@lssm/example.wealth-snapshot 0.0.0-canary-20251217080011 → 0.0.0-canary-20251219202229

package/dist/libs/identity-rbac/dist/events.js

@@ -1,382 +1,380 @@
-import { ScalarTypeEnum } from "./schema/dist/ScalarTypeEnum.js";
-import { SchemaModel } from "./schema/dist/SchemaModel.js";
-import "./schema/dist/index.js";
+import { E5, x8 } from "./schema/dist/index.js";
 import { defineEvent } from "./contracts/dist/events.js";
 import "./contracts/dist/index.js";
 
 //#region ../../libs/identity-rbac/dist/events.js
-const UserCreatedPayload = new SchemaModel({
+const UserCreatedPayload = new x8({
 	name: "UserCreatedPayload",
 	description: "Payload for user created event",
 	fields: {
 		userId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		email: {
-			type: ScalarTypeEnum.EmailAddress(),
+			type: E5.EmailAddress(),
 			isOptional: false
 		},
 		name: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		createdAt: {
-			type: ScalarTypeEnum.DateTime(),
+			type: E5.DateTime(),
 			isOptional: false
 		}
 	}
 });
-const UserUpdatedPayload = new SchemaModel({
+const UserUpdatedPayload = new x8({
 	name: "UserUpdatedPayload",
 	description: "Payload for user updated event",
 	fields: {
 		userId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		updatedFields: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false,
 			isArray: true
 		},
 		updatedAt: {
-			type: ScalarTypeEnum.DateTime(),
+			type: E5.DateTime(),
 			isOptional: false
 		}
 	}
 });
-const UserDeletedPayload = new SchemaModel({
+const UserDeletedPayload = new x8({
 	name: "UserDeletedPayload",
 	description: "Payload for user deleted event",
 	fields: {
 		userId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		email: {
-			type: ScalarTypeEnum.EmailAddress(),
+			type: E5.EmailAddress(),
 			isOptional: false
 		},
 		deletedAt: {
-			type: ScalarTypeEnum.DateTime(),
+			type: E5.DateTime(),
 			isOptional: false
 		}
 	}
 });
-const UserEmailVerifiedPayload = new SchemaModel({
+const UserEmailVerifiedPayload = new x8({
 	name: "UserEmailVerifiedPayload",
 	description: "Payload for user email verified event",
 	fields: {
 		userId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		email: {
-			type: ScalarTypeEnum.EmailAddress(),
+			type: E5.EmailAddress(),
 			isOptional: false
 		},
 		verifiedAt: {
-			type: ScalarTypeEnum.DateTime(),
+			type: E5.DateTime(),
 			isOptional: false
 		}
 	}
 });
-const OrgCreatedPayload = new SchemaModel({
+const OrgCreatedPayload = new x8({
 	name: "OrgCreatedPayload",
 	description: "Payload for org created event",
 	fields: {
 		orgId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		name: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		slug: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		createdBy: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		createdAt: {
-			type: ScalarTypeEnum.DateTime(),
+			type: E5.DateTime(),
 			isOptional: false
 		}
 	}
 });
-const OrgUpdatedPayload = new SchemaModel({
+const OrgUpdatedPayload = new x8({
 	name: "OrgUpdatedPayload",
 	description: "Payload for org updated event",
 	fields: {
 		orgId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		updatedFields: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false,
 			isArray: true
 		},
 		updatedBy: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		updatedAt: {
-			type: ScalarTypeEnum.DateTime(),
+			type: E5.DateTime(),
 			isOptional: false
 		}
 	}
 });
-const OrgDeletedPayload = new SchemaModel({
+const OrgDeletedPayload = new x8({
 	name: "OrgDeletedPayload",
 	description: "Payload for org deleted event",
 	fields: {
 		orgId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		name: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		deletedBy: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		deletedAt: {
