@lssm/lib.identity-rbac 0.0.0-canary-20251206160926

package/dist/entities/index.d.ts

@@ -0,0 +1,176 @@
+import { AccountEntity, SessionEntity, UserEntity, VerificationEntity } from "./user.js";
+import { InvitationEntity, MemberEntity, OrganizationEntity, OrganizationTypeEnum, TeamEntity, TeamMemberEntity } from "./organization.js";
+import { ApiKeyEntity, PasskeyEntity, PermissionEntity, PolicyBindingEntity, RoleEntity } from "./rbac.js";
+import * as _lssm_lib_schema141 from "@lssm/lib.schema";
+import { ModuleSchemaContribution } from "@lssm/lib.schema";
+
+//#region src/entities/index.d.ts
+/**
+ * All identity-rbac entities for schema composition.
+ */
+declare const identityRbacEntities: (_lssm_lib_schema141.EntitySpec<{
+  id: _lssm_lib_schema141.EntityScalarField;
+  email: _lssm_lib_schema141.EntityScalarField;
+  emailVerified: _lssm_lib_schema141.EntityScalarField;
+  name: _lssm_lib_schema141.EntityScalarField;
+  firstName: _lssm_lib_schema141.EntityScalarField;
+  lastName: _lssm_lib_schema141.EntityScalarField;
+  locale: _lssm_lib_schema141.EntityScalarField;
+  timezone: _lssm_lib_schema141.EntityScalarField;
+  imageUrl: _lssm_lib_schema141.EntityScalarField;
+  image: _lssm_lib_schema141.EntityScalarField;
+  metadata: _lssm_lib_schema141.EntityScalarField;
+  onboardingCompleted: _lssm_lib_schema141.EntityScalarField;
+  onboardingStep: _lssm_lib_schema141.EntityScalarField;
+  whitelistedAt: _lssm_lib_schema141.EntityScalarField;
+  role: _lssm_lib_schema141.EntityScalarField;
+  banned: _lssm_lib_schema141.EntityScalarField;
+  banReason: _lssm_lib_schema141.EntityScalarField;
+  banExpires: _lssm_lib_schema141.EntityScalarField;
+  phoneNumber: _lssm_lib_schema141.EntityScalarField;
+  phoneNumberVerified: _lssm_lib_schema141.EntityScalarField;
+  createdAt: _lssm_lib_schema141.EntityScalarField;
+  updatedAt: _lssm_lib_schema141.EntityScalarField;
+  sessions: _lssm_lib_schema141.EntityRelationField;
+  accounts: _lssm_lib_schema141.EntityRelationField;
+  memberships: _lssm_lib_schema141.EntityRelationField;
+  invitations: _lssm_lib_schema141.EntityRelationField;
+  teamMemberships: _lssm_lib_schema141.EntityRelationField;
+  policyBindings: _lssm_lib_schema141.EntityRelationField;
+  apiKeys: _lssm_lib_schema141.EntityRelationField;
+  passkeys: _lssm_lib_schema141.EntityRelationField;
+}> | _lssm_lib_schema141.EntitySpec<{
+  id: _lssm_lib_schema141.EntityScalarField;
+  userId: _lssm_lib_schema141.EntityScalarField;
+  expiresAt: _lssm_lib_schema141.EntityScalarField;
+  token: _lssm_lib_schema141.EntityScalarField;
+  ipAddress: _lssm_lib_schema141.EntityScalarField;
+  userAgent: _lssm_lib_schema141.EntityScalarField;
+  impersonatedBy: _lssm_lib_schema141.EntityScalarField;
+  activeOrganizationId: _lssm_lib_schema141.EntityScalarField;
+  activeTeamId: _lssm_lib_schema141.EntityScalarField;
+  createdAt: _lssm_lib_schema141.EntityScalarField;
+  updatedAt: _lssm_lib_schema141.EntityScalarField;
+  user: _lssm_lib_schema141.EntityRelationField;
+}> | _lssm_lib_schema141.EntitySpec<{
+  id: _lssm_lib_schema141.EntityScalarField;
+  accountId: _lssm_lib_schema141.EntityScalarField;
+  providerId: _lssm_lib_schema141.EntityScalarField;
+  userId: _lssm_lib_schema141.EntityScalarField;
+  accessToken: _lssm_lib_schema141.EntityScalarField;
+  refreshToken: _lssm_lib_schema141.EntityScalarField;
+  idToken: _lssm_lib_schema141.EntityScalarField;
+  accessTokenExpiresAt: _lssm_lib_schema141.EntityScalarField;
+  refreshTokenExpiresAt: _lssm_lib_schema141.EntityScalarField;
+  scope: _lssm_lib_schema141.EntityScalarField;
+  password: _lssm_lib_schema141.EntityScalarField;
+  createdAt: _lssm_lib_schema141.EntityScalarField;
+  updatedAt: _lssm_lib_schema141.EntityScalarField;
+  user: _lssm_lib_schema141.EntityRelationField;
+}> | _lssm_lib_schema141.EntitySpec<{
+  id: _lssm_lib_schema141.EntityScalarField;
+  identifier: _lssm_lib_schema141.EntityScalarField;
+  value: _lssm_lib_schema141.EntityScalarField;
+  expiresAt: _lssm_lib_schema141.EntityScalarField;
+  createdAt: _lssm_lib_schema141.EntityScalarField;
+  updatedAt: _lssm_lib_schema141.EntityScalarField;
+}> | _lssm_lib_schema141.EntitySpec<{
+  id: _lssm_lib_schema141.EntityScalarField;
+  userId: _lssm_lib_schema141.EntityScalarField;
+  organizationId: _lssm_lib_schema141.EntityScalarField;
+  role: _lssm_lib_schema141.EntityScalarField;
+  createdAt: _lssm_lib_schema141.EntityScalarField;
+  user: _lssm_lib_schema141.EntityRelationField;
+  organization: _lssm_lib_schema141.EntityRelationField;
+}> | _lssm_lib_schema141.EntitySpec<{
+  id: _lssm_lib_schema141.EntityScalarField;
+  organizationId: _lssm_lib_schema141.EntityScalarField;
