@opencrvs/toolkit 1.8.0-rc.ffe8c17 → 1.8.1-rc.3e74262

package/dist/scopes/index.d.ts

@@ -1,3 +1,5 @@
+import { z } from 'zod';
+import { SearchScopeAccessLevels } from './events';
 export declare const SCOPES: {
     readonly NATLSYSADMIN: "natlsysadmin";
     readonly BYPASSRATELIMIT: "bypassratelimit";
@@ -18,6 +20,7 @@ export declare const SCOPES: {
      * @TODO This is a temporary scope to be used for V2 Events custom events declaration
      */
     readonly RECORD_DECLARE: "record.declare-birth";
+    readonly RECORD_IMPORT: "record.import";
     readonly RECORD_DECLARE_BIRTH: "record.declare-birth";
     readonly RECORD_DECLARE_BIRTH_MY_JURISDICTION: "record.declare-birth:my-jurisdiction";
     readonly RECORD_DECLARE_DEATH: "record.declare-death";
@@ -83,6 +86,249 @@ export declare const SCOPES: {
     readonly CONFIG_UPDATE_ALL: "config.update:all";
     readonly USER_DATA_SEEDING: "user.data-seeding";
 };
-export type Scope = (typeof SCOPES)[keyof typeof SCOPES];
+export declare const SearchScopes: z.ZodUnion<[z.ZodLiteral<"search.birth:my-jurisdiction">, z.ZodLiteral<"search.birth">, z.ZodLiteral<"search.death:my-jurisdiction">, z.ZodLiteral<"search.death">, z.ZodLiteral<"search.marriage:my-jurisdiction">, z.ZodLiteral<"search.marriage">]>;
+declare const LiteralScopes: z.ZodUnion<[z.ZodUnion<[z.ZodLiteral<"natlsysadmin">, z.ZodLiteral<"bypassratelimit">, z.ZodLiteral<"declare">, z.ZodLiteral<"register">, z.ZodLiteral<"validate">, z.ZodLiteral<"demo">, z.ZodLiteral<"certify">, z.ZodLiteral<"performance">, z.ZodLiteral<"sysadmin">, z.ZodLiteral<"teams">, z.ZodLiteral<"config">]>, z.ZodUnion<[z.ZodLiteral<"webhook">, z.ZodLiteral<"nationalId">, z.ZodLiteral<"notification-api">, z.ZodLiteral<"recordsearch">]>, z.ZodLiteral<"record.unassign-others">, z.ZodUnion<[z.ZodLiteral<"record.declare-birth">, z.ZodLiteral<"record.import">, z.ZodLiteral<"record.declare-birth">, z.ZodLiteral<"record.declare-birth:my-jurisdiction">, z.ZodLiteral<"record.declare-death">, z.ZodLiteral<"record.declare-death:my-jurisdiction">, z.ZodLiteral<"record.declare-marriage">, z.ZodLiteral<"record.declare-marriage:my-jurisdiction">, z.ZodLiteral<"record.declaration-submit-incomplete">, z.ZodLiteral<"record.declaration-submit-for-review">]>, z.ZodUnion<[z.ZodLiteral<"record.declaration-submit-for-approval">, z.ZodLiteral<"record.declaration-submit-for-updates">, z.ZodLiteral<"record.declaration-edit">, z.ZodLiteral<"record.review-duplicates">, z.ZodLiteral<"record.declaration-archive">, z.ZodLiteral<"record.declaration-reinstate">]>, z.ZodLiteral<"record.register">, z.ZodUnion<[z.ZodLiteral<"record.export-records">, z.ZodLiteral<"record.declaration-print">, z.ZodLiteral<"record.declaration-print-supporting-documents">, z.ZodLiteral<"record.registration-print">, z.ZodLiteral<"record.registration-print&issue-certified-copies">, z.ZodLiteral<"record.registration-print-certified-copies">, z.ZodLiteral<"record.registration-bulk-print-certified-copies">, z.ZodLiteral<"record.registration-verify-certified-copies">]>, z.ZodUnion<[z.ZodLiteral<"record.registration-request-correction">, z.