@mostajs/rbac 1.0.3 → 1.0.5

package/dist/lib/route-handlers.d.ts

@@ -0,0 +1,42 @@
+export declare const usersHandlers: {
+    GET: any;
+    POST: any;
+};
+export declare const usersIdHandlers: {
+    GET: any;
+    PUT: any;
+    DELETE: any;
+};
+export declare const rolesHandlers: {
+    GET: any;
+    POST: any;
+};
+export declare const rolesIdHandlers: {
+    GET: any;
+    PUT: any;
+    DELETE: any;
+};
+export declare const permissionsHandlers: {
+    GET: any;
+    POST: any;
+};
+export declare const permissionsIdHandlers: {
+    PUT: any;
+    DELETE: any;
+};
+export declare const categoriesHandlers: {
+    GET: any;
+    POST: any;
+};
+export declare const categoriesIdHandlers: {
+    PUT: any;
+    DELETE: any;
+};
+export declare const matrixHandlers: {
+    GET: any;
+    POST: any;
+};
+export declare const seedHandlers: {
+    POST: any;
+};
+//# sourceMappingURL=route-handlers.d.ts.map

package/dist/lib/route-handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-handlers.d.ts","sourceRoot":"","sources":["../../lib/route-handlers.ts"],"names":[],"mappings":"AAmEA,eAAO,MAAM,aAAa;SAAuB,GAAG;UAAsB,GAAG;CAAE,CAAA;AAC/E,eAAO,MAAM,eAAe;SAAyB,GAAG;SAAsB,GAAG;YAA4B,GAAG;CAAE,CAAA;AAClH,eAAO,MAAM,aAAa;SAAuB,GAAG;UAAsB,GAAG;CAAE,CAAA;AAC/E,eAAO,MAAM,eAAe;SAAyB,GAAG;SAAsB,GAAG;YAA4B,GAAG;CAAE,CAAA;AAClH,eAAO,MAAM,mBAAmB;SAA6B,GAAG;UAA4B,GAAG;CAAE,CAAA;AACjG,eAAO,MAAM,qBAAqB;SAA+B,GAAG;YAAkC,GAAG;CAAE,CAAA;AAC3G,eAAO,MAAM,kBAAkB;SAA4B,GAAG;UAA2B,GAAG;CAAE,CAAA;AAC9F,eAAO,MAAM,oBAAoB;SAA8B,GAAG;YAAiC,GAAG;CAAE,CAAA;AACxG,eAAO,MAAM,cAAc;SAAwB,GAAG;UAAuB,GAAG;CAAE,CAAA;AAClF,eAAO,MAAM,YAAY;UAAwB,GAAG;CAAE,CAAA"}

package/dist/lib/route-handlers.js

@@ -0,0 +1,74 @@
+// @mostajs/rbac — Self-contained route handlers for runtime registration
+// Author: Dr Hamid MADANI drmdh@msn.com
+// Phase 5: Bare handlers — permission checking by catch-all.
+import { createUsersHandler } from '../api/users.js';
+import { createUsersIdHandler } from '../api/users-id.js';
+import { createRolesHandler } from '../api/roles.js';
+import { createRolesIdHandler } from '../api/roles-id.js';
+import { createPermissionsHandler } from '../api/permissions.js';
+import { createPermissionsIdHandler } from '../api/permissions-id.js';
+import { createCategoriesHandler } from '../api/categories.js';
+import { createCategoriesIdHandler } from '../api/categories-id.js';
+import { createMatrixHandler } from '../api/matrix.js';
+import { createSeedHandler } from '../api/seed.js';
+// No-op auth — catch-all enforces permissions
+const noAuth = async (_perm) => ({ error: null, session: { user: { id: '' } } });
+const users = createUsersHandler({
+    checkPermission: noAuth,
+    adminPermission: 'admin:access',
+});
+const usersId = createUsersIdHandler({
+    checkPermission: noAuth,
+    adminPermission: 'admin:access',
+});
+const roles = createRolesHandler({
+    checkPermission: noAuth,
+    adminPermission: 'admin:access',
+    defaultRoles: {},
+});
+const rolesId = createRolesIdHandler({
+    checkPermission: noAuth,
+    adminPermission: 'admin:access',
+});
+const permissions = createPermissionsHandler({
+    checkPermission: noAuth,
+    adminPermission: 'admin:access',
+    permissionDefinitions: [],
+    categoryDefinitions: [],
+});
+const permissionsId = createPermissionsIdHandler({
+    checkPermission: noAuth,
+    adminPermission: 'admin:access',
+});
+const categories = createCategoriesHandler({
+    checkPermission: noAuth,
+    adminPermission: 'admin:access',
+    categoryDefinitions: [],
+});
+const categoriesId = createCategoriesIdHandler({
+    checkPermission: noAuth,
+    adminPermission: 'admin:access',
+});
+const matrix = createMatrixHandler({
+    checkPermission: noAuth,
+    adminPermission: 'admin:access',
+    categoryDefinitions: [],
+});
+const seed = createSeedHandler({
+    checkPermission: noAuth,
+    adminPermission: 'admin:access',
+    permissionDefinitions: [],
+    categoryDefinitions: [],
+    defaultRoles: {},
+});
+export const usersHandlers = { GET: users.GET, POST: users.POST };
+export const usersIdHandlers = { GET: usersId.GET, PUT: usersId.PUT, DELETE: usersId.DELETE };
+export const rolesHandlers = { GET: roles.GET, POST: roles.POST };
+export const rolesIdHandlers = { GET: rolesId.GET, PUT: rolesId.PUT, DELETE: rolesId.DELETE };
+export const permissionsHandlers = { GET: permissions.GET, POST: permissions.POST };
+export const permissionsIdHandlers = { PUT: permissionsId.PUT, DELETE: permissionsId.DELETE };
+export const categoriesHandlers = { GET: categories.GET, POST: categories.POST };
+export const categoriesIdHandlers = { PUT: categoriesId.PUT, DELETE: categoriesId.DELETE };
+export const matrixHandlers = { GET: matrix.GET, POST: matrix.POST };
+export const seedHandlers = { POST: seed.POST };
+//# sourceMappingURL=route-handlers.js.map

