@lssm/lib.identity-rbac 0.0.0-canary-20251217063201 → 0.0.0-canary-20251217073102

package/dist/contracts/user.js

@@ -1 +1,335 @@
-import{l as e}from"../schema/dist/ScalarTypeEnum.js";import{t}from"../schema/dist/SchemaModel.js";import"../schema/dist/index.js";import{n,t as r}from"./dist/spec.js";import"./dist/index.js";const i=[`platform.identity-rbac`],a=new t({name:`UserProfile`,description:`User profile information`,fields:{id:{type:e.String_unsecure(),isOptional:!1},email:{type:e.EmailAddress(),isOptional:!1},emailVerified:{type:e.Boolean(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!0},firstName:{type:e.String_unsecure(),isOptional:!0},lastName:{type:e.String_unsecure(),isOptional:!0},locale:{type:e.String_unsecure(),isOptional:!0},timezone:{type:e.String_unsecure(),isOptional:!0},imageUrl:{type:e.URL(),isOptional:!0},role:{type:e.String_unsecure(),isOptional:!0},onboardingCompleted:{type:e.Boolean(),isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1}}}),o=new t({name:`CreateUserInput`,description:`Input for creating a new user`,fields:{email:{type:e.EmailAddress(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!0},firstName:{type:e.String_unsecure(),isOptional:!0},lastName:{type:e.String_unsecure(),isOptional:!0},password:{type:e.String_unsecure(),isOptional:!0}}}),s=new t({name:`UpdateUserInput`,description:`Input for updating a user profile`,fields:{name:{type:e.String_unsecure(),isOptional:!0},firstName:{type:e.String_unsecure(),isOptional:!0},lastName:{type:e.String_unsecure(),isOptional:!0},locale:{type:e.String_unsecure(),isOptional:!0},timezone:{type:e.String_unsecure(),isOptional:!0},imageUrl:{type:e.URL(),isOptional:!0}}}),c=new t({name:`DeleteUserInput`,description:`Input for deleting a user`,fields:{confirmEmail:{type:e.EmailAddress(),isOptional:!1}}}),l=new t({name:`SuccessResult`,description:`Simple success result`,fields:{success:{type:e.Boolean(),isOptional:!1}}}),u=new t({name:`UserDeletedPayload`,description:`Payload for user deleted event`,fields:{userId:{type:e.String_unsecure(),isOptional:!1}}}),d=new t({name:`ListUsersInput`,description:`Input for listing users`,fields:{limit:{type:e.Int_unsecure(),isOptional:!0},offset:{type:e.Int_unsecure(),isOptional:!0},search:{type:e.String_unsecure(),isOptional:!0}}}),f=new t({name:`ListUsersOutput`,description:`Output for listing users`,fields:{users:{type:a,isOptional:!1,isArray:!0},total:{type:e.Int_unsecure(),isOptional:!1}}}),p=r({meta:{name:`identity.user.create`,version:1,stability:`stable`,owners:[...i],tags:[`identity`,`user`,`create`],description:`Create a new user account.`,goal:`Register a new user in the system.`,context:`Used during signup flows. May trigger email verification.`},io:{input:o,output:a,errors:{EMAIL_EXISTS:{description:`A user with this email already exists`,http:409,gqlCode:`EMAIL_EXISTS`,when:`Email is already registered`}}},policy:{auth:`anonymous`},sideEffects:{emits:[{name:`user.created`,version:1,when:`User is successfully created`,payload:a}],audit:[`user.created`]}}),m=n({meta:{name:`identity.user.me`,version:1,stability:`stable`,owners:[...i],tags:[`identity`,`user`,`profile`],description:`Get the current authenticated user profile.`,goal:`Retrieve user profile for the authenticated session.`,context:`Called on app load and after profile updates.`},io:{input:null,output:a},policy:{auth:`user`}}),h=r({meta:{name:`identity.user.update`,version:1,stability:`stable`,owners:[...i],tags:[`identity`,`user`,`update`],description:`Update user profile information.`,goal:`Allow users to update their profile.`,context:`Self-service profile updates.`},io:{input:s,output:a},policy:{auth:`user`},sideEffects:{emits:[{name:`user.updated`,version:1,when:`User profile is updated`,payload:a}],audit:[`user.updated`]}}),g=r({meta:{name:`identity.user.delete`,version:1,stability:`stable`,owners:[...i],tags:[`identity`,`user`,`delete`],description:`Delete user account and all associated data.`,goal:`Allow users to delete their account (GDPR compliance).`,context:`Self-service account deletion. Cascades to memberships, sessions, etc.`},io:{input:c,output:l},policy:{auth:`user`,escalate:`human_review`},sideEffects:{emits:[{name:`user.deleted`,version:1,when:`User account is deleted`,payload:u}],audit:[`user.deleted`]}}),_=n({meta:{name:`identity.user.list`,version:1,stability:`stable`,owners:[...i],tags:[`identity`,`user`,`admin`,`list`],description:`List all users (admin only).`,goal:`Allow admins to browse and manage users.`,context:`Admin dashboard user management.`},io:{input:d,output:f},policy:{auth:`admin`}});export{p as CreateUserContract,o as CreateUserInputModel,g as DeleteUserContract,c as DeleteUserInputModel,m as GetCurrentUserContract,_ as ListUsersContract,d as ListUsersInputModel,f as ListUsersOutputModel,l as SuccessResultModel,h as UpdateUserContract,s as UpdateUserInputModel,u as UserDeletedPayloadModel,a as UserProfileModel};