-			type: ScalarTypeEnum.DateTime(),
+			type: E5.DateTime(),
 			isOptional: false
 		}
 	}
 });
-const OrgMemberAddedPayload = new SchemaModel({
+const OrgMemberAddedPayload = new x8({
 	name: "OrgMemberAddedPayload",
 	description: "Payload for member added event",
 	fields: {
 		orgId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		userId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		role: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		invitedBy: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		joinedAt: {
-			type: ScalarTypeEnum.DateTime(),
+			type: E5.DateTime(),
 			isOptional: false
 		}
 	}
 });
-const OrgMemberRemovedPayload = new SchemaModel({
+const OrgMemberRemovedPayload = new x8({
 	name: "OrgMemberRemovedPayload",
 	description: "Payload for member removed event",
 	fields: {
 		orgId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		userId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		removedBy: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		reason: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		removedAt: {
-			type: ScalarTypeEnum.DateTime(),
+			type: E5.DateTime(),
 			isOptional: false
 		}
 	}
 });
-const OrgMemberRoleChangedPayload = new SchemaModel({
+const OrgMemberRoleChangedPayload = new x8({
 	name: "OrgMemberRoleChangedPayload",
 	description: "Payload for member role changed event",
 	fields: {
 		orgId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		userId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		previousRole: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		newRole: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		changedBy: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		changedAt: {
-			type: ScalarTypeEnum.DateTime(),
+			type: E5.DateTime(),
 			isOptional: false
 		}
 	}
 });
-const OrgInviteSentPayload = new SchemaModel({
+const OrgInviteSentPayload = new x8({
 	name: "OrgInviteSentPayload",
 	description: "Payload for invite sent event",
 	fields: {
 		invitationId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		orgId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		email: {
-			type: ScalarTypeEnum.EmailAddress(),
+			type: E5.EmailAddress(),
 			isOptional: false
 		},
 		role: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		invitedBy: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		expiresAt: {
-			type: ScalarTypeEnum.DateTime(),
+			type: E5.DateTime(),
 			isOptional: true
 		},
 		sentAt: {
-			type: ScalarTypeEnum.DateTime(),
+			type: E5.DateTime(),
 			isOptional: false
 		}
 	}
 });
-const OrgInviteAcceptedPayload = new SchemaModel({
+const OrgInviteAcceptedPayload = new x8({
 	name: "OrgInviteAcceptedPayload",
 	description: "Payload for invite accepted event",
 	fields: {
 		invitationId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		orgId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		userId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		acceptedAt: {
-			type: ScalarTypeEnum.DateTime(),
+			type: E5.DateTime(),
 			isOptional: false
 		}
 	}
 });
-const OrgInviteDeclinedPayload = new SchemaModel({
+const OrgInviteDeclinedPayload = new x8({
 	name: "OrgInviteDeclinedPayload",
 	description: "Payload for invite declined event",
 	fields: {
 		invitationId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		orgId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		declinedAt: {
-			type: ScalarTypeEnum.DateTime(),
+			type: E5.DateTime(),
 			isOptional: false
 		}
 	}
 });
-const RoleAssignedPayload = new SchemaModel({
+const RoleAssignedPayload = new x8({
 	name: "RoleAssignedPayload",
 	description: "Payload for role assigned event",
 	fields: {
