@lssm/lib.identity-rbac 0.0.0-canary-20251206160926

package/README.md

@@ -0,0 +1,99 @@
+# @lssm/lib.identity-rbac
+
+Identity, Organizations, and Role-Based Access Control (RBAC) module for ContractSpec applications.
+
+## Purpose
+
+Provides a reusable identity and authorization foundation for multi-tenant, multi-role applications. This module follows the spec-first approach where entity definitions generate database schemas.
+
+## Features
+
+- **User Management**: User profiles, authentication accounts, sessions
+- **Organizations**: Multi-tenant organization support with slugs, metadata
+- **Memberships**: Role-based organization membership (owner, admin, member)
+- **RBAC**: Roles, permissions, and policy bindings
+- **Teams**: Optional team grouping within organizations
+- **Events**: Domain events for user/org lifecycle changes
+
+## Installation
+
+```bash
+bun add @lssm/lib.identity-rbac
+```
+
+## Usage
+
+### Entity Specs (for schema generation)
+
+```typescript
+import { UserEntity, OrganizationEntity, MemberEntity } from '@lssm/lib.identity-rbac/entities';
+
+// Use in schema composition
+const contribution = {
+  moduleId: '@lssm/lib.identity-rbac',
+  entities: [UserEntity, OrganizationEntity, MemberEntity, ...],
+};
+```
+
+### Contracts (for API generation)
+
+```typescript
+import { 
+  CreateUserContract,
+  InviteToOrgContract,
+  AssignRoleContract 
+} from '@lssm/lib.identity-rbac/contracts';
+```
+
+### Policies (for authorization)
+
+```typescript
+import { RBACPolicyEngine, Permission } from '@lssm/lib.identity-rbac/policies';
+
+const engine = new RBACPolicyEngine();
+const canManage = await engine.checkPermission({
+  userId: 'user-123',
+  orgId: 'org-456',
+  permission: Permission.MANAGE_MEMBERS,
+});
+```
+
+### Events
+
+```typescript
+import { UserCreatedEvent, OrgMemberAddedEvent } from '@lssm/lib.identity-rbac/events';
+
+bus.subscribe(UserCreatedEvent, async (event) => {
+  // Handle user creation
+});
+```
+
+## Entity Overview
+
+| Entity | Description |
+|--------|-------------|
+| User | Platform user with profile and auth |
+| Organization | Tenant/company grouping |
+| Member | User's membership in an organization |
+| Role | Named set of permissions |
+| Permission | Atomic access right |
+| PolicyBinding | Binds roles to principals |
+| Team | Optional team within organization |
+
+## Schemas
+
+All entities are defined in the `lssm_sigil` PostgreSQL schema for isolation.
+
+## Events
+
+| Event | Trigger |
+|-------|---------|
+| user.created | New user registered |
+| user.updated | User profile changed |
+| user.deleted | User account removed |
+| org.created | New organization created |
+| org.member.added | User joined organization |
+| org.member.removed | User left organization |
+| role.assigned | Role assigned to user/org |
+| role.revoked | Role removed from user/org |
+

package/dist/contracts/dist/capabilities/openbanking.js

@@ -0,0 +1 @@
+import{e}from"../ownership.js";const t=[`platform.finance`],n=[`open-banking`,`finance`];[...t],[...n],e.Experimental,[...t],[...n],e.Experimental,[...t],[...n],e.Experimental;

package/dist/contracts/dist/client/index.js

@@ -0,0 +1 @@
+"use client";import"./react/feature-render.js";import"./react/form-render.js";import"./react/index.js";

package/dist/contracts/dist/client/react/feature-render.js

@@ -0,0 +1 @@
+import"../../presentations.v2.js";import"react";

package/dist/contracts/dist/client/react/form-render.js

@@ -0,0 +1 @@
+import"react";import"react-hook-form";import"@hookform/resolvers/zod";import"react/jsx-runtime";

package/dist/contracts/dist/client/react/index.js

@@ -0,0 +1 @@
+"use client";import"./feature-render.js";import"./form-render.js";

package/dist/contracts/dist/events.js

@@ -0,0 +1 @@
+import"./schema/dist/index.js";function e(e){return e}export{e};

package/dist/contracts/dist/experiments/evaluator.js

@@ -0,0 +1 @@
+import"node:crypto";

package/dist/contracts/dist/graphql-federation/dist/index.js

@@ -0,0 +1 @@
+import"@pothos/plugin-federation";import"@apollo/subgraph";

package/dist/contracts/dist/index.js

@@ -0,0 +1 @@
+import"./schema/dist/SchemaModel.js";import"./schema/dist/index.js";import{e}from"./events.js";import"./presentations.v2.js";import"./client/react/feature-render.js";import"./client/react/form-render.js";import"./client/index.js";import"./jsonschema.js";import"./server/graphql-pothos.js";import"./server/graphql-schema-export.js";import"./presentations.js";import"./server/provider-mcp.js";import"./server/rest-generic.js";import"./server/rest-elysia.js";import"./server/rest-express.js";import"./server/rest-next-app.js";import"./server/rest-next-pages.js";import"./server/index.js";import{n as t,t as n}from"./spec.js";import"./registry.js";import"./install.js";import"./prompt.js";import"./promptRegistry.js";import"./resources.js";import{e as r,r as i,t as a}from"./ownership.js";import{d as o,l as s,m as c,o as l,p as u,s as d}from"./onboarding-base.js";import"./capabilities/openbanking.js";import"./telemetry/tracker.js";import"./telemetry/index.js";import"./tests/runner.js";import"./tests/index.js";import"./experiments/evaluator.js";import"./integrations/providers/stripe.js";import"./integrations/providers/postmark.js";import"./integrations/providers/qdrant.js";import"./integrations/providers/mistral.js";import"./integrations/providers/elevenlabs.js";import"./integrations/providers/gmail.js";import"./integrations/providers/google-calendar.js";import"./integrations/providers/twilio-sms.js";import"./integrations/providers/gcs-storage.js";import"./integrations/providers/powens.js";import"./integrations/providers/impls/mistral-llm.js";import"./integrations/providers/impls/mistral-embedding.js";import"./integrations/providers/impls/qdrant-vector.js";import"./integrations/providers/impls/gmail-inbound.js";import"./integrations/providers/impls/gmail-outbound.js";import"./integrations/providers/impls/google-calendar.js";import"./integrations/providers/impls/elevenlabs-voice.js";import"./integrations/providers/impls/gcs-storage.js";import"./integrations/providers/impls/stripe-payments.js";import"./integrations/providers/impls/postmark-email.js";import"./integrations/providers/impls/twilio-sms.js";import"./integrations/providers/impls/powens-client.js";import"./integrations/providers/impls/powens-openbanking.js";import"./integrations/providers/impls/provider-factory.js";import"./integrations/secrets/provider.js";import"./integrations/secrets/gcp-secret-manager.js";import"./integrations/secrets/env-secret-provider.js";import"./integrations/secrets/manager.js";import"./integrations/runtime.js";import{i as f,n as p,r as m}from"./integrations/openbanking/models.js";import{t as h}from"./integrations/openbanking/telemetry.js";import{d as g,f as _,p as v}from"./integrations/openbanking/contracts/accounts.js";import{d as y,u as b}from"./integrations/openbanking/contracts/transactions.js";import{d as x,u as S}from"./integrations/openbanking/contracts/balances.js";import"./integrations/openbanking/contracts/index.js";import"./integrations/index.js";import"./knowledge/spaces/product-canon.js";import"./knowledge/spaces/support-faq.js";import"./knowledge/spaces/email-threads.js";import"./knowledge/spaces/uploaded-docs.js";import"./knowledge/spaces/financial-docs.js";import"./knowledge/spaces/financial-overview.js";import"./knowledge/index.js";import{_ as C,g as w,h as T,m as E,p as D}from"./integrations/contracts.js";import{_ as O,g as k,h as A,m as j,v as M}from"./knowledge/contracts.js";import"./regenerator/service.js";import"./regenerator/index.js";import"./workflow/runner.js";import"./workflow/index.js";

package/dist/contracts/dist/install.js

@@ -0,0 +1 @@
+import"./registry.js";import{z as e}from"zod";

