@lssm/lib.identity-rbac 0.0.0-canary-20251217083314 → 0.0.0-canary-20251220002821

package/dist/entities/rbac.js

@@ -1,138 +1,138 @@
-import { defineEntity, field, index } from "../schema/dist/entity/defineEntity.js";
-import "../schema/dist/index.js";
+import { L5, _5, b5 } from "../schema/dist/index.js";
 
 //#region src/entities/rbac.ts
 /**
 * Role entity - named set of permissions.
 */
-const RoleEntity = defineEntity({
+const RoleEntity = L5({
 	name: "Role",
 	description: "A role defines a named set of permissions.",
 	schema: "lssm_sigil",
 	map: "role",
 	fields: {
-		id: field.id(),
-		name: field.string({
+		id: _5.id(),
+		name: _5.string({
 			isUnique: true,
 			description: "Unique role name"
 		}),
-		description: field.string({
+		description: _5.string({
 			isOptional: true,
 			description: "Role description"
 		}),
-		permissions: field.string({
+		permissions: _5.string({
 			isArray: true,
 			description: "Array of permission names"
 		}),
-		createdAt: field.createdAt(),
-		updatedAt: field.updatedAt(),
-		policyBindings: field.hasMany("PolicyBinding")
+		createdAt: _5.createdAt(),
+		updatedAt: _5.updatedAt(),
+		policyBindings: _5.hasMany("PolicyBinding")
 	}
 });
 /**
 * Permission entity - atomic access right.
 */
-const PermissionEntity = defineEntity({
+const PermissionEntity = L5({
 	name: "Permission",
 	description: "A permission represents an atomic access right.",
 	schema: "lssm_sigil",
 	map: "permission",
 	fields: {
-		id: field.id(),
-		name: field.string({
+		id: _5.id(),
+		name: _5.string({
 			isUnique: true,
 			description: "Unique permission name"
 		}),
-		description: field.string({
+		description: _5.string({
 			isOptional: true,
 			description: "Permission description"
 		}),
-		createdAt: field.createdAt(),
-		updatedAt: field.updatedAt()
+		createdAt: _5.createdAt(),
+		updatedAt: _5.updatedAt()
 	}
 });
 /**
 * PolicyBinding entity - binds roles to principals.
 */
-const PolicyBindingEntity = defineEntity({
+const PolicyBindingEntity = L5({
 	name: "PolicyBinding",
 	description: "Binds roles to principals (users or organizations).",
 	schema: "lssm_sigil",
 	map: "policy_binding",
 	fields: {
-		id: field.id(),
-		roleId: field.foreignKey(),
-		targetType: field.string({ description: "\"user\" or \"organization\"" }),
-		targetId: field.string({ description: "ID of User or Organization" }),
-		expiresAt: field.dateTime({
+		id: _5.id(),
+		roleId: _5.foreignKey(),
+		targetType: _5.string({ description: "\"user\" or \"organization\"" }),
+		targetId: _5.string({ description: "ID of User or Organization" }),
+		expiresAt: _5.dateTime({
 			isOptional: true,
 			description: "When binding expires"
 		}),
-		createdAt: field.createdAt(),
-		userId: field.string({ isOptional: true }),
-		organizationId: field.string({ isOptional: true }),
-		role: field.belongsTo("Role", ["roleId"], ["id"], { onDelete: "Cascade" }),
-		user: field.belongsTo("User", ["userId"], ["id"]),
-		organization: field.belongsTo("Organization", ["organizationId"], ["id"])
+		createdAt: _5.createdAt(),
+		userId: _5.string({ isOptional: true }),
+		organizationId: _5.string({ isOptional: true }),
+		role: _5.belongsTo("Role", ["roleId"], ["id"], { onDelete: "Cascade" }),
+		user: _5.belongsTo("User", ["userId"], ["id"]),
+		organization: _5.belongsTo("Organization", ["organizationId"], ["id"])
 	},
-	indexes: [index.on(["targetType", "targetId"])]
+	indexes: [b5.on(["targetType", "targetId"])]
 });
 /**
 * ApiKey entity - API keys for programmatic access.