ZodLiteral<"record.registration-correct">, z.ZodLiteral<"record.registration-request-revocation">, z.ZodLiteral<"record.registration-revoke">, z.ZodLiteral<"record.registration-request-reinstatement">, z.ZodLiteral<"record.registration-reinstate">, z.ZodLiteral<"record.confirm-registration">, z.ZodLiteral<"record.reject-registration">]>, z.ZodUnion<[z.ZodLiteral<"search.birth:my-jurisdiction">, z.ZodLiteral<"search.birth">, z.ZodLiteral<"search.death:my-jurisdiction">, z.ZodLiteral<"search.death">, z.ZodLiteral<"search.marriage:my-jurisdiction">, z.ZodLiteral<"search.marriage">]>, z.ZodUnion<[z.ZodLiteral<"record.read">, z.ZodLiteral<"record.read-audit">, z.ZodLiteral<"record.read-comments">, z.ZodLiteral<"record.create-comments">]>, z.ZodUnion<[z.ZodLiteral<"profile.update">, z.ZodLiteral<"profile.electronic-signature">]>, z.ZodUnion<[z.ZodLiteral<"performance.read">, z.ZodLiteral<"performance.read-dashboards">, z.ZodLiteral<"performance.vital-statistics-export">]>, z.ZodUnion<[z.ZodLiteral<"organisation.read-locations:all">, z.ZodLiteral<"organisation.read-locations:my-office">, z.ZodLiteral<"organisation.read-locations:my-jurisdiction">]>, z.ZodUnion<[z.ZodLiteral<"user.read:all">, z.ZodLiteral<"user.read:my-office">, z.ZodLiteral<"user.read:my-jurisdiction">, z.ZodLiteral<"user.read:only-my-audit">, z.ZodLiteral<"user.create:all">, z.ZodLiteral<"user.create:my-jurisdiction">, z.ZodLiteral<"user.update:all">, z.ZodLiteral<"user.update:my-jurisdiction">]>, z.ZodLiteral<"config.update:all">, z.ZodLiteral<"user.data-seeding">]>;
+declare const NotifyRecordScope: z.ZodObject<{
+    type: z.ZodLiteral<"record.notify">;
+    options: z.ZodObject<{
+        event: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        event: string[];
+    }, {
+        event: string[];
+    }>;
+}, "strip", z.ZodTypeAny, {
+    type: "record.notify";
+    options: {
+        event: string[];
+    };
+}, {
+    type: "record.notify";
+    options: {
+        event: string[];
+    };
+}>;
+declare const SearchScope: z.ZodObject<{
+    type: z.ZodLiteral<"search">;
+    options: z.ZodObject<{
+        event: z.ZodArray<z.ZodString, "many">;
+        access: z.ZodArray<z.ZodEnum<["my-jurisdiction", "all"]>, "many">;
+    }, "strip", z.ZodTypeAny, {
+        event: string[];
+        access: ("my-jurisdiction" | "all")[];
+    }, {
+        event: string[];
+        access: ("my-jurisdiction" | "all")[];
+    }>;
+}, "strip", z.ZodTypeAny, {
+    type: "search";
+    options: {
+        event: string[];
+        access: ("my-jurisdiction" | "all")[];
+    };
+}, {
+    type: "search";
+    options: {
+        event: string[];
+        access: ("my-jurisdiction" | "all")[];
+    };
+}>;
+export type SearchScope = z.infer<typeof SearchScope>;
+declare const ConfigurableRawScopes: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+    type: z.ZodLiteral<"search">;
+    options: z.ZodObject<{
+        event: z.ZodArray<z.ZodString, "many">;
+        access: z.ZodArray<z.ZodEnum<["my-jurisdiction", "all"]>, "many">;
+    }, "strip", z.ZodTypeAny, {
+        event: string[];
