@m5kdev/commons 0.21.9 → 0.25.0

package/dist/src/modules/auth/auth.constants.cjs

@@ -2,8 +2,10 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 //#region src/modules/auth/auth.constants.ts
 const ADMIN_CREATE_VERIFIED_USER_HEADER = "Admin-Create-Verified-User";
 const ADMIN_CREATE_VERIFIED_USER_HEADER_VALUE = "true";
+const USER_LOCALE_HEADER = "User-Locale";
 //#endregion
 exports.ADMIN_CREATE_VERIFIED_USER_HEADER = ADMIN_CREATE_VERIFIED_USER_HEADER;
 exports.ADMIN_CREATE_VERIFIED_USER_HEADER_VALUE = ADMIN_CREATE_VERIFIED_USER_HEADER_VALUE;
+exports.USER_LOCALE_HEADER = USER_LOCALE_HEADER;
 
 //# sourceMappingURL=auth.constants.cjs.map

package/dist/src/modules/auth/auth.constants.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"auth.constants.cjs","names":[],"sources":["../../../../src/modules/auth/auth.constants.ts"],"sourcesContent":["export const ADMIN_CREATE_VERIFIED_USER_HEADER = \"Admin-Create-Verified-User\" as const;\r\nexport const ADMIN_CREATE_VERIFIED_USER_HEADER_VALUE = \"true\" as const;\r\n"],"mappings":";;AAAA,MAAa,oCAAoC;AACjD,MAAa,0CAA0C"}
+{"version":3,"file":"auth.constants.cjs","names":[],"sources":["../../../../src/modules/auth/auth.constants.ts"],"sourcesContent":["export const ADMIN_CREATE_VERIFIED_USER_HEADER = \"Admin-Create-Verified-User\" as const;\r\nexport const ADMIN_CREATE_VERIFIED_USER_HEADER_VALUE = \"true\" as const;\r\nexport const USER_LOCALE_HEADER = \"User-Locale\" as const;\r\n"],"mappings":";;AAAA,MAAa,oCAAoC;AACjD,MAAa,0CAA0C;AACvD,MAAa,qBAAqB"}

package/dist/src/modules/auth/auth.constants.d.cts

@@ -1,6 +1,7 @@
 //#region src/modules/auth/auth.constants.d.ts
 declare const ADMIN_CREATE_VERIFIED_USER_HEADER: "Admin-Create-Verified-User";
 declare const ADMIN_CREATE_VERIFIED_USER_HEADER_VALUE: "true";
+declare const USER_LOCALE_HEADER: "User-Locale";
 //#endregion
-export { ADMIN_CREATE_VERIFIED_USER_HEADER, ADMIN_CREATE_VERIFIED_USER_HEADER_VALUE };
+export { ADMIN_CREATE_VERIFIED_USER_HEADER, ADMIN_CREATE_VERIFIED_USER_HEADER_VALUE, USER_LOCALE_HEADER };
 //# sourceMappingURL=auth.constants.d.cts.map

package/dist/src/modules/auth/auth.constants.d.mts

@@ -1,6 +1,7 @@
 //#region src/modules/auth/auth.constants.d.ts
 declare const ADMIN_CREATE_VERIFIED_USER_HEADER: "Admin-Create-Verified-User";
 declare const ADMIN_CREATE_VERIFIED_USER_HEADER_VALUE: "true";
+declare const USER_LOCALE_HEADER: "User-Locale";
 //#endregion
-export { ADMIN_CREATE_VERIFIED_USER_HEADER, ADMIN_CREATE_VERIFIED_USER_HEADER_VALUE };
+export { ADMIN_CREATE_VERIFIED_USER_HEADER, ADMIN_CREATE_VERIFIED_USER_HEADER_VALUE, USER_LOCALE_HEADER };
 //# sourceMappingURL=auth.constants.d.mts.map

package/dist/src/modules/auth/auth.constants.mjs

@@ -1,7 +1,8 @@
 //#region src/modules/auth/auth.constants.ts
 const ADMIN_CREATE_VERIFIED_USER_HEADER = "Admin-Create-Verified-User";
 const ADMIN_CREATE_VERIFIED_USER_HEADER_VALUE = "true";
+const USER_LOCALE_HEADER = "User-Locale";
 //#endregion
-export { ADMIN_CREATE_VERIFIED_USER_HEADER, ADMIN_CREATE_VERIFIED_USER_HEADER_VALUE };
+export { ADMIN_CREATE_VERIFIED_USER_HEADER, ADMIN_CREATE_VERIFIED_USER_HEADER_VALUE, USER_LOCALE_HEADER };
 
 //# sourceMappingURL=auth.constants.mjs.map

package/dist/src/modules/auth/auth.constants.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"auth.constants.mjs","names":[],"sources":["../../../../src/modules/auth/auth.constants.ts"],"sourcesContent":["export const ADMIN_CREATE_VERIFIED_USER_HEADER = \"Admin-Create-Verified-User\" as const;\r\nexport const ADMIN_CREATE_VERIFIED_USER_HEADER_VALUE = \"true\" as const;\r\n"],"mappings":";AAAA,MAAa,oCAAoC;AACjD,MAAa,0CAA0C"}
+{"version":3,"file":"auth.constants.mjs","names":[],"sources":["../../../../src/modules/auth/auth.constants.ts"],"sourcesContent":["export const ADMIN_CREATE_VERIFIED_USER_HEADER = \"Admin-Create-Verified-User\" as const;\r\nexport const ADMIN_CREATE_VERIFIED_USER_HEADER_VALUE = \"true\" as const;\r\nexport const USER_LOCALE_HEADER = \"User-Locale\" as const;\r\n"],"mappings":";AAAA,MAAa,oCAAoC;AACjD,MAAa,0CAA0C;AACvD,MAAa,qBAAqB"}

package/dist/src/modules/auth/auth.locale.cjs

@@ -0,0 +1,73 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+let zod = require("zod");
+//#region src/modules/auth/auth.locale.ts
+function getAllowedLocaleCodes(config) {
+	return config.locales.map((locale) => locale.code);
+}
+function getLocaleDisplayName(config, code) {
+	return config.locales.find((locale) => locale.code === code)?.displayName ?? code;
+}
+function normalizeLocaleTag(tag) {
+	const trimmed = tag.trim();
+	if (!trimmed) return null;
+	const parts = trimmed.replace(/_/g, "-").split("-").filter(Boolean);
+	if (parts.length === 0) return null;
+	const language = parts[0].toLowerCase();
+	const region = parts.length > 1 ? parts[1].toUpperCase() : null;
+	return {
+		language,
+		region,
+		compareKey: region ? `${language}_${region}` : language
+	};
+}
+function buildCompareKeyFromCanonical(canonical) {
+	return normalizeLocaleTag(canonical)?.compareKey ?? canonical.toLowerCase();
+}
+function toCanonicalLocale(tag, allowedLocales) {
+	const normalized = normalizeLocaleTag(tag);
+	if (!normalized) return null;
+	const allowedByKey = /* @__PURE__ */ new Map();
+	for (const locale of allowedLocales) allowedByKey.set(buildCompareKeyFromCanonical(locale), locale);
+	if (normalized.region) {
+		const regionMatch = allowedByKey.get(`${normalized.language}_${normalized.region}`);
+		if (regionMatch) return regionMatch;
+	}
+	if (!normalized.region) {
+		const languageMatch = allowedByKey.get(normalized.language);
+		if (languageMatch) return languageMatch;
+	}
+	if (normalized.region) {
+		const languageMatch = allowedByKey.get(normalized.language);
+		if (languageMatch) return languageMatch;
+	}
+	return null;
+}
+function toI18nLanguageTag(canonical) {
+	const normalized = normalizeLocaleTag(canonical);
+	if (!normalized) return canonical;
+	if (normalized.region) return `${normalized.language}-${normalized.region}`;
+	return normalized.language;
+}
+function resolveAppLocale(requested, config) {
+	const allowedLocales = getAllowedLocaleCodes(config);
+	if (requested) {
+		const canonical = toCanonicalLocale(requested, allowedLocales);
+		if (canonical) return canonical;
+	}
+	return toCanonicalLocale(config.defaultLocale, allowedLocales) ?? allowedLocales[0] ?? config.defaultLocale;
+}
+function createLocaleValueSchema(config) {
+	const allowed = [...getAllowedLocaleCodes(config)];
+	if (allowed.length === 0) return zod.z.string();
+	return zod.z.enum(allowed);
+}
+//#endregion
+exports.createLocaleValueSchema = createLocaleValueSchema;
+exports.getAllowedLocaleCodes = getAllowedLocaleCodes;
+exports.getLocaleDisplayName = getLocaleDisplayName;
+exports.normalizeLocaleTag = normalizeLocaleTag;
+exports.resolveAppLocale = resolveAppLocale;
+exports.toCanonicalLocale = toCanonicalLocale;
+exports.toI18nLanguageTag = toI18nLanguageTag;
+
+//# sourceMappingURL=auth.locale.cjs.map

