@m5kdev/commons 0.23.0 → 0.25.1

package/dist/src/modules/auth/auth.roles.cjs

@@ -0,0 +1,85 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+let zod = require("zod");
+const DEFAULT_AUTH_ROLES = {
+	user: {
+		roles: ["user", "admin"],
+		managerRoles: ["admin"],
+		assignableRoles: ["user", "admin"],
+		defaultRole: "user"
+	},
+	organization: {
+		roles: [
+			"member",
+			"admin",
+			"owner"
+		],
+		managerRoles: ["admin", "owner"],
+		assignableRoles: [
+			"member",
+			"admin",
+			"owner"
+		],
+		defaultRole: "member"
+	},
+	team: {
+		roles: ["owner"],
+		managerRoles: ["owner"],
+		assignableRoles: ["owner"],
+		defaultRole: "owner"
+	}
+};
+function pickSubset(values, allowed, fallback) {
+	const allowedSet = new Set(allowed);
+	const picked = values.filter((value) => allowedSet.has(value));
+	if (picked.length > 0) return picked;
+	const fallbackPicked = fallback.filter((value) => allowedSet.has(value));
+	if (fallbackPicked.length > 0) return fallbackPicked;
+	return allowed.length > 0 ? [allowed[0]] : [];
+}
+function normalizeRoleScopeConfig(scope, defaults) {
+	const roles = scope.roles.length > 0 ? scope.roles : defaults.roles;
+	const roleSet = new Set(roles);
+	const defaultRole = scope.defaultRole && roleSet.has(scope.defaultRole) ? scope.defaultRole : defaults.defaultRole && roleSet.has(defaults.defaultRole) ? defaults.defaultRole : roles[0];
+	return {
+		roles,
+		managerRoles: pickSubset(scope.managerRoles ?? defaults.managerRoles, roles, defaults.managerRoles),
+		assignableRoles: pickSubset(scope.assignableRoles ?? roles, roles, roles),
+		defaultRole
+	};
+}
+function normalizeAuthRolesConfig(config) {
+	if (!config) return DEFAULT_AUTH_ROLES;
+	return {
+		user: normalizeRoleScopeConfig(config.user, DEFAULT_AUTH_ROLES.user),
+		organization: normalizeRoleScopeConfig(config.organization, DEFAULT_AUTH_ROLES.organization),
+		team: normalizeRoleScopeConfig(config.team, DEFAULT_AUTH_ROLES.team)
+	};
+}
+function defineAuthRoles(config) {
+	return normalizeAuthRolesConfig(config);
+}
+function getRoleKeys(config, scope) {
+	return config[scope].roles;
+}
+function isAllowedRole(config, scope, role) {
+	return getRoleKeys(config, scope).includes(role);
+}
+function createRoleValueSchema(scope) {
+	const allowed = [...scope.roles];
+	if (allowed.length === 0) return zod.z.string();
+	return zod.z.enum(allowed);
+}
+function getAppRoleTranslationKey(scope, role) {
+	return `${scope}.role.${role}`;
+}
+//#endregion
+exports.DEFAULT_AUTH_ROLES = DEFAULT_AUTH_ROLES;
+exports.createRoleValueSchema = createRoleValueSchema;
+exports.defineAuthRoles = defineAuthRoles;
+exports.getAppRoleTranslationKey = getAppRoleTranslationKey;
+exports.getRoleKeys = getRoleKeys;
+exports.isAllowedRole = isAllowedRole;
