@lssm/example.wealth-snapshot 0.0.0-canary-20251217083314 → 0.0.0-canary-20251220002821

package/dist/libs/identity-rbac/dist/contracts/rbac.js

@@ -1,65 +1,63 @@
-import { ScalarTypeEnum } from "../schema/dist/ScalarTypeEnum.js";
-import { SchemaModel } from "../schema/dist/SchemaModel.js";
-import "../schema/dist/index.js";
+import { E5, x8 } from "../schema/dist/index.js";
 import { defineCommand, defineQuery } from "./dist/spec.js";
 import "./dist/index.js";
 import { SuccessResultModel } from "./user.js";
 
 //#region ../../libs/identity-rbac/dist/contracts/rbac.js
 const OWNERS = ["platform.identity-rbac"];
-const RoleModel = new SchemaModel({
+const RoleModel = new x8({
 	name: "Role",
 	description: "RBAC role definition",
 	fields: {
 		id: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		name: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		description: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		permissions: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false,
 			isArray: true
 		},
 		createdAt: {
-			type: ScalarTypeEnum.DateTime(),
+			type: E5.DateTime(),
 			isOptional: false
 		}
 	}
 });
-const PolicyBindingModel = new SchemaModel({
+const PolicyBindingModel = new x8({
 	name: "PolicyBinding",
 	description: "Role assignment to a target",
 	fields: {
 		id: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		roleId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		targetType: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		targetId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		expiresAt: {
-			type: ScalarTypeEnum.DateTime(),
+			type: E5.DateTime(),
 			isOptional: true
 		},
 		createdAt: {
-			type: ScalarTypeEnum.DateTime(),
+			type: E5.DateTime(),
 			isOptional: false
 		},
 		role: {
@@ -68,75 +66,75 @@ const PolicyBindingModel = new SchemaModel({
 		}
 	}
 });
-const PermissionCheckResultModel = new SchemaModel({
+const PermissionCheckResultModel = new x8({
 	name: "PermissionCheckResult",
 	description: "Result of a permission check",
 	fields: {
 		allowed: {
-			type: ScalarTypeEnum.Boolean(),
+			type: E5.Boolean(),
 			isOptional: false
 		},
 		reason: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		matchedRole: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		}
 	}
 });
-const CreateRoleInputModel = new SchemaModel({
+const CreateRoleInputModel = new x8({
 	name: "CreateRoleInput",
 	description: "Input for creating a role",
 	fields: {
 		name: {
-			type: ScalarTypeEnum.NonEmptyString(),
+			type: E5.NonEmptyString(),
 			isOptional: false
 		},
 		description: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		permissions: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false,
 			isArray: true
 		}
 	}
 });
-const UpdateRoleInputModel = new SchemaModel({
+const UpdateRoleInputModel = new x8({
 	name: "UpdateRoleInput",
 	description: "Input for updating a role",
 	fields: {
 		roleId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		name: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		description: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		permissions: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true,
 			isArray: true
 		}
 	}
 });
-const DeleteRoleInputModel = new SchemaModel({
+const DeleteRoleInputModel = new x8({
 	name: "DeleteRoleInput",
 	description: "Input for deleting a role",
 	fields: { roleId: {
-		type: ScalarTypeEnum.String_unsecure(),
+		type: E5.String_unsecure(),
 		isOptional: false
 	} }
 });
-const ListRolesOutputModel = new SchemaModel({
+const ListRolesOutputModel = new x8({
 	name: "ListRolesOutput",
 	description: "Output for listing roles",
 	fields: { roles: {
@@ -145,82 +143,82 @@ const ListRolesOutputModel = new SchemaModel({
 		isArray: true
 	} }
 });
-const AssignRoleInputModel = new SchemaModel({
+const AssignRoleInputModel = new x8({
 	name: "AssignRoleInput",
 	description: "Input for assigning a role",
 	fields: {
 		roleId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		targetType: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		targetId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		expiresAt: {
-			type: ScalarTypeEnum.DateTime(),
+			type: E5.DateTime(),
 			isOptional: true
 		}
 	}
 });
-const RevokeRoleInputModel = new SchemaModel({
+const RevokeRoleInputModel = new x8({
 	name: "RevokeRoleInput",
 	description: "Input for revoking a role",
 	fields: { bindingId: {
-		type: ScalarTypeEnum.String_unsecure(),
+		type: E5.String_unsecure(),
 		isOptional: false
 	} }
 });
-const BindingIdPayloadModel = new SchemaModel({
+const BindingIdPayloadModel = new x8({
 	name: "BindingIdPayload",
 	description: "Payload with binding ID",
 	fields: { bindingId: {
-		type: ScalarTypeEnum.String_unsecure(),