package/dist/src/modules/auth/auth.locale.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.locale.cjs","names":["z"],"sources":["../../../../src/modules/auth/auth.locale.ts"],"sourcesContent":["import { z } from \"zod\";\r\n\r\nexport interface AuthLocaleDefinition {\r\n  code: string;\r\n  displayName: string;\r\n}\r\n\r\nexport interface AuthLocaleConfig {\r\n  defaultLocale: string;\r\n  locales: readonly AuthLocaleDefinition[];\r\n}\r\n\r\nexport function getAllowedLocaleCodes(config: AuthLocaleConfig): readonly string[] {\r\n  return config.locales.map((locale) => locale.code);\r\n}\r\n\r\nexport function getLocaleDisplayName(config: AuthLocaleConfig, code: string): string {\r\n  return config.locales.find((locale) => locale.code === code)?.displayName ?? code;\r\n}\r\n\r\nexport interface NormalizedLocaleTag {\r\n  language: string;\r\n  region: string | null;\r\n  compareKey: string;\r\n}\r\n\r\nexport function normalizeLocaleTag(tag: string): NormalizedLocaleTag | null {\r\n  const trimmed = tag.trim();\r\n  if (!trimmed) return null;\r\n\r\n  const parts = trimmed.replace(/_/g, \"-\").split(\"-\").filter(Boolean);\r\n  if (parts.length === 0) return null;\r\n\r\n  const language = parts[0].toLowerCase();\r\n  const region = parts.length > 1 ? parts[1].toUpperCase() : null;\r\n  const compareKey = region ? `${language}_${region}` : language;\r\n\r\n  return { language, region, compareKey };\r\n}\r\n\r\nfunction buildCompareKeyFromCanonical(canonical: string): string {\r\n  return normalizeLocaleTag(canonical)?.compareKey ?? canonical.toLowerCase();\r\n}\r\n\r\nexport function toCanonicalLocale(\r\n  tag: string,\r\n  allowedLocales: readonly string[]\r\n): string | null {\r\n  const normalized = normalizeLocaleTag(tag);\r\n  if (!normalized) return null;\r\n\r\n  const allowedByKey = new Map<string, string>();\r\n  for (const locale of allowedLocales) {\r\n    allowedByKey.set(buildCompareKeyFromCanonical(locale), locale);\r\n  }\r\n\r\n  if (normalized.region) {\r\n    const regionMatch = allowedByKey.get(`${normalized.language}_${normalized.region}`);\r\n    if (regionMatch) return regionMatch;\r\n  }\r\n\r\n  if (!normalized.region) {\r\n    const languageMatch = allowedByKey.get(normalized.language);\r\n    if (languageMatch) return languageMatch;\r\n  }\r\n\r\n  if (normalized.region) {\r\n    const languageMatch = allowedByKey.get(normalized.language);\r\n    if (languageMatch) return languageMatch;\r\n  }\r\n\r\n  return null;\r\n}\r\n\r\nexport function toI18nLanguageTag(canonical: string): string {\r\n  const normalized = normalizeLocaleTag(canonical);\r\n  if (!normalized) return canonical;\r\n  if (normalized.region) {\r\n    return `${normalized.language}-${normalized.region}`;\r\n  }\r\n  return normalized.language;\r\n}\r\n\r\nexport function resolveAppLocale(\r\n  requested: string | null | undefined,\r\n  config: AuthLocaleConfig\r\n): string {\r\n  const allowedLocales = getAllowedLocaleCodes(config);\r\n  if (requested) {\r\n    const canonical = toCanonicalLocale(requested, allowedLocales);\r\n    if (canonical) return canonical;\r\n  }\r\n\r\n  const defaultCanonical = toCanonicalLocale(config.defaultLocale, allowedLocales);\r\n  return defaultCanonical ?? allowedLocales[0] ?? config.defaultLocale;\r\n}\r\n\r\nexport function createLocaleValueSchema(config: AuthLocaleConfig) {\r\n  const allowed = [...getAllowedLocaleCodes(config)];\r\n  if (allowed.length === 0) {\r\n    return z.string();\r\n  }\r\n  return z.enum(allowed as [string, ...string[]]);\r\n}\r\n"],"mappings":";;;AAYA,SAAgB,sBAAsB,QAA6C;AACjF,QAAO,OAAO,QAAQ,KAAK,WAAW,OAAO,KAAK;;AAGpD,SAAgB,qBAAqB,QAA0B,MAAsB;AACnF,QAAO,OAAO,QAAQ,MAAM,WAAW,OAAO,SAAS,KAAK,EAAE,eAAe;;AAS/E,SAAgB,mBAAmB,KAAyC;CAC1E,MAAM,UAAU,IAAI,MAAM;AAC1B,KAAI,CAAC,QAAS,QAAO;CAErB,MAAM,QAAQ,QAAQ,QAAQ,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,QAAQ;AACnE,KAAI,MAAM,WAAW,EAAG,QAAO;CAE/B,MAAM,WAAW,MAAM,GAAG,aAAa;CACvC,MAAM,SAAS,MAAM,SAAS,IAAI,MAAM,GAAG,aAAa,GAAG;AAG3D,QAAO;EAAE;EAAU;EAAQ,YAFR,SAAS,GAAG,SAAS,GAAG,WAAW;EAEf;;AAGzC,SAAS,6BAA6B,WAA2B;AAC/D,QAAO,mBAAmB,UAAU,EAAE,cAAc,UAAU,aAAa;;AAG7E,SAAgB,kBACd,KACA,gBACe;CACf,MAAM,aAAa,mBAAmB,IAAI;AAC1C,KAAI,CAAC,WAAY,QAAO;CAExB,MAAM,+BAAe,IAAI,KAAqB;AAC9C,MAAK,MAAM,UAAU,eACnB,cAAa,IAAI,6BAA6B,OAAO,EAAE,OAAO;AAGhE,KAAI,WAAW,QAAQ;EACrB,MAAM,cAAc,aAAa,IAAI,GAAG,WAAW,SAAS,GAAG,WAAW,SAAS;AACnF,MAAI,YAAa,QAAO;;AAG1B,KAAI,CAAC,WAAW,QAAQ;EACtB,MAAM,gBAAgB,aAAa,IAAI,WAAW,SAAS;AAC3D,MAAI,cAAe,QAAO;;AAG5B,KAAI,WAAW,QAAQ;EACrB,MAAM,gBAAgB,aAAa,IAAI,WAAW,SAAS;AAC3D,MAAI,cAAe,QAAO;;AAG5B,QAAO;;AAGT,SAAgB,kBAAkB,WAA2B;CAC3D,MAAM,aAAa,mBAAmB,UAAU;AAChD,KAAI,CAAC,WAAY,QAAO;AACxB,KAAI,WAAW,OACb,QAAO,GAAG,WAAW,SAAS,GAAG,WAAW;AAE9C,QAAO,WAAW;;AAGpB,SAAgB,iBACd,WACA,QACQ;CACR,MAAM,iBAAiB,sBAAsB,OAAO;AACpD,KAAI,WAAW;EACb,MAAM,YAAY,kBAAkB,WAAW,eAAe;AAC9D,MAAI,UAAW,QAAO;;AAIxB,QADyB,kBAAkB,OAAO,eAAe,eAAe,IACrD,eAAe,MAAM,OAAO;;AAGzD,SAAgB,wBAAwB,QAA0B;CAChE,MAAM,UAAU,CAAC,GAAG,sBAAsB,OAAO,CAAC;AAClD,KAAI,QAAQ,WAAW,EACrB,QAAOA,IAAAA,EAAE,QAAQ;AAEnB,QAAOA,IAAAA,EAAE,KAAK,QAAiC"}