+exports.normalizeAuthRolesConfig = normalizeAuthRolesConfig;
+exports.normalizeRoleScopeConfig = normalizeRoleScopeConfig;
+
+//# sourceMappingURL=auth.roles.cjs.map

package/dist/src/modules/auth/auth.roles.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.roles.cjs","names":["z"],"sources":["../../../../src/modules/auth/auth.roles.ts"],"sourcesContent":["import { z } from \"zod\";\r\n\r\nexport type AuthRoleScope = \"user\" | \"organization\" | \"team\";\r\n\r\nexport interface AuthRoleScopeConfig {\r\n  roles: readonly string[];\r\n  managerRoles?: readonly string[];\r\n  assignableRoles?: readonly string[];\r\n  defaultRole?: string;\r\n}\r\n\r\nexport interface AuthRolesConfig {\r\n  user: AuthRoleScopeConfig;\r\n  organization: AuthRoleScopeConfig;\r\n  team: AuthRoleScopeConfig;\r\n}\r\n\r\nexport interface NormalizedAuthRoleScopeConfig {\r\n  roles: readonly string[];\r\n  managerRoles: readonly string[];\r\n  assignableRoles: readonly string[];\r\n  defaultRole: string;\r\n}\r\n\r\nexport interface NormalizedAuthRolesConfig {\r\n  user: NormalizedAuthRoleScopeConfig;\r\n  organization: NormalizedAuthRoleScopeConfig;\r\n  team: NormalizedAuthRoleScopeConfig;\r\n}\r\n\r\nconst DEFAULT_USER_SCOPE: NormalizedAuthRoleScopeConfig = {\r\n  roles: [\"user\", \"admin\"],\r\n  managerRoles: [\"admin\"],\r\n  assignableRoles: [\"user\", \"admin\"],\r\n  defaultRole: \"user\",\r\n};\r\n\r\nconst DEFAULT_ORGANIZATION_SCOPE: NormalizedAuthRoleScopeConfig = {\r\n  roles: [\"member\", \"admin\", \"owner\"],\r\n  managerRoles: [\"admin\", \"owner\"],\r\n  assignableRoles: [\"member\", \"admin\", \"owner\"],\r\n  defaultRole: \"member\",\r\n};\r\n\r\nconst DEFAULT_TEAM_SCOPE: NormalizedAuthRoleScopeConfig = {\r\n  roles: [\"owner\"],\r\n  managerRoles: [\"owner\"],\r\n  assignableRoles: [\"owner\"],\r\n  defaultRole: \"owner\",\r\n};\r\n\r\nexport const DEFAULT_AUTH_ROLES: NormalizedAuthRolesConfig = {\r\n  user: DEFAULT_USER_SCOPE,\r\n  organization: DEFAULT_ORGANIZATION_SCOPE,\r\n  team: DEFAULT_TEAM_SCOPE,\r\n};\r\n\r\nfunction pickSubset(\r\n  values: readonly string[],\r\n  allowed: readonly string[],\r\n  fallback: readonly string[]\r\n): readonly string[] {\r\n  const allowedSet = new Set(allowed);\r\n  const picked = values.filter((value) => allowedSet.has(value));\r\n  if (picked.length > 0) {\r\n    return picked;\r\n  }\r\n\r\n  const fallbackPicked = fallback.filter((value) => allowedSet.has(value));\r\n  if (fallbackPicked.length > 0) {\r\n    return fallbackPicked;\r\n  }\r\n\r\n  return allowed.length > 0 ? [allowed[0]] : [];\r\n}\r\n\r\nexport function normalizeRoleScopeConfig(\r\n  scope: AuthRoleScopeConfig,\r\n  defaults: NormalizedAuthRoleScopeConfig\r\n): NormalizedAuthRoleScopeConfig {\r\n  const roles = scope.roles.length > 0 ? scope.roles : defaults.roles;\r\n  