+  email: _lssm_lib_schema141.EntityScalarField;
+  role: _lssm_lib_schema141.EntityScalarField;
+  status: _lssm_lib_schema141.EntityScalarField;
+  acceptedAt: _lssm_lib_schema141.EntityScalarField;
+  expiresAt: _lssm_lib_schema141.EntityScalarField;
+  inviterId: _lssm_lib_schema141.EntityScalarField;
+  teamId: _lssm_lib_schema141.EntityScalarField;
+  createdAt: _lssm_lib_schema141.EntityScalarField;
+  updatedAt: _lssm_lib_schema141.EntityScalarField;
+  organization: _lssm_lib_schema141.EntityRelationField;
+  inviter: _lssm_lib_schema141.EntityRelationField;
+  team: _lssm_lib_schema141.EntityRelationField;
+}> | _lssm_lib_schema141.EntitySpec<{
+  id: _lssm_lib_schema141.EntityScalarField;
+  name: _lssm_lib_schema141.EntityScalarField;
+  organizationId: _lssm_lib_schema141.EntityScalarField;
+  createdAt: _lssm_lib_schema141.EntityScalarField;
+  updatedAt: _lssm_lib_schema141.EntityScalarField;
+  organization: _lssm_lib_schema141.EntityRelationField;
+  members: _lssm_lib_schema141.EntityRelationField;
+  invitations: _lssm_lib_schema141.EntityRelationField;
+}> | _lssm_lib_schema141.EntitySpec<{
+  id: _lssm_lib_schema141.EntityScalarField;
+  teamId: _lssm_lib_schema141.EntityScalarField;
+  userId: _lssm_lib_schema141.EntityScalarField;
+  createdAt: _lssm_lib_schema141.EntityScalarField;
+  team: _lssm_lib_schema141.EntityRelationField;
+  user: _lssm_lib_schema141.EntityRelationField;
+}> | _lssm_lib_schema141.EntitySpec<{
+  id: _lssm_lib_schema141.EntityScalarField;
+  name: _lssm_lib_schema141.EntityScalarField;
+  description: _lssm_lib_schema141.EntityScalarField;
+  createdAt: _lssm_lib_schema141.EntityScalarField;
+  updatedAt: _lssm_lib_schema141.EntityScalarField;
+}> | _lssm_lib_schema141.EntitySpec<{
+  id: _lssm_lib_schema141.EntityScalarField;
+  roleId: _lssm_lib_schema141.EntityScalarField;
+  targetType: _lssm_lib_schema141.EntityScalarField;
+  targetId: _lssm_lib_schema141.EntityScalarField;
+  expiresAt: _lssm_lib_schema141.EntityScalarField;
+  createdAt: _lssm_lib_schema141.EntityScalarField;
+  userId: _lssm_lib_schema141.EntityScalarField;
+  organizationId: _lssm_lib_schema141.EntityScalarField;
+  role: _lssm_lib_schema141.EntityRelationField;
+  user: _lssm_lib_schema141.EntityRelationField;
+  organization: _lssm_lib_schema141.EntityRelationField;
+}> | _lssm_lib_schema141.EntitySpec<{
+  id: _lssm_lib_schema141.EntityScalarField;
+  name: _lssm_lib_schema141.EntityScalarField;
+  start: _lssm_lib_schema141.EntityScalarField;
+  prefix: _lssm_lib_schema141.EntityScalarField;
+  key: _lssm_lib_schema141.EntityScalarField;
+  userId: _lssm_lib_schema141.EntityScalarField;
+  refillInterval: _lssm_lib_schema141.EntityScalarField;
+  refillAmount: _lssm_lib_schema141.EntityScalarField;
+  lastRefillAt: _lssm_lib_schema141.EntityScalarField;
+  remaining: _lssm_lib_schema141.EntityScalarField;
+  requestCount: _lssm_lib_schema141.EntityScalarField;
+  lastRequest: _lssm_lib_schema141.EntityScalarField;
+  enabled: _lssm_lib_schema141.EntityScalarField;
+  rateLimitEnabled: _lssm_lib_schema141.EntityScalarField;
+  rateLimitTimeWindow: _lssm_lib_schema141.EntityScalarField;
+  rateLimitMax: _lssm_lib_schema141.EntityScalarField;
+  expiresAt: _lssm_lib_schema141.EntityScalarField;
+  permissions: _lssm_lib_schema141.EntityScalarField;
+  metadata: _lssm_lib_schema141.EntityScalarField;
+  createdAt: _lssm_lib_schema141.EntityScalarField;
+  updatedAt: _lssm_lib_schema141.EntityScalarField;
+  user: _lssm_lib_schema141.EntityRelationField;
+}> | _lssm_lib_schema141.EntitySpec<{
+  id: _lssm_lib_schema141.EntityScalarField;
+  name: _lssm_lib_schema141.EntityScalarField;
+  publicKey: _lssm_lib_schema141.EntityScalarField;
+  userId: _lssm_lib_schema141.EntityScalarField;
+  credentialID: _lssm_lib_schema141.EntityScalarField;
+  counter: _lssm_lib_schema141.EntityScalarField;
+  deviceType: _lssm_lib_schema141.EntityScalarField;
+  backedUp: _lssm_lib_schema141.EntityScalarField;
+  transports: _lssm_lib_schema141.EntityScalarField;
+  aaguid: _lssm_lib_schema141.EntityScalarField;
+  createdAt: _lssm_lib_schema141.EntityScalarField;
+  user: _lssm_lib_schema141.EntityRelationField;
+}>)[];
+/**
+ * Module schema contribution for identity-rbac.
+ */
+declare const identityRbacSchemaContribution: ModuleSchemaContribution;
+//#endregion
+export { AccountEntity, ApiKeyEntity, InvitationEntity, MemberEntity, OrganizationEntity, OrganizationTypeEnum, PasskeyEntity, PermissionEntity, PolicyBindingEntity, RoleEntity, SessionEntity, TeamEntity, TeamMemberEntity, UserEntity, VerificationEntity, identityRbacEntities, identityRbacSchemaContribution };

