@lssm/example.saas-boilerplate 0.0.0-canary-20251217062139 → 0.0.0-canary-20251217072406

package/dist/libs/identity-rbac/dist/events.js

@@ -1 +1,522 @@
-import{l as e}from"./schema/dist/ScalarTypeEnum.js";import{t}from"./schema/dist/SchemaModel.js";import"./schema/dist/index.js";import{e as n}from"./contracts/dist/events.js";import"./contracts/dist/index.js";const r=new t({name:`UserCreatedPayload`,description:`Payload for user created event`,fields:{userId:{type:e.String_unsecure(),isOptional:!1},email:{type:e.EmailAddress(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}}),i=new t({name:`UserUpdatedPayload`,description:`Payload for user updated event`,fields:{userId:{type:e.String_unsecure(),isOptional:!1},updatedFields:{type:e.String_unsecure(),isOptional:!1,isArray:!0},updatedAt:{type:e.DateTime(),isOptional:!1}}}),a=new t({name:`UserDeletedPayload`,description:`Payload for user deleted event`,fields:{userId:{type:e.String_unsecure(),isOptional:!1},email:{type:e.EmailAddress(),isOptional:!1},deletedAt:{type:e.DateTime(),isOptional:!1}}}),o=new t({name:`UserEmailVerifiedPayload`,description:`Payload for user email verified event`,fields:{userId:{type:e.String_unsecure(),isOptional:!1},email:{type:e.EmailAddress(),isOptional:!1},verifiedAt:{type:e.DateTime(),isOptional:!1}}}),s=new t({name:`OrgCreatedPayload`,description:`Payload for org created event`,fields:{orgId:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!1},slug:{type:e.String_unsecure(),isOptional:!0},createdBy:{type:e.String_unsecure(),isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1}}}),c=new t({name:`OrgUpdatedPayload`,description:`Payload for org updated event`,fields:{orgId:{type:e.String_unsecure(),isOptional:!1},updatedFields:{type:e.String_unsecure(),isOptional:!1,isArray:!0},updatedBy:{type:e.String_unsecure(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),l=new t({name:`OrgDeletedPayload`,description:`Payload for org deleted event`,fields:{orgId:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!1},deletedBy:{type:e.String_unsecure(),isOptional:!1},deletedAt:{type:e.DateTime(),isOptional:!1}}}),u=new t({name:`OrgMemberAddedPayload`,description:`Payload for member added event`,fields:{orgId:{type:e.String_unsecure(),isOptional:!1},userId:{type:e.String_unsecure(),isOptional:!1},role:{type:e.String_unsecure(),isOptional:!1},invitedBy:{type:e.String_unsecure(),isOptional:!0},joinedAt:{type:e.DateTime(),isOptional:!1}}}),d=new t({name:`OrgMemberRemovedPayload`,description:`Payload for member removed event`,fields:{orgId:{type:e.String_unsecure(),isOptional:!1},userId:{type:e.String_unsecure(),isOptional:!1},removedBy:{type:e.String_unsecure(),isOptional:!0},reason:{type:e.String_unsecure(),isOptional:!0},removedAt:{type:e.DateTime(),isOptional:!1}}}),f=new t({name:`OrgMemberRoleChangedPayload`,description:`Payload for member role changed event`,fields:{orgId:{type:e.String_unsecure(),isOptional:!1},userId:{type:e.String_unsecure(),isOptional:!1},previousRole:{type:e.String_unsecure(),isOptional:!1},newRole:{type:e.String_unsecure(),isOptional:!1},changedBy:{type:e.String_unsecure(),isOptional:!1},changedAt:{type:e.DateTime(),isOptional:!1}}}),p=new t({name:`OrgInviteSentPayload`,description:`Payload for invite sent event`,fields:{invitationId:{type:e.String_unsecure(),isOptional:!1},orgId:{type:e.String_unsecure(),isOptional:!1},email:{type:e.EmailAddress(),isOptional:!1},role:{type:e.String_unsecure(),isOptional:!1},invitedBy:{type:e.String_unsecure(),isOptional:!1},expiresAt:{type:e.DateTime(),isOptional:!0},sentAt:{type:e.DateTime(),isOptional:!1}}}),m=new t({name:`OrgInviteAcceptedPayload`,description:`Payload for invite accepted event`,fields:{invitationId:{type:e.String_unsecure(),isOptional:!1},orgId:{type:e.String_unsecure(),isOptional:!1},userId:{type:e.String_unsecure(),isOptional:!1},acceptedAt:{type:e.DateTime(),isOptional:!1}}}),h=new t({name:`OrgInviteDeclinedPayload`,description:`Payload for invite declined event`,fields:{invitationId:{type:e.String_unsecure(),isOptional:!1},orgId:{type:e.String_unsecure(),isOptional:!1},declinedAt:{type:e.DateTime(),isOptional:!1}}}),g=new t({name:`RoleAssignedPayload`,description:`Payload for role assigned event`,fields:{bindingId:{type:e.String_unsecure(),isOptional:!1},roleId:{type:e.String_unsecure(),isOptional:!1},roleName:{type:e.String_unsecure(),isOptional:!1},targetType:{type:e.String_unsecure(),isOptional:!1},targetId:{type:e.String_unsecure(),isOptional:!1},assignedBy:{type:e.String_unsecure(),isOptional:!1},expiresAt:{type:e.DateTime(),isOptional:!0},assignedAt:{type:e.DateTime(),isOptional:!1}}}),_=new t({name:`RoleRevokedPayload`,description:`Payload for role revoked event`,fields:{bindingId:{type:e.String_unsecure(),isOptional:!1},roleId:{type:e.String_unsecure(),isOptional:!1},roleName:{type:e.String_unsecure(),isOptional:!1},targetType:{type:e.String_unsecure(),isOptional:!1},targetId:{type:e.String_unsecure(),isOptional:!1},revokedBy:{type:e.String_unsecure(),isOptional:!1},revokedAt:{type:e.DateTime(),isOptional:!1}}}),v=n({name:`user.created`,version:1,description:`A new user has been created.