 */
-const ApiKeyEntity = defineEntity({
+const ApiKeyEntity = L5({
 	name: "ApiKey",
 	description: "API keys for programmatic access.",
 	schema: "lssm_sigil",
 	map: "api_key",
 	fields: {
-		id: field.id(),
-		name: field.string({ description: "API key name" }),
-		start: field.string({ description: "Starting characters for identification" }),
-		prefix: field.string({ description: "API key prefix" }),
-		key: field.string({ description: "Hashed API key" }),
-		userId: field.foreignKey(),
-		refillInterval: field.int({ description: "Refill interval in ms" }),
-		refillAmount: field.int({ description: "Amount to refill" }),
-		lastRefillAt: field.dateTime(),
-		remaining: field.int({ description: "Remaining requests" }),
-		requestCount: field.int({ description: "Total requests made" }),
-		lastRequest: field.dateTime(),
-		enabled: field.boolean({ default: true }),
-		rateLimitEnabled: field.boolean({ default: true }),
-		rateLimitTimeWindow: field.int({ description: "Rate limit window in ms" }),
-		rateLimitMax: field.int({ description: "Max requests in window" }),
-		expiresAt: field.dateTime(),
-		permissions: field.string({ isArray: true }),
-		metadata: field.json({ isOptional: true }),
-		createdAt: field.createdAt(),
-		updatedAt: field.updatedAt(),
-		user: field.belongsTo("User", ["userId"], ["id"], { onDelete: "Cascade" })
+		id: _5.id(),
+		name: _5.string({ description: "API key name" }),
+		start: _5.string({ description: "Starting characters for identification" }),
+		prefix: _5.string({ description: "API key prefix" }),
+		key: _5.string({ description: "Hashed API key" }),
+		userId: _5.foreignKey(),
+		refillInterval: _5.int({ description: "Refill interval in ms" }),
+		refillAmount: _5.int({ description: "Amount to refill" }),
+		lastRefillAt: _5.dateTime(),
+		remaining: _5.int({ description: "Remaining requests" }),
+		requestCount: _5.int({ description: "Total requests made" }),
+		lastRequest: _5.dateTime(),
+		enabled: _5.boolean({ default: true }),
+		rateLimitEnabled: _5.boolean({ default: true }),
+		rateLimitTimeWindow: _5.int({ description: "Rate limit window in ms" }),
+		rateLimitMax: _5.int({ description: "Max requests in window" }),
+		expiresAt: _5.dateTime(),
+		permissions: _5.string({ isArray: true }),
+		metadata: _5.json({ isOptional: true }),
+		createdAt: _5.createdAt(),
+		updatedAt: _5.updatedAt(),
+		user: _5.belongsTo("User", ["userId"], ["id"], { onDelete: "Cascade" })
 	}
 });
 /**
 * Passkey entity - WebAuthn passkeys.
 */
-const PasskeyEntity = defineEntity({
+const PasskeyEntity = L5({
 	name: "Passkey",
 	description: "WebAuthn passkeys for passwordless authentication.",
 	schema: "lssm_sigil",
 	map: "passkey",
 	fields: {
-		id: field.id(),
-		name: field.string({ description: "Passkey name" }),
-		publicKey: field.string({ description: "Public key" }),
-		userId: field.foreignKey(),
-		credentialID: field.string({ description: "Credential ID" }),
-		counter: field.int({ description: "Counter" }),
-		deviceType: field.string({ description: "Device type" }),
-		backedUp: field.boolean({ description: "Whether passkey is backed up" }),
-		transports: field.string({ description: "Transports" }),
-		aaguid: field.string({ description: "Authenticator GUID" }),
-		createdAt: field.createdAt(),
-		user: field.belongsTo("User", ["userId"], ["id"], { onDelete: "Cascade" })
+		id: _5.id(),
+		name: _5.string({ description: "Passkey name" }),
+		publicKey: _5.string({ description: "Public key" }),
+		userId: _5.foreignKey(),
+		credentialID: _5.string({ description: "Credential ID" }),
+		counter: _5.int({ description: "Counter" }),
+		deviceType: _5.string({ description: "Device type" }),
+		backedUp: _5.boolean({ description: "Whether passkey is backed up" }),
+		transports: _5.string({ description: "Transports" }),
+		aaguid: _5.string({ description: "Authenticator GUID" }),
+		createdAt: _5.createdAt(),
+		user: _5.belongsTo("User", ["userId"], ["id"], { onDelete: "Cascade" })
 	}
 });
 
 //#endregion
-export { ApiKeyEntity, PasskeyEntity, PermissionEntity, PolicyBindingEntity, RoleEntity };
+export { ApiKeyEntity, PasskeyEntity, PermissionEntity, PolicyBindingEntity, RoleEntity };