package/dist/entities/index.js

@@ -0,0 +1 @@
+import{AccountEntity as e,SessionEntity as t,UserEntity as n,VerificationEntity as r}from"./user.js";import{InvitationEntity as i,MemberEntity as a,OrganizationEntity as o,OrganizationTypeEnum as s,TeamEntity as c,TeamMemberEntity as l}from"./organization.js";import{ApiKeyEntity as u,PasskeyEntity as d,PermissionEntity as f,PolicyBindingEntity as p,RoleEntity as m}from"./rbac.js";const h=[n,t,e,r,o,a,i,c,l,m,f,p,u,d],g={moduleId:`@lssm/lib.identity-rbac`,entities:h,enums:[s]};export{e as AccountEntity,u as ApiKeyEntity,i as InvitationEntity,a as MemberEntity,o as OrganizationEntity,s as OrganizationTypeEnum,d as PasskeyEntity,f as PermissionEntity,p as PolicyBindingEntity,m as RoleEntity,t as SessionEntity,c as TeamEntity,l as TeamMemberEntity,n as UserEntity,r as VerificationEntity,h as identityRbacEntities,g as identityRbacSchemaContribution};

package/dist/entities/organization.d.ts

@@ -0,0 +1,86 @@
+import * as _lssm_lib_schema417 from "@lssm/lib.schema";
+
+//#region src/entities/organization.d.ts
+/**
+ * Organization type enum.
+ */
+declare const OrganizationTypeEnum: _lssm_lib_schema417.EntityEnumDef;
+/**
+ * Organization entity - tenant/company grouping.
+ */
+declare const OrganizationEntity: _lssm_lib_schema417.EntitySpec<{
+  id: _lssm_lib_schema417.EntityScalarField;
+  name: _lssm_lib_schema417.EntityScalarField;
+  slug: _lssm_lib_schema417.EntityScalarField;
+  logo: _lssm_lib_schema417.EntityScalarField;
+  description: _lssm_lib_schema417.EntityScalarField;
+  metadata: _lssm_lib_schema417.EntityScalarField;
+  type: _lssm_lib_schema417.EntityEnumField;
+  onboardingCompleted: _lssm_lib_schema417.EntityScalarField;
+  onboardingStep: _lssm_lib_schema417.EntityScalarField;
+  referralCode: _lssm_lib_schema417.EntityScalarField;
+  referredBy: _lssm_lib_schema417.EntityScalarField;
+  createdAt: _lssm_lib_schema417.EntityScalarField;
+  updatedAt: _lssm_lib_schema417.EntityScalarField;
+  members: _lssm_lib_schema417.EntityRelationField;
+  invitations: _lssm_lib_schema417.EntityRelationField;
+  teams: _lssm_lib_schema417.EntityRelationField;
+  policyBindings: _lssm_lib_schema417.EntityRelationField;
+}>;
+/**
+ * Member entity - user membership in an organization.
+ */
+declare const MemberEntity: _lssm_lib_schema417.EntitySpec<{
+  id: _lssm_lib_schema417.EntityScalarField;
+  userId: _lssm_lib_schema417.EntityScalarField;
+  organizationId: _lssm_lib_schema417.EntityScalarField;
+  role: _lssm_lib_schema417.EntityScalarField;
+  createdAt: _lssm_lib_schema417.EntityScalarField;
+  user: _lssm_lib_schema417.EntityRelationField;
+  organization: _lssm_lib_schema417.EntityRelationField;
+}>;
+/**
+ * Invitation entity - pending organization invites.
+ */
+declare const InvitationEntity: _lssm_lib_schema417.EntitySpec<{
+  id: _lssm_lib_schema417.EntityScalarField;
+  organizationId: _lssm_lib_schema417.EntityScalarField;
+  email: _lssm_lib_schema417.EntityScalarField;
+  role: _lssm_lib_schema417.EntityScalarField;
+  status: _lssm_lib_schema417.EntityScalarField;
+  acceptedAt: _lssm_lib_schema417.EntityScalarField;
+  expiresAt: _lssm_lib_schema417.EntityScalarField;
+  inviterId: _lssm_lib_schema417.EntityScalarField;
+  teamId: _lssm_lib_schema417.EntityScalarField;
+  createdAt: _lssm_lib_schema417.EntityScalarField;
+  updatedAt: _lssm_lib_schema417.EntityScalarField;
+  organization: _lssm_lib_schema417.EntityRelationField;
+  inviter: _lssm_lib_schema417.EntityRelationField;
+  team: _lssm_lib_schema417.EntityRelationField;
+}>;
+/**
+ * Team entity - team within an organization.
+ */
+declare const TeamEntity: _lssm_lib_schema417.EntitySpec<{
+  id: _lssm_lib_schema417.EntityScalarField;
+  name: _lssm_lib_schema417.EntityScalarField;
+  organizationId: _lssm_lib_schema417.EntityScalarField;
+  createdAt: _lssm_lib_schema417.EntityScalarField;
+  updatedAt: _lssm_lib_schema417.EntityScalarField;
+  organization: _lssm_lib_schema417.EntityRelationField;
+  members: _lssm_lib_schema417.EntityRelationField;
+  invitations: _lssm_lib_schema417.EntityRelationField;