`,payload:r}),y=n({name:`user.updated`,version:1,description:`A user profile has been updated.`,payload:i}),b=n({name:`user.deleted`,version:1,description:`A user account has been deleted.`,pii:[`email`],payload:a}),x=n({name:`user.email_verified`,version:1,description:`A user has verified their email address.`,payload:o}),S=n({name:`org.created`,version:1,description:`A new organization has been created.`,payload:s}),C=n({name:`org.updated`,version:1,description:`An organization has been updated.`,payload:c}),w=n({name:`org.deleted`,version:1,description:`An organization has been deleted.`,payload:l}),T=n({name:`org.member.added`,version:1,description:`A user has joined an organization.`,payload:u}),E=n({name:`org.member.removed`,version:1,description:`A user has left or been removed from an organization.`,payload:d}),D=n({name:`org.member.role_changed`,version:1,description:`A member's role in an organization has changed.`,payload:f}),O=n({name:`org.invite.sent`,version:1,description:`An invitation to join an organization has been sent.`,pii:[`email`],payload:p}),k=n({name:`org.invite.accepted`,version:1,description:`An invitation has been accepted.`,payload:m}),A=n({name:`org.invite.declined`,version:1,description:`An invitation has been declined.`,payload:h}),j=n({name:`role.assigned`,version:1,description:`A role has been assigned.`,payload:g}),M=n({name:`role.revoked`,version:1,description:`A role has been revoked.`,payload:_});export{A,C,D,E,M,O,S,T,b,j,k,v,w,x,y};
+import { ScalarTypeEnum } from "./schema/dist/ScalarTypeEnum.js";
+import { SchemaModel } from "./schema/dist/SchemaModel.js";
+import "./schema/dist/index.js";
+import { defineEvent } from "./contracts/dist/events.js";
+import "./contracts/dist/index.js";
+
+//#region ../../libs/identity-rbac/dist/events.js
+const UserCreatedPayload = new SchemaModel({
+	name: "UserCreatedPayload",
+	description: "Payload for user created event",
+	fields: {
+		userId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		email: {
+			type: ScalarTypeEnum.EmailAddress(),
+			isOptional: false
+		},
+		name: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		createdAt: {
+			type: ScalarTypeEnum.DateTime(),
+			isOptional: false
+		}
+	}
+});
+const UserUpdatedPayload = new SchemaModel({
+	name: "UserUpdatedPayload",
+	description: "Payload for user updated event",
+	fields: {
+		userId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		updatedFields: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false,
+			isArray: true
+		},
+		updatedAt: {
+			type: ScalarTypeEnum.DateTime(),
+			isOptional: false
+		}
+	}
+});
+const UserDeletedPayload = new SchemaModel({
+	name: "UserDeletedPayload",
+	description: "Payload for user deleted event",
+	fields: {
+		userId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		email: {
+			type: ScalarTypeEnum.EmailAddress(),
+			isOptional: false
+		},
+		deletedAt: {
+			type: ScalarTypeEnum.DateTime(),
+			isOptional: false
+		}
+	}
+});
+const UserEmailVerifiedPayload = new SchemaModel({
+	name: "UserEmailVerifiedPayload",
+	description: "Payload for user email verified event",
+	fields: {
+		userId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		email: {
+			type: ScalarTypeEnum.EmailAddress(),
+			isOptional: false
+		},
+		verifiedAt: {
+			type: ScalarTypeEnum.DateTime(),
+			isOptional: false
+		}
+	}
+});
+const OrgCreatedPayload = new SchemaModel({
+	name: "OrgCreatedPayload",
+	description: "Payload for org created event",
+	fields: {
+		orgId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		name: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		slug: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		createdBy: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		createdAt: {
+			type: ScalarTypeEnum.DateTime(),
+			isOptional: false
+		}
+	}
+});
+const OrgUpdatedPayload = new SchemaModel({
+	name: "OrgUpdatedPayload",
+	description: "Payload for org updated event",
+	fields: {
+		orgId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		updatedFields: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false,
+			isArray: true
+		},
+		updatedBy: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		updatedAt: {
+			type: ScalarTypeEnum.DateTime(),
+			isOptional: false
+		}
+	}
+});
