@lssm/example.crm-pipeline 0.0.0-canary-20251220041653 → 0.0.0-canary-20251221132705

package/dist/libs/identity-rbac/dist/contracts/dist/workspace-config/contractsrc-schema.js

@@ -0,0 +1,118 @@
+import * as z$1 from "zod";
+
+//#region ../../libs/identity-rbac/dist/contracts/dist/workspace-config/contractsrc-schema.js
+/**
+* ContractSpec configuration schema definitions.
+*
+* These schemas define the structure of .contractsrc.json files
+* and are shared across CLI tools and libraries.
+*/
+/**
+* OpenAPI source configuration for import/sync/validate operations.
+*/
+const OpenApiSourceConfigSchema = z$1.object({
+	name: z$1.string(),
+	url: z$1.url().optional(),
+	file: z$1.string().optional(),
+	syncMode: z$1.enum([
+		"import",
+		"sync",
+		"validate"
+	]).default("validate"),
+	tags: z$1.array(z$1.string()).optional(),
+	exclude: z$1.array(z$1.string()).optional(),
+	include: z$1.array(z$1.string()).optional(),
+	prefix: z$1.string().optional(),
+	defaultStability: z$1.enum([
+		"experimental",
+		"beta",
+		"stable",
+		"deprecated"
+	]).optional(),
+	defaultAuth: z$1.enum([
+		"anonymous",
+		"user",
+		"admin"
+	]).optional(),
+	defaultOwners: z$1.array(z$1.string()).optional()
+});
+const OpenApiExportConfigSchema = z$1.object({
+	outputPath: z$1.string().default("./openapi.json"),
+	format: z$1.enum(["json", "yaml"]).default("json"),
+	title: z$1.string().optional(),
+	version: z$1.string().optional(),
+	description: z$1.string().optional(),
+	servers: z$1.array(z$1.object({
+		url: z$1.string(),
+		description: z$1.string().optional()
+	})).optional()
+});
+/**
+* OpenAPI configuration section.
+*/
+const OpenApiConfigSchema = z$1.object({
+	sources: z$1.array(OpenApiSourceConfigSchema).optional(),
+	export: OpenApiExportConfigSchema.optional()
+});
+/**
+* Grouping strategy for organizing specs.
+*/
+const GroupingStrategySchema = z$1.enum([
+	"by-tag",
+	"by-owner",
+	"by-domain",
+	"by-url-path-single",
+	"by-url-path-multi",
+	"by-feature",
+	"none"
+]);
+/**
+* Grouping rule configuration.
+*/
+const GroupingRuleSchema = z$1.object({
+	strategy: GroupingStrategySchema,
+	urlPathLevel: z$1.number().optional(),
+	pattern: z$1.string().optional()
+});
+/**
+* Output directory conventions for generated specs.
+*/
+const FolderConventionsSchema = z$1.object({
+	models: z$1.string().default("models"),
+	operations: z$1.string().default("operations/commands|queries"),
+	events: z$1.string().default("events"),
+	presentations: z$1.string().default("presentations"),
+	forms: z$1.string().default("forms"),
+	groupByFeature: z$1.boolean().default(true),
+	operationsGrouping: GroupingRuleSchema.optional(),
+	modelsGrouping: GroupingRuleSchema.optional(),
+	eventsGrouping: GroupingRuleSchema.optional()
+});
+z$1.object({
+	aiProvider: z$1.enum([
+		"claude",
+		"openai",
+		"ollama",
+		"custom"
+	]).default("claude"),
+	aiModel: z$1.string().optional(),
+	agentMode: z$1.enum([
+		"simple",
+		"cursor",
+		"claude-code",
+		"openai-codex"
+	]).default("simple"),
+	customEndpoint: z$1.url().nullable().optional(),
+	customApiKey: z$1.string().nullable().optional(),
+	outputDir: z$1.string().default("./src"),
+	conventions: FolderConventionsSchema,
+	defaultOwners: z$1.array(z$1.string()).default([]),
+	defaultTags: z$1.array(z$1.string()).default([]),
+	packages: z$1.array(z$1.string()).optional(),
+	excludePackages: z$1.array(z$1.string()).optional(),
+	recursive: z$1.boolean().optional(),
+	openapi: OpenApiConfigSchema.optional()
+});
+
+//#endregion
+//# sourceMappingURL=contractsrc-schema.js.map

package/dist/libs/identity-rbac/dist/contracts/dist/workspace-config/contractsrc-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contractsrc-schema.js","names":[],"sources":["../../../../../../../../../libs/identity-rbac/dist/contracts/dist/workspace-config/contractsrc-schema.js"],"sourcesContent":["import * as z$1 from \"zod\";\n\n//#region ../contracts/dist/workspace-config/contractsrc-schema.js\n/**\n* ContractSpec configuration schema definitions.\n*\n* These schemas define the structure of .contractsrc.json files\n* and are shared across CLI tools and libraries.\n*/\n/**\n* OpenAPI source configuration for import/sync/validate operations.\n*/\nconst OpenApiSourceConfigSchema = z$1.object({\n\tname: z$1.string(),\n\turl: z$1.url().optional(),\n\tfile: z$1.string().optional(),\n\tsyncMode: z$1.enum([\n\t\t\"import\",\n\t\t\"sync\",\n\t\t\"validate\"\n\t]).default(\"validate\"),\n\ttags: z$1.array(z$1.string()).optional(),\n\texclude: z$1.array(z$1.string()).optional(),\n\tinclude: z$1.array(z$1.string()).optional(),\n\tprefix: z$1.string().optional(),\n\tdefaultStability: z$1.enum([\n\t\t\"experimental\",\n\t\t\"beta\",\n\t\t\"stable\",\n\t\t\"deprecated\"\n\t]).optional(),\n\tdefaultAuth: z$1.enum([\n\t\t\"anonymous\",\n\t\t\"user\",\n\t\t\"admin\"\n\t]).optional(),\n\tdefaultOwners: z$1.array(z$1.string()).optional()\n});\nconst OpenApiExportConfigSchema = z$1.object({\n\toutputPath: z$1.string().default(\"./openapi.json\"),\n\tformat: z$1.enum([\"json\", \"yaml\"]).default(\"json\"),\n\ttitle: z$1.string().optional(),\n\tversion: z$1.string().optional(),\n\tdescription: z$1.string().optional(),\n\tservers: z$1.array(z$1.object({\n\t\turl: z$1.string(),\n\t\tdescription: z$1.string().optional()\n\t})).optional()\n});\n/**\n* OpenAPI configuration section.\n*/\nconst OpenApiConfigSchema = z$1.object({\n\tsources: z$1.array(OpenApiSourceConfigSchema).optional(),\n\texport: OpenApiExportConfigSchema.optional()\n});\n/**\n* Grouping strategy for organizing specs.\n*/\nconst GroupingStrategySchema = z$1.enum([\n\t\"by-tag\",\n\t\"by-owner\",\n\t\"by-domain\",\n\t\"by-url-path-single\",\n\t\"by-url-path-multi\",\n\t\"by-feature\",\n\t\"none\"\n]);\n/**\n* Grouping rule configuration.\n*/\nconst GroupingRuleSchema = z$1.object({\n\tstrategy: GroupingStrategySchema,\n\turlPathLevel: z$1.number().optional(),\n\tpattern: z$1.string().optional()\n});\n/**\n* Output directory conventions for generated specs.\n*/\nconst FolderConventionsSchema = z$1.object({\n\tmodels: z$1.string().default(\"models\"),\n\toperations: z$1.string().default(\"operations/commands|queries\"),\n\tevents: z$1.string().default(\"events\"),\n\tpresentations: z$1.string().default(\"presentations\"),\n\tforms: z$1.string().default(\"forms\"),\n\tgroupByFeature: z$1.boolean().default(true),\n\toperationsGrouping: GroupingRuleSchema.optional(),\n\tmodelsGrouping: GroupingRuleSchema.optional(),\n\teventsGrouping: GroupingRuleSchema.optional()\n});\n/**\n* Full ContractSpec configuration schema (.contractsrc.json).\n*/\nconst ContractsrcSchema = z$1.object({\n\taiProvider: z$1.enum([\n\t\t\"claude\",\n\t\t\"openai\",\n\t\t\"ollama\",\n\t\t\"custom\"\n\t]).default(\"claude\"),\n\taiModel: z$1.string().optional(),\n\tagentMode: z$1.enum([\n\t\t\"simple\",\n\t\t\"cursor\",\n\t\t\"claude-code\",\n\t\t\"openai-codex\"\n\t]).default(\"simple\"),\n\tcustomEndpoint: z$1.url().nullable().optional(),\n\tcustomApiKey: z$1.string().nullable().optional(),\n\toutputDir: z$1.string().default(\"./src\"),\n\tconventions: FolderConventionsSchema,\n\tdefaultOwners: z$1.array(z$1.string()).default([]),\n\tdefaultTags: z$1.array(z$1.string()).default([]),\n\tpackages: z$1.array(z$1.string()).optional(),\n\texcludePackages: z$1.array(z$1.string()).optional(),\n\trecursive: z$1.boolean().optional(),\n\topenapi: OpenApiConfigSchema.optional()\n});\n\n//#endregion\nexport { FolderConventionsSchema, OpenApiConfigSchema, OpenApiExportConfigSchema, OpenApiSourceConfigSchema };\n//# sourceMappingURL=contractsrc-schema.js.map"],"mappings":";;;;;;;;;;;;AAYA,MAAM,4BAA4B,IAAI,OAAO;CAC5C,MAAM,IAAI,QAAQ;CAClB,KAAK,IAAI,KAAK,CAAC,UAAU;CACzB,MAAM,IAAI,QAAQ,CAAC,UAAU;CAC7B,UAAU,IAAI,KAAK;EAClB;EACA;EACA;EACA,CAAC,CAAC,QAAQ,WAAW;CACtB,MAAM,IAAI,MAAM,IAAI,QAAQ,CAAC,CAAC,UAAU;CACxC,SAAS,IAAI,MAAM,IAAI,QAAQ,CAAC,CAAC,UAAU;CAC3C,SAAS,IAAI,MAAM,IAAI,QAAQ,CAAC,CAAC,UAAU;CAC3C,QAAQ,IAAI,QAAQ,CAAC,UAAU;CAC/B,kBAAkB,IAAI,KAAK;EAC1B;EACA;EACA;EACA;EACA,CAAC,CAAC,UAAU;CACb,aAAa,IAAI,KAAK;EACrB;EACA;EACA;EACA,CAAC,CAAC,UAAU;CACb,eAAe,IAAI,MAAM,IAAI,QAAQ,CAAC,CAAC,UAAU;CACjD,CAAC;AACF,MAAM,4BAA4B,IAAI,OAAO;CAC5C,YAAY,IAAI,QAAQ,CAAC,QAAQ,iBAAiB;CAClD,QAAQ,IAAI,KAAK,CAAC,QAAQ,OAAO,CAAC,CAAC,QAAQ,OAAO;CAClD,OAAO,IAAI,QAAQ,CAAC,UAAU;CAC9B,SAAS,IAAI,QAAQ,CAAC,UAAU;CAChC,aAAa,IAAI,QAAQ,CAAC,UAAU;CACpC,SAAS,IAAI,MAAM,IAAI,OAAO;EAC7B,KAAK,IAAI,QAAQ;EACjB,aAAa,IAAI,QAAQ,CAAC,UAAU;EACpC,CAAC,CAAC,CAAC,UAAU;CACd,CAAC;;;;AAIF,MAAM,sBAAsB,IAAI,OAAO;CACtC,SAAS,IAAI,MAAM,0BAA0B,CAAC,UAAU;CACxD,QAAQ,0BAA0B,UAAU;CAC5C,CAAC;;;;AAIF,MAAM,yBAAyB,IAAI,KAAK;CACvC;CACA;CACA;CACA;CACA;CACA;CACA;CACA,CAAC;;;;AAIF,MAAM,qBAAqB,IAAI,OAAO;CACrC,UAAU;CACV,cAAc,IAAI,QAAQ,CAAC,UAAU;CACrC,SAAS,IAAI,QAAQ,CAAC,UAAU;CAChC,CAAC;;;;AAIF,MAAM,0BAA0B,IAAI,OAAO;CAC1C,QAAQ,IAAI,QAAQ,CAAC,QAAQ,SAAS;CACtC,YAAY,IAAI,QAAQ,CAAC,QAAQ,8BAA8B;CAC/D,QAAQ,IAAI,QAAQ,CAAC,QAAQ,SAAS;CACtC,eAAe,IAAI,QAAQ,CAAC,QAAQ,gBAAgB;CACpD,OAAO,IAAI,QAAQ,CAAC,QAAQ,QAAQ;CACpC,gBAAgB,IAAI,SAAS,CAAC,QAAQ,KAAK;CAC3C,oBAAoB,mBAAmB,UAAU;CACjD,gBAAgB,mBAAmB,UAAU;CAC7C,gBAAgB,mBAAmB,UAAU;CAC7C,CAAC;AAIwB,IAAI,OAAO;CACpC,YAAY,IAAI,KAAK;EACpB;EACA;EACA;EACA;EACA,CAAC,CAAC,QAAQ,SAAS;CACpB,SAAS,IAAI,QAAQ,CAAC,UAAU;CAChC,WAAW,IAAI,KAAK;EACnB;EACA;EACA;EACA;EACA,CAAC,CAAC,QAAQ,SAAS;CACpB,gBAAgB,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU;CAC/C,cAAc,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU;CAChD,WAAW,IAAI,QAAQ,CAAC,QAAQ,QAAQ;CACxC,aAAa;CACb,eAAe,IAAI,MAAM,IAAI,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;CAClD,aAAa,IAAI,MAAM,IAAI,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;CAChD,UAAU,IAAI,MAAM,IAAI,QAAQ,CAAC,CAAC,UAAU;CAC5C,iBAAiB,IAAI,MAAM,IAAI,QAAQ,CAAC,CAAC,UAAU;CACnD,WAAW,IAAI,SAAS,CAAC,UAAU;CACnC,SAAS,oBAAoB,UAAU;CACvC,CAAC"}

package/dist/libs/identity-rbac/dist/contracts/dist/workspace-config/index.js

@@ -0,0 +1 @@
+import "./contractsrc-schema.js";

package/dist/libs/identity-rbac/dist/contracts/organization.js

@@ -1,5 +1,5 @@
 import { E5, x8 } from "../schema/dist/index.js";
-import { defineCommand, defineQuery } from "./dist/spec.js";
+import { defineCommand, defineQuery } from "./dist/operation.js";
 import "./dist/index.js";
 import { SuccessResultModel } from "./user.js";
 

