================================================================
+export const CalendarDayKind = z.enum([
+    'public_holiday',
+    'religious',
+    'company_closure',
+    'half_day',
+    /** The country has a holiday and this company works it. `workingFraction` is 1. */
+    'working_override',
+    /** The Friday between a Thursday holiday and the weekend. */
+    'bridge',
+]);
+/** Which weekdays are worked, and how much of each. Iran is `{fri: 0}` with a half Thursday. */
+export const WorkingWeek = z.object({
+    mon: z.number().min(0).max(1).default(1),
+    tue: z.number().min(0).max(1).default(1),
+    wed: z.number().min(0).max(1).default(1),
+    thu: z.number().min(0).max(1).default(1),
+    fri: z.number().min(0).max(1).default(1),
+    sat: z.number().min(0).max(1).default(0),
+    sun: z.number().min(0).max(1).default(0),
+});
+/**
+ * A set of non-working days, composed rather than copied.
+ *
+ * `extendsId` points at a country pack, and this calendar's own days sit on top: *"Amsterdam = the
+ * NL pack, plus our two company closures, minus the one we work through"*. Copying the pack into
+ * every office instead would mean a yearly pack refresh reconciling N copies against N sets of local
+ * edits, which is exactly the problem per-day `source` exists to avoid.
+ */
+export const Calendar = z.object({
+    id: z.uuid(),
+    ...ws,
+    name: z.string().min(1).max(160),
+    extendsId: z.uuid().nullable(),
+    country: CountryCode.nullable(),
+    region: RegionCode.nullable(),
+    workingWeek: WorkingWeek,
+    source: z.enum(['pack', 'custom']),
+    packKey: z.string().max(32).nullable(),
+    packVersion: z.string().max(32).nullable(),
+    archivedAt: Timestamp.nullable(),
+});
+export const CalendarDay = z.object({
+    id: z.uuid(),
+    ...ws,
+    calendarId: z.uuid(),
+    date: IsoDate,
+    kind: CalendarDayKind,
+    name: z.string().min(1).max(160),
+    /** 0 is a full day off, 0.5 a half day, 1 a day worked despite the pack saying otherwise. */
+    workingFraction: z.number().min(0).max(1),
+    /**
+     * Per **day**, not per calendar. A pack upgrade replaces `pack` rows and never touches `custom`
+     * ones — which is the entire reason HR can safely add their own holidays to a pack calendar.
+     */
+    source: z.enum(['pack', 'custom']),
+    paid: z.boolean(),
+    note: z.string().max(500).nullable(),
+});
+/** A day as the composed calendar sees it, with where it came from. */
+export const ResolvedCalendarDay = CalendarDay.extend({
+    /** The calendar in the `extends` chain that contributed this day. */
+    fromCalendarId: z.uuid(),
+    fromCalendarName: z.string(),
+    /** True when a nearer calendar overrode a day the base calendar had. */
+    overrides: z.boolean(),
+});
+// =====================================================================================
+// resolution — the ladder, made inspectable
+// =====================================================================================
+export const ResolutionRung = z.enum([
+    'person',
+    'office',
+    'legal_entity',
+    'org_unit',
+    'position',
+    'workspace',
+]);
+/**
+ * What actually applies to one person on one date, and which rung answered.
+ *
+ * The ladder is `person → primary office → org unit → workspace`, nearest wins, and it decides both
+ * the calendar and every policy. Exposing *which rung answered* is not a nicety: "why does Ayşe have
+ * different holidays from her team" is the support question this module will be asked most, and
+ * without this it is answered with a database session.
