@lssm/lib.identity-rbac 0.0.0-canary-20251217083314 → 1.41.0

package/dist/contracts/index.js

@@ -1,5 +1 @@
-import { CreateUserContract, CreateUserInputModel, DeleteUserContract, DeleteUserInputModel, GetCurrentUserContract, ListUsersContract, ListUsersInputModel, ListUsersOutputModel, SuccessResultModel, UpdateUserContract, UpdateUserInputModel, UserDeletedPayloadModel, UserProfileModel } from "./user.js";
-import { AcceptInviteContract, AcceptInviteInputModel, CreateOrgContract, CreateOrgInputModel, GetOrgContract, GetOrgInputModel, InvitationModel, InviteMemberContract, InviteMemberInputModel, ListMembersContract, ListMembersInputModel, ListMembersOutputModel, ListUserOrgsContract, ListUserOrgsOutputModel, MemberModel, MemberRemovedPayloadModel, MemberUserModel, OrganizationModel, OrganizationWithRoleModel, RemoveMemberContract, RemoveMemberInputModel, UpdateOrgContract, UpdateOrgInputModel } from "./organization.js";
-import { AssignRoleContract, AssignRoleInputModel, BindingIdPayloadModel, CheckPermissionContract, CheckPermissionInputModel, CreateRoleContract, CreateRoleInputModel, DeleteRoleContract, DeleteRoleInputModel, ListRolesContract, ListRolesOutputModel, ListUserPermissionsContract, ListUserPermissionsInputModel, ListUserPermissionsOutputModel, PermissionCheckResultModel, PolicyBindingModel, RevokeRoleContract, RevokeRoleInputModel, RoleModel, UpdateRoleContract, UpdateRoleInputModel } from "./rbac.js";
-
-export { AcceptInviteContract, AcceptInviteInputModel, AssignRoleContract, AssignRoleInputModel, BindingIdPayloadModel, CheckPermissionContract, CheckPermissionInputModel, CreateOrgContract, CreateOrgInputModel, CreateRoleContract, CreateRoleInputModel, CreateUserContract, CreateUserInputModel, DeleteRoleContract, DeleteRoleInputModel, DeleteUserContract, DeleteUserInputModel, GetCurrentUserContract, GetOrgContract, GetOrgInputModel, InvitationModel, InviteMemberContract, InviteMemberInputModel, ListMembersContract, ListMembersInputModel, ListMembersOutputModel, ListRolesContract, ListRolesOutputModel, ListUserOrgsContract, ListUserOrgsOutputModel, ListUserPermissionsContract, ListUserPermissionsInputModel, ListUserPermissionsOutputModel, ListUsersContract, ListUsersInputModel, ListUsersOutputModel, MemberModel, MemberRemovedPayloadModel, MemberUserModel, OrganizationModel, OrganizationWithRoleModel, PermissionCheckResultModel, PolicyBindingModel, RemoveMemberContract, RemoveMemberInputModel, RevokeRoleContract, RevokeRoleInputModel, RoleModel, SuccessResultModel, UpdateOrgContract, UpdateOrgInputModel, UpdateRoleContract, UpdateRoleInputModel, UpdateUserContract, UpdateUserInputModel, UserDeletedPayloadModel, UserProfileModel };
+import{CreateUserContract as e,CreateUserInputModel as t,DeleteUserContract as n,DeleteUserInputModel as r,GetCurrentUserContract as i,ListUsersContract as a,ListUsersInputModel as o,ListUsersOutputModel as s,SuccessResultModel as c,UpdateUserContract as l,UpdateUserInputModel as u,UserDeletedPayloadModel as d,UserProfileModel as f}from"./user.js";import{AcceptInviteContract as p,AcceptInviteInputModel as m,CreateOrgContract as h,CreateOrgInputModel as g,GetOrgContract as _,GetOrgInputModel as v,InvitationModel as y,InviteMemberContract as b,InviteMemberInputModel as x,ListMembersContract as S,ListMembersInputModel as C,ListMembersOutputModel as w,ListUserOrgsContract as T,ListUserOrgsOutputModel as E,MemberModel as D,MemberRemovedPayloadModel as O,MemberUserModel as k,OrganizationModel as A,OrganizationWithRoleModel as j,RemoveMemberContract as M,RemoveMemberInputModel as N,UpdateOrgContract as P,UpdateOrgInputModel