+}>;
+/**
+ * TeamMember entity - user's team membership.
+ */
+declare const TeamMemberEntity: _lssm_lib_schema417.EntitySpec<{
+  id: _lssm_lib_schema417.EntityScalarField;
+  teamId: _lssm_lib_schema417.EntityScalarField;
+  userId: _lssm_lib_schema417.EntityScalarField;
+  createdAt: _lssm_lib_schema417.EntityScalarField;
+  team: _lssm_lib_schema417.EntityRelationField;
+  user: _lssm_lib_schema417.EntityRelationField;
+}>;
+//#endregion
+export { InvitationEntity, MemberEntity, OrganizationEntity, OrganizationTypeEnum, TeamEntity, TeamMemberEntity };

package/dist/entities/organization.js

@@ -0,0 +1 @@
+import{i as e,n as t,r as n,t as r}from"../schema/dist/entity/defineEntity.js";import"../schema/dist/index.js";const i=t({name:`OrganizationType`,values:[`PLATFORM_ADMIN`,`CONTRACT_SPEC_CUSTOMER`],schema:`lssm_sigil`,description:`Type of organization in the platform.`}),a=r({name:`Organization`,description:`An organization is a tenant boundary grouping users.`,schema:`lssm_sigil`,map:`organization`,fields:{id:n.id({description:`Unique organization identifier`}),name:n.string({description:`Organization display name`}),slug:n.string({isOptional:!0,isUnique:!0,description:`URL-friendly identifier`}),logo:n.url({isOptional:!0,description:`Organization logo URL`}),description:n.string({isOptional:!0,description:`Organization description`}),metadata:n.json({isOptional:!0,description:`Arbitrary organization metadata`}),type:n.enum(`OrganizationType`,{description:`Organization type`}),onboardingCompleted:n.boolean({default:!1}),onboardingStep:n.string({isOptional:!0}),referralCode:n.string({isOptional:!0,isUnique:!0,description:`Unique referral code`}),referredBy:n.string({isOptional:!0,description:`ID of referring user`}),createdAt:n.createdAt(),updatedAt:n.updatedAt(),members:n.hasMany(`Member`),invitations:n.hasMany(`Invitation`),teams:n.hasMany(`Team`),policyBindings:n.hasMany(`PolicyBinding`)},enums:[i]}),o=r({name:`Member`,description:`Membership of a user in an organization with a role.`,schema:`lssm_sigil`,map:`member`,fields:{id:n.id(),userId:n.foreignKey(),organizationId:n.foreignKey(),role:n.string({description:`Role in organization (owner, admin, member)`}),createdAt:n.createdAt(),user:n.belongsTo(`User`,[`userId`],[`id`],{onDelete:`Cascade`}),organization:n.belongsTo(`Organization`,[`organizationId`],[`id`],{onDelete:`Cascade`})},indexes:[e.unique([`userId`,`organizationId`])]}),s=r({name:`Invitation`,description:`An invitation to join an organization.`,schema:`lssm_sigil`,map:`invitation`,fields:{id:n.id(),organizationId:n.foreignKey(),email:n.email({description:`Invited email address`}),role:n.string({isOptional:!0,description:`Role to assign on acceptance`}),status:n.string({default:`"pending"`,description:`Invitation status`}),acceptedAt:n.dateTime({isOptional:!0}),expiresAt:n.dateTime({isOptional:!0}),inviterId:n.foreignKey({description:`User who sent the invitation`}),teamId:n.string({isOptional:!0}),createdAt:n.createdAt(),updatedAt:n.updatedAt(),organization:n.belongsTo(`Organization`,[`organizationId`],[`id`],{onDelete:`Cascade`}),inviter:n.belongsTo(`User`,[`inviterId`],[`id`],{onDelete:`Cascade`}),team:n.belongsTo(`Team`,[`teamId`],[`id`],{onDelete:`Cascade`})}}),c=r({name:`Team`,description:`Team within an organization.`,schema:`lssm_sigil`,map:`team`,fields:{id:n.id(),name:n.string({description:`Team name`}),organizationId:n.foreignKey(),createdAt:n.createdAt(),updatedAt:n.updatedAt(),organization:n.belongsTo(`Organization`,[`organizationId`],[`id`],{onDelete:`Cascade`}),members:n.hasMany(`TeamMember`),invitations:n.hasMany(`Invitation`)}}),l=r({name:`TeamMember`,description:`Team membership for a user.`,schema:`lssm_sigil`,map:`team_member`,fields:{id:n.id(),teamId:n.foreignKey(),userId:n.foreignKey(),createdAt:n.createdAt(),team:n.belongsTo(`Team`,[`teamId`],[`id`],{onDelete:`Cascade`}),user:n.belongsTo(`User`,[`userId`],[`id`],{onDelete:`Cascade`})}});export{s as InvitationEntity,o as MemberEntity,a as OrganizationEntity,i as OrganizationTypeEnum,c as TeamEntity,l as TeamMemberEntity};