 		bindingId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		roleId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		roleName: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		targetType: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		targetId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		assignedBy: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		expiresAt: {
-			type: ScalarTypeEnum.DateTime(),
+			type: E5.DateTime(),
 			isOptional: true
 		},
 		assignedAt: {
-			type: ScalarTypeEnum.DateTime(),
+			type: E5.DateTime(),
 			isOptional: false
 		}
 	}
 });
-const RoleRevokedPayload = new SchemaModel({
+const RoleRevokedPayload = new x8({
 	name: "RoleRevokedPayload",
 	description: "Payload for role revoked event",
 	fields: {
 		bindingId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		roleId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		roleName: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		targetType: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		targetId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		revokedBy: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		revokedAt: {
-			type: ScalarTypeEnum.DateTime(),
+			type: E5.DateTime(),
 			isOptional: false
 		}
 	}
@@ -519,4 +517,5 @@ const RoleRevokedEvent = defineEvent({
 	payload: RoleRevokedPayload
 });
 
-//#endregion
+//#endregion
+//# sourceMappingURL=events.js.map

package/dist/libs/identity-rbac/dist/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","names":[],"sources":["../../../../../../libs/identity-rbac/dist/events.js"],"sourcesContent":["import { E5, x8 } from \"./schema/dist/index.js\";\nimport { defineEvent } from \"./contracts/dist/events.js\";\nimport \"./contracts/dist/index.js\";\n\n//#region src/events.ts\nconst UserCreatedPayload = new x8({\n\tname: \"UserCreatedPayload\",\n\tdescription: \"Payload for user created event\",\n\tfields: {\n\t\tuserId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\temail: {\n\t\t\ttype: E5.EmailAddress(),\n\t\t\tisOptional: false\n\t\t},\n\t\tname: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tcreatedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst UserUpdatedPayload = new x8({\n\tname: \"UserUpdatedPayload\",\n\tdescription: \"Payload for user updated event\",\n\tfields: {\n\t\tuserId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tupdatedFields: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false,\n\t\t\tisArray: true\n\t\t},\n\t\tupdatedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst UserDeletedPayload = new x8({\n\tname: \"UserDeletedPayload\",\n\tdescription: \"Payload for user deleted event\",\n\tfields: {\n\t\tuserId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\temail: {\n\t\t\ttype: E5.EmailAddress(),\n\t\t\tisOptional: false\n\t\t},\n\t\tdeletedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst UserEmailVerifiedPayload = new x8({\n\tname: \"UserEmailVerifiedPayload\",\n\tdescription: \"Payload for user email verified event\",\n\tfields: {\n\t\tuserId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\temail: {\n\t\t\ttype: E5.EmailAddress(),\n\t\t\tisOptional: false\n\t\t},\n\t\tverifiedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst OrgCreatedPayload = new x8({\n\tname: \"OrgCreatedPayload\",\n\tdescription: \"Payload for org created event\",\n\tfields: {\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tname: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tslug: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tcreatedBy: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tcreatedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst OrgUpdatedPayload = new x8({\n\tname: \"OrgUpdatedPayload\",\n\tdescription: \"Payload for org updated event\",\n\tfields: {\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tupdatedFields: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false,\n\t\t\tisArray: true\n\t\t},\n\t\tupdatedBy: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tupdatedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst OrgDeletedPayload = new x8({\n\tname: \"OrgDeletedPayload\",\n\tdescription: \"Payload for org deleted event\",\n\tfields: {\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tname: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tdeletedBy: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tdeletedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst OrgMemberAddedPayload = new x8({\n\tname: \"OrgMemberAddedPayload\",\n\tdescription: \"Payload for member added event\",\n\tfields: {\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tuserId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\trole: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tinvitedBy: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tjoinedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst OrgMemberRemovedPayload = new x8({\n\tname: \"OrgMemberRemovedPayload\",\n\tdescription: \"Payload for member removed event\",\n\tfields: {\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tuserId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tremovedBy: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\treason: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tremovedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst OrgMemberRoleChangedPayload = new x8({\n\tname: \"OrgMemberRoleChangedPayload\",\n\tdescription: \"Payload for member role changed event\",\n\tfields: {\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tuserId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tpreviousRole: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tnewRole: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tchangedBy: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tchangedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst OrgInviteSentPayload = new x8({\n\tname: \"OrgInviteSentPayload\",\n\tdescription: \"Payload for invite sent event\",\n\tfields: {\n\t\tinvitationId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\temail: {\n\t\t\ttype: E5.EmailAddress(),\n\t\t\tisOptional: false\n\t\t},\n\t\trole: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tinvitedBy: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\texpiresAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: true\n\t\t},\n\t\tsentAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst OrgInviteAcceptedPayload = new x8({\n\tname: \"OrgInviteAcceptedPayload\",\n\tdescription: \"Payload for invite accepted event\",\n\tfields: {\n\t\tinvitationId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tuserId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tacceptedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst OrgInviteDeclinedPayload = new x8({\n\tname: \"OrgInviteDeclinedPayload\",\n\tdescription: \"Payload for invite declined event\",\n\tfields: {\n\t\tinvitationId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tdeclinedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst RoleAssignedPayload = new x8({\n\tname: \"RoleAssignedPayload\",\n\tdescription: \"Payload for role assigned event\",\n\tfields: {\n\t\tbindingId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\troleId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\troleName: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\ttargetType: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\ttargetId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tassignedBy: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\texpiresAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: true\n\t\t},\n\t\tassignedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst RoleRevokedPayload = new x8({\n\tname: \"RoleRevokedPayload\",\n\tdescription: \"Payload for role revoked event\",\n\tfields: {\n\t\tbindingId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\troleId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\troleName: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\ttargetType: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\ttargetId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\trevokedBy: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\trevokedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\n/**\n* Emitted when a new user is created.\n*/\nconst UserCreatedEvent = defineEvent({\n\tname: \"user.created\",\n\tversion: 1,\n\tdescription: \"A new user has been created.\",\n\tpayload: UserCreatedPayload\n});\n/**\n* Emitted when a user profile is updated.\n*/\nconst UserUpdatedEvent = defineEvent({\n\tname: \"user.updated\",\n\tversion: 1,\n\tdescription: \"A user profile has been updated.\",\n\tpayload: UserUpdatedPayload\n});\n/**\n* Emitted when a user is deleted.\n*/\nconst UserDeletedEvent = defineEvent({\n\tname: \"user.deleted\",\n\tversion: 1,\n\tdescription: \"A user account has been deleted.\",\n\tpii: [\"email\"],\n\tpayload: UserDeletedPayload\n});\n/**\n* Emitted when a user's email is verified.\n*/\nconst UserEmailVerifiedEvent = defineEvent({\n\tname: \"user.email_verified\",\n\tversion: 1,\n\tdescription: \"A user has verified their email address.\",\n\tpayload: UserEmailVerifiedPayload\n});\n/**\n* Emitted when a new organization is created.\n*/\nconst OrgCreatedEvent = defineEvent({\n\tname: \"org.created\",\n\tversion: 1,\n\tdescription: \"A new organization has been created.\",\n\tpayload: OrgCreatedPayload\n});\n/**\n* Emitted when an organization is updated.\n*/\nconst OrgUpdatedEvent = defineEvent({\n\tname: \"org.updated\",\n\tversion: 1,\n\tdescription: \"An organization has been updated.\",\n\tpayload: OrgUpdatedPayload\n});\n/**\n* Emitted when an organization is deleted.\n*/\nconst OrgDeletedEvent = defineEvent({\n\tname: \"org.deleted\",\n\tversion: 1,\n\tdescription: \"An organization has been deleted.\",\n\tpayload: OrgDeletedPayload\n});\n/**\n* Emitted when a member joins an organization.\n*/\nconst OrgMemberAddedEvent = defineEvent({\n\tname: \"org.member.added\",\n\tversion: 1,\n\tdescription: \"A user has joined an organization.\",\n\tpayload: OrgMemberAddedPayload\n});\n/**\n* Emitted when a member leaves or is removed from an organization.\n*/\nconst OrgMemberRemovedEvent = defineEvent({\n\tname: \"org.member.removed\",\n\tversion: 1,\n\tdescription: \"A user has left or been removed from an organization.\",\n\tpayload: OrgMemberRemovedPayload\n});\n/**\n* Emitted when a member's role is changed.\n*/\nconst OrgMemberRoleChangedEvent = defineEvent({\n\tname: \"org.member.role_changed\",\n\tversion: 1,\n\tdescription: \"A member's role in an organization has changed.\",\n\tpayload: OrgMemberRoleChangedPayload\n});\n/**\n* Emitted when an invitation is sent.\n*/\nconst OrgInviteSentEvent = defineEvent({\n\tname: \"org.invite.sent\",\n\tversion: 1,\n\tdescription: \"An invitation to join an organization has been sent.\",\n\tpii: [\"email\"],\n\tpayload: OrgInviteSentPayload\n});\n/**\n* Emitted when an invitation is accepted.\n*/\nconst OrgInviteAcceptedEvent = defineEvent({\n\tname: \"org.invite.accepted\",\n\tversion: 1,\n\tdescription: \"An invitation has been accepted.\",\n\tpayload: OrgInviteAcceptedPayload\n});\n/**\n* Emitted when an invitation is declined.\n*/\nconst OrgInviteDeclinedEvent = defineEvent({\n\tname: \"org.invite.declined\",\n\tversion: 1,\n\tdescription: \"An invitation has been declined.\",\n\tpayload: OrgInviteDeclinedPayload\n});\n/**\n* Emitted when a role is assigned to a user or organization.