+		type: E5.String_unsecure(),
 		isOptional: false
 	} }
 });
-const CheckPermissionInputModel = new SchemaModel({
+const CheckPermissionInputModel = new x8({
 	name: "CheckPermissionInput",
 	description: "Input for checking a permission",
 	fields: {
 		userId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		orgId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		permission: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		}
 	}
 });
-const ListUserPermissionsInputModel = new SchemaModel({
+const ListUserPermissionsInputModel = new x8({
 	name: "ListUserPermissionsInput",
 	description: "Input for listing user permissions",
 	fields: {
 		userId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		orgId: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		}
 	}
 });
-const ListUserPermissionsOutputModel = new SchemaModel({
+const ListUserPermissionsOutputModel = new x8({
 	name: "ListUserPermissionsOutput",
 	description: "Output for listing user permissions",
 	fields: {
 		permissions: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false,
 			isArray: true
 		},
@@ -484,4 +482,5 @@ const ListUserPermissionsContract = defineQuery({
 });
 
 //#endregion
-export { AssignRoleInputModel, BindingIdPayloadModel, CheckPermissionInputModel, CreateRoleInputModel, DeleteRoleInputModel, ListRolesOutputModel, ListUserPermissionsInputModel, ListUserPermissionsOutputModel, PermissionCheckResultModel, PolicyBindingModel, RevokeRoleInputModel, RoleModel, UpdateRoleInputModel };
+export { AssignRoleInputModel, BindingIdPayloadModel, CheckPermissionInputModel, CreateRoleInputModel, DeleteRoleInputModel, ListRolesOutputModel, ListUserPermissionsInputModel, ListUserPermissionsOutputModel, PermissionCheckResultModel, PolicyBindingModel, RevokeRoleInputModel, RoleModel, UpdateRoleInputModel };
+//# sourceMappingURL=rbac.js.map

package/dist/libs/identity-rbac/dist/contracts/rbac.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac.js","names":[],"sources":["../../../../../../../libs/identity-rbac/dist/contracts/rbac.js"],"sourcesContent":["import { E5, x8 } from \"../schema/dist/index.js\";\nimport { defineCommand, defineQuery } from \"./dist/spec.js\";\nimport \"./dist/index.js\";\nimport { SuccessResultModel } from \"./user.js\";\n\n//#region src/contracts/rbac.ts\nconst OWNERS = [\"platform.identity-rbac\"];\nconst RoleModel = new x8({\n\tname: \"Role\",\n\tdescription: \"RBAC role definition\",\n\tfields: {\n\t\tid: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tname: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tdescription: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tpermissions: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false,\n\t\t\tisArray: true\n\t\t},\n\t\tcreatedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst PolicyBindingModel = new x8({\n\tname: \"PolicyBinding\",\n\tdescription: \"Role assignment to a target\",\n\tfields: {\n\t\tid: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\troleId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\ttargetType: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\ttargetId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\texpiresAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: true\n\t\t},\n\t\tcreatedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t},\n\t\trole: {\n\t\t\ttype: RoleModel,\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst PermissionCheckResultModel = new x8({\n\tname: \"PermissionCheckResult\",\n\tdescription: \"Result of a permission check\",\n\tfields: {\n\t\tallowed: {\n\t\t\ttype: E5.Boolean(),\n\t\t\tisOptional: false\n\t\t},\n\t\treason: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tmatchedRole: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst CreateRoleInputModel = new x8({\n\tname: \"CreateRoleInput\",\n\tdescription: \"Input for creating a role\",\n\tfields: {\n\t\tname: {\n\t\t\ttype: E5.NonEmptyString(),\n\t\t\tisOptional: false\n\t\t},\n\t\tdescription: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tpermissions: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false,\n\t\t\tisArray: true\n\t\t}\n\t}\n});\nconst UpdateRoleInputModel = new x8({\n\tname: \"UpdateRoleInput\",\n\tdescription: \"Input for updating a role\",\n\tfields: {\n\t\troleId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\tname: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tdescription: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tpermissions: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true,\n\t\t\tisArray: true\n\t\t}\n\t}\n});\nconst DeleteRoleInputModel = new x8({\n\tname: \"DeleteRoleInput\",\n\tdescription: \"Input for deleting a role\",\n\tfields: { roleId: {\n\t\ttype: E5.String_unsecure(),\n\t\tisOptional: false\n\t} }\n});\nconst ListRolesOutputModel = new x8({\n\tname: \"ListRolesOutput\",\n\tdescription: \"Output for listing roles\",\n\tfields: { roles: {\n\t\ttype: RoleModel,\n\t\tisOptional: false,\n\t\tisArray: true\n\t} }\n});\nconst AssignRoleInputModel = new x8({\n\tname: \"AssignRoleInput\",\n\tdescription: \"Input for assigning a role\",\n\tfields: {\n\t\troleId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\ttargetType: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\ttargetId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\texpiresAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst RevokeRoleInputModel = new x8({\n\tname: \"RevokeRoleInput\",\n\tdescription: \"Input for revoking a role\",\n\tfields: { bindingId: {\n\t\ttype: E5.String_unsecure(),\n\t\tisOptional: false\n\t} }\n});\nconst BindingIdPayloadModel = new x8({\n\tname: \"BindingIdPayload\",\n\tdescription: \"Payload with binding ID\",\n\tfields: { bindingId: {\n\t\ttype: E5.String_unsecure(),\n\t\tisOptional: false\n\t} }\n});\nconst CheckPermissionInputModel = new x8({\n\tname: \"CheckPermissionInput\",\n\tdescription: \"Input for checking a permission\",\n\tfields: {\n\t\tuserId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tpermission: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst ListUserPermissionsInputModel = new x8({\n\tname: \"ListUserPermissionsInput\",\n\tdescription: \"Input for listing user permissions\",\n\tfields: {\n\t\tuserId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\torgId: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst ListUserPermissionsOutputModel = new x8({\n\tname: \"ListUserPermissionsOutput\",\n\tdescription: \"Output for listing user permissions\",\n\tfields: {\n\t\tpermissions: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false,\n\t\t\tisArray: true\n\t\t},\n\t\troles: {\n\t\t\ttype: RoleModel,\n\t\t\tisOptional: false,\n\t\t\tisArray: true\n\t\t}\n\t}\n});\n/**\n* Create a new role.\n*/\nconst CreateRoleContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.rbac.role.create\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"rbac\",\n\t\t\t\"role\",\n\t\t\t\"create\"\n\t\t],\n\t\tdescription: \"Create a new role with permissions.\",\n\t\tgoal: \"Allow admins to define custom roles.\",\n\t\tcontext: \"Role management in admin settings.\"\n\t},\n\tio: {\n\t\tinput: CreateRoleInputModel,\n\t\toutput: RoleModel,\n\t\terrors: { ROLE_EXISTS: {\n\t\t\tdescription: \"A role with this name already exists\",\n\t\t\thttp: 409,\n\t\t\tgqlCode: \"ROLE_EXISTS\",\n\t\t\twhen: \"Role name is taken\"\n\t\t} }\n\t},\n\tpolicy: { auth: \"admin\" },\n\tsideEffects: { audit: [\"role.created\"] }\n});\n/**\n* Update a role.\n*/\nconst UpdateRoleContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.rbac.role.update\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"rbac\",\n\t\t\t\"role\",\n\t\t\t\"update\"\n\t\t],\n\t\tdescription: \"Update an existing role.\",\n\t\tgoal: \"Allow admins to modify role permissions.\",\n\t\tcontext: \"Role management in admin settings.\"\n\t},\n\tio: {\n\t\tinput: UpdateRoleInputModel,\n\t\toutput: RoleModel\n\t},\n\tpolicy: { auth: \"admin\" },\n\tsideEffects: { audit: [\"role.updated\"] }\n});\n/**\n* Delete a role.\n*/\nconst DeleteRoleContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.rbac.role.delete\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"rbac\",\n\t\t\t\"role\",\n\t\t\t\"delete\"\n\t\t],\n\t\tdescription: \"Delete an existing role.\",\n\t\tgoal: \"Allow admins to remove unused roles.\",\n\t\tcontext: \"Role management. Removes all policy bindings using this role.\"\n\t},\n\tio: {\n\t\tinput: DeleteRoleInputModel,\n\t\toutput: SuccessResultModel,\n\t\terrors: { ROLE_IN_USE: {\n\t\t\tdescription: \"Role is still assigned to users or organizations\",\n\t\t\thttp: 409,\n\t\t\tgqlCode: \"ROLE_IN_USE\",\n\t\t\twhen: \"Role has active bindings\"\n\t\t} }\n\t},\n\tpolicy: { auth: \"admin\" },\n\tsideEffects: { audit: [\"role.deleted\"] }\n});\n/**\n* List all roles.\n*/\nconst ListRolesContract = defineQuery({\n\tmeta: {\n\t\tname: \"identity.rbac.role.list\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"rbac\",\n\t\t\t\"role\",\n\t\t\t\"list\"\n\t\t],\n\t\tdescription: \"List all available roles.\",\n\t\tgoal: \"Show available roles for assignment.\",\n\t\tcontext: \"Role assignment UI.\"\n\t},\n\tio: {\n\t\tinput: null,\n\t\toutput: ListRolesOutputModel\n\t},\n\tpolicy: { auth: \"user\" }\n});\n/**\n* Assign a role to a user or organization.\n*/\nconst AssignRoleContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.rbac.assign\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"rbac\",\n\t\t\t\"assign\"\n\t\t],\n\t\tdescription: \"Assign a role to a user or organization.