as F}from"./organization.js";import{AssignRoleContract as I,AssignRoleInputModel as L,BindingIdPayloadModel as R,CheckPermissionContract as z,CheckPermissionInputModel as B,CreateRoleContract as V,CreateRoleInputModel as H,DeleteRoleContract as U,DeleteRoleInputModel as W,ListRolesContract as G,ListRolesOutputModel as K,ListUserPermissionsContract as q,ListUserPermissionsInputModel as J,ListUserPermissionsOutputModel as Y,PermissionCheckResultModel as X,PolicyBindingModel as Z,RevokeRoleContract as Q,RevokeRoleInputModel as $,RoleModel as ee,UpdateRoleContract as te,UpdateRoleInputModel as ne}from"./rbac.js";export{p as AcceptInviteContract,m as AcceptInviteInputModel,I as AssignRoleContract,L as AssignRoleInputModel,R as BindingIdPayloadModel,z as CheckPermissionContract,B as CheckPermissionInputModel,h as CreateOrgContract,g as CreateOrgInputModel,V as CreateRoleContract,H as CreateRoleInputModel,e as CreateUserContract,t as CreateUserInputModel,U as DeleteRoleContract,W as DeleteRoleInputModel,n as DeleteUserContract,r as DeleteUserInputModel,i as GetCurrentUserContract,_ as GetOrgContract,v as GetOrgInputModel,y as InvitationModel,b as InviteMemberContract,x as InviteMemberInputModel,S as ListMembersContract,C as ListMembersInputModel,w as ListMembersOutputModel,G as ListRolesContract,K as ListRolesOutputModel,T as ListUserOrgsContract,E as ListUserOrgsOutputModel,q as ListUserPermissionsContract,J as ListUserPermissionsInputModel,Y as ListUserPermissionsOutputModel,a as ListUsersContract,o as ListUsersInputModel,s as ListUsersOutputModel,D as MemberModel,O as MemberRemovedPayloadModel,k as MemberUserModel,A as OrganizationModel,j as OrganizationWithRoleModel,X as PermissionCheckResultModel,Z as PolicyBindingModel,M as RemoveMemberContract,N as RemoveMemberInputModel,Q as RevokeRoleContract,$ as RevokeRoleInputModel,ee as RoleModel,c as SuccessResultModel,P as UpdateOrgContract,F as UpdateOrgInputModel,te as UpdateRoleContract,ne as UpdateRoleInputModel,l as UpdateUserContract,u as UpdateUserInputModel,d as UserDeletedPayloadModel,f as UserProfileModel};

package/dist/contracts/organization.js

@@ -1,607 +1 @@
-import { ScalarTypeEnum } from "../schema/dist/ScalarTypeEnum.js";
-import { SchemaModel } from "../schema/dist/SchemaModel.js";
-import "../schema/dist/index.js";
-import { defineCommand, defineQuery } from "./dist/spec.js";
-import "./dist/index.js";
-import { SuccessResultModel } from "./user.js";
-
-//#region src/contracts/organization.ts
-const OWNERS = ["platform.identity-rbac"];
-const OrganizationModel = new SchemaModel({
-	name: "Organization",
-	description: "Organization details",
-	fields: {
-		id: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: false
-		},
-		name: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: false
-		},
-		slug: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: true
-		},
-		logo: {
-			type: ScalarTypeEnum.URL(),
-			isOptional: true
-		},
-		description: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: true
-		},
-		type: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: false
-		},
-		onboardingCompleted: {
-			type: ScalarTypeEnum.Boolean(),
-			isOptional: false
-		},
-		createdAt: {
-			type: ScalarTypeEnum.DateTime(),
-			isOptional: false
-		}
-	}
-});
-const MemberUserModel = new SchemaModel({
-	name: "MemberUser",
-	description: "Basic user info within a member",
-	fields: {
-		id: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: false
-		},
-		email: {
-			type: ScalarTypeEnum.EmailAddress(),
-			isOptional: false
-		},
-		name: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: true