const roleSet = new Set(roles);\r\n\r\n  const defaultRole =\r\n    scope.defaultRole && roleSet.has(scope.defaultRole)\r\n      ? scope.defaultRole\r\n      : defaults.defaultRole && roleSet.has(defaults.defaultRole)\r\n        ? defaults.defaultRole\r\n        : roles[0];\r\n\r\n  const managerRoles = pickSubset(\r\n    scope.managerRoles ?? defaults.managerRoles,\r\n    roles,\r\n    defaults.managerRoles\r\n  );\r\n\r\n  const assignableRoles = pickSubset(\r\n    scope.assignableRoles ?? roles,\r\n    roles,\r\n    roles\r\n  );\r\n\r\n  return {\r\n    roles,\r\n    managerRoles,\r\n    assignableRoles,\r\n    defaultRole,\r\n  };\r\n}\r\n\r\nexport function normalizeAuthRolesConfig(\r\n  config?: AuthRolesConfig | null\r\n): NormalizedAuthRolesConfig {\r\n  if (!config) {\r\n    return DEFAULT_AUTH_ROLES;\r\n  }\r\n\r\n  return {\r\n    user: normalizeRoleScopeConfig(config.user, DEFAULT_AUTH_ROLES.user),\r\n    organization: normalizeRoleScopeConfig(config.organization, DEFAULT_AUTH_ROLES.organization),\r\n    team: normalizeRoleScopeConfig(config.team, DEFAULT_AUTH_ROLES.team),\r\n  };\r\n}\r\n\r\nexport function defineAuthRoles(config: AuthRolesConfig): NormalizedAuthRolesConfig {\r\n  return normalizeAuthRolesConfig(config);\r\n}\r\n\r\nexport function getRoleKeys(\r\n  config: NormalizedAuthRolesConfig,\r\n  scope: AuthRoleScope\r\n): readonly string[] {\r\n  return config[scope].roles;\r\n}\r\n\r\nexport function isAllowedRole(\r\n  config: NormalizedAuthRolesConfig,\r\n  scope: AuthRoleScope,\r\n  role: string\r\n): boolean {\r\n  return getRoleKeys(config, scope).includes(role);\r\n}\r\n\r\nexport function createRoleValueSchema(scope: NormalizedAuthRoleScopeConfig) {\r\n  const allowed = [...scope.roles];\r\n  if (allowed.length === 0) {\r\n    return z.string();\r\n  }\r\n  return z.enum(allowed as [string, ...string[]]);\r\n}\r\n\r\nexport function getAppRoleTranslationKey(scope: AuthRoleScope, role: string): string {\r\n  return `${scope}.role.${role}`;\r\n}\r\n"],"mappings":";;AAmDA,MAAa,qBAAgD;CAC3D,MAtBwD;EACxD,OAAO,CAAC,QAAQ,QAAQ;EACxB,cAAc,CAAC,QAAQ;EACvB,iBAAiB,CAAC,QAAQ,QAAQ;EAClC,aAAa;EACd;CAkBC,cAhBgE;EAChE,OAAO;GAAC;GAAU;GAAS;GAAQ;EACnC,cAAc,CAAC,SAAS,QAAQ;EAChC,iBAAiB;GAAC;GAAU;GAAS;GAAQ;EAC7C,aAAa;EACd;CAYC,MAVwD;EACxD,OAAO,CAAC,QAAQ;EAChB,cAAc,CAAC,QAAQ;EACvB,iBAAiB,CAAC,QAAQ;EAC1B,aAAa;EACd;CAMA;AAED,SAAS,WACP,QACA,SACA,UACmB;CACnB,MAAM,aAAa,IAAI,IAAI,QAAQ;CACnC,MAAM,SAAS,OAAO,QAAQ,UAAU,WAAW,IAAI,MAAM,CAAC;AAC9D,KAAI,OAAO,SAAS,EAClB,QAAO;CAGT,MAAM,iBAAiB,SAAS,QAAQ,UAAU,WAAW,IAAI,MAAM,CAAC;AACxE,KAAI,eAAe,SAAS,EAC1B,QAAO;AAGT,QAAO,QAAQ,SAAS,IAAI,CAAC,QAAQ,GAAG,GAAG,EAAE;;AAG/C,SAAgB,yBACd,OACA,UAC+B;CAC/B,MAAM,QAAQ,MAAM,MAAM,SAAS,IAAI,MAAM,QAAQ,SAAS;CAC9D,MAAM,UAAU,IAAI,IAAI,MAAM;CAE9B,MAAM,cACJ,MAAM,eAAe,QAAQ,IAAI,MAAM,YAAY,GAC/C,MAAM,cACN,SAAS,eAAe,QAAQ,IAAI,SAAS,YAAY,GACvD,SAAS,cACT,MAAM;AAcd,QAAO;EACL;EACA,cAdmB,WACnB,MAAM,gBAAgB,SAAS,cAC/B,OACA,SAAS,aACV;EAWC,iBATsB,WACtB,MAAM,mBAAmB,OACzB,OACA,MACD;EAMC;EACD;;AAGH,SAAgB,yBACd,QAC2B;AAC3B,KAAI,CAAC,OACH,QAAO;AAGT,QAAO;EACL,MAAM,yBAAyB,OAAO,MAAM,mBAAmB,KAAK;EACpE,cAAc,yBAAyB,OAAO,cAAc,mBAAmB,aAAa;EAC5F,MAAM,yBAAyB,OAAO,MAAM,mBAAmB,KAAK;EACrE;;AAGH,SAAgB,gBAAgB,QAAoD;AAClF,QAAO,yBAAyB,OAAO;;AAGzC,SAAgB,YACd,QACA,OACmB;AACnB,QAAO,OAAO,OAAO;;AAGvB,SAAgB,cACd,QACA,OACA,MACS;AACT,QAAO,YAAY,QAAQ,MAAM,CAAC,SAAS,KAAK;;AAGlD,SAAgB,sBAAsB,OAAsC;CAC1E,MAAM,UAAU,CAAC,GAAG,MAAM,MAAM;AAChC,KAAI,QAAQ,WAAW,EACrB,QAAOA,IAAAA,EAAE,QAAQ;AAEnB,QAAOA,IAAAA,EAAE,KAAK,QAAiC;;AAGjD,SAAgB,yBAAyB,OAAsB,MAAsB;AACnF,QAAO,GAAG,MAAM,QAAQ"}

package/dist/src/modules/auth/auth.roles.d.cts

@@ -0,0 +1,39 @@
+import { z } from "zod";
+
+//#region src/modules/auth/auth.roles.d.ts
+type AuthRoleScope = "user" | "organization" | "team";
+interface AuthRoleScopeConfig {
+  roles: readonly string[];
+  managerRoles?: readonly string[];
+  assignableRoles?: readonly string[];
+  defaultRole?: string;
+}
+interface AuthRolesConfig {
+  user: AuthRoleScopeConfig;
+  organization: AuthRoleScopeConfig;
+  team: AuthRoleScopeConfig;
+}
+interface NormalizedAuthRoleScopeConfig {
+  roles: readonly string[];
+  managerRoles: readonly string[];
+  assignableRoles: readonly string[];
+  defaultRole: string;
+}
+interface NormalizedAuthRolesConfig {
+  user: NormalizedAuthRoleScopeConfig;
+  organization: NormalizedAuthRoleScopeConfig;
+  team: NormalizedAuthRoleScopeConfig;
+}
+declare const DEFAULT_AUTH_ROLES: NormalizedAuthRolesConfig;
+declare function normalizeRoleScopeConfig(scope: AuthRoleScopeConfig, defaults: NormalizedAuthRoleScopeConfig): NormalizedAuthRoleScopeConfig;
+declare function normalizeAuthRolesConfig(config?: AuthRolesConfig | null): NormalizedAuthRolesConfig;
+declare function defineAuthRoles(config: AuthRolesConfig): NormalizedAuthRolesConfig;
+declare function getRoleKeys(config: NormalizedAuthRolesConfig, scope: AuthRoleScope): readonly string[];
+declare function isAllowedRole(config: NormalizedAuthRolesConfig, scope: AuthRoleScope, role: string): boolean;
+declare function createRoleValueSchema(scope: NormalizedAuthRoleScopeConfig): z.ZodString | z.ZodEnum<{
+  [x: string]: string;
+}>;
+declare function getAppRoleTranslationKey(scope: AuthRoleScope, role: string): string;
+//#endregion
+export { AuthRoleScope, AuthRoleScopeConfig, AuthRolesConfig, DEFAULT_AUTH_ROLES, NormalizedAuthRoleScopeConfig, NormalizedAuthRolesConfig, createRoleValueSchema, defineAuthRoles, getAppRoleTranslationKey, getRoleKeys, isAllowedRole, normalizeAuthRolesConfig, normalizeRoleScopeConfig };
+//# sourceMappingURL=auth.roles.d.cts.map