+//# sourceMappingURL=rbac.js.map

package/dist/entities/rbac.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac.js","names":["defineEntity","field","index"],"sources":["../../src/entities/rbac.ts"],"sourcesContent":["import { defineEntity, field, index } from '@lssm/lib.schema';\n\n/**\n * Role entity - named set of permissions.\n */\nexport const RoleEntity = defineEntity({\n  name: 'Role',\n  description: 'A role defines a named set of permissions.',\n  schema: 'lssm_sigil',\n  map: 'role',\n  fields: {\n    id: field.id(),\n    name: field.string({ isUnique: true, description: 'Unique role name' }),\n    description: field.string({\n      isOptional: true,\n      description: 'Role description',\n    }),\n    permissions: field.string({\n      isArray: true,\n      description: 'Array of permission names',\n    }),\n    createdAt: field.createdAt(),\n    updatedAt: field.updatedAt(),\n\n    // Relations\n    policyBindings: field.hasMany('PolicyBinding'),\n  },\n});\n\n/**\n * Permission entity - atomic access right.\n */\nexport const PermissionEntity = defineEntity({\n  name: 'Permission',\n  description: 'A permission represents an atomic access right.',\n  schema: 'lssm_sigil',\n  map: 'permission',\n  fields: {\n    id: field.id(),\n    name: field.string({\n      isUnique: true,\n      description: 'Unique permission name',\n    }),\n    description: field.string({\n      isOptional: true,\n      description: 'Permission description',\n    }),\n    createdAt: field.createdAt(),\n    updatedAt: field.updatedAt(),\n  },\n});\n\n/**\n * PolicyBinding entity - binds roles to principals.\n */\nexport const PolicyBindingEntity = defineEntity({\n  name: 'PolicyBinding',\n  description: 'Binds roles to principals (users or organizations).',\n  schema: 'lssm_sigil',\n  map: 'policy_binding',\n  fields: {\n    id: field.id(),\n    roleId: field.foreignKey(),\n    targetType: field.string({ description: '\"user\" or \"organization\"' }),\n    targetId: field.string({ description: 'ID of User or Organization' }),\n    expiresAt: field.dateTime({\n      isOptional: true,\n      description: 'When binding expires',\n    }),\n    createdAt: field.createdAt(),\n\n    // Optional direct relations\n    userId: field.string({ isOptional: true }),\n    organizationId: field.string({ isOptional: true }),\n\n    // Relations\n    role: field.belongsTo('Role', ['roleId'], ['id'], { onDelete: 'Cascade' }),\n    user: field.belongsTo('User', ['userId'], ['id']),\n    organization: field.belongsTo('Organization', ['organizationId'], ['id']),\n  },\n  indexes: [index.on(['targetType', 'targetId'])],\n});\n\n/**\n * ApiKey entity - API keys for programmatic access.\n */\nexport const ApiKeyEntity = defineEntity({\n  name: 'ApiKey',\n  description: 'API keys for programmatic access.',\n  schema: 'lssm_sigil',\n  map: 'api_key',\n  fields: {\n    id: field.id(),\n    name: field.string({ description: 'API key name' }),\n    start: field.string({\n      description: 'Starting characters for identification',\n    }),\n    prefix: field.string({ description: 'API key prefix' }),\n    key: field.string({ description: 'Hashed API key' }),\n    userId: field.foreignKey(),\n\n    // Rate limiting\n    refillInterval: field.int({ description: 'Refill interval in ms' }),\n    refillAmount: field.int({ description: 'Amount to refill' }),\n    lastRefillAt: field.dateTime(),\n    remaining: field.int({ description: 'Remaining requests' }),\n    requestCount: field.int({ description: 'Total requests made' }),\n    lastRequest: field.dateTime(),\n\n    // Limits\n    enabled: field.boolean({ default: true }),\n    rateLimitEnabled: field.boolean({ default: true }),\n    rateLimitTimeWindow: field.int({ description: 'Rate limit window in ms' }),\n    rateLimitMax: field.int({ description: 'Max requests in window' }),\n\n    // Expiration\n    expiresAt: field.dateTime(),\n\n    // Permissions\n    permissions: field.string({ isArray: true }),\n    metadata: field.json({ isOptional: true }),\n\n    createdAt: field.createdAt(),\n    updatedAt: field.updatedAt(),\n\n    // Relations\n    user: field.belongsTo('User', ['userId'], ['id'], { onDelete: 'Cascade' }),\n  },\n});\n\n/**\n * Passkey entity - WebAuthn passkeys.