package/dist/libs/identity-rbac/dist/contracts/organization.js.map

@@ -1 +1 @@
-{"version":3,"file":"organization.js","names":[],"sources":["../../../../../../../libs/identity-rbac/dist/contracts/organization.js"],"sourcesContent":["import { E5, x8 } from \"../schema/dist/index.js\";\nimport { defineCommand, defineQuery } from \"./dist/spec.js\";\nimport \"./dist/index.js\";\nimport { SuccessResultModel } from \"./user.js\";\n\n//#region src/contracts/organization.ts\nconst OWNERS = [\"platform.identity-rbac\"];\nconst OrganizationModel = new x8({\n\tname: \"Organization\",\n\tdescription: \"Organization details\",\n\tfields: {\n\t\tid: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tname: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tslug: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tlogo: {\n\t\t\ttype: E5.URL(),\n\t\t\tisOptional: true\n\t\t},\n\t\tdescription: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\ttype: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tonboardingCompleted: {\n\t\t\ttype: E5.Boolean(),\n\t\t\tisOptional: false\n\t\t},\n\t\tcreatedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst MemberUserModel = new x8({\n\tname: \"MemberUser\",\n\tdescription: \"Basic user info within a member\",\n\tfields: {\n\t\tid: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\temail: {\n\t\t\ttype: E5.EmailAddress(),\n\t\t\tisOptional: false\n\t\t},\n\t\tname: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst MemberModel = new x8({\n\tname: \"Member\",\n\tdescription: \"Organization member\",\n\tfields: {\n\t\tid: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tuserId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\torganizationId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\trole: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tcreatedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t},\n\t\tuser: {\n\t\t\ttype: MemberUserModel,\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst InvitationModel = new x8({\n\tname: \"Invitation\",\n\tdescription: \"Organization invitation\",\n\tfields: {\n\t\tid: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\temail: {\n\t\t\ttype: E5.EmailAddress(),\n\t\t\tisOptional: false\n\t\t},\n\t\trole: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tstatus: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\texpiresAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: true\n\t\t},\n\t\tcreatedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst CreateOrgInputModel = new x8({\n\tname: \"CreateOrgInput\",\n\tdescription: \"Input for creating an organization\",\n\tfields: {\n\t\tname: {\n\t\t\ttype: E5.NonEmptyString(),\n\t\t\tisOptional: false\n\t\t},\n\t\tslug: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tdescription: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\ttype: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst GetOrgInputModel = new x8({\n\tname: \"GetOrgInput\",\n\tdescription: \"Input for getting an organization\",\n\tfields: { orgId: {\n\t\ttype: E5.String_unsecure(),\n\t\tisOptional: false\n\t} }\n});\nconst UpdateOrgInputModel = new x8({\n\tname: \"UpdateOrgInput\",\n\tdescription: \"Input for updating an organization\",\n\tfields: {\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tname: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tslug: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tlogo: {\n\t\t\ttype: E5.URL(),\n\t\t\tisOptional: true\n\t\t},\n\t\tdescription: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst InviteMemberInputModel = new x8({\n\tname: \"InviteMemberInput\",\n\tdescription: \"Input for inviting a member\",\n\tfields: {\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\temail: {\n\t\t\ttype: E5.EmailAddress(),\n\t\t\tisOptional: false\n\t\t},\n\t\trole: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tteamId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst AcceptInviteInputModel = new x8({\n\tname: \"AcceptInviteInput\",\n\tdescription: \"Input for accepting an invitation\",\n\tfields: { invitationId: {\n\t\ttype: E5.String_unsecure(),\n\t\tisOptional: false\n\t} }\n});\nconst RemoveMemberInputModel = new x8({\n\tname: \"RemoveMemberInput\",\n\tdescription: \"Input for removing a member\",\n\tfields: {\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tuserId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst MemberRemovedPayloadModel = new x8({\n\tname: \"MemberRemovedPayload\",\n\tdescription: \"Payload for member removed event\",\n\tfields: {\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tuserId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst ListMembersInputModel = new x8({\n\tname: \"ListMembersInput\",\n\tdescription: \"Input for listing members\",\n\tfields: {\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tlimit: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\toffset: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst ListMembersOutputModel = new x8({\n\tname: \"ListMembersOutput\",\n\tdescription: \"Output for listing members\",\n\tfields: {\n\t\tmembers: {\n\t\t\ttype: MemberModel,\n\t\t\tisOptional: false,\n\t\t\tisArray: true\n\t\t},\n\t\ttotal: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst OrganizationWithRoleModel = new x8({\n\tname: \"OrganizationWithRole\",\n\tdescription: \"Organization with user role\",\n\tfields: {\n\t\tid: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tname: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tslug: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tlogo: {\n\t\t\ttype: E5.URL(),\n\t\t\tisOptional: true\n\t\t},\n\t\tdescription: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\ttype: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tonboardingCompleted: {\n\t\t\ttype: E5.Boolean(),\n\t\t\tisOptional: false\n\t\t},\n\t\tcreatedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t},\n\t\trole: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst ListUserOrgsOutputModel = new x8({\n\tname: \"ListUserOrgsOutput\",\n\tdescription: \"Output for listing user organizations\",\n\tfields: { organizations: {\n\t\ttype: OrganizationWithRoleModel,\n\t\tisOptional: false,\n\t\tisArray: true\n\t} }\n});\n/**\n* Create a new organization.\n*/\nconst CreateOrgContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.org.create\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"org\",\n\t\t\t\"create\"\n\t\t],\n\t\tdescription: \"Create a new organization.\",\n\t\tgoal: \"Allow users to create new organizations/workspaces.\",\n\t\tcontext: \"Called during onboarding or when creating additional workspaces.\"\n\t},\n\tio: {\n\t\tinput: CreateOrgInputModel,\n\t\toutput: OrganizationModel,\n\t\terrors: { SLUG_EXISTS: {\n\t\t\tdescription: \"An organization with this slug already exists\",\n\t\t\thttp: 409,\n\t\t\tgqlCode: \"SLUG_EXISTS\",\n\t\t\twhen: \"Slug is already taken\"\n\t\t} }\n\t},\n\tpolicy: { auth: \"user\" },\n\tsideEffects: {\n\t\temits: [{\n\t\t\tname: \"org.created\",\n\t\t\tversion: 1,\n\t\t\twhen: \"Organization is created\",\n\t\t\tpayload: OrganizationModel\n\t\t}],\n\t\taudit: [\"org.created\"]\n\t}\n});\n/**\n* Get organization details.\n*/\nconst GetOrgContract = defineQuery({\n\tmeta: {\n\t\tname: \"identity.org.get\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"org\",\n\t\t\t\"get\"\n\t\t],\n\t\tdescription: \"Get organization details.\",\n\t\tgoal: \"Retrieve organization information.\",\n\t\tcontext: \"Called when viewing organization settings or dashboard.\"\n\t},\n\tio: {\n\t\tinput: GetOrgInputModel,\n\t\toutput: OrganizationModel\n\t},\n\tpolicy: { auth: \"user\" }\n});\n/**\n* Update organization.\n*/\nconst UpdateOrgContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.org.update\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"org\",\n\t\t\t\"update\"\n\t\t],\n\t\tdescription: \"Update organization details.\",\n\t\tgoal: \"Allow org admins to update organization settings.\",\n\t\tcontext: \"Organization settings page.\"\n\t},\n\tio: {\n\t\tinput: UpdateOrgInputModel,\n\t\toutput: OrganizationModel\n\t},\n\tpolicy: { auth: \"user\" },\n\tsideEffects: {\n\t\temits: [{\n\t\t\tname: \"org.updated\",\n\t\t\tversion: 1,\n\t\t\twhen: \"Organization is updated\",\n\t\t\tpayload: OrganizationModel\n\t\t}],\n\t\taudit: [\"org.updated\"]\n\t}\n});\n/**\n* Invite a member to the organization.\n*/\nconst InviteMemberContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.org.invite\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"org\",\n\t\t\t\"invite\",\n\t\t\t\"member\"\n\t\t],\n\t\tdescription: \"Invite a user to join the organization.\",\n\t\tgoal: \"Allow org admins to invite new members.\",\n\t\tcontext: \"Team management. Sends invitation email.\"\n\t},\n\tio: {\n\t\tinput: InviteMemberInputModel,\n\t\toutput: InvitationModel,\n\t\terrors: {\n\t\t\tALREADY_MEMBER: {\n\t\t\t\tdescription: \"User is already a member of this organization\",\n\t\t\t\thttp: 409,\n\t\t\t\tgqlCode: \"ALREADY_MEMBER\",\n\t\t\t\twhen: \"Invitee is already a member\"\n\t\t\t},\n\t\t\tINVITE_PENDING: {\n\t\t\t\tdescription: \"An invitation for this email is already pending\",\n\t\t\t\thttp: 409,\n\t\t\t\tgqlCode: \"INVITE_PENDING\",\n\t\t\t\twhen: \"Active invitation exists\"\n\t\t\t}\n\t\t}\n\t},\n\tpolicy: { auth: \"user\" },\n\tsideEffects: {\n\t\temits: [{\n\t\t\tname: \"org.invite.sent\",\n\t\t\tversion: 1,\n\t\t\twhen: \"Invitation is sent\",\n\t\t\tpayload: InvitationModel\n\t\t}],\n\t\taudit: [\"org.invite.sent\"]\n\t}\n});\n/**\n* Accept an invitation.\n*/\nconst AcceptInviteContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.org.invite.accept\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"org\",\n\t\t\t\"invite\",\n\t\t\t\"accept\"\n\t\t],\n\t\tdescription: \"Accept an organization invitation.\",\n\t\tgoal: \"Allow users to join organizations via invitation.\",\n\t\tcontext: \"Called from invitation email link.\"\n\t},\n\tio: {\n\t\tinput: AcceptInviteInputModel,\n\t\toutput: MemberModel,\n\t\terrors: {\n\t\t\tINVITE_EXPIRED: {\n\t\t\t\tdescription: \"The invitation has expired\",\n\t\t\t\thttp: 410,\n\t\t\t\tgqlCode: \"INVITE_EXPIRED\",\n\t\t\t\twhen: \"Invitation is past expiry date\"\n\t\t\t},\n\t\t\tINVITE_USED: {\n\t\t\t\tdescription: \"The invitation has already been used\",\n\t\t\t\thttp: 409,\n\t\t\t\tgqlCode: \"INVITE_USED\",\n\t\t\t\twhen: \"Invitation was already accepted\"\n\t\t\t}\n\t\t}\n\t},\n\tpolicy: { auth: \"user\" },\n\tsideEffects: {\n\t\temits: [{\n\t\t\tname: \"org.member.added\",\n\t\t\tversion: 1,\n\t\t\twhen: \"Member joins org\",\n\t\t\tpayload: MemberModel\n\t\t}],\n\t\taudit: [\"org.member.added\"]\n\t}\n});\n/**\n* Remove a member from the organization.\n*/\nconst RemoveMemberContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.org.member.remove\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"org\",\n\t\t\t\"member\",\n\t\t\t\"remove\"\n\t\t],\n\t\tdescription: \"Remove a member from the organization.\",\n\t\tgoal: \"Allow org admins to remove members.\",\n\t\tcontext: \"Team management.\"\n\t},\n\tio: {\n\t\tinput: RemoveMemberInputModel,\n\t\toutput: SuccessResultModel,\n\t\terrors: { CANNOT_REMOVE_OWNER: {\n\t\t\tdescription: \"Cannot remove the organization owner\",\n\t\t\thttp: 403,\n\t\t\tgqlCode: \"CANNOT_REMOVE_OWNER\",\n\t\t\twhen: \"Target is the org owner\"\n\t\t} }\n\t},\n\tpolicy: { auth: \"user\" },\n\tsideEffects: {\n\t\temits: [{\n\t\t\tname: \"org.member.removed\",\n\t\t\tversion: 1,\n\t\t\twhen: \"Member is removed\",\n\t\t\tpayload: MemberRemovedPayloadModel\n\t\t}],\n\t\taudit: [\"org.member.removed\"]\n\t}\n});\n/**\n* List organization members.\n*/\nconst ListMembersContract = defineQuery({\n\tmeta: {\n\t\tname: \"identity.org.members.list\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"org\",\n\t\t\t\"member\",\n\t\t\t\"list\"\n\t\t],\n\t\tdescription: \"List organization members.\",\n\t\tgoal: \"View all members of an organization.\",\n\t\tcontext: \"Team management page.\"\n\t},\n\tio: {\n\t\tinput: ListMembersInputModel,\n\t\toutput: ListMembersOutputModel\n\t},\n\tpolicy: { auth: \"user\" }\n});\n/**\n* List user's organizations.\n*/\nconst ListUserOrgsContract = defineQuery({\n\tmeta: {\n\t\tname: \"identity.org.list\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"org\",\n\t\t\t\"list\"\n\t\t],\n\t\tdescription: \"List organizations the current user belongs to.\",\n\t\tgoal: \"Show user their organizations for workspace switching.\",\n\t\tcontext: \"Workspace switcher, org selection.\"\n\t},\n\tio: {\n\t\tinput: null,\n\t\toutput: ListUserOrgsOutputModel\n\t},\n\tpolicy: { auth: \"user\" }\n});\n\n//#endregion\nexport { AcceptInviteContract, AcceptInviteInputModel, CreateOrgContract, CreateOrgInputModel, GetOrgContract, GetOrgInputModel, InvitationModel, InviteMemberContract, InviteMemberInputModel, ListMembersContract, ListMembersInputModel, ListMembersOutputModel, ListUserOrgsContract, ListUserOrgsOutputModel, MemberModel, MemberRemovedPayloadModel, MemberUserModel, OrganizationModel, OrganizationWithRoleModel, RemoveMemberContract, RemoveMemberInputModel, UpdateOrgContract, UpdateOrgInputModel };\n//# sourceMappingURL=organization.js.map"],"mappings":";;;;;;AAMA,MAAM,SAAS,CAAC,yBAAyB;AACzC,MAAM,oBAAoB,IAAI,GAAG;CAChC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,IAAI;GACH,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,KAAK;GACd,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,qBAAqB;GACpB,MAAM,GAAG,SAAS;GAClB,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,kBAAkB,IAAI,GAAG;CAC9B,MAAM;CACN,aAAa;CACb,QAAQ;EACP,IAAI;GACH,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,cAAc,IAAI,GAAG;CAC1B,MAAM;CACN,aAAa;CACb,QAAQ;EACP,IAAI;GACH,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,gBAAgB;GACf,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD,MAAM;GACL,MAAM;GACN,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,kBAAkB,IAAI,GAAG;CAC9B,MAAM;CACN,aAAa;CACb,QAAQ;EACP,IAAI;GACH,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,sBAAsB,IAAI,GAAG;CAClC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,MAAM;GACL,MAAM,GAAG,gBAAgB;GACzB,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,mBAAmB,IAAI,GAAG;CAC/B,MAAM;CACN,aAAa;CACb,QAAQ,EAAE,OAAO;EAChB,MAAM,GAAG,iBAAiB;EAC1B,YAAY;EACZ,EAAE;CACH,CAAC;AACF,MAAM,sBAAsB,IAAI,GAAG;CAClC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,KAAK;GACd,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,yBAAyB,IAAI,GAAG;CACrC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,yBAAyB,IAAI,GAAG;CACrC,MAAM;CACN,aAAa;CACb,QAAQ,EAAE,cAAc;EACvB,MAAM,GAAG,iBAAiB;EAC1B,YAAY;EACZ,EAAE;CACH,CAAC;AACF,MAAM,yBAAyB,IAAI,GAAG;CACrC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,4BAA4B,IAAI,GAAG;CACxC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,wBAAwB,IAAI,GAAG;CACpC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,yBAAyB,IAAI,GAAG;CACrC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,SAAS;GACR,MAAM;GACN,YAAY;GACZ,SAAS;GACT;EACD,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,4BAA4B,IAAI,GAAG;CACxC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,IAAI;GACH,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,KAAK;GACd,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,qBAAqB;GACpB,MAAM,GAAG,SAAS;GAClB,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,0BAA0B,IAAI,GAAG;CACtC,MAAM;CACN,aAAa;CACb,QAAQ,EAAE,eAAe;EACxB,MAAM;EACN,YAAY;EACZ,SAAS;EACT,EAAE;CACH,CAAC;;;;AAIF,MAAM,oBAAoB,cAAc;CACvC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR,QAAQ,EAAE,aAAa;GACtB,aAAa;GACb,MAAM;GACN,SAAS;GACT,MAAM;GACN,EAAE;EACH;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,aAAa;EACZ,OAAO,CAAC;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,SAAS;GACT,CAAC;EACF,OAAO,CAAC,cAAc;EACtB;CACD,CAAC;;;;AAIF,MAAM,iBAAiB,YAAY;CAClC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,CAAC;;;;AAIF,MAAM,oBAAoB,cAAc;CACvC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,aAAa;EACZ,OAAO,CAAC;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,SAAS;GACT,CAAC;EACF,OAAO,CAAC,cAAc;EACtB;CACD,CAAC;;;;AAIF,MAAM,uBAAuB,cAAc;CAC1C,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR,QAAQ;GACP,gBAAgB;IACf,aAAa;IACb,MAAM;IACN,SAAS;IACT,MAAM;IACN;GACD,gBAAgB;IACf,aAAa;IACb,MAAM;IACN,SAAS;IACT,MAAM;IACN;GACD;EACD;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,aAAa;EACZ,OAAO,CAAC;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,SAAS;GACT,CAAC;EACF,OAAO,CAAC,kBAAkB;EAC1B;CACD,CAAC;;;;AAIF,MAAM,uBAAuB,cAAc;CAC1C,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR,QAAQ;GACP,gBAAgB;IACf,aAAa;IACb,MAAM;IACN,SAAS;IACT,MAAM;IACN;GACD,aAAa;IACZ,aAAa;IACb,MAAM;IACN,SAAS;IACT,MAAM;IACN;GACD;EACD;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,aAAa;EACZ,OAAO,CAAC;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,SAAS;GACT,CAAC;EACF,OAAO,CAAC,mBAAmB;EAC3B;CACD,CAAC;;;;AAIF,MAAM,uBAAuB,cAAc;CAC1C,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR,QAAQ,EAAE,qBAAqB;GAC9B,aAAa;GACb,MAAM;GACN,SAAS;GACT,MAAM;GACN,EAAE;EACH;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,aAAa;EACZ,OAAO,CAAC;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,SAAS;GACT,CAAC;EACF,OAAO,CAAC,qBAAqB;EAC7B;CACD,CAAC;;;;AAIF,MAAM,sBAAsB,YAAY;CACvC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,CAAC;;;;AAIF,MAAM,uBAAuB,YAAY;CACxC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,CAAC"}