package/dist/src/modules/auth/auth.locale.d.cts

@@ -0,0 +1,28 @@
+import { z } from "zod";
+
+//#region src/modules/auth/auth.locale.d.ts
+interface AuthLocaleDefinition {
+  code: string;
+  displayName: string;
+}
+interface AuthLocaleConfig {
+  defaultLocale: string;
+  locales: readonly AuthLocaleDefinition[];
+}
+declare function getAllowedLocaleCodes(config: AuthLocaleConfig): readonly string[];
+declare function getLocaleDisplayName(config: AuthLocaleConfig, code: string): string;
+interface NormalizedLocaleTag {
+  language: string;
+  region: string | null;
+  compareKey: string;
+}
+declare function normalizeLocaleTag(tag: string): NormalizedLocaleTag | null;
+declare function toCanonicalLocale(tag: string, allowedLocales: readonly string[]): string | null;
+declare function toI18nLanguageTag(canonical: string): string;
+declare function resolveAppLocale(requested: string | null | undefined, config: AuthLocaleConfig): string;
+declare function createLocaleValueSchema(config: AuthLocaleConfig): z.ZodString | z.ZodEnum<{
+  [x: string]: string;
+}>;
+//#endregion
+export { AuthLocaleConfig, AuthLocaleDefinition, NormalizedLocaleTag, createLocaleValueSchema, getAllowedLocaleCodes, getLocaleDisplayName, normalizeLocaleTag, resolveAppLocale, toCanonicalLocale, toI18nLanguageTag };
+//# sourceMappingURL=auth.locale.d.cts.map

package/dist/src/modules/auth/auth.locale.d.mts

@@ -0,0 +1,28 @@
+import { z } from "zod";
+
+//#region src/modules/auth/auth.locale.d.ts
+interface AuthLocaleDefinition {
+  code: string;
+  displayName: string;
+}
+interface AuthLocaleConfig {
+  defaultLocale: string;
+  locales: readonly AuthLocaleDefinition[];
+}
+declare function getAllowedLocaleCodes(config: AuthLocaleConfig): readonly string[];
+declare function getLocaleDisplayName(config: AuthLocaleConfig, code: string): string;
+interface NormalizedLocaleTag {
+  language: string;
+  region: string | null;
+  compareKey: string;
+}
+declare function normalizeLocaleTag(tag: string): NormalizedLocaleTag | null;
+declare function toCanonicalLocale(tag: string, allowedLocales: readonly string[]): string | null;
+declare function toI18nLanguageTag(canonical: string): string;
+declare function resolveAppLocale(requested: string | null | undefined, config: AuthLocaleConfig): string;
+declare function createLocaleValueSchema(config: AuthLocaleConfig): z.ZodString | z.ZodEnum<{
+  [x: string]: string;
+}>;
+//#endregion
+export { AuthLocaleConfig, AuthLocaleDefinition, NormalizedLocaleTag, createLocaleValueSchema, getAllowedLocaleCodes, getLocaleDisplayName, normalizeLocaleTag, resolveAppLocale, toCanonicalLocale, toI18nLanguageTag };
+//# sourceMappingURL=auth.locale.d.mts.map

package/dist/src/modules/auth/auth.locale.mjs

@@ -0,0 +1,66 @@
+import { z } from "zod";
+//#region src/modules/auth/auth.locale.ts
+function getAllowedLocaleCodes(config) {
+	return config.locales.map((locale) => locale.code);
+}
+function getLocaleDisplayName(config, code) {
+	return config.locales.find((locale) => locale.code === code)?.displayName ?? code;
+}
+function normalizeLocaleTag(tag) {
+	const trimmed = tag.trim();
+	if (!trimmed) return null;
+	const parts = trimmed.replace(/_/g, "-").split("-").filter(Boolean);
+	if (parts.length === 0) return null;
+	const language = parts[0].toLowerCase();
+	const region = parts.length > 1 ? parts[1].toUpperCase() : null;
+	return {
+		language,
+		region,
+		compareKey: region ? `${language}_${region}` : language
+	};
+}
+function buildCompareKeyFromCanonical(canonical) {
+	return normalizeLocaleTag(canonical)?.compareKey ?? canonical.toLowerCase();
+}
+function toCanonicalLocale(tag, allowedLocales) {
+	const normalized = normalizeLocaleTag(tag);
+	if (!normalized) return null;
+	const allowedByKey = /* @__PURE__ */ new Map();
+	for (const locale of allowedLocales) allowedByKey.set(buildCompareKeyFromCanonical(locale), locale);
+	if (normalized.region) {
+		const regionMatch = allowedByKey.get(`${normalized.language}_${normalized.region}`);
+		if (regionMatch) return regionMatch;
+	}
+	if (!normalized.region) {
+		const languageMatch = allowedByKey.get(normalized.language);
+		if (languageMatch) return languageMatch;
+	}
+	if (normalized.region) {
+		const languageMatch = allowedByKey.get(normalized.language);
+		if (languageMatch) return languageMatch;
+	}
+	return null;
+}
+function toI18nLanguageTag(canonical) {
+	const normalized = normalizeLocaleTag(canonical);
+	if (!normalized) return canonical;
+	if (normalized.region) return `${normalized.language}-${normalized.region}`;
+	return normalized.language;
+}
+function resolveAppLocale(requested, config) {
+	const allowedLocales = getAllowedLocaleCodes(config);
+	if (requested) {
+		const canonical = toCanonicalLocale(requested, allowedLocales);
+		if (canonical) return canonical;
+	}
+	return toCanonicalLocale(config.defaultLocale, allowedLocales) ?? allowedLocales[0] ?? config.defaultLocale;
+}
+function createLocaleValueSchema(config) {
+	const allowed = [...getAllowedLocaleCodes(config)];
+	if (allowed.length === 0) return z.string();
+	return z.enum(allowed);
+}
+//#endregion
+export { createLocaleValueSchema, getAllowedLocaleCodes, getLocaleDisplayName, normalizeLocaleTag, resolveAppLocale, toCanonicalLocale, toI18nLanguageTag };
+
+//# sourceMappingURL=auth.locale.mjs.map