package/dist/entities/rbac.d.ts

@@ -0,0 +1,87 @@
+import * as _lssm_lib_schema858 from "@lssm/lib.schema";
+
+//#region src/entities/rbac.d.ts
+/**
+ * Role entity - named set of permissions.
+ */
+declare const RoleEntity: _lssm_lib_schema858.EntitySpec<{
+  id: _lssm_lib_schema858.EntityScalarField;
+  name: _lssm_lib_schema858.EntityScalarField;
+  description: _lssm_lib_schema858.EntityScalarField;
+  permissions: _lssm_lib_schema858.EntityScalarField;
+  createdAt: _lssm_lib_schema858.EntityScalarField;
+  updatedAt: _lssm_lib_schema858.EntityScalarField;
+  policyBindings: _lssm_lib_schema858.EntityRelationField;
+}>;
+/**
+ * Permission entity - atomic access right.
+ */
+declare const PermissionEntity: _lssm_lib_schema858.EntitySpec<{
+  id: _lssm_lib_schema858.EntityScalarField;
+  name: _lssm_lib_schema858.EntityScalarField;
+  description: _lssm_lib_schema858.EntityScalarField;
+  createdAt: _lssm_lib_schema858.EntityScalarField;
+  updatedAt: _lssm_lib_schema858.EntityScalarField;
+}>;
+/**
+ * PolicyBinding entity - binds roles to principals.
+ */
+declare const PolicyBindingEntity: _lssm_lib_schema858.EntitySpec<{
+  id: _lssm_lib_schema858.EntityScalarField;
+  roleId: _lssm_lib_schema858.EntityScalarField;
+  targetType: _lssm_lib_schema858.EntityScalarField;
+  targetId: _lssm_lib_schema858.EntityScalarField;
+  expiresAt: _lssm_lib_schema858.EntityScalarField;
+  createdAt: _lssm_lib_schema858.EntityScalarField;
+  userId: _lssm_lib_schema858.EntityScalarField;
+  organizationId: _lssm_lib_schema858.EntityScalarField;
+  role: _lssm_lib_schema858.EntityRelationField;
+  user: _lssm_lib_schema858.EntityRelationField;
+  organization: _lssm_lib_schema858.EntityRelationField;
+}>;
+/**
+ * ApiKey entity - API keys for programmatic access.
+ */
+declare const ApiKeyEntity: _lssm_lib_schema858.EntitySpec<{
+  id: _lssm_lib_schema858.EntityScalarField;
+  name: _lssm_lib_schema858.EntityScalarField;
+  start: _lssm_lib_schema858.EntityScalarField;
+  prefix: _lssm_lib_schema858.EntityScalarField;
+  key: _lssm_lib_schema858.EntityScalarField;
+  userId: _lssm_lib_schema858.EntityScalarField;
+  refillInterval: _lssm_lib_schema858.EntityScalarField;
+  refillAmount: _lssm_lib_schema858.EntityScalarField;
+  lastRefillAt: _lssm_lib_schema858.EntityScalarField;
+  remaining: _lssm_lib_schema858.EntityScalarField;
+  requestCount: _lssm_lib_schema858.EntityScalarField;
+  lastRequest: _lssm_lib_schema858.EntityScalarField;
+  enabled: _lssm_lib_schema858.EntityScalarField;
+  rateLimitEnabled: _lssm_lib_schema858.EntityScalarField;
+  rateLimitTimeWindow: _lssm_lib_schema858.EntityScalarField;
+  rateLimitMax: _lssm_lib_schema858.EntityScalarField;
+  expiresAt: _lssm_lib_schema858.EntityScalarField;
+  permissions: _lssm_lib_schema858.EntityScalarField;
+  metadata: _lssm_lib_schema858.EntityScalarField;
+  createdAt: _lssm_lib_schema858.EntityScalarField;
+  updatedAt: _lssm_lib_schema858.EntityScalarField;
+  user: _lssm_lib_schema858.EntityRelationField;
+}>;
+/**
+ * Passkey entity - WebAuthn passkeys.
+ */
+declare const PasskeyEntity: _lssm_lib_schema858.EntitySpec<{
+  id: _lssm_lib_schema858.EntityScalarField;
+  name: _lssm_lib_schema858.EntityScalarField;
+  publicKey: _lssm_lib_schema858.EntityScalarField;
+  userId: _lssm_lib_schema858.EntityScalarField;
+  credentialID: _lssm_lib_schema858.EntityScalarField;
+  counter: _lssm_lib_schema858.EntityScalarField;
+  deviceType: _lssm_lib_schema858.EntityScalarField;
+  backedUp: _lssm_lib_schema858.EntityScalarField;
+  transports: _lssm_lib_schema858.EntityScalarField;
+  aaguid: _lssm_lib_schema858.EntityScalarField;
+  createdAt: _lssm_lib_schema858.EntityScalarField;
+  user: _lssm_lib_schema858.EntityRelationField;
+}>;
+//#endregion
+export { ApiKeyEntity, PasskeyEntity, PermissionEntity, PolicyBindingEntity, RoleEntity };