+{"version":3,"file":"organization.js","names":[],"sources":["../../../../../../../libs/identity-rbac/dist/contracts/organization.js"],"sourcesContent":["import { E5, x8 } from \"../schema/dist/index.js\";\nimport { defineCommand, defineQuery } from \"./dist/operation.js\";\nimport \"./dist/index.js\";\nimport { SuccessResultModel } from \"./user.js\";\n\n//#region src/contracts/organization.ts\nconst OWNERS = [\"platform.identity-rbac\"];\nconst OrganizationModel = new x8({\n\tname: \"Organization\",\n\tdescription: \"Organization details\",\n\tfields: {\n\t\tid: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tname: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tslug: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tlogo: {\n\t\t\ttype: E5.URL(),\n\t\t\tisOptional: true\n\t\t},\n\t\tdescription: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\ttype: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tonboardingCompleted: {\n\t\t\ttype: E5.Boolean(),\n\t\t\tisOptional: false\n\t\t},\n\t\tcreatedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst MemberUserModel = new x8({\n\tname: \"MemberUser\",\n\tdescription: \"Basic user info within a member\",\n\tfields: {\n\t\tid: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\temail: {\n\t\t\ttype: E5.EmailAddress(),\n\t\t\tisOptional: false\n\t\t},\n\t\tname: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst MemberModel = new x8({\n\tname: \"Member\",\n\tdescription: \"Organization member\",\n\tfields: {\n\t\tid: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tuserId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\torganizationId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\trole: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tcreatedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t},\n\t\tuser: {\n\t\t\ttype: MemberUserModel,\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst InvitationModel = new x8({\n\tname: \"Invitation\",\n\tdescription: \"Organization invitation\",\n\tfields: {\n\t\tid: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\temail: {\n\t\t\ttype: E5.EmailAddress(),\n\t\t\tisOptional: false\n\t\t},\n\t\trole: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tstatus: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\texpiresAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: true\n\t\t},\n\t\tcreatedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst CreateOrgInputModel = new x8({\n\tname: \"CreateOrgInput\",\n\tdescription: \"Input for creating an organization\",\n\tfields: {\n\t\tname: {\n\t\t\ttype: E5.NonEmptyString(),\n\t\t\tisOptional: false\n\t\t},\n\t\tslug: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tdescription: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\ttype: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst GetOrgInputModel = new x8({\n\tname: \"GetOrgInput\",\n\tdescription: \"Input for getting an organization\",\n\tfields: { orgId: {\n\t\ttype: E5.String_unsecure(),\n\t\tisOptional: false\n\t} }\n});\nconst UpdateOrgInputModel = new x8({\n\tname: \"UpdateOrgInput\",\n\tdescription: \"Input for updating an organization\",\n\tfields: {\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tname: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tslug: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tlogo: {\n\t\t\ttype: E5.URL(),\n\t\t\tisOptional: true\n\t\t},\n\t\tdescription: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst InviteMemberInputModel = new x8({\n\tname: \"InviteMemberInput\",\n\tdescription: \"Input for inviting a member\",\n\tfields: {\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\temail: {\n\t\t\ttype: E5.EmailAddress(),\n\t\t\tisOptional: false\n\t\t},\n\t\trole: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tteamId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst AcceptInviteInputModel = new x8({\n\tname: \"AcceptInviteInput\",\n\tdescription: \"Input for accepting an invitation\",\n\tfields: { invitationId: {\n\t\ttype: E5.String_unsecure(),\n\t\tisOptional: false\n\t} }\n});\nconst RemoveMemberInputModel = new x8({\n\tname: \"RemoveMemberInput\",\n\tdescription: \"Input for removing a member\",\n\tfields: {\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tuserId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst MemberRemovedPayloadModel = new x8({\n\tname: \"MemberRemovedPayload\",\n\tdescription: \"Payload for member removed event\",\n\tfields: {\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tuserId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst ListMembersInputModel = new x8({\n\tname: \"ListMembersInput\",\n\tdescription: \"Input for listing members\",\n\tfields: {\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tlimit: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\toffset: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst ListMembersOutputModel = new x8({\n\tname: \"ListMembersOutput\",\n\tdescription: \"Output for listing members\",\n\tfields: {\n\t\tmembers: {\n\t\t\ttype: MemberModel,\n\t\t\tisOptional: false,\n\t\t\tisArray: true\n\t\t},\n\t\ttotal: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst OrganizationWithRoleModel = new x8({\n\tname: \"OrganizationWithRole\",\n\tdescription: \"Organization with user role\",\n\tfields: {\n\t\tid: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tname: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tslug: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tlogo: {\n\t\t\ttype: E5.URL(),\n\t\t\tisOptional: true\n\t\t},\n\t\tdescription: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\ttype: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tonboardingCompleted: {\n\t\t\ttype: E5.Boolean(),\n\t\t\tisOptional: false\n\t\t},\n\t\tcreatedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t},\n\t\trole: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst ListUserOrgsOutputModel = new x8({\n\tname: \"ListUserOrgsOutput\",\n\tdescription: \"Output for listing user organizations\",\n\tfields: { organizations: {\n\t\ttype: OrganizationWithRoleModel,\n\t\tisOptional: false,\n\t\tisArray: true\n\t} }\n});\n/**\n* Create a new organization.\n*/\nconst CreateOrgContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.org.create\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"org\",\n\t\t\t\"create\"\n\t\t],\n\t\tdescription: \"Create a new organization.\",\n\t\tgoal: \"Allow users to create new organizations/workspaces.\",\n\t\tcontext: \"Called during onboarding or when creating additional workspaces.\"\n\t},\n\tio: {\n\t\tinput: CreateOrgInputModel,\n\t\toutput: OrganizationModel,\n\t\terrors: { SLUG_EXISTS: {\n\t\t\tdescription: \"An organization with this slug already exists\",\n\t\t\thttp: 409,\n\t\t\tgqlCode: \"SLUG_EXISTS\",\n\t\t\twhen: \"Slug is already taken\"\n\t\t} }\n\t},\n\tpolicy: { auth: \"user\" },\n\tsideEffects: {\n\t\temits: [{\n\t\t\tname: \"org.created\",\n\t\t\tversion: 1,\n\t\t\twhen: \"Organization is created\",\n\t\t\tpayload: OrganizationModel\n\t\t}],\n\t\taudit: [\"org.created\"]\n\t}\n});\n/**\n* Get organization details.\n*/\nconst GetOrgContract = defineQuery({\n\tmeta: {\n\t\tname: \"identity.org.get\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"org\",\n\t\t\t\"get\"\n\t\t],\n\t\tdescription: \"Get organization details.\",\n\t\tgoal: \"Retrieve organization information.\",\n\t\tcontext: \"Called when viewing organization settings or dashboard.\"\n\t},\n\tio: {\n\t\tinput: GetOrgInputModel,\n\t\toutput: OrganizationModel\n\t},\n\tpolicy: { auth: \"user\" }\n});\n/**\n* Update organization.\n*/\nconst UpdateOrgContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.org.update\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"org\",\n\t\t\t\"update\"\n\t\t],\n\t\tdescription: \"Update organization details.\",\n\t\tgoal: \"Allow org admins to update organization settings.\",\n\t\tcontext: \"Organization settings page.\"\n\t},\n\tio: {\n\t\tinput: UpdateOrgInputModel,\n\t\toutput: OrganizationModel\n\t},\n\tpolicy: { auth: \"user\" },\n\tsideEffects: {\n\t\temits: [{\n\t\t\tname: \"org.updated\",\n\t\t\tversion: 1,\n\t\t\twhen: \"Organization is updated\",\n\t\t\tpayload: OrganizationModel\n\t\t}],\n\t\taudit: [\"org.updated\"]\n\t}\n});\n/**\n* Invite a member to the organization.\n*/\nconst InviteMemberContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.org.invite\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"org\",\n\t\t\t\"invite\",\n\t\t\t\"member\"\n\t\t],\n\t\tdescription: \"Invite a user to join the organization.\",\n\t\tgoal: \"Allow org admins to invite new members.\",\n\t\tcontext: \"Team management. Sends invitation email.\"\n\t},\n\tio: {\n\t\tinput: InviteMemberInputModel,\n\t\toutput: InvitationModel,\n\t\terrors: {\n\t\t\tALREADY_MEMBER: {\n\t\t\t\tdescription: \"User is already a member of this organization\",\n\t\t\t\thttp: 409,\n\t\t\t\tgqlCode: \"ALREADY_MEMBER\",\n\t\t\t\twhen: \"Invitee is already a member\"\n\t\t\t},\n\t\t\tINVITE_PENDING: {\n\t\t\t\tdescription: \"An invitation for this email is already pending\",\n\t\t\t\thttp: 409,\n\t\t\t\tgqlCode: \"INVITE_PENDING\",\n\t\t\t\twhen: \"Active invitation exists\"\n\t\t\t}\n\t\t}\n\t},\n\tpolicy: { auth: \"user\" },\n\tsideEffects: {\n\t\temits: [{\n\t\t\tname: \"org.invite.sent\",\n\t\t\tversion: 1,\n\t\t\twhen: \"Invitation is sent\",\n\t\t\tpayload: InvitationModel\n\t\t}],\n\t\taudit: [\"org.invite.sent\"]\n\t}\n});\n/**\n* Accept an invitation.\n*/\nconst AcceptInviteContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.org.invite.accept\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"org\",\n\t\t\t\"invite\",\n\t\t\t\"accept\"\n\t\t],\n\t\tdescription: \"Accept an organization invitation.\",\n\t\tgoal: \"Allow users to join organizations via invitation.\",\n\t\tcontext: \"Called from invitation email link.\"\n\t},\n\tio: {\n\t\tinput: AcceptInviteInputModel,\n\t\toutput: MemberModel,\n\t\terrors: {\n\t\t\tINVITE_EXPIRED: {\n\t\t\t\tdescription: \"The invitation has expired\",\n\t\t\t\thttp: 410,\n\t\t\t\tgqlCode: \"INVITE_EXPIRED\",\n\t\t\t\twhen: \"Invitation is past expiry date\"\n\t\t\t},\n\t\t\tINVITE_USED: {\n\t\t\t\tdescription: \"The invitation has already been used\",\n\t\t\t\thttp: 409,\n\t\t\t\tgqlCode: \"INVITE_USED\",\n\t\t\t\twhen: \"Invitation was already accepted\"\n\t\t\t}\n\t\t}\n\t},\n\tpolicy: { auth: \"user\" },\n\tsideEffects: {\n\t\temits: [{\n\t\t\tname: \"org.member.added\",\n\t\t\tversion: 1,\n\t\t\twhen: \"Member joins org\",\n\t\t\tpayload: MemberModel\n\t\t}],\n\t\taudit: [\"org.member.added\"]\n\t}\n});\n/**\n* Remove a member from the organization.\n*/\nconst RemoveMemberContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.org.member.remove\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"org\",\n\t\t\t\"member\",\n\t\t\t\"remove\"\n\t\t],\n\t\tdescription: \"Remove a member from the organization.\",\n\t\tgoal: \"Allow org admins to remove members.\",\n\t\tcontext: \"Team management.\"\n\t},\n\tio: {\n\t\tinput: RemoveMemberInputModel,\n\t\toutput: SuccessResultModel,\n\t\terrors: { CANNOT_REMOVE_OWNER: {\n\t\t\tdescription: \"Cannot remove the organization owner\",\n\t\t\thttp: 403,\n\t\t\tgqlCode: \"CANNOT_REMOVE_OWNER\",\n\t\t\twhen: \"Target is the org owner\"\n\t\t} }\n\t},\n\tpolicy: { auth: \"user\" },\n\tsideEffects: {\n\t\temits: [{\n\t\t\tname: \"org.member.removed\",\n\t\t\tversion: 1,\n\t\t\twhen: \"Member is removed\",\n\t\t\tpayload: MemberRemovedPayloadModel\n\t\t}],\n\t\taudit: [\"org.member.removed\"]\n\t}\n});\n/**\n* List organization members.\n*/\nconst ListMembersContract = defineQuery({\n\tmeta: {\n\t\tname: \"identity.org.members.list\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"org\",\n\t\t\t\"member\",\n\t\t\t\"list\"\n\t\t],\n\t\tdescription: \"List organization members.\",\n\t\tgoal: \"View all members of an organization.\",\n\t\tcontext: \"Team management page.\"\n\t},\n\tio: {\n\t\tinput: ListMembersInputModel,\n\t\toutput: ListMembersOutputModel\n\t},\n\tpolicy: { auth: \"user\" }\n});\n/**\n* List user's organizations.\n*/\nconst ListUserOrgsContract = defineQuery({\n\tmeta: {\n\t\tname: \"identity.org.list\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"org\",\n\t\t\t\"list\"\n\t\t],\n\t\tdescription: \"List organizations the current user belongs to.\",\n\t\tgoal: \"Show user their organizations for workspace switching.\",\n\t\tcontext: \"Workspace switcher, org selection.\"\n\t},\n\tio: {\n\t\tinput: null,\n\t\toutput: ListUserOrgsOutputModel\n\t},\n\tpolicy: { auth: \"user\" }\n});\n\n//#endregion\nexport { AcceptInviteContract, AcceptInviteInputModel, CreateOrgContract, CreateOrgInputModel, GetOrgContract, GetOrgInputModel, InvitationModel, InviteMemberContract, InviteMemberInputModel, ListMembersContract, ListMembersInputModel, ListMembersOutputModel, ListUserOrgsContract, ListUserOrgsOutputModel, MemberModel, MemberRemovedPayloadModel, MemberUserModel, OrganizationModel, OrganizationWithRoleModel, RemoveMemberContract, RemoveMemberInputModel, UpdateOrgContract, UpdateOrgInputModel };\n//# sourceMappingURL=organization.js.map"],"mappings":";;;;;;AAMA,MAAM,SAAS,CAAC,yBAAyB;AACzC,MAAM,oBAAoB,IAAI,GAAG;CAChC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,IAAI;GACH,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,KAAK;GACd,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,qBAAqB;GACpB,MAAM,GAAG,SAAS;GAClB,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,kBAAkB,IAAI,GAAG;CAC9B,MAAM;CACN,aAAa;CACb,QAAQ;EACP,IAAI;GACH,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,cAAc,IAAI,GAAG;CAC1B,MAAM;CACN,aAAa;CACb,QAAQ;EACP,IAAI;GACH,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,gBAAgB;GACf,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD,MAAM;GACL,MAAM;GACN,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,kBAAkB,IAAI,GAAG;CAC9B,MAAM;CACN,aAAa;CACb,QAAQ;EACP,IAAI;GACH,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,sBAAsB,IAAI,GAAG;CAClC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,MAAM;GACL,MAAM,GAAG,gBAAgB;GACzB,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,mBAAmB,IAAI,GAAG;CAC/B,MAAM;CACN,aAAa;CACb,QAAQ,EAAE,OAAO;EAChB,MAAM,GAAG,iBAAiB;EAC1B,YAAY;EACZ,EAAE;CACH,CAAC;AACF,MAAM,sBAAsB,IAAI,GAAG;CAClC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,KAAK;GACd,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,yBAAyB,IAAI,GAAG;CACrC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,yBAAyB,IAAI,GAAG;CACrC,MAAM;CACN,aAAa;CACb,QAAQ,EAAE,cAAc;EACvB,MAAM,GAAG,iBAAiB;EAC1B,YAAY;EACZ,EAAE;CACH,CAAC;AACF,MAAM,yBAAyB,IAAI,GAAG;CACrC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,4BAA4B,IAAI,GAAG;CACxC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,wBAAwB,IAAI,GAAG;CACpC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,yBAAyB,IAAI,GAAG;CACrC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,SAAS;GACR,MAAM;GACN,YAAY;GACZ,SAAS;GACT;EACD,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,4BAA4B,IAAI,GAAG;CACxC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,IAAI;GACH,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,KAAK;GACd,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,qBAAqB;GACpB,MAAM,GAAG,SAAS;GAClB,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,0BAA0B,IAAI,GAAG;CACtC,MAAM;CACN,aAAa;CACb,QAAQ,EAAE,eAAe;EACxB,MAAM;EACN,YAAY;EACZ,SAAS;EACT,EAAE;CACH,CAAC;;;;AAIF,MAAM,oBAAoB,cAAc;CACvC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR,QAAQ,EAAE,aAAa;GACtB,aAAa;GACb,MAAM;GACN,SAAS;GACT,MAAM;GACN,EAAE;EACH;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,aAAa;EACZ,OAAO,CAAC;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,SAAS;GACT,CAAC;EACF,OAAO,CAAC,cAAc;EACtB;CACD,CAAC;;;;AAIF,MAAM,iBAAiB,YAAY;CAClC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,CAAC;;;;AAIF,MAAM,oBAAoB,cAAc;CACvC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,aAAa;EACZ,OAAO,CAAC;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,SAAS;GACT,CAAC;EACF,OAAO,CAAC,cAAc;EACtB;CACD,CAAC;;;;AAIF,MAAM,uBAAuB,cAAc;CAC1C,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR,QAAQ;GACP,gBAAgB;IACf,aAAa;IACb,MAAM;IACN,SAAS;IACT,MAAM;IACN;GACD,gBAAgB;IACf,aAAa;IACb,MAAM;IACN,SAAS;IACT,MAAM;IACN;GACD;EACD;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,aAAa;EACZ,OAAO,CAAC;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,SAAS;GACT,CAAC;EACF,OAAO,CAAC,kBAAkB;EAC1B;CACD,CAAC;;;;AAIF,MAAM,uBAAuB,cAAc;CAC1C,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR,QAAQ;GACP,gBAAgB;IACf,aAAa;IACb,MAAM;IACN,SAAS;IACT,MAAM;IACN;GACD,aAAa;IACZ,aAAa;IACb,MAAM;IACN,SAAS;IACT,MAAM;IACN;GACD;EACD;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,aAAa;EACZ,OAAO,CAAC;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,SAAS;GACT,CAAC;EACF,OAAO,CAAC,mBAAmB;EAC3B;CACD,CAAC;;;;AAIF,MAAM,uBAAuB,cAAc;CAC1C,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR,QAAQ,EAAE,qBAAqB;GAC9B,aAAa;GACb,MAAM;GACN,SAAS;GACT,MAAM;GACN,EAAE;EACH;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,aAAa;EACZ,OAAO,CAAC;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,SAAS;GACT,CAAC;EACF,OAAO,CAAC,qBAAqB;EAC7B;CACD,CAAC;;;;AAIF,MAAM,sBAAsB,YAAY;CACvC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,CAAC;;;;AAIF,MAAM,uBAAuB,YAAY;CACxC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,CAAC"}