package/dist/src/modules/auth/auth.locale.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.locale.mjs","names":[],"sources":["../../../../src/modules/auth/auth.locale.ts"],"sourcesContent":["import { z } from \"zod\";\r\n\r\nexport interface AuthLocaleDefinition {\r\n  code: string;\r\n  displayName: string;\r\n}\r\n\r\nexport interface AuthLocaleConfig {\r\n  defaultLocale: string;\r\n  locales: readonly AuthLocaleDefinition[];\r\n}\r\n\r\nexport function getAllowedLocaleCodes(config: AuthLocaleConfig): readonly string[] {\r\n  return config.locales.map((locale) => locale.code);\r\n}\r\n\r\nexport function getLocaleDisplayName(config: AuthLocaleConfig, code: string): string {\r\n  return config.locales.find((locale) => locale.code === code)?.displayName ?? code;\r\n}\r\n\r\nexport interface NormalizedLocaleTag {\r\n  language: string;\r\n  region: string | null;\r\n  compareKey: string;\r\n}\r\n\r\nexport function normalizeLocaleTag(tag: string): NormalizedLocaleTag | null {\r\n  const trimmed = tag.trim();\r\n  if (!trimmed) return null;\r\n\r\n  const parts = trimmed.replace(/_/g, \"-\").split(\"-\").filter(Boolean);\r\n  if (parts.length === 0) return null;\r\n\r\n  const language = parts[0].toLowerCase();\r\n  const region = parts.length > 1 ? parts[1].toUpperCase() : null;\r\n  const compareKey = region ? `${language}_${region}` : language;\r\n\r\n  return { language, region, compareKey };\r\n}\r\n\r\nfunction buildCompareKeyFromCanonical(canonical: string): string {\r\n  return normalizeLocaleTag(canonical)?.compareKey ?? canonical.toLowerCase();\r\n}\r\n\r\nexport function toCanonicalLocale(\r\n  tag: string,\r\n  allowedLocales: readonly string[]\r\n): string | null {\r\n  const normalized = normalizeLocaleTag(tag);\r\n  if (!normalized) return null;\r\n\r\n  const allowedByKey = new Map<string, string>();\r\n  for (const locale of allowedLocales) {\r\n    allowedByKey.set(buildCompareKeyFromCanonical(locale), locale);\r\n  }\r\n\r\n  if (normalized.region) {\r\n    const regionMatch = allowedByKey.get(`${normalized.language}_${normalized.region}`);\r\n    if (regionMatch) return regionMatch;\r\n  }\r\n\r\n  if (!normalized.region) {\r\n    const languageMatch = allowedByKey.get(normalized.language);\r\n    if (languageMatch) return languageMatch;\r\n  }\r\n\r\n  if (normalized.region) {\r\n    const languageMatch = allowedByKey.get(normalized.language);\r\n    if (languageMatch) return languageMatch;\r\n  }\r\n\r\n  return null;\r\n}\r\n\r\nexport function toI18nLanguageTag(canonical: string): string {\r\n  const normalized = normalizeLocaleTag(canonical);\r\n  if (!normalized) return canonical;\r\n  if (normalized.region) {\r\n    return `${normalized.language}-${normalized.region}`;\r\n  }\r\n  return normalized.language;\r\n}\r\n\r\nexport function resolveAppLocale(\r\n  requested: string | null | undefined,\r\n  config: AuthLocaleConfig\r\n): string {\r\n  const allowedLocales = getAllowedLocaleCodes(config);\r\n  if (requested) {\r\n    const canonical = toCanonicalLocale(requested, allowedLocales);\r\n    if (canonical) return canonical;\r\n  }\r\n\r\n  const defaultCanonical = toCanonicalLocale(config.defaultLocale, allowedLocales);\r\n  return defaultCanonical ?? allowedLocales[0] ?? config.defaultLocale;\r\n}\r\n\r\nexport function createLocaleValueSchema(config: AuthLocaleConfig) {\r\n  const allowed = [...getAllowedLocaleCodes(config)];\r\n  if (allowed.length === 0) {\r\n    return z.string();\r\n  }\r\n  return z.enum(allowed as [string, ...string[]]);\r\n}\r\n"],"mappings":";;AAYA,SAAgB,sBAAsB,QAA6C;AACjF,QAAO,OAAO,QAAQ,KAAK,WAAW,OAAO,KAAK;;AAGpD,SAAgB,qBAAqB,QAA0B,MAAsB;AACnF,QAAO,OAAO,QAAQ,MAAM,WAAW,OAAO,SAAS,KAAK,EAAE,eAAe;;AAS/E,SAAgB,mBAAmB,KAAyC;CAC1E,MAAM,UAAU,IAAI,MAAM;AAC1B,KAAI,CAAC,QAAS,QAAO;CAErB,MAAM,QAAQ,QAAQ,QAAQ,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,QAAQ;AACnE,KAAI,MAAM,WAAW,EAAG,QAAO;CAE/B,MAAM,WAAW,MAAM,GAAG,aAAa;CACvC,MAAM,SAAS,MAAM,SAAS,IAAI,MAAM,GAAG,aAAa,GAAG;AAG3D,QAAO;EAAE;EAAU;EAAQ,YAFR,SAAS,GAAG,SAAS,GAAG,WAAW;EAEf;;AAGzC,SAAS,6BAA6B,WAA2B;AAC/D,QAAO,mBAAmB,UAAU,EAAE,cAAc,UAAU,aAAa;;AAG7E,SAAgB,kBACd,KACA,gBACe;CACf,MAAM,aAAa,mBAAmB,IAAI;AAC1C,KAAI,CAAC,WAAY,QAAO;CAExB,MAAM,+BAAe,IAAI,KAAqB;AAC9C,MAAK,MAAM,UAAU,eACnB,cAAa,IAAI,6BAA6B,OAAO,EAAE,OAAO;AAGhE,KAAI,WAAW,QAAQ;EACrB,MAAM,cAAc,aAAa,IAAI,GAAG,WAAW,SAAS,GAAG,WAAW,SAAS;AACnF,MAAI,YAAa,QAAO;;AAG1B,KAAI,CAAC,WAAW,QAAQ;EACtB,MAAM,gBAAgB,aAAa,IAAI,WAAW,SAAS;AAC3D,MAAI,cAAe,QAAO;;AAG5B,KAAI,WAAW,QAAQ;EACrB,MAAM,gBAAgB,aAAa,IAAI,WAAW,SAAS;AAC3D,MAAI,cAAe,QAAO;;AAG5B,QAAO;;AAGT,SAAgB,kBAAkB,WAA2B;CAC3D,MAAM,aAAa,mBAAmB,UAAU;AAChD,KAAI,CAAC,WAAY,QAAO;AACxB,KAAI,WAAW,OACb,QAAO,GAAG,WAAW,SAAS,GAAG,WAAW;AAE9C,QAAO,WAAW;;AAGpB,SAAgB,iBACd,WACA,QACQ;CACR,MAAM,iBAAiB,sBAAsB,OAAO;AACpD,KAAI,WAAW;EACb,MAAM,YAAY,kBAAkB,WAAW,eAAe;AAC9D,MAAI,UAAW,QAAO;;AAIxB,QADyB,kBAAkB,OAAO,eAAe,eAAe,IACrD,eAAe,MAAM,OAAO;;AAGzD,SAAgB,wBAAwB,QAA0B;CAChE,MAAM,UAAU,CAAC,GAAG,sBAAsB,OAAO,CAAC;AAClD,KAAI,QAAQ,WAAW,EACrB,QAAO,EAAE,QAAQ;AAEnB,QAAO,EAAE,KAAK,QAAiC"}