package/dist/src/modules/auth/auth.roles.d.mts

@@ -0,0 +1,39 @@
+import { z } from "zod";
+
+//#region src/modules/auth/auth.roles.d.ts
+type AuthRoleScope = "user" | "organization" | "team";
+interface AuthRoleScopeConfig {
+  roles: readonly string[];
+  managerRoles?: readonly string[];
+  assignableRoles?: readonly string[];
+  defaultRole?: string;
+}
+interface AuthRolesConfig {
+  user: AuthRoleScopeConfig;
+  organization: AuthRoleScopeConfig;
+  team: AuthRoleScopeConfig;
+}
+interface NormalizedAuthRoleScopeConfig {
+  roles: readonly string[];
+  managerRoles: readonly string[];
+  assignableRoles: readonly string[];
+  defaultRole: string;
+}
+interface NormalizedAuthRolesConfig {
+  user: NormalizedAuthRoleScopeConfig;
+  organization: NormalizedAuthRoleScopeConfig;
+  team: NormalizedAuthRoleScopeConfig;
+}
+declare const DEFAULT_AUTH_ROLES: NormalizedAuthRolesConfig;
+declare function normalizeRoleScopeConfig(scope: AuthRoleScopeConfig, defaults: NormalizedAuthRoleScopeConfig): NormalizedAuthRoleScopeConfig;
+declare function normalizeAuthRolesConfig(config?: AuthRolesConfig | null): NormalizedAuthRolesConfig;
+declare function defineAuthRoles(config: AuthRolesConfig): NormalizedAuthRolesConfig;
+declare function getRoleKeys(config: NormalizedAuthRolesConfig, scope: AuthRoleScope): readonly string[];
+declare function isAllowedRole(config: NormalizedAuthRolesConfig, scope: AuthRoleScope, role: string): boolean;
+declare function createRoleValueSchema(scope: NormalizedAuthRoleScopeConfig): z.ZodString | z.ZodEnum<{
+  [x: string]: string;
+}>;
+declare function getAppRoleTranslationKey(scope: AuthRoleScope, role: string): string;
+//#endregion
+export { AuthRoleScope, AuthRoleScopeConfig, AuthRolesConfig, DEFAULT_AUTH_ROLES, NormalizedAuthRoleScopeConfig, NormalizedAuthRolesConfig, createRoleValueSchema, defineAuthRoles, getAppRoleTranslationKey, getRoleKeys, isAllowedRole, normalizeAuthRolesConfig, normalizeRoleScopeConfig };
+//# sourceMappingURL=auth.roles.d.mts.map

package/dist/src/modules/auth/auth.roles.mjs

@@ -0,0 +1,77 @@
+import { z } from "zod";
+const DEFAULT_AUTH_ROLES = {
+	user: {
+		roles: ["user", "admin"],
+		managerRoles: ["admin"],
+		assignableRoles: ["user", "admin"],
+		defaultRole: "user"
+	},
+	organization: {
+		roles: [
+			"member",
+			"admin",
+			"owner"
+		],
+		managerRoles: ["admin", "owner"],
+		assignableRoles: [
+			"member",
+			"admin",
+			"owner"
+		],
+		defaultRole: "member"
+	},
+	team: {
+		roles: ["owner"],
+		managerRoles: ["owner"],
+		assignableRoles: ["owner"],
+		defaultRole: "owner"
+	}
+};
+function pickSubset(values, allowed, fallback) {
+	const allowedSet = new Set(allowed);
+	const picked = values.filter((value) => allowedSet.has(value));
+	if (picked.length > 0) return picked;
