@plyaz/types 1.27.8 → 1.27.9

package/dist/auth/types.d.ts

@@ -344,6 +344,7 @@ export interface Permission {
     metadata?: Record<string, unknown>;
     createdAt: Date;
     updatedAt: Date;
+    conditions?: Record<string, unknown>;
 }
 /**
  * Role-Permission mapping (backoffice only).
@@ -899,3 +900,143 @@ export interface OAuthProviderConfig {
     /** Provider icon name (for UI) */
     iconName: string;
 }
+/**
+ * Role assignment data
+ */
+export interface RoleAssignmentData {
+    /** User ID */
+    userId: string;
+    /** Role ID */
+    roleId: string;
+    /** Role name/code */
+    role: string;
+    /** Is primary role */
+    isPrimary?: boolean;
+    /** Assignment status */
+    status?: 'ACTIVE' | 'INACTIVE' | 'SUSPENDED';
+    /** Assigned by user ID */
+    assignedBy?: string;
+    /** Assignment reason */
+    assignedReason?: string;
+    /** Assignment expiration */
+    expiresAt?: Date;
+}
+/**
+ * Role repository interface
+ */
+export interface RoleRepositoryInterface {
+    findByScope(scope: 'B2C' | 'B2B'): Promise<Role[]>;
+    findUserRoles(userId: string): Promise<Role[]>;
+    assignRole(userId: string, roleId: string, assignedBy?: string, reason?: string): Promise<void>;
+    revokeRole(userId: string, roleId: string, revokedBy?: string, reason?: string): Promise<void>;
+    getRolePermissions(roleId: string): Promise<Permission[]>;
+}
+/**
+ * Dynamic role assignment
+ */
+export interface DynamicRoleAssignment {
+    /** Assignment ID */
+    id: string;
+    /** User ID */
+    userId: string;
+    /** Role ID or name */
+    roleId: string;
+    /** Assignment conditions */
+    conditions?: Record<string, unknown>;
+    /** Assignment expiration */
+    expiresAt?: Date;
+    /** Assignment reason */
+    reason?: string;
+    /** Assigned by user ID */
+    assignedBy?: string;
+    /** Assignment metadata */
+    metadata?: Record<string, unknown>;
+    /** Created at */
+    createdAt: Date;
+    /** Is active */
+    isActive: boolean;
+}
+/**
+ * Role condition evaluator function
+ */
+export type RoleConditionEvaluator = (userId: string, conditions: Record<string, unknown>, context?: Record<string, unknown>) => Promise<boolean>;
+/**
+ * Dynamic roles configuration
+ */
+export interface DynamicRolesConfig {
+    /** Enable role expiration */
+    enableExpiration: boolean;
+    /** Default role TTL in seconds */
+    defaultTTL: number;
+    /** Enable condition evaluation */
+    enableConditions: boolean;
+    /** Maximum assignments per user */
+    maxAssignmentsPerUser: number;
+    /** Enable audit logging */
+    enableAuditLog: boolean;
+}
+/**
+ * Role hierarchy node
+ */
+export interface RoleNode {
+    /** Role information */
+    role: Role;
+    /** Parent roles (higher hierarchy) */
+    parents: Set<string>;
+    /** Child roles (lower hierarchy) */
+    children: Set<string>;
+    /** Direct permissions */
+    permissions: Set<string>;
+    /** Inherited permissions (computed) */
+    inheritedPermissions?: Set<string>;
+}
+/**
+ * Role hierarchy configuration
+ */
+export interface RoleHierarchyConfig {
+    /** Enable permission inheritance */
+    enableInheritance: boolean;
+    /** Maximum hierarchy depth */
+    maxDepth: number;
+    /** Enable circular dependency detection */
+    detectCircular: boolean;
+    /** Cache inherited permissions */
+    cacheInheritance: boolean;
+}
+export interface RoleConfig {
+    hierarchyEnabled: boolean;
+    cacheEnabled: boolean;
+    cacheTTL: number;
+}
+export interface PermissionContext {
+    /** Resource owner ID */
+    ownerId?: string;
+    /** Organization ID */
+    organizationId?: string;
+    /** Additional context data */
+    [key: string]: unknown;
+}
+/**
+ * Permission check result
+ */
+export interface PermissionCheckResult {
+    /** Permission granted */
+    granted: boolean;
+    /** Reason for decision */
+    reason: string;
+    /** Matched permission (if any) */
+    matchedPermission?: Permission;
+    /** Applied conditions */
+    conditions?: Record<string, unknown>;
+}
+/**
+ * Permission checker configuration
+ */
+export interface PermissionCheckerConfig {
+    /** Enable permission caching */
+    enableCaching: boolean;
+    /** Cache TTL in seconds */
+    cacheTTL: number;
+    /** Enable audit logging */
+    enableAuditLog: boolean;
+}