package/dist/src/modules/auth/auth.roles.cjs

@@ -0,0 +1,85 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+let zod = require("zod");
+const DEFAULT_AUTH_ROLES = {
+	user: {
+		roles: ["user", "admin"],
+		managerRoles: ["admin"],
+		assignableRoles: ["user", "admin"],
+		defaultRole: "user"
+	},
+	organization: {
+		roles: [
+			"member",
+			"admin",
+			"owner"
+		],
+		managerRoles: ["admin", "owner"],
+		assignableRoles: [
+			"member",
+			"admin",
+			"owner"
+		],
+		defaultRole: "member"
+	},
+	team: {
+		roles: ["owner"],
+		managerRoles: ["owner"],
+		assignableRoles: ["owner"],
+		defaultRole: "owner"
+	}
+};
+function pickSubset(values, allowed, fallback) {
+	const allowedSet = new Set(allowed);
+	const picked = values.filter((value) => allowedSet.has(value));
+	if (picked.length > 0) return picked;
+	const fallbackPicked = fallback.filter((value) => allowedSet.has(value));
+	if (fallbackPicked.length > 0) return fallbackPicked;
+	return allowed.length > 0 ? [allowed[0]] : [];
+}
+function normalizeRoleScopeConfig(scope, defaults) {
+	const roles = scope.roles.length > 0 ? scope.roles : defaults.roles;
+	const roleSet = new Set(roles);
+	const defaultRole = scope.defaultRole && roleSet.has(scope.defaultRole) ? scope.defaultRole : defaults.defaultRole && roleSet.has(defaults.defaultRole) ? defaults.defaultRole : roles[0];
+	return {
+		roles,
+		managerRoles: pickSubset(scope.managerRoles ?? defaults.managerRoles, roles, defaults.managerRoles),
+		assignableRoles: pickSubset(scope.assignableRoles ?? roles, roles, roles),
+		defaultRole
+	};
+}
+function normalizeAuthRolesConfig(config) {
+	if (!config) return DEFAULT_AUTH_ROLES;
+	return {
+		user: normalizeRoleScopeConfig(config.user, DEFAULT_AUTH_ROLES.user),
+		organization: normalizeRoleScopeConfig(config.organization, DEFAULT_AUTH_ROLES.organization),
+		team: normalizeRoleScopeConfig(config.team, DEFAULT_AUTH_ROLES.team)
+	};
+}
+function defineAuthRoles(config) {
+	return normalizeAuthRolesConfig(config);
+}
+function getRoleKeys(config, scope) {
+	return config[scope].roles;
+}
+function isAllowedRole(config, scope, role) {
+	return getRoleKeys(config, scope).includes(role);
+}
+function createRoleValueSchema(scope) {
+	const allowed = [...scope.roles];
+	if (allowed.length === 0) return zod.z.string();
+	return zod.z.enum(allowed);
+}
+function getAppRoleTranslationKey(scope, role) {
+	return `${scope}.role.${role}`;
+}
+//#endregion
+exports.DEFAULT_AUTH_ROLES = DEFAULT_AUTH_ROLES;
+exports.createRoleValueSchema = createRoleValueSchema;
+exports.defineAuthRoles = defineAuthRoles;
+exports.getAppRoleTranslationKey = getAppRoleTranslationKey;
+exports.getRoleKeys = getRoleKeys;
+exports.isAllowedRole = isAllowedRole;
+exports.normalizeAuthRolesConfig = normalizeAuthRolesConfig;
+exports.normalizeRoleScopeConfig = normalizeRoleScopeConfig;
+
+//# sourceMappingURL=auth.roles.cjs.map

package/dist/src/modules/auth/auth.roles.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.roles.cjs","names":["z"],"sources":["../../../../src/modules/auth/auth.roles.ts"],"sourcesContent":["import { z } from \"zod\";\r\n\r\nexport type AuthRoleScope = \"user\" | \"organization\" | \"team\";\r\n\r\nexport interface AuthRoleScopeConfig {\r\n  roles: readonly string[];\r\n  managerRoles?: readonly string[];\r\n  assignableRoles?: readonly string[];\r\n  defaultRole?: string;\r\n}\r\n\r\nexport interface AuthRolesConfig {\r\n  user: AuthRoleScopeConfig;\r\n  organization: AuthRoleScopeConfig;\r\n  team: AuthRoleScopeConfig;\r\n}\r\n\r\nexport interface NormalizedAuthRoleScopeConfig {\r\n  roles: readonly string[];\r\n  managerRoles: readonly string[];\r\n  assignableRoles: readonly string[];\r\n  defaultRole: string;\r\n}\r\n\r\nexport interface NormalizedAuthRolesConfig {\r\n  user: NormalizedAuthRoleScopeConfig;\r\n  organization: NormalizedAuthRoleScopeConfig;\r\n  team: NormalizedAuthRoleScopeConfig;\r\n}\r\n\r\nconst DEFAULT_USER_SCOPE: NormalizedAuthRoleScopeConfig = {\r\n  roles: [\"user\", \"admin\"],\r\n  managerRoles: [\"admin\"],\r\n  assignableRoles: [\"user\", \"admin\"],\r\n  defaultRole: \"user\",\r\n};\r\n\r\nconst DEFAULT_ORGANIZATION_SCOPE: NormalizedAuthRoleScopeConfig = {\r\n  roles: [\"member\", \"admin\", \"owner\"],\r\n  managerRoles: [\"admin\", \"owner\"],\r\n  assignableRoles: [\"member\", \"admin\", \"owner\"],\r\n  defaultRole: \"member\",\r\n};\r\n\r\nconst DEFAULT_TEAM_SCOPE: NormalizedAuthRoleScopeConfig = {\r\n  roles: [\"owner\"],\r\n  managerRoles: [\"owner\"],\r\n  assignableRoles: [\"owner\"],\r\n  defaultRole: \"owner\",\r\n};\r\n\r\nexport const DEFAULT_AUTH_ROLES: NormalizedAuthRolesConfig = {\r\n  user: DEFAULT_USER_SCOPE,\r\n  organization: DEFAULT_ORGANIZATION_SCOPE,\r\n  team: DEFAULT_TEAM_SCOPE,\r\n};\r\n\r\nfunction pickSubset(\r\n  values: readonly string[],\r\n  allowed: readonly string[],\r\n  fallback: readonly string[]\r\n): readonly string[] {\r\n  const allowedSet = new Set(allowed);\r\n  const picked = values.filter((value) => allowedSet.has(value));\r\n  if (picked.length > 0) {\r\n    return picked;\r\n  }\r\n\r\n  const fallbackPicked = fallback.filter((value) => allowedSet.has(value));\r\n  if (fallbackPicked.length > 0) {\r\n    return fallbackPicked;\r\n  }\r\n\r\n  return allowed.length > 0 ? [allowed[0]] : [];\r\n}\r\n\r\nexport function normalizeRoleScopeConfig(\r\n  scope: AuthRoleScopeConfig,\r\n  defaults: NormalizedAuthRoleScopeConfig\r\n): NormalizedAuthRoleScopeConfig {\r\n  const roles = scope.roles.length > 0 ? scope.roles : defaults.roles;\r\n  const roleSet = new Set(roles);\r\n\r\n  const defaultRole =\r\n    scope.defaultRole && roleSet.has(scope.defaultRole)\r\n      ? scope.defaultRole\r\n      : defaults.defaultRole && roleSet.has(defaults.defaultRole)\r\n        ? defaults.defaultRole\r\n        : roles[0];\r\n\r\n  const managerRoles = pickSubset(\r\n    scope.managerRoles ?? defaults.managerRoles,\r\n    roles,\r\n    defaults.managerRoles\r\n  );\r\n\r\n  const assignableRoles = pickSubset(\r\n    scope.assignableRoles ?? roles,\r\n    roles,\r\n    roles\r\n  );\r\n\r\n  return {\r\n    roles,\r\n    managerRoles,\r\n    assignableRoles,\r\n    defaultRole,\r\n  };\r\n}\r\n\r\nexport function normalizeAuthRolesConfig(\r\n  config?: AuthRolesConfig | null\r\n): NormalizedAuthRolesConfig {\r\n  if (!config) {\r\n    return DEFAULT_AUTH_ROLES;\r\n  }\r\n\r\n  return {\r\n    user: normalizeRoleScopeConfig(config.user, DEFAULT_AUTH_ROLES.user),\r\n    organization: normalizeRoleScopeConfig(config.organization, DEFAULT_AUTH_ROLES.organization),\r\n    team: normalizeRoleScopeConfig(config.team, DEFAULT_AUTH_ROLES.team),\r\n  };\r\n}\r\n\r\nexport function defineAuthRoles(config: AuthRolesConfig): NormalizedAuthRolesConfig {\r\n  return normalizeAuthRolesConfig(config);\r\n}\r\n\r\nexport function getRoleKeys(\r\n  config: NormalizedAuthRolesConfig,\r\n  scope: AuthRoleScope\r\n): readonly string[] {\r\n  return config[scope].roles;\r\n}\r\n\r\nexport function isAllowedRole(\r\n  config: NormalizedAuthRolesConfig,\r\n  scope: AuthRoleScope,\r\n  role: string\r\n): boolean {\r\n  return getRoleKeys(config, scope).includes(role);\r\n}\r\n\r\nexport function createRoleValueSchema(scope: NormalizedAuthRoleScopeConfig) {\r\n  const allowed = [...scope.roles];\r\n  if (allowed.length === 0) {\r\n    return z.string();\r\n  }\r\n  return z.enum(allowed as [string, ...string[]]);\r\n}\r\n\r\nexport function getAppRoleTranslationKey(scope: AuthRoleScope, role: string): string {\r\n  return `${scope}.role.${role}`;\r\n}\r\n"],"mappings":";;AAmDA,MAAa,qBAAgD;CAC3D,MAtBwD;EACxD,OAAO,CAAC,QAAQ,QAAQ;EACxB,cAAc,CAAC,QAAQ;EACvB,iBAAiB,CAAC,QAAQ,QAAQ;EAClC,aAAa;EACd;CAkBC,cAhBgE;EAChE,OAAO;GAAC;GAAU;GAAS;GAAQ;EACnC,cAAc,CAAC,SAAS,QAAQ;EAChC,iBAAiB;GAAC;GAAU;GAAS;GAAQ;EAC7C,aAAa;EACd;CAYC,MAVwD;EACxD,OAAO,CAAC,QAAQ;EAChB,cAAc,CAAC,QAAQ;EACvB,iBAAiB,CAAC,QAAQ;EAC1B,aAAa;EACd;CAMA;AAED,SAAS,WACP,QACA,SACA,UACmB;CACnB,MAAM,aAAa,IAAI,IAAI,QAAQ;CACnC,MAAM,SAAS,OAAO,QAAQ,UAAU,WAAW,IAAI,MAAM,CAAC;AAC9D,KAAI,OAAO,SAAS,EAClB,QAAO;CAGT,MAAM,iBAAiB,SAAS,QAAQ,UAAU,WAAW,IAAI,MAAM,CAAC;AACxE,KAAI,eAAe,SAAS,EAC1B,QAAO;AAGT,QAAO,QAAQ,SAAS,IAAI,CAAC,QAAQ,GAAG,GAAG,EAAE;;AAG/C,SAAgB,yBACd,OACA,UAC+B;CAC/B,MAAM,QAAQ,MAAM,MAAM,SAAS,IAAI,MAAM,QAAQ,SAAS;CAC9D,MAAM,UAAU,IAAI,IAAI,MAAM;CAE9B,MAAM,cACJ,MAAM,eAAe,QAAQ,IAAI,MAAM,YAAY,GAC/C,MAAM,cACN,SAAS,eAAe,QAAQ,IAAI,SAAS,YAAY,GACvD,SAAS,cACT,MAAM;AAcd,QAAO;EACL;EACA,cAdmB,WACnB,MAAM,gBAAgB,SAAS,cAC/B,OACA,SAAS,aACV;EAWC,iBATsB,WACtB,MAAM,mBAAmB,OACzB,OACA,MACD;EAMC;EACD;;AAGH,SAAgB,yBACd,QAC2B;AAC3B,KAAI,CAAC,OACH,QAAO;AAGT,QAAO;EACL,MAAM,yBAAyB,OAAO,MAAM,mBAAmB,KAAK;EACpE,cAAc,yBAAyB,OAAO,cAAc,mBAAmB,aAAa;EAC5F,MAAM,yBAAyB,OAAO,MAAM,mBAAmB,KAAK;EACrE;;AAGH,SAAgB,gBAAgB,QAAoD;AAClF,QAAO,yBAAyB,OAAO;;AAGzC,SAAgB,YACd,QACA,OACmB;AACnB,QAAO,OAAO,OAAO;;AAGvB,SAAgB,cACd,QACA,OACA,MACS;AACT,QAAO,YAAY,QAAQ,MAAM,CAAC,SAAS,KAAK;;AAGlD,SAAgB,sBAAsB,OAAsC;CAC1E,MAAM,UAAU,CAAC,GAAG,MAAM,MAAM;AAChC,KAAI,QAAQ,WAAW,EACrB,QAAOA,IAAAA,EAAE,QAAQ;AAEnB,QAAOA,IAAAA,EAAE,KAAK,QAAiC;;AAGjD,SAAgB,yBAAyB,OAAsB,MAAsB;AACnF,QAAO,GAAG,MAAM,QAAQ"}