-		}
-	}
-});
-const MemberModel = new SchemaModel({
-	name: "Member",
-	description: "Organization member",
-	fields: {
-		id: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: false
-		},
-		userId: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: false
-		},
-		organizationId: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: false
-		},
-		role: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: false
-		},
-		createdAt: {
-			type: ScalarTypeEnum.DateTime(),
-			isOptional: false
-		},
-		user: {
-			type: MemberUserModel,
-			isOptional: false
-		}
-	}
-});
-const InvitationModel = new SchemaModel({
-	name: "Invitation",
-	description: "Organization invitation",
-	fields: {
-		id: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: false
-		},
-		email: {
-			type: ScalarTypeEnum.EmailAddress(),
-			isOptional: false
-		},
-		role: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: true
-		},
-		status: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: false
-		},
-		expiresAt: {
-			type: ScalarTypeEnum.DateTime(),
-			isOptional: true
-		},
-		createdAt: {
-			type: ScalarTypeEnum.DateTime(),
-			isOptional: false
-		}
-	}
-});
-const CreateOrgInputModel = new SchemaModel({
-	name: "CreateOrgInput",
-	description: "Input for creating an organization",
-	fields: {
-		name: {
-			type: ScalarTypeEnum.NonEmptyString(),
-			isOptional: false
-		},
-		slug: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: true
-		},
-		description: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: true
-		},
-		type: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: true
-		}
-	}
-});
-const GetOrgInputModel = new SchemaModel({
-	name: "GetOrgInput",
-	description: "Input for getting an organization",
-	fields: { orgId: {
-		type: ScalarTypeEnum.String_unsecure(),
-		isOptional: false
-	} }
-});
-const UpdateOrgInputModel = new SchemaModel({
-	name: "UpdateOrgInput",
-	description: "Input for updating an organization",
-	fields: {
-		orgId: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: false
-		},
-		name: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: true
-		},
-		slug: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: true
-		},
-		logo: {
-			type: ScalarTypeEnum.URL(),
-			isOptional: true
-		},
-		description: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: true
-		}
-	}
-});
-const InviteMemberInputModel = new SchemaModel({
-	name: "InviteMemberInput",
-	description: "Input for inviting a member",
-	fields: {
-		orgId: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: false
-		},
-		email: {
-			type: ScalarTypeEnum.EmailAddress(),
-			isOptional: false
-		},
-		role: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: false
-		},
-		teamId: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: true
-		}
-	}
-});
-const AcceptInviteInputModel = new SchemaModel({
-	name: "AcceptInviteInput",
-	description: "Input for accepting an invitation",
-	fields: { invitationId: {
-		type: ScalarTypeEnum.String_unsecure(),
-		isOptional: false
-	} }
-});
-const RemoveMemberInputModel = new SchemaModel({
-	name: "RemoveMemberInput",
-	description: "Input for removing a member",
-	fields: {
-		orgId: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: false
-		},
-		userId: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: false
-		}
-	}
-});
-const MemberRemovedPayloadModel = new SchemaModel({
-	name: "MemberRemovedPayload",
-	description: "Payload for member removed event",
-	fields: {
-		orgId: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: false
-		},
-		userId: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: false