package/dist/libs/identity-rbac/dist/contracts/rbac.js

@@ -1,5 +1,5 @@
 import { E5, x8 } from "../schema/dist/index.js";
-import { defineCommand, defineQuery } from "./dist/spec.js";
+import { defineCommand, defineQuery } from "./dist/operation.js";
 import "./dist/index.js";
 import { SuccessResultModel } from "./user.js";
 

package/dist/libs/identity-rbac/dist/contracts/rbac.js.map

@@ -1 +1 @@
-{"version":3,"file":"rbac.js","names":[],"sources":["../../../../../../../libs/identity-rbac/dist/contracts/rbac.js"],"sourcesContent":["import { E5, x8 } from \"../schema/dist/index.js\";\nimport { defineCommand, defineQuery } from \"./dist/spec.js\";\nimport \"./dist/index.js\";\nimport { SuccessResultModel } from \"./user.js\";\n\n//#region src/contracts/rbac.ts\nconst OWNERS = [\"platform.identity-rbac\"];\nconst RoleModel = new x8({\n\tname: \"Role\",\n\tdescription: \"RBAC role definition\",\n\tfields: {\n\t\tid: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tname: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tdescription: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tpermissions: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false,\n\t\t\tisArray: true\n\t\t},\n\t\tcreatedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst PolicyBindingModel = new x8({\n\tname: \"PolicyBinding\",\n\tdescription: \"Role assignment to a target\",\n\tfields: {\n\t\tid: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\troleId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\ttargetType: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\ttargetId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\texpiresAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: true\n\t\t},\n\t\tcreatedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t},\n\t\trole: {\n\t\t\ttype: RoleModel,\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst PermissionCheckResultModel = new x8({\n\tname: \"PermissionCheckResult\",\n\tdescription: \"Result of a permission check\",\n\tfields: {\n\t\tallowed: {\n\t\t\ttype: E5.Boolean(),\n\t\t\tisOptional: false\n\t\t},\n\t\treason: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tmatchedRole: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst CreateRoleInputModel = new x8({\n\tname: \"CreateRoleInput\",\n\tdescription: \"Input for creating a role\",\n\tfields: {\n\t\tname: {\n\t\t\ttype: E5.NonEmptyString(),\n\t\t\tisOptional: false\n\t\t},\n\t\tdescription: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tpermissions: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false,\n\t\t\tisArray: true\n\t\t}\n\t}\n});\nconst UpdateRoleInputModel = new x8({\n\tname: \"UpdateRoleInput\",\n\tdescription: \"Input for updating a role\",\n\tfields: {\n\t\troleId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tname: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tdescription: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tpermissions: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true,\n\t\t\tisArray: true\n\t\t}\n\t}\n});\nconst DeleteRoleInputModel = new x8({\n\tname: \"DeleteRoleInput\",\n\tdescription: \"Input for deleting a role\",\n\tfields: { roleId: {\n\t\ttype: E5.String_unsecure(),\n\t\tisOptional: false\n\t} }\n});\nconst ListRolesOutputModel = new x8({\n\tname: \"ListRolesOutput\",\n\tdescription: \"Output for listing roles\",\n\tfields: { roles: {\n\t\ttype: RoleModel,\n\t\tisOptional: false,\n\t\tisArray: true\n\t} }\n});\nconst AssignRoleInputModel = new x8({\n\tname: \"AssignRoleInput\",\n\tdescription: \"Input for assigning a role\",\n\tfields: {\n\t\troleId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\ttargetType: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\ttargetId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\texpiresAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst RevokeRoleInputModel = new x8({\n\tname: \"RevokeRoleInput\",\n\tdescription: \"Input for revoking a role\",\n\tfields: { bindingId: {\n\t\ttype: E5.String_unsecure(),\n\t\tisOptional: false\n\t} }\n});\nconst BindingIdPayloadModel = new x8({\n\tname: \"BindingIdPayload\",\n\tdescription: \"Payload with binding ID\",\n\tfields: { bindingId: {\n\t\ttype: E5.String_unsecure(),\n\t\tisOptional: false\n\t} }\n});\nconst CheckPermissionInputModel = new x8({\n\tname: \"CheckPermissionInput\",\n\tdescription: \"Input for checking a permission\",\n\tfields: {\n\t\tuserId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tpermission: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst ListUserPermissionsInputModel = new x8({\n\tname: \"ListUserPermissionsInput\",\n\tdescription: \"Input for listing user permissions\",\n\tfields: {\n\t\tuserId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst ListUserPermissionsOutputModel = new x8({\n\tname: \"ListUserPermissionsOutput\",\n\tdescription: \"Output for listing user permissions\",\n\tfields: {\n\t\tpermissions: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false,\n\t\t\tisArray: true\n\t\t},\n\t\troles: {\n\t\t\ttype: RoleModel,\n\t\t\tisOptional: false,\n\t\t\tisArray: true\n\t\t}\n\t}\n});\n/**\n* Create a new role.\n*/\nconst CreateRoleContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.rbac.role.create\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"rbac\",\n\t\t\t\"role\",\n\t\t\t\"create\"\n\t\t],\n\t\tdescription: \"Create a new role with permissions.\",\n\t\tgoal: \"Allow admins to define custom roles.\",\n\t\tcontext: \"Role management in admin settings.\"\n\t},\n\tio: {\n\t\tinput: CreateRoleInputModel,\n\t\toutput: RoleModel,\n\t\terrors: { ROLE_EXISTS: {\n\t\t\tdescription: \"A role with this name already exists\",\n\t\t\thttp: 409,\n\t\t\tgqlCode: \"ROLE_EXISTS\",\n\t\t\twhen: \"Role name is taken\"\n\t\t} }\n\t},\n\tpolicy: { auth: \"admin\" },\n\tsideEffects: { audit: [\"role.created\"] }\n});\n/**\n* Update a role.\n*/\nconst UpdateRoleContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.rbac.role.update\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"rbac\",\n\t\t\t\"role\",\n\t\t\t\"update\"\n\t\t],\n\t\tdescription: \"Update an existing role.\",\n\t\tgoal: \"Allow admins to modify role permissions.\",\n\t\tcontext: \"Role management in admin settings.\"\n\t},\n\tio: {\n\t\tinput: UpdateRoleInputModel,\n\t\toutput: RoleModel\n\t},\n\tpolicy: { auth: \"admin\" },\n\tsideEffects: { audit: [\"role.updated\"] }\n});\n/**\n* Delete a role.\n*/\nconst DeleteRoleContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.rbac.role.delete\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"rbac\",\n\t\t\t\"role\",\n\t\t\t\"delete\"\n\t\t],\n\t\tdescription: \"Delete an existing role.\",\n\t\tgoal: \"Allow admins to remove unused roles.\",\n\t\tcontext: \"Role management. Removes all policy bindings using this role.\"\n\t},\n\tio: {\n\t\tinput: DeleteRoleInputModel,\n\t\toutput: SuccessResultModel,\n\t\terrors: { ROLE_IN_USE: {\n\t\t\tdescription: \"Role is still assigned to users or organizations\",\n\t\t\thttp: 409,\n\t\t\tgqlCode: \"ROLE_IN_USE\",\n\t\t\twhen: \"Role has active bindings\"\n\t\t} }\n\t},\n\tpolicy: { auth: \"admin\" },\n\tsideEffects: { audit: [\"role.deleted\"] }\n});\n/**\n* List all roles.\n*/\nconst ListRolesContract = defineQuery({\n\tmeta: {\n\t\tname: \"identity.rbac.role.list\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"rbac\",\n\t\t\t\"role\",\n\t\t\t\"list\"\n\t\t],\n\t\tdescription: \"List all available roles.\",\n\t\tgoal: \"Show available roles for assignment.\",\n\t\tcontext: \"Role assignment UI.\"\n\t},\n\tio: {\n\t\tinput: null,\n\t\toutput: ListRolesOutputModel\n\t},\n\tpolicy: { auth: \"user\" }\n});\n/**\n* Assign a role to a user or organization.\n*/\nconst AssignRoleContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.rbac.assign\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"rbac\",\n\t\t\t\"assign\"\n\t\t],\n\t\tdescription: \"Assign a role to a user or organization.\",\n\t\tgoal: \"Grant permissions via role assignment.\",\n\t\tcontext: \"User/org permission management.\"\n\t},\n\tio: {\n\t\tinput: AssignRoleInputModel,\n\t\toutput: PolicyBindingModel,\n\t\terrors: {\n\t\t\tROLE_NOT_FOUND: {\n\t\t\t\tdescription: \"The specified role does not exist\",\n\t\t\t\thttp: 404,\n\t\t\t\tgqlCode: \"ROLE_NOT_FOUND\",\n\t\t\t\twhen: \"Role ID is invalid\"\n\t\t\t},\n\t\t\tALREADY_ASSIGNED: {\n\t\t\t\tdescription: \"This role is already assigned to the target\",\n\t\t\t\thttp: 409,\n\t\t\t\tgqlCode: \"ALREADY_ASSIGNED\",\n\t\t\t\twhen: \"Binding already exists\"\n\t\t\t}\n\t\t}\n\t},\n\tpolicy: { auth: \"admin\" },\n\tsideEffects: {\n\t\temits: [{\n\t\t\tname: \"role.assigned\",\n\t\t\tversion: 1,\n\t\t\twhen: \"Role is assigned\",\n\t\t\tpayload: PolicyBindingModel\n\t\t}],\n\t\taudit: [\"role.assigned\"]\n\t}\n});\n/**\n* Revoke a role from a user or organization.\n*/\nconst RevokeRoleContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.rbac.revoke\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"rbac\",\n\t\t\t\"revoke\"\n\t\t],\n\t\tdescription: \"Revoke a role from a user or organization.\",\n\t\tgoal: \"Remove permissions via role revocation.\",\n\t\tcontext: \"User/org permission management.\"\n\t},\n\tio: {\n\t\tinput: RevokeRoleInputModel,\n\t\toutput: SuccessResultModel,\n\t\terrors: { BINDING_NOT_FOUND: {\n\t\t\tdescription: \"The policy binding does not exist\",\n\t\t\thttp: 404,\n\t\t\tgqlCode: \"BINDING_NOT_FOUND\",\n\t\t\twhen: \"Binding ID is invalid\"\n\t\t} }\n\t},\n\tpolicy: { auth: \"admin\" },\n\tsideEffects: {\n\t\temits: [{\n\t\t\tname: \"role.revoked\",\n\t\t\tversion: 1,\n\t\t\twhen: \"Role is revoked\",\n\t\t\tpayload: BindingIdPayloadModel\n\t\t}],\n\t\taudit: [\"role.revoked\"]\n\t}\n});\n/**\n* Check if a user has a specific permission.\n*/\nconst CheckPermissionContract = defineQuery({\n\tmeta: {\n\t\tname: \"identity.rbac.check\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"rbac\",\n\t\t\t\"check\",\n\t\t\t\"permission\"\n\t\t],\n\t\tdescription: \"Check if a user has a specific permission.\",\n\t\tgoal: \"Authorization check before sensitive operations.\",\n\t\tcontext: \"Called by other services to verify permissions.\"\n\t},\n\tio: {\n\t\tinput: CheckPermissionInputModel,\n\t\toutput: PermissionCheckResultModel\n\t},\n\tpolicy: { auth: \"user\" }\n});\n/**\n* List permissions for a user.\n*/\nconst ListUserPermissionsContract = defineQuery({\n\tmeta: {\n\t\tname: \"identity.rbac.permissions\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"rbac\",\n\t\t\t\"permissions\",\n\t\t\t\"user\"\n\t\t],\n\t\tdescription: \"List all permissions for a user in a context.\",\n\t\tgoal: \"Show what a user can do in an org.\",\n\t\tcontext: \"UI permission display, debugging.\"\n\t},\n\tio: {\n\t\tinput: ListUserPermissionsInputModel,\n\t\toutput: ListUserPermissionsOutputModel\n\t},\n\tpolicy: { auth: \"user\" }\n});\n\n//#endregion\nexport { AssignRoleContract, AssignRoleInputModel, BindingIdPayloadModel, CheckPermissionContract, CheckPermissionInputModel, CreateRoleContract, CreateRoleInputModel, DeleteRoleContract, DeleteRoleInputModel, ListRolesContract, ListRolesOutputModel, ListUserPermissionsContract, ListUserPermissionsInputModel, ListUserPermissionsOutputModel, PermissionCheckResultModel, PolicyBindingModel, RevokeRoleContract, RevokeRoleInputModel, RoleModel, UpdateRoleContract, UpdateRoleInputModel };\n//# sourceMappingURL=rbac.js.map"],"mappings":";;;;;;AAMA,MAAM,SAAS,CAAC,yBAAyB;AACzC,MAAM,YAAY,IAAI,GAAG;CACxB,MAAM;CACN,aAAa;CACb,QAAQ;EACP,IAAI;GACH,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ,SAAS;GACT;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,qBAAqB,IAAI,GAAG;CACjC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,IAAI;GACH,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,YAAY;GACX,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD,MAAM;GACL,MAAM;GACN,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,6BAA6B,IAAI,GAAG;CACzC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,SAAS;GACR,MAAM,GAAG,SAAS;GAClB,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,MAAM;GACL,MAAM,GAAG,gBAAgB;GACzB,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ,SAAS;GACT;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ,SAAS;GACT;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ,EAAE,QAAQ;EACjB,MAAM,GAAG,iBAAiB;EAC1B,YAAY;EACZ,EAAE;CACH,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ,EAAE,OAAO;EAChB,MAAM;EACN,YAAY;EACZ,SAAS;EACT,EAAE;CACH,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,YAAY;GACX,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ,EAAE,WAAW;EACpB,MAAM,GAAG,iBAAiB;EAC1B,YAAY;EACZ,EAAE;CACH,CAAC;AACF,MAAM,wBAAwB,IAAI,GAAG;CACpC,MAAM;CACN,aAAa;CACb,QAAQ,EAAE,WAAW;EACpB,MAAM,GAAG,iBAAiB;EAC1B,YAAY;EACZ,EAAE;CACH,CAAC;AACF,MAAM,4BAA4B,IAAI,GAAG;CACxC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,YAAY;GACX,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,gCAAgC,IAAI,GAAG;CAC5C,MAAM;CACN,aAAa;CACb,QAAQ;EACP,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,iCAAiC,IAAI,GAAG;CAC7C,MAAM;CACN,aAAa;CACb,QAAQ;EACP,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ,SAAS;GACT;EACD,OAAO;GACN,MAAM;GACN,YAAY;GACZ,SAAS;GACT;EACD;CACD,CAAC;;;;AAIF,MAAM,qBAAqB,cAAc;CACxC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR,QAAQ,EAAE,aAAa;GACtB,aAAa;GACb,MAAM;GACN,SAAS;GACT,MAAM;GACN,EAAE;EACH;CACD,QAAQ,EAAE,MAAM,SAAS;CACzB,aAAa,EAAE,OAAO,CAAC,eAAe,EAAE;CACxC,CAAC;;;;AAIF,MAAM,qBAAqB,cAAc;CACxC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,SAAS;CACzB,aAAa,EAAE,OAAO,CAAC,eAAe,EAAE;CACxC,CAAC;;;;AAIF,MAAM,qBAAqB,cAAc;CACxC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR,QAAQ,EAAE,aAAa;GACtB,aAAa;GACb,MAAM;GACN,SAAS;GACT,MAAM;GACN,EAAE;EACH;CACD,QAAQ,EAAE,MAAM,SAAS;CACzB,aAAa,EAAE,OAAO,CAAC,eAAe,EAAE;CACxC,CAAC;;;;AAIF,MAAM,oBAAoB,YAAY;CACrC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,CAAC;;;;AAIF,MAAM,qBAAqB,cAAc;CACxC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR,QAAQ;GACP,gBAAgB;IACf,aAAa;IACb,MAAM;IACN,SAAS;IACT,MAAM;IACN;GACD,kBAAkB;IACjB,aAAa;IACb,MAAM;IACN,SAAS;IACT,MAAM;IACN;GACD;EACD;CACD,QAAQ,EAAE,MAAM,SAAS;CACzB,aAAa;EACZ,OAAO,CAAC;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,SAAS;GACT,CAAC;EACF,OAAO,CAAC,gBAAgB;EACxB;CACD,CAAC;;;;AAIF,MAAM,qBAAqB,cAAc;CACxC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR,QAAQ,EAAE,mBAAmB;GAC5B,aAAa;GACb,MAAM;GACN,SAAS;GACT,MAAM;GACN,EAAE;EACH;CACD,QAAQ,EAAE,MAAM,SAAS;CACzB,aAAa;EACZ,OAAO,CAAC;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,SAAS;GACT,CAAC;EACF,OAAO,CAAC,eAAe;EACvB;CACD,CAAC;;;;AAIF,MAAM,0BAA0B,YAAY;CAC3C,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,CAAC;;;;AAIF,MAAM,8BAA8B,YAAY;CAC/C,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,CAAC"}