+const OrgDeletedPayload = new SchemaModel({
+	name: "OrgDeletedPayload",
+	description: "Payload for org deleted event",
+	fields: {
+		orgId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		name: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		deletedBy: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		deletedAt: {
+			type: ScalarTypeEnum.DateTime(),
+			isOptional: false
+		}
+	}
+});
+const OrgMemberAddedPayload = new SchemaModel({
+	name: "OrgMemberAddedPayload",
+	description: "Payload for member added event",
+	fields: {
+		orgId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		userId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		role: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		invitedBy: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		joinedAt: {
+			type: ScalarTypeEnum.DateTime(),
+			isOptional: false
+		}
+	}
+});
+const OrgMemberRemovedPayload = new SchemaModel({
+	name: "OrgMemberRemovedPayload",
+	description: "Payload for member removed event",
+	fields: {
+		orgId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		userId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		removedBy: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		reason: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		removedAt: {
+			type: ScalarTypeEnum.DateTime(),
+			isOptional: false
+		}
+	}
+});
+const OrgMemberRoleChangedPayload = new SchemaModel({
+	name: "OrgMemberRoleChangedPayload",
+	description: "Payload for member role changed event",
+	fields: {
+		orgId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		userId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		previousRole: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		newRole: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		changedBy: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		changedAt: {
+			type: ScalarTypeEnum.DateTime(),
+			isOptional: false
+		}
+	}
+});
+const OrgInviteSentPayload = new SchemaModel({
+	name: "OrgInviteSentPayload",
+	description: "Payload for invite sent event",
+	fields: {
+		invitationId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		orgId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		email: {
+			type: ScalarTypeEnum.EmailAddress(),
+			isOptional: false
+		},
+		role: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		invitedBy: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		expiresAt: {
+			type: ScalarTypeEnum.DateTime(),
+			isOptional: true
+		},
+		sentAt: {
+			type: ScalarTypeEnum.DateTime(),
+			isOptional: false
+		}
+	}
+});
+const OrgInviteAcceptedPayload = new SchemaModel({
+	name: "OrgInviteAcceptedPayload",
+	description: "Payload for invite accepted event",
+	fields: {
+		invitationId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		orgId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		userId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		acceptedAt: {
+			type: ScalarTypeEnum.DateTime(),
+			isOptional: false
+		}
+	}
+});
+const OrgInviteDeclinedPayload = new SchemaModel({
+	name: "OrgInviteDeclinedPayload",
+	description: "Payload for invite declined event",
+	fields: {
+		invitationId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		orgId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		declinedAt: {
+			type: ScalarTypeEnum.DateTime(),
+			isOptional: false
+		}
+	}
+});
+const RoleAssignedPayload = new SchemaModel({
+	name: "RoleAssignedPayload",
+	description: "Payload for role assigned event",
+	fields: {
+		bindingId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		roleId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		roleName: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		targetType: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		targetId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		assignedBy: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		expiresAt: {
+			type: ScalarTypeEnum.DateTime(),
+			isOptional: true
+		},
+		assignedAt: {
+			type: ScalarTypeEnum.DateTime(),
+			isOptional: false
+		}
+	}
+});
+const RoleRevokedPayload = new SchemaModel({
+	name: "RoleRevokedPayload",
+	description: "Payload for role revoked event",
+	fields: {
+		bindingId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		roleId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		roleName: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		targetType: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		targetId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		revokedBy: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		revokedAt: {
+			type: ScalarTypeEnum.DateTime(),
+			isOptional: false
+		}
+	}
+});
+/**
+* Emitted when a new user is created.