\n */\nexport const PasskeyEntity = defineEntity({\n  name: 'Passkey',\n  description: 'WebAuthn passkeys for passwordless authentication.',\n  schema: 'lssm_sigil',\n  map: 'passkey',\n  fields: {\n    id: field.id(),\n    name: field.string({ description: 'Passkey name' }),\n    publicKey: field.string({ description: 'Public key' }),\n    userId: field.foreignKey(),\n    credentialID: field.string({ description: 'Credential ID' }),\n    counter: field.int({ description: 'Counter' }),\n    deviceType: field.string({ description: 'Device type' }),\n    backedUp: field.boolean({ description: 'Whether passkey is backed up' }),\n    transports: field.string({ description: 'Transports' }),\n    aaguid: field.string({ description: 'Authenticator GUID' }),\n    createdAt: field.createdAt(),\n\n    // Relations\n    user: field.belongsTo('User', ['userId'], ['id'], { onDelete: 'Cascade' }),\n  },\n});\n"],"mappings":";;;;;;AAKA,MAAa,aAAaA,GAAa;CACrC,MAAM;CACN,aAAa;CACb,QAAQ;CACR,KAAK;CACL,QAAQ;EACN,IAAIC,GAAM,IAAI;EACd,MAAMA,GAAM,OAAO;GAAE,UAAU;GAAM,aAAa;GAAoB,CAAC;EACvE,aAAaA,GAAM,OAAO;GACxB,YAAY;GACZ,aAAa;GACd,CAAC;EACF,aAAaA,GAAM,OAAO;GACxB,SAAS;GACT,aAAa;GACd,CAAC;EACF,WAAWA,GAAM,WAAW;EAC5B,WAAWA,GAAM,WAAW;EAG5B,gBAAgBA,GAAM,QAAQ,gBAAgB;EAC/C;CACF,CAAC;;;;AAKF,MAAa,mBAAmBD,GAAa;CAC3C,MAAM;CACN,aAAa;CACb,QAAQ;CACR,KAAK;CACL,QAAQ;EACN,IAAIC,GAAM,IAAI;EACd,MAAMA,GAAM,OAAO;GACjB,UAAU;GACV,aAAa;GACd,CAAC;EACF,aAAaA,GAAM,OAAO;GACxB,YAAY;GACZ,aAAa;GACd,CAAC;EACF,WAAWA,GAAM,WAAW;EAC5B,WAAWA,GAAM,WAAW;EAC7B;CACF,CAAC;;;;AAKF,MAAa,sBAAsBD,GAAa;CAC9C,MAAM;CACN,aAAa;CACb,QAAQ;CACR,KAAK;CACL,QAAQ;EACN,IAAIC,GAAM,IAAI;EACd,QAAQA,GAAM,YAAY;EAC1B,YAAYA,GAAM,OAAO,EAAE,aAAa,gCAA4B,CAAC;EACrE,UAAUA,GAAM,OAAO,EAAE,aAAa,8BAA8B,CAAC;EACrE,WAAWA,GAAM,SAAS;GACxB,YAAY;GACZ,aAAa;GACd,CAAC;EACF,WAAWA,GAAM,WAAW;EAG5B,QAAQA,GAAM,OAAO,EAAE,YAAY,MAAM,CAAC;EAC1C,gBAAgBA,GAAM,OAAO,EAAE,YAAY,MAAM,CAAC;EAGlD,MAAMA,GAAM,UAAU,QAAQ,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,UAAU,WAAW,CAAC;EAC1E,MAAMA,GAAM,UAAU,QAAQ,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC;EACjD,cAAcA,GAAM,UAAU,gBAAgB,CAAC,iBAAiB,EAAE,CAAC,KAAK,CAAC;EAC1E;CACD,SAAS,CAACC,GAAM,GAAG,CAAC,cAAc,WAAW,CAAC,CAAC;CAChD,CAAC;;;;AAKF,MAAa,eAAeF,GAAa;CACvC,MAAM;CACN,aAAa;CACb,QAAQ;CACR,KAAK;CACL,QAAQ;EACN,IAAIC,GAAM,IAAI;EACd,MAAMA,GAAM,OAAO,EAAE,aAAa,gBAAgB,CAAC;EACnD,OAAOA,GAAM,OAAO,EAClB,aAAa,0CACd,CAAC;EACF,QAAQA,GAAM,OAAO,EAAE,aAAa,kBAAkB,CAAC;EACvD,KAAKA,GAAM,OAAO,EAAE,aAAa,kBAAkB,CAAC;EACpD,QAAQA,GAAM,YAAY;EAG1B,gBAAgBA,GAAM,IAAI,EAAE,aAAa,yBAAyB,CAAC;EACnE,cAAcA,GAAM,IAAI,EAAE,aAAa,oBAAoB,CAAC;EAC5D,cAAcA,GAAM,UAAU;EAC9B,WAAWA,GAAM,IAAI,EAAE,aAAa,sBAAsB,CAAC;EAC3D,cAAcA,GAAM,IAAI,EAAE,aAAa,uBAAuB,CAAC;EAC/D,aAAaA,GAAM,UAAU;EAG7B,SAASA,GAAM,QAAQ,EAAE,SAAS,MAAM,CAAC;EACzC,kBAAkBA,GAAM,QAAQ,EAAE,SAAS,MAAM,CAAC;EAClD,qBAAqBA,GAAM,IAAI,EAAE,aAAa,2BAA2B,CAAC;EAC1E,cAAcA,GAAM,IAAI,EAAE,aAAa,0BAA0B,CAAC;EAGlE,WAAWA,GAAM,UAAU;EAG3B,aAAaA,GAAM,OAAO,EAAE,SAAS,MAAM,CAAC;EAC5C,UAAUA,GAAM,KAAK,EAAE,YAAY,MAAM,CAAC;EAE1C,WAAWA,GAAM,WAAW;EAC5B,WAAWA,GAAM,WAAW;EAG5B,MAAMA,GAAM,UAAU,QAAQ,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,UAAU,WAAW,CAAC;EAC3E;CACF,CAAC;;;;AAKF,MAAa,gBAAgBD,GAAa;CACxC,MAAM;CACN,aAAa;CACb,QAAQ;CACR,KAAK;CACL,QAAQ;EACN,IAAIC,GAAM,IAAI;EACd,MAAMA,GAAM,OAAO,EAAE,aAAa,gBAAgB,CAAC;EACnD,WAAWA,GAAM,OAAO,EAAE,aAAa,cAAc,CAAC;EACtD,QAAQA,GAAM,YAAY;EAC1B,cAAcA,GAAM,OAAO,EAAE,aAAa,iBAAiB,CAAC;EAC5D,SAASA,GAAM,IAAI,EAAE,aAAa,WAAW,CAAC;EAC9C,YAAYA,GAAM,OAAO,EAAE,aAAa,eAAe,CAAC;EACxD,UAAUA,GAAM,QAAQ,EAAE,aAAa,gCAAgC,CAAC;EACxE,YAAYA,GAAM,OAAO,EAAE,aAAa,cAAc,CAAC;EACvD,QAAQA,GAAM,OAAO,EAAE,aAAa,sBAAsB,CAAC;EAC3D,WAAWA,GAAM,WAAW;EAG5B,MAAMA,GAAM,UAAU,QAAQ,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,UAAU,WAAW,CAAC;EAC3E;CACF,CAAC"}

package/dist/entities/user.d.ts

@@ -1,87 +1,88 @@
-import * as _lssm_lib_schema420 from "@lssm/lib.schema";
+import * as _lssm_lib_schema792 from "@lssm/lib.schema";
 
 //#region src/entities/user.d.ts
 /**
  * User entity - core user profile and authentication.