+ */
+export const PersonResolution = z.object({
+    personId: z.uuid(),
+    on: IsoDate,
+    primaryOfficeId: z.uuid().nullable(),
+    primaryOfficeName: z.string().nullable(),
+    otherOfficeIds: z.array(z.uuid()),
+    country: CountryCode.nullable(),
+    timezone: TimeZone,
+    timezoneFrom: ResolutionRung,
+    calendarId: z.uuid().nullable(),
+    calendarFrom: ResolutionRung.nullable(),
+    workingWeek: WorkingWeek,
+    legalEntityId: z.uuid().nullable(),
+    orgUnitId: z.uuid().nullable(),
+    orgUnitPath: z.string().nullable(),
+    managerPersonId: z.uuid().nullable(),
+});
+//# sourceMappingURL=models.js.map

package/dist/contract/models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.js","sourceRoot":"","sources":["../../src/contract/models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC1D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,sGAAsG;AACtG,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,CAAA;AAE7B,8DAA8D;AAC9D,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;AAGnC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;AAEjD,wDAAwD;AACxD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,CAAC;KACT,KAAK,CAAC,YAAY,CAAC,CAAA;AACtB,+FAA+F;AAC/F,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;AAElD,wFAAwF;AACxF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAA;AAEtE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,CAAA;AAEvC,wFAAwF;AACxF,SAAS;AACT,wFAAwF;AAExF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC,CAAA;AAGrG,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,GAAG,EAAE;IACL;;;;;;OAMG;IACH,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,SAAS,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACxC,aAAa,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC5C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC3B,YAAY,EAAE,OAAO,CAAC,QAAQ,EAAE;IAChC,sFAAsF;IACtF,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACzC,SAAS,EAAE,SAAS;IACpB,SAAS,EAAE,SAAS;CACrB,CAAC,CAAA;AAGF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE;IAClB,GAAG,EAAE;IACL,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzC,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnC,gBAAgB,EAAE,CAAC;SAChB,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;QACzB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;KAC1B,CAAC;SACD,QAAQ,EAAE;CACd,CAAC,CAAA;AAGF,wFAAwF;AACxF,+BAA+B;AAC/B,wFAAwF;AAExF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC;IACnC,WAAW;IACX,WAAW;IACX,UAAU;IACV,QAAQ;IACR,WAAW;IACX,WAAW;CACZ,CAAC,CAAA;AAGF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,GAAG,EAAE;IACL,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE;IAClB,aAAa,EAAE,OAAO;IACtB,WAAW,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC9B,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC/B,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAClC,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACjC,eAAe,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACpC,cAAc,EAAE,cAAc;IAC9B,kFAAkF;IAClF,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACxD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACtC,SAAS,EAAE,SAAS;CACrB,CAAC,CAAA;AAGF,wFAAwF;AACxF,gBAAgB;AAChB,wFAAwF;AAExF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,GAAG,EAAE;IACL,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC7B,sGAAsG;IACtG,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;IACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnC,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,SAAS,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,GAAG,EAAE;IACL,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpC,UAAU,EAAE,SAAS,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAA;AAGF,wFAAwF;AACxF,oCAAoC;AACpC,wFAAwF;AAExF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC;IAC/B,aAAa;IACb,QAAQ;IACR,MAAM;IACN,WAAW;IACX,OAAO;IACP,+FAA+F;IAC/F,QAAQ;CACT,CAAC,CAAA;AAGF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,GAAG,EAAE;IACL,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnC,IAAI,EAAE,UAAU;IAChB,uFAAuF;IACvF,cAAc,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACnC,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAClC,OAAO,EAAE,WAAW;IACpB,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACpC,QAAQ,EAAE,QAAQ;IAClB,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC/B,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC1C,CAAC;SACD,QAAQ,EAAE;IACb,kGAAkG;IAClG,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,SAAS,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,SAAS;CACrB,CAAC,CAAA;AAGF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,GAAG,EAAE;IACL,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE;IAClB,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,aAAa,EAAE,OAAO;IACtB,WAAW,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACtC,SAAS,EAAE,SAAS;CACrB,CAAC,CAAA;AAGF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,GAAG,EAAE;IACL,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpC,OAAO,EAAE,WAAW;IACpB,gBAAgB;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,UAAU,EAAE,SAAS,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,GAAG,EAAE;IACL,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC7B,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC9B,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAClC,UAAU,EAAE,SAAS,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAA;AAGF,wFAAwF;AACxF,8BAA8B;AAC9B,wFAAwF;AAExF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAA;AAEvG,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,GAAG,EAAE;IACL,GAAG,EAAE,CAAC;SACH,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,KAAK,CAAC,mBAAmB,CAAC;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/E,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,yEAAyE;IACzE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IACnD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACvB,UAAU,EAAE,SAAS,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,GAAG,EAAE;IACL,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE;IAClB,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC5B,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC7B,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,SAAS;CACrB,CAAC,CAAA;AAGF,wFAAwF;AACxF,YAAY;AACZ,wFAAwF;AAExF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC;IACpC,gBAAgB;IAChB,WAAW;IACX,iBAAiB;IACjB,UAAU;IACV,mFAAmF;IACnF,kBAAkB;IAClB,6DAA6D;IAC7D,QAAQ;CACT,CAAC,CAAA;AAGF,gGAAgG;AAChG,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACxC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACxC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACxC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACxC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACxC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACxC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;CACzC,CAAC,CAAA;AAGF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,GAAG,EAAE;IACL,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC9B,OAAO,EAAE,WAAW,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC7B,WAAW,EAAE,WAAW;IACxB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAClC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1C,UAAU,EAAE,SAAS,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,GAAG,EAAE;IACL,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE;IACpB,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,eAAe;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,6FAA6F;IAC7F,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC;;;OAGG;IACH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;IACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAA;AAGF,uEAAuE;AACvE,MAAM,CAAC,MAAM,mBAAmB,GAAG,WAAW,CAAC,MAAM,CAAC;IACpD,qEAAqE;IACrE,cAAc,EAAE,CAAC,CAAC,IAAI,EAAE;IACxB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC5B,wEAAwE;IACxE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;CACvB,CAAC,CAAA;AAGF,wFAAwF;AACxF,4CAA4C;AAC5C,wFAAwF;AAExF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC;IACnC,QAAQ;IACR,QAAQ;IACR,cAAc;IACd,UAAU;IACV,UAAU;IACV,WAAW;CACZ,CAAC,CAAA;AAGF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE;IAClB,EAAE,EAAE,OAAO;IACX,eAAe,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACpC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,OAAO,EAAE,WAAW,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,QAAQ;IAClB,YAAY,EAAE,cAAc;IAC5B,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC/B,YAAY,EAAE,cAAc,CAAC,QAAQ,EAAE;IACvC,WAAW,EAAE,WAAW;IACxB,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAClC,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC9B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,eAAe,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAA"}

package/dist/contract/permissions.d.ts

@@ -0,0 +1,174 @@
+/**
+ * Who may see and change what.
+ *
+ * HR holds the most sensitive data in the product, so the split is finer than other modules':
+ *
+ * - **Your own record is not a permission.** Everybody reads and edits their own profile; there is
+ *   no `hr.person.view_self` because a permission somebody can never lack is noise in the role
+ *   editor. The router enforces it by identity instead.
+ * - **Three widths of "other people".** `view_team` is the org-unit subtree you head plus your direct
+ *   reports; `view_office` is everybody assigned to an office you administer, which is what a local
+ *   HR person in Amsterdam holds; `view_all` is the workspace. None of them implies the others, so a
+ *   country HR manager does not silently become a global one.
+ * - **Sensitive fields are their own pair.** A directory is `hr.person.view`. A national identity
+ *   number, a birth date and a bank account are `hr.person.view_sensitive`, which nobody holds by
+ *   default — not even an owner's role, though an owner passes every check anyway.
+ *
+ * `scope: 'object'` on the team and office reads is deliberate: `PermissionScopeKind` has no
+ * `org_unit` or `office` member, and adding one is a change to `@kernhq/contracts` that would have
+ * to roll through the kernel and core. Binding at object scope with the unit or office id gets the
+ * same result today; `HrAccessService` is what resolves it.
+ */
+export declare const hrPermissions: readonly [{
+    readonly key: "hr.person.view";
+    readonly label: "View the staff directory";
+    readonly scope: "workspace";
+    readonly defaultRoles: ["owner", "admin", "member"];
+    readonly dangerous: false;
+}, {
+    readonly key: "hr.person.view_team";
+    readonly label: "View your team's records";
+    readonly scope: "object";
+    readonly defaultRoles: ["owner", "admin"];
+    readonly dangerous: false;
+}, {
+    readonly key: "hr.person.view_office";
+    readonly label: "View an office's records";
+    readonly scope: "object";
+    readonly defaultRoles: ["owner", "admin"];