package/dist/src/modules/auth/auth.roles.d.cts

@@ -0,0 +1,39 @@
+import { z } from "zod";
+
+//#region src/modules/auth/auth.roles.d.ts
+type AuthRoleScope = "user" | "organization" | "team";
+interface AuthRoleScopeConfig {
+  roles: readonly string[];
+  managerRoles?: readonly string[];
+  assignableRoles?: readonly string[];
+  defaultRole?: string;
+}
+interface AuthRolesConfig {
+  user: AuthRoleScopeConfig;
+  organization: AuthRoleScopeConfig;
+  team: AuthRoleScopeConfig;
+}
+interface NormalizedAuthRoleScopeConfig {
+  roles: readonly string[];
+  managerRoles: readonly string[];
+  assignableRoles: readonly string[];
+  defaultRole: string;
+}
+interface NormalizedAuthRolesConfig {
+  user: NormalizedAuthRoleScopeConfig;
+  organization: NormalizedAuthRoleScopeConfig;
+  team: NormalizedAuthRoleScopeConfig;
+}
+declare const DEFAULT_AUTH_ROLES: NormalizedAuthRolesConfig;
+declare function normalizeRoleScopeConfig(scope: AuthRoleScopeConfig, defaults: NormalizedAuthRoleScopeConfig): NormalizedAuthRoleScopeConfig;
+declare function normalizeAuthRolesConfig(config?: AuthRolesConfig | null): NormalizedAuthRolesConfig;
+declare function defineAuthRoles(config: AuthRolesConfig): NormalizedAuthRolesConfig;
+declare function getRoleKeys(config: NormalizedAuthRolesConfig, scope: AuthRoleScope): readonly string[];
+declare function isAllowedRole(config: NormalizedAuthRolesConfig, scope: AuthRoleScope, role: string): boolean;
+declare function createRoleValueSchema(scope: NormalizedAuthRoleScopeConfig): z.ZodString | z.ZodEnum<{
+  [x: string]: string;
+}>;
+declare function getAppRoleTranslationKey(scope: AuthRoleScope, role: string): string;
+//#endregion
+export { AuthRoleScope, AuthRoleScopeConfig, AuthRolesConfig, DEFAULT_AUTH_ROLES, NormalizedAuthRoleScopeConfig, NormalizedAuthRolesConfig, createRoleValueSchema, defineAuthRoles, getAppRoleTranslationKey, getRoleKeys, isAllowedRole, normalizeAuthRolesConfig, normalizeRoleScopeConfig };
+//# sourceMappingURL=auth.roles.d.cts.map