+        access: ("my-jurisdiction" | "all")[];
+    }, {
+        event: string[];
+        access: ("my-jurisdiction" | "all")[];
+    }>;
+}, "strip", z.ZodTypeAny, {
+    type: "search";
+    options: {
+        event: string[];
+        access: ("my-jurisdiction" | "all")[];
+    };
+}, {
+    type: "search";
+    options: {
+        event: string[];
+        access: ("my-jurisdiction" | "all")[];
+    };
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"user.create">;
+    options: z.ZodObject<{
+        role: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        role: string[];
+    }, {
+        role: string[];
+    }>;
+}, "strip", z.ZodTypeAny, {
+    type: "user.create";
+    options: {
+        role: string[];
+    };
+}, {
+    type: "user.create";
+    options: {
+        role: string[];
+    };
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"user.edit">;
+    options: z.ZodObject<{
+        role: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        role: string[];
+    }, {
+        role: string[];
+    }>;
+}, "strip", z.ZodTypeAny, {
+    type: "user.edit";
+    options: {
+        role: string[];
+    };
+}, {
+    type: "user.edit";
+    options: {
+        role: string[];
+    };
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"workqueue">;
+    options: z.ZodObject<{
+        id: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        id: string[];
+    }, {
+        id: string[];
+    }>;
+}, "strip", z.ZodTypeAny, {
+    type: "workqueue";
+    options: {
+        id: string[];
+    };
+}, {
+    type: "workqueue";
+    options: {
+        id: string[];
+    };
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"record.notify">;
+    options: z.ZodObject<{
+        event: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        event: string[];
+    }, {
+        event: string[];
+    }>;
+}, "strip", z.ZodTypeAny, {
+    type: "record.notify";
+    options: {
+        event: string[];
+    };
+}, {
+    type: "record.notify";
+    options: {
+        event: string[];
+    };
+}>]>;
+type ConfigurableRawScopes = z.infer<typeof ConfigurableRawScopes>;
+export type ConfigurableScopeType = ConfigurableRawScopes['type'];
+type FlattenedSearchScope = {
+    type: 'search';
+    options: Record<string, SearchScopeAccessLevels>;
+};
+export type ConfigurableScopes = Exclude<ConfigurableRawScopes, {
+    type: 'search';
+}> | FlattenedSearchScope;
+export declare function findScope<T extends ConfigurableScopeType>(scopes: string[], scopeType: T): Extract<{
+    type: "user.create";
+    options: {
+        role: string[];
+    };
+}, {
+    type: T;
+}> | Extract<{
+    type: "user.edit";
+    options: {
+        role: string[];
+    };
+}, {
+    type: T;
+}> | Extract<{
+    type: "workqueue";
+    options: {
+        id: string[];
+    };
+}, {
+    type: T;
+}> | Extract<{
+    type: "record.notify";
+    options: {
+        event: string[];
+    };
+}, {
+    type: T;
+}> | Extract<FlattenedSearchScope, {
+    type: T;
+}> | undefined;
+/**
+ * Parses a configurable scope string into a ConfigurableRawScopes object.