package/dist/entities/rbac.js

@@ -0,0 +1 @@
+import{i as e,r as t,t as n}from"../schema/dist/entity/defineEntity.js";import"../schema/dist/index.js";const r=n({name:`Role`,description:`A role defines a named set of permissions.`,schema:`lssm_sigil`,map:`role`,fields:{id:t.id(),name:t.string({isUnique:!0,description:`Unique role name`}),description:t.string({isOptional:!0,description:`Role description`}),permissions:t.string({isArray:!0,description:`Array of permission names`}),createdAt:t.createdAt(),updatedAt:t.updatedAt(),policyBindings:t.hasMany(`PolicyBinding`)}}),i=n({name:`Permission`,description:`A permission represents an atomic access right.`,schema:`lssm_sigil`,map:`permission`,fields:{id:t.id(),name:t.string({isUnique:!0,description:`Unique permission name`}),description:t.string({isOptional:!0,description:`Permission description`}),createdAt:t.createdAt(),updatedAt:t.updatedAt()}}),a=n({name:`PolicyBinding`,description:`Binds roles to principals (users or organizations).`,schema:`lssm_sigil`,map:`policy_binding`,fields:{id:t.id(),roleId:t.foreignKey(),targetType:t.string({description:`"user" or "organization"`}),targetId:t.string({description:`ID of User or Organization`}),expiresAt:t.dateTime({isOptional:!0,description:`When binding expires`}),createdAt:t.createdAt(),userId:t.string({isOptional:!0}),organizationId:t.string({isOptional:!0}),role:t.belongsTo(`Role`,[`roleId`],[`id`],{onDelete:`Cascade`}),user:t.belongsTo(`User`,[`userId`],[`id`]),organization:t.belongsTo(`Organization`,[`organizationId`],[`id`])},indexes:[e.on([`targetType`,`targetId`])]}),o=n({name:`ApiKey`,description:`API keys for programmatic access.`,schema:`lssm_sigil`,map:`api_key`,fields:{id:t.id(),name:t.string({description:`API key name`}),start:t.string({description:`Starting characters for identification`}),prefix:t.string({description:`API key prefix`}),key:t.string({description:`Hashed API key`}),userId:t.foreignKey(),refillInterval:t.int({description:`Refill interval in ms`}),refillAmount:t.int({description:`Amount to refill`}),lastRefillAt:t.dateTime(),remaining:t.int({description:`Remaining requests`}),requestCount:t.int({description:`Total requests made`}),lastRequest:t.dateTime(),enabled:t.boolean({default:!0}),rateLimitEnabled:t.boolean({default:!0}),rateLimitTimeWindow:t.int({description:`Rate limit window in ms`}),rateLimitMax:t.int({description:`Max requests in window`}),expiresAt:t.dateTime(),permissions:t.string({isArray:!0}),metadata:t.json({isOptional:!0}),createdAt:t.createdAt(),updatedAt:t.updatedAt(),user:t.belongsTo(`User`,[`userId`],[`id`],{onDelete:`Cascade`})}}),s=n({name:`Passkey`,description:`WebAuthn passkeys for passwordless authentication.`,schema:`lssm_sigil`,map:`passkey`,fields:{id:t.id(),name:t.string({description:`Passkey name`}),publicKey:t.string({description:`Public key`}),userId:t.foreignKey(),credentialID:t.string({description:`Credential ID`}),counter:t.int({description:`Counter`}),deviceType:t.string({description:`Device type`}),backedUp:t.boolean({description:`Whether passkey is backed up`}),transports:t.string({description:`Transports`}),aaguid:t.string({description:`Authenticator GUID`}),createdAt:t.createdAt(),user:t.belongsTo(`User`,[`userId`],[`id`],{onDelete:`Cascade`})}});export{o as ApiKeyEntity,s as PasskeyEntity,i as PermissionEntity,a as PolicyBindingEntity,r as RoleEntity};