  */
-declare const UserEntity: _lssm_lib_schema420.EntitySpec<{
-  id: _lssm_lib_schema420.EntityScalarField;
-  email: _lssm_lib_schema420.EntityScalarField;
-  emailVerified: _lssm_lib_schema420.EntityScalarField;
-  name: _lssm_lib_schema420.EntityScalarField;
-  firstName: _lssm_lib_schema420.EntityScalarField;
-  lastName: _lssm_lib_schema420.EntityScalarField;
-  locale: _lssm_lib_schema420.EntityScalarField;
-  timezone: _lssm_lib_schema420.EntityScalarField;
-  imageUrl: _lssm_lib_schema420.EntityScalarField;
-  image: _lssm_lib_schema420.EntityScalarField;
-  metadata: _lssm_lib_schema420.EntityScalarField;
-  onboardingCompleted: _lssm_lib_schema420.EntityScalarField;
-  onboardingStep: _lssm_lib_schema420.EntityScalarField;
-  whitelistedAt: _lssm_lib_schema420.EntityScalarField;
-  role: _lssm_lib_schema420.EntityScalarField;
-  banned: _lssm_lib_schema420.EntityScalarField;
-  banReason: _lssm_lib_schema420.EntityScalarField;
-  banExpires: _lssm_lib_schema420.EntityScalarField;
-  phoneNumber: _lssm_lib_schema420.EntityScalarField;
-  phoneNumberVerified: _lssm_lib_schema420.EntityScalarField;
-  createdAt: _lssm_lib_schema420.EntityScalarField;
-  updatedAt: _lssm_lib_schema420.EntityScalarField;
-  sessions: _lssm_lib_schema420.EntityRelationField;
-  accounts: _lssm_lib_schema420.EntityRelationField;
-  memberships: _lssm_lib_schema420.EntityRelationField;
-  invitations: _lssm_lib_schema420.EntityRelationField;
-  teamMemberships: _lssm_lib_schema420.EntityRelationField;
-  policyBindings: _lssm_lib_schema420.EntityRelationField;
-  apiKeys: _lssm_lib_schema420.EntityRelationField;
-  passkeys: _lssm_lib_schema420.EntityRelationField;
+declare const UserEntity: _lssm_lib_schema792.EntitySpec<{
+  id: _lssm_lib_schema792.EntityScalarField;
+  email: _lssm_lib_schema792.EntityScalarField;
+  emailVerified: _lssm_lib_schema792.EntityScalarField;
+  name: _lssm_lib_schema792.EntityScalarField;
+  firstName: _lssm_lib_schema792.EntityScalarField;
+  lastName: _lssm_lib_schema792.EntityScalarField;
+  locale: _lssm_lib_schema792.EntityScalarField;
+  timezone: _lssm_lib_schema792.EntityScalarField;
+  imageUrl: _lssm_lib_schema792.EntityScalarField;
+  image: _lssm_lib_schema792.EntityScalarField;
+  metadata: _lssm_lib_schema792.EntityScalarField;
+  onboardingCompleted: _lssm_lib_schema792.EntityScalarField;
+  onboardingStep: _lssm_lib_schema792.EntityScalarField;
+  whitelistedAt: _lssm_lib_schema792.EntityScalarField;
+  role: _lssm_lib_schema792.EntityScalarField;
+  banned: _lssm_lib_schema792.EntityScalarField;
+  banReason: _lssm_lib_schema792.EntityScalarField;
+  banExpires: _lssm_lib_schema792.EntityScalarField;
+  phoneNumber: _lssm_lib_schema792.EntityScalarField;
+  phoneNumberVerified: _lssm_lib_schema792.EntityScalarField;
+  createdAt: _lssm_lib_schema792.EntityScalarField;
+  updatedAt: _lssm_lib_schema792.EntityScalarField;
+  sessions: _lssm_lib_schema792.EntityRelationField;
+  accounts: _lssm_lib_schema792.EntityRelationField;
+  memberships: _lssm_lib_schema792.EntityRelationField;
+  invitations: _lssm_lib_schema792.EntityRelationField;
+  teamMemberships: _lssm_lib_schema792.EntityRelationField;
+  policyBindings: _lssm_lib_schema792.EntityRelationField;
+  apiKeys: _lssm_lib_schema792.EntityRelationField;
+  passkeys: _lssm_lib_schema792.EntityRelationField;
 }>;
 /**
  * Session entity - login sessions.