package/dist/contracts/dist/integrations/contracts.js

@@ -0,0 +1 @@
+import{t as e}from"../schema/dist/SchemaModel.js";import{l as t}from"../schema/dist/ScalarTypeEnum.js";import"../schema/dist/index.js";import{n,t as r}from"../spec.js";const i=new e({name:`IntegrationConnectionRecord`,fields:{id:{type:t.ID(),isOptional:!1},tenantId:{type:t.ID(),isOptional:!1},integrationKey:{type:t.NonEmptyString(),isOptional:!1},integrationVersion:{type:t.Int_unsecure(),isOptional:!1},label:{type:t.String_unsecure(),isOptional:!1},ownershipMode:{type:t.String_unsecure(),isOptional:!1},externalAccountId:{type:t.String_unsecure(),isOptional:!0},secretProvider:{type:t.String_unsecure(),isOptional:!1},secretRef:{type:t.String_unsecure(),isOptional:!1},status:{type:t.String_unsecure(),isOptional:!1},environment:{type:t.String_unsecure(),isOptional:!0},healthStatus:{type:t.String_unsecure(),isOptional:!0},healthCheckedAt:{type:t.DateTime(),isOptional:!0},healthLatencyMs:{type:t.Float_unsecure(),isOptional:!0},healthErrorCode:{type:t.String_unsecure(),isOptional:!0},healthErrorMessage:{type:t.String_unsecure(),isOptional:!0},usageRequestCount:{type:t.Int_unsecure(),isOptional:!0},usageSuccessCount:{type:t.Int_unsecure(),isOptional:!0},usageErrorCount:{type:t.Int_unsecure(),isOptional:!0},usageLastUsedAt:{type:t.DateTime(),isOptional:!0},usageLastErrorAt:{type:t.DateTime(),isOptional:!0},usageLastErrorCode:{type:t.String_unsecure(),isOptional:!0},createdAt:{type:t.DateTime(),isOptional:!0},updatedAt:{type:t.DateTime(),isOptional:!0}}}),a=new e({name:`CreateIntegrationConnectionInput`,fields:{tenantId:{type:t.ID(),isOptional:!1},integrationKey:{type:t.NonEmptyString(),isOptional:!1},integrationVersion:{type:t.Int_unsecure(),isOptional:!1},label:{type:t.String_unsecure(),isOptional:!1},ownershipMode:{type:t.String_unsecure(),isOptional:!1},externalAccountId:{type:t.String_unsecure(),isOptional:!0},secretProvider:{type:t.String_unsecure(),isOptional:!1},secretRef:{type:t.String_unsecure(),isOptional:!1},environment:{type:t.String_unsecure(),isOptional:!0},config:{type:t.JSONObject(),isOptional:!1}}}),o=new e({name:`UpdateIntegrationConnectionInput`,fields:{connectionId:{type:t.ID(),isOptional:!1},label:{type:t.String_unsecure(),isOptional:!0},status:{type:t.String_unsecure(),isOptional:!0},ownershipMode:{type:t.String_unsecure(),isOptional:!0},externalAccountId:{type:t.String_unsecure(),isOptional:!0},secretProvider:{type:t.String_unsecure(),isOptional:!0},secretRef:{type:t.String_unsecure(),isOptional:!0},config:{type:t.JSONObject(),isOptional:!0}}}),s=new e({name:`DeleteIntegrationConnectionInput`,fields:{connectionId:{type:t.ID(),isOptional:!1}}}),c=new e({name:`ListIntegrationConnectionsInput`,fields:{tenantId:{type:t.ID(),isOptional:!1},category:{type:t.String_unsecure(),isOptional:!0},status:{type:t.String_unsecure(),isOptional:!0}}}),l=new e({name:`ListIntegrationConnectionsOutput`,fields:{connections:{type:i,isOptional:!1,isArray:!0}}}),u=new e({name:`TestIntegrationConnectionInput`,fields:{connectionId:{type:t.ID(),isOptional:!1}}}),d=new e({name:`TestIntegrationConnectionOutput`,fields:{success:{type:t.Boolean(),isOptional:!1},status:{type:t.String_unsecure(),isOptional:!0},latencyMs:{type:t.Float_unsecure(),isOptional:!0},error:{type:t.String_unsecure(),isOptional:!0},errorCode:{type:t.String_unsecure(),isOptional:!0}}}),f=new e({name:`DeleteIntegrationConnectionOutput`,fields:{success:{type:t.Boolean(),isOptional:!1}}}),p=r({meta:{name:`integrations.connection.create`,version:1,description:`Create a new integration connection for a tenant.`,goal:`Provision a tenant-scoped connection to an external provider.`,context:`Used by Ops or the App Studio to configure external integrations such as Stripe or Qdrant.`,owners:[`platform.integrations`],tags:[`integration`,`connections`],stability:`experimental`},io:{input:a,output:i},policy:{auth:`admin`,policies:[{name:`platform.integration.manage`,version:1}]}}),m=r({meta:{name:`integrations.connection.update`,version:1,description:`Update metadata or credentials for an integration connection.`,goal:`Allow secure rotation of credentials and metadata adjustments.`,context:`Supports rotating API keys, toggling status, or updating labels for tenant integrations.`,owners:[`platform.integrations`],tags:[`integration`,`connections`],stability:`experimental`},io:{input:o,output:i},policy:{auth:`admin`,policies:[{name:`platform.integration.manage`,version:1}]}}),h=r({meta:{name:`integrations.connection.delete`,version:1,description:`Delete an integration connection for a tenant.`,goal:`Safely remove credentials and disable connector usage.`,context:`Ensures connections are de-provisioned when no longer needed or breached.`,owners:[`platform.integrations`],tags:[`integration`,`connections`],stability:`experimental`},io:{input:s,output:f},policy:{auth:`admin`,policies:[{name:`platform.integration.manage`,version:1}]}}),g=n({meta:{name:`integrations.connection.list`,version:1,description:`List integration connections for a tenant.`,goal:`Provide visibility into configured integrations and their status.`,context:`Used by the App Studio and Ops flows to show bindings and health.`,owners:[`platform.integrations`],tags:[`integration`,`connections`],stability:`experimental`},io:{input:c,output:l},policy:{auth:`admin`,policies:[{name:`platform.integration.read`,version:1}]}}),_=r({meta:{name:`integrations.connection.test`,version:1,description:`Run a health check against a configured integration connection.`,goal:`Validate credentials and connectivity for external providers.`,context:`Triggered manually or by background monitors to confirm provider availability.`,owners:[`platform.integrations`],tags:[`integration`,`connections`],stability:`experimental`},io:{input:u,output:d},policy:{auth:`admin`,policies:[{name:`platform.integration.manage`,version:1}]}});export{_,g,h,m,p};

package/dist/contracts/dist/integrations/index.js

@@ -0,0 +1 @@
+import"./providers/stripe.js";import"./providers/postmark.js";import"./providers/qdrant.js";import"./providers/mistral.js";import"./providers/elevenlabs.js";import"./providers/gmail.js";import"./providers/google-calendar.js";import"./providers/twilio-sms.js";import"./providers/gcs-storage.js";import"./providers/powens.js";import"./providers/impls/mistral-llm.js";import"./providers/impls/mistral-embedding.js";import"./providers/impls/qdrant-vector.js";import"./providers/impls/gmail-inbound.js";import"./providers/impls/gmail-outbound.js";import"./providers/impls/google-calendar.js";import"./providers/impls/elevenlabs-voice.js";import"./providers/impls/gcs-storage.js";import"./providers/impls/stripe-payments.js";import"./providers/impls/postmark-email.js";import"./providers/impls/twilio-sms.js";import"./providers/impls/powens-client.js";import"./providers/impls/powens-openbanking.js";import"./providers/impls/provider-factory.js";import"./secrets/provider.js";import"./secrets/gcp-secret-manager.js";import"./secrets/env-secret-provider.js";import"./secrets/manager.js";import"./runtime.js";import{i as e,n as t,r as n}from"./openbanking/models.js";import{t as r}from"./openbanking/telemetry.js";import{d as i,f as a,p as o}from"./openbanking/contracts/accounts.js";import{d as s,u as c}from"./openbanking/contracts/transactions.js";import{d as l,u}from"./openbanking/contracts/balances.js";import"./openbanking/contracts/index.js";import"./providers/index.js";import"./secrets/index.js";

