@lssm/lib.identity-rbac 0.0.0-canary-20251217060834 → 0.0.0-canary-20251217062943

package/dist/entities/rbac.d.ts

@@ -1,87 +1,87 @@
-import * as _lssm_lib_schema491 from "@lssm/lib.schema";
+import * as _lssm_lib_schema792 from "@lssm/lib.schema";
 
 //#region src/entities/rbac.d.ts
 /**
  * Role entity - named set of permissions.
  */
-declare const RoleEntity: _lssm_lib_schema491.EntitySpec<{
-  id: _lssm_lib_schema491.EntityScalarField;
-  name: _lssm_lib_schema491.EntityScalarField;
-  description: _lssm_lib_schema491.EntityScalarField;
-  permissions: _lssm_lib_schema491.EntityScalarField;
-  createdAt: _lssm_lib_schema491.EntityScalarField;
-  updatedAt: _lssm_lib_schema491.EntityScalarField;
-  policyBindings: _lssm_lib_schema491.EntityRelationField;
+declare const RoleEntity: _lssm_lib_schema792.EntitySpec<{
+  id: _lssm_lib_schema792.EntityScalarField;
+  name: _lssm_lib_schema792.EntityScalarField;
+  description: _lssm_lib_schema792.EntityScalarField;
+  permissions: _lssm_lib_schema792.EntityScalarField;
+  createdAt: _lssm_lib_schema792.EntityScalarField;
+  updatedAt: _lssm_lib_schema792.EntityScalarField;
+  policyBindings: _lssm_lib_schema792.EntityRelationField;
 }>;
 /**
  * Permission entity - atomic access right.
  */
-declare const PermissionEntity: _lssm_lib_schema491.EntitySpec<{
-  id: _lssm_lib_schema491.EntityScalarField;
-  name: _lssm_lib_schema491.EntityScalarField;
-  description: _lssm_lib_schema491.EntityScalarField;
-  createdAt: _lssm_lib_schema491.EntityScalarField;
-  updatedAt: _lssm_lib_schema491.EntityScalarField;
+declare const PermissionEntity: _lssm_lib_schema792.EntitySpec<{
+  id: _lssm_lib_schema792.EntityScalarField;
+  name: _lssm_lib_schema792.EntityScalarField;
+  description: _lssm_lib_schema792.EntityScalarField;
+  createdAt: _lssm_lib_schema792.EntityScalarField;
+  updatedAt: _lssm_lib_schema792.EntityScalarField;
 }>;
 /**
  * PolicyBinding entity - binds roles to principals.
  */
-declare const PolicyBindingEntity: _lssm_lib_schema491.EntitySpec<{
-  id: _lssm_lib_schema491.EntityScalarField;
-  roleId: _lssm_lib_schema491.EntityScalarField;
-  targetType: _lssm_lib_schema491.EntityScalarField;
-  targetId: _lssm_lib_schema491.EntityScalarField;
-  expiresAt: _lssm_lib_schema491.EntityScalarField;
-  createdAt: _lssm_lib_schema491.EntityScalarField;
-  userId: _lssm_lib_schema491.EntityScalarField;
-  organizationId: _lssm_lib_schema491.EntityScalarField;
-  role: _lssm_lib_schema491.EntityRelationField;
-  user: _lssm_lib_schema491.EntityRelationField;
-  organization: _lssm_lib_schema491.EntityRelationField;
+declare const PolicyBindingEntity: _lssm_lib_schema792.EntitySpec<{
+  id: _lssm_lib_schema792.EntityScalarField;
+  roleId: _lssm_lib_schema792.EntityScalarField;
+  targetType: _lssm_lib_schema792.EntityScalarField;
+  targetId: _lssm_lib_schema792.EntityScalarField;
+  expiresAt: _lssm_lib_schema792.EntityScalarField;
+  createdAt: _lssm_lib_schema792.EntityScalarField;
+  userId: _lssm_lib_schema792.EntityScalarField;
+  organizationId: _lssm_lib_schema792.EntityScalarField;
+  role: _lssm_lib_schema792.EntityRelationField;
+  user: _lssm_lib_schema792.EntityRelationField;
+  organization: _lssm_lib_schema792.EntityRelationField;
 }>;
 /**
  * ApiKey entity - API keys for programmatic access.
  */
-declare const ApiKeyEntity: _lssm_lib_schema491.EntitySpec<{
-  id: _lssm_lib_schema491.EntityScalarField;
-  name: _lssm_lib_schema491.EntityScalarField;
-  start: _lssm_lib_schema491.EntityScalarField;
-  prefix: _lssm_lib_schema491.EntityScalarField;
-  key: _lssm_lib_schema491.EntityScalarField;
-  userId: _lssm_lib_schema491.EntityScalarField;
-  refillInterval: _lssm_lib_schema491.EntityScalarField;
-  refillAmount: _lssm_lib_schema491.EntityScalarField;
-  lastRefillAt: _lssm_lib_schema491.EntityScalarField;
-  remaining: _lssm_lib_schema491.EntityScalarField;
-  requestCount: _lssm_lib_schema491.EntityScalarField;
-  lastRequest: _lssm_lib_schema491.EntityScalarField;
-  enabled: _lssm_lib_schema491.EntityScalarField;
-  rateLimitEnabled: _lssm_lib_schema491.EntityScalarField;
-  rateLimitTimeWindow: _lssm_lib_schema491.EntityScalarField;
-  rateLimitMax: _lssm_lib_schema491.EntityScalarField;
-  expiresAt: _lssm_lib_schema491.EntityScalarField;
-  permissions: _lssm_lib_schema491.EntityScalarField;
-  metadata: _lssm_lib_schema491.EntityScalarField;
-  createdAt: _lssm_lib_schema491.EntityScalarField;
-  updatedAt: _lssm_lib_schema491.EntityScalarField;
-  user: _lssm_lib_schema491.EntityRelationField;
+declare const ApiKeyEntity: _lssm_lib_schema792.EntitySpec<{
+  id: _lssm_lib_schema792.EntityScalarField;
+  name: _lssm_lib_schema792.EntityScalarField;
+  start: _lssm_lib_schema792.EntityScalarField;
+  prefix: _lssm_lib_schema792.EntityScalarField;
+  key: _lssm_lib_schema792.EntityScalarField;
+  userId: _lssm_lib_schema792.EntityScalarField;
+  refillInterval: _lssm_lib_schema792.EntityScalarField;
+  refillAmount: _lssm_lib_schema792.EntityScalarField;
+  lastRefillAt: _lssm_lib_schema792.EntityScalarField;
+  remaining: _lssm_lib_schema792.EntityScalarField;
+  requestCount: _lssm_lib_schema792.EntityScalarField;
+  lastRequest: _lssm_lib_schema792.EntityScalarField;
+  enabled: _lssm_lib_schema792.EntityScalarField;
+  rateLimitEnabled: _lssm_lib_schema792.EntityScalarField;
+  rateLimitTimeWindow: _lssm_lib_schema792.EntityScalarField;
+  rateLimitMax: _lssm_lib_schema792.EntityScalarField;
+  expiresAt: _lssm_lib_schema792.EntityScalarField;
+  permissions: _lssm_lib_schema792.EntityScalarField;
+  metadata: _lssm_lib_schema792.EntityScalarField;
+  createdAt: _lssm_lib_schema792.EntityScalarField;
+  updatedAt: _lssm_lib_schema792.EntityScalarField;
+  user: _lssm_lib_schema792.EntityRelationField;
 }>;
 /**
  * Passkey entity - WebAuthn passkeys.
  */
-declare const PasskeyEntity: _lssm_lib_schema491.EntitySpec<{
-  id: _lssm_lib_schema491.EntityScalarField;
-  name: _lssm_lib_schema491.EntityScalarField;
-  publicKey: _lssm_lib_schema491.EntityScalarField;
-  userId: _lssm_lib_schema491.EntityScalarField;
-  credentialID: _lssm_lib_schema491.EntityScalarField;
-  counter: _lssm_lib_schema491.EntityScalarField;
-  deviceType: _lssm_lib_schema491.EntityScalarField;
-  backedUp: _lssm_lib_schema491.EntityScalarField;
-  transports: _lssm_lib_schema491.EntityScalarField;
-  aaguid: _lssm_lib_schema491.EntityScalarField;
-  createdAt: _lssm_lib_schema491.EntityScalarField;
-  user: _lssm_lib_schema491.EntityRelationField;
+declare const PasskeyEntity: _lssm_lib_schema792.EntitySpec<{
+  id: _lssm_lib_schema792.EntityScalarField;
+  name: _lssm_lib_schema792.EntityScalarField;
+  publicKey: _lssm_lib_schema792.EntityScalarField;
+  userId: _lssm_lib_schema792.EntityScalarField;
+  credentialID: _lssm_lib_schema792.EntityScalarField;
+  counter: _lssm_lib_schema792.EntityScalarField;
+  deviceType: _lssm_lib_schema792.EntityScalarField;
+  backedUp: _lssm_lib_schema792.EntityScalarField;
+  transports: _lssm_lib_schema792.EntityScalarField;
+  aaguid: _lssm_lib_schema792.EntityScalarField;
+  createdAt: _lssm_lib_schema792.EntityScalarField;
+  user: _lssm_lib_schema792.EntityRelationField;
 }>;
 //#endregion
 export { ApiKeyEntity, PasskeyEntity, PermissionEntity, PolicyBindingEntity, RoleEntity };