+*/
+const UserCreatedEvent = defineEvent({
+	name: "user.created",
+	version: 1,
+	description: "A new user has been created.",
+	payload: UserCreatedPayload
+});
+/**
+* Emitted when a user profile is updated.
+*/
+const UserUpdatedEvent = defineEvent({
+	name: "user.updated",
+	version: 1,
+	description: "A user profile has been updated.",
+	payload: UserUpdatedPayload
+});
+/**
+* Emitted when a user is deleted.
+*/
+const UserDeletedEvent = defineEvent({
+	name: "user.deleted",
+	version: 1,
+	description: "A user account has been deleted.",
+	pii: ["email"],
+	payload: UserDeletedPayload
+});
+/**
+* Emitted when a user's email is verified.
+*/
+const UserEmailVerifiedEvent = defineEvent({
+	name: "user.email_verified",
+	version: 1,
+	description: "A user has verified their email address.",
+	payload: UserEmailVerifiedPayload
+});
+/**
+* Emitted when a new organization is created.
+*/
+const OrgCreatedEvent = defineEvent({
+	name: "org.created",
+	version: 1,
+	description: "A new organization has been created.",
+	payload: OrgCreatedPayload
+});
+/**
+* Emitted when an organization is updated.
+*/
+const OrgUpdatedEvent = defineEvent({
+	name: "org.updated",
+	version: 1,
+	description: "An organization has been updated.",
+	payload: OrgUpdatedPayload
+});
+/**
+* Emitted when an organization is deleted.
+*/
+const OrgDeletedEvent = defineEvent({
+	name: "org.deleted",
+	version: 1,
+	description: "An organization has been deleted.",
+	payload: OrgDeletedPayload
+});
+/**
+* Emitted when a member joins an organization.
+*/
+const OrgMemberAddedEvent = defineEvent({
+	name: "org.member.added",
+	version: 1,
+	description: "A user has joined an organization.",
+	payload: OrgMemberAddedPayload
+});
+/**
+* Emitted when a member leaves or is removed from an organization.
+*/
+const OrgMemberRemovedEvent = defineEvent({
+	name: "org.member.removed",
+	version: 1,
+	description: "A user has left or been removed from an organization.",
+	payload: OrgMemberRemovedPayload
+});
+/**
+* Emitted when a member's role is changed.
+*/
+const OrgMemberRoleChangedEvent = defineEvent({
+	name: "org.member.role_changed",
+	version: 1,
+	description: "A member's role in an organization has changed.",
+	payload: OrgMemberRoleChangedPayload
+});
+/**
+* Emitted when an invitation is sent.
+*/
+const OrgInviteSentEvent = defineEvent({
+	name: "org.invite.sent",
+	version: 1,
+	description: "An invitation to join an organization has been sent.",
+	pii: ["email"],
+	payload: OrgInviteSentPayload
+});
+/**
+* Emitted when an invitation is accepted.
+*/
+const OrgInviteAcceptedEvent = defineEvent({
+	name: "org.invite.accepted",
+	version: 1,
+	description: "An invitation has been accepted.",
+	payload: OrgInviteAcceptedPayload
+});
+/**
+* Emitted when an invitation is declined.