+ * @param {string} scope - The scope string to parse
+ * @returns {ConfigurableRawScopes | undefined} The parsed scope object if valid, undefined otherwise
+ * @example
+ * parseScope("user.create[role=field-agent|registration-agent]")
+ * // Returns: { type: "user.create", options: { role: ["field-agent", "registration-agent"] } }
+ */
+export declare function parseScope(scope: string): {
+    type: "search";
+    options: {
+        event: string[];
+        access: ("my-jurisdiction" | "all")[];
+    };
+} | {
+    type: "user.create";
+    options: {
+        role: string[];
+    };
+} | {
+    type: "user.edit";
+    options: {
+        role: string[];
+    };
+} | {
+    type: "workqueue";
+    options: {
+        id: string[];
+    };
+} | {
+    type: "record.notify";
+    options: {
+        event: string[];
+    };
+} | {
+    type: "natlsysadmin" | "bypassratelimit" | "declare" | "register" | "validate" | "demo" | "certify" | "performance" | "sysadmin" | "teams" | "config" | "webhook" | "nationalId" | "notification-api" | "recordsearch" | "record.declare-birth" | "record.import" | "record.declare-birth:my-jurisdiction" | "record.declare-death" | "record.declare-death:my-jurisdiction" | "record.declare-marriage" | "record.declare-marriage:my-jurisdiction" | "record.declaration-submit-incomplete" | "record.declaration-submit-for-review" | "record.unassign-others" | "record.declaration-submit-for-approval" | "record.declaration-submit-for-updates" | "record.declaration-edit" | "record.review-duplicates" | "record.declaration-archive" | "record.declaration-reinstate" | "record.register" | "record.export-records" | "record.declaration-print" | "record.declaration-print-supporting-documents" | "record.registration-print" | "record.registration-print&issue-certified-copies" | "record.registration-print-certified-copies" | "record.registration-bulk-print-certified-copies" | "record.registration-verify-certified-copies" | "record.registration-request-correction" | "record.registration-correct" | "record.registration-request-revocation" | "record.registration-revoke" | "record.registration-request-reinstatement" | "record.registration-reinstate" | "record.confirm-registration" | "record.reject-registration" | "search.birth:my-jurisdiction" | "search.birth" | "search.death:my-jurisdiction" | "search.death" | "search.marriage:my-jurisdiction" | "search.marriage" | "record.read" | "record.read-audit" | "record.read-comments" | "record.create-comments" | "profile.update" | "profile.electronic-signature" | "performance.read" | "performance.read-dashboards" | "performance.vital-statistics-export" | "organisation.read-locations:all" | "organisation.read-locations:my-office" | "organisation.read-locations:my-jurisdiction" | "user.read:all" | "user.read:my-office" | "user.read:my-jurisdiction" | "user.read:only-my-audit" | "user.create:all" | "user.create:my-jurisdiction" | "user.update:all" | "user.update:my-jurisdiction" | "config.update:all" | "user.data-seeding";
+} | undefined;
+/**
+ * Stringifies a ConfigurableScopes object into a scope string.
+ * @param {ConfigurableScopes} scope - The scope object to stringify
+ * @returns {string} The stringified scope in format "type[key1=value1|value2,key2=value3|value4]"