package/dist/entities/rbac.js

@@ -1 +1 @@
-import{defineEntity as e,field as t,index as n}from"@lssm/lib.schema";const r=e({name:`Role`,description:`A role defines a named set of permissions.`,schema:`lssm_sigil`,map:`role`,fields:{id:t.id(),name:t.string({isUnique:!0,description:`Unique role name`}),description:t.string({isOptional:!0,description:`Role description`}),permissions:t.string({isArray:!0,description:`Array of permission names`}),createdAt:t.createdAt(),updatedAt:t.updatedAt(),policyBindings:t.hasMany(`PolicyBinding`)}}),i=e({name:`Permission`,description:`A permission represents an atomic access right.`,schema:`lssm_sigil`,map:`permission`,fields:{id:t.id(),name:t.string({isUnique:!0,description:`Unique permission name`}),description:t.string({isOptional:!0,description:`Permission description`}),createdAt:t.createdAt(),updatedAt:t.updatedAt()}}),a=e({name:`PolicyBinding`,description:`Binds roles to principals (users or organizations).`,schema:`lssm_sigil`,map:`policy_binding`,fields:{id:t.id(),roleId:t.foreignKey(),targetType:t.string({description:`"user" or "organization"`}),targetId:t.string({description:`ID of User or Organization`}),expiresAt:t.dateTime({isOptional:!0,description:`When binding expires`}),createdAt:t.createdAt(),userId:t.string({isOptional:!0}),organizationId:t.string({isOptional:!0}),role:t.belongsTo(`Role`,[`roleId`],[`id`],{onDelete:`Cascade`}),user:t.belongsTo(`User`,[`userId`],[`id`]),organization:t.belongsTo(`Organization`,[`organizationId`],[`id`])},indexes:[n.on([`targetType`,`targetId`])]}),o=e({name:`ApiKey`,description:`API keys for programmatic access.`,schema:`lssm_sigil`,map:`api_key`,fields:{id:t.id(),name:t.string({description:`API key name`}),start:t.string({description:`Starting characters for identification`}),prefix:t.string({description:`API key prefix`}),key:t.string({description:`Hashed API key`}),userId:t.foreignKey(),refillInterval:t.int({description:`Refill interval in ms`}),refillAmount:t.int({description:`Amount to refill`}),lastRefillAt:t.dateTime(),remaining:t.int({description:`Remaining requests`}),requestCount:t.int({description:`Total requests made`}),lastRequest:t.dateTime(),enabled:t.boolean({default:!0}),rateLimitEnabled:t.boolean({default:!0}),rateLimitTimeWindow:t.int({description:`Rate limit window in ms`}),rateLimitMax:t.int({description:`Max requests in window`}),expiresAt:t.dateTime(),permissions:t.string({isArray:!0}),metadata:t.json({isOptional:!0}),createdAt:t.createdAt(),updatedAt:t.updatedAt(),user:t.belongsTo(`User`,[`userId`],[`id`],{onDelete:`Cascade`})}}),s=e({name:`Passkey`,description:`WebAuthn passkeys for passwordless authentication.`,schema:`lssm_sigil`,map:`passkey`,fields:{id:t.id(),name:t.string({description:`Passkey name`}),publicKey:t.string({description:`Public key`}),userId:t.foreignKey(),credentialID:t.string({description:`Credential ID`}),counter:t.int({description:`Counter`}),deviceType:t.string({description:`Device type`}),backedUp:t.boolean({description:`Whether passkey is backed up`}),transports:t.string({description:`Transports`}),aaguid:t.string({description:`Authenticator GUID`}),createdAt:t.createdAt(),user:t.belongsTo(`User`,[`userId`],[`id`],{onDelete:`Cascade`})}});export{o as ApiKeyEntity,s as PasskeyEntity,i as PermissionEntity,a as PolicyBindingEntity,r as RoleEntity};
+import{i as e,r as t,t as n}from"../schema/dist/entity/defineEntity.js";import"../schema/dist/index.js";const r=n({name:`Role`,description:`A role defines a named set of permissions.`,schema:`lssm_sigil`,map:`role`,fields:{id:t.id(),name:t.string({isUnique:!0,description:`Unique role name`}),description:t.string({isOptional:!0,description:`Role description`}),permissions:t.string({isArray:!0,description:`Array of permission names`}),createdAt:t.createdAt(),updatedAt:t.updatedAt(),policyBindings:t.hasMany(`PolicyBinding`)}}),i=n({name:`Permission`,description:`A permission represents an atomic access right.`,schema:`lssm_sigil`,map:`permission`,fields:{id:t.id(),name:t.string({isUnique:!0,description:`Unique permission name`}),description:t.string({isOptional:!0,description:`Permission description`}),createdAt:t.createdAt(),updatedAt:t.updatedAt()}}),a=n({name:`PolicyBinding`,description:`Binds roles to principals (users or organizations).`,schema:`lssm_sigil`,map:`policy_binding`,fields:{id:t.id(),roleId:t.foreignKey(),targetType:t.string({description:`"user" or "organization"`}),targetId:t.string({description:`ID of User or Organization`}),expiresAt:t.dateTime({isOptional:!0,description:`When binding expires`}),createdAt:t.createdAt(),userId:t.string({isOptional:!0}),organizationId:t.string({isOptional:!0}),role:t.belongsTo(`Role`,[`roleId`],[`id`],{onDelete:`Cascade`}),user:t.belongsTo(`User`,[`userId`],[`id`]),organization:t.belongsTo(`Organization`,[`organizationId`],[`id`])},indexes:[e.on([`targetType`,`targetId`])]}),o=n({name:`ApiKey`,description:`API keys for programmatic access.`,schema:`lssm_sigil`,map:`api_key`,fields:{id:t.id(),name:t.string({description:`API key name`}),start:t.string({description:`Starting characters for identification`}),prefix:t.string({description:`API key prefix`}),key:t.string({description:`Hashed API key`}),userId:t.foreignKey(),refillInterval:t.int({description:`Refill interval in ms`}),refillAmount:t.int({description:`Amount to refill`}),lastRefillAt:t.dateTime(),remaining:t.int({description:`Remaining requests`}),requestCount:t.int({description:`Total requests made`}),lastRequest:t.dateTime(),enabled:t.boolean({default:!0}),rateLimitEnabled:t.boolean({default:!0}),rateLimitTimeWindow:t.int({description:`Rate limit window in ms`}),rateLimitMax:t.int({description:`Max requests in window`}),expiresAt:t.dateTime(),permissions:t.string({isArray:!0}),metadata:t.json({isOptional:!0}),createdAt:t.createdAt(),updatedAt:t.updatedAt(),user:t.belongsTo(`User`,[`userId`],[`id`],{onDelete:`Cascade`})}}),s=n({name:`Passkey`,description:`WebAuthn passkeys for passwordless authentication.`,schema:`lssm_sigil`,map:`passkey`,fields:{id:t.id(),name:t.string({description:`Passkey name`}),publicKey:t.string({description:`Public key`}),userId:t.foreignKey(),credentialID:t.string({description:`Credential ID`}),counter:t.int({description:`Counter`}),deviceType:t.string({description:`Device type`}),backedUp:t.boolean({description:`Whether passkey is backed up`}),transports:t.string({description:`Transports`}),aaguid:t.string({description:`Authenticator GUID`}),createdAt:t.createdAt(),user:t.belongsTo(`User`,[`userId`],[`id`],{onDelete:`Cascade`})}});export{o as ApiKeyEntity,s as PasskeyEntity,i as PermissionEntity,a as PolicyBindingEntity,r as RoleEntity};

package/dist/entities/user.d.ts

@@ -1,87 +1,87 @@
-import * as _lssm_lib_schema553 from "@lssm/lib.schema";
+import * as _lssm_lib_schema854 from "@lssm/lib.schema";
 