+import { ScalarTypeEnum } from "../schema/dist/ScalarTypeEnum.js";
+import { SchemaModel } from "../schema/dist/SchemaModel.js";
+import "../schema/dist/index.js";
+import { defineCommand, defineQuery } from "./dist/spec.js";
+import "./dist/index.js";
+
+//#region src/contracts/user.ts
+const OWNERS = ["platform.identity-rbac"];
+const UserProfileModel = new SchemaModel({
+	name: "UserProfile",
+	description: "User profile information",
+	fields: {
+		id: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		email: {
+			type: ScalarTypeEnum.EmailAddress(),
+			isOptional: false
+		},
+		emailVerified: {
+			type: ScalarTypeEnum.Boolean(),
+			isOptional: false
+		},
+		name: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		firstName: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		lastName: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		locale: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		timezone: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		imageUrl: {
+			type: ScalarTypeEnum.URL(),
+			isOptional: true
+		},
+		role: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		onboardingCompleted: {
+			type: ScalarTypeEnum.Boolean(),
+			isOptional: false
+		},
+		createdAt: {
+			type: ScalarTypeEnum.DateTime(),
+			isOptional: false
+		}
+	}
+});
+const CreateUserInputModel = new SchemaModel({
+	name: "CreateUserInput",
+	description: "Input for creating a new user",
+	fields: {
+		email: {
+			type: ScalarTypeEnum.EmailAddress(),
+			isOptional: false
+		},
+		name: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		firstName: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		lastName: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		password: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		}
+	}
+});
+const UpdateUserInputModel = new SchemaModel({
+	name: "UpdateUserInput",
+	description: "Input for updating a user profile",
+	fields: {
+		name: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		firstName: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		lastName: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		locale: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		timezone: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		imageUrl: {
+			type: ScalarTypeEnum.URL(),
+			isOptional: true
+		}
+	}
+});
+const DeleteUserInputModel = new SchemaModel({
+	name: "DeleteUserInput",
+	description: "Input for deleting a user",
+	fields: { confirmEmail: {
+		type: ScalarTypeEnum.EmailAddress(),
+		isOptional: false
+	} }
+});
+const SuccessResultModel = new SchemaModel({
+	name: "SuccessResult",
+	description: "Simple success result",
+	fields: { success: {
+		type: ScalarTypeEnum.Boolean(),
+		isOptional: false
+	} }
+});
+const UserDeletedPayloadModel = new SchemaModel({
+	name: "UserDeletedPayload",
+	description: "Payload for user deleted event",
+	fields: { userId: {
+		type: ScalarTypeEnum.String_unsecure(),
+		isOptional: false
+	} }
+});
+const ListUsersInputModel = new SchemaModel({
+	name: "ListUsersInput",
+	description: "Input for listing users",
+	fields: {
+		limit: {
+			type: ScalarTypeEnum.Int_unsecure(),
+			isOptional: true
+		},
+		offset: {
+			type: ScalarTypeEnum.Int_unsecure(),
+			isOptional: true
+		},
+		search: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		}
+	}
+});
+const ListUsersOutputModel = new SchemaModel({
+	name: "ListUsersOutput",
+	description: "Output for listing users",
+	fields: {
+		users: {
+			type: UserProfileModel,
+			isOptional: false,
+			isArray: true
+		},
+		total: {
+			type: ScalarTypeEnum.Int_unsecure(),
+			isOptional: false
+		}
+	}
+});
+/**
+* Create a new user account.