package/dist/lib/route-handlers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-handlers.js","sourceRoot":"","sources":["../../lib/route-handlers.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,wCAAwC;AACxC,6DAA6D;AAE7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAChE,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAA;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAA;AAC9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAElD,8CAA8C;AAC9C,MAAM,MAAM,GAAG,KAAK,EAAE,KAAa,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAa,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;AAEjG,MAAM,KAAK,GAAG,kBAAkB,CAAC;IAC/B,eAAe,EAAE,MAAa;IAC9B,eAAe,EAAE,cAAc;CAChC,CAAC,CAAA;AACF,MAAM,OAAO,GAAG,oBAAoB,CAAC;IACnC,eAAe,EAAE,MAAa;IAC9B,eAAe,EAAE,cAAc;CAChC,CAAC,CAAA;AACF,MAAM,KAAK,GAAG,kBAAkB,CAAC;IAC/B,eAAe,EAAE,MAAa;IAC9B,eAAe,EAAE,cAAc;IAC/B,YAAY,EAAE,EAAE;CACjB,CAAC,CAAA;AACF,MAAM,OAAO,GAAG,oBAAoB,CAAC;IACnC,eAAe,EAAE,MAAa;IAC9B,eAAe,EAAE,cAAc;CAChC,CAAC,CAAA;AACF,MAAM,WAAW,GAAG,wBAAwB,CAAC;IAC3C,eAAe,EAAE,MAAa;IAC9B,eAAe,EAAE,cAAc;IAC/B,qBAAqB,EAAE,EAAE;IACzB,mBAAmB,EAAE,EAAE;CACxB,CAAC,CAAA;AACF,MAAM,aAAa,GAAG,0BAA0B,CAAC;IAC/C,eAAe,EAAE,MAAa;IAC9B,eAAe,EAAE,cAAc;CAChC,CAAC,CAAA;AACF,MAAM,UAAU,GAAG,uBAAuB,CAAC;IACzC,eAAe,EAAE,MAAa;IAC9B,eAAe,EAAE,cAAc;IAC/B,mBAAmB,EAAE,EAAE;CACxB,CAAC,CAAA;AACF,MAAM,YAAY,GAAG,yBAAyB,CAAC;IAC7C,eAAe,EAAE,MAAa;IAC9B,eAAe,EAAE,cAAc;CAChC,CAAC,CAAA;AACF,MAAM,MAAM,GAAG,mBAAmB,CAAC;IACjC,eAAe,EAAE,MAAa;IAC9B,eAAe,EAAE,cAAc;IAC/B,mBAAmB,EAAE,EAAE;CACxB,CAAC,CAAA;AACF,MAAM,IAAI,GAAG,iBAAiB,CAAC;IAC7B,eAAe,EAAE,MAAa;IAC9B,eAAe,EAAE,cAAc;IAC/B,qBAAqB,EAAE,EAAE;IACzB,mBAAmB,EAAE,EAAE;IACvB,YAAY,EAAE,EAAE;CACjB,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAU,EAAE,IAAI,EAAE,KAAK,CAAC,IAAW,EAAE,CAAA;AAC/E,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAU,EAAE,GAAG,EAAE,OAAO,CAAC,GAAU,EAAE,MAAM,EAAE,OAAO,CAAC,MAAa,EAAE,CAAA;AAClH,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAU,EAAE,IAAI,EAAE,KAAK,CAAC,IAAW,EAAE,CAAA;AAC/E,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAU,EAAE,GAAG,EAAE,OAAO,CAAC,GAAU,EAAE,MAAM,EAAE,OAAO,CAAC,MAAa,EAAE,CAAA;AAClH,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,GAAU,EAAE,IAAI,EAAE,WAAW,CAAC,IAAW,EAAE,CAAA;AACjG,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC,GAAU,EAAE,MAAM,EAAE,aAAa,CAAC,MAAa,EAAE,CAAA;AAC3G,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,GAAU,EAAE,IAAI,EAAE,UAAU,CAAC,IAAW,EAAE,CAAA;AAC9F,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,YAAY,CAAC,GAAU,EAAE,MAAM,EAAE,YAAY,CAAC,MAAa,EAAE,CAAA;AACxG,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAU,EAAE,IAAI,EAAE,MAAM,CAAC,IAAW,EAAE,CAAA;AAClF,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAW,EAAE,CAAA"}

