@lssm/example.saas-boilerplate 0.0.0-canary-20251217062139 → 0.0.0-canary-20251217072406

package/dist/modules/audit-trail/dist/entities/index.js

@@ -1 +1,126 @@
-import{n as e,r as t,t as n}from"../libs/schema/dist/entity/defineEntity.js";import"../libs/schema/dist/index.js";const r=n({name:`AuditLog`,description:`Audit log entry for tracking system events.`,schema:`lssm_audit`,map:`audit_log`,fields:{id:e.id({description:`Unique audit log ID`}),eventName:e.string({description:`Event name/type`}),eventVersion:e.int({description:`Event version`}),payload:e.json({description:`Event payload (may be redacted)`}),actorId:e.string({isOptional:!0,description:`User/service that triggered the event`}),actorType:e.string({isOptional:!0,description:`Actor type (user, system, service)`}),actorEmail:e.string({isOptional:!0,description:`Actor email (for searchability)`}),targetId:e.string({isOptional:!0,description:`Resource affected by the event`}),targetType:e.string({isOptional:!0,description:`Resource type`}),orgId:e.string({isOptional:!0,description:`Organization context`}),tenantId:e.string({isOptional:!0,description:`Tenant context`}),traceId:e.string({isOptional:!0,description:`Distributed trace ID`}),spanId:e.string({isOptional:!0,description:`Span ID`}),requestId:e.string({isOptional:!0,description:`Request ID`}),sessionId:e.string({isOptional:!0,description:`Session ID`}),clientIp:e.string({isOptional:!0,description:`Client IP address`}),userAgent:e.string({isOptional:!0,description:`User agent string`}),tags:e.json({isOptional:!0,description:`Custom tags for filtering`}),metadata:e.json({isOptional:!0,description:`Additional metadata`}),occurredAt:e.dateTime({description:`When the event occurred`}),recordedAt:e.createdAt({description:`When the log was recorded`})},indexes:[t.on([`actorId`,`occurredAt`]),t.on([`targetId`,`occurredAt`]),t.on([`orgId`,`occurredAt`]),t.on([`eventName`,`occurredAt`]),t.on([`traceId`]),t.on([`occurredAt`])]}),i=n({name:`AuditLogArchive`,description:`Archived audit logs for long-term retention.`,schema:`lssm_audit`,map:`audit_log_archive`,fields:{id:e.id(),batchId:e.string({description:`Archive batch ID`}),logCount:e.int({description:`Number of logs in batch`}),fromDate:e.dateTime({description:`Earliest log in batch`}),toDate:e.dateTime({description:`Latest log in batch`}),storagePath:e.string({description:`Path to archived data`}),storageType:e.string({description:`Storage type (s3, gcs, file)`}),compressedSize:e.int({description:`Compressed size in bytes`}),checksum:e.string({description:`SHA-256 checksum`}),retainUntil:e.dateTime({description:`When archive can be deleted`}),createdAt:e.createdAt()},indexes:[t.on([`fromDate`,`toDate`]),t.on([`retainUntil`])]}),a=[r,i],o={moduleId:`@lssm/module.audit-trail`,entities:a};export{a,i,o,r};
+import { defineEntity, field, index } from "../libs/schema/dist/entity/defineEntity.js";
+import "../libs/schema/dist/index.js";
+
+//#region ../../modules/audit-trail/dist/entities/index.js
+/**
+* AuditLog entity - main audit log entry.
+*/
+const AuditLogEntity = defineEntity({
+	name: "AuditLog",
+	description: "Audit log entry for tracking system events.",
+	schema: "lssm_audit",
+	map: "audit_log",
+	fields: {
+		id: field.id({ description: "Unique audit log ID" }),
+		eventName: field.string({ description: "Event name/type" }),
+		eventVersion: field.int({ description: "Event version" }),