+*/
+const CreateUserContract = defineCommand({
+	meta: {
+		name: "identity.user.create",
+		version: 1,
+		stability: "stable",
+		owners: [...OWNERS],
+		tags: [
+			"identity",
+			"user",
+			"create"
+		],
+		description: "Create a new user account.",
+		goal: "Register a new user in the system.",
+		context: "Used during signup flows. May trigger email verification."
+	},
+	io: {
+		input: CreateUserInputModel,
+		output: UserProfileModel,
+		errors: { EMAIL_EXISTS: {
+			description: "A user with this email already exists",
+			http: 409,
+			gqlCode: "EMAIL_EXISTS",
+			when: "Email is already registered"
+		} }
+	},
+	policy: { auth: "anonymous" },
+	sideEffects: {
+		emits: [{
+			name: "user.created",
+			version: 1,
+			when: "User is successfully created",
+			payload: UserProfileModel
+		}],
+		audit: ["user.created"]
+	}
+});
+/**
+* Get the current user's profile.
+*/
+const GetCurrentUserContract = defineQuery({
+	meta: {
+		name: "identity.user.me",
+		version: 1,
+		stability: "stable",
+		owners: [...OWNERS],
+		tags: [
+			"identity",
+			"user",
+			"profile"
+		],
+		description: "Get the current authenticated user profile.",
+		goal: "Retrieve user profile for the authenticated session.",
+		context: "Called on app load and after profile updates."
+	},
+	io: {
+		input: null,
+		output: UserProfileModel
+	},
+	policy: { auth: "user" }
+});
+/**
+* Update user profile.
+*/
+const UpdateUserContract = defineCommand({
+	meta: {
+		name: "identity.user.update",
+		version: 1,
+		stability: "stable",
+		owners: [...OWNERS],
+		tags: [
+			"identity",
+			"user",
+			"update"
+		],
+		description: "Update user profile information.",
+		goal: "Allow users to update their profile.",
+		context: "Self-service profile updates."
+	},
+	io: {
+		input: UpdateUserInputModel,
+		output: UserProfileModel
+	},
+	policy: { auth: "user" },
+	sideEffects: {
+		emits: [{
+			name: "user.updated",
+			version: 1,
+			when: "User profile is updated",
+			payload: UserProfileModel
+		}],
+		audit: ["user.updated"]
+	}
+});
+/**
+* Delete user account.
+*/
+const DeleteUserContract = defineCommand({
+	meta: {
+		name: "identity.user.delete",
+		version: 1,
+		stability: "stable",
+		owners: [...OWNERS],
+		tags: [
+			"identity",
+			"user",
+			"delete"
+		],
+		description: "Delete user account and all associated data.",
+		goal: "Allow users to delete their account (GDPR compliance).",
+		context: "Self-service account deletion. Cascades to memberships, sessions, etc."
+	},
+	io: {
+		input: DeleteUserInputModel,
+		output: SuccessResultModel
+	},
+	policy: {
+		auth: "user",
+		escalate: "human_review"
+	},
+	sideEffects: {
+		emits: [{
+			name: "user.deleted",
+			version: 1,
+			when: "User account is deleted",
+			payload: UserDeletedPayloadModel
+		}],
+		audit: ["user.deleted"]
+	}
+});
+/**
+* List users (admin only).
+*/
+const ListUsersContract = defineQuery({
+	meta: {
+		name: "identity.user.list",
+		version: 1,
+		stability: "stable",
+		owners: [...OWNERS],
+		tags: [
+			"identity",
+			"user",
+			"admin",
+			"list"
+		],
+		description: "List all users (admin only).",
+		goal: "Allow admins to browse and manage users.",
+		context: "Admin dashboard user management."
+	},
+	io: {
+		input: ListUsersInputModel,
+		output: ListUsersOutputModel
+	},
+	policy: { auth: "admin" }
+});
+
+//#endregion
+export { CreateUserContract, CreateUserInputModel, DeleteUserContract, DeleteUserInputModel, GetCurrentUserContract, ListUsersContract, ListUsersInputModel, ListUsersOutputModel, SuccessResultModel, UpdateUserContract, UpdateUserInputModel, UserDeletedPayloadModel, UserProfileModel };