 //#region src/entities/user.d.ts
 /**
  * User entity - core user profile and authentication.
  */
-declare const UserEntity: _lssm_lib_schema553.EntitySpec<{
-  id: _lssm_lib_schema553.EntityScalarField;
-  email: _lssm_lib_schema553.EntityScalarField;
-  emailVerified: _lssm_lib_schema553.EntityScalarField;
-  name: _lssm_lib_schema553.EntityScalarField;
-  firstName: _lssm_lib_schema553.EntityScalarField;
-  lastName: _lssm_lib_schema553.EntityScalarField;
-  locale: _lssm_lib_schema553.EntityScalarField;
-  timezone: _lssm_lib_schema553.EntityScalarField;
-  imageUrl: _lssm_lib_schema553.EntityScalarField;
-  image: _lssm_lib_schema553.EntityScalarField;
-  metadata: _lssm_lib_schema553.EntityScalarField;
-  onboardingCompleted: _lssm_lib_schema553.EntityScalarField;
-  onboardingStep: _lssm_lib_schema553.EntityScalarField;
-  whitelistedAt: _lssm_lib_schema553.EntityScalarField;
-  role: _lssm_lib_schema553.EntityScalarField;
-  banned: _lssm_lib_schema553.EntityScalarField;
-  banReason: _lssm_lib_schema553.EntityScalarField;
-  banExpires: _lssm_lib_schema553.EntityScalarField;
-  phoneNumber: _lssm_lib_schema553.EntityScalarField;
-  phoneNumberVerified: _lssm_lib_schema553.EntityScalarField;
-  createdAt: _lssm_lib_schema553.EntityScalarField;
-  updatedAt: _lssm_lib_schema553.EntityScalarField;
-  sessions: _lssm_lib_schema553.EntityRelationField;
-  accounts: _lssm_lib_schema553.EntityRelationField;
-  memberships: _lssm_lib_schema553.EntityRelationField;
-  invitations: _lssm_lib_schema553.EntityRelationField;
-  teamMemberships: _lssm_lib_schema553.EntityRelationField;
-  policyBindings: _lssm_lib_schema553.EntityRelationField;
-  apiKeys: _lssm_lib_schema553.EntityRelationField;
-  passkeys: _lssm_lib_schema553.EntityRelationField;
+declare const UserEntity: _lssm_lib_schema854.EntitySpec<{
+  id: _lssm_lib_schema854.EntityScalarField;
+  email: _lssm_lib_schema854.EntityScalarField;
+  emailVerified: _lssm_lib_schema854.EntityScalarField;
+  name: _lssm_lib_schema854.EntityScalarField;
+  firstName: _lssm_lib_schema854.EntityScalarField;
+  lastName: _lssm_lib_schema854.EntityScalarField;
+  locale: _lssm_lib_schema854.EntityScalarField;
+  timezone: _lssm_lib_schema854.EntityScalarField;
+  imageUrl: _lssm_lib_schema854.EntityScalarField;
+  image: _lssm_lib_schema854.EntityScalarField;
+  metadata: _lssm_lib_schema854.EntityScalarField;
+  onboardingCompleted: _lssm_lib_schema854.EntityScalarField;
+  onboardingStep: _lssm_lib_schema854.EntityScalarField;
+  whitelistedAt: _lssm_lib_schema854.EntityScalarField;
+  role: _lssm_lib_schema854.EntityScalarField;
+  banned: _lssm_lib_schema854.EntityScalarField;
+  banReason: _lssm_lib_schema854.EntityScalarField;
+  banExpires: _lssm_lib_schema854.EntityScalarField;
+  phoneNumber: _lssm_lib_schema854.EntityScalarField;
+  phoneNumberVerified: _lssm_lib_schema854.EntityScalarField;
+  createdAt: _lssm_lib_schema854.EntityScalarField;
+  updatedAt: _lssm_lib_schema854.EntityScalarField;
+  sessions: _lssm_lib_schema854.EntityRelationField;
+  accounts: _lssm_lib_schema854.EntityRelationField;
+  memberships: _lssm_lib_schema854.EntityRelationField;
+  invitations: _lssm_lib_schema854.EntityRelationField;
+  teamMemberships: _lssm_lib_schema854.EntityRelationField;
+  policyBindings: _lssm_lib_schema854.EntityRelationField;
+  apiKeys: _lssm_lib_schema854.EntityRelationField;
+  passkeys: _lssm_lib_schema854.EntityRelationField;
 }>;
 /**
  * Session entity - login sessions.
  */
-declare const SessionEntity: _lssm_lib_schema553.EntitySpec<{
-  id: _lssm_lib_schema553.EntityScalarField;
-  userId: _lssm_lib_schema553.EntityScalarField;
-  expiresAt: _lssm_lib_schema553.EntityScalarField;
-  token: _lssm_lib_schema553.EntityScalarField;
-  ipAddress: _lssm_lib_schema553.EntityScalarField;
-  userAgent: _lssm_lib_schema553.EntityScalarField;
-  impersonatedBy: _lssm_lib_schema553.EntityScalarField;
-  activeOrganizationId: _lssm_lib_schema553.EntityScalarField;
-  activeTeamId: _lssm_lib_schema553.EntityScalarField;
-  createdAt: _lssm_lib_schema553.EntityScalarField;
-  updatedAt: _lssm_lib_schema553.EntityScalarField;
-  user: _lssm_lib_schema553.EntityRelationField;
+declare const SessionEntity: _lssm_lib_schema854.EntitySpec<{
+  id: _lssm_lib_schema854.EntityScalarField;
+  userId: _lssm_lib_schema854.EntityScalarField;
+  expiresAt: _lssm_lib_schema854.EntityScalarField;
+  token: _lssm_lib_schema854.EntityScalarField;
+  ipAddress: _lssm_lib_schema854.EntityScalarField;
+  userAgent: _lssm_lib_schema854.EntityScalarField;
+  impersonatedBy: _lssm_lib_schema854.EntityScalarField;
+  activeOrganizationId: _lssm_lib_schema854.EntityScalarField;
+  activeTeamId: _lssm_lib_schema854.EntityScalarField;
+  createdAt: _lssm_lib_schema854.EntityScalarField;
+  updatedAt: _lssm_lib_schema854.EntityScalarField;
+  user: _lssm_lib_schema854.EntityRelationField;
 }>;
 /**
  * Account entity - external authentication accounts.
  */
-declare const AccountEntity: _lssm_lib_schema553.EntitySpec<{
-  id: _lssm_lib_schema553.EntityScalarField;
-  accountId: _lssm_lib_schema553.EntityScalarField;
-  providerId: _lssm_lib_schema553.EntityScalarField;
-  userId: _lssm_lib_schema553.EntityScalarField;
-  accessToken: _lssm_lib_schema553.EntityScalarField;
-  refreshToken: _lssm_lib_schema553.EntityScalarField;
-  idToken: _lssm_lib_schema553.EntityScalarField;
-  accessTokenExpiresAt: _lssm_lib_schema553.EntityScalarField;
-  refreshTokenExpiresAt: _lssm_lib_schema553.EntityScalarField;
-  scope: _lssm_lib_schema553.EntityScalarField;
-  password: _lssm_lib_schema553.EntityScalarField;
-  createdAt: _lssm_lib_schema553.EntityScalarField;
-  updatedAt: _lssm_lib_schema553.EntityScalarField;
-  user: _lssm_lib_schema553.EntityRelationField;
+declare const AccountEntity: _lssm_lib_schema854.EntitySpec<{
+  id: _lssm_lib_schema854.EntityScalarField;
+  accountId: _lssm_lib_schema854.EntityScalarField;
+  providerId: _lssm_lib_schema854.EntityScalarField;
+  userId: _lssm_lib_schema854.EntityScalarField;
+  accessToken: _lssm_lib_schema854.EntityScalarField;
+  refreshToken: _lssm_lib_schema854.EntityScalarField;
+  idToken: _lssm_lib_schema854.EntityScalarField;
+  accessTokenExpiresAt: _lssm_lib_schema854.EntityScalarField;
+  refreshTokenExpiresAt: _lssm_lib_schema854.EntityScalarField;
+  scope: _lssm_lib_schema854.EntityScalarField;
+  password: _lssm_lib_schema854.EntityScalarField;
+  createdAt: _lssm_lib_schema854.EntityScalarField;
+  updatedAt: _lssm_lib_schema854.EntityScalarField;
+  user: _lssm_lib_schema854.EntityRelationField;
 }>;
 /**
  * Verification entity - email/phone verification tokens.
  */
-declare const VerificationEntity: _lssm_lib_schema553.EntitySpec<{
-  id: _lssm_lib_schema553.EntityScalarField;
-  identifier: _lssm_lib_schema553.EntityScalarField;
-  value: _lssm_lib_schema553.EntityScalarField;
-  expiresAt: _lssm_lib_schema553.EntityScalarField;
-  createdAt: _lssm_lib_schema553.EntityScalarField;
-  updatedAt: _lssm_lib_schema553.EntityScalarField;
+declare const VerificationEntity: _lssm_lib_schema854.EntitySpec<{
+  id: _lssm_lib_schema854.EntityScalarField;
+  identifier: _lssm_lib_schema854.EntityScalarField;
+  value: _lssm_lib_schema854.EntityScalarField;
+  expiresAt: _lssm_lib_schema854.EntityScalarField;
+  createdAt: _lssm_lib_schema854.EntityScalarField;
+  updatedAt: _lssm_lib_schema854.EntityScalarField;
 }>;
 //#endregion
 export { AccountEntity, SessionEntity, UserEntity, VerificationEntity };