package/dist/contracts/dist/integrations/openbanking/contracts/accounts.js

@@ -0,0 +1 @@
+import{t as e}from"../../../schema/dist/SchemaModel.js";import{l as t}from"../../../schema/dist/ScalarTypeEnum.js";import"../../../schema/dist/index.js";import{n,t as r}from"../../../spec.js";import{n as i}from"../models.js";import{t as a}from"../telemetry.js";const o=new e({name:`OpenBankingListAccountsInput`,description:`Parameters for listing bank accounts through the open banking provider.`,fields:{tenantId:{type:t.ID(),isOptional:!1},userId:{type:t.ID(),isOptional:!1},connectionId:{type:t.ID(),isOptional:!0},includeBalances:{type:t.Boolean(),isOptional:!0},institutionId:{type:t.String_unsecure(),isOptional:!0},cursor:{type:t.String_unsecure(),isOptional:!0},pageSize:{type:t.Int_unsecure(),isOptional:!0}}}),s=new e({name:`OpenBankingListAccountsOutput`,description:`Paginated list of bank accounts available to the tenant and user.`,fields:{accounts:{type:i,isOptional:!1,isArray:!0},nextCursor:{type:t.String_unsecure(),isOptional:!0},hasMore:{type:t.Boolean(),isOptional:!0}}}),c=new e({name:`OpenBankingGetAccountInput`,description:`Parameters for retrieving a specific bank account.`,fields:{tenantId:{type:t.ID(),isOptional:!1},accountId:{type:t.ID(),isOptional:!1},includeBalances:{type:t.Boolean(),isOptional:!0},includeLatestTransactions:{type:t.Boolean(),isOptional:!0}}}),l=new e({name:`OpenBankingSyncAccountsInput`,description:`Command payload to trigger an account synchronisation against the open banking provider.`,fields:{tenantId:{type:t.ID(),isOptional:!1},userId:{type:t.ID(),isOptional:!0},connectionId:{type:t.ID(),isOptional:!1},accountIds:{type:t.ID(),isArray:!0,isOptional:!0},forceFullRefresh:{type:t.Boolean(),isOptional:!0},triggerWorkflows:{type:t.Boolean(),isOptional:!0}}}),u=new e({name:`OpenBankingSyncAccountsOutput`,description:`Result of a bank account synchronisation run.`,fields:{synced:{type:t.Int_unsecure(),isOptional:!1},failed:{type:t.Int_unsecure(),isOptional:!1},errors:{type:t.String_unsecure(),isArray:!0,isOptional:!0},nextSyncSuggestedAt:{type:t.DateTime(),isOptional:!0}}}),d=n({meta:{name:`openbanking.accounts.list`,version:1,description:`List bank accounts available to a tenant/user via Powens Open Banking.`,goal:`Provide downstream workflows with the set of accounts accessible via the configured open banking connection.`,context:`Used by Pocket Family Office dashboards and sync workflows to enumerate bank accounts prior to syncing balances or transactions.`,owners:[`platform.finance`],tags:[`open-banking`,`powens`,`accounts`],stability:`experimental`},io:{input:o,output:s},policy:{auth:`user`}}),f=n({meta:{name:`openbanking.accounts.get`,version:1,description:`Retrieve the canonical bank account record for the given account identifier.`,goal:`Allow user-facing experiences and automations to display up-to-date account metadata.`,context:`Invoked by UI surfaces and workflow automation steps that require detailed metadata for a specific bank account.`,owners:[`platform.finance`],tags:[`open-banking`,`powens`,`accounts`],stability:`experimental`},io:{input:c,output:i},policy:{auth:`user`}}),p=r({meta:{name:`openbanking.accounts.sync`,version:1,description:`Initiate a synchronisation run to refresh bank account metadata from Powens.`,goal:`Keep canonical bank account records aligned with the external open banking provider.`,context:`Triggered by scheduled workflows or manual operator actions to reconcile account metadata prior to transaction/balance syncs.`,owners:[`platform.finance`],tags:[`open-banking`,`powens`,`accounts`],stability:`experimental`},io:{input:l,output:u},policy:{auth:`admin`},telemetry:{success:{event:{name:a.accountsSynced},properties:({input:e,output:t})=>{let n=e,r=t;return{tenantId:n?.tenantId,connectionId:n?.connectionId,synced:r?.synced,failed:r?.failed}}},failure:{event:{name:a.accountsSyncFailed},properties:({input:e,error:t})=>{let n=e;return{tenantId:n?.tenantId,connectionId:n?.connectionId,error:t instanceof Error?t.message:String(t??`unknown`)}}}}});export{d,f,p};

package/dist/contracts/dist/integrations/openbanking/contracts/balances.js

@@ -0,0 +1 @@
+import{t as e}from"../../../schema/dist/SchemaModel.js";import{l as t}from"../../../schema/dist/ScalarTypeEnum.js";import"../../../schema/dist/index.js";import{n,t as r}from"../../../spec.js";import{i}from"../models.js";import{t as a}from"../telemetry.js";const o=new e({name:`OpenBankingGetBalancesInput`,description:`Parameters for retrieving bank account balances from the canonical ledger.`,fields:{tenantId:{type:t.ID(),isOptional:!1},accountId:{type:t.ID(),isOptional:!1},balanceTypes:{type:t.String_unsecure(),isArray:!0,isOptional:!0}}}),s=new e({name:`OpenBankingGetBalancesOutput`,description:`Canonical balances for a bank account.`,fields:{balances:{type:i,isOptional:!1,isArray:!0},asOf:{type:t.DateTime(),isOptional:!0}}}),c=new e({name:`OpenBankingRefreshBalancesInput`,description:`Command payload to refresh balances for a bank account via the open banking provider.`,fields:{tenantId:{type:t.ID(),isOptional:!1},accountId:{type:t.ID(),isOptional:!1},connectionId:{type:t.ID(),isOptional:!0},balanceTypes:{type:t.String_unsecure(),isArray:!0,isOptional:!0},forceRefresh:{type:t.Boolean(),isOptional:!0}}}),l=new e({name:`OpenBankingRefreshBalancesOutput`,description:`Result of a balance refresh against the open banking provider.`,fields:{balances:{type:i,isOptional:!1,isArray:!0},refreshedAt:{type:t.DateTime(),isOptional:!1},errors:{type:t.String_unsecure(),isArray:!0,isOptional:!0}}}),u=n({meta:{name:`openbanking.balances.get`,version:1,description:`Retrieve the latest cached balances for a bank account.`,goal:`Expose current and available balances required by dashboards and analytics.`,context:`Used by Pocket Family Office UI surfaces and automation steps that require balance totals prior to generating summaries.`,owners:[`platform.finance`],tags:[`open-banking`,`powens`,`balances`],stability:`experimental`},io:{input:o,output:s},policy:{auth:`user`}}),d=r({meta:{name:`openbanking.balances.refresh`,version:1,description:`Refresh balances for a bank account via the configured open banking provider.`,goal:`Ensure canonical balance records reflect the latest values from Powens.`,context:`Triggered by scheduled workflows before generating summaries or forecasting cashflow.`,owners:[`platform.finance`],tags:[`open-banking`,`powens`,`balances`],stability:`experimental`},io:{input:c,output:l},policy:{auth:`admin`},telemetry:{success:{event:{name:a.balancesRefreshed},properties:({input:e,output:t})=>{let n=e,r=t;return{tenantId:n?.tenantId,accountId:n?.accountId,refreshedAt:r?.refreshedAt,balanceCount:Array.isArray(r?.balances)?r?.balances.length:void 0}}},failure:{event:{name:a.balancesRefreshFailed},properties:({input:e,error:t})=>{let n=e;return{tenantId:n?.tenantId,accountId:n?.accountId,error:t instanceof Error?t.message:String(t??`unknown`)}}}}});export{d,u};

package/dist/contracts/dist/integrations/openbanking/contracts/index.js

@@ -0,0 +1 @@
+import{d as e,f as t,p as n}from"./accounts.js";import{d as r,u as i}from"./transactions.js";import{d as a,u as o}from"./balances.js";