\",\n\t\tgoal: \"Grant permissions via role assignment.\",\n\t\tcontext: \"User/org permission management.\"\n\t},\n\tio: {\n\t\tinput: AssignRoleInputModel,\n\t\toutput: PolicyBindingModel,\n\t\terrors: {\n\t\t\tROLE_NOT_FOUND: {\n\t\t\t\tdescription: \"The specified role does not exist\",\n\t\t\t\thttp: 404,\n\t\t\t\tgqlCode: \"ROLE_NOT_FOUND\",\n\t\t\t\twhen: \"Role ID is invalid\"\n\t\t\t},\n\t\t\tALREADY_ASSIGNED: {\n\t\t\t\tdescription: \"This role is already assigned to the target\",\n\t\t\t\thttp: 409,\n\t\t\t\tgqlCode: \"ALREADY_ASSIGNED\",\n\t\t\t\twhen: \"Binding already exists\"\n\t\t\t}\n\t\t}\n\t},\n\tpolicy: { auth: \"admin\" },\n\tsideEffects: {\n\t\temits: [{\n\t\t\tname: \"role.assigned\",\n\t\t\tversion: 1,\n\t\t\twhen: \"Role is assigned\",\n\t\t\tpayload: PolicyBindingModel\n\t\t}],\n\t\taudit: [\"role.assigned\"]\n\t}\n});\n/**\n* Revoke a role from a user or organization.\n*/\nconst RevokeRoleContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.rbac.revoke\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"rbac\",\n\t\t\t\"revoke\"\n\t\t],\n\t\tdescription: \"Revoke a role from a user or organization.\",\n\t\tgoal: \"Remove permissions via role revocation.\",\n\t\tcontext: \"User/org permission management.\"\n\t},\n\tio: {\n\t\tinput: RevokeRoleInputModel,\n\t\toutput: SuccessResultModel,\n\t\terrors: { BINDING_NOT_FOUND: {\n\t\t\tdescription: \"The policy binding does not exist\",\n\t\t\thttp: 404,\n\t\t\tgqlCode: \"BINDING_NOT_FOUND\",\n\t\t\twhen: \"Binding ID is invalid\"\n\t\t} }\n\t},\n\tpolicy: { auth: \"admin\" },\n\tsideEffects: {\n\t\temits: [{\n\t\t\tname: \"role.revoked\",\n\t\t\tversion: 1,\n\t\t\twhen: \"Role is revoked\",\n\t\t\tpayload: BindingIdPayloadModel\n\t\t}],\n\t\taudit: [\"role.revoked\"]\n\t}\n});\n/**\n* Check if a user has a specific permission.\n*/\nconst CheckPermissionContract = defineQuery({\n\tmeta: {\n\t\tname: \"identity.rbac.check\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"rbac\",\n\t\t\t\"check\",\n\t\t\t\"permission\"\n\t\t],\n\t\tdescription: \"Check if a user has a specific permission.\",\n\t\tgoal: \"Authorization check before sensitive operations.\",\n\t\tcontext: \"Called by other services to verify permissions.\"\n\t},\n\tio: {\n\t\tinput: CheckPermissionInputModel,\n\t\toutput: PermissionCheckResultModel\n\t},\n\tpolicy: { auth: \"user\" }\n});\n/**\n* List permissions for a user.\n*/\nconst ListUserPermissionsContract = defineQuery({\n\tmeta: {\n\t\tname: \"identity.rbac.permissions\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"rbac\",\n\t\t\t\"permissions\",\n\t\t\t\"user\"\n\t\t],\n\t\tdescription: \"List all permissions for a user in a context.\",\n\t\tgoal: \"Show what a user can do in an org.\",\n\t\tcontext: \"UI permission display, debugging.\"\n\t},\n\tio: {\n\t\tinput: ListUserPermissionsInputModel,\n\t\toutput: ListUserPermissionsOutputModel\n\t},\n\tpolicy: { auth: \"user\" }\n});\n\n//#endregion\nexport { AssignRoleContract, AssignRoleInputModel, BindingIdPayloadModel, CheckPermissionContract, CheckPermissionInputModel, CreateRoleContract, CreateRoleInputModel, DeleteRoleContract, DeleteRoleInputModel, ListRolesContract, ListRolesOutputModel, ListUserPermissionsContract, ListUserPermissionsInputModel, ListUserPermissionsOutputModel, PermissionCheckResultModel, PolicyBindingModel, RevokeRoleContract, RevokeRoleInputModel, RoleModel, UpdateRoleContract, UpdateRoleInputModel };\n//# sourceMappingURL=rbac.js.map"],"mappings":";;;;;;AAMA,MAAM,SAAS,CAAC,yBAAyB;AACzC,MAAM,YAAY,IAAI,GAAG;CACxB,MAAM;CACN,aAAa;CACb,QAAQ;EACP,IAAI;GACH,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ,SAAS;GACT;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,qBAAqB,IAAI,GAAG;CACjC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,IAAI;GACH,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,YAAY;GACX,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD,MAAM;GACL,MAAM;GACN,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,6BAA6B,IAAI,GAAG;CACzC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,SAAS;GACR,MAAM,GAAG,SAAS;GAClB,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,MAAM;GACL,MAAM,GAAG,gBAAgB;GACzB,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ,SAAS;GACT;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ,SAAS;GACT;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ,EAAE,QAAQ;EACjB,MAAM,GAAG,iBAAiB;EAC1B,YAAY;EACZ,EAAE;CACH,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ,EAAE,OAAO;EAChB,MAAM;EACN,YAAY;EACZ,SAAS;EACT,EAAE;CACH,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,YAAY;GACX,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ,EAAE,WAAW;EACpB,MAAM,GAAG,iBAAiB;EAC1B,YAAY;EACZ,EAAE;CACH,CAAC;AACF,MAAM