-		}
-	}
-});
-const ListMembersInputModel = new SchemaModel({
-	name: "ListMembersInput",
-	description: "Input for listing members",
-	fields: {
-		orgId: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: false
-		},
-		limit: {
-			type: ScalarTypeEnum.Int_unsecure(),
-			isOptional: true
-		},
-		offset: {
-			type: ScalarTypeEnum.Int_unsecure(),
-			isOptional: true
-		}
-	}
-});
-const ListMembersOutputModel = new SchemaModel({
-	name: "ListMembersOutput",
-	description: "Output for listing members",
-	fields: {
-		members: {
-			type: MemberModel,
-			isOptional: false,
-			isArray: true
-		},
-		total: {
-			type: ScalarTypeEnum.Int_unsecure(),
-			isOptional: false
-		}
-	}
-});
-const OrganizationWithRoleModel = new SchemaModel({
-	name: "OrganizationWithRole",
-	description: "Organization with user role",
-	fields: {
-		id: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: false
-		},
-		name: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: false
-		},
-		slug: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: true
-		},
-		logo: {
-			type: ScalarTypeEnum.URL(),
-			isOptional: true
-		},
-		description: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: true
-		},
-		type: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: false
-		},
-		onboardingCompleted: {
-			type: ScalarTypeEnum.Boolean(),
-			isOptional: false
-		},
-		createdAt: {
-			type: ScalarTypeEnum.DateTime(),
-			isOptional: false
-		},
-		role: {
-			type: ScalarTypeEnum.String_unsecure(),
-			isOptional: false
-		}
-	}
-});
-const ListUserOrgsOutputModel = new SchemaModel({
-	name: "ListUserOrgsOutput",
-	description: "Output for listing user organizations",
-	fields: { organizations: {
-		type: OrganizationWithRoleModel,
-		isOptional: false,
-		isArray: true
-	} }
-});
-/**
-* Create a new organization.
-*/
-const CreateOrgContract = defineCommand({
-	meta: {
-		name: "identity.org.create",
-		version: 1,
-		stability: "stable",
-		owners: [...OWNERS],
-		tags: [
-			"identity",
-			"org",
-			"create"
-		],
-		description: "Create a new organization.",
-		goal: "Allow users to create new organizations/workspaces.",
-		context: "Called during onboarding or when creating additional workspaces."
-	},
-	io: {
-		input: CreateOrgInputModel,
-		output: OrganizationModel,
-		errors: { SLUG_EXISTS: {
-			description: "An organization with this slug already exists",
-			http: 409,
-			gqlCode: "SLUG_EXISTS",
-			when: "Slug is already taken"
-		} }
-	},
-	policy: { auth: "user" },
-	sideEffects: {
-		emits: [{
-			name: "org.created",
-			version: 1,
-			when: "Organization is created",
-			payload: OrganizationModel
-		}],
-		audit: ["org.created"]
-	}
-});
-/**
-* Get organization details.
-*/
-const GetOrgContract = defineQuery({
-	meta: {
-		name: "identity.org.get",
-		version: 1,
-		stability: "stable",
-		owners: [...OWNERS],
-		tags: [
-			"identity",
-			"org",
-			"get"
-		],
-		description: "Get organization details.",
-		goal: "Retrieve organization information.",
-		context: "Called when viewing organization settings or dashboard."
-	},
-	io: {
-		input: GetOrgInputModel,
-		output: OrganizationModel
-	},
-	policy: { auth: "user" }
-});
-/**
-* Update organization.
-*/
-const UpdateOrgContract = defineCommand({
-	meta: {
-		name: "identity.org.update",
-		version: 1,
-		stability: "stable",
-		owners: [...OWNERS],
-		tags: [
-			"identity",
-			"org",
-			"update"
-		],
-		description: "Update organization details.",
-		goal: "Allow org admins to update organization settings.",
-		context: "Organization settings page."