package/dist/repositories/permission-category.repository.d.ts

@@ -0,0 +1,11 @@
+import { BaseRepository } from '@mostajs/orm';
+import type { IDialect } from '@mostajs/orm';
+import type { PermissionCategoryDTO } from '../types/index';
+export declare class PermissionCategoryRepository extends BaseRepository<PermissionCategoryDTO> {
+    constructor(dialect: IDialect);
+    /** Find all sorted by order then name */
+    findAllOrdered(): Promise<PermissionCategoryDTO[]>;
+    /** Find by name (unique) */
+    findByName(name: string): Promise<PermissionCategoryDTO | null>;
+}
+//# sourceMappingURL=permission-category.repository.d.ts.map

package/dist/repositories/permission-category.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-category.repository.d.ts","sourceRoot":"","sources":["../../repositories/permission-category.repository.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAE7C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAA;AAE3D,qBAAa,4BAA6B,SAAQ,cAAc,CAAC,qBAAqB,CAAC;gBACzE,OAAO,EAAE,QAAQ;IAI7B,yCAAyC;IACnC,cAAc,IAAI,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAIxD,4BAA4B;IACtB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;CAGtE"}

package/dist/repositories/permission-category.repository.js

@@ -0,0 +1,18 @@
+// @mostajs/rbac — PermissionCategoryRepository
+// Author: Dr Hamid MADANI drmdh@msn.com
+import { BaseRepository } from '@mostajs/orm';
+import { PermissionCategorySchema } from '../schemas/permission-category.schema';
+export class PermissionCategoryRepository extends BaseRepository {
+    constructor(dialect) {
+        super(PermissionCategorySchema, dialect);
+    }
+    /** Find all sorted by order then name */
+    async findAllOrdered() {
+        return this.findAll({}, { sort: { order: 1, name: 1 } });
+    }
+    /** Find by name (unique) */
+    async findByName(name) {
+        return this.findOne({ name });
+    }
+}
+//# sourceMappingURL=permission-category.repository.js.map

package/dist/repositories/permission-category.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-category.repository.js","sourceRoot":"","sources":["../../repositories/permission-category.repository.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,wCAAwC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAA;AAIhF,MAAM,OAAO,4BAA6B,SAAQ,cAAqC;IACrF,YAAY,OAAiB;QAC3B,KAAK,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAA;IAC1C,CAAC;IAED,yCAAyC;IACzC,KAAK,CAAC,cAAc;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;IAC1D,CAAC;IAED,4BAA4B;IAC5B,KAAK,CAAC,UAAU,CAAC,IAAY;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/B,CAAC;CACF"}

package/dist/repositories/permission.repository.d.ts

@@ -0,0 +1,13 @@
+import { BaseRepository } from '@mostajs/orm';
+import type { IDialect } from '@mostajs/orm';
+import type { PermissionDTO } from '../types/index';
+export declare class PermissionRepository extends BaseRepository<PermissionDTO> {
+    constructor(dialect: IDialect);
+    /** Find all sorted by category then name */
+    findAllSorted(): Promise<PermissionDTO[]>;
+    /** Find by name (unique) */
+    findByName(name: string): Promise<PermissionDTO | null>;
+    /** Count permissions in a category */
+    countByCategory(category: string): Promise<number>;
+}
+//# sourceMappingURL=permission.repository.d.ts.map