,wBAAwB,IAAI,GAAG;CACpC,MAAM;CACN,aAAa;CACb,QAAQ,EAAE,WAAW;EACpB,MAAM,GAAG,iBAAiB;EAC1B,YAAY;EACZ,EAAE;CACH,CAAC;AACF,MAAM,4BAA4B,IAAI,GAAG;CACxC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,YAAY;GACX,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,gCAAgC,IAAI,GAAG;CAC5C,MAAM;CACN,aAAa;CACb,QAAQ;EACP,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,iCAAiC,IAAI,GAAG;CAC7C,MAAM;CACN,aAAa;CACb,QAAQ;EACP,aAAa;GACZ,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ,SAAS;GACT;EACD,OAAO;GACN,MAAM;GACN,YAAY;GACZ,SAAS;GACT;EACD;CACD,CAAC;;;;AAIF,MAAM,qBAAqB,cAAc;CACxC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR,QAAQ,EAAE,aAAa;GACtB,aAAa;GACb,MAAM;GACN,SAAS;GACT,MAAM;GACN,EAAE;EACH;CACD,QAAQ,EAAE,MAAM,SAAS;CACzB,aAAa,EAAE,OAAO,CAAC,eAAe,EAAE;CACxC,CAAC;;;;AAIF,MAAM,qBAAqB,cAAc;CACxC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,SAAS;CACzB,aAAa,EAAE,OAAO,CAAC,eAAe,EAAE;CACxC,CAAC;;;;AAIF,MAAM,qBAAqB,cAAc;CACxC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR,QAAQ,EAAE,aAAa;GACtB,aAAa;GACb,MAAM;GACN,SAAS;GACT,MAAM;GACN,EAAE;EACH;CACD,QAAQ,EAAE,MAAM,SAAS;CACzB,aAAa,EAAE,OAAO,CAAC,eAAe,EAAE;CACxC,CAAC;;;;AAIF,MAAM,oBAAoB,YAAY;CACrC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,CAAC;;;;AAIF,MAAM,qBAAqB,cAAc;CACxC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR,QAAQ;GACP,gBAAgB;IACf,aAAa;IACb,MAAM;IACN,SAAS;IACT,MAAM;IACN;GACD,kBAAkB;IACjB,aAAa;IACb,MAAM;IACN,SAAS;IACT,MAAM;IACN;GACD;EACD;CACD,QAAQ,EAAE,MAAM,SAAS;CACzB,aAAa;EACZ,OAAO,CAAC;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,SAAS;GACT,CAAC;EACF,OAAO,CAAC,gBAAgB;EACxB;CACD,CAAC;;;;AAIF,MAAM,qBAAqB,cAAc;CACxC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR,QAAQ,EAAE,mBAAmB;GAC5B,aAAa;GACb,MAAM;GACN,SAAS;GACT,MAAM;GACN,EAAE;EACH;CACD,QAAQ,EAAE,MAAM,SAAS;CACzB,aAAa;EACZ,OAAO,CAAC;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,SAAS;GACT,CAAC;EACF,OAAO,CAAC,eAAe;EACvB;CACD,CAAC;;;;AAIF,MAAM,0BAA0B,YAAY;CAC3C,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,CAAC;;;;AAIF,MAAM,8BAA8B,YAAY;CAC/C,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,CAAC"}

package/dist/libs/identity-rbac/dist/contracts/user.js

@@ -1,164 +1,162 @@
-import { ScalarTypeEnum } from "../schema/dist/ScalarTypeEnum.js";
-import { SchemaModel } from "../schema/dist/SchemaModel.js";
-import "../schema/dist/index.js";
+import { E5, x8 } from "../schema/dist/index.js";
 import { defineCommand, defineQuery } from "./dist/spec.js";
 import "./dist/index.js";
 
 //#region ../../libs/identity-rbac/dist/contracts/user.js
 const OWNERS = ["platform.identity-rbac"];
-const UserProfileModel = new SchemaModel({
+const UserProfileModel = new x8({
 	name: "UserProfile",
 	description: "User profile information",
 	fields: {
 		id: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: false
 		},
 		email: {
-			type: ScalarTypeEnum.EmailAddress(),
+			type: E5.EmailAddress(),
 			isOptional: false
 		},
 		emailVerified: {
-			type: ScalarTypeEnum.Boolean(),
+			type: E5.Boolean(),
 			isOptional: false
 		},
 		name: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		firstName: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		lastName: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		locale: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		timezone: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		imageUrl: {
-			type: ScalarTypeEnum.URL(),
+			type: E5.URL(),
 			isOptional: true
 		},
 		role: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		onboardingCompleted: {
-			type: ScalarTypeEnum.Boolean(),
+			type: E5.Boolean(),
 			isOptional: false
 		},
 		createdAt: {
-			type: ScalarTypeEnum.DateTime(),
+			type: E5.DateTime(),
 			isOptional: false
 		}
 	}
 });
-const CreateUserInputModel = new SchemaModel({
+const CreateUserInputModel = new x8({
 	name: "CreateUserInput",
 	description: "Input for creating a new user",
 	fields: {
 		email: {
-			type: ScalarTypeEnum.EmailAddress(),
+			type: E5.EmailAddress(),
 			isOptional: false
 		},
 		name: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		firstName: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		lastName: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		password: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		}
 	}
 });
-const UpdateUserInputModel = new SchemaModel({
+const UpdateUserInputModel = new x8({
 	name: "UpdateUserInput",
 	description: "Input for updating a user profile",
 	fields: {
 		name: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		firstName: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		lastName: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		locale: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		timezone: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		},