-	},
-	io: {
-		input: UpdateOrgInputModel,
-		output: OrganizationModel
-	},
-	policy: { auth: "user" },
-	sideEffects: {
-		emits: [{
-			name: "org.updated",
-			version: 1,
-			when: "Organization is updated",
-			payload: OrganizationModel
-		}],
-		audit: ["org.updated"]
-	}
-});
-/**
-* Invite a member to the organization.
-*/
-const InviteMemberContract = defineCommand({
-	meta: {
-		name: "identity.org.invite",
-		version: 1,
-		stability: "stable",
-		owners: [...OWNERS],
-		tags: [
-			"identity",
-			"org",
-			"invite",
-			"member"
-		],
-		description: "Invite a user to join the organization.",
-		goal: "Allow org admins to invite new members.",
-		context: "Team management. Sends invitation email."
-	},
-	io: {
-		input: InviteMemberInputModel,
-		output: InvitationModel,
-		errors: {
-			ALREADY_MEMBER: {
-				description: "User is already a member of this organization",
-				http: 409,
-				gqlCode: "ALREADY_MEMBER",
-				when: "Invitee is already a member"
-			},
-			INVITE_PENDING: {
-				description: "An invitation for this email is already pending",
-				http: 409,
-				gqlCode: "INVITE_PENDING",
-				when: "Active invitation exists"
-			}
-		}
-	},
-	policy: { auth: "user" },
-	sideEffects: {
-		emits: [{
-			name: "org.invite.sent",
-			version: 1,
-			when: "Invitation is sent",
-			payload: InvitationModel
-		}],
-		audit: ["org.invite.sent"]
-	}
-});
-/**
-* Accept an invitation.
-*/
-const AcceptInviteContract = defineCommand({
-	meta: {
-		name: "identity.org.invite.accept",
-		version: 1,
-		stability: "stable",
-		owners: [...OWNERS],
-		tags: [
-			"identity",
-			"org",
-			"invite",
-			"accept"
-		],
-		description: "Accept an organization invitation.",
-		goal: "Allow users to join organizations via invitation.",
-		context: "Called from invitation email link."
-	},
-	io: {
-		input: AcceptInviteInputModel,
-		output: MemberModel,
-		errors: {
-			INVITE_EXPIRED: {
-				description: "The invitation has expired",
-				http: 410,
-				gqlCode: "INVITE_EXPIRED",
-				when: "Invitation is past expiry date"
-			},
-			INVITE_USED: {
-				description: "The invitation has already been used",
-				http: 409,
-				gqlCode: "INVITE_USED",
-				when: "Invitation was already accepted"
-			}
-		}
-	},
-	policy: { auth: "user" },
-	sideEffects: {
-		emits: [{
-			name: "org.member.added",
-			version: 1,
-			when: "Member joins org",
-			payload: MemberModel
-		}],
-		audit: ["org.member.added"]
-	}
-});
-/**
-* Remove a member from the organization.
-*/
-const RemoveMemberContract = defineCommand({
-	meta: {
-		name: "identity.org.member.remove",
-		version: 1,
-		stability: "stable",
-		owners: [...OWNERS],
-		tags: [
-			"identity",
-			"org",
-			"member",
-			"remove"
-		],
-		description: "Remove a member from the organization.",
-		goal: "Allow org admins to remove members.",
-		context: "Team management."
-	},
-	io: {
-		input: RemoveMemberInputModel,
-		output: SuccessResultModel,
-		errors: { CANNOT_REMOVE_OWNER: {
-			description: "Cannot remove the organization owner",
-			http: 403,
-			gqlCode: "CANNOT_REMOVE_OWNER",
-			when: "Target is the org owner"
-		} }
-	},
-	policy: { auth: "user" },
-	sideEffects: {
-		emits: [{
-			name: "org.member.removed",
-			version: 1,
-			when: "Member is removed",
-			payload: MemberRemovedPayloadModel
-		}],
-		audit: ["org.member.removed"]
-	}
-});
-/**
-* List organization members.