\n*/\nconst RoleAssignedEvent = defineEvent({\n\tname: \"role.assigned\",\n\tversion: 1,\n\tdescription: \"A role has been assigned.\",\n\tpayload: RoleAssignedPayload\n});\n/**\n* Emitted when a role is revoked from a user or organization.\n*/\nconst RoleRevokedEvent = defineEvent({\n\tname: \"role.revoked\",\n\tversion: 1,\n\tdescription: \"A role has been revoked.\",\n\tpayload: RoleRevokedPayload\n});\n/**\n* All identity-rbac events.\n*/\nconst IdentityRbacEvents = {\n\tUserCreatedEvent,\n\tUserUpdatedEvent,\n\tUserDeletedEvent,\n\tUserEmailVerifiedEvent,\n\tOrgCreatedEvent,\n\tOrgUpdatedEvent,\n\tOrgDeletedEvent,\n\tOrgMemberAddedEvent,\n\tOrgMemberRemovedEvent,\n\tOrgMemberRoleChangedEvent,\n\tOrgInviteSentEvent,\n\tOrgInviteAcceptedEvent,\n\tOrgInviteDeclinedEvent,\n\tRoleAssignedEvent,\n\tRoleRevokedEvent\n};\n\n//#endregion\nexport { IdentityRbacEvents, OrgCreatedEvent, OrgDeletedEvent, OrgInviteAcceptedEvent, OrgInviteDeclinedEvent, OrgInviteSentEvent, OrgMemberAddedEvent, OrgMemberRemovedEvent, OrgMemberRoleChangedEvent, OrgUpdatedEvent, RoleAssignedEvent, RoleRevokedEvent, UserCreatedEvent, UserDeletedEvent, UserEmailVerifiedEvent, UserUpdatedEvent };\n//# sourceMappingURL=events.js.map"],"mappings":";;;;;AAKA,MAAM,qBAAqB,IAAI,GAAG;CACjC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,qBAAqB,IAAI,GAAG;CACjC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,eAAe;GACd,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ,SAAS;GACT;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,qBAAqB,IAAI,GAAG;CACjC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,2BAA2B,IAAI,GAAG;CACvC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,YAAY;GACX,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,oBAAoB,IAAI,GAAG;CAChC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,oBAAoB,IAAI,GAAG;CAChC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,eAAe;GACd,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ,SAAS;GACT;EACD,WAAW;GACV,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,oBAAoB,IAAI,GAAG;CAChC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,wBAAwB,IAAI,GAAG;CACpC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,0BAA0B,IAAI,GAAG;CACtC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,8BAA8B,IAAI,GAAG;CAC1C,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,cAAc;GACb,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,SAAS;GACR,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,cAAc;GACb,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,2BAA2B,IAAI,GAAG;CACvC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,cAAc;GACb,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,YAAY;GACX,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,2BAA2B,IAAI,GAAG;CACvC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,cAAc;GACb,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,YAAY;GACX,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,sBAAsB,IAAI,GAAG;CAClC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,WAAW;GACV,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,YAAY;GACX,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,YAAY;GACX,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD,YAAY;GACX,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,qBAAqB,IAAI,GAAG;CACjC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,WAAW;GACV,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,YAAY;GACX,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;;;;AAIF,MAAM,mBAAmB,YAAY;CACpC,MAAM;CACN,SAAS;CACT,aAAa;CACb,SAAS;CACT,CAAC;;;;AAIF,MAAM,mBAAmB,YAAY;CACpC,MAAM;CACN,SAAS;CACT,aAAa;CACb,SAAS;CACT,CAAC;;;;AAIF,MAAM,mBAAmB,YAAY;CACpC,MAAM;CACN,SAAS;CACT,aAAa;CACb,KAAK,CAAC,QAAQ;CACd,SAAS;CACT,CAAC;;;;AAIF,MAAM,yBAAyB,YAAY;CAC1C,MAAM;CACN,SAAS;CACT,aAAa;CACb,SAAS;CACT,CAAC;;;;AAIF,MAAM,kBAAkB,YAAY;CACnC,MAAM;CACN,SAAS;CACT,aAAa;CACb,SAAS;CACT,CAAC;;;;AAIF,MAAM,kBAAkB,YAAY;CACnC,MAAM;CACN,SAAS;CACT,aAAa;CACb,SAAS;CACT,CAAC;;;;AAIF,MAAM,kBAAkB,YAAY;CACnC,MAAM;CACN,SAAS;CACT,aAAa;CACb,SAAS;CACT,CAAC;;;;AAIF,MAAM,sBAAsB,YAAY;CACvC,MAAM;CACN,SAAS;CACT,aAAa;CACb,SAAS;CACT,CAAC;;;;AAIF,MAAM,wBAAwB,YAAY;CACzC,MAAM;CACN,SAAS;CACT,aAAa;CACb,SAAS;CACT,CAAC;;;;AAIF,MAAM,4BAA4B,YAAY;CAC7C,MAAM;CACN,SAAS;CACT,aAAa;CACb,SAAS;CACT,CAAC;;;;AAIF,MAAM,qBAAqB,YAAY;CACtC,MAAM;CACN,SAAS;CACT,aAAa;CACb,KAAK,CAAC,QAAQ;CACd,SAAS;CACT,CAAC;;;;AAIF,MAAM,yBAAyB,YAAY;CAC1C,MAAM;CACN,SAAS;CACT,aAAa;CACb,SAAS;CACT,CAAC;;;;AAIF,MAAM,yBAAyB,YAAY;CAC1C,MAAM;CACN,SAAS;CACT,aAAa;CACb,SAAS;CACT,CAAC;;;;AAIF,MAAM,oBAAoB,YAAY;CACrC,MAAM;CACN,SAAS;CACT,aAAa;CACb,SAAS;CACT,CAAC;;;;AAIF,MAAM,mBAAmB,YAAY;CACpC,MAAM;CACN,SAAS;CACT,aAAa;CACb,SAAS;CACT,CAAC"}

package/dist/libs/identity-rbac/dist/policies/engine.js

@@ -96,4 +96,5 @@ const StandardRole = {
 };
 
 //#endregion
-export { Permission };
+export { Permission };
+//# sourceMappingURL=engine.js.map

package/dist/libs/identity-rbac/dist/policies/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","names":[],"sources":["../../../../../../../libs/identity-rbac/dist/policies/engine.js"],"sourcesContent":["//#region src/policies/engine.ts\n/**\n* Standard permissions for identity-rbac module.\n*/\nconst Permission = {\n\tUSER_CREATE: \"user.create\",\n\tUSER_READ: \"user.read\",\n\tUSER_UPDATE: \"user.update\",\n\tUSER_DELETE: \"user.delete\",\n\tUSER_LIST: \"user.list\",\n\tUSER_MANAGE: \"user.manage\",\n\tORG_CREATE: \"org.create\",\n\tORG_READ: \"org.read\",\n\tORG_UPDATE: \"org.update\",\n\tORG_DELETE: \"org.delete\",\n\tORG_LIST: \"org.list\",\n\tMEMBER_INVITE: \"member.invite\",\n\tMEMBER_REMOVE: \"member.remove\",\n\tMEMBER_UPDATE_ROLE: \"member.update_role\",\n\tMEMBER_LIST: \"member.list\",\n\tMANAGE_MEMBERS: \"org.manage_members\",\n\tTEAM_CREATE: \"team.create\",\n\tTEAM_UPDATE: \"team.update\",\n\tTEAM_DELETE: \"team.delete\",\n\tTEAM_MANAGE: \"team.manage\",\n\tROLE_CREATE: \"role.create\",\n\tROLE_UPDATE: \"role.update\",\n\tROLE_DELETE: \"role.delete\",\n\tROLE_ASSIGN: \"role.assign\",\n\tROLE_REVOKE: \"role.revoke\",\n\tBILLING_VIEW: \"billing.view\",\n\tBILLING_MANAGE: \"billing.manage\",\n\tPROJECT_CREATE: \"project.create\",\n\tPROJECT_READ: \"project.read\",\n\tPROJECT_UPDATE: \"project.update\",\n\tPROJECT_DELETE: \"project.delete\",\n\tPROJECT_MANAGE: \"project.manage\",\n\tADMIN_ACCESS: \"admin.access\",\n\tADMIN_IMPERSONATE: \"admin.impersonate\"\n};\n/**\n* Standard role definitions.\n*/\nconst StandardRole = {\n\tOWNER: {\n\t\tname: \"owner\",\n\t\tdescription: \"Organization owner with full access\",\n\t\tpermissions: Object.values(Permission)\n\t},\n\tADMIN: {\n\t\tname: \"admin\",\n\t\tdescription: \"Administrator with most permissions\",\n\t\tpermissions: [\n\t\t\tPermission.USER_READ,\n\t\t\tPermission.USER_LIST,\n\t\t\tPermission.ORG_READ,\n\t\t\tPermission.ORG_UPDATE,\n\t\t\tPermission.MEMBER_INVITE,\n\t\t\tPermission.MEMBER_REMOVE,\n\t\t\tPermission.MEMBER_UPDATE_ROLE,\n\t\t\tPermission.MEMBER_LIST,\n\t\t\tPermission.MANAGE_MEMBERS,\n\t\t\tPermission.TEAM_CREATE,\n\t\t\tPermission.TEAM_UPDATE,\n\t\t\tPermission.TEAM_DELETE,\n\t\t\tPermission.TEAM_MANAGE,\n\t\t\tPermission.PROJECT_CREATE,\n\t\t\tPermission.PROJECT_READ,\n\t\t\tPermission.PROJECT_UPDATE,\n\t\t\tPermission.PROJECT_DELETE,\n\t\t\tPermission.PROJECT_MANAGE,\n\t\t\tPermission.BILLING_VIEW\n\t\t]\n\t},\n\tMEMBER: {\n\t\tname: \"member\",\n\t\tdescription: \"Regular organization member\",\n\t\tpermissions: [\n\t\t\tPermission.USER_READ,\n\t\t\tPermission.ORG_READ,\n\t\t\tPermission.MEMBER_LIST,\n\t\t\tPermission.PROJECT_READ,\n\t\t\tPermission.PROJECT_CREATE\n\t\t]\n\t},\n\tVIEWER: {\n\t\tname: \"viewer\",\n\t\tdescription: \"Read-only access\",\n\t\tpermissions: [\n\t\t\tPermission.USER_READ,\n\t\t\tPermission.ORG_READ,\n\t\t\tPermission.MEMBER_LIST,\n\t\t\tPermission.PROJECT_READ\n\t\t]\n\t}\n};\n/**\n* RBAC Policy Engine for permission checks.