 		imageUrl: {
-			type: ScalarTypeEnum.URL(),
+			type: E5.URL(),
 			isOptional: true
 		}
 	}
 });
-const DeleteUserInputModel = new SchemaModel({
+const DeleteUserInputModel = new x8({
 	name: "DeleteUserInput",
 	description: "Input for deleting a user",
 	fields: { confirmEmail: {
-		type: ScalarTypeEnum.EmailAddress(),
+		type: E5.EmailAddress(),
 		isOptional: false
 	} }
 });
-const SuccessResultModel = new SchemaModel({
+const SuccessResultModel = new x8({
 	name: "SuccessResult",
 	description: "Simple success result",
 	fields: { success: {
-		type: ScalarTypeEnum.Boolean(),
+		type: E5.Boolean(),
 		isOptional: false
 	} }
 });
-const UserDeletedPayloadModel = new SchemaModel({
+const UserDeletedPayloadModel = new x8({
 	name: "UserDeletedPayload",
 	description: "Payload for user deleted event",
 	fields: { userId: {
-		type: ScalarTypeEnum.String_unsecure(),
+		type: E5.String_unsecure(),
 		isOptional: false
 	} }
 });
-const ListUsersInputModel = new SchemaModel({
+const ListUsersInputModel = new x8({
 	name: "ListUsersInput",
 	description: "Input for listing users",
 	fields: {
 		limit: {
-			type: ScalarTypeEnum.Int_unsecure(),
+			type: E5.Int_unsecure(),
 			isOptional: true
 		},
 		offset: {
-			type: ScalarTypeEnum.Int_unsecure(),
+			type: E5.Int_unsecure(),
 			isOptional: true
 		},
 		search: {
-			type: ScalarTypeEnum.String_unsecure(),
+			type: E5.String_unsecure(),
 			isOptional: true
 		}
 	}
 });
-const ListUsersOutputModel = new SchemaModel({
+const ListUsersOutputModel = new x8({
 	name: "ListUsersOutput",
 	description: "Output for listing users",
 	fields: {
@@ -168,7 +166,7 @@ const ListUsersOutputModel = new SchemaModel({
 			isArray: true
 		},
 		total: {
-			type: ScalarTypeEnum.Int_unsecure(),
+			type: E5.Int_unsecure(),
 			isOptional: false
 		}
 	}
@@ -332,4 +330,5 @@ const ListUsersContract = defineQuery({
 });
 
 //#endregion
-export { CreateUserInputModel, DeleteUserInputModel, ListUsersInputModel, ListUsersOutputModel, SuccessResultModel, UpdateUserInputModel, UserDeletedPayloadModel, UserProfileModel };
+export { CreateUserInputModel, DeleteUserInputModel, ListUsersInputModel, ListUsersOutputModel, SuccessResultModel, UpdateUserInputModel, UserDeletedPayloadModel, UserProfileModel };
+//# sourceMappingURL=user.js.map

package/dist/libs/identity-rbac/dist/contracts/user.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.js","names":[],"sources":["../../../../../../../libs/identity-rbac/dist/contracts/user.js"],"sourcesContent":["import { E5, x8 } from \"../schema/dist/index.js\";\nimport { defineCommand, defineQuery } from \"./dist/spec.js\";\nimport \"./dist/index.js\";\n\n//#region src/contracts/user.ts\nconst OWNERS = [\"platform.identity-rbac\"];\nconst UserProfileModel = new x8({\n\tname: \"UserProfile\",\n\tdescription: \"User profile information\",\n\tfields: {\n\t\tid: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: false\n\t\t},\n\t\temail: {\n\t\t\ttype: E5.EmailAddress(),\n\t\t\tisOptional: false\n\t\t},\n\t\temailVerified: {\n\t\t\ttype: E5.Boolean(),\n\t\t\tisOptional: false\n\t\t},\n\t\tname: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tfirstName: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tlastName: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tlocale: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\ttimezone: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\timageUrl: {\n\t\t\ttype: E5.URL(),\n\t\t\tisOptional: true\n\t\t},\n\t\trole: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tonboardingCompleted: {\n\t\t\ttype: E5.Boolean(),\n\t\t\tisOptional: false\n\t\t},\n\t\tcreatedAt: {\n\t\t\ttype: E5.DateTime(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\nconst CreateUserInputModel = new x8({\n\tname: \"CreateUserInput\",\n\tdescription: \"Input for creating a new user\",\n\tfields: {\n\t\temail: {\n\t\t\ttype: E5.EmailAddress(),\n\t\t\tisOptional: false\n\t\t},\n\t\tname: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tfirstName: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tlastName: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tpassword: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst UpdateUserInputModel = new x8({\n\tname: \"UpdateUserInput\",\n\tdescription: \"Input for updating a user profile\",\n\tfields: {\n\t\tname: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tfirstName: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tlastName: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tlocale: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\ttimezone: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\timageUrl: {\n\t\t\ttype: E5.URL(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst DeleteUserInputModel = new x8({\n\tname: \"DeleteUserInput\",\n\tdescription: \"Input for deleting a user\",\n\tfields: { confirmEmail: {\n\t\ttype: E5.EmailAddress(),\n\t\tisOptional: false\n\t} }\n});\nconst SuccessResultModel = new x8({\n\tname: \"SuccessResult\",\n\tdescription: \"Simple success result\",\n\tfields: { success: {\n\t\ttype: E5.Boolean(),\n\t\tisOptional: false\n\t} }\n});\nconst UserDeletedPayloadModel = new x8({\n\tname: \"UserDeletedPayload\",\n\tdescription: \"Payload for user deleted event\",\n\tfields: { userId: {\n\t\ttype: E5.String_unsecure(),\n\t\tisOptional: false\n\t} }\n});\nconst ListUsersInputModel = new x8({\n\tname: \"ListUsersInput\",\n\tdescription: \"Input for listing users\",\n\tfields: {\n\t\tlimit: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\toffset: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: true\n\t\t},\n\t\tsearch: {\n\t\t\ttype: E5.String_unsecure(),\n\t\t\tisOptional: true\n\t\t}\n\t}\n});\nconst ListUsersOutputModel = new x8({\n\tname: \"ListUsersOutput\",\n\tdescription: \"Output for listing users\",\n\tfields: {\n\t\tusers: {\n\t\t\ttype: UserProfileModel,\n\t\t\tisOptional: false,\n\t\t\tisArray: true\n\t\t},\n\t\ttotal: {\n\t\t\ttype: E5.Int_unsecure(),\n\t\t\tisOptional: false\n\t\t}\n\t}\n});\n/**\n* Create a new user account.\n*/\nconst CreateUserContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.user.create\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"user\",\n\t\t\t\"create\"\n\t\t],\n\t\tdescription: \"Create a new user account.\",\n\t\tgoal: \"Register a new user in the system.\",\n\t\tcontext: \"Used during signup flows. May trigger email verification.\"\n\t},\n\tio: {\n\t\tinput: CreateUserInputModel,\n\t\toutput: UserProfileModel,\n\t\terrors: { EMAIL_EXISTS: {\n\t\t\tdescription: \"A user with this email already exists\",\n\t\t\thttp: 409,\n\t\t\tgqlCode: \"EMAIL_EXISTS\",\n\t\t\twhen: \"Email is already registered\"\n\t\t} }\n\t},\n\tpolicy: { auth: \"anonymous\" },\n\tsideEffects: {\n\t\temits: [{\n\t\t\tname: \"user.created\",\n\t\t\tversion: 1,\n\t\t\twhen: \"User is successfully created\",\n\t\t\tpayload: UserProfileModel\n\t\t}],\n\t\taudit: [\"user.created\"]\n\t}\n});\n/**\n* Get the current user's profile.\n*/\nconst GetCurrentUserContract = defineQuery({\n\tmeta: {\n\t\tname: \"identity.user.me\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"user\",\n\t\t\t\"profile\"\n\t\t],\n\t\tdescription: \"Get the current authenticated user profile.\",\n\t\tgoal: \"Retrieve user profile for the authenticated session.\",\n\t\tcontext: \"Called on app load and after profile updates.\"\n\t},\n\tio: {\n\t\tinput: null,\n\t\toutput: UserProfileModel\n\t},\n\tpolicy: { auth: \"user\" }\n});\n/**\n* Update user profile.\n*/\nconst UpdateUserContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.user.update\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"user\",\n\t\t\t\"update\"\n\t\t],\n\t\tdescription: \"Update user profile information.\",\n\t\tgoal: \"Allow users to update their profile.\",\n\t\tcontext: \"Self-service profile updates.\"\n\t},\n\tio: {\n\t\tinput: UpdateUserInputModel,\n\t\toutput: UserProfileModel\n\t},\n\tpolicy: { auth: \"user\" },\n\tsideEffects: {\n\t\temits: [{\n\t\t\tname: \"user.updated\",\n\t\t\tversion: 1,\n\t\t\twhen: \"User profile is updated\",\n\t\t\tpayload: UserProfileModel\n\t\t}],\n\t\taudit: [\"user.updated\"]\n\t}\n});\n/**\n* Delete user account.\n*/\nconst DeleteUserContract = defineCommand({\n\tmeta: {\n\t\tname: \"identity.user.delete\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"user\",\n\t\t\t\"delete\"\n\t\t],\n\t\tdescription: \"Delete user account and all associated data.\",\n\t\tgoal: \"Allow users to delete their account (GDPR compliance).\",\n\t\tcontext: \"Self-service account deletion. Cascades to memberships, sessions, etc.\"\n\t},\n\tio: {\n\t\tinput: DeleteUserInputModel,\n\t\toutput: SuccessResultModel\n\t},\n\tpolicy: {\n\t\tauth: \"user\",\n\t\tescalate: \"human_review\"\n\t},\n\tsideEffects: {\n\t\temits: [{\n\t\t\tname: \"user.deleted\",\n\t\t\tversion: 1,\n\t\t\twhen: \"User account is deleted\",\n\t\t\tpayload: UserDeletedPayloadModel\n\t\t}],\n\t\taudit: [\"user.deleted\"]\n\t}\n});\n/**\n* List users (admin only).\n*/\nconst ListUsersContract = defineQuery({\n\tmeta: {\n\t\tname: \"identity.user.list\",\n\t\tversion: 1,\n\t\tstability: \"stable\",\n\t\towners: [...OWNERS],\n\t\ttags: [\n\t\t\t\"identity\",\n\t\t\t\"user\",\n\t\t\t\"admin\",\n\t\t\t\"list\"\n\t\t],\n\t\tdescription: \"List all users (admin only).\",\n\t\tgoal: \"Allow admins to browse and manage users.\",\n\t\tcontext: \"Admin dashboard user management.