+    readonly dangerous: false;
+}, {
+    readonly key: "hr.person.view_all";
+    readonly label: "View every record in the workspace";
+    readonly scope: "workspace";
+    readonly defaultRoles: ["owner", "admin"];
+    readonly dangerous: false;
+}, {
+    readonly key: "hr.person.manage";
+    readonly label: "Add, edit and offboard people";
+    readonly scope: "workspace";
+    readonly defaultRoles: ["owner", "admin"];
+    readonly dangerous: false;
+}, {
+    readonly key: "hr.person.view_sensitive";
+    readonly label: "View identity, birth date and bank details";
+    readonly description: "Personal data protected under GDPR and KVKK. Grant to HR only.";
+    readonly scope: "workspace";
+    readonly defaultRoles: [];
+    readonly dangerous: true;
+}, {
+    readonly key: "hr.person.manage_sensitive";
+    readonly label: "Edit identity, birth date and bank details";
+    readonly scope: "workspace";
+    readonly defaultRoles: [];
+    readonly dangerous: true;
+}, {
+    readonly key: "hr.employment.view";
+    readonly label: "View employment records and history";
+    readonly scope: "workspace";
+    readonly defaultRoles: ["owner", "admin"];
+    readonly dangerous: false;
+}, {
+    readonly key: "hr.employment.manage";
+    readonly label: "Change job, manager, department or hours";
+    readonly scope: "workspace";
+    readonly defaultRoles: ["owner", "admin"];
+    readonly dangerous: true;
+}, {
+    readonly key: "hr.org.view";
+    readonly label: "View the org chart, departments and positions";
+    readonly scope: "workspace";
+    readonly defaultRoles: ["owner", "admin", "member"];
+    readonly dangerous: false;
+}, {
+    readonly key: "hr.org.manage";
+    readonly label: "Change departments, positions and reporting lines";
+    readonly scope: "workspace";
+    readonly defaultRoles: ["owner", "admin"];
+    readonly dangerous: false;
+}, {
+    readonly key: "hr.office.view";
+    readonly label: "View offices";
+    readonly scope: "workspace";
+    readonly defaultRoles: ["owner", "admin", "member"];
+    readonly dangerous: false;
+}, {
+    readonly key: "hr.office.manage";
+    readonly label: "Add and edit offices";
+    readonly scope: "workspace";
+    readonly defaultRoles: ["owner", "admin"];
+    readonly dangerous: false;
+}, {
+    readonly key: "hr.office.assign";
+    readonly label: "Assign people to offices";
+    readonly scope: "object";
+    readonly defaultRoles: ["owner", "admin"];
+    readonly dangerous: false;
+}, {
+    readonly key: "hr.entity.view";
+    readonly label: "View legal entities and cost centres";
+    readonly scope: "workspace";
+    readonly defaultRoles: ["owner", "admin"];
+    readonly dangerous: false;
+}, {
+    readonly key: "hr.entity.manage";
+    readonly label: "Add and edit legal entities and cost centres";
+    readonly scope: "workspace";
+    readonly defaultRoles: ["owner"];
+    readonly dangerous: false;
+}, {
+    readonly key: "hr.calendar.view";
+    readonly label: "View holiday calendars";
+    readonly scope: "workspace";
+    readonly defaultRoles: ["owner", "admin", "member", "guest"];
+    readonly dangerous: false;
+}, {
+    readonly key: "hr.calendar.manage";
+    readonly label: "Add and edit holidays and closures";
+    readonly scope: "workspace";
+    readonly defaultRoles: ["owner", "admin"];
+    readonly dangerous: false;
+}, {
+    readonly key: "hr.document.view";
+    readonly label: "View employee documents";
+    readonly scope: "workspace";
+    readonly defaultRoles: [];
+    readonly dangerous: true;
+}, {
+    readonly key: "hr.document.manage";
+    readonly label: "Attach and remove employee documents";
+    readonly scope: "workspace";
+    readonly defaultRoles: [];
+    readonly dangerous: true;
+}, {
+    readonly key: "hr.field.manage";
+    readonly label: "Add and edit custom fields";
+    readonly scope: "workspace";
+    readonly defaultRoles: ["owner", "admin"];
+    readonly dangerous: false;
+}];
+/** The keys, so nothing gates on a string somebody retyped. */
+export declare const HR_PERMISSIONS: {
+    readonly personView: "hr.person.view";
+    readonly personViewTeam: "hr.person.view_team";
+    readonly personViewOffice: "hr.person.view_office";
+    readonly personViewAll: "hr.person.view_all";
+    readonly personManage: "hr.person.manage";
+    readonly personViewSensitive: "hr.person.view_sensitive";
+    readonly personManageSensitive: "hr.person.manage_sensitive";
+    readonly employmentView: "hr.employment.view";
+    readonly employmentManage: "hr.employment.manage";
+    readonly orgView: "hr.org.view";
+    readonly orgManage: "hr.org.manage";
+    readonly officeView: "hr.office.view";
+    readonly officeManage: "hr.office.manage";
+    readonly officeAssign: "hr.office.assign";
+    readonly entityView: "hr.entity.view";
+    readonly entityManage: "hr.entity.manage";
+    readonly calendarView: "hr.calendar.view";
+    readonly calendarManage: "hr.calendar.manage";
+    readonly documentView: "hr.document.view";
+    readonly documentManage: "hr.document.manage";
+    readonly fieldManage: "hr.field.manage";
+};
+//# sourceMappingURL=permissions.d.ts.map

package/dist/contract/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../src/contract/permissions.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwKxB,CAAA;AAEF,+DAA+D;AAC/D,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;CAsBjB,CAAA"}