\n*/\nvar RBACPolicyEngine = class {\n\troleCache = /* @__PURE__ */ new Map();\n\tbindingCache = /* @__PURE__ */ new Map();\n\t/**\n\t* Check if a user has a specific permission.\n\t*/\n\tasync checkPermission(input, bindings) {\n\t\tconst { userId, orgId, permission } = input;\n\t\tconst now = /* @__PURE__ */ new Date();\n\t\tconst userBindings = bindings.filter((b) => b.targetType === \"user\" && b.targetId === userId);\n\t\tconst orgBindings = orgId ? bindings.filter((b) => b.targetType === \"organization\" && b.targetId === orgId) : [];\n\t\tconst activeBindings = [...userBindings, ...orgBindings].filter((b) => !b.expiresAt || b.expiresAt > now);\n\t\tif (activeBindings.length === 0) return {\n\t\t\tallowed: false,\n\t\t\treason: \"No active role bindings found\"\n\t\t};\n\t\tfor (const binding of activeBindings) if (binding.role.permissions.includes(permission)) return {\n\t\t\tallowed: true,\n\t\t\tmatchedRole: binding.role.name\n\t\t};\n\t\treturn {\n\t\t\tallowed: false,\n\t\t\treason: `No role grants the \"${permission}\" permission`\n\t\t};\n\t}\n\t/**\n\t* Get all permissions for a user in a context.\n\t*/\n\tasync getPermissions(userId, orgId, bindings) {\n\t\tconst now = /* @__PURE__ */ new Date();\n\t\tconst userBindings = bindings.filter((b) => b.targetType === \"user\" && b.targetId === userId);\n\t\tconst orgBindings = orgId ? bindings.filter((b) => b.targetType === \"organization\" && b.targetId === orgId) : [];\n\t\tconst activeBindings = [...userBindings, ...orgBindings].filter((b) => !b.expiresAt || b.expiresAt > now);\n\t\tconst permissions = /* @__PURE__ */ new Set();\n\t\tconst roles = [];\n\t\tfor (const binding of activeBindings) {\n\t\t\troles.push(binding.role);\n\t\t\tfor (const perm of binding.role.permissions) permissions.add(perm);\n\t\t}\n\t\treturn {\n\t\t\tpermissions,\n\t\t\troles\n\t\t};\n\t}\n\t/**\n\t* Check if user has any of the specified permissions.\n\t*/\n\tasync hasAnyPermission(userId, orgId, permissions, bindings) {\n\t\tconst { permissions: userPerms } = await this.getPermissions(userId, orgId, bindings);\n\t\treturn permissions.some((p) => userPerms.has(p));\n\t}\n\t/**\n\t* Check if user has all of the specified permissions.\n\t*/\n\tasync hasAllPermissions(userId, orgId, permissions, bindings) {\n\t\tconst { permissions: userPerms } = await this.getPermissions(userId, orgId, bindings);\n\t\treturn permissions.every((p) => userPerms.has(p));\n\t}\n};\n/**\n* Create a new RBAC policy engine instance.\n*/\nfunction createRBACEngine() {\n\treturn new RBACPolicyEngine();\n}\n\n//#endregion\nexport { Permission, RBACPolicyEngine, StandardRole, createRBACEngine };\n//# sourceMappingURL=engine.js.map"],"mappings":";;;;AAIA,MAAM,aAAa;CAClB,aAAa;CACb,WAAW;CACX,aAAa;CACb,aAAa;CACb,WAAW;CACX,aAAa;CACb,YAAY;CACZ,UAAU;CACV,YAAY;CACZ,YAAY;CACZ,UAAU;CACV,eAAe;CACf,eAAe;CACf,oBAAoB;CACpB,aAAa;CACb,gBAAgB;CAChB,aAAa;CACb,aAAa;CACb,aAAa;CACb,aAAa;CACb,aAAa;CACb,aAAa;CACb,aAAa;CACb,aAAa;CACb,aAAa;CACb,cAAc;CACd,gBAAgB;CAChB,gBAAgB;CAChB,cAAc;CACd,gBAAgB;CAChB,gBAAgB;CAChB,gBAAgB;CAChB,cAAc;CACd,mBAAmB;CACnB;;;;AAID,MAAM,eAAe;CACpB,OAAO;EACN,MAAM;EACN,aAAa;EACb,aAAa,OAAO,OAAO,WAAW;EACtC;CACD,OAAO;EACN,MAAM;EACN,aAAa;EACb,aAAa;GACZ,WAAW;GACX,WAAW;GACX,WAAW;GACX,WAAW;GACX,WAAW;GACX,WAAW;GACX,WAAW;GACX,WAAW;GACX,WAAW;GACX,WAAW;GACX,WAAW;GACX,WAAW;GACX,WAAW;GACX,WAAW;GACX,WAAW;GACX,WAAW;GACX,WAAW;GACX,WAAW;GACX,WAAW;GACX;EACD;CACD,QAAQ;EACP,MAAM;EACN,aAAa;EACb,aAAa;GACZ,WAAW;GACX,WAAW;GACX,WAAW;GACX,WAAW;GACX,WAAW;GACX;EACD;CACD,QAAQ;EACP,MAAM;EACN,aAAa;EACb,aAAa;GACZ,WAAW;GACX,WAAW;GACX,WAAW;GACX,WAAW;GACX;EACD;CACD"}