\"\n\t},\n\tio: {\n\t\tinput: ListUsersInputModel,\n\t\toutput: ListUsersOutputModel\n\t},\n\tpolicy: { auth: \"admin\" }\n});\n\n//#endregion\nexport { CreateUserContract, CreateUserInputModel, DeleteUserContract, DeleteUserInputModel, GetCurrentUserContract, ListUsersContract, ListUsersInputModel, ListUsersOutputModel, SuccessResultModel, UpdateUserContract, UpdateUserInputModel, UserDeletedPayloadModel, UserProfileModel };\n//# sourceMappingURL=user.js.map"],"mappings":";;;;;AAKA,MAAM,SAAS,CAAC,yBAAyB;AACzC,MAAM,mBAAmB,IAAI,GAAG;CAC/B,MAAM;CACN,aAAa;CACb,QAAQ;EACP,IAAI;GACH,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,eAAe;GACd,MAAM,GAAG,SAAS;GAClB,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,KAAK;GACd,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,qBAAqB;GACpB,MAAM,GAAG,SAAS;GAClB,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,UAAU;GACnB,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,MAAM;GACL,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,WAAW;GACV,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD,UAAU;GACT,MAAM,GAAG,KAAK;GACd,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ,EAAE,cAAc;EACvB,MAAM,GAAG,cAAc;EACvB,YAAY;EACZ,EAAE;CACH,CAAC;AACF,MAAM,qBAAqB,IAAI,GAAG;CACjC,MAAM;CACN,aAAa;CACb,QAAQ,EAAE,SAAS;EAClB,MAAM,GAAG,SAAS;EAClB,YAAY;EACZ,EAAE;CACH,CAAC;AACF,MAAM,0BAA0B,IAAI,GAAG;CACtC,MAAM;CACN,aAAa;CACb,QAAQ,EAAE,QAAQ;EACjB,MAAM,GAAG,iBAAiB;EAC1B,YAAY;EACZ,EAAE;CACH,CAAC;AACF,MAAM,sBAAsB,IAAI,GAAG;CAClC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD,QAAQ;GACP,MAAM,GAAG,iBAAiB;GAC1B,YAAY;GACZ;EACD;CACD,CAAC;AACF,MAAM,uBAAuB,IAAI,GAAG;CACnC,MAAM;CACN,aAAa;CACb,QAAQ;EACP,OAAO;GACN,MAAM;GACN,YAAY;GACZ,SAAS;GACT;EACD,OAAO;GACN,MAAM,GAAG,cAAc;GACvB,YAAY;GACZ;EACD;CACD,CAAC;;;;AAIF,MAAM,qBAAqB,cAAc;CACxC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR,QAAQ,EAAE,cAAc;GACvB,aAAa;GACb,MAAM;GACN,SAAS;GACT,MAAM;GACN,EAAE;EACH;CACD,QAAQ,EAAE,MAAM,aAAa;CAC7B,aAAa;EACZ,OAAO,CAAC;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,SAAS;GACT,CAAC;EACF,OAAO,CAAC,eAAe;EACvB;CACD,CAAC;;;;AAIF,MAAM,yBAAyB,YAAY;CAC1C,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,CAAC;;;;AAIF,MAAM,qBAAqB,cAAc;CACxC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,QAAQ;CACxB,aAAa;EACZ,OAAO,CAAC;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,SAAS;GACT,CAAC;EACF,OAAO,CAAC,eAAe;EACvB;CACD,CAAC;;;;AAIF,MAAM,qBAAqB,cAAc;CACxC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ;EACP,MAAM;EACN,UAAU;EACV;CACD,aAAa;EACZ,OAAO,CAAC;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,SAAS;GACT,CAAC;EACF,OAAO,CAAC,eAAe;EACvB;CACD,CAAC;;;;AAIF,MAAM,oBAAoB,YAAY;CACrC,MAAM;EACL,MAAM;EACN,SAAS;EACT,WAAW;EACX,QAAQ,CAAC,GAAG,OAAO;EACnB,MAAM;GACL;GACA;GACA;GACA;GACA;EACD,aAAa;EACb,MAAM;EACN,SAAS;EACT;CACD,IAAI;EACH,OAAO;EACP,QAAQ;EACR;CACD,QAAQ,EAAE,MAAM,SAAS;CACzB,CAAC"}

package/dist/libs/identity-rbac/dist/entities/index.js

@@ -32,4 +32,5 @@ const identityRbacSchemaContribution = {
 };
 
 //#endregion
-export { identityRbacEntities, identityRbacSchemaContribution };
+export { identityRbacEntities, identityRbacSchemaContribution };
+//# sourceMappingURL=index.js.map

package/dist/libs/identity-rbac/dist/entities/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../../../../../../libs/identity-rbac/dist/entities/index.js"],"sourcesContent":["import { AccountEntity, SessionEntity, UserEntity, VerificationEntity } from \"./user.js\";\nimport { InvitationEntity, MemberEntity, OrganizationEntity, OrganizationTypeEnum, TeamEntity, TeamMemberEntity } from \"./organization.js\";\nimport { ApiKeyEntity, PasskeyEntity, PermissionEntity, PolicyBindingEntity, RoleEntity } from \"./rbac.js\";\n\n//#region src/entities/index.ts\n/**\n* All identity-rbac entities for schema composition.\n*/\nconst identityRbacEntities = [\n\tUserEntity,\n\tSessionEntity,\n\tAccountEntity,\n\tVerificationEntity,\n\tOrganizationEntity,\n\tMemberEntity,\n\tInvitationEntity,\n\tTeamEntity,\n\tTeamMemberEntity,\n\tRoleEntity,\n\tPermissionEntity,\n\tPolicyBindingEntity,\n\tApiKeyEntity,\n\tPasskeyEntity\n];\n/**\n* Module schema contribution for identity-rbac.\n*/\nconst identityRbacSchemaContribution = {\n\tmoduleId: \"@lssm/lib.identity-rbac\",\n\tentities: identityRbacEntities,\n\tenums: [OrganizationTypeEnum]\n};\n\n//#endregion\nexport { AccountEntity, ApiKeyEntity, InvitationEntity, MemberEntity, OrganizationEntity, OrganizationTypeEnum, PasskeyEntity, PermissionEntity, PolicyBindingEntity, RoleEntity, SessionEntity, TeamEntity, TeamMemberEntity, UserEntity, VerificationEntity, identityRbacEntities, identityRbacSchemaContribution };\n//# sourceMappingURL=index.js.map"],"mappings":";;;;;;;;AAQA,MAAM,uBAAuB;CAC5B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;;;;AAID,MAAM,iCAAiC;CACtC,UAAU;CACV,UAAU;CACV,OAAO,CAAC,qBAAqB;CAC7B"}