package/dist/src/modules/auth/auth.roles.d.mts

@@ -0,0 +1,39 @@
+import { z } from "zod";
+
+//#region src/modules/auth/auth.roles.d.ts
+type AuthRoleScope = "user" | "organization" | "team";
+interface AuthRoleScopeConfig {
+  roles: readonly string[];
+  managerRoles?: readonly string[];
+  assignableRoles?: readonly string[];
+  defaultRole?: string;
+}
+interface AuthRolesConfig {
+  user: AuthRoleScopeConfig;
+  organization: AuthRoleScopeConfig;
+  team: AuthRoleScopeConfig;
+}
+interface NormalizedAuthRoleScopeConfig {
+  roles: readonly string[];
+  managerRoles: readonly string[];
+  assignableRoles: readonly string[];
+  defaultRole: string;
+}
+interface NormalizedAuthRolesConfig {
+  user: NormalizedAuthRoleScopeConfig;
+  organization: NormalizedAuthRoleScopeConfig;
+  team: NormalizedAuthRoleScopeConfig;
+}
+declare const DEFAULT_AUTH_ROLES: NormalizedAuthRolesConfig;
+declare function normalizeRoleScopeConfig(scope: AuthRoleScopeConfig, defaults: NormalizedAuthRoleScopeConfig): NormalizedAuthRoleScopeConfig;
+declare function normalizeAuthRolesConfig(config?: AuthRolesConfig | null): NormalizedAuthRolesConfig;
+declare function defineAuthRoles(config: AuthRolesConfig): NormalizedAuthRolesConfig;
+declare function getRoleKeys(config: NormalizedAuthRolesConfig, scope: AuthRoleScope): readonly string[];
+declare function isAllowedRole(config: NormalizedAuthRolesConfig, scope: AuthRoleScope, role: string): boolean;
+declare function createRoleValueSchema(scope: NormalizedAuthRoleScopeConfig): z.ZodString | z.ZodEnum<{
+  [x: string]: string;
+}>;
+declare function getAppRoleTranslationKey(scope: AuthRoleScope, role: string): string;
+//#endregion
+export { AuthRoleScope, AuthRoleScopeConfig, AuthRolesConfig, DEFAULT_AUTH_ROLES, NormalizedAuthRoleScopeConfig, NormalizedAuthRolesConfig, createRoleValueSchema, defineAuthRoles, getAppRoleTranslationKey, getRoleKeys, isAllowedRole, normalizeAuthRolesConfig, normalizeRoleScopeConfig };
+//# sourceMappingURL=auth.roles.d.mts.map

package/dist/src/modules/auth/auth.roles.mjs

@@ -0,0 +1,77 @@
+import { z } from "zod";
+const DEFAULT_AUTH_ROLES = {
+	user: {
+		roles: ["user", "admin"],
+		managerRoles: ["admin"],
+		assignableRoles: ["user", "admin"],
+		defaultRole: "user"
+	},
+	organization: {
+		roles: [
+			"member",
+			"admin",
+			"owner"
+		],
+		managerRoles: ["admin", "owner"],
+		assignableRoles: [
+			"member",
+			"admin",
+			"owner"
+		],
+		defaultRole: "member"
+	},
+	team: {
+		roles: ["owner"],
+		managerRoles: ["owner"],
+		assignableRoles: ["owner"],
+		defaultRole: "owner"
+	}
+};
+function pickSubset(values, allowed, fallback) {
+	const allowedSet = new Set(allowed);
+	const picked = values.filter((value) => allowedSet.has(value));
+	if (picked.length > 0) return picked;
+	const fallbackPicked = fallback.filter((value) => allowedSet.has(value));
+	if (fallbackPicked.length > 0) return fallbackPicked;
+	return allowed.length > 0 ? [allowed[0]] : [];
+}
+function normalizeRoleScopeConfig(scope, defaults) {
+	const roles = scope.roles.length > 0 ? scope.roles : defaults.roles;
+	const roleSet = new Set(roles);
+	const defaultRole = scope.defaultRole && roleSet.has(scope.defaultRole) ? scope.defaultRole : defaults.defaultRole && roleSet.has(defaults.defaultRole) ? defaults.defaultRole : roles[0];
+	return {
+		roles,
+		managerRoles: pickSubset(scope.managerRoles ?? defaults.managerRoles, roles, defaults.managerRoles),
+		assignableRoles: pickSubset(scope.assignableRoles ?? roles, roles, roles),
+		defaultRole
+	};
+}
+function normalizeAuthRolesConfig(config) {
+	if (!config) return DEFAULT_AUTH_ROLES;
+	return {
+		user: normalizeRoleScopeConfig(config.user, DEFAULT_AUTH_ROLES.user),
+		organization: normalizeRoleScopeConfig(config.organization, DEFAULT_AUTH_ROLES.organization),
+		team: normalizeRoleScopeConfig(config.team, DEFAULT_AUTH_ROLES.team)
+	};
+}
+function defineAuthRoles(config) {
+	return normalizeAuthRolesConfig(config);
+}
+function getRoleKeys(config, scope) {
+	return config[scope].roles;
+}
+function isAllowedRole(config, scope, role) {
+	return getRoleKeys(config, scope).includes(role);
+}
+function createRoleValueSchema(scope) {
+	const allowed = [...scope.roles];
+	if (allowed.length === 0) return z.string();
+	return z.enum(allowed);
+}
+function getAppRoleTranslationKey(scope, role) {
+	return `${scope}.role.${role}`;
+}
+//#endregion
+export { DEFAULT_AUTH_ROLES, createRoleValueSchema, defineAuthRoles, getAppRoleTranslationKey, getRoleKeys, isAllowedRole, normalizeAuthRolesConfig, normalizeRoleScopeConfig };
+
+//# sourceMappingURL=auth.roles.mjs.map