+*/
+const OrgInviteDeclinedEvent = defineEvent({
+	name: "org.invite.declined",
+	version: 1,
+	description: "An invitation has been declined.",
+	payload: OrgInviteDeclinedPayload
+});
+/**
+* Emitted when a role is assigned to a user or organization.
+*/
+const RoleAssignedEvent = defineEvent({
+	name: "role.assigned",
+	version: 1,
+	description: "A role has been assigned.",
+	payload: RoleAssignedPayload
+});
+/**
+* Emitted when a role is revoked from a user or organization.
+*/
+const RoleRevokedEvent = defineEvent({
+	name: "role.revoked",
+	version: 1,
+	description: "A role has been revoked.",
+	payload: RoleRevokedPayload
+});
+
+//#endregion

package/dist/libs/identity-rbac/dist/index.js

@@ -1 +1,11 @@
-import{A as e,C as t,D as n,E as r,M as i,O as a,S as o,T as s,b as c,j as l,k as u,v as d,w as f,x as p,y as m}from"./events.js";import{a as h,i as g,o as _,r as v}from"./entities/user.js";import{a as y,c as b,i as x,l as S,o as C,s as w}from"./entities/organization.js";import{a as T,i as E,o as D,r as O,s as k}from"./entities/rbac.js";import{g as A,h as j}from"./entities/index.js";import{a as M,c as N,d as P,f as F,l as I,o as L,s as R,u as z}from"./contracts/user.js";import{_ as B,b as V,c as H,d as U,f as W,g as G,h as K,l as q,m as J,o as Y,p as X,s as Z,u as Q,v as $,y as ee}from"./contracts/organization.js";import{_ as te,c as ne,d as re,f as ie,g as ae,h as oe,l as se,m as ce,o as le,p as ue,s as de,u as fe,v as pe}from"./contracts/rbac.js";import"./contracts/index.js";import{e as me}from"./policies/engine.js";import"./policies/index.js";
+import "./events.js";
+import { AccountEntity, SessionEntity, UserEntity, VerificationEntity } from "./entities/user.js";
+import { InvitationEntity, MemberEntity, OrganizationEntity, OrganizationTypeEnum, TeamEntity, TeamMemberEntity } from "./entities/organization.js";
+import { ApiKeyEntity, PasskeyEntity, PermissionEntity, PolicyBindingEntity, RoleEntity } from "./entities/rbac.js";
+import { identityRbacEntities, identityRbacSchemaContribution } from "./entities/index.js";
+import { CreateUserInputModel, DeleteUserInputModel, ListUsersInputModel, ListUsersOutputModel, SuccessResultModel, UpdateUserInputModel, UserDeletedPayloadModel, UserProfileModel } from "./contracts/user.js";
+import { AcceptInviteInputModel, CreateOrgInputModel, GetOrgInputModel, InvitationModel, InviteMemberInputModel, ListMembersInputModel, ListMembersOutputModel, ListUserOrgsOutputModel, MemberModel, MemberRemovedPayloadModel, MemberUserModel, OrganizationModel, OrganizationWithRoleModel, RemoveMemberInputModel, UpdateOrgInputModel } from "./contracts/organization.js";
+import { AssignRoleInputModel, BindingIdPayloadModel, CheckPermissionInputModel, CreateRoleInputModel, DeleteRoleInputModel, ListRolesOutputModel, ListUserPermissionsInputModel, ListUserPermissionsOutputModel, PermissionCheckResultModel, PolicyBindingModel, RevokeRoleInputModel, RoleModel, UpdateRoleInputModel } from "./contracts/rbac.js";