package/dist/contracts/dist/integrations/openbanking/contracts/transactions.js

@@ -0,0 +1 @@
+import{t as e}from"../../../schema/dist/SchemaModel.js";import{l as t}from"../../../schema/dist/ScalarTypeEnum.js";import"../../../schema/dist/index.js";import{n,t as r}from"../../../spec.js";import{r as i}from"../models.js";import{t as a}from"../telemetry.js";const o=new e({name:`OpenBankingListTransactionsInput`,description:`Parameters for listing bank transactions from the canonical ledger.`,fields:{tenantId:{type:t.ID(),isOptional:!1},accountId:{type:t.ID(),isOptional:!1},from:{type:t.DateTime(),isOptional:!0},to:{type:t.DateTime(),isOptional:!0},cursor:{type:t.String_unsecure(),isOptional:!0},pageSize:{type:t.Int_unsecure(),isOptional:!0},direction:{type:t.String_unsecure(),isOptional:!0},minimumAmount:{type:t.Float_unsecure(),isOptional:!0},maximumAmount:{type:t.Float_unsecure(),isOptional:!0},category:{type:t.String_unsecure(),isOptional:!0}}}),s=new e({name:`OpenBankingListTransactionsOutput`,description:`Paginated list of transactions for a bank account.`,fields:{transactions:{type:i,isOptional:!1,isArray:!0},nextCursor:{type:t.String_unsecure(),isOptional:!0},hasMore:{type:t.Boolean(),isOptional:!0}}}),c=new e({name:`OpenBankingSyncTransactionsInput`,description:`Command payload to synchronise transactions from the open banking provider into the canonical ledger.`,fields:{tenantId:{type:t.ID(),isOptional:!1},accountId:{type:t.ID(),isOptional:!1},from:{type:t.DateTime(),isOptional:!0},to:{type:t.DateTime(),isOptional:!0},connectionId:{type:t.ID(),isOptional:!0},includePending:{type:t.Boolean(),isOptional:!0},backfillDays:{type:t.Int_unsecure(),isOptional:!0}}}),l=new e({name:`OpenBankingSyncTransactionsOutput`,description:`Result of a transaction synchronisation run.`,fields:{synced:{type:t.Int_unsecure(),isOptional:!1},failed:{type:t.Int_unsecure(),isOptional:!1},earliestSyncedAt:{type:t.DateTime(),isOptional:!0},latestSyncedAt:{type:t.DateTime(),isOptional:!0},nextSinceToken:{type:t.String_unsecure(),isOptional:!0},errors:{type:t.String_unsecure(),isArray:!0,isOptional:!0}}}),u=n({meta:{name:`openbanking.transactions.list`,version:1,description:`List bank transactions that have been normalised into the canonical ledger.`,goal:`Allow downstream analytics and UI surfaces to page through canonical bank transactions.`,context:`Used by Pocket Family Office dashboards, reconciliation workflows, and analytics data views.`,owners:[`platform.finance`],tags:[`open-banking`,`powens`,`transactions`],stability:`experimental`},io:{input:o,output:s},policy:{auth:`user`}}),d=r({meta:{name:`openbanking.transactions.sync`,version:1,description:`Synchronise transactions for a bank account by calling the configured open banking provider.`,goal:`Ensure the canonical transaction ledger stays aligned with the external provider.`,context:`Triggered by scheduled workflows or on-demand actions when activity is expected on an account.`,owners:[`platform.finance`],tags:[`open-banking`,`powens`,`transactions`],stability:`experimental`},io:{input:c,output:l},policy:{auth:`admin`},telemetry:{success:{event:{name:a.transactionsSynced},properties:({input:e,output:t})=>{let n=e,r=t;return{tenantId:n?.tenantId,accountId:n?.accountId,synced:r?.synced,failed:r?.failed,earliestSyncedAt:r?.earliestSyncedAt,latestSyncedAt:r?.latestSyncedAt}}},failure:{event:{name:a.transactionsSyncFailed},properties:({input:e,error:t})=>{let n=e;return{tenantId:n?.tenantId,accountId:n?.accountId,error:t instanceof Error?t.message:String(t??`unknown`)}}}}});export{d,u};

package/dist/contracts/dist/integrations/openbanking/models.js

@@ -0,0 +1 @@
+import{t as e}from"../../schema/dist/SchemaModel.js";import{l as t}from"../../schema/dist/ScalarTypeEnum.js";import"../../schema/dist/index.js";const n=new e({name:`BankAccountRecord`,description:`Canonical representation of a bank account synced from an open banking provider.`,fields:{id:{type:t.ID(),isOptional:!1},tenantId:{type:t.ID(),isOptional:!1},userId:{type:t.ID(),isOptional:!1},connectionId:{type:t.ID(),isOptional:!1},externalId:{type:t.NonEmptyString(),isOptional:!1},institutionId:{type:t.NonEmptyString(),isOptional:!1},institutionName:{type:t.NonEmptyString(),isOptional:!1},institutionLogoUrl:{type:t.URL(),isOptional:!0},iban:{type:t.String_unsecure(),isOptional:!0},bic:{type:t.String_unsecure(),isOptional:!0},accountType:{type:t.NonEmptyString(),isOptional:!1},currency:{type:t.Currency(),isOptional:!1},displayName:{type:t.NonEmptyString(),isOptional:!1},accountNumberMasked:{type:t.String_unsecure(),isOptional:!0},productCode:{type:t.String_unsecure(),isOptional:!0},balance:{type:t.Float_unsecure(),isOptional:!0},availableBalance:{type:t.Float_unsecure(),isOptional:!0},lastSyncedAt:{type:t.DateTime(),isOptional:!1},createdAt:{type:t.DateTime(),isOptional:!1},updatedAt:{type:t.DateTime(),isOptional:!1},metadata:{type:t.JSONObject(),isOptional:!0}}}),r=new e({name:`BankTransactionRecord`,description:`Canonical transaction entry mapped from Powens into the open banking ledger.`,fields:{id:{type:t.ID(),isOptional:!1},accountId:{type:t.ID(),isOptional:!1},tenantId:{type:t.ID(),isOptional:!1},connectionId:{type:t.ID(),isOptional:!1},externalId:{type:t.NonEmptyString(),isOptional:!1},amount:{type:t.Float_unsecure(),isOptional:!1},currency:{type:t.Currency(),isOptional:!1},date:{type:t.DateTime(),isOptional:!1},bookingDate:{type:t.DateTime(),isOptional:!0},valueDate:{type:t.DateTime(),isOptional:!0},description:{type:t.String_unsecure(),isOptional:!0},counterpartyName:{type:t.String_unsecure(),isOptional:!0},counterpartyAccount:{type:t.String_unsecure(),isOptional:!0},merchantCategoryCode:{type:t.String_unsecure(),isOptional:!0},rawCategory:{type:t.String_unsecure(),isOptional:!0},standardizedCategory:{type:t.String_unsecure(),isOptional:!0},transactionType:{type:t.NonEmptyString(),isOptional:!1},status:{type:t.NonEmptyString(),isOptional:!1},runningBalance:{type:t.Float_unsecure(),isOptional:!0},metadata:{type:t.JSONObject(),isOptional:!0},createdAt:{type:t.DateTime(),isOptional:!1},updatedAt:{type:t.DateTime(),isOptional:!1}}}),i=new e({name:`AccountBalanceRecord`,description:`Canonical balance snapshot computed from Powens balance payloads.`,fields:{id:{type:t.ID(),isOptional:!1},accountId:{type:t.ID(),isOptional:!1},tenantId:{type:t.ID(),isOptional:!1},connectionId:{type:t.ID(),isOptional:!1},balanceType:{type:t.NonEmptyString(),isOptional:!1},currentBalance:{type:t.Float_unsecure(),isOptional:!1},availableBalance:{type:t.Float_unsecure(),isOptional:!0},currency:{type:t.Currency(),isOptional:!1},lastUpdatedAt:{type:t.DateTime(),isOptional:!1},createdAt:{type:t.DateTime(),isOptional:!1},metadata:{type:t.JSONObject(),isOptional:!0}}});export{i,n,r};

package/dist/contracts/dist/integrations/openbanking/telemetry.js

@@ -0,0 +1 @@
+const e={accountsSynced:`openbanking.accounts.synced`,accountsSyncFailed:`openbanking.accounts.sync_failed`,transactionsSynced:`openbanking.transactions.synced`,transactionsSyncFailed:`openbanking.transactions.sync_failed`,balancesRefreshed:`openbanking.balances.refreshed`,balancesRefreshFailed:`openbanking.balances.refresh_failed`,overviewGenerated:`openbanking.overview.generated`};export{e as t};

package/dist/contracts/dist/integrations/providers/elevenlabs.js

@@ -0,0 +1 @@
+import{e}from"../../ownership.js";e.Beta;

package/dist/contracts/dist/integrations/providers/gcs-storage.js

@@ -0,0 +1 @@
+import{e}from"../../ownership.js";e.Beta;

package/dist/contracts/dist/integrations/providers/gmail.js

@@ -0,0 +1 @@
+import{e}from"../../ownership.js";e.Beta;

package/dist/contracts/dist/integrations/providers/google-calendar.js

@@ -0,0 +1 @@
+import{e}from"../../ownership.js";e.Beta;

package/dist/contracts/dist/integrations/providers/impls/elevenlabs-voice.js

@@ -0,0 +1 @@
+import"@elevenlabs/elevenlabs-js";

package/dist/contracts/dist/integrations/providers/impls/gcs-storage.js

@@ -0,0 +1 @@
+import"@google-cloud/storage";

package/dist/contracts/dist/integrations/providers/impls/gmail-inbound.js

@@ -0,0 +1 @@
+import"googleapis";

package/dist/contracts/dist/integrations/providers/impls/gmail-outbound.js

@@ -0,0 +1 @@
+import"googleapis";

package/dist/contracts/dist/integrations/providers/impls/google-calendar.js

@@ -0,0 +1 @@
+import"googleapis";

package/dist/contracts/dist/integrations/providers/impls/index.js

@@ -0,0 +1 @@
+import"./mistral-llm.js";import"./mistral-embedding.js";import"./qdrant-vector.js";import"./gmail-inbound.js";import"./gmail-outbound.js";import"./google-calendar.js";import"./elevenlabs-voice.js";import"./gcs-storage.js";import"./stripe-payments.js";import"./postmark-email.js";import"./twilio-sms.js";import"./powens-client.js";import"./powens-openbanking.js";import"./provider-factory.js";