+		payload: field.json({ description: "Event payload (may be redacted)" }),
+		actorId: field.string({
+			isOptional: true,
+			description: "User/service that triggered the event"
+		}),
+		actorType: field.string({
+			isOptional: true,
+			description: "Actor type (user, system, service)"
+		}),
+		actorEmail: field.string({
+			isOptional: true,
+			description: "Actor email (for searchability)"
+		}),
+		targetId: field.string({
+			isOptional: true,
+			description: "Resource affected by the event"
+		}),
+		targetType: field.string({
+			isOptional: true,
+			description: "Resource type"
+		}),
+		orgId: field.string({
+			isOptional: true,
+			description: "Organization context"
+		}),
+		tenantId: field.string({
+			isOptional: true,
+			description: "Tenant context"
+		}),
+		traceId: field.string({
+			isOptional: true,
+			description: "Distributed trace ID"
+		}),
+		spanId: field.string({
+			isOptional: true,
+			description: "Span ID"
+		}),
+		requestId: field.string({
+			isOptional: true,
+			description: "Request ID"
+		}),
+		sessionId: field.string({
+			isOptional: true,
+			description: "Session ID"
+		}),
+		clientIp: field.string({
+			isOptional: true,
+			description: "Client IP address"
+		}),
+		userAgent: field.string({
+			isOptional: true,
+			description: "User agent string"
+		}),
+		tags: field.json({
+			isOptional: true,
+			description: "Custom tags for filtering"
+		}),
+		metadata: field.json({
+			isOptional: true,
+			description: "Additional metadata"
+		}),
+		occurredAt: field.dateTime({ description: "When the event occurred" }),
+		recordedAt: field.createdAt({ description: "When the log was recorded" })
+	},
+	indexes: [
+		index.on(["actorId", "occurredAt"]),
+		index.on(["targetId", "occurredAt"]),
+		index.on(["orgId", "occurredAt"]),
+		index.on(["eventName", "occurredAt"]),
+		index.on(["traceId"]),
+		index.on(["occurredAt"])
+	]
+});
+/**
+* AuditLogArchive entity - archived logs for long-term retention.
+*/
+const AuditLogArchiveEntity = defineEntity({
+	name: "AuditLogArchive",
+	description: "Archived audit logs for long-term retention.",
+	schema: "lssm_audit",
+	map: "audit_log_archive",
+	fields: {
+		id: field.id(),
+		batchId: field.string({ description: "Archive batch ID" }),
+		logCount: field.int({ description: "Number of logs in batch" }),
+		fromDate: field.dateTime({ description: "Earliest log in batch" }),
+		toDate: field.dateTime({ description: "Latest log in batch" }),
+		storagePath: field.string({ description: "Path to archived data" }),
+		storageType: field.string({ description: "Storage type (s3, gcs, file)" }),
+		compressedSize: field.int({ description: "Compressed size in bytes" }),
+		checksum: field.string({ description: "SHA-256 checksum" }),
+		retainUntil: field.dateTime({ description: "When archive can be deleted" }),
+		createdAt: field.createdAt()
+	},
+	indexes: [index.on(["fromDate", "toDate"]), index.on(["retainUntil"])]
+});
+/**
+* All audit trail entities for schema composition.
+*/
+const auditTrailEntities = [AuditLogEntity, AuditLogArchiveEntity];
+/**
+* Module schema contribution for audit trail.
+*/
+const auditTrailSchemaContribution = {
+	moduleId: "@lssm/module.audit-trail",
+	entities: auditTrailEntities
+};
+
+//#endregion
+export { AuditLogArchiveEntity, AuditLogEntity, auditTrailEntities, auditTrailSchemaContribution };