package/dist/repositories/permission.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.repository.d.ts","sourceRoot":"","sources":["../../repositories/permission.repository.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAE7C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAEnD,qBAAa,oBAAqB,SAAQ,cAAc,CAAC,aAAa,CAAC;gBACzD,OAAO,EAAE,QAAQ;IAI7B,4CAA4C;IACtC,aAAa,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;IAI/C,4BAA4B;IACtB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAI7D,sCAAsC;IAChC,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAGzD"}

package/dist/repositories/permission.repository.js

@@ -0,0 +1,22 @@
+// @mostajs/rbac — PermissionRepository
+// Author: Dr Hamid MADANI drmdh@msn.com
+import { BaseRepository } from '@mostajs/orm';
+import { PermissionSchema } from '../schemas/permission.schema';
+export class PermissionRepository extends BaseRepository {
+    constructor(dialect) {
+        super(PermissionSchema, dialect);
+    }
+    /** Find all sorted by category then name */
+    async findAllSorted() {
+        return this.findAll({}, { sort: { category: 1, name: 1 } });
+    }
+    /** Find by name (unique) */
+    async findByName(name) {
+        return this.findOne({ name });
+    }
+    /** Count permissions in a category */
+    async countByCategory(category) {
+        return this.count({ category });
+    }
+}
+//# sourceMappingURL=permission.repository.js.map

package/dist/repositories/permission.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.repository.js","sourceRoot":"","sources":["../../repositories/permission.repository.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,wCAAwC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AAI/D,MAAM,OAAO,oBAAqB,SAAQ,cAA6B;IACrE,YAAY,OAAiB;QAC3B,KAAK,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAA;IAClC,CAAC;IAED,4CAA4C;IAC5C,KAAK,CAAC,aAAa;QACjB,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;IAC7D,CAAC;IAED,4BAA4B;IAC5B,KAAK,CAAC,UAAU,CAAC,IAAY;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/B,CAAC;IAED,sCAAsC;IACtC,KAAK,CAAC,eAAe,CAAC,QAAgB;QACpC,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;IACjC,CAAC;CACF"}

package/dist/repositories/role.repository.d.ts

@@ -0,0 +1,19 @@
+import { BaseRepository } from '@mostajs/orm';
+import type { IDialect } from '@mostajs/orm';
+import type { RoleDTO } from '../types/index';
+export declare class RoleRepository extends BaseRepository<RoleDTO> {
+    constructor(dialect: IDialect);
+    /** Find all roles with permissions populated */
+    findAllWithPermissions(): Promise<RoleDTO[]>;
+    /** Find a role by name */
+    findByName(name: string): Promise<RoleDTO | null>;
+    /** Find role by ID with permissions populated */
+    findByIdWithPermissions(id: string): Promise<RoleDTO | null>;
+    /** Add a permission to a role */
+    addPermission(roleId: string, permissionId: string): Promise<RoleDTO | null>;
+    /** Remove a permission from a role */
+    removePermission(roleId: string, permissionId: string): Promise<RoleDTO | null>;
+    /** Remove a permission from ALL roles (cascade) */
+    removePermissionFromAll(permissionId: string): Promise<number>;
+}
+//# sourceMappingURL=role.repository.d.ts.map

package/dist/repositories/role.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role.repository.d.ts","sourceRoot":"","sources":["../../repositories/role.repository.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAE7C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AAE7C,qBAAa,cAAe,SAAQ,cAAc,CAAC,OAAO,CAAC;gBAC7C,OAAO,EAAE,QAAQ;IAI7B,gDAAgD;IAC1C,sBAAsB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAIlD,0BAA0B;IACpB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAIvD,iDAAiD;IAC3C,uBAAuB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAIlE,iCAAiC;IAC3B,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAIlF,sCAAsC;IAChC,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAIrF,mDAAmD;IAC7C,uBAAuB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAMrE"}