package/dist/contracts/dist/integrations/providers/impls/mistral-embedding.js

@@ -0,0 +1 @@
+import"@mistralai/mistralai";

package/dist/contracts/dist/integrations/providers/impls/mistral-llm.js

@@ -0,0 +1 @@
+import"@mistralai/mistralai";

package/dist/contracts/dist/integrations/providers/impls/postmark-email.js

@@ -0,0 +1 @@
+import"postmark";

package/dist/contracts/dist/integrations/providers/impls/powens-client.js

@@ -0,0 +1 @@
+import"node:url";

package/dist/contracts/dist/integrations/providers/impls/powens-openbanking.js

@@ -0,0 +1 @@
+import"./powens-client.js";

package/dist/contracts/dist/integrations/providers/impls/provider-factory.js

@@ -0,0 +1 @@
+import"./mistral-llm.js";import"./mistral-embedding.js";import"./qdrant-vector.js";import"./elevenlabs-voice.js";import"./gcs-storage.js";import"./stripe-payments.js";import"./postmark-email.js";import"./twilio-sms.js";import"./powens-openbanking.js";import"node:buffer";

package/dist/contracts/dist/integrations/providers/impls/qdrant-vector.js

@@ -0,0 +1 @@
+import"@qdrant/js-client-rest";

package/dist/contracts/dist/integrations/providers/impls/stripe-payments.js

@@ -0,0 +1 @@
+import"stripe";

package/dist/contracts/dist/integrations/providers/impls/twilio-sms.js

@@ -0,0 +1 @@
+import"twilio";

package/dist/contracts/dist/integrations/providers/index.js

@@ -0,0 +1 @@
+import"./stripe.js";import"./postmark.js";import"./qdrant.js";import"./mistral.js";import"./elevenlabs.js";import"./gmail.js";import"./google-calendar.js";import"./twilio-sms.js";import"./gcs-storage.js";import"./powens.js";import"./impls/mistral-llm.js";import"./impls/mistral-embedding.js";import"./impls/qdrant-vector.js";import"./impls/gmail-inbound.js";import"./impls/gmail-outbound.js";import"./impls/google-calendar.js";import"./impls/elevenlabs-voice.js";import"./impls/gcs-storage.js";import"./impls/stripe-payments.js";import"./impls/postmark-email.js";import"./impls/twilio-sms.js";import"./impls/powens-client.js";import"./impls/powens-openbanking.js";import"./impls/provider-factory.js";import"./impls/index.js";

package/dist/contracts/dist/integrations/providers/mistral.js

@@ -0,0 +1 @@
+import{e}from"../../ownership.js";e.Experimental;

package/dist/contracts/dist/integrations/providers/postmark.js

@@ -0,0 +1 @@
+import{e}from"../../ownership.js";e.Stable;

package/dist/contracts/dist/integrations/providers/powens.js

@@ -0,0 +1 @@
+import{e}from"../../ownership.js";e.Experimental;

package/dist/contracts/dist/integrations/providers/qdrant.js

@@ -0,0 +1 @@
+import{e}from"../../ownership.js";e.Experimental;

package/dist/contracts/dist/integrations/providers/stripe.js

@@ -0,0 +1 @@
+import{e}from"../../ownership.js";e.Stable;

package/dist/contracts/dist/integrations/providers/twilio-sms.js

@@ -0,0 +1 @@
+import{e}from"../../ownership.js";e.Stable;

package/dist/contracts/dist/integrations/runtime.js

@@ -0,0 +1 @@
+import"node:perf_hooks";

package/dist/contracts/dist/integrations/secrets/env-secret-provider.js

@@ -0,0 +1 @@
+import"./provider.js";

package/dist/contracts/dist/integrations/secrets/gcp-secret-manager.js

@@ -0,0 +1 @@
+import"./provider.js";import"@google-cloud/secret-manager";

package/dist/contracts/dist/integrations/secrets/index.js

@@ -0,0 +1 @@
+import"./provider.js";import"./gcp-secret-manager.js";import"./env-secret-provider.js";import"./manager.js";

package/dist/contracts/dist/integrations/secrets/manager.js

@@ -0,0 +1 @@
+import"./provider.js";

package/dist/contracts/dist/integrations/secrets/provider.js

@@ -0,0 +1 @@
+import"node:buffer";

package/dist/contracts/dist/jsonschema.js

@@ -0,0 +1 @@
+import"zod";

package/dist/contracts/dist/knowledge/contracts.js

@@ -0,0 +1 @@
+import{t as e}from"../schema/dist/SchemaModel.js";import{l as t}from"../schema/dist/ScalarTypeEnum.js";import"../schema/dist/index.js";import{n,t as r}from"../spec.js";const i=new e({name:`KnowledgeSyncSchedule`,fields:{enabled:{type:t.Boolean(),isOptional:!1},cron:{type:t.String_unsecure(),isOptional:!0},intervalMs:{type:t.Int_unsecure(),isOptional:!0}}}),a=new e({name:`KnowledgeSourceRecord`,fields:{id:{type:t.ID(),isOptional:!1},tenantId:{type:t.ID(),isOptional:!1},spaceKey:{type:t.NonEmptyString(),isOptional:!1},spaceVersion:{type:t.Int_unsecure(),isOptional:!1},label:{type:t.String_unsecure(),isOptional:!1},sourceType:{type:t.String_unsecure(),isOptional:!1},syncSchedule:{type:i,isOptional:!0},lastSyncStatus:{type:t.String_unsecure(),isOptional:!0},lastSyncAt:{type:t.DateTime(),isOptional:!0},itemsProcessed:{type:t.Int_unsecure(),isOptional:!0},createdAt:{type:t.DateTime(),isOptional:!0},updatedAt:{type:t.DateTime(),isOptional:!0}}}),o=new e({name:`CreateKnowledgeSourceInput`,fields:{tenantId:{type:t.ID(),isOptional:!1},spaceKey:{type:t.NonEmptyString(),isOptional:!1},spaceVersion:{type:t.Int_unsecure(),isOptional:!1},label:{type:t.String_unsecure(),isOptional:!1},sourceType:{type:t.NonEmptyString(),isOptional:!1},config:{type:t.JSONObject(),isOptional:!1},syncSchedule:{type:i,isOptional:!0}}}),s=new e({name:`UpdateKnowledgeSourceInput`,fields:{sourceId:{type:t.ID(),isOptional:!1},label:{type:t.String_unsecure(),isOptional:!0},config:{type:t.JSONObject(),isOptional:!0},syncSchedule:{type:i,isOptional:!0}}}),c=new e({name:`DeleteKnowledgeSourceInput`,fields:{sourceId:{type:t.ID(),isOptional:!1}}}),l=new e({name:`DeleteKnowledgeSourceOutput`,fields:{success:{type:t.Boolean(),isOptional:!1}}}),u=new e({name:`ListKnowledgeSourcesInput`,fields:{tenantId:{type:t.ID(),isOptional:!1},spaceKey:{type:t.NonEmptyString(),isOptional:!0}}}),d=new e({name:`ListKnowledgeSourcesOutput`,fields:{sources:{type:a,isOptional:!1,isArray:!0}}}),f=new e({name:`TriggerKnowledgeSyncInput`,fields:{sourceId:{type:t.ID(),isOptional:!1}}}),p=new e({name:`TriggerKnowledgeSyncOutput`,fields:{success:{type:t.Boolean(),isOptional:!1},itemsProcessed:{type:t.Int_unsecure(),isOptional:!0},error:{type:t.String_unsecure(),isOptional:!0}}}),m=r({meta:{name:`knowledge.source.create`,version:1,description:`Create a knowledge source binding for a tenant.`,goal:`Onboard a new knowledge ingestion source such as Notion or uploads.`,context:`Used by Ops and App Studio to configure knowledge ingestion per tenant and space.`,owners:[`platform.knowledge`],tags:[`knowledge`,`sources`],stability:`experimental`},io:{input:o,output:a},policy:{auth:`admin`,policies:[{name:`platform.knowledge.manage`,version:1}]}}),h=r({meta:{name:`knowledge.source.update`,version:1,description:`Update metadata or configuration for a knowledge source.`,goal:`Allow rotation of credentials, sync schedules, and labels.`,context:`Supports editing how a tenant ingests knowledge (e.g., toggling sync cadence).`,owners:[`platform.knowledge`],tags:[`knowledge`,`sources`],stability:`experimental`},io:{input:s,output:a},policy:{auth:`admin`,policies:[{name:`platform.knowledge.manage`,version:1}]}}),g=r({meta:{name:`knowledge.source.delete`,version:1,description:`Delete a knowledge source binding for a tenant.`,goal:`Remove obsolete or compromised knowledge ingestion paths.`,context:`Ensures ephemeral or external sources can be removed cleanly without leaving residual bindings.`,owners:[`platform.knowledge`],tags:[`knowledge`,`sources`],stability:`experimental`},io:{input:c,output:l},policy:{auth:`admin`,policies:[{name:`platform.knowledge.manage`,version:1}]}}),_=n({meta:{name:`knowledge.source.list`,version:1,description:`List knowledge sources configured for a tenant.`,goal:`Provide visibility into knowledge ingest configuration and schedules.`,context:`Used by App Studio and Ops flows to surface knowledge sources and their health.`,owners:[`platform.knowledge`],tags:[`knowledge`,`sources`],stability:`experimental`},io:{input:u,output:d},policy:{auth:`admin`,policies:[{name:`platform.knowledge.read`,version:1}]}}),v=r({meta:{name:`knowledge.source.triggerSync`,version:1,description:`Trigger an immediate sync for a knowledge source.`,goal:`Support manual or automated sync retries for knowledge ingestion.`,context:`Invoked by Ops tooling or monitors when knowledge content must be refreshed or reprocessed.`,owners:[`platform.knowledge`],tags:[`knowledge`,`sources`],stability:`experimental`},io:{input:f,output:p},policy:{auth:`admin`,policies:[{name:`platform.knowledge.manage`,version:1}]}});export{_,g,h,m,v};