+ * @example
+ * stringifyScope({
+ *   type: "record.notify",
+ *   options: { event: ["v2.birth", "tennis-club-membership"] }
+ * })
+ * // Returns: "record.notify[event=v2.birth|tennis-club-membership]"
+ */
+export declare function stringifyScope(scope: z.infer<typeof NotifyRecordScope>): string;
 export declare const scopes: Scope[];
+export type ParsedScopes = NonNullable<ReturnType<typeof parseScope>>;
+export type RawScopes = z.infer<typeof LiteralScopes> | (string & {});
+export type Scope = RawScopes;
+export declare const ActionScopes: z.ZodUnion<[z.ZodUnion<[z.ZodLiteral<"record.declare-birth">, z.ZodLiteral<"record.import">, z.ZodLiteral<"record.declare-birth">, z.ZodLiteral<"record.declare-birth:my-jurisdiction">, z.ZodLiteral<"record.declare-death">, z.ZodLiteral<"record.declare-death:my-jurisdiction">, z.ZodLiteral<"record.declare-marriage">, z.ZodLiteral<"record.declare-marriage:my-jurisdiction">, z.ZodLiteral<"record.declaration-submit-incomplete">, z.ZodLiteral<"record.declaration-submit-for-review">]>, z.ZodUnion<[z.ZodLiteral<"record.declaration-submit-for-approval">, z.ZodLiteral<"record.declaration-submit-for-updates">, z.ZodLiteral<"record.declaration-edit">, z.ZodLiteral<"record.review-duplicates">, z.ZodLiteral<"record.declaration-archive">, z.ZodLiteral<"record.declaration-reinstate">]>, z.ZodLiteral<"record.register">, z.ZodUnion<[z.ZodLiteral<"record.export-records">, z.ZodLiteral<"record.declaration-print">, z.ZodLiteral<"record.declaration-print-supporting-documents">, z.ZodLiteral<"record.registration-print">, z.ZodLiteral<"record.registration-print&issue-certified-copies">, z.ZodLiteral<"record.registration-print-certified-copies">, z.ZodLiteral<"record.registration-bulk-print-certified-copies">, z.ZodLiteral<"record.registration-verify-certified-copies">]>, z.ZodUnion<[z.ZodLiteral<"record.registration-request-correction">, z.ZodLiteral<"record.registration-correct">, z.ZodLiteral<"record.registration-request-revocation">, z.ZodLiteral<"record.registration-revoke">, z.ZodLiteral<"record.registration-request-reinstatement">, z.ZodLiteral<"record.registration-reinstate">, z.ZodLiteral<"record.confirm-registration">, z.ZodLiteral<"record.reject-registration">]>]>;
+export type ActionScopes = z.infer<typeof ActionScopes>;
+export {};
 //# sourceMappingURL=scopes.d.ts.map

package/dist/scopes/index.js

@@ -20,12 +20,18 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/scopes/index.ts
 var scopes_exports = {};
 __export(scopes_exports, {
+  ActionScopes: () => ActionScopes,
   SCOPES: () => SCOPES,
-  scopes: () => scopes
+  SearchScopes: () => SearchScopes,
+  findScope: () => findScope,
+  parseScope: () => parseScope,
+  scopes: () => scopes,
+  stringifyScope: () => stringifyScope
 });
 module.exports = __toCommonJS(scopes_exports);
 
 // ../commons/src/scopes.ts
+var import_zod = require("zod");
 var SCOPES = {
   // TODO v1.8 legacy scopes
   NATLSYSADMIN: "natlsysadmin",
@@ -49,6 +55,8 @@ var SCOPES = {
    */
   RECORD_DECLARE: "record.declare-birth",
   // declare
+  RECORD_IMPORT: "record.import",
+  // declare
   RECORD_DECLARE_BIRTH: "record.declare-birth",