package/dist/repositories/role.repository.js

@@ -0,0 +1,34 @@
+// @mostajs/rbac — RoleRepository
+// Author: Dr Hamid MADANI drmdh@msn.com
+import { BaseRepository } from '@mostajs/orm';
+import { RoleSchema } from '../schemas/role.schema';
+export class RoleRepository extends BaseRepository {
+    constructor(dialect) {
+        super(RoleSchema, dialect);
+    }
+    /** Find all roles with permissions populated */
+    async findAllWithPermissions() {
+        return this.findWithRelations({}, ['permissions']);
+    }
+    /** Find a role by name */
+    async findByName(name) {
+        return this.findOne({ name });
+    }
+    /** Find role by ID with permissions populated */
+    async findByIdWithPermissions(id) {
+        return this.findByIdWithRelations(id, ['permissions']);
+    }
+    /** Add a permission to a role */
+    async addPermission(roleId, permissionId) {
+        return this.addToSet(roleId, 'permissions', permissionId);
+    }
+    /** Remove a permission from a role */
+    async removePermission(roleId, permissionId) {
+        return this.pull(roleId, 'permissions', permissionId);
+    }
+    /** Remove a permission from ALL roles (cascade) */
+    async removePermissionFromAll(permissionId) {
+        return this.updateMany({ permissions: permissionId }, { $pull: { permissions: permissionId } });
+    }
+}
+//# sourceMappingURL=role.repository.js.map

package/dist/repositories/role.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role.repository.js","sourceRoot":"","sources":["../../repositories/role.repository.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC,wCAAwC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAInD,MAAM,OAAO,cAAe,SAAQ,cAAuB;IACzD,YAAY,OAAiB;QAC3B,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IAC5B,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,sBAAsB;QAC1B,OAAO,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAA;IACpD,CAAC;IAED,0BAA0B;IAC1B,KAAK,CAAC,UAAU,CAAC,IAAY;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/B,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,uBAAuB,CAAC,EAAU;QACtC,OAAO,IAAI,CAAC,qBAAqB,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAA;IACxD,CAAC;IAED,iCAAiC;IACjC,KAAK,CAAC,aAAa,CAAC,MAAc,EAAE,YAAoB;QACtD,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,EAAE,YAAY,CAAC,CAAA;IAC3D,CAAC;IAED,sCAAsC;IACtC,KAAK,CAAC,gBAAgB,CAAC,MAAc,EAAE,YAAoB;QACzD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,YAAY,CAAC,CAAA;IACvD,CAAC;IAED,mDAAmD;IACnD,KAAK,CAAC,uBAAuB,CAAC,YAAoB;QAChD,OAAO,IAAI,CAAC,UAAU,CACpB,EAAE,WAAW,EAAE,YAAY,EAAS,EACpC,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,EAAS,CAChD,CAAA;IACH,CAAC;CACF"}

package/dist/repositories/user.repository.d.ts

@@ -0,0 +1,25 @@
+import { BaseRepository } from '@mostajs/orm';
+import type { IDialect, FilterQuery, QueryOptions } from '@mostajs/orm';
+import type { UserDTO } from '../types/index';
+export declare class UserRepository extends BaseRepository<UserDTO> {
+    constructor(dialect: IDialect);
+    /** List users without password field */
+    findAllSafe(filter?: FilterQuery, options?: QueryOptions): Promise<UserDTO[]>;
+    /** Find a single user by ID without password */
+    findByIdSafe(id: string): Promise<UserDTO | null>;
+    /** Find user by email (for authentication) */
+    findByEmail(email: string): Promise<UserDTO | null>;
+    /** Update lastLoginAt timestamp */
+    updateLastLogin(id: string): Promise<void>;
+    /** Find user by ID with roles populated */
+    findByIdWithRoles(id: string): Promise<UserDTO | null>;
+    /** Find all users with roles populated (no password) */
+    findAllWithRoles(filter?: FilterQuery, options?: QueryOptions): Promise<UserDTO[]>;
+    /** Count users having a specific role */
+    countByRole(roleId: string): Promise<number>;
+    /** Add a role to a user */
+    addRole(userId: string, roleId: string): Promise<UserDTO | null>;
+    /** Remove a role from a user */
+    removeRole(userId: string, roleId: string): Promise<UserDTO | null>;
+}
+//# sourceMappingURL=user.repository.d.ts.map

package/dist/repositories/user.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.repository.d.ts","sourceRoot":"","sources":["../../repositories/user.repository.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAE7C,OAAO,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AACvE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AAE7C,qBAAa,cAAe,SAAQ,cAAc,CAAC,OAAO,CAAC;gBAC7C,OAAO,EAAE,QAAQ;IAI7B,wCAAwC;IAClC,WAAW,CAAC,MAAM,GAAE,WAAgB,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAIvF,gDAAgD;IAC1C,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAIvD,8CAA8C;IACxC,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAIzD,mCAAmC;IAC7B,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhD,2CAA2C;IACrC,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAI5D,wDAAwD;IAClD,gBAAgB,CAAC,MAAM,GAAE,WAAgB,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAI5F,yCAAyC;IACnC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIlD,2BAA2B;IACrB,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAItE,gCAAgC;IAC1B,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;CAG1E"}