package/dist/contracts/dist/knowledge/index.js

@@ -0,0 +1 @@
+import"./spaces/product-canon.js";import"./spaces/support-faq.js";import"./spaces/email-threads.js";import"./spaces/uploaded-docs.js";import"./spaces/financial-docs.js";import"./spaces/financial-overview.js";import"./spaces/index.js";

package/dist/contracts/dist/knowledge/spaces/email-threads.js

@@ -0,0 +1 @@
+import{e}from"../../ownership.js";e.Beta;

package/dist/contracts/dist/knowledge/spaces/financial-docs.js

@@ -0,0 +1 @@
+import{e}from"../../ownership.js";e.Beta;

package/dist/contracts/dist/knowledge/spaces/financial-overview.js

@@ -0,0 +1 @@
+import{e}from"../../ownership.js";e.Experimental;

package/dist/contracts/dist/knowledge/spaces/index.js

@@ -0,0 +1 @@
+import"./product-canon.js";import"./support-faq.js";import"./email-threads.js";import"./uploaded-docs.js";import"./financial-docs.js";import"./financial-overview.js";

package/dist/contracts/dist/knowledge/spaces/product-canon.js

@@ -0,0 +1 @@
+import{e}from"../../ownership.js";e.Stable;

package/dist/contracts/dist/knowledge/spaces/support-faq.js

@@ -0,0 +1 @@
+import{e}from"../../ownership.js";e.Beta;

package/dist/contracts/dist/knowledge/spaces/uploaded-docs.js

@@ -0,0 +1 @@
+import{e}from"../../ownership.js";e.Beta;

package/dist/contracts/dist/onboarding-base.js

@@ -0,0 +1 @@
+import{t as e}from"./schema/dist/SchemaModel.js";import{l as t}from"./schema/dist/ScalarTypeEnum.js";import"./schema/dist/index.js";import{n,t as r}from"./spec.js";import{e as i,t as a}from"./ownership.js";const o=new e({name:`SaveOnboardingDraftInput`,description:`Input for saving onboarding draft`,fields:{data:{type:t.JSON(),isOptional:!1}}}),s=new e({name:`SaveOnboardingDraftOutput`,description:`Output for saving onboarding draft`,fields:{id:{type:t.ID(),isOptional:!1},organizationId:{type:t.ID(),isOptional:!1}}});r({meta:{name:`base.onboarding.saveDraft`,version:1,stability:i.Beta,owners:[a.PlatformSigil],tags:[`onboarding`,`draft`],description:`Save or update onboarding draft for active organization`,goal:`Persist onboarding progress incrementally for resumption and safety`,context:`Auto-saves every few seconds during onboarding; enables users to leave and resume`},io:{input:o,output:s},policy:{auth:`user`,escalate:null},transport:{gql:{field:`saveOnboardingDraft`},rest:{method:`POST`}}});const c=new e({name:`GetOnboardingDraftOutput`,description:`Onboarding draft payload`,fields:{id:{type:t.ID(),isOptional:!0},organizationId:{type:t.ID(),isOptional:!0},data:{type:t.JSON(),isOptional:!0},createdAt:{type:t.DateTime(),isOptional:!0},updatedAt:{type:t.DateTime(),isOptional:!0}}});n({meta:{name:`base.onboarding.getDraft`,version:1,stability:i.Beta,owners:[a.PlatformSigil],tags:[`onboarding`,`draft`],description:`Get onboarding draft for active organization`,goal:`Retrieve saved onboarding progress`,context:`Called on mount to restore in-progress onboarding`},io:{input:null,output:c},policy:{auth:`user`,escalate:null},transport:{gql:{field:`getOnboardingDraft`},rest:{method:`GET`}}});const l=new e({name:`DeleteOnboardingDraftOutput`,description:`Result of delete operation`,fields:{ok:{type:t.Boolean(),isOptional:!1}}});r({meta:{name:`base.onboarding.deleteDraft`,version:1,stability:i.Beta,owners:[a.PlatformSigil],tags:[`onboarding`,`draft`],description:`Delete onboarding draft for active organization`,goal:`Clear draft after completion or if user wants to restart`,context:`Called after successful onboarding or explicit user reset`},io:{input:null,output:l},policy:{auth:`user`,escalate:null},transport:{gql:{field:`deleteOnboardingDraft`},rest:{method:`POST`}}});const u=new e({name:`CompleteOnboardingBaseInput`,description:`Input for completing onboarding`,fields:{data:{type:t.JSON(),isOptional:!1}}}),d=new e({name:`CompleteOnboardingBaseOutput`,description:`Result of onboarding completion`,fields:{success:{type:t.Boolean(),isOptional:!1},userId:{type:t.ID(),isOptional:!0},organizationId:{type:t.ID(),isOptional:!0}}});r({meta:{name:`base.onboarding.complete`,version:1,stability:i.Beta,owners:[a.PlatformSigil],tags:[`onboarding`],description:`Complete onboarding and finalize user/organization setup`,goal:`Transition from draft to active profile`,context:`Validates all required fields, creates/updates entities, marks onboarding complete`},io:{input:u,output:d},policy:{auth:`user`,escalate:null},transport:{gql:{field:`completeOnboarding`},rest:{method:`POST`}}});export{l as d,c as l,d as m,o,u as p,s};

package/dist/contracts/dist/ownership.js

@@ -0,0 +1 @@
+const e={Idea:`idea`,InCreation:`in_creation`,Experimental:`experimental`,Beta:`beta`,Stable:`stable`,Deprecated:`deprecated`},t={ProductColiving:`product.coliving`,ProductStrit:`product.strit`,ProductArtisanos:`product.artisanos`,PlatformSigil:`platform.sigil`,PlatformMarketplace:`platform.marketplace`,PlatformContent:`platform.content`,PlatformFeatureFlags:`platform.featureflags`},n={Spots:`spots`,Collectivity:`collectivity`,Marketplace:`marketplace`,Sellers:`sellers`,Auth:`auth`,Login:`login`,Signup:`signup`,Guide:`guide`,Docs:`docs`,I18n:`i18n`,AtomicPages:`atomic:pages`,Incident:`incident`,Hygiene:`hygiene`,WeeklyPulse:`weekly_pulse`,WebAuth:`webauth`};export{e,n as r,t};

package/dist/contracts/dist/presentations.js

@@ -0,0 +1 @@
+import"zod";

package/dist/contracts/dist/presentations.v2.js

@@ -0,0 +1 @@
+import"react";import"turndown";

package/dist/contracts/dist/prompt.js

@@ -0,0 +1 @@
+import{z as e}from"zod";

package/dist/contracts/dist/promptRegistry.js

@@ -0,0 +1 @@
+import{z as e}from"zod";

package/dist/contracts/dist/regenerator/index.js

@@ -0,0 +1 @@
+import"./service.js";

package/dist/contracts/dist/regenerator/service.js

@@ -0,0 +1 @@
+import"node:timers/promises";

package/dist/contracts/dist/registry.js

@@ -0,0 +1 @@
+import"./events.js";

package/dist/contracts/dist/resources.js

@@ -0,0 +1 @@
+import{z as e}from"zod";

package/dist/contracts/dist/schema/dist/EnumType.js

@@ -0,0 +1 @@
+import{z as e}from"zod";import"graphql";