  */
-declare const SessionEntity: _lssm_lib_schema420.EntitySpec<{
-  id: _lssm_lib_schema420.EntityScalarField;
-  userId: _lssm_lib_schema420.EntityScalarField;
-  expiresAt: _lssm_lib_schema420.EntityScalarField;
-  token: _lssm_lib_schema420.EntityScalarField;
-  ipAddress: _lssm_lib_schema420.EntityScalarField;
-  userAgent: _lssm_lib_schema420.EntityScalarField;
-  impersonatedBy: _lssm_lib_schema420.EntityScalarField;
-  activeOrganizationId: _lssm_lib_schema420.EntityScalarField;
-  activeTeamId: _lssm_lib_schema420.EntityScalarField;
-  createdAt: _lssm_lib_schema420.EntityScalarField;
-  updatedAt: _lssm_lib_schema420.EntityScalarField;
-  user: _lssm_lib_schema420.EntityRelationField;
+declare const SessionEntity: _lssm_lib_schema792.EntitySpec<{
+  id: _lssm_lib_schema792.EntityScalarField;
+  userId: _lssm_lib_schema792.EntityScalarField;
+  expiresAt: _lssm_lib_schema792.EntityScalarField;
+  token: _lssm_lib_schema792.EntityScalarField;
+  ipAddress: _lssm_lib_schema792.EntityScalarField;
+  userAgent: _lssm_lib_schema792.EntityScalarField;
+  impersonatedBy: _lssm_lib_schema792.EntityScalarField;
+  activeOrganizationId: _lssm_lib_schema792.EntityScalarField;
+  activeTeamId: _lssm_lib_schema792.EntityScalarField;
+  createdAt: _lssm_lib_schema792.EntityScalarField;
+  updatedAt: _lssm_lib_schema792.EntityScalarField;
+  user: _lssm_lib_schema792.EntityRelationField;
 }>;
 /**
  * Account entity - external authentication accounts.
  */
-declare const AccountEntity: _lssm_lib_schema420.EntitySpec<{
-  id: _lssm_lib_schema420.EntityScalarField;
-  accountId: _lssm_lib_schema420.EntityScalarField;
-  providerId: _lssm_lib_schema420.EntityScalarField;
-  userId: _lssm_lib_schema420.EntityScalarField;
-  accessToken: _lssm_lib_schema420.EntityScalarField;
-  refreshToken: _lssm_lib_schema420.EntityScalarField;
-  idToken: _lssm_lib_schema420.EntityScalarField;
-  accessTokenExpiresAt: _lssm_lib_schema420.EntityScalarField;
-  refreshTokenExpiresAt: _lssm_lib_schema420.EntityScalarField;
-  scope: _lssm_lib_schema420.EntityScalarField;
-  password: _lssm_lib_schema420.EntityScalarField;
-  createdAt: _lssm_lib_schema420.EntityScalarField;
-  updatedAt: _lssm_lib_schema420.EntityScalarField;
-  user: _lssm_lib_schema420.EntityRelationField;
+declare const AccountEntity: _lssm_lib_schema792.EntitySpec<{
+  id: _lssm_lib_schema792.EntityScalarField;
+  accountId: _lssm_lib_schema792.EntityScalarField;
+  providerId: _lssm_lib_schema792.EntityScalarField;
+  userId: _lssm_lib_schema792.EntityScalarField;
+  accessToken: _lssm_lib_schema792.EntityScalarField;
+  refreshToken: _lssm_lib_schema792.EntityScalarField;
+  idToken: _lssm_lib_schema792.EntityScalarField;
+  accessTokenExpiresAt: _lssm_lib_schema792.EntityScalarField;
+  refreshTokenExpiresAt: _lssm_lib_schema792.EntityScalarField;
+  scope: _lssm_lib_schema792.EntityScalarField;
+  password: _lssm_lib_schema792.EntityScalarField;
+  createdAt: _lssm_lib_schema792.EntityScalarField;
+  updatedAt: _lssm_lib_schema792.EntityScalarField;
+  user: _lssm_lib_schema792.EntityRelationField;
 }>;
 /**
  * Verification entity - email/phone verification tokens.
  */
-declare const VerificationEntity: _lssm_lib_schema420.EntitySpec<{
-  id: _lssm_lib_schema420.EntityScalarField;
-  identifier: _lssm_lib_schema420.EntityScalarField;
-  value: _lssm_lib_schema420.EntityScalarField;
-  expiresAt: _lssm_lib_schema420.EntityScalarField;
-  createdAt: _lssm_lib_schema420.EntityScalarField;
-  updatedAt: _lssm_lib_schema420.EntityScalarField;
+declare const VerificationEntity: _lssm_lib_schema792.EntitySpec<{
+  id: _lssm_lib_schema792.EntityScalarField;
+  identifier: _lssm_lib_schema792.EntityScalarField;
+  value: _lssm_lib_schema792.EntityScalarField;
+  expiresAt: _lssm_lib_schema792.EntityScalarField;
+  createdAt: _lssm_lib_schema792.EntityScalarField;
+  updatedAt: _lssm_lib_schema792.EntityScalarField;
 }>;
 //#endregion
-export { AccountEntity, SessionEntity, UserEntity, VerificationEntity };
+export { AccountEntity, SessionEntity, UserEntity, VerificationEntity };
+//# sourceMappingURL=user.d.ts.map

package/dist/entities/user.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.d.ts","names":[],"sources":["../../src/entities/user.ts"],"sourcesContent":[],"mappings":";;;;;;AAKa,cAAA,UA+FX,sBA/FqB,UA+FrB,CAAA;EAAA,EAAA,EAAA,mBAAA,CAAA,iBAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAKF;;cAAa,mCAAa;MAoCxB,mBAAA,CAAA;;;;;;;;;;kDApCwB;EAAA,IAAA,yCAAA;AAyC1B,CAAA,CAAA;;;;cAAa,mCAAa;MA2BxB,mBAAA,CAAA;;;;;;;;;;iDA3BwB;EAAA,SAAA,uCAAA;EAgCb,SAAA,uCAaX;EAAA,IAAA,yCAAA;;;;;cAbW,wCAAkB;MAa7B,mBAAA,CAAA,iBAb6B;EAAA,UAAA,uCAAA"}

package/dist/entities/user.js

@@ -1,194 +1,194 @@
-import { defineEntity, field, index } from "../schema/dist/entity/defineEntity.js";
-import "../schema/dist/index.js";
+import { L5, _5, b5 } from "../schema/dist/index.js";
 
 //#region src/entities/user.ts
 /**
 * User entity - core user profile and authentication.