   RECORD_DECLARE_BIRTH_MY_JURISDICTION: "record.declare-birth:my-jurisdiction",
   RECORD_DECLARE_DEATH: "record.declare-death",
@@ -136,4 +144,226 @@ var SCOPES = {
   // data seeding
   USER_DATA_SEEDING: "user.data-seeding"
 };
+var LegacyScopes = import_zod.z.union([
+  import_zod.z.literal(SCOPES.NATLSYSADMIN),
+  import_zod.z.literal(SCOPES.BYPASSRATELIMIT),
+  import_zod.z.literal(SCOPES.DECLARE),
+  import_zod.z.literal(SCOPES.REGISTER),
+  import_zod.z.literal(SCOPES.VALIDATE),
+  import_zod.z.literal(SCOPES.DEMO),
+  import_zod.z.literal(SCOPES.CERTIFY),
+  import_zod.z.literal(SCOPES.PERFORMANCE),
+  import_zod.z.literal(SCOPES.SYSADMIN),
+  import_zod.z.literal(SCOPES.TEAMS),
+  import_zod.z.literal(SCOPES.CONFIG)
+]);
+var IntegrationScopes = import_zod.z.union([
+  import_zod.z.literal(SCOPES.WEBHOOK),
+  import_zod.z.literal(SCOPES.NATIONALID),
+  import_zod.z.literal(SCOPES.NOTIFICATION_API),
+  import_zod.z.literal(SCOPES.RECORDSEARCH)
+]);
+var DeclareScopes = import_zod.z.union([
+  import_zod.z.literal(SCOPES.RECORD_DECLARE),
+  import_zod.z.literal(SCOPES.RECORD_IMPORT),
+  import_zod.z.literal(SCOPES.RECORD_DECLARE_BIRTH),
+  import_zod.z.literal(SCOPES.RECORD_DECLARE_BIRTH_MY_JURISDICTION),
+  import_zod.z.literal(SCOPES.RECORD_DECLARE_DEATH),
+  import_zod.z.literal(SCOPES.RECORD_DECLARE_DEATH_MY_JURISDICTION),
+  import_zod.z.literal(SCOPES.RECORD_DECLARE_MARRIAGE),
+  import_zod.z.literal(SCOPES.RECORD_DECLARE_MARRIAGE_MY_JURISDICTION),
+  import_zod.z.literal(SCOPES.RECORD_SUBMIT_INCOMPLETE),
+  import_zod.z.literal(SCOPES.RECORD_SUBMIT_FOR_REVIEW)
+]);
+var UnassignScope = import_zod.z.literal(SCOPES.RECORD_UNASSIGN_OTHERS);
+var ValidateScopes = import_zod.z.union([
+  import_zod.z.literal(SCOPES.RECORD_SUBMIT_FOR_APPROVAL),
+  import_zod.z.literal(SCOPES.RECORD_SUBMIT_FOR_UPDATES),
+  import_zod.z.literal(SCOPES.RECORD_DECLARATION_EDIT),
+  import_zod.z.literal(SCOPES.RECORD_REVIEW_DUPLICATES),
+  import_zod.z.literal(SCOPES.RECORD_DECLARATION_ARCHIVE),
+  import_zod.z.literal(SCOPES.RECORD_DECLARATION_REINSTATE)
+]);
+var RegisterScope = import_zod.z.literal(SCOPES.RECORD_REGISTER);
+var CertifyScopes = import_zod.z.union([
+  import_zod.z.literal(SCOPES.RECORD_EXPORT_RECORDS),
+  import_zod.z.literal(SCOPES.RECORD_DECLARATION_PRINT),
+  import_zod.z.literal(SCOPES.RECORD_PRINT_RECORDS_SUPPORTING_DOCUMENTS),
+  import_zod.z.literal(SCOPES.RECORD_REGISTRATION_PRINT),
+  import_zod.z.literal(SCOPES.RECORD_PRINT_ISSUE_CERTIFIED_COPIES),
+  import_zod.z.literal(SCOPES.RECORD_PRINT_CERTIFIED_COPIES),
+  import_zod.z.literal(SCOPES.RECORD_BULK_PRINT_CERTIFIED_COPIES),
+  import_zod.z.literal(SCOPES.RECORD_REGISTRATION_VERIFY_CERTIFIED_COPIES)
+]);
+var CorrectionScopes = import_zod.z.union([
+  import_zod.z.literal(SCOPES.RECORD_REGISTRATION_REQUEST_CORRECTION),
+  import_zod.z.literal(SCOPES.RECORD_REGISTRATION_CORRECT),
+  import_zod.z.literal(SCOPES.RECORD_REGISTRATION_REQUEST_REVOCATION),
+  import_zod.z.literal(SCOPES.RECORD_REGISTRATION_REVOKE),
+  import_zod.z.literal(SCOPES.RECORD_REGISTRATION_REQUEST_REINSTATEMENT),
+  import_zod.z.literal(SCOPES.RECORD_REGISTRATION_REINSTATE),
+  import_zod.z.literal(SCOPES.RECORD_CONFIRM_REGISTRATION),