+{"version":3,"file":"rbac.js","names":[],"sources":["../../../../../../../libs/identity-rbac/dist/contracts/rbac.js"],"sourcesContent":["import { E5, x8 } from \"../schema/dist/index.js\";\nimport { defineCommand, defineQuery } from \"./dist/operation.js\";\nimport \"./dist/index.js\";\nimport { SuccessResultModel } from \"./user.js\";\n\n//#region src/contracts/rbac.ts\nconst OWNERS = [\"platform.identity-rbac\"];\nconst RoleModel = new x8({\n\tname: \"Role\",\n\tdescription: \"RBAC role definition\",\n\tfields: {\n\t\tid: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tname: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tdescription: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tpermissions: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false,\n\t\t\tisArray: true\n\t\t},\n\t\tcreatedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst PolicyBindingModel = new x8({\n\tname: \"PolicyBinding\",\n\tdescription: \"Role assignment to a target\",\n\tfields: {\n\t\tid: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\troleId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\ttargetType: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\ttargetId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\texpiresAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: true\n\t\t},\n\t\tcreatedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t},\n\t\trole: {\n\t\t\ttype: RoleModel,\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst PermissionCheckResultModel = new x8({\n\tname: \"PermissionCheckResult\",\n\tdescription: \"Result of a permission check\",\n\tfields: {\n\t\tallowed: {\n\t\t\ttype: E5.Boolean(),\n\t\t\tisOptional: false\n\t\t},\n\t\treason: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tmatchedRole: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst CreateRoleInputModel = new x8({\n\tname: \"CreateRoleInput\",\n\tdescription: \"Input for creating a role\",\n\tfields: {\n\t\tname: {\n\t\t\ttype: E5.NonEmptyString(),\n\t\t\tisOptional: false\n\t\t},\n\t\tdescription: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tpermissions: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false,\n\t\t\tisArray: true\n\t\t}\n\t}\n});\nconst UpdateRoleInputModel = new x8({\n\tname: \"UpdateRoleInput\",\n\tdescription: \"Input for updating a role\",\n\tfields: {\n\t\troleId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tname: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tdescription: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tpermissions: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true,\n\t\t\tisArray: true\n\t\t}\n\t}\n});\nconst DeleteRoleInputModel = new x8({\n\tname: \"DeleteRoleInput\",\n\tdescription: \"Input for deleting a role\",\n\tfields: { roleId: {\n\t\ttype: E5.String_unsecure(),\n\t\tisOptional: false\n\t} }\n});\nconst ListRolesOutputModel = new x8({\n\tname: \"ListRolesOutput\",\n\tdescription: \"Output for listing roles\",\n\tfields: { roles: {\n\t\ttype: RoleModel,\n\t\tisOptional: false,\n\t\tisArray: true\n\t} }\n});\nconst AssignRoleInputModel = new x8({\n\tname: \"AssignRoleInput\",\n\tdescription: \"Input for assigning a role\",\n\tfields: {\n\t\troleId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\ttargetType: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\ttargetId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\texpiresAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst RevokeRoleInputModel = new x8({\n\tname: \"RevokeRoleInput\",\n\tdescription: \"Input for revoking a role\",\n\tfields: { bindingId: {\n\t\ttype: E5.String_unsecure(),\n\t\tisOptional: false\n\t} }\n});\nconst BindingIdPayloadModel = new x8({\n\tname: \"BindingIdPayload\",\n\tdescription: \"Payload with binding ID\",\n\tfields: { bindingId: {\n\t\ttype: E5.String_unsecure(),\n\t\tisOptional: false\n\t} }\n});\nconst CheckPermissionInputModel = new x8({\n\tname: \"CheckPermissionInput\",\n\tdescription: \"Input for checking a permission\",\n\tfields: {\n\t\tuserId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tpermission: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst ListUserPermissionsInputModel = new x8({\n\tname: \"ListUserPermissionsInput\",\n\tdescription: \"Input for listing user permissions\",\n\tfields: {\n\t\tuserId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst ListUserPermissionsOutputModel = new x8({\n\tname: \"ListUserPermissionsOutput\",\n\tdescription: \"Output for listing user permissions\",\n\tfields: {\n\t\tpermissions: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false,\n\t\t\tisArray: true\n\t\t},\n\t\troles: {\n\t\t\ttype: RoleModel,\n\t\t\tisOptional: false,\n\t\t\tisArray: true\n\t\t}\n\t}\n});\n/**\n* Create a new role.\n*/\nconst CreateRoleContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.rbac.role.create\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"rbac\",\n\t\t\t\"role\",\n\t\t\t\"create\"\n\t\t],\n\t\tdescription: \"Create a new role with permissions.\",\n\t\tgoal: \"Allow admins to define custom roles.\",\n\t\tcontext: \"Role management in admin settings.\"\n\t},\n\tio: {\n\t\tinput: CreateRoleInputModel,\n\t\toutput: RoleModel,\n\t\terrors: { ROLE_EXISTS: {\n\t\t\tdescription: \"A role with this name already exists\",\n\t\t\thttp: 409,\n\t\t\tgqlCode: \"ROLE_EXISTS\",\n\t\t\twhen: \"Role name is taken\"\n\t\t} }\n\t},\n\tpolicy: { auth: \"admin\" },\n\tsideEffects: { audit: [\"role.created\"] }\n});\n/**\n* Update a role.\n*/\nconst UpdateRoleContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.rbac.role.update\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"rbac\",\n\t\t\t\"role\",\n\t\t\t\"update\"\n\t\t],\n\t\tdescription: \"Update an existing role.\",\n\t\tgoal: \"Allow admins to modify role permissions.\",\n\t\tcontext: \"Role management in admin settings.\"\n\t},\n\tio: {\n\t\tinput: UpdateRoleInputModel,\n\t\toutput: RoleModel\n\t},\n\tpolicy: { auth: \"admin\" },\n\tsideEffects: { audit: [\"role.updated\"] }\n});\n/**\n* Delete a role.\n*/\nconst DeleteRoleContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.rbac.role.delete\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"rbac\",\n\t\t\t\"role\",\n\t\t\t\"delete\"\n\t\t],\n\t\tdescription: \"Delete an existing role.\",\n\t\tgoal: \"Allow admins to remove unused roles.\",\n\t\tcontext: \"Role management. Removes all policy bindings using this role.\"\n\t},\n\tio: {\n\t\tinput: DeleteRoleInputModel,\n\t\toutput: SuccessResultModel,\n\t\terrors: { ROLE_IN_USE: {\n\t\t\tdescription: \"Role is still assigned to users or organizations\",\n\t\t\thttp: 409,\n\t\t\tgqlCode: \"ROLE_IN_USE\",\n\t\t\twhen: \"Role has active bindings\"\n\t\t} }\n\t},\n\tpolicy: { auth: \"admin\" },\n\tsideEffects: { audit: [\"role.deleted\"] }\n});\n/**\n* List all roles.\n*/\nconst ListRolesContract = defineQuery({\n\tmeta: {\n\t\tname: \"identity.rbac.role.list\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"rbac\",\n\t\t\t\"role\",\n\t\t\t\"list\"\n\t\t],\n\t\tdescription: \"List all available roles.\",\n\t\tgoal: \"Show available roles for assignment.\",\n\t\tcontext: \"Role assignment UI.\"\n\t},\n\tio: {\n\t\tinput: null,\n\t\toutput: ListRolesOutputModel\n\t},\n\tpolicy: { auth: \"user\" }\n});\n/**\n* Assign a role to a user or organization.\n*/\nconst AssignRoleContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.rbac.assign\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"rbac\",\n\t\t\t\"assign\"\n\t\t],\n\t\tdescription: \"Assign a role to a user or organization.\",\n\t\tgoal: \"Grant permissions via role assignment.\",\n\t\tcontext: \"User/org permission management.\"\n\t},\n\tio: {\n\t\tinput: AssignRoleInputModel,\n\t\toutput: PolicyBindingModel,\n\t\terrors: {\n\t\t\tROLE_NOT_FOUND: {\n\t\t\t\tdescription: \"The specified role does not exist\",\n\t\t\t\thttp: 404,\n\t\t\t\tgqlCode: \"ROLE_NOT_FOUND\",\n\t\t\t\twhen: \"Role ID is invalid\"\n\t\t\t},\n\t\t\tALREADY_ASSIGNED: {\n\t\t\t\tdescription: \"This role is already assigned to the target\",\n\t\t\t\thttp: 409,\n\t\t\t\tgqlCode: \"ALREADY_ASSIGNED\",\n\t\t\t\twhen: \"Binding already exists\"\n\t\t\t}\n\t\t}\n\t},\n\tpolicy: { auth: \"admin\" },\n\tsideEffects: {\n\t\temits: [{\n\t\t\tname: \"role.assigned\",\n\t\t\tversion: 1,\n\t\t\twhen: \"Role is assigned\",\n\t\t\tpayload: PolicyBindingModel\n\t\t}],\n\t\taudit: [\"role.assigned\"]\n\t}\n});\n/**\n* Revoke a role from a user or organization.\n*/\nconst RevokeRoleContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.rbac.revoke\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"rbac\",\n\t\t\t\"revoke\"\n\t\t],\n\t\tdescription: \"Revoke a role from a user or organization.\",\n\t\tgoal: \"Remove permissions via role revocation.\",\n\t\tcontext: \"User/org permission management.\"\n\t},\n\tio: {\n\t\tinput: RevokeRoleInputModel,\n\t\toutput: SuccessResultModel,\n\t\terrors: { BINDING_NOT_FOUND: {\n\t\t\tdescription: \"The policy binding does not exist\",\n\t\t\thttp: 404,\n\t\t\tgqlCode: \"BINDING_NOT_FOUND\",\n\t\t\twhen: \"Binding ID is invalid\"\n\t\t} }\n\t},\n\tpolicy: { auth: \"admin\" },\n\tsideEffects: {\n\t\temits: [{\n\t\t\tname: \"role.revoked\",\n\t\t\tversion: 1,\n\t\t\twhen: \"Role is revoked\",\n\t\t\tpayload: BindingIdPayloadModel\n\t\t}],\n\t\taudit: [\"role.revoked\"]\n\t}\n});\n/**\n* Check if a user has a specific permission.\n*/\nconst CheckPermissionContract = defineQuery({\n\tmeta: {\n\t\tname: \"identity.rbac.check\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"rbac\",\n\t\t\t\"check\",\n\t\t\t\"permission\"\n\t\t],\n\t\tdescription: \"Check if a user has a specific permission.\",\n\t\tgoal: \"Authorization check before sensitive operations.\",\n\t\tcontext: \"Called by other services to verify permissions.\"\n\t},\n\tio: {\n\t\tinput: CheckPermissionInputModel,\n\t\toutput: PermissionCheckResultModel\n\t},\n\tpolicy: { auth: \"user\" }\n});\n/**\n* List permissions for a user.\n*/\nconst ListUserPermissionsContract = defineQuery({\n\tmeta: {\n\t\tname: \"identity.rbac.permissions\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"rbac\",\n\t\t\t\"permissions\",\n\t\t\t\"user\"\n\t\t],\n\t\tdescription: \"List all permissions for a user in a context.\",\n\t\tgoal: \"Show what a user can do in an org.\",\n\t\tcontext: \"UI permission display, debugging.\"\n\t},\n\tio: {\n\t\tinput: ListUserPermissionsInputModel,\n\t\toutput: ListUserPermissionsOutputModel\n\t},\n\tpolicy: { auth: \"user\" }\n});\n\n//#endregion\nexport { AssignRoleContract, AssignRoleInputModel, BindingIdPayloadModel, CheckPermissionContract, CheckPermissionInputModel, CreateRoleContract, CreateRoleInputModel, DeleteRoleContract, DeleteRoleInputModel, ListRolesContract, ListRolesOutputModel, ListUserPermissionsContract, ListUserPermissionsInputModel, ListUserPermissionsOutputModel, PermissionCheckResultModel, PolicyBindingModel, RevokeRoleContract, RevokeRoleInputModel, RoleModel, UpdateRoleContract, UpdateRoleInputModel };\n//# sourceMappingURL=rbac.js.map"],"mappings":";;;;;;AAMA,MAAM,SAAS,CAAC,yBAAyB;AACzC,MAAM,YAAY,IAAI,GAAG;CACxB,MAAM;CACN,aAAa;CACb,QAAQ;EACP,IAAI;GACH,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ,SAAS;GACT;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,qBAAqB,IAAI,GAAG;CACjC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,IAAI;GACH,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,YAAY;GACX,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD,MAAM;GACL,MAAM;GACN,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,6BAA6B,IAAI,GAAG;CACzC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,SAAS;GACR,MAAM,GAAG,SAAS;GAClB,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,MAAM;GACL,MAAM,GAAG,gBAAgB;GACzB,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ,SAAS;GACT;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ,SAAS;GACT;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ,EAAE,QAAQ;EACjB,MAAM,GAAG,iBAAiB;EAC1B,YAAY;EACZ,EAAE;CACH,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ,EAAE,OAAO;EAChB,MAAM;EACN,YAAY;EACZ,SAAS;EACT,EAAE;CACH,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,YAAY;GACX,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ,EAAE,WAAW;EACpB,MAAM,GAAG,iBAAiB;EAC1B,YAAY;EACZ,EAAE;CACH,CAAC;AACF,MAAM,wBAAwB,IAAI,GAAG;CACpC,MAAM;CACN,aAAa;CACb,QAAQ,EAAE,WAAW;EACpB,MAAM,GAAG,iBAAiB;EAC1B,YAAY;EACZ,EAAE;CACH,CAAC;AACF,MAAM,4BAA4B,IAAI,GAAG;CACxC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,YAAY;GACX,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,gCAAgC,IAAI,GAAG;CAC5C,MAAM;CACN,aAAa;CACb,QAAQ;EACP,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,iCAAiC,IAAI,GAAG;CAC7C,MAAM;CACN,aAAa;CACb,QAAQ;EACP,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ,SAAS;GACT;EACD,OAAO;GACN,MAAM;GACN,YAAY;GACZ,SAAS;GACT;EACD;CACD,CAAC;;;;AAIF,MAAM,qBAAqB,cAAc;CACxC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR,QAAQ,EAAE,aAAa;GACtB,aAAa;GACb,MAAM;GACN,SAAS;GACT,MAAM;GACN,EAAE;EACH;CACD,QAAQ,EAAE,MAAM,SAAS;CACzB,aAAa,EAAE,OAAO,CAAC,eAAe,EAAE;CACxC,CAAC;;;;AAIF,MAAM,qBAAqB,cAAc;CACxC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,SAAS;CACzB,aAAa,EAAE,OAAO,CAAC,eAAe,EAAE;CACxC,CAAC;;;;AAIF,MAAM,qBAAqB,cAAc;CACxC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR,QAAQ,EAAE,aAAa;GACtB,aAAa;GACb,MAAM;GACN,SAAS;GACT,MAAM;GACN,EAAE;EACH;CACD,QAAQ,EAAE,MAAM,SAAS;CACzB,aAAa,EAAE,OAAO,CAAC,eAAe,EAAE;CACxC,CAAC;;;;AAIF,MAAM,oBAAoB,YAAY;CACrC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,CAAC;;;;AAIF,MAAM,qBAAqB,cAAc;CACxC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR,QAAQ;GACP,gBAAgB;IACf,aAAa;IACb,MAAM;IACN,SAAS;IACT,MAAM;IACN;GACD,kBAAkB;IACjB,aAAa;IACb,MAAM;IACN,SAAS;IACT,MAAM;IACN;GACD;EACD;CACD,QAAQ,EAAE,MAAM,SAAS;CACzB,aAAa;EACZ,OAAO,CAAC;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,SAAS;GACT,CAAC;EACF,OAAO,CAAC,gBAAgB;EACxB;CACD,CAAC;;;;AAIF,MAAM,qBAAqB,cAAc;CACxC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR,QAAQ,EAAE,mBAAmB;GAC5B,aAAa;GACb,MAAM;GACN,SAAS;GACT,MAAM;GACN,EAAE;EACH;CACD,QAAQ,EAAE,MAAM,SAAS;CACzB,aAAa;EACZ,OAAO,CAAC;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,SAAS;GACT,CAAC;EACF,OAAO,CAAC,eAAe;EACvB;CACD,CAAC;;;;AAIF,MAAM,0BAA0B,YAAY;CAC3C,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,CAAC;;;;AAIF,MAAM,8BAA8B,YAAY;CAC/C,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,CAAC"}