-*/
-const ListMembersContract = defineQuery({
-	meta: {
-		name: "identity.org.members.list",
-		version: 1,
-		stability: "stable",
-		owners: [...OWNERS],
-		tags: [
-			"identity",
-			"org",
-			"member",
-			"list"
-		],
-		description: "List organization members.",
-		goal: "View all members of an organization.",
-		context: "Team management page."
-	},
-	io: {
-		input: ListMembersInputModel,
-		output: ListMembersOutputModel
-	},
-	policy: { auth: "user" }
-});
-/**
-* List user's organizations.
-*/
-const ListUserOrgsContract = defineQuery({
-	meta: {
-		name: "identity.org.list",
-		version: 1,
-		stability: "stable",
-		owners: [...OWNERS],
-		tags: [
-			"identity",
-			"org",
-			"list"
-		],
-		description: "List organizations the current user belongs to.",
-		goal: "Show user their organizations for workspace switching.",
-		context: "Workspace switcher, org selection."
-	},
-	io: {
-		input: null,
-		output: ListUserOrgsOutputModel
-	},
-	policy: { auth: "user" }
-});
-
-//#endregion
-export { AcceptInviteContract, AcceptInviteInputModel, CreateOrgContract, CreateOrgInputModel, GetOrgContract, GetOrgInputModel, InvitationModel, InviteMemberContract, InviteMemberInputModel, ListMembersContract, ListMembersInputModel, ListMembersOutputModel, ListUserOrgsContract, ListUserOrgsOutputModel, MemberModel, MemberRemovedPayloadModel, MemberUserModel, OrganizationModel, OrganizationWithRoleModel, RemoveMemberContract, RemoveMemberInputModel, UpdateOrgContract, UpdateOrgInputModel };
+import{SuccessResultModel as e}from"./user.js";import{ScalarTypeEnum as t,SchemaModel as n}from"@lssm/lib.schema";import{defineCommand as r,defineQuery as i}from"@lssm/lib.contracts";const a=[`platform.identity-rbac`],o=new n({name:`Organization`,description:`Organization details`,fields:{id:{type:t.String_unsecure(),isOptional:!1},name:{type:t.String_unsecure(),isOptional:!1},slug:{type:t.String_unsecure(),isOptional:!0},logo:{type:t.URL(),isOptional:!0},description:{type:t.String_unsecure(),isOptional:!0},type:{type:t.String_unsecure(),isOptional:!1},onboardingCompleted:{type:t.Boolean(),isOptional:!1},createdAt:{type:t.DateTime(),isOptional:!1}}}),s=new n({name:`MemberUser`,description:`Basic user info within a member`,fields:{id:{type:t.String_unsecure(),isOptional:!1},email:{type:t.EmailAddress(),isOptional:!1},name:{type:t.String_unsecure(),isOptional:!0}}}),c=new n({name:`Member`,description:`Organization member`,fields:{id:{type:t.String_unsecure(),isOptional:!1},userId:{type:t.String_unsecure(),isOptional:!1},organizationId:{type:t.String_unsecure(),isOptional:!1},role:{type:t.String_unsecure(),isOptional:!1},createdAt:{type:t.DateTime(),isOptional:!1},user:{type:s,isOptional:!1}}}),l=new n({name:`Invitation`,description:`Organization invitation`,fields:{id:{type:t.String_unsecure(),isOptional:!1},email:{type:t.EmailAddress(),isOptional:!1},role:{type:t.String_unsecure(),isOptional:!0},status:{type:t.String_unsecure(),isOptional:!1},expiresAt:{type:t.DateTime(),isOptional:!0},createdAt:{type:t.DateTime(),isOptional:!1}}}),u=new n({name:`CreateOrgInput`,description:`Input for creating an organization`,fields:{name:{type:t.NonEmptyString(),isOptional:!1},slug:{type:t.String_unsecure(),isOptional:!0},description:{type:t.String_unsecure(),isOptional:!0},type:{type:t.String_unsecure(),isOptional:!0}}}),d=new n({name:`GetOrgInput`,description:`Input