package/dist/entities/user.js

@@ -1 +1 @@
-import{defineEntity as e,field as t,index as n}from"@lssm/lib.schema";const r=e({name:`User`,description:`A user of the platform. Users hold core profile information and authenticate via Account records.`,schema:`lssm_sigil`,map:`user`,fields:{id:t.id({description:`Unique user identifier`}),email:t.email({isUnique:!0,description:`User email address`}),emailVerified:t.boolean({default:!1,description:`Whether email has been verified`}),name:t.string({isOptional:!0,description:`Display name`}),firstName:t.string({isOptional:!0,description:`First name`}),lastName:t.string({isOptional:!0,description:`Last name`}),locale:t.string({isOptional:!0,description:`User locale (e.g., "en-US")`}),timezone:t.string({isOptional:!0,description:`Olson timezone (e.g., "Europe/Paris")`}),imageUrl:t.url({isOptional:!0,description:`URL of avatar or profile picture`}),image:t.string({isOptional:!0,description:`Legacy image field`}),metadata:t.json({isOptional:!0,description:`Arbitrary user metadata`}),onboardingCompleted:t.boolean({default:!1,description:`Whether onboarding is complete`}),onboardingStep:t.string({isOptional:!0,description:`Current onboarding step`}),whitelistedAt:t.dateTime({isOptional:!0,description:`When user was whitelisted`}),role:t.string({isOptional:!0,default:`"user"`,description:`User role (user, admin)`}),banned:t.boolean({default:!1,description:`Whether user is banned`}),banReason:t.string({isOptional:!0,description:`Reason for ban`}),banExpires:t.dateTime({isOptional:!0,description:`When ban expires`}),phoneNumber:t.string({isOptional:!0,isUnique:!0,description:`Phone number`}),phoneNumberVerified:t.boolean({default:!1,description:`Whether phone is verified`}),createdAt:t.createdAt(),updatedAt:t.updatedAt(),sessions:t.hasMany(`Session`),accounts:t.hasMany(`Account`),memberships:t.hasMany(`Member`),invitations:t.hasMany(`Invitation`),teamMemberships:t.hasMany(`TeamMember`),policyBindings:t.hasMany(`PolicyBinding`),apiKeys:t.hasMany(`ApiKey`),passkeys:t.hasMany(`Passkey`)}}),i=e({name:`Session`,description:`Represents a login session (e.g., web session or API token).`,schema:`lssm_sigil`,map:`session`,fields:{id:t.id(),userId:t.foreignKey(),expiresAt:t.dateTime({description:`Session expiration time`}),token:t.string({isUnique:!0,description:`Session token`}),ipAddress:t.string({isOptional:!0,description:`Client IP address`}),userAgent:t.string({isOptional:!0,description:`Client user agent`}),impersonatedBy:t.string({isOptional:!0,description:`Admin impersonating this session`}),activeOrganizationId:t.string({isOptional:!0,description:`Active org context`}),activeTeamId:t.string({isOptional:!0,description:`Active team context`}),createdAt:t.createdAt(),updatedAt:t.updatedAt(),user:t.belongsTo(`User`,[`userId`],[`id`],{onDelete:`Cascade`})}}),a=e({name:`Account`,description:`External authentication accounts (OAuth, password, etc.).`,schema:`lssm_sigil`,map:`account`,fields:{id:t.id(),accountId:t.string({description:`Account ID from provider`}),providerId:t.string({description:`Provider identifier`}),userId:t.foreignKey(),accessToken:t.string({isOptional:!0}),refreshToken:t.string({isOptional:!0}),idToken:t.string({isOptional:!0}),accessTokenExpiresAt:t.dateTime({isOptional:!0}),refreshTokenExpiresAt:t.dateTime({isOptional:!0}),scope:t.string({isOptional:!0}),password:t.string({isOptional:!0,description:`Hashed password for password providers`}),createdAt:t.createdAt(),updatedAt:t.updatedAt(),user:t.belongsTo(`User`,[`userId`],[`id`],{onDelete:`Cascade`})},indexes:[n.unique([`accountId`,`providerId`])]}),o=e({name:`Verification`,description:`Verification tokens for email/phone confirmation.`,schema:`lssm_sigil`,map:`verification`,fields:{id:t.uuid(),identifier:t.string({description:`Email or phone being verified`}),value:t.string({description:`Verification code/token`}),expiresAt:t.dateTime({description:`Token expiration`}),createdAt:t.createdAt(),updatedAt:t.updatedAt()}});export{a as AccountEntity,i as SessionEntity,r as UserEntity,o as VerificationEntity};
+import{i as e,r as t,t as n}from"../schema/dist/entity/defineEntity.js";import"../schema/dist/index.js";const r=n({name:`User`,description:`A user of the platform. Users hold core profile information and authenticate via Account records.`,schema:`lssm_sigil`,map:`user`,fields:{id:t.id({description:`Unique user identifier`}),email:t.email({isUnique:!0,description:`User email address`}),emailVerified:t.boolean({default:!1,description:`Whether email has been verified`}),name:t.string({isOptional:!0,description:`Display name`}),firstName:t.string({isOptional:!0,description:`First name`}),lastName:t.string({isOptional:!0,description:`Last name`}),locale:t.string({isOptional:!0,description:`User locale (e.g., "en-US")`}),timezone:t.string({isOptional:!0,description:`Olson timezone (e.g., "Europe/Paris")`}),imageUrl:t.url({isOptional:!0,description:`URL of avatar or profile picture`}),image:t.string({isOptional:!0,description:`Legacy image field`}),metadata:t.json({isOptional:!0,description:`Arbitrary user metadata`}),onboardingCompleted:t.boolean({default:!1,description:`Whether onboarding is complete`}),onboardingStep:t.string({isOptional:!0,description:`Current onboarding step`}),whitelistedAt:t.dateTime({isOptional:!0,description:`When user was whitelisted`}),role:t.string({isOptional:!0,default:`"user"`,description:`User role (user, admin)`}),banned:t.boolean({default:!1,description:`Whether user is banned`}),banReason:t.string({isOptional:!0,description:`Reason for ban`}),banExpires:t.dateTime({isOptional:!0,description:`When ban expires`}),phoneNumber:t.string({isOptional:!0,isUnique:!0,description:`Phone number`}),phoneNumberVerified:t.boolean({default:!1,description:`Whether phone is verified`}),createdAt:t.createdAt(),updatedAt:t.updatedAt(),sessions:t.hasMany(`Session`),accounts:t.hasMany(`Account`),memberships:t.hasMany(`Member`),invitations:t.hasMany(`Invitation`),teamMemberships:t.hasMany(`TeamMember`),policyBindings:t.hasMany(`PolicyBinding`),apiKeys:t.hasMany(`ApiKey`),passkeys:t.hasMany(`Passkey`)}}),i=n({name:`Session`,description:`Represents a login session (e.g., web session or API token).`,schema:`lssm_sigil`,map:`session`,fields:{id:t.id(),userId:t.foreignKey(),expiresAt:t.dateTime({description:`Session expiration time`}),token:t.string({isUnique:!0,description:`Session token`}),ipAddress:t.string({isOptional:!0,description:`Client IP address`}),userAgent:t.string({isOptional:!0,description:`Client user agent`}),impersonatedBy:t.string({isOptional:!0,description:`Admin impersonating this session`}),activeOrganizationId:t.string({isOptional:!0,description:`Active org context`}),activeTeamId:t.string({isOptional:!0,description:`Active team context`}),createdAt:t.createdAt(),updatedAt:t.updatedAt(),user:t.belongsTo(`User`,[`userId`],[`id`],{onDelete:`Cascade`})}}),a=n({name:`Account`,description:`External authentication accounts (OAuth, password, etc.).`,schema:`lssm_sigil`,map:`account`,fields:{id:t.id(),accountId:t.string({description:`Account ID from provider`}),providerId:t.string({description:`Provider identifier`}),userId:t.foreignKey(),accessToken:t.string({isOptional:!0}),refreshToken:t.string({isOptional:!0}),idToken:t.string({isOptional:!0}),accessTokenExpiresAt:t.dateTime({isOptional:!0}),refreshTokenExpiresAt:t.dateTime({isOptional:!0}),scope:t.string({isOptional:!0}),password:t.string({isOptional:!0,description:`Hashed password for password providers`}),createdAt:t.createdAt(),updatedAt:t.updatedAt(),user:t.belongsTo(`User`,[`userId`],[`id`],{onDelete:`Cascade`})},indexes:[e.unique([`accountId`,`providerId`])]}),o=n({name:`Verification`,description:`Verification tokens for email/phone confirmation.`,schema:`lssm_sigil`,map:`verification`,fields:{id:t.uuid(),identifier:t.string({description:`Email or phone being verified`}),value:t.string({description:`Verification code/token`}),expiresAt:t.dateTime({description:`Token expiration`}),createdAt:t.createdAt(),updatedAt:t.updatedAt()}});export{a as AccountEntity,i as SessionEntity,r as UserEntity,o as VerificationEntity};