package/dist/libs/identity-rbac/dist/contracts/user.js

@@ -1,5 +1,5 @@
 import { E5, x8 } from "../schema/dist/index.js";
-import { defineCommand, defineQuery } from "./dist/spec.js";
+import { defineCommand, defineQuery } from "./dist/operation.js";
 import "./dist/index.js";
 
 //#region ../../libs/identity-rbac/dist/contracts/user.js

package/dist/libs/identity-rbac/dist/contracts/user.js.map

@@ -1 +1 @@
-{"version":3,"file":"user.js","names":[],"sources":["../../../../../../../libs/identity-rbac/dist/contracts/user.js"],"sourcesContent":["import { E5, x8 } from \"../schema/dist/index.js\";\nimport { defineCommand, defineQuery } from \"./dist/spec.js\";\nimport \"./dist/index.js\";\n\n//#region src/contracts/user.ts\nconst OWNERS = [\"platform.identity-rbac\"];\nconst UserProfileModel = new x8({\n\tname: \"UserProfile\",\n\tdescription: \"User profile information\",\n\tfields: {\n\t\tid: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\temail: {\n\t\t\ttype: E5.EmailAddress(),\n\t\t\tisOptional: false\n\t\t},\n\t\temailVerified: {\n\t\t\ttype: E5.Boolean(),\n\t\t\tisOptional: false\n\t\t},\n\t\tname: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tfirstName: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tlastName: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tlocale: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\ttimezone: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\timageUrl: {\n\t\t\ttype: E5.URL(),\n\t\t\tisOptional: true\n\t\t},\n\t\trole: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tonboardingCompleted: {\n\t\t\ttype: E5.Boolean(),\n\t\t\tisOptional: false\n\t\t},\n\t\tcreatedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst CreateUserInputModel = new x8({\n\tname: \"CreateUserInput\",\n\tdescription: \"Input for creating a new user\",\n\tfields: {\n\t\temail: {\n\t\t\ttype: E5.EmailAddress(),\n\t\t\tisOptional: false\n\t\t},\n\t\tname: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tfirstName: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tlastName: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tpassword: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst UpdateUserInputModel = new x8({\n\tname: \"UpdateUserInput\",\n\tdescription: \"Input for updating a user profile\",\n\tfields: {\n\t\tname: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tfirstName: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tlastName: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tlocale: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\ttimezone: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\timageUrl: {\n\t\t\ttype: E5.URL(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst DeleteUserInputModel = new x8({\n\tname: \"DeleteUserInput\",\n\tdescription: \"Input for deleting a user\",\n\tfields: { confirmEmail: {\n\t\ttype: E5.EmailAddress(),\n\t\tisOptional: false\n\t} }\n});\nconst SuccessResultModel = new x8({\n\tname: \"SuccessResult\",\n\tdescription: \"Simple success result\",\n\tfields: { success: {\n\t\ttype: E5.Boolean(),\n\t\tisOptional: false\n\t} }\n});\nconst UserDeletedPayloadModel = new x8({\n\tname: \"UserDeletedPayload\",\n\tdescription: \"Payload for user deleted event\",\n\tfields: { userId: {\n\t\ttype: E5.String_unsecure(),\n\t\tisOptional: false\n\t} }\n});\nconst ListUsersInputModel = new x8({\n\tname: \"ListUsersInput\",\n\tdescription: \"Input for listing users\",\n\tfields: {\n\t\tlimit: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\toffset: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tsearch: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst ListUsersOutputModel = new x8({\n\tname: \"ListUsersOutput\",\n\tdescription: \"Output for listing users\",\n\tfields: {\n\t\tusers: {\n\t\t\ttype: UserProfileModel,\n\t\t\tisOptional: false,\n\t\t\tisArray: true\n\t\t},\n\t\ttotal: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\n/**\n* Create a new user account.\n*/\nconst CreateUserContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.user.create\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"user\",\n\t\t\t\"create\"\n\t\t],\n\t\tdescription: \"Create a new user account.\",\n\t\tgoal: \"Register a new user in the system.\",\n\t\tcontext: \"Used during signup flows. May trigger email verification.\"\n\t},\n\tio: {\n\t\tinput: CreateUserInputModel,\n\t\toutput: UserProfileModel,\n\t\terrors: { EMAIL_EXISTS: {\n\t\t\tdescription: \"A user with this email already exists\",\n\t\t\thttp: 409,\n\t\t\tgqlCode: \"EMAIL_EXISTS\",\n\t\t\twhen: \"Email is already registered\"\n\t\t} }\n\t},\n\tpolicy: { auth: \"anonymous\" },\n\tsideEffects: {\n\t\temits: [{\n\t\t\tname: \"user.created\",\n\t\t\tversion: 1,\n\t\t\twhen: \"User is successfully created\",\n\t\t\tpayload: UserProfileModel\n\t\t}],\n\t\taudit: [\"user.created\"]\n\t}\n});\n/**\n* Get the current user's profile.\n*/\nconst GetCurrentUserContract = defineQuery({\n\tmeta: {\n\t\tname: \"identity.user.me\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"user\",\n\t\t\t\"profile\"\n\t\t],\n\t\tdescription: \"Get the current authenticated user profile.\",\n\t\tgoal: \"Retrieve user profile for the authenticated session.\",\n\t\tcontext: \"Called on app load and after profile updates.\"\n\t},\n\tio: {\n\t\tinput: null,\n\t\toutput: UserProfileModel\n\t},\n\tpolicy: { auth: \"user\" }\n});\n/**\n* Update user profile.\n*/\nconst UpdateUserContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.user.update\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"user\",\n\t\t\t\"update\"\n\t\t],\n\t\tdescription: \"Update user profile information.\",\n\t\tgoal: \"Allow users to update their profile.\",\n\t\tcontext: \"Self-service profile updates.\"\n\t},\n\tio: {\n\t\tinput: UpdateUserInputModel,\n\t\toutput: UserProfileModel\n\t},\n\tpolicy: { auth: \"user\" },\n\tsideEffects: {\n\t\temits: [{\n\t\t\tname: \"user.updated\",\n\t\t\tversion: 1,\n\t\t\twhen: \"User profile is updated\",\n\t\t\tpayload: UserProfileModel\n\t\t}],\n\t\taudit: [\"user.updated\"]\n\t}\n});\n/**\n* Delete user account.\n*/\nconst DeleteUserContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.user.delete\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"user\",\n\t\t\t\"delete\"\n\t\t],\n\t\tdescription: \"Delete user account and all associated data.\",\n\t\tgoal: \"Allow users to delete their account (GDPR compliance).\",\n\t\tcontext: \"Self-service account deletion. Cascades to memberships, sessions, etc.\"\n\t},\n\tio: {\n\t\tinput: DeleteUserInputModel,\n\t\toutput: SuccessResultModel\n\t},\n\tpolicy: {\n\t\tauth: \"user\",\n\t\tescalate: \"human_review\"\n\t},\n\tsideEffects: {\n\t\temits: [{\n\t\t\tname: \"user.deleted\",\n\t\t\tversion: 1,\n\t\t\twhen: \"User account is deleted\",\n\t\t\tpayload: UserDeletedPayloadModel\n\t\t}],\n\t\taudit: [\"user.deleted\"]\n\t}\n});\n/**\n* List users (admin only).\n*/\nconst ListUsersContract = defineQuery({\n\tmeta: {\n\t\tname: \"identity.user.list\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"user\",\n\t\t\t\"admin\",\n\t\t\t\"list\"\n\t\t],\n\t\tdescription: \"List all users (admin only).\",\n\t\tgoal: \"Allow admins to browse and manage users.\",\n\t\tcontext: \"Admin dashboard user management.\"\n\t},\n\tio: {\n\t\tinput: ListUsersInputModel,\n\t\toutput: ListUsersOutputModel\n\t},\n\tpolicy: { auth: \"admin\" }\n});\n\n//#endregion\nexport { CreateUserContract, CreateUserInputModel, DeleteUserContract, DeleteUserInputModel, GetCurrentUserContract, ListUsersContract, ListUsersInputModel, ListUsersOutputModel, SuccessResultModel, UpdateUserContract, UpdateUserInputModel, UserDeletedPayloadModel, UserProfileModel };\n//# sourceMappingURL=user.js.map"],"mappings":";;;;;AAKA,MAAM,SAAS,CAAC,yBAAyB;AACzC,MAAM,mBAAmB,IAAI,GAAG;CAC/B,MAAM;CACN,aAAa;CACb,QAAQ;EACP,IAAI;GACH,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,eAAe;GACd,MAAM,GAAG,SAAS;GAClB,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,KAAK;GACd,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,qBAAqB;GACpB,MAAM,GAAG,SAAS;GAClB,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,KAAK;GACd,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ,EAAE,cAAc;EACvB,MAAM,GAAG,cAAc;EACvB,YAAY;EACZ,EAAE;CACH,CAAC;AACF,MAAM,qBAAqB,IAAI,GAAG;CACjC,MAAM;CACN,aAAa;CACb,QAAQ,EAAE,SAAS;EAClB,MAAM,GAAG,SAAS;EAClB,YAAY;EACZ,EAAE;CACH,CAAC;AACF,MAAM,0BAA0B,IAAI,GAAG;CACtC,MAAM;CACN,aAAa;CACb,QAAQ,EAAE,QAAQ;EACjB,MAAM,GAAG,iBAAiB;EAC1B,YAAY;EACZ,EAAE;CACH,CAAC;AACF,MAAM,sBAAsB,IAAI,GAAG;CAClC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM;GACN,YAAY;GACZ,SAAS;GACT;EACD,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD;CACD,CAAC;;;;AAIF,MAAM,qBAAqB,cAAc;CACxC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR,QAAQ,EAAE,cAAc;GACvB,aAAa;GACb,MAAM;GACN,SAAS;GACT,MAAM;GACN,EAAE;EACH;CACD,QAAQ,EAAE,MAAM,aAAa;CAC7B,aAAa;EACZ,OAAO,CAAC;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,SAAS;GACT,CAAC;EACF,OAAO,CAAC,eAAe;EACvB;CACD,CAAC;;;;AAIF,MAAM,yBAAyB,YAAY;CAC1C,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,CAAC;;;;AAIF,MAAM,qBAAqB,cAAc;CACxC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,aAAa;EACZ,OAAO,CAAC;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,SAAS;GACT,CAAC;EACF,OAAO,CAAC,eAAe;EACvB;CACD,CAAC;;;;AAIF,MAAM,qBAAqB,cAAc;CACxC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ;EACP,MAAM;EACN,UAAU;EACV;CACD,aAAa;EACZ,OAAO,CAAC;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,SAAS;GACT,CAAC;EACF,OAAO,CAAC,eAAe;EACvB;CACD,CAAC;;;;AAIF,MAAM,oBAAoB,YAAY;CACrC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,SAAS;CACzB,CAAC"}
+{"version":3,"file":"user.js","names":[],"sources":["../../../../../../../libs/identity-rbac/dist/contracts/user.js"],"sourcesContent":["import { E5, x8 } from \"../schema/dist/index.js\";\nimport { defineCommand, defineQuery } from \"./dist/operation.js\";\nimport \"./dist/index.js\";\n\n//#region src/contracts/user.ts\nconst OWNERS = [\"platform.identity-rbac\"];\nconst UserProfileModel = new x8({\n\tname: \"UserProfile\",\n\tdescription: \"User profile information\",\n\tfields: {\n\t\tid: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\temail: {\n\t\t\ttype: E5.EmailAddress(),\n\t\t\tisOptional: false\n\t\t},\n\t\temailVerified: {\n\t\t\ttype: E5.Boolean(),\n\t\t\tisOptional: false\n\t\t},\n\t\tname: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tfirstName: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tlastName: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tlocale: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\ttimezone: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\timageUrl: {\n\t\t\ttype: E5.URL(),\n\t\t\tisOptional: true\n\t\t},\n\t\trole: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tonboardingCompleted: {\n\t\t\ttype: E5.Boolean(),\n\t\t\tisOptional: false\n\t\t},\n\t\tcreatedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst CreateUserInputModel = new x8({\n\tname: \"CreateUserInput\",\n\tdescription: \"Input for creating a new user\",\n\tfields: {\n\t\temail: {\n\t\t\ttype: E5.EmailAddress(),\n\t\t\tisOptional: false\n\t\t},\n\t\tname: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tfirstName: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tlastName: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tpassword: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst UpdateUserInputModel = new x8({\n\tname: \"UpdateUserInput\",\n\tdescription: \"Input for updating a user profile\",\n\tfields: {\n\t\tname: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tfirstName: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tlastName: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tlocale: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\ttimezone: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\timageUrl: {\n\t\t\ttype: E5.URL(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst DeleteUserInputModel = new x8({\n\tname: \"DeleteUserInput\",\n\tdescription: \"Input for deleting a user\",\n\tfields: { confirmEmail: {\n\t\ttype: E5.EmailAddress(),\n\t\tisOptional: false\n\t} }\n});\nconst SuccessResultModel = new x8({\n\tname: \"SuccessResult\",\n\tdescription: \"Simple success result\",\n\tfields: { success: {\n\t\ttype: E5.Boolean(),\n\t\tisOptional: false\n\t} }\n});\nconst UserDeletedPayloadModel = new x8({\n\tname: \"UserDeletedPayload\",\n\tdescription: \"Payload for user deleted event\",\n\tfields: { userId: {\n\t\ttype: E5.String_unsecure(),\n\t\tisOptional: false\n\t} }\n});\nconst ListUsersInputModel = new x8({\n\tname: \"ListUsersInput\",\n\tdescription: \"Input for listing users\",\n\tfields: {\n\t\tlimit: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\toffset: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tsearch: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst ListUsersOutputModel = new x8({\n\tname: \"ListUsersOutput\",\n\tdescription: \"Output for listing users\",\n\tfields: {\n\t\tusers: {\n\t\t\ttype: UserProfileModel,\n\t\t\tisOptional: false,\n\t\t\tisArray: true\n\t\t},\n\t\ttotal: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\n/**\n* Create a new user account.\n*/\nconst CreateUserContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.user.create\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"user\",\n\t\t\t\"create\"\n\t\t],\n\t\tdescription: \"Create a new user account.\",\n\t\tgoal: \"Register a new user in the system.\",\n\t\tcontext: \"Used during signup flows. May trigger email verification.\"\n\t},\n\tio: {\n\t\tinput: CreateUserInputModel,\n\t\toutput: UserProfileModel,\n\t\terrors: { EMAIL_EXISTS: {\n\t\t\tdescription: \"A user with this email already exists\",\n\t\t\thttp: 409,\n\t\t\tgqlCode: \"EMAIL_EXISTS\",\n\t\t\twhen: \"Email is already registered\"\n\t\t} }\n\t},\n\tpolicy: { auth: \"anonymous\" },\n\tsideEffects: {\n\t\temits: [{\n\t\t\tname: \"user.created\",\n\t\t\tversion: 1,\n\t\t\twhen: \"User is successfully created\",\n\t\t\tpayload: UserProfileModel\n\t\t}],\n\t\taudit: [\"user.created\"]\n\t}\n});\n/**\n* Get the current user's profile.\n*/\nconst GetCurrentUserContract = defineQuery({\n\tmeta: {\n\t\tname: \"identity.user.me\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"user\",\n\t\t\t\"profile\"\n\t\t],\n\t\tdescription: \"Get the current authenticated user profile.\",\n\t\tgoal: \"Retrieve user profile for the authenticated session.\",\n\t\tcontext: \"Called on app load and after profile updates.\"\n\t},\n\tio: {\n\t\tinput: null,\n\t\toutput: UserProfileModel\n\t},\n\tpolicy: { auth: \"user\" }\n});\n/**\n* Update user profile.\n*/\nconst UpdateUserContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.user.update\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"user\",\n\t\t\t\"update\"\n\t\t],\n\t\tdescription: \"Update user profile information.\",\n\t\tgoal: \"Allow users to update their profile.\",\n\t\tcontext: \"Self-service profile updates.\"\n\t},\n\tio: {\n\t\tinput: UpdateUserInputModel,\n\t\toutput: UserProfileModel\n\t},\n\tpolicy: { auth: \"user\" },\n\tsideEffects: {\n\t\temits: [{\n\t\t\tname: \"user.updated\",\n\t\t\tversion: 1,\n\t\t\twhen: \"User profile is updated\",\n\t\t\tpayload: UserProfileModel\n\t\t}],\n\t\taudit: [\"user.updated\"]\n\t}\n});\n/**\n* Delete user account.\n*/\nconst DeleteUserContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.user.delete\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"user\",\n\t\t\t\"delete\"\n\t\t],\n\t\tdescription: \"Delete user account and all associated data.\",\n\t\tgoal: \"Allow users to delete their account (GDPR compliance).\",\n\t\tcontext: \"Self-service account deletion. Cascades to memberships, sessions, etc.\"\n\t},\n\tio: {\n\t\tinput: DeleteUserInputModel,\n\t\toutput: SuccessResultModel\n\t},\n\tpolicy: {\n\t\tauth: \"user\",\n\t\tescalate: \"human_review\"\n\t},\n\tsideEffects: {\n\t\temits: [{\n\t\t\tname: \"user.deleted\",\n\t\t\tversion: 1,\n\t\t\twhen: \"User account is deleted\",\n\t\t\tpayload: UserDeletedPayloadModel\n\t\t}],\n\t\taudit: [\"user.deleted\"]\n\t}\n});\n/**\n* List users (admin only).\n*/\nconst ListUsersContract = defineQuery({\n\tmeta: {\n\t\tname: \"identity.user.list\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"user\",\n\t\t\t\"admin\",\n\t\t\t\"list\"\n\t\t],\n\t\tdescription: \"List all users (admin only).\",\n\t\tgoal: \"Allow admins to browse and manage users.\",\n\t\tcontext: \"Admin dashboard user management.\"\n\t},\n\tio: {\n\t\tinput: ListUsersInputModel,\n\t\toutput: ListUsersOutputModel\n\t},\n\tpolicy: { auth: \"admin\" }\n});\n\n//#endregion\nexport { CreateUserContract, CreateUserInputModel, DeleteUserContract, DeleteUserInputModel, GetCurrentUserContract, ListUsersContract, ListUsersInputModel, ListUsersOutputModel, SuccessResultModel, UpdateUserContract, UpdateUserInputModel, UserDeletedPayloadModel, UserProfileModel };\n//# sourceMappingURL=user.js.map"],"mappings":";;;;;AAKA,MAAM,SAAS,CAAC,yBAAyB;AACzC,MAAM,mBAAmB,IAAI,GAAG;CAC/B,MAAM;CACN,aAAa;CACb,QAAQ;EACP,IAAI;GACH,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,eAAe;GACd,MAAM,GAAG,SAAS;GAClB,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,KAAK;GACd,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,qBAAqB;GACpB,MAAM,GAAG,SAAS;GAClB,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,KAAK;GACd,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ,EAAE,cAAc;EACvB,MAAM,GAAG,cAAc;EACvB,YAAY;EACZ,EAAE;CACH,CAAC;AACF,MAAM,qBAAqB,IAAI,GAAG;CACjC,MAAM;CACN,aAAa;CACb,QAAQ,EAAE,SAAS;EAClB,MAAM,GAAG,SAAS;EAClB,YAAY;EACZ,EAAE;CACH,CAAC;AACF,MAAM,0BAA0B,IAAI,GAAG;CACtC,MAAM;CACN,aAAa;CACb,QAAQ,EAAE,QAAQ;EACjB,MAAM,GAAG,iBAAiB;EAC1B,YAAY;EACZ,EAAE;CACH,CAAC;AACF,MAAM,sBAAsB,IAAI,GAAG;CAClC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM;GACN,YAAY;GACZ,SAAS;GACT;EACD,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD;CACD,CAAC;;;;AAIF,MAAM,qBAAqB,cAAc;CACxC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR,QAAQ,EAAE,cAAc;GACvB,aAAa;GACb,MAAM;GACN,SAAS;GACT,MAAM;GACN,EAAE;EACH;CACD,QAAQ,EAAE,MAAM,aAAa;CAC7B,aAAa;EACZ,OAAO,CAAC;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,SAAS;GACT,CAAC;EACF,OAAO,CAAC,eAAe;EACvB;CACD,CAAC;;;;AAIF,MAAM,yBAAyB,YAAY;CAC1C,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,CAAC;;;;AAIF,MAAM,qBAAqB,cAAc;CACxC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,aAAa;EACZ,OAAO,CAAC;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,SAAS;GACT,CAAC;EACF,OAAO,CAAC,eAAe;EACvB;CACD,CAAC;;;;AAIF,MAAM,qBAAqB,cAAc;CACxC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ;EACP,MAAM;EACN,UAAU;EACV;CACD,aAAa;EACZ,OAAO,CAAC;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,SAAS;GACT,CAAC;EACF,OAAO,CAAC,eAAe;EACvB;CACD,CAAC;;;;AAIF,MAAM,oBAAoB,YAAY;CACrC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,SAAS;CACzB,CAAC"}

package/dist/modules/audit-trail/dist/contracts/index.js

@@ -1,6 +1,6 @@
 import { E5, N5 } from "../libs/schema/dist/index.js";
 import { K5 } from "../libs/contracts/dist/schema/dist/index.js";
-import { defineCommand, defineQuery } from "../libs/contracts/dist/spec.js";
+import { defineCommand, defineQuery } from "../libs/contracts/dist/operation.js";
 import "../libs/contracts/dist/index.js";
 