+  import_zod.z.literal(SCOPES.RECORD_REJECT_REGISTRATION)
+]);
+var SearchScopes = import_zod.z.union([
+  import_zod.z.literal(SCOPES.SEARCH_BIRTH_MY_JURISDICTION),
+  import_zod.z.literal(SCOPES.SEARCH_BIRTH),
+  import_zod.z.literal(SCOPES.SEARCH_DEATH_MY_JURISDICTION),
+  import_zod.z.literal(SCOPES.SEARCH_DEATH),
+  import_zod.z.literal(SCOPES.SEARCH_MARRIAGE_MY_JURISDICTION),
+  import_zod.z.literal(SCOPES.SEARCH_MARRIAGE)
+]);
+var AuditScopes = import_zod.z.union([
+  import_zod.z.literal(SCOPES.RECORD_READ),
+  import_zod.z.literal(SCOPES.RECORD_READ_AUDIT),
+  import_zod.z.literal(SCOPES.RECORD_READ_COMMENTS),
+  import_zod.z.literal(SCOPES.RECORD_CREATE_COMMENTS)
+]);
+var ProfileScopes = import_zod.z.union([
+  import_zod.z.literal(SCOPES.PROFILE_UPDATE),
+  import_zod.z.literal(SCOPES.PROFILE_ELECTRONIC_SIGNATURE)
+]);
+var PerformanceScopes = import_zod.z.union([
+  import_zod.z.literal(SCOPES.PERFORMANCE_READ),
+  import_zod.z.literal(SCOPES.PERFORMANCE_READ_DASHBOARDS),
+  import_zod.z.literal(SCOPES.PERFORMANCE_EXPORT_VITAL_STATISTICS)
+]);
+var OrganisationScopes = import_zod.z.union([
+  import_zod.z.literal(SCOPES.ORGANISATION_READ_LOCATIONS),
+  import_zod.z.literal(SCOPES.ORGANISATION_READ_LOCATIONS_MY_OFFICE),
+  import_zod.z.literal(SCOPES.ORGANISATION_READ_LOCATIONS_MY_JURISDICTION)
+]);
+var UserScopes = import_zod.z.union([
+  import_zod.z.literal(SCOPES.USER_READ),
+  import_zod.z.literal(SCOPES.USER_READ_MY_OFFICE),
+  import_zod.z.literal(SCOPES.USER_READ_MY_JURISDICTION),
+  import_zod.z.literal(SCOPES.USER_READ_ONLY_MY_AUDIT),
+  import_zod.z.literal(SCOPES.USER_CREATE),
+  import_zod.z.literal(SCOPES.USER_CREATE_MY_JURISDICTION),
+  import_zod.z.literal(SCOPES.USER_UPDATE),
+  import_zod.z.literal(SCOPES.USER_UPDATE_MY_JURISDICTION)
+]);
+var ConfigScope = import_zod.z.literal(SCOPES.CONFIG_UPDATE_ALL);
+var DataSeedingScope = import_zod.z.literal(SCOPES.USER_DATA_SEEDING);
+var LiteralScopes = import_zod.z.union([
+  LegacyScopes,
+  IntegrationScopes,
+  UnassignScope,
+  DeclareScopes,
+  ValidateScopes,
+  RegisterScope,
+  CertifyScopes,
+  CorrectionScopes,
+  SearchScopes,
+  AuditScopes,
+  ProfileScopes,
+  PerformanceScopes,
+  OrganisationScopes,
+  UserScopes,
+  ConfigScope,
+  DataSeedingScope
+]);
+var rawConfigurableScopeRegex = /^([a-zA-Z\.]+)\[((?:\w+=[\w.-]+(?:\|[\w.-]+)*)(?:,[\w]+=[\w.-]+(?:\|[\w.-]+)*)*)\]$/;
+var rawConfigurableScope = import_zod.z.string().regex(rawConfigurableScopeRegex);
+var CreateUserScope = import_zod.z.object({
+  type: import_zod.z.literal("user.create"),
+  options: import_zod.z.object({
+    role: import_zod.z.array(import_zod.z.string())
+  })
+});
+var EditUserScope = import_zod.z.object({
+  type: import_zod.z.literal("user.edit"),
+  options: import_zod.z.object({
+    role: import_zod.z.array(import_zod.z.string())
+  })
+});
+var WorkqueueScope = import_zod.z.object({
+  type: import_zod.z.literal("workqueue"),
+  options: import_zod.z.object({
+    id: import_zod.z.array(import_zod.z.string())
+  })
+});
+var NotifyRecordScope = import_zod.z.object({
+  type: import_zod.z.literal("record.notify"),
+  options: import_zod.z.object({
+    event: import_zod.z.array(import_zod.z.string())
+  })
+});