package/dist/modules/audit-trail/dist/index.js

@@ -1 +1,2 @@
-import{a as e,i as t,o as n,r}from"./entities/index.js";import{c as i,d as a,f as o,l as s,m as c,o as l,p as u,s as d,u as f}from"./contracts/index.js";
+import { AuditLogArchiveEntity, AuditLogEntity, auditTrailEntities, auditTrailSchemaContribution } from "./entities/index.js";
+import { AuditExportInputModel, AuditExportOutputModel, AuditLogModel, AuditQueryInputModel, AuditQueryOutputModel, AuditStatsInputModel, AuditStatsOutputModel, ExportFormatEnum, ExportStatusEnum } from "./contracts/index.js";

package/dist/modules/audit-trail/dist/libs/contracts/dist/capabilities/openbanking.js

@@ -1 +1,10 @@
-import{e}from"../ownership.js";const t=[`platform.finance`],n=[`open-banking`,`finance`];[...t],[...n],e.Experimental,[...t],[...n],e.Experimental,[...t],[...n],e.Experimental;
+import { StabilityEnum } from "../ownership.js";
+
+//#region ../../modules/audit-trail/dist/libs/contracts/dist/capabilities/openbanking.js
+const OWNERS = ["platform.finance"];
+const TAGS = ["open-banking", "finance"];
+[...OWNERS], [...TAGS], StabilityEnum.Experimental;
+[...OWNERS], [...TAGS], StabilityEnum.Experimental;
+[...OWNERS], [...TAGS], StabilityEnum.Experimental;
+
+//#endregion

package/dist/modules/audit-trail/dist/libs/contracts/dist/client/index.js

@@ -1 +1,5 @@
-"use client";import"./react/feature-render.js";import"./react/form-render.js";import"./react/index.js";
+'use client';
+
+import "./react/feature-render.js";
+import "./react/form-render.js";
+import "./react/index.js";

package/dist/modules/audit-trail/dist/libs/contracts/dist/client/react/feature-render.js

@@ -1 +1,2 @@
-import"../../presentations.v2.js";import"react";
+import "../../presentations.v2.js";
+import "react";

package/dist/modules/audit-trail/dist/libs/contracts/dist/client/react/form-render.js

@@ -1 +1,4 @@
-import"react";import"react-hook-form";import"@hookform/resolvers/zod";import"react/jsx-runtime";
+import "react";
+import "react-hook-form";
+import "@hookform/resolvers/zod";
+import "react/jsx-runtime";

package/dist/modules/audit-trail/dist/libs/contracts/dist/client/react/index.js

@@ -1 +1,4 @@
-"use client";import"./feature-render.js";import"./form-render.js";
+'use client';
+
+import "./feature-render.js";
+import "./form-render.js";

package/dist/modules/audit-trail/dist/libs/contracts/dist/contract-registry/index.js

@@ -1 +1 @@
-import"./schemas.js";
+import "./schemas.js";

package/dist/modules/audit-trail/dist/libs/contracts/dist/contract-registry/schemas.js

@@ -1 +1,59 @@
-import{e}from"../ownership.js";import t from"zod";const n=t.enum([`contractspec:operation`,`contractspec:event`,`contractspec:presentation`,`contractspec:form`,`contractspec:feature`,`contractspec:workflow`,`contractspec:template`,`contractspec:integration`,`contractspec:data-view`,`contractspec:migration`,`contractspec:telemetry`,`contractspec:experiment`,`contractspec:app-config`,`contractspec:knowledge`]),r=t.object({path:t.string().min(1),type:t.string().min(1),content:t.string().optional()}),i=t.object({name:t.string().min(1),type:n,version:t.number().int().nonnegative(),title:t.string().min(1),description:t.string().min(1),meta:t.object({stability:t.enum([e.Idea,e.InCreation,e.Experimental,e.Beta,e.Stable,e.Deprecated]),owners:t.array(t.string().min(1)).default([]),tags:t.array(t.string().min(1)).default([])}),dependencies:t.array(t.string().min(1)).optional(),registryDependencies:t.array(t.string().min(1)).optional(),files:t.array(r).min(1),schema:t.object({input:t.unknown().optional(),output:t.unknown().optional()}).optional()});t.object({$schema:t.string().min(1).optional(),name:t.string().min(1),homepage:t.string().min(1).optional(),items:t.array(i)});
+import { StabilityEnum } from "../ownership.js";
+import z from "zod";
+
+//#region ../../modules/audit-trail/dist/libs/contracts/dist/contract-registry/schemas.js
+const ContractRegistryItemTypeSchema = z.enum([
+	"contractspec:operation",
+	"contractspec:event",
+	"contractspec:presentation",
+	"contractspec:form",
+	"contractspec:feature",
+	"contractspec:workflow",
+	"contractspec:template",
+	"contractspec:integration",
+	"contractspec:data-view",
+	"contractspec:migration",
+	"contractspec:telemetry",
+	"contractspec:experiment",
+	"contractspec:app-config",
+	"contractspec:knowledge"
+]);
+const ContractRegistryFileSchema = z.object({
+	path: z.string().min(1),
+	type: z.string().min(1),
+	content: z.string().optional()
+});
+const ContractRegistryItemSchema = z.object({
+	name: z.string().min(1),
+	type: ContractRegistryItemTypeSchema,
+	version: z.number().int().nonnegative(),
+	title: z.string().min(1),
+	description: z.string().min(1),
+	meta: z.object({
+		stability: z.enum([
+			StabilityEnum.Idea,
+			StabilityEnum.InCreation,
+			StabilityEnum.Experimental,
+			StabilityEnum.Beta,
+			StabilityEnum.Stable,
+			StabilityEnum.Deprecated
+		]),
+		owners: z.array(z.string().min(1)).default([]),
+		tags: z.array(z.string().min(1)).default([])
+	}),
+	dependencies: z.array(z.string().min(1)).optional(),
+	registryDependencies: z.array(z.string().min(1)).optional(),
+	files: z.array(ContractRegistryFileSchema).min(1),
+	schema: z.object({
+		input: z.unknown().optional(),
+		output: z.unknown().optional()
+	}).optional()
+});
+z.object({
+	$schema: z.string().min(1).optional(),
+	name: z.string().min(1),
+	homepage: z.string().min(1).optional(),
+	items: z.array(ContractRegistryItemSchema)
+});
+
+//#endregion