 //#region ../../modules/audit-trail/dist/contracts/index.js

package/dist/modules/audit-trail/dist/contracts/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../../../../../modules/audit-trail/dist/contracts/index.js"],"sourcesContent":["import { E5, N5 } from \"../libs/schema/dist/index.js\";\nimport { K5 } from \"../libs/contracts/dist/schema/dist/index.js\";\nimport { defineCommand, defineQuery } from \"../libs/contracts/dist/spec.js\";\nimport \"../libs/contracts/dist/index.js\";\n\n//#region src/contracts/index.ts\nconst OWNERS = [\"platform.audit-trail\"];\nconst AuditLogModel = K5({\n\tname: \"AuditLog\",\n\tdescription: \"Detailed audit log entry\",\n\tfields: {\n\t\tid: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\teventName: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\teventVersion: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tpayload: {\n\t\t\ttype: E5.JSONObject(),\n\t\t\tisOptional: false\n\t\t},\n\t\tactorId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tactorType: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tactorEmail: {\n\t\t\ttype: E5.EmailAddress(),\n\t\t\tisOptional: true\n\t\t},\n\t\ttargetId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\ttargetType: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\ttraceId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tclientIp: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\toccurredAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t},\n\t\trecordedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst AuditQueryInputModel = K5({\n\tname: \"AuditQueryInput\",\n\tdescription: \"Input for querying audit logs\",\n\tfields: {\n\t\teventName: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tactorId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\ttargetId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\ttargetType: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\ttraceId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tfrom: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: true\n\t\t},\n\t\tto: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: true\n\t\t},\n\t\tlimit: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: true,\n\t\t\tdefaultValue: 100\n\t\t},\n\t\toffset: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: true,\n\t\t\tdefaultValue: 0\n\t\t}\n\t}\n});\nconst AuditQueryOutputModel = K5({\n\tname: \"AuditQueryOutput\",\n\tdescription: \"Output from querying audit logs\",\n\tfields: {\n\t\tlogs: {\n\t\t\ttype: AuditLogModel,\n\t\t\tisArray: true,\n\t\t\tisOptional: false\n\t\t},\n\t\ttotal: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\thasMore: {\n\t\t\ttype: E5.Boolean(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst ExportFormatEnum = N5(\"ExportFormat\", [\n\t\"json\",\n\t\"csv\",\n\t\"parquet\"\n]);\nconst AuditExportInputModel = K5({\n\tname: \"AuditExportInput\",\n\tdescription: \"Input for exporting audit logs\",\n\tfields: {\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tfrom: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t},\n\t\tto: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t},\n\t\tformat: {\n\t\t\ttype: ExportFormatEnum,\n\t\t\tisOptional: true,\n\t\t\tdefaultValue: \"json\"\n\t\t},\n\t\teventNames: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisArray: true,\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst ExportStatusEnum = N5(\"ExportStatus\", [\n\t\"pending\",\n\t\"processing\",\n\t\"completed\",\n\t\"failed\"\n]);\nconst AuditExportOutputModel = K5({\n\tname: \"AuditExportOutput\",\n\tdescription: \"Output from initiating an audit export\",\n\tfields: {\n\t\texportId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tstatus: {\n\t\t\ttype: ExportStatusEnum,\n\t\t\tisOptional: false\n\t\t},\n\t\tdownloadUrl: {\n\t\t\ttype: E5.URL(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst AuditStatsInputModel = K5({\n\tname: \"AuditStatsInput\",\n\tdescription: \"Input for getting audit statistics\",\n\tfields: {\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tfrom: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: true\n\t\t},\n\t\tto: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst AuditStatsOutputModel = K5({\n\tname: \"AuditStatsOutput\",\n\tdescription: \"Audit log statistics\",\n\tfields: {\n\t\ttotalLogs: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tuniqueActors: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tuniqueTargets: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\teventCounts: {\n\t\t\ttype: E5.JSONObject(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\n/**\n* Query audit logs.\n*/\nconst QueryAuditLogsContract = defineQuery({\n\tmeta: {\n\t\tname: \"audit.logs.query\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"audit\",\n\t\t\t\"logs\",\n\t\t\t\"query\"\n\t\t],\n\t\tdescription: \"Query audit logs with filters.\",\n\t\tgoal: \"Enable searching and filtering of audit history.\",\n\t\tcontext: \"Admin dashboard, compliance reporting, debugging.\"\n\t},\n\tio: {\n\t\tinput: AuditQueryInputModel,\n\t\toutput: AuditQueryOutputModel\n\t},\n\tpolicy: { auth: \"admin\" }\n});\n/**\n* Get audit log by ID.\n*/\nconst GetAuditLogContract = defineQuery({\n\tmeta: {\n\t\tname: \"audit.logs.get\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"audit\",\n\t\t\t\"logs\",\n\t\t\t\"get\"\n\t\t],\n\t\tdescription: \"Get a specific audit log by ID.\",\n\t\tgoal: \"View detailed audit log entry.\",\n\t\tcontext: \"Log detail view.\"\n\t},\n\tio: {\n\t\tinput: K5({\n\t\t\tname: \"GetAuditLogInput\",\n\t\t\tfields: { logId: {\n\t\t\t\ttype: E5.String_unsecure(),\n\t\t\t\tisOptional: false\n\t\t\t} }\n\t\t}),\n\t\toutput: AuditLogModel\n\t},\n\tpolicy: { auth: \"admin\" }\n});\n/**\n* Get audit logs by trace ID.\n*/\nconst GetAuditTraceContract = defineQuery({\n\tmeta: {\n\t\tname: \"audit.trace.get\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"audit\",\n\t\t\t\"trace\",\n\t\t\t\"get\"\n\t\t],\n\t\tdescription: \"Get all audit logs for a trace.\",\n\t\tgoal: \"View complete request trace for debugging.\",\n\t\tcontext: \"Request tracing, debugging.\"\n\t},\n\tio: {\n\t\tinput: K5({\n\t\t\tname: \"GetAuditTraceInput\",\n\t\t\tfields: { traceId: {\n\t\t\t\ttype: E5.String_unsecure(),\n\t\t\t\tisOptional: false\n\t\t\t} }\n\t\t}),\n\t\toutput: K5({\n\t\t\tname: \"GetAuditTraceOutput\",\n\t\t\tfields: { logs: {\n\t\t\t\ttype: AuditLogModel,\n\t\t\t\tisArray: true,\n\t\t\t\tisOptional: false\n\t\t\t} }\n\t\t})\n\t},\n\tpolicy: { auth: \"admin\" }\n});\n/**\n* Export audit logs.\n*/\nconst ExportAuditLogsContract = defineCommand({\n\tmeta: {\n\t\tname: \"audit.logs.export\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"audit\",\n\t\t\t\"logs\",\n\t\t\t\"export\"\n\t\t],\n\t\tdescription: \"Export audit logs for compliance reporting.\",\n\t\tgoal: \"Generate audit reports for compliance.\",\n\t\tcontext: \"Compliance reporting, external audits.\"\n\t},\n\tio: {\n\t\tinput: AuditExportInputModel,\n\t\toutput: AuditExportOutputModel\n\t},\n\tpolicy: { auth: \"admin\" }\n});\n/**\n* Get audit statistics.\n*/\nconst GetAuditStatsContract = defineQuery({\n\tmeta: {\n\t\tname: \"audit.stats\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\"audit\", \"stats\"],\n\t\tdescription: \"Get audit log statistics.\",\n\t\tgoal: \"Monitor audit activity levels.\",\n\t\tcontext: \"Admin dashboard, monitoring.\"\n\t},\n\tio: {\n\t\tinput: AuditStatsInputModel,\n\t\toutput: AuditStatsOutputModel\n\t},\n\tpolicy: { auth: \"admin\" }\n});\n\n//#endregion\nexport { AuditExportInputModel, AuditExportOutputModel, AuditLogModel, AuditQueryInputModel, AuditQueryOutputModel, AuditStatsInputModel, AuditStatsOutputModel, ExportAuditLogsContract, ExportFormatEnum, ExportStatusEnum, GetAuditLogContract, GetAuditStatsContract, GetAuditTraceContract, QueryAuditLogsContract };\n//# sourceMappingURL=index.js.map"],"mappings":";;;;;;AAMA,MAAM,SAAS,CAAC,uBAAuB;AACvC,MAAM,gBAAgB,GAAG;CACxB,MAAM;CACN,aAAa;CACb,QAAQ;EACP,IAAI;GACH,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,cAAc;GACb,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,SAAS;GACR,MAAM,GAAG,YAAY;GACrB,YAAY;GACZ;EACD,SAAS;GACR,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,YAAY;GACX,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,YAAY;GACX,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,SAAS;GACR,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,YAAY;GACX,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD,YAAY;GACX,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,GAAG;CAC/B,MAAM;CACN,aAAa;CACb,QAAQ;EACP,WAAW;GACV,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,SAAS;GACR,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,YAAY;GACX,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,SAAS;GACR,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD,IAAI;GACH,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ,cAAc;GACd;EACD,QAAQ;GACP,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ,cAAc;GACd;EACD;CACD,CAAC;AACF,MAAM,wBAAwB,GAAG;CAChC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,MAAM;GACL,MAAM;GACN,SAAS;GACT,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,SAAS;GACR,MAAM,GAAG,SAAS;GAClB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,mBAAmB,GAAG,gBAAgB;CAC3C;CACA;CACA;CACA,CAAC;AACF,MAAM,wBAAwB,GAAG;CAChC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD,IAAI;GACH,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD,QAAQ;GACP,MAAM;GACN,YAAY;GACZ,cAAc;GACd;EACD,YAAY;GACX,MAAM,GAAG,iBAAiB;GAC1B,SAAS;GACT,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,mBAAmB,GAAG,gBAAgB;CAC3C;CACA;CACA;CACA;CACA,CAAC;AACF,MAAM,yBAAyB,GAAG;CACjC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,QAAQ;GACP,MAAM;GACN,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,KAAK;GACd,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,GAAG;CAC/B,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD,IAAI;GACH,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,wBAAwB,GAAG;CAChC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,WAAW;GACV,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,cAAc;GACb,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,eAAe;GACd,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,YAAY;GACrB,YAAY;GACZ;EACD;CACD,CAAC;;;;AAIF,MAAM,yBAAyB,YAAY;CAC1C,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,SAAS;CACzB,CAAC;;;;AAIF,MAAM,sBAAsB,YAAY;CACvC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO,GAAG;GACT,MAAM;GACN,QAAQ,EAAE,OAAO;IAChB,MAAM,GAAG,iBAAiB;IAC1B,YAAY;IACZ,EAAE;GACH,CAAC;EACF,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,SAAS;CACzB,CAAC;;;;AAIF,MAAM,wBAAwB,YAAY;CACzC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO,GAAG;GACT,MAAM;GACN,QAAQ,EAAE,SAAS;IAClB,MAAM,GAAG,iBAAiB;IAC1B,YAAY;IACZ,EAAE;GACH,CAAC;EACF,QAAQ,GAAG;GACV,MAAM;GACN,QAAQ,EAAE,MAAM;IACf,MAAM;IACN,SAAS;IACT,YAAY;IACZ,EAAE;GACH,CAAC;EACF;CACD,QAAQ,EAAE,MAAM,SAAS;CACzB,CAAC;;;;AAIF,MAAM,0BAA0B,cAAc;CAC7C,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,SAAS;CACzB,CAAC;;;;AAIF,MAAM,wBAAwB,YAAY;CACzC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM,CAAC,SAAS,QAAQ;EACxB,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,SAAS;CACzB,CAAC"}
+{"version":3,"file":"index.js","names":[],"sources":["../../../../../../../modules/audit-trail/dist/contracts/index.js"],"sourcesContent":["import { E5, N5 } from \"../libs/schema/dist/index.js\";\nimport { K5 } from \"../libs/contracts/dist/schema/dist/index.js\";\nimport { defineCommand, defineQuery } from \"../libs/contracts/dist/operation.js\";\nimport \"../libs/contracts/dist/index.js\";\n\n//#region src/contracts/index.ts\nconst OWNERS = [\"platform.audit-trail\"];\nconst AuditLogModel = K5({\n\tname: \"AuditLog\",\n\tdescription: \"Detailed audit log entry\",\n\tfields: {\n\t\tid: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\teventName: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\teventVersion: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tpayload: {\n\t\t\ttype: E5.JSONObject(),\n\t\t\tisOptional: false\n\t\t},\n\t\tactorId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tactorType: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tactorEmail: {\n\t\t\ttype: E5.EmailAddress(),\n\t\t\tisOptional: true\n\t\t},\n\t\ttargetId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\ttargetType: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\ttraceId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tclientIp: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\toccurredAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t},\n\t\trecordedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst AuditQueryInputModel = K5({\n\tname: \"AuditQueryInput\",\n\tdescription: \"Input for querying audit logs\",\n\tfields: {\n\t\teventName: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tactorId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\ttargetId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\ttargetType: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\ttraceId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tfrom: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: true\n\t\t},\n\t\tto: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: true\n\t\t},\n\t\tlimit: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: true,\n\t\t\tdefaultValue: 100\n\t\t},\n\t\toffset: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: true,\n\t\t\tdefaultValue: 0\n\t\t}\n\t}\n});\nconst AuditQueryOutputModel = K5({\n\tname: \"AuditQueryOutput\",\n\tdescription: \"Output from querying audit logs\",\n\tfields: {\n\t\tlogs: {\n\t\t\ttype: AuditLogModel,\n\t\t\tisArray: true,\n\t\t\tisOptional: false\n\t\t},\n\t\ttotal: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\thasMore: {\n\t\t\ttype: E5.Boolean(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst ExportFormatEnum = N5(\"ExportFormat\", [\n\t\"json\",\n\t\"csv\",\n\t\"parquet\"\n]);\nconst AuditExportInputModel = K5({\n\tname: \"AuditExportInput\",\n\tdescription: \"Input for exporting audit logs\",\n\tfields: {\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tfrom: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t},\n\t\tto: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t},\n\t\tformat: {\n\t\t\ttype: ExportFormatEnum,\n\t\t\tisOptional: true,\n\t\t\tdefaultValue: \"json\"\n\t\t},\n\t\teventNames: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisArray: true,\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst ExportStatusEnum = N5(\"ExportStatus\", [\n\t\"pending\",\n\t\"processing\",\n\t\"completed\",\n\t\"failed\"\n]);\nconst AuditExportOutputModel = K5({\n\tname: \"AuditExportOutput\",\n\tdescription: \"Output from initiating an audit export\",\n\tfields: {\n\t\texportId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tstatus: {\n\t\t\ttype: ExportStatusEnum,\n\t\t\tisOptional: false\n\t\t},\n\t\tdownloadUrl: {\n\t\t\ttype: E5.URL(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst AuditStatsInputModel = K5({\n\tname: \"AuditStatsInput\",\n\tdescription: \"Input for getting audit statistics\",\n\tfields: {\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tfrom: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: true\n\t\t},\n\t\tto: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst AuditStatsOutputModel = K5({\n\tname: \"AuditStatsOutput\",\n\tdescription: \"Audit log statistics\",\n\tfields: {\n\t\ttotalLogs: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tuniqueActors: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tuniqueTargets: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\teventCounts: {\n\t\t\ttype: E5.JSONObject(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\n/**\n* Query audit logs.\n*/\nconst QueryAuditLogsContract = defineQuery({\n\tmeta: {\n\t\tname: \"audit.logs.query\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"audit\",\n\t\t\t\"logs\",\n\t\t\t\"query\"\n\t\t],\n\t\tdescription: \"Query audit logs with filters.\",\n\t\tgoal: \"Enable searching and filtering of audit history.\",\n\t\tcontext: \"Admin dashboard, compliance reporting, debugging.\"\n\t},\n\tio: {\n\t\tinput: AuditQueryInputModel,\n\t\toutput: AuditQueryOutputModel\n\t},\n\tpolicy: { auth: \"admin\" }\n});\n/**\n* Get audit log by ID.\n*/\nconst GetAuditLogContract = defineQuery({\n\tmeta: {\n\t\tname: \"audit.logs.get\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"audit\",\n\t\t\t\"logs\",\n\t\t\t\"get\"\n\t\t],\n\t\tdescription: \"Get a specific audit log by ID.\",\n\t\tgoal: \"View detailed audit log entry.\",\n\t\tcontext: \"Log detail view.\"\n\t},\n\tio: {\n\t\tinput: K5({\n\t\t\tname: \"GetAuditLogInput\",\n\t\t\tfields: { logId: {\n\t\t\t\ttype: E5.String_unsecure(),\n\t\t\t\tisOptional: false\n\t\t\t} }\n\t\t}),\n\t\toutput: AuditLogModel\n\t},\n\tpolicy: { auth: \"admin\" }\n});\n/**\n* Get audit logs by trace ID.\n*/\nconst GetAuditTraceContract = defineQuery({\n\tmeta: {\n\t\tname: \"audit.trace.get\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"audit\",\n\t\t\t\"trace\",\n\t\t\t\"get\"\n\t\t],\n\t\tdescription: \"Get all audit logs for a trace.\",\n\t\tgoal: \"View complete request trace for debugging.\",\n\t\tcontext: \"Request tracing, debugging.\"\n\t},\n\tio: {\n\t\tinput: K5({\n\t\t\tname: \"GetAuditTraceInput\",\n\t\t\tfields: { traceId: {\n\t\t\t\ttype: E5.String_unsecure(),\n\t\t\t\tisOptional: false\n\t\t\t} }\n\t\t}),\n\t\toutput: K5({\n\t\t\tname: \"GetAuditTraceOutput\",\n\t\t\tfields: { logs: {\n\t\t\t\ttype: AuditLogModel,\n\t\t\t\tisArray: true,\n\t\t\t\tisOptional: false\n\t\t\t} }\n\t\t})\n\t},\n\tpolicy: { auth: \"admin\" }\n});\n/**\n* Export audit logs.\n*/\nconst ExportAuditLogsContract = defineCommand({\n\tmeta: {\n\t\tname: \"audit.logs.export\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"audit\",\n\t\t\t\"logs\",\n\t\t\t\"export\"\n\t\t],\n\t\tdescription: \"Export audit logs for compliance reporting.\",\n\t\tgoal: \"Generate audit reports for compliance.\",\n\t\tcontext: \"Compliance reporting, external audits.\"\n\t},\n\tio: {\n\t\tinput: AuditExportInputModel,\n\t\toutput: AuditExportOutputModel\n\t},\n\tpolicy: { auth: \"admin\" }\n});\n/**\n* Get audit statistics.\n*/\nconst GetAuditStatsContract = defineQuery({\n\tmeta: {\n\t\tname: \"audit.stats\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\"audit\", \"stats\"],\n\t\tdescription: \"Get audit log statistics.\",\n\t\tgoal: \"Monitor audit activity levels.\",\n\t\tcontext: \"Admin dashboard, monitoring.\"\n\t},\n\tio: {\n\t\tinput: AuditStatsInputModel,\n\t\toutput: AuditStatsOutputModel\n\t},\n\tpolicy: { auth: \"admin\" }\n});\n\n//#endregion\nexport { AuditExportInputModel, AuditExportOutputModel, AuditLogModel, AuditQueryInputModel, AuditQueryOutputModel, AuditStatsInputModel, AuditStatsOutputModel, ExportAuditLogsContract, ExportFormatEnum, ExportStatusEnum, GetAuditLogContract, GetAuditStatsContract, GetAuditTraceContract, QueryAuditLogsContract };\n//# sourceMappingURL=index.js.map"],"mappings":";;;;;;AAMA,MAAM,SAAS,CAAC,uBAAuB;AACvC,MAAM,gBAAgB,GAAG;CACxB,MAAM;CACN,aAAa;CACb,QAAQ;EACP,IAAI;GACH,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,cAAc;GACb,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,SAAS;GACR,MAAM,GAAG,YAAY;GACrB,YAAY;GACZ;EACD,SAAS;GACR,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,YAAY;GACX,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,YAAY;GACX,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,SAAS;GACR,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,YAAY;GACX,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD,YAAY;GACX,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,GAAG;CAC/B,MAAM;CACN,aAAa;CACb,QAAQ;EACP,WAAW;GACV,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,SAAS;GACR,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,YAAY;GACX,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,SAAS;GACR,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD,IAAI;GACH,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ,cAAc;GACd;EACD,QAAQ;GACP,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ,cAAc;GACd;EACD;CACD,CAAC;AACF,MAAM,wBAAwB,GAAG;CAChC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,MAAM;GACL,MAAM;GACN,SAAS;GACT,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,SAAS;GACR,MAAM,GAAG,SAAS;GAClB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,mBAAmB,GAAG,gBAAgB;CAC3C;CACA;CACA;CACA,CAAC;AACF,MAAM,wBAAwB,GAAG;CAChC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD,IAAI;GACH,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD,QAAQ;GACP,MAAM;GACN,YAAY;GACZ,cAAc;GACd;EACD,YAAY;GACX,MAAM,GAAG,iBAAiB;GAC1B,SAAS;GACT,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,mBAAmB,GAAG,gBAAgB;CAC3C;CACA;CACA;CACA;CACA,CAAC;AACF,MAAM,yBAAyB,GAAG;CACjC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,QAAQ;GACP,MAAM;GACN,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,KAAK;GACd,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,GAAG;CAC/B,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD,IAAI;GACH,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,wBAAwB,GAAG;CAChC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,WAAW;GACV,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,cAAc;GACb,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,eAAe;GACd,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,YAAY;GACrB,YAAY;GACZ;EACD;CACD,CAAC;;;;AAIF,MAAM,yBAAyB,YAAY;CAC1C,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,SAAS;CACzB,CAAC;;;;AAIF,MAAM,sBAAsB,YAAY;CACvC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO,GAAG;GACT,MAAM;GACN,QAAQ,EAAE,OAAO;IAChB,MAAM,GAAG,iBAAiB;IAC1B,YAAY;IACZ,EAAE;GACH,CAAC;EACF,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,SAAS;CACzB,CAAC;;;;AAIF,MAAM,wBAAwB,YAAY;CACzC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO,GAAG;GACT,MAAM;GACN,QAAQ,EAAE,SAAS;IAClB,MAAM,GAAG,iBAAiB;IAC1B,YAAY;IACZ,EAAE;GACH,CAAC;EACF,QAAQ,GAAG;GACV,MAAM;GACN,QAAQ,EAAE,MAAM;IACf,MAAM;IACN,SAAS;IACT,YAAY;IACZ,EAAE;GACH,CAAC;EACF;CACD,QAAQ,EAAE,MAAM,SAAS;CACzB,CAAC;;;;AAIF,MAAM,0BAA0B,cAAc;CAC7C,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,SAAS;CACzB,CAAC;;;;AAIF,MAAM,wBAAwB,YAAY;CACzC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM,CAAC,SAAS,QAAQ;EACxB,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,SAAS;CACzB,CAAC"}