package/dist/contracts/dist/schema/dist/FieldType.js

@@ -0,0 +1 @@
+import{z as e}from"zod";import{GraphQLScalarType as t}from"graphql";var n=class extends t{zodSchema;jsonSchemaDef;constructor(e){super(e),this.zodSchema=e.zod,this.jsonSchemaDef=e.jsonSchema}getZod(){return this.zodSchema}getPothos(){return this}getJson(){return typeof this.jsonSchemaDef==`function`?this.jsonSchemaDef():this.jsonSchemaDef}getJsonSchemaDef(){return this.jsonSchemaDef}getJsonSchema(){let e=t=>{let n=typeof t==`function`?t():t;if(Array.isArray(n))return n.map(t=>e(t));if(n&&typeof n==`object`){let t={};for(let[r,i]of Object.entries(n))t[r]=e(i);return t}return n};return e(this.getJson())}};export{n};

package/dist/contracts/dist/schema/dist/ScalarTypeEnum.js

@@ -0,0 +1 @@
+import{n as e}from"./FieldType.js";import{z as t}from"zod";import{Kind as n}from"graphql";const r=/^[A-Za-z]{2}(?:-[A-Za-z0-9]{2,8})*$/,i=/^(?:UTC|[A-Za-z_]+\/[A-Za-z_]+)$/,a=/^[+]?\d[\d\s().-]{3,}$/,o=/^[A-Z]{3}$/,s=/^[A-Z]{2}$/,c=-180,l={String_unsecure:()=>new e({name:`String_unsecure`,description:`Unvalidated string scalar`,zod:t.string(),parseValue:e=>t.string().parse(e),serialize:e=>String(e),parseLiteral:e=>{if(e.kind!==n.STRING)throw TypeError(`Invalid literal`);return e.value},jsonSchema:{type:`string`}}),Int_unsecure:()=>new e({name:`Int_unsecure`,description:`Unvalidated integer scalar`,zod:t.number().int(),parseValue:e=>{let n=typeof e==`number`?e:Number(e);return t.number().int().parse(n)},serialize:e=>Math.trunc(typeof e==`number`?e:Number(e)),parseLiteral:e=>{if(e.kind!==n.INT)throw TypeError(`Invalid literal`);return Number(e.value)},jsonSchema:{type:`integer`}}),Float_unsecure:()=>new e({name:`Float_unsecure`,description:`Unvalidated float scalar`,zod:t.number(),parseValue:e=>{let n=typeof e==`number`?e:Number(e);return t.number().parse(n)},serialize:e=>Number(e),parseLiteral:e=>{if(e.kind!==n.FLOAT&&e.kind!==n.INT)throw TypeError(`Invalid literal`);return Number(e.value)},jsonSchema:{type:`number`}}),Boolean:()=>new e({name:`Boolean`,description:`Unvalidated boolean scalar`,zod:t.boolean(),parseValue:e=>t.coerce.boolean().parse(e),serialize:e=>!!e,parseLiteral:e=>{if(e.kind!==n.BOOLEAN)throw TypeError(`Invalid literal`);return e.value},jsonSchema:{type:`boolean`}}),ID:()=>new e({name:`ID`,description:`Unvalidated id scalar`,zod:t.string(),parseValue:e=>t.string().parse(e),serialize:e=>String(e),parseLiteral:e=>{if(e.kind!==n.STRING)throw TypeError(`Invalid literal`);return e.value},jsonSchema:{type:`string`}}),JSON:()=>new e({name:`JSON`,zod:t.any(),parseValue:e=>e,serialize:e=>e,jsonSchema:{}}),JSONObject:()=>new e({name:`JSONObject`,zod:t.record(t.string(),t.any()),parseValue:e=>t.record(t.string(),t.any()).parse(e),serialize:e=>e??{},jsonSchema:{type:`object`}}),Date:()=>new e({name:`Date`,zod:t.date(),parseValue:e=>e instanceof Date?e:new Date(String(e)),serialize:e=>e instanceof Date?e.toISOString().split(`T`)[0]:String(e),jsonSchema:{type:`string`,format:`date`}}),DateTime:()=>new e({name:`DateTime`,zod:t.date(),parseValue:e=>e instanceof Date?e:new Date(String(e)),serialize:e=>e instanceof Date?e.toISOString():String(e),jsonSchema:{type:`string`,format:`date-time`}}),Time:()=>new e({name:`Time`,zod:t.string().regex(/^\d{2}:\d{2}(:\d{2})?$/),parseValue:e=>t.string().regex(/^\d{2}:\d{2}(:\d{2})?$/).parse(e),serialize:e=>String(e),jsonSchema:{type:`string`,pattern:`^\\d{2}:\\d{2}(:\\d{2})?$`}}),EmailAddress:()=>new e({name:`EmailAddress`,zod:t.string().email(),parseValue:e=>t.string().email().parse(e),serialize:e=>String(e),jsonSchema:{type:`string`,format:`email`}}),URL:()=>new e({name:`URL`,zod:t.string().url(),parseValue:e=>t.string().url().parse(e),serialize:e=>String(e),jsonSchema:{type:`string`,format:`uri`}}),PhoneNumber:()=>new e({name:`PhoneNumber`,zod:t.string().regex(a),parseValue:e=>t.string().regex(a).parse(e),serialize:e=>String(e),jsonSchema:{type:`string`,pattern:a.source}}),NonEmptyString:()=>new e({name:`NonEmptyString`,zod:t.string().min(1),parseValue:e=>t.string().min(1).parse(e),serialize:e=>String(e),jsonSchema:{type:`string`,minLength:1}}),Locale:()=>new e({name:`Locale`,zod:t.string().regex(r),parseValue:e=>t.string().regex(r).parse(e),serialize:e=>String(e),jsonSchema:{type:`string`,pattern:r.source}}),TimeZone:()=>new e({name:`TimeZone`,zod:t.string().regex(i),parseValue:e=>t.string().regex(i).parse(e),serialize:e=>String(e),jsonSchema:{type:`string`,pattern:i.source}}),Latitude:()=>new e({name:`Latitude`,zod:t.number().min(-90).max(90),parseValue:e=>t.coerce.number().min(-90).max(90).parse(e),serialize:e=>Number(e),jsonSchema:{type:`number`,minimum:-90,maximum:90}}),Longitude:()=>new e({name:`Longitude`,zod:t.number().min(c).max(180),parseValue:e=>t.coerce.number().min(c).max(180).parse(e),serialize:e=>Number(e),jsonSchema:{type:`number`,minimum:c,maximum:180}}),Currency:()=>new e({name:`Currency`,zod:t.string().regex(o),parseValue:e=>t.string().regex(o).parse(e),serialize:e=>String(e),jsonSchema:{type:`string`,pattern:o.source}}),CountryCode:()=>new e({name:`CountryCode`,zod:t.string().regex(s),parseValue:e=>t.string().regex(s).parse(e),serialize:e=>String(e),jsonSchema:{type:`string`,pattern:s.source}})};export{l};

package/dist/contracts/dist/schema/dist/SchemaModel.js

@@ -0,0 +1 @@
+import"./EnumType.js";import"./FieldType.js";import{z as e}from"zod";var t=class{constructor(e){this.config=e}getZod(){let t=Object.entries(this.config.fields).reduce((t,[n,r])=>{let i=r.type.getZod(),a=r.isArray?e.array(i):i;return t[n]=r.isOptional?a.optional():a,t},{});return e.object(t)}getPothosInput(){return this.config.name}};export{t};

package/dist/contracts/dist/schema/dist/entity/defineEntity.js

@@ -0,0 +1 @@
+import{z as e}from"zod";

package/dist/contracts/dist/schema/dist/entity/index.js

@@ -0,0 +1 @@
+import"./defineEntity.js";import"./types.js";

package/dist/contracts/dist/schema/dist/entity/types.js

@@ -0,0 +1 @@
+import{z as e}from"zod";

package/dist/contracts/dist/schema/dist/index.js

@@ -0,0 +1 @@
+import"./EnumType.js";import"./FieldType.js";import"./SchemaModel.js";import"./ScalarTypeEnum.js";import"./entity/defineEntity.js";import"./entity/index.js";

package/dist/contracts/dist/server/graphql-pothos.js

@@ -0,0 +1 @@
+import"../jsonschema.js";import"@pothos/plugin-prisma";import"@pothos/plugin-complexity";import"@pothos/plugin-relay";import"@pothos/plugin-dataloader";import"@pothos/plugin-tracing";

package/dist/contracts/dist/server/graphql-schema-export.js

@@ -0,0 +1 @@
+"use server";import"../graphql-federation/dist/index.js";import"graphql";

package/dist/contracts/dist/server/index.js

@@ -0,0 +1 @@
+import"./graphql-pothos.js";import"./graphql-schema-export.js";import"./provider-mcp.js";import"./rest-generic.js";import"./rest-elysia.js";import"./rest-express.js";import"./rest-next-app.js";import"./rest-next-pages.js";