package/dist/repositories/user.repository.js

@@ -0,0 +1,46 @@
+// @mostajs/rbac — UserRepository
+// Author: Dr Hamid MADANI drmdh@msn.com
+import { BaseRepository } from '@mostajs/orm';
+import { UserSchema } from '../schemas/user.schema';
+export class UserRepository extends BaseRepository {
+    constructor(dialect) {
+        super(UserSchema, dialect);
+    }
+    /** List users without password field */
+    async findAllSafe(filter = {}, options) {
+        return this.findAll(filter, Object.assign(Object.assign({}, options), { exclude: ['password'] }));
+    }
+    /** Find a single user by ID without password */
+    async findByIdSafe(id) {
+        return this.findById(id, { exclude: ['password'] });
+    }
+    /** Find user by email (for authentication) */
+    async findByEmail(email) {
+        return this.findOne({ email: email.toLowerCase() });
+    }
+    /** Update lastLoginAt timestamp */
+    async updateLastLogin(id) {
+        await this.update(id, { lastLoginAt: new Date() });
+    }
+    /** Find user by ID with roles populated */
+    async findByIdWithRoles(id) {
+        return this.findByIdWithRelations(id, ['roles']);
+    }
+    /** Find all users with roles populated (no password) */
+    async findAllWithRoles(filter = {}, options) {
+        return this.findWithRelations(filter, ['roles'], Object.assign(Object.assign({}, options), { exclude: ['password'] }));
+    }
+    /** Count users having a specific role */
+    async countByRole(roleId) {
+        return this.count({ roles: roleId });
+    }
+    /** Add a role to a user */
+    async addRole(userId, roleId) {
+        return this.addToSet(userId, 'roles', roleId);
+    }
+    /** Remove a role from a user */
+    async removeRole(userId, roleId) {
+        return this.pull(userId, 'roles', roleId);
+    }
+}
+//# sourceMappingURL=user.repository.js.map

package/dist/repositories/user.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.repository.js","sourceRoot":"","sources":["../../repositories/user.repository.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC,wCAAwC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAInD,MAAM,OAAO,cAAe,SAAQ,cAAuB;IACzD,YAAY,OAAiB;QAC3B,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IAC5B,CAAC;IAED,wCAAwC;IACxC,KAAK,CAAC,WAAW,CAAC,SAAsB,EAAE,EAAE,OAAsB;QAChE,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,kCAAO,OAAO,KAAE,OAAO,EAAE,CAAC,UAAU,CAAC,IAAG,CAAA;IACpE,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,YAAY,CAAC,EAAU;QAC3B,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;IACrD,CAAC;IAED,8CAA8C;IAC9C,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;IACrD,CAAC;IAED,mCAAmC;IACnC,KAAK,CAAC,eAAe,CAAC,EAAU;QAC9B,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,EAAS,CAAC,CAAA;IAC3D,CAAC;IAED,2CAA2C;IAC3C,KAAK,CAAC,iBAAiB,CAAC,EAAU;QAChC,OAAO,IAAI,CAAC,qBAAqB,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAA;IAClD,CAAC;IAED,wDAAwD;IACxD,KAAK,CAAC,gBAAgB,CAAC,SAAsB,EAAE,EAAE,OAAsB;QACrE,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,kCAAO,OAAO,KAAE,OAAO,EAAE,CAAC,UAAU,CAAC,IAAG,CAAA;IACzF,CAAC;IAED,yCAAyC;IACzC,KAAK,CAAC,WAAW,CAAC,MAAc;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;IACtC,CAAC;IAED,2BAA2B;IAC3B,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,MAAc;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;IAC/C,CAAC;IAED,gCAAgC;IAChC,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,MAAc;QAC7C,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;IAC3C,CAAC;CACF"}

package/dist/schemas/permission-category.schema.d.ts

@@ -0,0 +1,3 @@
+import type { EntitySchema } from '@mostajs/orm';
+export declare const PermissionCategorySchema: EntitySchema;
+//# sourceMappingURL=permission-category.schema.d.ts.map

package/dist/schemas/permission-category.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-category.schema.d.ts","sourceRoot":"","sources":["../../schemas/permission-category.schema.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAEhD,eAAO,MAAM,wBAAwB,EAAE,YAmBtC,CAAA"}