package/dist/events.js

@@ -1 +1 @@
-import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineEvent as n}from"@lssm/lib.contracts";const r=new t({name:`UserCreatedPayload`,description:`Payload for user created event`,fields:{userId:{type:e.String_unsecure(),isOptional:!1},email:{type:e.EmailAddress(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}}),i=new t({name:`UserUpdatedPayload`,description:`Payload for user updated event`,fields:{userId:{type:e.String_unsecure(),isOptional:!1},updatedFields:{type:e.String_unsecure(),isOptional:!1,isArray:!0},updatedAt:{type:e.DateTime(),isOptional:!1}}}),a=new t({name:`UserDeletedPayload`,description:`Payload for user deleted event`,fields:{userId:{type:e.String_unsecure(),isOptional:!1},email:{type:e.EmailAddress(),isOptional:!1},deletedAt:{type:e.DateTime(),isOptional:!1}}}),o=new t({name:`UserEmailVerifiedPayload`,description:`Payload for user email verified event`,fields:{userId:{type:e.String_unsecure(),isOptional:!1},email:{type:e.EmailAddress(),isOptional:!1},verifiedAt:{type:e.DateTime(),isOptional:!1}}}),s=new t({name:`OrgCreatedPayload`,description:`Payload for org created event`,fields:{orgId:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!1},slug:{type:e.String_unsecure(),isOptional:!0},createdBy:{type:e.String_unsecure(),isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1}}}),c=new t({name:`OrgUpdatedPayload`,description:`Payload for org updated event`,fields:{orgId:{type:e.String_unsecure(),isOptional:!1},updatedFields:{type:e.String_unsecure(),isOptional:!1,isArray:!0},updatedBy:{type:e.String_unsecure(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),l=new t({name:`OrgDeletedPayload`,description:`Payload for org deleted event`,fields:{orgId:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!1},deletedBy:{type:e.String_unsecure(),isOptional:!1},deletedAt:{type:e.DateTime(),isOptional:!1}}}),u=new t({name:`OrgMemberAddedPayload`,description:`Payload for member added event`,fields:{orgId:{type:e.String_unsecure(),isOptional:!1},userId:{type:e.String_unsecure(),isOptional:!1},role:{type:e.String_unsecure(),isOptional:!1},invitedBy:{type:e.String_unsecure(),isOptional:!0},joinedAt:{type:e.DateTime(),isOptional:!1}}}),d=new t({name:`OrgMemberRemovedPayload`,description:`Payload for member removed event`,fields:{orgId:{type:e.String_unsecure(),isOptional:!1},userId:{type:e.String_unsecure(),isOptional:!1},removedBy:{type:e.String_unsecure(),isOptional:!0},reason:{type:e.String_unsecure(),isOptional:!0},removedAt:{type:e.DateTime(),isOptional:!1}}}),f=new t({name:`OrgMemberRoleChangedPayload`,description:`Payload for member role changed event`,fields:{orgId:{type:e.String_unsecure(),isOptional:!1},userId:{type:e.String_unsecure(),isOptional:!1},previousRole:{type:e.String_unsecure(),isOptional:!1},newRole:{type:e.String_unsecure(),isOptional:!1},changedBy:{type:e.String_unsecure(),isOptional:!1},changedAt:{type:e.DateTime(),isOptional:!1}}}),p=new t({name:`OrgInviteSentPayload`,description:`Payload for invite sent event`,fields:{invitationId:{type:e.String_unsecure(),isOptional:!1},orgId:{type:e.String_unsecure(),isOptional:!1},email:{type:e.EmailAddress(),isOptional:!1},role:{type:e.String_unsecure(),isOptional:!1},invitedBy:{type:e.String_unsecure(),isOptional:!1},expiresAt:{type:e.DateTime(),isOptional:!0},sentAt:{type:e.DateTime(),isOptional:!1}}}),m=new t({name:`OrgInviteAcceptedPayload`,description:`Payload for invite accepted event`,fields:{invitationId:{type:e.String_unsecure(),isOptional:!1},orgId:{type:e.String_unsecure(),isOptional:!1},userId:{type:e.String_unsecure(),isOptional:!1},acceptedAt:{type:e.DateTime(),isOptional:!1}}}),h=new t({name:`OrgInviteDeclinedPayload`,description:`Payload for invite declined event`,fields:{invitationId:{type:e.String_unsecure(),isOptional:!1},orgId:{type:e.String_unsecure(),isOptional:!1},declinedAt:{type:e.DateTime(),isOptional:!1}}}),g=new t({name:`RoleAssignedPayload`,description:`Payload for role assigned event`,fields:{bindingId:{type:e.String_unsecure(),isOptional:!1},roleId:{type:e.String_unsecure(),isOptional:!1},roleName:{type:e.String_unsecure(),isOptional:!1},targetType:{type:e.String_unsecure(),isOptional:!1},targetId:{type:e.String_unsecure(),isOptional:!1},assignedBy:{type:e.String_unsecure(),isOptional:!1},expiresAt:{type:e.DateTime(),isOptional:!0},assignedAt:{type:e.DateTime(),isOptional:!1}}}),_=new t({name:`RoleRevokedPayload`,description:`Payload for role revoked event`,fields:{bindingId:{type:e.String_unsecure(),isOptional:!1},roleId:{type:e.String_unsecure(),isOptional:!1},roleName:{type:e.String_unsecure(),isOptional:!1},targetType:{type:e.String_unsecure(),isOptional:!1},targetId:{type:e.String_unsecure(),isOptional:!1},revokedBy:{type:e.String_unsecure(),isOptional:!1},revokedAt:{type:e.DateTime(),isOptional:!1}}}),v=n({name:`user.created`,version:1,description:`A new user has been created.`,payload:r}),y=n({name:`user.updated`,version:1,description:`A user profile has been updated.`,payload:i}),b=n({name:`user.deleted`,version:1,description:`A user account has been deleted.`,pii:[`email`],payload:a}),x=n({name:`user.email_verified`,version:1,description:`A user has verified their email address.`,payload:o}),S=n({name:`org.created`,version:1,description:`A new organization has been created.`,payload:s}),C=n({name:`org.updated`,version:1,description:`An organization has been updated.`,payload:c}),w=n({name:`org.deleted`,version:1,description:`An organization has been deleted.`,payload:l}),T=n({name:`org.member.added`,version:1,description:`A user has joined an organization.`,payload:u}),E=n({name:`org.member.removed`,version:1,description:`A user has left or been removed from an organization.`,payload:d}),D=n({name:`org.member.role_changed`,version:1,description:`A member's role in an organization has changed.`,payload:f}),O=n({name:`org.invite.sent`,version:1,description:`An invitation to join an organization has been sent.`,pii:[`email`],payload:p}),k=n({name:`org.invite.accepted`,version:1,description:`An invitation has been accepted.`,payload:m}),A=n({name:`org.invite.declined`,version:1,description:`An invitation has been declined.`,payload:h}),j=n({name:`role.assigned`,version:1,description:`A role has been assigned.`,payload:g}),M=n({name:`role.revoked`,version:1,description:`A role has been revoked.`,payload:_}),N={UserCreatedEvent:v,UserUpdatedEvent:y,UserDeletedEvent:b,UserEmailVerifiedEvent:x,OrgCreatedEvent:S,OrgUpdatedEvent:C,OrgDeletedEvent:w,OrgMemberAddedEvent:T,OrgMemberRemovedEvent:E,OrgMemberRoleChangedEvent:D,OrgInviteSentEvent:O,OrgInviteAcceptedEvent:k,OrgInviteDeclinedEvent:A,RoleAssignedEvent:j,RoleRevokedEvent:M};export{N as IdentityRbacEvents,S as OrgCreatedEvent,w as OrgDeletedEvent,k as OrgInviteAcceptedEvent,A as OrgInviteDeclinedEvent,O as OrgInviteSentEvent,T as OrgMemberAddedEvent,E as OrgMemberRemovedEvent,D as OrgMemberRoleChangedEvent,C as OrgUpdatedEvent,j as RoleAssignedEvent,M as RoleRevokedEvent,v as UserCreatedEvent,b as UserDeletedEvent,x as UserEmailVerifiedEvent,y as UserUpdatedEvent};