for getting an organization`,fields:{orgId:{type:t.String_unsecure(),isOptional:!1}}}),f=new n({name:`UpdateOrgInput`,description:`Input for updating an organization`,fields:{orgId:{type:t.String_unsecure(),isOptional:!1},name:{type:t.String_unsecure(),isOptional:!0},slug:{type:t.String_unsecure(),isOptional:!0},logo:{type:t.URL(),isOptional:!0},description:{type:t.String_unsecure(),isOptional:!0}}}),p=new n({name:`InviteMemberInput`,description:`Input for inviting a member`,fields:{orgId:{type:t.String_unsecure(),isOptional:!1},email:{type:t.EmailAddress(),isOptional:!1},role:{type:t.String_unsecure(),isOptional:!1},teamId:{type:t.String_unsecure(),isOptional:!0}}}),m=new n({name:`AcceptInviteInput`,description:`Input for accepting an invitation`,fields:{invitationId:{type:t.String_unsecure(),isOptional:!1}}}),h=new n({name:`RemoveMemberInput`,description:`Input for removing a member`,fields:{orgId:{type:t.String_unsecure(),isOptional:!1},userId:{type:t.String_unsecure(),isOptional:!1}}}),g=new n({name:`MemberRemovedPayload`,description:`Payload for member removed event`,fields:{orgId:{type:t.String_unsecure(),isOptional:!1},userId:{type:t.String_unsecure(),isOptional:!1}}}),_=new n({name:`ListMembersInput`,description:`Input for listing members`,fields:{orgId:{type:t.String_unsecure(),isOptional:!1},limit:{type:t.Int_unsecure(),isOptional:!0},offset:{type:t.Int_unsecure(),isOptional:!0}}}),v=new n({name:`ListMembersOutput`,description:`Output for listing members`,fields:{members:{type:c,isOptional:!1,isArray:!0},total:{type:t.Int_unsecure(),isOptional:!1}}}),y=new n({name:`OrganizationWithRole`,description:`Organization with user role`,fields:{id:{type:t.String_unsecure(),isOptional:!1},name:{type:t.String_unsecure(),isOptional:!1},slug:{type:t.String_unsecure(),isOptional:!0},logo:{type:t.URL(),isOptional:!0},description:{type:t.String_unsecure(),isOptional:!0},type:{type:t.String_unsecure(),isOptional:!1},onboardingCompleted:{type:t.Boolean(),isOptional:!1},createdAt:{type:t.DateTime(),isOptional:!1},role:{type:t.String_unsecure(),isOptional:!1}}}),b=new n({name:`ListUserOrgsOutput`,description:`Output for listing user organizations`,fields:{organizations:{type:y,isOptional:!1,isArray:!0}}}),x=r({meta:{name:`identity.org.create`,version:1,stability:`stable`,owners:[...a],tags:[`identity`,`org`,`create`],description:`Create a new organization.`,goal:`Allow users to create new organizations/workspaces.`,context:`Called during onboarding or when creating additional workspaces.`},io:{input:u,output:o,errors:{SLUG_EXISTS:{description:`An organization with this slug already exists`,http:409,gqlCode:`SLUG_EXISTS`,when:`Slug is already taken`}}},policy:{auth:`user`},sideEffects:{emits:[{name:`org.created`,version:1,when:`Organization is created`,payload:o}],audit:[`org.created`]}}),S=i({meta:{name:`identity.org.get`,version:1,stability:`stable`,owners:[...a],tags:[`identity`,`org`,`get`],description:`Get organization details.`,goal:`Retrieve organization information.`,context:`Called when viewing organization settings or dashboard.`},io:{input:d,output:o},policy:{auth:`user`}}),C=r({meta:{name:`identity.org.update`,version:1,stability:`stable`,owners:[...a],tags:[`identity`,`org`,`update`],description:`Update organization details.`,goal:`Allow org admins to update organization settings.`,context:`Organization settings page.