+import "./contracts/index.js";
+import { Permission } from "./policies/engine.js";
+import "./policies/index.js";

package/dist/libs/identity-rbac/dist/policies/engine.js

@@ -1 +1,99 @@
-const e={USER_CREATE:`user.create`,USER_READ:`user.read`,USER_UPDATE:`user.update`,USER_DELETE:`user.delete`,USER_LIST:`user.list`,USER_MANAGE:`user.manage`,ORG_CREATE:`org.create`,ORG_READ:`org.read`,ORG_UPDATE:`org.update`,ORG_DELETE:`org.delete`,ORG_LIST:`org.list`,MEMBER_INVITE:`member.invite`,MEMBER_REMOVE:`member.remove`,MEMBER_UPDATE_ROLE:`member.update_role`,MEMBER_LIST:`member.list`,MANAGE_MEMBERS:`org.manage_members`,TEAM_CREATE:`team.create`,TEAM_UPDATE:`team.update`,TEAM_DELETE:`team.delete`,TEAM_MANAGE:`team.manage`,ROLE_CREATE:`role.create`,ROLE_UPDATE:`role.update`,ROLE_DELETE:`role.delete`,ROLE_ASSIGN:`role.assign`,ROLE_REVOKE:`role.revoke`,BILLING_VIEW:`billing.view`,BILLING_MANAGE:`billing.manage`,PROJECT_CREATE:`project.create`,PROJECT_READ:`project.read`,PROJECT_UPDATE:`project.update`,PROJECT_DELETE:`project.delete`,PROJECT_MANAGE:`project.manage`,ADMIN_ACCESS:`admin.access`,ADMIN_IMPERSONATE:`admin.impersonate`};Object.values(e),e.USER_READ,e.USER_LIST,e.ORG_READ,e.ORG_UPDATE,e.MEMBER_INVITE,e.MEMBER_REMOVE,e.MEMBER_UPDATE_ROLE,e.MEMBER_LIST,e.MANAGE_MEMBERS,e.TEAM_CREATE,e.TEAM_UPDATE,e.TEAM_DELETE,e.TEAM_MANAGE,e.PROJECT_CREATE,e.PROJECT_READ,e.PROJECT_UPDATE,e.PROJECT_DELETE,e.PROJECT_MANAGE,e.BILLING_VIEW,e.USER_READ,e.ORG_READ,e.MEMBER_LIST,e.PROJECT_READ,e.PROJECT_CREATE,e.USER_READ,e.ORG_READ,e.MEMBER_LIST,e.PROJECT_READ;export{e};
+//#region ../../libs/identity-rbac/dist/policies/engine.js
+/**
+* Standard permissions for identity-rbac module.
+*/
+const Permission = {
+	USER_CREATE: "user.create",
+	USER_READ: "user.read",
+	USER_UPDATE: "user.update",
+	USER_DELETE: "user.delete",
+	USER_LIST: "user.list",
+	USER_MANAGE: "user.manage",
+	ORG_CREATE: "org.create",
+	ORG_READ: "org.read",
+	ORG_UPDATE: "org.update",
+	ORG_DELETE: "org.delete",
+	ORG_LIST: "org.list",
+	MEMBER_INVITE: "member.invite",
+	MEMBER_REMOVE: "member.remove",
+	MEMBER_UPDATE_ROLE: "member.update_role",
+	MEMBER_LIST: "member.list",
+	MANAGE_MEMBERS: "org.manage_members",
+	TEAM_CREATE: "team.create",
+	TEAM_UPDATE: "team.update",
+	TEAM_DELETE: "team.delete",
+	TEAM_MANAGE: "team.manage",
+	ROLE_CREATE: "role.create",
+	ROLE_UPDATE: "role.update",
+	ROLE_DELETE: "role.delete",
+	ROLE_ASSIGN: "role.assign",
+	ROLE_REVOKE: "role.revoke",
+	BILLING_VIEW: "billing.view",
+	BILLING_MANAGE: "billing.manage",
+	PROJECT_CREATE: "project.create",
+	PROJECT_READ: "project.read",
+	PROJECT_UPDATE: "project.update",
+	PROJECT_DELETE: "project.delete",
+	PROJECT_MANAGE: "project.manage",
+	ADMIN_ACCESS: "admin.access",
+	ADMIN_IMPERSONATE: "admin.impersonate"
+};
+/**
+* Standard role definitions.