package/dist/modules/audit-trail/dist/libs/contracts/dist/docs/PUBLISHING.docblock.js

@@ -1,76 +1,15 @@
-import{a as e}from"./registry.js";e([{id:`docs.PUBLISHING`,title:`Publishing ContractSpec Libraries`,summary:`This guide describes how we release the ContractSpec libraries to npm. We use a dual-track release system: **Stable** (manual) and **Canary** (automatic).`,kind:`reference`,visibility:`public`,route:`/docs/PUBLISHING`,tags:[`PUBLISHING`],body:`# Publishing ContractSpec Libraries
-
-This guide describes how we release the ContractSpec libraries to npm. We use a dual-track release system: **Stable** (manual) and **Canary** (automatic).
-
-## Release Tracks
-
-| Track | Branch | npm Tag | Frequency | Versioning | Use Case |
-|-------|--------|---------|-----------|------------|----------|
-| **Stable** | \`release\` | \`latest\` | Manual | SemVer (e.g., \`1.7.4\`) | Production, external users |
-| **Canary** | \`main\` | \`canary\` | Every Push | Snapshot (e.g., \`1.7.4-canary...\`) | Dev, internal testing |
-
-## Prerequisites
-
-- ✅ \`NPM_TOKEN\` secret is configured in GitHub (owner or automation token with _publish_ scope).
-- ✅ \`GITHUB_TOKEN\` (built-in) has permissions to create PRs (enabled by default in new repos).
-- ✅ For stable releases: \`release\` branch exists and is protected.
-
-## Canary Workflow (Automatic)
-
-Every commit pushed to \`main\` triggers the \`.github/workflows/publish-canary.yml\` workflow.
-
-1. **Trigger**: Push to \`main\`.
-2. **Versioning**: Runs \`changeset version --snapshot canary\` to generate a temporary snapshot version.
-3. **Publish**: Packages are published to npm with the \`canary\` tag using \`changeset publish --tag canary\`.
-
-### Consuming Canary Builds
-
-To install the latest bleeding-edge version:
-
-\`\`\`bash
-npm install @lssm/lib.contracts@canary
-# or
-bun add @lssm/lib.contracts@canary
-\`\`\`
-
-## Stable Release Workflow (Manual)
-
-Stable releases are managed via the \`release\` branch using the standard [Changesets Action](https://github.com/changesets/action).
-
-1. **Develop on \`main\`**: Create features and fixes.
-2. **Add Changesets**: Run \`bun changeset\` to document changes and impact (major/minor/patch).
-3. **Merge to \`release\`**: When ready to ship, open a PR from \`main\` to \`release\` or merge manually.
-4. **"Version Packages" PR**:
-   - The GitHub Action detects new changesets and automatically creates a Pull Request titled **"Version Packages"**.
-   - This PR contains the version bumps and updated \`CHANGELOG.md\` files.
-5. **Merge & Publish**:
-   - Review and merge the "Version Packages" PR.
-   - The Action runs again, detects the versions have been bumped, builds the libraries, and publishes them to npm with the \`latest\` tag.
-
-### Publishing Steps
-
-1. Ensure all changesets are present on \`main\`.
-2. Merge \`main\` into \`release\`:
-   \`\`\`bash
-   git checkout release
-   git pull origin release
-   git merge main
-   git push origin release
-   \`\`\`
-3. Go to GitHub Pull Requests. You will see a **"Version Packages"** PR created by the bot.
-4. Merge that PR.
-5. The release is now live on npm!
-
-## Manual Verification (Optional)
-
-Before publishing a new version you can run:
-
-\`\`\`bash
-bun run build:not-apps
-npx npm-packlist --json packages/libs/contracts
-\`\`\`
-
-## Rollback
-
-If a publish fails mid-way, re-run the workflow once the issue is fixed. Already published packages are skipped automatically. Use \`npm deprecate <package>@<version>\` if we need to warn consumers about a broken release.
-`}]);