+import{l as e}from"./schema/dist/ScalarTypeEnum.js";import{t}from"./schema/dist/SchemaModel.js";import"./schema/dist/index.js";import{e as n}from"./contracts/dist/events.js";import"./contracts/dist/index.js";const r=new t({name:`UserCreatedPayload`,description:`Payload for user created event`,fields:{userId:{type:e.String_unsecure(),isOptional:!1},email:{type:e.EmailAddress(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}}),i=new t({name:`UserUpdatedPayload`,description:`Payload for user updated event`,fields:{userId:{type:e.String_unsecure(),isOptional:!1},updatedFields:{type:e.String_unsecure(),isOptional:!1,isArray:!0},updatedAt:{type:e.DateTime(),isOptional:!1}}}),a=new t({name:`UserDeletedPayload`,description:`Payload for user deleted event`,fields:{userId:{type:e.String_unsecure(),isOptional:!1},email:{type:e.EmailAddress(),isOptional:!1},deletedAt:{type:e.DateTime(),isOptional:!1}}}),o=new t({name:`UserEmailVerifiedPayload`,description:`Payload for user email verified event`,fields:{userId:{type:e.String_unsecure(),isOptional:!1},email:{type:e.EmailAddress(),isOptional:!1},verifiedAt:{type:e.DateTime(),isOptional:!1}}}),s=new t({name:`OrgCreatedPayload`,description:`Payload for org created event`,fields:{orgId:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!1},slug:{type:e.String_unsecure(),isOptional:!0},createdBy:{type:e.String_unsecure(),isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1}}}),c=new t({name:`OrgUpdatedPayload`,description:`Payload for org updated event`,fields:{orgId:{type:e.String_unsecure(),isOptional:!1},updatedFields:{type:e.String_unsecure(),isOptional:!1,isArray:!0},updatedBy:{type:e.String_unsecure(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),l=new t({name:`OrgDeletedPayload`,description:`Payload for org deleted event`,fields:{orgId:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!1},deletedBy:{type:e.String_unsecure(),isOptional:!1},deletedAt:{type:e.DateTime(),isOptional:!1}}}),u=new t({name:`OrgMemberAddedPayload`,description:`Payload for member added event`,fields:{orgId:{type:e.String_unsecure(),isOptional:!1},userId:{type:e.String_unsecure(),isOptional:!1},role:{type:e.String_unsecure(),isOptional:!1},invitedBy:{type:e.String_unsecure(),isOptional:!0},joinedAt:{type:e.DateTime(),isOptional:!1}}}),d=new t({name:`OrgMemberRemovedPayload`,description:`Payload for member removed event`,fields:{orgId:{type:e.String_unsecure(),isOptional:!1},userId:{type:e.String_unsecure(),isOptional:!1},removedBy:{type:e.String_unsecure(),isOptional:!0},reason:{type:e.String_unsecure(),isOptional:!0},removedAt:{type:e.DateTime(),isOptional:!1}}}),f=new t({name:`OrgMemberRoleChangedPayload`,description:`Payload for member role changed event`,fields:{orgId:{type:e.String_unsecure(),isOptional:!1},userId:{type:e.String_unsecure(),isOptional:!1},previousRole:{type:e.String_unsecure(),isOptional:!1},newRole:{type:e.String_unsecure(),isOptional:!1},changedBy:{type:e.String_unsecure(),isOptional:!1},changedAt:{type:e.DateTime(),isOptional:!1}}}),p=new t({name:`OrgInviteSentPayload`,description:`Payload for invite sent event`,fields:{invitationId:{type:e.String_unsecure(),isOptional:!1},orgId:{type:e.String_unsecure(),isOptional:!1},email:{type:e.EmailAddress(),isOptional:!1},role:{type:e.String_unsecure(),isOptional:!1},invitedBy:{type:e.String_unsecure(),isOptional:!1},expiresAt:{type:e.DateTime(),isOptional:!0},sentAt:{type:e.DateTime(),isOptional:!1}}}),m=new t({name:`OrgInviteAcceptedPayload`,description:`Payload for invite accepted event`,fields:{invitationId:{type:e.String_unsecure(),isOptional:!1},orgId:{type:e.String_unsecure(),isOptional:!1},userId:{type:e.String_unsecure(),isOptional:!1},acceptedAt:{type:e.DateTime(),isOptional:!1}}}),h=new t({name:`OrgInviteDeclinedPayload`,description:`Payload for invite declined event`,fields:{invitationId:{type:e.String_unsecure(),isOptional:!1},orgId:{type:e.String_unsecure(),isOptional:!1},declinedAt:{type:e.DateTime(),isOptional:!1}}}),g=new t({name:`RoleAssignedPayload`,description:`Payload for role assigned event`,fields:{bindingId:{type:e.String_unsecure(),isOptional:!1},roleId:{type:e.String_unsecure(),isOptional:!1},roleName:{type:e.String_unsecure(),isOptional:!1},targetType:{type:e.String_unsecure(),isOptional:!1},targetId:{type:e.String_unsecure(),isOptional:!1},assignedBy:{type:e.String_unsecure(),isOptional:!1},expiresAt:{type:e.DateTime(),isOptional:!0},assignedAt:{type:e.DateTime(),isOptional:!1}}}),_=new t({name:`RoleRevokedPayload`,description:`Payload for role revoked event`,fields:{bindingId:{type:e.String_unsecure(),isOptional:!1},roleId:{type:e.String_unsecure(),isOptional:!1},roleName:{type:e.String_unsecure(),isOptional:!1},targetType:{type:e.String_unsecure(),isOptional:!1},targetId:{type:e.String_unsecure(),isOptional:!1},revokedBy:{type:e.String_unsecure(),isOptional:!1},revokedAt:{type:e.DateTime(),isOptional:!1}}}),v=n({name:`user.created`,version:1,description:`A new user has been created.`,payload:r}),y=n({name:`user.updated`,version:1,description:`A user profile has been updated.`,payload:i}),b=n({name:`user.deleted`,version:1,description:`A user account has been deleted.`,pii:[`email`],payload:a}),x=n({name:`user.email_verified`,version:1,description:`A user has verified their email address.`,payload:o}),S=n({name:`org.created`,version:1,description:`A new organization has been created.`,payload:s}),C=n({name:`org.updated`,version:1,description:`An organization has been updated.`,payload:c}),w=n({name:`org.deleted`,version:1,description:`An organization has been deleted.`,payload:l}),T=n({name:`org.member.added`,version:1,description:`A user has joined an organization.`,payload:u}),E=n({name:`org.member.removed`,version:1,description:`A user has left or been removed from an organization.`,payload:d}),D=n({name:`org.member.role_changed`,version:1,description:`A member's role in an organization has changed.`,payload:f}),O=n({name:`org.invite.sent`,version:1,description:`An invitation to join an organization has been sent.`,pii:[`email`],payload:p}),k=n({name:`org.invite.accepted`,version:1,description:`An invitation has been accepted.`,payload:m}),A=n({name:`org.invite.declined`,version:1,description:`An invitation has been declined.`,payload:h}),j=n({name:`role.assigned`,version:1,description:`A role has been assigned.`,payload:g}),M=n({name:`role.revoked`,version:1,description:`A role has been revoked.`,payload:_}),N={UserCreatedEvent:v,UserUpdatedEvent:y,UserDeletedEvent:b,UserEmailVerifiedEvent:x,OrgCreatedEvent:S,OrgUpdatedEvent:C,OrgDeletedEvent:w,OrgMemberAddedEvent:T,OrgMemberRemovedEvent:E,OrgMemberRoleChangedEvent:D,OrgInviteSentEvent:O,OrgInviteAcceptedEvent:k,OrgInviteDeclinedEvent:A,RoleAssignedEvent:j,RoleRevokedEvent:M};export{N as IdentityRbacEvents,S as OrgCreatedEvent,w as OrgDeletedEvent,k as OrgInviteAcceptedEvent,A as OrgInviteDeclinedEvent,O as OrgInviteSentEvent,T as OrgMemberAddedEvent,E as OrgMemberRemovedEvent,D as OrgMemberRoleChangedEvent,C as OrgUpdatedEvent,j as RoleAssignedEvent,M as RoleRevokedEvent,v as UserCreatedEvent,b as UserDeletedEvent,x as UserEmailVerifiedEvent,y as UserUpdatedEvent};