package/dist/entities/user.d.ts

@@ -0,0 +1,87 @@
+import * as _lssm_lib_schema475 from "@lssm/lib.schema";
+
+//#region src/entities/user.d.ts
+/**
+ * User entity - core user profile and authentication.
+ */
+declare const UserEntity: _lssm_lib_schema475.EntitySpec<{
+  id: _lssm_lib_schema475.EntityScalarField;
+  email: _lssm_lib_schema475.EntityScalarField;
+  emailVerified: _lssm_lib_schema475.EntityScalarField;
+  name: _lssm_lib_schema475.EntityScalarField;
+  firstName: _lssm_lib_schema475.EntityScalarField;
+  lastName: _lssm_lib_schema475.EntityScalarField;
+  locale: _lssm_lib_schema475.EntityScalarField;
+  timezone: _lssm_lib_schema475.EntityScalarField;
+  imageUrl: _lssm_lib_schema475.EntityScalarField;
+  image: _lssm_lib_schema475.EntityScalarField;
+  metadata: _lssm_lib_schema475.EntityScalarField;
+  onboardingCompleted: _lssm_lib_schema475.EntityScalarField;
+  onboardingStep: _lssm_lib_schema475.EntityScalarField;
+  whitelistedAt: _lssm_lib_schema475.EntityScalarField;
+  role: _lssm_lib_schema475.EntityScalarField;
+  banned: _lssm_lib_schema475.EntityScalarField;
+  banReason: _lssm_lib_schema475.EntityScalarField;
+  banExpires: _lssm_lib_schema475.EntityScalarField;
+  phoneNumber: _lssm_lib_schema475.EntityScalarField;
+  phoneNumberVerified: _lssm_lib_schema475.EntityScalarField;
+  createdAt: _lssm_lib_schema475.EntityScalarField;
+  updatedAt: _lssm_lib_schema475.EntityScalarField;
+  sessions: _lssm_lib_schema475.EntityRelationField;
+  accounts: _lssm_lib_schema475.EntityRelationField;
+  memberships: _lssm_lib_schema475.EntityRelationField;
+  invitations: _lssm_lib_schema475.EntityRelationField;
+  teamMemberships: _lssm_lib_schema475.EntityRelationField;
+  policyBindings: _lssm_lib_schema475.EntityRelationField;
+  apiKeys: _lssm_lib_schema475.EntityRelationField;
+  passkeys: _lssm_lib_schema475.EntityRelationField;
+}>;
+/**
+ * Session entity - login sessions.
+ */
+declare const SessionEntity: _lssm_lib_schema475.EntitySpec<{
+  id: _lssm_lib_schema475.EntityScalarField;
+  userId: _lssm_lib_schema475.EntityScalarField;
+  expiresAt: _lssm_lib_schema475.EntityScalarField;
+  token: _lssm_lib_schema475.EntityScalarField;
+  ipAddress: _lssm_lib_schema475.EntityScalarField;
+  userAgent: _lssm_lib_schema475.EntityScalarField;
+  impersonatedBy: _lssm_lib_schema475.EntityScalarField;
+  activeOrganizationId: _lssm_lib_schema475.EntityScalarField;
+  activeTeamId: _lssm_lib_schema475.EntityScalarField;
+  createdAt: _lssm_lib_schema475.EntityScalarField;
+  updatedAt: _lssm_lib_schema475.EntityScalarField;
+  user: _lssm_lib_schema475.EntityRelationField;
+}>;
+/**
+ * Account entity - external authentication accounts.
+ */
+declare const AccountEntity: _lssm_lib_schema475.EntitySpec<{
+  id: _lssm_lib_schema475.EntityScalarField;
+  accountId: _lssm_lib_schema475.EntityScalarField;
+  providerId: _lssm_lib_schema475.EntityScalarField;
+  userId: _lssm_lib_schema475.EntityScalarField;
+  accessToken: _lssm_lib_schema475.EntityScalarField;
+  refreshToken: _lssm_lib_schema475.EntityScalarField;
+  idToken: _lssm_lib_schema475.EntityScalarField;
+  accessTokenExpiresAt: _lssm_lib_schema475.EntityScalarField;
+  refreshTokenExpiresAt: _lssm_lib_schema475.EntityScalarField;
+  scope: _lssm_lib_schema475.EntityScalarField;
+  password: _lssm_lib_schema475.EntityScalarField;
+  createdAt: _lssm_lib_schema475.EntityScalarField;
+  updatedAt: _lssm_lib_schema475.EntityScalarField;
+  user: _lssm_lib_schema475.EntityRelationField;
+}>;
+/**
+ * Verification entity - email/phone verification tokens.
+ */
+declare const VerificationEntity: _lssm_lib_schema475.EntitySpec<{
+  id: _lssm_lib_schema475.EntityScalarField;
+  identifier: _lssm_lib_schema475.EntityScalarField;
+  value: _lssm_lib_schema475.EntityScalarField;
+  expiresAt: _lssm_lib_schema475.EntityScalarField;
+  createdAt: _lssm_lib_schema475.EntityScalarField;
+  updatedAt: _lssm_lib_schema475.EntityScalarField;
+}>;
+//#endregion
+export { AccountEntity, SessionEntity, UserEntity, VerificationEntity };