package/dist/contracts/dist/server/provider-mcp.js

@@ -0,0 +1 @@
+import"../presentations.v2.js";import"../jsonschema.js";import"../presentations.js";import"zod";import"@modelcontextprotocol/sdk/server/mcp.js";import"zod-to-json-schema";

package/dist/contracts/dist/server/rest-elysia.js

@@ -0,0 +1 @@
+import"./rest-generic.js";

package/dist/contracts/dist/server/rest-express.js

@@ -0,0 +1 @@
+import"./rest-generic.js";

package/dist/contracts/dist/server/rest-generic.js

@@ -0,0 +1 @@
+import"../jsonschema.js";

package/dist/contracts/dist/server/rest-next-app.js

@@ -0,0 +1 @@
+import"./rest-generic.js";

package/dist/contracts/dist/server/rest-next-pages.js

@@ -0,0 +1 @@
+import"./rest-generic.js";

package/dist/contracts/dist/spec.js

@@ -0,0 +1 @@
+const e=e=>({...e,meta:{...e.meta,kind:`command`},policy:{...e.policy,idempotent:e.policy?.policy?.idempotent??!1}}),t=e=>({...e,meta:{...e.meta,kind:`query`},policy:{...e.policy,idempotent:!0}});export{t as n,e as t};

package/dist/contracts/dist/telemetry/index.js

@@ -0,0 +1 @@
+import"./tracker.js";

package/dist/contracts/dist/telemetry/tracker.js

@@ -0,0 +1 @@
+import"crypto";

package/dist/contracts/dist/tests/index.js

@@ -0,0 +1 @@
+import"./runner.js";

package/dist/contracts/dist/tests/runner.js

@@ -0,0 +1 @@
+import"../index.js";import"node:assert";

package/dist/contracts/dist/workflow/index.js

@@ -0,0 +1 @@
+import"./runner.js";

package/dist/contracts/dist/workflow/runner.js

@@ -0,0 +1 @@
+import"node:crypto";

package/dist/contracts/index.d.ts

@@ -0,0 +1,4 @@
+import { CreateUserContract, CreateUserInputModel, DeleteUserContract, DeleteUserInputModel, GetCurrentUserContract, ListUsersContract, ListUsersInputModel, ListUsersOutputModel, SuccessResultModel, UpdateUserContract, UpdateUserInputModel, UserDeletedPayloadModel, UserProfileModel } from "./user.js";
+import { AcceptInviteContract, AcceptInviteInputModel, CreateOrgContract, CreateOrgInputModel, GetOrgContract, GetOrgInputModel, InvitationModel, InviteMemberContract, InviteMemberInputModel, ListMembersContract, ListMembersInputModel, ListMembersOutputModel, ListUserOrgsContract, ListUserOrgsOutputModel, MemberModel, MemberRemovedPayloadModel, MemberUserModel, OrganizationModel, OrganizationWithRoleModel, RemoveMemberContract, RemoveMemberInputModel, UpdateOrgContract, UpdateOrgInputModel } from "./organization.js";
+import { AssignRoleContract, AssignRoleInputModel, BindingIdPayloadModel, CheckPermissionContract, CheckPermissionInputModel, CreateRoleContract, CreateRoleInputModel, DeleteRoleContract, DeleteRoleInputModel, ListRolesContract, ListRolesOutputModel, ListUserPermissionsContract, ListUserPermissionsInputModel, ListUserPermissionsOutputModel, PermissionCheckResultModel, PolicyBindingModel, RevokeRoleContract, RevokeRoleInputModel, RoleModel, UpdateRoleContract, UpdateRoleInputModel } from "./rbac.js";
+export { AcceptInviteContract, AcceptInviteInputModel, AssignRoleContract, AssignRoleInputModel, BindingIdPayloadModel, CheckPermissionContract, CheckPermissionInputModel, CreateOrgContract, CreateOrgInputModel, CreateRoleContract, CreateRoleInputModel, CreateUserContract, CreateUserInputModel, DeleteRoleContract, DeleteRoleInputModel, DeleteUserContract, DeleteUserInputModel, GetCurrentUserContract, GetOrgContract, GetOrgInputModel, InvitationModel, InviteMemberContract, InviteMemberInputModel, ListMembersContract, ListMembersInputModel, ListMembersOutputModel, ListRolesContract, ListRolesOutputModel, ListUserOrgsContract, ListUserOrgsOutputModel, ListUserPermissionsContract, ListUserPermissionsInputModel, ListUserPermissionsOutputModel, ListUsersContract, ListUsersInputModel, ListUsersOutputModel, MemberModel, MemberRemovedPayloadModel, MemberUserModel, OrganizationModel, OrganizationWithRoleModel, PermissionCheckResultModel, PolicyBindingModel, RemoveMemberContract, RemoveMemberInputModel, RevokeRoleContract, RevokeRoleInputModel, RoleModel, SuccessResultModel, UpdateOrgContract, UpdateOrgInputModel, UpdateRoleContract, UpdateRoleInputModel, UpdateUserContract, UpdateUserInputModel, UserDeletedPayloadModel, UserProfileModel };

package/dist/contracts/index.js

@@ -0,0 +1 @@
+import{CreateUserContract as e,CreateUserInputModel as t,DeleteUserContract as n,DeleteUserInputModel as r,GetCurrentUserContract as i,ListUsersContract as a,ListUsersInputModel as o,ListUsersOutputModel as s,SuccessResultModel as c,UpdateUserContract as l,UpdateUserInputModel as u,UserDeletedPayloadModel as d,UserProfileModel as f}from"./user.js";import{AcceptInviteContract as p,AcceptInviteInputModel as m,CreateOrgContract as h,CreateOrgInputModel as g,GetOrgContract as _,GetOrgInputModel as v,InvitationModel as y,InviteMemberContract as b,InviteMemberInputModel as x,ListMembersContract as S,ListMembersInputModel as C,ListMembersOutputModel as w,ListUserOrgsContract as T,ListUserOrgsOutputModel as E,MemberModel as D,MemberRemovedPayloadModel as O,MemberUserModel as k,OrganizationModel as A,OrganizationWithRoleModel as j,RemoveMemberContract as M,RemoveMemberInputModel as N,UpdateOrgContract as P,UpdateOrgInputModel as F}from"./organization.js";import{AssignRoleContract as I,AssignRoleInputModel as L,BindingIdPayloadModel as R,CheckPermissionContract as z,CheckPermissionInputModel as B,CreateRoleContract as V,CreateRoleInputModel as H,DeleteRoleContract as U,DeleteRoleInputModel as W,ListRolesContract as G,ListRolesOutputModel as K,ListUserPermissionsContract as q,ListUserPermissionsInputModel as J,ListUserPermissionsOutputModel as Y,PermissionCheckResultModel as X,PolicyBindingModel as Z,RevokeRoleContract as Q,RevokeRoleInputModel as $,RoleModel as ee,UpdateRoleContract as te,UpdateRoleInputModel as ne}from"./rbac.js";export{p as AcceptInviteContract,m as AcceptInviteInputModel,I as AssignRoleContract,L as AssignRoleInputModel,R as BindingIdPayloadModel,z as CheckPermissionContract,B as CheckPermissionInputModel,h as CreateOrgContract,g as CreateOrgInputModel,V as CreateRoleContract,H as CreateRoleInputModel,e as CreateUserContract,t as CreateUserInputModel,U as DeleteRoleContract,W as DeleteRoleInputModel,n as DeleteUserContract,r as DeleteUserInputModel,i as GetCurrentUserContract,_ as GetOrgContract,v as GetOrgInputModel,y as InvitationModel,b as InviteMemberContract,x as InviteMemberInputModel,S as ListMembersContract,C as ListMembersInputModel,w as ListMembersOutputModel,G as ListRolesContract,K as ListRolesOutputModel,T as ListUserOrgsContract,E as ListUserOrgsOutputModel,q as ListUserPermissionsContract,J as ListUserPermissionsInputModel,Y as ListUserPermissionsOutputModel,a as ListUsersContract,o as ListUsersInputModel,s as ListUsersOutputModel,D as MemberModel,O as MemberRemovedPayloadModel,k as MemberUserModel,A as OrganizationModel,j as OrganizationWithRoleModel,X as PermissionCheckResultModel,Z as PolicyBindingModel,M as RemoveMemberContract,N as RemoveMemberInputModel,Q as RevokeRoleContract,$ as RevokeRoleInputModel,ee as RoleModel,c as SuccessResultModel,P as UpdateOrgContract,F as UpdateOrgInputModel,te as UpdateRoleContract,ne as UpdateRoleInputModel,l as UpdateUserContract,u as UpdateUserInputModel,d as UserDeletedPayloadModel,f as UserProfileModel};