 */
-const UserEntity = defineEntity({
+const UserEntity = L5({
 	name: "User",
 	description: "A user of the platform. Users hold core profile information and authenticate via Account records.",
 	schema: "lssm_sigil",
 	map: "user",
 	fields: {
-		id: field.id({ description: "Unique user identifier" }),
-		email: field.email({
+		id: _5.id({ description: "Unique user identifier" }),
+		email: _5.email({
 			isUnique: true,
 			description: "User email address"
 		}),
-		emailVerified: field.boolean({
+		emailVerified: _5.boolean({
 			default: false,
 			description: "Whether email has been verified"
 		}),
-		name: field.string({
+		name: _5.string({
 			isOptional: true,
 			description: "Display name"
 		}),
-		firstName: field.string({
+		firstName: _5.string({
 			isOptional: true,
 			description: "First name"
 		}),
-		lastName: field.string({
+		lastName: _5.string({
 			isOptional: true,
 			description: "Last name"
 		}),
-		locale: field.string({
+		locale: _5.string({
 			isOptional: true,
 			description: "User locale (e.g., \"en-US\")"
 		}),
-		timezone: field.string({
+		timezone: _5.string({
 			isOptional: true,
 			description: "Olson timezone (e.g., \"Europe/Paris\")"
 		}),
-		imageUrl: field.url({
+		imageUrl: _5.url({
 			isOptional: true,
 			description: "URL of avatar or profile picture"
 		}),
-		image: field.string({
+		image: _5.string({
 			isOptional: true,
 			description: "Legacy image field"
 		}),
-		metadata: field.json({
+		metadata: _5.json({
 			isOptional: true,
 			description: "Arbitrary user metadata"
 		}),
-		onboardingCompleted: field.boolean({
+		onboardingCompleted: _5.boolean({
 			default: false,
 			description: "Whether onboarding is complete"
 		}),
-		onboardingStep: field.string({
+		onboardingStep: _5.string({
 			isOptional: true,
 			description: "Current onboarding step"
 		}),
-		whitelistedAt: field.dateTime({
+		whitelistedAt: _5.dateTime({
 			isOptional: true,
 			description: "When user was whitelisted"
 		}),
-		role: field.string({
+		role: _5.string({
 			isOptional: true,
 			default: "\"user\"",
 			description: "User role (user, admin)"
 		}),
-		banned: field.boolean({
+		banned: _5.boolean({
 			default: false,
 			description: "Whether user is banned"
 		}),
-		banReason: field.string({
+		banReason: _5.string({
 			isOptional: true,
 			description: "Reason for ban"
 		}),
-		banExpires: field.dateTime({
+		banExpires: _5.dateTime({
 			isOptional: true,
 			description: "When ban expires"
 		}),
-		phoneNumber: field.string({
+		phoneNumber: _5.string({
 			isOptional: true,
 			isUnique: true,
 			description: "Phone number"
 		}),
-		phoneNumberVerified: field.boolean({
+		phoneNumberVerified: _5.boolean({
 			default: false,
 			description: "Whether phone is verified"
 		}),
-		createdAt: field.createdAt(),
-		updatedAt: field.updatedAt(),
-		sessions: field.hasMany("Session"),
-		accounts: field.hasMany("Account"),
-		memberships: field.hasMany("Member"),
-		invitations: field.hasMany("Invitation"),
-		teamMemberships: field.hasMany("TeamMember"),
-		policyBindings: field.hasMany("PolicyBinding"),
-		apiKeys: field.hasMany("ApiKey"),
-		passkeys: field.hasMany("Passkey")
+		createdAt: _5.createdAt(),
+		updatedAt: _5.updatedAt(),
+		sessions: _5.hasMany("Session"),
+		accounts: _5.hasMany("Account"),
+		memberships: _5.hasMany("Member"),
+		invitations: _5.hasMany("Invitation"),
+		teamMemberships: _5.hasMany("TeamMember"),
+		policyBindings: _5.hasMany("PolicyBinding"),
+		apiKeys: _5.hasMany("ApiKey"),
+		passkeys: _5.hasMany("Passkey")
 	}
 });
 /**
 * Session entity - login sessions.