package/dist/index.d.ts

@@ -1,7 +1,6 @@
 import { CreateUserContract, CreateUserInputModel, DeleteUserContract, DeleteUserInputModel, GetCurrentUserContract, ListUsersContract, ListUsersInputModel, ListUsersOutputModel, SuccessResultModel, UpdateUserContract, UpdateUserInputModel, UserDeletedPayloadModel, UserProfileModel } from "./contracts/user.js";
 import { AcceptInviteContract, AcceptInviteInputModel, CreateOrgContract, CreateOrgInputModel, GetOrgContract, GetOrgInputModel, InvitationModel, InviteMemberContract, InviteMemberInputModel, ListMembersContract, ListMembersInputModel, ListMembersOutputModel, ListUserOrgsContract, ListUserOrgsOutputModel, MemberModel, MemberRemovedPayloadModel, MemberUserModel, OrganizationModel, OrganizationWithRoleModel, RemoveMemberContract, RemoveMemberInputModel, UpdateOrgContract, UpdateOrgInputModel } from "./contracts/organization.js";
 import { AssignRoleContract, AssignRoleInputModel, BindingIdPayloadModel, CheckPermissionContract, CheckPermissionInputModel, CreateRoleContract, CreateRoleInputModel, DeleteRoleContract, DeleteRoleInputModel, ListRolesContract, ListRolesOutputModel, ListUserPermissionsContract, ListUserPermissionsInputModel, ListUserPermissionsOutputModel, PermissionCheckResultModel, PolicyBindingModel, RevokeRoleContract, RevokeRoleInputModel, RoleModel, UpdateRoleContract, UpdateRoleInputModel } from "./contracts/rbac.js";
-import "./contracts/index.js";
 import { AccountEntity, SessionEntity, UserEntity, VerificationEntity } from "./entities/user.js";
 import { InvitationEntity, MemberEntity, OrganizationEntity, OrganizationTypeEnum, TeamEntity, TeamMemberEntity } from "./entities/organization.js";
 import { ApiKeyEntity, PasskeyEntity, PermissionEntity, PolicyBindingEntity, RoleEntity } from "./entities/rbac.js";

package/dist/schema/dist/EnumType.js

@@ -0,0 +1 @@
+import"zod";import"graphql";

package/dist/schema/dist/FieldType.js

@@ -0,0 +1 @@
+import"zod";import{GraphQLScalarType as e}from"graphql";var t=class extends e{zodSchema;jsonSchemaDef;constructor(e){super(e),this.zodSchema=e.zod,this.jsonSchemaDef=e.jsonSchema}getZod(){return this.zodSchema}getPothos(){return this}getJson(){return typeof this.jsonSchemaDef==`function`?this.jsonSchemaDef():this.jsonSchemaDef}getJsonSchemaDef(){return this.jsonSchemaDef}getJsonSchema(){let e=t=>{let n=typeof t==`function`?t():t;if(Array.isArray(n))return n.map(t=>e(t));if(n&&typeof n==`object`){let t={};for(let[r,i]of Object.entries(n))t[r]=e(i);return t}return n};return e(this.getJson())}};export{t};