package/dist/schemas/permission-category.schema.js

@@ -0,0 +1,18 @@
+export const PermissionCategorySchema = {
+    name: 'PermissionCategory',
+    collection: 'permission_categories',
+    timestamps: true,
+    fields: {
+        name: { type: 'string', required: true, unique: true, lowercase: true, trim: true },
+        label: { type: 'string', required: true, trim: true },
+        description: { type: 'string' },
+        icon: { type: 'string' },
+        order: { type: 'number', default: 0 },
+        system: { type: 'boolean', default: false },
+    },
+    relations: {},
+    indexes: [
+        { fields: { order: 'asc', name: 'asc' } },
+    ],
+};
+//# sourceMappingURL=permission-category.schema.js.map

package/dist/schemas/permission-category.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-category.schema.js","sourceRoot":"","sources":["../../schemas/permission-category.schema.ts"],"names":[],"mappings":"AAIA,MAAM,CAAC,MAAM,wBAAwB,GAAiB;IACpD,IAAI,EAAE,oBAAoB;IAC1B,UAAU,EAAE,uBAAuB;IACnC,UAAU,EAAE,IAAI;IAEhB,MAAM,EAAE;QACN,IAAI,EAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;QAC1F,KAAK,EAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;QAC3D,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC/B,IAAI,EAAS,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC/B,KAAK,EAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE;QAC3C,MAAM,EAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;KACjD;IAED,SAAS,EAAE,EAAE;IAEb,OAAO,EAAE;QACP,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;KAC1C;CACF,CAAA"}

package/dist/schemas/permission.schema.d.ts

@@ -0,0 +1,3 @@
+import type { EntitySchema } from '@mostajs/orm';
+export declare const PermissionSchema: EntitySchema;
+//# sourceMappingURL=permission.schema.d.ts.map

package/dist/schemas/permission.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.schema.d.ts","sourceRoot":"","sources":["../../schemas/permission.schema.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAEhD,eAAO,MAAM,gBAAgB,EAAE,YAa9B,CAAA"}

package/dist/schemas/permission.schema.js

@@ -0,0 +1,13 @@
+export const PermissionSchema = {
+    name: 'Permission',
+    collection: 'permissions',
+    timestamps: true,
+    fields: {
+        name: { type: 'string', required: true, unique: true },
+        description: { type: 'string' },
+        category: { type: 'string' },
+    },
+    relations: {},
+    indexes: [],
+};
+//# sourceMappingURL=permission.schema.js.map

package/dist/schemas/permission.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.schema.js","sourceRoot":"","sources":["../../schemas/permission.schema.ts"],"names":[],"mappings":"AAIA,MAAM,CAAC,MAAM,gBAAgB,GAAiB;IAC5C,IAAI,EAAE,YAAY;IAClB,UAAU,EAAE,aAAa;IACzB,UAAU,EAAE,IAAI;IAEhB,MAAM,EAAE;QACN,IAAI,EAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;QAC7D,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC/B,QAAQ,EAAK,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IAED,SAAS,EAAE,EAAE;IACb,OAAO,EAAE,EAAE;CACZ,CAAA"}

package/dist/schemas/role.schema.d.ts

@@ -0,0 +1,3 @@
+import type { EntitySchema } from '@mostajs/orm';
+export declare const RoleSchema: EntitySchema;
+//# sourceMappingURL=role.schema.d.ts.map

package/dist/schemas/role.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role.schema.d.ts","sourceRoot":"","sources":["../../schemas/role.schema.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAEhD,eAAO,MAAM,UAAU,EAAE,YAexB,CAAA"}

package/dist/schemas/role.schema.js

@@ -0,0 +1,14 @@
+export const RoleSchema = {
+    name: 'Role',
+    collection: 'roles',
+    timestamps: true,
+    fields: {
+        name: { type: 'string', required: true, unique: true },
+        description: { type: 'string' },
+    },
+    relations: {
+        permissions: { target: 'Permission', type: 'many-to-many', through: 'role_permissions' },
+    },
+    indexes: [],
+};
+//# sourceMappingURL=role.schema.js.map

package/dist/schemas/role.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role.schema.js","sourceRoot":"","sources":["../../schemas/role.schema.ts"],"names":[],"mappings":"AAIA,MAAM,CAAC,MAAM,UAAU,GAAiB;IACtC,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,OAAO;IACnB,UAAU,EAAE,IAAI;IAEhB,MAAM,EAAE;QACN,IAAI,EAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;QAC7D,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IAED,SAAS,EAAE;QACT,WAAW,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,kBAAkB,EAAE;KACzF;IAED,OAAO,EAAE,EAAE;CACZ,CAAA"}

package/dist/schemas/user.schema.d.ts

@@ -0,0 +1,3 @@
+import type { EntitySchema } from '@mostajs/orm';
+export declare const UserSchema: EntitySchema;
+//# sourceMappingURL=user.schema.d.ts.map