package/dist/entities/user.js

@@ -0,0 +1 @@
+import{i as e,r as t,t as n}from"../schema/dist/entity/defineEntity.js";import"../schema/dist/index.js";import{z as r}from"zod";const i=n({name:`User`,description:`A user of the platform. Users hold core profile information and authenticate via Account records.`,schema:`lssm_sigil`,map:`user`,fields:{id:t.id({description:`Unique user identifier`}),email:t.email({isUnique:!0,description:`User email address`}),emailVerified:t.boolean({default:!1,description:`Whether email has been verified`}),name:t.string({isOptional:!0,description:`Display name`}),firstName:t.string({isOptional:!0,description:`First name`}),lastName:t.string({isOptional:!0,description:`Last name`}),locale:t.string({isOptional:!0,description:`User locale (e.g., "en-US")`}),timezone:t.string({isOptional:!0,description:`Olson timezone (e.g., "Europe/Paris")`}),imageUrl:t.url({isOptional:!0,description:`URL of avatar or profile picture`}),image:t.string({isOptional:!0,description:`Legacy image field`}),metadata:t.json({isOptional:!0,description:`Arbitrary user metadata`}),onboardingCompleted:t.boolean({default:!1,description:`Whether onboarding is complete`}),onboardingStep:t.string({isOptional:!0,description:`Current onboarding step`}),whitelistedAt:t.dateTime({isOptional:!0,description:`When user was whitelisted`}),role:t.string({isOptional:!0,default:`"user"`,description:`User role (user, admin)`}),banned:t.boolean({default:!1,description:`Whether user is banned`}),banReason:t.string({isOptional:!0,description:`Reason for ban`}),banExpires:t.dateTime({isOptional:!0,description:`When ban expires`}),phoneNumber:t.string({isOptional:!0,isUnique:!0,description:`Phone number`}),phoneNumberVerified:t.boolean({default:!1,description:`Whether phone is verified`}),createdAt:t.createdAt(),updatedAt:t.updatedAt(),sessions:t.hasMany(`Session`),accounts:t.hasMany(`Account`),memberships:t.hasMany(`Member`),invitations:t.hasMany(`Invitation`),teamMemberships:t.hasMany(`TeamMember`),policyBindings:t.hasMany(`PolicyBinding`),apiKeys:t.hasMany(`ApiKey`),passkeys:t.hasMany(`Passkey`)}}),a=n({name:`Session`,description:`Represents a login session (e.g., web session or API token).`,schema:`lssm_sigil`,map:`session`,fields:{id:t.id(),userId:t.foreignKey(),expiresAt:t.dateTime({description:`Session expiration time`}),token:t.string({isUnique:!0,description:`Session token`}),ipAddress:t.string({isOptional:!0,description:`Client IP address`}),userAgent:t.string({isOptional:!0,description:`Client user agent`}),impersonatedBy:t.string({isOptional:!0,description:`Admin impersonating this session`}),activeOrganizationId:t.string({isOptional:!0,description:`Active org context`}),activeTeamId:t.string({isOptional:!0,description:`Active team context`}),createdAt:t.createdAt(),updatedAt:t.updatedAt(),user:t.belongsTo(`User`,[`userId`],[`id`],{onDelete:`Cascade`})}}),o=n({name:`Account`,description:`External authentication accounts (OAuth, password, etc.).`,schema:`lssm_sigil`,map:`account`,fields:{id:t.id(),accountId:t.string({description:`Account ID from provider`}),providerId:t.string({description:`Provider identifier`}),userId:t.foreignKey(),accessToken:t.string({isOptional:!0}),refreshToken:t.string({isOptional:!0}),idToken:t.string({isOptional:!0}),accessTokenExpiresAt:t.dateTime({isOptional:!0}),refreshTokenExpiresAt:t.dateTime({isOptional:!0}),scope:t.string({isOptional:!0}),password:t.string({isOptional:!0,description:`Hashed password for password providers`}),createdAt:t.createdAt(),updatedAt:t.updatedAt(),user:t.belongsTo(`User`,[`userId`],[`id`],{onDelete:`Cascade`})},indexes:[e.unique([`accountId`,`providerId`])]}),s=n({name:`Verification`,description:`Verification tokens for email/phone confirmation.`,schema:`lssm_sigil`,map:`verification`,fields:{id:t.uuid(),identifier:t.string({description:`Email or phone being verified`}),value:t.string({description:`Verification code/token`}),expiresAt:t.dateTime({description:`Token expiration`}),createdAt:t.createdAt(),updatedAt:t.updatedAt()}});export{o as AccountEntity,a as SessionEntity,i as UserEntity,s as VerificationEntity};