package/dist/modules/audit-trail/dist/libs/contracts/dist/_virtual/rolldown_runtime.js

@@ -0,0 +1,6 @@
+//#region ../../modules/audit-trail/dist/libs/contracts/dist/_virtual/rolldown_runtime.js
+var __esmMin = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
+
+//#endregion
+export { __esmMin };
+//# sourceMappingURL=rolldown_runtime.js.map

package/dist/modules/audit-trail/dist/libs/contracts/dist/_virtual/rolldown_runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rolldown_runtime.js","names":[],"sources":["../../../../../../../../../../modules/audit-trail/dist/libs/contracts/dist/_virtual/rolldown_runtime.js"],"sourcesContent":["//#region ../../libs/contracts/dist/_virtual/rolldown_runtime.js\nvar __esmMin = (fn, res) => () => (fn && (res = fn(fn = 0)), res);\n\n//#endregion\nexport { __esmMin };\n//# sourceMappingURL=rolldown_runtime.js.map"],"mappings":";AACA,IAAI,YAAY,IAAI,eAAe,OAAO,MAAM,GAAG,KAAK,EAAE,GAAG"}

package/dist/modules/audit-trail/dist/libs/contracts/dist/client/react/form-render.js

@@ -1,3 +1,4 @@
+import "../../forms.js";
 import "react";
 import "react-hook-form";
 import "@hookform/resolvers/zod";

package/dist/modules/audit-trail/dist/libs/contracts/dist/data-views.js

@@ -0,0 +1 @@
+import "./registry-utils.js";

package/dist/modules/audit-trail/dist/libs/contracts/dist/docs/tech/contracts/openapi-export.docblock.js

@@ -3,8 +3,8 @@ import { registerDocBlocks } from "../../registry.js";
 //#region ../../modules/audit-trail/dist/libs/contracts/dist/docs/tech/contracts/openapi-export.docblock.js
 registerDocBlocks([{
 	id: "docs.tech.contracts.openapi-export",
-	title: "OpenAPI export (OpenAPI 3.1) from SpecRegistry",
-	summary: "Generate a deterministic OpenAPI document from a SpecRegistry using jsonSchemaForSpec + REST transport metadata.",
+	title: "OpenAPI export (OpenAPI 3.1) from OperationSpecRegistry",
+	summary: "Generate a deterministic OpenAPI document from a OperationSpecRegistry using jsonSchemaForSpec + REST transport metadata.",
 	kind: "reference",
 	visibility: "public",
 	route: "/docs/tech/contracts/openapi-export",
@@ -13,7 +13,7 @@ registerDocBlocks([{
 		"openapi",
 		"rest"
 	],
-	body: `## OpenAPI export (OpenAPI 3.1) from SpecRegistry
+	body: `## OpenAPI export (OpenAPI 3.1) from OperationSpecRegistry
 
 ### Purpose
 
@@ -42,9 +42,9 @@ contractspec openapi --registry ./src/registry.ts --out ./openapi.json
 
 The registry module must export one of:
 
-- \`registry: SpecRegistry\`
-- \`default(): SpecRegistry | Promise<SpecRegistry>\`
-- \`createRegistry(): SpecRegistry | Promise<SpecRegistry>\`
+- \`registry: OperationSpecRegistry\`
+- \`default(): OperationSpecRegistry | Promise<OperationSpecRegistry>\`
+- \`createRegistry(): OperationSpecRegistry | Promise<OperationSpecRegistry>\`
 
 ### Notes / limitations (current)
 

package/dist/modules/audit-trail/dist/libs/contracts/dist/docs/tech/contracts/openapi-export.docblock.js.map

@@ -1 +1 @@
-{"version":3,"file":"openapi-export.docblock.js","names":[],"sources":["../../../../../../../../../../../../modules/audit-trail/dist/libs/contracts/dist/docs/tech/contracts/openapi-export.docblock.js"],"sourcesContent":["import { registerDocBlocks } from \"../../registry.js\";\n\n//#region ../../libs/contracts/dist/docs/tech/contracts/openapi-export.docblock.js\nconst tech_contracts_openapi_export_DocBlocks = [{\n\tid: \"docs.tech.contracts.openapi-export\",\n\ttitle: \"OpenAPI export (OpenAPI 3.1) from SpecRegistry\",\n\tsummary: \"Generate a deterministic OpenAPI document from a SpecRegistry using jsonSchemaForSpec + REST transport metadata.\",\n\tkind: \"reference\",\n\tvisibility: \"public\",\n\troute: \"/docs/tech/contracts/openapi-export\",\n\ttags: [\n\t\t\"contracts\",\n\t\t\"openapi\",\n\t\t\"rest\"\n\t],\n\tbody: `## OpenAPI export (OpenAPI 3.1) from SpecRegistry\n\n### Purpose\n\nContractSpec specs can be exported into an **OpenAPI 3.1** document for tooling (SDK generation, docs, gateways).\n\nThe export is **spec-first**:\n\n- Uses \\`jsonSchemaForSpec(spec)\\` for input/output JSON Schema (from SchemaModel → zod → JSON Schema)\n- Uses \\`spec.transport.rest.method/path\\` when present\n- Falls back to deterministic defaults:\n  - Method: \\`POST\\` for commands, \\`GET\\` for queries\n  - Path: \\`defaultRestPath(name, version)\\` → \\`/<dot/name>/v<version>\\`\n\n### Library API\n\n- Function: \\`openApiForRegistry(registry, options?)\\`\n- Location: \\`@lssm/lib.contracts/openapi\\`\n\n### CLI\n\nExport OpenAPI from a registry module:\n\n\\`\\`\\`bash\ncontractspec openapi --registry ./src/registry.ts --out ./openapi.json\n\\`\\`\\`\n\nThe registry module must export one of:\n\n- \\`registry: SpecRegistry\\`\n- \\`default(): SpecRegistry | Promise<SpecRegistry>\\`\n- \\`createRegistry(): SpecRegistry | Promise<SpecRegistry>\\`\n\n### Notes / limitations (current)\n\n- Responses are generated as a basic \\`200\\` response (plus schemas when available).\n- Query (GET) inputs are currently represented as a JSON request body when an input schema exists.\n- Errors are not yet expanded into OpenAPI responses; that will be added when we standardize error envelopes.`\n}];\nregisterDocBlocks(tech_contracts_openapi_export_DocBlocks);\n\n//#endregion\n//# sourceMappingURL=openapi-export.docblock.js.map"],"mappings":";;;AAsDA,kBAnDgD,CAAC;CAChD,IAAI;CACJ,OAAO;CACP,SAAS;CACT,MAAM;CACN,YAAY;CACZ,OAAO;CACP,MAAM;EACL;EACA;EACA;EACA;CACD,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsCN,CAAC,CACwD"}
+{"version":3,"file":"openapi-export.docblock.js","names":[],"sources":["../../../../../../../../../../../../modules/audit-trail/dist/libs/contracts/dist/docs/tech/contracts/openapi-export.docblock.js"],"sourcesContent":["import { registerDocBlocks } from \"../../registry.js\";\n\n//#region ../../libs/contracts/dist/docs/tech/contracts/openapi-export.docblock.js\nconst tech_contracts_openapi_export_DocBlocks = [{\n\tid: \"docs.tech.contracts.openapi-export\",\n\ttitle: \"OpenAPI export (OpenAPI 3.1) from OperationSpecRegistry\",\n\tsummary: \"Generate a deterministic OpenAPI document from a OperationSpecRegistry using jsonSchemaForSpec + REST transport metadata.\",\n\tkind: \"reference\",\n\tvisibility: \"public\",\n\troute: \"/docs/tech/contracts/openapi-export\",\n\ttags: [\n\t\t\"contracts\",\n\t\t\"openapi\",\n\t\t\"rest\"\n\t],\n\tbody: `## OpenAPI export (OpenAPI 3.1) from OperationSpecRegistry\n\n### Purpose\n\nContractSpec specs can be exported into an **OpenAPI 3.1** document for tooling (SDK generation, docs, gateways).\n\nThe export is **spec-first**:\n\n- Uses \\`jsonSchemaForSpec(spec)\\` for input/output JSON Schema (from SchemaModel → zod → JSON Schema)\n- Uses \\`spec.transport.rest.method/path\\` when present\n- Falls back to deterministic defaults:\n  - Method: \\`POST\\` for commands, \\`GET\\` for queries\n  - Path: \\`defaultRestPath(name, version)\\` → \\`/<dot/name>/v<version>\\`\n\n### Library API\n\n- Function: \\`openApiForRegistry(registry, options?)\\`\n- Location: \\`@lssm/lib.contracts/openapi\\`\n\n### CLI\n\nExport OpenAPI from a registry module:\n\n\\`\\`\\`bash\ncontractspec openapi --registry ./src/registry.ts --out ./openapi.json\n\\`\\`\\`\n\nThe registry module must export one of:\n\n- \\`registry: OperationSpecRegistry\\`\n- \\`default(): OperationSpecRegistry | Promise<OperationSpecRegistry>\\`\n- \\`createRegistry(): OperationSpecRegistry | Promise<OperationSpecRegistry>\\`\n\n### Notes / limitations (current)\n\n- Responses are generated as a basic \\`200\\` response (plus schemas when available).\n- Query (GET) inputs are currently represented as a JSON request body when an input schema exists.\n- Errors are not yet expanded into OpenAPI responses; that will be added when we standardize error envelopes.`\n}];\nregisterDocBlocks(tech_contracts_openapi_export_DocBlocks);\n\n//#endregion\n//# sourceMappingURL=openapi-export.docblock.js.map"],"mappings":";;;AAsDA,kBAnDgD,CAAC;CAChD,IAAI;CACJ,OAAO;CACP,SAAS;CACT,MAAM;CACN,YAAY;CACZ,OAAO;CACP,MAAM;EACL;EACA;EACA;EACA;CACD,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsCN,CAAC,CACwD"}

package/dist/modules/audit-trail/dist/libs/contracts/dist/features.js

@@ -0,0 +1 @@
+import "./registry-utils.js";

package/dist/modules/audit-trail/dist/libs/contracts/dist/forms.js

@@ -0,0 +1 @@
+import "./registry-utils.js";

package/dist/modules/audit-trail/dist/libs/contracts/dist/index.js

@@ -1,5 +1,9 @@
 import "./schema/dist/index.js";
+import { init_registry_utils } from "./registry-utils.js";
+import "./data-views.js";
 import "./events.js";
+import "./features.js";
+import "./forms.js";
 import "./presentations.v2.js";
 import "./client/react/feature-render.js";
 import "./client/react/form-render.js";
@@ -58,6 +62,9 @@ import "./integrations/contracts.js";
 import "./knowledge/contracts.js";
 import "./regenerator/service.js";
 import "./regenerator/index.js";
+import "./workspace-config/contractsrc-schema.js";
+import "./workspace-config/index.js";
+import "./workflow/spec.js";
 import "./workflow/runner.js";
 import "./workflow/index.js";
 import "./docs/tech-contracts.docs.js";
@@ -66,3 +73,9 @@ import "./docs/index.js";
 import "./llm/exporters.js";
 import "./llm/prompts.js";
 import "./llm/index.js";
+
+//#region ../../modules/audit-trail/dist/libs/contracts/dist/index.js
+init_registry_utils();
+
+//#endregion
+//# sourceMappingURL=index.js.map