 */
-const SessionEntity = defineEntity({
+const SessionEntity = L5({
 	name: "Session",
 	description: "Represents a login session (e.g., web session or API token).",
 	schema: "lssm_sigil",
 	map: "session",
 	fields: {
-		id: field.id(),
-		userId: field.foreignKey(),
-		expiresAt: field.dateTime({ description: "Session expiration time" }),
-		token: field.string({
+		id: _5.id(),
+		userId: _5.foreignKey(),
+		expiresAt: _5.dateTime({ description: "Session expiration time" }),
+		token: _5.string({
 			isUnique: true,
 			description: "Session token"
 		}),
-		ipAddress: field.string({
+		ipAddress: _5.string({
 			isOptional: true,
 			description: "Client IP address"
 		}),
-		userAgent: field.string({
+		userAgent: _5.string({
 			isOptional: true,
 			description: "Client user agent"
 		}),
-		impersonatedBy: field.string({
+		impersonatedBy: _5.string({
 			isOptional: true,
 			description: "Admin impersonating this session"
 		}),
-		activeOrganizationId: field.string({
+		activeOrganizationId: _5.string({
 			isOptional: true,
 			description: "Active org context"
 		}),
-		activeTeamId: field.string({
+		activeTeamId: _5.string({
 			isOptional: true,
 			description: "Active team context"
 		}),
-		createdAt: field.createdAt(),
-		updatedAt: field.updatedAt(),
-		user: field.belongsTo("User", ["userId"], ["id"], { onDelete: "Cascade" })
+		createdAt: _5.createdAt(),
+		updatedAt: _5.updatedAt(),
+		user: _5.belongsTo("User", ["userId"], ["id"], { onDelete: "Cascade" })
 	}
 });
 /**
 * Account entity - external authentication accounts.
 */
-const AccountEntity = defineEntity({
+const AccountEntity = L5({
 	name: "Account",
 	description: "External authentication accounts (OAuth, password, etc.).",
 	schema: "lssm_sigil",
 	map: "account",
 	fields: {
-		id: field.id(),
-		accountId: field.string({ description: "Account ID from provider" }),
-		providerId: field.string({ description: "Provider identifier" }),
-		userId: field.foreignKey(),
-		accessToken: field.string({ isOptional: true }),
-		refreshToken: field.string({ isOptional: true }),
-		idToken: field.string({ isOptional: true }),
-		accessTokenExpiresAt: field.dateTime({ isOptional: true }),
-		refreshTokenExpiresAt: field.dateTime({ isOptional: true }),
-		scope: field.string({ isOptional: true }),
-		password: field.string({
+		id: _5.id(),
+		accountId: _5.string({ description: "Account ID from provider" }),
+		providerId: _5.string({ description: "Provider identifier" }),
+		userId: _5.foreignKey(),
+		accessToken: _5.string({ isOptional: true }),
+		refreshToken: _5.string({ isOptional: true }),
+		idToken: _5.string({ isOptional: true }),
+		accessTokenExpiresAt: _5.dateTime({ isOptional: true }),
+		refreshTokenExpiresAt: _5.dateTime({ isOptional: true }),
+		scope: _5.string({ isOptional: true }),
+		password: _5.string({
 			isOptional: true,
 			description: "Hashed password for password providers"
 		}),
-		createdAt: field.createdAt(),
-		updatedAt: field.updatedAt(),
-		user: field.belongsTo("User", ["userId"], ["id"], { onDelete: "Cascade" })
+		createdAt: _5.createdAt(),
+		updatedAt: _5.updatedAt(),
+		user: _5.belongsTo("User", ["userId"], ["id"], { onDelete: "Cascade" })
 	},
-	indexes: [index.unique(["accountId", "providerId"])]
+	indexes: [b5.unique(["accountId", "providerId"])]
 });
 /**
 * Verification entity - email/phone verification tokens.
 */
-const VerificationEntity = defineEntity({
+const VerificationEntity = L5({
 	name: "Verification",
 	description: "Verification tokens for email/phone confirmation.",
 	schema: "lssm_sigil",
 	map: "verification",
 	fields: {
-		id: field.uuid(),
-		identifier: field.string({ description: "Email or phone being verified" }),
-		value: field.string({ description: "Verification code/token" }),
-		expiresAt: field.dateTime({ description: "Token expiration" }),
-		createdAt: field.createdAt(),
-		updatedAt: field.updatedAt()
+		id: _5.uuid(),
+		identifier: _5.string({ description: "Email or phone being verified" }),
+		value: _5.string({ description: "Verification code/token" }),
+		expiresAt: _5.dateTime({ description: "Token expiration" }),
+		createdAt: _5.createdAt(),
+		updatedAt: _5.updatedAt()
 	}
 });
 
 //#endregion
-export { AccountEntity, SessionEntity, UserEntity, VerificationEntity };
+export { AccountEntity, SessionEntity, UserEntity, VerificationEntity };
+//# sourceMappingURL=user.js.map