package/dist/schema/dist/ScalarTypeEnum.js

@@ -0,0 +1 @@
+import{t as e}from"./FieldType.js";import*as t from"zod";import{Kind as n}from"graphql";const r=/^[A-Za-z]{2}(?:-[A-Za-z0-9]{2,8})*$/,i=/^(?:UTC|[A-Za-z_]+\/[A-Za-z_]+)$/,a=/^[+]?\d[\d\s().-]{3,}$/,o=/^[A-Z]{3}$/,s=/^[A-Z]{2}$/,c=-180,l={String_unsecure:()=>new e({name:`String_unsecure`,description:`Unvalidated string scalar`,zod:t.string(),parseValue:e=>t.string().parse(e),serialize:e=>String(e),parseLiteral:e=>{if(e.kind!==n.STRING)throw TypeError(`Invalid literal`);return e.value},jsonSchema:{type:`string`}}),Int_unsecure:()=>new e({name:`Int_unsecure`,description:`Unvalidated integer scalar`,zod:t.number().int(),parseValue:e=>{let n=typeof e==`number`?e:Number(e);return t.number().int().parse(n)},serialize:e=>Math.trunc(typeof e==`number`?e:Number(e)),parseLiteral:e=>{if(e.kind!==n.INT)throw TypeError(`Invalid literal`);return Number(e.value)},jsonSchema:{type:`integer`}}),Float_unsecure:()=>new e({name:`Float_unsecure`,description:`Unvalidated float scalar`,zod:t.number(),parseValue:e=>{let n=typeof e==`number`?e:Number(e);return t.number().parse(n)},serialize:e=>Number(e),parseLiteral:e=>{if(e.kind!==n.FLOAT&&e.kind!==n.INT)throw TypeError(`Invalid literal`);return Number(e.value)},jsonSchema:{type:`number`}}),Boolean:()=>new e({name:`Boolean`,description:`Unvalidated boolean scalar`,zod:t.boolean(),parseValue:e=>t.coerce.boolean().parse(e),serialize:e=>!!e,parseLiteral:e=>{if(e.kind!==n.BOOLEAN)throw TypeError(`Invalid literal`);return e.value},jsonSchema:{type:`boolean`}}),ID:()=>new e({name:`ID`,description:`Unvalidated id scalar`,zod:t.string(),parseValue:e=>t.string().parse(e),serialize:e=>String(e),parseLiteral:e=>{if(e.kind!==n.STRING)throw TypeError(`Invalid literal`);return e.value},jsonSchema:{type:`string`}}),JSON:()=>new e({name:`JSON`,zod:t.any(),parseValue:e=>e,serialize:e=>e,jsonSchema:{}}),JSONObject:()=>new e({name:`JSONObject`,zod:t.record(t.string(),t.any()),parseValue:e=>t.record(t.string(),t.any()).parse(e),serialize:e=>e??{},jsonSchema:{type:`object`}}),Date:()=>new e({name:`Date`,zod:t.date(),parseValue:e=>e instanceof Date?e:new Date(String(e)),serialize:e=>e instanceof Date?e.toISOString().split(`T`)[0]:String(e),jsonSchema:{type:`string`,format:`date`}}),DateTime:()=>new e({name:`DateTime`,zod:t.date(),parseValue:e=>e instanceof Date?e:new Date(String(e)),serialize:e=>e instanceof Date?e.toISOString():String(e),jsonSchema:{type:`string`,format:`date-time`}}),Time:()=>new e({name:`Time`,zod:t.string().regex(/^\d{2}:\d{2}(:\d{2})?$/),parseValue:e=>t.string().regex(/^\d{2}:\d{2}(:\d{2})?$/).parse(e),serialize:e=>String(e),jsonSchema:{type:`string`,pattern:`^\\d{2}:\\d{2}(:\\d{2})?$`}}),EmailAddress:()=>new e({name:`EmailAddress`,zod:t.string().email(),parseValue:e=>t.string().email().parse(e),serialize:e=>String(e),jsonSchema:{type:`string`,format:`email`}}),URL:()=>new e({name:`URL`,zod:t.string().url(),parseValue:e=>t.string().url().parse(e),serialize:e=>String(e),jsonSchema:{type:`string`,format:`uri`}}),PhoneNumber:()=>new e({name:`PhoneNumber`,zod:t.string().regex(a),parseValue:e=>t.string().regex(a).parse(e),serialize:e=>String(e),jsonSchema:{type:`string`,pattern:a.source}}),NonEmptyString:()=>new e({name:`NonEmptyString`,zod:t.string().min(1),parseValue:e=>t.string().min(1).parse(e),serialize:e=>String(e),jsonSchema:{type:`string`,minLength:1}}),Locale:()=>new e({name:`Locale`,zod:t.string().regex(r),parseValue:e=>t.string().regex(r).parse(e),serialize:e=>String(e),jsonSchema:{type:`string`,pattern:r.source}}),TimeZone:()=>new e({name:`TimeZone`,zod:t.string().regex(i),parseValue:e=>t.string().regex(i).parse(e),serialize:e=>String(e),jsonSchema:{type:`string`,pattern:i.source}}),Latitude:()=>new e({name:`Latitude`,zod:t.number().min(-90).max(90),parseValue:e=>t.coerce.number().min(-90).max(90).parse(e),serialize:e=>Number(e),jsonSchema:{type:`number`,minimum:-90,maximum:90}}),Longitude:()=>new e({name:`Longitude`,zod:t.number().min(c).max(180),parseValue:e=>t.coerce.number().min(c).max(180).parse(e),serialize:e=>Number(e),jsonSchema:{type:`number`,minimum:c,maximum:180}}),Currency:()=>new e({name:`Currency`,zod:t.string().regex(o),parseValue:e=>t.string().regex(o).parse(e),serialize:e=>String(e),jsonSchema:{type:`string`,pattern:o.source}}),CountryCode:()=>new e({name:`CountryCode`,zod:t.string().regex(s),parseValue:e=>t.string().regex(s).parse(e),serialize:e=>String(e),jsonSchema:{type:`string`,pattern:s.source}})};export{l};

package/dist/schema/dist/SchemaModel.js

@@ -0,0 +1 @@
+import"./EnumType.js";import"./FieldType.js";import*as e from"zod";var t=class{constructor(e){this.config=e}getZod(){let t=Object.entries(this.config.fields).reduce((t,[n,r])=>{let i=r.type.getZod(),a=r.isArray?e.array(i):i;return t[n]=r.isOptional?a.optional():a,t},{});return e.object(t)}getPothosInput(){return this.config.name}};export{t};

package/dist/schema/dist/entity/defineEntity.js

@@ -0,0 +1 @@
+import*as e from"zod";function t(e){return e}function n(e){return e}const r={string(e){return{kind:`scalar`,type:`String`,...e}},int(e){return{kind:`scalar`,type:`Int`,...e}},float(e){return{kind:`scalar`,type:`Float`,...e}},boolean(e){return{kind:`scalar`,type:`Boolean`,...e}},dateTime(e){return{kind:`scalar`,type:`DateTime`,...e}},json(e){return{kind:`scalar`,type:`Json`,...e}},bigInt(e){return{kind:`scalar`,type:`BigInt`,...e}},decimal(e){return{kind:`scalar`,type:`Decimal`,...e}},bytes(e){return{kind:`scalar`,type:`Bytes`,...e}},id(e){return{kind:`scalar`,type:`String`,isId:!0,default:`cuid()`,...e}},uuid(e){return{kind:`scalar`,type:`String`,isId:!0,default:`uuid()`,...e}},autoIncrement(e){return{kind:`scalar`,type:`Int`,isId:!0,default:`autoincrement()`,...e}},createdAt(e){return{kind:`scalar`,type:`DateTime`,default:`now()`,...e}},updatedAt(e){return{kind:`scalar`,type:`DateTime`,updatedAt:!0,...e}},email(t){return{kind:`scalar`,type:`String`,zod:e.email(),...t}},url(t){return{kind:`scalar`,type:`String`,zod:e.url(),...t}},enum(e,t){return{kind:`enum`,enumName:e,...t}},inlineEnum(e,t,n){return{kind:`enum`,enumName:e,values:t,...n}},hasOne(e,t){return{kind:`relation`,type:`hasOne`,target:e,...t}},hasMany(e,t){return{kind:`relation`,type:`hasMany`,target:e,...t}},belongsTo(e,t,n,r){return{kind:`relation`,type:`belongsTo`,target:e,fields:t,references:n,...r}},foreignKey(e){return{kind:`scalar`,type:`String`,...e}}},i={on(e,t){return{fields:e,...t}},unique(e,t){return{fields:e,unique:!0,...t}},compound(e,t,n){return{fields:e,sort:t,...n}}};export{i,n,r,t};

package/dist/schema/dist/entity/index.js

@@ -0,0 +1 @@
+import{i as e,n as t,r as n,t as r}from"./defineEntity.js";import"./types.js";

package/dist/schema/dist/entity/types.js

@@ -0,0 +1 @@
+import"zod";

package/dist/schema/dist/index.js

@@ -0,0 +1 @@
+import"./EnumType.js";import{t as e}from"./FieldType.js";import{l as t}from"./ScalarTypeEnum.js";import{t as n}from"./SchemaModel.js";import{i as r,n as i,r as a,t as o}from"./entity/defineEntity.js";import"./entity/index.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lssm/lib.identity-rbac",
-  "version": "0.0.0-canary-20251217060834",
+  "version": "0.0.0-canary-20251217062943",
   "description": "Identity, Organizations, and RBAC module for ContractSpec applications",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -18,13 +18,13 @@
     "lint:check": "eslint src"
   },
   "dependencies": {
-    "@lssm/lib.schema": "0.0.0-canary-20251217060834",
-    "@lssm/lib.contracts": "0.0.0-canary-20251217060834",
+    "@lssm/lib.schema": "0.0.0-canary-20251217062943",
+    "@lssm/lib.contracts": "0.0.0-canary-20251217062943",
     "zod": "^4.1.13"
   },
   "devDependencies": {
-    "@lssm/tool.typescript": "0.0.0-canary-20251217060834",
-    "@lssm/tool.tsdown": "0.0.0-canary-20251217060834",
+    "@lssm/tool.typescript": "0.0.0-canary-20251217062943",
+    "@lssm/tool.tsdown": "0.0.0-canary-20251217062943",
     "typescript": "^5.9.3"
   },
   "exports": {