+	const fallbackPicked = fallback.filter((value) => allowedSet.has(value));
+	if (fallbackPicked.length > 0) return fallbackPicked;
+	return allowed.length > 0 ? [allowed[0]] : [];
+}
+function normalizeRoleScopeConfig(scope, defaults) {
+	const roles = scope.roles.length > 0 ? scope.roles : defaults.roles;
+	const roleSet = new Set(roles);
+	const defaultRole = scope.defaultRole && roleSet.has(scope.defaultRole) ? scope.defaultRole : defaults.defaultRole && roleSet.has(defaults.defaultRole) ? defaults.defaultRole : roles[0];
+	return {
+		roles,
+		managerRoles: pickSubset(scope.managerRoles ?? defaults.managerRoles, roles, defaults.managerRoles),
+		assignableRoles: pickSubset(scope.assignableRoles ?? roles, roles, roles),
+		defaultRole
+	};
+}
+function normalizeAuthRolesConfig(config) {
+	if (!config) return DEFAULT_AUTH_ROLES;
+	return {
+		user: normalizeRoleScopeConfig(config.user, DEFAULT_AUTH_ROLES.user),
+		organization: normalizeRoleScopeConfig(config.organization, DEFAULT_AUTH_ROLES.organization),
+		team: normalizeRoleScopeConfig(config.team, DEFAULT_AUTH_ROLES.team)
+	};
+}
+function defineAuthRoles(config) {
+	return normalizeAuthRolesConfig(config);
+}
+function getRoleKeys(config, scope) {
+	return config[scope].roles;
+}
+function isAllowedRole(config, scope, role) {
+	return getRoleKeys(config, scope).includes(role);
+}
+function createRoleValueSchema(scope) {
+	const allowed = [...scope.roles];
+	if (allowed.length === 0) return z.string();
+	return z.enum(allowed);
+}
+function getAppRoleTranslationKey(scope, role) {
+	return `${scope}.role.${role}`;
+}
+//#endregion
+export { DEFAULT_AUTH_ROLES, createRoleValueSchema, defineAuthRoles, getAppRoleTranslationKey, getRoleKeys, isAllowedRole, normalizeAuthRolesConfig, normalizeRoleScopeConfig };
+
+//# sourceMappingURL=auth.roles.mjs.map

package/dist/src/modules/auth/auth.roles.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.roles.mjs","names":[],"sources":["../../../../src/modules/auth/auth.roles.ts"],"sourcesContent":["import { z } from \"zod\";\r\n\r\nexport type AuthRoleScope = \"user\" | \"organization\" | \"team\";\r\n\r\nexport interface AuthRoleScopeConfig {\r\n  roles: readonly string[];\r\n  managerRoles?: readonly string[];\r\n  assignableRoles?: readonly string[];\r\n  defaultRole?: string;\r\n}\r\n\r\nexport interface AuthRolesConfig {\r\n  user: AuthRoleScopeConfig;\r\n  organization: AuthRoleScopeConfig;\r\n  team: AuthRoleScopeConfig;\r\n}\r\n\r\nexport interface NormalizedAuthRoleScopeConfig {\r\n  roles: readonly string[];\r\n  managerRoles: readonly string[];\r\n  assignableRoles: readonly string[];\r\n  defaultRole: string;\r\n}\r\n\r\nexport interface NormalizedAuthRolesConfig {\r\n  user: NormalizedAuthRoleScopeConfig;\r\n  organization: NormalizedAuthRoleScopeConfig;\r\n  team: NormalizedAuthRoleScopeConfig;\r\n}\r\n\r\nconst DEFAULT_USER_SCOPE: NormalizedAuthRoleScopeConfig = {\r\n  roles: [\"user\", \"admin\"],\r\n  managerRoles: [\"admin\"],\r\n  assignableRoles: [\"user\", \"admin\"],\r\n  defaultRole: \"user\",\r\n};\r\n\r\nconst DEFAULT_ORGANIZATION_SCOPE: NormalizedAuthRoleScopeConfig = {\r\n  roles: [\"member\", \"admin\", \"owner\"],\r\n  managerRoles: [\"admin\", \"owner\"],\r\n  assignableRoles: [\"member\", \"admin\", \"owner\"],\r\n  defaultRole: \"member\",\r\n};\r\n\r\nconst DEFAULT_TEAM_SCOPE: NormalizedAuthRoleScopeConfig = {\r\n  roles: [\"owner\"],\r\n  managerRoles: [\"owner\"],\r\n  assignableRoles: [\"owner\"],\r\n  defaultRole: \"owner\",\r\n};\r\n\r\nexport const DEFAULT_AUTH_ROLES: NormalizedAuthRolesConfig = {\r\n  user: DEFAULT_USER_SCOPE,\r\n  organization: DEFAULT_ORGANIZATION_SCOPE,\r\n  team: DEFAULT_TEAM_SCOPE,\r\n};\r\n\r\nfunction pickSubset(\r\n  values: readonly string[],\r\n  allowed: readonly string[],\r\n  fallback: readonly string[]\r\n): readonly string[] {\r\n  const allowedSet = new Set(allowed);\r\n  const picked = values.filter((value) => allowedSet.has(value));\r\n  if (picked.length > 0) {\r\n    return picked;\r\n  }\r\n\r\n  const fallbackPicked = fallback.filter((value) => allowedSet.has(value));\r\n  if (fallbackPicked.length > 0) {\r\n    return fallbackPicked;\r\n  }\r\n\r\n  return allowed.length > 0 ? [allowed[0]] : [];\r\n}\r\n\r\nexport function normalizeRoleScopeConfig(\r\n  scope: AuthRoleScopeConfig,\r\n  defaults: NormalizedAuthRoleScopeConfig\r\n): NormalizedAuthRoleScopeConfig {\r\n  const roles = scope.roles.length > 0 ? scope.roles : defaults.roles;\r\n  const roleSet = new Set(roles);\r\n\r\n  const defaultRole =\r\n    scope.defaultRole && roleSet.has(scope.defaultRole)\r\n      ? scope.defaultRole\r\n      : defaults.defaultRole && roleSet.has(defaults.defaultRole)\r\n        ? defaults.defaultRole\r\n        : roles[0];\r\n\r\n  const managerRoles = pickSubset(\r\n    scope.managerRoles ?? defaults.managerRoles,\r\n    roles,\r\n    defaults.managerRoles\r\n  );\r\n\r\n  const assignableRoles = pickSubset(\r\n    scope.assignableRoles ?? roles,\r\n    roles,\r\n    roles\r\n  );\r\n\r\n  return {\r\n    roles,\r\n    managerRoles,\r\n    assignableRoles,\r\n    defaultRole,\r\n  };\r\n}\r\n\r\nexport function normalizeAuthRolesConfig(\r\n  config?: AuthRolesConfig | null\r\n): NormalizedAuthRolesConfig {\r\n  if (!config) {\r\n    return DEFAULT_AUTH_ROLES;\r\n  }\r\n\r\n  return {\r\n    user: normalizeRoleScopeConfig(config.user, DEFAULT_AUTH_ROLES.user),\r\n    organization: normalizeRoleScopeConfig(config.organization, DEFAULT_AUTH_ROLES.organization),\r\n    team: normalizeRoleScopeConfig(config.team, DEFAULT_AUTH_ROLES.team),\r\n  };\r\n}\r\n\r\nexport