+*/
+const StandardRole = {
+	OWNER: {
+		name: "owner",
+		description: "Organization owner with full access",
+		permissions: Object.values(Permission)
+	},
+	ADMIN: {
+		name: "admin",
+		description: "Administrator with most permissions",
+		permissions: [
+			Permission.USER_READ,
+			Permission.USER_LIST,
+			Permission.ORG_READ,
+			Permission.ORG_UPDATE,
+			Permission.MEMBER_INVITE,
+			Permission.MEMBER_REMOVE,
+			Permission.MEMBER_UPDATE_ROLE,
+			Permission.MEMBER_LIST,
+			Permission.MANAGE_MEMBERS,
+			Permission.TEAM_CREATE,
+			Permission.TEAM_UPDATE,
+			Permission.TEAM_DELETE,
+			Permission.TEAM_MANAGE,
+			Permission.PROJECT_CREATE,
+			Permission.PROJECT_READ,
+			Permission.PROJECT_UPDATE,
+			Permission.PROJECT_DELETE,
+			Permission.PROJECT_MANAGE,
+			Permission.BILLING_VIEW
+		]
+	},
+	MEMBER: {
+		name: "member",
+		description: "Regular organization member",
+		permissions: [
+			Permission.USER_READ,
+			Permission.ORG_READ,
+			Permission.MEMBER_LIST,
+			Permission.PROJECT_READ,
+			Permission.PROJECT_CREATE
+		]
+	},
+	VIEWER: {
+		name: "viewer",
+		description: "Read-only access",
+		permissions: [
+			Permission.USER_READ,
+			Permission.ORG_READ,
+			Permission.MEMBER_LIST,
+			Permission.PROJECT_READ
+		]
+	}
+};
+
+//#endregion
+export { Permission };

package/dist/libs/identity-rbac/dist/policies/index.js

@@ -1 +1 @@
-import{e}from"./engine.js";
+import { Permission } from "./engine.js";

package/dist/libs/identity-rbac/dist/schema/dist/EnumType.js

@@ -1 +1,2 @@
-import"zod";import"graphql";
+import "zod";
+import "graphql";

package/dist/libs/identity-rbac/dist/schema/dist/FieldType.js

@@ -1 +1,49 @@
-import"zod";import{GraphQLScalarType as e}from"graphql";var t=class extends e{zodSchema;jsonSchemaDef;constructor(e){super(e),this.zodSchema=e.zod,this.jsonSchemaDef=e.jsonSchema}getZod(){return this.zodSchema}getPothos(){return this}getJson(){return typeof this.jsonSchemaDef==`function`?this.jsonSchemaDef():this.jsonSchemaDef}getJsonSchemaDef(){return this.jsonSchemaDef}getJsonSchema(){let e=t=>{let n=typeof t==`function`?t():t;if(Array.isArray(n))return n.map(t=>e(t));if(n&&typeof n==`object`){let t={};for(let[r,i]of Object.entries(n))t[r]=e(i);return t}return n};return e(this.getJson())}};export{t};
+import "zod";
+import { GraphQLScalarType } from "graphql";
+
+//#region ../../libs/identity-rbac/dist/schema/dist/FieldType.js
+/**
+* GraphQL scalar wrapper that carries zod and JSON Schema metadata.
+*
+* TInternal is the runtime representation; TExternal is the GraphQL output.
+*/
+var FieldType = class extends GraphQLScalarType {
+	zodSchema;
+	jsonSchemaDef;
+	constructor(config) {
+		super(config);
+		this.zodSchema = config.zod;
+		this.jsonSchemaDef = config.jsonSchema;
+	}
+	/** Return the attached zod schema for validation. */
+	getZod() {
+		return this.zodSchema;
+	}
+	/** GraphQL scalar instance usable by Pothos or vanilla GraphQL. */
+	getPothos() {
+		return this;
+	}
+	/** Return the JSON Schema (evaluates factory if provided). */
+	getJson() {
+		return typeof this.jsonSchemaDef === "function" ? this.jsonSchemaDef() : this.jsonSchemaDef;
+	}
+	getJsonSchemaDef() {
+		return this.jsonSchemaDef;
+	}
+	getJsonSchema() {
+		const deepResolve = (v) => {
+			const value = typeof v === "function" ? v() : v;
+			if (Array.isArray(value)) return value.map((item) => deepResolve(item));
+			if (value && typeof value === "object") {
+				const obj = {};
+				for (const [k, val] of Object.entries(value)) obj[k] = deepResolve(val);
+				return obj;
+			}
+			return value;
+		};
+		return deepResolve(this.getJson());
+	}
+};
+
+//#endregion
+export { FieldType };