+var SearchScope = import_zod.z.object({
+  type: import_zod.z.literal("search"),
+  options: import_zod.z.object({
+    event: import_zod.z.array(import_zod.z.string()).length(1),
+    access: import_zod.z.array(import_zod.z.enum(["my-jurisdiction", "all"])).length(1)
+  })
+});
+var ConfigurableRawScopes = import_zod.z.discriminatedUnion("type", [
+  SearchScope,
+  CreateUserScope,
+  EditUserScope,
+  WorkqueueScope,
+  NotifyRecordScope
+]);
+function flattenAndMergeScopes(scopes2) {
+  if (scopes2.length === 0) return null;
+  const type = scopes2[0].type;
+  const mergedOptions = {};
+  for (const scope of scopes2) {
+    const entries = Object.entries(scope.options);
+    if (entries.length < 2) continue;
+    const sourceValues = entries[0][1];
+    const targetValues = entries[1][1];
+    for (let i = 0; i < sourceValues.length; i++) {
+      mergedOptions[sourceValues[i]] = targetValues[i];
+    }
+  }
+  return { type, options: mergedOptions };
+}
+function findScope(scopes2, scopeType) {
+  const parsedScopes = scopes2.map((rawScope) => parseScope(rawScope));
+  const searchScopes = parsedScopes.filter((scope) => scope?.type === "search");
+  const otherScopes = parsedScopes.filter((scope) => scope?.type !== "search");
+  const mergedSearchScope = flattenAndMergeScopes(searchScopes);
+  return [...otherScopes, mergedSearchScope].find(
+    (scope) => scope?.type === scopeType
+  );
+}
+function getScopeOptions(rawOptions) {
+  return rawOptions.split(",").reduce((acc, option) => {
+    const [key, value] = option.split("=");
+    acc[key] = value.split("|");
+    return acc;
+  }, {});
+}
+function parseScope(scope) {
+  const maybeLiteralScope = LiteralScopes.safeParse(scope);
+  if (maybeLiteralScope.success) {
+    return {
+      type: maybeLiteralScope.data
+    };
+  }
+  const maybeConfigurableScope = rawConfigurableScope.safeParse(scope);
+  if (!maybeConfigurableScope.success) {
+    return;
+  }
+  const rawScope = maybeConfigurableScope.data;
+  const [, type, rawOptions] = rawScope.match(rawConfigurableScopeRegex) ?? [];
+  const options = getScopeOptions(rawOptions);
+  const parsedScope = {
+    type,
+    options
+  };
+  const result = ConfigurableRawScopes.safeParse(parsedScope);
+  return result.success ? result.data : void 0;
+}
+function stringifyScope(scope) {
+  const options = Object.entries(scope.options).map(([key, value]) => `${key}=${value.join("|")}`).join(",");
+  return `${scope.type}[${options}]`;
+}
 var scopes = Object.values(SCOPES);
+var ActionScopes = import_zod.z.union([
+  DeclareScopes,
+  ValidateScopes,
+  RegisterScope,
+  CertifyScopes,
+  CorrectionScopes
+]);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opencrvs/toolkit",
-  "version": "1.8.0-rc.ffe8c17",
+  "version": "1.8.1-rc.3e74262",
   "description": "OpenCRVS toolkit for building country configurations",
   "license": "MPL-2.0",
   "exports": {
@@ -19,8 +19,9 @@
     "ajv": "^8.17.1",
     "ajv-formats": "^3.0.1",
     "superjson": "1.9.0-0",
-    "@trpc/client": "^11.0.0-rc.648",
-    "@trpc/server": "^11.0.0-rc.532"
+    "@trpc/client": "11.4.3",
+    "@trpc/server": "11.4.3",
+    "zod-openapi": "^4.2.4"
   },
   "devDependencies": {
     "@types/uuid": "^9.0.3",