function defineAuthRoles(config: AuthRolesConfig): NormalizedAuthRolesConfig {\r\n  return normalizeAuthRolesConfig(config);\r\n}\r\n\r\nexport function getRoleKeys(\r\n  config: NormalizedAuthRolesConfig,\r\n  scope: AuthRoleScope\r\n): readonly string[] {\r\n  return config[scope].roles;\r\n}\r\n\r\nexport function isAllowedRole(\r\n  config: NormalizedAuthRolesConfig,\r\n  scope: AuthRoleScope,\r\n  role: string\r\n): boolean {\r\n  return getRoleKeys(config, scope).includes(role);\r\n}\r\n\r\nexport function createRoleValueSchema(scope: NormalizedAuthRoleScopeConfig) {\r\n  const allowed = [...scope.roles];\r\n  if (allowed.length === 0) {\r\n    return z.string();\r\n  }\r\n  return z.enum(allowed as [string, ...string[]]);\r\n}\r\n\r\nexport function getAppRoleTranslationKey(scope: AuthRoleScope, role: string): string {\r\n  return `${scope}.role.${role}`;\r\n}\r\n"],"mappings":";AAmDA,MAAa,qBAAgD;CAC3D,MAtBwD;EACxD,OAAO,CAAC,QAAQ,QAAQ;EACxB,cAAc,CAAC,QAAQ;EACvB,iBAAiB,CAAC,QAAQ,QAAQ;EAClC,aAAa;EACd;CAkBC,cAhBgE;EAChE,OAAO;GAAC;GAAU;GAAS;GAAQ;EACnC,cAAc,CAAC,SAAS,QAAQ;EAChC,iBAAiB;GAAC;GAAU;GAAS;GAAQ;EAC7C,aAAa;EACd;CAYC,MAVwD;EACxD,OAAO,CAAC,QAAQ;EAChB,cAAc,CAAC,QAAQ;EACvB,iBAAiB,CAAC,QAAQ;EAC1B,aAAa;EACd;CAMA;AAED,SAAS,WACP,QACA,SACA,UACmB;CACnB,MAAM,aAAa,IAAI,IAAI,QAAQ;CACnC,MAAM,SAAS,OAAO,QAAQ,UAAU,WAAW,IAAI,MAAM,CAAC;AAC9D,KAAI,OAAO,SAAS,EAClB,QAAO;CAGT,MAAM,iBAAiB,SAAS,QAAQ,UAAU,WAAW,IAAI,MAAM,CAAC;AACxE,KAAI,eAAe,SAAS,EAC1B,QAAO;AAGT,QAAO,QAAQ,SAAS,IAAI,CAAC,QAAQ,GAAG,GAAG,EAAE;;AAG/C,SAAgB,yBACd,OACA,UAC+B;CAC/B,MAAM,QAAQ,MAAM,MAAM,SAAS,IAAI,MAAM,QAAQ,SAAS;CAC9D,MAAM,UAAU,IAAI,IAAI,MAAM;CAE9B,MAAM,cACJ,MAAM,eAAe,QAAQ,IAAI,MAAM,YAAY,GAC/C,MAAM,cACN,SAAS,eAAe,QAAQ,IAAI,SAAS,YAAY,GACvD,SAAS,cACT,MAAM;AAcd,QAAO;EACL;EACA,cAdmB,WACnB,MAAM,gBAAgB,SAAS,cAC/B,OACA,SAAS,aACV;EAWC,iBATsB,WACtB,MAAM,mBAAmB,OACzB,OACA,MACD;EAMC;EACD;;AAGH,SAAgB,yBACd,QAC2B;AAC3B,KAAI,CAAC,OACH,QAAO;AAGT,QAAO;EACL,MAAM,yBAAyB,OAAO,MAAM,mBAAmB,KAAK;EACpE,cAAc,yBAAyB,OAAO,cAAc,mBAAmB,aAAa;EAC5F,MAAM,yBAAyB,OAAO,MAAM,mBAAmB,KAAK;EACrE;;AAGH,SAAgB,gBAAgB,QAAoD;AAClF,QAAO,yBAAyB,OAAO;;AAGzC,SAAgB,YACd,QACA,OACmB;AACnB,QAAO,OAAO,OAAO;;AAGvB,SAAgB,cACd,QACA,OACA,MACS;AACT,QAAO,YAAY,QAAQ,MAAM,CAAC,SAAS,KAAK;;AAGlD,SAAgB,sBAAsB,OAAsC;CAC1E,MAAM,UAAU,CAAC,GAAG,MAAM,MAAM;AAChC,KAAI,QAAQ,WAAW,EACrB,QAAO,EAAE,QAAQ;AAEnB,QAAO,EAAE,KAAK,QAAiC;;AAGjD,SAAgB,yBAAyB,OAAsB,MAAsB;AACnF,QAAO,GAAG,MAAM,QAAQ"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m5kdev/commons",
-  "version": "0.23.0",
+  "version": "0.25.1",
   "license": "GPL-3.0-only",
   "repository": {
     "type": "git",
@@ -18,7 +18,7 @@
   "devDependencies": {
     "tsdown": "0.21.7",
     "typescript": "6.0.3",
-    "@m5kdev/config": "0.23.0"
+    "@m5kdev/config": "0.25.1"
   },
   "exports": {
     "./utils/*": {