`},io:{input:f,output:o},policy:{auth:`user`},sideEffects:{emits:[{name:`org.updated`,version:1,when:`Organization is updated`,payload:o}],audit:[`org.updated`]}}),w=r({meta:{name:`identity.org.invite`,version:1,stability:`stable`,owners:[...a],tags:[`identity`,`org`,`invite`,`member`],description:`Invite a user to join the organization.`,goal:`Allow org admins to invite new members.`,context:`Team management. Sends invitation email.`},io:{input:p,output:l,errors:{ALREADY_MEMBER:{description:`User is already a member of this organization`,http:409,gqlCode:`ALREADY_MEMBER`,when:`Invitee is already a member`},INVITE_PENDING:{description:`An invitation for this email is already pending`,http:409,gqlCode:`INVITE_PENDING`,when:`Active invitation exists`}}},policy:{auth:`user`},sideEffects:{emits:[{name:`org.invite.sent`,version:1,when:`Invitation is sent`,payload:l}],audit:[`org.invite.sent`]}}),T=r({meta:{name:`identity.org.invite.accept`,version:1,stability:`stable`,owners:[...a],tags:[`identity`,`org`,`invite`,`accept`],description:`Accept an organization invitation.`,goal:`Allow users to join organizations via invitation.`,context:`Called from invitation email link.`},io:{input:m,output:c,errors:{INVITE_EXPIRED:{description:`The invitation has expired`,http:410,gqlCode:`INVITE_EXPIRED`,when:`Invitation is past expiry date`},INVITE_USED:{description:`The invitation has already been used`,http:409,gqlCode:`INVITE_USED`,when:`Invitation was already accepted`}}},policy:{auth:`user`},sideEffects:{emits:[{name:`org.member.added`,version:1,when:`Member joins org`,payload:c}],audit:[`org.member.added`]}}),E=r({meta:{name:`identity.org.member.remove`,version:1,stability:`stable`,owners:[...a],tags:[`identity`,`org`,`member`,`remove`],description:`Remove a member from the organization.`,goal:`Allow org admins to remove members.`,context:`Team management.`},io:{input:h,output:e,errors:{CANNOT_REMOVE_OWNER:{description:`Cannot remove the organization owner`,http:403,gqlCode:`CANNOT_REMOVE_OWNER`,when:`Target is the org owner`}}},policy:{auth:`user`},sideEffects:{emits:[{name:`org.member.removed`,version:1,when:`Member is removed`,payload:g}],audit:[`org.member.removed`]}}),D=i({meta:{name:`identity.org.members.list`,version:1,stability:`stable`,owners:[...a],tags:[`identity`,`org`,`member`,`list`],description:`List organization members.`,goal:`View all members of an organization.`,context:`Team management page.`},io:{input:_,output:v},policy:{auth:`user`}}),O=i({meta:{name:`identity.org.list`,version:1,stability:`stable`,owners:[...a],tags:[`identity`,`org`,`list`],description:`List organizations the current user belongs to.`,goal:`Show user their organizations for workspace switching.`,context:`Workspace switcher, org selection.`},io:{input:null,output:b},policy:{auth:`user`}});export{T as AcceptInviteContract,m as AcceptInviteInputModel,x as CreateOrgContract,u as CreateOrgInputModel,S as GetOrgContract,d as GetOrgInputModel,l as InvitationModel,w as InviteMemberContract,p as InviteMemberInputModel,D as ListMembersContract,_ as ListMembersInputModel,v as ListMembersOutputModel,O as ListUserOrgsContract,b as ListUserOrgsOutputModel,c as MemberModel,g as MemberRemovedPayloadModel,s as MemberUserModel,o as OrganizationModel,y as OrganizationWithRoleModel,E as RemoveMemberContract,h as RemoveMemberInputModel,C as UpdateOrgContract,f as UpdateOrgInputModel};