package/dist/schemas/user.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.schema.d.ts","sourceRoot":"","sources":["../../schemas/user.schema.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAEhD,eAAO,MAAM,UAAU,EAAE,YAsBxB,CAAA"}

package/dist/schemas/user.schema.js

@@ -0,0 +1,21 @@
+export const UserSchema = {
+    name: 'User',
+    collection: 'users',
+    timestamps: true,
+    fields: {
+        email: { type: 'string', required: true, unique: true, lowercase: true, trim: true },
+        password: { type: 'string', required: true },
+        firstName: { type: 'string', required: true, trim: true },
+        lastName: { type: 'string', required: true, trim: true },
+        phone: { type: 'string', trim: true },
+        status: { type: 'string', enum: ['active', 'locked', 'disabled'], default: 'active' },
+        lastLoginAt: { type: 'date' },
+    },
+    relations: {
+        roles: { target: 'Role', type: 'many-to-many', through: 'user_roles' },
+    },
+    indexes: [
+        { fields: { status: 'asc' } },
+    ],
+};
+//# sourceMappingURL=user.schema.js.map

package/dist/schemas/user.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.schema.js","sourceRoot":"","sources":["../../schemas/user.schema.ts"],"names":[],"mappings":"AAIA,MAAM,CAAC,MAAM,UAAU,GAAiB;IACtC,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,OAAO;IACnB,UAAU,EAAE,IAAI;IAEhB,MAAM,EAAE;QACN,KAAK,EAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;QAC1F,QAAQ,EAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC/C,SAAS,EAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;QAC3D,QAAQ,EAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;QAC3D,KAAK,EAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE;QAC3C,MAAM,EAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE;QAC1F,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;KAC9B;IAED,SAAS,EAAE;QACT,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,YAAY,EAAE;KACvE;IAED,OAAO,EAAE;QACP,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;KAC9B;CACF,CAAA"}

package/dist/types/index.d.ts

@@ -1,3 +1,43 @@
+export interface UserDTO {
+    id: string;
+    email: string;
+    password?: string;
+    firstName: string;
+    lastName: string;
+    phone?: string;
+    roles: any[];
+    status: 'active' | 'locked' | 'disabled';
+    lastLoginAt?: string;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface RoleDTO {
+    id: string;
+    name: string;
+    description?: string;
+    permissions: any[];
+    createdAt: string;
+    updatedAt: string;
+}
+export interface PermissionDTO {
+    id: string;
+    name: string;
+    description?: string;
+    category?: string;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface PermissionCategoryDTO {
+    id: string;
+    name: string;
+    label: string;
+    description?: string;
+    icon?: string;
+    order: number;
+    system: boolean;
+    createdAt: string;
+    updatedAt: string;
+}
 export interface User {
     id: string;
     email: string;

package/dist/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../types/index.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,cAAc,EAAE,CAAA;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,OAAO,CAAA;IACf,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IAC1D,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC,CAAA;IAC/E,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACtC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAChD;AAED,MAAM,WAAW,UAAU;IACzB,oDAAoD;IACpD,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,yEAAyE;IACzE,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,MAAM,CAAA;IACrE,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,oDAAoD;IACpD,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACnC,wDAAwD;IACxD,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACtC;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,OAAO,CAAA;IACf,WAAW,EAAE,MAAM,EAAE,CAAA;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,OAAO,CAAA;CAChB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../types/index.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,GAAG,EAAE,CAAA;IACZ,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,UAAU,CAAA;IACxC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,GAAG,EAAE,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,OAAO,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAID,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,cAAc,EAAE,CAAA;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,OAAO,CAAA;IACf,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IAC1D,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC,CAAA;IAC/E,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACtC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAChD;AAED,MAAM,WAAW,UAAU;IACzB,oDAAoD;IACpD,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,yEAAyE;IACzE,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,MAAM,CAAA;IACrE,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,oDAAoD;IACpD,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACnC,wDAAwD;IACxD,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACtC;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,OAAO,CAAA;IACf,WAAW,EAAE,MAAM,EAAE,CAAA;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,OAAO,CAAA;CAChB"}

package/dist/types/index.js

@@ -1,4 +1,4 @@
 // Author: Dr Hamid MADANI drmdh@msn.com
-// UI-specific types for RBAC management components
+// Types for RBAC — entities, DTOs, definitions, UI data shapes
 export {};
 //# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../types/index.ts"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,mDAAmD"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../types/index.ts"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,+DAA+D"}