+import { registerDocBlocks } from "./registry.js";
+
+//#region ../../modules/audit-trail/dist/libs/contracts/dist/docs/PUBLISHING.docblock.js
+registerDocBlocks([{
+	id: "docs.PUBLISHING",
+	title: "Publishing ContractSpec Libraries",
+	summary: "This guide describes how we release the ContractSpec libraries to npm. We use a dual-track release system: **Stable** (manual) and **Canary** (automatic).",
+	kind: "reference",
+	visibility: "public",
+	route: "/docs/PUBLISHING",
+	tags: ["PUBLISHING"],
+	body: "# Publishing ContractSpec Libraries\n\nThis guide describes how we release the ContractSpec libraries to npm. We use a dual-track release system: **Stable** (manual) and **Canary** (automatic).\n\n## Release Tracks\n\n| Track | Branch | npm Tag | Frequency | Versioning | Use Case |\n|-------|--------|---------|-----------|------------|----------|\n| **Stable** | `release` | `latest` | Manual | SemVer (e.g., `1.7.4`) | Production, external users |\n| **Canary** | `main` | `canary` | Every Push | Snapshot (e.g., `1.7.4-canary...`) | Dev, internal testing |\n\n## Prerequisites\n\n- ✅ `NPM_TOKEN` secret is configured in GitHub (owner or automation token with _publish_ scope).\n- ✅ `GITHUB_TOKEN` (built-in) has permissions to create PRs (enabled by default in new repos).\n- ✅ For stable releases: `release` branch exists and is protected.\n\n## Canary Workflow (Automatic)\n\nEvery commit pushed to `main` triggers the `.github/workflows/publish-canary.yml` workflow.\n\n1. **Trigger**: Push to `main`.\n2. **Versioning**: Runs `changeset version --snapshot canary` to generate a temporary snapshot version.\n3. **Publish**: Packages are published to npm with the `canary` tag using `changeset publish --tag canary`.\n\n### Consuming Canary Builds\n\nTo install the latest bleeding-edge version:\n\n```bash\nnpm install @lssm/lib.contracts@canary\n# or\nbun add @lssm/lib.contracts@canary\n```\n\n## Stable Release Workflow (Manual)\n\nStable releases are managed via the `release` branch using the standard [Changesets Action](https://github.com/changesets/action).\n\n1. **Develop on `main`**: Create features and fixes.\n2. **Add Changesets**: Run `bun changeset` to document changes and impact (major/minor/patch).\n3. **Merge to `release`**: When ready to ship, open a PR from `main` to `release` or merge manually.\n4. **\"Version Packages\" PR**:\n   - The GitHub Action detects new changesets and automatically creates a Pull Request titled **\"Version Packages\"**.\n   - This PR contains the version bumps and updated `CHANGELOG.md` files.\n5. **Merge & Publish**:\n   - Review and merge the \"Version Packages\" PR.\n   - The Action runs again, detects the versions have been bumped, builds the libraries, and publishes them to npm with the `latest` tag.\n\n### Publishing Steps\n\n1. Ensure all changesets are present on `main`.\n2. Merge `main` into `release`:\n   ```bash\n   git checkout release\n   git pull origin release\n   git merge main\n   git push origin release\n   ```\n3. Go to GitHub Pull Requests. You will see a **\"Version Packages\"** PR created by the bot.\n4. Merge that PR.\n5. The release is now live on npm!\n\n## Manual Verification (Optional)\n\nBefore publishing a new version you can run:\n\n```bash\nbun run build:not-apps\nnpx npm-packlist --json packages/libs/contracts\n```\n\n## Rollback\n\nIf a publish fails mid-way, re-run the workflow once the issue is fixed. Already published packages are skipped automatically. Use `npm deprecate <package>@<version>` if we need to warn consumers about a broken release.\n"
+}]);
+
+//#endregion