package/dist/src/modules/auth/auth.roles.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.roles.mjs","names":[],"sources":["../../../../src/modules/auth/auth.roles.ts"],"sourcesContent":["import { z } from \"zod\";\r\n\r\nexport type AuthRoleScope = \"user\" | \"organization\" | \"team\";\r\n\r\nexport interface AuthRoleScopeConfig {\r\n  roles: readonly string[];\r\n  managerRoles?: readonly string[];\r\n  assignableRoles?: readonly string[];\r\n  defaultRole?: string;\r\n}\r\n\r\nexport interface AuthRolesConfig {\r\n  user: AuthRoleScopeConfig;\r\n  organization: AuthRoleScopeConfig;\r\n  team: AuthRoleScopeConfig;\r\n}\r\n\r\nexport interface NormalizedAuthRoleScopeConfig {\r\n  roles: readonly string[];\r\n  managerRoles: readonly string[];\r\n  assignableRoles: readonly string[];\r\n  defaultRole: string;\r\n}\r\n\r\nexport interface NormalizedAuthRolesConfig {\r\n  user: NormalizedAuthRoleScopeConfig;\r\n  organization: NormalizedAuthRoleScopeConfig;\r\n  team: NormalizedAuthRoleScopeConfig;\r\n}\r\n\r\nconst DEFAULT_USER_SCOPE: NormalizedAuthRoleScopeConfig = {\r\n  roles: [\"user\", \"admin\"],\r\n  managerRoles: [\"admin\"],\r\n  assignableRoles: [\"user\", \"admin\"],\r\n  defaultRole: \"user\",\r\n};\r\n\r\nconst DEFAULT_ORGANIZATION_SCOPE: NormalizedAuthRoleScopeConfig = {\r\n  roles: [\"member\", \"admin\", \"owner\"],\r\n  managerRoles: [\"admin\", \"owner\"],\r\n  assignableRoles: [\"member\", \"admin\", \"owner\"],\r\n  defaultRole: \"member\",\r\n};\r\n\r\nconst DEFAULT_TEAM_SCOPE: NormalizedAuthRoleScopeConfig = {\r\n  roles: [\"owner\"],\r\n  managerRoles: [\"owner\"],\r\n  assignableRoles: [\"owner\"],\r\n  defaultRole: \"owner\",\r\n};\r\n\r\nexport const DEFAULT_AUTH_ROLES: NormalizedAuthRolesConfig = {\r\n  user: DEFAULT_USER_SCOPE,\r\n  organization: DEFAULT_ORGANIZATION_SCOPE,\r\n  team: DEFAULT_TEAM_SCOPE,\r\n};\r\n\r\nfunction pickSubset(\r\n  values: readonly string[],\r\n  allowed: readonly string[],\r\n  fallback: readonly string[]\r\n): readonly string[] {\r\n  const allowedSet = new Set(allowed);\r\n  const picked = values.filter((value) => allowedSet.has(value));\r\n  if (picked.length > 0) {\r\n    return picked;\r\n  }\r\n\r\n  const fallbackPicked = fallback.filter((value) => allowedSet.has(value));\r\n  if (fallbackPicked.length > 0) {\r\n    return fallbackPicked;\r\n  }\r\n\r\n  return allowed.length > 0 ? [allowed[0]] : [];\r\n}\r\n\r\nexport function normalizeRoleScopeConfig(\r\n  scope: AuthRoleScopeConfig,\r\n  defaults: NormalizedAuthRoleScopeConfig\r\n): NormalizedAuthRoleScopeConfig {\r\n  const roles = scope.roles.length > 0 ? scope.roles : defaults.roles;\r\n  const roleSet = new Set(roles);\r\n\r\n  const defaultRole =\r\n    scope.defaultRole && roleSet.has(scope.defaultRole)\r\n      ? scope.defaultRole\r\n      : defaults.defaultRole && roleSet.has(defaults.defaultRole)\r\n        ? defaults.defaultRole\r\n        : roles[0];\r\n\r\n  const managerRoles = pickSubset(\r\n    scope.managerRoles ?? defaults.managerRoles,\r\n    roles,\r\n    defaults.managerRoles\r\n  );\r\n\r\n  const assignableRoles = pickSubset(\r\n    scope.assignableRoles ?? roles,\r\n    roles,\r\n    roles\r\n  );\r\n\r\n  return {\r\n    roles,\r\n    managerRoles,\r\n    assignableRoles,\r\n    defaultRole,\r\n  };\r\n}\r\n\r\nexport function normalizeAuthRolesConfig(\r\n  config?: AuthRolesConfig | null\r\n): NormalizedAuthRolesConfig {\r\n  if (!config) {\r\n    return DEFAULT_AUTH_ROLES;\r\n  }\r\n\r\n  return {\r\n    user: normalizeRoleScopeConfig(config.user, DEFAULT_AUTH_ROLES.user),\r\n    organization: normalizeRoleScopeConfig(config.organization, DEFAULT_AUTH_ROLES.organization),\r\n    team: normalizeRoleScopeConfig(config.team, DEFAULT_AUTH_ROLES.team),\r\n  };\r\n}\r\n\r\nexport function defineAuthRoles(config: AuthRolesConfig): NormalizedAuthRolesConfig {\r\n  return normalizeAuthRolesConfig(config);\r\n}\r\n\r\nexport function getRoleKeys(\r\n  config: NormalizedAuthRolesConfig,\r\n  scope: AuthRoleScope\r\n): readonly string[] {\r\n  return config[scope].roles;\r\n}\r\n\r\nexport function isAllowedRole(\r\n  config: NormalizedAuthRolesConfig,\r\n  scope: AuthRoleScope,\r\n  role: string\r\n): boolean {\r\n  return getRoleKeys(config, scope).includes(role);\r\n}\r\n\r\nexport function createRoleValueSchema(scope: NormalizedAuthRoleScopeConfig) {\r\n  const allowed = [...scope.roles];\r\n  if (allowed.length === 0) {\r\n    return z.string();\r\n  }\r\n  return z.enum(allowed as [string, ...string[]]);\r\n}\r\n\r\nexport function getAppRoleTranslationKey(scope: AuthRoleScope, role: string): string {\r\n  return `${scope}.role.${role}`;\r\n}\r\n"],"mappings":";AAmDA,MAAa,qBAAgD;CAC3D,MAtBwD;EACxD,OAAO,CAAC,QAAQ,QAAQ;EACxB,cAAc,CAAC,QAAQ;EACvB,iBAAiB,CAAC,QAAQ,QAAQ;EAClC,aAAa;EACd;CAkBC,cAhBgE;EAChE,OAAO;GAAC;GAAU;GAAS;GAAQ;EACnC,cAAc,CAAC,SAAS,QAAQ;EAChC,iBAAiB;GAAC;GAAU;GAAS;GAAQ;EAC7C,aAAa;EACd;CAYC,MAVwD;EACxD,OAAO,CAAC,QAAQ;EAChB,cAAc,CAAC,QAAQ;EACvB,iBAAiB,CAAC,QAAQ;EAC1B,aAAa;EACd;CAMA;AAED,SAAS,WACP,QACA,SACA,UACmB;CACnB,MAAM,aAAa,IAAI,IAAI,QAAQ;CACnC,MAAM,SAAS,OAAO,QAAQ,UAAU,WAAW,IAAI,MAAM,CAAC;AAC9D,KAAI,OAAO,SAAS,EAClB,QAAO;CAGT,MAAM,iBAAiB,SAAS,QAAQ,UAAU,WAAW,IAAI,MAAM,CAAC;AACxE,KAAI,eAAe,SAAS,EAC1B,QAAO;AAGT,QAAO,QAAQ,SAAS,IAAI,CAAC,QAAQ,GAAG,GAAG,EAAE;;AAG/C,SAAgB,yBACd,OACA,UAC+B;CAC/B,MAAM,QAAQ,MAAM,MAAM,SAAS,IAAI,MAAM,QAAQ,SAAS;CAC9D,MAAM,UAAU,IAAI,IAAI,MAAM;CAE9B,MAAM,cACJ,MAAM,eAAe,QAAQ,IAAI,MAAM,YAAY,GAC/C,MAAM,cACN,SAAS,eAAe,QAAQ,IAAI,SAAS,YAAY,GACvD,SAAS,cACT,MAAM;AAcd,QAAO;EACL;EACA,cAdmB,WACnB,MAAM,gBAAgB,SAAS,cAC/B,OACA,SAAS,aACV;EAWC,iBATsB,WACtB,MAAM,mBAAmB,OACzB,OACA,MACD;EAMC;EACD;;AAGH,SAAgB,yBACd,QAC2B;AAC3B,KAAI,CAAC,OACH,QAAO;AAGT,QAAO;EACL,MAAM,yBAAyB,OAAO,MAAM,mBAAmB,KAAK;EACpE,cAAc,yBAAyB,OAAO,cAAc,mBAAmB,aAAa;EAC5F,MAAM,yBAAyB,OAAO,MAAM,mBAAmB,KAAK;EACrE;;AAGH,SAAgB,gBAAgB,QAAoD;AAClF,QAAO,yBAAyB,OAAO;;AAGzC,SAAgB,YACd,QACA,OACmB;AACnB,QAAO,OAAO,OAAO;;AAGvB,SAAgB,cACd,QACA,OACA,MACS;AACT,QAAO,YAAY,QAAQ,MAAM,CAAC,SAAS,KAAK;;AAGlD,SAAgB,sBAAsB,OAAsC;CAC1E,MAAM,UAAU,CAAC,GAAG,MAAM,MAAM;AAChC,KAAI,QAAQ,WAAW,EACrB,QAAO,EAAE,QAAQ;AAEnB,QAAO,EAAE,KAAK,QAAiC;;AAGjD,SAAgB,yBAAyB,OAAsB,MAAsB;AACnF,QAAO,GAAG,MAAM,QAAQ"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m5kdev/commons",
-  "version": "0.21.9",
+  "version": "0.25.0",
   "license": "GPL-3.0-only",
   "repository": {
     "type": "git",
@@ -18,7 +18,7 @@
   "devDependencies": {
     "tsdown": "0.21.7",
     "typescript": "6.0.3",
-    "@m5kdev/config": "0.21.9"
+    "@m5kdev/config": "0.25.0"
   },
   "exports": {
     "./utils/*": {